Information processing method and apparatus

Patent metadata

Field	Value
Publication number	US-12580919-B2
Application number	US-202218148013-A
Country	US
Kind code	B2
Filing date	Dec 29, 2022
Priority date	Jun 26, 2018
Publication date	Mar 17, 2026
Grant date	Mar 17, 2026

Abstract

An information processing method includes: obtaining, by a data analytics network element, terminal behavioral information of a plurality of terminals; determining, by the data analytics network element, network-side expected terminal behavioral information based on the terminal behavioral information; and sending, by the data analytics network element, the network-side expected terminal behavioral information to a user data management network element.

First claim

What is claimed is:

1 . A method comprising:
obtaining, by a data analytics network element, terminal behavioral information of a plurality of second terminals; determining, by the data analytics network element and based on the terminal behavioral information of the plurality of second terminals, expected terminal behavioral information; sending, by the data analytics network element and to a first core network element, the expected terminal behavioral information; receiving, by the first core network element, from the data analytics network element, the expected terminal behavioral information; sending, by the first core network element and to the data analytics network element, first terminal behavioral information of a first terminal based on the first core network element's determination from a comparison of the first terminal behavioral information of the first terminal to the received expected terminal behavioral information from the data analytics network element, wherein the first terminal behavioral information of the first terminal does not match the expected terminal behavioral information; receiving, by the data analytics network element and from the first core network element, the first terminal behavioral information of the first terminal; and determining, by the data analytics network element and based on the expected terminal behavioral information and the first terminal behavioral information, that the first terminal is abnormal and has an exception type, wherein the exception type of the first terminal comprises at least one of being incorrectly used or being hijacked.

2 . The method of claim 1 , wherein the expected terminal behavioral information comprises one or more of a stationary indication, a terminal moving trajectory, a periodic communication indicator, a communication duration, a communication period, or a scheduled communication time.

3 . The method of claim 1 , wherein either the first core network element is an access and mobility management function network element, or the first core network element is a session management function network element.

4 . The method of claim 1 , further comprising sending, by the data analytics network element and to a user data management network element, the expected terminal behavioral information, wherein the expected terminal behavioral information is configured to be used as user subscription data.

5 . The method of claim 1 , further comprising obtaining, by the data analytics network element and from a second core network element, second terminal behavioral information of the first terminal.

6 . The method of claim 5 , wherein determining that the first terminal is abnormal comprises determining, by the data analytics network element and based on the expected terminal behavioral information, the first terminal behavioral information of the first terminal, and the second terminal behavioral information of the first terminal, that the first terminal is abnormal.

7 . The method of claim 1 , further comprising determining, by the data analytics network element and based on the expected terminal behavioral information and the first terminal behavioral information, exception information of the first terminal, wherein the exception information of the first terminal comprises at least one of the exception type, an exception identifier, or an exception level.

8 . The method of claim 7 , further comprising sending, by the data analytics network element and to a network element, an analytics result, wherein the analytics result indicates the exception information of the first terminal.

9 . The method of claim 8 , further comprising terminating, by the network element and based on the exception information from the data analytics network element, network service for the first terminal.

10 . A communication system comprising:
a data analytics network element configured to: obtain terminal behavioral information of a plurality of second terminals; determine, based on the terminal behavioral information of the plurality of second terminals, expected terminal behavioral information; send the expected terminal behavioral information to a first core network element; receive, from the first core network element, first terminal behavioral information of a first terminal; and determine, based on the expected terminal behavioral information and the first terminal behavioral information, that the first terminal is abnormal and has an exception type, wherein the exception type of the first terminal comprises at least one of being incorrectly used or being hijacked; and the first core network element configured to: receive, from the data analytics network element, the expected terminal behavioral information; and send, to the data analytics network element, the first terminal behavioral information of the first terminal based on the first core network element's determination from a comparison of the first terminal behavioral information of the first terminal to the received expected terminal behavioral information from the data analytics network element, wherein the first terminal behavioral information of the first terminal does not match the expected terminal behavioral information.

11 . The communication system of claim 10 , wherein the expected terminal behavioral information comprises one or more of a stationary indication, a terminal moving trajectory, a periodic communication indicator, a communication duration, a communication period, or a scheduled communication time.

12 . The communication system of claim 10 , wherein the first core network element is either an access and mobility management function network element or a session management function network element.

13 . The communication system of claim 10 , wherein the data analytics network element is further configured to send, to a user data management network element, the expected terminal behavioral information, and wherein the expected terminal behavioral information is configured to be used as user subscription data.

14 . The communication system of claim 10 , wherein the data analytics network element is further configured to obtain, from a second core network element, second terminal behavioral information of the first terminal.

15 . The communication system of claim 14 , wherein the data analytics network element is configured to determine that the first terminal is abnormal by determining, based on the expected terminal behavioral information, the first terminal behavioral information of the first terminal, and the second terminal behavioral information of the first terminal, that the first terminal is abnormal.

16 . The communication system of claim 10 , wherein the data analytics network element is further configured to determine, based on the expected terminal behavioral information and the first terminal behavioral information, exception information of the first terminal, and wherein the exception information of the first terminal comprises at least one of the exception type, an exception identifier, or an exception level.

17 . The communication system of claim 16 , further comprising a network element, wherein the data analytics network element is further configured to send, to the network element, the exception information of the first terminal, and wherein the network element is configured to revive, from the data analytics network element, the exception information of the first terminal.

18 . The communication system of claim 17 , wherein the network element is further configured to terminate

Assignees

• Huawei Tech Co Ltd

Inventors

• Xin Yang
• Wu Xiaobo
• Sun Manli
• Zhu Fangyuan

Classifications

• H04L41/14 Primary

  Network analysis or design · CPC title

• H04W8/22

  Processing or transfer of terminal data, e.g. status or physical capabilities · CPC title

• H04W8/02

  Processing of mobility data, e.g. registration information at HLR [Home Location Register] or VLR [Visitor Location Register]; Transfer of mobility data, e.g. between HLR, VLR or external networks · CPC title

• H04M15/58

  based on statistics of usage or network monitoring · CPC title

• H04W24/00

  Supervisory, monitoring or testing arrangements · CPC title