Description
The API Exposing Function (AEF) is a critical component within the 3GPP service framework, specifically in the Network Exposure Function (NEF) architecture. It serves as the primary entry point and gateway for external application providers to interact with the 3GPP network. The AEF's core responsibility is to securely expose a set of Application Programming Interfaces (APIs) that abstract complex network capabilities into consumable services for developers.
Architecturally, the AEF sits at the boundary between the trusted 3GPP network domain and the untrusted external domain (e.g., the internet). It interfaces internally with other Core Network functions like the Policy Control Function (PCF), Unified Data Management (UDM), and Access and Mobility Management Function (AMF). Externally, it provides northbound RESTful APIs or other API frameworks to Application Providers. The AEF authenticates and authorizes incoming API requests, ensuring only permitted entities can access specific capabilities.
How it works involves several steps. First, an external Application Provider, after onboarding and establishing credentials, sends an API request to the AEF (e.g., to request the location of a specific UE). The AEF validates the request against security policies and the provider's service level agreement. It then translates the API call into the appropriate internal 3GPP protocol signaling (e.g., using Nudm or Npcf interfaces) to query the relevant network function. The response from the network is then translated back into an API response and returned to the external provider. This translation layer insulates the internal network from external interfaces and potential threats.
Key components of the AEF include the API Gateway logic, the policy enforcement point, the protocol translation layer, and the logging/charging interfaces. Its role is pivotal in enabling capabilities like Quality of Service on demand, network status notifications, device triggering for IoT, and location services. It is the realization of the 'exposure' principle in 3GPP, turning the network into a programmable platform.
Purpose & Motivation
The AEF was created to solve the problem of a 'walled garden' network where advanced capabilities were locked within operator boundaries, inaccessible to third-party innovators. Before its introduction, creating network-aware applications required deep integration with individual operators, stifling the service ecosystem. The AEF provides a standardized, secure, and scalable method for controlled network exposure.
Its development was motivated by the rise of over-the-top (OTT) services and the need for operators to enable new revenue streams beyond basic connectivity. By exposing APIs for network capabilities, operators can allow application providers to enhance their services with network intelligence, such as adjusting video bitrate based on congestion or triggering IoT devices efficiently. The AEF addresses the limitations of previous ad-hoc exposure methods by providing a unified, policy-controlled, and standardized framework, which is essential for network slicing and edge computing in 5G.
What changed in its specifications
The latest release-to-release comparison of specifications that define AEF. Each summary describes the whole specification, not only this term.
Rel-18 brings only minor changes to TS 21.905: 0 clauses changed, with no change attributed to a release feature.
Full comparison in TR 21.905 →Rel-19 adds CAPIF Phase 3 procedures for unpublishing service APIs between interconnected core functions, revoking API invoker and resource owner authorization, open discovery of service APIs, and UE-hosted API invoker access to resources owned by other UEs.
Full comparison in TS 23.222 →Release Timeline
Detected Changes Across Releases
from 3GPP Change RequestsSpecific changes extracted from the „Change history“ tables of 3GPP specifications (18 CRs across 6 releases). Complements the general historical overview above with the evidence-based evolution of this function.
- Proposal for AEF instantiation support in CAPIF TS 23.222CR0261
- 23.222 CAPIF_ph3 Correction on AEF type TS 23.222CR0266
- Enhanced AEF Capabilities Description TS 23.222CR0267
- Proposal for AEF instantiation support in CAPIF TS 23.222CR0314
- Updates and corrections to the Initiate_Authentication service operation of the AEF_Security_API TS 29.222CR0431
Defining Specifications
3GPP specifications that define or reference AEF, with the latest known release. Sourced from the 3GPP document catalog — see methodology.
| Specification | Title | Release |
|---|---|---|
| TR 21.905 vj20 | 3GPP Terminology and Definitions | Rel-19 read |
| TS 23.222 vk10 | Common API Framework (CAPIF) | Rel-20 read |
| TS 23.558 vk30 | Enabling Edge Applications | Rel-20 read |
| TS 23.700 vk10 | AI/ML Application Layer Support Phase 2 | Rel-20 read |
| TS 23.722 vf10 | Common API Framework (CAPIF) for 3GPP Northbound APIs | Rel-15 read |
| TS 23.947 vk10 | Developer Guide to CAPIF, EDGEAPP and SEAL | Rel-20 read |
| TR 23.958 vj00 | EDGEAPP alignment with ETSI MEC and GSMA OP | Rel-19 read |
| TS 28.849 vj10 | CAPIF Phase2 Charging Study | Rel-19 read |
| TS 28.879 vj10 | OAM for Service Management Exposure Study | Rel-19 read |
| TS 28.891 vk00 | CAPIF Converged Charging Study | Rel-20 read |
| TS 29.222 vk10 | CAPIF Northbound API Protocol | Rel-20 read |
| TS 29.549 vk10 | SEAL Service APIs | Rel-20 read |
| TS 29.558 vk00 | Edge Application Enablement APIs | Rel-20 read |
| TS 33.122 vj40 | CAPIF Security Architecture Specification | Rel-19 read |
| TR 33.884 vi01 | Technical Report | Rel-18 read |