OAuth Based Authentication and Authorization in Open Telco API

摘要

Open Telco APIs to 3rd party application and content providers will enhance the services available to the Web and facilitate the creation of more innovative applications and content. However, open Telco APIs directly to Internet makes the operator's network vulnerable to security threats. To prevent fraudulent users to get access to the network asset, the authentication and authorization of the APIs is necessary. This paper analyzes different authentication and authorization mechanism, provides guidelines for open Telco API authentication and authorization, and gives a solution to apply OAuth based authentication and authorization in open Telco API.