Network analysis method and device

Abstract

Provided are a network analysis method and device, the method comprising: a first device receiving a first request from a second device, the first request being used for requesting the first device to determine whether a signaling storm event exists, the signaling storm event being used for indicating that a network has a risk of occurrence of a signaling storm; the first device obtains a network threshold, wherein the network threshold is used for indicating the number of signaling capable of being supported by the network; and the first device determines a first report according to the network threshold and the current number of signaling of the network, the first report being used for indicating the presence of the signaling storm event. Based on the scheme, the first device can determine that the network has the risk of generating the signaling storm according to the number of the signaling capable of being supported by the network and the current number of the signaling of the network, so that the occurrence of the signaling storm can be predicted.

Description

Technical Field

[0001] The present application relates to the field of communication technology, and more specifically, to a network analysis method and device. Background Art

[0002] As operators' services and network architectures develop towards diversification, the increasingly heavy business traffic has brought increasing pressure on the signaling network, and high pressure also indicates frequent accidents. Signaling storm refers to the situation where the signaling requests received by the network system from terminal devices exceed the signaling processing capacity of the network system, causing network congestion or even avalanche effect, resulting in network unavailability.

[0003] Therefore, how to predict the occurrence of signaling storms is an urgent problem to be solved. Summary of the invention

[0004] The present application provides a network analysis method and device, which can predict the occurrence of signaling storms.

[0005] In a first aspect, a network analysis method is provided, which can be performed by a first device, or by a component in the first device (e.g., a processor, a chip, or a chip system, etc.), or by a logic module or software that can implement all or part of the functions of the first device. The method includes: the first device receives a first request from a second device, the first request is used to request the first device to determine whether there is a signaling storm event, the signaling storm event is used to indicate that the network has a risk of a signaling storm; the first device obtains a network threshold, the network threshold is used to indicate the number of signaling that the network can support; the first device determines a first report based on the network threshold and the current number of signaling of the network, the first report is used to indicate the existence of the signaling storm event.

[0006] Exemplarily, the first device may be a service producer of a management data analytics service (MDAS), or the first device may be a management data analytics function (MDAF).

[0007] Based on the above solution, the first device can determine that the network has the risk of a signaling storm according to the signaling quantity that the network can support and the current signaling quantity of the network, thereby being able to predict the occurrence of a signaling storm.

[0008] In combination with the first aspect, in certain implementations of the first aspect, the first report includes at least one of abnormal network element information, type information, cause information, ratio information or duration information, wherein the abnormal network element information is used to indicate the network element with abnormal traffic when the signaling storm event occurs, the type information is used to indicate that the event type is a signaling storm, the cause information is used to indicate the cause of the signaling storm event, the ratio information is used to indicate the ratio of the current signaling amount to the historical signaling amount of the network, and the duration information is used to indicate the predicted duration of the signaling storm event.

[0009] Based on the above solution, the second device can improve the network according to the information in the first report, thereby helping the second device to prevent the occurrence of signaling storms.

[0010] In combination with the first aspect, in some implementations of the first aspect, the first device obtains the network threshold, including: the first device receives the network threshold from the second device.

[0011] Based on the above scheme, the network threshold can be sent by the second device to the first device, so that the first device can predict whether a signaling storm event exists based on the network threshold required by the second device, thereby achieving the second device's desired goal of preventing signaling storms.

[0012] In combination with the first aspect, in some implementations of the first aspect, the method further includes: the first device sends a maximum signaling quantity that the network can support to the second device.

[0013] Based on the above solution, the first device can send the maximum signaling quantity that the network can support to the second device, so that the second device can obtain the maximum signaling quantity that the network can support. The second device can improve the network according to the maximum signaling quantity that the network can support, thereby helping the second device to prevent the occurrence of signaling storms.

[0014] In combination with the first aspect, in some implementations of the first aspect, the network threshold is less than a maximum signaling quantity that the network can support.

[0015] Based on the above solution, the network threshold is less than the maximum number of signalings that the network can support, so that the first device determines that a signaling storm event exists when the risk of a signaling storm occurring in the network is low. Furthermore, the above solution enables the second device to improve the network when the risk of a signaling storm is low, thereby improving the effect of preventing a signaling storm.

[0016] In combination with the first aspect, in certain implementations of the first aspect, the method also includes: the first device determines the maximum number of signaling that the network can support based on availability parameters of multiple network elements in the network, wherein the multiple network elements in the network include a first network element, and the availability parameter of the first network element is the performance management data of the first network element under a first preset signaling number.

[0017] Based on the above scheme, the first device can determine the maximum signaling quantity that the network can support, so that the second device can obtain the maximum signaling quantity that the network can support. The second device can improve the network according to the maximum signaling quantity that the network can support, thereby helping the second device to prevent the occurrence of signaling storms.

[0018] In combination with the first aspect, in certain implementations of the first aspect, the method also includes: the first device obtains performance management data of the first network element and virtual resource usage information of the first network element; the first device determines the availability parameters of the first network element based on the performance management data of the first network element and the virtual resource usage information of the first network element.

[0019] Based on the above solution, the first device can determine the availability parameter of the network element. The availability parameter is the performance management data of the network element under a preset signaling quantity. Therefore, the availability parameter of the network element can describe the availability of the network element under signaling impact, which helps to prevent the occurrence of signaling storms.

[0020] In combination with the first aspect, in some implementations of the first aspect, the method further includes: the first device sending an availability parameter of the first network element to the second device.

[0021] Based on the above solution, the first device can send the availability parameter of the network element to the second device. The availability parameter is the performance management data of the network element under the preset signaling quantity. Therefore, the availability parameter of the network element can describe the availability of the network element under the signaling impact, which helps the second device prevent the occurrence of signaling storms.

[0022] In combination with the first aspect, in some implementations of the first aspect, the method further includes: the first device receives a second request from the second device, the second request being used to request the first device to determine availability parameters of multiple network elements in the network.

[0023] Based on the above solution, the first device can request the second device to determine the availability parameter of the network element. The availability parameter is the performance management data of the network element under the preset signaling quantity, and the availability parameter of the network element can describe the availability of the network element under the signaling impact. Therefore, the above solution helps to achieve the desired goal of the second device to prevent signaling storms.

[0024] In combination with the first aspect, in certain implementations of the first aspect, the multiple network elements in the network also include a second network element, wherein the method also includes: the first device obtains an availability parameter of the second network element, the availability parameter of the second network element is performance management data of the second network element under a second preset signaling quantity, wherein, when the signaling storm occurs, the availability parameter of the second network element does not meet the expected target; the first device determines a second report based on the availability parameter of the second network element, wherein the second report is used to indicate capacity expansion of the second network element.

[0025] Based on the above scheme, when the availability parameter of the second network element does not meet the expected target, the first device can suggest the second device to expand the capacity of the second network element to prevent the occurrence of a signaling storm.

[0026] In combination with the first aspect, in certain implementations of the first aspect, the expected goal includes an expected duration for resolving a signaling storm and / or a maximum number of users that the network can support.

[0027] Based on the above scheme, the expected target may include the expected duration of resolving the signaling storm and / or the maximum number of users that the network can support. The second device provides improvement suggestions for the network element according to the above expected target, so that the network element can meet the expected duration and the maximum number of users in the expected target, thereby enhancing the availability of the network.

[0028] In combination with the first aspect, in certain implementations of the first aspect, the method also includes: the first device receives a third request from the second device, the third request is used to request the first device to provide suggestions for network elements in the network, wherein the third request includes the desired target.

[0029] Based on the above scheme, the first device can request the second device to provide improvement suggestions for the network element, and the request can carry the expected goal, thereby helping to achieve the second device's expected goal of preventing signaling storms.

[0030] In combination with the first aspect, in certain implementations of the first aspect, the method also includes: the first device registers a first management data analysis service MDAS and a second MDAS, wherein the capability information in the registration parameters corresponding to the first MDAS is used to indicate that the first MDAS is capable of determining whether the signaling storm event exists, and the capability information in the registration parameters corresponding to the second MDAS is used to indicate that the second MDAS is capable of providing recommendations for network elements in the network.

[0031] Based on the above scheme, the second device can access the access address of the first MDAS or the second MDAS as needed, avoiding the delay caused by the first device identifying the intention of the second device and calling the corresponding MDAS, thereby improving the efficiency of network analysis.

[0032] In a second aspect, a network analysis method is provided, which can be performed by a second device, or by a component in the second device (e.g., a processor, a chip, or a chip system, etc.), or by a logic module or software that can implement all or part of the functions of the second device. The method includes: the second device sends a first request to the first device, the first request is used to request the first device to determine whether there is a signaling storm event, the signaling storm event is used to indicate that the network has a risk of a signaling storm; the second device receives a first report from the first device, the first report is used to indicate the presence of the signaling storm event.

[0033] Exemplarily, the second device may be a requester, or an operations support system (OSS). Alternatively, the second device may be other devices.

[0034] Based on the above solution, the first device can determine that the network has the risk of a signaling storm according to the signaling quantity that the network can support and the current signaling quantity of the network, thereby being able to predict the occurrence of a signaling storm.

[0035] In combination with the second aspect, in some implementations of the second aspect, the method further includes: the second device sending a network threshold to the first device, where the network threshold is used to indicate the amount of signaling that the network can support.

[0036] Based on the above scheme, the network threshold can be sent by the second device to the first device, so that the first device can predict whether a signaling storm event exists based on the network threshold required by the second device, thereby achieving the second device's desired goal of preventing signaling storms.

[0037] In combination with the second aspect, in certain implementations of the second aspect, the method further includes: the second device receives the maximum number of signaling that the network can support from the first device; and the second device determines the network threshold based on the maximum number of signaling that the network can support.

[0038] Based on the above solution, the second device can determine the network threshold according to the maximum signaling quantity that the network can support. In this way, the first device can predict whether a signaling storm event exists according to the network threshold required by the second device, thereby achieving the second device's desired goal of preventing signaling storms.

[0039] In combination with the second aspect, in certain implementations of the second aspect, the network threshold is less than a maximum signaling quantity or a maximum signaling multiple that the network can support.

[0040] Based on the above solution, the network threshold is less than the maximum number of signalings that the network can support, so that the first device determines that a signaling storm event exists when the risk of a signaling storm occurring in the network is low. Furthermore, the above solution enables the second device to improve the network when the risk of a signaling storm is low, thereby improving the effect of preventing a signaling storm.

[0041] In combination with the second aspect, in certain implementations of the second aspect, the multiple network elements in the network include a first network element, wherein the method further includes: the second device receives an availability parameter of the first network element from the first device, and the availability parameter of the first network element is performance management data of the first network element under a first preset signaling quantity; the second device configures the first network element according to the availability parameter of the first network element.

[0042] Based on the above solution, the second device can configure the availability parameter on the network element. The availability parameter is the performance management data of the network element under the preset signaling quantity. Therefore, the availability parameter of the network element can describe the availability of the network element under the signaling impact, which helps the network element prevent the occurrence of signaling storms.

[0043] In combination with the second aspect, in some implementations of the second aspect, the method further includes: the second device sends a second request to the first device, where the second request is used to request the first device to determine availability parameters of multiple network elements in the network.

[0044] Based on the above solution, the first device can request the second device to determine the availability parameter of the network element. The availability parameter is the performance management data of the network element under the preset signaling quantity, and the availability parameter of the network element can describe the availability of the network element under the signaling impact. Therefore, the above solution helps to achieve the desired goal of the second device to prevent signaling storms.

[0045] In combination with the second aspect, in certain implementations of the second aspect, the multiple network elements in the network also include a second network element, wherein the method also includes: the second device receives a second report from the first device, the second report is used to indicate capacity expansion of the second network element, wherein, when the signaling storm occurs, the availability parameters of the second network element do not meet the expected targets.

[0046] Based on the above scheme, when the availability parameter of the second network element does not meet the expected target, the first device can suggest the second device to expand the capacity of the second network element to prevent the occurrence of a signaling storm.

[0047] In combination with the second aspect, in certain implementations of the second aspect, the expected goal includes an expected duration for resolving a signaling storm and / or a maximum number of users that the network can support.

[0048] Based on the above scheme, the expected target may include the expected duration of resolving the signaling storm and / or the maximum number of users that the network can support. The second device provides improvement suggestions for the network element according to the above expected target, so that the network element can meet the expected duration and the maximum number of users in the expected target, thereby enhancing the availability of the network.

[0049] In combination with the second aspect, in certain implementations of the second aspect, the third request includes the desired target, and the third request is used to request the first device to provide suggestions for network elements in the network, wherein the method also includes: the second device sends the third request to the first device.

[0050] Based on the above scheme, the first device can request the second device to provide improvement suggestions for the network element, and the request can carry the expected goal, thereby helping to achieve the second device's expected goal of preventing signaling storms.

[0051] In combination with the second aspect, in certain implementations of the second aspect, the method also includes: the second device queries the registration parameters of the first device; the second device receives the registration parameters of the first management data analysis service MDAS and the registration parameters of the second MDAS, the capability information in the registration parameters corresponding to the first MDAS is used to indicate that the first MDAS can determine whether the signaling storm event exists, and the capability information in the registration parameters corresponding to the second MDAS is used to indicate that the second MDAS can provide suggestions for network elements in the network.

[0052] Based on the above scheme, the second device can access the access address of the first MDAS or the second MDAS as needed, avoiding the delay caused by the first device identifying the intention of the second device and calling the corresponding MDAS, thereby improving the efficiency of network analysis.

[0053] In a third aspect, a communication device is provided, comprising a processor, wherein the processor is used to enable the communication device to execute the first aspect and any possible method of the first aspect, or to enable the communication device to execute the first aspect and any possible method of the second aspect, by executing a computer program or instruction, or by a processing circuit.

[0054] In a possible implementation, the communication device further includes a memory for storing the computer program or instruction. Further, the processor is specifically used to call and run the computer program or computer instruction stored in the memory, so that the processor implements any one of the implementations in the first aspect or the second aspect.

[0055] In a possible implementation, the communication device further includes a transceiver (also referred to as a communication interface), the transceiver being used to input and / or output signals through the communication interface. The processor is used to control the transceiver to transmit and receive signals.

[0056] In a fourth aspect, a communication device is provided, comprising a processing circuit (also referred to as a processor) and an input / output interface (also referred to as an interface circuit), the input / output interface being used to input and / or output signals, the processing circuit being used to execute the first aspect and any possible method of the first aspect; or the processing circuit being used to execute the second aspect and any possible method of the second aspect.

[0057] In a possible implementation, the processor is used to communicate with other devices through the interface circuit and execute any one of the implementations in the first aspect or any one of the implementations in the second aspect. The processor includes one or more.

[0058] In a fifth aspect, a communication device is provided. The communication device may be a first device, or a device or module for performing the function of the first device; the communication device may be a second device, or a device or module for performing the function of the second device.

[0059] In one possible implementation, the communication device may include a module or unit corresponding to each of the methods / operations / steps / actions described in the first aspect. The module or unit may be a hardware circuit, software, or a combination of a hardware circuit and software.

[0060] In another possible implementation, the communication device may include a module or unit corresponding to the method / operation / step / action described in the second aspect, and the module or unit may be a hardware circuit, or software, or a combination of hardware circuit and software.

[0061] In the sixth aspect, a computer-readable storage medium is provided, on which a computer program or instruction is stored. When the computer program or the instruction is run on a computer, the first aspect and any possible method of the first aspect are executed; or, the second aspect and any possible method of the second aspect are executed.

[0062] In the seventh aspect, a computer program product is provided, comprising a computer program or instructions, which, when executed on a computer, causes the first aspect and any possible method of the first aspect to be executed; or causes the second aspect and any possible method of the second aspect to be executed.

[0063] In an eighth aspect, a communication device is provided, comprising a processor, connected to a memory, and used to call a program stored in the memory to execute any possible method of the first aspect or any possible method of the second aspect. The memory may be located inside the communication device or outside the communication device. The processor may include one or more.

[0064] In one implementation, the communication device of the third, fourth, and fifth aspects mentioned above may be a chip or a chip system.

[0065] In a ninth aspect, a chip device is provided, comprising a processor for calling a computer program or computer instruction in a memory so that the processor executes any one of the implementations in the first aspect or any one of the implementations in the second aspect.

[0066] Optionally, the processor is coupled to the memory via an interface.

[0067] In a tenth aspect, a communication system is provided, which includes a first device and a second device; the first device is used to execute the method shown in the first aspect, and the second device is used to execute the method shown in the second aspect.

[0068] In the eleventh aspect, a communication method is provided, which is applied to a first device and a second device, wherein the method includes: the first device executes the method shown in the first aspect; the second device executes the method shown in the second aspect.

[0069] The description of the advantageous effects of any of the third aspect to the eleventh aspect etc. may refer to the description of the advantageous effects of the first aspect or the second aspect. BRIEF DESCRIPTION OF THE DRAWINGS

[0070] Figure 1 It is a schematic diagram of a network architecture of a communication system applicable to an embodiment of the present application.

[0071] Figure 2 It is a schematic flow chart of signaling processing.

[0072] Figure 3 It is a schematic block diagram of a communication system provided in an embodiment of the present application.

[0073] Figure 4 It is a schematic flow chart of a network analysis method provided in an embodiment of the present application.

[0074] Figure 5 It is a schematic flow chart of a registration method provided in an embodiment of the present application.

[0075] Figure 6 It is a schematic flow chart of a registration parameter query method provided in an embodiment of the present application.

[0076] Figure 7 It is a schematic flowchart of a network element capability evaluation method provided in an embodiment of the present application.

[0077] Figure 8It is a schematic flowchart of a network capability evaluation method provided in an embodiment of the present application.

[0078] Fig. 9 It is a schematic flowchart of a signaling storm event discovery method provided in an embodiment of the present application.

[0079] Fig.10 It is a schematic flowchart of a signaling storm event analysis method provided in an embodiment of the present application.

[0080] Fig.11 It is a schematic flow chart of another network analysis method provided in an embodiment of the present application.

[0081] Fig.12 It is a schematic block diagram of a communication device according to an embodiment of the present application.

[0082] Fig.13 It is a schematic block diagram of another communication device according to an embodiment of the present application.

[0083] Fig.14 It is a schematic block diagram of a communication system according to an embodiment of the present application. DETAILED DESCRIPTION

[0084] The technical solution in this application will be described below in conjunction with the accompanying drawings.

[0085] The technical solution provided by this application can be applied to various communication systems, such as the fifth generation (5 th generation, 5G) or new radio (NR) system, long term evolution (LTE) system, LTE frequency division duplex (FDD) system, LTE time division duplex (TDD) system, etc. The technical solution provided in this application can also be applied to future communication systems, such as the sixth generation (6 th The technical solution provided in this application can also be applied to device-to-device (D2D) communication, vehicle-to-everything (V2X) communication, machine-to-machine (M2M) communication, machine type communication (MTC), and Internet of Things (IoT) communication systems or other communication systems.

[0086] Figure 1A schematic diagram of the network architecture of a communication system applicable to an embodiment of the present application is shown, and the network architecture includes terminal equipment, access network equipment, access and mobility management network element, session management network element, user plane function network element, policy control network element, network slice selection network element, network warehouse function network element, network data analysis network element, unified data management network element, unified data storage network element, authentication service function network element, network capability exposure network element, application function network element, and a data network (DN) connected to the operator network. The terminal equipment can send service data to the data network through the access network equipment and the user plane function network element, and receive service data from the data network.

[0087] The terminal device is a device with wireless transceiver function, which can be deployed on land, including indoors or outdoors, handheld, wearable or vehicle-mounted; it can also be deployed on the water surface (such as ships, etc.); it can also be deployed in the air (such as airplanes, balloons and satellites, etc.). The terminal device can communicate with the core network via the radio access network (RAN) and exchange voice and / or data with the RAN. The terminal device can be a mobile phone, a tablet computer (Pad), a computer with wireless transceiver function, a mobile Internet device (MID), a wearable device, a virtual reality (VR) terminal device, an augmented reality (AR) terminal device, a wireless terminal in industrial control, a wireless terminal in self driving, a wireless terminal in remote medical, a wireless terminal in smart grid, a wireless terminal in transportation safety, a wireless terminal in smart city, a wireless terminal in smart home, etc. The embodiments of the present application do not limit the application scenarios. The terminal device may also be sometimes referred to as user equipment (UE), mobile station, remote station, etc. The embodiments of the present application do not limit the specific technology, device form, and name of the terminal device.

[0088] Access network equipment is a device in the network used to access terminal devices to the wireless network. Access network equipment can be a node in the wireless access network, which can also be called a base station, or a radio access network (RAN) node (or device). In addition, RAN can also be equivalent to the next generation radio access network (NG-RAN) in the layer 3 relay architecture. In other words, RAN can be NG-RAN. For ease of description, RAN is sometimes used below to refer to access network equipment. It can be understood that RAN can also be AN.

[0089] The access network equipment may include an evolved base station (NodeB or eNB or e-NodeB, evolutionary Node B) in a long term evolution (LTE) system or an evolved LTE system (LTE-Advanced, LTE-A), such as a traditional macro base station eNB and a micro base station eNB in ​​a heterogeneous network scenario, or may also include a next generation node B (next generation node B, gNB) in a 5G or NR system, or may also include a radio network controller (radio network controller, RNC), a node B (Node B, NB), a base station controller (base station controller, BSC), a base transceiver station (base transceiver station, BTS), a transmission reception point (transmission reception point, TRP), a home base station (for example, home evolved NodeB, or home Node B, HNB), a base band unit (base band unit, BBU), a base band pool BBU pool, or a WiFi access point (access point, AP), etc., or may also include a centralized unit (centralized unit, CU) and a distributed unit (distributed unit) in a cloud radio access network (cloudRAN) system. Unit, DU), which is not limited in the embodiments of the present application. In the separate deployment scenario where the access network equipment includes CU and DU, CU supports protocols such as radio resource control (RRC), packet data convergence protocol (PDCP), and service data adaptation protocol (SDAP); DU mainly supports radio link control layer (RLC), media access control layer (MAC) and physical layer protocols.

[0090] The access and mobility management network element is mainly used for the attachment and tracking area update process of the terminal in the mobile network. The access and mobility management network element can provide non-access stratum (NAS) messages, complete registration management, connection management, reachability management, assign tracking area list (TA list), legal monitoring, access authorization, authentication and mobility management, etc., and transparently route session management (SM) messages to the session management network element. In the fifth generation (5G) communication system, the access and mobility management network element can be the access and mobility management function (AMF). In future communication systems (such as 6G communication systems), the mobility management network element can still be the AMF network element, or it can have other names, which is not limited in this application.

[0091] The session management network element is mainly used for session and bearer management in mobile networks, such as session establishment, modification, and release. Specific functions include allocating Internet Protocol (IP) addresses to terminals, selecting user plane function network elements that provide message forwarding functions, etc. In 5G communication systems, the session management network element can be a session management function (SMF). In future communication systems (such as 6G communication systems), the session management network element can still be an SMF network element, or it can have other names, which are not limited in this application.

[0092] The user plane function network element is mainly used to process user messages, such as forwarding, billing, legal monitoring, etc. In addition, the user plane function network element can be used for routing forwarding, threshold control, traffic monitoring, verification and other functions of user plane data. The user plane function network element can also be used for the management of UE IP addresses, the management of core network (CN) tunnel information, etc. The user plane function network element can also be called a protocol data unit (PDU) session anchor (PDU session anchor, PSA). In a 5G communication system, the user plane function network element may be a user plane function (UPF). In future communication systems (such as 6G communication systems), the user plane function network element may still be a UPF network element, or may have other names, which is not limited in this application.

[0093] The policy control network element includes user subscription data management function, policy control function, charging policy control function QoS control, etc. In the 5G communication system, the policy control network element may be a policy control function (PCF). In future communication systems (such as 6G communication systems), the policy control network element may still be a PCF network element, or may have other names, which are not limited in this application.

[0094] The network slice selection function network element is mainly used to select a suitable network slice for the service of the terminal device. In the 5G communication system, the network slice selection network element may be a network slice selection function (NSSF) network element. In future communication systems (such as 6G communication systems), the network slice selection network element may still be an NSSF network element, or may have other names, which is not limited in this application.

[0095] The network repository function network element is mainly used to provide registration and discovery functions for network elements or services provided by network elements. In the 5G communication system, the network repository function network element may be a network repository function (NRF). In future communication systems (such as 6G communication systems), the network repository function network element may still be an NRF network element, or may have other names, which is not limited in this application.

[0096] The network data analysis network element can collect data from various network functions (NF), such as policy control network elements, session management network elements, user plane function network elements, access and mobility management network elements, and application function network elements (through network capability exposure function network elements), and perform analysis and prediction. In a 5G communication system, the network data analysis network element may be a network data analysis function (NWDAF). In future communication systems (such as 6G communication systems), the network data analysis network element may still be an NWDAF network element, or may have other names, which are not limited in this application.

[0097] The unified data management network element is mainly used to manage the contract information of the terminal device. In the 5G communication system, the unified data management network element can be unified data management (UDM). In future communication systems (such as 6G communication systems), the unified data management network element can still be the UDM network element, or it can have other names, which is not limited in this application.

[0098] The unified data storage network element is mainly used to store structured data information, including contract information, policy information, and network data or business data defined in a standard format. In a 5G communication system, the unified data storage network element may be a unified data repository (UDR). In future communication systems (such as a 6G communication system), the unified data storage network element may still be a UDR network element, or may have other names, which are not limited in this application.

[0099] The authentication service function network element is mainly used to perform security authentication on the terminal device. In the 5G communication system, the authentication service function network element can be an authentication server function (AUSF). In future communication systems (such as 6G communication systems), the authentication service function network element can still be an AUSF network element, or it can have other names, which is not limited by this application.

[0100] The network capability exposure network element can expose some functions of the network to applications in a controlled manner. In the 5G communication system, the network capability exposure network element can be a network exposure function (NEF). In future communication systems (such as 6G communication systems), the network capability exposure network element can still be a NEF network element, or it can have other names, which is not limited in this application.

[0101] The application function network element can provide service data of various applications to the control plane network elements of the operator's communication network, or obtain network data information and control information from the control plane network elements of the communication network. In the 5G communication system, the application function network element can be an application function (AF). In future communication systems (such as 6G communication systems), the application function network element can still be an AF network element, or it can have other names, which is not limited by this application. For example, the application function network element can also be called an application server or a service server. In addition, the application function network element can be deployed by the operator network or by a third party.

[0102] Data network is mainly used to provide data transmission services for terminal devices. Data network can be a private network, such as a local area network, or a public data network (PDN) network, such as the Internet, or a proprietary network jointly deployed by operators, such as the configured IP multimedia corenetwork subsystem (IMS) service. Data network can also come from a third party.

[0103] It should be understood that the above network element or function can be a network element in a hardware device, a software function running on dedicated hardware, or a virtualized function instantiated on a platform (e.g., a cloud platform). Optionally, the above network element or function can be implemented by one device, or by multiple devices together, or by a functional module in one device, which is not specifically limited in the embodiments of the present application.

[0104] It should also be understood that the above naming is only defined for the convenience of distinguishing different functions and should not constitute any limitation to this application. This application does not exclude the possibility of using other naming in 5G networks and other future networks. For example, in 6G networks, some or all of the above networks may continue to use the terminology in 5G, or may use other names, etc. Figure 1 The interface name between the network elements is only an example. The interface name in the specific implementation may be other names, and this application does not specifically limit this. In addition, the name of the message (or signaling) transmitted between the above network elements is only an example and does not constitute any limitation on the function of the message itself.

[0105] It should be noted that the above-mentioned "network element" may also be referred to as an entity, device, apparatus or module, etc., which is not specifically limited in this application. Moreover, in this application, for the sake of ease of understanding and explanation, the description of "network element" is omitted in some descriptions. For example, the PCF network element is referred to as PCF. In this case, the "PCF" should be understood as a PCF network element or a PCF entity. Hereinafter, the description of the same or similar situations is omitted.

[0106] For ease of description, the following Figure 1 The network elements other than the terminal devices are called the network system. The terminal devices send signaling to the network system, and the network system receives the signaling from the terminal devices and processes the signaling through multiple network elements in the network system. It is understandable that the signaling processing capability of each network element is limited, and the signaling processing capability of the entire network system is limited by the signaling processing capability of each network element.

[0107] Figure 2 It is a schematic flow chart of signaling processing. Figure 2, the UE sends multiple signalings to the network system. To process these signalings, the access network device, AMF, SMF, IMS and UDM need to be called in sequence. Assuming that the front end of the UDM (access network device, AMF, SMF and IMS) processes the signaling from the UE according to the normal process, the front end will receive and process a large amount of signaling, and then send a signaling processing request to the UDM, which is used to request the UDM to further process the signaling from the UE. In the case that the UDM receives too many signaling processing requests, the UDM may not be able to process all the signaling processing requests in time. Therefore, the UDM needs to take flow control measures. For example, the UDM may refuse to receive the signaling processing request, or not process the signaling processing request for a long time. If the signaling from the UE is rejected by the network system, the UDM front end will not work on the signaling processing, and the UE needs to resend the signaling to the network system. Alternatively, if the signaling sent by the UE has not been processed by the network system for a long time, the UE may resend the signaling to the network system. In this case, a large number of UEs will resend the signaling to the network system. At the same time, the network system has not yet processed the signaling sent by the UE before, and the newly sent signaling by the UE is processed by the front end of the UDM, so that the UDM receives a new signaling processing request. This will cause the UDM to accumulate a large number of pending signaling processing requests, and the number of pending signaling processing requests continues to increase. When the above process develops to a certain scale (for example, a large number of users cannot obtain the services of the network system within 1 hour), a signaling storm will occur. The signaling storm will cause long-term congestion in the network system, resulting in unavailability of the network system's services.

[0108] It should be noted that Figure 2 This is only an example and does not constitute a limitation of the present application. For example, the signaling from the UE may be processed by more or fewer network elements. For another example, the signaling from the UE may be processed by other network elements other than the access network equipment, AMF, SMF, IMS and UDM. In addition, the above-mentioned AMF may also be replaced by a mobility management entity (mobility management entity, MME), the above-mentioned SMF may also be replaced by a packet data network gateway (packet data network gateway, PGW), and the above-mentioned UDM may also be replaced by a home subscriber server (home subscriber server, HSS).

[0109] The reason for the signaling storm is that the network system receives more signaling from terminal devices than the network system can process. There are many reasons why the network system receives more signaling from terminal devices than the network system can process. For example, the reason may be that the terminal device sends a large amount of signaling in a short period of time, the network element in the network system fails, the network system fails, the wireless access network fails, the bearer network fails, or other sudden disasters occur.

[0110] Therefore, how to predict the occurrence of signaling storms is an urgent problem to be solved.

[0111] Figure 3 It is a schematic block diagram of a communication system 300 provided in an embodiment of the present application.

[0112] See also Figure 3 OSS 310 may interact with MDAF 320. For example, MDAF 320 may provide MDAS services, and OSS 310 may request MDAF 320 to predict signaling storms or analyze network systems or network elements in the network system through the MDAS services provided by MDAF 320. MDAF 320 may predict signaling storms or analyze network systems or network elements in the network system according to the request received from OSS 310, and send a prediction or analysis report to OSS 310.

[0113] When the network element 330 is a physical network function (PNF), the MDAF 320 can send a request message to the network element 330 to request information such as performance management data (PM). When the network element 330 is a virtual network function (VNF), the MDAF 320 can send a request message to the network function virtualization (NFV) management and orchestration (MANO) 340 to request information such as PM and virtual resource usage information. The MDAF 320 can predict signaling storms or analyze the network system or the network elements in the network system based on the information obtained.

[0114] Figure 4 4 is a schematic flow chart of a network analysis method 400 provided in an embodiment of the present application. The method 400 can predict the occurrence of a signaling storm. Figure 4 Method 400 is introduced.

[0115] S410, a first device receives a first request from a second device, the first request being used to request the first device to determine whether a signaling storm event exists, the signaling storm event being used to indicate that a network has a risk of a signaling storm occurring. Accordingly, the second device sends the first request to the first device.

[0116] Exemplarily, the first device may be a service provider of the MDAS, or the first device may be the MDAF 320. However, the present application is not limited thereto, and the first device may also be other devices. The second device may be a requester, or the OSS 310. Alternatively, the second device may be other devices.

[0117] The first request may be any request, and the first request may be carried in any message. The first request may also have other names, such as a signaling storm event discovery request, etc., which is not limited in the present application.

[0118] A signaling storm event is used to indicate that the network is at risk of a signaling storm. The network in method 400 may be the aforementioned network system, and the network may include multiple network elements, and the multiple network elements may be core network elements, access network devices, bearer network elements, etc. The existence of a signaling storm event indicates that the network is at risk of a signaling storm. It is understandable that the existence of a signaling storm event does not mean that a signaling storm has occurred, nor does it mean that a fault (fault or failure) has occurred. The existence of a signaling storm event may also be expressed in other ways, such as the occurrence of a signaling storm event, the appearance of a signaling storm event, etc., which is not limited in this application.

[0119] It should be noted that signaling storm and failure are two different concepts. When a signaling storm occurs, there may be no failure. Some time after the signaling storm occurs, a failure may occur due to the continuous accumulation of signaling in a network element in the network. However, handling the failure at this time requires a lot of resources, and the failure has already caused business losses. It can be seen that signaling storm and failure are concepts at different levels. In some embodiments, MDAF can predict that the network has not failed or has failed. Alternatively, MDAF can determine that the network has not failed or has failed. Alternatively, the network has not failed or has failed. It can be understood that an alarm does not mean that a failure has occurred. The alarm may just be an anomaly in the network, which can be recovered through the network's self-healing mechanism and will not affect the network.

[0120] S420, the first device obtains a network threshold, where the network threshold is used to indicate the amount of signaling that the network can support.

[0121] The number of signaling can be a specific number or a relative number. As an example in which the number of signaling is a specific number, the number of signaling can be 1000. As an example in which the number of signaling is a relative value, the number of signaling can be 10 times a certain benchmark. Among them, the above-mentioned benchmark can be set manually, for example, set to 100. The above-mentioned benchmark can also be the specific number of signaling received by the network during the last signaling storm, signaling storm event or failure. The above-mentioned benchmark can also be the specific number of signaling received by the network at a certain point in time. The above-mentioned time point can be a specific time point, such as a moment in the past, or a relative time point, such as a time point a period of time (for example, 30 days) ago from the time point of executing S420. The above-mentioned time length can be pre-configured. It should be noted that the present application does not limit the benchmark, and the benchmark can also be set in other ways.

[0122] It is understandable that under a certain performance requirement, the network has a maximum number of signaling that can be supported. For example, when the registration success rate is 80% and the single-user registration duration is 10 seconds, there is a maximum number of user registration requests that the network can support. In another expression, the network threshold is used to indicate the number of signaling that the network can process while achieving the performance requirement. Alternatively, the network threshold is used to indicate the number of signaling that the network can process under performance conditions. The desired target can be determined by the second device or other devices.

[0123] The network threshold may be used to indicate the maximum number of signalings that the network can support, or may be used to indicate a number of signalings that is smaller than the maximum number of signalings that the network can support. For example, if the maximum number of signalings that the network can support is 1000, the network threshold may be 1000, or any value less than 1000. For example, if the maximum number of signalings that the network can support is 10 times, the network threshold may be 10 times, or any value less than 10 times.

[0124] The maximum number of signaling messages that a network can support may also be referred to as the maximum value of the increase in the number of signaling messages, or the maximum signaling impact that the entire network can support, or the maximum value of the increase in the key performance indicator (KPI) (for example, the maximum number of sessions that a network can support, or the maximum number of user registration requests that a network can support).

[0125] Optionally, in another implementation scenario of the above embodiment, S420 includes: the first device receives the network threshold from the second device.

[0126] The network threshold may be carried in the first request. In other words, the first request may include the network threshold. In this way, the first device may determine the network threshold according to the first request. In other words, the first device may obtain the network threshold from the first request.

[0127] However, the present application does not limit the specific manner in which the first device receives the network threshold. For example, the network threshold may also be carried in other messages. In other words, other messages may include the network threshold. In this way, the first device may determine the network threshold based on other messages. In other words, the first device may obtain the network threshold from other messages.

[0128] The first device receiving the network threshold from the second device can be understood as the first device receiving information indicating the network threshold.

[0129] Based on the above scheme, the network threshold can be sent by the second device to the first device, so that the first device can predict whether a signaling storm event exists based on the network threshold required by the second device, thereby achieving the second device's desired goal of preventing signaling storms.

[0130] Optionally, in another implementation scenario of the above embodiment, S420 includes: the first device determines the network threshold according to availability parameters of multiple network elements in the network.

[0131] The availability parameter may also be referred to as an availability index. For example, the plurality of network elements include a first network element, a second network element, and a third network element. The availability parameter of the first network element may be the performance management data of the first network element under a first preset signaling quantity. The availability parameter of the second network element may be the performance management data of the second network element under a second preset signaling quantity. The availability parameter of the third network element may be the performance management data of the third network element under a third preset signaling quantity.

[0132] Among them, the first preset signaling quantity, the second preset signaling quantity and the third preset signaling quantity can be specific quantities or relative quantities. The meanings of the specific quantity and the relative quantity refer to the embodiment of S420 above. The first preset signaling quantity, the second preset signaling quantity and the third preset signaling quantity can be all the same, partially the same or all different. Below, taking the first preset signaling quantity as an example, the embodiments of the second preset signaling quantity and the third preset signaling quantity can refer to the embodiment of the first preset signaling quantity.

[0133] The first preset signaling quantity can be set to one or more. Thus, the availability parameter of the first network element can be one or more. In the case where there are multiple availability parameters of the first network element, the availability parameter of the first network element can be used to indicate the performance management data or KPI of the first network element under different signaling impacts. The maximum number of signalings that each network element in multiple network elements can theoretically support. The first preset signaling quantity can be the maximum number of signalings that the first network element can support, or it can be a signaling quantity smaller than the maximum number of signalings that can be supported. For example, the maximum number of signalings that the first network element can support is 500, and the first preset signaling quantity can be 500, or it can be any value less than 500. For example, the maximum number of signalings that the first network element can support is 5 times, and the first preset signaling quantity can be 5 times, or it can be any value less than 5 times.

[0134] The above example only takes the case where the multiple network elements include the first network element, the second network element and the third network element, and the present application does not limit this. For example, the multiple network elements may include more or fewer network elements.

[0135] The performance management data may be PM. For example, when the first network element is AMF, the performance management data of the first network element may be the number of registered users, the registration success rate, the registration duration of a single user, the maximum registration duration, etc. It is understandable that the performance management data may also include other parameters. For example, the average registration duration of multiple users, the maximum registration duration of multiple users, the number of registration failures, etc.

[0136] The lower the availability parameter of a network element, the lower the number of signalings that the network element can support. The higher the availability parameter of a network element, the higher the number of signalings that the network element can support. In other words, when the number of signalings is high, the availability parameter of a network element is low, indicating that the network element may not meet the expected target. When the number of signalings is high, the availability parameter of a network element is high, indicating that the network element may meet the expected target.

[0137] The first device comprehensively analyzes the availability parameters of multiple network elements in the network to determine the amount of signaling that the network can support, that is, the network threshold. The present application does not limit the specific method of determining the network threshold based on the availability parameter, for example, it can be based on an artificial intelligence (AI) algorithm or other algorithms.

[0138] S430, the first device determines a first report according to the network threshold and the current signaling amount of the network, where the first report is used to indicate the existence of the signaling storm event.

[0139] The current number of signaling is a concept relative to the number of historical signaling. The current number of signaling can be the number of signaling when executing S430, or it can be the number of signaling when executing S410 or S420. The number of historical signaling is the number of signaling in the past period of time. For example, the number of historical signaling can be a "benchmark" for the relative number of signaling. In other words, the above-mentioned benchmark can also be the specific number of signaling received by the network during the last signaling storm, signaling storm event or failure. The number of historical signaling can be the specific number of signaling received by the network at a certain point in time. The above-mentioned time point can be a specific time point, such as a certain moment in the past, or it can be a relative time point, such as a time point some time ago (for example, 30 days) from the time point of executing S430. The above-mentioned duration can be pre-configured. It should be noted that the present application does not limit the benchmark, and the benchmark can also be set in other ways.

[0140] As an example, the network threshold is a specific number of signaling that the network can support, wherein S430 includes: when the current signaling number is greater than or equal to the network threshold, the first device determines that the signaling storm event exists.

[0141] As another example, the network threshold is a relative amount of signaling that the network can support, wherein S430 includes: the first device obtains the historical signaling amount of the network. When the current signaling amount relative to the historical signaling amount is greater than or equal to the network threshold, the first device determines that the signaling storm event exists.

[0142] The current signaling quantity may include the quantity of user registration request signaling, the quantity of sessions, etc. This application does not limit this.

[0143] It should be noted that the present application does not limit the specific method of determining the first report, and in addition to the above two examples, other methods may be used to determine the first report. For example, an AI algorithm or other algorithms may be used to determine the first report.

[0144] In addition, the present application does not limit the specific name of the first report, and the first report may also have other names, such as indication information, report information, feedback information, feedback list, etc. The first report is a name of a type of information.

[0145] The first report may indicate that the signaling storm event exists. Alternatively, the first report may indicate that the signaling storm event occurs or appears. Alternatively, the first report may indicate that the network has a risk of a signaling storm occurring.

[0146] As an alternative to S430, method 400 may include: the first device determines another report according to the network threshold and the current signaling amount of the network, the other report is used to indicate that the signaling storm event does not exist. The specific details of this embodiment are opposite to the description of the embodiment related to S430.

[0147] Based on the above solution, the first device can determine that the network has the risk of a signaling storm according to the signaling quantity that the network can support and the current signaling quantity of the network, thereby being able to predict the occurrence of a signaling storm.

[0148] Optionally, in another implementation scenario of the above embodiment, the method 430 further includes: the first device sends a first report to the second device. Correspondingly, the second device receives the first report from the first device.

[0149] The first device sending the first report to the second device can be understood as the first device sending information indicating the first report to the second device. The first report can be carried in any message. This application does not limit the specific name of the first report, and the first report can also have other names, such as indication information, report information, feedback information, feedback list, etc. The first report is the name of a type of information.

[0150] Optionally, in another implementation scenario of the above embodiment, the first report includes at least one of abnormal network element information, type information, cause information, ratio information or duration information, wherein the abnormal network element information is used to indicate the network element with abnormal traffic when the signaling storm event occurs, the type information is used to indicate that the event type is a signaling storm, the cause information is used to indicate the cause of the signaling storm event, the ratio information is used to indicate the ratio of the current signaling amount to the historical signaling amount of the network, and the duration information is used to indicate the predicted duration of the signaling storm event.

[0151] The first device may determine at least one of abnormal network element information, type information, cause information, ratio information, or duration information based on PM data such as KPI, for example, through an AI algorithm or other algorithms.

[0152] Table 1 shows an embodiment of the first report. It should be noted that Table 1 is only an example and does not constitute a limitation on the present application. For example, the first report may include more or less information than Table 1. For another example, the first report may replace any information in Table 1 with other information.

[0153] Table 1 Information element (IE) of the first report

[0154] Failure prediction object Potential failure type Event time Issue ID Perceived severity Root cause of signaling storm Changes in KPI Duration of signaling storm

[0155] Abnormal network element information can be carried in the field corresponding to the fault prediction target. For example, the fault prediction target can indicate the network element with abnormal traffic when the signaling storm event occurs. Among them, the availability parameter of the network element with abnormal traffic when the signaling storm event occurs is lower than the preset threshold. Alternatively, the availability parameters of multiple network elements in the network when the signaling storm event occurs are sorted from high to low, and the network element with abnormal traffic is the lower network element in the sorting.

[0156] The type information can be carried in the field corresponding to the potential fault type. In this way, the potential fault type can be used to indicate that the event type is a signaling storm. According to the type information, the second device can determine (or know) that a signaling storm event has occurred. In other words, the type information can be used to indicate that a signaling storm event has occurred or appeared. In other words, the type information can be used to indicate that a signaling storm event exists. The potential fault type can also be used to indicate other types, such as equipment alarm, software or processing error alarm, quality of service alarm, or security service or mechanism violation.

[0157] The time of event occurrence can be used to indicate the time or time point of occurrence of the signaling storm event. For example, the first device determines that a signaling storm event occurs at time A, and the time of event occurrence can be used to indicate time A. The event identifier can be used to indicate the identifier of the signaling storm event. The perceived severity can be used to indicate the severity of the signaling storm event. For example, the perceived severity can be divided into three levels: high, medium, and low, where the perceived severity is high, indicating that the severity of the signaling storm event is high.

[0158] The cause information may be carried in a field corresponding to the root cause of the signaling storm. For example, the cause information may indicate the cause of the signaling storm, such as network interruption, disaster or failure.

[0159] The ratio information may be carried in the field corresponding to the KPI change. For example, if the ratio of the current signaling amount to the historical signaling amount is 10, or the current signaling amount is 10 times the historical signaling amount, the ratio information or KPI change may be used to indicate 10.

[0160] The duration information may be carried in the field corresponding to the duration of the signaling storm. For example, the duration information may indicate 1000 minutes, indicating that the duration of the signaling storm event is 1000 minutes. The self-healing mechanism of the signaling storm often takes a long time, so it is necessary to prevent the occurrence of the signaling storm.

[0161] The present application does not limit the specific name of the first report, and the first report may also have other names, such as indication information, report information, feedback information, feedback list, etc. The first report is a name of a type of information.

[0162] Based on the above solution, the second device can improve the network according to the information in the first report, thereby helping the second device to prevent the occurrence of signaling storms.

[0163] Optionally, in another implementation scenario of the above embodiment, the method 400 further includes: the first device sends the maximum signaling quantity that the network can support to the second device. Correspondingly, the second device receives the maximum signaling quantity that the network can support from the first device.

[0164] For example, the first device may determine the maximum number of signalings that the network can support based on the availability parameters of multiple network elements in the network. This application does not limit the specific method of determining the maximum number of signalings that the network can support, for example, it may be determined by an AI algorithm or other algorithms.

[0165] The first device sends the maximum signaling quantity that the network can support to the second device, which can be understood as the first device sending information to the second device for indicating the maximum signaling quantity that the network can support.

[0166] Based on the above solution, the first device can send the maximum signaling quantity that the network can support to the second device, so that the second device can obtain the maximum signaling quantity that the network can support. The second device can improve the network according to the maximum signaling quantity that the network can support, thereby helping the second device to prevent the occurrence of signaling storms.

[0167] Optionally, in another implementation scenario of the above embodiment, the method 400 further includes: the second device determines the network threshold according to the maximum number of signaling that the network can support.

[0168] As an example, the second device may determine the network threshold as the maximum signaling quantity that the network can support. As another example, the second device may determine a signaling quantity that is smaller than the maximum signaling quantity that the network can support as the network threshold.

[0169] Based on the above solution, the second device can determine the network threshold according to the maximum signaling quantity that the network can support. In this way, the first device can predict whether a signaling storm event exists according to the network threshold required by the second device, thereby achieving the second device's desired goal of preventing signaling storms.

[0170] Optionally, in another implementation scenario of the above embodiment, the network threshold is less than the maximum number of signalings that the network can support.

[0171] For example, the maximum number of signalings that the network can support is 1000, and the network threshold may be 800. For another example, the maximum number of signalings that the network can support is 10 times, and the network threshold may be 8 times.

[0172] It is understandable that if the network threshold is equal to the maximum number of signaling that the network can support, then when the current number of signaling is close to the maximum number of signaling that the network can support, the first device can determine that a signaling storm event exists. In this case, the risk of a signaling storm occurring in the network is high, and a failure may even occur. If the network threshold is less than the maximum number of signaling that the network can support, then when the current number of signaling is less than the maximum number of signaling that the network can support, the first device can determine that a signaling storm event exists. In this case, the risk of a signaling storm occurring in the network is low, and the risk of a failure is even lower, thereby improving the effect of preventing signaling storms.

[0173] Based on the above solution, the network threshold is less than the maximum number of signalings that the network can support, so that the first device determines that a signaling storm event exists when the risk of a signaling storm occurring in the network is low. Furthermore, the above solution enables the second device to improve the network when the risk of a signaling storm is low, thereby improving the effect of preventing a signaling storm.

[0174] Optionally, in another implementation scenario of the above embodiment, the method 400 also includes: the first device determines the maximum number of signaling that the network can support based on availability parameters of multiple network elements in the network, wherein the multiple network elements in the network include a first network element, and the availability parameter of the first network element is the performance management data of the first network element under a first preset signaling number.

[0175] The availability parameter may also be referred to as an availability index. The first preset signaling quantity may be a specific quantity or a relative quantity. The meaning of the specific quantity and the relative quantity refer to the embodiment of S420 above.

[0176] The first preset signaling quantity may be the maximum signaling quantity that the first network element can support, or may be a signaling quantity that is smaller than the maximum signaling quantity that can be supported. For example, if the maximum signaling quantity that the first network element can support is 500, the first preset signaling quantity may be 500, or may be any value less than 500. For example, if the maximum signaling quantity that the first network element can support is 5 times, the first preset signaling quantity may be 5 times, or may be any value less than 5 times.

[0177] The performance management data may be PM. For example, when the first network element is AMF, the performance management data of the first network element may be the number of registered users, the registration success rate, the registration duration of a single user, the maximum registration duration, etc. It is understandable that the performance management data may also include other parameters. For example, the average registration duration of multiple users, the maximum registration duration of multiple users, the number of registration failures, etc.

[0178] The lower the availability parameter of a network element, the lower the number of signalings that the network element can support. The higher the availability parameter of a network element, the higher the number of signalings that the network element can support. In other words, when the number of signalings is high, the availability parameter of a network element is low, indicating that the network element may not meet the expected target. When the number of signalings is high, the availability parameter of a network element is high, indicating that the network element may meet the expected target.

[0179] The first device comprehensively analyzes the availability parameters of multiple network elements in the network to determine the maximum number of signaling that the network can support. This application does not limit the specific method of determining the maximum number of signaling that the network can support based on the availability parameters, for example, it can be based on an AI algorithm or other algorithms.

[0180] Based on the above scheme, the first device can determine the maximum signaling quantity that the network can support, so that the second device can obtain the maximum signaling quantity that the network can support. The second device can improve the network according to the maximum signaling quantity that the network can support, thereby helping the second device to prevent the occurrence of signaling storms.

[0181] Optionally, in another implementation scenario of the above embodiment, the method 400 also includes: the first device obtains the performance management data of the first network element and the virtual resource usage information of the first network element; the first device determines the availability parameters of the first network element based on the performance management data of the first network element and the virtual resource usage information of the first network element.

[0182] Exemplarily, the first device may obtain the performance management data and virtual resource usage information of the first network element from the NFV MANO 340. For example, the first device may send a request message to the NFV MANO 340 to request to obtain the performance management data and virtual resource usage information of the first network element. The NFV MANO 340 may send the performance management data and virtual resource usage information of the first network element to the first network element according to the request message.

[0183] The performance management data may be PM. For example, when the first network element is AMF, the performance management data of the first network element may be the number of registered users, the registration success rate, the registration duration of a single user, the maximum registration duration, etc. It is understandable that the performance management data may also include other parameters. For example, the average registration duration of multiple users, the maximum registration duration of multiple users, the number of registration failures, etc.

[0184] The virtual resource usage information may be used to indicate the usage of the virtual resources. The virtual resources may include at least one of a virtual processor, a virtual memory, or a virtual disk. The virtual resources may also include other resources. The virtual resource usage information may include virtual processor utilization, virtual memory utilization, virtual disk utilization, etc. The virtual resource usage information may also include other information.

[0185] The present application does not limit the specific method of determining the availability parameters based on the performance management data and the virtual resource usage information. For example, it can be based on an AI algorithm or other algorithms. It should be noted that the above only takes the first network element as an example. The embodiments of the present application can also determine the availability parameters of other network elements. For example, the first device can determine the availability parameters of the second network element based on the performance management data of the second network element and the virtual resource usage information of the second network element.

[0186] Based on the above solution, the first device can determine the availability parameter of the network element. The availability parameter is the performance management data of the network element under a preset signaling quantity. Therefore, the availability parameter of the network element can describe the availability of the network element under signaling impact, which helps to prevent the occurrence of signaling storms.

[0187] Optionally, in another implementation scenario of the above embodiment, the method 400 further includes: the first device sends an availability parameter of the first network element to the second device. Accordingly, the second device receives the availability parameter of the first network element from the first device, where the availability parameter of the first network element is performance management data of the first network element under a first preset signaling quantity.

[0188] Based on the above solution, the first device can send the availability parameter of the network element to the second device. The availability parameter is the performance management data of the network element under the preset signaling quantity. Therefore, the availability parameter of the network element can describe the availability of the network element under the signaling impact, which helps the second device prevent the occurrence of signaling storms.

[0189] Optionally, in another implementation scenario of the above embodiment, the method 400 further includes: the second device configuring the first network element according to the availability parameter of the first network element.

[0190] For example, the second device may send configuration information to the first network element, where the configuration information includes an availability parameter of the first network element.

[0191] Based on the above solution, the second device can configure the availability parameter on the network element. The availability parameter is the performance management data of the network element under the preset signaling quantity. Therefore, the availability parameter of the network element can describe the availability of the network element under the signaling impact, which helps the network element prevent the occurrence of signaling storms.

[0192] Optionally, in another implementation scenario of the above embodiment, the method 400 further includes: the first device receives a second request from the second device, the second request being used to request the first device to determine availability parameters of multiple network elements in the network. Accordingly, the second device sends the second request to the first device.

[0193] Exemplarily, the second request may include a network element identifier (or network element type) and a target signaling type. For example, the second request includes an identifier of the AMF and a registration request, so that the first device can determine the availability parameters of the AMF under a certain number of registration requests based on the second request.

[0194] The second request may be any request, and the second request may be carried in any message. The second request may also have other names, such as a network element capability evaluation request or a network element availability evaluation request, etc., which is not limited in the present application.

[0195] The second request may be triggered by an event, such as a holiday event, a network upgrade event, etc. In other words, when an event occurs, the second device may send the second request to the first device. The second request may also be actively sent by the second device, in other words, the second device sending the second request does not depend on the triggering of other events.

[0196] Based on the above solution, the first device can request the second device to determine the availability parameter of the network element. The availability parameter is the performance management data of the network element under the preset signaling quantity, and the availability parameter of the network element can describe the availability of the network element under the signaling impact. Therefore, the above solution helps to achieve the desired goal of the second device to prevent signaling storms.

[0197] Optionally, in another implementation scenario of the above embodiment, the multiple network elements in the network also include a second network element, wherein the method 400 further includes: the first device obtains an availability parameter of the second network element, the availability parameter of the second network element is the performance management data of the second network element under a second preset signaling quantity, the second network element is a bottleneck network element, wherein when the signaling storm occurs, the availability parameter of the second network element does not meet the expected target; the first device determines a second report according to the availability parameter of the second network element, wherein the second report is used to indicate capacity expansion of the second network element. Accordingly, the second device receives the second report from the first device.

[0198] As an example, the first device may determine the availability parameter of the second network element according to the performance management data of the second network element and the virtual resource usage information of the second network element, thereby enabling the first device to obtain the availability parameter of the second network element. As another example, the first device may obtain the availability parameter of the second network element from NFV MANO 340 or the second device. The second network element may have configured the availability parameter, so the first device may send a request message to NFV MANO 340 or the second device, requesting NFV MANO 340 or the second device to feedback the availability parameter of the second network element. NFV MANO340 or the second device queries the configuration information of the second network element, thereby obtaining the availability parameter of the second network element, and sending the availability parameter of the second network element to the first device. The first device receives the availability parameter of the second network element from NFV MANO 340 or the second device, thereby enabling the first device to obtain the availability parameter of the second network element.

[0199] The first device may determine that the second network element is a bottleneck network element according to the availability parameters of multiple network elements in the network. For example, if the availability parameter of the second network element is less than the availability parameters of other network elements, the second network element may be determined to be a bottleneck network element. The bottleneck network element may be one or more network elements.

[0200] In some embodiments, the desired goal includes a desired duration for resolving a signaling storm and / or a maximum number of users that the network can support.

[0201] Based on the above scheme, the expected target may include the expected duration of resolving the signaling storm and / or the maximum number of users that the network can support. The second device provides improvement suggestions for the network element according to the above expected target, so that the network element can meet the expected duration and the maximum number of users in the expected target, thereby enhancing the availability of the network.

[0202] A network element whose availability parameter does not meet the expected target can be called a bottleneck network element. A bottleneck network element is a network element with weak resistance to signaling impact among multiple network elements in the network. When a signaling storm occurs, the availability parameter of the bottleneck network element does not meet the expected target. Therefore, the bottleneck network element cannot meet the expected time to resolve the signaling storm, or cannot meet the maximum number of users required to be supported by the network. In this way, taking other measures such as flow control on the bottleneck network element cannot make the bottleneck network element meet the expected target. At this time, expanding the capacity of the bottleneck network element can avoid the occurrence of signaling storms.

[0203] Expanding the capacity of the second network element may be understood as increasing the virtual resources of the second network element, such as increasing the input and output upper limit of the virtual processor of the second network element, the capacity of the virtual memory, or the capacity of the virtual disk.

[0204] In some embodiments, the first device determines the second report based on an availability parameter and a desired target of the second network element.

[0205] As an example, the first device may determine the second report based on the availability parameter and convergence information of the second network element, wherein the convergence information is used to indicate the expected time length for the network to process the signaling received by the network within a preset time window after a signaling storm occurs.

[0206] For example, the preset event window may be 180 seconds. Within 180 seconds after the signaling storm occurs, the network receives multiple connection requests from terminal devices, and the convergence information may indicate that the network takes 200 seconds to process these connection requests. The expected duration indicated by the convergence information may be calculated from the start time of the preset time window, in other words, from the time the signaling storm occurs. For example, when the expected duration indicated by the convergence information is less than or equal to the duration threshold, the first device may suggest that the second device expand the capacity of the second network element in order to enable the network to more quickly achieve the expected duration that the second device expects to resolve the signaling storm. The duration threshold may be set in advance.

[0207] As another example, the first device may determine the second report based on the availability parameter, user number information, and convergence information of the second network element. The user number information is used to indicate the number of user online requests received by the network within a preset time window that the network can process after the signaling storm occurs. That is, the user number information can be used to indicate the maximum number of users that the network can support.

[0208] As an example of combining the number of users information with the convergence information, within 180 seconds after the signaling storm occurs, the network receives multiple user online requests from the terminal device, and the second network element expects the network to process 100 user upper limit requests within 200 seconds. It is understandable that the number of users information may be from the second device. That is, in some embodiments, the second device sends the number of users information to the first device, and correspondingly, the first device receives the number of users information from the second device. Therefore, the number of users information belongs to the expected target of the second device.

[0209] The suggestion for expanding the capacity of the second network element indicated in the first report may be referred to as a scaling recommendation. It should be noted that the second report, convergence information, and user number information may also have other names, which are not limited in the present application.

[0210] Based on the above solution, when the second network element is a bottleneck network element, the first device can suggest the second device to expand the capacity of the second network element, so as to prevent the occurrence of a signaling storm.

[0211] In some other embodiments, the second report may also include a flow control recommendation. For example, the flow control recommendation may indicate configuring a new flow control parameter for the third network element. Table 2 is an example of a recommendation report.

[0212] Table 2 Recommended IEs to report

[0213] Flow Control Recommendations for Flow Control Network Elements Suggestions for expanding bottleneck network elements (sclingRecommendations)

[0214] Among them, the recommendation information indicating the flow control configuration of the third network element can be carried in the flow control configuration recommendation of the flow control network element, and the recommendation information indicating the capacity expansion of the second network element can be carried in the capacity expansion recommendation for the bottleneck network element.

[0215] Optionally, in another implementation scenario of the above embodiment, the method 400 further includes: the first device receives a third request from the second device, wherein the third request includes the desired target, and the third request is used to request the first device to provide suggestions for the network element in the network. Accordingly, the second device sends the third request to the first device.

[0216] The third request may be any request, and the third request may be carried in any message. The third request may also have other names, such as a signaling storm event analysis request, etc., which is not limited in this application. As an example, the third request may also carry an availability parameter of a network element.

[0217] Based on the above scheme, the first device can request the second device to provide improvement suggestions for the network element, and the request can carry the expected goal, thereby helping to achieve the second device's expected goal of preventing signaling storms.

[0218] Optionally, in another implementation scenario of the above embodiment, the method 400 also includes: the first device registers a first MDAS and a second MDAS, wherein the capability information in the registration parameters corresponding to the first MDAS is used to indicate that the first MDAS is capable of determining whether the signaling storm event exists, and the capability information in the registration parameters corresponding to the second MDAS is used to indicate that the second MDAS is capable of providing recommendations for network elements in the network.

[0219] The first device may send a request message to a management service registration (MnS) registration network element, requesting to create registration parameters of the first MDAS and registration parameters of the second MDAS. After receiving the request message, the management service registration network element creates registration parameters of the first MDAS and registration parameters of the second MDAS according to the request message. Table 3 shows the registration parameters of the first MDAS or the second MDAS.

[0220] Table 3 Registration parameters of the first MDAS or the second MDAS

[0221] Label (MnSLabel) Type (MnSType) Version (MnSVersion) Access address (MnSAddress) Management Scope (MnSScope) SupportedCapabilities

[0222] Among them, the label may indicate the identifier of the first MDAS or the second MDAS. The type may include MDAS, and the type is used to indicate that the service type of the first MDAS or the second MDAS is MDAS. The access address may indicate the access address of the first MDAS or the second MDAS. The management scope indicates the management scope of the first MDAS or the second MDAS, for example, the management scope corresponds to the identifier of the subnetwork that the first MDAS can manage. Support capabilities may include fault management, signaling analysis, preventive assessment, etc. Support capabilities can be used to indicate capability information supported by the MDAS. Among them, fault management can be used to indicate that the capability of the MDAS supports determining whether the signaling storm event exists, and signaling analysis can be used to indicate that the capability of the MDAS supports providing suggestions for network elements in the network. For fault management capabilities, it can be further subdivided, for example, it can be divided into faults that support signaling congestion types and faults that do not support signaling congestion types.

[0223] The capability information in the registration parameters is carried in the supported capability field. For example, the supported capability of the first MDAS may be fault management, and support signaling congestion type faults. The supported capability of the second MDAS may be signaling analysis.

[0224] Based on the above scheme, the second device can access the access address of the first MDAS or the second MDAS as needed, avoiding the delay caused by the first device identifying the intention of the second device and calling the corresponding MDAS, thereby improving the efficiency of network analysis.

[0225] Optionally, in another implementation scenario of the above embodiment, the method 400 also includes: the second device queries the registration parameters of the first device; the second device receives the registration parameters of the first management data analysis service MDAS and the registration parameters of the second MDAS, the capability information in the registration parameters corresponding to the first MDAS is used to indicate that the first MDAS can determine whether the signaling storm event exists, and the capability information in the registration parameters corresponding to the second MDAS is used to indicate that the second MDAS can provide suggestions for network elements in the network.

[0226] Based on the above scheme, the second device can access the access address of the first MDAS or the second MDAS as needed, avoiding the delay caused by the first device identifying the intention of the second device and calling the corresponding MDAS, thereby improving the efficiency of network analysis.

[0227] Figure 5 is a schematic flow chart of a registration method 500 provided in an embodiment of the present application. Figure 5 Method 500 is described.

[0228] S510 , the MDAF 320 sends a request message to the MnS registration network element, where the request message is used to request the creation of registration parameters. Correspondingly, the MnS registration network element receives the request message from the MDAF 320 .

[0229] The MDAF 320 may be the first device. The registration parameter may be a registration parameter of the first MDAS or the second MDAS. The registration parameter may also be referred to as MnS information (Info).

[0230] S520, the MnS registration network element creates registration parameters to complete the registration.

[0231] For example, the registration parameter may be a registration parameter of the first MDAS or the second MDAS. The registration parameter may include at least one of a label, a type, a version, an access address, a management scope, and a support capability, and see the embodiment related to Table 3 for details.

[0232] Figure 6 600 is a schematic flow chart of a registration parameter query method 600 provided in an embodiment of the present application. Figure 6 Method 600 is described.

[0233] S610 , the OSS 310 sends a query message to the MnS registration network element, where the query message is used to request to query the registration parameters. Correspondingly, the MnS registration network element receives the query message from the OSS 310 .

[0234] Among them, OSS 310 may be the second device.

[0235] S620, the MnS registration network element sends registration parameters to the OSS 310. Correspondingly, the OSS 310 receives the registration parameters from the MnS registration network element.

[0236] Exemplarily, the registration parameters may include the registration parameters of the first MDAS and / or the second MDAS. The registration parameters may include at least one of a label, a type, a version, an access address, a management scope, and a support capability, for details, see the relevant embodiments of Table 3. The registration parameters may also include registration parameters of other services, which are not limited in this application.

[0237] Figure 7 700 is a schematic flow chart of a network element capability evaluation method 700 provided in an embodiment of the present application. Figure 7 Method 700 is described.

[0238] S710 , the OSS 310 sends a second request to the MDAF 320 , where the second request is used to request the MDAF 320 to determine availability parameters of a plurality of network elements in the network.

[0239] Exemplarily, the second request may include a network element identifier (or network element type) and a target signaling type. For example, the second request includes an identifier and a registration signaling of the AMF, so that the first device can determine the availability parameters of the AMF under a certain number of registration signalings according to the second request. The second request may be any request, and the second request may be carried in any message. The second request may also have other names, such as a network element capability evaluation request or a network element availability evaluation request, etc., which are not limited in this application. The second request may be triggered by an event, such as a holiday event, a network upgrade event, etc. In other words, when an event occurs, OSS 310 may execute S710. The second request may also be actively sent by OSS 310. In other words, OSS 310 may actively execute S710 without relying on the triggering of other events.

[0240] S720 , MDAF 320 receives performance management data and virtual resource usage information from NFV MANO 340 . Accordingly, NFV MANO 340 sends the performance management data and virtual resource usage information to MDAF 320 .

[0241] The performance management data may be PM. For example, when the first network element is AMF, the performance management data of the first network element may include the number of registrations, the registration success rate, the registration duration of a single user, etc. It is understandable that the performance management data may also include other parameters. For example, the average registration duration of multiple users, the maximum registration duration of multiple users, the number of registration failures, etc.

[0242] The virtual resource usage information may be used to indicate the usage of the virtual resource. The virtual resource may include at least one of a virtual processor, a virtual memory, or a virtual disk. The virtual resource may also include other resources. The virtual resource usage information may include virtual processor utilization, virtual memory utilization, virtual disk utilization, etc. The virtual resource usage information may also include other information.

[0243] In some embodiments, before S720 , the method 700 further includes: the NFV MANO 340 receives a request message from the MDAF 320 , where the request message is used to request performance management data and virtual resource usage information. Accordingly, the MDAF 320 sends a request message to the NFV MANO 340 .

[0244] S730, MDAF 320 determines availability parameters of the network element according to the performance management data and the virtual resource usage information.

[0245] The availability parameter of a network element is the performance management data of the network element under the preset signaling quantity. The availability parameter can also be called an availability index. The preset signaling quantity can be a specific quantity or a relative quantity.

[0246] S740 , MDAF 320 sends the availability parameter of the network element to OSS 310 . Correspondingly, OSS 310 receives the availability parameter of the network element from MDAF 320 .

[0247] Furthermore, OSS 310 may configure the network element according to the availability parameter of the network element.

[0248] Figure 8 800 is a schematic flow chart of a network capability evaluation method 800 provided in an embodiment of the present application. Figure 8 Method 800 is described.

[0249] S810, OSS 310 sends a fourth request to MDAF 320, where the fourth request is used to request to determine the maximum signaling quantity and bottleneck network element that the network can support.

[0250] Exemplarily, the fourth request may include a network scope identifier and a target signaling type, wherein the network scope identifier may be a subnetwork ID or identifiers of multiple network elements, or specific subnet location information.

[0251] The fourth request may be any request, and the fourth request may be carried in any message. The fourth request may also have other names, such as a network capability evaluation request or a network availability evaluation request, etc., which is not limited in this application.

[0252] The fourth request may be triggered by an event, such as a holiday event, a network upgrade event, etc. In other words, when an event occurs, OSS 310 may execute S810. The fourth request may also be actively sent by OSS 310, in other words, OSS 310 may actively execute S810 without relying on the triggering of other events.

[0253] S820, MDAF 320 obtains availability parameters of multiple network elements in the network.

[0254] In some embodiments, MDAF 320 may obtain the availability parameter of the network element from the configuration information of the network element. For example, MDAF 320 may send a request message to NFV MANO 340 or OSS 330, requesting NFV MANO 340 or OSS 330 to feedback the availability parameter of the second network element. NFV MANO 340 or OSS 330 queries the configuration information of the second network element, thereby obtaining the availability parameter of the second network element, and sends the availability parameter of the second network element to MDAF 320. MDAF 320 receives the availability parameter of the second network element from NFV MANO 340 or OSS 330, thereby enabling MDAF 320 to obtain the availability parameter of the second network element. If the network element is not configured with the availability parameter, S720 and S730 may be executed to determine the availability parameter. For another example, MDAF 320 may determine the availability parameter of the network element based on the performance management data and virtual resource usage information of the network element, thereby enabling the acquisition of the availability parameters of each network element.

[0255] S830, MDAF 320 determines the bottleneck network element and the maximum signaling quantity that the network can support according to the availability parameters of multiple network elements in the network.

[0256] S840, MDAF 320 sends the maximum signaling quantity that the network can support to OSS 310. Correspondingly, OSS 310 receives the maximum signaling quantity that the network can support from MDAF 320.

[0257] In some embodiments, the method 800 further includes: the MDAF 320 sending the information of the bottleneck network element to the OSS 310. Accordingly, the OSS 310 receives the information of the bottleneck network element from the MDAF 320.

[0258] Fig. 9 900 is a schematic flow chart of a signaling storm event discovery method 900 provided in an embodiment of the present application. Fig. 9 Method 900 is described.

[0259] S910, OSS 310 sends a first request to the first MDAS, the first request is used to request the first MDAS to determine whether there is a signaling storm event, the signaling storm event is used to indicate that the network has a risk of a signaling storm. For details, please refer to the embodiment of S410, which will not be repeated here.

[0260] The first request may carry a network threshold. For example, in S830, the maximum number of signalings that OSS 310 receives from MDAF 320 that the network can support is 10 times, and the network threshold in the first request sent by OSS 310 may be 8 times. It should be noted that the above is only an example and does not constitute a limitation of the present application.

[0261] S920, the first MDAS receives the current signaling quantity of the network from the NFV MANO 340. Accordingly, the NFV MANO 340 sends the current signaling quantity of the network to the first MDAS.

[0262] In some embodiments, before S920 , the method 900 further includes: the NFV MANO 340 receives a request message from the first MDAS, the request message being used to request the current signaling quantity of the network. Accordingly, the first MDAS sends a request message to the NFV MANO 340 .

[0263] S930: The first MDAS determines a first report according to the current signaling amount of the network and the network threshold, where the first report is used to indicate the existence of a signaling storm event.

[0264] S940: The first MDAS sends a first report to the OSS 310. Accordingly, the OSS 310 receives the first report from the first MDAS.

[0265] Fig.10 1 is a schematic flow chart of a signaling storm event analysis method 1000 provided in an embodiment of the present application. Fig.10 Method 1000 is described.

[0266] S1010, the OSS 310 sends a third request to the second MDAS, where the third request is used to request the second MDAS to provide suggestions for network elements in the network.

[0267] S1020, the second MDAS receives the performance management data and virtual resource usage information from the NFV MANO 340. Accordingly, the NFV MANO 340 sends the performance management data and virtual resource usage information to the second MDAS.

[0268] The performance management data may be PM. For example, when the first network element is AMF, the performance management data of the first network element may include the number of registrations, the registration success rate, the registration duration of a single user, etc. It is understandable that the performance management data may also include other parameters. For example, the average registration duration of multiple users, the maximum registration duration of multiple users, the number of registration failures, etc.

[0269] The virtual resource usage information may be used to indicate the usage of the virtual resource. The virtual resource may include at least one of a virtual processor, a virtual memory, or a virtual disk. The virtual resource may also include other resources. The virtual resource usage information may include virtual processor utilization, virtual memory utilization, virtual disk utilization, etc. The virtual resource usage information may also include other information.

[0270] In some embodiments, before S1020 , the method 1000 further includes: the NFV MANO 340 receives a request message from the second MDAS, the request message being used to request performance management data and virtual resource usage information. Accordingly, the second MDAS sends a request message to the NFV MANO 340 .

[0271] S1030: The second MDAS determines a second report according to the performance management data and the virtual resource usage information. The second report is used to indicate capacity expansion of the network element.

[0272] S1040: The second MDAS sends a second report to the OSS 310. Accordingly, the OSS 310 receives the second report from the second MDAS.

[0273] Fig.11 1 is a schematic flow chart of another network analysis method 1100 provided in an embodiment of the present application. The method 1100 may be a combination of the method 900 and the method 1000, except that the method 1100 does not distinguish between the first MDAS and the second MDAS, and combines the first MDAS and the second MDAS into the MDAF 320. Fig.11 Method 1100 is described.

[0274] S1110, OSS 310 sends a first request to MDAF 320, the first request is used to request MDAF 320 to determine whether there is a signaling storm event, the signaling storm event is used to indicate that the network has a risk of a signaling storm. For details, please refer to the embodiment of S410, which will not be repeated here.

[0275] The first request may carry a network threshold. For example, in S830, the maximum number of signalings that OSS 310 receives from MDAF 320 that the network can support is 10 times, and the network threshold in the first request sent by OSS 310 may be 8 times. It should be noted that the above is only an example and does not constitute a limitation of the present application.

[0276] S1120, MDAF 320 receives the current signaling quantity of the network from NFV MANO 340. Accordingly, NFV MANO 340 sends the current signaling quantity of the network to MDAF 320.

[0277] In some embodiments, before S1120 , the method 1100 further includes: the NFV MANO 340 receives a request message from the MDAF 320 , where the request message is used to request the current signaling quantity of the network. Accordingly, the MDAF 320 sends a request message to the NFV MANO 340 .

[0278] S1130, the MDAF 320 determines a first report according to the current signaling amount of the network and the network threshold, where the first report is used to indicate the presence of a signaling storm event.

[0279] S1140 , the MDAF 320 sends a first report to the OSS 310 . Accordingly, the OSS 310 receives the first report from the MDAF 320 .

[0280] S1150: OSS 310 sends a third request to MDAF 320, where the third request is used to request MDAF 320 to provide suggestions for network elements in the network.

[0281] S1160 , MDAF 320 receives performance management data and virtual resource usage information from NFV MANO 340 . Accordingly, NFV MANO 340 sends the performance management data and virtual resource usage information to MDAF 320 .

[0282] The performance management data may be PM. For example, when the first network element is AMF, the performance management data of the first network element may include the number of registrations, the registration success rate, the registration duration of a single user, etc. It is understandable that the performance management data may also include other parameters. For example, the average registration duration of multiple users, the maximum registration duration of multiple users, the number of registration failures, etc.

[0283] The virtual resource usage information may be used to indicate the usage of the virtual resource. The virtual resource may include at least one of a virtual processor, a virtual memory, or a virtual disk. The virtual resource may also include other resources. The virtual resource usage information may include virtual processor utilization, virtual memory utilization, virtual disk utilization, etc. The virtual resource usage information may also include other information.

[0284] In some embodiments, before S1160 , the method 1100 further includes: the NFV MANO 340 receives a request message from the MDAF 320 , the request message being used to request performance management data and virtual resource usage information. Accordingly, the MDAF 320 sends a request message to the NFV MANO 340 .

[0285] S1170, MDAF 320 determines a second report according to the performance management data and the virtual resource usage information. The second report is used to indicate capacity expansion of the network element.

[0286] S1180 : MDAF 320 sends a second report to OSS 310 . Accordingly, OSS 310 receives the second report from MDAF 320 .

[0287] The following is an introduction to the device embodiment corresponding to the method embodiment of the present application. The following is only a brief introduction to the device, and the specific implementation steps and details of the scheme can refer to the method embodiment above.

[0288] In order to implement the functions in the method provided in this application, the terminal device and the network device may include a hardware structure and / or a software module, and implement the above functions in the form of a hardware structure, a software module, or a hardware structure plus a software module. Whether one of the above functions is executed in the form of a hardware structure, a software module, or a hardware structure plus a software module depends on the specific application and design constraints of the technical solution.

[0289] Fig.12 1 is a schematic block diagram of a communication device 1200 according to an embodiment of the present application. The communication device 1200 includes a processor 1210 and a transceiver 1220, and the processor 1210 and the transceiver 1220 may be interconnected via a bus 1230. The communication device 1200 may be a first device or a second device.

[0290] Optionally, the communication device 1200 may further include a memory 1240. The memory 1240 includes, but is not limited to, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM), or a portable read-only memory (CD-ROM), and the memory 1240 is used for related instructions and data.

[0291] The processor 1210 may be one or more central processing units (CPUs). When the processor 1210 is a CPU, the CPU may be a single-core CPU or a multi-core CPU. The processor 1210 may be a signal processor, a chip, or other integrated circuit that can implement the method of the present application, or a portion of the circuit for processing functions in the aforementioned processor, chip, or integrated circuit. In addition, the transceiver 1220 may also be referred to as an input-output interface or a communication interface. The transceiver 1220 is used for input or output of signals or data, and may also be an input-output circuit.

[0292] When the communication device 1200 is a first device, exemplarily, the communication device 1200 includes a processor 1210 and a transceiver 1220. The transceiver 1220 is used to receive a first request from a second device, the first request is used to request the first device to determine whether there is a signaling storm event, the signaling storm event is used to indicate that the network has a risk of a signaling storm; the processor 1210 is used to obtain a network threshold, the network threshold is used to indicate the number of signalings that the network can support, and is used to determine a first report according to the network threshold and the current number of signalings of the network, the first report is used to indicate the existence of the signaling storm event.

[0293] When the communication device 1200 is the second device, illustratively, the communication device 1200 includes a transceiver 1220. The transceiver 1220 is used to send a first request to the first device, the first request is used to request the first device to determine whether there is a signaling storm event, the signaling storm event is used to indicate that the network has a risk of a signaling storm, and is used to receive a first report from the first device, the first report is used to indicate the presence of the signaling storm event.

[0294] The above description is only an exemplary description. For specific content, please refer to the content shown in the above method embodiment. Figure 6 The implementation of each operation in can also refer to Figures 3 to 11The corresponding description of the method embodiment shown.

[0295] Fig.13 1 is a schematic block diagram of another communication device 1300 of an embodiment of the present application. The communication device 1300 may be a first device or a second device, or a chip or module in the first device or the second device, for implementing the method involved in the above embodiment. The communication device 1300 includes a transceiver unit 1310. The transceiver unit 1310 is exemplarily introduced below.

[0296] The transceiver unit 1310 may include a transmitting unit and a receiving unit. The transmitting unit is used to perform a transmitting action of the communication device, and the receiving unit is used to perform a receiving action of the communication device. For ease of description, the embodiment of the present application combines the transmitting unit and the receiving unit into one transceiver unit. A unified description is given here, and no further description is given later.

[0297] When the communication device 1300 is a first device, illustratively, the transceiver unit 1310 is configured to receive a first request from a second device.

[0298] Optionally, the communication device 1300 may further include a processing unit 1320, which is used to execute the content of the first device involving processing, coordination and other steps.

[0299] When the communication device 1300 is a second device, illustratively, the transceiver unit 1310 is configured to send a first request to the first device.

[0300] Optionally, the communication device 1300 may further include a processing unit 1320, which is used to execute the content of the steps involving processing, coordination, etc. of the second device.

[0301] The above contents are only exemplary descriptions. When the communication device 1300 is the first device or the second device, it will be responsible for executing the methods or steps related to the first device or the second device in the above method embodiments.

[0302] Optionally, the communication device 1300 further includes a storage unit 1330, and the storage unit 1330 is used to store a program or code for executing the aforementioned method.

[0303] Fig.12 and Fig.13 The device embodiment shown is used to implement Figures 3 to 11 The embodiments in . Fig.12 and Fig.13 The specific execution steps and methods of the device shown can refer to the contents of the aforementioned method embodiment.

[0304] Fig.14is a schematic block diagram of a communication system 1400 according to an embodiment of the present application. The communication system 1400 includes a first device and a second device, and the first device and the second device are used to implement the aforementioned Figures 3 to 11 Embodiment of the invention.

[0305] The present application also provides a chip, including a processor, for calling and executing instructions stored in a memory from the memory, so that a communication device equipped with the chip executes the methods in the above examples.

[0306] The present application also provides another chip, including: an input interface, an output interface, and a processor, wherein the input interface, the output interface, and the processor are connected via an internal connection path, and the processor is used to execute the code in the memory, and when the code is executed, the processor is used to execute the method in each of the above examples. Optionally, the chip also includes a memory, and the memory is used to store computer programs or codes.

[0307] The present application also provides a processor, which is coupled to a memory and is used to execute the method and function involving the first device or the second device in any of the above embodiments.

[0308] In another embodiment of the present application, a computer program product including instructions is provided. When the computer program product is run on a computer, the method of the above embodiment is implemented.

[0309] The present application also provides a computer program. When the computer program is executed in a computer, the method of the above embodiment is implemented.

[0310] In another embodiment of the present application, a computer-readable storage medium is provided, wherein the computer-readable storage medium stores a computer program, and when the computer program is executed by a computer, the method described in the above embodiment is implemented.

[0311] Those of ordinary skill in the art will appreciate that the units and algorithm steps of each example described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, or a combination of computer software and electronic hardware. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Professional and technical personnel can use different methods to implement the described functions for each specific application, but such implementation should not be considered to be beyond the scope of this application.

[0312] Those skilled in the art can clearly understand that, for the convenience and brevity of description, the specific working processes of the systems, devices and units described above can refer to the corresponding processes in the aforementioned method embodiments and will not be repeated here.

[0313] In the several embodiments provided in the present application, it should be understood that the disclosed systems, devices and methods can be implemented in other ways. For example, the device embodiments described above are only schematic. For example, the division of the units is only a logical function division. There may be other division methods in actual implementation, such as multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, indirect coupling or communication connection of devices or units, which can be electrical, mechanical or other forms.

[0314] The units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed on multiple network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the solution of this embodiment.

[0315] In addition, each functional unit in each embodiment of the present application may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit.

[0316] If the functions are implemented in the form of software functional units and sold or used as independent products, they can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present application can be essentially or partly embodied in the form of a software product that contributes to the prior art. The computer software product is stored in a storage medium and includes several instructions for a computer device (which can be a personal computer, a server, or a network device, etc.) to perform all or part of the steps of the methods described in each embodiment of the present application. The aforementioned storage medium includes: various media that can store program codes, such as a USB flash drive, a mobile hard disk, a read-only memory (ROM), a random access memory (RAM), a magnetic disk or an optical disk.

[0317] The above is only a specific implementation of the present application, but the protection scope of the present application is not limited thereto. Any person skilled in the art who is familiar with the present technical field can easily think of changes or substitutions within the technical scope disclosed in the present application, which should be included in the protection scope of the present application. Therefore, the protection scope of the present application should be based on the protection scope of the claims.

Claims

1. A network analysis method, characterized in that: include: The first device receives a first request from the second device, the first request is used to request the first device to determine whether there is a signaling storm event, the signaling storm event is used to indicate that there is a risk of a signaling storm occurring in the network; The first device acquires a network threshold, where the network threshold is used to indicate the amount of signaling that the network can support; The first device determines a first report according to the network threshold and the current signaling amount of the network, where the first report is used to indicate the existence of the signaling storm event.

2. The method according to claim 1, characterized in that The first report includes at least one of abnormal network element information, type information, cause information, ratio information or duration information, wherein the abnormal network element information is used to indicate the network element with abnormal traffic when the signaling storm event occurs, the type information is used to indicate that the event type is a signaling storm, the cause information is used to indicate the cause of the signaling storm event, the ratio information is used to indicate the ratio of the current signaling amount to the historical signaling amount of the network, and the duration information is used to indicate the predicted duration of the signaling storm event.

3. The method according to claim 1 or 2, characterized in that: The first device acquires a network threshold, including: The first device receives the network threshold from the second device.

4. The method according to claim 3, characterized in that Also includes: The first device sends a maximum signaling quantity that the network can support to the second device.

5. The method according to claim 4, characterized in that The network threshold is less than a maximum signaling quantity that the network can support.

6. The method according to claim 4 or 5, characterized in that: Also includes: The first device determines the maximum number of signalings that the network can support based on availability parameters of multiple network elements in the network, wherein the multiple network elements in the network include a first network element, and the availability parameter of the first network element is performance management data of the first network element under a first preset signaling number.

7. The method according to claim 6, characterized in that Also includes: The first device obtains performance management data of the first network element and virtual resource usage information of the first network element; The first device determines the availability parameter of the first network element according to the performance management data of the first network element and the virtual resource usage information of the first network element.

8. The method according to claim 7, characterized in that Also includes: The first device sends an availability parameter of the first network element to the second device.

9. The method according to claim 7 or 8, characterized in that: Also includes: The first device receives a second request from the second device, where the second request is used to request the first device to determine availability parameters of multiple network elements in the network.

10. The method according to any one of claims 1 to 9, characterized in that The multiple network elements in the network further include a second network element, wherein the method further includes: The first device obtains an availability parameter of the second network element, where the availability parameter of the second network element is performance management data of the second network element under a second preset signaling quantity, wherein when the signaling storm occurs, the availability parameter of the second network element does not meet an expected target; The first device determines a second report according to an availability parameter of the second network element, wherein the second report is used to indicate capacity expansion of the second network element.

11. The method according to claim 10, characterized in that The expected target includes an expected duration for resolving the signaling storm and / or a maximum number of users that the network can support.

12. The method according to claim 10 or 11, characterized in that: Also includes: The first device receives a third request from the second device, where the third request is used to request the first device to provide suggestions for network elements in the network, wherein the third request includes the desired target.

13. The method according to any one of claims 10 to 12, characterized in that Also includes: The first device registers a first management data analysis service MDAS and a second MDAS, wherein the capability information in the registration parameters corresponding to the first MDAS is used to indicate that the first MDAS can determine whether the signaling storm event exists, and the capability information in the registration parameters corresponding to the second MDAS is used to indicate that the second MDAS can provide suggestions for network elements in the network.

14. A network analysis method, characterized in that: include: The second device sends a first request to the first device, wherein the first request is used to request the first device to determine whether a signaling storm event exists, and the signaling storm event is used to indicate that the network is at risk of a signaling storm; the second device receives a first report from the first device, wherein the first report is used to indicate the existence of the signaling storm event.

15. The method according to claim 14, characterized in that Also includes: The second device sends a network threshold to the first device, where the network threshold is used to indicate the amount of signaling that the network can support.

16. The method according to claim 15, characterized in that Also includes: The second device receives a maximum signaling quantity that the network can support from the first device; The second device determines the network threshold according to a maximum signaling quantity that the network can support.

17. The method according to claim 16, characterized in that The network threshold is smaller than a maximum signaling quantity or a maximum signaling multiple that the network can support.

18. The method according to any one of claims 14 to 17, characterized in that The plurality of network elements in the network include a first network element, wherein the method further comprises: The second device receives an availability parameter of the first network element from the first device, where the availability parameter of the first network element is performance management data of the first network element under a first preset signaling quantity; The second device configures the first network element according to the availability parameter of the first network element.

19. The method according to claim 18, characterized in that Also includes: The second device sends a second request to the first device, where the second request is used to request the first device to determine availability parameters of multiple network elements in the network.

20. The method according to any one of claims 14 to 19, characterized in that The multiple network elements in the network further include a second network element, wherein the method further includes: The second device receives a second report from the first device, where the second report is used to indicate capacity expansion of the second network element, wherein when the signaling storm occurs, an availability parameter of the second network element does not meet a desired target.

21. The method according to claim 20, characterized in that The expected target includes an expected duration for resolving the signaling storm and / or a maximum number of users that the network can support.

22. The method according to claim 20 or 21, characterized in that The third request includes the desired target, and the third request is used to request the first device to provide suggestions for network elements in the network, wherein the method further includes: The second device sends the third request to the first device.

23. The method according to any one of claims 20 to 22, characterized in that Also includes: The second device queries the registration parameters of the first device; The second device receives registration parameters of a first management data analysis service MDAS and registration parameters of a second MDAS, the capability information in the registration parameters corresponding to the first MDAS being used to indicate that the first MDAS is capable of determining whether the signaling storm event exists, and the capability information in the registration parameters corresponding to the second MDAS being used to indicate that the second MDAS is capable of providing recommendations for network elements in the network.

24. A communication device, characterized in that: The method comprises at least one module, wherein the at least one module is used to execute the method according to any one of claims 1 to 13, or the at least one module is used to execute the method according to any one of claims 14 to 23.

25. A communication system, characterized in that: The method comprises a first device and a second device, wherein the first device is used to execute the method according to any one of claims 1 to 13, and the second device is used to execute the method according to any one of claims 14 to 23.

26. A communication device, characterized in that: It comprises a processing circuit and an input / output interface, wherein the input / output interface is used to input and / or output signals, and the processing circuit is used to execute the method described in any one of claims 1 to 13, or the processing circuit is used to execute the method described in any one of claims 14 to 23.

27. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores a computer program or instructions, and when the computer program or the instructions are executed on a computer, the method according to any one of claims 1 to 13 is executed, or the method according to any one of claims 14 to 23 is executed.

28. A communication method, characterized in that: The method is applied to a first device and a second device, wherein the method includes: The first device performs the method according to any one of claims 1 to 13; The second device performs the method according to any one of claims 14 to 23.

Images