WO2019238097A1 - 一种受限服务的提供方法及通信设备 - Google Patents

一种受限服务的提供方法及通信设备 Download PDF

Info

Publication number
WO2019238097A1
WO2019238097A1 PCT/CN2019/091145 CN2019091145W WO2019238097A1 WO 2019238097 A1 WO2019238097 A1 WO 2019238097A1 CN 2019091145 W CN2019091145 W CN 2019091145W WO 2019238097 A1 WO2019238097 A1 WO 2019238097A1
Authority
WO
WIPO (PCT)
Prior art keywords
terminal
restricted service
service policy
data flow
restricted
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Ceased
Application number
PCT/CN2019/091145
Other languages
English (en)
French (fr)
Inventor
孙满利
黄正磊
杨艳梅
孙海洋
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Huawei Technologies Co Ltd
Original Assignee
Huawei Technologies Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Huawei Technologies Co Ltd filed Critical Huawei Technologies Co Ltd
Priority to EP19819529.9A priority Critical patent/EP3800927B1/en
Priority to BR112020025388-0A priority patent/BR112020025388A2/pt
Publication of WO2019238097A1 publication Critical patent/WO2019238097A1/zh
Anticipated expiration legal-status Critical
Priority to US17/120,720 priority patent/US11848963B2/en
Priority to US18/517,924 priority patent/US12483564B2/en
Ceased legal-status Critical Current

Links

Images

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
    • H04L41/08—Configuration management of networks or network elements
    • H04L41/0893—Assignment of logical groups to network elements
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/14—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
    • H04L63/1408—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic by monitoring network traffic
    • G—PHYSICS
    • G16—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR SPECIFIC APPLICATION FIELDS
    • G16Y—INFORMATION AND COMMUNICATION TECHNOLOGY SPECIALLY ADAPTED FOR THE INTERNET OF THINGS [IoT]
    • G16Y30/00—IoT infrastructure
    • G16Y30/10—Security thereof
    • G—PHYSICS
    • G16—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR SPECIFIC APPLICATION FIELDS
    • G16Y—INFORMATION AND COMMUNICATION TECHNOLOGY SPECIALLY ADAPTED FOR THE INTERNET OF THINGS [IoT]
    • G16Y40/00—IoT characterised by the purpose of the information processing
    • G16Y40/50—Safety; Security of things, users, data or systems
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L47/00—Traffic control in data switching networks
    • H04L47/10—Flow control; Congestion control
    • H04L47/20—Traffic policing
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/20—Network architectures or network communication protocols for network security for managing network security; network security policies in general
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L67/00—Network arrangements or protocols for supporting network services or applications
    • H04L67/01—Protocols
    • H04L67/12—Protocols specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L67/00—Network arrangements or protocols for supporting network services or applications
    • H04L67/14—Session management
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W24/00—Supervisory, monitoring or testing arrangements
    • H04W24/04—Arrangements for maintaining operational condition
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
    • H04L41/08—Configuration management of networks or network elements
    • H04L41/0894—Policy-based network configuration management
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/12—Detection or prevention of fraud
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W88/00—Devices specially adapted for wireless communication networks, e.g. terminals, base stations or access point devices
    • H04W88/14—Backbone network devices

Definitions

  • Embodiments of the present application relate to the field of communications, and in particular, to a method for providing a restricted service and a communication device.
  • IoT Internet of Things
  • the Internet of Things enables IoT devices to connect to the Internet through information-sensing devices and exchange information to achieve intelligent identification and management of IoT devices.
  • IoT devices such as smart water meters and locks for shared bicycles are basically simple devices with relatively single functions and hidden security risks, such as being easily attacked by hackers, hijacking and abuse, which can cause exceptions.
  • a de-registration method is used, so that the network side deletes the registration management context of the IoT device and a Protocol Data Unit (PDU) session to effectively reduce security risks.
  • PDU Protocol Data Unit
  • maintenance management such as patching and software update can only be performed on the IoT device manually, which reduces the management efficiency of the IoT device.
  • the embodiments of the present application provide a method for providing a restricted service and a communication device, which can effectively reduce security risks while improving the management efficiency of the IoT device when the IoT device is abnormal.
  • an embodiment of the present application provides a method for providing a limited service.
  • the method may include: the PCF receives a terminal identifier and indication information, where the indication information is used to indicate an abnormality of the terminal or an abnormality type of the terminal; and the PCF according to the instruction Information, the identity of the sending terminal and a first restricted service policy, the first restricted service policy is used to provide restricted services to the terminal.
  • the PCF After receiving the terminal's identification and indication information indicating the terminal's abnormality or the type of abnormality of the terminal, the PCF sends the identification of the terminal and the The first restricted service strategy for providing restricted services to terminals, in order to provide restricted services to terminals, instead of registering the terminal directly when the terminal is abnormal, effectively reducing security risks and improving management efficiency of the terminal .
  • the restricted service may include any one of the following: stopping the uplink data flow; limiting the downlink data flow; stopping the uplink data flow and limiting the downlink data flow. In this way, more accurate limited services can be provided for the terminal.
  • the identifier of the PCF sending terminal and the first restricted service policy may specifically include: the identifier of the terminal sending the PCF to the SMF and the first receiving service. Limited service strategy.
  • the restricted service may include: stopping uplink data flow; the identifier of the PCF sending terminal and the first restricted service policy may specifically include: : The PCF sends the terminal identity and the first restricted service policy to the AMF.
  • the foregoing PCF receives the identification and indication information of the terminal, which specifically may include: the PCF receives the identification and indication of the terminal from NWDAF or AF or SMF information.
  • an embodiment of the present application provides a method for providing a restricted service.
  • the method may include: an SMF receiving an identifier of a terminal and a first restricted service policy; and when the first restricted service policy is used to stop uplink data of the terminal
  • the SMF sends a second restricted service policy to the terminal, and the second restricted service policy is used to stop the uplink data flow of the terminal; or, when the first restricted service policy is used to stop the uplink data flow of the terminal, the SMF sends
  • the access network device sends the terminal's identification and a third restricted service policy.
  • the third restricted service policy is used to stop the uplink data flow of the terminal; or when the first restricted service policy is used to limit the downlink data flow of the terminal,
  • the SMF sends the terminal's identification and the fourth restricted service policy to the UPF.
  • the fourth restricted service policy is used to restrict the downlink data flow of the terminal; or when the first restricted service policy is used to stop the uplink data flow of the terminal and restrict the During the downlink data flow of the terminal, the SMF sends the second restricted service policy to the terminal or the terminal identification and the third restricted service policy to the access network device, and sends the terminal's target to the UPF.
  • the second restricted service policy is used to stop the uplink data flow of the terminal
  • the third restricted service policy is used to stop the uplink data flow of the terminal
  • the fourth restricted service policy is used to limit the downlink of the terminal data flow.
  • the second restricted service policy may include a QoS rule, and the QoS rule may be used to stop an uplink data flow; or the third restricted service policy may include a QoS configuration File, the QoS configuration file may be used to stop the upstream data flow; or, the fourth restricted service policy may include QoS information, and the QoS information may be used to limit the downstream data flow.
  • the identifier of the SMF receiving terminal and the first restricted service policy may specifically include: the SMF receiving a terminal from a PCF, UDM, or AMF Identification and first restricted service policy.
  • the method may further include: the SMF receives the AMF from the AMF Identification and indication information of the terminal, the indication information is used to indicate the abnormality of the terminal or the type of the abnormality of the terminal; the SMF sends the identification and indication information of the terminal to the PCF.
  • an embodiment of the present application provides a method for providing a restricted service.
  • the method may include: AMF receiving an identifier of a terminal from a PCF and a first restricted service policy, where the first restricted service policy is used for a terminal
  • the restricted services include: stopping uplink data flow; the AMF sends a second restricted service policy to the terminal according to the first restricted service policy, the second restricted service policy is used to stop the uplink data flow of the terminal
  • the AMF sends the terminal identification and a third restricted service policy to the access network device, where the third restricted service policy is used to stop the uplink data flow of the terminal.
  • the AMF communicates to the communication according to the first restricted service policy.
  • the device sends a limited service policy corresponding to the communication device so that the communication device provides limited services to the terminal, instead of registering the terminal directly when the terminal is abnormal, which effectively reduces the security risks and improves the management of the terminal. effectiveness.
  • the foregoing second restricted service policy may include indication information, where the indication information is used to instruct to update or modify a terminal's URSP threshold to a first value, and the first The value may be used to stop the uplink data flow; or, the third restricted service policy may include a QoS profile, and the QOS profile may be used to stop the uplink data flow.
  • an embodiment of the present application provides a method for providing a limited service.
  • the method may include: the first network element determines that the terminal is abnormal; and the first network element sends a terminal identification and indication information to the PCF, where the indication information is used for Indicates the terminal exception or the terminal's exception type.
  • the first network element when determining that the terminal is abnormal, sends the terminal identification and the indication information for indicating the terminal abnormality or the terminal abnormality type to the PCF, so that the PCF can
  • the indication information, the identification of the sending terminal and the first restricted service policy for providing the restricted service to the terminal thereby providing the restricted service to the terminal, instead of directly registering the terminal when the terminal is abnormal, effectively reducing security At the same time, it improves the management efficiency of the terminal.
  • the first network element determining the terminal abnormality may specifically include: the first network element may determine the terminal abnormality according to the terminal's traffic information, and the traffic information may include uplink traffic information and And / or downstream traffic information.
  • the foregoing types of abnormalities include any of the following: abnormal uplink traffic; abnormal downlink traffic; abnormal uplink traffic and abnormal downlink traffic.
  • abnormal uplink traffic abnormal downlink traffic
  • abnormal uplink traffic abnormal downlink traffic
  • abnormal downlink traffic abnormal downlink traffic.
  • the first network element may be NWDAF or AF.
  • an embodiment of the present application provides a method for providing a restricted service.
  • the method may include: UDM receiving an identifier of a terminal from an AF and a first restricted service policy, where the first restricted service policy is used for a terminal Provide restricted services; UDM sends terminal identification and first restricted service policy to AMF or SMF.
  • the UDM sends the identity of the terminal and the AMF or SMF to the restricted service policy.
  • the first restricted service strategy is to provide restricted services for the terminal, instead of registering the terminal directly when the terminal is abnormal, effectively reducing security risks and improving management efficiency of the terminal.
  • the foregoing restricted service may include any of the following: stopping the uplink data flow; limiting the downlink data flow; stopping the uplink data flow and limiting the downlink data flow. In this way, more accurate limited services can be provided for the terminal.
  • an embodiment of the present application provides a method for providing a limited service.
  • the method may include: AF determining a terminal abnormality and a limited service policy corresponding to the abnormality, and the limited service policy corresponding to the abnormality is used to provide a terminal with a limited service. Service; the AF sends the terminal's identification to the UDM and the restricted service policy corresponding to the exception.
  • the AF may determine the abnormal service corresponding to the restricted service policy, and send the identity of the terminal and the restricted service policy for providing the terminal with a restricted service. So that the communication device can provide the terminal with limited services according to the limited service policy, instead of registering the terminal directly when the terminal is abnormal, effectively reducing security risks and improving the management efficiency of the terminal.
  • the foregoing AF determining the terminal abnormality may specifically include: the AF determining the terminal abnormality according to the terminal's traffic information, and the traffic information may include uplink traffic information and / or downlink traffic information.
  • the foregoing restricted services include any of the following: stopping the upstream data flow; restricting the downstream data flow; stopping the upstream data flow and limiting the downstream data flow . In this way, more accurate limited services can be provided for the terminal.
  • an embodiment of the present application provides a communication device.
  • the communication device may include: a receiving unit configured to receive identification and indication information of the terminal, where the indication information may be used to indicate an abnormality of the terminal or an abnormality type of the terminal; and a transmitting unit And is configured to send an identifier of the terminal and a first restricted service policy according to the indication information received by the receiving unit, where the first restricted service policy is used to provide a restricted service to the terminal.
  • the restricted service may include any one of the following: stopping the uplink data flow; limiting the downlink data flow; stopping the uplink data flow and limiting the downlink data flow.
  • the foregoing sending unit may be specifically configured to: send the identifier of the terminal and the first restricted service policy to the SMF.
  • the limited service may include: stopping uplink data flow; and the sending unit may be specifically configured to send the terminal identifier and the first to the AMF. Restricted service policy.
  • the receiving unit may be specifically configured to: receive identification and instruction information of a terminal from NWDAF or AF or SMF.
  • an embodiment of the present application provides a communication device.
  • the communication device may include: a receiving unit configured to receive an identifier of a terminal and a first restricted service policy; and a sending unit configured to receive the first When a restricted service policy is used to stop the uplink data flow of the terminal, a second restricted service policy is sent to the terminal, and the second restricted service policy is used to stop the uplink data flow of the terminal; or, when the receiving unit receives the When the first restricted service policy is used to stop the uplink data flow of the terminal, the terminal identification and a third restricted service policy are sent to the access network device, and the third restricted service policy is used to stop the uplink data flow of the terminal; or When the first restricted service policy received by the receiving unit is used to restrict the downlink data flow of the terminal, the terminal identification and a fourth restricted service policy are sent to the UPF, and the fourth restricted service policy is used to restrict the terminal ’s Downlink data flow; or, when the first restricted service policy received by the receiving unit is used to stop the uplink data
  • the second restricted service policy may include a QoS rule, and the QoS rule may be used to stop an uplink data flow; or the third restricted service policy may include a QoS configuration.
  • File, the QoS configuration file may be used to stop the upstream data flow; or, the fourth restricted service policy may include QoS information, and the QoS information may be used to limit the downstream data flow.
  • the foregoing receiving unit may be specifically configured to receive an identifier of a terminal from a PCF, UDM, or AMF and a first restricted service policy.
  • the receiving unit may be further configured to receive identification and indication information of the terminal from the AMF, and the indication information may be used to indicate that the terminal is abnormal or Terminal abnormality type; the above-mentioned sending unit may also be used to send the terminal's identification and indication information to the PCF.
  • an embodiment of the present application provides a communication device.
  • the communication device may include a receiving unit configured to receive an identifier of a terminal from a PCF and a first restricted service policy.
  • the first restricted service policy may be used for: Providing a restricted service for the terminal; a sending unit, configured to send a second restricted service policy to the terminal according to the first restricted service policy, the second restricted service policy being used to stop the uplink data flow of the terminal; or
  • a restricted service policy sends the terminal identification and a third restricted service policy to the access network device, and the third restricted service policy is used to stop the uplink data flow of the terminal.
  • the foregoing second restricted service policy may include indication information, and the indication information may be used to instruct to update or modify a terminal's URSP threshold to a first value.
  • a value is used to stop the upstream data flow; or, the third restricted service policy may include a QoS configuration file, and the QOS configuration file may be used to stop the upstream data flow.
  • a communication device may include: a determining unit configured to determine that the terminal is abnormal; and a sending unit configured to send a terminal identification and instruction information to the PCF, where the instruction information may be used to indicate that the terminal is abnormal or Terminal exception type.
  • the foregoing determining unit may be specifically configured to determine a terminal abnormality according to the terminal's traffic information, and the traffic information may include uplink traffic information and / or downlink traffic information.
  • the foregoing abnormality type may include any one of the following: abnormal uplink traffic; abnormal downlink traffic; abnormal uplink traffic and abnormal downlink traffic.
  • the foregoing communication device may be NWDAF or AF.
  • a communication device may include a receiving unit configured to receive an identifier of a terminal from an AF and a first restricted service policy, and the first restricted service policy may be used to provide a terminal with Restricted service; a sending unit, configured to send the identity of the terminal and the first restricted service policy to the AMF or SMF.
  • the foregoing restricted service may include any one of the following: stopping the uplink data flow; limiting the downlink data flow; stopping the uplink data flow and limiting the downlink data flow.
  • a communication device may include: a determining unit, configured to determine a terminal abnormality and a limited service policy corresponding to the abnormality, and the limited service policy corresponding to the abnormality is used to provide a limited service to the terminal.
  • a sending unit configured to send the identifier of the terminal and the restricted service policy corresponding to the abnormality determined by the determining unit to the UDM.
  • the foregoing determining unit may be specifically configured to determine a terminal abnormality according to terminal traffic information, and the traffic information may include uplink traffic information and / or downlink traffic information.
  • the foregoing restricted services may include any of the following: stop uplink data flow; limit downlink data flow; stop uplink data flow and limit downlink data flow.
  • a communication device including: at least one processor, and a memory; the memory is used to store a computer program, so that when the computer program is executed by the at least one processor, the first aspect or the possible A method for providing a restricted service according to any one of the implementation manners.
  • a computer-readable storage medium for storing a computer program, and the computer program is used to execute the method for providing a restricted service according to the first aspect or any possible implementation manner of the first aspect.
  • a communication device including: at least one processor, and a memory; the memory is configured to store a computer program, so that when the computer program is executed by the at least one processor, the second aspect or the second aspect may be implemented.
  • a method for providing a restricted service according to any one of the implementation manners.
  • a computer-readable storage medium for storing a computer program, the computer program for executing the method for providing a restricted service according to the second aspect or any possible implementation manner of the second aspect .
  • a communication device including: at least one processor, and a memory; the memory is configured to store a computer program, so that when the computer program is executed by the at least one processor, the third aspect or the third aspect may A method for providing a restricted service according to any one of the implementation manners.
  • a computer-readable storage medium for storing a computer program, and the computer program is used to execute the method for providing a restricted service according to the third aspect or any possible implementation manner of the third aspect. .
  • a communication device including: at least one processor, and a memory; the memory is configured to store a computer program, so that the computer program, when executed by the at least one processor, may implement the fourth aspect or the fourth aspect.
  • a method for providing a restricted service according to any one of the implementation manners.
  • a computer-readable storage medium for storing a computer program for executing a method for providing a restricted service according to the fourth aspect or any possible implementation manner of the fourth aspect .
  • a communication device including: at least one processor, and a memory; the memory is used to store a computer program, so that when the computer program is executed by the at least one processor, the fifth aspect or the fifth aspect may be implemented.
  • the method for providing a restricted service according to any one of the implementation manners of.
  • a computer-readable storage medium for storing a computer program for performing the provision of a limited service according to the fifth aspect or any possible implementation manner of the fifth aspect. method.
  • a communication device including: at least one processor, and a memory; the memory is configured to store a computer program, so that the computer program, when executed by the at least one processor, may implement the sixth aspect or the sixth aspect
  • the method for providing a restricted service according to any one of the implementation manners of.
  • a computer-readable storage medium for storing a computer program for performing the provision of a limited service according to the sixth aspect or any possible implementation manner of the sixth aspect. method.
  • a chip system includes a processor for a communication device to implement the functions involved in the foregoing aspects, for example, generating or processing data and / or information involved in the foregoing method.
  • the chip system further includes a memory, and the memory is configured to store program instructions and data necessary for the communication device.
  • the chip system can be composed of chips, and can also include chips and other discrete devices.
  • the communication devices described in the seventh aspect to the thirteenth aspect, the fifteenth aspect, the seventeenth aspect, the nineteenth aspect, the twenty-first aspect, and the twenty-third aspect provided above are provided Computer-readable storage media described in the fourteenth aspect, the sixteenth aspect, the eighteenth aspect, the twentieth aspect, the twenty-second aspect, and the twenty-fourth aspect of the The chip systems are all used to execute the corresponding methods provided above. Therefore, for the beneficial effects that can be achieved, refer to the beneficial effects in the corresponding methods provided above, which will not be repeated here.
  • FIG. 1 is a simplified schematic diagram of a 5G mobile communication system according to an embodiment of the present application
  • FIG. 2 is a schematic structural diagram of a communication device according to an embodiment of the present application.
  • FIG. 3 is a schematic flowchart of a method for providing a restricted service according to an embodiment of the present application
  • FIG. 4 is a schematic flowchart of a method for providing a restricted service according to another embodiment of the present application.
  • FIG. 5 is a schematic flowchart of another method for providing a restricted service according to another embodiment of the present application.
  • FIG. 6 is a schematic flowchart of another method for providing a restricted service according to another embodiment of the present application.
  • FIG. 7 is a schematic flowchart of another method for providing a restricted service according to another embodiment of the present application.
  • FIG. 8 is a schematic flowchart of another method for providing a restricted service according to another embodiment of the present application.
  • FIG. 9 is a schematic flowchart of another method for providing a restricted service according to another embodiment of the present application.
  • FIG. 10 is a schematic flowchart of another method for providing a restricted service according to another embodiment of the present application.
  • FIG. 11 is a schematic flowchart of another method for providing a restricted service according to another embodiment of the present application.
  • FIG. 12 is a schematic flowchart of another method for providing a restricted service according to another embodiment of the present application.
  • FIG. 13 is a schematic flowchart of another method for providing a restricted service according to another embodiment of the present application.
  • FIG. 14 is a schematic flowchart of another method for providing a restricted service according to another embodiment of the present application.
  • 15 is a schematic flowchart of another method for providing a restricted service according to another embodiment of the present application.
  • 16 is a schematic flowchart of another method for providing a restricted service according to another embodiment of the present application.
  • 17 is a schematic flowchart of another method for providing a restricted service according to another embodiment of the present application.
  • FIG. 19 is a schematic structural diagram of a communication device according to an embodiment of the present application.
  • FIG. 20 is a schematic structural diagram of another communication device according to an embodiment of the present application.
  • 21 is a schematic structural diagram of still another communication device according to an embodiment of the present application.
  • FIG. 22 is a schematic structural diagram of still another communication device according to an embodiment of the present application.
  • FIG. 23 is a schematic structural diagram of still another communication device according to an embodiment of the present application.
  • FIG. 24 is a schematic structural diagram of still another communication device according to an embodiment of the present application.
  • the method for providing a restricted service provided in the embodiments of the present application can be applied to any mobile communication system that needs to provide a restricted service for a terminal. For example, it can be applied to the 5G mobile communication system shown in FIG. 1.
  • the 5G mobile communication system may include a terminal, an access network device, such as an access network (AN) / radio access network (RAN), and a data network (data network, DN) and the following multiple network functions (NF): Network Expansion Function (NEF), Policy Control Function (PCF), Unified Data Management (UDM), Application Function (Application Function, AF), Network Data Analysis Function (NWDAF), Access and Mobility Management Function (AMF), Session Management Function (SMF), User Plane Function (User, Plane, Function, UPF).
  • NF Network Expansion Function
  • PCF Policy Control Function
  • UDM Unified Data Management
  • Application Function Application Function
  • NWDAF Network Data Analysis Function
  • AMF Access and Mobility Management Function
  • SMF Session Management Function
  • User Plane Function User Plane Function
  • FIG. 1 is only an exemplary architecture diagram.
  • the 5G mobile communication system may further include other communication devices, such as an authentication server function (AUSF), which is not limited in the embodiment of the present application.
  • AUSF authentication server function
  • communication devices such as NEF, PCF, UDM, AF, NWDAF, AMF, and SMF can be connected through a communication bus.
  • communication devices can establish a connection by calling a corresponding service-oriented interface to achieve communication.
  • the NEF can call the Nnef interface to establish a connection with other communication devices connected to the communication bus, such as AF, UDM, etc. to achieve communication.
  • the PCF can call the Npcf interface to establish a connection with other communication devices connected to the communication bus, such as AF, SMF, NWDAF, AMF, etc. to achieve communication.
  • the UDM can call the Nudm interface to establish a connection with other communication devices connected to the communication bus, such as SMF, AMF, etc. to achieve communication.
  • the AF can call the Naf interface to establish a connection with other communication devices connected to the communication bus, such as NEF, to achieve communication.
  • NWDAF can call the Nnwdaf interface to establish a connection with other communication devices connected to the communication bus, such as PCF, to achieve communication.
  • the AMF can call the Namf interface to establish a connection with other communication devices connected to the communication bus, such as SMF, to achieve communication.
  • the SMF can call the Nsmf interface to establish a connection with other communication devices connected to the communication bus, such as a PCF, to achieve communication.
  • Communication devices such as AMF, SMF, UPF, DN, AN / RAN, and terminals can establish a connection through a next generation network (NG) interface to achieve communication.
  • the terminal may establish a control plane signaling connection with the AMF through the N interface 1 (N1 for short).
  • N1 for short
  • AN / RAN can establish user plane data connection with UPF through N interface 3 (referred to as N3).
  • AN / RAN can establish a control plane signaling connection with the AMF through N interface 2 (N2 for short).
  • the UPF can establish a control plane signaling connection with the SMF through the N interface 4 (N4 for short).
  • UPF can exchange user plane data with DN through N interface 6 (N6 for short).
  • the names of the communication devices in the above architecture and the names of the interfaces between the communication devices are only examples. In specific implementations, the names of the communication devices and the names of the interfaces between the communication devices may be named by other words. Examples do not specifically limit this.
  • the communication device involved in FIG. 1 is described below with reference to FIG. 1.
  • the terminal may be a wireless terminal or a wired terminal.
  • a wireless terminal may be a device that provides voice and / or data connectivity to a user, a handheld device with a wireless connection function, or other processing device connected to a wireless modem.
  • the wireless terminal can communicate with one or more core network communication devices, such as AMF, SMF, etc. via AN / RAN.
  • a wireless terminal can be a mobile terminal such as a mobile phone (or "cell" phone), a smart phone, a satellite wireless device, a wireless modem card, and a computer with a mobile terminal.
  • it can be a laptop, portable, pocket-sized, Hand-held, computer-built or vehicle-mounted mobile devices that exchange language and / or data with the wireless access network.
  • a wireless terminal can also be called a system, a subscriber unit, a subscriber station, a mobile station, a mobile station, a remote station, an access point, and an access point.
  • Remote terminal Remote terminal
  • Access terminal Access terminal
  • user terminal User terminal
  • UE User Equipment
  • User Agent User Agent
  • AN / RAN which can be a network composed of multiple 5G-AN / 5G-RANs, is used to implement wireless physical layer functions, resource scheduling and wireless resource management, wireless access control, and mobility management functions.
  • 5G-AN / 5G-RAN can be: an access node, a next-generation base station (gNB), a transmission point (TRP), a transmission point (TP), or some other access network device .
  • gNB next-generation base station
  • TRP transmission point
  • TP transmission point
  • NWDAF can provide network data analysis services.
  • PCF has the functions of providing policy rules to control plane network elements such as NWDAF.
  • NEF can be used to exchange internal and external information on the network.
  • UDM has the functions of managing user's contract data and generating user's authentication information.
  • AF can be an application server, which can belong to an operator or a third party.
  • AMF can be the termination point of the wireless access network control plane (N2 interface), and the termination point of non-access signaling (NAS, N1 interface). It has terminal mobility management, legal monitoring, access authorization ⁇ authentication And other functions.
  • SMF has the functions of establishing, modifying, and deleting sessions.
  • UPF is an anchor point for wireless access technology switching. It can be used to complete user plane data routing and forwarding functions, such as: responsible for data packet filtering, data transmission / forwarding, rate control, and billing information generation for terminals .
  • FIG. 2 is a schematic structural diagram of a communication device 20 according to an embodiment of the present application. Among them, the structures of AN / RAN, NEF, PCF, UDM, AF, NWDAF, AMF, SMF, UPF, and terminals in the 5G mobile communication system shown in FIG. 1 can all be shown in FIG. 2.
  • the communication device 20 may include at least one processor 21, a memory 22, a communication interface 23, and a communication bus 24.
  • the processor 21, the memory 22, and the communication interface 23 may be connected through a communication bus 24.
  • FIG. 2 does not constitute a limitation on the communication device 20, and may include more or fewer components than shown in the figure, or combine some components, or different component arrangements. The examples do not limit this.
  • Each component of the communication device 20 is specifically described below with reference to FIG. 2:
  • the processor 21 is a control center of a communication device, and may be a processor or a collective name of a plurality of processing elements.
  • the processor 21 is a central processing unit (CPU), or may be an application-specific integrated circuit (ASIC), or one or more integrated circuits configured to implement the embodiments of the present application.
  • DSPs digital signal processors
  • FPGAs field programmable gate arrays
  • the processor 21 may execute various functions of the communication device 20 by running or executing software programs stored in the memory 22 and calling data stored in the memory 22.
  • the processor 21 may include one or more CPUs, such as CPU0 and CPU1 shown in FIG. 2.
  • the pass-through device may include multiple processors, such as the processor 21 and the processor 25 shown in FIG. 2.
  • Each of these processors can be a single-core processor (single-CPU) or a multi-core processor (multi-CPU).
  • a processor herein may refer to one or more devices, circuits, and / or processing cores for processing data (such as computer program instructions).
  • the memory 22 may be a read-only memory (ROM) or other type of static storage device that can store static information and instructions, a random access memory (RAM) or other type that can store information and instructions Dynamic storage device, can also be electrically erasable programmable read-only memory (electrically erasable programmable read-only memory (EEPROM)), read-only compact disc (compact disc-read-only memory (CD-ROM) or other optical disc storage, optical disc storage (Including compact discs, laser discs, optical discs, digital versatile discs, Blu-ray discs, etc.), disk storage media or other magnetic storage devices, or can be used to carry or store desired program code in the form of instructions or data structures and can be used by a computer Any other media accessed, but not limited to this.
  • ROM read-only memory
  • RAM random access memory
  • Dynamic storage device can also be electrically erasable programmable read-only memory (electrically erasable programmable read-only memory (EEPROM)), read-only compact disc (compact disc
  • the memory 22 may exist independently, and is connected to the processor 21 through a communication bus 24.
  • the memory 22 may also be integrated with the processor 21.
  • the memory 22 is configured to store a software program that executes the solution provided by the embodiment of the present application, and is controlled and executed by the processor 21.
  • the communication interface 23 is configured to communicate with other devices or communication networks, such as Ethernet, RAN, wireless local area networks (WLAN), and the like.
  • the communication interface 23 may be implemented using any device such as a transceiver.
  • the communication bus 24 may be an industry standard architecture (ISA) bus, an external component interconnect (PCI) bus, or an extended industry standard architecture (EISA) bus.
  • ISA industry standard architecture
  • PCI external component interconnect
  • EISA extended industry standard architecture
  • the bus can be divided into an address bus, a data bus, a control bus, and the like. For ease of representation, only a thick line is used in FIG. 2, but it does not mean that there is only one bus or one type of bus.
  • the method for providing a restricted service provided by the embodiment of the present application may be applied to the 5G mobile communication system shown in FIG. 1, and the following describes the detailed description with reference to the 5G mobile communication system shown in FIG. 1.
  • FIG. 3 is a schematic flowchart of a method for providing a restricted service according to an embodiment of the present application.
  • the method may include:
  • Step 301 The first network element determines that the terminal is abnormal.
  • the first network element may be NWDAF or AF in the 5G mobile communication system shown in FIG. 1.
  • Step 301 may be replaced by: the first network element determines that the terminal is abnormal according to the traffic information of the terminal.
  • the traffic information of the terminal can be divided into uplink traffic information and downlink traffic information according to different flow directions.
  • the uplink traffic information may refer to traffic information corresponding to a data packet sent from a terminal to a network-side device (for example, AN or RAN).
  • the downlink traffic information may refer to traffic information corresponding to a data packet sent from a network-side device to a terminal.
  • the uplink traffic information may include at least one of the following: uplink flow rate, uplink interval, and uplink size.
  • the downlink traffic information may include at least one of the following: a downlink flow rate, a downlink interval, and a downlink size.
  • the uplink flow rate may refer to a size of a data packet sent from a terminal to a network-side device in a unit time.
  • the upstream interval may refer to an interval between data packets sent from a terminal to a network-side device.
  • the upstream size refers to the size of each data packet sent by the terminal to the network-side device.
  • the downlink flow rate may refer to the size of a data packet sent from a network-side device to a terminal in a unit time.
  • the downstream interval may refer to an interval between data packets sent from a network-side device to a terminal.
  • the downstream size refers to the size of each data packet sent by the network-side device to the terminal.
  • determining that the terminal is abnormal according to the terminal's traffic information may include: the first network element may Whether the traffic information of the terminal meets certain conditions to determine whether the terminal is abnormal. Wherein, if the uplink traffic information and / or the downlink traffic information of the terminal do not satisfy a specific condition, it may be determined that the terminal is abnormal, and if the uplink traffic information and the downlink traffic information of the terminal meet specific conditions, it may be determined that the terminal is abnormal or normal .
  • the specific condition may be set according to historical traffic information of a large number of terminals and abnormal results corresponding to the historical traffic information.
  • the abnormal result may include that the terminal is abnormal and the terminal is not abnormal (or the terminal is normal).
  • the terminal abnormality may be replaced with a terminal traffic abnormality. For example, taking the terminal's traffic information including the flow rate (such as the upstream flow rate and / or the downstream flow rate) as an example, when the terminal's flow rate is greater than 2 megabits per second (M / s), the terminal can be determined to be abnormal.
  • the terminal's traffic information including the flow rate (such as upstream flow rate and / or downstream flow rate) and the flow interval (such as upstream flow rate and / or downstream flow rate) as examples, when the terminal's flow rate is greater than 2M / s, and the flow interval When it is larger than the preset value, it can be determined that the terminal is abnormal.
  • the flow rate such as upstream flow rate and / or downstream flow rate
  • the flow interval such as upstream flow rate and / or downstream flow rate
  • the traffic information of the terminal does not meet the specific conditions can be divided into the following three cases: Case 1, the uplink traffic information of the terminal does not meet the specific conditions, Case 2, the downlink traffic of the terminal The information does not meet the specific conditions. In case 3, neither the uplink traffic information nor the downlink traffic information of the terminal meets the specific conditions.
  • the first network element determining the terminal abnormality according to the terminal's traffic information may include: when determining the terminal abnormality, the first network element may further determine The information determines the abnormal type of the terminal.
  • the abnormality type may include any of the following: abnormal uplink traffic; abnormal downlink traffic; abnormal uplink traffic and abnormal downlink traffic.
  • the first network element may determine that the abnormal type of the terminal is abnormal uplink traffic. For example, when the first network element determines that the uplink flow rate of the terminal is greater than 2 M / s, it determines that the abnormal type of the terminal is abnormal uplink traffic. Alternatively, when determining that the downlink traffic information of the terminal does not satisfy a specific condition, the first network element determines that the abnormality type of the terminal is abnormal downlink traffic. For example, when the first network element determines that the downlink flow rate of the terminal is greater than 2 M / s, it determines that the abnormal type of the terminal is abnormal downlink traffic.
  • the first network element determines that the abnormality type of the terminal is an uplink traffic abnormality or a downlink traffic abnormality. For example, when the first network element determines that the uplink flow rate of the terminal is greater than 2 M / s and the downlink flow rate of the terminal is greater than 2 M / s, it is determined that the abnormal type of the terminal is abnormal uplink traffic and abnormal downlink traffic.
  • the traffic information of the terminal may be reported to a first network element by a communication device such as AMF. Take the AMF reporting the terminal's traffic information to the first network element as an example.
  • the AMF can monitor the uplink traffic of the terminal and determine whether the uplink traffic of the terminal exceeds the threshold. When the uplink traffic of the terminal exceeds the threshold, the AMF can report the uplink traffic information of the terminal to the first network element.
  • the AMF may also monitor the downlink traffic of the terminal and determine whether the downlink traffic of the terminal exceeds the threshold. When the downlink traffic of the terminal exceeds the threshold, the AMF may report the downlink traffic information of the terminal to the first network element.
  • the AMF can also monitor the uplink and downlink traffic of the terminal at the same time.
  • the AMF can report the uplink and downlink traffic information of the terminal to the first network element.
  • the AMF may periodically monitor the traffic of the terminal, such as uplink traffic and / or downlink traffic, and may also monitor the traffic of the terminal according to a monitoring event issued by the first network element.
  • the monitoring event can be used to instruct monitoring of the terminal's traffic.
  • Step 302 The first network element sends the terminal identification and instruction information to the PCF.
  • the indication information may be used to indicate an abnormality of the terminal or an abnormality type of the terminal.
  • the terminal identifier is used to identify the terminal.
  • the terminal identifier may be an Internet Protocol (IP) address, or an International Mobile Subscriber Number (International ISDN, MSISDN).
  • the indication information used to indicate the abnormality of the terminal may be replaced by: the indication information used to indicate the abnormality of the terminal traffic; the indication information used to indicate the abnormality type of the terminal may be replaced by: the instruction information used to indicate the traffic of the terminal Exception type.
  • the indication information may be composed of 1 bit. For example, when the indication information is "0", the indication information is used to indicate that the terminal is abnormal. When the indication information is "1", the indication information is used to indicate that the terminal is not abnormal or normal.
  • the indication information may be composed of 2 bits. For example, when the indication information is "00", the indication information is used to indicate that the abnormality type of the terminal is abnormal uplink traffic. When the indication information is "01”, the indication information is used to indicate that the abnormal type of the terminal is abnormal downlink traffic. When the indication information is "10”, the indication information is used to indicate that the abnormality type of the terminal is an uplink traffic abnormality and a downlink traffic abnormality.
  • the first network element may directly send the terminal identification and indication information to the PCF (as shown in FIG. 3).
  • the PCF may directly send the terminal identification and indication information to the PCF (as shown in FIG. 3).
  • the first network element may also send the identification and instruction information of the terminal to the PCF via communication devices such as NEF, AMF, and SMF (not shown in FIG. 3).
  • communication devices such as NEF, AMF, and SMF (not shown in FIG. 3).
  • NEF NEF
  • AMF AMF
  • SMF SMF
  • Step 303 The PCF receives the identification and instruction information of the terminal.
  • the PCF may receive the identification and indication information of the terminal from the first network element, such as NWDAF or AF.
  • NWDAF the first network element
  • the PCF may also receive the identification and indication information of the terminal from the SMF.
  • the identification and indication information of the SMF terminal may be received by the first network element. Specifically, reference may be made to any embodiment shown in FIG. 7 to FIG. 9 without limitation.
  • Step 304 The PCF sends the identifier of the terminal and the first restricted service policy according to the instruction information.
  • the PCF may send the identification of the terminal and the first restricted service policy to the SMF or AMF.
  • steps 304 to 306 are described by using the PCF to send the terminal identifier and the first restricted service policy to the SMF as an example, without limitation.
  • the first restricted service policy may be used to provide a restricted service for a terminal.
  • the restricted service may include any of the following: stopping the uplink data flow; limiting the downlink data flow; stopping the uplink data flow and limiting the downlink data flow.
  • the first restricted service strategy may be to stop the uplink data flow of the terminal, or to limit the downlink data flow of the terminal, or to stop the uplink data flow of the terminal, and limit the downlink data flow of the terminal.
  • stopping the uplink data flow may be replaced with: stopping the terminal's uplink data flow on the terminal side / RAN side (stop the data flow of the terminal / the terminal / RAN side).
  • Restricting the downstream data flow can be replaced by restricting the downstream data flow of the terminal, allowing only the downstream data flow of ⁇ a certain port, an ip> to be sent to the terminal (restrict the DL data flow for the Terminal, only allow DL data flow from ⁇ some port , some IP)); Or, replace it with only the downstream data of ⁇ port, IP> to be sent to the terminal.
  • restricting the downlink data flow of the terminal, allowing only the downlink data flow of ⁇ a certain port, a certain ip> to be sent to the terminal means: by adopting a method of allowing only the downstream data flow of the ⁇ a certain port, a certain ip> to be sent to the terminal, To limit the downstream data flow of the terminal.
  • the PCF may determine the first restricted service policy according to the indication information, and send the terminal identifier and the first restricted service policy to the SMF.
  • the PCF may store a restricted service policy corresponding to the terminal abnormality, that is, the first restricted service policy.
  • the first restricted service strategy may be to stop the uplink data flow of the terminal, or to limit the downlink data flow of the terminal, or to stop the uplink data flow of the terminal, and limit the downlink data flow of the terminal.
  • the first restricted service policy stored by the PCF may be predefined, may be pre-configured in the PCF, or may be delivered to the PCF by other communication devices, which are not specifically limited in the embodiment of the present application.
  • the PCF can store the correspondence between the exception and the restricted service policy, and the PCF determines the restricted service policy corresponding to the terminal exception as the first restricted service policy according to the correspondence between the exception and the restricted service policy. .
  • the PCF can store the mapping relationship between the abnormality type and the restricted service policy, as shown in Table 1.
  • the mapping relationship determines that the restricted service policy corresponding to the exception type is the first restricted service policy.
  • the indication information when the indication information is "00", the indication information is used to indicate that the abnormal type of the terminal is abnormal uplink traffic.
  • the PCF can determine according to Table 1 that the first restricted service policy is to stop the uplink data flow of the terminal.
  • the indication information is used to indicate that the abnormal type of the terminal is abnormal downlink traffic.
  • the PCF can determine according to Table 1 that the first restricted service policy is to restrict the downstream data flow of the terminal.
  • the indication information is "10”
  • the indication information is used to indicate that the abnormal type of the terminal is abnormal uplink traffic and abnormal downlink traffic. According to Table 1, the PCF can determine that the first restricted service policy is to stop the uplink data flow of the terminal, and limit the Downstream data flow of the terminal.
  • the restricted service policies corresponding to abnormal terminals in the embodiments of the present application may be the same or different.
  • the restricted service policy corresponding to the abnormal terminal 1 may be restricted service policy 1
  • the restricted service policy corresponding to the abnormal terminal 2 may be restricted service policy 2.
  • the restricted service policies corresponding to different abnormal types of the abnormal terminal 1 may be restricted service policy 1, restricted service policy 2, and restricted service policy 3, respectively.
  • the restricted service policies corresponding to different exception types of 2 may be restricted service policy 1 ′, restricted service policy 2 ′, and restricted service policy 3 ′, respectively.
  • Step 305 The SMF receives the terminal identity and the first restricted service policy.
  • Step 306 The SMF sends the limited service policy corresponding to the communication device to the communication device according to the received first limited service policy.
  • step 306 the limited service policy corresponding to the communication device is sent to the communication device, so that the communication device provides the limited service to the terminal according to the received limited service policy.
  • the communication device may be a terminal, an access network device, or a UPF; it may also be a terminal and a UPF, or an access network device and a UPF, without limitation.
  • the SMF may send a second restricted service policy to the terminal according to the first restricted service policy in step 306, so that the terminal may
  • the restricted service policy performs related operations, such as stopping the uplink data flow of the terminal.
  • the SMF may send the terminal identifier and the third restricted service policy to the access network device according to the first restricted service policy, so that The access network device provides restricted services to the terminal, such as stopping the uplink data flow of the terminal, according to the identity of the terminal and the third restricted service policy.
  • the SMF may send the terminal identifier and the third restricted service policy to the access network device according to the first restricted service policy, so that The access network device provides restricted services to the terminal, such as stopping the uplink data flow of the terminal, according to the identity of the terminal and the third restricted service policy.
  • the SMF may send the terminal identifier and the fourth restricted service policy to the UPF according to the first restricted service policy, so that the UPF Provide restricted services to the terminal according to the identity of the terminal and the fourth restricted service policy, such as restricting the downlink data flow of the terminal.
  • the SMF may send the terminal identifier and the fourth restricted service policy to the UPF according to the first restricted service policy, so that the UPF Provide restricted services to the terminal according to the identity of the terminal and the fourth restricted service policy, such as restricting the downlink data flow of the terminal.
  • the SMF may send the second restricted service to the terminal according to the first restricted service policy in step 306 Policy, so that the terminal performs related operations according to the second restricted service policy, such as stopping the terminal ’s upstream data flow, and sending the terminal ’s identity and the fourth restricted service policy to the UPF, so that the UPF according to the terminal ’s identity and the fourth restricted service
  • the service policy provides restricted services to the terminal, such as limiting the downstream data flow of the terminal.
  • the SMF may send the terminal identification and the access network device according to the first restricted service policy in step 306.
  • the third restricted service policy so that the access network device provides restricted services to the terminal according to the terminal's identity and the third restricted service policy, such as stopping the terminal's upstream data flow, and sending the terminal's identity and the fourth destination to the UPF.
  • the restricted service policy so that the UPF provides restricted services to the terminal according to the terminal's identity and the fourth restricted service policy, such as limiting the downstream data flow of the terminal.
  • the second restricted service policy, the third restricted service policy, and the fourth restricted service policy may be the same as or different from the first restricted service policy.
  • the SMF may perform the above step 306 without performing any processing on the first restricted policy, but directly send the first restricted service policy to the communication device so that The communication device provides a restricted service to the terminal according to the first restricted service policy.
  • the SMF may send the policy information for the terminal to stop the uplink data flow in the first restricted service policy as the second restricted policy to the terminal.
  • the first restricted service policy and the second restricted service policy are sent to the terminal.
  • the restricted service policies are different; or, the SMF may send the policy information used by the access network device to stop the uplink data flow of the terminal in the first restricted service policy as the third restricted policy to the access network device.
  • the above step 304 may be: the PCF sends the terminal identifier and the first restricted service policy to the AMF according to the instruction information.
  • the above step 305 may be replaced by: the AMF receiving terminal identification and the first restricted service policy.
  • the above step 306 may be replaced by: The AMF sends the limited service policy corresponding to the communication device to the communication device according to the received first limited service policy.
  • the limited service policy corresponding to the communication device is sent to the communication device, so that the communication device provides the limited service to the terminal according to the received limited service policy.
  • the specific implementation process of the AMF sending the limited service policy corresponding to the communication device to the communication device according to the received first limited service policy is similar to that of the SMF in step 306, and will not be described in detail.
  • the AMF may send a second restricted service policy to the terminal according to the received first restricted service policy, so that the terminal performs related operations according to the second restricted service policy, such as stopping the terminal.
  • the AMF may send the terminal identification and the third restricted service policy to the access network device according to the received first restricted service policy, so that the access network device may
  • the three restricted service strategy provides restricted services for the terminal, such as stopping the terminal's uplink data flow.
  • the second restricted service policy is used to stop the uplink data flow of the terminal.
  • the third restricted service policy is used to stop the uplink data flow of the terminal.
  • the fourth restricted service policy is used to limit the downlink data flow of the terminal.
  • the PCF after receiving the identification of the terminal and the indication information indicating the abnormality of the terminal or the type of abnormality of the terminal, the PCF sends the identification of the terminal and the The first restricted service policy for the terminal to provide limited services is to provide the terminal with limited services instead of registering the terminal directly when the terminal is abnormal, which effectively reduces security risks and improves management efficiency of the terminal.
  • FIGS. 4 to 6 are schematic flowcharts of a method for providing a restricted service according to another embodiment of the present application.
  • the method provided in the embodiment shown in FIG. 4 to FIG. 6 takes the first network element as the NWDAF in FIG. 1 as an example.
  • NWDAF the NWDAF in FIG. 1
  • its execution process may refer to the method provided in the embodiment shown in FIGS. 4 to 6, which is not repeated in this embodiment of the present application.
  • the method may include:
  • Step 401 The NWDAF determines that the terminal is abnormal.
  • Step 402 The NWDAF sends the terminal identification and instruction information to the PCF of the terminal.
  • the indication information is used to indicate an abnormality of the terminal or an abnormality type of the terminal.
  • the indication information refer to the related description in step 302 in the embodiment shown in FIG. 3, and details are not described herein again.
  • the NWDAF may call the Nnwdaf_EventsSubscription_Notify service to send the terminal identification and instruction information to the PCF.
  • the PCF of the terminal is a PCF that provides services to the terminal, and may be one or more PCFs without limitation.
  • the context of the terminal stored by NWDAF includes the address of the PCF that provides services to the terminal.
  • the PCF may send a service response message to the NWDAF, and the service response message is used to confirm that the identification and indication information of the terminal sent by the NWDAF is received.
  • Step 403 The PCF determines a first restricted service policy according to the instruction information.
  • the first restricted service policy can be used to stop the uplink data flow of the terminal, or the first restricted service policy can be used to limit the downlink data flow of the terminal, or the first restricted service policy can be used to stop the terminal And restrict the downlink data flow of the terminal.
  • Step 404 The PCF sends the terminal identity and the first restricted service policy to the SMF.
  • the PCF may call the Npcf_SMPolicyControl_UpdateNotify service, and send the terminal identifier and the first restricted service policy to the SMF. Further, after receiving the identity of the terminal from the PCF and the first restricted service policy, the SMF may send a service response message to the PCF, and the service response message is used to confirm that the identity of the terminal and the first restriction from the PCF are received. Service strategy.
  • the method further includes: after receiving the terminal's identity and the first restricted service policy, the SMF sends the restricted service policy corresponding to the communication device to the communication device according to the received first restricted service policy, So that the communication device can provide the restricted service to the terminal according to the received restricted service policy.
  • the method when the first restricted service policy is used to stop the uplink data flow of the terminal, the method may include the following steps 405a to 406a; or as shown in FIG. 5, when the first receiving When the limited service policy is used to stop the uplink data flow of the terminal, the method may include the following steps 405b to 406b.
  • the method may include the following steps 405 c-406 c.
  • the method may include the following steps 405a to 406a and 405c to 406c, or the method The following steps 405b-406b and 405c-406c may be included.
  • Step 405a The SMF sends a second restricted service policy to the terminal.
  • the second restricted service policy is used to stop the uplink data flow of the terminal.
  • the second restricted service policy may include a Quality of Service (QoS) rule (QoS rule), which is used to stop the uplink data flow.
  • QoS rule Quality of Service
  • the QoS rule includes indication information, and the indication information is used to instruct the terminal to set the terminal's filter for transmitting uplink data packets to be invalid.
  • the second restricted service policy in step 405a may be sent by the SMF to the terminal via the AMF and an access network device (such as AN / RAN).
  • the message of the second restricted service policy sent by the SMF may be a session management non-access layer message (SM NAS message). If the SMF sends the second restricted service policy to the terminal by the AMF and the access network device, then the SM message can also carry the terminal's identity for the AMF and the access network device to address the terminal.
  • SM NAS message session management non-access layer message
  • Step 406a The terminal stops transmitting the uplink data stream according to the second restricted service policy.
  • the terminal may enter the restricted service state according to the second restricted service policy, that is, stop the transmission of the uplink data stream.
  • the terminal may set the filter for transmitting the uplink data packet of the terminal to be invalid according to the indication information in the received QoS rule, so as to stop the transmission of the uplink data stream.
  • the terminal may also send a confirmation message to the SMF, where the confirmation message is used to confirm that the second restricted service policy sent by the SMF is received.
  • the terminal sends a SM NAS acknowledgement (acknowledge, ack) message to the SMF by the RAN and the AMF.
  • SM NAS acknowledgement acknowledge, ack
  • Step 405b The SMF sends the terminal identification and the third restricted service policy to the access network device.
  • the third restricted service policy is used to stop the uplink data flow of the terminal.
  • the third restricted service policy may include a QoS profile, and the QoS profile is used to stop the uplink data flow.
  • the QoS configuration file includes indication information, and the indication information is used to instruct the access network device to stop scheduling uplink data radio bearer (DRB) resources for the terminal.
  • DRB uplink data radio bearer
  • the identity of the terminal and the third restricted service policy in step 405b may be sent by the SMF to the access network device through the AMF.
  • the SMF sending terminal's identification and the message of the third restricted service policy may be SM NAS messages.
  • Step 406b The access network device stops the uplink data flow of the terminal according to the identity of the terminal and the third restricted service policy.
  • the access network device may determine to stop scheduling uplink DRB resources for the terminal according to the identity of the terminal and the third restricted service policy, thereby stopping the uplink data flow of the terminal.
  • the access network device may also send a confirmation message to the SMF.
  • the confirmation message may be used to confirm the identity of the terminal and the third restricted service policy received by the SMF.
  • the access network device sends an SM to NAS message from the AMF to the SMF.
  • Step 405c The SMF sends the terminal identity and the fourth restricted service policy to the UPF.
  • the fourth restricted service policy is used to limit the downlink data flow of the terminal.
  • the fourth restricted service policy may include QoS information (QoS information), where the QoS information is used to restrict a downlink data flow.
  • QoS information includes indication information, and the indication information is used to instruct the UPF to send only a downstream data stream of ⁇ a certain IP, a certain port> to the terminal.
  • the identity of the terminal and the fourth restricted service policy in step 405c may be carried by the SMF in a Session Modification Request message and sent to the UPF. Further, after receiving the identity of the terminal from the SMF and the fourth restricted service policy, the UPF may send a response message to the SMF, for example, the response message may be a session modification response (Session modification response message).
  • the response message may be a session modification response (Session modification response message).
  • Step 406c The UPF restricts the downlink data flow of the terminal according to the identity of the terminal and the fourth restricted service policy.
  • the UPF may determine to send only the downstream data flow from ⁇ a certain IP, a certain port> to the terminal according to the terminal's identity and the fourth restricted service policy, thereby limiting the downstream data flow of the terminal.
  • the ⁇ some IP, some port> can be the IP and port of the maintenance server. In this way, when the terminal is abnormal, the maintenance server can send the patch or updated software related data to the terminal, improving the management efficiency of the terminal.
  • the first network element when determining that the terminal is abnormal, sends the terminal identification and the indication information for indicating the terminal abnormality or the terminal abnormality type to the PCF, so that the PCF receives To the indication information to determine a first restricted service policy for providing a restricted service to the terminal, and by sending the terminal's identification and the first restricted service policy to the SMF, so that the SMF sends the communication device to the communication device according to the first restricted service policy Sending a restricted service policy corresponding to the communication device, so that the communication device provides a restricted service to the terminal.
  • the SMF may send a second restricted service policy to the terminal, so that the terminal can stop the transmission of the uplink data flow according to the second restricted service policy.
  • the SMF may send the terminal identifier and the third restricted service policy to the access network device, so that the access network device may perform the third restricted service policy Stop scheduling uplink DRB resources for the terminal, thereby stopping the terminal's uplink data flow.
  • the SMF may send the terminal identification and the fourth restricted service policy to the UPF.
  • the UPF may determine that only the IP, a port> downstream data stream is sent to the terminal, thereby limiting the downstream data flow of the terminal, and ⁇ a certain IP, a port> can be the IP and port of the maintenance server, and the maintenance server can then patch or update the software Relevant data is delivered to the terminal.
  • the management efficiency of the terminal is improved.
  • FIG. 7 to 9 are schematic flowcharts of a method for providing a restricted service according to another embodiment of the present application.
  • the method provided in the embodiment shown in FIG. 7 to FIG. 9 takes the first network element as the NWDAF in FIG. 1 as an example. It should be noted that when the first network element is the AF in FIG. 1, its execution process may refer to the method provided in the embodiment shown in FIG. 7 to FIG. 9, which is not described in the embodiment of this application.
  • the method may include:
  • Step 501 NWDAF determines that the terminal is abnormal.
  • Step 502 The NWDAF sends the terminal identification and instruction information to the PCF of the terminal.
  • step 502 For a specific description of step 502, reference may be made to the related description of step 402 in the embodiment shown in FIG. 4 to FIG. 6, and details are not described herein again.
  • Step 503 The PCF sends the terminal identification and indication information to the AMF.
  • the PCF may call the Npcf_AMPolicyControl_UpdateNotify service to send the terminal identification and indication information to the AMF. Further, after receiving the identification and indication information of the terminal from the PCF, the AMF may send a service response message to the PCF, and the service response message is used to confirm that the identification and indication information of the terminal sent by the PCF is received.
  • Step 504 The AMF sends the terminal identification and indication information to the SMF of the terminal.
  • the SMF of the terminal is an SMF that provides services to the terminal, and may be one or more SMFs without limitation.
  • the AMF may call the Namf_EventExposure_Notify service, and send the terminal identification and indication information to the SMF of the terminal. Further, after receiving the identification and indication information of the terminal from the AMF, the SMF of the terminal may send a service response message to the AMF, and the service response message is used to confirm that the identification and indication information of the terminal sent by the AMF is received.
  • FIG. 7 to FIG. 9 only show that the AMF sends the terminal identification and indication information to one SMF of the terminal.
  • the following steps are also described by the process after one SMF of the terminal receives the terminal identification and instruction information sent by the AMF, and the other SMFs of the terminal after receiving the terminal identification and instruction information sent by the AMF and The following processes are the same and will not be described again.
  • Step 505 The SMF sends the terminal identification and instruction information to the PCF corresponding to the SMF.
  • the SMF may call the Npcf_SMPolicyControl_Update service to send the terminal identification and instruction information to the PCF corresponding to the SMF.
  • the context of the terminal stored by the SMF includes the address of the PCF corresponding to the SMF.
  • Step 506 The PCF determines a first restricted service policy according to the instruction information.
  • the first restricted service policy can be used to stop the uplink data flow of the terminal, or the first restricted service policy can be used to limit the downlink data flow of the terminal, or the first restricted service policy can be used to stop the terminal And restrict the downlink data flow of the terminal.
  • Step 507 The PCF sends the terminal identity and the first restricted service policy to the SMF.
  • the PCF may carry the terminal identification and the first restricted service policy to the SMF and send it to the SMF. Service response message.
  • the method further includes: after receiving the terminal identity and the first restricted service policy, the SMF may send the restricted service policy corresponding to the communication device to the communication device according to the received first restricted service policy. So that the communication device can provide the restricted service to the terminal according to the received restricted service policy.
  • the method when the first restricted service policy is used to stop the uplink data flow of the terminal, the method may include the following steps 508a to 509a; or, as shown in FIG. 8, when the first receiving When the service-limited policy is used to stop the uplink data flow of the terminal, the method may include the following steps 508b to 509b.
  • the method may include the following steps 508c to 509c.
  • the method may include the following steps 508a to 509a and 508c to 509c, or the method The following steps 508b-509b and 508c-509c may be included.
  • Step 508a The SMF sends a second restricted service policy to the terminal.
  • step 508a For a detailed description of step 508a, reference may be made to the related description of step 405a in the embodiment shown in FIG. 4, and details are not described herein again.
  • Step 509a The terminal stops transmission of the uplink data stream according to the second restricted service policy.
  • step 509a For a detailed description of step 509a, reference may be made to the related description of step 406a in the embodiment shown in FIG. 4, and details are not described herein again.
  • the terminal may also send a confirmation message to the SMF, where the confirmation message is used to confirm that the second restricted service policy sent by the SMF is received.
  • the terminal sends the SM NAS NAS message to the SMF by the RAN and the AMF.
  • Step 508b The SMF sends the terminal identification and the third restricted service policy to the access network device.
  • step 508b For a detailed description of step 508b, refer to the related description of step 405b in the embodiment shown in FIG. 5, and details are not described herein again.
  • Step 509b The access network device stops the uplink data flow of the terminal according to the identity of the terminal and the third restricted service policy.
  • step 509b For a detailed description of step 509b, reference may be made to the related description of step 406b in the embodiment shown in FIG. 5, and details are not described herein again.
  • the access network device may also send a confirmation message to the SMF.
  • the confirmation message may be used to confirm the identity of the terminal and the third restricted service policy received by the SMF.
  • the access network device sends an SM to NAS message from the AMF to the SMF.
  • Step 508c The SMF sends the terminal identity and the fourth restricted service policy to the UPF.
  • step 508c For a detailed description of step 508c, refer to the related description of step 405c in the embodiment shown in FIG. 6, and details are not described herein again.
  • Step 509c The UPF restricts the downlink data flow of the terminal according to the identity of the terminal and the fourth restricted service policy.
  • step 509c For the detailed description of step 509c, refer to the related description of step 406c in the embodiment shown in FIG. 6, and details are not described herein again.
  • the first network element when determining that the terminal is abnormal, sends the terminal identification and indication information for indicating the terminal abnormality or the type of the terminal abnormality to the PCF providing the service to the terminal So that the PCF sends the terminal's identification and indication information to the AMF.
  • the AMF sends the identification and instruction information of the terminal to the SMF of the terminal, so that the SMF sends the identification and instruction information of the terminal to the PCF corresponding to the SMF, and then the PCF determines the A first restricted service policy, and by sending the terminal ’s identity and the first restricted service policy to the SMF, so that the SMF sends the restricted service policy corresponding to the communication device to the communication device according to the first restricted service policy, and
  • the communication device provides limited services for the terminal, instead of directly registering the terminal when the terminal is abnormal. Therefore, while effectively reducing security risks, the management efficiency of the terminal is improved.
  • the method provided in the embodiments shown in FIG. 4 to FIG. 9 is described above by using the SMF to issue a restricted service policy to a communication device, so that the communication device provides a limited service for a terminal as an example.
  • the AMF may also issue a restricted service policy to the communication device, so as to provide the terminal with the corresponding restricted service.
  • the method provided in the embodiment shown in FIG. 3 is described below with reference to FIG. 10 to FIG. 11 with the first network element being NWDAF as an example.
  • the method may include:
  • Step 601 NWDAF determines that the terminal is abnormal.
  • Step 602 The NWDAF sends the terminal identification and indication information to the PCF.
  • step 602 For the detailed description of step 602, reference may be made to the related description in step 402 in the embodiment shown in FIG. 4 to FIG. 6, and details are not described herein again.
  • Step 603 The PCF determines a first restricted service policy according to the instruction information.
  • the first restricted service policy may be used to stop the uplink data flow of the terminal.
  • Step 604 The PCF sends the terminal identification and the first restricted service policy to the AMF.
  • the PCF may call the Npcf_AMPolicyControl_UpdateNotify service, and send the terminal identifier and the first restricted service policy to the AMF. Further, after receiving the identity of the terminal from the PCF and the first restricted service policy, the AMF may send a service response message to the PCF, and the service response message is used to confirm that the identity of the terminal and the first restriction from the PCF are received. Service strategy.
  • the above method further includes: after receiving the terminal identity and the first restricted service policy, the AMF may send the restricted service policy corresponding to the communication device to the communication device according to the received first restricted service policy. So that the communication device can provide the restricted service to the terminal according to the received restricted service policy.
  • the method may include the following steps 605a to 606a, or as shown in FIG. 11, the method may include the following steps 605b to 606b.
  • steps 605a-606a The following describes steps 605a-606a:
  • Step 605a The AMF sends a second restricted service policy to the terminal.
  • the second restricted service policy is used to stop the uplink data flow of the terminal.
  • the second restricted service policy may include indication information, and the indication information is used to instruct to update or modify a terminal's terminal routing policy (UE Selection Policy) threshold value as A value.
  • the first value is used to stop the upstream data flow.
  • the second restricted service policy in step 605a may be sent by the AMF to the terminal via an access network device (such as AN / RAN).
  • the message that the AMF sends the second restricted service policy may be an access and mobility non-access layer message (AM NAS message). If the AMF sends the second restricted service policy to the terminal by the access network device, the AM's NAS message can also carry the identity of the terminal for the access network device to address the terminal.
  • AMF access and mobility non-access layer message
  • Step 606a The terminal stops transmitting the uplink data stream according to the second restricted service policy.
  • the terminal may enter the restricted service state according to the second restricted service policy, that is, stop the transmission of the uplink data stream.
  • the terminal may update or modify the threshold value in the URSP of the terminal to a first value according to the received instruction information, so as to stop transmission of the uplink data stream.
  • the terminal may further send a confirmation message to the AMF, which is used to confirm that the second restricted service policy sent by the AMF is received. For example, the terminal sends an AM NAS message to the AMF by the RAN.
  • Step 605b The AMF sends the terminal identification and the third restricted service policy to the access network device.
  • the third restricted service policy is used to stop the uplink data flow of the terminal.
  • the third restricted service policy may include a QoS configuration file, where the QoS configuration file is used to stop the uplink data flow.
  • the QoS configuration file includes indication information, and the indication information is used to instruct the access network device to stop calling an uplink DRB resource to the terminal.
  • the AMF may carry the identity of the terminal and the third restricted service policy in a UE CONTEXT MODIFICATION request message and send it to the access network device.
  • Step 606b The access network device stops the uplink data flow of the terminal according to the identity of the terminal and the third restricted service policy.
  • step 606b For a detailed description of step 606b, reference may be made to the related description in step 406b in the embodiment shown in FIG. 5, and details are not described herein again.
  • the access network device may also send a confirmation message to the AMF.
  • the confirmation message may be used to confirm the identity of the terminal and the third restricted service policy received by the AMF.
  • the determination message may be a UE CONTEXT MODIFICATION response message.
  • step 601 may be replaced by: the AF determines that the terminal is abnormal.
  • step 602 may be replaced by: the AF sends the terminal identification and indication information to the UDM.
  • the AF can send the terminal identification and indication information to the UDM through the NEF.
  • Step 603 may be replaced by: the UDM determines the first restricted service policy according to the instruction information.
  • Step 604 may be replaced by: the UDM sends the terminal identification and the first restricted service policy to the AMF.
  • NWDAF when determining that the terminal is abnormal, NWDAF sends the terminal identification and the indication information indicating the terminal abnormality or the type of abnormality of the terminal to the PCF so that the PCF receives the instruction information Determine a first restricted service policy for providing a restricted service to the terminal, and send the terminal's identity and the first restricted service policy to the AMF, so that the AMF sends the communication to the communication device according to the first restricted service policy
  • the restricted service policy corresponding to the device and thus the communication device provides the restricted service for the terminal, instead of registering the terminal directly when the terminal is abnormal. Therefore, while effectively reducing security risks, the management efficiency of the terminal is improved.
  • the methods provided in the embodiments shown in FIG. 3 to FIG. 11 above are mainly described by using a PCF to determine and issue a limited service policy of a terminal so that a communication device provides the limited service to the terminal as an example.
  • the AF may also determine and issue the restricted service policy of the terminal, so that the communication device provides the restricted service for the terminal.
  • the following embodiment combines the 5G mobile communication system shown in FIG. 1 to introduce a method in which the AF determines and delivers a restricted service policy of a terminal to provide a restricted service for the terminal.
  • FIG. 12 is a schematic flowchart of a method for providing a restricted service according to another embodiment of the present application.
  • the method may include:
  • Step 701 The AF determines that the terminal is abnormal and the first restricted service policy.
  • the first restricted service policy may be a restricted service policy corresponding to a terminal abnormality.
  • the first restricted service policy is used to provide a restricted service for the terminal.
  • the restricted service may include any of the following: stopping the uplink data flow; limiting the downlink data flow; stopping the uplink data flow and limiting the downlink data flow.
  • the first restricted service strategy may be to stop the uplink data flow of the terminal, or to limit the downlink data flow of the terminal, or to stop the uplink data flow of the terminal, and limit the downlink data flow of the terminal.
  • the AF determining that the terminal is abnormal may be replaced by: the AF determines that the terminal is abnormal according to the traffic information of the terminal.
  • the terminal abnormality may be an abnormal terminal traffic.
  • the AF determining the terminal abnormality may be replaced by: the AF determining the abnormal type of the terminal, or the AF determining the abnormal type of the terminal according to the traffic information of the terminal.
  • the abnormality type may include any of the following: abnormal uplink traffic; abnormal downlink traffic; abnormal uplink traffic and abnormal downlink traffic.
  • the abnormal type of the terminal may be an abnormal type of traffic of the terminal.
  • the first restricted service policy may be replaced with a restricted service policy corresponding to the abnormal type of the terminal.
  • the specific implementation of the AF determining the abnormality of the terminal according to the traffic information of the terminal may refer to the description of the first network element determining the abnormality of the terminal according to the traffic information of the terminal in step 301 included in the method shown in the embodiment shown in FIG.
  • determining the abnormality type of the terminal reference may be made to the description of determining the abnormality type of the terminal by the first network element in step 301 included in the method provided in the embodiment shown in FIG. 3, and details are not described herein again.
  • the AF determines the first restricted service policy in step 701 as follows:
  • the limited service policy corresponding to the abnormality of the terminal, that is, the first limited service policy is stored.
  • the first restricted service policy may be to stop the uplink data flow of the terminal, or to limit the downlink data flow of the terminal, or to stop the uplink data flow of the terminal, and limit the downlink data flow of the terminal.
  • the first restricted service policy stored by the AF may be predefined, or may be pre-configured in the AF, or may be delivered to the AF by other communication devices, which are not specifically limited in this embodiment of the present application.
  • the AF may store the correspondence between the exception and the restricted service policy, and the AF determines the restricted service policy corresponding to the terminal exception as the first restricted service policy according to the correspondence between the exception and the restricted service policy. .
  • the AF determination terminal abnormality is replaced by the AF determination terminal abnormality type, or the AF determination terminal abnormality type is based on the terminal's traffic information.
  • the AF can store the information between the abnormality type and the restricted service policy.
  • the mapping relationship is shown in Table 2.
  • the AF determining the first restricted service policy may be: the AF determines, according to the mapping relationship shown in Table 2, the restricted service policy corresponding to the abnormal type as the first restricted service policy.
  • the first restricted service policy when the abnormal type is abnormal uplink traffic, the first restricted service policy is to stop the uplink data flow of the terminal.
  • the first restricted service policy is to restrict the downlink data flow of the terminal.
  • the first restricted service policy is to stop the uplink data flow of the terminal and limit the downlink data flow of the terminal.
  • Step 702 The AF sends the terminal identification and the first restricted service policy to the UDM.
  • Step 703 The UDM receives the identity of the terminal from the AF and the first restricted service policy.
  • Step 704 The UDM sends the terminal identity and the first restricted service policy to the SMF.
  • the UDM may directly send the terminal identifier and the first restricted service policy to the SMF.
  • the terminal identifier and the first restricted service policy may directly send the terminal identifier and the first restricted service policy to the SMF.
  • the UDM may also send the terminal identifier and the first restricted service policy to the SMF through the AMF.
  • the terminal identifier and the first restricted service policy may also be sent to the SMF through the AMF.
  • Step 705 The SMF receives the identity of the terminal from the UDM and the first restricted service policy.
  • Step 706 The SMF sends the limited service policy corresponding to the communication device to the communication device according to the received first limited service policy.
  • Step 706 may refer to the related description in the embodiment shown in FIG. 3.
  • the SMF sends the limited service policy corresponding to the communication device to the communication device, so that the communication device provides the terminal with a limited service according to the received limited service policy. Limited service.
  • the communication device may be a terminal, an access network device, or a UPF; it may also be a terminal and a UPF, or an access network device and a UPF, without limitation.
  • the SMF may send a second restricted service policy to the terminal according to the first restricted service policy, so that the terminal may
  • the restricted service policy performs related operations, such as stopping the uplink data flow of the terminal.
  • the SMF may send the terminal identifier and the third restricted service policy to the access network device according to the first restricted service policy, so that The access network device provides restricted services to the terminal, such as stopping the uplink data flow of the terminal, according to the identity of the terminal and the third restricted service policy.
  • the SMF may send the terminal identifier and the third restricted service policy to the access network device according to the first restricted service policy, so that The access network device provides restricted services to the terminal, such as stopping the uplink data flow of the terminal, according to the identity of the terminal and the third restricted service policy.
  • the SMF may send the terminal identifier and the fourth restricted service policy to the UPF according to the first restricted service policy, so that the UPF Provide restricted services to the terminal according to the identity of the terminal and the fourth restricted service policy, such as restricting the downlink data flow of the terminal.
  • the SMF may send the terminal identifier and the fourth restricted service policy to the UPF according to the first restricted service policy, so that the UPF Provide restricted services to the terminal according to the identity of the terminal and the fourth restricted service policy, such as restricting the downlink data flow of the terminal.
  • the embodiment shown in FIG. 15 or FIG. 18 without limitation.
  • the SMF may send the second restricted service to the terminal according to the first restricted service policy.
  • Policy so that the terminal performs related operations according to the second restricted service policy, such as stopping the terminal ’s upstream data flow, and sending the terminal ’s identity and the fourth restricted service policy to the UPF, so that the UPF according to the terminal ’s identity and the fourth restricted service
  • the service policy provides restricted services to the terminal, such as limiting the downstream data flow of the terminal.
  • the SMF may send the terminal identification and the access network device according to the first restricted service policy in step 706.
  • the third restricted service policy so that the access network device provides restricted services to the terminal according to the terminal's identity and the third restricted service policy, such as stopping the terminal's upstream data flow, and sending the terminal's identity and the fourth destination to the UPF.
  • the restricted service policy so that the UPF provides restricted services to the terminal according to the terminal's identity and the fourth restricted service policy, such as limiting the downstream data flow of the terminal.
  • the second restricted service policy is used to stop the uplink data flow of the terminal.
  • the third restricted service policy is used to stop the uplink data flow of the terminal.
  • the fourth restricted service policy is used to limit the downlink data flow of the terminal.
  • the AF determines a first restricted service policy for providing the terminal with a restricted service, and sends the terminal identifier and the first restricted service to the UDM.
  • Service policy so that UDM sends the terminal ’s identity and the first restricted service policy to the SMF, thereby providing restricted services for the terminal, instead of registering the terminal directly when the terminal is abnormal, effectively reducing security risks while improving To the management efficiency of the terminal.
  • FIG. 12 The method shown in FIG. 12 is described below with reference to the 5G mobile communication system shown in FIG. 1.
  • FIG. 13 to 15 are schematic flowcharts of a method for providing a restricted service according to another embodiment of the present application.
  • the method may include:
  • Step 801 The AF determines that the terminal is abnormal and the first restricted service policy.
  • step 701 For specific implementation of the AF determining the terminal abnormality and the first restricted service policy, reference may be made to the related description of step 701 in the embodiment shown in FIG. 12, and details are not described herein again.
  • Step 802 The AF sends the terminal identification and the first restricted service policy to the UDM.
  • the AF may send the terminal identifier and the first restricted service policy to the UDM via the MEF.
  • the AF sends a traffic directed request (AF traffic steering request) message of the application function to the NEF, and the AF traffic steering request message includes the identity of the terminal and the first restricted service policy.
  • the NEF sends an update request (Updated request) to the UDM, where the Update request includes the identity of the terminal and the first restricted service policy.
  • the NEF can reply to the AF with a traffic oriented response of the application function (AF traffic steering response message).
  • the UDM may send an updated response (Updated response) message to the NEF.
  • Step 803 The UDM sends the terminal identity and the first restricted service policy to the SMF.
  • the UDM may call the Nudm_SDM_Notification service, and send the terminal identifier and the first restricted service policy to the SMF. Further, after receiving the identity of the terminal from the UDM and the first restricted service policy, the SMF may send a service response message to the UDM, and the service response message is used to confirm the identity of the terminal and the first restricted service received by the UDM. Service strategy.
  • the method further includes: after receiving the terminal identifier and the first restricted service policy, the SMF may issue the restricted service policy corresponding to the communication device to the communication device according to the first restricted service policy, so that The communication device may provide a restricted service to the terminal according to the received restricted service policy.
  • the method when the first restricted service policy is used to stop the uplink data flow of the terminal, the method may include the following steps 804a to 805a; or, as shown in FIG. 14, when the first receiving When the service-limited policy is used to stop the uplink data flow of the terminal, the method may include the following steps 804b to 805b.
  • the method may include the following steps 804c to 805c.
  • the method may include the following steps 804a to 805a and 804c to 805c, or the method The following steps 804b-805b and 804c-805c may be included.
  • the SMF may also send the identity of the terminal and the first restricted service policy to the PCF corresponding to the SMF, so that the PCF determines whether the first restricted service is required. Changes to the service policy. If no change is needed, the PCF can send the terminal's identity and the first restricted service policy to the SMF. If it needs to be modified, the PCF can send the modified restricted service policy to the SMF so that the SMF can use the modified restricted service policy , Issuing a limited service policy corresponding to the communication device to the communication device, thereby providing the terminal with a limited service.
  • the SMF issues a description of the restricted service policy corresponding to the communication device to the communication device according to the modified restricted service policy. For details, refer to the step of issuing the restricted service policy corresponding to the communication device to the communication device according to the first restricted service policy. Related descriptions are not repeated here.
  • steps 804a-805a The following describes steps 804a-805a:
  • Step 804a The SMF sends a second restricted service policy to the terminal.
  • step 804a For the specific description of step 804a, reference may be made to the related description in step 405a in the method provided in the embodiment shown in FIG. 4, and details are not described herein again.
  • Step 805a The terminal stops transmission of the uplink data stream according to the second restricted service policy.
  • step 805a For the detailed description of step 805a, reference may be made to the related description in step 406a in the method provided in the embodiment shown in FIG. 4, and details are not described herein again.
  • the terminal may also send a confirmation message to the SMF, where the confirmation message is used to confirm that the second restricted service policy sent by the SMF is received.
  • the terminal sends the SM NAS NAS message to the SMF by the RAN and the AMF.
  • Step 804b The SMF sends the terminal identification and the third restricted service policy to the access network device.
  • step 804b For the detailed description of step 804b, reference may be made to the related description in step 405b in the method provided in the embodiment shown in FIG. 5, and details are not described herein again.
  • Step 805b The access network device stops the uplink data flow of the terminal according to the identity of the terminal and the third restricted service policy.
  • step 805b For the specific description of step 805b, reference may be made to the related description in step 406b in the method provided in the embodiment shown in FIG. 5, and details are not described herein again.
  • the access network device may also send a confirmation message to the SMF.
  • the confirmation message may be used to confirm the identity of the terminal and the third restricted service policy received by the SMF.
  • the access network device sends an SM to NAS message from the AMF to the SMF.
  • Step 804c The SMF sends the terminal identity and the fourth restricted service policy to the UPF.
  • step 804c For the specific description of step 804c, reference may be made to the related description in step 405c in the method provided in the embodiment shown in FIG. 6, and details are not described herein again.
  • Step 805c The UPF restricts the downlink data flow of the terminal according to the identity of the terminal and the fourth restricted service policy.
  • step 805c For the specific description of step 805c, reference may be made to the related description in step 406c in the method provided in the embodiment shown in FIG. 6, and details are not described herein again.
  • the AF determines a first restricted service policy corresponding to the terminal abnormality to provide the terminal with a restricted service, and sends the terminal's The identifier and the first restricted service policy, so that the UDM sends the identity of the terminal and the first restricted service policy to the SMF, and then the SMF sends the restricted service policy corresponding to the communication device to the communication device according to the first restricted service policy, Furthermore, the communication device provides limited services for the terminal, instead of directly registering the terminal when the terminal is abnormal, effectively reducing security risks and improving management efficiency of the terminal.
  • 16 to 18 are schematic flowcharts of a method for providing a restricted service according to another embodiment of the present application.
  • the method may include:
  • Step 901 The AF determines that the terminal is abnormal and the first restricted service policy.
  • step 701 For specific implementation of the AF determining the terminal abnormality and the first restricted service policy, reference may be made to the related description in step 701 in the embodiment shown in FIG. 12, and details are not described herein again.
  • Step 902 The AF sends the terminal identification and the first restricted service policy to the UDM.
  • step 902 For a detailed description of step 902, reference may be made to the related description in step 802 in the method provided in the embodiments shown in FIG. 13 to FIG. 15, and details are not described herein again.
  • Step 903 The UDM sends the terminal identification and the first restricted service policy to the AMF.
  • the UDM may call the Nudm_SubscriberData_UpdateNotification service to send the terminal identity and the first restricted service policy to the AMF. Further, after receiving the identity of the terminal from the UDM and the first restricted service policy, the AMF may send a service response message to the UDM, and the service response message is used to confirm that the identity of the terminal and the first restriction are received from the UDM. Service strategy.
  • Step 904 The AMF sends the terminal identification and the first restricted service policy to the SMF of the terminal.
  • the SMF of the terminal is an SMF that provides services to the terminal, and may be one or more SMFs without limitation.
  • the AMF may call the Namf_EventExposure_Notify service, and send the terminal identification and the first restricted service policy to the terminal SMF. Further, after receiving the identity of the terminal and the first restricted service policy, the SMF of the terminal may send a service response message to the AMF, and the service response message is used to confirm that the identity of the terminal and the first restricted service sent by the AMF are received. Strategy.
  • FIG. 16 to FIG. 18 only show that the AMF sends the terminal identification and the first restricted service policy to one SMF of the terminal.
  • the following steps also introduce the process after one SMF of the terminal receives the identity of the terminal and the first restricted service policy sent by the AMF, and other SMFs of the terminal receive the identity of the terminal and the first
  • the process after the restricted service policy is the same as the following process, and is not repeated here.
  • the method further includes: after receiving the terminal identity and the first restricted service policy, the SMF may issue the restricted service policy corresponding to the communication device to the communication device according to the first limited service policy, so that The communication device may provide a restricted service to the terminal according to the received restricted service policy.
  • the method when the first restricted service policy is used to stop the uplink data flow of the terminal, the method may include the following steps 905a to 906a; or, as shown in FIG. 17, when the first receiving When the limited service policy is used to stop the uplink data flow of the terminal, the method may include the following steps 905b to 906b.
  • the method may include the following steps 905c to 906c.
  • the method may include the following steps 905a to 906a and 905c to 906c, or the method The following steps 905b to 906b and 905c to 906c may be included.
  • the SMF may also send the identity of the terminal and the first restricted service policy to the PCF corresponding to the SMF, so that the PCF determines whether the first restricted service is required. Changes to the service policy. If no change is needed, the PCF can send the terminal's identity and the first restricted service policy to the SMF.
  • the PCF can send the modified restricted service policy to the SMF so that the SMF can use the modified restricted service policy
  • the SMF delivers a description of the limited service policy corresponding to the communication device to different communication devices according to the modified limited service policy
  • Step 905a The SMF sends a second restricted service policy to the terminal.
  • step 905a For a specific description of step 905a, reference may be made to the related description of step 405a in the method provided in the embodiment shown in FIG. 4, and details are not described herein again.
  • Step 906a The terminal stops transmitting the uplink data stream according to the second restricted service policy.
  • step 906a For the specific description of step 906a, reference may be made to the related description of step 406a in the method provided in the embodiment shown in FIG. 4, and details are not described herein again.
  • the terminal may also send a confirmation message to the SMF.
  • the confirmation message is used to confirm that the second restricted service policy sent by the SMF is received.
  • the terminal sends the SM NAS NAS message to the SMF by the RAN and the AMF.
  • Step 905b The SMF sends the terminal identification and the third restricted service policy to the access network device.
  • step 905b For the specific description of step 905b, refer to the related description of step 405b in the method provided by the embodiment shown in FIG. 5, and details are not described herein again.
  • Step 906b The access network device stops the uplink data flow of the terminal according to the identity of the terminal and the third restricted service policy.
  • step 906b For the specific description of step 906b, refer to the related description of step 406b in the method provided in the embodiment shown in FIG. 5, and details are not described herein again.
  • the access network device may also send a confirmation message to the SMF.
  • the confirmation message may be used to confirm the identity of the terminal and the third restricted service policy received by the SMF.
  • the access network device sends an SM to NAS message from the AMF to the SMF.
  • Step 905c The SMF sends the terminal identity and the fourth restricted service policy to the UPF.
  • step 905c For a specific description of step 905c, reference may be made to the related description of step 405c in the method provided in the embodiment shown in FIG. 6, and details are not described herein again.
  • Step 906c The UPF restricts the downlink data flow of the terminal according to the identity of the terminal and the fourth restricted service policy.
  • step 906c For the detailed description of step 906c, refer to the related description of step 406c in the method provided by the embodiment shown in FIG. 6, which is not repeated here.
  • the AF determines a first restricted service policy corresponding to the terminal abnormality to provide the terminal with a restricted service, and sends the terminal's The identifier and the first restricted service policy, so that the UDM sends the terminal ’s identity and the first restricted service policy to the AMF, and the AMF sends the terminal ’s identity and the first restricted service policy to the terminal ’s SMF.
  • the SMF can The first restricted service policy sends the restricted service policy corresponding to the communication device to the communication device, and the communication device provides the limited service for the terminal instead of directly registering the terminal when the terminal is abnormal, which effectively reduces security risks.
  • the management efficiency of the terminal is improved.
  • each functional module may be divided corresponding to each function, or two or more functions may be divided.
  • the above integrated modules can be implemented in the form of hardware or software functional modules. It should be noted that the division of the modules in the embodiments of the present application is schematic, and is only a logical function division. In actual implementation, there may be another division manner.
  • An embodiment of the present application provides a communication device.
  • the communication device may be a PCF, a chip in a PCF, or a system on a chip.
  • the communication device may be used to perform the functions of the PCF involved in the foregoing embodiments.
  • the foregoing communication device may include a receiving unit 1001 and a sending unit 1002.
  • the receiving unit 1001 is configured to receive an identification and instruction information of the terminal, where the instruction information is used to indicate that the terminal is abnormal or a type of the abnormality of the terminal, such as: supporting a communication device to perform step 303 above.
  • the sending unit 1002 is configured to send, according to the instruction information received by the receiving unit 1001, an identifier of the terminal and a first restricted service policy, where the first restricted service policy is used to provide a restricted service to the terminal.
  • the communication device is supported to perform the above steps 304, 404, 507, and 604.
  • the sending unit 1002 shown in FIG. 19 may also be used to support a communication device to perform step 503 described above.
  • the communication device shown in FIG. 19 may further include: a determining unit 1003, configured to determine a first restricted service policy according to the instruction information.
  • the communication device is supported to perform the above steps 403, 506, and 603.
  • the communication device provided in the embodiment of the present application is configured to perform the foregoing limited service providing method, and therefore, the same effect as the foregoing limited service providing method can be achieved.
  • the foregoing communication device may include: a processing module and a communication module.
  • the processing module is used to control and manage the actions of the communication device.
  • the processing module is used to support the communication device to perform steps 403, 506, 603, and other processes of the technology described herein.
  • the communication module is used to support communication between the communication device and other network entities, such as communication with the functional modules or network entities shown in FIG. 1.
  • the communication module is used to support the communication device to perform steps 303, 304, 404, 503, 507, 604, and other processes of the technology described herein.
  • the communication device may further include a storage module for storing program code and data of the communication device.
  • the processing module may be a processor or a controller. It may implement or execute various exemplary logical blocks, modules, and circuits described in connection with the disclosure of this application.
  • a processor may also be a combination that implements computing functions, such as a combination of one or more microprocessors, a combination of a DSP and a microprocessor, and so on.
  • the communication module may be a transceiver circuit or a communication interface.
  • the memory module may be a memory. When the processing module is a processor, the communication module is a communication interface, and the storage module is a memory, the foregoing communication device may be the communication device shown in FIG. 2.
  • the embodiment of the present application provides another communication device.
  • the communication device may be an SMF, or a chip in the SMF, or a system on a chip.
  • the communication device may be used to perform the functions of the SMF involved in the foregoing embodiments.
  • the foregoing communication device may include a receiving unit 1101 and a sending unit 1102.
  • the receiving unit 1101 is configured to receive an identifier of a terminal and a first restricted service policy, such as: supporting a communication device to perform the foregoing steps 305 and 705.
  • the sending unit 1102 is configured to send the limited service policy corresponding to the communication device to the communication device according to the first limited service policy received by the receiving unit 1101.
  • the support communication device performs the above steps 306, 405a, 405b, 405c, 508a, 508b, 508c, 706, 804a, 804b, 804c, 905a, 905b, and 905c.
  • the communication device provided in the embodiment of the present application is configured to perform the foregoing limited service providing method, and therefore, the same effect as the foregoing limited service providing method can be achieved.
  • the foregoing communication device may include: a processing module and a communication module.
  • the processing module is used to control and manage the actions of the communication device.
  • the processing module is used to support the communication device to perform other processes of the technology described herein.
  • the communication module is used to support communication between the communication device and other network entities, for example, communication with the functional modules or network entities shown in FIG. 1.
  • the communication module is used to support the communication device to perform steps 305, 306, 405a, 405b, 405c, 508a, 508b, 508c, 705, 706, 804a, 804b, 804c, Steps 905a, 905b, 905c, and other processes of the techniques described herein.
  • the communication device may further include a storage module for storing program code and data of the communication device.
  • the processing module may be a processor or a controller. It may implement or execute various exemplary logical blocks, modules, and circuits described in connection with the disclosure of this application.
  • a processor may also be a combination that implements computing functions, such as a combination of one or more microprocessors, a combination of a DSP and a microprocessor, and so on.
  • the communication module may be a transceiver circuit or a communication interface.
  • the memory module may be a memory. When the processing module is a processor, the communication module is a communication interface, and the storage module is a memory, the foregoing communication device may be the communication device shown in FIG. 2.
  • the communication device may be an AMF, or a chip in the AMF, or a system on a chip.
  • the communication system may be used to perform the functions of the AMF involved in the foregoing embodiments.
  • the foregoing communication device may include a receiving unit 1201 and a sending unit 1202.
  • the receiving unit 1201 is configured to receive an identifier of the terminal and a first restricted service policy, where the first restricted service policy is used to provide a restricted service to the terminal.
  • the sending unit 1202 is configured to send a limited service policy corresponding to the communication device to the communication device according to the first limited service policy received by the receiving unit 1201, so as to provide the terminal with a limited service.
  • the communication device is supported to perform the above steps 605a and 605b.
  • the sending unit 1202 may be further configured to support the communication device to perform the above steps 504 and 904.
  • the foregoing communication device may include: a processing module and a communication module.
  • the processing module is used to control and manage the actions of the communication device.
  • the communication module is used to support communication between the communication device and other network entities, such as communication with the functional modules or network entities shown in FIG. 1.
  • the communication module is used to support the communication device to perform steps 504, 605a, 605b, step 904, and other processes of the technology described herein.
  • the communication device may further include a storage module for storing program code and data of the communication device. .
  • the processing module may be a processor or a controller. It may implement or execute various exemplary logical blocks, modules, and circuits described in connection with the disclosure of this application.
  • a processor may also be a combination that implements computing functions, such as a combination of one or more microprocessors, a combination of a DSP and a microprocessor, and so on.
  • the communication module may be a transceiver circuit or a communication interface.
  • the memory module may be a memory. When the processing module is a processor, the communication module is a communication interface, and the storage module is a memory, the foregoing communication device may be the communication device shown in FIG. 2.
  • the communication device may be a first network element, or a chip in the first network element, or a system on a chip.
  • the communication system may be used to execute the first network involved in the foregoing embodiment. Meta functions.
  • the first network element may be NWDAF or AF.
  • the foregoing communication device may include: a determining unit 1301 and a sending unit 1302.
  • the determining unit 1301 is configured to determine that the terminal is abnormal, such as: supporting a communication device to perform the foregoing steps 301, 401, 501, and 601.
  • the sending unit 1302 is configured to send the terminal identification and instruction information to the PCF, where the instruction information is used to indicate that the terminal is abnormal or the type of the terminal is abnormal.
  • the communication device is supported to perform the above steps 302, 402, 502, and 602.
  • the foregoing communication device may include: a processing module and a communication module.
  • the processing module is used to control and manage the actions of the communication device.
  • the processing module is used to support the communication device to perform steps 301, 401, 501, 601, and other processes of the technology described herein.
  • the communication module is used to support communication between the communication device and other network entities, such as communication with the functional modules or network entities shown in FIG. 1.
  • the communication module is used to support the communication device to perform steps 302, 402, 502, 602, and other processes of the technology described herein.
  • the communication device may further include a storage module for storing program code and data of the communication device.
  • the processing module may be a processor or a controller. It may implement or execute various exemplary logical blocks, modules, and circuits described in connection with the disclosure of this application.
  • a processor may also be a combination that implements computing functions, such as a combination of one or more microprocessors, a combination of a DSP and a microprocessor, and so on.
  • the communication module may be a transceiver circuit or a communication interface.
  • the memory module may be a memory. When the processing module is a processor, the communication module is a communication interface, and the storage module is a memory, the foregoing communication device may be the communication device shown in FIG. 2.
  • the communication device may be a UDM, or a chip in the UDM, or a system on a chip.
  • the communication system may be used to perform the functions of the UDM involved in the foregoing embodiments.
  • the foregoing communication device may include a receiving unit 1401 and a sending unit 1402.
  • the receiving unit 1401 is configured to receive an identifier of the terminal and a first restricted service policy, where the first restricted service policy is used to provide a restricted service to the terminal, such as: supporting a communication device to perform step 703 described above.
  • the sending unit 1402 is configured to send an identifier of the terminal and a first restricted service policy.
  • the communication device is supported to perform the above steps 704, 803, and 903.
  • the foregoing communication device may include: a processing module and a communication module.
  • the processing module is used to control and manage the actions of the communication device.
  • the communication module is used to support communication between the communication device and other network entities, for example, communication with the functional modules or network entities shown in FIG. 1.
  • the communication module is used to support the communication device to perform steps 703, 704, 803, 903, and other processes of the technology described herein.
  • the communication device may further include a storage module for storing program code and data of the communication device. .
  • the processing module may be a processor or a controller. It may implement or execute various exemplary logical blocks, modules, and circuits described in connection with the present disclosure.
  • a processor may also be a combination that implements computing functions, such as a combination of one or more microprocessors, a combination of a DSP and a microprocessor, and so on.
  • the communication module may be a transceiver circuit or a communication interface.
  • the memory module may be a memory. When the processing module is a processor, the communication module is a communication interface, and the storage module is a memory, the foregoing communication device may be the communication device shown in FIG. 2.
  • the communication device may be an AF, or a chip in the AF, or a system on a chip.
  • the communication system may be used to perform the functions of the AF involved in the foregoing embodiments.
  • the foregoing communication device may include: a determining unit 1501, and a sending unit 1502.
  • a determining unit 1501 is configured to determine a terminal abnormality and a limited service policy corresponding to the abnormality, and the limited service policy corresponding to the abnormality is used to provide a limited service for the terminal, for example, supporting a communication device to perform the foregoing steps 701, 801, and 901 .
  • the sending unit 1502 is configured to send the identifier of the terminal and the restricted service policy corresponding to the abnormality determined by the determining unit 1501.
  • the communication device is supported to perform the above steps 702, 802, and 902.
  • the foregoing communication device may include: a processing module and a communication module.
  • the processing module is used to control and manage the actions of the communication device.
  • the processing module is used to support the communication device to perform steps 701, 801, 901, and other processes of the technology described herein.
  • the communication module is used to support communication between the communication device and other network entities, such as communication with the functional modules or network entities shown in FIG. 1.
  • the communication module is used to support the communication device to perform steps 702, 802, 902, and other processes of the technology described herein.
  • the communication device may further include a storage module for storing program code and data of the communication device.
  • the processing module may be a processor or a controller. It may implement or execute various exemplary logical blocks, modules, and circuits described in connection with the disclosure of this application.
  • a processor may also be a combination that implements computing functions, such as a combination of one or more microprocessors, a combination of a DSP and a microprocessor, and so on.
  • the communication module may be a transceiver circuit or a communication interface.
  • the memory module may be a memory. When the processing module is a processor, the communication module is a communication interface, and the storage module is a memory, the foregoing communication device may be the communication device shown in FIG. 2.
  • the communication system may include a communication device shown in FIG. 19 (the communication device may be a PCF), a communication device shown in FIG. 20 (the communication device may be an SMF), and FIG. 22
  • the communication device shown (the communication device may be a first network element, and the first network element may be NWDAF or AF), a terminal, an access network device, and a UPF.
  • the above-mentioned devices cooperate with each other to implement the method for providing limited services provided by the embodiments of the present application.
  • the method provided by any of the embodiments shown in FIG. 3 to FIG. 6.
  • the communication system may further include a communication device shown in FIG. 21 (the communication device may be an AMF).
  • the communication device shown in FIG. 21 cooperates with the foregoing device to implement a method for providing a limited service provided by the embodiment of the present application. For example, the method provided by any one of the embodiments shown in FIG. 7 to FIG. 11.
  • the communication system may include: a communication device shown in FIG. 20 (the communication device may be an SMF), and a communication device shown in FIG. 23 (the communication device may be a UDM).
  • the communication device shown in 24 (the communication device may be AF), a terminal, an access network device, and a UPF.
  • the above-mentioned devices cooperate with each other to implement the method for providing a limited service provided by the embodiment of the present application, for example, the method provided by any embodiment shown in FIG. 12 to FIG. 15.
  • the communication system may further include a communication device shown in FIG. 21 (the communication device may be an AMF).
  • the communication device shown in FIG. 21 cooperates with the foregoing device to implement a method for providing a limited service provided by the embodiment of the present application. For example, the method provided by any of the embodiments shown in FIG. 16 to FIG. 18.
  • the disclosed apparatus and method may be implemented in other ways.
  • the device embodiments described above are only schematic.
  • the division of the modules or units is only a logical function division.
  • multiple units or components may be divided.
  • the combination can either be integrated into another device, or some features can be ignored or not implemented.
  • the displayed or discussed mutual coupling or direct coupling or communication connection may be indirect coupling or communication connection through some interfaces, devices or units, which may be electrical, mechanical or other forms.
  • the unit described as a separate component may or may not be physically separated, and the component displayed as a unit may be a physical unit or multiple physical units, that is, may be located in one place, or may be distributed to multiple different places. . Some or all of the units may be selected according to actual needs to achieve the objective of the solution of this embodiment.
  • each functional unit in each embodiment of the present application may be integrated into one processing unit, or each of the units may exist separately physically, or two or more units may be integrated into one unit.
  • the above integrated unit may be implemented in the form of hardware or in the form of software functional unit.
  • the integrated unit When the integrated unit is implemented in the form of a software functional unit and sold or used as an independent product, it may be stored in a readable storage medium.
  • the technical solutions of the embodiments of the present application essentially or partly contribute to the existing technology or all or part of the technical solutions may be embodied in the form of a software product, which is stored in a storage medium
  • the instructions include a number of instructions for causing a device (which can be a single-chip microcomputer, a chip, or the like) or a processor to execute all or part of the steps of the method described in the embodiments of the present application.
  • the foregoing storage medium includes various media that can store program codes, such as a U disk, a mobile hard disk, a ROM, a RAM, a magnetic disk, or an optical disk.

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Computing Systems (AREA)
  • Computer Hardware Design (AREA)
  • General Engineering & Computer Science (AREA)
  • Health & Medical Sciences (AREA)
  • General Health & Medical Sciences (AREA)
  • Medical Informatics (AREA)
  • Mobile Radio Communication Systems (AREA)

Abstract

本申请实施例公开了一种受限服务的提供方法及通信设备，涉及通信领域，在IoT设备异常时，能够在有效降低安全隐患的同时，提高对IoT设备的管理效率。具体方案为：PCF接收终端的标识和指示信息，该指示信息用于指示终端异常或终端的异常类型；PCF根据指示信息，发送终端的标识和第一受限服务策略，该第一受限服务策略用于为终端提供受限服务。

Description

一种受限服务的提供方法及通信设备
本申请要求于2018年06月13日提交国家知识产权局、申请号为201810627352.8、申请名称为“一种受限服务的提供方法及通信设备”的中国专利申请的优先权，其全部内容通过引用结合在本申请中。
技术领域
本申请实施例涉及通信领域，尤其涉及一种受限服务的提供方法及通信设备。
背景技术
随着科学技术的不断发展，物联网(Internet of Things，IoT)逐渐进入人们视野。物联网能够让IoT设备通过信息传感设备与互联网连接起来，进行信息交换，以实现对IoT设备的智能化识别和管理。目前，如智能水表、共享单车的锁等IoT设备基本都是一种简单的设备，其功能比较单一，存在安全隐患，如容易被黑客攻击、劫持与滥用，从而发生异常。
在现有技术中，对于发生异常的IoT设备，使用去注册的方法，使得网络侧删除该IoT设备的注册管理上下文以及协议数据单元(Protocol Data Unit，PDU)会话，以有效降低安全隐患。但是，在对异常的IoT设备去注册后，只能通过人工操作的方式对该IoT设备进行打补丁、更新软件等维修管理，降低了对IoT设备的管理效率。
因此，在IoT设备异常时，如何在有效降低安全隐患的同时，提高对IoT设备的管理效率，已成为本领域技术人员研究的重点课题。
发明内容
本申请实施例提供一种受限服务的提供方法及通信设备，在IoT设备异常时，能够在有效降低安全隐患的同时，提高对IoT设备的管理效率。
为达到上述目的，本申请实施例采用如下技术方案：
第一方面，本申请实施例提供一种受限服务的提供方法，该方法可以包括：PCF接收终端的标识和指示信息，该指示信息用于指示终端异常或终端的异常类型；PCF根据该指示信息，发送终端的标识和第一受限服务策略，该第一受限服务策略用于为终端提供受限服务。基于本申请实施例提供的受限服务的提供方法，PCF在接收到终端的标识和用于指示终端异常或终端的异常类型的指示信息后，根据该指示信息，通过发送终端的标识和用于为终端提供受限服务的第一受限服务策略，以便为终端提供受限服务，而不是直接在终端异常时对该终端去注册，在有效降低安全隐患的同时，提高了对终端的管理效率。
结合第一方面，在一种可能的实现方式中，上述受限服务可以包括以下任意一种：停止上行数据流；限制下行数据流；停止上行数据流和限制下行数据流。这样，可以为终端提供更准确的受限服务。
结合第一方面或上述可能的实现方式，在另一种可能的实现方式中，上述PCF发送终端的标识和第一受限服务策略，具体可以包括：PCF向SMF发送终端的标识和第 一受限服务策略。
结合第一方面或上述可能的实现方式，在另一种可能的实现方式中，上述受限服务可以包括：停止上行数据流；上述PCF发送终端的标识和第一受限服务策略，具体可以包括：PCF向AMF发送终端的标识和第一受限服务策略。
结合第一方面或上述可能的实现方式，在另一种可能的实现方式中，上述PCF接收终端的标识和指示信息，具体的可以包括：PCF接收来自NWDAF或AF或SMF的终端的标识和指示信息。
第二方面，本申请实施例提供一种受限服务的提供方法，该方法可以包括：SMF接收终端的标识和第一受限服务策略；当第一受限服务策略用于停止终端的上行数据流时，SMF向终端发送第二受限服务策略，第二受限服务策略用于停止终端的上行数据流；或者，当第一受限服务策略用于停止终端的上行数据流时，SMF向接入网设备发送终端的标识和第三受限服务策略，第三受限服务策略用于停止终端的上行数据流；或者，当第一受限服务策略用于限制终端的下行数据流时，SMF向UPF发送终端的标识和第四受限服务策略，第四受限服务策略用于限制终端的下行数据流；或者，当第一受限服务策略用于停止终端的上行数据流，并限制终端的下行数据流时，SMF向终端发送第二受限服务策略或向接入网设备发送终端的标识和第三受限服务策略，并向UPF发送终端的标识和第四受限服务策略，第二受限服务策略用于停止终端的上行数据流，第三受限服务策略用于停止终端的上行数据流，第四受限服务策略用于限制终端的下行数据流。基于本申请实施例提供的受限服务的提供方法，SMF在接收到终端的标识和用于为终端提供受限服务的第一受限服务策略后，通过根据第一受限服务策略，向通信设备发送该通信设备对应的受限服务策略，以便该通信设备为终端提供受限服务，而不是直接在终端异常时对该终端去注册，在有效降低安全隐患的同时，提高了对终端的管理效率。
结合第二方面，在一种可能的实现方式中，上述第二受限服务策略可以包括QoS规则，该QoS规则可以用于停止上行数据流；或者，上述第三受限服务策略可以包括QoS配置文件，该QoS配置文件可以用于停止上行数据流；或者，上述第四受限服务策略可以包括QoS信息，该QoS信息可以用于限制下行数据流。
结合第二方面或上述可能的实现方式，在另一种可能的实现方式中，上述SMF接收终端的标识和第一受限服务策略，具体可以包括：SMF接收来自PCF、UDM或AMF的终端的标识和第一受限服务策略。
结合第二方面或上述可能的实现方式，在另一种可能的实现方式中，在上述SMF接收来自PCF的终端的标识和第一受限服务策略之前，该方法还可以包括：SMF接收来自AMF的终端的标识和指示信息，该指示信息用于指示终端异常或终端的异常类型；SMF向PCF发送终端的标识和指示信息。
第三方面，本申请实施例提供一种受限服务的提供方法，该方法可以包括：AMF接收来自PCF的终端的标识和第一受限服务策略，该第一受限服务策略用于为终端提供受限服务，该受限服务包括；停止上行数据流；AMF根据第一受限服务策略，向终端发送第二受限服务策略，该第二受限服务策略用于停止终端的上行数据流；或，AMF根据第一受限服务策略，向接入网设备发送终端的标识和第三受限服务策略，该第三 受限服务策略用于停止终端的上行数据流。基于本申请实施例提供的受限服务的提供方法，AMF在接收到终端的标识和用于为终端提供受限服务的第一受限服务策略后，通过根据第一受限服务策略，向通信设备发送该通信设备对应的受限服务策略，以便该通信设备为终端提供受限服务，而不是直接在终端异常时对该终端去注册，在有效降低安全隐患的同时，提高了对终端的管理效率。
结合第三方面，在一种可能的实现方式中，上述第二受限服务策略可以包括指示信息，该指示信息用于指示更新或修改终端的URSP的门限值为第一值，该第一值可以用于停止上行数据流；或者，上述第三受限服务策略可以包括QoS配置文件，该QOS配置文件可以用于停止上行数据流。
第四方面，本申请实施例提供一种受限服务的提供方法，该方法可以包括：第一网元确定终端异常；第一网元向PCF发送终端的标识和指示信息，该指示信息用于指示终端异常或终端的异常类型。基于本申请实施例提供的受限服务的提供方法，第一网元在确定终端异常时，通过向PCF发送终端的标识和用于指示终端异常或终端的异常类型的指示信息，以便PCF能够根据该指示信息，发送终端的标识和用于为终端提供受限服务的第一受限服务策略，进而为终端提供受限服务，而不是直接在终端异常时对该终端去注册，在有效降低安全隐患的同时，提高了对终端的管理效率。
结合第四方面，在一种可能的实现方式中，上述第一网元确定终端异常，具体可以包括：第一网元可以根据终端的流量信息确定终端异常，该流量信息可以包括上行流量信息和/或下行流量信息。
结合第四方面或上述可能的实现方式，在另一种可能的实现方式中，上述异常类型包括以下任意一种：上行流量异常；下行流量异常；上行流量异常和下行流量异常。这样，通过对终端的异常类型进行区分，可以根据异常类型为终端提供更准确的受限服务。
结合第四方面或上述可能的实现方式，在另一种可能的实现方式中，上述第一网元可以为NWDAF或AF。
第五方面，本申请实施例提供一种受限服务的提供方法，该方法可以包括：UDM接收来自AF的终端的标识和第一受限服务策略，该第一受限服务策略用于为终端提供受限服务；UDM向AMF或SMF发送终端的标识和第一受限服务策略。基于本申请实施例提供的受限服务的提供方法，UDM在接收到终端的标识和用于为终端提供受限服务的第一受限服务策略后，通过向AMF或SMF发送终端的标识和该第一受限服务策略，以便为终端提供受限服务，而不是直接在终端异常时对该终端去注册，在有效降低安全隐患的同时，提高了对终端的管理效率。
结合第五方面，在一种可能的实现方式中，上述受限服务可以包括以下任意一种：停止上行数据流；限制下行数据流；停止上行数据流和限制下行数据流。这样，可以为终端提供更准确的受限服务。
第六方面，本申请实施例提供一种受限服务的提供方法，该方法可以包括：AF确定终端异常和异常对应的受限服务策略，异常对应的受限服务策略用于为终端提供受限服务；AF向UDM发送终端的标识和异常对应的受限服务策略。基于本申请实施例提供的受限服务的提供方法，AF在确定终端异常时，可以确定异常对应受限服务策略， 并通过发送终端的标识和用于为终端提供受限服务的受限服务策略，以便通信设备能够根据该受限服务策略为终端提供受限服务，而不是直接在终端异常时对该终端去注册，在有效降低安全隐患的同时，提高了对终端的管理效率。
结合第六方面，在一种可能的实现方式中，上述AF确定终端异常，具体可以包括：AF根据终端的流量信息确定终端异常，该流量信息可以包括上行流量信息和/或下行流量信息。
结合第六方面或上述可能的实现方式，在另一种可能的实现方式中，上述受限服务包括以下任意一种：停止上行数据流；限制下行数据流；停止上行数据流和限制下行数据流。这样，可以为终端提供更准确的受限服务。
第七方面，本申请实施例提供一种通信设备，该通信设备可以包括：接收单元，用于接收终端的标识和指示信息，该指示信息可以用于指示终端异常或终端的异常类型；发送单元，用于根据上述接收单元接收到的指示信息，发送终端的标识和第一受限服务策略，该第一受限服务策略用于为终端提供受限服务。
结合第七方面，在一种可能的实现方式中，上述受限服务可以包括以下任意一种：停止上行数据流；限制下行数据流；停止上行数据流和限制下行数据流。
结合第七方面或上述可能的实现方式，在另一种可能的实现方式中，上述发送单元，具体可以用于：向SMF发送终端的标识和第一受限服务策略。
结合第七方面或上述可能的实现方式，在另一种可能的实现方式中，上述受限服务可以包括：停止上行数据流；上述发送单元，具体可以用于向AMF发送终端的标识和第一受限服务策略。
结合第七方面或上述可能的实现方式，在另一种可能的实现方式中，上述接收单元，具体可以用于：接收来自NWDAF或AF或SMF的终端的标识和指示信息。
第八方面，本申请实施例提供一种通信设备，该通信设备可以包括：接收单元，用于接收终端的标识和第一受限服务策略；发送单元，用于当该接收单元接收到的第一受限服务策略用于停止终端的上行数据流时，向终端发送第二受限服务策略，该第二受限服务策略用于停止终端的上行数据流；或者，当该接收单元接收到的第一受限服务策略用于停止终端的上行数据流时，向接入网设备发送终端的标识和第三受限服务策略，该第三受限服务策略用于停止终端的上行数据流；或者，当该接收单元接收到的第一受限服务策略用于限制终端的下行数据流时，向UPF发送终端的标识和第四受限服务策略，该第四受限服务策略用于限制终端的下行数据流；或者，当该接收单元接收到的第一受限服务策略用于停止终端的上行数据流，并限制终端的下行数据流时，向终端发送第二受限服务策略或向接入网设备发送终端的标识和第三受限服务策略，并向UPF发送终端的标识和第四受限服务策略，该第二受限服务策略用于停止终端的上行数据流，该第三受限服务策略用于停止终端的上行数据流，该第四受限服务策略用于限制终端的下行数据流。
结合第八方面，在一种可能的实现方式中，上述第二受限服务策略可以包括QoS规则，该QoS规则可以用于停止上行数据流；或者，上述第三受限服务策略可以包括QoS配置文件，该QoS配置文件可以用于停止上行数据流；或者，上述第四受限服务策略可以包括QoS信息，该QoS信息可以用于限制下行数据流。
结合第八方面或上述可能的实现方式，在另一种可能的实现方式中，上述接收单元，具体可以用于：接收来自PCF、UDM或AMF的终端的标识和第一受限服务策略。
结合第八方面或上述可能的实现方式，在另一种可能的实现方式中，上述接收单元，还可以用于接收来自AMF的终端的标识和指示信息，该指示信息可以用于指示终端异常或终端的异常类型；上述发送单元，还可以用于向PCF发送终端的标识和指示信息。
第九方面，本申请实施例提供一种通信设备，该通信设备可以包括：接收单元，用于接收来自PCF的终端的标识和第一受限服务策略，该第一受限服务策略可以用于为终端提供受限服务；发送单元，用于根据第一受限服务策略，向终端发送第二受限服务策略，该第二受限服务策略用于停止终端的上行数据流；或，根据第一受限服务策略，向接入网设备发送终端的标识和第三受限服务策略，该第三受限服务策略用于停止终端的上行数据流。
结合第九方面，在一种可能的实现方式中，上述第二受限服务策略可以包括指示信息，该指示信息可以用于指示更新或修改终端的URSP的门限值为第一值，该第一值用于停止上行数据流；或者，上述第三受限服务策略可以包括QoS配置文件，该QOS配置文件可以用于停止上行数据流。
第十方面，提供一种通信设备，该通信设备可以包括：确定单元，用于确定终端异常；发送单元，用于向PCF发送终端的标识和指示信息，该指示信息可以用于指示终端异常或终端的异常类型。
结合第十方面，在一种可能的实现方式中，上述确定单元，具体可以用于根据终端的流量信息确定终端异常，该流量信息可以包括上行流量信息和/或下行流量信息。
结合第十方面或上述可能的实现方式，在另一种可能的实现方式中，上述异常类型可以包括以下任意一种：上行流量异常；下行流量异常；上行流量异常和下行流量异常。
结合第十方面或上述可能的实现方式，在另一种可能的实现方式中，上述通信设备可以为NWDAF或AF。
第十一方面，提供一种通信设备，该通信设备可以包括：接收单元，用于接收来自AF的终端的标识和第一受限服务策略，该第一受限服务策略可以用于为终端提供受限服务；发送单元，用于向AMF或SMF发送终端的标识和上述第一受限服务策略。
结合第十一方面，在一种可能的实现方式中，上述受限服务可以包括以下任意一种：停止上行数据流；限制下行数据流；停止上行数据流和限制下行数据流。
第十二方面，提供一种通信设备，该通信设备可以包括：确定单元，用于确定终端异常和异常对应的受限服务策略，该异常对应的受限服务策略用于为终端提供受限服务；发送单元，用于向UDM发送终端的标识和上述确定单元确定出的异常对应的受限服务策略。
结合第十二方面，在一种可能的实现方式中，上述确定单元，具体可以用于根据终端的流量信息确定终端异常，该流量信息可以包括上行流量信息和/或下行流量信息。
结合第十二方面或上述可能的实现方式，在另一种可能的实现方式中，上述受限服务可以包括以下任意一种：停止上行数据流；限制下行数据流；停止上行数据流和 限制下行数据流。
第十三方面，提供一种通信设备，包括：至少一个处理器，以及存储器；存储器用于存储计算机程序，使得计算机程序被至少一个处理器执行时实现如第一方面或第一方面的可能的实现方式中任一所述的受限服务的提供方法。
第十四方面，提供一种计算机可读存储介质，用于存储计算机程序，计算机程序用于执行如第一方面或第一方面的可能的实现方式中任一所述的受限服务的提供方法。
第十五方面，提供一种通信设备，包括：至少一个处理器，以及存储器；存储器用于存储计算机程序，使得计算机程序被至少一个处理器执行时实现如第二方面或第二方面的可能的实现方式中任一所述的受限服务的提供方法。
第十六方面，提供一种计算机可读存储介质，用于存储计算机程序，计算机程序用于执行如第二方面或第二方面的可能的实现方式中任一所述的受限服务的提供方法。
第十七方面，提供一种通信设备，包括：至少一个处理器，以及存储器；存储器用于存储计算机程序，使得计算机程序被至少一个处理器执行时实现如第三方面或第三方面的可能的实现方式中任一所述的受限服务的提供方法。
第十八方面，提供一种计算机可读存储介质，用于存储计算机程序，计算机程序用于执行如第三方面或第三方面的可能的实现方式中任一所述的受限服务的提供方法。
第十九方面，提供一种通信设备，包括：至少一个处理器，以及存储器；存储器用于存储计算机程序，使得计算机程序被至少一个处理器执行时实现如第四方面或第四方面的可能的实现方式中任一所述的受限服务的提供方法。
第二十方面，提供一种计算机可读存储介质，用于存储计算机程序，计算机程序用于执行如第四方面或第四方面的可能的实现方式中任一所述的受限服务的提供方法。
第二十一方面，提供一种通信设备，包括：至少一个处理器，以及存储器；存储器用于存储计算机程序，使得计算机程序被至少一个处理器执行时实现如第五方面或第五方面的可能的实现方式中任一所述的受限服务的提供方法。
第二十二方面，提供一种计算机可读存储介质，用于存储计算机程序，计算机程序用于执行如第五方面或第五方面的可能的实现方式中任一所述的受限服务的提供方法。
第二十三方面，提供一种通信设备，包括：至少一个处理器，以及存储器；存储器用于存储计算机程序，使得计算机程序被至少一个处理器执行时实现如第六方面或第六方面的可能的实现方式中任一所述的受限服务的提供方法。
第二十四方面，提供一种计算机可读存储介质，用于存储计算机程序，计算机程序用于执行如第六方面或第六方面的可能的实现方式中任一所述的受限服务的提供方法。
第二十五方面，提供一种芯片系统，该芯片系统包括处理器，用于通信设备实现上述方面中所涉及的功能，例如，例如生成或处理上述方法中所涉及的数据和/或信息。在一种可能的设计中，所述芯片系统还包括存储器，所述存储器，用于保存通信设备必要的程序指令和数据。该芯片系统，可以由芯片构成，也可以包含芯片和其他分立器件。
可以理解地，上述提供的第七方面至第十三方面、第十五方面、第十七方面、第 十九方面、第二十一方面和第二十三方面所述的通信设备，上述提供的第十四方面、第十六方面、第十八方面、第二十方面、第二十二方面和第二十四方面所述的计算机可读存储介质，以及第二十五方面所述的芯片系统均用于执行上文所提供的对应的方法，因此，其所能达到的有益效果可参考上文所提供的对应的方法中的有益效果，此处不再赘述。
附图说明
图1为本申请实施例提供的一种5G移动通信系统的简化示意图；
图2为本申请实施例提供的一种通信设备的结构示意图；
图3为本申请一实施例提供的一种受限服务的提供方法的流程示意图；
图4为本申请另一实施例提供的一种受限服务的提供方法的流程示意图；
图5为本申请另一实施例提供的另一种受限服务的提供方法的流程示意图；
图6为本申请另一实施例提供的又一种受限服务的提供方法的流程示意图；
图7为本申请另一实施例提供的又一种受限服务的提供方法的流程示意图；
图8为本申请另一实施例提供的又一种受限服务的提供方法的流程示意图；
图9为本申请另一实施例提供的又一种受限服务的提供方法的流程示意图；
图10为本申请另一实施例提供的又一种受限服务的提供方法的流程示意图；
图11为本申请另一实施例提供的又一种受限服务的提供方法的流程示意图；
图12为本申请另一实施例提供的又一种受限服务的提供方法的流程示意图；
图13为本申请另一实施例提供的又一种受限服务的提供方法的流程示意图；
图14为本申请另一实施例提供的又一种受限服务的提供方法的流程示意图；
图15为本申请另一实施例提供的又一种受限服务的提供方法的流程示意图；
图16为本申请另一实施例提供的又一种受限服务的提供方法的流程示意图；
图17为本申请另一实施例提供的又一种受限服务的提供方法的流程示意图；
图18为本申请另一实施例提供的又一种受限服务的提供方法的流程示意图；
图19为本申请实施例提供的一种通信设备的组成示意图；
图20为本申请实施例提供的另一种通信设备的组成示意图；
图21为本申请实施例提供的又一种通信设备的组成示意图；
图22为本申请实施例提供的又一种通信设备的组成示意图；
图23为本申请实施例提供的又一种通信设备的组成示意图；
图24为本申请实施例提供的又一种通信设备的组成示意图。
具体实施方式
以下实施例中“和/或”，仅仅是一种描述关联对象的关联关系，表示可以存在三种关系，例如，A和/或B，可以表示：单独存在A，单独存在B，同时存在A和B这三种情况。另外，以下实施例中字符“/”，一般表示前后关联对象是一种“或”的关系。
下面将结合附图对本申请实施例的实施方式进行详细描述。
本申请实施例提供的受限服务的提供方法可以应用于任何有为终端提供受限服务需要的移动通信系统。如，可以应用于图1所示的5G移动通信系统。
如图1所示，该5G移动通信系统可以包括：终端、接入网设备，如接入网(access  network，AN)/无线接入网(radio access network，RAN)、数据网络(data network，DN)以及下述多个网络功能(network functions，NF)：网络扩展功能(Network Exposure Function，NEF)、策略控制功能(Policy Control Function，PCF)、统一数据管理(Unified Data Management，UDM)、应用功能(Application function，AF)、网络数据分析功能(Network data analytics function，NWDAF)、接入和移动性管理功能(Access and Mobility Management Function，AMF)、会话管理功能(Session Management Function，SMF)、用户面功能(User Plane Function，UPF)。
可理解的是，图1仅为示例性架构图。除图1所示通信设备之外，该5G移动通信系统还可以包括其他通信设备，如鉴权服务器功能(authentication server function，AUSF)等，本申请实施例对此不做限制。
在图1所示的5G移动通信系统中，NEF、PCF、UDM、AF、NWDAF、AMF以及SMF等通信设备可以通过通信总线连接。基于上述通信总线，各通信设备之间可以通过调用相应的服务化接口建立连接以实现通信。例如，NEF可以调用Nnef接口与连接在该通信总线上的其他通信设备，如AF、UDM等建立连接以实现通信。PCF可以调用Npcf接口与连接在该通信总线上的其他通信设备，如AF、SMF、NWDAF、AMF等建立连接以实现通信。UDM可以调用Nudm接口与连接在该通信总线上的其他通信设备，如SMF、AMF等建立连接以实现通信。AF可以调用Naf接口与连接在该通信总线上的其他通信设备，如NEF等建立连接以实现通信。NWDAF可以调用Nnwdaf接口与连接在该通信总线上的其他通信设备，如PCF等建立连接以实现通信。AMF可以调用Namf接口与连接在该通信总线上的其他通信设备，如SMF等建立连接以实现通信。SMF可以调用Nsmf接口与连接在该通信总线上的其他通信设备，如PCF等建立连接以实现通信。
AMF、SMF、UPF、DN、AN/RAN以及终端等通信设备之间可以通过下一代网络(next generation，NG)接口建立连接实现通信。例如：终端可以通过N接口1(简称N1)与AMF建立控制面信令连接。AN/RAN可以通过N接口3(简称N3)与UPF建立用户面数据连接。AN/RAN可以通过N接口2(简称N2)与AMF建立控制面信令连接。UPF可以通过N接口4(简称N4)与SMF建立控制面信令连接。UPF可以通过N接口6(简称N6)与DN交互用户面数据。
需要说明的是，上述架构中的通信设备的名称以及各个通信设备之间的接口名称只是一个示例，具体实现中通信设备的名称以及通信设备之间的接口名称可能采用其他词语命名，本申请实施例对此不作具体限定。
结合图1，对图1中涉及的通信设备进行介绍如下。
终端，可以是无线终端也可以是有线终端。无线终端可以是指向用户提供语音和/或数据连通性的设备，具有无线连接功能的手持式设备、或连接到无线调制解调器的其他处理设备。无线终端可以经AN/RAN与一个或多个核心网的通信设备，如AMF、SMF等进行通信。无线终端可以是移动终端，如移动电话(或称为“蜂窝”电话)、智能电话、卫星无线设备、无线调制解调器卡以及具有移动终端的计算机，例如，可以是膝上型、便携式、袖珍式、手持式、计算机内置的或者车载的移动装置，它们与无线接入网交换语言和/或数据。例如，个人通信业务(Personal Communication Service， PCS)电话、无绳电话、会话发起协议(session initiation protocol，SIP)话机、无线本地环路(WLL，Wireless Local Loop)站、个人数字助理(Personal Digital Assistant，PDA)等设备。无线终端也可以称为系统、订户单元(Subscriber Unit)、订户站(Subscriber Station)，移动站(Mobile Station)、移动台(Mobile)、远程站(Remote Station)、接入点(Access Point)、远程终端(Remote Terminal)、接入终端(Access Terminal)、用户终端(User Terminal)、用户设备(User Equipment，UE)、用户代理(User Agent)。终端还可以是中继(Relay)。
AN/RAN，可以为由多个5G-AN/5G-RAN组成的网络，用于实现无线物理层功能、资源调度和无线资源管理、无线接入控制以及移动性管理功能。5G-AN/5G-RAN可以为：接入节点、下一代基站(generation nodeB，gNB)、收发点(transmission receive point，TRP)、传输点(transmission point，TP)或某种其它接入网设备。
NWDAF，可以提供网络数据分析服务。
PCF，具备向控制面网元，如NWDAF提供策略规则等功能。
NEF，可以用于交互网络内部和外部信息等。
UDM，具备管理用户的签约数据，生成用户的认证信息等功能。
AF，可以是应用服务器，其可以属于运营商，也可以属于第三方。
AMF，可以是无线接入网络控制平面(N2接口)的终结点，非接入信令(NAS，N1接口)的终结点，具备进行终端的移动性管理，合法监听，接入授权\鉴权等功能。
SMF，具备进行会话的建立、修改与删除等功能。
UPF，是无线接入技术切换的锚点，其可以用于完成用户面数据的路由转发等功能，如：负责对终端的数据报文过滤、数据传输/转发、速率控制、生成计费信息等。
图2为本申请实施例提供的一种通信设备20的结构示意图。其中，图1所示的5G移动通信系统中AN/RAN、NEF、PCF、UDM、AF、NWDAF、AMF、SMF、UPF和终端的结构均可以如图2所示。如图2所示，该通信设备20可以包括至少一个处理器21，存储器22、通信接口23、通信总线24。其中，处理器21，存储器22以及通信接口23三者之间可以通过通信总线24连接。
需要说明的是，图2示出的设备结构并不构成对通信设备20的限定，其可以包括比图示更多或更少的部件，或者组合某些部件，或者不同的部件布置，本申请实施例对此不进行限定。下面结合图2对通信设备20的各个构成部件进行具体的介绍：
处理器21是通信设备的控制中心，可以是一个处理器，也可以是多个处理元件的统称。例如，处理器21是一个中央处理器(central processing unit，CPU)，也可以是特定集成电路(application specific integrated circuit，ASIC)，或者是被配置成实施本申请实施例的一个或多个集成电路，例如：一个或多个数字信号处理器(digital signal processor，DSP)，或，一个或者多个现场可编程门阵列(field programmable gate array，FPGA)。其中，处理器21可以通过运行或执行存储在存储器22内的软件程序，以及调用存储在存储器22内的数据，执行通信设备20的各种功能。
作为一种可实现方式，处理器21可以包括一个或多个CPU，例如图2中所示的CPU0和CPU1。作为另一种可实现方式，通过设备可以包括多个处理器，例如图2中所示的处理器21和处理器25。这些处理器中的每一个可以是一个单核处理器 (single-CPU)，也可以是一个多核处理器(multi-CPU)。这里的处理器可以指一个或多个设备、电路、和/或用于处理数据(例如计算机程序指令)的处理核。
存储器22可以是只读存储器(read-only memory，ROM)或可存储静态信息和指令的其他类型的静态存储设备，随机存取存储器(random access memory，RAM)或者可存储信息和指令的其他类型的动态存储设备，也可以是电可擦可编程只读存储器(electrically erasable programmable read-only memory，EEPROM)、只读光盘(compact disc read-only memory，CD-ROM)或其他光盘存储、光碟存储(包括压缩光碟、激光碟、光碟、数字通用光碟、蓝光光碟等)、磁盘存储介质或者其他磁存储设备、或者能够用于携带或存储具有指令或数据结构形式的期望的程序代码并能够由计算机存取的任何其他介质，但不限于此。存储器22可以独立存在，通过通信总线24与处理器21相连接。存储器22也可以和处理器21集成在一起。其中，所述存储器22用于存储执行本申请实施例提供的方案的软件程序，并由处理器21来控制执行。
通信接口23，用于与其他设备或通信网络通信，如以太网，RAN，无线局域网(wireless local area networks，WLAN)等。通信接口23可以使用任何收发器一类的装置实现。
通信总线24，可以是工业标准体系结构(industry standard architecture，ISA)总线、外部设备互连(peripheral component，PCI)总线或扩展工业标准体系结构(extended industry standard architecture，EISA)总线等。该总线可以分为地址总线、数据总线、控制总线等。为便于表示，图2中仅用一条粗线表示，但并不表示仅有一根总线或一种类型的总线。
本申请实施例提供的受限服务的提供方法可以应用在图1所示的5G移动通信系统中，下面结合图1所示的5G移动通信系统进行详细描述。
图3为本申请一实施例提供的一种受限服务的提供方法的流程示意图，该方法可以包括：
步骤301、第一网元确定终端异常。
其中，该第一网元可以是图1所示的5G移动通信系统中的NWDAF或AF。
步骤301可以替换为：第一网元根据终端的流量信息确定终端异常。
可以理解的是，终端的流量信息根据流向的不同，可以分为上行流量信息和下行流量信息。在本申请各实施例中，上行流量信息可以指由终端发往网络侧设备(例如，AN或RAN)的数据包对应的流量信息。下行流量信息可以指由网络侧设备发往终端的数据包对应的流量信息。上行流量信息可以包括以下至少一个：上行流速、上行流间隔和上行流大小。下行流量信息可以包括以下至少一个：下行流速、下行流间隔和下行流大小。其中，上行流速可以指单位时间内由终端发往网络侧设备的数据包的大小。上行流间隔可以指由终端发往网络侧设备的数据包之间的间隔时间。上行流大小指的是由终端发往网络侧设备的每个数据包的大小。下行流速可以指单位时间内由网络侧设备发往终端的数据包的大小。下行流间隔可以指由网络侧设备发往终端的数据包之间的间隔时间。下行流大小指的是由网络侧设备发往终端的每个数据包的大小。
示例性的，在一种可能的实现方式中，第一网元根据终端的流量信息(该流量信息可以包括上行流量信息和/或下行流量信息)确定终端异常可以包括：第一网元可以 根据终端的流量信息是否满足特定条件，来确定终端是否异常。其中，若该终端的上行流量信息和/或下行流量信息不满足特定条件，则可以确定终端异常，若该终端的上行流量信息和下行流量信息均满足特定条件，则可以确定终端不异常或正常。其中，该特定条件可以根据大量终端的历史流量信息，以及与该历史流量信息对应的异常结果设定。该异常结果可以包括终端异常和终端不异常(或终端正常)。需要说明的是，在本申请各实施例中，终端异常可以替换为终端流量异常。例如，以终端的流量信息包括流速(如上行流速和/或下行流速)为例，当终端的流速大于2兆每秒(M/s)，则可以确定终端异常。又例如，以终端的流量信息包括流速(如上行流速和/或下行流速)和流间隔(如上行流间隔和/或下行流间隔)为例，当终端的流速大于2M/s，且流间隔大于预设值时，则可以确定终端异常。
示例性的，在另一种可能的实现方式中，终端的流量信息不满足特定条件可以分为以下三种情况：情况1、终端的上行流量信息不满足特定条件，情况2、终端的下行流量信息不满足特定条件，情况3、终端的上行流量信息和下行流量信息均不满足特定条件。相应地，第一网元根据终端的流量信息(该流量信息可以包括上行流量信息和/或下行流量信息)确定终端异常可以包括：第一网元在确定终端异常时，还可以根据终端的流量信息确定终端的异常类型。该异常类型可以包括以下任意一种：上行流量异常；下行流量异常；上行流量异常和下行流量异常。第一网元可以在确定终端的上行流量信息不满足特定条件时，确定终端的异常类型为上行流量异常。例如，第一网元可以在确定终端的上行流速大于2M/s时，确定终端的异常类型为上行流量异常。或者，第一网元在确定终端的下行流量信息不满足特定条件时，确定终端的异常类型为下行流量异常。例如，第一网元可以在确定终端的下行流速大于2M/s时，确定终端的异常类型为下行流量异常。或者，第一网元在确定终端的上行流量信息和下行流量信息均不满足特定条件时，确定终端的异常类型为上行流量异常和下行流量异常。例如，第一网元可以在确定终端的上行流速大于2M/s，且终端的下行流速大于2M/s时，确定终端的异常类型为上行流量异常和下行流量异常。
在一种可能的实现方式中，上述终端的流量信息可以是AMF等通信设备上报给第一网元的。以AMF向第一网元上报终端的流量信息为例。AMF可以对终端的上行流量进行监测，并判断该终端的上行流量是否超过阈值，当该终端的上行流量超过阈值时，AMF可以向第一网元上报该终端的上行流量信息。AMF也可以对终端的下行流量进行监测，并判断该终端的下行流量是否超过阈值，当该终端的下行流量超过阈值时，AMF可以向第一网元上报该终端的下行流量信息。AMF还可以同时对终端的上行流量和下行流量进行监测，当该终端的上行流量信息和下行流量信息均超过阈值时，AMF可以向第一网元上报该终端的上行流量信息和下行流量信息。其中，AMF可以定期对终端的流量，(如，上行流量和/或下行流量)进行监测，也可以根据第一网元下发的监控事件对终端的流量进行监测。该监控事件可以用于指示对终端的流量进行监测。
步骤302、第一网元向PCF发送终端的标识和指示信息。
其中，该指示信息可以用于指示终端异常或终端的异常类型。此外，该终端的标识用于标识该终端，例如，可以是互联网协议(Internet Protocol，IP)地址，还可以 是国际移动用户号码(Mobile Subscriber International ISDN，MSISDN)。
在本申请各实施例中，指示信息用于指示终端异常可以替换为：指示信息用于指示终端流量异常；该指示信息用于指示终端的异常类型可以替换为：指示信息用于指示终端的流量异常类型。
在该指示信息用于指示终端异常的场景下，在一种可能的实现方式中，该指示信息可以由1比特组成。例如，当指示信息为“0”时，该指示信息用于指示终端异常。当指示信息为“1”时，该指示信息用于指示终端不异常或正常。
在指示信息用于指示终端的异常类型的场景下，在一种可能的实现方式中，该指示信息可以由2比特组成。例如，当指示信息为“00”时，该指示信息用于指示终端的异常类型为上行流量异常。当指示信息为“01”时，该指示信息用于指示终端的异常类型为下行流量异常。当指示信息为“10”时，该指示信息用于指示终端的异常类型为上行流量异常和下行流量异常。
在一种可能的实现方式中，步骤302中第一网元可以直接向PCF发送终端的标识和指示信息(如图3中所示)。具体可参照图4-图6所示的任一实施例，不予限制。
在另一种可能的实现方式中，步骤302中第一网元也可以经NEF、AMF、SMF等通信设备向PCF发送终端的标识和指示信息(图3中未示出)。具体可参照图7-图9所示的任一实施例，不予限制。
步骤303、PCF接收终端的标识和指示信息。
在一种可能的实现方式中，步骤303中PCF可以接收来自第一网元，如NWDAF或AF的终端的标识和指示信息。具体可参照图4-图6所示的任一实施例，不予限制。
在另一种可能的实现方式中，步骤303中PCF也可以接收来自SMF的终端的标识和指示信息。该SMF的终端的标识和指示信息可以由第一网元处接收的。具体可参照图7-图9所示的任一实施例，不予限制。
步骤304、PCF根据指示信息，发送终端的标识和第一受限服务策略(Restricted Service Policy)。
其中，PCF在接收到终端的标识和指示信息后，可以向SMF或AMF发送终端的标识和第一受限服务策略。在图3中，步骤304-步骤306，以PCF向SMF发送终端的标识和第一受限服务策略为例进行说明，不予限制。
其中，该第一受限服务策略可以用于为终端提供受限服务。该受限服务可以包括以下任意一种：停止上行数据流；限制下行数据流；停止上行数据流和限制下行数据流。该第一受限服务策略可以为停止终端的上行数据流，也可以为限制终端的下行数据流，还可以为停止终端的上行数据流，并限制终端的下行数据流。
其中，停止上行数据流可以替换为：在终端侧/RAN侧停止该终端的上行数据流(stop the UL data flow of the Terminal in the Terminal/RAN side)。
限制下行数据流可以替换为：限制终端的下行数据流，只允许<某端口，某ip>的下行数据流发送给终端(restrict the DL data flow for the Terminal，only allow DL data flow from<some port,some ip>)；或者，替换为只允许<某端口，某ip>的下行数据流发送给终端。其中，限制终端的下行数据流，只允许<某端口，某ip>的下行数据流发送给终端指的是：通过采用只允许<某端口，某ip>的下行数据流发送给终端的方式， 来限制终端的下行数据流。
具体的，步骤304中PCF可以根据指示信息确定第一受限服务策略，并向SMF发送终端的标识和第一受限服务策略。
示例性地，在指示信息用于指示终端异常的场景下，PCF可以存储有该终端异常所对应的受限服务策略，即第一受限服务策略。该第一受限服务策略可以为停止终端的上行数据流，也可以为限制终端的下行数据流，还可以为停止终端的上行数据流，并限制终端的下行数据流。PCF存储的第一受限服务策略可以是预定义的，也可以是预先配置在PCF中的，还可以是由其他通信设备下发给PCF的，本申请实施例在此并不做具体限制。或者，PCF可以存储异常与受限服务策略之间的对应关系，PCF根据异常与受限服务策略之间的对应关系，将该终端异常所对应的受限服务策略确定为第一受限服务策略。
示例性地，在指示信息用于指示终端的异常类型的场景下，结合步骤302中的示例，PCF可以存储异常类型与受限服务策略之间的映射关系，如表1所示，PCF根据该映射关系，确定异常类型对应的受限服务策略为第一受限服务策略。
表1
Figure PCTCN2019091145-appb-000001
结合表1，当指示信息为“00”时，该指示信息用于指示终端的异常类型为上行流量异常，PCF根据表1可以确定第一受限服务策略为停止终端的上行数据流。当指示信息为“01”时，该指示信息用于指示终端的异常类型为下行流量异常，PCF根据表1可以确定第一受限服务策略为限制终端的下行数据流。当指示信息为“10”时，该指示信息用于指示终端的异常类型为上行流量异常和下行流量异常，PCF根据表1可以确定第一受限服务策略为停止终端的上行数据流，并限制终端的下行数据流。
需要说明的是，本申请实施例中异常终端对应的受限服务策略可以相同，也可以不同。例如，在指示信息用于指示终端异常的场景下，异常终端1对应的受限服务策略可以是受限服务策略1，异常终端2对应的受限服务策略可以是受限服务策略2。在指示信息用于指示终端的异常类型的场景下，异常终端1的不同异常类型对应的受限服务策略可以分别为受限服务策略1、受限服务策略2和受限服务策略3，异常终端2的不同异常类型对应的受限服务策略可以分别为受限服务策略1′、受限服务策略2′和受限服务策略3′。
步骤305、SMF接收终端标识和第一受限服务策略。
步骤306、SMF根据接收到的第一受限服务策略，向通信设备发送该通信设备对应的受限服务策略。
通过步骤306中向通信设备发送该通信设备对应的受限服务策略，以便该通信设备根据接收到的受限服务策略向终端提供受限服务。
其中，该通信设备可以是终端，接入网设备，或UPF；还可以是终端和UPF，或 接入网设备和UPF，不予限制。
示例性地，当第一受限服务策略用于停止终端的上行数据流时，步骤306中SMF可以根据第一受限服务策略，向终端发送第二受限服务策略，以便终端根据该第二受限服务策略进行相关操作，如停止终端的上行数据流。具体可参照图4或图7所示的实施例，不予限制。
或者，当第一受限服务策略用于停止终端的上行数据流时，步骤306中SMF可以根据第一受限服务策略，向接入网设备发送终端的标识和第三受限服务策略，以便接入网设备根据终端的标识和该第三受限服务策略为终端提供受限服务，如停止终端的上行数据流。具体可参照图5或图8所示的实施例，不予限制。
示例性的，当第一受限服务策略用于限制终端的下行数据流时，步骤306中SMF可以根据第一受限服务策略，向UPF发送终端的标识和第四受限服务策略，以便UPF根据终端的标识和第四受限服务策略向终端提供受限服务，如限制终端的下行数据流。具体可以参照图6或图9所示的实施例，不予限制。
示例性的，当第一受限服务策略用于停止终端的上行数据流，并限制终端的下行数据流时，步骤306中SMF可以根据第一受限服务策略，向终端发送第二受限服务策略，以便终端根据该第二受限服务策略进行相关操作，如停止终端的上行数据流，并向UPF发送终端的标识和第四受限服务策略，以便UPF根据终端的标识和第四受限服务策略向终端提供受限服务，如限制终端的下行数据流。
或者，当第一受限服务策略用于停止终端的上行数据流，并限制终端的下行数据流时，步骤306中SMF可以根据第一受限服务策略，向接入网设备发送终端的标识和第三受限服务策略，以便接入网设备根据终端的标识和该第三受限服务策略为终端提供受限服务，如停止终端的上行数据流，并向UPF发送终端的标识和第四受限服务策略，以便UPF根据终端的标识和第四受限服务策略向终端提供受限服务，如限制终端的下行数据流。
需要说明的是，上述第二受限服务策略，第三受限服务策略，以及第四受限服务策略与第一受限服务策略可以相同，也可以不同。例如，SMF在接收到终端标识和第一受限服务策略后，可以执行上述步骤306时对第一受限策略不进行任何处理，而是直接将第一受限服务策略发送给通信设备，以便通信设备根据第一受限服务策略为终端提供受限服务。再例如，步骤306中，SMF可以将第一受限服务策略中用于终端停止上行数据流的策略信息作为第二受限策略发送给终端，此时，第一受限服务策略与第二受限服务策略不同；或者，SMF可以将第一受限服务策略中用于接入网设备停止终端的上行数据流的策略信息作为第三受限策略发送给接入网设备。
可替换的，在第一受限服务策略用于停止终端的上行数据流的情况下，上述步骤304可以为：PCF根据指示信息，向AMF发送终端的标识和第一受限服务策略。上述步骤305可以替换为：AMF接收终端的标识和第一受限服务策略。上述步骤306可以替换为：AMF根据接收到的第一受限服务策略，向通信设备发送该通信设备对应的受限服务策略。通过替换后的步骤306中向通信设备发送该通信设备对应的受限服务策略，以便该通信设备根据接收到的受限服务策略向终端提供受限服务。其中，AMF根据接收到的第一受限服务策略，向通信设备发送该通信设备对应的受限服务策略的具 体实现过程与步骤306中SMF的相类似，不再一一赘述。
示例性地，替换后的步骤306中AMF可以根据接收到的第一受限服务策略，向终端发送第二受限服务策略，以便终端根据该第二受限服务策略进行相关操作，如停止终端的上行数据流。具体可参照图10所示的实施例，不予限制。或者，替换后的步骤306中AMF可以根据接收到的第一受限服务策略，向接入网设备发送终端的标识和第三受限服务策略，以便接入网设备根据终端的标识和该第三受限服务策略为终端提供受限服务，如停止终端的上行数据流。具体可参照图11所示的实施例，不予限制。
其中，上述第二受限服务策略用于停止终端的上行数据流。上述第三受限服务策略用于停止终端的上行数据流。上述第四受限服务策略用于限制终端的下行数据流。
本申请实施例提供的受限服务的提供方法，PCF在接收到终端的标识和用于指示终端异常或终端的异常类型的指示信息后，根据该指示信息，通过发送终端的标识和用于为终端提供受限服务的第一受限服务策略，以便为终端提供受限服务，而不是直接在终端异常时对该终端去注册，在有效降低安全隐患的同时，提高了对终端的管理效率。
下面结合图1所示的5G移动通信系统对图3所示方法进行描述。
图4-图6为本申请另一实施例提供的受限服务的提供方法的流程示意图。其中，图4-图6所示实施例提供的方法以第一网元为图1中的NWDAF为例。需要说明的是，当第一网元为图1中的AF时，其执行过程可参考图4-图6所示实施例提供的方法，本申请实施例不再赘述。该方法可以包括：
步骤401、NWDAF确定终端异常。
其中，NWDAF确定终端异常的具体实现可以参见图3所示的实施例中步骤301中的相关描述，此处不再赘述。
步骤402、NWDAF向该终端的PCF发送终端的标识和指示信息。
其中，该指示信息用于指示终端异常或终端的异常类型。指示信息的具体描述可以参见图3所示的实施例中步骤302中的相关描述，此处不再赘述。
在一种可能的实现方式中，步骤402中NWDAF可以调用Nnwdaf_EventsSubscription_Notify服务，向PCF发送终端的标识和指示信息。该终端的PCF为提供服务给该终端的PCF，可以为一个或多个PCF，不予限制。其中，NWDAF存储的终端的上下文中包括为提供服务给该终端的PCF的地址。进一步的，PCF在接收到来自NWDAF的终端的标识和指示信息后，可以向NWDAF发送的服务响应消息，该服务响应消息用于确认接收到NWDAF发送的终端的标识和指示信息。
步骤403、PCF根据指示信息，确定第一受限服务策略。
其中，PCF根据指示信息确定第一受限服务策略的具体实现可以参见图3所示的实施例中步骤304中的相关描述，此处不再赘述。
可以理解的是，第一受限服务策略可以用于停止终端的上行数据流，或第一受限服务策略可以用于限制终端的下行数据流，或第一受限服务策略可以用于停止终端的上行数据流，并限制终端的下行数据流。
步骤404、PCF向SMF发送终端的标识和第一受限服务策略。
在一种可能的实现方式中，步骤404中PCF可以调用 Npcf_SMPolicyControl_UpdateNotify服务，向SMF发送终端的标识和第一受限服务策略。进一步的，SMF在接收到来自PCF的终端的标识和第一受限服务策略后，可以向PCF发送服务响应消息，该服务响应消息用于确认接收到PCF发送的终端的标识和第一受限服务策略。
可选地，上述方法还包括：SMF在接收到终端的标识和第一受限服务策略后，根据接收到的第一受限服务策略，向通信设备发送该通信设备对应的受限服务策略，以便该通信设备可以根据接收到的受限服务策略向终端提供受限服务。
示例性地，如图4所示，当第一受限服务策略用于停止终端的上行数据流时，该方法可以包括以下步骤405a-步骤406a；或者，如图5所示，当第一受限服务策略用于停止终端的上行数据流时，该方法可以包括以下步骤405b-步骤406b。
示例性地，如图6所示，当第一受限服务策略用于限制终端的下行数据流时，该方法可以包括以下步骤405c-步骤406c。
示例性地，当第一受限服务策略用于停止终端的上行数据流，并限制终端的下行数据流时，该方法可以包括以下步骤405a-步骤406a和步骤405c-步骤406c，或者，该方法可以包括以下步骤405b-步骤406b和步骤405c-步骤406c。
以下介绍步骤405a-步骤406a：
步骤405a、SMF向终端发送第二受限服务策略。
其中，第二受限服务策略用于停止终端的上行数据流。
在一种可能的实现方式中，第二受限服务策略可以包括服务质量(Quality of Service，QoS)规则(QoS rule)，该QoS规则用于停止上行数据流。例如，该QoS规则中包括指示信息，该指示信息用于指示终端将终端的用于传输上行数据包的过滤器设置为无效。
在一种可能的实现方式中，步骤405a中第二受限服务策略可以由SMF经AMF和接入网设备(如AN/RAN)发送给终端。SMF发送第二受限服务策略的消息可以为会话管理非接入层消息(SM NAS message)。若SMF由AMF和接入网设备将第二受限服务策略发送给终端，那么，该SM NAS message中还可以携带终端的标识，用于AMF和接入网设备寻址终端。
步骤406a、终端根据第二受限服务策略，停止上行数据流的传输。
其中，终端可以根据第二受限服务策略进入受限服务状态，即停止上行数据流的传输。在一种可能的实现方式中，终端可以根据接收到的QoS规则中的指示信息，将终端的用于传输上行数据包的过滤器设置为无效，以便停止上行数据流的传输。
进一步的，终端在接收到来自SMF的第二受限服务策略后，还可以向SMF发送确认消息，该确认消息用于确认接收到SMF发送的第二受限服务策略。例如，终端由RAN和AMF向SMF发送SM NAS确认(acknowledge，ack)消息。
以下介绍步骤405b-步骤406b：
步骤405b、SMF向接入网设备发送终端的标识和第三受限服务策略。
其中，第三受限服务策略用于停止终端的上行数据流。
在一种可能的实现方式中，第三受限服务策略可以包括QoS配置文件(QoS profile)，该QoS配置文件用于停止上行数据流。例如，该QoS配置文件中包括指示 信息，该指示信息用于指示接入网设备停止给终端调度上行数据无线承载(Data radio bearer，DRB)资源。
在一种可能的实现方式中，步骤405b中终端的标识和第三受限服务策略可以由SMF经AMF发送给接入网设备。SMF发送终端的标识和第三受限服务策略的消息可以为SM NAS message。
步骤406b、接入网设备根据终端的标识和第三受限服务策略，停止终端的上行数据流。
在一种可能的实现方式中，接入网设备可以根据终端的标识和第三受限服务策略，确定停止给终端调度上行DRB资源，从而停止终端的上行数据流。
进一步的，接入网设备在接收到来自SMF的终端的标识和第三受限服务策略后，还可以向SMF发送确认消息。其中，该确认消息可以用于确认接收到SMF发送的终端的标识和第三受限服务策略，例如，接入网设备由AMF向SMF发送SM NAS ack消息。
以下介绍步骤405c-步骤406c：
步骤405c、SMF向UPF发送终端的标识和第四受限服务策略。
其中，第四受限服务策略用于限制终端的下行数据流。在一种可能的实现方式中，第四受限服务策略可以包括QoS信息(QoS inforation)，该QoS信息用于限制下行数据流。例如，该QoS信息中包括指示信息，该指示信息用于指示UPF仅向终端发送<某IP，某端口>的下行数据流。
在一种可能的实现方式中，步骤405c中终端的标识和第四受限服务策略可以由SMF携带在会话修改请求(Session modification request)消息中发送给UPF。进一步的，UPF接收到来自SMF的终端的标识和第四受限服务策略后，可以向SMF发送响应消息，例如，该响应消息可以为会话修改响应(Session modification response)消息。
步骤406c、UPF根据终端的标识和第四受限服务策略，限制终端的下行数据流。
在一种可能的实现方式中，UPF可以根据终端的标识和第四受限服务策略，确定仅向终端发送来自<某IP，某端口>的下行数据流，从而限制该终端的下行数据流。例如，该<某IP，某端口>可以是维护服务器的IP和端口。这样，在终端异常时，维护服务器可以将补丁或更新软件的相关数据下发给该终端，提高对终端的管理效率。
基于图4-图6所示实施例提供的方法，第一网元在确定终端异常时，通过向PCF发送终端的标识和用于指示终端异常或终端的异常类型的指示信息，以便PCF根据接收到指示信息确定用于为终端提供受限服务的第一受限服务策略，并通过向SMF发送终端的标识和该第一受限服务策略，以便SMF根据第一受限服务策略，向通信设备发送该通信设备对应的受限服务策略，进而该通信设备为终端提供受限服务。例如，当第一受限服务策略用于停止上行数据流时，SMF可以向终端发送第二受限服务策略，这样，终端便可以根据第二受限服务策略停止上行数据流的传输。或者，当第一受限服务策略用于停止上行数据流时，SMF可以向接入网设备发送终端的标识和第三受限服务策略，这样，接入网设备可以根据第三受限服务策略停止给终端调度上行DRB资源，从而停止终端的上行数据流。或者，当第一受限服务策略用于限制下行数据流时，SMF可以向UPF发送终端的标识和第四受限服务策略，这样，UPF可以根据第四受限 服务策略确定仅将来自<某IP，某端口>的下行数据流发送给该终端，从而限制该终端的下行数据流，且<某IP，某端口>可以是维护服务器的IP和端口，进而维护服务器可以将补丁或更新软件的相关数据下发给该终端。而不是直接在终端异常时对该终端去注册，因此，在有效降低安全隐患的同时，提高了对终端的管理效率。
图7-图9为本申请另一实施例提供的受限服务的提供方法的流程示意图。其中，图7-图9所示实施例提供的方法以第一网元为图1中的NWDAF为例。需要说明的是，当第一网元为图1中的AF时，其执行过程可参考图7-图9所示实施例提供的方法，本申请实施例不再赘述。该方法可以包括：
步骤501、NWDAF确定终端异常。
其中，NWDAF确定终端异常的具体实现可以参见图3所示的实施例中步骤301中的相关描述，此处不再赘述。
步骤502、NWDAF向该终端的PCF发送终端的标识和指示信息。
其中，步骤502的具体描述可以参见图4-图6所示的实施例中步骤402的相关描述，此处不再赘述。
步骤503、PCF向AMF发送终端的标识和指示信息。
在一种可能的实现方式中，步骤503中PCF可以调用Npcf_AMPolicyControl_UpdateNotify服务，向AMF发送终端的标识和指示信息。进一步的，在AMF接收到来自PCF的终端的标识和指示信息后，可以向PCF发送服务响应消息，该服务响应消息用于确认接收到PCF发送的终端的标识和指示信息。
步骤504、AMF向该终端的SMF发送终端的标识和指示信息。
其中，该终端的SMF为提供服务给该终端的SMF，可以为一个或多个SMF，不予限制。
在一种可能的实现方式中，步骤504中AMF可以调用Namf_EventExposure_Notify服务，向该终端的SMF发送终端的标识和指示信息。进一步的，该终端的SMF在接收到来自AMF的终端的标识和指示信息后，可以向AMF发送服务响应消息，该服务响应消息用于确认接收到AMF发送的终端的标识和指示信息。
其中，为了简化附图，图7-图9中仅示出了AMF向终端的一个SMF发送终端的标识和指示信息。另外，为了便于描述，以下步骤也以终端的一个SMF接收到AMF发送的终端的标识和指示信息后的流程进行介绍，终端的其他SMF接收到AMF发送的终端的标识和指示信息后的流程与下述流程相同，不再赘述。
步骤505、SMF向该SMF对应的PCF发送终端的标识和指示信息。
其中，步骤505中SMF可以调用Npcf_SMPolicyControl_Update服务，向该SMF对应的PCF发送终端的标识和指示信息。在一种可能的实现方式中，SMF存储的终端的上下文中包括与该SMF对应的PCF的地址。
步骤506、PCF根据指示信息，确定第一受限服务策略。
其中，PCF根据指示信息确定第一受限服务策略的具体实现可以参见图3所示的实施例中步骤304中的相关描述，此处不再赘述。
可以理解的是，第一受限服务策略可以用于停止终端的上行数据流，或第一受限服务策略可以用于限制终端的下行数据流，或第一受限服务策略可以用于停止终端的 上行数据流，并限制终端的下行数据流。
步骤507、PCF向SMF发送终端的标识和第一受限服务策略。
在一种可能的实现方式中，若SMF是调用Npcf_SMPolicyControl_Update服务向PCF发送终端的标识和指示信息的，相应的，步骤507中PCF可以将终端的标识和第一受限服务策略携带在发送给SMF的服务响应消息中。
可选的，上述方法还包括：SMF在接收到终端的标识和第一受限服务策略后，可以根据接收到的第一受限服务策略，向通信设备发送该通信设备对应的受限服务策略，以便该通信设备可以根据接收到的受限服务策略向终端提供受限服务。
示例性的，如图7所示，当第一受限服务策略用于停止终端的上行数据流时，该方法可以包括以下步骤508a-步骤509a；或者，如图8所示，当第一受限服务策略用于停止终端的上行数据流时，该方法可以包括以下步骤508b-步骤509b。
示例性的，如图9所示，当第一受限服务策略用于限制终端的下行数据流时，该方法可以包括以下步骤508c-步骤509c。
示例性的，当第一受限服务策略用于停止终端的上行数据流，并限制终端的下行数据流时，该方法可以包括以下步骤508a-步骤509a和步骤508c-步骤509c，或者，该方法可以包括以下步骤508b-步骤509b和步骤508c-步骤509c。
以下介绍步骤508a-步骤509a：
步骤508a、SMF向终端发送第二受限服务策略。
其中，步骤508a的具体描述可以参见图4所示的实施例中步骤405a的相关描述，此处不再赘述。
步骤509a、终端根据第二受限服务策略，停止上行数据流的传输。
其中，步骤509a的具体描述可以参见图4所示的实施例中步骤406a的相关描述，此处不再赘述。
进一步的，终端在接收到来自SMF的第二受限服务策略后，还可以向SMF发送确认消息，该确认消息用于确认接收到SMF发送的第二受限服务策略。例如，终端由RAN和AMF向SMF发送SM NAS ack消息。
以下介绍步骤508b-步骤509b：
步骤508b、SMF向接入网设备发送终端的标识和第三受限服务策略。
其中，步骤508b的具体描述可以参见图5所示的实施例中步骤405b的相关描述，此处不再赘述。
步骤509b、接入网设备根据终端的标识和第三受限服务策略，停止终端的上行数据流。
其中，步骤509b的具体描述可以参见图5所示的实施例中步骤406b的相关描述，此处不再赘述。
进一步的，接入网设备在接收到来自SMF的终端的标识和第三受限服务策略后，还可以向SMF发送确认消息。其中，该确认消息可以用于确认接收到SMF发送的终端的标识和第三受限服务策略，例如，接入网设备由AMF向SMF发送SM NAS ack消息。
以下介绍步骤508c-步骤509c：
步骤508c、SMF向UPF发送终端的标识和第四受限服务策略。
其中，步骤508c的具体描述可以参见图6所示的实施例中步骤405c的相关描述，此处不再赘述。
步骤509c、UPF根据终端的标识和第四受限服务策略，限制终端的下行数据流。
其中，步骤509c的具体描述可以参见图6所示的实施例中步骤406c的相关描述，此处不再赘述。
基于图7-图9所示实施例提供的方法，第一网元在确定终端异常时，通过向提供服务给终端的PCF发送终端的标识和用于指示终端异常或终端的异常类型的指示信息，以便该PCF将终端的标识和指示信息发送给AMF。AMF通过将终端的标识和指示信息发送给终端的SMF，以便该SMF向该SMF对应的PCF发送终端的标识和指示信息，进而该PCF根据接收到指示信息确定用于为终端提供受限服务的第一受限服务策略，并通过向SMF发送终端的标识和该第一受限服务策略，以便SMF根据第一受限服务策略，向通信设备发送该通信设备对应的受限服务策略，进而该通信设备为终端提供受限服务，而不是直接在终端异常时对该终端去注册，因此，在有效降低安全隐患的同时，提高了对终端的管理效率。
以上图4-图9所示实施例提供的方法是以由SMF向通信设备下发受限服务策略，以便该通信设备为终端提供受限服务为例进行说明的。在受限服务包括停止上行数据流的情况下，作为一种可替换方案，也可以由AMF向通信设备下发受限服务策略，以便为终端提供对应的受限服务。下面结合图10-图11，以第一网元为NWDAF为例对图3所示实施例提供的方法进行描述。该方法可以包括：
步骤601、NWDAF确定终端异常。
其中，NWDAF确定终端异常的具体实现可以参见图3所示的实施例中步骤301中的相关描述，此处不再赘述。
步骤602、NWDAF向PCF发送终端的标识和指示信息。
其中，步骤602的具体描述可以参见图4-图6所示的实施例中步骤402中的相关描述，此处不再赘述。
步骤603、PCF根据指示信息，确定第一受限服务策略。
其中，PCF根据指示信息确定第一受限服务策略的具体实现可以参见图3所示的实施例中步骤304中的相关描述，此处不再赘述。在本申请实施例中，第一受限服务策略可以用于停止终端的上行数据流。
步骤604、PCF向AMF发送终端的标识和第一受限服务策略。
在一种可能的实现方式中，步骤604中PCF可以调用Npcf_AMPolicyControl_UpdateNotify服务，向AMF发送终端的标识和第一受限服务策略。进一步的，AMF在接收到来自PCF的终端的标识和第一受限服务策略后，可以向PCF发送服务响应消息，该服务响应消息用于确认接收到PCF发送的终端的标识和第一受限服务策略。
可选的，上述方法还包括：AMF在接收到终端的标识和第一受限服务策略后，可以根据接收到的第一受限服务策略，向通信设备发送该通信设备对应的受限服务策略，以便该通信设备可以根据接收到的受限服务策略向终端提供受限服务。
示例性的，如图10所示，该方法可以包括以下步骤605a-步骤606a，或者，如图11所示，该方法可以包括以下步骤605b-步骤606b。
以下介绍步骤605a-步骤606a：
步骤605a、AMF向终端发送第二受限服务策略。
其中，第二受限服务策略用于停止终端的上行数据流。在一种可能的实现方式中，第二受限服务策略可以包括指示信息，该指示信息用于指示更新或修改终端的终端路由选择策略(UE Route Selection Policy，URSP)中的门限值为第一值，该第一值用于停止上行数据流。
在一种可能的实现方式中，步骤605a中第二受限服务策略可以由AMF经接入网设备(如AN/RAN)发送给终端。AMF发送第二受限服务策略的消息可以为接入和移动性非接入层消息(AM NAS message)。若AMF由接入网设备将第二受限服务策略发送给终端，那么，该AM NAS message中还可以携带终端的标识，用于接入网设备寻址终端。
步骤606a、终端根据第二受限服务策略，停止上行数据流的传输。
其中，终端可以根据第二受限服务策略进入受限服务状态，即停止上行数据流的传输。在一种可能的实现方式中，终端可以根据接收到的指示信息，将终端的URSP中的门限值更新或修改为第一值，以便停止上行数据流的传输。
进一步的，在终端接收到来自AMF的第二受限服务策略后，还可以向AMF发送确认消息，该确认消息用于确认接收到AMF发送的第二受限服务策略。例如，终端由RAN向AMF发送AM NAS ack消息。
以下介绍步骤605b-步骤606b：
步骤605b、AMF向接入网设备发送终端的标识和第三受限服务策略。
其中，第三受限服务策略用于停止终端的上行数据流。在一种可能的实现方式中，第三受限服务策略可以包括QoS配置文件，该QoS配置文件用于停止上行数据流。例如，该QoS配置文件中包括指示信息，该指示信息用于指示接入网设备停止给终端调用上行DRB资源。
在一种可能的实现方式中，步骤605b中AMF可以将终端的标识和第三受限服务策略携带在UE上下文修改请求(UE CONTEXT MODIFICATION request)消息中发给接入网设备。
步骤606b、接入网设备根据终端的标识和第三受限服务策略，停止终端的上行数据流。
其中，步骤606b的具体描述可以参见图5所示的实施例中步骤406b中的相关描述，此处不再赘述。
进一步的，接入网设备在接收到来自AMF的终端的标识和第三受限服务策略后，还可以向AMF发送确认消息。其中，该确认消息可以用于确认接收到AMF发送的终端的标识和第三受限服务策略，例如，该确定消息可以为UE上下文修改响应(UE CONTEXT MODIFICATION response)消息。
其中，作为一种可替代方案，当第一网元为AF时，步骤601可以替换为：AF确定终端异常。步骤602可以替换为：AF向UDM发送终端的标识和指示信息。其中， AF可以通过NEF向UDM发送终端的标识和指示信息。步骤603可以替换为：UDM根据指示信息，确定第一受限服务策略。步骤604可以替换为：UDM向AMF发送终端的标识和第一受限服务策略。其余描述可以参考图10-图11所示的实施例中的相关描述，此处不再赘述。
基于图10-图11所示实施例提供的方法，NWDAF在确定终端异常时，通过向PCF发送终端的标识和用于指示终端异常或终端的异常类型的指示信息，以便PCF根据接收到指示信息确定用于为终端提供受限服务的第一受限服务策略，并通过向AMF发送终端的标识和该第一受限服务策略，以便AMF根据第一受限服务策略，向通信设备发送该通信设备对应的受限服务策略，进而该通信设备为终端提供受限服务，而不是直接在终端异常时对该终端去注册，因此，在有效降低安全隐患的同时，提高了对终端的管理效率。
以上图3-图11所示实施例提供的方法主要是以PCF确定并下发终端的受限服务策略，以便通信设备为终端提供受限服务为例进行说明的。作为一种可替换方案，也可以由AF确定并下发终端的受限服务策略，以便通信设备为终端提供受限服务。以下实施例结合图1所示的5G移动通信系统，对AF确定并下发终端的受限服务策略，以为终端提供受限服务的方法进行介绍。
图12为本申请另一实施例提供的一种受限服务的提供方法的流程示意图，该方法可以包括：
步骤701、AF确定终端异常和第一受限服务策略。
其中，第一受限服务策略可以为终端异常所对应的受限服务策略。该第一受限服务策略用于为终端提供受限服务。该受限服务可以包括以下任意一种：停止上行数据流；限制下行数据流；停止上行数据流和限制下行数据流。该第一受限服务策略可以为停止终端的上行数据流，也可以为限制终端的下行数据流，还可以为停止终端的上行数据流，并限制终端的下行数据流。
步骤701中AF确定终端异常可以替换为：AF根据终端的流量信息确定终端异常。其中，终端异常可以为终端流量异常。
可替换地，步骤701中AF确定终端异常可以替换为：AF确定终端的异常类型，或AF根据终端的流量信息确定终端的异常类型。该异常类型可以包括以下任意一种：上行流量异常；下行流量异常；上行流量异常和下行流量异常。其中，终端的异常类型可以为终端的流量异常类型。此时，第一受限服务策略可以替换为终端的异常类型所对应的受限服务策略。
需要说明的是，AF根据终端的流量信息确定终端异常的具体实现可以参见图3所示实施例提供的方法包括的步骤301中第一网元根据终端的流量信息确定终端异常的相关描述，AF确定终端的异常类型的具体实现可以参见图3所示实施例提供的方法包括的步骤301中第一网元确定终端的异常类型的相关描述，此处均不再详细赘述。
示例性的，在步骤701中AF确定终端异常替换为AF根据终端的流量信息确定终端异常的场景下，在本申请实施例中，步骤701中AF确定第一受限服务策略可以为：AF可以存储有该终端异常对应的受限服务策略，即第一受限服务策略。该第一受限服务策略可以为停止终端的上行数据流，也可以为限制终端的下行数据流，还可以为停 止终端的上行数据流，并限制终端的下行数据流。AF存储的第一受限服务策略可以是预定义的，也可以是预先配置在AF中的，还可以是由其他通信设备下发给AF的，本申请实施例在此并不做具体限制。或者，AF可以存储异常与受限服务策略之间的对应关系，AF根据异常与受限服务策略之间的对应关系，将该终端异常所对应的受限服务策略确定为第一受限服务策略。
示例性的，在步骤701中AF确定终端异常替换为AF确定终端的异常类型，或AF根据终端的流量信息确定终端的异常类型的场景下，AF可以存储异常类型与受限服务策略之间的映射关系，如表2所示。在本申请实施例中，步骤701中AF确定第一受限服务策略可以为：AF根据表2所示的映射关系，确定异常类型对应的受限服务策略为第一受限服务策略。
表2
Figure PCTCN2019091145-appb-000002
结合表2，当异常类型为上行流量异常时，第一受限服务策略为停止终端的上行数据流。当异常类型为下行流量异常时，第一受限服务策略为限制终端的下行数据流。当异常类型为上行流量异常和下行流量异常时，第一受限服务策略为停止终端的上行数据流，并限制终端的下行数据流。
步骤702、AF向UDM发送终端的标识和第一受限服务策略。
步骤703、UDM接收来自AF的终端的标识和第一受限服务策略。
步骤704、UDM向SMF发送终端的标识和第一受限服务策略。
在一种可能的实现方式中，步骤704中UDM可以直接向SMF发送终端的标识和第一受限服务策略。具体可参照图13-图15所示的任一实施例，不予限制。
在另一种可能的实现方式中，步骤704中UDM也可以通过AMF向SMF发送终端的标识和第一受限服务策略。具体可参照图16-图18所示的任一实施例，不予限制。
步骤705、SMF接收来自UDM的终端的标识和第一受限服务策略。
步骤706、SMF根据接收到的第一受限服务策略，向通信设备发送该通信设备对应的受限服务策略。
步骤706可以参见图3所示实施例中的相关描述，通过步骤706，SMF向通信设备发送该通信设备对应的受限服务策略，以便该通信设备根据接收到的受限服务策略向终端提供受限服务。
其中，该通信设备可以是终端，接入网设备，或UPF；还可以是终端和UPF，或接入网设备和UPF，不予限制。示例性的，当第一受限服务策略用于停止终端的上行数据流时，步骤706中SMF可以根据第一受限服务策略，向终端发送第二受限服务策略，以便终端根据该第二受限服务策略进行相关操作，如停止终端的上行数据流。具体可参照图13或图16所示的实施例，不予限制。或者，当第一受限服务策略用于停止终端的上行数据流时，步骤706中SMF可以根据第一受限服务策略，向接入网设备 发送终端的标识和第三受限服务策略，以便接入网设备根据终端的标识和该第三受限服务策略为终端提供受限服务，如停止终端的上行数据流。具体可参照图14或图17所示的实施例，不予限制。
示例性的，当第一受限服务策略用于限制终端的下行数据流时，步骤706中SMF可以根据第一受限服务策略，向UPF发送终端的标识和第四受限服务策略，以便UPF根据终端的标识和第四受限服务策略向终端提供受限服务，如限制终端的下行数据流。具体可以参照图15或图18所示的实施例，不予限制。
示例性的，当第一受限服务策略用于停止终端的上行数据流，并限制终端的下行数据流时，步骤706中SMF可以根据第一受限服务策略，向终端发送第二受限服务策略，以便终端根据该第二受限服务策略进行相关操作，如停止终端的上行数据流，并向UPF发送终端的标识和第四受限服务策略，以便UPF根据终端的标识和第四受限服务策略向终端提供受限服务，如限制终端的下行数据流。或者，当第一受限服务策略用于停止终端的上行数据流，并限制终端的下行数据流时，步骤706中SMF可以根据第一受限服务策略，向接入网设备发送终端的标识和第三受限服务策略，以便接入网设备根据终端的标识和该第三受限服务策略为终端提供受限服务，如停止终端的上行数据流，并向UPF发送终端的标识和第四受限服务策略，以便UPF根据终端的标识和第四受限服务策略向终端提供受限服务，如限制终端的下行数据流。
其中，上述第二受限服务策略用于停止终端的上行数据流。上述第三受限服务策略用于停止终端的上行数据流。上述第四受限服务策略用于限制终端的下行数据流。
本申请实施例提供的受限服务的提供方法，AF在确定终端异常时，确定用于为终端提供受限服务的第一受限服务策略，并通过向UDM发送终端的标识和第一受限服务策略，以便UDM向SMF发送终端的标识和该第一受限服务策略，进而为终端提供受限服务，而不是直接在终端异常时对该终端去注册，在有效降低安全隐患的同时，提高了对终端的管理效率。
下面结合图1所示的5G移动通信系统对图12所示方法进行描述。
图13-图15为本申请另一实施例提供的受限服务的提供方法的流程示意图。该方法可以包括：
步骤801、AF确定终端异常和第一受限服务策略。
其中，AF确定终端异常和第一受限服务策略的具体实现可以参见图12所示的实施例中步骤701的相关描述，此处不再赘述。
步骤802、AF向UDM发送终端的标识和第一受限服务策略。
在一种可能的实现方式中，步骤802中AF可以经MEF向UDM发送终端的标识和第一受限服务策略。例如，AF向NEF发送应用功能的流量定向请求(AF Traffic steering request)消息，该AF Traffic steering request消息中包括终端的标识和第一受限服务策略。NEF向UDM发送更新请求(Updated request)，该Updated request中包括终端的标识和第一受限服务策略。进一步的，NEF在接收到来自AF的AF Traffic steering request消息后，可以向AF回复应用功能的流量定向响应(AF Traffic steering response消息)。进一步的，UDM在接收到来自NEF的Updated request后，可以向NEF发送更新响应(Updated response)消息。
步骤803、UDM向SMF发送终端的标识和第一受限服务策略。
在一种可能的实现方式中，步骤803中UDM可以调用Nudm_SDM_Notification服务，向SMF发送终端的标识和第一受限服务策略。进一步的，SMF在接收到来自UDM的终端的标识和第一受限服务策略后，可以向UDM发送服务响应消息，该服务响应消息用于确认接收到UDM发送的终端的标识和第一受限服务策略。
可选地，上述方法还包括：SMF在接收到终端的标识和第一受限服务策略后，可以根据第一受限服务策略，向通信设备下发该通信设备对应的受限服务策略，以便该通信设备可以根据接收到的受限服务策略向终端提供受限服务。
示例性的，如图13所示，当第一受限服务策略用于停止终端的上行数据流时，该方法可以包括以下步骤804a-步骤805a；或者，如图14所示，当第一受限服务策略用于停止终端的上行数据流时，该方法可以包括以下步骤804b-步骤805b。
示例性的，如图15所示，当第一受限服务策略用于限制终端的下行数据流时，该方法可以包括以下步骤804c-步骤805c。
示例性的，当第一受限服务策略用于停止终端的上行数据流，并限制终端的下行数据流时，该方法可以包括以下步骤804a-步骤805a和步骤804c-步骤805c，或者，该方法可以包括以下步骤804b-步骤805b和步骤804c-步骤805c。
进一步的，SMF在接收到终端的标识和第一受限服务策略后，也可以将终端的标识和第一受限服务策略发送给该SMF对应的PCF，以便PCF确定是否需要对第一受限服务策略进行更改。若不需要更改，PCF可以将终端的标识和第一受限服务策略发给SMF，若需要修改，PCF可以将修改后的受限服务策略发送给SMF，以便SMF根据修改后的受限服务策略，向通信设备下发该通信设备对应的受限服务策略，进而为终端提供受限服务。SMF根据修改后的受限服务策略向通信设备下发该通信设备对应的受限服务策略的描述，可以参见根据第一受限服务策略向通信设备下发该通信设备对应的受限服务策略的相关描述，此处不再赘述。
以下介绍步骤804a-步骤805a：
步骤804a、SMF向终端发送第二受限服务策略。
其中，步骤804a的具体描述可以参见图4所示实施例提供的方法中步骤405a中的相关描述，此处不再赘述。
步骤805a、终端根据第二受限服务策略，停止上行数据流的传输。
其中，步骤805a的具体描述可以参见图4所示实施例提供的方法中步骤406a中的相关描述，此处不再赘述。
进一步的，终端在接收到来自SMF的第二受限服务策略后，还可以向SMF发送确认消息，该确认消息用于确认接收到SMF发送的第二受限服务策略。例如，终端由RAN和AMF向SMF发送SM NAS ack消息。
以下介绍步骤804b-步骤805b：
步骤804b、SMF向接入网设备发送终端的标识和第三受限服务策略。
其中，步骤804b的具体描述可以参见图5所示实施例提供的方法中步骤405b中的相关描述，此处不再赘述。
步骤805b、接入网设备根据终端的标识和第三受限服务策略，停止终端的上行数 据流。
其中，步骤805b的具体描述可以参见图5所示实施例提供的方法中步骤406b中的相关描述，此处不再赘述。
进一步的，接入网设备在接收到来自SMF的终端的标识和第三受限服务策略后，还可以向SMF发送确认消息。其中，该确认消息可以用于确认接收到SMF发送的终端的标识和第三受限服务策略，例如，接入网设备由AMF向SMF发送SM NAS ack消息。
以下介绍步骤804c-步骤805c：
步骤804c、SMF向UPF发送终端的标识和第四受限服务策略。
其中，步骤804c的具体描述可以参见图6所示实施例提供的方法中步骤405c中的相关描述，此处不再赘述。
步骤805c、UPF根据终端的标识和第四受限服务策略，限制终端的下行数据流。
其中，步骤805c的具体描述可以参见图6所示实施例提供的方法中步骤406c中的相关描述，此处不再赘述。
基于图13-图15所示实施例提供的方法，AF在确定终端异常时，确定该终端异常对应的用于为终端提供受限服务的第一受限服务策略，并通过向UDM发送终端的标识和第一受限服务策略，以便UDM向SMF发送终端的标识和该第一受限服务策略，进而SMF根据第一受限服务策略，向通信设备发送该通信设备对应的受限服务策略，进而该通信设备为终端提供受限服务，而不是直接在终端异常时对该终端去注册，在有效降低安全隐患的同时，提高了对终端的管理效率。
图16-图18为本申请另一实施例提供的受限服务的提供方法的流程示意图。该方法可以包括：
步骤901、AF确定终端异常和第一受限服务策略。
其中，AF确定终端异常和第一受限服务策略的具体实现可以参见图12所示实施例中步骤701中的相关描述，此处不再赘述。
步骤902、AF向UDM发送终端的标识和第一受限服务策略。
其中，步骤902的具体描述可以参见图13-图15所示实施例提供的方法中步骤802中的相关描述，此处不再赘述。
步骤903、UDM向AMF发送终端的标识和第一受限服务策略。
在一种可能的实现方式中，步骤903中UDM可以调用Nudm_SubscriberData_UpdateNotification服务，向AMF发送终端的标识和第一受限服务策略。进一步的，AMF在接收到来自UDM的终端的标识和第一受限服务策略后，可以向UDM发送服务响应消息，该服务响应消息用于确认接收到UDM发送的终端的标识和第一受限服务策略。
步骤904、AMF向终端的SMF发送终端的标识和第一受限服务策略。
其中，该终端的SMF为提供服务给该终端的SMF，可以为一个或多个SMF，不予限制。
在一种可能的实现方式中，步骤904中AMF可以调用Namf_EventExposure_Notify服务，向终端的SMF发送终端的标识和第一受限服务策略。进一步的，终端的SMF 在接收到终端的标识和第一受限服务策略后，可以向AMF发送服务响应消息，该服务响应消息用于确认接收到AMF发送的终端的标识和第一受限服务策略。
其中，为了简化附图，图16-图18中仅示出了AMF向终端的一个SMF发送终端的标识和第一受限服务策略。另外，为了便于描述，以下步骤也以终端的一个SMF接收到AMF发送的终端的标识和第一受限服务策略后的流程进行介绍，终端的其他SMF接收到AMF发送的终端的标识和第一受限服务策略后的流程与下述流程相同，不再赘述。
可选的，上述方法还包括：SMF在接收到终端的标识和第一受限服务策略后，可以根据第一受限服务策略，向通信设备下发该通信设备对应的受限服务策略，以便该通信设备可以根据接收到的受限服务策略向终端提供受限服务。
示例性的，如图16所示，当第一受限服务策略用于停止终端的上行数据流时，该方法可以包括以下步骤905a-步骤906a；或者，如图17所示，当第一受限服务策略用于停止终端的上行数据流时，该方法可以包括以下步骤905b-步骤906b。
示例性的，如图18所示，当第一受限服务策略用于限制终端的下行数据流时，该方法可以包括以下步骤905c-步骤906c。
示例性的，当第一受限服务策略用于停止终端的上行数据流，并限制终端的下行数据流时，该方法可以包括以下步骤905a-步骤906a和步骤905c-步骤906c，或者，该方法可以包括以下步骤905b-步骤906b和步骤905c-步骤906c。
进一步的，SMF在接收到终端的标识和第一受限服务策略后，也可以将终端的标识和第一受限服务策略发送给该SMF对应的PCF，以便PCF确定是否需要对第一受限服务策略进行更改。若不需要更改，PCF可以将终端的标识和第一受限服务策略发给SMF，若需要修改，PCF可以将修改后的受限服务策略发送给SMF，以便SMF根据修改后的受限服务策略，向通信设备下发该通信设备对应的受限服务策略，进而为终端提供受限服务，SMF根据修改后的受限服务策略向不同通信设备下发该通信设备对应的受限服务策略的描述，可以参见根据第一受限服务策略向通信设备下发该通信设备对应的受限服务策略的相关描述，此处不再赘述。
以下介绍步骤905a-步骤906a：
步骤905a、SMF向终端发送第二受限服务策略。
其中，步骤905a的具体描述可以参见图4所示实施例提供的方法中步骤405a的相关描述，此处不再赘述。
步骤906a、终端根据第二受限服务策略，停止上行数据流的传输。
其中，步骤906a的具体描述可以参见图4所示实施例提供的方法中步骤406a的相关描述，此处不再赘述。
进一步的，终端在接收到来自SMF的第二受限服务策略后，还可以向SMF发送确认消息。该确认消息用于确认接收到SMF发送的第二受限服务策略。例如，终端由RAN和AMF向SMF发送SM NAS ack消息。
以下介绍步骤905b-步骤906b：
步骤905b、SMF向接入网设备发送终端的标识和第三受限服务策略。
其中，步骤905b的具体描述可以参见图5所示实施例提供的方法中步骤405b的 相关描述，此处不再赘述。
步骤906b、接入网设备根据终端的标识和第三受限服务策略，停止终端的上行数据流。
其中，步骤906b的具体描述可以参见图5所示实施例提供的方法中步骤406b的相关描述，此处不再赘述。
进一步的，接入网设备在接收到来自SMF的终端的标识和第三受限服务策略后，还可以向SMF发送确认消息。其中，该确认消息可以用于确认接收到SMF发送的终端的标识和第三受限服务策略，例如，接入网设备由AMF向SMF发送SM NAS ack消息。
以下介绍步骤905c-步骤906c：
步骤905c、SMF向UPF发送终端的标识和第四受限服务策略。
其中，步骤905c的具体描述可以参见图6所示实施例提供的方法中步骤405c的相关描述，此处不再赘述。
步骤906c、UPF根据终端的标识和第四受限服务策略，限制终端的下行数据流。
其中，步骤906c的具体描述可以参见图6所示实施例提供的方法中步骤406c的相关描述，此处不再赘述。
基于图16-图18所示实施例提供的方法，AF在确定终端异常时，确定该终端异常对应的用于为终端提供受限服务的第一受限服务策略，并通过向UDM发送终端的标识和第一受限服务策略，以便UDM向AMF发送终端的标识和该第一受限服务策略，进而AMF向终端的SMF发送该终端的标识和第一受限服务策略，这样，SMF可以根据第一受限服务策略，向通信设备发送该通信设备对应的受限服务策略，进而该通信设备为终端提供受限服务，而不是直接在终端异常时对该终端去注册，在有效降低安全隐患的同时，提高了对终端的管理效率。
上述主要从各个节点之间交互的角度对本申请实施例提供的方法进行了介绍，各实施例之间相同或相似的步骤或名词可以相互借鉴或参考。可以理解的是，各个节点，例如NWDAF、PCF、AMF、SMF、UDM等通信设备为了实现上述功能，其包含了执行各个功能相应的硬件结构和/或软件模块。本领域技术人员应该很容易意识到，结合本文中所公开的实施例描述的各示例的算法步骤，本申请能够以硬件或硬件和计算机软件的结合形式来实现。某个功能究竟以硬件还是计算机软件驱动硬件的方式来执行，取决于技术方案的特定应用和设计约束条件。专业技术人员可以对每个特定的应用来使用不同方法来实现所描述的功能，但是这种实现不应认为超出本申请的范围。
本申请实施例可以根据上述方法示例对NWDAF、PCF、AMF、SMF、UDM等通信设备进行功能模块的划分，例如，可以对应各个功能划分各个功能模块，也可以将两个或两个以上的功能集成在一个处理模块中。上述集成的模块既可以采用硬件的形式实现，也可以采用软件功能模块的形式实现。需要说明的是，本申请实施例中对模块的划分是示意性的，仅仅为一种逻辑功能划分，实际实现时可以有另外的划分方式。
本申请实施例提供一种通信设备，该通信设备可以为PCF，或者PCF中的芯片，或者片上系统，该通信设备可以用于执行上述实施例中涉及的PCF的功能。
作为一种可实现方式，如图19所示，上述通信设备可以包括：接收单元1001、 发送单元1002。
接收单元1001用于接收终端的标识和指示信息，该指示信息用于指示终端异常或终端的异常类型，如：支持通信设备执行上述步骤303。
发送单元1002，用于根据接收单元1001接收到的指示信息，发送终端的标识和第一受限服务策略，该第一受限服务策略用于为终端提供受限服务。如：支持通信设备执行上述步骤304、步骤404、步骤507、步骤604。
进一步的，图19所示的发送单元1002，还可以用于支持通信设备执行上述步骤503。
进一步的，图19所示的通信设备，还可以包括：确定单元1003，用于根据指示信息确定第一受限服务策略。如：支持通信设备执行上述步骤403、步骤506、步骤603。
需要说明的是，上述方法实施例涉及的各步骤的所有相关内容均可以援引到对应功能模块的功能描述，在此不再赘述。本申请实施例提供的通信设备，用于执行上述受限服务的提供方法，因此可以达到与上述受限服务的提供方法相同的效果。
作为又一种可实现方式，上述通信设备可以包括：处理模块和通信模块。处理模块用于对通信设备的动作进行控制管理。例如，处理模块用于支持该通信设备执行步骤403、步骤506、步骤603以及本文所描述的技术的其它过程。通信模块用于支持通信设备与其他网络实体的通信，如与图1示出的功能模块或网络实体之间的通信。例如，通信模块用于支持该通信设备执行步骤303、步骤304、步骤404、步骤503、步骤507、步骤604以及本文所描述的技术的其它过程。进一步的，该通信设备还可以包括存储模块，用于存储通信设备的程序代码和数据。
其中，处理模块可以是处理器或控制器。其可以实现或执行结合本申请公开内容所描述的各种示例性的逻辑方框，模块和电路。处理器也可以是实现计算功能的组合，例如包含一个或多个微处理器组合，DSP和微处理器的组合等等。通信模块可以是收发电路或通信接口等。存储模块可以是存储器。当处理模块为处理器，通信模块为通信接口，存储模块为存储器时，上述通信设备可以为图2所示通信设备。
本申请实施例提供另一种通信设备，该通信设备可以为SMF，或者SMF中的芯片，或者片上系统，该通信设备可以用于执行上述实施例中涉及的SMF的功能。
作为一种可实现方式，如图20所示，上述通信设备可以包括：接收单元1101、发送单元1102。
接收单元1101，用于接收终端的标识和第一受限服务策略，如：支持通信设备执行上述步骤305、步骤705。
发送单元1102，用于根据接收单元1101接收到的第一受限服务策略，向通信设备发送该通信设备对应的受限服务策略。如：支持通信设备执行上述步骤306、步骤405a、步骤405b、步骤405c、步骤508a、步骤508b、步骤508c、步骤706、步骤804a、步骤804b、步骤804c、步骤905a、步骤905b、步骤905c。
需要说明的是，上述方法实施例涉及的各步骤的所有相关内容均可以援引到对应功能模块的功能描述，在此不再赘述。本申请实施例提供的通信设备，用于执行上述受限服务的提供方法，因此可以达到与上述受限服务的提供方法相同的效果。
作为又一种可实现方式，上述通信设备可以包括：处理模块和通信模块。处理模块用于对通信设备的动作进行控制管理，例如，处理模块用于支持该通信设备执行本文所描述的技术的其它过程。通信模块用于支持通信设备与其他网络实体的通信，例如与图1示出的功能模块或网络实体之间的通信。例如，通信模块用于支持该通信设备执行步骤305、步骤306、步骤405a、步骤405b、步骤405c、步骤508a、步骤508b、步骤508c、步骤705、步骤706、步骤804a、步骤804b、步骤804c、步骤905a、步骤905b、步骤905c以及本文所描述的技术的其它过程。该通信设备还可以包括存储模块，用于存储通信设备的程序代码和数据。
其中，处理模块可以是处理器或控制器。其可以实现或执行结合本申请公开内容所描述的各种示例性的逻辑方框，模块和电路。处理器也可以是实现计算功能的组合，例如包含一个或多个微处理器组合，DSP和微处理器的组合等等。通信模块可以是收发电路或通信接口等。存储模块可以是存储器。当处理模块为处理器，通信模块为通信接口，存储模块为存储器时，上述通信设备可以为图2所示通信设备。
本申请实施例提供又一种通信设备，该通信设备可以为AMF，或者AMF中的芯片，或者片上系统，该通信系统可以用于执行上述实施例中涉及的AMF的功能。
作为一种可实现方式，如图21所示，上述通信设备可以包括：接收单元1201、发送单元1202。
接收单元1201，用于接收终端的标识和第一受限服务策略，该第一受限服务策略用于为终端提供受限服务。
发送单元1202，用于根据接收单元1201接收到的第一受限服务策略，向通信设备发送该通信设备对应受限服务策略，以为终端提供受限服务。如：支持通信设备执行上述步骤605a、步骤605b。
进一步的，发送单元1202，还可以用于支持通信设备执行上述步骤504、步骤904。
需要说明的是，上述方法实施例涉及的各步骤的所有相关内容均可以援引到对应功能模块的功能描述，在此不再赘述。本申请实施例提供的通信设备用于执行上述受限服务的提供方法，因此可以达到与上述受限服务的提供方法相同的效果。
作为又一种可实现方式，上述通信设备可以包括：处理模块和通信模块。处理模块用于对通信设备的动作进行控制管理。通信模块用于支持通信设备与其他网络实体的通信，如与图1示出的功能模块或网络实体之间的通信。例如，通信模块用于支持该通信设备执行步骤504、步骤605a、步骤605b、步骤904以及本文所描述的技术的其它过程该通信设备还可以包括存储模块，用于存储通信设备的程序代码和数据。
其中，处理模块可以是处理器或控制器。其可以实现或执行结合本申请公开内容所描述的各种示例性的逻辑方框，模块和电路。处理器也可以是实现计算功能的组合，例如包含一个或多个微处理器组合，DSP和微处理器的组合等等。通信模块可以是收发电路或通信接口等。存储模块可以是存储器。当处理模块为处理器，通信模块为通信接口，存储模块为存储器时，上述通信设备可以为图2所示通信设备。
本申请实施例提供又一种通信设备，该通信设备可以为第一网元，或者第一网元中的芯片，或者片上系统，该通信系统可以用于执行上述实施例中涉及的第一网元的功能。该第一网元可以为NWDAF或AF。
作为一种可实现方式，如图22所示，上述通信设备可以包括：确定单元1301、发送单元1302。
确定单元1301，用于确定终端异常，如：支持通信设备执行上述步骤301、步骤401、步骤501、步骤601。
发送单元1302，用于向PCF发送终端的标识和指示信息，该指示信息用于指示终端异常或终端的异常类型。如：支持通信设备执行上述步骤302、步骤402、步骤502、步骤602。
需要说明的是，上述方法实施例涉及的各步骤的所有相关内容均可以援引到对应功能模块的功能描述，在此不再赘述。本申请实施例提供的通信设备用于执行上述受限服务的提供方法，因此可以达到与上述受限服务的提供方法相同的效果。
作为又一种可实现方式，上述通信设备可以包括：处理模块和通信模块。处理模块用于对通信设备的动作进行控制管理，例如，处理模块用于支持该通信设备执行步骤301、步骤401、步骤501、步骤601以及本文所描述的技术的其它过程。通信模块用于支持通信设备与其他网络实体的通信，如与图1示出的功能模块或网络实体之间的通信。例如，通信模块用于支持该通信设备执行步骤302、步骤402、步骤502、步骤602以及本文所描述的技术的其它过程。该通信设备还可以包括存储模块，用于存储通信设备的程序代码和数据。
其中，处理模块可以是处理器或控制器。其可以实现或执行结合本申请公开内容所描述的各种示例性的逻辑方框，模块和电路。处理器也可以是实现计算功能的组合，例如包含一个或多个微处理器组合，DSP和微处理器的组合等等。通信模块可以是收发电路或通信接口等。存储模块可以是存储器。当处理模块为处理器，通信模块为通信接口，存储模块为存储器时，上述通信设备可以为图2所示通信设备。
本申请实施例提供又一种通信设备，该通信设备可以为UDM，或者UDM中的芯片，或者片上系统，该通信系统可以用于执行上述实施例中涉及的UDM的功能。
作为一种可实现方式，如图23所示，上述通信设备可以包括：接收单元1401、发送单元1402。
接收单元1401，用于接收终端的标识和第一受限服务策略，该第一受限服务策略用于为终端提供受限服务，如：支持通信设备执行上述步骤703。
发送单元1402，用于发送终端的标识和第一受限服务策略。如：支持通信设备执行上述步骤704、步骤803、步骤903。
需要说明的是，上述方法实施例涉及的各步骤的所有相关内容均可以援引到对应功能模块的功能描述，在此不再赘述。本申请实施例提供的通信设备用于执行上述受限服务的提供方法，因此可以达到与上述受限服务的提供方法相同的效果。
作为又一种可实现方式，上述通信设备可以包括：处理模块和通信模块。处理模块用于对通信设备的动作进行控制管理。通信模块用于支持通信设备与其他网络实体的通信，例如与图1示出的功能模块或网络实体之间的通信。例如，通信模块用于支持该通信设备执行步骤703、步骤704、步骤803、步骤903以及本文所描述的技术的其它过程该通信设备还可以包括存储模块，用于存储通信设备的程序代码和数据。
其中，处理模块可以是处理器或控制器。其可以实现或执行结合本申请公开内容 所描述的各种示例性的逻辑方框，模块和电路。处理器也可以是实现计算功能的组合，例如包含一个或多个微处理器组合，DSP和微处理器的组合等等。通信模块可以是收发电路或通信接口等。存储模块可以是存储器。当处理模块为处理器，通信模块为通信接口，存储模块为存储器时，上述通信设备可以为图2所示通信设备。
本申请实施例提供又一种通信设备，该通信设备可以为AF，或者AF中的芯片，或者片上系统，该通信系统可以用于执行上述实施例中涉及的AF的功能。
作为一种可实现方式，如图24所示，上述通信设备可以包括：确定单元1501、发送单元1502。
确定单元1501，用于确定终端异常和异常对应的受限服务策略，该异常对应的受限服务策略用于为终端提供受限服务，如：支持通信设备执行上述步骤701、步骤801、步骤901。
发送单元1502，用于发送终端的标识和确定单元1501确定出的异常对应的受限服务策略。如：支持通信设备执行上述步骤702、步骤802、步骤902。
需要说明的是，上述方法实施例涉及的各步骤的所有相关内容均可以援引到对应功能模块的功能描述，在此不再赘述。本申请实施例提供的通信设备用于执行上述受限服务的提供方法，因此可以达到与上述受限服务的提供方法相同的效果。
作为又一种可实现方式，上述通信设备可以包括：处理模块和通信模块。处理模块用于对通信设备的动作进行控制管理，例如，处理模块用于支持该通信设备执行步骤701、步骤801、步骤901以及本文所描述的技术的其它过程。通信模块用于支持通信设备与其他网络实体的通信，如与图1示出的功能模块或网络实体之间的通信。例如，通信模块用于支持该通信设备执行步骤702、步骤802、步骤902以及本文所描述的技术的其它过程。该通信设备还可以包括存储模块，用于存储通信设备的程序代码和数据。
其中，处理模块可以是处理器或控制器。其可以实现或执行结合本申请公开内容所描述的各种示例性的逻辑方框，模块和电路。处理器也可以是实现计算功能的组合，例如包含一个或多个微处理器组合，DSP和微处理器的组合等等。通信模块可以是收发电路或通信接口等。存储模块可以是存储器。当处理模块为处理器，通信模块为通信接口，存储模块为存储器时，上述通信设备可以为图2所示通信设备。
本申请实施例提供一种通信系统，该通信系统可以包括：图19所示的通信设备(该通信设备可以为PCF)，图20所示的通信设备(该通信设备可以为SMF)，图22所示的通信设备(该通信设备可以为第一网元，该第一网元可以为NWDAF或AF)，终端，接入网设备以及UPF。
上述设备之间相互配合可以实现本申请实施例提供的受限服务的提供方法。例如，图3-图6所示的任一实施例提供的方法。
进一步的，该通信系统还可以包括图21所示的通信设备(该通信设备可以为AMF)。图21所示的通信设备与上述设备之间相互配合可以实现本申请实施例提供的受限服务的提供方法。例如，图7-图11所示的任一实施例提供的方法。
本申请实施例提供另一种通信系统，该通信系统可以包括：图20所示的通信设备(该通信设备可以为SMF)，图23所示的通信设备(该通信设备可以为UDM)，图 24所示的通信设备(该通信设备可以为AF)，终端，接入网设备以及UPF。
上述设备之间相互配合可以实现本申请实施例提供的受限服务的提供方法，例如，图12-图15所示的任一实施例提供的方法。
进一步的，该通信系统还可以包括图21所示的通信设备(该通信设备可以为AMF)。图21所示的通信设备与上述设备之间相互配合可以实现本申请实施例提供的受限服务的提供方法。例如，图16-图18所示的任一实施例提供的方法。
通过以上的实施方式的描述，所属领域的技术人员可以清楚地了解到，为描述的方便和简洁，仅以上述各功能模块的划分进行举例说明，实际应用中，可以根据需要而将上述功能分配由不同的功能模块完成，即将装置的内部结构划分成不同的功能模块，以完成以上描述的全部或者部分功能。
在本申请所提供的几个实施例中，应该理解到，所揭露的装置和方法，可以通过其它的方式实现。例如，以上所描述的装置实施例仅仅是示意性的，例如，所述模块或单元的划分，仅仅为一种逻辑功能划分，实际实现时可以有另外的划分方式，例如多个单元或组件可以结合或者可以集成到另一个装置，或一些特征可以忽略，或不执行。另一点，所显示或讨论的相互之间的耦合或直接耦合或通信连接可以是通过一些接口，装置或单元的间接耦合或通信连接，可以是电性，机械或其它的形式。
所述作为分离部件说明的单元可以是或者也可以不是物理上分开的，作为单元显示的部件可以是一个物理单元或多个物理单元，即可以位于一个地方，或者也可以分布到多个不同地方。可以根据实际的需要选择其中的部分或者全部单元来实现本实施例方案的目的。
另外，在本申请各个实施例中的各功能单元可以集成在一个处理单元中，也可以是各个单元单独物理存在，也可以两个或两个以上单元集成在一个单元中。上述集成的单元既可以采用硬件的形式实现，也可以采用软件功能单元的形式实现。
所述集成的单元如果以软件功能单元的形式实现并作为独立的产品销售或使用时，可以存储在一个可读取存储介质中。基于这样的理解，本申请实施例的技术方案本质上或者说对现有技术做出贡献的部分或者该技术方案的全部或部分可以以软件产品的形式体现出来，该软件产品存储在一个存储介质中，包括若干指令用以使得一个设备(可以是单片机，芯片等)或处理器执行本申请各个实施例所述方法的全部或部分步骤。而前述的存储介质包括：U盘、移动硬盘、ROM、RAM、磁碟或者光盘等各种可以存储程序代码的介质。
以上所述，仅为本申请的具体实施方式，但本申请的保护范围并不局限于此，任何在本申请揭露的技术范围内的变化或替换，都应涵盖在本申请的保护范围之内。因此，本申请的保护范围应以所述权利要求的保护范围为准。

Claims (49)

  1. 一种受限服务的提供方法，其特征在于，所述方法包括：
    策略控制功能PCF接收终端的标识和指示信息，所述指示信息用于指示所述终端异常或所述终端的异常类型；
    所述PCF根据所述指示信息，发送所述终端的标识和第一受限服务策略，所述第一受限服务策略用于为所述终端提供受限服务。
  2. 根据权利要求1所述的受限服务的提供方法，其特征在于，所述受限服务包括以下任意一种：
    停止上行数据流；
    限制下行数据流；
    停止上行数据流和限制下行数据流。
  3. 根据权利要求2所述的受限服务的提供方法，其特征在于，所述PCF发送所述终端的标识和第一受限服务策略，包括：
    所述PCF向会话管理功能SMF发送所述终端的标识和所述第一受限服务策略。
  4. 根据权利要求1所述的受限服务的提供方法，其特征在于，所述受限服务包括：停止上行数据流；
    所述PCF发送所述终端的标识和第一受限服务策略，包括：
    所述PCF向接入和移动性管理功能AMF发送所述终端的标识和所述第一受限服务策略。
  5. 根据权利要求1-4中任一项所述的受限服务的提供方法，其特征在于，所述策略控制功能PCF接收终端的标识和指示信息，包括：
    所述PCF接收来自网络数据分析功能NWDAF或应用功能AF或所述SMF的所述终端的标识和所述指示信息。
  6. 一种受限服务的提供方法，其特征在于，所述方法包括：
    会话管理功能SMF接收终端的标识和第一受限服务策略；
    当所述第一受限服务策略用于停止所述终端的上行数据流时，所述SMF向所述终端发送第二受限服务策略，所述第二受限服务策略用于停止所述终端的上行数据流；或者，
    当所述第一受限服务策略用于停止所述终端的上行数据流时，所述SMF向接入网设备发送所述终端的标识和第三受限服务策略，所述第三受限服务策略用于停止所述终端的上行数据流；或者，
    当所述第一受限服务策略用于限制所述终端的下行数据流时，所述SMF向用户面功能UPF发送所述终端的标识和第四受限服务策略，所述第四受限服务策略用于限制所述终端的下行数据流；或者，
    当所述第一受限服务策略用于停止所述终端的上行数据流，并限制所述终端的下行数据流时，所述SMF向所述终端发送第二受限服务策略或向接入网设备发送所述终端的标识和第三受限服务策略，并向UPF发送所述终端的标识和第四受限服务策略，所述第二受限服务策略用于停止所述终端的上行数据流，所述第三受限服务策略用于停止所述终端的上行数据流，所述第四受限服务策略用于限制所述终端的下行数据流。
  7. 根据权利要求6所述的受限服务的提供方法，其特征在于，
    所述第二受限服务策略包括服务质量QoS规则，所述QoS规则用于停止上行数据流；或者，
    所述第三受限服务策略包括QoS配置文件，所述QoS配置文件用于停止上行数据流；或者，
    所述第四受限服务策略包括QoS信息，所述QoS信息用于限制下行数据流。
  8. 根据权利要求6或7所述的受限服务的提供方法，其特征在于，所述会话管理功能SMF接收终端的标识和第一受限服务策略，包括：
    所述SMF接收来自策略控制功能PCF、统一数据管理UDM或接入和移动性管理功能AMF的所述终端的标识和所述第一受限服务策略。
  9. 根据权利要求8所述的受限服务的提供方法，其特征在于，在所述SMF接收来自所述PCF的所述终端的标识和所述第一受限服务策略之前，所述方法还包括：
    所述SMF接收来自AMF的所述终端的标识和指示信息，所述指示信息用于指示所述终端异常或所述终端的异常类型；
    所述SMF向所述PCF发送所述终端的标识和所述指示信息。
  10. 一种受限服务的提供方法，其特征在于，所述方法包括：
    接入和移动性管理功能AMF接收来自策略控制功能PCF的终端的标识和第一受限服务策略，所述第一受限服务策略用于为所述终端提供受限服务；
    所述AMF根据所述第一受限服务策略，向所述终端发送第二受限服务策略，所述第二受限服务策略用于停止所述终端的上行数据流；或，
    所述AMF根据所述第一受限服务策略，向接入网设备发送所述终端的标识和第三受限服务策略，所述第三受限服务策略用于停止所述终端的上行数据流。
  11. 根据权利要求10所述的受限服务的提供方法，其特征在于，
    所述第二受限服务策略包括指示信息，所述指示信息用于指示更新或修改所述终端的终端路由选择策略URSP的门限值为第一值，所述第一值用于停止上行数据流；或者，
    所述第三受限服务策略包括服务质量QoS配置文件，所述QOS配置文件用于停止上行数据流。
  12. 一种受限服务的提供方法，其特征在于，所述方法包括：
    第一网元确定终端异常；
    所述第一网元向策略控制功能PCF发送所述终端的标识和指示信息，所述指示信息用于指示所述终端异常或所述终端的异常类型。
  13. 根据权利要求12所述的受限服务的提供方法，其特征在于，所述第一网元确定终端异常，包括：
    所述第一网元根据所述终端的流量信息确定所述终端异常，所述流量信息包括上行流量信息和/或下行流量信息。
  14. 根据权利要求12或13所述的受限服务的提供方法，其特征在于，所述异常类型包括以下任意一种：
    上行流量异常；
    下行流量异常；
    上行流量异常和下行流量异常。
  15. 根据权利要求12-14中任一项所述的受限服务的提供方法，其特征在于，所述第一网元为网络数据分析功能NWDAF或应用功能AF。
  16. 一种受限服务的提供方法，其特征在于，所述方法包括：
    统一数据管理UDM接收来自应用功能AF的终端的标识和第一受限服务策略，所述第一受限服务策略用于为所述终端提供受限服务；
    所述UDM向接入和移动性管理功能AMF或会话管理功能SMF发送所述终端的标识和所述第一受限服务策略。
  17. 根据权利要求16所述的受限服务的提供方法，其特征在于，所述受限服务包括以下任意一种：
    停止上行数据流；
    限制下行数据流；
    停止上行数据流和限制下行数据流。
  18. 一种受限服务的提供方法，其特征在于，所述方法包括：
    应用功能AF确定终端异常和所述异常对应的受限服务策略，所述异常对应的受限服务策略用于为所述终端提供受限服务；
    所述AF向统一数据管理UDM发送所述终端的标识和所述异常对应的受限服务策略。
  19. 根据权利要求18所述的受限服务的提供方法，其特征在于，所述应用功能AF确定终端异常，包括：
    所述AF根据所述终端的流量信息确定所述终端异常，所述流量信息包括上行流量信息和/或下行流量信息。
  20. 根据权利要求18或19所述的受限服务的提供方法，其特征在于，所述受限服务包括以下任意一种：
    停止上行数据流；
    限制下行数据流；
    停止上行数据流和限制下行数据流。
  21. 一种通信设备，其特征在于，包括：
    接收单元，用于接收终端的标识和指示信息，所述指示信息用于指示所述终端异常或所述终端的异常类型；
    发送单元，用于根据所述接收单元接收到的所述指示信息，发送所述终端的标识和第一受限服务策略，所述第一受限服务策略用于为所述终端提供受限服务。
  22. 根据权利要求21所述的通信设备，其特征在于，所述受限服务包括以下任意一种：
    停止上行数据流；
    限制下行数据流；
    停止上行数据流和限制下行数据流。
  23. 根据权利要求22所述的通信设备，其特征在于，所述发送单元，具体用于：
    向会话管理功能SMF发送所述终端的标识和所述第一受限服务策略。
  24. 根据权利要求21所述的通信设备，其特征在于，所述受限服务包括：停止上行数据流；
    所述发送单元，具体用于向接入和移动性管理功能AMF发送所述终端的标识和所述第一受限服务策略。
  25. 根据权利要求21-24中任一项所述的通信设备，其特征在于，所述接收单元，具体用于：
    接收来自网络数据分析功能NWDAF或应用功能AF或所述SMF的所述终端的标识和所述指示信息。
  26. 一种通信设备，其特征在于，包括：
    接收单元，用于接收终端的标识和第一受限服务策略；
    发送单元，用于当所述接收单元接收到的所述第一受限服务策略用于停止所述终端的上行数据流时，向所述终端发送第二受限服务策略，所述第二受限服务策略用于停止所述终端的上行数据流；或者，当所述接收单元接收到的所述第一受限服务策略用于停止所述终端的上行数据流时，向接入网设备发送所述终端的标识和第三受限服务策略，所述第三受限服务策略用于停止所述终端的上行数据流；或者，当所述接收单元接收到的所述第一受限服务策略用于限制所述终端的下行数据流时，向用户面功能UPF发送所述终端的标识和第四受限服务策略，所述第四受限服务策略用于限制所述终端的下行数据流；或者，当所述接收单元接收到的所述第一受限服务策略用于停止所述终端的上行数据流，并限制所述终端的下行数据流时，向所述终端发送第二受限服务策略或向接入网设备发送所述终端的标识和第三受限服务策略，并向UPF发送所述终端的标识和第四受限服务策略，所述第二受限服务策略用于停止所述终端的上行数据流，所述第三受限服务策略用于停止所述终端的上行数据流，所述第四受限服务策略用于限制所述终端的下行数据流。
  27. 根据权利要求26所述的通信设备，其特征在于，
    所述第二受限服务策略包括服务质量QoS规则，所述QoS规则用于停止上行数据流；或者，
    所述第三受限服务策略包括QoS配置文件，所述QoS配置文件用于停止上行数据流；或者，
    所述第四受限服务策略包括QoS信息，所述QoS信息用于限制下行数据流。
  28. 根据权利要求26或27所述的通信设备，其特征在于，所述接收单元，具体用于：
    接收来自策略控制功能PCF、统一数据管理UDM或接入和移动性管理功能AMF的所述终端的标识和所述第一受限服务策略。
  29. 根据权利要求28所述的通信设备，其特征在于，
    所述接收单元，还用于接收来自AMF的所述终端的标识和指示信息，所述指示信息用于指示所述终端异常或所述终端的异常类型；
    所述发送单元，还用于向所述PCF发送所述终端的标识和所述指示信息。
  30. 一种通信设备，其特征在于，包括：
    接收单元，用于接收来自策略控制功能PCF的终端的标识和第一受限服务策略，所述第一受限服务策略用于为所述终端提供受限服务；
    发送单元，用于根据所述第一受限服务策略，向所述终端发送第二受限服务策略，所述第二受限服务策略用于停止所述终端的上行数据流；或，根据所述第一受限服务策略，向接入网设备发送所述终端的标识和第三受限服务策略，所述第三受限服务策略用于停止所述终端的上行数据流。
  31. 根据权利要求30所述的通信设备，其特征在于，
    所述第二受限服务策略包括指示信息，所述指示信息用于指示更新或修改所述终端的终端路由选择策略URSP的门限值为第一值，所述第一值用于停止上行数据流；或者，
    所述第三受限服务策略包括服务质量QoS配置文件，所述QOS配置文件用于停止上行数据流。
  32. 一种通信设备，其特征在于，包括：
    确定单元，用于确定终端异常；
    发送单元，用于向策略控制功能PCF发送所述终端的标识和指示信息，所述指示信息用于指示所述终端异常或所述终端的异常类型。
  33. 根据权利要求32所述的通信设备，其特征在于，所述确定单元，具体用于：
    根据所述终端的流量信息确定所述终端异常，所述流量信息包括上行流量信息和/或下行流量信息。
  34. 根据权利要求32或33所述的通信设备，其特征在于，所述异常类型包括以下任意一种：
    上行流量异常；
    下行流量异常；
    上行流量异常和下行流量异常。
  35. 根据权利要求32-34中任一项所述的通信设备，其特征在于，所述通信设备为网络数据分析功能NWDAF或应用功能AF。
  36. 一种通信设备，其特征在于，包括：
    接收单元，用于接收来自应用功能AF的终端的标识和第一受限服务策略，所述第一受限服务策略用于为所述终端提供受限服务；
    发送单元，用于向接入和移动性管理功能AMF或会话管理功能SMF发送所述终端的标识和所述第一受限服务策略。
  37. 根据权利要求36所述的通信设备，其特征在于，所述受限服务包括以下任意一种：
    停止上行数据流；
    限制下行数据流；
    停止上行数据流和限制下行数据流。
  38. 一种通信设备，其特征在于，包括：
    确定单元，用于确定终端异常和所述异常对应的受限服务策略，所述异常对应的受限服务策略用于为所述终端提供受限服务；
    发送单元，用于向统一数据管理UDM发送所述终端的标识和所述确定单元确定出的所述异常对应的受限服务策略。
  39. 根据权利要求38所述的通信设备，其特征在于，所述确定单元，具体用于：
    根据所述终端的流量信息确定所述终端异常，所述流量信息包括上行流量信息和/或下行流量信息。
  40. 根据权利要求38或39所述的通信设备，其特征在于，所述受限服务包括以下任意一种：
    停止上行数据流；
    限制下行数据流；
    停止上行数据流和限制下行数据流。
  41. 一种通信系统，其特征在于，包括：策略控制功能PCF和会话管理功能SMF：
    所述PCF，用于接收终端的标识和指示信息，根据所述指示信息，发送所述终端的标识和第一受限服务策略，所述指示信息用于指示所述终端异常或所述终端的异常类型，所述第一受限服务策略用于为所述终端提供受限服务；
    所述SMF，用于接收所述终端的标识和所述第一受限服务策略，并根据所述第一受限服务策略，向通信设备发送所述通信设备对应的所述终端的受限服务策略。
  42. 根据权利要求41所述的通信系统，其特征在于，所述通信系统还包括：第一网元；
    所述第一网元，用于确定所述终端异常，向所述PCF发送所述终端的标识和所述指示信息。
  43. 根据权利要求42所述的通信系统，其特征在于，所述第一网元为网络数据分析功能NWDAF或应用功能AF。
  44. 根据权利要求41-43中任一项所述的通信系统，其特征在于，所述SMF用于根据所述第一受限服务策略，向通信设备发送所述终端的受限服务策略，包括：
    当所述第一受限服务策略用于停止所述终端的上行数据流时，所述SMF用于向所述终端发送第二受限服务策略，所述第二受限服务策略用于停止所述终端的上行数据流；或者，
    当所述第一受限服务策略用于停止所述终端的上行数据流时，所述SMF用于向接入网设备发送所述终端的标识和第三受限服务策略，所述第三受限服务策略用于停止所述终端的上行数据流；或者，
    当所述第一受限服务策略用于限制所述终端的下行数据流时，所述SMF用于向用户面功能UPF发送所述终端的标识和第四受限服务策略，所述第四受限服务策略用于限制所述终端的下行数据流；或者，
    当所述第一受限服务策略用于停止所述终端的上行数据流，并限制所述终端的下行数据流时，所述SMF用于向所述终端发送第二受限服务策略或向接入网设备发送所述终端的标识和第三受限服务策略，并向UPF发送所述终端的标识和第四受限服务策略，所述第二受限服务策略用于停止所述终端的上行数据流，所述第三受限服务策略用于停止所述终端的上行数据流，所述第四受限服务策略用于限制所述终端的下行数据流。
  45. 根据权利要求44所述的通信系统，其特征在于，当所述第一受限服务策略用于停止所述终端的上行数据流时，所述通信系统还包括：所述终端；
    所述终端，用于接收所述第二受限服务策略。
  46. 一种通信系统，其特征在于，包括：第一网元和策略控制功能PCF；
    所述第一网元，用于确定终端异常，向所述PCF发送所述终端的标识和指示信息，所述指示信息用于指示所述终端异常或所述终端的异常类型；
    所述PCF，用于接收所述终端的标识和所述指示信息，根据所述指示信息，发送所述终端的标识和第一受限服务策略，所述第一受限服务策略用于为所述终端提供受限服务。
  47. 根据权利要求46所述的通信系统，其特征在于，所述第一网元为网络数据分析功能NWDAF或应用功能AF。
  48. 根据权利要求46或47所述的通信系统，其特征在于，所述第一网元还用于：
    根据所述终端的流量信息确定所述终端异常，所述流量信息包括上行流量信息和/或下行流量信息。
  49. 根据权利要求46-48中任一项所述的通信系统，其特征在于，所述受限服务包括以下任意一种：
    停止上行数据流；
    限制下行数据流；
    停止上行数据流和限制下行数据流。
PCT/CN2019/091145 2018-06-13 2019-06-13 一种受限服务的提供方法及通信设备 Ceased WO2019238097A1 (zh)

Priority Applications (4)

Application Number Priority Date Filing Date Title
EP19819529.9A EP3800927B1 (en) 2018-06-13 2019-06-13 Restricted service based on exception type of a terminal
BR112020025388-0A BR112020025388A2 (pt) 2018-06-13 2019-06-13 Método para fornecer serviço restrito, dispositivo de comunicações, sistema de comunicações e meio de armazenamento legível por computador
US17/120,720 US11848963B2 (en) 2018-06-13 2020-12-14 Method for providing restricted service, and communications device
US18/517,924 US12483564B2 (en) 2018-06-13 2023-11-22 Method for providing restricted service, and communications device

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN201810627352.8A CN110602735B (zh) 2018-06-13 2018-06-13 一种受限服务的提供方法及通信设备
CN201810627352.8 2018-06-13

Related Child Applications (1)

Application Number Title Priority Date Filing Date
US17/120,720 Continuation US11848963B2 (en) 2018-06-13 2020-12-14 Method for providing restricted service, and communications device

Publications (1)

Publication Number Publication Date
WO2019238097A1 true WO2019238097A1 (zh) 2019-12-19

Family

ID=68841886

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2019/091145 Ceased WO2019238097A1 (zh) 2018-06-13 2019-06-13 一种受限服务的提供方法及通信设备

Country Status (5)

Country Link
US (2) US11848963B2 (zh)
EP (1) EP3800927B1 (zh)
CN (1) CN110602735B (zh)
BR (1) BR112020025388A2 (zh)
WO (1) WO2019238097A1 (zh)

Families Citing this family (13)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN110602735B (zh) * 2018-06-13 2021-06-29 华为技术有限公司 一种受限服务的提供方法及通信设备
CN113206814B (zh) * 2020-01-31 2022-11-18 华为技术有限公司 一种网络事件处理方法、装置及可读存储介质
CN117395694A (zh) * 2020-05-22 2024-01-12 华为技术有限公司 一种通信方法、装置及系统
CN114079992B (zh) * 2020-08-13 2024-08-02 阿里巴巴集团控股有限公司 网络切换方法、用户设备、网络实体及存储介质
CN114531681A (zh) * 2020-10-30 2022-05-24 华为技术有限公司 一种异常终端控制方法及装置
CN112804716B (zh) * 2020-12-29 2023-04-28 联想未来通信科技(重庆)有限公司 一种数据限值的配置方法、装置及存储介质
WO2023280369A1 (en) * 2021-07-05 2023-01-12 Telefonaktiebolaget Lm Ericsson (Publ) Authorization of a user equipment to access a resource
CN116208306A (zh) * 2021-11-30 2023-06-02 中兴通讯股份有限公司 异常信令的管控方法、装置、电子设备和存储介质
US12432244B2 (en) * 2022-03-24 2025-09-30 At&T Intellectual Property I, L.P. Home gateway monitoring for vulnerable home internet of things devices
CN117354804A (zh) * 2022-06-28 2024-01-05 华为技术有限公司 一种通信方法及装置
US12689905B2 (en) 2022-07-29 2026-07-21 Cisco Technology, Inc. Trust based continuous 5G service assessment
CN116918318A (zh) * 2023-05-30 2023-10-20 北京小米移动软件有限公司 通信方法、装置、介质、通信设备及通信系统
WO2026102023A1 (en) * 2024-11-05 2026-05-15 Cisco Technology, Inc. Dynamic qos profiles signaling

Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN102457938A (zh) * 2010-10-18 2012-05-16 中兴通讯股份有限公司 终端接入限制的方法及系统
CN102893640A (zh) * 2010-03-15 2013-01-23 泰克莱克股份有限公司 用于在策略和计费规则功能与服务节点之间传输策略信息的方法、系统和计算机可读介质
CN105163335A (zh) * 2015-07-31 2015-12-16 腾讯科技（深圳）有限公司 一种网络接入管理方法、服务器、移动终端以及系统
CN106028356A (zh) * 2016-07-05 2016-10-12 上海斐讯数据通信技术有限公司 无线接入设备处理方法及系统

Family Cites Families (12)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US9288078B2 (en) 2005-03-25 2016-03-15 Qualcomm Incorporated Apparatus and methods for managing content exchange on a wireless device
US8873753B2 (en) * 2012-08-27 2014-10-28 Verizon Patent And Licensing Inc. Analysis of network operation
CN102882712B (zh) * 2012-09-17 2019-02-19 中兴通讯股份有限公司 网络策略的控制方法、装置及系统
CN102868444B (zh) * 2012-10-10 2015-06-17 刘俊 无源光网络的通信数据提取装置和提取方法
WO2015133754A1 (ko) 2014-03-07 2015-09-11 엘지전자 주식회사 무선 통신 시스템에서 qos 관리 방법 및 장치
US10070461B2 (en) 2015-05-15 2018-09-04 Mediatek Inc. QoS provisioning for LTE-WLAN aggregation
US10237795B2 (en) 2015-10-11 2019-03-19 Qualcomm Incorporated Evolved packet data gateway (EPDG) reselection
CN105721506B (zh) * 2016-04-19 2021-03-16 北京小米移动软件有限公司 用于账号防盗的方法、装置及系统
CN106331184B (zh) * 2016-12-01 2020-01-31 网宿科技股份有限公司 基于互联网的大数据分发方法和分发平台
CN110602735B (zh) * 2018-06-13 2021-06-29 华为技术有限公司 一种受限服务的提供方法及通信设备
EP4009731B1 (en) * 2018-12-28 2025-03-26 Ofinno, LLC Restrict services and policy control for always-on pdu session
US11729737B2 (en) * 2020-02-11 2023-08-15 Nokia Technologies Oy Methods, apparatuses, and computer program products for handling emergency services in private networks

Patent Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN102893640A (zh) * 2010-03-15 2013-01-23 泰克莱克股份有限公司 用于在策略和计费规则功能与服务节点之间传输策略信息的方法、系统和计算机可读介质
CN102457938A (zh) * 2010-10-18 2012-05-16 中兴通讯股份有限公司 终端接入限制的方法及系统
CN105163335A (zh) * 2015-07-31 2015-12-16 腾讯科技（深圳）有限公司 一种网络接入管理方法、服务器、移动终端以及系统
CN106028356A (zh) * 2016-07-05 2016-10-12 上海斐讯数据通信技术有限公司 无线接入设备处理方法及系统

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
See also references of EP3800927A4

Also Published As

Publication number Publication date
CN110602735A (zh) 2019-12-20
EP3800927A4 (en) 2021-12-08
EP3800927A1 (en) 2021-04-07
US20210099493A1 (en) 2021-04-01
US12483564B2 (en) 2025-11-25
CN110602735B (zh) 2021-06-29
US11848963B2 (en) 2023-12-19
US20240089299A1 (en) 2024-03-14
EP3800927B1 (en) 2023-06-07
BR112020025388A2 (pt) 2021-03-09

Similar Documents

Publication Publication Date Title
US12483564B2 (en) Method for providing restricted service, and communications device
EP3981190B1 (en) Method and apparatus for enforcement of maximum number of protocol data unit sessions per network slice in a communication system
CN110662270B (zh) 通信方法及装置
US11871330B2 (en) Transparent session migration between user plane functions
CN113906783B (zh) 通信方法、装置及系统
CN111052787A (zh) 基于5g环境中的利用水平的功能选择
WO2018082602A1 (zh) 切换方法及装置
US10362632B2 (en) Architecture for radio access network and evolved packet core
WO2018166371A1 (zh) 服务质量控制方法及其装置、smf、upf、ue、pcf及an
CN113115299B (zh) 一种ursp规则更新方法及装置
CN115244991B (zh) 通信方法、装置及系统
WO2021139696A1 (zh) 一种报告信息的发送方法、装置及系统
WO2020256742A1 (en) Method and apparatus for admission control of sessions based on priority
CN109819477B (zh) 一种处理请求的方法以及相应实体
WO2024032603A1 (zh) 一种通信方法及装置
CN115348665A (zh) 一种通信方法、设备及系统
WO2020177632A1 (zh) 一种安全保护方法及装置
CN108881018B (zh) 用于在diameter信令路由器处路由diameter消息的方法、系统及装置
WO2019149106A1 (zh) 一种服务质量QoS控制方法及相关设备
CN116489785A (zh) 感知节点确定方法、装置、计算机设备和存储介质
WO2021227600A1 (zh) 一种网络切片控制方法及通信装置
KR102318746B1 (ko) 가상 id를 이용하여 복수의 pdu 세션들을 처리하는 방법 및 상기 방법을 수행하는 smf
WO2021218244A1 (zh) 通信方法、装置及系统
WO2024222041A1 (zh) 一种通信方法及装置

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 19819529

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase

Ref country code: DE

REG Reference to national code

Ref country code: BR

Ref legal event code: B01A

Ref document number: 112020025388

Country of ref document: BR

ENP Entry into the national phase

Ref document number: 2019819529

Country of ref document: EP

Effective date: 20201229

ENP Entry into the national phase

Ref document number: 112020025388

Country of ref document: BR

Kind code of ref document: A2

Effective date: 20201211