Method and device for determining terminal behavior analysis

1. A method for determining analytics on User Equipment, UE, behavior, the method comprising:

receiving, by a network function entity, target information of a UE;

sending an indication to a Network Data Analytic Function, NWDAF, for requesting the NWDAF to provide abnormal behavior analytics for the UE according to the indication when the network function entity determines to perform the abnormal behavior analytics for the UE according to the target information; and/or sending a notification to a Policy Control Function, PCF, for triggering the PCF to perform policy control for an abnormal behavior of the UE, which then triggers the PCF to request the NWDAF to provide abnormal behavior analytics for the UE when the network function entity establishes or modifies mobility management or session management policy association towards the PCF entity, when the network function entity determines to perform the policy control for the abnormal behavior of the UE according to the target information;

wherein the abnormal behavior analytics comprises mobility related abnormal behavior analytics or PDU session related abnormal behavior analytics.

2. The method according to claim 1 , wherein determining, by the network function entity, to perform the abnormal behavior analytics for the UE and/or perform the policy control for the abnormal behavior of the UE according to the received target information of the UE, comprises:

determining, by the network function entity, to perform the abnormal behavior analytics for the UE and/or perform the policy control for the abnormal behavior of the UE according to received subscription of the UE when the target information is the subscription; or

determining, by the network function entity, to perform the abnormal behavior analytics for the UE and/or perform the policy control for the abnormal behavior of the UE according to received monitoring event type of the UE when the target information is a monitoring event; or

determining, by the network function entity, to perform the abnormal behavior analytics for the UE and/or perform the policy control for the abnormal behavior of the UE according to received UE capability when the target information is the UE capability.

3. The method according to claim 1 , wherein requesting the NWDAF to provide abnormal behavior analytics for the UE, comprises:

requesting, by an Access and mobility Management Function, AMF, entity, the NWDAF to provide mobility related abnormal behavior analytics for the UE when the network function entity is the AMF entity; or

requesting, by a Session Management Function, SMF, entity, the NWDAF to provide PDU session related abnormal behavior analytics for the UE when the network function entity is the SMF entity.

4. The method according to claim 1 , wherein triggering the PCF to perform the policy control for the abnormal behavior, which then triggers the PCF to request the NWDAF to provide the abnormal behavior analytics for the UE when the network function entity establishes or modifies mobility management or session management policy association towards the PCF entity, comprises:

triggering, by an AMF entity, the PCF entity to request the NWDAF to provide mobility related abnormal behavior analytics for the UE when the network function entity is the AMF entity; or

triggering, by an SMF entity, the PCF entity to request the NWDAF to provide PDU session related abnormal behavior analytics for the UE when the network function entity is the SMF entity.

5. A method for determining analytics on User Equipment, UE, behavior, the method comprising:

receiving, by a Network Data Analytic Function, NWDAF, an indication sent by a network function entity and/or sent by a Policy Control Function, PCF, triggered by the network function entity;

providing, by the NWDAF, corresponding abnormal behavior analytics for a UE to the network function entity and/or the PCF entity according to the indication;

wherein the abnormal behavior analytics comprises mobility related abnormal behavior analytics or PDU session related abnormal behavior analytics.

6. The method according to claim 5 , wherein providing, by the NWDAF, abnormal behavior analytics for the UE to the network function entity and/or the PCF entity according to the indication, comprises:

providing, by the NWDAF, mobility related abnormal behavior analytics for the UE to an Access and mobility Management Function, AMF, entity and/or the PCF entity when the network function entity is the AMF entity; or

providing, by the NWDAF, PDU session related abnormal behavior analytics for the UE to a Session Management Function, SMF, entity and/or the PCF entity when the network function entity is the SMF entity.

7. A network function entity for determining analytics on User Equipment, UE, behavior, the network function entity comprising: a processor, a memory and a transceiver; wherein the processor is configured to read a program in the memory and perform:

receiving target information of a UE;

sending an indication to a Network Data Analytic Function, NWDAF, for requesting the NWDAF to provide abnormal behavior analytics for the UE according to the indication in response to determining to perform the abnormal behavior analytics for the UE according to the target information; and/or sending a notification to a Policy Control Function, PCF, for triggering the PCF to perform policy control for an abnormal behavior of the UE, which then triggers the PCF to request the NWDAF to provide abnormal behavior analytics for the UE when the network function entity establishes or modifies mobility management or session management policy association towards the PCF entity, in response to determining to perform the policy control for the abnormal behavior of the UE according to the target information;

wherein the abnormal behavior analytics comprises mobility related abnormal behavior analytics or PDU session related abnormal behavior analytics.

8. The network function entity according to claim 7 , wherein the processor is configured to:

determine to perform the abnormal behavior analytics for the UE and/or perform the policy control for the abnormal behavior of the UE according to received subscription of the UE when the target information is the subscription; or

determine to perform the abnormal behavior analytics for the UE and/or perform the policy control for the abnormal behavior of the UE according to received monitoring event type of the UE when the target information is a monitoring event; or

determine to perform the abnormal behavior analytics for the UE and/or perform the policy control for the abnormal behavior of the UE according to received UE capability when the target information is the UE capability.

9. The network function entity according to claim 7 , wherein the processor is configured to:

request the NWDAF to provide mobility related abnormal behavior analytics for the UE when the network function entity is an Access and mobility Management Function, AMF, entity; or

request the NWDAF to provide PDU session related abnormal behavior analytics for the UE when the network function entity is a Session Management Function, SMF, entity.

10. The network function entity according to claim 7 , wherein the processor is configured to:

trigger the PCF entity to request the NWDAF to provide mobility related abnormal behavior analytics for the UE when the network function entity is an AMF entity; or

trigger the PCF entity to request the NWDAF to provide PDU session related abnormal behavior analytics for the UE when the network function entity is an SMF entity.

11. A non-transitory computer storage medium storing a computer program thereon, wherein the program implements operations when executed by a processor, the operations comprising:

receiving target information of a UE;

sending an indication to a Network Data Analytic Function, NWDAF, or requesting the NWDAF to provide abnormal behavior analytics for the UE according to the indication in response to determining to perform the abnormal behavior analytics for the UE according to the target information; and/or sending a notification to a Policy Control Function, PCF, for triggering the PCF to perform policy control for an abnormal behavior of the UE, which then triggers the PCF to request the NWDAF to provide abnormal behavior analytics for the UE when the network function entity establishes or modifies mobility management or session management policy association towards the PCF entity, in response to determining to perform the policy control for the abnormal behavior of the UE according to the target information;

wherein the abnormal behavior analytics comprises mobility related abnormal behavior analytics or PDU session related abnormal behavior analytics.

12. The non-transitory computer storage medium according to claim 11 , wherein determining to perform the abnormal behavior analytics for the UE and/or perform the policy control for the abnormal behavior of the UE according to the received target information of the UE, comprises:

determining to perform the abnormal behavior analytics for the UE and/or perform the policy control for the abnormal behavior of the UE according to received subscription of the UE when the target information is the subscription; or

determining to perform the abnormal behavior analytics for the UE and/or perform the policy control for the abnormal behavior of the UE according to received monitoring event type of the UE when the target information is a monitoring event; or

determining to perform the abnormal behavior analytics for the UE and/or perform the policy control for the abnormal behavior of the UE according to received UE capability when the target information is the UE capability.

13. The non-transitory computer storage medium according to claim 11 , wherein requesting the NWDAF to provide abnormal behavior analytics for the UE, comprises:

requesting, by an Access and mobility Management Function, AMF, entity, the NWDAF to provide mobility related abnormal behavior analytics for the UE when a network function entity is the AMF entity; or

requesting, by a Session Management Function, SMF, entity, the NWDAF to provide PDU session related abnormal behavior analytics for the UE when the network function entity is the SMF entity.

14. The non-transitory computer storage medium according to claim 11 , wherein triggering the PCF to perform the policy control for the abnormal behavior, which then triggers the PCF to request the NWDAF to provide the abnormal behavior analytics for the UE when the network function entity establishes or modifies mobility management or session management policy association towards the PCF entity, comprises:

triggering, by an AMF entity, the PCF entity to request the NWDAF to provide mobility related abnormal behavior analytics for the UE when a network function entity is the AMF entity; or

triggering, by an SMF entity, the PCF entity to request the NWDAF to provide PDU session related abnormal behavior analytics for the UE when the network function entity is the SMF entity.