Secure access control in communication system

A method comprising:

• receiving a request from a service consumer in a communication system for access to a service type and one or more resources associated with the service type;
• determining whether the service consumer is authorized to access the service type and the one or more resources associated with the service type;
• generating an access token that identifies one or more service producers for the service type and the one or more resources associated with the service type that the service consumer is authorized to access;
• and
• sending the access token to the service consumer;
• wherein the steps of the method are performed by an authorization server function in the communication system.

Apparatus comprising:

• at least one processor;
• at least one memory including computer program code;
• the at least one memory and the computer program code being configured to, with the at least one processor, cause the apparatus at least to:
• send a request to an authorization server function in a communication system for access to a service type and one or more resources associated with the service type;
• receive an access token that identifies one or more service producers for the service type and the one or more resources associated with the service type that the apparatus is authorized to access;
• and
• use the access token to access the service type and the one or more resources associated with the service type at a service producer in the communication system;
• wherein the at least one processor, the at least one memory and the computer program code are part of a service consumer in the communication system.

A method comprising:

• sending a request to an authorization server function in a communication system for access to a service type and one or more resources associated with the service type;
• receiving an access token that identifies one or more service producers for the service type and the one or more resources associated with the service type for which access is authorized;
• and
• using the access token to access the service type and the one or more resources associated with the service type at a service producer in the communication system;
• wherein the steps of the method are performed by a service consumer of the communication system.