Security management of trusted network functions

An apparatus for wireless communication, comprising:

• at least one memory;
• and
• at least one processor coupled with the at least one memory and configured to cause the apparatus to:
• receive a first signaling as an access token request from a network function (NF) service consumer, the access token request including at least NF profile information and NF security state information, wherein the access token request includes a message authentication code of the NF security state information;
• authorize the NF service consumer based at least in part on the NF profile information and the NF security state information, wherein the authentication code of the NF security state information is verified with a public key corresponding to a private key of a NF service consumer or a shared secret key of the NF service consumer and the apparatus;
• and
• transmit a second signaling as an access token response to the NF service consumer, the access token response including an access token.

A processor for wireless communication, comprising:

• at least one controller coupled with at least one memory and configured to cause the processor to:
• receive a first signaling as a network function (NF) request from a NF, the NF request including at least a NF type, a NF identifier (ID), NF security state information, and a message authentication code of the NF security state information;
• verify a NF security state based at least in part on the NF ID and the NF security state information, wherein one of:
• the NF is a NF service producer that verifies the message authentication code of the NF security state information with a private key or a shared secret key of the NF service producer;
• or
• the NF is a NF service consumer, and the message authentication code of the NF security state information is verified with one of a public key corresponding to a private key of the NF service consumer, or a shared secret key of the NF service consumer;
• and
• transmit a second signaling as a NF response, the NF response including a security verification of the NF request.

A method performed by an apparatus, the method comprising:

• receiving a first signaling as a network function (NF) request from a NF, the NF request including at least a NF type, a NF identifier (ID), NF security state information, and a message authentication code of the NF security state information;
• verifying a NF security state based at least in part on the NF ID and the NF security state information, wherein one of:
• the NF is a NF service producer that verifies the message authentication code of the NF security state information with a private key or a shared secret key of the NF service producer;
• or
• the NF is a NF service consumer, and the message authentication code of the NF security state information is verified with one of a public key corresponding to a private key of the NF service consumer, or a shared secret key of the NF service consumer and the apparatus;
• and
• transmitting a second signaling as a NF response, the NF response including a security verification of the NF request.