Systems and methods for network function authorization for roaming between public land mobile networks

A device, comprising:

• one or more processors configured to:
• receive a request for services with a network function producer (NF-P) in a first public land mobile network (PLMN), wherein the request for services includes a first token that is associated with a network function consumer (NF-C) in a second PLMN;
• validate the first token using a signing certificate associated with a signer of the first token, and the signer of the first token is a security edge protection proxy consumer (SEPP-C) associated with the second PLMN;
• and
• transmit the request for services to the NF-P, wherein the request for services includes a second token that is based on a successful validation of the first token, and a successful validation of the second token enables the NF-P to provide a service to the NF-C based on an authorization of the NF-C during an inter-PLMN roaming.

A non-transitory computer-readable medium storing a set of instructions, the set of instructions comprising:

• one or more instructions that, when executed by one or more processors of a device, cause the device to:
• receive a request for services with a network function producer (NF-P) in a first public land mobile network (PLMN), wherein the request for services includes a first token that is associated with a network function consumer (NF-C) in a second PLMN;
• validate the first token using a signing certificate associated with a signer of the first token, and the signer of the first token is a security edge protection proxy consumer (SEPP-C) associated with the second PLMN;
• and
• transmit the request for services to the NF-P, wherein the request for services includes a second token that is based on a successful validation of the first token, and a successful validation of the second token enables the NF-P to provide a service to the NF-C based on an authorization of the NF-C during an inter-PLMN roaming.