Back to results
US 2025/0167994 A1Published application
Application programming interface (api) access management in wireless systems
AssigneeLenovo (Singapore) Pte. Ltd.
InventorsSheeba Backia Mary Baskaran, Andreas Kunz
Life of this patent
Estimating the term…
Abstract
The present disclosure relates to methods, apparatuses, and systems that support API access management in wireless systems. For instance, an API invoker (e.g., a user or UE) can be authenticated and authorized to access or register with a common API framework (CAPIF) function to enable real-time user consent driven API invocation authorization and secured user service data exposure by a network. Further, a comprehensive set of procedures are provided that ensure that networks are protected from unpermitted and/or potentially malicious access to APIs exposed by the network.
Claims21
An apparatus comprising:
- at least one memory;
- and
- at least one processor coupled with the at least one memory and configured to cause the apparatus to:
- generate an onboard service request to request to onboard to an application programming interface framework core function of a wireless network, the onboard request including a user equipment identifier for the apparatus and key data;
- send, to the application programming interface framework core function, the onboard service request;
- establish a secure connection between the apparatus and the application programming interface framework core function using an authentication key derived based on the key data;
- send, via the secure connection, an onboard application programming interface invoker request to the application programming interface framework core function, the onboard application programming interface invoker request including the key data;
- and
- receive, via the secure connection and from the application programming interface framework core function, an onboard application programming interface invoker response that identifies an instance of an application programming interface invoker identifier assigned to the apparatus and application programming interface exposing function access information.
6 more elements
An apparatus comprising:
- at least one memory;
- and
- at least one processor coupled with the at least one memory and configured to cause the apparatus to:
- one or more of derive or obtain an application programming interface exposing function key associated with an application programming interface exposing function of a wireless network;
- send an authentication initiation request to the application programming interface exposing function, the authentication initiation request including an application programming interface invoker identifier and a user equipment identifier for the apparatus;
- receive an authentication initiation response from the application programming interface exposing function, and establish a secure connection with the application programming interface exposing function using the application programming interface exposing function key;
- send, over the secure connection, a service invocation request to the application programming interface exposing function, the service invocation request including one or more of:
- user equipment identifier, an access token, or an application programming interface request identifying an application programming interface to be invoked;
- and
- receive, over the secure connection and from the application programming interface exposing function, a service invocation response indicating a result of the application programming interface request.
7 more elements
An apparatus comprising:
- at least one memory;
- and
- at least one processor coupled with the at least one memory and configured to cause the apparatus to:
- receive, from an application programming interface invoker, an authentication initiation request, the authentication initiation request including an application programming interface invoker identifier and a user equipment identifier associated with the application programming interface invoker;
- send, to the application programming interface invoker, an authentication initiation response and establish a secure connection with the application programming interface invoker using an application programming interface exposing function key;
- receive, over the secure connection and from the application programming interface invoker, a service invocation request, the service invocation request including one or more of:
- user equipment identifier, an access token, or an application programming interface request identifying an application programming interface to be invoked;
- cause an application programming interface invocation action based on the application programming interface request;
- and
- send, over the secure connection and to the application programming interface invoker, a service invocation response indicating a result of the application programming interface invocation action.
7 more elements
(canceled)
A processor for wireless communication, comprising:
- at least one controller coupled with at least one memory and configured to cause the processor to:
- generate an onboard service request to request to onboard to an application programming interface framework core function of a wireless network, the onboard request including a user equipment identifier for an apparatus and key data;
- send, to the application programming interface framework core function, the onboard service request;
- establish a secure connection between the apparatus and the application programming interface framework core function using an authentication key derived based on the key data;
- send, via the secure connection, an onboard application programming interface invoker request to the application programming interface framework core function, the onboard application programming interface invoker request including the key data;
- and
- receive, via the secure connection and from the application programming interface framework core function, an onboard application programming interface invoker response that identifies an instance of an application programming interface invoker identifier assigned to the apparatus and application programming interface exposing function access information.
4 more elements
Dependencies are inferred from the claim text.