An information processing method, comprising: obtaining, by a data analytics network element, terminal behavioral information of a plurality of first terminals; determining, by the data analytics network element, network side-expected terminal behavioral information based on the terminal behavioral information of the plurality of first terminals; determining, by the data analytics network element, exception type of a terminal based on the network side-expected terminal behavioral information, wherein the terminal is one of the plurality of first terminals, or is a new terminal; wherein the exception type of the terminal is the terminal being hijacked or being incorrectly used, and sending, by the data analytics network element, alarm information to a policy control function network element, wherein the alarm information indicates the exception type of the terminal; the method further comprises: receiving, by the data analytics network element from a first core network element, terminal behavioral information that corresponds to the terminal and that is on the first core network element when the terminal behavioral information that corresponds to the terminal and that is on the first core network element does not match the network side-expected terminal behavioral information received by the first core network element; and receiving, by the data analytics network element from a second core network element, terminal behavioral information that corresponds to the terminal and that is on the second core network element; wherein the determining, by the data analytics network element, the exception type of the terminal based on the network side-expected terminal behavioral information, comprises: determining, by the data analytics network element, exception type of the terminal based on the terminal behavioral information that corresponds to the terminal and that is on the first core network element and the terminal behavioral information that corresponds to the terminal and that is on the second core network element. obtaining, by a data analytics network element, terminal behavioral information of a plurality of first terminals; determining, by the data analytics network element, network side-expected terminal behavioral information based on the terminal behavioral information of the plurality of first terminals; determining, by the data analytics network element, exception type of a terminal based on the network side-expected terminal behavioral information, wherein the terminal is one of the plurality of first terminals, or is a new terminal; wherein the exception type of the terminal is the terminal being hijacked or being incorrectly used, and sending, by the data analytics network element, alarm information to a policy control function network element, wherein the alarm information indicates the exception type of the terminal; the method further comprises: receiving, by the data analytics network element from a first core network element, terminal behavioral information that corresponds to the terminal and that is on the first core network element when the terminal behavioral information that corresponds to the terminal and that is on the first core network element does not match the network side-expected terminal behavioral information received by the first core network element; and receiving, by the data analytics network element from a second core network element, terminal behavioral information that corresponds to the terminal and that is on the second core network element; wherein the determining, by the data analytics network element, the exception type of the terminal based on the network side-expected terminal behavioral information, comprises: determining, by the data analytics network element, exception type of the terminal based on the terminal behavioral information that corresponds to the terminal and that is on the first core network element and the terminal behavioral information that corresponds to the terminal and that is on the second core network element. receiving, by the data analytics network element from a first core network element, terminal behavioral information that corresponds to the terminal and that is on the first core network element when the terminal behavioral information that corresponds to the terminal and that is on the first core network element does not match the network side-expected terminal behavioral information received by the first core network element; and receiving, by the data analytics network element from a second core network element, terminal behavioral information that corresponds to the terminal and that is on the second core network element; wherein the determining, by the data analytics network element, the exception type of the terminal based on the network side-expected terminal behavioral information, comprises: determining, by the data analytics network element, exception type of the terminal based on the terminal behavioral information that corresponds to the terminal and that is on the first core network element and the terminal behavioral information that corresponds to the terminal and that is on the second core network element.