Abstract: A method at a first data collection coordination functional entity for coordinating, in a first area, a data and/or analytics collection related to at least one mobile terminal, the method comprising: determining, based on an obtained mobile terminal mobility event notification, that the at least one mobile terminal is no longer in the first area and/or no longer in a second area served by a first messaging framework adaptor functional entity; based thereon, identifying at least one of a second data collection coordination functional entity coordinating a data and/or analytics collection in a third area in which the at least one mobile terminal resides if it does not reside in the first area and a second messaging framework adaptor functional entity serving a fourth area in which the at least one mobile terminal resides if it does not reside in the second area; and based thereon, initiating a transfer or a setup of at least one of a respective data collection coordination functional entity context associated

Abstract: Systems, methods, apparatuses, and computer program products for supporting user consent management, tracking of user specific data and UE specific data requiring user consent, and distributing information about revocation of the user consent to involved network entities, are provided.

Abstract: Systems, methods, apparatuses, and computer program products for network data analytics profiling for a user equipment (UE) are provided. One method may include obtaining data related to a UE and generating analytics for the UE based on the obtained data, generating a UE analytics profile for the UE using at least one of the obtained data and/or the analytics generated for the UE, and storing the UE analytics profile in a repository. The method may also include receiving, from a network node in the visited network, a request to retrieve the UE analytics profile for the visited network. The method may then include generating the visited network UE analytics profile, and providing the visited network UE analytics profile to the network node in the visited network.

Abstract: The disclosure relates to an apparatus comprising at least one processor and at least one memory including computer code for one or more programs, the at least one memory and the computer code configured, with the at least one processor, to cause the apparatus at least to: determine (700) whether at least one reporting criterion is met; and trigger (702) the provision of a report to a central node when the at least one reporting criterion is met, wherein the report comprises an indication that at least one reporting criterion is met and/or an indication of the at least one reporting criterion being met.

Abstract: The disclosure relates to an apparatus comprising at least one processor and at least one memory including computer code for one or more programs, the at least one memory and the computer code configured, with the at least one processor, to cause the apparatus at least to: receive one or more rules for storing data or analytics in a storage; determine a storage approach based on the one or more rules for storing data or analytics in the storage; and track data or analytics in the storage and determine whether to store, update or remove all or a portion of the data or analytics in the storage based on the storage approach.

Abstract: Systems, methods, apparatuses, and computer program products for network data analytics function (NWDAF) accuracy enhancement. A method may include selecting a network function that can provide accuracy information. The method may also include sending a request to the network function for one or more accuracy reports for one or more analytics predictions. The method may further include receiving the one or more accuracy reports from the network function. In addition, the method may include managing the one or more analytics predictions based on the one or more accuracy reports.

Abstract: The present disclosure provides measures for analytics control. Such measures exemplarily comprise receiving, from a network entity consuming analytics, an analytics demand including an input data identifier indicative of input data on the basis of which said analytics are to be performed, obtaining the input data based on the input data identifier, performing said analytics on the basis of said input data, and providing, to said network entity consuming analytics, a result of said analytics.

Abstract: The disclosure relates to an apparatus comprising at least one processor and at least one memory including computer code for one or more programs, the at least one memory and the computer code configured, with the at least one processor, to cause the apparatus at least to: receive (500), from a model provider function, a user equipment identifier and a model identifier; generate (502) an access key to allow a user equipment identified by the user equipment identifier to access a model identified by the model identifier; store (504) the user equipment identifier and the model identifier along the access key to allow a user equipment identified by the user equipment identifier to access a model identified by the model identifier; and send (506), to the user equipment, the access key.

Abstract: Example embodiments of the present disclosure relate to access token revocation in security management. In an example method, in response to providing, to a second device, an access token for the second device to access a NF service from a third device, a first device stores a mapping indicating an association among the access token, the second device and the third device. In response to determining that the second device is abnormal, the first device sends, to at least one target device based on the mapping, an indication of revoking the access token. In this way, at least one target device associated with revoked access token can be informed and potential damage caused by the abnormal NF can be eliminated.

Abstract: Methods, systems, apparatuses, and computer program products are provided for authorized machine learning model retrieval for a communications network. In this regard, an access token request for one or more machine learning models related to a communications network is received from a network function service consumer (NFc). The access token request includes information to identify the one or more machine learning models. The NFc is then authorized with respect to the one or more machine learning models based on the information included in the access token request. Additionally, enhanced an access token for retrieving the one or more machine learning models is provided to the NFc based on valid authorization of the NFc with respect to the one or more machine learning models.

Abstract: An apparatus for use by a communication network element or communication network function configured to operate as an analytics entity and having an analytics logical function. The apparatus is caused to: receive a request, from a service consumer, for provision of a custom analytics service, process data retrieved from the request for determining whether a model for providing the requested custom analytics service is prepared, and in case the determination is negative, determine and select a model training entity having a model training logical function which is able to create a model for custom analytics and has access to data required for the requested custom analytics service, request, from the selected model training entity, to obtain a trained model capable of providing the requested custom analytics service and forward the information specifying the custom analytics service to the selected model training entity.

Abstract: The disclosure relates to an apparatus comprising at least one processor and at least one memory including computer code for one or more programs, the at least one memory and the computer code configured, with the at least one processor, to cause the apparatus at least to: receive (500), from a model provider function, a user equipment identifier and a model identifier; generate (502) an access key to allow a user equipment identified by the user equipment identifier to access a model identified by the model identifier; store (504) the user equipment identifier and the model identifier along the access key to allow a user equipment identified by the user equipment identifier to access a model identified by the model identifier; and send (506), to the user equipment, the access key.

Abstract: There is provided an apparatus, method, and computer program for causing an apparatus to perform: mapping an energy behaviour category to a user equipment, wherein the energy behaviour category is an energy behaviour category of a plurality of energy behaviour categories defined by a network operator that categorizes how energy efficiently an apparatus is behaving; and providing an indication of the mapped energy behaviour category to a requesting network function.

Abstract: Techniques for detection of abnormal network function service usage in a communication network are disclosed. For example, a method comprises obtaining, at a first network entity, one or more service requests previously received by a second network entity for a service which the second network entity is configured to provide in a communication network. The method further comprises obtaining, at the first network entity, an analysis of the one or more service requests previously received by the second network entity for the service. The method further comprises obtaining, at the first network entity, an expected service usage for the service from the analysis of the one or more service requests. The method may then compare incoming service requests to the expected service usage to detect a given condition, e.g., an abnormal condition, so that at least one action can be taken.

Abstract: Techniques for data management in a network entity to authorize data consumers in a communication network are disclosed. For example, a method comprises receiving, at a network entity of a communication network, data generated by a data producer in the communication network, and storing, at the network entity, the data generated by the data producer. The stored data has metadata, associated with the data producer, appended thereto.

Abstract: According to an example aspect of the present invention, there is provided an apparatus comprising means for receiving from a requesting network function, by a network repository function, an access token request, wherein the access token request is related to a network function consumer requesting access to a service provided by a network function producer and comprises an identity of a vendor of the network function consumer requesting access to the service, means for verifying by the network repository function, based at least on the identity of the vendor of the network function consumer, that the network function consumer is allowed to access the service and means for transmitting to the requesting network function, by the network repository function, an access token upon successful verification, wherein the access token generated and signed by the network repository function comprises the identity of the vendor of the network function consumer and an identity of the vendor of the network function produc

Abstract: A method at a first data collection coordination functional entity for coordinating, in a first area, a data and/or analytics collection related to at least one mobile terminal, the method comprising: determining, based on an obtained mobile terminal mobility event notification, that the at least one mobile terminal is no longer in the first area and/or no longer in a second area served by a first messaging framework adaptor functional entity; based thereon, identifying at least one of a second data collection coordination functional entity coordinating a data and/or analytics collection in a third area in which the at least one mobile terminal resides if it does not reside in the first area and a second messaging framework adaptor functional entity serving a fourth area in which the at least one mobile terminal resides if it does not reside in the second area; and based thereon, initiating a transfer or a setup of at least one of a respective data collection coordination functional entity context associated

Abstract: A trusted rating function in a communication network system obtains at least one verification information associated with at least one of an analytics function identifier, a service identifier and a service consumer identifier, receives, from a service consumer, rating information related to at least one rated service and consumer verification information associated with the service consumer, accepts the rating information based on a comparison between the obtained verification information and the consumer verification information, and updates a rating stored for the rated service based on the rating information.

Abstract: The disclosure relates to an apparatus comprising at least one processor and at least one memory including computer code for one or more programs, the at least one memory and the computer code configured, with the at least one processor, to cause the apparatus at least to: determine (700) whether at least one reporting criterion is met; and trigger (702) the provision of a report to a central node when the at least one reporting criterion is met, wherein the report comprises an indication that at least one reporting criterion is met and/or an indication of the at least one reporting criterion being met.

Abstract: According to an example aspect of the present invention, there is provided an apparatus comprising means for receiving, by a network function configured to provide centralized user consent authorization in a cellular communication system, a user consent authorization request from a logical network entity, wherein the user consent authorization request comprises an identity of at least one user equipment whose user consent is requested by the logical network entity, the logical network entity being a network function service consumer or an application function, means for retrieving user consent information concerning the at least one user equipment whose user consent is requested by the logical network entity, wherein said user consent information indicates individually whether the logical network entity is authorized to access data related to each of the at least one user equipment, means for determining, based on said user consent information, whether the logical network entity is authorized to access data r