Abstract: Embodiments of this application provide glasses and a wearable system. The glasses include a glasses frame and two temples connected to two sides of the glasses frame. The temple includes a shell and an inner cover. The inner cover is disposed on the shell to form an accommodation space, a main board is disposed in the accommodation space, and a wearing detection device is disposed on the main board. A detection electrode is disposed on an outer wall surface of the inner cover, and the detection electrode is connected to the main board. The detection electrode is configured to generate capacitive sensing between the detection electrode and a human body.

Abstract: Embodiments of this application disclose a trusted communication method. A core network device may detect, based on trusted policy information, whether a non-access stratum NAS message or user data that passes through the core network device is abnormal. When it is detected that the NAS message or the user data is abnormal, the NAS message or a service corresponding to the user data may be notified or blocked, and exception information notification signaling may be reported to a trusted control node (an independent network function entity, an existing control network element, or an existing management network element). In this way, the trusted control node can update the trusted policy information in a timely manner, or notify each network element to take a trusted protection operation. This effectively improves security of a communication system.

Abstract: The present embodiments provide a method for managing a hardware resource, a method for querying a location of a hardware resource, and a related apparatus. The method for managing a hardware resource includes receiving, by a virtualized infrastructure manager (VIM), a hardware resource allocation request message sent by a VNF management entity, where the hardware resource allocation request message is used to request the VIM to allocate a hardware resource to a virtual machine that runs a VNFC, and the hardware resource allocation request message includes location information of the hardware resource that the virtual machine requests to allocate. The method also includes allocating, by the VIM, the hardware resource at a corresponding location to the virtual machine according to the location information of the hardware resource.

Abstract: A security policy deployment method and apparatus are provided, and the method includes: when a lifecycle state of a virtualized network function VNF changes, generating, by a management network element, a security policy of the VNF, where the security policy of the VNF is used to perform access control on the VNF; and sending, by the management network element, the security policy of the VNF to a control device. The management network element is a network element configured to perform lifecycle management on the VNF. By using the method or apparatus provided in embodiments of this application, the security policy of the VNF can be adjusted in time when the lifecycle state of the VNF changes, thereby greatly reducing a possibility that a bug occurs in the security policy of the VNF because the VNF changes.

Abstract: A method, device, and system for data compression and decompression are provided. The method for data compression comprises, converting data to be transmitted within each period, from the time domain to the frequency domain, wherein, a default time length is set as a period; identifying weak power frequencies in the frequency domain data according to a set identification rule; weighting data transmitted on the identified weak power frequencies to obtain corresponding weighting information; converting other data converted to the frequency domain and the weighted data back to time domain; compressing the data converted back to the time domain; and transmitting, the compressed data along the weighting information.

Abstract: A method, device, and system for data compression and decompression are provided. The method for data compression comprises, converting data to be transmitted within each period, from the time domain to the frequency domain, wherein, a default time length is set as a period; identifying weak power frequencies in the frequency domain data according to a set identification rule; weighting data transmitted on the identified weak power frequencies to obtain corresponding weighting information; converting other data converted to the frequency domain and the weighted data back to time domain; compressing the data converted back to the time domain; and transmitting, the compressed data along the weighting information.

Abstract: The present embodiments provide a method for managing a hardware resource, a method for querying a location of a hardware resource, and a related apparatus. The method for managing a hardware resource includes receiving, by a virtualized infrastructure manager (VIM), a hardware resource allocation request message sent by a VNF management entity, where the hardware resource allocation request message is used to request the VIM to allocate a hardware resource to a virtual machine that runs a VNFC, and the hardware resource allocation request message includes location information of the hardware resource that the virtual machine requests to allocate. The method also includes allocating, by the VIM, the hardware resource at a corresponding location to the virtual machine according to the location information of the hardware resource.

Abstract: The present embodiments provide a method for managing a hardware resource, a method for querying a location of a hardware resource, and a related apparatus. The method for managing a hardware resource includes receiving, by a virtualized infrastructure manager (VIM), a hardware resource allocation request message sent by a VNF management entity, where the hardware resource allocation request message is used to request the VIM to allocate a hardware resource to a virtual machine that runs a VNFC, and the hardware resource allocation request message includes location information of the hardware resource that the virtual machine requests to allocate. The method also includes allocating, by the VIM, the hardware resource at a corresponding location to the virtual machine according to the location information of the hardware resource.

Abstract: Embodiments of the present invention disclose an identity authentication method and apparatus. The NFV system includes a VNF including a first virtual network function component VNFC and a second VNFC. The method includes: generating a public key and a private key of the first VNFC and a public key and a private key of the second VNFC; writing or sending the private key of the first VNFC and the public key of the second VNFC to the first VNFC; and writing or sending the public key of the first VNFC and the private key of the second VNFC to the second VNFC, where the public key and the private key of the first VNFC and the public key and the private key of the second VNFC are used for identity authentication of the first VNFC and the second VNFC.

Abstract: A security policy deployment method and apparatus are provided, and the method includes: when a lifecycle state of a virtualized network function VNF changes, generating, by a management network element, a security policy of the VNF, where the security policy of the VNF is used to perform access control on the VNF; and sending, by the management network element, the security policy of the VNF to a control device. The management network element is a network element configured to perform lifecycle management on the VNF. By using the method or apparatus provided in embodiments of this application, the security policy of the VNF can be adjusted in time when the lifecycle state of the VNF changes, thereby greatly reducing a possibility that a bug occurs in the security policy of the VNF because the VNF changes.

Abstract: Embodiments of the present invention provide a related entity, and a method for determining air interface resources consumed by a service. The related entity includes: a receiver, configured to receive, from a control plane entity, air interface connection information of a UE, and receive, from a data plane entity, service information of the UE, where the air interface connection information includes time points at which the UE establishes and releases an air interface connection, the service information includes time points at which the UE starts and stops transmitting data of a service, and the service includes a to-be-detected service; and a processor, configured to determine a target air interface connection set according to the air interface connection information and the service information, and determine air interface resource consumption information of the to-be-detected service according to the target air interface connection set.

Abstract: The present invention provides a flow control method and a device. The method includes: obtaining, by a gateway, a data packet of a user; determining N value-added services required by the data packet, where N is an integer greater than or equal to 1; modifying a first IP address in the data packet to an Mth IP address in an address sequence, where the first IP address is an IP address of a network server, M is a positive integer greater than or equal to 1, the address sequence is an IP address set allocated by the gateway to the user, and a correspondence exists between an address in the address sequence and a value-added service; sending a modified data packet to a value-added service server corresponding to the Mth IP address.

Abstract: Embodiments of the present invention disclose an identity authentication method and apparatus. The NFV system includes a VNF including a first virtual network function component VNFC and a second VNFC. The method includes: generating a public key and a private key of the first VNFC and a public key and a private key of the second VNFC; writing or sending the private key of the first VNFC and the public key of the second VNFC to the first VNFC; and writing or sending the public key of the first VNFC and the private key of the second VNFC to the second VNFC, where the public key and the private key of the first VNFC and the public key and the private key of the second VNFC are used for identity authentication of the first VNFC and the second VNFC.

Abstract: The present embodiments provide a method for managing a hardware resource, a method for querying a location of a hardware resource, and a related apparatus. The method for managing a hardware resource includes receiving, by a virtualized infrastructure manager (VIM), a hardware resource allocation request message sent by a VNF management entity, where the hardware resource allocation request message is used to request the VIM to allocate a hardware resource to a virtual machine that runs a VNFC, and the hardware resource allocation request message includes location information of the hardware resource that the virtual machine requests to allocate. The method also includes allocating, by the VIM, the hardware resource at a corresponding location to the virtual machine according to the location information of the hardware resource.

Abstract: Embodiments of the present invention provide a related entity, and a method for determining air interface resources consumed by a service. The related entity includes: a receiver, configured to receive, from a control plane entity, air interface connection information of a UE, and receive, from a data plane entity, service information of the UE, where the air interface connection information includes time points at which the UE establishes and releases an air interface connection, the service information includes time points at which the UE starts and stops transmitting data of a service, and the service includes a to-be-detected service; and a processor, configured to determine a target air interface connection set according to the air interface connection information and the service information, and determine air interface resource consumption information of the to-be-detected service according to the target air interface connection set.

Abstract: Embodiments of the present invention provide a congestion control method, a device, and a system. In the embodiments of the present invention, because a gateway device, unlike a gateway device that performs congestion control on all user equipments by using a same control policy in the prior art, performs congestion control on a user equipment according to a real-time location of the user equipment and a real-time congestion situation of a location region in which the user equipment is camping, thereby improving flexibility and accuracy of congestion control.

Abstract: The present invention relates to a method, a system, a gateway, and a server for canceling redirection. When balances of a user are insufficient, a gateway (GW) receives a redirection policy delivered by a policy and charging rules function (PCRF) and redirects the user to a recharging page of a server; after recharging is finished, the server sends a recharging success packet to the GW, and the GW instructs the PCRF to cancel the redirection policy. In this way, after the recharging succeeds, the server directly sends the recharging success packet to the GW, and the GW can immediately instruct the PCRF to cancel the redirection policy after receiving the packet. Therefore, no delay problem of a billing system exists, thereby avoiding that the user is repeatedly redirected to the recharging page of the server during a delay time and enhancing user experience.

Abstract: The present invention provides a flow control method and a device. The method includes: obtaining, by a gateway, a data packet of a user; determining N value-added services required by the data packet, where N is an integer greater than or equal to 1; modifying a first IP address in the data packet to an Mth IP address in an address sequence, where the first IP address is an IP address of a network server, M is a positive integer greater than or equal to 1, the address sequence is an IP address set allocated by the gateway to the user, and a correspondence exists between an address in the address sequence and a value-added service; sending a modified data packet to a value-added service server corresponding to the Mth IP address.

Abstract: The present invention relates to a method, a system, a gateway, and a server for canceling redirection. When balances of a user are insufficient, a gateway (GW) receives a redirection policy delivered by a policy and charging rules function (PCRF) and redirects the user to a recharging page of a server; after recharging is finished, the server sends a recharging success packet to the GW, and the GW instructs the PCRF to cancel the redirection policy. In this way, after the recharging succeeds, the server directly sends the recharging success packet to the GW, and the GW can immediately instruct the PCRF to cancel the redirection policy after receiving the packet. Therefore, no delay problem of a billing system exists, thereby avoiding that the user is repeatedly redirected to the recharging page of the server during a delay time and enhancing user experience.

Abstract: Embodiments of the present invention provide a congestion control method, a device, and a system. In the embodiments of the present invention, because a gateway device, unlike a gateway device that performs congestion control on all user equipments by using a same control policy in the prior art, performs congestion control on a user equipment according to a real-time location of the user equipment and a real-time congestion situation of a location region in which the user equipment is camping, thereby improving flexibility and accuracy of congestion control.