10 Security

29.5383GPPApplication Programming Interfaces (API) specificationEnabling MSGin5G ServiceRelease 18Stage 3TS

TLS shall be used to support the security communication between the MSGin5G Server and the Application Server over MSGin5G-3 interface, and also between MSGin5G Server and the Message Gateway over MSGin5G-2 or MSGin5G-4 interface as specified in 3GPP TS 33.862 [19] and 3GPP TS 33.501 [20]. The access to the MSGin5G Service APIs shall be authorized by means of OAuth2 protocol (see IETF RFC 6749 [21]), based on local configuration, using the "Client Credentials" authorization grant. If OAuth2 is used, a client, prior to consuming services offered by the MSGin5G Service APIs, shall obtain a "token" from the authorization server.