Data acquisition and verification method and apparatus

Abstract

This application provides a data acquisition and verification method and apparatus. The method comprises the steps of: the network device transmitting first indication information to DCAF, wherein the first indication information indicates that a first access layer dataset of a terminal device can be provided to another network element only after the first access layer dataset has been authorized; the network device receiving first request information from ECAF or the non-access layer of the terminal device, wherein the first request information is used to request authorization of a second access layer dataset; the network device transmitting first information to ECAF or the non-access layer of the terminal device, wherein the first information indicates a first key, which is used for authorization of a third access layer dataset, and the third access layer dataset includes all or part of the data in the second access layer dataset; the network device receiving the first information from DCAF or the access layer of the terminal device; and the network device transmitting second information to DCAF or the access layer of the terminal device, wherein the second information indicates the verification result of the first key.

Description

Technical Field

[0001] This application relates to the field of communications, and specifically, to a data collection and verification method and apparatus.

Background Art

[0002] With the improvement of data storage and computing capabilities, artificial intelligence (AI) technology is being increasingly used. AI technology can be used in communication systems such as new radio (NR) systems to improve network performance and user experience through intelligent data collection and analysis.

[0003] The 3rd Generation Partnership Project (3GPP (registered trademark)) has introduced multiple AI application scenarios, such as enhancing channel state information (CSI) feedback using AI, beam management (BM), and improving positioning accuracy.

[0004] The AI model needs to collect data from terminal devices. In the permission management procedure where an event consumer subscribes to the data collection function from the data collection application function (DCAF), an authorization application server (AAS) is introduced. By verifying the key (token) provided by the AAS to the event consumer application function (ECAF) network element, it is determined whether the DCAF can send data to the corresponding ECAF.

[0005] However, in the aforementioned AI application scenario, the input to the AI ​​model is Access Stratum (AS) data from the User Equipment (UE). S Since the data is typically collected by operators, and operators have the necessary authorization to process AS layer data, the current AAS authorization mechanism cannot be used directly. Furthermore, there is no relevant authorization mechanism for AS layer data. As a result, when AS layer data is collected, it may be improperly exposed to third-party ECAF nodes due to the lack of authorization. [Overview of the project]

[0006] This application provides a data acquisition and verification method and apparatus. When AS layer data is collected, AS data acquisition and authorization can be completed through authorization management of a network device.

[0007] According to the first aspect, a data acquisition and verification method is provided. The method may be performed by a network device, or by a chip or circuit located within a network device. This is not limited to the present invention.

[0008] The method includes the steps of: the network device transmitting first indication information to a data collection application function network element, wherein the first indication information indicates that access layer data in a first access layer dataset of a terminal device can only be provided to another network element after the access layer data has been authorized; the network device receiving first request information from an event consumer application function network element or from the non-access layer of the terminal device, wherein the first request information is used to request authorization of a second access layer dataset, the second access layer dataset including all or part of the data in the first access layer dataset; and the network device, The steps include: transmitting first information to the non-access layer of the event consumer application function network element or the terminal device, wherein the first information represents a first key, the first key is used for authorization of a third access layer dataset, the third access layer dataset includes all or part of the data in the second access layer dataset; receiving the first information from the access layer of the data collection application function network element or the terminal device by the network device; and transmitting second information to the access layer of the data collection application function network element or the terminal device by the network device, wherein the second information represents the verification result of the first key.

[0009] According to the aforementioned solution, the event consumer application function network element can only retrieve the collected access layer measurement data from the data collection application function network element after it has been authorized by the network device. This ensures that the network device performs authorization management for access layer data collection and prevents instances where access layer data is directly exposed to other network nodes on the non-access layer.

[0010] Referring to the first embodiment, in some implementations of the first embodiment, the network device transmits second indication information to the access layer of the terminal device, where the second indication information indicates that access layer data in a fourth access layer dataset may be transmitted to the non-access layer of the terminal device.

[0011] According to the aforementioned solution, the network device can configure additional measurements at the UE's access layer to extend the data acquisition range.

[0012] In a possible implementation, the network device transmits a third indication to the non-access layer of an event consumer application function network element or terminal device, where the third indication indicates that a request for some of the access layer data in the second access layer dataset is not authorized, and the third indication includes reason information, which indicates the reason why the request for the access layer data is not authorized.

[0013] In a possible implementation, the second access layer dataset further includes all or part of the data in the fifth access layer dataset, the fifth access layer dataset being the access layer data requested by the event consumer application function network element from the data collection application function network element.

[0014] A second aspect provides a data acquisition verification method. The method may be performed by a data acquisition application function network element, or by a chip or circuit located within the data acquisition application function network element. This is not limited to the present invention.

[0015] The method comprises the steps of: receiving first indication information from a network device via a data collection application function network element, wherein the first indication information indicates that access layer data in a first access layer dataset of a terminal device can only be provided to another network element after the access layer data has been authorized; receiving second request information from an event consumer application function network element via the data collection application function network element, wherein the second request information is used to request a third access layer dataset of the terminal device, the second request information includes first information, the first information indicates a first key, and the first key is used for authorization of the third access layer dataset; transmitting the first information to the network device via the data collection application function network element; and receiving second information from the network device via the data collection application function network element, wherein the second information indicates the verification result of the first key.

[0016] According to the aforementioned solution, the event consumer application function network element can only retrieve the collected access layer measurement data from the data collection application function network element after it has been authorized by the network device. This ensures that the network device performs authorization management for access layer data collection and prevents instances where access layer data is directly exposed to other network nodes on the non-access layer.

[0017] In a possible implementation, the data collection application function network element receives third request information from the event consumer application function network element, where the third request information is used to request a fifth access layer dataset for the terminal device; and the data collection application function network element transmits third information to the event consumer application function network element, where the third information indicates that a second access layer dataset needs to be authorized by the network device, the second access layer dataset includes all or part of the data in the fifth access layer dataset, the third information includes first identifier information, and the first identifier information includes the identifier of the network device.

[0018] In a possible implementation, the data collection application function network element sends a first acknowledgment to the event consumer application function network element, where the first acknowledgment indicates the request result of a third request.

[0019] A third aspect provides a data acquisition and verification method. The method may be performed by an event consumer application function network element, or by a chip or circuit located within the event consumer application function network element. This is not limited to the present invention.

[0020] The method comprises the steps of: transmitting first request information to a network device by an event consumer application function network element, wherein the first request information is used to request authorization of a second access layer dataset of a terminal device; receiving first information from the network device by the event consumer application function network element, wherein the first information indicates a first key, the first key is used to request authorization of a third access layer dataset, the third access layer dataset includes all or part of the data in the second access layer dataset; and transmitting second request information to a data collection application function network element by the event consumer application function network element, wherein the second request information is used to request the third access layer dataset, the second request information includes the first information.

[0021] According to the aforementioned solution, the event consumer application function network element can only retrieve the collected access layer measurement data from the data collection application function network element after it has been authorized by the network device. This ensures that the network device performs authorization management for access layer data collection and prevents instances where access layer data is directly exposed to other network nodes on the non-access layer.

[0022] In a possible implementation, the event consumer application function network element transmits a third request information to the data collection application function network element, where the third request information is used to request a fifth access layer dataset for the terminal device; the event consumer application function network element receives a third information from the data collection application function network element, where the third information is , theThis indicates that the second access layer dataset needs to be authorized by the network device, the second access layer dataset includes all or part of the data in the fifth access layer dataset, the third information includes first identifier information, and the first identifier information includes the identifier of the network device.

[0023] In a possible implementation, the event consumer application function network element receives first acknowledgment information from the data collection application function network element, where the first acknowledgment information indicates the request result of a third request information.

[0024] A fourth aspect provides a data acquisition and verification method. The method may be performed by a terminal device, or by a chip or circuit located within the terminal device. This is not limited to the present invention.

[0025] The method comprises the steps of: receiving first request information from a data collection application function network element via the non-access layer of a terminal device, wherein the first request information is used to request authorization of a second access layer dataset of the terminal device; transmitting the first request information to a network device via the non-access layer of the terminal device; receiving first information from the network device via the non-access layer of the terminal device, wherein the first information includes a first key, the first key is used for authorization of a third access layer dataset, the third access layer dataset includes all or part of the data in the second access layer dataset; transmitting the first information to the access layer of the terminal device via the non-access layer of the terminal device; transmitting the first information to the network device via the access layer of the terminal device; and receiving second information from the network device via the access layer of the terminal device, wherein the second information indicates whether the first key is correct.

[0026] According to the above solution, the authorization application of the event consumer application function network element is transferred to the network device by the non-access layer of the terminal device, the authorization verification is completed between the terminal device and the network device, and the authorization result and the data collection result are sent by the data collection application function network element to the event consumer application function network element, ensuring that the access layer data is collected under authorization.

[0027] In a possible implementation, the non-access layer of the terminal device sends authorization result information to the data collection application function network element, where the authorization result information indicates the authorized and unauthorized data in the second access layer data set. ]>

[0028] According to a fifth aspect, a data collection verification method is provided. The method may be executed by an event consumer application function network element or by a chip or circuit arranged within the event consumer application function network element. This is not limited in the present application.

[0029] The method includes: the event consumer application function network element sending third request information to the data collection application function network element, where the third request information is used to request a fifth access layer data set of a terminal device; the event consumer application function network element receiving fourth information from the data collection application function network element, where the fourth information indicates that a second access layer data set needs to be authorized by a non-access layer of the terminal device, and the second access layer data set includes all or part of the data in the fifth access layer data set; and the event consumer application function network element sending first request information to the data collection application function network element, where the first request information is used to request authorization of the second access layer data set, and the first request information includes identifier information of the ECAF.

[0030] In a possible implementation, the event consumer application function network element receives first positive response information from the data collection application function network element, where the first positive response information indicates a request result of the third request information.

[0031] According to a sixth aspect, a data collection verification method is provided. The method may be executed by a data collection application function network element, or may be executed by a chip or circuit disposed within the data collection application function network element. This is not limited in the present application.

[0032] The method comprises the steps of: receiving a third request information from an event consumer application function network element via a data collection application function network element, wherein the third request information is used to request a fifth access layer dataset for a terminal device; transmitting a fourth information from the data collection application function network element to the event consumer application function network element, wherein the fourth information indicates that a second access layer dataset needs to be authorized by the non-access layer of the terminal device, and the second access layer dataset includes all or part of the data in the fifth access layer dataset; receiving a first request information from the event consumer application function network element via a data collection application function network element, wherein the first request information is used to request authorization for the second access layer dataset, and the first request information includes identifier information for the ECAF; and transmitting the first request information from the data collection application function network element to the non-access layer of the terminal device.

[0033] In a possible implementation, the data collection application function network element sends a first acknowledgment to the event consumer application function network element, where the first acknowledgment indicates the request result of a third request.

[0034] According to a seventh aspect, a data acquisition and verification device is provided. The device comprises a transmitting unit configured to transmit first indication information to a data acquisition application function network element, wherein the first indication information indicates that access layer data in a first access layer dataset of a terminal device can only be provided to another network element after the access layer data has been authorized; and a receiving unit configured to receive first request information from an event consumer application function network element or the non-access layer of a terminal device, wherein the first request information is used to request authorization of a second access layer dataset, the second access layer dataset comprising all or part of the data in the first access layer dataset. The transmitting unit is further configured to transmit first information to an event consumer application function network element or the non-access layer of a terminal device, wherein the first information indicates a first key, the first key is used for authorization of a third access layer dataset, the third access layer dataset comprising all or part of the data in the second access layer dataset. The receiving unit is further configured to receive first information from a data collection application functional network element or the access layer of a terminal device. The transmitting unit is further configured to transmit second information to the data collection application functional network element or the access layer of a terminal device, where the second information represents the verification result of the first key.

[0035] In possible implementations, the transmitting unit is further configured to transmit a second indication to the access layer of the terminal device, where the second indication indicates that access layer data in a fourth access layer dataset may be transmitted to the non-access layer of the terminal device.

[0036] In possible implementations, the transmitting unit is further configured to transmit third indication information to an event consumer application functional network element or the non-access layer of a terminal device, where the third indication information indicates that a request for a portion of the access layer data in the second access layer dataset is not authorized, and the third indication information includes reason information, where the reason information indicates the reason why the request for the access layer data is not authorized.

[0037] In a possible implementation, the second access layer dataset further includes all or part of the data in the fifth access layer dataset, the fifth access layer dataset being the access layer data requested by the event consumer application function network element from the data collection application function network element.

[0038] According to the eighth aspect, a data acquisition and verification device is provided. The device comprises a receiving unit configured to receive first indication information from a network device, wherein the first indication information indicates access layer data in a first access layer dataset of a terminal device, which can only be provided to another network element after the access layer data has been authorized, wherein the receiving unit is further configured to receive second request information from an event consumer application function network element, wherein the second request information is used to request a third access layer dataset of the terminal device, the second request information includes first information, the first information indicates a first key, and the first key is used for authorization of the third access layer dataset; and a transmitting unit configured to transmit the first information to a network device. The receiving unit is further configured to receive second information from the network device, the second information indicating the verification result of the first key.

[0039] In a possible implementation, the receiving unit is further configured to receive third request information from an event consumer application functional network element, where the third request information is used to request a fifth access layer dataset for a terminal device. The transmitting unit is further configured to transmit third information to the event consumer application functional network element, where the third information indicates that a second access layer dataset needs to be authorized by a network device, the second access layer dataset containing all or part of the data in the fifth access layer dataset, the third information containing first identifier information, the first identifier information containing the identifier of the network device.

[0040] In possible implementations, the transmitting unit is further configured to send first acknowledgment information to an event consumer application functional network element, where the first acknowledgment information indicates the request result of a third request information.

[0041] According to the ninth aspect, a data acquisition and verification device is provided. The device comprises a transmitting unit configured to transmit first request information to a network device, wherein the first request information is used to request authorization of a second access layer dataset from a terminal device; and a receiving unit configured to receive first information from the network device, wherein the first information represents a first key, the first key is used to request authorization of a third access layer dataset, the third access layer dataset includes all or part of the data in the second access layer dataset. The transmitting unit is further configured to transmit second request information to a data acquisition application functional network element, wherein the second request information is used to request a third access layer dataset, and the second request information includes the first information.

[0042] In possible implementations, the transmitting unit is further configured to transmit a third request information to a data collection application functional network element, where the third request information is used to request a fifth access layer dataset for a terminal device. The receiving unit is further configured to receive a third information from the data collection application functional network element, where the third information is , the This indicates that the second access layer dataset needs to be authorized by the network device, the second access layer dataset includes all or part of the data in the fifth access layer dataset, the third information includes first identifier information, and the first identifier information includes the identifier of the network device.

[0043] In possible implementations, the receiving unit is further configured to receive first acknowledgment information from a data acquisition application functional network element, where the first acknowledgment information indicates the request result of a third request information.

[0044] According to a tenth aspect, a data acquisition and verification device is provided. The device comprises a receiving unit configured to be used by the non-access layer of a terminal device to receive first request information from a data acquisition application function network element, wherein the first request information is used to request authorization of a second access layer dataset of the terminal device; and a transmitting unit configured to be used by the non-access layer of the terminal device to transmit the first request information to a network device. The receiving unit is further configured to be used by the non-access layer of the terminal device to receive first information from a network device, wherein the first information includes a first key, the first key is used for authorization of a third access layer dataset, and the third access layer dataset includes all or part of the data in the second access layer dataset. The transmitting unit is further configured to be used by the non-access layer of the terminal device to transmit the first information to the access layer of the terminal device. The transmitting unit is further configured to be used by the access layer of the terminal device to transmit the first information to a network device. The receiving unit is further configured to be used by the access layer of a terminal device to receive second information from a network device, where the second information indicates whether the first key is correct.

[0045] In possible implementations, the transmitting unit is further configured to be used by the non-access layer of a terminal device to transmit authorization result information to a data collection application functional network element, where the authorization result information indicates authorized and unauthorized data in a second access layer dataset.

[0046] According to the eleventh aspect, a data acquisition verification device is provided. The device comprises a transmitting unit configured to transmit a third request information to a data acquisition application function network element, wherein the third request information is used to request a fifth access layer dataset of a terminal device; and a receiving unit configured to receive a fourth information from the data acquisition application function network element, wherein the fourth information indicates that a second access layer dataset needs to be authorized by the non-access layer of the terminal device, and the second access layer dataset includes all or part of the data in the fifth access layer dataset. The transmitting unit is further configured to transmit a first request information to the data acquisition application function network element, wherein the first request information is used to request authorization of a second access layer dataset, and the first request information includes identifier information of ECAF.

[0047] In possible implementations, the receiving unit is further configured to receive first acknowledgment information from a data acquisition application functional network element, where the first acknowledgment information indicates the request result of a third request information.

[0048] According to a twelfth aspect, a data acquisition and verification device is provided. The device comprises a receiving unit configured to receive a third request information from an event consumer application functional network element, wherein the third request information is used to request a fifth access layer dataset of a terminal device; and a transmitting unit configured to transmit a fourth information to an event consumer application functional network element, wherein the fourth information indicates that a second access layer dataset needs to be authorized by the non-access layer of a terminal device, and the second access layer dataset includes all or part of the data in the fifth access layer dataset. The receiving unit is further configured to receive a first request information from an event consumer application functional network element, wherein the first request information is used to request authorization of a second access layer dataset, and the first request information includes ECAF identifier information. The transmitting unit is further configured to transmit the first request information to the non-access layer of a terminal device.

[0049] In possible implementations, the transmitting unit is further configured to send first acknowledgment information to an event consumer application functional network element, where the first acknowledgment information indicates the request result of a third request information.

[0050] According to a thirteenth aspect, a wireless communication device is provided. The device comprises a module or unit configured to perform a method according to either the first aspect or a possible implementation of the first aspect.

[0051] According to the fourteenth aspect, a wireless communication device is provided. The device comprises a module or unit configured to perform a method according to either the second aspect or a possible implementation of the second aspect.

[0052] According to the 15th aspect, a wireless communication device is provided. The device comprises a module or unit configured to perform a method according to the third aspect or one of possible implementations of the third aspect.

[0053] According to the sixteenth aspect, a wireless communication device is provided. The device comprises a module or unit configured to perform a method according to the fourth aspect or one of possible implementations of the fourth aspect.

[0054] According to the 17th aspect, a wireless communication device is provided. The device comprises a module or unit configured to perform a method according to the fifth aspect or one of possible implementations of the fifth aspect.

[0055] According to the 18th aspect, a wireless communication device is provided. The device comprises a module or unit configured to perform a method according to the sixth aspect or one of possible implementations of the sixth aspect.

[0056] According to the 19th aspect, a communication device is provided. The device comprises a processor. The processor is coupled to memory to perform a method according to any one of the first to sixth aspects and any one of the possible implementations of the first to sixth aspects. In a possible implementation, the communication device further comprises memory. In a possible implementation, the communication device further comprises a communication interface, and the processor is coupled to the communication interface. 。

[0057] In one implementation, the communication device is a terminal device. If the communication device is a terminal device, the communication interface may be a transceiver or an input / output interface. In possible implementations, the transceiver may be a transceiver circuit. In possible implementations, the input / output interface may be an input / output circuit.

[0058] In another implementation, the communication device is a network device. If the communication device is a network device, the communication interface may be a transceiver or an input / output interface. In possible implementations, the transceiver may be a transceiver circuit. In possible implementations, the input / output interface may be an input / output circuit.

[0059] In another implementation, the communication device is a data acquisition application functional network element. When the communication device is a data acquisition application functional network element, the communication interface may be a transceiver or an input / output interface. In possible implementations, the transceiver may be a transceiver circuit. In possible implementations, the input / output interface may be an input / output circuit.

[0060] In another implementation, the communication device is an event consumer application functional network element. This is an event consumer application function network element. In some cases, the communication interface may be a transceiver or an input / output interface. In possible implementations, a transceiver may be a transceiver circuit. In possible implementations, an input / output interface may be an input / output circuit.

[0061] In other implementations, the communication device is a chip or a chip system. If the communication device is a chip or a chip system, the communication interface may be an input / output interface, interface circuit, output circuit, input circuit, pin, associated circuit, or similar on the chip or chip system. Alternatively, the processor may be embodied as a processing circuit or logic circuit.

[0062] According to the 20th aspect, a communication device is provided. The device comprises an input circuit, an output circuit, and a processing circuit. The processing circuit is configured to receive a signal through the input circuit and transmit a signal through the output circuit to implement a method according to any one of the first to sixth aspects and any one of the possible implementations of the first to sixth aspects.

[0063] In a specific implementation process, the communication device may be a chip, the input circuit may be an input pin, the output circuit may be an output pin, and the processing circuit may be a transistor, a gate circuit, a trigger, various logic circuits, or the like. The input signal received by the input circuit may be received and input by a receiver, for example, but is not limited to this, and the signal output by the output circuit may be output and transmitted by a transmitter, for example, but is not limited to this. The input circuit and the output circuit may be different circuits or the same circuit, in this example the circuits are used as an input circuit and an output circuit, respectively, at different points in time. The specific implementation of the processor and various circuits is not limited to the embodiments of this application.

[0064] According to the 21st aspect, a processing device is provided. The device comprises a processor and a memory. The processor is configured to read instructions stored in the memory, receive signals through a receiver, and transmit signals through a transmitter to perform a method according to any one of the first to sixth aspects and any one of the possible implementations of the first to sixth aspects.

[0065] In possible implementations, there are one or more processors and one or more memory locations.

[0066] In possible implementations, the memory and processor may be integrated together, or they may be located separately.

[0067] In the specific implementation process, the memory may be non-transitory memory, such as read-only memory (ROM). The memory and processor may be integrated onto a single chip or arranged separately on different chips. The type of memory and the arrangement of the memory and processor are not limited to the embodiments of this application.

[0068] It should be understood that related data exchange processes, such as the transmission of indication information, may be processes in which the processor outputs indication information, and the reception of capability information may be processes in which the processor receives and inputs capability information. Specifically, , by processor The transmitted data may be output to the transmitter, and the input data received by the processor may be from the receiver. The transmitter and receiver may be collectively referred to as transceivers.

[0069] The processor in the aforementioned embodiment may be a chip, and the processor may be implemented using hardware or software. When the processor is implemented using hardware, the processor may be a logic circuit, an integrated circuit, or the same. When the processor is implemented using software, the processor may be a general-purpose processor, and it is implemented by reading software code stored in memory. The memory may be integrated into the processor, or it may be located outside the processor and exist independently.

[0070] According to the 22nd aspect, a computer program product is provided. The computer program product comprises a computer program (which may also be called code or instructions). When the computer program is executed, the computer is made to perform a method according to any one of the first to sixth aspects and any one of the possible implementations of the first to sixth aspects.

[0071] According to the 23rd aspect, a computer-readable medium is provided. The computer-readable medium stores a computer program (which may also be called code or instructions). When the computer program is executed on a computer, the computer is made to perform a method according to any one of the first to sixth aspects and any one of the possible implementations of the first to sixth aspects.

[0072] According to the 24th aspect, a chip system is provided. The system comprises memory and a processor. The memory is configured to store computer programs, and the processor is configured to call computer programs from memory and execute them to cause a communication device on which the chip system is installed to perform a method according to any one of the first to sixth aspects and any possible implementations of the first to sixth aspects.

[0073] The chip system may include an input circuit or interface configured to transmit information or data, and an output circuit or interface configured to receive information or data.

[0074] According to the 25th aspect, a communication system is provided. The system comprises at least one of the aforementioned data collection application function network element, event consumer application function network element, network device, and terminal device. [Brief explanation of the drawing]

[0075] [Figure 1] This is a diagram illustrating an example of a communication system to which this invention can be applied.

[0076] [Figure 2] This is a diagram showing the architecture of an access network device according to one embodiment of the present invention.

[0077] [Figure 3]This is a diagram of an AI application framework according to one embodiment of the present invention.

[0078] [Figure 4] This is a diagram of another AI application framework according to one embodiment of the present invention.

[0079] [Figure 5] This is a schematic flowchart of AI model lifecycle management according to one embodiment of the present invention.

[0080] [Figure 6] This is a schematic flowchart of a data collection and verification method according to one embodiment of the present invention.

[0081] [Figure 7] This is a schematic flowchart of another data collection and verification method according to one embodiment of the present invention.

[0082] [Figure 8] This is a schematic flowchart of another data collection and verification method according to one embodiment of the present invention.

[0083] [Figure 9] This is a block diagram of a communication device according to one embodiment of the present invention.

[0084] [Figure 10] This is a block diagram of a communication device according to one embodiment of the present invention.

[0085] [Figure 11] This is a block diagram of a chip system according to one embodiment of the present invention. [Modes for carrying out the invention]

[0086] The technical solution of this application will be described below with reference to the attached drawings.

[0087] The technical solution in the embodiments of the present invention is a variety of communication systems, for example, a global system Mufomo Bile Communications (Global Syste m for MMobile communication (GSM®), Code Division Multiple Access (CDMA) system, Wideband Code Division Multiple Access (WCDMA®) system, General Packet Radio Service (GPRS), Long Term Evolution (LTE) system, LTE Frequency Division Duplex (FDD) system, LTE Time Division Duplex (TDD) system, Wireless Fidelity (Wi-Fi®) system, Device-to-device (D2D) communication system, Vehicle-to-everything (V2X) communication system, Universal Mobile Telecommunications System (UMTS), Worldwide Interoperability for Microwave Access (WiMAX®) communication system, Machine-to-machine (machine to This technology may be applied to machine-to-machine (M2M) systems, machine-type communication (MTC) systems, Internet of Things (IoT) communication systems, non-terrestrial network (NTN) systems, 5th generation (5G) mobile communication systems, 6th generation (6G) mobile communication systems, New Radio (NR) systems, or future wireless communication systems.

[0088] Figure 1 is a diagram of a communication system 100 according to one embodiment of the present invention. As shown in Figure 1, the communication system 100 includes a network device 10, a terminal device 20, and an application layer network element 30. In the communication system, the terminal device 20 may transmit uplink data / signals / information to the network device 10, and the network device 10 may transmit downlink data / signals / information to the terminal device 20. Optionally, data / signal / information transmission may be performed between the network device 10 and the application layer network element 30. Optionally, data / signal / information transmission may be performed between the terminal device 20 and the application layer network element 30.

[0089] The communication methods provided in embodiments of this application may further relate to devices or transmission nodes not shown in Figure 1. This is not limited to embodiments of this application.

[0090] The communication system used in the embodiments of this application is merely an example for illustrative purposes, and the communication systems applicable to the embodiments of this application are not limited thereto. Any communication system capable of implementing the functions of the aforementioned devices is applicable to the embodiments of this application.

[0091] In embodiments of the present application, terminal devices may also be referred to as user equipment, access terminals, subscriber units, subscriber stations, mobile stations, remote stations, remote terminals, mobile devices, user terminals, terminals, wireless communication devices, user agents, or user equipment. Terminal devices may include mobile phones, cordless phones, Session Initiation Protocol (SIP) phones, Wireless Local Loop (WLL) stations, Personal Digital Assistants (PDAs®), handheld devices with wireless communication capabilities, computing devices, other processing devices connected to wireless modems, in-vehicle devices, wearable devices, terminal devices in 5G networks, terminal devices in future evolved Public Land Mobile Networks (PLMNs), or similar. This is not limited to embodiments of the present application.

[0092] Wearable devices, also often called wearable intelligent devices, are a general term for wearable devices developed by applying wearable technology to the intelligent design of everyday clothing, such as glasses, gloves, watches, clothing, and shoes. Wearable devices are portable devices that can be worn directly on the body or integrated into the user's clothing or accessories. Wearable devices are not only hardware devices but also implement powerful functionality through software support, data exchange, and cloud interaction. In a broad sense, wearable intelligent devices include full-featured, large devices that can implement all or part of their functions without relying on smartphones, such as smartwatches or smart glasses, and also include devices that are specialized in only one type of application function and need to work with other devices, such as smartphones, such as various smart bands or smart jewelry for monitoring physical signs.

[0093] In addition, terminal devices can alternatively be terminal devices in Internet of Things (IoT) systems. IoT is an important part of the future development of information technology. The main technical characteristic of IoT is that it connects objects to a network by using communication technologies to implement intelligent networks for human-machine interconnection and interconnection of things.

[0094] Please understand that the specific form of the terminal device is not limited in this application.

[0095] A network device may be a device within a wireless network and may also be referred to as an operator device in this application. For example, a network device may be a device deployed within a wireless network that provides wireless communication functions to terminal devices. For example, a network device may be a radio access network (RAN) node that connects terminal devices to the wireless network. The RAN may be connected to a core network (e.g., a long-term evolution (LTE) core network or a 5G core network).

[0096] The network devices in the embodiments of the present invention may be, but are not limited to, access network devices including various base stations such as next-generation NodeBs (gNodeBs, gNBs), evolved NodeBs (eNBs), or base station devices in future evolved communication systems; or may be servers, wearable devices, in-vehicle devices, radio relay nodes, radio backhaul nodes, transmission points (TPs), or transmission reception points (TRPs); or may be one antenna panel or a group of antenna panels (including multiple antenna panels) of a base station; or may be network nodes forming a base station, such as a baseband unit (BBU) or a distributed unit (DU). The base station may be a macro base station, a micro base station, a pico base station, a small cell, a relay station, a balloon station, or the like.

[0097] The network device in the embodiments of the present invention may alternatively include, but is not limited to, a core network device that includes an access and mobility management function (AMF) network element, a session management function (SMF) network element, a user plane function (UPF) network element, a policy control function (PCF) network element, an integrated data management function (UDM) network element, or the like.

[0098] Application layer network elements refer to network devices responsible for processing application layer protocols within a computer network, and include, but are not limited to, data collection application function (DCAF) network elements, provisioning application function (PAF) network elements, event consumer application function (ECAF) network elements, and similar devices.

[0099] It can be understood that all or some of the functions of the network device or terminal device in this application may be implemented by using software functions that run on hardware, or by using instantiated virtualization functions on a platform (e.g., a cloud platform).

[0100] Figure 2 is a diagram of the architecture of an access network device according to one embodiment of the present invention. As shown in Figure 2, the network device in the embodiment of the present invention may have a central unit (CU)-distributed unit (DU) partitioned architecture. The network device can be understood as being divided into CUs and DUs from a logical function standpoint. The CUs and DUs may be physically separated or deployed together. Multiple DUs may share one CU. One DU may, alternatively, be connected to multiple CUs (not shown in Figure 2). The CUs and DUs may be connected through an interface, for example, an F1 interface. The CUs and DUs may be partitioned based on the protocol layer of the wireless network. In possible partitioning schemes, the CU is configured to perform the functions of the radio resource control (RRC) layer, the service data adaptation protocol (SDAP) layer, and the packet data convergence protocol (PDCP) layer, while the DU is configured to perform the functions of the radio link control (RLC) layer, the media access control (MAC) layer, the physical layer, and similar functions.

[0101] The partitioning of CU and DU processing functions based on the protocol layer is merely one example, and it should be understood that CU and DU can be partitioned using alternative partitioning methods. For example, a CU or DU may be partitioned to have more protocol layer functions than in the aforementioned partitioning method. For example, a CU or DU may be partitioned to have some of the protocol layer processing functions in the aforementioned partitioning method.

[0102] In one design, some functions of the RLC layer, as well as functions of the protocol layers above the RLC layer, are configured on the CU, while the remaining functions of the RLC layer, as well as functions of the protocol layers below the RLC layer, are configured on the DU.

[0103] In an alternative design, the splitting of CU or DU functionality may be based on service type or other system requirements. For example, the splitting may be based on latency. Functionality whose processing time meets the latency requirements is configured on the DU for implementation, while functionality whose processing time does not meet the latency requirements is configured on the CU for implementation.

[0104] In an alternative design, the CU may instead have one or more functions of the core network. One or more CUs may be located together or separately. For example, the CU may be located on the network side to facilitate centralized management. The DU may have multiple radio frequency functions, or the radio frequency functions may be located remotely.

[0105] The functions of a CU can be implemented by one entity or multiple different entities. For example, the functions of a CU can be further divided. For instance, the control plane (CP) and user plane (UP) can be separated, becoming a CU control plane (CU-CP) and a CU user plane (CU-UP). The CU control plane, i.e., CU-CP, may further include architectures in which CU-CP is further divided. Specifically, CU-CP can be further divided into CU-CP1 and CU-CP2. CU-CP1 includes various radio resource management functions, while CU-CP2 includes only RRC functions and PDCP-C functions (i.e., the basic functions of control plane signaling in the PDCP layer).

[0106] In different systems, CU (including CU-CP and CU-UP) or DU may have different names, but those skilled in the art will understand their meanings. For example, in an open radio access network (O-RAN) system, CU may also be called O-CU (open CU), DU may also be called O-DU, CU-CP may also be called O-CU-CP, and CU-UP may also be called O-CU-UP. This is not limited to the present invention.

[0107] An AI module is a module that possesses machine learning computing capabilities. As shown in Figure 2, in a wireless communication system, the AI ​​module may be located within operations, administration and maintenance (OAM), or within the gNB (for example, if the gNB uses a partitioned architecture, the AI ​​module may be located within the CU / DU), or within a terminal device, or may function independently as a network element entity, such as a RAN Intelligent Controller (RIC). The main function of the AI ​​module in a wireless communication system is to perform a series of AI calculations, such as model establishment, training approximation, and reinforcement learning, based on input data (in a wireless communication system, input data is typically network execution data provided by access network devices or monitored by OAM, such as network load, channel quality, or user plane data transmission status provided by the core network). The trained model provided by the AI ​​module has predictive capabilities for network changes on the RAN side and can be used for load prediction, terminal device path prediction, CSI prediction, optimal beam prediction, positioning prediction, and similar purposes. In addition, the AI ​​module can perform policy inference from the perspective of network energy saving, mobility optimization, and the like, based on the results of the trained model predicting RAN network performance, to obtain appropriate and efficient energy saving policies, mobility optimization policies, and the like. If the AI ​​model is located within a CU and the CU's CP and UP are separated, the CP may be responsible for receiving the AI ​​model as well as for subsequent AI inference and policy generation functions. If the CU-CP is further divided into CU-CP1 and CU-CP2, CU-CP1 may be responsible for receiving the AI ​​model, subsequent AI model inference functions, and generation of specific interaction signaling, while CU-CP2 transmits the signaling.If the AI ​​module is located within the OAM, the current northbound interface may be reused for communication between the AI ​​module and the gNB on the RAN side. If the AI ​​module is located within the gNB or CU, the current F1 interface, Xn interface, Uu interface, or similar may be reused. If the AI ​​module is an independent network entity, a communication link to the OAM side, RAN side, or similar, such as a wired or wireless link, will need to be re-established.

[0108] Figure 3 is a diagram of an AI application framework according to one embodiment of the present invention. As shown in Figure 3, the AI ​​application framework includes a data acquisition module, a model training module, a model inference module, and an Actor.

[0109] The model training module and model inference module are examples of AI modules. For example, the network devices and terminal devices shown in Figure 1, and the CU, DU, or other management entities of the gNB shown in Figure 2, can input data into the data collection module. The data collection module can be used as a database for AI model training, data analysis, and inference. The model training module analyzes the training data output by the data collection module, provides available AI models, and deploys the acquired AI models into the model inference module. The model inference module provides appropriate predictions based on the AI ​​model (acquired through training by the model training module) for the network, which operates based on the inference data output by the data collection module, and feeds back the AI ​​model performance data to the model training module. The model training module then continues to train the model based on the feedback performance data and notifies the model inference module of the updated AI model. Alternatively, the model inference module instructs the network to perform policy adjustments based on the inference data output by the data collection module and the AI ​​models. The relevant policy adjustments are planned by the actors in an integrated manner, and the policies are sent to multiple network entities for operation. In addition, after the relevant policies are applied, specific network performance data is fed back to the data collection module for storage.

[0110] Figure 4 is a diagram of another AI application framework according to one embodiment of the present invention. As shown in Figure 4, the framework includes a data acquisition module, a model training module, a model management module, a model inference module, and a model storage module.

[0111] The model management module interacts with and manages other modules, while the model storage module is configured to store and manage AI models.

[0112] Figure 5 is a schematic flowchart of AI model lifecycle management (LCM) according to one embodiment of the present invention.

[0113] Different use cases may have different overall LCM signaling procedures. The procedure shown in Figure 5 is merely an example. Specific LCM procedures are not limited to those described herein.

[0114] The 3rd generation partnership project (3GPP) introduces multiple AI application scenarios on the RAN side. These RAN AI applications include, but are not limited to, energy saving, load balancing, mobility optimization, channel state information-reference signal (CSI-RS) feedback enhancement, beam management enhancement (BME), positioning enhancement, and similar applications. These application scenarios may also be referred to as AI use cases.

[0115] For example, AI can be used to enhance CSI feedback. CSI is a channel attribute of a communication link. The UE reports downlink channel quality information to the gNB, and as a result gNB isA more appropriate Modulation and Coding Scheme (MCS) will be selected for the UE. Based on the latest progress from the RAN1 meeting, two AI-based sub-use cases, namely CSI compression and CSI prediction (with lower priority), will be approved. CSI compression is based on a two-sided model (in which the encoder (and quantizer) on the UE side is configured to compress the CSI, and the decoder (and dequantizer) on the gNB side is configured to decompress the CSI; and AI-based encoders and decoders can be implemented by using AI models such as Convolutional Neural Networks (CNNs) and AI models (transformers) whose model training speed can be increased by using attention mechanisms).

[0116] For example, AI can also be used for beam management (BM), which primarily involves discovering the strongest transmit / receive beam pairs. AI / ML-based sparse beam prediction aims to improve the accuracy of optimal beam prediction. In the training phase, the network scans all possible beams, and then the network needs to inform the UE of the transmit beam pattern. Once the model training is complete, the network needs to scan only small portions of the beam, and then the UE feeds back the top K narrow beams (e.g., K beams with the best received power) obtained through inference to the network.

[0117] For example, AI can be used to further improve positioning accuracy. R17 supports LOS / NLOS indication reporting to improve positioning accuracy. AI / ML-based LOS / NLOS identification allows for improved positioning accuracy using fewer Transmission Reception Point (TRP) antennas. In indoor scenarios (heavy NLOS scenarios), there may be an insufficient number of line-of-sight paths. As a result, conventional approaches may not work well. Therefore, AI-based positioning can improve positioning accuracy in indoor scenarios.

[0118] In the aforementioned AI application scenarios, the input to the AI ​​model is access layer data. For example, in the CSI compression scenario, the input to the model is CSI-RS measurement results, including CSI reports at the access layer. If UE data is collected, permission management is required.

[0119] However, in the aforementioned AI application scenario, the input to the AI ​​model is the UE's AS data. Since the AS layer data is typically collected by the operator and the operator has permission to process the AS layer data, the current AAS authorization mechanism cannot be used directly. In addition, there is no relevant authorization mechanism for the AS layer data. As a result, when the AS layer data is collected, it may be inappropriately exposed to third-party ECAF nodes due to the lack of authorization.

[0120] This application provides multiple AS data collection and verification methods. In scenarios where AS data from a UE is collected, an authorization mechanism for the collected AS data is introduced to ensure that the AS layer data can be collected appropriately under authorization control.

[0121] It should be understood that the descriptions of specific scenarios in the embodiments of this application are merely examples. In addition to the application scenarios described above, the methods provided in the embodiments of this application are also applicable to application scenarios in which similar problems exist.

[0122] In the description of embodiments of this application, unless otherwise stated, “multiple” or “multiple items” means two or more. In addition, “at least one” may be replaced with “one or more.”

[0123] Ordinal numbers such as “first” and “second” as used in the embodiments of this application are intended to distinguish between multiple subjects and are not intended to limit the size, content, order, chronological order, priority, importance or similar aspects of multiple subjects. For example, the first indication information and the second indication information may be the same information or different information. In addition, such names are, 2 pieces of information This does not indicate that the content, size, application scenarios, transmission / reception ends, priority, importance, or similar factors differ. In addition, the step numbers in the embodiments described herein are intended only to distinguish different steps and not to limit the order of these steps.

[0124] In this application, the terms “includes” and “have,” and any other variations thereof, are intended to cover non-exclusive inclusion. For example, a process, method, system, product, or device including a list of steps or units is not necessarily limited to the explicitly enumerated steps or units, and may include other steps or units that are not explicitly enumerated or are not specific to such process, method, product, or device.

[0125] The technical solutions provided in the embodiments of this application may be applied to wireless communication between communication devices. Wireless communication between communication devices may include wireless communication between network devices and terminals, wireless communication between network devices and wireless communication between terminals. In the embodiments of this application, the term “wireless communication” may also be abbreviated as “communication,” and the term “communication” may also be described as “data transmission,” “information transmission,” or “transmission.”

[0126] It should be understood that all node and message names in this application are merely designated for the purpose of facilitating explanation and may differ in actual networks. It should not be understood that all node and message names are limited in this application. Conversely, any name having the same or similar function as a node or message used in this application is considered a method or equivalent substitution in this application and is included within the scope of protection. Further details will not be explained again below.

[0127] Hereinafter, several methods provided in embodiments of the present application will be described in detail with reference to the attached drawings.

[0128] Please understand that the step numbers in the embodiments of this application are used for illustrative purposes only and do not limit the order of the steps.

[0129] Figure 6 shows the data collection and verification method 600 according to the present invention. Permission management for the collection of AS data by the UE is performed using this method. The method in Figure 6 includes at least some of the following:

[0130] S610:PAF transmits measurement and reporting configuration information for access layer data to DCAF.

[0131] S620: DCAF exchanges authorization information with network devices.

[0132] S630: ECAF sends a third request to DCAF, which is used to request a fifth access layer dataset.

[0133] S640: DCAF sends a third piece of information to ECAF, which indicates that the second access layer dataset needs to be authorized by the network device.

[0134] S650: DCAF acquires access layer data.

[0135] S660:ECAF sends first request information to the network device, which is used to request authorization for the second access layer dataset.

[0136] S670: The network device sends first information to ECAF, where first information indicates first key.

[0137] S680:ECAF sends second request information to DCAF, where the second request information is used to request a third access layer dataset, and the second request information includes the first information.

[0138] S690: The network device verifies the first key along with DCAF.

[0139] S691: DCAF sends subscription acknowledgment information (i.e., an example of the first acknowledgment information) to ECAF.

[0140] According to the aforementioned solution, ECAF can only retrieve collected AS measurement data from DCAF after it has been authorized by the operator device. This ensures that the operator can perform authorization management for AS data collection and avoids situations where AS data is directly exposed to other network nodes on the non-AS layer.

[0141] The following sections will explain S610 through S690 in detail.

[0142] First, DCAF needs to register with the NRF (Network Repository Function). DCAF initiates the registration process with the NRF. The registration information includes a series of event IDs. The data collection results for events corresponding to these IDs can be provided to ECAF after ECAF is authorized.

[0143] Unless otherwise specified, please note that in this application, the access layer refers to the access layer of a terminal device, the access layer data refers to the measurement results of the access layer data of a terminal device, and the non-access layer refers to the non-access layer of a terminal device.

[0144] In S610, the PAF transmits measurement and reporting configuration information for access layer data to the DCAF.

[0145] Specifically, measurement and reporting configuration information may include the data to be collected, the configuration of data collection (e.g., sampling frequency and geographical limitations of collection), the reporting frequency and format of the collected data, and how DCAF processes the data and transmits it to the corresponding subscribers (also known as event consumers).

[0146] In one implementation, the collected data information includes information indicating the artificial intelligence (AI) function corresponding to the access layer data (where the AI ​​function may include, but is not limited to, one or more functions of CSI compression, CSI prediction, BM, and positioning), information about the target frequency measured by the UE, and information about the reference signal type measured by the UE (e.g., SSB and / or CS). I) This may include one or more of the following: information about the channel quality type measured by the UE (e.g., RSRP / RSRQ / SINR), indication information collected and reported by the UE's physical layer L1 and / or network layer L3, information about the scenario in which access layer data should be collected (e.g., a specific region, cell, or cell configuration), and information about the maximum number of beams to be reported (e.g., showing measurement results for 4 / 6 / several beams).

[0147] It should be noted that the relationship between AS layer data collection requirements and event IDs is not limited in this application. In other words, one event ID may include both non-AS layer data collection requirements and AS layer data collection requirements; or one event ID may include only AS layer data collection requirements.

[0148] In S620, DCAF exchanges authorization information with network devices.

[0149] First, DCAF must send data collection requirements to network devices. These requirements include event information, including AS data collection, and related data collection configurations (i.e., access layer data measurement and reporting configuration information).

[0150] After receiving the measurement and reporting configuration information for access layer data, the network device determines, based on the event information in the measurement and reporting configuration information, whether an event related to the AS data needs to be authorized before it can be provided to another ECAF.

[0151] The operator device may provide authorization information (i.e., an example of the first indication information) to the DCAF in one of the following ways: The first indication information indicates that access layer data in the first access layer dataset can only be provided to another network element after the access layer data has been authorized.

[0152] [Method 1]

[0153] Indications are executed based on different events.

[0154] Specifically, the first indication information sent to the DCAF by the network device indicates whether the access layer data corresponding to each event in the first access layer dataset needs to be authorized before the access layer data can be provided to another ECAF.

[0155] Optionally, if a network device has multiple device entities, the authorization information may further indicate the identifier of the target network device entity to which each event ID must be authorized.

[0156] [Method 2]

[0157] The overall indication will be implemented.

[0158] Specifically, the network device sends a first indication to the DCAF to indicate that access layer data corresponding to any event, including AS data, can only be provided to another ECAF after the access layer data has been authorized by the network device. In this example, the first access layer dataset contains access layer data corresponding to all events, including AS data.

[0159] Optionally, if a network device has multiple device entities, the authorization information may further indicate the identifier of the target network device entity for which authorization should be performed.

[0160] [Method 3] Authorization is required by default. Specifically, DCAF is assumed by default to instruct ECAF to authorize network devices if it subsequently receives any subscription information from ECAF that includes AS data. In this example, the first access tier dataset contains all AS data.

[0161] Optionally, if an operator device has multiple device entities, the authorization information may further indicate the identifier of the target operator device entity for which authorization must be performed.

[0162] In S630, ECAF sends a third request to DCAF, which is used to request a fifth access layer dataset.

[0163] In one implementation, the third required information includes target UE information corresponding to the measurement (e.g., UE ID, UE IP address or UE cluster ID, and any identifier information that may indicate a specific UE), measurement event ID (which may be one event ID or a group of multiple event IDs), and the configuration of the measurement result report (event-based / periodic reporting, reporting duration, maximum number of reporting durations, and so on).

[0164] In the third request information, it should be understood that ECAF may further send model-related subscription information to DCAF to request the measurement results necessary for the event consumer application functionality network element to train the model locally. For example, this may indicate that the local model has been trained and includes functionality information corresponding to the model trained by the event consumer application functionality network element (e.g., measurement information corresponding to the CSI compression functionality).

[0165] In S640, DCAF transmits third information to ECAF, where the third information is , the This indicates that the access layer dataset needs to be authorized by the network device.

[0166] After receiving the third request information transmitted by ECAF, DCAF may determine, based on the first indication information, that the fifth access layer dataset contains a portion of access layer data that needs to be authorized, where the portion of data is the second access layer dataset.

[0167] It should be understood that the second access tier dataset contains all or part of the data in the fifth access tier dataset, or that the second access tier dataset is a subset of the fifth access tier dataset.

[0168] Please understand that because the second access layer dataset contains all or part of the data in the first access layer dataset, DCAF determines that authorization must be applied to the second access layer dataset from the network device.

[0169] Optionally, the third piece of information includes the first identifier information, and the first identifier information includes the identifier of the network device.

[0170] In S650, DCAF acquires access layer data.

[0171] At this stage, the DCAF needs to acquire AS data from the UE. Specifically, the DCAF may send an AS data collection requirement to a network device, which then distributes the AS data collection configuration to the UE; or the DCAF may send an AS data collection requirement to the UE's non-AS layer, which then collects the data. Specific procedures are not described here.

[0172] In S660, ECAF sends a first request to the network device, which is used to request authorization for a second access layer dataset.

[0173] In step S640, ECAF learns, based on third information, that ECAF needs to be authorized by a specific network device, and obtains the identifier of the network device based on first identifier information.

[0174] Therefore, ECAF may send first request information to the network device based on the network device identifier.

[0175] The first request information may include one or more of the following: ECAF identifier information, ECAF requirement indication information for collecting AS data, event ID information including AS data collection requirements for which ECAF requests authorization, specific data collection requirements related to AS in event data collection, estimated collection duration or event data deadline, purpose / scope of event data collection (e.g., PLMN and NID / PNI-NPN), and similar information.

[0176] In S670, the network device transmits first information to ECAF, where the first information indicates a first key, which is used for authorization of a third access layer dataset, and the third access layer dataset includes all or part of the data in the second access layer dataset.

[0177] When ECAF requests authorization from network devices for a second access layer dataset, it should be understood that not all data can be authorized. Therefore, optionally, the third access layer dataset is a subset of the second access layer dataset.

[0178] In one implementation, in addition to the first key, the first information further includes description (claim) information corresponding to the first key. The claim information includes one or more of the following: ECAF identifier information, event ID information corresponding to the first key, specific AS data collection requirements corresponding to the first key, validity period or deadline corresponding to the first key, and the scope of use of the first key (e.g., PLMN and NID / PNI-NPN). In addition, it is assumed that the operator device may further feed back multiple first keys to ECAF and indicate the aforementioned information by distinguishing the first keys.

[0179] In one implementation, for unauthorized data within the second access tier dataset, third indication information may also be sent to ECAF. The third indication information indicates that some of the access tier data within the second access tier dataset is unauthorized, and includes reason information used to provide feedback on why authorization cannot be performed, such as protecting AS data privacy.

[0180] In S680, ECAF sends second request information to DCAF, where the second request information is used to request a third access layer dataset, and the second request information includes the first information, which indicates the first key.

[0181] ECAF initiates a subscription request to DCAF, including AS data collection, based on authorization information obtained from the operator device. The subscription request includes the first key obtained in step S670.

[0182] In S690, the network device verifies the first key together with DCAF.

[0183] Specifically, DCAF must first send the acquired first key (by sending the first information) to the network device in order to determine whether a third access layer dataset corresponding to the first key can be sent to ECAF based on verification information sent by the network device (i.e., an example of the second information, where the second information shows the verification result of the first key).

[0184] In S691, DCAF sends subscription acknowledgment information to ECAF.

[0185] After the first key verification is successful, DCAF will send a subscription confirmation to ECAF. Answer informationPlease understand that by sending the request, you notify ECAF that the verification was successful, and as a result, DCAF will send the authorized AS layer data (i.e., the third access layer data set) in the subscription request to ECAF. After receiving the AS layer data, ECAF may terminate AS data collection by sending subscription cancellation indication information to DCAF.

[0186] Figure 7 shows the present application Data collection and verification methods This refers to Article 700 of the Act. Permission management for the collection of AS data by the UE is carried out by using this method. The method in Figure 7 includes at least some of the following:

[0187] S710:PAF transmits measurement and reporting configuration information for access layer data to DCAF.

[0188] S720: DCAF exchanges authorization information with network devices.

[0189] S730: The network device sends second indication information to the AS layer of the UE.

[0190] S740: ECAF sends a third request to DCAF, which is used to request a fifth access layer dataset.

[0191] S750: DCAF sends a third piece of information to ECAF, which indicates that the second access layer dataset needs to be authorized by the network device.

[0192] S760: DCAF acquires access layer data.

[0193] S770:ECAF sends first request information to the network device, which is used to request authorization for the second access layer dataset.

[0194] S780: The network device sends first information to ECAF, where first information indicates first key.

[0195] S790:ECAF sends a second request to DCAF, where the second request is used to request a third access layer dataset, the first key is used to authorize the third access layer dataset, and the third access layer dataset contains all or part of the data in the second access layer dataset.

[0196] S791: The network device verifies the first key together with DCAF.

[0197] S792: DCAF sends subscription acknowledgment information to ECAF.

[0198] According to the aforementioned solution, the network device can extend the data collection scope by configuring additional measurements at the UE's AS layer based on data collection requests transmitted from the non-AS layer by the UE's AS layer. In addition, the network device exchanges authorization information with the UE's AS layer to ensure that the scope of the UE's AS data exposure is controllable.

[0199] The following sections will explain S710 through S790 in detail.

[0200] For steps S710 and S720, please refer to steps S610 and S620.

[0201] In S730, the network device transmits a second indication to the AS layer of the UE, where the second indication indicates that access layer data within the fourth access layer dataset may be transmitted to the non-access layer of the UE.

[0202] It should be understood that this solution applies to scenarios where AS data is collected via the non-AS layer of the UE.

[0203] Specifically, the UE's non-AS layer transmits AS data collection requests to the UE's AS layer, which in turn may transmit access layer data to the non-AS layer. The UE's AS layer performs the measurement, and there is no strict continuity between the measurement and other stages; that is, the measurement is performed independently by the UE and is not affected by data collection requests received by the UE's non-AS layer.

[0204] The network device exchanges authorization information with the UE's AS layer; that is, the UE's AS layer receives second indication information transmitted by the network device, so that measurement data belonging to the AS layer and that can be transmitted to the UE's non-AS layer can be determined. For example, the network device indicates to the UE's AS layer data that can be transmitted to the UE's non-AS layer (e.g., a fourth access layer dataset). Indication can be performed using a specific measurement or a corresponding event ID.

[0205] Optionally, the second indication information may further include the transfer validity period and the validity area of ​​the quantifier to be transferred (PLMN or similar for constraints).

[0206] Optionally, the UE's AS layer sends data collection requests received from non-AS layers to network devices in order to obtain second indication information.

[0207] Optionally, the network device may extend the non-AS layer data acquisition range of the UE by delivering additional measurement configurations to the UE's AS layer based on data acquisition requests reported by the UE and received from the non-AS layer.

[0208] For steps S740 to S792, please refer to steps S630 to S691.

[0209] Figure 8 shows the data collection according to the present invention. Comprehensive Verification MethodThis refers to Article 800 of the Act. Permission management for the collection of AS data by the UE is carried out by using this method. The method in Figure 8 includes at least some of the following:

[0210] S810:PAF transmits measurement and reporting configuration information for access layer data to DCAF.

[0211] S820: DCAF exchanges authorization information with network devices.

[0212] S830: ECAF sends a third request to DCAF, which is used to request a fifth access layer dataset.

[0213] S840: DCAF sends a fourth piece of information to ECAF, which indicates that the second access layer dataset needs to be authorized by the UE's non-AS layer.

[0214] S850:ECAF sends first request information to DCAF, which is used to request authorization for the second access layer dataset.

[0215] S860: DCAF sends the first request information to the UE's non-AS layer.

[0216] S870: The non-AS layer of the UE sends the first request information to the network device.

[0217] S880: The network device transmits first information to the non-AS layer of the UE, where the first information indicates a first key, which is used for authorization of a third access layer dataset, the third access layer dataset containing all or part of the data in the second access layer dataset.

[0218] S890: The non-AS layer of the UE transmits the first piece of information to the AS layer of the UE.

[0219] S891: The network device verifies the first key together with the UE's AS layer.

[0220] S892:DCAF obtains access layer data and authorization result information transmitted by the UE's non-access layer.

[0221] S893: DCAF sends subscription acknowledgment information to ECAF.

[0222] According to the aforementioned solution, the ECAF authorization application is transferred to the operator device via the UE's non-AS layer, authorization verification is completed between the UE and the operator device, and the authorization results and data collection results are sent to ECAF by DCAF, ensuring that AS data is collected under authorization.

[0223] The following sections will explain S810 through S891 in detail.

[0224] For steps S810 to S830, please refer to steps S610 to S630.

[0225] In S840, DCAF transmits a fourth piece of information to ECAF, where the fourth piece of information is , the This indicates that the Access Layer 2 dataset needs to be authorized by the UE's non-AS layer.

[0226] Optionally, the fourth piece of information includes the second identifier information, and the second identifier information includes the UE identifier.

[0227] In S850, ECAF sends first request information to DCAF, where the first request information is used to request authorization for the second access layer dataset.

[0228] The first request information may include one or more of the following: ECAF identifier information, ECAF requirement indication information for collecting AS data, event ID information including AS data collection requirements for which ECAF requests authorization, specific data collection requirements related to AS in event data collection, estimated collection duration or event data deadline, purpose / scope of event data collection (e.g., PLMN and NID / PNI-NPN), and similar information.

[0229] In S860, DCAF sends the first request information to the UE's non-AS layer. In S870, the UE's non-AS layer sends the first request information to the network device.

[0230] Optionally, DCAF may send an authorization request to a target UE based on the target UE and correspondence indicated by the third request information in S830.

[0231] Optionally, a network device may indicate to the AS layer of the UE that measurement data may be sent to the non-AS layer of the UE. For example, the network device may send a second indication to the AS layer of the UE, where the second indication indicates that access layer data in a fourth access layer dataset may be sent to the non-access layer of the UE. See step S730 for further details.

[0232] In S880, the network device transmits first information to the non-AS layer of the UE, where the first information indicates a first key, which is used for authorization of a third access layer dataset, and the third access layer dataset contains all or part of the data in the second access layer dataset.

[0233] When a non-AS layer of the UE requests authorization from a network device for a second access layer dataset, it should be understood that not all data can be authorized. Therefore, optionally, the third access layer dataset is a subset of the second access layer dataset.

[0234] In one implementation, in addition to the first key, the first information further includes description (claim) information corresponding to the first key. The claim information includes one or more of the following: ECAF identifier information, event ID information corresponding to the first key, specific AS data collection requirements corresponding to the first key, validity period or deadline corresponding to the first key, and the scope of use of the first key (e.g., PLMN and NID / PNI-NPN). In addition, it is assumed that the operator device may further feed back multiple first keys to ECAF and indicate the aforementioned information by distinguishing the first keys.

[0235] In one implementation, for unauthorized data within the second access tier dataset, a third indication information may also be sent to the UE's non-AS tier. The third indication information indicates that some of the access tier data within the second access tier dataset is unauthorized, and includes reason information used to provide feedback on why authorization cannot be performed, such as protecting AS data privacy.

[0236] In S890, the non-AS layer of the UE transmits the first piece of information to the AS layer of the UE.

[0237] The non-AS layer of the UE initiates a subscription request to the DCAF, including AS data collection, based on first information obtained from the network device. The subscription request includes the first information obtained in stage S880.

[0238] In S891, the network device verifies the first key together with the AS layer of the UE.

[0239] Specifically, the AS layer of the UE must first send the first key (obtained by sending the first information) to the network device in order to determine whether a third access layer dataset corresponding to the first key can be sent to the non-AS layer of the UE, based on the verification information sent by the network device (i.e., an example of the second information, where the second information shows the verification result of the first key).

[0240] In S892, DCAF acquires access layer data and authorization result information transmitted by the UE's non-access layer.

[0241] Specifically, after successful verification, the UE's AS layer sends the access layer measurement results (third access layer dataset) to the UE's non-AS layer, and the UE's non-AS layer forwards the measurement results to DCAF.

[0242] Optionally, the UE's non-AS layer transmits authorization result information to the DCAF, where the authorization result information indicates authorized and unauthorized data in the second access layer dataset, for example, data in the second access layer dataset that has been successfully authorized by the network device via the non-AS layer. Specifically, the authorization result information indicates the specific ECAF event or measurement requirement that is authorized, and the reason why authorization is not provided.

[0243] In S893, DCAF sends subscription acknowledgment information to ECAF.

[0244] After successful verification, DCAF will confirm the subscription to ECAF. Answer information Please understand that submitting the form will notify ECAF that the verification was successful.

[0245] Optionally, DCAF may transmit authorized access layer data to the corresponding ECAF based on authorization result information, and may also transmit the reasons why some of the data was not authorized.

[0246] After receiving AS layer data, ECAF may terminate AS data collection by sending subscription cancellation indication information to DCAF.

[0247] Figure 9 is a block diagram of a communication device 900 according to one embodiment of the present application. The device 900 includes a transceiver unit 910 and a processing unit 920. The transceiver unit 910 may communicate with the outside, and the processing unit 920 is configured to process data. The transceiver unit 910 may also be referred to as a communication interface or communication unit.

[0248] In possible implementations, the device 900 may further include a storage unit. The storage unit may be configured to store instructions and / or data. The processing unit 920 may read instructions and / or data from the storage unit.

[0249] The device 900 may be configured to perform operations performed by the network device in the embodiments of the method described above. In this example, the device 900 may be the network device or a component that may be located within the network device. The transceiver unit 910 is configured to perform the receive and transmit operations of the network device in the embodiments of the method described above. The processing unit 920 is configured to perform the processing operations of the network device in the embodiments of the method described above.

[0250] Alternatively, the device 900 may be configured to perform operations performed by the terminal device in the embodiments of the method described above. In this example, the device 900 may be the terminal device or a component that can be located within the terminal device. The transceiver unit 910 is configured to perform the receiving and transmitting operations on the terminal device side in the embodiments of the method described above. The processing unit 920 is configured to perform the processing operations on the terminal device side in the embodiments of the method described above.

[0251] Alternatively, the device 900 may be configured to perform operations performed by the application layer network element in the embodiment of the method described above. In this example, the device 900 may be the application layer network element or a component that can be located within the application layer network element. The transceiver unit 910 is configured to perform the receive and transmit operations on the application layer network element side in the embodiment of the method described above. The processing unit 920 is configured to perform the processing operations on the application layer network element side in the embodiment of the method described above.

[0252] It should be further understood that the apparatus 900 in this specification is embodied in the form of a functional unit. The term “unit” as used herein may include an application-specific integrated circuit (ASIC), electronic circuitry, a processor (e.g., a shared processor, a dedicated processor, or a group processor) configured to run one or more software or firmware programs, memory, integrated logic circuits, and / or other suitable components that support the functions described. In an optional example, those skilled in the art will know that the apparatus 900 may specifically be a network device, terminal device, or application layer network element in the embodiments described above, and may be configured to perform the procedures and / or steps corresponding to the network device, terminal device, or application layer network element in the embodiments of the methods described above. Iko This can be understood. To avoid repetition, the details will not be explained again here.

[0253] The apparatus 900 in the aforementioned solution has the function of implementing the corresponding steps performed by the network device, terminal device, or application layer network element in the aforementioned method. These functions may be implemented by hardware or by hardware running the corresponding software. The hardware or software includes one or more modules corresponding to the aforementioned functions. For example, in order to separately perform the receive and transmit operations and associated processing operations in an embodiment of the method, the transceiver unit may be replaced by a transceiver machine (for example, the transmit unit in the transceiver unit may be replaced by a transmitter machine, and the receive unit in the transceiver unit may be replaced by a receiver machine), and another unit, for example, a processing unit, may be replaced by a processor.

[0254] In addition, the transceiver unit 910 may alternatively be a transceiver circuit (wherein the transceiver circuit may include, for example, a receiver circuit and a transmitter circuit), and the processing unit may be a processing circuit.

[0255] It should be noted that the apparatus in Figure 9 may be a network element or device in the embodiments described above, or a chip or chip system, such as a system-on-chip (SoC). The transceiver unit may be an input / output circuit or a communication interface. The processing unit is a processor, microprocessor, or integrated circuit on a chip. This is not limited to the foregoing.

[0256] As shown in Figure 10, one embodiment of the present application further provides a communication device 1000. The communication device 1000 includes a processor 1010. The processor 1010 is coupled to a memory 1020. The memory 1020 is configured to store computer programs or instructions and / or data. The processor 1010 is configured to execute the computer programs or instructions and / or data stored in the memory 1020, thereby performing the method in the embodiment of the method described above.

[0257] In possible implementations, the communication device 1000 includes one or more processors 1010.

[0258] In a possible implementation, the communication device 1000 may further include a memory 1020, as shown in Figure 8.

[0259] In possible implementations, the communication device 1000 may include one or more memories 1020.

[0260] In possible implementations, the memory 1020 and the processor 1010 may be integrated together, or they may be located separately, or , memory 1 020 may be located outside the communication device 1000.

[0261] In a possible implementation, the wireless communication device 1000 may further include a transceiver 1030, as shown in Figure 8. The transceiver 1030 is configured to receive and / or transmit signals. For example, the processor 1010 is configured to control the transceiver 1030 to receive and / or transmit signals.

[0262] In the solution, the communication device 1000 is configured to implement the operations performed by the network device in the embodiment of the method described above.

[0263] For example, the processor 1010 is configured to perform processing-related operations performed by the network device in the embodiment of the method described above. The transceiver 1030 is configured to perform receiving and transmitting-related operations performed by the network device in the embodiment of the method described above.

[0264] In another solution, the communication device 1000 is configured to implement the operations performed by the terminal device in the embodiment of the method described above.

[0265] For example, the processor 1010 is configured to perform processing-related operations performed by the terminal device in the embodiment of the method described above. The transceiver 1030 is configured to perform receiving and transmitting-related operations performed by the terminal device in the embodiment of the method described above.

[0266] In a further solution, the communication device 1000 is configured to implement the operations performed by the application layer network element in the embodiment of the method described above.

[0267] For example, the processor 1010 is configured to implement processing-related operations performed by the application layer network element in the embodiment of the method described above, and the transceiver 1030 is configured to implement receiving and transmitting-related operations performed by the application layer network element in the embodiment of the method described above.

[0268] As shown in Figure 11, one embodiment of the present invention provides a chip system 1100, which may also be referred to as a processing system, and includes a logic circuit 1110 and an input / output interface 1120.

[0269] The logic circuit 1110 may be a processing circuit within the chip system 1100. The logic circuit 1110 is coupled to and connected to a storage unit and can call instructions within the storage unit to cause the chip system 1100 to implement the methods and functions of the embodiments of the present invention. The input / output interface 1120 may be an input / output circuit within the chip system 1100 that outputs information processed by the chip system 1100 or inputs data or signaling information to be processed into the chip system 1100 for processing.

[0270] In the solution, the chip system 1100 is configured to implement the operations performed by the network device, terminal device, or application layer network element in the embodiment of the method described above.

[0271] For example, the logic circuit 1110 is configured to implement processing-related operations performed by the network device in the embodiment of the method described above, and the input / output interface 1120 is configured to implement transmission and / or reception-related operations performed by the network device in the embodiment of the method described above.

[0272] One embodiment of the present invention further provides a computer-readable storage medium. The computer-readable storage medium is a method performed by a terminal device in the embodiment of the method described above or is a network device It stores computer instructions for implementing more efficient execution methods.

[0273] For example, when a computer program is executed by a computer, the computer may implement the method described in the embodiment of the method described above, such as the method executed by a terminal device, the method executed by a network device, or the method executed by an application layer network element.

[0274] One embodiment of the present invention further provides a computer program product including instructions. When the instructions are executed by a computer, the computer is made to implement the methods described in the embodiments of the above-described methods, which are executed by network devices, terminal devices, or application layer network elements.

[0275] One embodiment of the present invention further provides a communication system, which includes one or more of the network devices, terminal devices, or application layer network elements in the embodiments described above.

[0276] For a description of the relevant aspects and beneficial effects of any wireless communication device provided above, please refer to the corresponding embodiment of the method provided above. Further details will not be provided here.

[0277] In embodiments of the present application, a terminal device or network device may include a hardware layer, an operating system layer running on the hardware layer, and an application layer running on the operating system layer. The hardware layer may include hardware such as a central processing unit (CPU), a memory management unit (MMU), and memory (also referred to as main memory). The operating system in the operating system layer may be any one or more computer operating systems that implement service processing using processes, such as the Linux® operating system, Unix® operating system, Android® operating system, iOS® operating system, or Windows® operating system. The application layer may include applications, such as a browser, an address book, word processing software, and instant messaging software.

[0278] The specific structure of the execution entity of the method provided in the embodiments of the Application is not particularly limited in the embodiments of the Application, provided that communication can be performed in accordance with the method provided in the embodiments of the Application by executing a program that records the code of the method provided in the embodiments of the Application. For example, the execution entity of the method provided in the embodiments of the Application may be a terminal device or a satellite, or a functional module located within a terminal device or satellite that can call and execute a program.

[0279] The embodiments or features of the present application may be implemented as methods, apparatus, or products using standard programming and / or engineering techniques. As used herein, the term “artificial article” may encompass computer programs accessible from any computer-readable device, carrier, or medium. For example, computer-readable media may include, but are not limited to, magnetic storage devices (e.g., hard disk drives, floppy disks, or magnetic tapes), optical discs (e.g., compact discs (CDs) or digital versatile discs (DVDs)), smart cards, and flash storage devices (e.g., erasable programmable read-only memory (EPROMs), cards, sticks, or key drives).

[0280] The various storage media described herein may represent one or more devices and / or other machine-readable media for storing information. The term “machine-readable media” may include, but is not limited to, wireless channels and various other media capable of storing, containing, and / or carrying instructions and / or data.

[0281] The processor referred to in the embodiments of the present application may be a central processing unit (CPU), or alternatively, may be another general-purpose processor, a digital signal processor (DSP), an application-specific integrated circuit (ASIC), a field programmable gate array (FPGA) or another programmable logic device, discrete gate or transistor logic device, discrete hardware component, or the like. The general-purpose processor may be a microprocessor, or the processor may be any conventional processor or the like.

[0282] It can be further understood that the memory referred to in the embodiments of this application may be volatile memory or non-volatile memory, or may include both volatile and non-volatile memory. Non-volatile memory may be read-only memory (ROM), programmable read-only memory (PROM), erasable programmable read-only memory (EPROM), electrically erasable programmable read-only memory (EEPROM), or flash memory. Volatile memory may be random access memory (RAM). For example, RAM may be used as an external cache. While illustrative and not limiting, RAM may include several forms, namely static random access memory (static RAM, SRAM), dynamic random access memory (dynamic RAM, DRAM), synchronous dynamic random access memory (synchronous DRAM, SDRAM), double data rate synchronous dynamic random access memory (double data rate SDRAM, DDR SDRAM), enhanced synchronous dynamic random access memory (enhanced SDRAM, ESDRAM), synchlink dynamic random access memory (synchlink DRAM, SLDRAM), and direct rambus random access memory (direct rambus RAM, DR RAM).

[0283] Note that if the processor is a general-purpose processor, DSP, ASIC, FPGA, or another programmable logic device, discrete gate or transistor logic device, or discrete hardware component, memory (storage module) may be integrated into the processor.

[0284] It should be further noted that the memory described herein is intended to include these and any other suitable types of memory, but is not limited thereto.

[0285] Those skilled in the art can recognize that, in combination with the examples described in the embodiments disclosed herein, the units and algorithm steps can be implemented by electronic hardware, or a combination of computer software and electronic hardware. Whether these functions are executed by hardware or software depends on the specific application of the technical solution and the design constraints. Those skilled in the art can implement the described functions for each specific application using different methods, but such implementation should not be considered to exceed the scope of the embodiments of the present application.

[0286] For the sake of convenience and concise description, those skilled in the art can clearly understand that for the detailed operation processes of the aforementioned systems, devices and units, reference can be made to the corresponding processes in the embodiments of the aforementioned methods. Details will not be described again here.

[0287] It should be understood that in some embodiments provided in the embodiments of the present application, the disclosed systems, devices and methods can be implemented in other ways. For example, the aforementioned embodiments of the device are merely examples. For example, the division into units is only a logical function division. In actual implementation, other division methods may be used. For example, multiple units or components may be combined or integrated into another system, or some features may be ignored or not executed. In addition, the indicated or described mutual coupling or direct coupling or communication connection may be implemented through some interfaces. The indirect coupling or communication connection between devices or units may be implemented in electronic, mechanical or other forms.

[0288] Units described as separate parts may or may not be physically separate, and parts shown as units may or may not be physical units, may be located in one location, or may be distributed across multiple network units. Some or all of the multiple units may be selected on a practical basis to achieve the objectives of the solution of the embodiment.

[0289] In addition, the functional units in the embodiments of the present invention may be integrated into a single processing unit, each of these units may exist physically independently, or two or more units may be integrated into a single unit.

[0290] If these functions are implemented in the form of software function units and sold or used as independent products, these functions may be stored on a computer-readable storage medium. Based on such understanding, the technical solutions of the embodiments of the present application may be implemented in the form of a software product, either essentially or in part with respect to the prior art. A computer software product is stored on a storage medium and includes several instructions for instructing a computer device (which may be a personal computer, server, or network device or similar) to perform all or part of the steps of the method described in the embodiments of the present application. The aforementioned storage medium includes any medium capable of storing program code, such as a USB flash drive, a removable hard disk drive, read-only memory (ROM), random access memory (RAM), a magnetic disk, or an optical disk.

[0291] The foregoing description is merely a specific implementation of the present application and is not intended to limit the scope of protection of the present application. Any modifications or substitutions that are readily conceivable to a person skilled in the art within the scope of the embodiments disclosed in the present application shall be included in the scope of protection of the present application. Accordingly, the scope of protection of the present application shall be subject to the scope of protection of the claims. 。 [Other possible items] [Item 1] A data collection and verification method, The network device transmits first indication information to a data collection application function network element, wherein the first indication information indicates that access layer data in a first access layer dataset of a terminal device can only be provided to another network element after the access layer data has been authorized; The network device receives first request information from an event consumer application function network element or from the non-access layer of the terminal device, wherein the first request information is used to request authorization for a second access layer dataset, the second access layer dataset comprising all or part of the data in the first access layer dataset; The network device transmits first information to the non-access layer of the event consumer application function network element or the terminal device, wherein the first information represents a first key, the first key is used for authorization of a third access layer dataset, and the third access layer dataset includes all or part of the data in the second access layer dataset; The step of receiving the first information from the data collection application function network element or the access layer of the terminal device using the network device; and The network device transmits second information to the data collection application function network element or the access layer of the terminal device, wherein the second information indicates the verification result of the first key. A method that includes [a certain feature]. [Item 2] The network device transmits the second indication information to the access layer of the terminal device, where the second indication information indicates that access layer data in the fourth access layer dataset can be transmitted to the non-access layer of the terminal device. The method described in item 1, further comprising the features described in item 1. [Item 3] The network device transmits a third indication information to the event consumer application function network element or the non-access layer of the terminal device, wherein the third indication information indicates that a portion of the access layer data in the second access layer dataset is not authorized, and the third indication information includes reason information, which indicates the reason why the request for the portion of the access layer data is not authorized. The method according to item 1 or 2, further comprising: [Item 4] The method according to any one of items 1 to 3, wherein the second access layer dataset further comprises all or part of the data in the fifth access layer dataset, and the fifth access layer dataset is access layer data requested by the event consumer application function network element from the data collection application function network element. [Item 5] A data collection and verification method, The data collection application function network element receives first indication information from a network device, where the first indication information indicates that access layer data in a first access layer dataset of a terminal device can only be provided to another network element after the access layer data has been authorized; The data collection application function network element receives second request information from the event consumer application function network element, wherein the second request information is used to request a third access layer dataset of the terminal device, the third access layer dataset includes all or part of the data in the first access layer dataset, the second request information includes first information, the first information indicates a first key, and the first key is used for authorization of the third access layer dataset; The step of transmitting the first information to the network device using the data collection application function network element; and The data collection application function network element receives second information from the network device, where the second information indicates the verification result of the first key. A method that includes [a certain feature]. [Item 6] The data collection application function network element receives a third request information from the event consumer application function network element, wherein the third request information is used to request a fifth access layer dataset for the terminal device, and the fifth access layer dataset includes all or part of the data in the first access layer dataset; and In the step where the data collection application function network element transmits third information to the event consumer application function network element, the third information indicates that the second access layer dataset needs to be authorized by the network device, the second access layer dataset includes all or part of the data in the fifth access layer dataset, the third information includes first identifier information, and the first identifier information includes the identifier of the network device. The method described in item 5, which further includes the features described in item 5. [Item 7] The data collection application function network element transmits first acknowledgment information to the event consumer application function network element, where the first acknowledgment information indicates the request result of the third request information. The method described in item 6, further comprising: [Item 8] A data collection and verification method, The event consumer application function network element sends first request information to a network device, where the first request information is used to request authorization of a second access layer dataset of the terminal device; The event consumer application function network element receives first information from the network device, where the first information represents a first key, the first key is used for authorization of a third access layer dataset, and the third access layer dataset includes all or part of the data in the second access layer dataset; and The event consumer application function network element transmits a second request information to the data collection application function network element, wherein the second request information is used to request the third access layer dataset, and the second request information includes the first information. A method that includes [a certain feature]. [Item 9] The event consumer application function network element transmits a third request information to the data collection application function network element, where the third request information is used to request a fifth access layer dataset for the terminal device; and The event consumer application function network element receives third information from the data collection application function network element, wherein the third information indicates that the second access layer dataset needs to be authorized by the network device, the second access layer dataset includes all or part of the data in the fifth access layer dataset, the third information includes first identifier information, and the first identifier information includes the identifier of the network device. The method described in item 8, further comprising: [Item 10] The event consumer application function network element receives first acknowledgment information from the data collection application function network element, where the first acknowledgment information indicates the request result of the third request information. The method described in item 8 or 9, further comprising: [Item 11] A data collection and verification method, The terminal device's non-access layer receives first request information from a data collection application function network element, wherein the first request information is used to request authorization of a second access layer dataset of the terminal device; The step of transmitting the first request information to the network device via the non-access layer of the terminal device; The non-access layer of the terminal device receives first information from the network device, wherein the first information includes a first key, which is used for authorization of a third access layer dataset, and the third access layer dataset includes all or part of the data in the second access layer dataset; The step of transmitting the first information to the access layer of the terminal device from the non-access layer of the terminal device; The steps include: transmitting the first information to the network device via the access layer of the terminal device; and receiving second information from the network device via the access layer of the terminal device, where the second information represents the verification result of the first key. A method that includes [a certain feature]. [Item 12] The non-access layer of the terminal device transmits authorization result information to the data collection application function network element, where the authorization result information indicates authorized and unauthorized data in the second access layer dataset. The method described in item 11, further comprising: [Item 13] A data collection and verification method, The event consumer application function network element transmits a third request information to the data collection application function network element, where the third request information is used to request a fifth access layer dataset from the terminal device; The event consumer application function network element receives fourth information from the data collection application function network element, wherein the fourth information indicates that the second access layer dataset needs to be authorized by the non-access layer of the terminal device, and the second access layer dataset includes all or part of the data in the fifth access layer dataset; and The event consumer application function network element transmits first request information to the data collection application function network element, wherein the first request information is used to request authorization of the second access layer dataset, and the first request information includes the identifier information of the ECAF. A method that includes [a certain feature]. [Item 14] The event consumer application function network element receives first acknowledgment information from the data collection application function network element, where the first acknowledgment information indicates the request result of the third request information. The method described in item 13, further comprising: [Item 15] A data collection and verification method, The data collection application function network element receives a third request information from the event consumer application function network element, where the third request information is used to request a fifth access layer dataset for the terminal device; The data collection application function network element transmits a fourth piece of information to the event consumer application function network element, wherein the fourth piece of information indicates that the second access layer dataset needs to be authorized by the non-access layer of the terminal device, and the second access layer dataset includes all or part of the data in the fifth access layer dataset; The data collection application function network element receives first request information from the event consumer application function network element, wherein the first request information is used to request authorization for the second access layer dataset, and the first request information includes identifier information of the ECAF; and The data collection application function network element transmits the first request information to the non-access layer of the terminal device. A method that includes [a certain feature]. [Item 16] The data collection application function network element transmits first acknowledgment information to the event consumer application function network element, where the first acknowledgment information indicates the request result of the third request information. The method described in item 15, further comprising: [Item 17] A communication device comprising a unit configured to implement the method described in any one of items 1 to 4, or a unit configured to implement the method described in any one of items 5 to 7, or a unit configured to implement the method described in any one of items 8 to 10, or a unit configured to implement the method described in item 11 or 12, or a unit configured to implement the method described in item 13 or 14, or a unit configured to implement the method described in item 15 or 16. [Item 18] A computer program product comprising computer program code, wherein when the computer program code is executed, the device, The method described in any one of items 1 to 4, or The method described in any one of items 5 to 7, or The method described in any one of items 8 to 10, or The method described in item 11 or 12, or The methods described in item 13 or 14, or Methods described in item 15 or 16 They are forced to do it. Computer program products. [Item 19] A computer-readable storage medium that stores a computer program, and when the computer program is executed, The apparatus is made to perform the method described in any one of items 1 to 4; or The apparatus is made to perform the method described in any one of items 5 to 7; or The apparatus is made to perform the method described in any one of items 8 to 10; or The apparatus is made to perform the method described in item 11 or 12; or The apparatus is made to perform the method described in item 13 or 14; or The apparatus is made to perform the method described in item 15 or 16. Computer-readable storage medium. [Item 20] A chip system comprising a processor, wherein the processor calls a computer program from memory and executes the computer program, A procedure for causing a communication device on which the chip system is installed to perform the method described in any one of items 1 to 4; or A procedure for causing a communication device on which the chip system is installed to perform the method described in any one of items 5 to 7; or A procedure for causing a communication device on which the chip system is installed to perform the method described in any one of items 8 to 10; or A procedure for causing a communication device on which the chip system is installed to perform the method described in item 11 or 12; or A procedure for causing a communication device on which the chip system is installed to perform the method described in item 13 or 14; or A procedure to cause a communication device on which the chip system is installed to perform the method described in item 15 or 16. It is configured to do, Chip system. [Item 21] A communication system comprising a terminal device, a network device, a data collection application function network element, and an event consumer application function network element, wherein the terminal device is configured to perform the method described in item 11 or 12, the network device is configured to perform the method described in any one of items 1 to 4, the data collection application function network element is configured to perform the method described in any one of items 5 to 7, or the method described in item 15 or 16, and the event consumer application function network element is configured to perform the method described in any one of items 8 to 10, or the method described in item 13 or 14.

Claims

1. A data collection and verification method, The network device transmits first indication information to a data collection application function network element, wherein the first indication information indicates that access layer data in a first access layer dataset of a terminal device can only be provided to another network element after the access layer data has been authorized; The network device receives first request information from an event consumer application function network element or from the non-access layer of the terminal device, wherein the first request information is used to request authorization of a second access layer dataset, the second access layer dataset comprising all or part of the data in the first access layer dataset; The network device transmits first information to the non-access layer of the event consumer application function network element or the terminal device, wherein the first information represents a first key, the first key is used for authorization of a third access layer dataset, and the third access layer dataset includes all or part of the data in the second access layer dataset; The step of receiving the first information from the data collection application function network element or the access layer of the terminal device using the network device; and The network device transmits second information to the data collection application function network element or the access layer of the terminal device, where the second information indicates the verification result of the first key. A method that includes [a certain feature].

2. The network device transmits the second indication information to the access layer of the terminal device, where the second indication information indicates that access layer data in the fourth access layer dataset can be transmitted to the non-access layer of the terminal device. The method according to claim 1, further comprising:

3. The network device transmits a third indication information to the event consumer application function network element or the non-access layer of the terminal device, wherein the third indication information indicates that a portion of the access layer data in the second access layer dataset is not authorized, and the third indication information includes reason information, which indicates the reason why the request for the portion of the access layer data is not authorized. The method according to claim 1 or 2, further comprising:

4. The method according to any one of claims 1 to 3, wherein the second access layer dataset further comprises all or part of the data in the fifth access layer dataset, and the fifth access layer dataset is access layer data requested by the event consumer application function network element from the data collection application function network element.

5. A data collection and verification method, The data collection application function network element receives first indication information from a network device, where the first indication information indicates that access layer data in a first access layer dataset of a terminal device can only be provided to another network element after the access layer data has been authorized; The data collection application function network element receives second request information from the event consumer application function network element, wherein the second request information is used to request a third access layer dataset of the terminal device, the third access layer dataset includes all or part of the data in the first access layer dataset, the second request information includes first information, the first information indicates a first key, and the first key is used for authorization of the third access layer dataset; The step of transmitting the first information to the network device using the data collection application function network element; and The data collection application function network element receives second information from the network device, where the second information indicates the verification result of the first key. A method that includes [a certain feature].

6. The data collection application function network element receives a third request information from the event consumer application function network element, wherein the third request information is used to request a fifth access layer dataset for the terminal device, the fifth access layer dataset comprising all or part of the data in the first access layer dataset; and In the step of transmitting third information from the data collection application function network element to the event consumer application function network element, wherein the third information indicates that the second access layer dataset needs to be authorized by the network device, the second access layer dataset includes all or part of the data in the fifth access layer dataset, the third information includes first identifier information, and the first identifier information includes the identifier of the network device. The method according to claim 5, further comprising:

7. The data collection application function network element transmits first acknowledgment information to the event consumer application function network element, where the first acknowledgment information indicates the request result of the third request information. The method according to claim 6, further comprising:

8. A data collection and verification method, The event consumer application function network element transmits first request information to a network device, where the first request information is used to request authorization of a second access layer dataset of the terminal device; The event consumer application function network element receives first information from the network device, wherein the first information represents a first key, the first key is used for authorization of a third access layer dataset, and the third access layer dataset includes all or part of the data in the second access layer dataset; and The event consumer application function network element transmits a second request information to the data collection application function network element, wherein the second request information is used to request the third access layer dataset, and the second request information includes the first information. A method that includes [a certain feature].

9. The event consumer application function network element transmits a third request information to the data collection application function network element, where the third request information is used to request a fifth access layer dataset for the terminal device; and The event consumer application function network element receives third information from the data collection application function network element, wherein the third information indicates that the second access layer dataset needs to be authorized by the network device, the second access layer dataset includes all or part of the data in the fifth access layer dataset, the third information includes first identifier information, and the first identifier information includes the identifier of the network device. The method according to claim 8, further comprising:

10. The event consumer application function network element receives first acknowledgment information from the data collection application function network element, where the first acknowledgment information indicates the request result of the third request information. The method according to claim 8 or 9, further comprising:

11. A data collection and verification method, The terminal device's non-access layer receives first request information from a data collection application function network element, where the first request information is used to request authorization of a second access layer dataset of the terminal device; The step of transmitting the first request information to the network device via the non-access layer of the terminal device; The non-access layer of the terminal device receives first information from the network device, wherein the first information includes a first key, the first key is used for authorization of a third access layer dataset, and the third access layer dataset includes all or part of the data in the second access layer dataset; The step of transmitting the first information to the access layer of the terminal device from the non-access layer of the terminal device; The steps include: transmitting the first information to the network device via the access layer of the terminal device; and receiving the second information from the network device via the access layer of the terminal device, where the second information represents the verification result of the first key. A method that includes [a certain feature].

12. The non-access layer of the terminal device transmits authorization result information to the data collection application function network element, where the authorization result information indicates authorized and unauthorized data within the second access layer dataset. The method according to claim 11, further comprising:

13. A data collection and verification method, The event consumer application function network element transmits a third request information to the data collection application function network element, where the third request information is used to request a fifth access layer dataset from the terminal device; The event consumer application function network element receives fourth information from the data collection application function network element, wherein the fourth information indicates that the second access layer dataset needs to be authorized by the non-access layer of the terminal device, and the second access layer dataset includes all or part of the data in the fifth access layer dataset; and The event consumer application function network element transmits first request information to the data collection application function network element, where the first request information is used to request authorization of the second access layer dataset, and the first request information includes identifier information of the ECA. A method that includes [a certain feature].

14. The event consumer application function network element receives first acknowledgment information from the data collection application function network element, where the first acknowledgment information indicates the request result of the third request information. The method according to claim 13, further comprising:

15. A data collection and verification method, The data collection application function network element receives third request information from the event consumer application function network element, where the third request information is used to request a fifth access layer dataset for the terminal device; The data collection application function network element transmits a fourth piece of information to the event consumer application function network element, wherein the fourth piece of information indicates that the second access layer dataset needs to be authorized by the non-access layer of the terminal device, and the second access layer dataset includes all or part of the data in the fifth access layer dataset; The data collection application function network element receives first request information from the event consumer application function network element, wherein the first request information is used to request authorization of the second access layer dataset, and the first request information includes identifier information of the ECA; and The data collection application function network element transmits the first request information to the non-access layer of the terminal device. A method that includes [a certain feature].

16. The data collection application function network element transmits first acknowledgment information to the event consumer application function network element, where the first acknowledgment information indicates the request result of the third request information. The method according to claim 15, further comprising:

17. A communication device comprising a unit configured to implement the method according to any one of claims 1 to 4, or a unit configured to implement the method according to any one of claims 5 to 7, or a unit configured to implement the method according to any one of claims 8 to 10, or a unit configured to implement the method according to claim 11 or 12, or a unit configured to implement the method according to claim 13 or 14, or a unit configured to implement the method according to claim 15 or 16.

18. A computer program product comprising computer program code, wherein when the computer program code is executed, the device, The method according to any one of claims 1 to 4, or The method according to any one of claims 5 to 7, or The method according to any one of claims 8 to 10, or A method according to claim 11 or 12, or The method according to claim 13 or 14, or The method described in claim 15 or 16 They are forced to do it. Computer program products.

19. A computer-readable storage medium that stores a computer program, and when the computer program is executed, The apparatus is made to perform the method described in any one of claims 1 to 4; or The apparatus is made to perform the method described in any one of claims 5 to 7; or The apparatus is made to perform the method described in any one of claims 8 to 10; or The apparatus is made to perform the method according to claim 11 or 12; or The apparatus is made to perform the method described in claim 13 or 14; or The apparatus is made to perform the method according to claim 15 or 16. Computer-readable storage medium.

20. A chip system comprising a processor, wherein the processor calls a computer program from memory and executes the computer program, A procedure for causing a communication device on which the chip system is installed to perform the method described in any one of claims 1 to 4; or A procedure for causing a communication device on which the chip system is installed to perform the method described in any one of claims 5 to 7; or A procedure for causing a communication device on which the chip system is installed to perform the method described in any one of claims 8 to 10; or A procedure for causing a communication device on which the chip system is installed to perform the method according to claim 11 or 12; or A procedure for causing a communication device on which the chip system is installed to perform the method described in claim 13 or 14; or A procedure for causing a communication device on which the chip system is installed to perform the method described in claim 15 or 16. It is configured to do, Chip system.

21. A communication system comprising a terminal device, a network device, a data collection application function network element, and an event consumer application function network element, wherein the terminal device is configured to perform the method described in claim 11 or 12, the network device is configured to perform the method described in any one of claims 1 to 4, the data collection application function network element is configured to perform the method described in any one of claims 5 to 7, or the method described in claim 15 or 16, and the event consumer application function network element is configured to perform the method described in any one of claims 8 to 10, or the method described in claim 13 or 14.

Images