Service provision method, device, and storage medium
Embodiments of the present disclosure provide a service provision method, a device, and a storage medium. In the embodiments of the present disclosure, a network management service user (such as a third-party server) can easily and quickly acquire a service related to a network management capability by performing capability exposure on a network management system in an operator network; further, in the process of exposing the network management capability, a permission access policy is added, so that the network management service user can only use a network management capability service with an access permission, which is favorable for reasonably exposing the network management service capability, so as to safely and efficiently provide the network management capability service, and improve the utilization efficiency of the network management capability in the operator network.
1 . A method comprising:
receiving a service request message sent by a network management service user, the service request message comprising a service parameter to request a target service from a network management system, the service parameter including at least one of a network KPI parameter and a deployment mode of a User Plane Function (UPF);
determining that a permission access policy corresponding to the network management service user has an access permission adapted to the target service;
providing, according to the service parameter, the target service to the network management service user, the target service comprising a network management capability service, the network management capability service including network slice management capability service, the network slice management capability service including a network slice template service based on a default slice template provided by an operator and a customized slice template triggered and generated by a third-party server;
establishing an association relationship among an identifier of the customized slice template, an identifier of the third-party server, and an identifier of a customization manufacturer that requests the customized slice template and maintaining the association relationship; and
maintaining a default template library that stores the default slice template and a customized template library that stores the customized slice template.
2 . The method according to claim 1 , further comprising:
returning a response message to the network management service user.
3 . The method according to claim 2 , wherein the response message comprises information of whether the network management system is capable to successfully provide the target service for the network management service user.
4 . The method according to claim 1 , wherein the permission access policy comprises a first meta-data collection and first permission access information.
5 . The method according to claim 4 , wherein the first meta-data collection comprises an identifier of a network management service provider, a type of an information object class (IOC), and at least one of a type and an identifier of the network management service user.
6 . The method according to claim 5 , wherein the first permission access information is permission access information corresponding to the type of the IOC.
7 . The method according to claim 5 , wherein:
the type of the IOC is a network slice capability;
the network management system is a network slice management system; and
the network management service provider provides a communication service management function (CSMF), a network slice management function (NSMF), or a network slice subnet management function (NSSMF) in the network slice management system.
8 . The method according to claim 5 , wherein:
the first permission access information is a first bitmap; and
the first bitmap comprises at least one attribute of the type of the IOC and at least one permission type corresponding to each attribute.
9 . The method according to claim 8 , wherein a value of a bit in the first bitmap represents whether the network management service user obtains an access permission under a permission type corresponding to the bit on an attribute corresponding to the bit.
10 . The method according to claim 9 , wherein:
a composite attribute is present in the at least one attribute; and
the permission access policy further comprises a second meta-data collection and second permission access information;
wherein the second meta-data collection comprises a type of the composite attribute, and the second permission access information is permission access information corresponding to the composite attribute.
11 . The method according to claim 10 , wherein:
the second permission access information is a second bitmap; and
the second bitmap comprises at least one sub-attribute contained in the composite attribute and at least one permission type corresponding to each sub-attribute.
12 . The method according to claim 11 , wherein a value of a bit in the second bitmap represents whether the network management service user obtains an access permission under a permission type corresponding to the bit on a sub-attribute corresponding to the bit.
13 . The method according to claim 12 , wherein:
the permission access policy further comprises a third meta-data collection and third permission access information; and
the third meta-data collection comprises an identifier of the sub-attribute, and the third permission access information is permission access information of a network management capability service that the sub-attribute can expose.
14 . The method according to claim 13 , wherein:
the third permission access information includes a third bitmap; and
the third bitmap comprises the sub-attribute and at least one network management capability service that the sub-attribute can expose.
15 . The method according to claim 14 , wherein a value of a bit in the third bitmap represents whether the network management service user obtains an access permission of the network management capability service corresponding to the bit on the sub-attribute.
16 . The method according to claim 1 , further comprising configuring, according to signing information between the network management service user and a network management service provider, the permission access policy corresponding to the network management service user.
17 . The method according to claim 1 , wherein the network management capability service further comprises:
a wireless access network management capability service; or
a core network management capability service.
18 . The method according to claim 1 , wherein the network slice management capability service further comprises a network slice capability service.
19 . A system comprising: one or more processors; and one or more memories storing thereon computer-readable instructions that, when executed by the one or more processors, cause the one or more processors to perform acts comprising:
receiving a service request message sent by a network management service user, the service request message comprising a service parameter to request a target service from a network management system, the service parameter including at least one of a network KPI parameter and a deployment mode of a User Plane Function (UPF);
determining that a permission access policy corresponding to the network management service user has an access permission adapted to the target service; and
providing, according to the service parameter, the target service to the network management service user, the target service comprising a network management capability service, the network management capability service including network slice management capability service, the network slice management capability service including a network slice template service based on a default slice template provided by an operator and a customized slice template triggered and generated by a third-party server from a customization manufacturer that requests the customized slice template, an identifier of the customized slice template including an identification field of the customization manufacturer, the identification field of the customization manufacturer including an identifier of the third-party server.
20 . One or more memories storing thereon computer-readable instructions that, when executed by one or more processors, cause the one or more processors to perform acts comprising:
receiving a service request message sent by a network management service user, the service request message comprising a service parameter to request a target service from a network management system, the service parameter including at least one of a network KPI parameter and a deployment mode of a User Plane Function (UPF);
determining that a permission access policy corresponding to the network management service user has an access permission adapted to the target service; and
providing, according to the service parameter, the target service to the network management service user, the target service comprising a network management capability service, the network management capability service including network slice management capability service, the network slice management capability service including a network slice template service based on a default slice template provided by an operator and a customized slice template triggered and generated by a third-party server, an identifier of the customized slice template carrying an identifier of the third-party server.