Mechanism for authorizing data exchange

An apparatus comprising

• at least one processor, and
• at least one memory for storing instructions that, when executed by the at least one processor, cause the apparatus at least to perform:
• receiving configuration information regarding an authorization policy from a control network element or control network function including key material usable for validating an access token and information indicating an allowance for connection between a requester user equipment and a producer element or a producer function with a valid access token or without an access token,
• transmitting, to the control network element or control network function, a request for authorization to access to specified data from a producer element or producer function,
• receiving, in response to the request, an access token for allowing access to the specified data from the producer element or producer function, and
• sending a request to the producer element or producer function for being provided with the specified data, wherein the received access token is included in the request.

An apparatus comprising

• at least one processor, and
• at least one memory for storing instructions that, when executed by the at least one processor, cause the apparatus at least to perform:
• receiving configuration information regarding an authorization policy from a control network element or control network function including key material usable for validating an access token and information indicating an allowance for connection between a requester user equipment and a producer element or a producer function with a valid access token or without an access token,
• receiving, from a requester user equipment, a request for specified data to be provided from a producer element or producer function, wherein the request comprises an access token for allowing access to the specified data from the producer element or producer function,
• determining a validity of the received access token, and
• if validity of the access token is confirmed, sending the requested specified data to the requester user equipment.