tokens: ['be', 'invoked', 'by', 'the', 'API', 'Invoker', 'related', 'to', 'the', 'UE', 'ID', 'and', 'Oauth', 'access', 'token', 'ie', 'AEF', 'Access', 'token', 'to', 'authorize', 'the', 'API', 'invoker', 'to', 'request', 'the', 'service', 'API', 'invocation', 'from', 'AEF', 'to', 'the', 'AEF', 'over', 'CAPIF', 'reference', 'point', 'The', 'CCF', 'can', 'provide', 'the', 'remaining', 'validity', 'timer', 'value', 'for', 'the', 'AEF', 'Key', 'ie', 'AEFPSK', 'as', 'in', 'TS', '', 'Clause', '', '', 'Alternatively', 'the', 'service', 'information', 'and', 'access', 'token', 'sending', 'can', 'be', 'skipped', 'as', 'it', 'can', 'be', 'bound', 'to', 'the', 'access', 'token', 'as', 'claims', 'later', 'received', 'in', 'step', 'a', 'from', 'the', 'API', 'invoker', '', 'After', 'fetching', 'the', 'relevant', 'AEF', 'Key', 'for', 'the', 'authentication', 'the', 'AEF', 'can', 'send', 'Authentication', 'Initiation', 'Response', 'message', 'to', 'API', 'invoker', 'to', 'initiate', 'the', 'TLS', 'session', 'establishment', 'The', 'AEF', 'starts', 'the', 'validity', 'timer', 'based', 'on', 'the', 'value', 'received', 'from', 'the', 'CAPIF', 'core', 'function', 'in', 'step', '', 'The', 'API', 'Invoker', 'and', 'the', 'AEF', 'can', 'perform', 'mutual', 'authentication', 'using', 'the', 'AEF', 'key', 'and', 'establish', 'TLS', 'session', 'a', 'The', 'API', 'invoker', 'can', 'send', 'Invocation', 'service', 'request', 'to', 'the', 'AEF', 'which', 'can', 'include']