Abstract: A method includes obtaining a first service experience data set of a service, where each piece of first service experience data in the first service experience data set indicates service quality of all users or a plurality of users in a network, wherein the service is executed by the users, and the service is run in the network, obtaining information about a first service quality requirement of the service, where the information about the first service quality requirement indicates a requirement on the first service experience data, and determining a second network data set of the network based on the first service experience data set, a first network data set of the network, and the information about the first service quality requirement.

Abstract: An APT organization identification method, system and storage medium based on a stacking ensemble are provided, the method comprising: using a TF-IDF algorithm combined with an n-gram to extract and vectorize behavior features from malware samples to form a malicious behavior vector feature set; based on the malicious behavior vector feature set, calculating correlations between features and chi-square values between the features and categories, performing screening twice on the malicious behavior vector feature set to obtain an improved low-dimensional feature subset data; constructing a multi-model fusion stacking ensemble, learning an APT organization identification model, using the APT organization identification model to perform an identification on new ATP attacks.

Abstract: A first entity for a communication network is provided. The first entity is configured to receive a feature mapping indication from a second entity of the communication network. The feature mapping indication comprises characteristics of a relationship between a set of data samples and properties of data in the data samples of the set of data samples for an analytics model at an analytics stage, wherein the feature mapping indication comprises a request for a feature mapping data structure. The feature mapping data structure includes a second set of data samples based on the relationship between the set of data samples and the properties of the data in the data samples of the set of data samples for use with the analytics model at the analytics stage for an analytics consumer.

Abstract: A method includes: receiving session management information from a session management network element in a first network, where the session management information is used to request to establish a user plane tunnel of a voice service of a terminal device in the first network; and sending a handover request to a mobility management network element in the first network based on the session management information to indicate a handover of the terminal device from the first network to a second network that supports a circuit switched domain voice service. When the access network device in the first network receives the session management information to request to establish the user plane tunnel, the handover request is sent to the mobility management network element in the first network based on the session management information to establish a circuit switched domain voice service of the terminal device in the second network.

Abstract: A method and an apparatus for determining a terminal device in close contact with another terminal device are provided. The method includes: A first network element obtains data of a plurality of terminal devices and an identifier of a first terminal device. The first network element determines, based on the data of the plurality of terminal devices, movement analysis results respectively corresponding to the plurality of terminal devices. The movement analysis results respectively corresponding to the plurality of terminal devices include a movement analysis result of the first terminal device. The first network element determines at least one second terminal device based on the movement analysis results respectively corresponding to the plurality of terminal devices.

Abstract: This application discloses a data analysis method and an apparatus. The method includes: A data analysis network element sends a first request message to a security network element, where the first request message is used to request to perform security detection on first data, and the first data is data for which the data analysis network element performs data analysis on a specified data analysis type. The data analysis network element generates or updates, based on a security detection result, a data analysis result corresponding to the data analysis type. According to the method in this application, the security network element may perform security detection on the first data, and separate abnormal data from the first data, so that the data analysis network element can establish a model based on data other than the abnormal data, to improve accuracy of the model and improve accuracy of the data analysis result.

Abstract: A method includes receiving, by a mobility management network element in a first network, first information from an access network device in the first network, where the first information indicates a handover of a terminal device from the first network to a second network, and sending, by the mobility management network element in the first network, second information to a mobility management network element in a third network based on the first information, where the second information instructs the mobility management network element in the third network to send a handover request to a mobile switching network element in the second network, and the handover request requests to hand over a voice service of the terminal device to the second network.

Abstract: Embodiments of this application disclose a communication method, device, and system. A first network element sends a first request to a second network element, where the first request is for requesting authorization information of user-related data, the first request includes user information and a first use scope of the user-related data, and the first use scope includes at least one of the following information: a first use object, a first use purpose, or first use time. The first network element receives a first response sent by the second network element, where the first response includes authorization information, and the authorization information indicates whether a user corresponding to the user information allows the related data to be used for the first use scope.

Abstract: The present disclosure relates to communication methods and communication apparatuses. In one example method, a first data analytics network element receives first information of an application from a first network element, where the first information includes at least one of first application description information or an application status that correspond/corresponds to the application. The first application description information includes an application identifier and first IP information that correspond to the application, and the application status includes a foreground state or a background state of the application. The first data analytics network element determines second information based on the first information. The first data analytics network element sends the second information to a second network element.

Abstract: A communication method, a communication apparatus, and system are disclosed. The method includes a data analytics network element (NWDAF) sends a first request to a storage function network element. The first request includes delay information and/or indication information. The indication information indicates that the NWDAF supports analyzing data within a specified delay. The first request is used to store the delay information and/or the indication information into the storage function network element. The data analytics network element receives a first response from the storage function network element. The first response indicates, to the data analytics network element, that the delay information and/or the indication information are/is successfully stored.

Abstract: A method and apparatus for obtaining service data are used to implement obtaining service data by a data analysis network element. In the method, the data analysis network element obtains service data from a service network element, to perform big data analysis on the obtained service data, thereby implementing differentiated service assurance.

Abstract: A method for correlating data of a terminal device and an apparatus are provided, to correlate data of a single terminal device by a RAN side, and further analyze the data of the terminal device. The method is: A first device obtains first data of a terminal device on a second device, where the first data includes first correlation information, the first correlation information is used to correlate the first data with second data of the terminal device on a first access network device, the second data includes the first correlation information, and there are one or more terminal devices. The first device determines a first identifier of the terminal device, and sends the first correlation information and the first identifier of the terminal device to a second access network device.

Abstract: A method including a first network element receiving first information reported by a first terminal device. The first information is used to indicate parameter information of an exception when the first terminal device accesses a first cell. The first network element determines configuration information based on the first information. The configuration information includes configuration information for accessing the first cell. The first network element sends the configuration information.

Abstract: A method and an apparatus for determining radio access policy include implementation by a first network element that obtains a movement manner of a terminal device. The first network element determines a radio access policy of the terminal device based on the movement manner of the terminal device. The radio access policy is used to indicate at least one of a radio access technology (RAT) selection priority of the terminal device, a frequency selection priority of the terminal device, or a cell selection priority of the terminal device enabling the terminal device to access a proper RAT system, frequency, or cell.

Abstract: This application discloses a communication method. When determining that a network used to provide a service does not meet a transmission requirement of service data, a terminal device requests, from a PCF, an SMF, or an NWADF, to analyze a reason why the network does not meet the transmission requirement of the service data. The PCF, the SMF, or the NWADF obtains information used to recover a service, and sends the information to a device that performs a service recovery operation, for example, the terminal device or an access network device. The information used to recover the service is used to enable the network to meet the transmission requirement of the service data.

Abstract: A communication method includes: sending, by a policy control network element, first query information to a data analytics network element, where the first query information is used to obtain service quality information; and receiving, by the policy control network element, first response information sent by the data analytics network element, where the first response information includes the quality information that is of the service and that is requested using the first query information.

Abstract: An information processing method includes: obtaining, by a data analytics network element, terminal behavioral information of a plurality of terminals; determining, by the data analytics network element, network-side expected terminal behavioral information based on the terminal behavioral information; and sending, by the data analytics network element, the network-side expected terminal behavioral information to a user data management network element.

Abstract: A data processing method and an apparatus relate to the communication field. The data processing method includes: A first network data analytics network element determines identification information of one or more submodels related to a target model. The first network data analytics network element sends the identification information of the submodel to a network element corresponding to the identification information of the submodel. The first network data analytics network element receives, from the network element, a value that reflects impact of the submodel on the target model, and performs training, to obtain the target model. The data processing method and apparatus provide functions such as accurate data collection, data analysis, and data training.

Abstract: A session management method, an access management function device, and a session management device, where the method is carried out by an access and mobility management network element and includes: obtaining first subscription data of a terminal in a first communications network and second subscription data of the terminal in a second communications network, where the first subscription data includes a data network name (DNN), and the second subscription data includes an access point name (APN) corresponding to the DNN; allocating a bearer identifier to a bearer in a packet data network (PDN) connection corresponding to the APN; receiving a flow identifier that is of a flow in a protocol data unit (PDU) session corresponding to the DNN and that is sent by a session management network element; and sending the bearer identifier and the flow identifier to the terminal.

Abstract: A communication method includes: sending, by a policy control network element, first query information to a data analytics network element, where the first query information is used to obtain service quality information; and receiving, by the policy control network element, first response information sent by the data analytics network element, where the first response information includes the quality information that is of the service and that is requested using the first query information.