KR102684305B1 - 5G Network Function Exposure System - Google Patents

Abstract

The present invention relates to a 5G network function open system and a control method thereof. In the 5G network function open system according to the present invention, the CAPIF core function unit includes a single CAPIF APIs reference point and a single service API reference point ( It includes an API gate function including a Service APIs Reference Point, and the single CAPIF API reference point is used for authentication and authorization for API invokers and service API discovery (Service API information discovery), The single service API reference point is used for authentication and authorization of API invokers and service API calls.

Description

5G Network Function Exposure System

The present invention relates to a 5G network function opening system and its control method.

Although about three years have passed since 5G communication technology was commercialized, many application services using 5G technology have not yet been activated. Currently, the field in which the public and private sectors are making the most effort to revitalize 5G technology is the field related to specialized networks, and the government is launching a specialized network brand called Ieum 5G and making efforts to discover related equipment and application services. Based on this, various industries are striving to achieve the goals of digital transformation and the 4th industrial revolution.

Among various 5G communication technologies, service opening was primarily intended to accommodate various industries and services in the 5G infrastructure environment by opening the network functions of communication operators to the outside world. In addition, as mentioned in the introduction, with the emergence and spread of specialized networks, the need for the service open function has become necessary in more diverse environments, and the demand base utilizing it is expected to become more diverse.

3GPP, an international standards organization, defines the structure and procedure for opening 5G network functions through Northbound API based on CAPIF (Common API Framework) (3GPP TS 23.222).

Although CAPIF-based Northbound API supports the opening of API services in various environments, there is room for improvement in terms of convenience for users (application service developers) and load management and network management convenience for providers providing API services. there is.

Currently, 'Common API Framework for 3GPP Northbound APIs' is defined as a standard in 3GPP Rel16 TS 23.222, and the existing method for opening network functions through Northbound API is shown in Figure 1 below.

Figure 1 is a diagram showing the configuration of a conventional 5G network function open system.

Referring to Figure 1, the 'Common API Framework for 3GPP Northbound APIs' is currently defined as a standard in 3GPP Rel16 TS 23.222, and the existing method for opening network functions through Northbound API is as follows.

1) CAPIF core function

Performs API Invoker authentication, authority check for API Invoker's Service API use, Service API Discovery, Service API access control according to PLMN operator setting policy, monitoring of Service API execution and execution log storage, execution log-based billing, etc. .

- Reference point CAPIF-1: Reference point for linking with API Invoker (used for API Invoker authentication & authorization, Service API information discovery)

- Reference point CAPIF-3: Control-related policy integration for Service API communication

- Reference point CAPIF-4: Service API information issued

- Reference point CAPIF-5: Service API and API Invoker information management

2) API Provider

A. API exposing function (CAPIF-3)

Provide Service API as a communication point of contact with API Invoker

- Reference point CAPIF-2: Reference point for linking with API Invoker (used for API Invoker authentication & authorization, Service API calls)

B. API publishing function (CAPIF-4)

Issue Service API information as CAPIF core function

C. API management function (CAPIF-5)

Perform Service API-related management (inspect Service API execution logs, manage Service API status, deliver API provision policy, etc.)

3) API invoker

It is a ^3rd party application that has entered into an agreement with PLMN for service use and can be deployed within or outside the PLMN network.

Obtaining authentication/authorization to use Service API, discovering Service API information, and calling Service API

If there are multiple API Invokers and multiple API Providers, they must be networked in full mesh. Accordingly, when the API Provider's host information changes, API Invokers must manually manage the connection information separately.

Also, from a service perspective, as the number of API Invokers looking at the Service API provided by the API Provider increases, the dependence on the API increases, so if the API is modified, all API Invokers must modify it.

And in the case of an API provider, there is no way to distribute load balancing or protect the system from overload traffic when the traffic frequency of a specific API is excessive.

In terms of billing services, it is difficult to compile API call statistics for fast and accurate billing. In order to accurately bill, there is the inconvenience of having to collect statistics from each system and perform mediation work.

The technical problem that the present invention aims to solve is to provide an improved environment to API Invokers who use 5G networks and service functions when telecommunications operators or specialized network builders open them, and to API Providers who provide service APIs to them. do.

API Invoker authentication according to the present invention to solve the above-mentioned technical problems, authority check for API Invoker's use of Service API, Service API Discovery, and Service API access according to PLMN operator setting policy. In a 5G network function open system that includes a CAPIF core function that performs control, monitoring of service API execution, storing execution logs, and charging based on execution logs, the CAPIF core function refers to a single CAPIF API. Contains an API gate function including a point (CAPIF APIs reference point) and a single service API reference point (Service APIs Reference Point).

The single CAPIF API reference point is used for authentication and authorization of API invokers and service API information discovery.

The single service API reference point is used for authentication and authorization of API invokers and service API calls.

The API gate function unit may transmit the service API call transmitted from the API invoker to the service API of the corresponding API provider through the single service API reference point.

The API gate function unit may provide an API wrapping function for a plurality of service APIs registered in the CAPIF core function unit.

When the API gate function receives a service API request from the API invoker, it can determine the optimal API provider for processing the service API request in consideration of the load status and failure status of API providers and deliver the service API request. there is.

The API gate function unit can protect the API provider from traffic overload by performing overload control when the service API call from the API invoker exceeds a predetermined standard.

The API gate function unit can perform statistics and billing on all service API usage by API invokers.

The control method of the 5G network function open system according to another embodiment of the present invention to solve the above technical problem includes authentication and authorization for API invokers and service API through a single CAPIF API reference point. It includes performing discovery (Service API information discovery), and performing authentication and authorization for API invokers and service API calls through a single service API reference point.

According to the present invention, when a communication service provider or a specialized network construction service provider opens 5G network and service functions, an improved environment can be provided to API Invokers who use it and API Providers who provide service APIs to them.

Figure 1 is a diagram showing the configuration of a conventional 5G network function open system.
Figure 2 is a diagram showing the configuration of a 5G network function open system according to an embodiment of the present invention.

Then, with reference to the attached drawings, embodiments of the present invention will be described in detail so that those skilled in the art can easily implement the present invention.

Figure 2 is a diagram showing the configuration of a 5G network function open system according to an embodiment of the present invention.

Referring to Figure 2, the 5G network function open system includes a CAPIF core function (CAPIF core function) 100.

The CAPIF core function unit 100 performs API invoker authentication, authority checking for the API invoker's use of the service API, Service API Discovery, Service API access control according to the PLMN operator setting policy, and Service API. Monitors execution, stores execution logs, and performs billing based on execution logs.

The CAPIF core functional unit 100 includes a plurality of reference points (Reference point CAPIF-1, Reference point CAPIF-2, Reference point CAPIF-3, Reference point CAPIF-4, Reference point CAPIF-5).

Here, the reference point CAPIF-1 is a reference point for interworking with the API Invoker (10) and is used for API Invoker authentication and authorization (authentication & authorization) and service API discovery (Service API information discovery).

Reference point CAPIF-2 is used for API invoker authentication and authorization, and service API calls.

Reference point CAPIF-3 is for linking control-related policies for service API communication.

Reference point CAPIF-4 is for publishing service API information.

Reference point CAPIF-5 is for managing service API and API invoker information.

The CAPIF core function 100 includes an API gate function 110.

Specifically, the API gate function unit 110 includes a single CAPIF APIs reference point (Reference point CAPIF-1) and a single service APIs reference point (Service APIs Reference Point) (Reference point CAPIF-2). .

The API gate function unit 110 provides a single CAPIF APIs reference point and a single service APIs reference point, allowing the use of various connected services (API Providers) with different characteristics. let it be

The API gate function unit 110 may transfer the service API call transmitted from the API invoker 10 to the service API of the corresponding API provider 20 through a single service API reference point.

By providing a single CAPIF APIs reference point and Service APIs Reference Point to the API Invoker (10), even if the Service API access IP of the API Provider (20) is changed, the API Invoker integration can be unaffected. Through this, network management tasks can be simplified, rationalized, and automated, and the workload of the API invoker can be reduced, leading to more ^3rd party participation.

The API gate function unit 110 provides a service API wrapping function for a plurality of service APIs registered/connected to the CAPIF core function unit 100.

By providing a service API wrapping function in the API gate functional unit 110, even if a specific Service API is changed, only the inside of the API Wrapper provided by the API gate functional unit 110 needs to be changed, reducing the dependency of the API invokers on the corresponding API. can be lowered. Through this, service development work can be simplified and the work load of the API invoker can be reduced, leading to more ^3rd party participation.

The API gate function unit 110 may provide a load balancing function.

When receiving a service API request from the API invoker 10, the API gate function unit 110 determines the optimal API provider to process the service API request in consideration of the load status and failure status of the service providers 20 and provides the service. API requests can be forwarded. This allows the resources of API providers 20 to be used more efficiently.

The API gate function unit 110 may provide an overload control function.

The API gate function unit 110 may protect the API provider 20 from traffic overload by performing overload control when the service API call from the API invoker 10 exceeds a predetermined standard.

The API gate function unit 110 may provide an integrated charging function.

The API gate function unit 110 can perform statistics and billing on all service API usage by API invokers 10. Through this, it is possible to prevent waste of technical and business resources for unnecessary mediation work and support a fast and accurate billing system.

The embodiments described above may be implemented with hardware components, software components, and/or a combination of hardware components and software components. For example, the devices, methods, and components described in the embodiments may include, for example, a processor, a controller, an arithmetic logic unit (ALU), a digital signal processor, a microcomputer, and a field programmable gate (FPGA). It may be implemented using one or more general-purpose or special-purpose computers, such as an array, programmable logic unit (PLU), microprocessor, or any other device capable of executing and responding to instructions. A processing device may execute an operating system (OS) and one or more software applications that run on the operating system. Additionally, a processing device may access, store, manipulate, process, and generate data in response to the execution of software. For ease of understanding, a single processing device may be described as being used; however, those skilled in the art will understand that a processing device includes multiple processing elements and/or multiple types of processing elements. It can be seen that it may include. For example, a processing device may include a plurality of processors or one processor and one controller. Additionally, other processing configurations, such as parallel processors, are possible.

Software may include a computer program, code, instructions, or a combination of one or more of these, which may configure a processing unit to operate as desired, or may be processed independently or collectively. You can command the device. Software and/or data may be used on any type of machine, component, physical device, virtual equipment, computer storage medium or device to be interpreted by or to provide instructions or data to a processing device. , or may be permanently or temporarily embodied in a transmitted signal wave. Software may be distributed over networked computer systems and stored or executed in a distributed manner. Software and data may be stored on one or more computer-readable recording media.

The method according to the embodiment may be implemented in the form of program instructions that can be executed through various computer means and recorded on a computer-readable medium. The computer-readable medium may include program instructions, data files, data structures, etc., singly or in combination. Program instructions recorded on the medium may be specially designed and configured for the embodiment or may be known and available to those skilled in the art of computer software. Examples of computer-readable recording media include magnetic media such as hard disks, floppy disks, and magnetic tapes, optical media such as CD-ROMs and DVDs, and magnetic media such as floptical disks. -Includes optical media (magneto-optical media) and hardware devices specifically configured to store and execute program instructions, such as ROM, RAM, flash memory, etc. Examples of program instructions include machine language code, such as that produced by a compiler, as well as high-level language code that can be executed by a computer using an interpreter, etc. The hardware devices described above may be configured to operate as one or more software modules to perform the operations of the embodiments, and vice versa.

Although the embodiments have been described with limited drawings as described above, those skilled in the art can apply various technical modifications and variations based on the above. For example, the described techniques are performed in a different order than the described method, and/or components of the described system, structure, device, circuit, etc. are combined or combined in a different form than the described method, or other components are used. Alternatively, appropriate results may be achieved even if substituted or substituted by an equivalent.

Claims (10)

delete delete API invoker authentication, authority check for API invoker's service API use, Service API Discovery, Service API access control according to PLMN operator setting policy, monitoring of Service API execution and storage of execution logs , In a 5G network function open system that includes a CAPIF core function that performs execution log-based charging,
The CAPIF core function,
An API gate function unit including a single CAPIF APIs reference point and a single Service APIs Reference Point,
The single CAPIF API reference point is used for authentication & authorization for API invokers and Service API information discovery,
The single service API reference point is used for authentication and authorization for API invokers and service API calls,
The API gate function unit transfers the service API call delivered from the API invoker through the single service API reference point to the service API of the corresponding API provider, and multiple service APIs registered in the CAPIF core function unit. 5G network function open system that provides API wrapping function for .
delete In paragraph 3,
The API gate function part is,
A 5G network function open system that protects API providers from traffic overload by performing overload control when service API calls from API invokers exceed predetermined standards.
In paragraph 3,
The API gate function part is,
A 5G network function open system that performs statistics and billing on all service API usage by API invokers.
delete delete delete delete

Images