WO2018000129A1

WO2018000129A1 - Policy management method, and nfv entity

Info

Publication number: WO2018000129A1
Application number: PCT/CN2016/087269
Authority: WO
Inventors: 夏海涛
Original assignee: 华为技术有限公司
Priority date: 2016-06-27
Filing date: 2016-06-27
Publication date: 2018-01-04

Abstract

Disclosed in embodiments of the present application are a policy management method, and NFV entity. The method comprises: a first NFV entity receives a policy management delegation message sent by a second NFV entity, wherein the policy management delegation message comprises determination information of a target policy desired for delegation and a management policy of the target policy. The present invention achieves delegation of policy management by enabling the first NFV entity to determine the target policy according to the determination information and to manage the target policy according to the management policy, such that an overload of task processing of the second NFV entity does not block timely updates of a target policy of the first NFV entity, thus improving flexibility and efficiency of policy management.

Description

一种策略管理方法以及NFV实体A policy management method and NFV entity

技术领域Technical field

本申请涉及通信领域，尤其涉及一种NFV MANO环境下策略管理方法以及NFV实体。The present application relates to the field of communications, and in particular, to a policy management method and an NFV entity in an NFV MANO environment.

背景技术Background technique

在网络功能虚拟化(英文全称：Network Function Virtualization，英文缩写：NFV)框架中，由高层实体承担策略决策者的角色来创建策略规则，策略的分发从高层实体传递到低层实体，低层实体承担策略执行者的角色。例如，网络服务(英文全称：Network Service，英文缩写：NS)生命周期管理的策略从运营支撑***(英文全称：Operations Support System，英文缩写：OSS)/业务支撑***(英文全称：Business Support System，英文缩写：BSS)传递到网络功能虚拟化编排器(英文全称：Network Functions Virtualization Orchestrator，英文缩写：NFVO)；虚拟网络功能(英文全称：Virtualised Network Function，英文缩写：VNF)生命周期管理的策略从NFVO传递到虚拟网络功能管理器(英文全称：Virtualised Network Function Manager，英文缩写：VNFM)。In the framework of Network Function Virtualization (English name: NFV), high-level entities assume the role of policy decision makers to create policy rules. The distribution of policies is passed from high-level entities to lower-level entities, and low-level entities assume strategies. The role of the performer. For example, the network service (English name: Network Service, English abbreviation: NS) life cycle management strategy from the operational support system (English full name: Operations Support System, English abbreviation: OSS) / business support system (English full name: Business Support System, English abbreviation: BSS) passed to the network function virtualization orchestrator (English full name: Network Functions Virtualization Orchestrator, English abbreviation: NFVO); virtual network function (English full name: Virtualised Network Function, English abbreviation: VNF) life cycle management strategy from NFVO is passed to the virtual network function manager (English full name: Virtualised Network Function Manager, English abbreviation: VNFM).

当作为策略决策者的高层实体出现过载事务处理的瓶颈时，管理与编排(英文全称：Management and Orchestration，英文缩写：MANO)策略管理机制的执行效率将伴随着显著下降，将导致作为策略执行者的低层实体的本地策略无法根据运行环境的变化及时更新。When the high-level entity as a policy decision maker has a bottleneck of overload transaction processing, the management efficiency of the management and orchestration (English name: Management and Orchestration, English abbreviation: MANO) will be accompanied by a significant decline, which will lead to the implementation of the strategy. The local policies of the lower-level entities cannot be updated in time according to changes in the operating environment.

发明内容Summary of the invention

本申请实施例提供了一种策略管理方法以及NFV实体，能够有效提高策略管理的灵活性和效率。The embodiment of the present application provides a policy management method and an NFV entity, which can effectively improve the flexibility and efficiency of policy management.

有鉴于此，本申请第一方面提供了一种策略管理方法，该方法应用于网络功能虚拟化***，该方法包括：In view of this, the first aspect of the present application provides a policy management method, which is applied to a network function virtualization system, and the method includes:

第一NFV实体接收第二NFV实体发送的委托策略管理消息，该委托策略管理消息包含需要委托的目标策略的确定信息以及目标策略的管理策略，确定信息用于确定目标策略，管理策略用于管理目标策略；The first NFV entity receives a delegation policy management message sent by the second NFV entity, where the delegation policy management message includes the determination information of the target policy to be trusted and the management policy of the target policy, and determines Information is used to determine the target strategy, and the management strategy is used to manage the target strategy;

第一NFV实体根据确定信息确定目标策略；The first NFV entity determines the target policy according to the determined information;

第一NFV实体根据管理策略对委托的目标策略进行管理。The first NFV entity manages the delegated target policy according to the management policy.

本申请实施例中，第一NFV实体接收第二NFV实体发送的委托策略管理消息，其中，在该委托策略管理消息中包含需要委托的目标策略的确定信息以及该目标策略的管理策略，第一NFV实体能够根据该确定信息确定目标策略以及根据该管理策略管理该目标策略，实现策略的委托管理，从而能够避免第二NFV实体因过载事务处理导致第一NFV实体的目标策略无法及时更新，提高策略管理的灵活性和效率。In the embodiment of the present application, the first NFV entity receives the delegation policy management message sent by the second NFV entity, where the delegation policy management message includes the determination information of the target policy to be trusted and the management policy of the target policy, first The NFV entity can determine the target policy according to the determined information and manage the target policy according to the management policy, thereby implementing the entrusted management of the policy, thereby preventing the second NFV entity from being unable to update the target policy of the first NFV entity due to the overload transaction processing, thereby improving The flexibility and efficiency of policy management.

可选的，第一NFV实体接收第二NFV实体发送的委托策略管理消息之前，方法还包括：Optionally, before the first NFV entity receives the delegation policy management message sent by the second NFV entity, the method further includes:

第一NFV实体向第二NFV实体发送委托策略管理请求消息，委托策略管理请求消息用于指示第二NFV实体向第一NFV实体发送委托策略管理消息。The first NFV entity sends a delegation policy management request message to the second NFV entity, the delegation policy management request message is used to instruct the second NFV entity to send a delegation policy management message to the first NFV entity.

本申请实施例中，第一NFV实体可以向第二NFV实体发送委托策略管理请求消息，使得第二NFV实体根据预设目标反馈委托策略管理消息至第一NFV实体，其中，委托策略管理消息包含需要委托的目标策略的确定信息以及该目标策略的管理策略，该第一NFV实体能够根据确定信息确定目标策略以及根据管理策略管理接收到的第二NFV实体发送的目标策略，实现策略的委托管理，第一NFV实体能够在自身策略管理的处理负荷未超过预置负荷值时向第二NFV实体发送委托策略管理请求消息，有效提高策略管理的效率。In this embodiment, the first NFV entity may send a delegation policy management request message to the second NFV entity, so that the second NFV entity feeds back the delegation policy management message to the first NFV entity according to the preset target, where the delegation policy management message includes Determining the target policy and the management policy of the target policy, the first NFV entity is capable of determining the target policy according to the determined information and managing the target policy sent by the received second NFV entity according to the management policy, and implementing the entrusted management of the policy The first NFV entity can send a delegation policy management request message to the second NFV entity when the processing load of the policy management does not exceed the preset load value, thereby effectively improving the efficiency of the policy management.

可选的，若管理策略包含目标策略事件，则第一NFV实体根据管理策略对目标策略进行委托管理包括：Optionally, if the management policy includes the target policy event, the first NFV entity delegates the target policy according to the management policy, including:

第一NFV实体监控目标策略的执行；The first NFV entity monitors execution of the target policy;

若第一NFV实体监控到目标策略事件，第一NFV实体解除对目标策略的委托管理。If the first NFV entity monitors the target policy event, the first NFV entity de-trusts the target policy.

本申请实施例中，第二NFV实体通过在发送给第一NFV实体的管理策略中携带需监控的目标策略事件，并根据第一NFV实体上报的目标策略事件确定向第一NFV实体发起目标策略的委托管理回收，增加了目标策略委托管理回收的灵活性。 In the embodiment of the present application, the second NFV entity carries the target policy event to be monitored in the management policy sent to the first NFV entity, and determines to initiate the target policy to the first NFV entity according to the target policy event reported by the first NFV entity. The entrusted management recycling increases the flexibility of the target strategy entrusted management recovery.

可选的，若管理策略包含策略委托有效期，则第一NFV实体根据管理策略对目标策略进行管理包括：Optionally, if the management policy includes a policy delegation validity period, the first NFV entity manages the target policy according to the management policy, including:

第一NFV实体根据策略委托有效期解除对目标策略的委托管理，并向第二NFV实体发送回收策略管理通知消息，回收策略管理通知消息包含目标策略对应的策略标识。The first NFV entity releases the entrusted management of the target policy according to the policy entrustment validity period, and sends a reclaim policy management notification message to the second NFV entity, where the reclaiming policy management notification message includes the policy identifier corresponding to the target policy.

本申请实施例中，第二NFV实体通过在发送给第一NFV实体的管理策略中携带策略委托有效期，可以实现第一NFV实体在该策略委托有效期内管理目标策略，以及在该策略委托有效期到时之后，第一NFV实体可以解除对目标策略的委托管理，通知第二NFV实体完成回收策略管理，增加了目标策略委托管理回收的灵活性。In the embodiment of the present application, the second NFV entity can implement the policy entrusting validity period in the management policy sent to the first NFV entity, so that the first NFV entity can manage the target policy within the validity period of the policy entrustment, and the validity period of the policy entrustment is After the time, the first NFV entity can release the entrusted management of the target policy, notify the second NFV entity to complete the recovery policy management, and increase the flexibility of the target policy entrusted management recovery.

本申请第二方面提供了一种NFV实体，包括：The second aspect of the present application provides an NFV entity, including:

处理器以及通信接口；a processor and a communication interface;

通信接口用于接收第二NFV实体发送的委托策略管理消息，委托策略管理消息包含需要委托的目标策略的确定信息以及目标策略的管理策略，确定信息用于确定目标策略，管理策略用于管理目标策略；The communication interface is configured to receive a delegation policy management message sent by the second NFV entity, where the delegation policy management message includes the determination information of the target policy to be trusted and the management policy of the target policy, the determination information is used to determine the target policy, and the management policy is used to manage the target Strategy

处理器用于根据确定信息确定目标策略，并根据管理策略对目标策略进行管理。The processor is configured to determine a target policy according to the determined information, and manage the target policy according to the management policy.

可选的，通信接口还用于向第二NFV实体发送委托策略管理请求消息，委托策略管理请求消息用于指示第二NFV实体向NFV实体发送委托策略管理消息。Optionally, the communication interface is further configured to send a delegation policy management request message to the second NFV entity, where the delegation policy management request message is used to instruct the second NFV entity to send the delegation policy management message to the NFV entity.

可选的，若管理策略包含目标策略事件，则处理器还用于监控目标策略的执行，并且若处理器监控到目标策略事件，处理器解除对目标策略的委托管理。Optionally, if the management policy includes the target policy event, the processor is further configured to monitor execution of the target policy, and if the processor monitors the target policy event, the processor releases the delegated management of the target policy.

可选的，通信接口还用于向第二NFV实体发送策略事件通知消息，策略事件通知消息包含目标策略事件以及目标策略对应的策略标识；Optionally, the communication interface is further configured to send a policy event notification message to the second NFV entity, where the policy event notification message includes the target policy event and the policy identifier corresponding to the target policy;

通信接口还用于接收第二NFV实体发送的回收策略管理请求消息，回收策略管理请求消息包含目标策略对应的策略标识；The communication interface is further configured to receive a recycling policy management request message sent by the second NFV entity, where the recovery policy management request message includes a policy identifier corresponding to the target policy;

通信接口还用于向第二NFV实体反馈回收策略管理应答消息；The communication interface is further configured to feed back a recovery policy management response message to the second NFV entity;

处理器还用于根据目标策略对应的策略标识解除对目标策略的委托管理。 The processor is further configured to release the entrusted management of the target policy according to the policy identifier corresponding to the target policy.

可选的，若管理策略包含策略委托有效期，Optionally, if the management policy includes a policy entrustment validity period,

则处理器还用于根据策略委托有效期解除对目标策略的委托管理；The processor is further configured to release the entrusted management of the target policy according to the policy entrustment validity period;

通信接口还用于向第二NFV实体发送回收策略管理通知消息，回收策略管理通知消息包含目标策略对应的策略标识。The communication interface is further configured to send a reclaim policy management notification message to the second NFV entity, where the reclaim policy management notification message includes a policy identifier corresponding to the target policy.

可选的，处理器还用于根据策略委托有效期启动定时器；Optionally, the processor is further configured to start a timer according to a policy entrustment validity period;

若定时器到时，处理器解除对目标策略的委托管理。If the timer expires, the processor releases the delegated management of the target policy.

本申请第三方面提供了一种NFV实体，包括：The third aspect of the present application provides an NFV entity, including:

处理器以及通信接口；a processor and a communication interface;

通信接口用于向第一NFV实体发送委托策略管理消息，委托策略管理消息包含需要委托的目标策略的确定信息以及目标策略的管理策略，确定信息用于确定目标策略，管理策略用于管理目标策略。The communication interface is configured to send a delegation policy management message to the first NFV entity, where the delegation policy management message includes the determination information of the target policy to be trusted and the management policy of the target policy, the determination information is used to determine the target policy, and the management policy is used to manage the target policy. .

可选的，通信接口还用于接收第一NFV实体发送的委托策略管理请求消息；Optionally, the communication interface is further configured to receive a delegation policy management request message sent by the first NFV entity;

处理器还用于根据委托策略管理请求消息向第一NFV实体发送委托策略管理消息。The processor is further configured to send a delegation policy management message to the first NFV entity according to the delegation policy management request message.

本申请第四方面提供了一种存储介质，用于存放程序。具体地，程序可以包括程序代码，程序代码包括计算机操作指令。该存储介质可能为随机存取存储器(英文全称：Random Access Memory，英文缩写：RAM)，也可能为非易失性存储器(英文全称：non-volatile memory)。A fourth aspect of the present application provides a storage medium for storing a program. In particular, the program can include program code, the program code including computer operating instructions. The storage medium may be a random access memory (English name: Random Access Memory, English abbreviation: RAM), or may be a non-volatile memory (English name: non-volatile memory).

本申请实施例提供的技术方案中，第一NFV实体接收第二NFV实体发送的委托策略管理消息，其中，该委托策略管理消息中包含目标策略的确定信息以及该目标策略的管理策略，该第一NFV实体能够根据该确定信息确定目标策略以及根据该管理策略管理该目标策略，实现策略的委托管理，从而能够避免第二NFV实体因过载事务处理导致第一NFV实体的目标策略无法及时更新，提高策略管理的灵活性和效率。 In the technical solution provided by the embodiment of the present application, the first NFV entity receives the delegation policy management message sent by the second NFV entity, where the delegation policy management message includes the determination information of the target policy and the management policy of the target policy, where the An NFV entity can determine the target policy according to the determined information and manage the target policy according to the management policy, and implement the entrusted management of the policy, so as to prevent the second NFV entity from being unable to update the target policy of the first NFV entity due to the overload transaction. Improve the flexibility and efficiency of policy management.

附图说明DRAWINGS

图1为本申请实施例中网络功能虚拟化***架构示意图；1 is a schematic structural diagram of a network function virtualization system according to an embodiment of the present application;

图2为本申请实施例中策略管理方法一个实施例示意图；2 is a schematic diagram of an embodiment of a policy management method in an embodiment of the present application;

图3为本申请实施例中策略管理方法另一实施例示意图；FIG. 3 is a schematic diagram of another embodiment of a policy management method according to an embodiment of the present application;

图4为本申请实施例中回收策略管理一个实施例示意图；4 is a schematic diagram of an embodiment of a recycling policy management in an embodiment of the present application;

图5为本申请实施例中回收策略管理另一实施例示意图；FIG. 5 is a schematic diagram of another embodiment of a recycling policy management in an embodiment of the present application; FIG.

图6为本申请实施例中NFV实体一个实施例示意图；6 is a schematic diagram of an embodiment of an NFV entity in an embodiment of the present application;

图7为本申请实施例中NFV实体另一实施例示意图。FIG. 7 is a schematic diagram of another embodiment of an NFV entity in an embodiment of the present application.

具体实施方式detailed description

本申请的说明书和权利要求书及上述附图中的术语“第一”、“第二”、“第三”、“第四”等(如果存在)是用于区别类似的对象，而不必用于描述特定的顺序或先后次序。应该理解这样使用的数据在适当情况下可以互换，以便这里描述的实施例能够以除了在这里图示或描述的内容以外的顺序实施。此外，术语“包括”和“具有”以及他们的任何变形，意图在于覆盖不排他的包含，例如，包含了一系列步骤或单元的过程、方法、***、产品或设备不必限于清楚地列出的那些步骤或单元，而是可包括没有清楚地列出的或对于这些过程、方法、产品或设备固有的其它步骤或单元。The terms "first", "second", "third", "fourth", etc. (if present) in the specification and claims of the present application and the above figures are used to distinguish similar objects without having to use To describe a specific order or order. It is to be understood that the data so used may be interchanged where appropriate so that the embodiments described herein can be implemented in a sequence other than what is illustrated or described herein. In addition, the terms "comprises" and "comprises" and "the" and "the" are intended to cover a non-exclusive inclusion, for example, a process, method, system, product, or device that comprises a series of steps or units is not necessarily limited to Those steps or units may include other steps or units not explicitly listed or inherent to such processes, methods, products or devices.

应理解，本申请应用于NFV MANO架构中，请参阅图1，图1为本申请实施例中网络功能虚拟化***架构图。It should be understood that the present application is applied to the NFV MANO architecture. Please refer to FIG. 1. FIG. 1 is a structural diagram of a network function virtualization system according to an embodiment of the present application.

该网络功能虚拟化***包括：NFVO、VNFM、虚拟化基础设施管理器(英文全称：Virtualised Infrastructure Manager，英文缩写：VIM)、OSS/BSS、网元管理***(英文全称：Element Management System，英文缩写：EMS)、VNF以及虚拟化功能基础设施(英文全称：Network Functions Virtualisation Infrastructure，英文缩写：NFVI)，其中，NFVO与VNFM进行信息交互，VNFM与VIM通过Vi-Vnfm接口进行信息交互，OSS/BSS与NFVO通过Os-Ma-Nfvo接口进行信息交互，NFVO与VNFM通过Or-Vnfm接口进行信息交互，NFVO与VIM通过Or-Vi接口进行信息交互；EMS与VNFM通过Ve–Vnfm-em接口进行信息交互，VNF与VNFM通过Ve-Vnfm-vnf接口进行信息交互，其中各个结构的功能如下：The network function virtualization system includes: NFVO, VNFM, virtualized infrastructure manager (English full name: Virtualised Infrastructure Manager, English abbreviation: VIM), OSS/BSS, network element management system (English full name: Element Management System, English abbreviation) : EMS), VNF and Virtualization Functional Infrastructure (English name: Network Functions Virtualisation Infrastructure, English abbreviation: NFVI), in which NFVO interacts with VNFM, VNFM and VIM exchange information through Vi-Vnfm interface, OSS/BSS Information exchange with NFVO through Os-Ma-Nfvo interface, NFVO and VNFM exchange information through Or-Vnfm interface, NFVO and VIM exchange information through Or-Vi interface; EMS and VNFM exchange information through Ve-Vnfm-em interface VNF and VNFM exchange information through the Ve-Vnfm-vnf interface, each of which The functions of the structure are as follows:

NFVO用于实现网络服务生命周期的管理，并VNFM配合实现VNF的生命周期管理和资源的全局视图功能；NFVO is used to implement the management of the network service life cycle, and VNFM cooperates with the VNF lifecycle management and resource global view function;

VNFM用于实现虚拟化网元VNF的生命周期管理；VNFM is used to implement lifecycle management of the virtualized network element VNF.

VIM用于主要负责基础设施层硬件资源，虚拟化资源的管理，监控和故障上报，面向上层应用提供虚拟化资源池；VIM is mainly used to manage the hardware resources of the infrastructure layer, manage the virtualized resources, monitor and report faults, and provide virtualized resource pools for upper-layer applications.

EMS用于针对VNF执行传统的错误、配置、计帐、性能和安全(英文全称：Fault Configuration Accounting Performance and Security，英文缩写：FCAPS)功能；EMS is used to perform traditional error, configuration, accounting, performance, and security (Faults Configuration Accounting Performance and Security, FCAPS) functions for VNF.

VNF可以由多个更低级别的组件来组成，其中，一个VNF可以部署在多个虚拟机(英文全称：Virtualized Machine，英文缩写：VM)上，每个VM host一个VNF组件，VNF也可以部署在一个VM上；The VNF can be composed of multiple lower-level components. One VNF can be deployed on multiple virtual machines (English name: Virtualized Machine: VM). Each VM host has a VNF component, and the VNF can also be deployed. On a VM;

NFV实例(英文全称：Instances)：存储所有正在运行的NS、VNF等实例的状态信息，如分配的网络地址、操作记录等。其中，VNFR记录VNF运行信息的文件，NFVI资源(英文全称：Resources)存储所有NFVI资源的状态，包括可用的/已预留的/已分配的NFVI资源；NFV instance (English name: Instances): Stores the status information of all running NS, VNF and other instances, such as the assigned network address and operation record. The VNFR records the VNF running information file, and the NFVI resource (English full name: Resources) stores the status of all NFVI resources, including available/reserved/allocated NFVI resources;

网络服务(英文全称：Network service，英文缩写：NS)目录(英文全称：Catalog)、虚拟网络功能(英文全称：Virtualised Network Function，英文缩写：VNF)目录(英文全称：Catalog)、NFV Instances、NFVI资源(英文全称：Resources)，它们是MANO中存储NS、VNF信息、软件包及运行状态的功能模块，其中，NS Catalog存储所有已经加载的网络服务描述符(英文全称：Network Service Descriptor，英文缩写：NSD)信息，VNF Catalog存储所有已经加载的VNF软件包，其中虚拟化网络功能描述符(英文全称Virtualised Network Function Descriptor，英文缩写：VNFD)类似于NSD，描述的是VNF的组成、监控参数、部署规格等信息。Network service (English name: Network service, English abbreviation: NS) directory (English full name: Catalog), virtual network function (English full name: Virtualised Network Function, English abbreviation: VNF) directory (English full name: Catalog), NFV Instances, NFVI Resources (English full name: Resources), they are functional modules for storing NS, VNF information, software packages and running status in MANO. Among them, NS Catalog stores all loaded network service descriptors (English full name: Network Service Descriptor, English abbreviation) :NSD) information, VNF Catalog stores all loaded VNF software packages, wherein the virtualized network function descriptor (English full name Virtualised Network Function Descriptor, English abbreviation: VNFD) is similar to NSD, describes the composition of VNF, monitoring parameters, Deploy specifications and other information.

可以理解的是，在该网络功能虚拟化***架构图中，OSS/BSS可以作为高层实体将策略分发给NFVO，此时NFVO相对于OSS/BSS为低层实体；NFVO也可以作为高层实体将策略下发给VNFM，或者将策略下发至VIM，此时VNFM以及VIM相对于NFVO即为低层实体；并且，在VNFM与VIM 之间，VNFM也可以作为高层实体将策略发送给作为低层实体的VIM。It can be understood that in the network function virtualization system architecture diagram, the OSS/BSS can be used as a high-level entity to distribute the policy to the NFVO, and the NFVO is a low-level entity relative to the OSS/BSS; the NFVO can also be used as a high-level entity. Send to VNFM, or send the policy to VIM. At this time, VNFM and VIM are low-level entities relative to NFVO; and, in VNFM and VIM Between them, VNFM can also send a policy as a high-level entity to a VIM as a low-level entity.

为便于理解，下面对本申请实施例中的策略管理方法进行详细描述。可选的，本申请实施例中，第二NFV实体可以为NFV MANO高层实体，第一NFV实体可以为NFV MANO低层实体，第一NFV实体可以接收第二NFV实体发送的策略，并且，该策略中可以包含本申请实施例中的目标策略。可以理解的是，该目标策略可以是由第二NFV实体接收服务提供商预先设置或者通过人机界面输入的策略信息而生成的，该目标策略也还可以是第二NFV实体接收的从第三方实体输入的策略规则而生成的，具体此处不做限定。For ease of understanding, the policy management method in the embodiment of the present application is described in detail below. Optionally, in this embodiment, the second NFV entity may be an NFV MANO high-level entity, the first NFV entity may be an NFV MANO low-layer entity, and the first NFV entity may receive a policy sent by the second NFV entity, and the policy is The target policy in the embodiment of the present application may be included. It can be understood that the target policy may be generated by the second NFV entity receiving the policy information preset by the service provider or input through the human machine interface, and the target policy may also be received by the second NFV entity from the third party. Generated by the policy rules entered by the entity, which is not limited here.

可选的，本申请中策略管理方法可以基于不同的实现过程，下面分别进行说明：Optionally, the policy management method in this application may be based on different implementation processes, and are respectively described below:

一、由第一NFV实体向第二NFV实体发送请求触发：1. A request trigger is sent by the first NFV entity to the second NFV entity:

请参阅图2，本申请实施例中策略管理方法一个实施例包括：Referring to FIG. 2, an embodiment of a policy management method in an embodiment of the present application includes:

201、第一NFV实体向第二NFV实体发送委托策略管理请求消息；201. The first NFV entity sends a delegation policy management request message to the second NFV entity.

本实施例中，第一NFV实体可以检测自身策略管理的处理负荷是否超过预置负荷值，若检测结果为否，则该第一NFV实体向第二NFV实体发送委托策略管理请求消息；若检测结果为是，则该第一NFV实体不向第二NFV实体发送委托策略管理请求消息。可选的，该预置负荷值可以根据第一NFV实体执行策略时所占用的中央处理单元(英文全称：Central Processing Unit，英文缩写：CPU)或内存百分比设定，其还可以是根据第一NFV实体所进行管理的目标策略的数量设定，具体此处不做限定。可以理解的是，该预置负荷值可以是由服务提供商预先设置的，还可以是由第二NFV实体下发给第一NFV实体的，具体此处不做限定。In this embodiment, the first NFV entity may detect whether the processing load of the policy management exceeds the preset load value, and if the detection result is no, the first NFV entity sends a delegation policy management request message to the second NFV entity; The result is yes, then the first NFV entity does not send a delegation policy management request message to the second NFV entity. Optionally, the preset load value may be set according to a central processing unit (English full name: Central Processing Unit: CPU) or a percentage of memory occupied by the first NFV entity when executing the policy, which may also be according to the first The number of target policies managed by the NFV entity is not limited here. It is to be understood that the preset load value may be preset by the service provider, or may be sent by the second NFV entity to the first NFV entity, which is not limited herein.

202、第二NFV实体返回委托策略管理应答消息至第一NFV实体；202. The second NFV entity returns a delegation policy management response message to the first NFV entity.

本实施例中，第二NFV实体在接收第一NFV实体发送的委托策略管理请求消息之后，可以依据预设目标生成委托策略管理应答消息，该委托策略管理应答消息即第二NFV实体接收到委托策略管理请求消息之后生成的委托策略管理消息。第二NFV实体可以将该委托策略管理应答消息反馈至第一NFV实体。其中，该预设目标可以是由服务提供商的企业运营目标或商业策略来确定的，即第二NFV实体可以依据服务提供商的企业运营目标或商业策略确定是否对第一NFV实体进行委托策略管理。In this embodiment, after receiving the entrusted policy management request message sent by the first NFV entity, the second NFV entity may generate a delegation policy management response message according to the preset target, where the entrusted policy management response message, that is, the second NFV entity receives the entrustment A delegation policy management message generated after the policy management request message. The second NFV entity may feed back the delegation policy management response message to the first NFV entity. The preset target may be determined by a service provider's enterprise operation target or a business policy, that is, the second NFV entity may determine according to the service provider's enterprise operation target or business strategy. No delegated policy management for the first NFV entity.

可选的，第二NFV实体确定向第一NFV实体委托策略管理时，第二NFV实体生成的委托策略管理应答消息中可以包含成功指示，第一NFV实体在接收到携带有该成功指示的委托策略管理应答消息时，则可以确定第二NFV实体向第一NFV实体进行委托策略管理。Optionally, when the second NFV entity determines to delegate the policy management to the first NFV entity, the delegation policy management response message generated by the second NFV entity may include a success indication, and the first NFV entity receives the delegation carrying the success indication. When the policy management response message is received, it may be determined that the second NFV entity performs delegation policy management to the first NFV entity.

可以理解的是，在第二NFV实体确定向第一NFV实体进行委托策略管理时，第二NFV实体生成的委托策略管理应答消息中还可以包含进行委托管理的目标策略的确定信息以及对于该目标策略的管理策略。其中，确定信息可以包含委托管理的策略标识，或者也可以包含委托管理的策略类型；而管理策略可以包含许可的策略管理操作，策略更新约束，策略委托有效期，以及目标策略事件。可以理解的是，在实际应用中，管理策略可以包含许可的策略管理操作、策略更新约束、策略委托有效期、以及目标策略事件中的一种或多种。该管理策略是指对委托策略管理进行约束或限定的管理策略，可以理解为“策略的策略”。It can be understood that, when the second NFV entity determines to perform the delegation policy management to the first NFV entity, the delegation policy management response message generated by the second NFV entity may further include determining information of the target policy for performing the delegation management and for the target The management strategy of the strategy. The determination information may include a policy identifier of the entrusted management, or may also include a policy type of entrusted management; and the management policy may include a policy management operation of the license, a policy update constraint, a policy entrustment validity period, and a target policy event. It can be understood that, in practical applications, the management policy may include one or more of a licensed policy management operation, a policy update constraint, a policy delegation validity period, and a target policy event. The management strategy refers to a management policy that restricts or limits the delegation policy management, and can be understood as a “strategy strategy”.

可选的，若确定信息包含委托管理的策略标识，则管理策略所包含的许可的策略管理操作可以为修改策略或者删除策略，其中，此处修改或删除的策略为上述策略标识所对应的目标策略。Optionally, if the determining information includes the policy identifier of the trusted management, the policy management operation of the license included in the management policy may be a modified policy or a deleted policy, where the modified or deleted policy is the target corresponding to the foregoing policy identifier. Strategy.

可选的，若确定信息包含委托管理的策略类型，则目标策略和该策略类型所包含的NFV MANO管理操作之间存在一定的对应关系，目标策略可以限定为该策略类型所包含的NFV MANO管理操作中的策略，例如：当委托管理的策略类型为VNF的生命周期管理策略时，其对应管理的目标策略可以是VNF实例的初始化策略、VNF实例的终止策略、VNF实例的弹性伸缩策略或VNF实例的治愈策略等等。Optionally, if the determining information includes the policy type of the entrusted management, the target policy has a certain correspondence with the NFV MANO management operation included in the policy type, and the target policy may be limited to the NFV MANO management included in the policy type. The policy in operation, for example, when the policy type of the entrusted management is the VNF lifecycle management policy, the corresponding management target policy may be an initialization policy of the VNF instance, a termination policy of the VNF instance, an elastic scaling policy of the VNF instance, or a VNF. The cure strategy of the instance and so on.

可选的，上述策略更新约束可以指第一NFV实体作为策略决策者进行策略管理时确定更新目标策略所需要参照的约束条件。例如：对于VNF弹性伸缩(英文全称：scaling)策略，当VNFM被委托对该目标策略进行管理时，策略更新约束可以确定为需要VNFM监控的其管理域内的VNF实例化数。当VNF实例化数超过一个门限值时，VNFM可以修改该VNF弹性伸缩策略，例如，修改弹性伸缩策略中的监控参数的门限值或进行伸缩的步长的调整。 Optionally, the foregoing policy update constraint may refer to a constraint that the first NFV entity needs to refer to when determining a policy for updating the policy as a policy decision maker. For example, for the VNF elastic scaling (English: scaling) strategy, when the VNFM is delegated to manage the target policy, the policy update constraint can be determined as the VNF instantiation number in its management domain that needs VNFM monitoring. When the VNF instantiation exceeds a threshold, the VNFM can modify the VNF elastic scaling policy, for example, modifying the threshold of the monitoring parameter in the elastic scaling policy or adjusting the step size of the scaling.

可选的，上述策略更新约束还可以指定为目标策略更新需要满足的一些运行目标，例如：第一NFV实体对目标策略进行管理更新，以保障VNF实例的一些运行性能指标正常，如保证服务可用性等级(英文全称：Service Availability Level，英文缩写：SAL)处于一个适当的区间。Optionally, the foregoing policy update constraint may also be specified as a certain target that needs to be met by the target policy update. For example, the first NFV entity performs management update on the target policy to ensure that some running performance indicators of the VNF instance are normal, such as ensuring service availability. The level (English full name: Service Availability Level, English abbreviation: SAL) is in an appropriate range.

可选的，上述策略委托有效期可以包含起始时刻和终止时刻，即第一NFV实体在接收到携带有策略委托有效期的管理策略时，可以在该策略委托有效期内的起始时刻开始执行目标策略委托，在终止时刻终止目标策略委托。Optionally, the foregoing policy delegation validity period may include a start time and a termination time, that is, when the first NFV entity receives the management policy carrying the policy delegation validity period, the target policy may be started at the start time of the policy delegation validity period. Delegate, terminate the target strategy commission at the time of termination.

可选的，上述策略委托有效期还可以是一段预置时长，第一NFV实体在接收到该策略委托有效期时启动定时器开始计时，在达到该段预置时长之后，定时器到时，第一NFV实体可以终止目标策略委托。Optionally, the validity period of the policy entrustment may also be a preset duration. The first NFV entity starts the timer when the policy entrusting validity period is received. After the preset duration is reached, the timer expires. The NFV entity can terminate the target policy delegation.

可选的，上述目标策略事件是指第一NFV实体在委托管理目标策略的期间需要第一NFV实体监控上报给第二NFV实体的策略管理事件，例如：策略更新通知。目标策略事件可以是字符串，也可以是枚举值，具体此处不做限定。Optionally, the foregoing target policy event is that the first NFV entity needs to monitor, by the first NFV entity, a policy management event reported to the second NFV entity, for example, a policy update notification, during the process of entrusting the management target policy. The target policy event can be a string or an enumeration value, which is not limited here.

可选的，在上述目标策略事件为枚举值时，第一NFV实体以及第二NFV实体都可以存储有事件表格，该事件表格记录了事件与枚举值的对应关联，在第一NFV实体接收到携带有目标策略事件的管理策略时，即第一NFV实体接收到枚举值时，第一NFV实体可以通过查询该枚举值对应的事件表格，从而确定第一NFV实体所需监控的目标策略事件。Optionally, when the target policy event is an enumerated value, the first NFV entity and the second NFV entity may store an event table, where the event table records a corresponding association between the event and the enumerated value, in the first NFV entity. Upon receiving the management policy carrying the target policy event, that is, when the first NFV entity receives the enumeration value, the first NFV entity may determine the required monitoring of the first NFV entity by querying the event table corresponding to the enumeration value. Target policy event.

203、第一NFV实体根据委托策略管理应答消息中的确定信息确定目标策略；203. The first NFV entity determines the target policy according to the determined information in the trusted policy management response message.

本实施例中，第一NFV实体可以接收上述第二NFV实体发送的委托策略管理应答消息，该第一NFV实体可以依据该委托策略管理应答消息中的确定信息确定委托管理的目标策略。In this embodiment, the first NFV entity may receive the delegation policy management response message sent by the second NFV entity, and the first NFV entity may determine the target policy of the entrusted management according to the determination information in the delegation policy management response message.

可选的，当确定信息中携带有策略标识时，第一NFV实体可以通过该策略标识查找到该策略标识对应的目标策略；或者，当该确定信息中携带有策略类型时，该第一NFV实体可以通过该策略类型查找属于该策略类型的所有目标策略。可以理解的是，第一NFV实体可以在自身所执行的策略集合中查找符合上述条件的目标策略。Optionally, when the determining information carries the policy identifier, the first NFV entity may find the target policy corresponding to the policy identifier by using the policy identifier; or, when the determining information carries the policy type, the first NFV An entity can use this policy type to find all target policies that belong to that policy type. It can be understood that the first NFV entity can find a target policy that meets the above conditions in the set of policies executed by itself.

204、第一NFV实体根据委托策略管理应答消息中的管理策略管理目标策略。204. The first NFV entity manages the target policy according to the management policy in the delegation policy management response message. slightly.

本实施例中，第一NFV实体可以接收上述第二NFV实体发送的委托策略管理应答消息，该第一NFV实体可以依据管理策略中许可的策略管理操作删除所查找到的目标策略，或者，修改所查找到的目标策略中的信息。In this embodiment, the first NFV entity may receive the entrusted policy management response message sent by the second NFV entity, where the first NFV entity may delete the found target policy according to the policy management operation permitted in the management policy, or modify The information in the target policy found.

可选的，当确定信息中携带有策略类型时，则目标策略可以限定为该策略类型所对应的策略，即该目标策略为策略类型所包含的NFV MANO管理操作中的策略，例如：当委托管理的策略类型为VNF的生命周期管理策略时，第一NFV实体管理的目标策略可以是VNF实例初始化策略、VNF实例的终止策略、VNF实例的弹性伸缩策略或VNF实例的治愈策略等等。Optionally, when the determining information carries the policy type, the target policy may be limited to the policy corresponding to the policy type, that is, the target policy is a policy in the NFV MANO management operation included in the policy type, for example, when the request is When the management policy type is the VNF lifecycle management policy, the target policy managed by the first NFV entity may be a VNF instance initialization policy, a VNF instance termination policy, a VNF instance elastic scaling policy, or a VNF instance healing policy.

可选的，若第一NFV实体接收到第二NFV实体下发的管理策略中携带有策略更新约束，第一NFV实体则可以确定更新目标策略时所需参照的约束条件。例如：当第一NFV实体为VNFM，目标策略为VNF弹性伸缩(英文全称：scaling)策略；第一NFV实体VNFM被第二NFV实体赋予对目标策略VNF scaling弹性伸缩策略进行委托管理时，策略更新约束可以确定为需要VNFM监控的其管理域内的VNF实例化数。当VNF实例化数超过一个门限值时，第一NFV实体VNFM可以修改该VNF弹性伸缩策略，例如，修改弹性伸缩策略中的缩容/扩容(英文全称：scaling in/out)的监控参数的门限值，或者，对进行伸缩的步长进行调整。Optionally, if the first NFV entity receives the policy update constraint in the management policy delivered by the second NFV entity, the first NFV entity may determine a constraint condition to be referred to when updating the target policy. For example, when the first NFV entity is VNFM and the target policy is VNF elastic scaling (English name: scaling) strategy; when the first NFV entity VNFM is entrusted to the target policy VNF scaling elastic scaling policy by the second NFV entity, the policy is updated. The constraint can be determined as the number of VNF instantiations within its administrative domain that require VNFM monitoring. When the VNF instantiation number exceeds a threshold, the first NFV entity VNFM may modify the VNF elastic scaling policy, for example, modify the monitoring parameter of the shrinking/expansion (English name: scaling in/out) in the elastic scaling policy. The threshold value, or, the step size for the expansion and contraction is adjusted.

可以理解的是，该策略更新约束还可以确定为更新目标策略所满足的一些运行目标，例如：策略更新约束中确定了第一NFV实体对目标策略进行更新需要保证VNF实例的一些运行性能指标正常，如保证SAL处于一个适当的区间。It can be understood that the policy update constraint may also determine some running targets that are met for updating the target policy. For example, the policy update constraint determines that the first NFV entity updates the target policy, and needs to ensure that some running performance indicators of the VNF instance are normal. , such as to ensure that the SAL is in an appropriate interval.

本申请实施例中，第一NFV实体可以向第二NFV实体发送委托策略管理请求消息，使得第二NFV实体根据预设目标反馈委托策略管理应答消息至第一NFV实体，其中，委托策略管理应答消息包含需要委托的目标策略的确定信息以及该目标策略的管理策略，该第一NFV实体能够根据确定信息确定目标策略以及根据管理策略管理接收到的第二NFV实体发送的目标策略，实现策略的委托管理，从而能够避免第二NFV实体因过载事务处理导致第一NFV实体的目标策略无法及时更新，提高策略管理的灵活性和效率。 In this embodiment, the first NFV entity may send a delegation policy management request message to the second NFV entity, so that the second NFV entity feeds back the policy management response message to the first NFV entity according to the preset target, where the delegation policy management response The message includes the determination information of the target policy to be commissioned and the management policy of the target policy, and the first NFV entity is capable of determining the target policy according to the determined information and managing the target policy sent by the received second NFV entity according to the management policy, and implementing the policy. Entrusted management, so as to avoid the second NFV entity's target policy of the first NFV entity cannot be updated in time due to overload transaction processing, and improve the flexibility and efficiency of policy management.

二、由第二NFV实体向第一NFV实体推送产生：2. The second NFV entity pushes the first NFV entity to generate:

请参阅图3，本申请实施例中策略管理方法另一实施例包括：Referring to FIG. 3, another embodiment of the policy management method in the embodiment of the present application includes:

301、第二NFV实体向第一NFV实体发送委托策略管理消息；301. The second NFV entity sends a delegation policy management message to the first NFV entity.

本实施例中，第二NFV实体可以依据预设目标直接生成委托策略管理消息，并将该委托策略管理消息发送至第一NFV实体。其中，该预设目标可以是由服务提供商的企业运营目标或商业策略来确定的，即第二NFV实体可以依据服务提供商的企业运营目标或商业策略直接对第一NFV实体进行委托策略管理。In this embodiment, the second NFV entity may directly generate a delegation policy management message according to the preset target, and send the delegation policy management message to the first NFV entity. The preset target may be determined by the service provider's enterprise operation target or business policy, that is, the second NFV entity may directly perform the delegated policy management on the first NFV entity according to the service provider's enterprise operation target or business strategy. .

可选的，在第二NFV实体向第一NFV实体进行委托策略管理时，第二NFV实体生成的委托策略管理消息中可以包含目标策略的确定信息以及目标策略的管理策略。其中，该确定信息可以包含委托管理的策略标识，或者也可以包含委托管理的策略类型；而管理策略可以包含许可的策略管理操作，策略更新约束，策略委托有效期，以及目标策略事件。可以理解的是，在实际应用中，管理策略可以包含许可的策略管理操作、策略更新约束、策略委托有效期、以及目标策略事件中的一种或多种。该管理策略是指对委托策略管理进行约束或限定的管理策略，可以理解为“策略的策略”。Optionally, when the second NFV entity performs the delegation policy management to the first NFV entity, the delegation policy management message generated by the second NFV entity may include the determination information of the target policy and the management policy of the target policy. The determination information may include a policy identifier of the entrusted management, or may also include a policy type of entrusted management; and the management policy may include a policy management operation of the license, a policy update constraint, a policy entrustment validity period, and a target policy event. It can be understood that, in practical applications, the management policy may include one or more of a licensed policy management operation, a policy update constraint, a policy delegation validity period, and a target policy event. The management strategy refers to a management policy that restricts or limits the delegation policy management, and can be understood as a “strategy strategy”.

可选的，若确定信息包含委托管理的策略类型，则目标策略和该策略类型所包含的NFV MANO管理操作之间存在一定的对应关系，目标策略可以限定为该策略类型所包含的NFV MANO管理操作中的策略，例如：当委托管理的策略类型为虚拟网络功能(英文全称：Virtualised Network Function，英文缩写：VNF)的生命周期管理策略时，其对应管理的目标策略可以是VNF实例的初始化策略、VNF实例的终止策略、VNF实例的弹性伸缩策略或VNF实例的治愈策略等等。Optionally, if the determining information includes the policy type of the entrusted management, the target policy has a certain correspondence with the NFV MANO management operation included in the policy type, and the target policy may be limited to the NFV MANO management included in the policy type. The policy in operation, for example, when the policy type of the entrusted management is the lifecycle management strategy of the virtual network function (English name: Virtualised Network Function, VNF), the corresponding target policy of the management may be the initialization strategy of the VNF instance. The termination policy of the VNF instance, the elastic scaling policy of the VNF instance, or the healing strategy of the VNF instance.

可选的，上述策略更新约束可以指第一NFV实体作为策略决策者进行策略管理时确定更新目标策略所需要参照的约束条件。例如：对于VNF弹性伸缩(英文全称：scaling)策略，当VNFM被委托对该目标策略进行管理时，策略更新约束可以确定为需要VNFM监控的其管理域内的VNF实例化数。当VNF实例化数超过一个门限值时，VNFM可以修改该VNF弹性伸缩策略，例如，修改弹性伸缩策略中的监控参数的门限值或进行伸缩的步长的调整。Optionally, the foregoing policy update constraint may refer to a constraint that the first NFV entity needs to refer to when determining a policy for updating the policy as a policy decision maker. For example: for VNF elastic extension In the contraction (English full name: scaling) strategy, when the VNFM is delegated to manage the target policy, the policy update constraint can be determined as the VNF instantiation number in its management domain that needs VNFM monitoring. When the VNF instantiation exceeds a threshold, the VNFM can modify the VNF elastic scaling policy, for example, modifying the threshold of the monitoring parameter in the elastic scaling policy or adjusting the step size of the scaling.

可选的，上述策略更新约束还可以指定为目标策略更新需要满足的一些运行目标，例如：第一NFV实体对目标策略进行更新，以保障VNF实例的一些运行性能指标正常，如保证服务可用性等级(英文全称：Service Availability Level，英文缩写：SAL)处于一个适当的区间。Optionally, the foregoing policy update constraint may also be specified as a certain operational target that needs to be met by the target policy update. For example, the first NFV entity updates the target policy to ensure that some running performance indicators of the VNF instance are normal, such as guaranteeing the service availability level. (English full name: Service Availability Level, English abbreviation: SAL) is in an appropriate interval.

本实施例中，步骤302和步骤303与上述图2所示实施例中的步骤203以及步骤204相同，此处不再赘述。In this embodiment, the steps 302 and 303 are the same as the steps 203 and 204 in the embodiment shown in FIG. 2, and details are not described herein again.

本申请实施例中，第二NFV实体可以向第一NFV实体发送委托策略管理消息，其中，委托策略管理消息包含需要委托的目标策略的管理策略以及目标策略的确定信息，使得该第一NFV实体能够根据确定信息确定目标策略以及根据管理策略管理接收到的第二NFV实体发送的目标策略，实现策略的委托管理，同样能够避免第二NFV实体因过载事务处理导致第一NFV实体的目标策略无法及时更新，提高策略管理的灵活性和效率，并且由第二NFV实体主动向第一NFV实体推送，不需要第一NFV实体向第二NFV实体发送请求触发，防止第一NFV实体向第二NFV实体请求进行委托策略管理时，第二NFV实体已处于瘫痪状态，进一步提高了策略管理的可行性。In this embodiment, the second NFV entity may send a delegation policy management message to the first NFV entity, where the delegation policy management message includes a management policy of the target policy to be trusted and determination information of the target policy, so that the first NFV entity The target policy can be determined according to the determined information, and the target policy sent by the received second NFV entity is managed according to the management policy, and the entrusted management of the policy is implemented, and the target of the first NFV entity caused by the overload transaction is also avoided. The policy cannot be updated in time, improving the flexibility and efficiency of policy management, and the second NFV entity actively pushes to the first NFV entity, and does not need the first NFV entity to send a request trigger to the second NFV entity, preventing the first NFV entity from moving to the first When the NFV entity requests to perform the delegation policy management, the second NFV entity is in a state of paralysis, which further improves the feasibility of the policy management.

可选的，基于上述图2以及图3对应的实施例，若第二NFV实体下发给第一NFV实体的管理策略中包含有策略委托有效期，则第一NFV实体可以依据该策略委托有效期执行回收策略管理步骤，请参阅图4，本申请实施例中回收策略管理一个实施例包括：Optionally, based on the foregoing embodiment corresponding to FIG. 2 and FIG. 3, if the management policy sent by the second NFV entity to the first NFV entity includes a policy delegation validity period, the first NFV entity may perform the validity period according to the policy entrustment period. For the recovery policy management step, referring to FIG. 4, an embodiment of the recovery policy management in the embodiment of the present application includes:

401、第二NFV实体将管理策略发送至第一NFV实体；401. The second NFV entity sends the management policy to the first NFV entity.

本实施例中，第二NFV实体可以接收第一NFV实体发送的委托策略管理请求消息，依据该委托策略管理请求消息第二NFV实体可以反馈委托策略管理应答消息，即反馈委托策略管理消息至第一NFV实体，或者，第二NFV实体可以直接生成委托策略管理消息发送至第一NFV实体，该委托策略管理消息中包含目标策略的确定信息以及目标策略的管理策略，具体此处不做限定。In this embodiment, the second NFV entity may receive the delegation policy management request message sent by the first NFV entity, and the second NFV entity may feed back the delegation policy management response message according to the delegation policy management request message, that is, the feedback delegation policy management message to the first An NFV entity, or a second NFV entity, may directly generate a delegation policy management message to be sent to the first NFV entity, where the delegation policy management message includes the determination information of the target policy and the management policy of the target policy, which is not limited herein.

本实施例中，上述管理策略可以包含策略委托有效期，该策略委托有效期可以是一对起始时刻和终止时刻，还可以是一段预置时长，具体此处不做限定。In this embodiment, the foregoing management policy may include a policy entrusting validity period, and the policy entrusting validity period may be a pair of starting time and ending time, and may also be a preset preset duration, which is not limited herein.

402、第一NFV实体根据管理策略中的策略委托有效期解除对目标策略的委托管理；402. The first NFV entity cancels the entrusted management of the target policy according to the policy entrustment validity period in the management policy;

本实施例中，在第一NFV实体接收到策略委托有效期之后，若策略委托有效期为一对起始时刻和终止时刻时，第一NFV实体可以在该起始时刻启动对目标策略的委托管理，可以在终止时刻终止对目标策略的委托管理；若策略委托有效期为一段预置时长时，第一NFV实体可以在接收到该策略委托有效期时启动定时器，根据预置时长设定定时，当定时器到时时，第一NFV实体可以解除对目标策略的委托管理。In this embodiment, after the first NFV entity receives the policy delegation validity period, if the policy delegation validity period is a pair of start time and termination time, the first NFV entity may initiate the delegation management of the target policy at the start time, The delegated management of the target policy may be terminated at the termination time; if the policy delegation validity period is a preset duration, the first NFV entity may start a timer when receiving the policy delegation validity period, and set the timing according to the preset duration, when timing When the time comes, the first NFV entity can detrust the management of the target policy.

可选的，第一NFV实体可以依据上述确定信息中策略标识或者策略类型查找到目标策略。Optionally, the first NFV entity may find the target policy according to the policy identifier or the policy type in the foregoing determining information.

403、第一NFV实体向第二NFV实体反馈回收策略管理通知消息。403. The first NFV entity feeds back a recovery policy management notification message to the second NFV entity.

本实施例中，第一NFV实体可以在解除对目标策略的委托管理时，可以将回收策略管理通知消息反馈给第二NFV实体。 In this embodiment, the first NFV entity may feed back the recovery policy management notification message to the second NFV entity when the delegated management of the target policy is released.

可选的，该回收策略管理通知消息可以包含第一NFV实体所解除委托管理的目标策略的策略标识。Optionally, the recycling policy management notification message may include a policy identifier of the target policy that is de-trusted by the first NFV entity.

可选的，基于上述图2以及图3对应的实施例，若第二NFV实体下发给第一NFV实体的管理策略中包含有目标策略事件，则第一NFV实体可以依据该目标策略事件执行回收策略管理步骤，请参阅图5，本申请实施例中回收策略管理另一实施例包括：Optionally, based on the foregoing embodiment corresponding to FIG. 2 and FIG. 3, if the management policy sent by the second NFV entity to the first NFV entity includes a target policy event, the first NFV entity may perform according to the target policy event. For the recovery policy management step, please refer to FIG. 5, another embodiment of the recovery policy management in the embodiment of the present application includes:

501、第二NFV实体将管理策略发送至第一NFV实体；501. The second NFV entity sends the management policy to the first NFV entity.

本实施例中，上述管理策略可以包含目标策略事件，该目标策略事件可以是字符串，也可以是枚举值，具体此处不做限定。In this embodiment, the foregoing management policy may include a target policy event, and the target policy event may be a string or an enumeration value, which is not limited herein.

502、第一NFV实体根据管理策略中的目标策略事件监控目标策略的执行；502. The first NFV entity monitors execution of the target policy according to the target policy event in the management policy.

本实施例中，第一NFV实体可以确定目标策略事件，例如：当目标策略事件为枚举值时，第一NFV实体可以在预置的事件表格中查找该枚举值所对应的事件，从而确定目标策略事件。In this embodiment, the first NFV entity may determine a target policy event, for example, when the target policy event is an enumerated value, the first NFV entity may search for a event corresponding to the enumerated value in a preset event table, thereby Identify target policy events.

第一NFV实体可以监控自身在执行目标策略中所发生的事件，该目标策略可以由第一NFV实体依据上述确定信息中策略标识或者策略类型查找到。The first NFV entity may monitor an event that occurs in the execution of the target policy, and the target policy may be found by the first NFV entity according to the policy identifier or the policy type in the above determined information.

503、当第一NFV实体监控到目标策略事件时，第一NFV实体向第二NFV实体发送策略事件通知消息； 503. When the first NFV entity monitors the target policy event, the first NFV entity sends a policy event notification message to the second NFV entity.

本实施例中，当第一NFV实体监控到自身执行目标策略发生的事件为目标策略事件时，第一NFV实体可以将策略事件通知消息发送至第二NFV实体。该策略事件通知消息中可以包含目标策略的策略标识，以及可以包含目标策略事件。In this embodiment, when the first NFV entity monitors that the event that the self-execution target policy occurs is the target policy event, the first NFV entity may send the policy event notification message to the second NFV entity. The policy event notification message may include a policy identifier of the target policy and may include a target policy event.

504、第二NFV实体确认回收策略管理；504. The second NFV entity confirms the recovery policy management;

本实施例中，第二NFV实体可以检测所接收到的策略事件通知消息中携带的策略标识以及目标策略事件，当检测到的结果与第二NFV实体发送给第一NFV实体的确定信息中携带的委托管理的策略标识以及目标策略事件匹配时，该第二NFV实体可以确定向第一NFV实体回收策略管理。In this embodiment, the second NFV entity may detect the policy identifier and the target policy event carried in the received policy event notification message, and carry the result in the determination information sent by the second NFV entity to the first NFV entity. When the policy identification of the entrusted management and the target policy event match, the second NFV entity may determine to reclaim the policy management to the first NFV entity.

505、第二NFV实体发送回收策略管理请求消息至第一NFV实体；505. The second NFV entity sends a recovery policy management request message to the first NFV entity.

本实施例中，第二NFV实体在确定向第一NFV实体回收策略管理时，可以生成回收策略管理请求消息。第二NFV实体可以将该回收策略管理请求消息发送至第一NFV实体。In this embodiment, the second NFV entity may generate a reclaim policy management request message when determining to reclaim policy management to the first NFV entity. The second NFV entity may send the Reclaim Policy Management Request message to the first NFV entity.

可选的，该回收策略管理请求消息中可以包含目标策略的策略标识，第一NFV实体可以依据该策略标识确定第二NFV实体确定回收策略管理。Optionally, the reclaiming policy management request message may include a policy identifier of the target policy, and the first NFV entity may determine, according to the policy identifier, that the second NFV entity determines the reclaiming policy management.

506、第一NFV实体反馈回收策略管理应答消息至第二NFV实体；506. The first NFV entity feeds back the recovery policy management response message to the second NFV entity.

本实施例中，第一NFV实体可以在接收到第二NFV实体发送的回收策略管理请求消息时，生成回收策略管理应答消息反馈给第二NFV实体。In this embodiment, the first NFV entity may generate a reclaim policy management response message feedback to the second NFV entity when receiving the reclaim policy management request message sent by the second NFV entity.

507、第一NFV实体解除对目标策略的委托管理。507. The first NFV entity releases the entrusted management of the target strategy.

本实施例中，第一NFV实体可以解除对该目标策略的委托管理，可选的，步骤507也可以在步骤506之前，在步骤505之后。In this embodiment, the first NFV entity may release the entrusted management of the target policy. Optionally, step 507 may also be before step 506, after step 505.

本申请实施例中，第二NFV实体通过在发送给第一NFV实体的管理策略中携带需监控的目标策略事件，并根据第一NFV实体上报的目标策略事件确定向第一NFV实体发起目标策略的委托管理回收，增加了目标策略委托管理回收的灵活性。In the embodiment of the present application, the second NFV entity carries the target policy event to be monitored in the management policy sent to the first NFV entity, and determines to initiate the target policy to the first NFV entity according to the target policy event reported by the first NFV entity. The entrusted management recycling increases the flexibility of the target strategy entrusted management recovery.

上面介绍了本申请实施例中的策略管理方法的实施例以及回收策略管理的实施例，下面对图2或者图3对应的实施例中的第一NFV实体进行介绍，请参阅图6，本申请实施例中NFV实体一个实施例包括： The embodiment of the policy management method and the embodiment of the recovery policy management in the embodiment of the present application are described above. The first NFV entity in the embodiment corresponding to FIG. 2 or FIG. 3 is introduced below. Please refer to FIG. An embodiment of the NFV entity in the application embodiment includes:

处理器601、通信接口602以及存储器603。其中，处理器601的数量可以一个或多个，图6中以一个处理器601为例。处理器601可以是一种集成电路芯片，具有信号的处理能力。在实现过程中，上述方法的各步骤可以通过处理器601中的硬件的集成逻辑电路或者软件形式的指令完成。上述的处理器601可以是通用处理器、数字信号处理器(英文全称：Digital Signal Processing，英文缩写：DSP)、专用集成电路(英文全称：Application Specific Integrated Circuit，英文缩写：ASIC)、现场可编程门阵列(英文全称：Field Programmable Gate Array，英文缩写：FPGA)或者其他可编程逻辑器件、分立门或者晶体管逻辑器件、分立硬件组件。可以实现或者执行本申请实施例中的公开的各方法、步骤及逻辑框图。通用处理器可以是微处理器或者该处理器也可以是任何常规的处理器等。结合本申请实施例所公开的方法的步骤可以直接体现为硬件译码处理器执行完成，或者用译码处理器中的硬件及软件模块组合执行完成。软件模块可以位于随机存储器，闪存、只读存储器，可编程只读存储器或者电可擦写可编程存储器、寄存器等本领域成熟的存储介质中。The processor 601, the communication interface 602, and the memory 603. The number of the processors 601 may be one or more, and one processor 601 is taken as an example in FIG. The processor 601 can be an integrated circuit chip with signal processing capabilities. In the implementation process, each step of the foregoing method may be completed by an integrated logic circuit of hardware in the processor 601 or an instruction in a form of software. The processor 601 may be a general-purpose processor, a digital signal processor (English name: Digital Signal Processing, English abbreviation: DSP), an application specific integrated circuit (English name: Application Specific Integrated Circuit, English abbreviation: ASIC), field programmable Gate array (English full name: Field Programmable Gate Array, English abbreviation: FPGA) or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components. The methods, steps, and logical block diagrams disclosed in the embodiments of the present application can be implemented or executed. The general purpose processor may be a microprocessor or the processor or any conventional processor or the like. The steps of the method disclosed in the embodiments of the present application may be directly implemented by the hardware decoding processor, or may be performed by a combination of hardware and software modules in the decoding processor. The software module can be located in a conventional storage medium such as random access memory, flash memory, read only memory, programmable read only memory or electrically erasable programmable memory, registers, and the like.

存储器603用于存放程序。具体地，程序可以包括程序代码，程序代码包括计算机操作指令。存储器603可能为随机存取存储器(英文全称：Random Access Memory，英文缩写：RAM)，也可能为非易失性存储器(英文全称：non-volatile memory)，例如至少一个磁盘存储器。图中仅示出了一个存储器，当然，存储器也可以根据需要，设置为多个。存储器603也可以是处理器601中的存储器。The memory 603 is used to store programs. In particular, the program can include program code, the program code including computer operating instructions. The memory 603 may be a random access memory (English name: Random Access Memory, English abbreviation: RAM), or may be a non-volatile memory (English name: non-volatile memory), such as at least one disk storage. Only one memory is shown in the figure, of course, the memory can also be set to a plurality as needed. Memory 603 can also be a memory in processor 601.

在本申请的一些实施例中，处理器601、通信接口602和存储器603可通过总线或其它方式连接，其中，图6中以通过总线连接为例。通信接口602可以包括输入输出接口。In some embodiments of the present application, the processor 601, the communication interface 602, and the memory 603 may be connected by a bus or other means, wherein the bus connection is taken as an example in FIG. Communication interface 602 can include an input and output interface.

其中，among them,

通信接口602用于接收第二NFV实体发送的委托策略管理消息，委托策略管理消息包含需要委托的目标策略的确定信息以及目标策略的管理策略，确定信息用于确定目标策略，管理策略用于管理目标策略；The communication interface 602 is configured to receive a delegation policy management message sent by the second NFV entity, where the delegation policy management message includes the determination information of the target policy to be trusted and the management policy of the target policy, and the determination information is used to determine the target policy, and the management policy is used for management. Target strategy

处理器601用于根据确定信息确定目标策略，并根据管理策略对目标策略进行管理。 The processor 601 is configured to determine a target policy according to the determination information, and manage the target policy according to the management policy.

可选的，在本申请的一些实施例中，通信接口602还用于向第二NFV实体发送委托策略管理请求消息，委托策略管理请求消息用于指示第二NFV实体向NFV实体发送委托策略管理消息。Optionally, in some embodiments of the present application, the communication interface 602 is further configured to send a delegation policy management request message to the second NFV entity, where the delegation policy management request message is used to instruct the second NFV entity to send the delegation policy management to the NFV entity. Message.

可选的，在本申请的一些实施例中，确定信息包括：委托管理的策略标识或策略类型。Optionally, in some embodiments of the present application, the determining information includes: a policy identifier or a policy type of the entrusted management.

管理策略包括：Management strategies include:

许可的策略管理操作；和/或，Licensed policy management operations; and/or,

策略更新约束；和/或，Policy update constraints; and/or,

策略委托有效期；和/或，Policy entrustment validity period; and/or,

目标策略事件。Target policy event.

可选的，在本申请的一些实施例中，若管理策略包含许可的策略管理操作，则处理器601还用于根据许可的策略管理操作修改目标策略或删除目标策略。Optionally, in some embodiments of the present application, if the management policy includes a licensed policy management operation, the processor 601 is further configured to modify the target policy or delete the target policy according to the licensed policy management operation.

若管理策略包含策略更新约束，则处理器601还用于根据策略更新约束更新目标策略。If the management policy includes a policy update constraint, the processor 601 is further configured to update the target policy according to the policy update constraint.

可选的，在本申请的一些实施例中，若管理策略包含目标策略事件，则处理器601还用于监控目标策略的执行，并且若处理器601监控到目标策略事件，处理器601解除对目标策略的委托管理。其中，Optionally, in some embodiments of the present application, if the management policy includes a target policy event, the processor 601 is further configured to monitor execution of the target policy, and if the processor 601 monitors the target policy event, the processor 601 releases the pair. Entrusted management of the target strategy. among them,

通信接口602还用于向第二NFV实体发送策略事件通知消息，策略事件通知消息包含目标策略事件以及目标策略对应的策略标识；The communication interface 602 is further configured to send a policy event notification message to the second NFV entity, where the policy event notification message includes the target policy event and the policy identifier corresponding to the target policy;

通信接口602还用于接收第二NFV实体发送的回收策略管理请求消息，回收策略管理请求消息包含目标策略对应的策略标识；The communication interface 602 is further configured to receive a recovery policy management request message sent by the second NFV entity, where the recovery policy management request message includes a policy identifier corresponding to the target policy;

通信接口602还用于向第二NFV实体反馈回收策略管理应答消息；The communication interface 602 is further configured to feed back a recovery policy management response message to the second NFV entity;

处理器601还用于根据目标策略对应的策略标识解除对目标策略的委托管理。The processor 601 is further configured to release the entrusted management of the target policy according to the policy identifier corresponding to the target policy.

可选的，在本申请的一些实施例中，若管理策略包含策略委托有效期，则处理器601还用于根据策略委托有效期解除对目标策略的委托管理；Optionally, in some embodiments of the present application, if the management policy includes a policy entrustment validity period, the processor 601 is further configured to release the entrusted management of the target policy according to the policy entrustment validity period;

通信接口602还用于向第二NFV实体发送回收策略管理通知消息，回收策略管理通知消息包含目标策略对应的策略标识。其中，The communication interface 602 is further configured to send a reclaim policy management notification message to the second NFV entity, where the reclaim policy management notification message includes a policy identifier corresponding to the target policy. among them,

处理器601还用于根据策略委托有效期启动定时器； The processor 601 is further configured to start a timer according to a policy entrustment validity period;

若定时器到时，处理器601解除对目标策略的委托管理。If the timer expires, the processor 601 de-authorizes the target policy.

下面介绍图2或者图3对应的实施例中的第二NFV实体，请参阅图7，图7为本申请实施例中NFV实体另一实施例包括：The second NFV entity in the embodiment corresponding to FIG. 2 or FIG. 3 is described below. Referring to FIG. 7, FIG. 7 is another embodiment of the NFV entity in the embodiment of the present application, including:

处理器701、通信接口702以及存储器703。其中，处理器701的数量可以一个或多个，图7中以一个处理器701为例。本实施例中的处理器701可以与图6所示实施例中的处理器601相同，通信接口702可以与图6所示实施例中的通信接口602相同，存储器703可以与图6所示实施例中的存储器603相同，此处不再赘述。The processor 701, the communication interface 702, and the memory 703. The number of the processors 701 may be one or more, and one processor 701 is taken as an example in FIG. The processor 701 in this embodiment may be the same as the processor 601 in the embodiment shown in FIG. 6. The communication interface 702 may be the same as the communication interface 602 in the embodiment shown in FIG. 6, and the memory 703 may be implemented as shown in FIG. The memory 603 in the example is the same and will not be described again here.

在本申请的一些实施例中，处理器701、通信接口702和存储器703可通过总线或其它方式连接，其中，图7中以通过总线连接为例。通信接口702可以包括输入输出接口。In some embodiments of the present application, the processor 701, the communication interface 702, and the memory 703 may be connected by a bus or other means, wherein FIG. 7 is exemplified by a bus connection. Communication interface 702 can include an input and output interface.

其中，among them,

通信接口702用于向第一NFV实体发送委托策略管理消息，委托策略管理消息包含需要委托的目标策略的确定信息以及目标策略的管理策略，确定信息用于确定目标策略，管理策略用于管理目标策略。The communication interface 702 is configured to send a delegation policy management message to the first NFV entity, where the delegation policy management message includes the determination information of the target policy to be trusted and the management policy of the target policy, the determination information is used to determine the target policy, and the management policy is used to manage the target Strategy.

可选的，在本申请的一些实施例中，通信接口702还用于接收第一NFV实体发送的委托策略管理请求消息；Optionally, in some embodiments of the present application, the communication interface 702 is further configured to receive a delegation policy management request message sent by the first NFV entity;

处理器701还用于根据委托策略管理请求消息向第一NFV实体发送委托策略管理消息。The processor 701 is further configured to send a delegation policy management message to the first NFV entity according to the delegation policy management request message.

所属领域的技术人员可以清楚地了解到，为描述的方便和简洁，上述描述的***，装置和单元的具体工作过程，可以参考前述方法实施例中的对应过程，在此不再赘述。A person skilled in the art can clearly understand that for the convenience and brevity of the description, the specific working process of the system, the device and the unit described above can refer to the corresponding process in the foregoing method embodiment, and details are not described herein again.

在本申请所提供的几个实施例中，应该理解到，所揭露的***，装置和方法，可以通过其它的方式实现。例如，以上所描述的装置实施例仅仅是示意性的，例如，所述单元的划分，仅仅为一种逻辑功能划分，实际实现时可以有另外的划分方式，例如多个单元或组件可以结合或者可以集成到另一个***，或一些特征可以忽略，或不执行。另一点，所显示或讨论的相互之间的耦合或直接耦合或通信连接可以是通过一些接口，装置或单元的间接耦合或通信连接，可以是电性，机械或其它的形式。In the several embodiments provided by the present application, it should be understood that the disclosed system, apparatus, and method may be implemented in other manners. For example, the device embodiments described above are merely illustrative. For example, the division of the unit is only a logical function division. In actual implementation, there may be another division manner, for example, multiple units or components may be combined or Can be integrated into another system, or some features can be ignored or not executed. Another point, the mutual coupling or straightness shown or discussed The coupling or communication connection may be an indirect coupling or communication connection through some interface, device or unit, and may be in electrical, mechanical or other form.

所述作为分离部件说明的单元可以是或者也可以不是物理上分开的，作为单元显示的部件可以是或者也可以不是物理单元，即可以位于一个地方，或者也可以分布到多个网络单元上。可以根据实际的需要选择其中的部分或者全部单元来实现本实施例方案的目的。The units described as separate components may or may not be physically separated, and the components displayed as units may or may not be physical units, that is, may be located in one place, or may be distributed to multiple network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the solution of the embodiment.

另外，在本申请各个实施例中的各功能单元可以集成在一个处理单元中，也可以是各个单元单独物理存在，也可以两个或两个以上单元集成在一个单元中。上述集成的单元既可以采用硬件的形式实现，也可以采用软件功能单元的形式实现。In addition, each functional unit in each embodiment of the present application may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit. The above integrated unit can be implemented in the form of hardware or in the form of a software functional unit.

所述集成的单元如果以软件功能单元的形式实现并作为独立的产品销售或使用时，可以存储在一个计算机可读取存储介质中。基于这样的理解，本申请的技术方案本质上或者说对现有技术做出贡献的部分或者该技术方案的全部或部分可以以软件产品的形式体现出来，该计算机软件产品存储在一个存储介质中，包括若干指令用以使得一台计算机设备(可以是个人计算机，服务器，或者网络设备等)执行本申请各个实施例所述方法的全部或部分步骤。而前述的存储介质包括：U盘、移动硬盘、只读存储器(英文全称：Read-Only Memory，英文缩写：ROM)、随机存取存储器(英文全称：Random Access Memory，英文缩写：RAM)、磁碟或者光盘等各种可以存储程序代码的介质。The integrated unit, if implemented in the form of a software functional unit and sold or used as a standalone product, may be stored in a computer readable storage medium. Based on such understanding, the technical solution of the present application, in essence or the contribution to the prior art, or all or part of the technical solution may be embodied in the form of a software product stored in a storage medium. A number of instructions are included to cause a computer device (which may be a personal computer, server, or network device, etc.) to perform all or part of the steps of the methods described in various embodiments of the present application. The foregoing storage medium includes: a U disk, a mobile hard disk, a read only memory (English full name: Read-Only Memory, English abbreviation: ROM), a random access memory (English full name: Random Access Memory, English abbreviation: RAM), magnetic A variety of media that can store program code, such as a disc or a disc.

以上所述，以上实施例仅用以说明本申请的技术方案，而非对其限制；尽管参照前述实施例对本申请进行了详细的说明，本领域的普通技术人员应当理解：其依然可以对前述各实施例所记载的技术方案进行修改，或者对其中部分技术特征进行等同替换；而这些修改或者替换，并不使相应技术方案的本质脱离本申请各实施例技术方案的精神和范围。 The above embodiments are only used to explain the technical solutions of the present application, and are not limited thereto; although the present application has been described in detail with reference to the foregoing embodiments, those skilled in the art should understand that they can still The technical solutions described in the embodiments are modified, or the equivalents of the technical features are replaced by the equivalents. The modifications and substitutions of the embodiments do not depart from the spirit and scope of the technical solutions of the embodiments of the present application.

Claims

一种策略管理方法，其特征在于，所述方法应用于网络功能虚拟化***，所述方法包括：A method for managing a policy, the method being applied to a network function virtualization system, the method comprising:

第一NFV实体接收第二NFV实体发送的委托策略管理消息，所述委托策略管理消息包含需要委托的目标策略的确定信息以及所述目标策略的管理策略，所述确定信息用于确定所述目标策略，所述管理策略用于管理所述目标策略；The first NFV entity receives a delegation policy management message sent by the second NFV entity, the delegation policy management message includes determination information of the target policy that needs to be delegated, and a management policy of the target policy, the determination information is used to determine the target a policy for managing the target policy;

所述第一NFV实体根据所述确定信息确定所述目标策略；Determining, by the first NFV entity, the target policy according to the determining information;

所述第一NFV实体根据所述管理策略对委托的所述目标策略进行管理。The first NFV entity manages the delegated target policy according to the management policy.
根据权利要求1所述的策略管理方法，其特征在于，所述第一NFV实体接收第二NFV实体发送的委托策略管理消息之前，所述方法还包括：The policy management method according to claim 1, wherein before the first NFV entity receives the delegation policy management message sent by the second NFV entity, the method further includes:

所述第一NFV实体向所述第二NFV实体发送委托策略管理请求消息，所述委托策略管理请求消息用于指示所述第二NFV实体向所述第一NFV实体发送委托策略管理消息。The first NFV entity sends a delegation policy management request message to the second NFV entity, where the delegation policy management request message is used to instruct the second NFV entity to send a delegation policy management message to the first NFV entity.
根据权利要求1或2所述的策略管理方法，其特征在于，所述确定信息包括：委托管理的策略标识或策略类型。The policy management method according to claim 1 or 2, wherein the determining information comprises: a policy identifier or a policy type of the entrusted management.
根据权利要求3所述的策略管理方法，其特征在于，所述管理策略包括：The policy management method according to claim 3, wherein the management policy comprises:

许可的策略管理操作；和/或，Licensed policy management operations; and/or,

策略更新约束；和/或，Policy update constraints; and/or,

策略委托有效期；和/或，Policy entrustment validity period; and/or,

目标策略事件。Target policy event.
根据权利要求4所述的策略管理方法，其特征在于，若所述管理策略包含所述许可的策略管理操作，则所述第一NFV实体根据所述管理策略对所述目标策略进行管理包括：The policy management method according to claim 4, wherein if the management policy includes the policy management operation of the license, the managing, by the first NFV entity, the target policy according to the management policy comprises:

所述第一NFV实体根据所述许可的策略管理操作修改所述目标策略或删除所述目标策略。The first NFV entity modifies the target policy or deletes the target policy according to the licensed policy management operation.
根据权利要求4所述的策略管理方法，其特征在于，若所述管理策略包含所述策略更新约束，则所述第一NFV实体根据所述管理策略对所述目标策略进行管理包括：The policy management method according to claim 4, wherein if the management policy includes the policy update constraint, the first NFV entity targets the target according to the management policy Policy management includes:

所述第一NFV实体根据所述策略更新约束更新所述目标策略。The first NFV entity updates the target policy according to the policy update constraint.
根据权利要求4所述的策略管理方法，其特征在于，若所述管理策略包含所述目标策略事件，则所述第一NFV实体根据所述管理策略对所述目标策略进行委托管理包括：The policy management method according to claim 4, wherein if the management policy includes the target policy event, the first NFV entity entrusting the target policy according to the management policy comprises:

所述第一NFV实体监控所述目标策略的执行；The first NFV entity monitors execution of the target policy;

若所述第一NFV实体监控到所述目标策略事件，所述第一NFV实体解除对所述目标策略的委托管理。If the first NFV entity monitors the target policy event, the first NFV entity de-authorizes the target policy.
根据权利要求7所述的策略管理方法，其特征在于，所述第一NFV实体解除对所述目标策略的委托管理包括：The policy management method according to claim 7, wherein the delining management of the target policy by the first NFV entity comprises:

所述第一NFV实体向所述第二NFV实体发送策略事件通知消息，所述策略事件通知消息包含所述目标策略事件以及所述目标策略对应的策略标识；Transmitting, by the first NFV entity, a policy event notification message to the second NFV entity, where the policy event notification message includes the target policy event and a policy identifier corresponding to the target policy;

所述第一NFV实体接收所述第二NFV实体发送的回收策略管理请求消息，所述回收策略管理请求消息包含所述目标策略对应的策略标识；Receiving, by the first NFV entity, a reclaim policy management request message sent by the second NFV entity, where the reclaiming policy management request message includes a policy identifier corresponding to the target policy;

所述第一NFV实体向所述第二NFV实体反馈回收策略管理应答消息，并根据所述目标策略对应的策略标识解除对所述目标策略的委托管理。The first NFV entity feeds back a recovery policy management response message to the second NFV entity, and deactivates the entrusted management of the target policy according to the policy identifier corresponding to the target policy.
根据权利要求4所述的策略管理方法，其特征在于，若所述管理策略包含所述策略委托有效期，则所述第一NFV实体根据所述管理策略对所述目标策略进行管理包括：The policy management method according to claim 4, wherein if the management policy includes the policy delegation validity period, the managing, by the first NFV entity, the target policy according to the management policy comprises:

所述第一NFV实体根据所述策略委托有效期解除对所述目标策略的委托管理，并向所述第二NFV实体发送回收策略管理通知消息，所述回收策略管理通知消息包含所述目标策略对应的策略标识。Determining, by the first NFV entity, the entrusted management of the target policy according to the policy entrustment validity period, and sending a reclaim policy management notification message to the second NFV entity, where the reclaiming policy management notification message includes the target policy corresponding to Strategy ID.
根据权利要求9所述的策略管理方法，其特征在于，所述第一NFV实体根据所述策略委托有效期解除对所述目标策略的委托管理包括：The policy management method according to claim 9, wherein the first NFV entity releases the entrusted management of the target policy according to the policy entrustment validity period, including:

所述第一NFV实体根据所述策略委托有效期启动定时器；The first NFV entity starts a timer according to the policy entrustment validity period;

若所述定时器到时，所述第一NFV实体解除对所述目标策略的委托管理。If the timer expires, the first NFV entity releases the entrusted management of the target policy.
根据权利要求1至10中任一项所述的策略管理方法，其特征在于，所述第一NFV实体包括网络功能虚拟化编排器NFVO，所述第二NFV实体包括虚拟网络功能管理器VNFM。 The policy management method according to any one of claims 1 to 10, wherein the first NFV entity comprises a network function virtualization orchestrator NFVO, and the second NFV entity comprises a virtual network function manager VNFM.
一种NFV实体，其特征在于，包括：An NFV entity characterized by comprising:

处理器以及通信接口；a processor and a communication interface;

所述通信接口用于接收第二NFV实体发送的委托策略管理消息，所述委托策略管理消息包含需要委托的目标策略的确定信息以及所述目标策略的管理策略，所述确定信息用于确定所述目标策略，所述管理策略用于管理所述目标策略；The communication interface is configured to receive a delegation policy management message sent by a second NFV entity, where the delegation policy management message includes determination information of a target policy that needs to be delegated, and a management policy of the target policy, where the determination information is used to determine a target policy, the management policy for managing the target policy;

所述处理器用于根据所述确定信息确定所述目标策略，并根据所述管理策略对委托的所述目标策略进行管理。The processor is configured to determine the target policy according to the determining information, and manage the trusted target policy according to the management policy.
根据权利要求12所述的NFV实体，其特征在于，所述通信接口还用于向所述第二NFV实体发送委托策略管理请求消息，所述委托策略管理请求消息用于指示所述第二NFV实体向所述NFV实体发送委托策略管理消息。The NFV entity according to claim 12, wherein the communication interface is further configured to send a delegation policy management request message to the second NFV entity, where the delegation policy management request message is used to indicate the second NFV The entity sends a delegation policy management message to the NFV entity.
根据权利要求12或13所述的NFV实体，其特征在于，所述确定信息包括：委托管理的策略标识或策略类型。The NFV entity according to claim 12 or 13, wherein the determination information comprises: a policy identification or a policy type of entrusted management.
根据权利要求14所述的NFV实体，其特征在于，所述管理策略包括：The NFV entity according to claim 14, wherein the management policy comprises:

许可的策略管理操作；和/或，Licensed policy management operations; and/or,

策略更新约束；和/或，Policy update constraints; and/or,

策略委托有效期；和/或，Policy entrustment validity period; and/or,

目标策略事件。Target policy event.
根据权利要求15所述的NFV实体，其特征在于，若所述管理策略包含所述许可的策略管理操作，则所述处理器还用于根据所述许可的策略管理操作修改所述目标策略或删除所述目标策略。The NFV entity according to claim 15, wherein if the management policy includes the policy management operation of the license, the processor is further configured to modify the target policy according to the policy management operation of the license or Delete the target policy.
根据权利要求15所述的NFV实体，其特征在于，若所述管理策略包含所述策略更新约束，则所述处理器还用于根据所述策略更新约束更新所述目标策略。The NFV entity according to claim 15, wherein if the management policy includes the policy update constraint, the processor is further configured to update the target policy according to the policy update constraint.
根据权利要求15所述的NFV实体，其特征在于，若所述管理策略包含所述目标策略事件，则所述处理器还用于监控所述目标策略的执行，并且若所述处理器监控到所述目标策略事件，所述处理器解除对所述目标策略的委托管理。The NFV entity according to claim 15, wherein if the management policy includes the target policy event, the processor is further configured to monitor execution of the target policy, and if the processor monitors The target policy event, the processor decommissioning management of the target policy.
根据权利要求18所述的NFV实体，其特征在于， The NFV entity of claim 18, wherein

所述通信接口还用于向所述第二NFV实体发送策略事件通知消息，所述策略事件通知消息包含所述目标策略事件以及所述目标策略对应的策略标识；The communication interface is further configured to send a policy event notification message to the second NFV entity, where the policy event notification message includes the target policy event and a policy identifier corresponding to the target policy;

所述通信接口还用于接收所述第二NFV实体发送的回收策略管理请求消息，所述回收策略管理请求消息包含所述目标策略对应的策略标识；The communication interface is further configured to receive a reclaim policy management request message sent by the second NFV entity, where the reclaim policy management request message includes a policy identifier corresponding to the target policy;

所述通信接口还用于向所述第二NFV实体反馈回收策略管理应答消息；The communication interface is further configured to feed back a recovery policy management response message to the second NFV entity;

所述处理器还用于根据所述目标策略对应的策略标识解除对所述目标策略的委托管理。The processor is further configured to release the entrusted management of the target policy according to the policy identifier corresponding to the target policy.
根据权利要求15所述的NFV实体，其特征在于，若所述管理策略包含所述策略委托有效期，The NFV entity according to claim 15, wherein if said management policy includes said policy entrustment validity period,

则所述处理器还用于根据所述策略委托有效期解除对所述目标策略的委托管理；And the processor is further configured to release the entrusted management of the target policy according to the policy entrusting validity period;

所述通信接口还用于向所述第二NFV实体发送回收策略管理通知消息，所述回收策略管理通知消息包含所述目标策略对应的策略标识。The communication interface is further configured to send a reclaim policy management notification message to the second NFV entity, where the reclaim policy management notification message includes a policy identifier corresponding to the target policy.
根据权利要求20所述的NFV实体，其特征在于，The NFV entity according to claim 20, characterized in that

所述处理器还用于根据所述策略委托有效期启动定时器；The processor is further configured to start a timer according to the policy entrusting validity period;

若所述定时器到时，所述处理器解除对所述目标策略的委托管理。If the timer expires, the processor releases the entrusted management of the target policy.
一种NFV实体，其特征在于，包括：An NFV entity characterized by comprising:

处理器以及通信接口；a processor and a communication interface;

所述通信接口用于向第一NFV实体发送委托策略管理消息，所述委托策略管理消息包含需要委托的目标策略的确定信息以及所述目标策略的管理策略，所述确定信息用于确定所述目标策略，所述管理策略用于管理所述目标策略。The communication interface is configured to send a delegation policy management message to the first NFV entity, where the delegation policy management message includes determination information of a target policy that needs to be delegated, and a management policy of the target policy, where the determination information is used to determine the A target policy for managing the target policy.
根据权利要求22所述的NFV实体，其特征在于，The NFV entity according to claim 22, characterized in that

所述通信接口还用于接收所述第一NFV实体发送的委托策略管理请求消息；The communication interface is further configured to receive a delegation policy management request message sent by the first NFV entity;

所述处理器还用于根据所述委托策略管理请求消息向所述第一NFV实体发送所述委托策略管理消息。 The processor is further configured to send the delegation policy management message to the first NFV entity according to the delegation policy management request message.