A communication method and a communication device

Abstract

A communication method and a communication device, the method comprising: receiving first data and first authorization information corresponding to the first data from a network data analysis function NWDAF or a data collection coordination function network element DCCF network element, the first authorization information indicating permission to obtain the first data for a first purpose; receiving a first request message from the first network element, the first request message including first indication information, the first indication information being used to indicate the purpose of the requested data; and determining to provide the first data to the first network element according to the first request message and the first authorization information. By determining to provide the first data to the first network element according to the purpose of the requested data and the first purpose indicated by the first authorization information, the security of the data stored inside the analysis data storage function network element ADRF can be improved.

Description

Technical Field

[0001] The present application relates to the field of communications, and more specifically, to a communication method and a communication device. Background Art

[0002] The rapid development of artificial intelligence and big data analysis has provided a technical foundation for network intelligence. In order to realize the intelligence of the fifth generation (5G) communication system, the network data analytics function (NWDAF), data collection coordination function (DCCF) and analytics data repository function (ADRF) are introduced. DCCF, NWDAF and ADRF provide the collection, reasoning calculation and storage functions of network data and analysis information to support network anomaly analysis, optimize and adjust user experience, and improve network resource utilization. The ultimate goal is to improve the level of network intelligence.

[0003] Among them, the ADRF network element is not only responsible for storing and managing the data transmitted from the NWDAF or DCCF (including user data and processed data, such as model data or analysis results), but also responsible for responding to data request messages from consumer network elements and providing them with relevant data. Therefore, data storage management within the ADRF network element is particularly important for data privacy and security risks in the network. Summary of the invention

[0004] The present application provides a communication method and a communication device, which can strengthen the management of stored data by ADRF network elements, optimize data privacy in the communication system, and avoid security risks.

[0005] In a first aspect, a communication method is provided, which can be performed by an analysis data storage function network element, or by a module (such as a chip or circuit) of the analysis data storage function network element, or by a logical node, a logical module or software that can implement all or part of the data analysis network element. This application does not limit this.

[0006] The method includes: receiving first data from an NWDAF or DCCF network element and first authorization information corresponding to the first data, the first authorization information indicating permission to obtain the first data for a first purpose; receiving a first request message from a first network element, the first request message including first indication information, the first indication information being used to indicate the purpose of requesting data; and determining, based on the first request message and the first authorization information, to provide the first data to the first network element.

[0007] Based on the above scheme, by indicating the purpose of requesting data and the first purpose indicated by the first authorization information, it is determined to provide the first data to the first network element. Avoid sending all possible corresponding data only based on the request of the first network element, thereby improving the security of the data stored inside the ADRF. In addition, by increasing the basis for sending data and avoiding possible data communications and operations that exceed the scope of authorization, the efficiency of communication resources and computing resources in the system is improved.

[0008] In combination with the first aspect, in certain implementations of the first aspect, based on the first request message and the first authorization information, when the first indication information and the first authorization information match, it is determined to provide the first data to the first network element.

[0009] Based on the above scheme, by determining whether the purpose of the requested data from the first network element matches the purpose of obtaining the first data authorized by the authorization information, it is determined whether to provide the first data to the first network element, thereby improving the security of the data stored inside the ADRF.

[0010] In combination with the first aspect, in certain implementations of the first aspect, the situation in which the first indication information in the first request message and the first authorization information match can specifically be: the first purpose is the same as the purpose of the request data. For example, the first purpose is model training, represented by the number 1; the purpose of the request data indicated by the first indication information is also model training, represented by the number 1, and the same numbers indicate that the first indication information and the first authorization information match successfully. There are a variety of specific implementation methods, which enable the ADRF network element to confirm that the first purpose in the first authorization information and the purpose of the request data in the first indication information are the same, that is, the match is successful.

[0011] In combination with the first aspect, in certain implementations of the first aspect, determining, based on the first request message and the first authorization information, to provide the first data to the first network element includes: if the first indication information and the first authorization information do not match, not providing the first data to the first network element.

[0012] Based on the above scheme, by not providing the first data to the first network element when the first indication information and the first authorization information do not match, the security of the data stored in the ADRF can be improved, while avoiding the waste of communication resources with the first network element and the subsequent possible waste of computing resources of the first network element.

[0013] In combination with the first aspect, in certain implementations of the first aspect, the method also includes: receiving second authorization information corresponding to the first data from the NWDAF or DCCF network element, the second authorization information indicating that obtaining the first data for the first purpose is not allowed or restricted; and stopping providing the first data to the first network element based on the second authorization information.

[0014] Based on the above scheme, when the authorization information corresponding to the first data changes, the changed authorization information is provided to the analysis data storage function network element, and the analysis data storage function network element can flexibly manage the first data based on the changed authorization information, further improving the security of the data stored in the ADRF. For example, when the second authorization information indicates that the first data is not allowed to be obtained for the first purpose, the first data can be deleted, and corresponding indication information can be sent to the first network element to indicate that the corresponding data does not exist or the data has been deleted.

[0015] In combination with the first aspect, in some implementations of the first aspect, the stopping of providing the first data to the first network element includes: sending a rejection indication message to the first network element, where the rejection indication message is used to refuse to provide the first data to the first network element. The analysis data storage function network element may update the authorization information corresponding to the first data, and send the rejection indication message accordingly. Specifically, the rejection indication message may be carried in a response message, or a rejection message may be sent, or other messages carrying the rejection indication information.

[0016] In combination with the first aspect, in some implementations of the first aspect, the stopping of providing the first data to the first network element includes, when the first request message is a subscription message, sending a stop subscription message to the first network element.

[0017] In combination with the first aspect, in certain implementations of the first aspect, the second authorization information also includes: a first time period, the second authorization information is used to indicate that acquisition of the first data for the first purpose is allowed within the first time period; and stopping providing the first data to the first network element based on the second authorization information includes: stopping providing the first data to the first network element after the first time period.

[0018] Based on the above scheme, the second authorization information is used to indicate the duration for which the first data is allowed to be obtained for the first purpose, and after the first duration, the first data is stopped from being provided to the first network element. This allows the analysis data storage function network element to flexibly manage the first data based on the changed authorization information, thereby further improving the security of the data stored in the ADRF.

[0019] In combination with the first aspect, in certain implementations of the first aspect, the first purpose includes one of the following: model training, analysis and reasoning, obtaining a model, and obtaining analysis and reasoning results.

[0020] In combination with the first aspect, in certain implementations of the first aspect, when the first data is user data, the first purpose is model training or analytical reasoning, and the first authorization information is authorization information that allows the terminal device to provide the first data for the first purpose.

[0021] In combination with the first aspect, in certain implementations of the first aspect, the first authorization information or the second authorization information also includes at least one of the following: allowing access to the first data for a second purpose, time length information for allowing access to the first data, not allowing access to the first data for the first purpose and / or the second purpose, not allowing continued access to the first data for the first purpose and / or the second purpose, and indication information for allowing saving and use of the stored first data after continuing to access the first data, wherein the second purpose is different from the first purpose, and the second purpose includes one of the following: model training, analysis and reasoning, obtaining a model, and obtaining analysis and reasoning results.

[0022] In a second aspect, a communication method is provided, which can be executed by an NWDAF or DCCF network element, or by a module (such as a chip or circuit) of the NWDAF or DCCF network element, or by a logical node, a logical module or software that can implement all or part of the NWDAF or DCCF network element. This application is not limited to this.

[0023] The method includes: obtaining first authorization information corresponding to first data from a terminal device of a data management network element; obtaining the first data when the first authorization information indicates that the first data is allowed to be obtained for a first purpose; sending the first data and the first authorization information to an analysis data storage function network element; wherein the first purpose includes one of the following: model training, analysis reasoning.

[0024] Based on the above scheme, by obtaining the authorization information corresponding to the first data and sending the authorization information to the analysis data storage functional network element, the analysis data storage functional network element can be informed of the authorization information of the user data, thereby strengthening the management capabilities of the data stored therein and improving the security of the user data.

[0025] In combination with the second aspect, in certain implementations of the second aspect, the method also includes: obtaining second authorization information corresponding to the first data from a terminal device of a data management network element; and when the second authorization information is different from the first authorization information, sending the second authorization information to the analysis data storage function network element.

[0026] In combination with the second aspect, in certain implementations of the second aspect, the second authorization information includes, when it is different from the first authorization information: the second authorization information indicates that obtaining the first data for the first purpose is not allowed or is restricted.

[0027] In combination with the second aspect, in some implementations of the second aspect, the second authorization information further includes: a first duration, and the second authorization information is used to indicate that obtaining the first data for the first purpose is allowed within the first duration.

[0028] In combination with the second aspect, in certain implementations of the second aspect, the method further includes: when the second authorization information indicates that acquisition of the first data for the first purpose is not allowed, sending indication information for deleting the first data to the analysis data storage function network element.

[0029] In combination with the second aspect, in certain implementations of the second aspect, the first authorization information or the second authorization information also includes at least one of the following: allowing the first data to be obtained for the second purpose, time length information for allowing the first data to be obtained, not allowing continued acquisition of the first data for the first purpose and / or the second purpose, and indication information for allowing the storage and use of the stored first data after not allowing continued acquisition of the first data, wherein the second purpose is different from the first purpose, and the second purpose includes one of the following: model training, analysis and reasoning, obtaining a model, and obtaining analysis and reasoning results.

[0030] In combination with the second aspect, in certain implementations of the second aspect, a query message is sent to the data management network element, the query message carries the identifier of the terminal device, and the query message is used to query authorization information; authorization information corresponding to the terminal device is received from the data management network element, and the authorization information corresponding to the terminal device includes the first authorization information.

[0031] In combination with the second aspect, in certain implementations of the second aspect, a first terminal device group is determined, the first terminal device group includes the terminal device; a query message is sent to the data management network element, the query message carries an identifier of the first terminal device group, and the query message is used to query authorization information; and authorization information corresponding to the first terminal device group is received from the data management network element, the authorization information corresponding to the first terminal device group includes the first authorization information.

[0032] In a third aspect, a communication method is provided, which can be executed by a first network element, or by a module (such as a chip or circuit) of the first network element, or by a logical node, a logical module or software that can implement all or part of the first network element. This application does not limit this.

[0033] The method includes: determining first indication information, where the first indication information is used to indicate the purpose of requesting data, and sending a first request message to an analysis and storage function network element, where the first request message includes the first indication information.

[0034] Based on the above scheme, by sending the purpose of requesting data to the data storage function network element for analysis, the data storage function network element for analysis can decide whether to provide the first data to the first network element based on the purpose corresponding to the stored data authorization information and the purpose of the requested data, thereby improving the security of data in the system and improving the efficiency of the use of communication resources and computing resources.

[0035] In combination with the third aspect, in certain implementations of the third aspect, first data is received from the analysis data storage function network element, and the first data is sent when the first request message and the first authorization information match, and the first authorization information indicates that the first data is allowed to be obtained for the first purpose.

[0036] Based on the above scheme, by sending the purpose of requesting data to the data storage function network element for analysis, the data storage function network element for analysis can provide the first data to the first network element according to the purpose of the request data and the first purpose indicated by the first authorization information, thereby improving the security of data in the system.

[0037] In combination with the third aspect, in certain implementations of the third aspect, the first indication information of the first request message matches the first authorization information, including: the first purpose is the same as the purpose of the request data.

[0038] In combination with the third aspect, in certain implementations of the third aspect, rejection indication information is received from the analysis data storage function network element, and the rejection indication information is used to indicate a refusal to provide the first data to the first network element. The rejection indication information is sent based on second authorization information, and the second authorization information indicates that obtaining the first data for the first purpose is not allowed or restricted.

[0039] In combination with the third aspect, in certain implementations of the third aspect, the first request message is a subscription message, and a stop subscription message is received from the analysis data storage function network element. The rejection indication information is sent based on the second authorization information, and the second authorization information indicates that obtaining the first data for the first purpose is not allowed or restricted.

[0040] In combination with the third aspect, in certain implementations of the third aspect, the second authorization information also includes a first duration, and the second authorization information is used to indicate that it is allowed to obtain the first data for the first purpose within the first duration, and after the first duration, a rejection indication information or a stop subscription message is received from the analysis data storage function network element.

[0041] In combination with the third aspect, in certain implementations of the third aspect, the first purpose includes one of the following: model training, analysis and reasoning, obtaining a model, and obtaining analysis and reasoning results.

[0042] In combination with the third aspect, in certain implementations of the third aspect, when the first data is user data, the first purpose is model training or analytical reasoning, and the first authorization information is authorization information that allows the terminal device to provide the first data for the first purpose.

[0043] In combination with the third aspect, in certain implementations of the third aspect, the first authorization information or the second authorization information also includes at least one of the following: allowing access to the first data for the second purpose, time length information for allowing access to the first data, not allowing access to the first data for the first purpose and / or the second purpose, not allowing continued access to the first data for the first purpose and / or the second purpose, and indication information for allowing saving and use of the stored first data after not allowing continued access to the first data, wherein the second purpose is different from the first purpose, and the second purpose includes one of the following: model training, analysis and reasoning, obtaining a model, and obtaining analysis and reasoning results.

[0044] In a fourth aspect, a communication device is provided, which includes a transceiver unit and a processing unit. The transceiver unit is used to receive first data and first authorization information corresponding to the first data from a NWDAF or DCCF network element, and the first authorization information indicates that the first data is allowed to be obtained for a first purpose; receive a first request message from a first network element, and the first request message includes first indication information, and the first indication information is used to indicate the purpose of requesting data; the processing unit is used to determine to provide the first data to the first network element based on the first request message and the first authorization information.

[0045] In combination with the fourth aspect, in certain implementations of the fourth aspect, the processing unit is specifically used to determine to provide the first data to the first network element when the first indication information and the first authorization information match.

[0046] In combination with the fourth aspect, in certain implementations of the fourth aspect, when the first indication information of the first request message and the first authorization information match, the first purpose is the same as the purpose of the request data.

[0047] In combination with the fourth aspect, in certain implementations of the fourth aspect, the processing unit is specifically used to not provide the first data to the first network element when the first indication information and the first authorization information do not match.

[0048] In combination with the fourth aspect, in certain implementations of the fourth aspect, the transceiver unit is also used to receive second authorization information corresponding to the first data from the NWDAF or DCCF network element, and the second authorization information indicates that obtaining the first data for the first purpose is not allowed or restricted; the processing unit is also used to stop providing the first data to the first network element based on the second authorization information.

[0049] In combination with the fourth aspect, in certain implementations of the fourth aspect, the transceiver unit is further used to send rejection indication information to the first network element, where the rejection indication information is used to refuse to provide the first data to the first network element.

[0050] In combination with the fourth aspect, in certain implementations of the fourth aspect, the transceiver unit is further configured to send a stop subscription message to the first network element when the first request message is a subscription message.

[0051] In combination with the fourth aspect, in certain implementations of the fourth aspect, the second authorization information also includes a first duration, and the second authorization information is used to indicate that acquisition of the first data for the first purpose is allowed within the first duration; the processing unit is specifically used to stop providing the first data to the first network element after the first duration.

[0052] In combination with the fourth aspect, in certain implementations of the fourth aspect, the first purpose includes one of the following: model training, analysis and reasoning, obtaining a model, and obtaining analysis and reasoning results.

[0053] In combination with the fourth aspect, in certain implementations of the fourth aspect, when the first data is user data, the first purpose is model training or analytical reasoning, and the first authorization information is authorization information that allows the terminal device to provide the first data for the first purpose.

[0054] In combination with the fourth aspect, in certain implementations of the fourth aspect, the first authorization information or the second authorization information also includes at least one of the following: allowing access to the first data for a second purpose, time length information for allowing access to the first data, not allowing access to the first data for the first purpose and / or the second purpose, not allowing continued access to the first data for the first purpose and / or the second purpose, and indication information for allowing saving and use of the stored first data after not allowing continued access to the first data, wherein the second purpose is different from the first purpose, and the second purpose includes one of the following: model training, analysis and reasoning, obtaining a model, and obtaining analysis and reasoning results.

[0055] In a fifth aspect, a communication device is provided, which may include a transceiver unit and a processing unit, the processing unit being used to obtain first authorization information corresponding to first data from a terminal device of a data management network element; the processing unit being further used to obtain the first data when the first authorization information indicates that the first data is allowed to be obtained for a first purpose; the transceiver unit being further used to send the first data and the first authorization information to an analysis data storage function network element; wherein the first purpose includes one of the following: model training, analysis reasoning.

[0056] In combination with the fifth aspect, in certain implementations of the fifth aspect, the processing unit is also used to obtain second authorization information corresponding to the first data from a terminal device of the data management network element; the transceiver unit is also used to send the second authorization information to the analysis data storage function network element when the second authorization information is different from the first authorization information.

[0057] In combination with the fifth aspect, in certain implementations of the fifth aspect, the case where the second authorization information is different from the first authorization information includes: the second authorization information indicates that obtaining the first data for the first purpose is not allowed or is restricted.

[0058] In combination with the fifth aspect, in certain implementations of the fifth aspect, the second authorization information further includes: a first duration, and the second authorization information is used to indicate that acquisition of the first data for the first purpose is allowed within the first duration.

[0059] In combination with the fifth aspect, in certain implementations of the fifth aspect, the transceiver unit is also used to send instruction information for deleting the first data to the analysis data storage function network element when the second authorization information indicates that acquisition of the first data for the first purpose is not allowed.

[0060] In combination with the fifth aspect, in certain implementations of the fifth aspect, the first authorization information or the second authorization information also includes at least one of the following: allowing access to the first data for a second purpose, time length information for allowing access to the first data, not allowing access to the first data for the first purpose and / or the second purpose, not allowing continued access to the first data for the first purpose and / or the second purpose, and indication information for allowing saving and use of the stored first data after not allowing continued access to the first data, wherein the second purpose is different from the first purpose, and the second purpose includes one of the following: model training, analysis and reasoning, obtaining a model, and obtaining analysis and reasoning results.

[0061] In combination with the fifth aspect, in certain implementations of the fifth aspect, the transceiver unit is also used to send a query message to the data management network element, the query message carries the identifier of the terminal device, and the query message is used to query authorization information; and receive authorization information corresponding to the terminal device from the data management network element, the authorization information corresponding to the terminal device includes the first authorization information.

[0062] In combination with the fifth aspect, in certain implementations of the fifth aspect, the processing unit is also used to determine a first terminal device group, which includes the terminal device; the transceiver unit is used to send a query message to the data management network element, which carries an identifier of the first terminal device group, and the query message is used to query authorization information; and receive authorization information corresponding to the first terminal device group from the data management network element, which authorization information corresponding to the first terminal device group includes the first authorization information.

[0063] In the sixth aspect, a communication device is provided, which includes a transceiver unit, and the transceiver unit is used to send a first request message to an analysis and storage functional network element, the first request message including first indication information, and the first indication information is used to indicate the purpose of the requested data; receive first data from the analysis and data storage functional network element, the first data is sent when the first request message and the first authorization information match, and the first authorization information indicates that the first data is allowed to be obtained for the first purpose.

[0064] In combination with the sixth aspect, in certain implementations of the sixth aspect, the first indication information of the first request message matches the first authorization information, including that the first purpose is the same as the purpose of the request data.

[0065] In combination with the sixth aspect, in certain implementations of the sixth aspect, the transceiver unit is also used to receive rejection indication information from the analysis data storage function network element, and the rejection indication information is used to indicate a refusal to provide the first data to the first network element. The rejection indication information is sent based on second authorization information, and the second authorization information indicates that obtaining the first data for the first purpose is not allowed or restricted.

[0066] In combination with the sixth aspect, in certain implementations of the sixth aspect, the first request message is a subscription message, the transceiver unit is also used to receive a stop subscription message from the analysis data storage function network element, and the rejection indication information is sent based on the second authorization information, and the second authorization information indicates that obtaining the first data for the first purpose is not allowed or restricted.

[0067] In combination with the sixth aspect, in certain implementations of the sixth aspect, the second authorization information also includes a first duration, and the second authorization information is used to indicate that the first data is allowed to be obtained for the first purpose within the first duration, and the transceiver unit is also used to receive a rejection indication information or a stop subscription message from the analysis data storage function network element after the first duration.

[0068] In combination with the sixth aspect, in certain implementations of the sixth aspect, the first purpose includes one of the following: model training, analysis and reasoning, obtaining a model, and obtaining analysis and reasoning results.

[0069] In combination with the sixth aspect, in certain implementations of the sixth aspect, when the first data is user data, the first purpose is model training or analytical reasoning, and the first authorization information is authorization information that allows the terminal device to provide the first data for the first purpose.

[0070] In combination with the sixth aspect, in certain implementations of the sixth aspect, the first authorization information or the second authorization information also includes at least one of the following: allowing access to the first data for a second purpose, time length information for allowing access to the first data, not allowing access to the first data for the first purpose and / or the second purpose, not allowing continued access to the first data for the first purpose and / or the second purpose, and indication information for allowing saving and use of the stored first data after not allowing continued access to the first data, wherein the second purpose is different from the first purpose, and the second purpose includes one of the following: model training, analysis and reasoning, obtaining a model, and obtaining analysis and reasoning results.

[0071] In a seventh aspect, a communication device is provided, the device comprising a processor, the processor is coupled to a memory, and can be used to execute instructions in the memory to implement any of the first and second aspects above, and the method in any possible implementation of the first and second aspects. Optionally, the device also includes a memory, and the memory and the processor may be deployed separately or centrally. Optionally, the device also includes a communication interface, and the processor is coupled to the communication interface.

[0072] In one implementation, the communication interface may be a transceiver, or an input / output interface.

[0073] In another implementation, the device is a NWDAF or DCCF network element or an analysis data storage function network element, or a chip configured in the NWDAF or DCCF network element or the analysis data storage function network element, and can also be a logic module or software that can realize all or part of the functions of the NWDAF or DCCF network element or the analysis data storage function network element. When the device is a chip, the communication interface can be an input / output interface, an interface circuit, an output circuit, an input circuit, a pin or a related circuit on the chip or the chip system. The processor can also be embodied as a processing circuit or a logic circuit.

[0074] Optionally, the transceiver may be a transceiver circuit. Optionally, the input / output interface may be an input / output circuit.

[0075] In the specific implementation process, the above-mentioned processor can be one or more chips, the input circuit can be an input pin, the output circuit can be an output pin, and the processing circuit can be a transistor, a gate circuit, a trigger, and various logic circuits. The input signal received by the input circuit can be but not limited to being received and input by the receiver, and the signal output by the output circuit can be but not limited to being output to the transmitter and transmitted by the transmitter, and the input circuit and the output circuit can be the same circuit, which is used as an input circuit and an output circuit at different times. The embodiment of the present application does not limit the specific implementation of the processor and various circuits.

[0076] In an eighth aspect, a communication device is provided, which includes a logic circuit and an input / output interface, wherein the logic circuit is used to couple with the input / output interface and transmit data through the input / output interface to execute any aspect of the first and second aspects above, and a method in any possible implementation of the first and second aspects.

[0077] In one implementation, the device is a NWDAF or DCCF network element or an analysis data storage function network element, or a chip configured in the NWDAF or DCCF network element or the analysis data storage function network element, and can also be a logic module or software that can realize all or part of the functions of the NWDAF or DCCF network element or the analysis data storage function network element. When the device is a chip, the communication interface can be an input / output interface, interface circuit, output circuit, input circuit, pin or related circuit on the chip or chip system. The processor can also be embodied as a processing circuit or a logic circuit.

[0078] In a ninth aspect, the present application provides a chip system, comprising: a processor, the processor being used to execute a computer program or instruction in the memory, so that the chip system implements the method in the above-mentioned first and second aspects and any possible implementation manner of the first and second aspects.

[0079] In the tenth aspect, the present application provides a communication system, including: a NWDAF or DCCF network element and an analysis data storage functional network element, the NWDAF or DCCF network element is used to execute the method in the above-mentioned first aspect and any possible implementation of the first aspect; the analysis data storage functional network element is used to execute the method in the above-mentioned second aspect and any possible implementation of the second aspect.

[0080] In the eleventh aspect, a computer-readable storage medium is provided, which stores a computer program (also referred to as code, or instructions). When the computer-readable storage medium is run on a computer, the computer executes any one of the first and second aspects above, as well as a method in any possible implementation of the first and second aspects.

[0081] In the twelfth aspect, a computer program product is provided, which includes: a computer program (also referred to as code, or instruction), which, when executed, enables a computer to execute any one of the first and second aspects described above, as well as a method in any possible implementation of the first and second aspects.

[0082] The beneficial effects brought about by the seventh to twelfth aspects mentioned above can be referred to the description of the beneficial effects in the first to third aspects, and will not be repeated here. BRIEF DESCRIPTION OF THE DRAWINGS

[0083] Figure 1 It is a schematic diagram of a network architecture applicable to an embodiment of the present application.

[0084] Figure 2 It is a schematic diagram of an application scenario applicable to an embodiment of the present application.

[0085] Figure 3 It is a schematic flow chart of a communication method provided in an embodiment of the present application.

[0086] Figure 4 It is a schematic flow chart of a communication method provided in an embodiment of the present application.

[0087] Figure 5 It is a structural diagram of a communication device provided in an embodiment of the present application.

[0088] Figure 6 It is a structural diagram of another communication device provided in an embodiment of the present application.

[0089] Figure 7 It is a structural diagram of another communication device provided in an embodiment of the present application. DETAILED DESCRIPTION

[0090] The technical solutions in the embodiments of the present application will be described below in conjunction with the accompanying drawings.

[0091] The technical solutions of the embodiments of the present application can be applied to various communication systems, for example, long term evolution (LTE), fifth generation (5G), new radio (NR), Internet of things (IoT), wireless fidelity (WiFi), wireless communications related to the third generation partnership project (3GPP), or other wireless communications that may appear in the future, such as the sixth generation (6G) communication system, etc., and the present application is not limited to this.

[0092] The technical solution provided in the present application can also be applied to machine type communication (MTC), device-to-device (D2D) network, machine-to-machine (M2M) network, Internet of things (IoT) network or other networks. Among them, IoT network can include vehicle networking, for example. Among them, the communication methods in the vehicle networking system are collectively referred to as vehicle to other devices (vehicle to X, V2X, X can represent anything), for example, the V2X can include: vehicle to vehicle (V2V) communication, vehicle to infrastructure (V2I) communication, vehicle to pedestrian (V2P) communication or vehicle to network (V2N) communication, etc.

[0093] Figure 1 Schematic diagram of a network architecture applicable to the embodiment of the present application. Figure 1 As shown, the network architecture takes the 5G system (the 5th generation system, 5GS) as an example.

[0094] The network architecture can be divided into two parts: access network and core network. The network architecture may include but is not limited to: unified data management (UDM), network exposure function (NEF), network storage function (NF repository function, NRF), policy control function (PCF), application function (AF), access and mobility management function (AMF), session management function (SMF), user equipment (UE), wireless access network equipment, user plane function (UPF), data network (DN). Among them, DN can be the Internet; UDM, NEF, NRF, PCF, AF, AMF, SMF, UPF are network elements in the core network. Figure 1 Taking the 5G system as an example, the core network can be called the 5G core network (5G core network, 5GC or 5GCN).

[0095] Below Figure 1 A brief introduction is given to each network element shown in FIG.

[0096] 1. User equipment (UE): can be called terminal equipment, access terminal, user unit, user station, mobile station, mobile station, remote station, remote terminal, mobile device, user terminal, terminal, wireless communication equipment, user agent or user device.

[0097] The terminal device may be a device that provides voice / data to users, for example, a handheld device or a vehicle-mounted device with a wireless connection function. At present, some examples of terminals are: mobile phones, tablet computers, laptop computers, PDAs, mobile internet devices (MID), virtual reality (VR) devices, augmented reality (AR) devices, wireless terminals in industrial control, wireless terminals in self driving, wireless terminals in remote medical surgery, wireless terminals in smart grids, wireless terminals in transportation safety, wireless terminals in smart cities, wireless terminals in smart homes, cellular phones, cordless phones, session initiation protocol (SIP) phones, wireless local loop (WLL) stations, personal digital assistants (PDAs), handheld devices with wireless communication functions, computing devices or other processing devices connected to wireless modems, terminal devices in 5G networks or future evolved public land mobile communication networks (public land mobile The embodiments of the present application do not limit this.

[0098] As an example but not limitation, in the embodiments of the present application, the terminal device may also be a wearable device. Wearable devices may also be referred to as wearable smart devices, which are a general term for wearable devices that are intelligently designed and developed using wearable technology for daily wear, such as glasses, gloves, watches, clothing, and shoes. A wearable device is a portable device that is worn directly on the body or integrated into the user's clothes or accessories. Wearable devices are not only hardware devices, but also powerful functions achieved through software support, data interaction, and cloud interaction. Broadly speaking, wearable smart devices include full-featured, large-sized, and fully or partially independent of smartphones, such as smart watches or smart glasses, as well as devices that only focus on a certain type of application function and need to be used in conjunction with other devices such as smartphones, such as various types of smart bracelets and smart jewelry for vital sign monitoring.

[0099] In addition, in the embodiments of the present application, the terminal device can also be a terminal device in an IoT system. IoT is an important part of the future development of information technology. Its main technical feature is to connect objects to the network through communication technology, thereby realizing an intelligent network that interconnects people and machines and things.

[0100] It should be noted that the terminal device and the access network device can communicate with each other using some air interface technology (such as new radio (NR) or LTE technology, etc.). The terminal devices can also communicate with each other using some air interface technology (such as NR or LTE technology, etc.).

[0101] In the embodiment of the present application, the device for realizing the function of the terminal device can be the terminal device, or it can be a device that can support the terminal device to realize the function, such as a chip system or a chip, which can be installed in the terminal device. In the embodiment of the present application, the chip system can be composed of a chip, or it can include a chip and other discrete devices.

[0102] 2. (Radio) access network (R)AN): It can provide authorized users in a specific area with the function of accessing the communication network. It can include wireless network equipment in the 3rd generation partnership project (3GPP) network and access points in non-3GPP networks.

[0103] RAN can manage radio resources, provide access services for user equipment, and forward control signals and user equipment data between user equipment and the core network. RAN can also be understood as a base station in a traditional network.

[0104] Exemplarily, the access network device in the embodiment of the present application can be any communication device with wireless transceiver function for communicating with user equipment. The access network device includes but is not limited to: evolved NodeB (eNB), baseband unit (BBU), access point (AP) in wireless fidelity (WIFI) system, wireless relay node, wireless backhaul node, transmission point (TP) or transmission and reception point (TRP), etc., and can also be a gNB in ​​5G, such as NR, system, or a transmission point (TRP or TP), one or a group of antenna panels (including multiple antenna panels) of a base station in a 5G system, or a network node constituting a gNB or a transmission point, such as a baseband unit (BBU), or a distributed unit (DU), etc.

[0105] In some deployments, the gNB may include a centralized unit (CU) and a DU. The gNB may also include an active antenna unit (AAU). The CU implements some functions of the gNB, and the DU implements some functions of the gNB. For example, the CU is responsible for processing non-real-time protocols and services, and implementing the functions of the radio resource control (RRC) and packet data convergence protocol (PDCP) layers. The DU is responsible for processing physical layer protocols and real-time services, and implementing the functions of the radio link control (RLC) layer, the media access control (MAC) layer, and the physical (PHY) layer. The AAU implements some physical layer processing functions, radio frequency processing, and related functions of active antennas. Since the information of the RRC layer will eventually become the information of the PHY layer, or be converted from the information of the PHY layer, under this architecture, high-level signaling, such as RRC layer signaling, can also be considered to be sent by the DU, or by the DU+AAU. It can be understood that the access network device can be a device including one or more of a CU node, a DU node, and an AAU node. In addition, the CU may be classified as an access network device in a radio access network (RAN), or may be classified as an access network device in a core network (CN), which is not limited in the present application.

[0106] In different systems, CU (or CU-CP and CU-UP), DU or RU may also have different names, but those skilled in the art can understand their meanings. For example, in an open radio access network (O-RAN) system, CU may also be referred to as an open-central unit (O-CU); DU may also be referred to as an open-distributed unit (O-DU); CU-CP may also be referred to as O-CU-CP, CU-UP may also be referred to as O-CU-UP, and RU may also be referred to as O-RU. For the convenience of description, this application takes CU, CU-CP, CU-UP, DU and RU as examples for description. Any of the CU (or CU-CP, CU-UP), DU and RU in this application may be implemented by a software module, a hardware module, or a combination of a software module and a hardware module.

[0107] 3. User plane function (UPF) network element: used for packet routing and forwarding and quality of service (QoS) processing of user plane data. User data can be accessed to the data network (DN) through this network element. In the embodiment of the present application, it can be used to implement the functions of the user plane network element.

[0108] 4. Data network (DN): A network used to transmit data, such as operator service networks, the Internet, and third-party service networks.

[0109] 5. Authentication server function (AUSF) network element: mainly used for user authentication, etc.

[0110] 6. Access and mobility management function (AMF) network element: It is mainly used for mobility management and access management, etc. It can be used to implement other functions of the mobility management entity (MME) except session management, such as access authorization / authentication.

[0111] 7. Session management function (SMF) network element: mainly used for session management, allocation and management of Internet protocol (IP) addresses of terminal devices, selection and management of user plane functions, endpoints of policy control and charging function interfaces, and downlink data notification.

[0112] 8. Policy control function (PCF) network element: a unified policy framework used to guide network behavior and provide policy rule information to network elements (such as AMF, SMF network elements, etc.) or terminal devices.

[0113] 9. Network repository function (NRF) network element: used to store description information of network function entities and the services they provide, and to support functions such as service discovery and network element entity discovery.

[0114] 10. Network exposure function (NEF) network element: used to securely open the services and capabilities provided by the Third Generation Partnership Project (3GPP) network function to the outside world.

[0115] 11. Unified data management (UDM) network element: used for unified data management, 5G user data management, processing user identification, access authentication, registration, or mobility management, etc.

[0116] 12. Application function (AF) network element: used for data routing affected by applications, accessing network open function network elements, interacting with the policy framework for policy control, etc.

[0117] 13. Network data analytics function (NWDAF): NWDAF can be divided into analytics logical function (AnLF) and model training logical function (MTLF). AnLF can be used to collect network data (for example, network performance, service load in a specific area, user service experience, etc.) and user data (for example, user connection management, mobility management, session management, accessed services, etc.) as input data, and obtain analysis results based on inference analysis of the input data. For example, the analysis results include statistical analysis of historical data or prediction results of future data. MTLF can be used for model training and provide trained models to AnLF.

[0118] In the embodiment of the present application, the NWDAF may be a separate network element or may be co-located with other network elements. For example, the NWDAF network element may be co-located with the AMF or with the SMF.

[0119] It should be understood that the network elements included in the communication system listed above are merely exemplary and the present application is not limited thereto.

[0120] In the above network architecture, the N2 interface is the interface between the RAN and AMF network elements, used for sending radio parameters, non-access stratum (NAS) signaling, etc.; the N3 interface is the interface between the RAN and UPF network elements, used for transmitting user plane data, etc.; the N4 interface is the interface between the SMF network element and the UPF network element, used for transmitting information such as service policies, tunnel identification information of the N3 connection, data cache indication information, and downlink data notification messages. The N6 interface is the interface between the DN network element and the UPF network element, used for transmitting user plane data, etc.

[0121] It should be understood that in the above network architecture, network elements can exchange information through service interfaces. For example, the NWDAF network element can collect data generated by terminals on network elements from other network elements (such as AMF, SMF, etc.) through service interfaces (such as Namf, Nsmf, etc.) provided by these network elements, and provide data analysis results (Analytics), models, also known as machine learning models, data (data), etc. to other network elements (such as AMF, PCF, etc.) through the Nnwdaf interface.

[0122] It should be understood that the above-mentioned network architecture applied to the embodiments of the present application is merely an example of a network architecture described from the perspective of a traditional point-to-point architecture and a service-oriented architecture. The network architecture applicable to the embodiments of the present application is not limited to this. Any network architecture that can realize the functions of the above-mentioned network elements is applicable to the embodiments of the present application.

[0123] It should be noted that the names of the various network elements and interfaces in this application are only examples, and this application does not exclude the possibility that the various network elements may be named other names in the future, or that the functions of the various network elements may be merged. With the evolution of technology, any device or network element that can realize the functions of the above-mentioned network elements is within the protection scope of this application. Secondly, the above-mentioned network elements may also be referred to as entities, equipment, devices or modules, etc., which are not specifically limited in this application. Moreover, in this application, for the sake of ease of understanding and explanation, the description of "network element" is omitted in some descriptions. For example, the NWDAF network element is referred to as NWDAF. In this case, the "NWDAF" should be understood as the NWDAF network element. Hereinafter, the description of the same or similar situations will be omitted.

[0124] In addition, the above network architecture may further include a data collection coordination function (DCCF) network element and an analytics data repository function (ADRF) network element.

[0125] Among them, DCCF can be used to cooperate with NWDAF to realize the coordination function of data collection, reduce repeated data collection, and realize data formatting processing. Specifically, Figure 2 As shown, NWDAF can request DCCF to collect data of certain network elements through the Ndccf interface. For example, DCCF can understand the specific network elements that are serving the UE through the service interfaces provided by NRF, UDM, binding support function (BSF), etc., and then initiate data collection requests to these network elements. After the collection is completed, DCCF can directly feedback the data to NWDAF, or feedback to NWDAF through MFAF.

[0126] ADRF can be used to store data collected by the network (such as NWDAF or DCCF) and the models and analysis results trained by NWDAF, as well as to provide services for retrieving historical data (from each network element) and analysis results (from NWDAF). Each network element can directly store and retrieve historical data (analysis results) through the Nadrf interface of ADRF, or store and retrieve through DCCF or MFAF. In addition, ADRF can also subscribe to the data notification service from DCCF so that DCCF will automatically feedback to ADRF after receiving qualified data.

[0127] Before collecting user-related data, NWDAF or DCCF needs to query the user's authorization information on the UDM for the use of personal data to determine whether to perform subsequent processing, such as model training or analytical reasoning based on the data. Furthermore, NWDAF or DCCF stores the collected data or information, as well as the data generated based on the aforementioned collected data or information (such as model data and analysis result data) in ADRF for use by other functional network elements in the network. Therefore, how to flexibly and securely manage the data stored in ADRF to improve the security of user data is an issue that needs to be considered.

[0128] In view of this, the present application provides a communication method and a communication device, which can improve the reliability of data management by ADRF network elements, thereby improving the security of data in the network and avoiding data security issues caused by data being used beyond the authorized scope. In addition, by avoiding the waste of communication and computing resources caused by data being used beyond the authorized scope, the resource utilization efficiency in the system is further improved.

[0129] In order to facilitate understanding of the embodiments of the present application, the following explanations are made.

[0130] First, in the various embodiments of the present application, unless otherwise specified or logically conflicting, the terms and / or descriptions between the different embodiments are consistent and can be referenced to each other, and the technical features in the different embodiments can be combined to form new embodiments according to their inherent logical relationships.

[0131] Second, the first, second and various numerical numbers (e.g., "#1", "#2", etc.) shown in this application are only for convenience of description and are used to distinguish objects, and are not used to limit the scope of the embodiments of the present application. For example, to distinguish different terminal devices, etc., rather than to describe a specific order or sequence. It should be understood that the objects described in this way can be interchangeable where appropriate so as to be able to describe solutions other than the embodiments of the present application.

[0132] Third, in the embodiments of the present application, the words "of", "corresponding, relevant", "corresponding" and "associate" can sometimes be used interchangeably. It should be pointed out that when the distinction between them is not emphasized, the meanings they intend to express are consistent.

[0133] Fourth, in the embodiments of the present application, "indication" may include direct indication and indirect indication, and may also include explicit indication and implicit indication. The information indicated by a certain information (the indication information described below) is called information to be indicated. In the specific implementation process, there are many ways to indicate the information to be indicated, such as but not limited to directly indicating the information to be indicated, indicating the information to be indicated itself, or indicating the index of the information to be indicated. Indicating the information to be indicated may also be indirectly indicated by indicating other information, wherein there is an association between the other information and the information to be indicated; indicating the information to be indicated may also be indicating only a part of the information to be indicated, while the other parts of the information to be indicated are known or agreed in advance. The present application does not limit the specific method of indication. It can be understood that for the sender of the indication information, the indication information is used to indicate the information to be indicated, and for the receiver of the indication information, the indication information is used to determine the information to be indicated.

[0134] Figure 3 This is a schematic flow chart of a communication method provided in an embodiment of the present application. The method may include at least the following steps.

[0135] S310, the NWDAF or DCCF network element sends first data and first authorization information corresponding to the first data to the analysis data storage function network element. Correspondingly, the analysis data storage function network element receives the first data and first authorization information corresponding to the first data from the NWDAF or DCCF network element.

[0136] Among them, the first data can be data corresponding to the terminal device collected or coordinated by the NWDAF or DCCF network element (also referred to as user data). The data corresponding to the terminal device may include data from the terminal device, or data generated by the terminal device, and data related to the terminal device. For example, the data corresponding to the terminal device includes the communication information, connection information, mobility information, session management information, and information about the accessed service of the terminal device, such as service quality information of the service, observed service experience information, abnormal terminal behavior information, etc. The first data may also include at least one of a model trained by the NWDAF or DCCF network element based on user data and an analysis result obtained based on analysis and reasoning of user data.

[0137] The first authorization information can be used to analyze the data storage function network element to manage the first data. That is, the analysis data storage function network element receives and stores the first data from the NWDAF or DCCF network element and the first authorization information for managing the first data, and manages the first data based on the first authorization information, such as storing, sending or deleting the first data.

[0138] The first authorization information may indicate permission to obtain the first data for the first purpose. The first purpose may be at least one of the following: model training, analysis and reasoning, obtaining a model, obtaining analysis and reasoning results. In other words, the first authorization information may indicate the data usage purpose of the first data, and the data usage purpose is any one or more of the above. Exemplarily, permission to obtain the first data for the first purpose includes: obtaining user data for model training, obtaining model data for obtaining a model, etc.

[0139] When the corresponding first data is user data, the first authorization information may also be referred to as user authorization, user authorization status, user authorization information, user consent or other names; when the corresponding first data is model data or analysis result data, the first authorization information may also be referred to as data authorization information or other names. A model may also be referred to as a machine learning model, or an artificial intelligence (AI) model or other names; and in this application, obtaining data (e.g., first data) may also be referred to as collecting data, which is not limited in this application.

[0140] Wherein, in the case where the first data is user data, the first purpose may be at least one of model training and / or analytical reasoning. In this case, the first authorization information is authorization information that allows the terminal device to provide the first data for the first purpose.

[0141] Optionally, before the NWDAF or DCCF network element sends the first data and the first authorization information corresponding to the first data to the analysis data storage function network element, the method may further include: the NWDAF or DCCF network element obtains the first data.

[0142] Exemplarily, the NWDAF or DCCF network element may obtain the first data according to the first authorization information, that is, when the first authorization information indicates that the first data is allowed to be obtained for the first purpose, the NWDAF or DCCF obtains the first data according to the first authorization information.

[0143] Optionally, the first authorization information may also include duration information for allowing the first data to be obtained for the first purpose. For example, the duration information may include the start time and end time for obtaining the first data, or the time period (time range) for obtaining the first data. In the case where the first authorization information includes the duration information, the NWDAF or DCCF may obtain the first data within the duration indicated by the duration information (recorded as the first duration). For example, the first authorization information indicates that the first data is allowed to be obtained for the purpose of model training within duration #1 (an example of the first duration), and / or indicates that the first data is allowed to be obtained for the purpose of analytical reasoning within duration #2 (an example of the first duration).

[0144] Optionally, when the NWDAF or DCCF network element needs to use the first data for model training and / or analytical reasoning, and the first authorization information indicates that the data usage purpose of the first data includes model training and / or analytical reasoning, the NWDAF or DCCF network element may also use the first data for model training and / or analytical reasoning. It is understood that in this case, the first data sent by the NWDAF or DCCF network element to the analysis data management network element may include at least one of the collected user data, a model obtained by training based on the user data, and an analysis result obtained by analytical reasoning based on the user data.

[0145] And, in a case where the first authorization information includes the first duration, the NWDAF or DCCF network element uses the first data for model training and / or analytical reasoning within the first duration.

[0146] Optionally, before the NWDAF or DCCF network element sends the first data and the first authorization information corresponding to the first data to the analysis data storage function network element, the NWDAF or DCCF network element obtains the first authorization information corresponding to the first data from the data management network element.

[0147] In a possible implementation, when the first data is user data of the terminal device, the NWDAF or DCCF network element queries the first authorization information of the terminal device from the data management network element.

[0148] Exemplarily, the NWDAF or DCCF network element sends a query message to the data management network element, and the query message is used to query the authorization information for performing the first operation on the data corresponding to the terminal device, or the query message is used to query the authorization information corresponding to the terminal device. The query message may carry the identifier of the terminal device; accordingly, the data management network element sends the first authorization information or the authorization information corresponding to the terminal device to the NWDAF or DCCF network element, and the authorization information corresponding to the terminal device includes the first authorization information. For example, the authorization information corresponding to the terminal device includes authorization information for collecting user data for model training, authorization information for collecting user data for analysis results, etc.

[0149] In another possible implementation, the NWDAF or DCCF network element queries the data management network element for authorization information corresponding to the first terminal device group; and determines the first authorization information according to the authorization information corresponding to the first terminal device group. The first terminal device group may include the terminal device, or the first terminal device group is the terminal device group to which the terminal device belongs.

[0150] Exemplarily, the NWDAF or DCCF network element determines a first terminal device group, for example, a correspondence between a terminal device group and a terminal device may be preconfigured in the NWDAF or DCCF network element, and the terminal device group includes the first terminal device group; the NWDAF or DCCF network element determines the first terminal device group based on an identifier of the terminal device and the correspondence. The NWDAF or DCCF network element obtains authorization information corresponding to the terminal device group, for example, the NWDAF or DCCF network element sends a query message to the data management network element, the query message is used to query the authorization information corresponding to the first terminal device group, and the query message may carry the identifier of the first terminal device group; accordingly, the data management network element sends the authorization information corresponding to the first terminal device group to the NWDAF or DCCF network element, and the authorization information corresponding to the first terminal device group includes the first authorization information.

[0151] That is, the authorization information corresponding to the terminal device group to which the terminal device belongs can be applicable to the terminal devices in the terminal device group, or in other words, the authorization information of the terminal devices in the terminal device group is the same.

[0152] In addition, when the authorization information corresponding to the first terminal device group is stored in the NWDAF or DCCF network element, if the NWDAF or DCCF network element determines that the terminal device belongs to the first terminal device group, the NWDAF or DCCF network element can determine that the authorization information corresponding to the first terminal device group includes the first authorization information.

[0153] In one possible implementation, when the first data is model data or analysis result data generated based on user data, the first authorization information generated or determined by the NWDAF or DCCF network element can specifically be generated or determined based on the model or analysis result characteristics, or can be generated or determined based on the authorization status of the user data by the terminal device.

[0154] S320: The first network element sends a first request message to the analysis data storage function network element. Correspondingly, the analysis data storage function network element receives the first request message from the first network element.

[0155] The first network element may be a consumer network function (consumer NF) network element, that is, other functional network elements in the network. For example, the first network element may be other network elements having similar functions to the NWDAF or DCCF, such as other NWDAFs or DCCFs.

[0156] The first request message may be used to request the acquisition of the first data. Exemplarily, the first request message may be a request message, a subscription message, etc., and the specific message form is not limited. The first request message includes first indication information, and the first indication information is used to indicate the purpose of the requested data. For example, the purpose of the requested data may include model training and / or analytical reasoning.

[0157] The request data mentioned above can also be understood as the purpose of collecting data or the purpose of obtaining data, that is, the purpose of the first network element requesting the analysis data storage function network element to collect the first data.

[0158] Optionally, the first request message may also carry other information (also referred to as filtering conditions) for limiting usage conditions of the first data. For example, the filtering conditions may include the usage duration of the first data.

[0159] S330: Analyze the data storage function network element according to the first request message and the first authorization information, and determine to provide the first data to the first network element.

[0160] Exemplarily, when it is determined that the first request message (the first indication information) matches the first authorization information, it is determined to provide the first data to the first network element. The first request message and the first authorization information match may be a match between the first purpose and the purpose of the request data.

[0161] The first purpose matches the purpose of the request data, which may include: the first purpose includes the purpose of the request data, or the first purpose is the same as the purpose of the request data.

[0162] For example, the first purpose and the purpose of the request data are both model training and / or analytical reasoning, or the first purpose includes model training and analytical reasoning, and the purpose of the request data is model training or analytical reasoning. In a specific implementation, when the first purpose is model training, it can be represented by the number 1; when the purpose of the request data is also model training, the first indication information is also the number 1, and the same numbers indicate that the first indication information and the first authorization information match successfully. There are many specific implementation methods, which are not limited here. The match is successful by having the ADRF network element confirm that the first purpose in the first authorization information and the purpose of the request data in the first indication information are the same, or that the first purpose includes the purpose of the request data.

[0163] Optionally, when the first authorization information includes the first duration, the first request message and the first authorization information are matched so that the first request message carries the usage duration of the first data, and the usage duration of the first data is less than or equal to the first duration.

[0164] For example, the first authorization information indicates that user data is allowed to be obtained for the purpose of model training within duration #1. If the first indication information indicates model training, and the first request message includes duration #2 for model training, and duration #2 is less than or equal to duration #1, the analysis data storage function network element determines that the first request message matches the first authorization information.

[0165] Optionally, the method further includes: when the first request message and the first authorization information do not match, not providing the first data to the first network element.

[0166] For example, the first purpose is model training, and the purpose of the requested data is analytical reasoning, then the analysis data storage function network element determines not to provide the first data to the first network element.

[0167] Optionally, when the first authorization information includes a first duration, the mismatch between the first request message and the first authorization information may be that the first request message does not carry the usage duration of the first data, or that the first request message carries the usage duration of the first data and the usage duration of the first data is greater than the first duration.

[0168] Optionally, the method may further include: the data analysis function network element stops providing the first data to the first network element according to the first authorization information.

[0169] Exemplarily, when the first authorization information includes a first duration allowing acquisition of the first data for the first purpose, after the first duration, the analysis data storage function network element stops providing the first data to the first network element.

[0170] Based on the above scheme, by indicating the purpose of requesting data and the first purpose indicated by the first authorization information, it is determined to provide the first data to the first network element. Avoid sending all possible corresponding data only based on the request of the first network element, thereby improving the security of the data stored inside the ADRF. In addition, by increasing the basis for sending data and avoiding possible data communications and operations that exceed the scope of authorization, the efficiency of communication resources and computing resources in the system is improved.

[0171] Optionally, the method further comprises:

[0172] S340, the NWDAF or DCCF network element sends the second authorization information corresponding to the first data to the analysis data storage function network element. Correspondingly, the analysis data storage function network element receives the second authorization information corresponding to the first data from the NWDAF or DCCF network element.

[0173] The second authorization information is different from the first authorization information. The second authorization information is described below with reference to different examples.

[0174] In example one, the second authorization information may indicate that obtaining the first data for the first purpose is not allowed or is restricted.

[0175] For example, when the first data is user data and the first authorization information indicates that the user data is allowed to be obtained for model training and / or analytical reasoning, the second authorization information may indicate that the user data is not allowed to be obtained for model training and / or analytical reasoning.

[0176] For another example, when the first data is a model obtained by model training and / or an analysis result obtained by analytical reasoning, and the first authorization information indicates that access to the first data is allowed for obtaining the model and / or obtaining the analysis result, the second authorization information may indicate that access to the first data is limited to obtaining the model and / or obtaining the analysis result.

[0177] Example 2: The second authorization information indicates that the first data is allowed to be obtained for the first purpose, and the duration for which the first data is allowed to be obtained for the first purpose is a second duration, and the second duration is different from the first duration.

[0178] That is, the duration of the first authorization information indicating that the first data is allowed to be obtained for the first purpose is different from the duration of the second authorization information indicating that the first data is allowed to be obtained for the first purpose. For example, the first authorization information indicates that user data is obtained for model training and / or analytical reasoning within duration #1 (an example of the first duration), and the second authorization information indicates that user data is obtained for model training and / or analytical reasoning within duration #2 (an example of the second duration), and duration #2 may be less than duration #1.

[0179] Example 3: The second authorization information indicates permission to obtain the first data for a second purpose. The second purpose is different from the first purpose. The second purpose may include: the first purpose may be at least one of the following items: model training, analysis and reasoning, obtaining a model, and obtaining analysis and reasoning results.

[0180] The first purpose and the second purpose may be different in that: the first purpose is at least one of model training, analysis and reasoning, acquiring a model, and acquiring analysis and reasoning results; the second purpose may be at least one of model training, analysis and reasoning, acquiring a model, and acquiring analysis and reasoning results; the first purpose and the second purpose are completely or partially different; or, the first purpose includes the second purpose; or, the second purpose includes the first purpose.

[0181] For example, the first authorization information indicates that user data is obtained for one of model training and analytical reasoning, and the second authorization information indicates that user data is obtained for the other of model training and analytical reasoning. Alternatively, the first authorization information indicates that user data is obtained for model training and analytical reasoning, and the second authorization information indicates that user data is obtained for one of model training and analytical reasoning, or vice versa.

[0182] Optionally, the second authorization information may further include duration information for allowing the first data to be obtained for the second purpose. The duration indicated by the duration information may be less than or equal to the first duration.

[0183] Example four, the second authorization information indicates that it is not allowed to continue to obtain the first data for the first purpose and / or the second purpose, or, when the first purpose includes two or more of model training, analysis and reasoning, obtaining a model, and obtaining analysis and reasoning results, it indicates that it is not allowed to continue to obtain the first data for the first purpose and / or the second purpose.

[0184] That is, when the first authorization information indicates that it is allowed to obtain user data for model training and / or analytical reasoning, the second authorization information may indicate that it is not allowed to obtain new user data for model training and / or analytical reasoning, or in other words, it is not allowed to continue to obtain user data.

[0185] Optionally, when the second authorization information may also indicate that further acquisition of the first data for the first purpose (or part of the first purpose) is not allowed, the indication information of allowing the already stored first data to be saved and used is allowed.

[0186] For example, when the second authorization information includes information #1 (an example of the indication information #1), it may indicate that continued acquisition of the first data for the first purpose and / or the second purpose is not allowed, and that continued acquisition of the first data may be allowed before saving and using the stored first data. Optionally, when the first authorization information does not include the information #1, it may indicate that continued acquisition of the first data is not allowed but saving and using the stored first data is not allowed; or, when the flag bit of the information #1 is "1", it indicates that continued acquisition of the first data is not allowed but saving and using the stored first data is allowed. Optionally, when the flag bit of the information #1 is "0", it indicates that continued acquisition of the first data is not allowed but saving and using the stored first data is not allowed.

[0187] Optionally, the second authorization information may also indicate whether to allow the model and / or analysis result obtained based on the first data to be saved and used when the first data is not allowed to continue to be obtained for the first purpose (or part of the first purpose). For example, after the terminal device refuses to continue to provide user data for model training, whether to allow the model obtained based on the previously obtained user data to be saved and used.

[0188] The second authorization information may come from a data management network element.

[0189] For example, the NWDAF or DCCF network element subscribes to the change information of the first authorization information from the data management network element. That is, when the first authorization information changes, the data management network element can actively send the changed first authorization information to the first network element. The changed first authorization information is the second authorization information.

[0190] Optionally, the authorization information (e.g., first authorization information and / or second authorization information) sent by the NWDAF or DCCF to the analysis data function network element described above may also be information generated (determined) by the NWDAF or DCCF based on the authorization information from the data management network element. For example, the NWDAF or DCCF network element may send all or part of the authorization information from the data management network element to the analysis data storage function network element. For example, when the authorization information from the data management network element includes duration information, the NWDAF or DCCF network element may not send the duration information to the analysis data function network element. For another example, the authorization for the preservation and use of the model and / or analysis results may be generated by the NWDAF or DCCF network element.

[0191] S350: The data storage function network element analyzes and stops providing the first data to the first network element according to the second authorization information.

[0192] In one example, when the second authorization information indicates that the first data is not allowed to be obtained for the first purpose, the analysis data storage function network element stops providing the first data to the first network element according to the second authorization information.

[0193] In the case where the second authorization information indicates that acquisition of the first data for the first purpose is not allowed, the analysis data storage functional network element may also delete the first data, that is, the analysis data storage functional network element stops providing the first data to the first network element after deleting the first data, for example, it may stop providing the first data by sending an indication message to indicate that the requested data does not exist.

[0194] In another example, when the second authorization information includes duration information allowing acquisition of the first data for the first purpose and / or the second purpose, the analysis data storage function network element stops providing the first data to the first network element after the duration indicated by the duration information.

[0195] Similarly, after the duration indicated by the duration information, the analysis data management network element may also delete the first data, that is, after deleting the first data, stop providing the first data to the first network element.

[0196] In another example, when it is determined that the second authorization information does not match the first request message, the analysis data storage function network element stops providing the first data to the first network element.

[0197] For example, when the second authorization information indicates that the first data can be obtained for a second purpose, and the second purpose does not have an intersection with the first purpose (the first purpose is the same as the purpose of the requested data), the analysis data storage function network element can stop providing the first data to the first network element.

[0198] The analysis data storage function network element may stop providing the first data to the first network element in the following manner.

[0199] Method 1: The analysis data storage function network element may send a rejection indication message to the first network element, where the rejection indication message is used to indicate a rejection of providing the first data to the first network element.

[0200] In a second method, the analysis data storage function network element may send a message in response to the request message to the first network element, the message indicating that the first data is refused to be provided to the first network element. In other words, the analysis data storage function network element refuses the request message of the first network element.

[0201] Method three: when the first request message is a subscription message, the analysis data storage function network element sends a stop subscription message to the first network element.

[0202] The rejection indication information and / or the subscription stop message may also carry the reason for stopping providing the first data, such as deleting the data or the purpose of requesting the data does not match the first purpose.

[0203] Based on the above scheme, when the authorization information corresponding to the first data changes, the changed authorization information is provided to the analysis data storage functional network element. The analysis data storage functional network element can flexibly manage the first data based on the changed authorization information, thereby further improving the security of the data stored inside the ADRF.

[0204] The above is that the analysis data storage function network element autonomously manages and stops providing the first data to the first network element according to the second authorization information. Optionally, the analysis data storage function network element can also stop providing the first data to the first network element according to the instruction information from NWDAF or DCCF.

[0205] Exemplarily, when NWDAF or DCCF determines that the second authorization information indicates that acquisition of the first data for the first purpose is not allowed, the indication information is sent to the analysis data storage function network element, instructing to stop providing the first data to the first network element; or, the first indication information indicates to delete the first data; the analysis data storage function network element stops providing the first data to the first network element according to the indication information.

[0206] Alternatively, when the second authorization information includes a second duration allowing acquisition of the first data for the first purpose, after the second duration, the NWDAF or DCCF sends an indication message to the analysis data storage function network element, instructing to stop providing the first data to the first network element, or to delete the first data; the analysis data storage function network element stops providing the first data to the first network element according to the indication message.

[0207] In the scheme of the embodiment of the present application, the communication system's ability to manage data stored in the analysis data storage functional network element is enhanced through indication information from NWDAF or DCCF. By providing authorization information corresponding to the first data to the analysis data storage functional network element, the analysis data storage functional network element can manage the data stored inside the analysis data storage functional network element based on the authorization information. For example, by determining whether the purpose of the request data from the first network element matches the purpose of obtaining the first data authorized by the authorization information, it is determined whether to provide the first data to the first network element, thereby improving the security of the data stored inside the analysis data storage functional network element. Secondly, in the event that the authorization information changes, the changed authorization information can also be provided to the analysis data storage functional network element, so that the analysis data storage functional network element can flexibly manage the data stored inside the analysis data storage functional network element based on the changed authorization information, further improving the security of the data stored inside the analysis data storage functional network element.

[0208] Figure 4 A schematic flow chart of a communication method 400 provided by the present application is shown. The method 400 describes the communication method provided by the present application in detail in combination with a specific network element. The method may include the following steps.

[0209] S401, NWDAF#1 / DCCF#1 queries authorization information #1 (an example of first authorization information) from UDM (an example of data management network element).

[0210] The authorization information #1 may refer to the description of the first authorization information in S310.

[0211] The specific manner in which NWDAF#1 / DCCF#1 queries authorization information #1 from UDM may refer to the description in S310.

[0212] S402, NWDAF#1 / DCCF#1 subscribes to the change information of authorization information #1 from UDM.

[0213] That is, when the authorization information #1 is changed (updated), the UDM sends the changed authorization information #1 (recorded as authorization information #2) to the NWDAF / DCCF.

[0214] The authorization information #2 refers to the description of the second authorization information in S340.

[0215] In the case where the authorization information #1 indicates permission to obtain the first data for the first purpose, the method further includes:

[0216] S403, NWDAF#1 / DCCF#1 collects data corresponding to UE#1 from UE#1 or other NF or UE#1.

[0217] The data corresponding to UE#1 may refer to the description in S310.

[0218] Optionally, S404, NWDAF#1 / DCCF#1 performs model training and / or analytical reasoning based on the data corresponding to UE#1.

[0219] S405, NWDAF#1 / DCCF#1 sends data#1 (an example of first data) and authorization information#1 to ADRF. Correspondingly, ADRF receives the data#1 and authorization information#1 from NWDAF#1 / DCCF#1.

[0220] The data #1 may include the collected data corresponding to UE #1, and a model and / or analysis result obtained based on the data corresponding to UE #1.

[0221] That is, NWDAF#1 / DCCF#1 stores data#1 and authorization information#1 corresponding to data#1 in ADRF.

[0222] S406, NWDAF#2 / DCCF#2 (an example of the first network element) sends a request message #1 (an example of the first request message) to ADRF. Correspondingly, ADRF receives the request message #1 from NWDAF#2 / DCCF#2.

[0223] For example, when NWDAF#2 / DCCF#2 needs to use the data corresponding to UE#1 for model training or analytical reasoning, NWDAF#2 / DCCF#2 may send the request message #1 to ADRF. The request message #1 is used to request to obtain the data of UE#1 stored in ADRF.

[0224] The request message #1 carries indication information indicating the purpose of the requested data. Exemplarily, the purpose of the requested data may be model training and / or analytical reasoning.

[0225] S407, ADRF determines to provide data #1 to NWDAF #2 / DCCF #2 according to the request message #1 and the authorization information #1.

[0226] For example, when the purpose of the requested data is the same as the first purpose indicated by the authorization information #1 stored in the ADRF, or the first purpose includes the purpose of the requested data, the ADRF provides the data #1 to the NWDAF #2 / DCCF #2.

[0227] Optionally, the method further comprises:

[0228] S408: After the duration indicated by the authorization information #1 times out, the NWDAF #1 / DCCF #1 sends the indication information #1 to the ADRF. Correspondingly, the ADRF receives the indication information #1 from the NWDAF #1 / DCCF #1.

[0229] The indication information #1 may indicate that the data #1 is to be deleted, or may indicate that provision of the data #1 to other network elements is not allowed.

[0230] Accordingly, the ADRF stops providing data #1 to the NWDAF #2 / DCCF #2.

[0231] For details, please refer to Method 1 to Method 3 in S350.

[0232] Optionally, after S402, if the UDM sends updated authorization information #1 (recorded as authorization information #2, an example of second authorization information) to NWDAF#1 / DCCF#1, the method further includes steps shown in the following cases.

[0233] Case 1:

[0234] S409a, NWDAF#1 / DCCF#1 sends indication information #2 to ADRF. Correspondingly, ADRF receives indication information #2 from NWDAF#1 / DCCF#1.

[0235] The indication information #2 indicates that the data #1 is deleted, or indicates that the data #1 is not allowed to be provided. The indication information #2 is sent when the authorization information #2 indicates that the data #1 is not allowed to be obtained for the first purpose; or the indication information #2 is sent when the authorization information #2 includes a time period for allowing the data #1 to be obtained for the first purpose, and after the time period.

[0236] S410a, ADRF stops providing data #1 to NWDAF #2 / DCCF #2 according to the instruction information #2.

[0237] Case 2:

[0238] S409b, NWDAF#1 / DCCF#1 sends authorization information #2 to ADRF. Correspondingly, ADRF receives authorization information #2 from NWDAF#1 / DCCF#1.

[0239] S410b, ADRF stops providing data #1 to NWDAF #2 / DCCF #2 according to the authorization information #2.

[0240] For details of this step, please refer to the description in S350.

[0241] The dotted steps in the above flowchart are optional steps, and the order of the steps is determined according to the internal logic of the method. The serial numbers shown in the above flowchart are only examples and do not limit the order of the steps of this application.

[0242] Above, combined Figure 3 and Figure 4 The method provided in the embodiment of the present application is described in detail. Figures 5 to 7 The communication device provided in the embodiment of the present application is described in detail. It should be understood that the description of the device embodiment corresponds to the description of the method embodiment, so the contents not described in detail can be referred to the method embodiment above, and will not be repeated here for the sake of brevity.

[0243] Figure 5 A schematic diagram of a communication device 500 provided in an embodiment of the present application is shown. The device 500 includes an interface unit 510, which can be used to implement corresponding communication functions, and the interface unit 510 can also be called a communication interface or a communication unit.

[0244] Optionally, the device 500 may further include a processing unit 520, which may be used to perform data processing.

[0245] Optionally, the device 500 also includes a storage unit, which can be used to store instructions and / or data, and the processing unit 520 can read the instructions and / or data in the storage unit so that the device implements the actions of different devices in the aforementioned method embodiments.

[0246] In one possible design, the device 500 may be the NWDAF or DCCF network element in the aforementioned embodiment, or may be a component (such as a chip) of the NWDAF or DCCF network element. The device 500 may implement the steps or processes executed by the NWDAF or DCCF network element in the above method embodiment. Among them, the interface unit 510 may be used to perform the operations related to the transmission and reception of the NWDAF or DCCF network element in the above method embodiment; the processing unit 520 may be used to perform the operations related to the processing of the NWDAF or DCCF network element in the above method embodiment.

[0247] In another possible design, the device 500 may be the analysis data storage functional network element in the aforementioned embodiment, or may be a component (such as a chip) of the analysis data storage functional network element. The device 500 may implement the steps or processes corresponding to those performed by the analysis data storage functional network element in the above method embodiment. Among them, the interface unit 510 may be used to perform the operations related to the sending and receiving of the analysis data storage functional network element in the above method embodiment; the processing unit 520 may be used to perform the operations related to the processing of the analysis data storage functional network element in the above method embodiment.

[0248] Figure 6 6 is a schematic block diagram of a communication device 600 provided in an embodiment of the present application. The device 600 includes a processor 610, and the processor 610 is coupled to a memory 620. Optionally, the memory 620 is further included. The memory 620 is used to store computer programs or instructions and / or data, and the processor 610 is used to execute the computer programs or instructions stored in the memory 620, or read the data stored in the memory 620, so as to execute the methods in the above method embodiments.

[0249] Optionally, there are one or more processors 610 .

[0250] Optionally, the memory 620 is one or more.

[0251] Optionally, the memory 620 is integrated with the processor 610 or is separately provided.

[0252] Alternatively, if Figure 6 As shown, the device 600 further includes a transceiver 630, which is used to receive and / or send signals. For example, the processor 610 is used to control the transceiver 630 to receive and / or send signals. The transceiver 630 may also be referred to as an interface.

[0253] As a solution, the device 600 is used to implement the operations performed by the NWDAF or DCCF network element in the above method embodiments.

[0254] For example, the processor 610 is configured to execute a computer program or instruction stored in the memory 620 to implement related operations of the NWDAF or DCCF network element in each of the above method embodiments.

[0255] As another solution, the device 600 is used to implement the operations performed by the analysis data storage function network element in the above method embodiments.

[0256] For example, the processor 610 is used to execute the computer program or instructions stored in the memory 620 to implement the relevant operations of analyzing the data storage function network element in the above various method embodiments.

[0257] In the implementation process, each step of the above method can be completed by an integrated logic circuit of hardware in the processor 610 or an instruction in the form of software. The method disclosed in conjunction with the embodiment of the present application can be directly embodied as a hardware processor for execution, or a combination of hardware and software modules in the processor for execution. The software module can be located in a mature storage medium in the art such as a random access memory, a flash memory, a read-only memory, a programmable read-only memory or an electrically erasable programmable memory, a register, etc. The storage medium is located in the memory 620, and the processor 610 reads the information in the memory 620 and completes the steps of the above method in conjunction with its hardware. To avoid repetition, it is not described in detail here.

[0258] It should be understood that in the embodiments of the present application, the processor may be one or more integrated circuits for executing related programs to execute the embodiments of the methods of the present application.

[0259] The processor (e.g., processor 610) may include one or more processors and be implemented as a combination of computing devices. The processor may include one or more of the following: a microprocessor, a microcontroller, a digital signal processor (DSP), a digital signal processing device (DSPD), an application specific integrated circuit (ASIC), a field programmable gate array (FPGA), a programmable logic device (PLD), a gating logic, a transistor logic, a discrete hardware circuit, a processing circuit or other suitable hardware, firmware and / or a combination of hardware and software for performing the various functions described in the present disclosure. The processor may be a general-purpose processor or a dedicated processor. For example, processor 610 may be a baseband processor or a central processing unit. The baseband processor may be used to process communication protocols and communication data. The central processing unit may be used to enable the device to execute a software program and process data in the software program. In addition, a portion of the processor may also include a non-volatile random access memory. For example, the processor may also store information about the type of device.

[0260] Program in this application is used to refer to software in a broad sense. Non-limiting examples of software include: program code, program, subroutine, instruction, instruction set, code, code segment, software module, application, or software application, etc. The program can be run in a processor and / or computer. So that the device performs various functions and / or processes described in this application.

[0261] The memory (e.g., memory 620) can store data required by the processor (e.g., processor 610) when executing software. The memory can be implemented using any suitable storage technology. For example, the memory can be any available storage medium that can be accessed by the processor and / or computer. Non-limiting examples of storage media include random access memory (RAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), compact disc read-only memory (CD-ROM), static RAM (SRAM), dynamic RAM (DRAM), synchronous dynamic random access memory (SDRAM), double data rate synchronous dynamic random access memory (DDR SDRAM), enhanced synchronous dynamic random access memory (ESDRAM), synchronous link dynamic random access memory (SLDRAM) and direct rambus RAM (DR RAM), removable media, optical disk storage, magnetic disk storage media, magnetic storage devices, flash memory, registers, state memory, remote mounted storage, local or remote storage components, or any other medium capable of carrying or storing software, data or information and accessible by a processor / computer. It should be noted that the memory described herein is intended to include, but is not limited to, these and any other suitable types of memory.

[0262] The memory (e.g., memory 620) and the processor (e.g., processor 610) may be provided separately or integrated together. The memory may be used to connect to the processor so that the processor can read information from the memory and store and / or write information in the memory. The memory may be integrated in the processor. The memory and the processor may be provided in an integrated circuit (e.g., the integrated circuit may be provided in a UE or other network node).

[0263] Figure 7 7 is a schematic block diagram of a chip system 700 provided in an embodiment of the present application. The chip system 700 (or also referred to as a processing system) includes a logic circuit 710 and an input / output interface 720 .

[0264] Among them, the logic circuit 710 can be a processing circuit in the chip system 700. The logic circuit 710 can be coupled to the storage unit and call the instructions in the storage unit so that the chip system 700 can implement the methods and functions of each embodiment of the present application. The input / output interface 720 can be an input / output circuit in the chip system 700, outputting information processed by the chip system 700, or inputting data or signaling information to be processed into the chip system 700 for processing.

[0265] As a solution, the chip system 700 is used to implement the operations performed by the NWDAF or DCCF network element in the above method embodiments.

[0266] For example, the logic circuit 710 is used to implement the processing-related operations performed by the NWDAF or DCCF network element in the above method embodiment; the input / output interface 720 is used to implement the sending and / or receiving-related operations performed by the NWDAF or DCCF network element in the above method embodiment.

[0267] As another solution, the chip system 700 is used to implement the operations performed by the analysis data storage functional network element in the above method embodiments.

[0268] For example, the logic circuit 710 is used to implement the processing-related operations performed by the analysis data storage functional network element in the above method embodiment; the input / output interface 720 is used to implement the sending and / or receiving-related operations performed by the analysis data storage functional network element in the above method embodiment.

[0269] An embodiment of the present application also provides a computer-readable storage medium on which computer instructions are stored for implementing the methods executed by a communication device (such as an NWDAF or DCCF network element, an analysis data storage function network element) in the above-mentioned method embodiments.

[0270] An embodiment of the present application also provides a computer program product, comprising instructions, which, when executed by a computer, implement the methods performed by a communication device (such as an NWDAF or DCCF network element, an analysis data storage function network element) in the above-mentioned method embodiments.

[0271] An embodiment of the present application also provides a communication system, which includes at least one of the NWDAF or DCCF network element and the analysis data storage function network element in the above embodiments.

[0272] The explanation of the relevant contents and beneficial effects of any of the above-mentioned devices can be referred to the corresponding method embodiments provided above, which will not be repeated here.

[0273] In the several embodiments provided in the present application, it should be understood that the disclosed devices and methods can be implemented in other ways. For example, the device embodiments described above are only schematic. For example, the division of the above units is only a logical function division. There may be other division methods in actual implementation, such as multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. In addition, the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, indirect coupling or communication connection of devices or units, which can be electrical, mechanical or other forms.

[0274] The units described above as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed on multiple network units. Some or all of the units may be selected according to actual needs to implement the solution provided by this application.

[0275] In addition, each functional unit in each embodiment of the present application may be integrated into one unit, or each unit may exist physically separately, or two or more units may be integrated into one unit.

[0276] Those of ordinary skill in the art will appreciate that the units and algorithm steps of each example described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, or a combination of computer software and electronic hardware. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Professional and technical personnel can use different methods to implement the described functions for each specific application, but such implementation should not be considered to be beyond the scope of this application.

[0277] When software is used for implementation, it can be implemented in whole or in part in the form of a computer program product. The computer program product includes one or more computer instructions. When loading and executing computer program instructions on a computer, the process or function described in the embodiment of the present application is generated in whole or in part. The computer can be a general-purpose computer, a special-purpose computer, a computer network or other programmable devices. For example, the computer can be a personal computer, a server, or a network device, etc. The computer instruction can be stored in a computer-readable storage medium, or transmitted from a computer-readable storage medium to another computer-readable storage medium, for example, the computer instruction can be transmitted from a website site, a computer, a server or a data center by wired (such as coaxial cable, optical fiber, digital subscriber line (DSL)) or wireless (such as infrared, wireless, microwave, etc.) mode to another website site, computer, server or data center. About computer-readable storage medium, it can be described with reference to the above.

[0278] The above is only a specific implementation of the present application, but the protection scope of the present application is not limited thereto. Any person skilled in the art who is familiar with the present technical field can easily think of changes or substitutions within the technical scope disclosed in the present application, which should be included in the protection scope of the present application. Therefore, the protection scope of the present application should be based on the protection scope of the claims.

Claims

1. A communication method, characterized in that: include: Receiving first data and first authorization information corresponding to the first data from a network data analysis function NWDAF or a data collection coordination function network element DCCF network element, wherein the first authorization information indicates permission to obtain the first data for a first purpose; receiving a first request message from a first network element, where the first request message includes first indication information, where the first indication information is used to indicate a purpose of requesting data; According to the first request message and the first authorization information, it is determined to provide the first data to the first network element.

2. The method according to claim 1, characterized in that The determining, according to the first request message and the first authorization information, to provide the first data to the first network element includes: In a case where the first request message and the first authorization information match, it is determined to provide the first data to the first network element.

3. The method according to claim 2, characterized in that The first indication information of the first request message matches the first authorization information, including: The first purpose is the same as the purpose of the request data.

4. The method according to claim 2, characterized in that: The determining, according to the first request message and the first authorization information, to provide the first data to the first network element includes: In a case where the first request message and the first authorization information do not match, the first data is not provided to the first network element.

5. The method according to any one of claims 1 to 3, characterized in that The method further comprises: receiving second authorization information corresponding to the first data from the NWDAF or DCCF network element, the second authorization information indicating that obtaining the first data for the first purpose is not allowed or restricted; According to the second authorization information, stop providing the first data to the first network element.

6. The method according to claim 5, characterized in that The stopping providing the first data to the first network element includes: Send rejection indication information to the first network element, where the rejection indication information is used to indicate a rejection of providing the first data to the first network element.

7. The method according to claim 5, characterized in that The stopping providing the first data to the first network element includes: In case the first request message is a subscription message, a stop subscription message is sent to the first network element.

8. The method according to any one of claims 5 to 7, characterized in that: The second authorization information further includes a first duration, and the second authorization information is used to indicate that the first data is allowed to be obtained for the first purpose within the first duration; The step of stopping providing the first data to the first network element according to the second authorization information includes: After the first time period, stop providing the first data to the first network element.

9. The method according to any one of claims 1 to 8, characterized in that: The first purpose includes one of the following: Model training, analysis and reasoning, obtaining the model, and obtaining analysis and reasoning results.

10. The method according to any one of claims 1 to 8, characterized in that: In the case where the first data is user data, the first purpose is model training or analytical reasoning, and the first authorization information is authorization information that allows the terminal device to provide the first data for the first purpose.

11. The method according to any one of claims 1 to 10, characterized in that: The first authorization information or the second authorization information further includes at least one of the following: Allowing to obtain the first data for a second purpose, the time length information of allowing to obtain the first data, not allowing to obtain the first data for the first purpose and / or the second purpose, not allowing to continue to obtain the first data for the first purpose and / or the second purpose, and indication information of allowing to save and use the stored first data after not allowing to continue to obtain the first data, wherein the second purpose is different from the first purpose, and the second purpose includes one of the following: model training, analysis and reasoning, obtaining a model, and obtaining analysis and reasoning results.

12. A communication method, applied to a network data analysis function NWDAF network element or a data collection and coordination function network element DCCF network element, characterized in that: The method comprises: Acquire first authorization information corresponding to the first data from the terminal device of the data management network element; If the first authorization information indicates that obtaining the first data for a first purpose is allowed, obtaining the first data; Sending the first data and the first authorization information to an analysis data storage function network element; Among them, the first purpose includes one of the following: model training, analytical reasoning.

13. The method according to claim 12, characterized in that The method further comprises: Acquire second authorization information corresponding to the first data from the terminal device of the data management network element; In a case where the second authorization information is different from the first authorization information, the second authorization information is sent to the analysis data storage functional network element.

14. The method according to claim 13, characterized in that The second authorization information is different from the first authorization information and includes: The second authorization information indicates that obtaining the first data for the first purpose is not permitted or is restricted.

15. The method according to claim 14, characterized in that: The second authorization information also includes a first duration, and the second authorization information is used to indicate that obtaining the first data for the first purpose is allowed within the first duration.

16. The method according to claim 13 or 14, characterized in that The method further comprises: In a case where the second authorization information indicates that obtaining the first data for the first purpose is not allowed, indication information for deleting the first data is sent to the analysis data storage function network element.

17. The method according to any one of claims 12 to 16, characterized in that The first authorization information or the second authorization information further includes at least one of the following: Allowing to obtain the first data for a second purpose, the time length information of allowing to obtain the first data, not allowing to obtain the first data for the first purpose and / or the second purpose, not allowing to continue to obtain the first data for the first purpose and / or the second purpose, and indication information of allowing to save and use the stored first data after not allowing to continue to obtain the first data, wherein the second purpose is different from the first purpose, and the second purpose includes one of the following: model training, analysis and reasoning, obtaining a model, and obtaining analysis and reasoning results.

18. The method according to any one of claims 12 to 17, characterized in that The obtaining, from the data management network element, first authorization information of the terminal device corresponding to the first data includes: Sending a query message to the data management network element, the query message carrying the identifier of the terminal device, the query message being used to query authorization information; Receive authorization information corresponding to the terminal device from the data management network element, where the authorization information corresponding to the terminal device includes the first authorization information.

19. The method according to any one of claims 12 to 17, characterized in that The obtaining, from the data management network element, first authorization information of the terminal device corresponding to the first data includes: Determine a first terminal device group, where the first terminal device group includes the terminal device; Sending a query message to the data management network element, the query message carrying an identifier of the first terminal device group, the query message being used to query authorization information; Receive authorization information corresponding to the first terminal device group from the data management network element, the authorization information corresponding to the first terminal device group includes the first authorization information.

20. A communication method, characterized in that: include: Determine first indication information, where the first indication information is used to indicate a purpose of requesting data; A first request message is sent to an analysis data storage function network element, where the first request message includes first indication information.

21. A communication device, characterized in that: The apparatus comprises a unit for executing the method according to any one of claims 1 to 11, or a unit for executing the method according to any one of claims 12 to 19.

22. A communication device, characterized in that: include: A processor, the processor is coupled to a memory, the memory stores instructions, and when the instructions are executed by the processor, the device executes the method according to any one of claims 1 to 11, or executes the method according to any one of claims 12 to 19.

23. A computer-readable storage medium, characterized in that: The computer-readable storage medium is used to store a computer program, and when the computer program is executed on a computer, the computer is enabled to execute the method according to any one of claims 1 to 11, or to execute the method according to any one of claims 12 to 19.

24. A computer program product, characterized in that The computer program product comprises a computer program code, and when the computer program code is executed by a communication device, the method according to any one of claims 1 to 11 is implemented, or the method according to any one of claims 12 to 19 is executed.

Images