Edge open capability policy aggregation method, device, electronic device and medium

Abstract

The present disclosure provides a policy aggregation method, device, electronic device and storage medium for edge open capabilities, which relates to the field of edge computing technology. The policy aggregation method for edge open capabilities includes: obtaining multiple mobile edge computing MEC open capability access policies, wherein each MEC open capability access policy contains multiple policy units; hierarchically decomposing the policy units in each MEC open capability access policy based on the logical structure of a binary tree to obtain multiple policy basic units; deduplicating and aggregating the multiple policy basic units to obtain a target access policy. The present disclosure can ensure the consistency of access logic before and after the aggregation of MEC open capability access policies, optimize the management of access policies, and save storage resources for access policies.

Description

Technical Field

[0001] The present disclosure relates to the field of edge computing technology, and in particular to a method, device, electronic device, and storage medium for policy aggregation of edge open capabilities. Background Art

[0002] Based on 5G (5th Generation Mobile Communication Technology, fifth generation mobile communication technology) MEC ( Mobile Edge Computing The cross-domain capability exposure of mobile edge computing (MEC) is one of the key ways for edge capabilities to provide flexible and convenient MEC service capabilities. The National Institute of Standards and Technology (NIST) released the Cloud Alliance Reference Architecture, proposing the concept of service aggregation. ETSI (European Telecommunications Standards Institute) studied the MEC edge capability collaboration process in its group report (GR) MEC 035.

[0003] Open capabilities can be finely controlled through attribute policies. When a user's attributes meet the attribute policy of an open capability, the corresponding open capability can be accessed. MEC has many open capabilities. If open capabilities and policies are managed in a one-to-one manner, policy management of open capabilities will be complex and require a large amount of storage resources.

[0004] Based on this, how to save storage resources for open capability access policies has become a technical problem that needs to be solved urgently.

[0005] It should be noted that the information disclosed in the above background technology section is only used to enhance the understanding of the background of the present disclosure, and therefore may include information that does not constitute prior art known to ordinary technicians in the field. Summary of the Invention

[0006] The present disclosure provides a method, device, electronic device and storage medium for policy aggregation of edge open capabilities, which at least to a certain extent overcome the problem of waste of storage resources of edge open capability access policies in related technologies.

[0007] Other features and advantages of the present disclosure will become apparent from the following detailed description, or may be learned in part by practice of the present disclosure.

[0008] According to one aspect of the present disclosure, a policy aggregation method for edge open capabilities is provided, including: obtaining multiple MEC open capability access policies, wherein each MEC open capability access policy includes multiple policy units; hierarchically decomposing the policy units in each MEC open capability access policy based on a binary tree logical structure to obtain multiple policy basic units; deduplicating and aggregating the multiple policy basic units to obtain a target access policy.

[0009] In one embodiment of the present disclosure, before obtaining multiple MEC open capability access policies, the method further includes: receiving a registration request for a MEC open capability, wherein the registration request includes attribute characteristics of the MEC open capability; and allocating an access policy to the MEC open capability according to the attribute characteristics of the MEC open capability.

[0010] In one embodiment of the present disclosure, a policy unit in each MEC open capability access policy is hierarchically decomposed based on a binary tree logical structure to obtain multiple policy basic units, including: generating a binary tree for each MEC open capability access policy based on the binary tree logical structure and the policy content in the MEC open capability access policy; hierarchically decomposing each MEC open capability access policy in a preset order according to the relationship between each left subtree and right subtree in the binary tree of the MEC open capability access policy to obtain multiple policy basic units, wherein each child node in the binary tree of the MEC open capability access policy corresponds to a policy unit in the MEC open capability access policy.

[0011] In one embodiment of the present disclosure, each MEC open capability access policy is hierarchically decomposed according to the relationship between each left subtree and right subtree in the binary tree of the MEC open capability access policy to obtain multiple policy basic units, including: judging whether the left subtree and the right subtree at the same depth in the binary tree of the MEC open capability access policy are both leaf nodes, and whether the left subtree and the right subtree are in a logical and structural relationship; when the left subtree and the right subtree at the same depth are both leaf nodes and the left subtree and the right subtree are in a logical and structural relationship, the two policy units corresponding to the left subtree and the right subtree are decomposed into one policy basic unit.

[0012] In one embodiment of the present disclosure, the method also includes: when the left subtree and the right subtree at the same depth are both leaf nodes, and the left subtree and the right subtree are not in a logical and structural relationship, judging whether the left subtree and the right subtree are in a logical or structural relationship; when the left subtree and the right subtree at the same depth are both leaf nodes, and the left subtree and the right subtree are in a logical or structural relationship, decomposing the two policy units corresponding to the left subtree and the right subtree into two policy basic units.

[0013] In one embodiment of the present disclosure, the method further includes: when the left subtree and the right subtree at the same depth are not leaf nodes, decomposing the policy unit corresponding to the left subtree or the right subtree into two policy units.

[0014] In one embodiment of the present disclosure, the multiple policy basic units are deduplicated and aggregated to obtain a target access policy, including: deduplicating the same policy basic units in the multiple policy basic units to obtain a policy minimum covering set; and aggregating the policy minimum covering set to obtain a target access policy.

[0015] According to another aspect of the present disclosure, a policy aggregation device is provided, including: a policy acquisition module, used to obtain multiple MEC open capability access policies, wherein each MEC open capability access policy includes multiple policy units; a policy decomposition module, used to hierarchically decompose the policy units in each MEC open capability access policy based on a binary tree logical structure to obtain multiple policy basic units; and a policy aggregation module, used to deduplicate and aggregate the multiple policy basic units to obtain a target access policy.

[0016] In one embodiment of the present disclosure, the above-mentioned device also includes a policy allocation module, which is used to receive a registration request for MEC open capability, wherein the registration request includes attribute characteristics of MEC open capability; and allocate access policies for the MEC open capability according to the attribute characteristics of the MEC open capability.

[0017] In one embodiment of the present disclosure, the above-mentioned policy decomposition module is further used to generate a binary tree for each MEC open capability access policy based on the logical structure of the binary tree and the policy content in the MEC open capability access policy; according to the relationship between each left subtree and the right subtree in the binary tree of the MEC open capability access policy, each MEC open capability access policy is hierarchically decomposed in a preset order to obtain multiple policy basic units, wherein each child node in the binary tree of the MEC open capability access policy corresponds to a policy unit in the MEC open capability access policy.

[0018] In one embodiment of the present disclosure, the above-mentioned policy decomposition module is also used to determine whether the left subtree and the right subtree at the same depth in the binary tree of the MEC open capability access policy are both leaf nodes, and whether the left subtree and the right subtree are in a logical and structural relationship; when the left subtree and the right subtree at the same depth are both leaf nodes, and the left subtree and the right subtree are in a logical and structural relationship, the two policy units corresponding to the left subtree and the right subtree are decomposed into a policy basic unit.

[0019] In one embodiment of the present disclosure, the above-mentioned policy decomposition module is also used to determine whether the left subtree and the right subtree are in a logical or structural relationship when the left subtree and the right subtree at the same depth are both leaf nodes and the left subtree and the right subtree are not in a logical and structural relationship; when the left subtree and the right subtree at the same depth are both leaf nodes and the left subtree and the right subtree are in a logical or structural relationship, the two policy units corresponding to the left subtree and the right subtree are decomposed into two policy basic units.

[0020] In one embodiment of the present disclosure, the above-mentioned policy decomposition module is further used to decompose the policy unit corresponding to the left subtree or the right subtree into two policy units when the left subtree and the right subtree at the same depth are not leaf nodes.

[0021] In one embodiment of the present disclosure, the policy aggregation module is further configured to deduplicate identical policy basic units in the plurality of policy basic units to obtain a policy minimum covering set; and aggregate the policy minimum covering set to obtain a target access policy.

[0022] According to another aspect of the present disclosure, an electronic device is provided, comprising: a processor; and a memory for storing executable instructions of the processor; wherein the processor is configured to execute the above-mentioned policy aggregation method of edge open capabilities by executing the executable instructions.

[0023] According to another aspect of the present disclosure, a computer-readable storage medium is provided, on which a computer program is stored. When the computer program is executed by a processor, the policy aggregation method for edge exposure capabilities is implemented.

[0024] Embodiments of the present disclosure provide a method, device, electronic device, and storage medium for policy aggregation of edge open capabilities. The method comprises: obtaining multiple mobile edge computing (MEC) open capability access policies, each MEC open capability access policy containing multiple policy units; hierarchically decomposing the policy units in each MEC open capability access policy based on a binary tree logical structure to obtain multiple policy basic units; and deduplicating and aggregating the multiple policy basic units to obtain a target access policy. The present disclosure can ensure the consistency of access logic before and after aggregation of MEC open capability access policies, optimize access policy management, and save storage resources for access policies.

[0025] It is to be understood that the foregoing general description and the following detailed description are exemplary and explanatory only and are not restrictive of the disclosure. BRIEF DESCRIPTION OF THE DRAWINGS

[0026] The accompanying drawings are incorporated into and constitute a part of the specification, illustrate embodiments consistent with the present disclosure, and together with the specification, are used to explain the principles of the present disclosure. Obviously, the drawings described below are only some embodiments of the present disclosure, and those skilled in the art can derive other drawings based on these drawings without inventive effort.

[0027] Figure 1 A schematic diagram showing a communication system structure according to an embodiment of the present disclosure is provided;

[0028] Figure 2 A flow chart of a policy aggregation method for edge exposure capabilities according to an embodiment of the present disclosure is shown;

[0029] Figure 3 A schematic diagram illustrating an MEC open capability access strategy in an embodiment of the present disclosure is shown;

[0030] Figure 4 A schematic diagram illustrating another MEC open capability access strategy in an embodiment of the present disclosure is shown;

[0031] Figure 5 A flow chart showing another method for policy aggregation of edge exposure capabilities according to an embodiment of the present disclosure is shown;

[0032] Figure 6 A schematic diagram of a strategy aggregation method for edge exposure capabilities according to an embodiment of the present disclosure is shown;

[0033] Figure 7 A schematic diagram illustrating another strategy aggregation method for edge exposure capabilities according to an embodiment of the present disclosure is shown;

[0034] Figure 8 A flow chart showing another method for policy aggregation of edge exposure capabilities according to an embodiment of the present disclosure is shown;

[0035] Figure 9 A schematic diagram illustrating another strategy aggregation method for edge exposure capabilities according to an embodiment of the present disclosure is shown;

[0036] Figure 10 A flow chart showing another method for policy aggregation of edge exposure capabilities according to an embodiment of the present disclosure is shown;

[0037] Figure 11 A schematic diagram illustrating another strategy aggregation method for edge exposure capabilities according to an embodiment of the present disclosure is shown;

[0038] Figure 12 A schematic diagram illustrating another strategy aggregation method for edge exposure capabilities according to an embodiment of the present disclosure is shown;

[0039] Figure 13 A schematic diagram of a device for policy aggregation of edge exposure capabilities according to an embodiment of the present disclosure is shown;

[0040] Figure 14 A structural block diagram of an electronic device in an embodiment of the present disclosure is shown. DETAILED DESCRIPTION

[0041] Example embodiments will now be described more fully with reference to the accompanying drawings. However, example embodiments can be embodied in many forms and should not be construed as limited to the examples set forth herein; rather, these embodiments are provided so that this disclosure will be thorough and complete and will fully convey the concepts of the example embodiments to those skilled in the art. The described features, structures, or characteristics may be combined in any suitable manner in one or more embodiments.

[0042] In addition, the accompanying drawings are merely schematic illustrations of the present disclosure and are not necessarily drawn to scale. Identical reference numerals in the figures denote identical or similar parts, and thus repetitive descriptions thereof will be omitted. Some of the block diagrams shown in the accompanying drawings are functional entities that do not necessarily correspond to physically or logically separate entities. These functional entities may be implemented in software, in one or more hardware modules or integrated circuits, or in different networks and / or processor devices and / or microcontroller devices.

[0043] As mentioned in the background, open capabilities can be finely controlled through attribute policies. When a user's attributes meet the attribute policy for an open capability, they can access the corresponding open capability. Given the numerous open capabilities of MEC, if open capabilities and policies are managed in a one-to-one manner, policy management of open capabilities becomes complex and consumes significant storage resources. Improper open capability policy management can lead to failure of the access logic for open capabilities, posing the risk of abuse.

[0044] Based on this, the present disclosure provides a policy aggregation method, device, electronic device and storage medium for edge open capabilities. The present disclosure hierarchically decomposes multiple MEC open capability access policies through a binary tree-based logical structure to obtain multiple policy basic units, and deduplicates and aggregates the multiple policy basic units to obtain a target access policy. The target access policy can cover the above-mentioned multiple MEC open capability access policies, and can ensure the consistency of the access logic before and after the aggregation of MEC open capability access policies, reduce the complexity of open capability access policy management, and save storage resources for access policies.

[0045] The present disclosure also has the following effects:

[0046] 1. This disclosure is based on the ETSI GR MEC 035 standard architecture and process, and dynamically controls the access scope of MEC open capabilities by securely aggregating MEC open capability access policies.

[0047] 2. Considering the security risk of open capability policy management leading to the abuse of open capabilities, the minimum open capability coverage policy set is obtained through hierarchical decomposition and deduplication, and the open capability access policy is reconstructed to ensure the consistency of open capability policy management.

[0048] 3. This solution is easy to implement and has good scalability. It can be embedded in the edge open capability access and calling process using containerized modules to meet the complex and changing scenarios of MEC cross-domain open capabilities.

[0049] This disclosure can be applied to the following scenarios:

[0050] 1. This disclosure can be applied to cross-domain open capability scenarios based on MEC, is compatible with cross-domain capability policy aggregation in cloud computing environments, and is suitable for various application scenarios with open capability requirements, such as MEC, cloud computing, and 5G applications.

[0051] 2. This disclosure can be applied to the MEC capability exposure platform to provide security differentiation requirements such as secure aggregation of capability policies and prevention of abuse of open capabilities.

[0052] This disclosure has the following practical value:

[0053] 1. This disclosure can significantly reduce the complexity of MEC open capability policy management, reduce the storage of MEC open capability policies, and create a secure, flexible, and reliable MEC capability exposure mechanism.

[0054] 2. This disclosure can establish a secure MEC capability exposure system, accelerate the commercial deployment process based on MEC capability exposure through security innovation, and promote the implementation of MEC capability exposure solutions in 5G industry applications.

[0055] Figure 1 A schematic diagram of an exemplary system architecture of a policy aggregation method or device for edge exposure capabilities that can be applied to an embodiment of the present disclosure is shown.

[0056] like Figure 1 As shown, the system architecture 100 may include terminal devices 101 , 102 , 103 , a network 104 and a server 105 .

[0057] The network 104 is a medium for providing a communication link between the terminal devices 101 , 102 , 103 and the server 105 , and can be a wired network or a wireless network.

[0058] Optionally, the above-mentioned wireless network or wired network uses standard communication technologies and / or protocols. The network is typically the Internet, but can also be any network, including but not limited to a local area network (LAN), a metropolitan area network (MAN), a wide area network (WAN), a mobile, wired or wireless network, a private network or any combination of a virtual private network). In some embodiments, technologies and / or formats including Hyper Text Mark-up Language (HTML), Extensible Markup Language (XML), etc. are used to represent data exchanged over the network. In addition, conventional encryption technologies such as Secure Socket Layer (SSL), Transport Layer Security (TLS), Virtual Private Network (VPN), Internet Protocol Security (IPsec), etc. can be used to encrypt all or some links. In other embodiments, customized and / or dedicated data communication technologies can also be used to replace or supplement the above-mentioned data communication technologies.

[0059] The terminal devices 101 , 102 , and 103 may be various electronic devices, including but not limited to smart phones, tablet computers, laptop computers, desktop computers, wearable devices, augmented reality devices, virtual reality devices, and the like.

[0060] Optionally, the client of the application installed in different terminal devices 101, 102, and 103 is the same, or the client of the same type of application based on different operating systems. Based on different terminal platforms, the specific form of the client of the application can also be different, for example, the application client can be a mobile phone client, a PC client, etc.

[0061] The server 105 may be a server that provides various services, such as a background management server that provides support for devices operated by users using the terminal devices 101, 102, and 103. The background management server may analyze and process received requests and other data, and feed back the processing results to the terminal device.

[0062] Optionally, the server can be an independent physical server, or a server cluster or distributed system composed of multiple physical servers, or a cloud server that provides basic cloud computing services such as cloud services, cloud databases, cloud computing, cloud functions, cloud storage, network services, cloud communications, middleware services, domain name services, security services, CDN (Content Delivery Network), and big data and artificial intelligence platforms. The terminal can be a smart phone, tablet computer, laptop computer, desktop computer, smart speaker, smart watch, etc., but is not limited to these. The terminal and the server can be directly or indirectly connected via wired or wireless communication, which is not limited in this application.

[0063] Those skilled in the art will know that Figure 1 The number of terminal devices, networks, and servers in the embodiment is merely illustrative, and any number of terminal devices, networks, and servers may be provided based on actual needs. This embodiment of the present disclosure does not limit this.

[0064] This exemplary implementation is described in detail below with reference to the accompanying drawings and examples.

[0065] First, the embodiment of the present disclosure provides a policy aggregation method for edge open capabilities, which can be applied to the above Figure 1 The disclosed communication system and the disclosed method can be executed by a MEP (Mobile Edge Platform) or by any electronic device with computing and processing capabilities.

[0066] Figure 2 A flow chart of a strategy aggregation method for edge open capability in an embodiment of the present disclosure is shown as follows: Figure 1 As shown, the edge exposure capability policy aggregation method provided in the embodiment of the present disclosure includes the following steps:

[0067] S202: Acquire multiple mobile edge computing MEC open capability access policies, where each MEC open capability access policy includes multiple policy units.

[0068] It should be noted that the MEC open capability access policy can be the access policy of the edge open capability assigned by the MEP to the MEC application; the policy unit can be the unit component element that constitutes the MEC open capability access policy. For example, when the MEC open capability access policy is {(scenario: Internet of Vehicles; AND service location: Beijing;) AND (required service 1: location service; OR required service 2: traffic management;)}, the policy unit can be {scenario: Internet of Vehicles;}{service location: Beijing;}, {required service: location service} or {scenario: Internet of Vehicles; AND service location: Beijing;}, etc.

[0069] In one embodiment of the present disclosure, see Figure 3 The schematic diagram of a MEC open capability access policy is shown. Taking the first MEC open capability access policy among multiple MEC open capability access policies as an example, the first MEC open capability access policy can be expressed as {(scenario: Internet of Vehicles; AND service location: Beijing;) AND (required service 1: location service; OR required service 2: traffic management;)}. Since the scenario and service location in the first MEC open capability access policy are expressed in AND logic, it means that if the first MEC open capability access policy is satisfied, the scenario must be Internet of Vehicles and the service location must be Beijing. The OR logic expression between required service 1 and required service 2 in the first MEC open capability access policy indicates that if the first MEC open capability access policy is satisfied, the required service must be either location service or traffic management service.

[0070] In one embodiment of the present disclosure, see Figure 4 The schematic diagram of another MEC open capability access policy is shown. Taking the second MEC open capability access policy among multiple MEC open capability access policies as an example, the second MEC open capability access policy can be expressed as {(scenario: Internet of Vehicles; AND service location: Beijing;) AND (required service 1: location service; OR required service 2: wireless network service;)}. Since the scenario and service location in the second MEC open capability access policy are also expressed in AND logic, it means that if the second MEC open capability access policy is satisfied, the scenario must be Internet of Vehicles and the service location must be Beijing. The OR logic expression between required service 1 and required service 2 in the first MEC open capability access policy indicates that if the first MEC open capability access policy is satisfied, the required service must be either location service or wireless network service.

[0071] S204: hierarchically decompose the policy units in each MEC open capability access policy based on the binary tree logical structure to obtain multiple policy basic units.

[0072] In one embodiment of the present disclosure, see Figure 5 The flowchart of another edge open capability policy aggregation method shown in FIG. hierarchically decomposes the policy units in each MEC open capability access policy based on the binary tree logical structure to obtain multiple policy basic units, which may include the following steps:

[0073] S502: Generate a binary tree for each MEC open capability access policy based on the binary tree logical structure and the policy content in the MEC open capability access policy.

[0074] S504: Based on the relationship between each left subtree and right subtree in the binary tree of the MEC open capability access policy, each MEC open capability access policy is hierarchically decomposed in a preset order to obtain multiple policy basic units, wherein each child node in the binary tree of the MEC open capability access policy corresponds to a policy unit in the MEC open capability access policy.

[0075] In one embodiment of the present disclosure, each MEC open capability access policy is hierarchically decomposed according to the relationship between each left subtree and right subtree in the binary tree of the MEC open capability access policy to obtain multiple policy basic units, including:

[0076] Determine whether the left subtree and right subtree at the same depth in the binary tree of the MEC open capability access policy are both leaf nodes, and whether the left subtree and the right subtree are in a logical and structural relationship;

[0077] When the left subtree and the right subtree at the same depth are both leaf nodes and the left subtree and the right subtree are in a logical and structural relationship, the two policy units corresponding to the left subtree and the right subtree are decomposed into a policy basic unit.

[0078] In one embodiment of the present disclosure, the method also includes: when the left subtree and the right subtree at the same depth are both leaf nodes, and the left subtree and the right subtree are not in a logical and structural relationship, judging whether the left subtree and the right subtree are in a logical or structural relationship; when the left subtree and the right subtree at the same depth are both leaf nodes, and the left subtree and the right subtree are in a logical or structural relationship, decomposing the two policy units corresponding to the left subtree and the right subtree into two policy basic units.

[0079] In one embodiment of the present disclosure, the method further includes: when the left subtree and the right subtree at the same depth are not leaf nodes, decomposing the policy unit corresponding to the left subtree or the right subtree into two policy units.

[0080] In one embodiment of the present disclosure, taking the above-mentioned first MEC open capability access policy as an example, a binary tree of each MEC open capability access policy is generated based on the logical structure of the binary tree and the policy content in the MEC open capability access policy, including: generating a binary tree of the first MEC open capability access policy based on the logical structure of the binary tree and the policy content in the first MEC open capability access policy.

[0081] In one embodiment of the present disclosure, taking multiple MEC open capability access policies including the above-mentioned first MEC open capability access policy and the above-mentioned second MEC open capability access policy as an example, the policy units in each MEC open capability access policy are hierarchically decomposed based on the logical structure of a binary tree to obtain multiple policy basic units, including: hierarchically decomposing the policy units in the first MEC open capability access policy based on the logical structure of the binary tree to obtain multiple policy basic units; hierarchically decomposing the policy units in the second MEC open capability access policy based on the logical structure of the binary tree to obtain multiple policy basic units.

[0082] Among them, based on the binary tree logical structure, the policy units in the first MEC open capability access policy are hierarchically decomposed to obtain multiple policy basic units, which can be seen in Figure 6 A schematic diagram of a policy aggregation method for edge open capabilities is shown. The left subtree ({scenario: Internet of Vehicles;}) and the right subtree ({service location: Beijing;}) are at the same depth. Since there are no child nodes connected below the left subtree ({scenario: Internet of Vehicles;}) and the right subtree ({service location: Beijing;}), the left subtree ({scenario: Internet of Vehicles;}) and the right subtree ({service location: Beijing;}) are both leaf nodes; since the left subtree ({scenario: Internet of Vehicles;}) and the right subtree ({service location: Beijing;}) are connected through the AND logical expression, the left subtree ({scenario: Internet of Vehicles;}) and the right subtree ({service location: Beijing;}) are in a logical and structural relationship. Therefore, the two policy units corresponding to the left subtree ({scenario: Internet of Vehicles;}) and the right subtree ({service location: Beijing;}) can be decomposed into a policy basic unit, and the first policy basic unit is {scenario: Internet of Vehicles; AND service location: Beijing;}.

[0083] Similarly, the left subtree ({required service: location service;}) and the right subtree ({required service: traffic management;}) at the same depth have no child nodes connected below them, so the left subtree ({required service: location service;}) and the right subtree ({required service: traffic management;}) are both leaf nodes; since the left subtree ({required service: location service;}) and the right subtree ({required service: traffic management;}) are connected by OR The logical expression is connected, so the left subtree ({required service: location service;}) and the right subtree ({required service: traffic management;}) are in a logical or structural relationship. Therefore, the two policy units corresponding to the left subtree ({required service: location service;}) and the right subtree ({required service: traffic management;}) can be decomposed into two policy basic units to obtain the second policy basic unit and the third policy basic unit, where the second policy basic unit is {required service: location service;} and the third policy basic unit is {required service: traffic management;}.

[0084] Similarly, the left subtree ({required service: location service; AND service location: Beijing;}) and the right subtree ({required service: 1: location service; OR required service 2: traffic management;}) at the same depth are both leaf nodes, because after the policy basic unit is decomposed, the child nodes corresponding to the policy basic unit are removed from the binary tree of the first MEC open capability access policy. Therefore, the left subtree ({required service: location service; AND service location: Beijing;}) and the right subtree ({required service: 1: location service; OR required service 2: traffic management;}) are both leaf nodes. AND service location: Beijing;}) and the right subtree ({required service: 1: location service; OR required service 2: traffic management;}) are connected through the AND logical expression, so the two policy units corresponding to the left subtree ({required service: location service; AND service location: Beijing;}) and the right subtree ({required service 1: location service; OR required service 2: traffic management;}) can be decomposed into a policy basic unit, and the fourth policy basic unit is {(scenario: Internet of Vehicles; AND service location: Beijing;) AND (required service: 1: location service; OR required service 2: traffic management;)}.

[0085] Therefore, based on the binary tree logical structure, the policy units in the first MEC open capability access policy are hierarchically decomposed to obtain a first policy basic unit, a second policy basic unit, a third policy basic unit, and a fourth policy basic unit.

[0086] Among them, based on the binary tree logical structure, the policy units in the second MEC open capability access policy are hierarchically decomposed to obtain multiple policy basic units, which can be seen in Figure 7 A schematic diagram of another policy aggregation method for edge open capabilities is shown. The left subtree ({scenario: Internet of Vehicles;}) and the right subtree ({service location: Beijing;}) are at the same depth. Since there are no child nodes connected below the left subtree ({scenario: Internet of Vehicles;}) and the right subtree ({service location: Beijing;}), the left subtree ({scenario: Internet of Vehicles;}) and the right subtree ({service location: Beijing;}) are both leaf nodes; since the left subtree ({scenario: Internet of Vehicles;}) and the right subtree ({service location: Beijing;}) are connected through the AND logical expression, the left subtree ({scenario: Internet of Vehicles;}) and the right subtree ({service location: Beijing;}) are in a logical and structural relationship. Therefore, the two policy units corresponding to the left subtree ({scenario: Internet of Vehicles;}) and the right subtree ({service location: Beijing;}) can be decomposed into a policy basic unit, and the first policy basic unit is {scenario: Internet of Vehicles; AND service location: Beijing;}.

[0087] Similarly, the left subtree ({required service: traffic management;}) and the right subtree ({required service: wireless network information service;}) at the same depth have no child nodes connected below them, so the left subtree ({required service: traffic management;}) and the right subtree ({required service: wireless network information service;}) are both leaf nodes; since the left subtree ({required service: traffic management;}) and the right subtree ({required service: wireless network information service;}) are connected by OR logic expresses connection, so the left subtree ({required service: traffic management;}) and the right subtree ({required service: wireless network information service;}) are in a logical or structural relationship. Therefore, the two policy units corresponding to the left subtree ({required service: traffic management;}) and the right subtree ({required service: wireless network information service;}) can be decomposed into two policy basic units to obtain the second policy basic unit and the third policy basic unit, where the third policy basic unit is {required service: traffic management;}, and the fifth policy basic unit is {required service: wireless network information service;}.

[0088] Similarly, the left subtree ({required service: traffic management; AND service location: Beijing;}) and the right subtree ({required service: 1: traffic management; OR required service 2: wireless network information service;}) at the same depth are both leaf nodes, because after the policy basic unit is decomposed, the child nodes corresponding to the policy basic unit are removed from the binary tree of the first MEC open capability access policy. Therefore, the left subtree ({required service: traffic management; AND service location: Beijing;}) and the right subtree ({required service: 1: traffic management; OR required service 2: wireless network information service;}) are both leaf nodes. D service location: Beijing;}) and the right subtree ({required service: 1: traffic management; OR required service 2: wireless network information service;}) are connected through the AND logical expression, so the two policy units corresponding to the left subtree ({required service: traffic management; AND service location: Beijing;}) and the right subtree ({required service: 1: traffic management; OR required service 2: wireless network information service;}) can be decomposed into a policy basic unit, and the fifth policy basic unit is {(scenario: Internet of Vehicles; AND service location: Beijing;) AND (required service 1: traffic management; OR required service 2: wireless network information service;)}.

[0089] Therefore, based on the logical structure of the binary tree, the policy units in the second MEC open capability access policy are hierarchically decomposed to obtain the first policy basic unit, the third policy basic unit, the fourth policy basic unit and the fifth policy basic unit.

[0090] S206: De-duplication and aggregation processing are performed on multiple policy basic units to obtain a target access policy.

[0091] In one embodiment of the present disclosure, see Figure 8 As shown, deduplication and aggregation of multiple policy basic units to obtain a target access policy may include the following steps:

[0092] S802, performing deduplication processing on the same policy basic units in multiple policy basic units to obtain a policy minimum covering set;

[0093] S804: Aggregate the policy minimum covering set to obtain a target access policy.

[0094] In one embodiment of the present disclosure, taking multiple MEC open capability access policies including the first MEC open capability access policy and the second MEC open capability access policy as an example, it can be seen from the above that the first MEC open capability access policy can be decomposed into a first policy basis unit, a second policy basis unit, a third policy basis unit, and a fourth policy basis unit, and the second MEC open capability access policy can be decomposed into a first policy basis unit, a third policy basis unit, a fourth policy basis unit, and a fifth policy basis unit. A determination is made as to whether the obtained multiple policy basis units have the same policy basis unit. Since both the first MEC open capability access policy and the second MEC open capability access policy can be decomposed into a first policy basis unit, a third policy basis unit, and a fourth policy basis unit, a minimum policy covering set is obtained by deduplication. The minimum policy covering set includes the first policy basis unit, the second policy basis unit, the third policy basis unit, the fourth policy basis unit, and the fifth policy basis unit. Here, the MEP can store only the minimum policy covering set without having to store both the first MEC open capability access policy and the second MEC open capability access policy, thereby saving storage resources for access policies.

[0095] Then, by aggregating the minimum coverage set of the strategies, we get the target access strategy. Figure 9 A schematic diagram of another policy aggregation method for edge open capabilities is shown, where the target access policy is {(scenario: Internet of Vehicles; AND service location: Beijing;) AND (required service 1: location service; OR (required service 2: traffic management; OR required service 3: wireless network information service;))}.

[0096] After the target access policy is obtained through aggregation, the target access policy can be verified using the third MEC open capability access policy and the fourth MEC open capability access policy. The third MEC open capability access policy is {scenario: Internet of Vehicles; service location: Beijing; required service: location service}; the fourth MEC open capability access policy is {scenario: Internet of Vehicles; service location: Beijing; required service: wireless network service}. After the cloud system receives the call request for these two access policies, it can be found that the attribute sets of the two access policies respectively meet the first MEC open capability access policy and the second MEC open capability access policy. At this time, the MEP aggregates the first MEC open capability access policy and the second MEC open capability access policy by adopting the above-mentioned edge open capability policy aggregation method to obtain the target access policy, such as Figure 9As shown in the figure, the third and fourth MEC open capability access policies can still satisfy the target access policy. This shows that after the MEC open capability access policy is aggregated, the MEC open capability access policy aggregation consistency is satisfied. That is, users who originally satisfied the MEC open capability access policy can also satisfy the aggregated MEC open capability access policy without affecting their open capability access. At this point, the MEP will provide the target access policy to the third and fourth MEC open capability access policies respectively.

[0097] The embodiment of the present disclosure provides a policy aggregation method for edge open capabilities. The present disclosure hierarchically decomposes multiple MEC open capability access policies through a binary tree-based logical structure to obtain multiple policy basic units, and deduplicates and aggregates the multiple policy basic units to obtain a target access policy. The target access policy can cover the above-mentioned multiple MEC open capability access policies, ensure the consistency of access logic before and after the aggregation of MEC open capability access policies, optimize the management of access policies, and save storage resources for access policies.

[0098] In one embodiment of the present disclosure, see Figure 10 As shown in the flowchart of another edge open capability policy aggregation method, before obtaining multiple MEC open capability access policies, the method further includes:

[0099] S1002: Receive a registration request for MEC open capabilities, where the registration request includes attribute characteristics of the MEC open capabilities.

[0100] It should be noted that the registration request for MEC open capabilities can be a registration request sent by an MEC App (Application) when registering its own open capabilities with a MEP, so that the MEC App can obtain edge open capabilities. Attribute characteristics can include attribute characteristics of open capabilities such as application scenarios, service locations, and required services. Among them, the application scenario can be at least one of AR / VR, smart manufacturing, and Internet of Vehicles. The service location can be divided into various cities, counties, or provinces at the provincial, municipal, or county levels. The required service can be at least one of wireless network information services, traffic management services, location services, and other services.

[0101] S1004: Allocate access policies for MEC open capabilities according to the attribute characteristics of the MEC open capabilities.

[0102] In one embodiment of the present disclosure, after receiving a registration request for an MEC open capability, a corresponding access policy may be determined based on the attribute characteristics of the MEC open capability included in the registration request. Here, the MEP may assign an access policy to the edge open capability based on metadata classification in the attribute characteristics.

[0103] In one embodiment of the present disclosure, the present disclosure also provides another strategy aggregation method for edge open capabilities, see Figure 11 A schematic diagram of another edge exposure capability policy aggregation method is shown, which may include the following steps:

[0104] S1110: Receive a registration request for MEC open capabilities.

[0105] S1120 : Allocate access policies for MEC open capabilities according to attribute characteristics of the MEC open capabilities, and obtain multiple MEC open capability access policies.

[0106] S130: Decompose the multiple MEC open capability access policies hierarchically to obtain multiple policy basic units.

[0107] S1140 , determine whether there is an identical policy basic unit among the multiple policy basic units. If so, execute S1150 ; if not, execute S1160 .

[0108] S1150 , performing deduplication processing on identical policy basic units in a plurality of policy basic units to obtain a minimum policy coverage set.

[0109] S1160 , aggregate the minimum policy coverage set to obtain the target access policy.

[0110] S1130 may include the following steps:

[0111] S1131 , judging the relationship between each left subtree and right subtree from top to bottom based on the binary tree logic nodes of the MEC open capability access policy.

[0112] S1132, determine whether the left subtree and the right subtree at the same depth are both leaf nodes, and whether the left subtree and the right subtree are in a logical and structural relationship. If so, execute S1133; if not, execute S1134.

[0113] S1133: Decompose the two policy units corresponding to the left subtree and the right subtree into a policy basic unit.

[0114] S1134, determine whether the left subtree and the right subtree at the same depth are both leaf nodes, and whether the left subtree and the right subtree are in a logical or structural relationship. If so, execute S1135, if not, execute S1137.

[0115] S1135 , decompose the two policy units corresponding to the left subtree and the right subtree into two policy basic units.

[0116] S1136 , aggregate the policy basic units to obtain multiple policy basic units.

[0117] S1137: Decompose the policy unit corresponding to the left subtree or the right subtree into two policy units.

[0118] In one embodiment of the present disclosure, the present disclosure can be applied to Figure 12 For public application scenarios, see Figure 12 As shown in the diagram of another policy aggregation method for edge open capabilities, the MEC Platform can assign MEC open capability access policy 1 to MEC App1 and MEC open capability access policy 2 to MAC App2 based on the attributes of their open capabilities. Next, MEC open capability access policy 1 and MEC open capability access policy 2 are subjected to policy hierarchical decomposition, policy basic unit deduplication, and access policy reconstruction to obtain the aggregated open capability access policy. This aggregated open capability access policy is then uploaded to the cloud system, which controls access to the open capabilities of cloud service instance 1 or cloud service instance 2 based on the aggregated open capability access policy.

[0119] Based on the same inventive concept, the present disclosure also provides a policy aggregation device, such as the following embodiment. Since the principle of solving the problem in the device embodiment is similar to that in the above method embodiment, the implementation of the device embodiment can refer to the implementation of the above method embodiment, and the repeated parts will not be repeated.

[0120] Figure 13 A schematic diagram of a strategy aggregation device in an embodiment of the present disclosure is shown. Figure 13 As shown, the device includes:

[0121] A policy acquisition module 1310 is configured to acquire multiple MEC open capability access policies, where each MEC open capability access policy includes multiple policy units.

[0122] The policy decomposition module 1320 is used to hierarchically decompose the policy units in each MEC open capability access policy based on the binary tree logical structure to obtain multiple policy basic units;

[0123] The policy aggregation module 1330 is used to perform deduplication and aggregation processing on multiple policy basic units to obtain a target access policy.

[0124] In one embodiment of the present disclosure, the above-mentioned device also includes a policy allocation module, which is used to receive a registration request for MEC open capabilities, wherein the registration request includes attribute characteristics of MEC open capabilities; and allocate access policies for MEC open capabilities according to the attribute characteristics of MEC open capabilities.

[0125] In one embodiment of the present disclosure, the above-mentioned policy decomposition module 1320 is further used to generate a binary tree for each MEC open capability access policy based on the logical structure of the binary tree and the policy content in the MEC open capability access policy; according to the relationship between each left subtree and the right subtree in the binary tree of the MEC open capability access policy, each MEC open capability access policy is hierarchically decomposed in a preset order to obtain multiple policy basic units, wherein each child node in the binary tree of the MEC open capability access policy corresponds to a policy unit in the MEC open capability access policy.

[0126] In one embodiment of the present disclosure, the above-mentioned policy decomposition module 1320 is also used to determine whether the left subtree and the right subtree at the same depth in the binary tree of the MEC open capability access policy are both leaf nodes, and whether the left subtree and the right subtree are in a logical and structural relationship; when the left subtree and the right subtree at the same depth are both leaf nodes, and the left subtree and the right subtree are in a logical and structural relationship, the two policy units corresponding to the left subtree and the right subtree are decomposed into a policy basic unit.

[0127] In one embodiment of the present disclosure, the above-mentioned policy decomposition module 1320 is also used to determine whether the left subtree and the right subtree are in a logical or structural relationship when the left subtree and the right subtree at the same depth are both leaf nodes and the left subtree and the right subtree are not in a logical and structural relationship; when the left subtree and the right subtree at the same depth are both leaf nodes and the left subtree and the right subtree are in a logical or structural relationship, the two policy units corresponding to the left subtree and the right subtree are decomposed into two policy basic units.

[0128] In one embodiment of the present disclosure, the above-mentioned policy decomposition module 1320 is further used to decompose the policy unit corresponding to the left subtree or the right subtree into two policy units when the left subtree and the right subtree at the same depth are not leaf nodes.

[0129] In one embodiment of the present disclosure, the policy aggregation module 1330 is further configured to deduplicate identical policy basic units in a plurality of policy basic units to obtain a policy minimum covering set; and aggregate the policy minimum covering set to obtain a target access policy.

[0130] Those skilled in the art will appreciate that various aspects of the present disclosure may be implemented as systems, methods, or program products. Therefore, various aspects of the present disclosure may be implemented in the following forms: a complete hardware implementation, a complete software implementation (including firmware, microcode, etc.), or a combination of hardware and software implementations, which may be collectively referred to herein as "circuits," "modules," or "systems."

[0131] Refer to the following Figure 14 1400 according to this embodiment of the present disclosure will be described. Figure 14 The electronic device 1400 shown is merely an example and should not limit the functions and scope of use of the embodiments of the present disclosure.

[0132] like Figure 14 As shown, electronic device 1400 is implemented as a general-purpose computing device. Components of electronic device 1400 may include, but are not limited to, the aforementioned at least one processing unit 1410, the aforementioned at least one storage unit 1420, and a bus 1430 connecting various system components (including storage unit 1420 and processing unit 1410).

[0133] The storage unit stores program code, and the program code can be executed by the processing unit 1410, so that the processing unit 1410 performs the steps described in the "Exemplary Method" section of this specification according to various exemplary embodiments of the present disclosure. For example, the processing unit 1410 can perform the following steps of the above method embodiment: obtaining multiple mobile edge computing MEC open capability access policies, wherein each MEC open capability access policy contains multiple policy units; hierarchically decomposing the policy units in each MEC open capability access policy based on the logical structure of a binary tree to obtain multiple policy basic units; deduplicating and aggregating the multiple policy basic units to obtain a target access policy.

[0134] The storage unit 1420 may include a readable medium in the form of a volatile storage unit, such as a random access memory unit (RAM) 14201 and / or a cache memory unit 14202 , and may further include a read-only memory unit (ROM) 14203 .

[0135] The storage unit 1420 may also include a program / utility 14204 having a set (at least one) of program modules 14205, such program modules 14205 including but not limited to: an operating system, one or more application programs, other program modules, and program data, each of which or some combination may include an implementation of a network environment.

[0136] The bus 1430 may represent one or more of several types of bus structures, including a memory bus or memory controller, a peripheral bus, an accelerated graphics port, a processing unit, or a local bus using any of a variety of bus architectures.

[0137] Electronic device 1400 may also communicate with one or more external devices 1440 (e.g., a keyboard, pointing device, Bluetooth device, etc.), one or more devices that enable a user to interact with electronic device 1400, and / or any device that enables electronic device 1400 to communicate with one or more other computing devices (e.g., a router, modem, etc.). Such communication may occur via input / output (I / O) interface 1450. Furthermore, electronic device 1400 may also communicate with one or more networks (e.g., a local area network (LAN), a wide area network (WAN), and / or a public network such as the Internet) via network adapter 1460. As shown, network adapter 1460 communicates with other modules of electronic device 1400 via bus 1430. It should be understood that, although not shown, other hardware and / or software modules may be used in conjunction with electronic device 1400, including but not limited to microcode, device drivers, redundant processing units, external disk drive arrays, RAID systems, tape drives, and data backup storage systems.

[0138] Through the description of the above embodiments, it is easy for those skilled in the art to understand that the example embodiments described herein can be implemented by software or by combining software with necessary hardware. Therefore, the technical solution according to the embodiments of the present disclosure can be embodied in the form of a software product, which can be stored in a non-volatile storage medium (which can be a CD-ROM, a USB flash drive, a mobile hard disk, etc.) or on a network, and includes several instructions to enable a computing device (which can be a personal computer, a server, a terminal device, or a network device, etc.) to execute the method according to the embodiments of the present disclosure.

[0139] In an exemplary embodiment of the present disclosure, a computer-readable storage medium is also provided. The computer-readable storage medium may be a readable signal medium or a readable storage medium. A program product capable of implementing the above-mentioned method of the present disclosure is stored thereon. In some possible implementations, various aspects of the present disclosure may also be implemented in the form of a program product, which includes program code. When the program product is run on a terminal device, the program code is used to cause the terminal device to execute the steps according to various exemplary embodiments of the present disclosure described in the "Exemplary Methods" section above of this specification.

[0140] More specific examples of computer-readable storage media in the present disclosure may include, but are not limited to, an electrical connection having one or more conductors, a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), optical fibers, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the foregoing.

[0141] In the present disclosure, a computer-readable storage medium may include a data signal propagated in baseband or as part of a carrier wave, which carries readable program code. Such propagated data signals may take various forms, including but not limited to electromagnetic signals, optical signals, or any suitable combination thereof. A readable signal medium may also be any readable medium other than a readable storage medium that can transmit, propagate, or transfer a program for use by or in conjunction with an instruction execution system, apparatus, or device.

[0142] Alternatively, the program code contained on the computer-readable storage medium may be transmitted using any appropriate medium, including but not limited to wireless, wired, optical cable, RF, etc., or any suitable combination thereof.

[0143] In a specific implementation, the program code for performing the operations of the present disclosure may be written in any combination of one or more programming languages, including object-oriented programming languages such as Java, C++, and the like, as well as conventional procedural programming languages such as "C" or similar programming languages. The program code may be executed entirely on the user computing device, partially on the user device, as a standalone software package, partially on the user computing device and partially on a remote computing device, or entirely on a remote computing device or server. In the case of a remote computing device, the remote computing device may be connected to the user computing device via any type of network, including a local area network (LAN) or a wide area network (WAN), or may be connected to an external computing device (e.g., via the Internet using an Internet service provider).

[0144] It should be noted that although several modules or units of the device for action execution are mentioned in the detailed description above, this division is not mandatory. In fact, according to the embodiments of the present disclosure, the features and functions of two or more modules or units described above can be concretized in one module or unit. Conversely, the features and functions of one module or unit described above can be further divided into multiple modules or units to be concretized.

[0145] Furthermore, although the steps of the method of the present disclosure are described in a particular order in the accompanying drawings, this does not require or imply that the steps must be performed in this particular order, or that all steps shown must be performed to achieve the desired results. Additionally or alternatively, some steps may be omitted, multiple steps may be combined into one step, and / or one step may be decomposed into multiple steps.

[0146] Through the description of the above embodiments, it is easy for those skilled in the art to understand that the example embodiments described herein can be implemented by software or by combining software with necessary hardware. Therefore, the technical solution according to the embodiments of the present disclosure can be embodied in the form of a software product, which can be stored in a non-volatile storage medium (which can be a CD-ROM, a USB flash drive, a mobile hard disk, etc.) or on a network, and includes several instructions to enable a computing device (which can be a personal computer, a server, a mobile terminal, or a network device, etc.) to execute the method according to the embodiments of the present disclosure.

[0147] Other embodiments of the present disclosure will readily occur to those skilled in the art after considering the specification and practicing the invention disclosed herein. This disclosure is intended to cover any variations, uses, or adaptations of the present disclosure that follow the general principles of the present disclosure and include common knowledge or customary techniques in the art not disclosed herein. The description and examples are to be considered as exemplary only, with the true scope and spirit of the present disclosure being indicated by the appended claims.

Claims

1. A strategy aggregation method for edge open capabilities, characterized in that: include: Obtain multiple mobile edge computing MEC open capability access policies, where each MEC open capability access policy includes multiple policy units; Based on the binary tree logical structure, the policy units in each MEC open capability access policy are hierarchically decomposed to obtain multiple policy basic units; Deduplication and aggregation processing are performed on the multiple policy basic units to obtain a target access policy.

2. The edge exposure capability policy aggregation method according to claim 1, characterized in that: Before obtaining the multiple MEC open capability access policies, the method further includes: Receiving a registration request for an MEC open capability, wherein the registration request includes attribute characteristics of the MEC open capability; An access policy is allocated to the MEC open capability according to the attribute characteristics of the MEC open capability.

3. The edge exposure capability policy aggregation method according to claim 1, characterized in that: Based on the binary tree logical structure, the policy units in each MEC open capability access policy are hierarchically decomposed to obtain multiple policy basic units, including: Based on the logical structure of the binary tree and the policy content in the MEC open capability access policy, a binary tree of each MEC open capability access policy is generated; According to the relationship between each left subtree and right subtree in the binary tree of the MEC open capability access policy, each MEC open capability access policy is hierarchically decomposed in a preset order to obtain multiple policy basic units, where each child node in the binary tree of the MEC open capability access policy corresponds to a policy unit in the MEC open capability access policy.

4. The edge exposure capability policy aggregation method according to claim 3 is characterized in that: Based on the relationship between the left and right subtrees in the binary tree of MEC open capability access policies, each MEC open capability access policy is hierarchically decomposed to obtain multiple policy basic units, including: Determine whether the left subtree and right subtree at the same depth in the binary tree of the MEC open capability access policy are both leaf nodes, and whether the left subtree and the right subtree are in a logical and structural relationship; When the left subtree and the right subtree at the same depth are both leaf nodes and the left subtree and the right subtree are in a logical and structural relationship, the two policy units corresponding to the left subtree and the right subtree are decomposed into a policy basic unit.

5. The edge exposure capability policy aggregation method according to claim 4 is characterized in that: The method further comprises: When the left subtree and the right subtree at the same depth are both leaf nodes, and the left subtree and the right subtree are not in a logical or structural relationship, determine whether the left subtree and the right subtree are in a logical or structural relationship; When the left subtree and the right subtree at the same depth are both leaf nodes and the left subtree and the right subtree are in a logical or structural relationship, the two policy units corresponding to the left subtree and the right subtree are decomposed into two policy basic units.

6. The edge exposure capability policy aggregation method according to claim 5, characterized in that: The method further comprises: When the left subtree and the right subtree at the same depth are not leaf nodes, the policy unit corresponding to the left subtree or the right subtree is decomposed into two policy units.

7. The edge exposure capability policy aggregation method according to claim 1, characterized in that: Deduplication and aggregation are performed on the multiple policy basic units to obtain a target access policy, including: Deduplication is performed on identical policy basic units in the multiple policy basic units to obtain a policy minimum covering set; Aggregate the minimum coverage set of the policies to obtain a target access policy.

8. A strategy aggregation device, characterized in that: include: A policy acquisition module is used to obtain multiple MEC open capability access policies, where each MEC open capability access policy contains multiple policy units; The policy decomposition module is used to hierarchically decompose the policy units in each MEC open capability access policy based on the binary tree logical structure to obtain multiple policy basic units; The policy aggregation module is used to perform deduplication and aggregation processing on the multiple policy basic units to obtain a target access policy.

9. An electronic device, characterized in that: include: processor; as well as a memory for storing executable instructions of the processor; The processor is configured to execute the edge exposure capability policy aggregation method according to any one of claims 1 to 7 by executing the executable instructions.

10. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the policy aggregation method for edge exposure capabilities described in any one of claims 1 to 7 is implemented.

Images