Study on security aspects of Common API Framework (CAPIF) Phase3
The present document investigates the security and privacy impacts of the procedures introduced in the study on CAPIF Phase 3. Specifically, it covers the following:
- Resource owner authorization management
- CAPIF interconnection security
- Authorizing API invoker on one UE accessing resources related to another UE
- Nested API invocation
- Authentication and authorization of multiple API invokers
Note: More security and privacy aspects are up to the study progress in SA6.