7 Security

29.4863GPPRelease 18Stage 3TSV2X Application Enabler (VAE) Services

TLS shall be used to support the security communication between the VAE server and the V2X application specific server over Vs interface, and also between different VAE servers over VAE-E interface as specified in 3GPP TS 33.536 [31] and 3GPP TS 33.501 [32]. The access to the VAE service APIs shall be authorized by means of OAuth2 protocol (see IETF RFC 6749 [23]), based on local configuration, using the "Client Credentials" authorization grant. If OAuth2 is used, a client, prior to consuming services offered by the VAE service APIs, shall obtain a "token" from the authorization server.