Menu
Latest
12 meetings · Prague, Jeju · 12–16 Oct
Reports
RAN1#126-bis · SA2#177

Glossary term · Services

AEF

API Exposing Function

Services →

AEF is the network function that securely exposes 3GPP network capabilities to authorized third parties by acting as a gateway that translates between external API requests and internal network protocols.

Introduced
Rel-5
Where
Services › IMS
Specifications
15 specs
Also in
Security
AEF Description Purpose What changed Neighbours Detected Changes Specifications

Description

The API Exposing Function (AEF) is a critical component within the 3GPP service framework, specifically in the Network Exposure Function (NEF) architecture. It serves as the primary entry point and gateway for external application providers to interact with the 3GPP network. The AEF's core responsibility is to securely expose a set of Application Programming Interfaces (APIs) that abstract complex network capabilities into consumable services for developers.

Architecturally, the AEF sits at the boundary between the trusted 3GPP network domain and the untrusted external domain (e.g., the internet). It interfaces internally with other Core Network functions like the Policy Control Function (PCF), Unified Data Management (UDM), and Access and Mobility Management Function (AMF). Externally, it provides northbound RESTful APIs or other API frameworks to Application Providers. The AEF authenticates and authorizes incoming API requests, ensuring only permitted entities can access specific capabilities.

How it works involves several steps. First, an external Application Provider, after onboarding and establishing credentials, sends an API request to the AEF (e.g., to request the location of a specific UE). The AEF validates the request against security policies and the provider's service level agreement. It then translates the API call into the appropriate internal 3GPP protocol signaling (e.g., using Nudm or Npcf interfaces) to query the relevant network function. The response from the network is then translated back into an API response and returned to the external provider. This translation layer insulates the internal network from external interfaces and potential threats.

Key components of the AEF include the API Gateway logic, the policy enforcement point, the protocol translation layer, and the logging/charging interfaces. Its role is pivotal in enabling capabilities like Quality of Service on demand, network status notifications, device triggering for IoT, and location services. It is the realization of the 'exposure' principle in 3GPP, turning the network into a programmable platform.

Purpose & Motivation

The AEF was created to solve the problem of a 'walled garden' network where advanced capabilities were locked within operator boundaries, inaccessible to third-party innovators. Before its introduction, creating network-aware applications required deep integration with individual operators, stifling the service ecosystem. The AEF provides a standardized, secure, and scalable method for controlled network exposure.

Its development was motivated by the rise of over-the-top (OTT) services and the need for operators to enable new revenue streams beyond basic connectivity. By exposing APIs for network capabilities, operators can allow application providers to enhance their services with network intelligence, such as adjusting video bitrate based on congestion or triggering IoT devices efficiently. The AEF addresses the limitations of previous ad-hoc exposure methods by providing a unified, policy-controlled, and standardized framework, which is essential for network slicing and edge computing in 5G.

What changed in its specifications

The latest release-to-release comparison of specifications that define AEF. Each summary describes the whole specification, not only this term.

TR 21.905Rel-17 → Rel-18

Rel-18 brings only minor changes to TS 21.905: 0 clauses changed, with no change attributed to a release feature.

Full comparison in TR 21.905 →
TS 23.222Rel-18 → Rel-19

Rel-19 adds CAPIF Phase 3 procedures for unpublishing service APIs between interconnected core functions, revoking API invoker and resource owner authorization, open discovery of service APIs, and UE-hosted API invoker access to resources owned by other UEs.

Full comparison in TS 23.222 →

Release Timeline

Detected Changes Across Releases

from 3GPP Change Requests

Specific changes extracted from the „Change history“ tables of 3GPP specifications (18 CRs across 6 releases). Complements the general historical overview above with the evidence-based evolution of this function.

Rel-15 4 changes
  • AEF_Authentication_API OpenAPI schema TS 29.222CR0010
  • AEF_Authentication API - Editor's notes TS 29.222CR0014
  • Correct resource model and add missing function in AEF_Authentication_API TS 29.222CR0074
  • Correct AEF operations related to obtaining security info or revoking API invokers TS 29.222CR0085
Rel-16 1 change
  • Updates to AEF procedures for 3rd party trust domain TS 23.222CR0054
Rel-17 4 changes
  • Support AEF location and API invoker interface for edge application TS 23.222CR0078
  • AEF location support TS 29.222CR0215
  • Miscellaneous corrections to the AEF_Security_API TS 29.222CR0205
  • CAPIF_Discover_Service_API: formatting of preferred-aef-loc query parameter TS 29.222CR0232
Rel-18 3 changes
  • Discover a proper AEF with owner information TS 23.222CR0094
  • Discover proper AEF in interconnection TS 23.222CR0098
  • Discover proper AEF with IP information TS 23.222CR0103
Rel-19 5 changes
  • Proposal for AEF instantiation support in CAPIF TS 23.222CR0261
  • 23.222 CAPIF_ph3 Correction on AEF type TS 23.222CR0266
  • Enhanced AEF Capabilities Description TS 23.222CR0267
  • Proposal for AEF instantiation support in CAPIF TS 23.222CR0314
  • Updates and corrections to the Initiate_Authentication service operation of the AEF_Security_API TS 29.222CR0431
Rel-20 1 change
  • Definition of roles of AEF in CAPIF TS 23.222CR0359

Defining Specifications

3GPP specifications that define or reference AEF, with the latest known release. Sourced from the 3GPP document catalog — see methodology.

SpecificationTitleRelease
TR 21.905 vj20 3GPP Terminology and Definitions Rel-19 read
TS 23.222 vk10 Common API Framework (CAPIF) Rel-20 read
TS 23.558 vk30 Enabling Edge Applications Rel-20 read
TS 23.700 vk10 AI/ML Application Layer Support Phase 2 Rel-20 read
TS 23.722 vf10 Common API Framework (CAPIF) for 3GPP Northbound APIs Rel-15 read
TS 23.947 vk10 Developer Guide to CAPIF, EDGEAPP and SEAL Rel-20 read
TR 23.958 vj00 EDGEAPP alignment with ETSI MEC and GSMA OP Rel-19 read
TS 28.849 vj10 CAPIF Phase2 Charging Study Rel-19 read
TS 28.879 vj10 OAM for Service Management Exposure Study Rel-19 read
TS 28.891 vk00 CAPIF Converged Charging Study Rel-20 read
TS 29.222 vk10 CAPIF Northbound API Protocol Rel-20 read
TS 29.549 vk10 SEAL Service APIs Rel-20 read
TS 29.558 vk00 Edge Application Enablement APIs Rel-20 read
TS 33.122 vj40 CAPIF Security Architecture Specification Rel-19 read
TR 33.884 vi01 Technical Report Rel-18 read