Академический Документы
Профессиональный Документы
Культура Документы
tS"itch #enter
Ta le o! #ontents
Table of Contents
Chapter 15 Signaling Procedures............................................................................................... 1 $%&$ M'W (egistration Proce)ure&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&& $ $%&$&$ M'W (egistration Proce)ure&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&$ $%&$&* M'W +eregistration Proce)ure&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&$ $%&* #all Proce)ures&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&& * $%&*&$ Mo ile Su scri er #alling Mo ile Su scri er&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&* $%&*&* Mo ile Su scri er #alling PST, Su scri er&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&$%&*&3 PST, Su scri er #alling Mo ile Su scri er&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&$* $%&*&. Pre/0aging&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&& $3 $%&*&% #all For"ar)ing Ser1ices&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&$. $%&*&2 #FU&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&& $% $%&*&- #F3&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&& $2 $%&*&4 #F,(5&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&& *0 $%&*&6 #F,(c&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&& *3 $%&3 SMS Proce)ures&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&& *. $%&3&$ O1er1ie"&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&& *. $%&3&* Mo ile Originate) SMS&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&*% $%&3&3 Mo ile Ter7inate) SMS&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&*2 $%&3&. SMS Alerting Proce)ures&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&*$%&. 8ocation Ser1ice Proce)ures&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&& *6 $%&.&$ O1er1ie"&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&& *6 $%&.&* 'eneral 8#S Architecture&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&30 $%&.&3 'eneral ,et"or9 8ocation Proce)ures&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&3$ $%&% I, Ser1ice Han)ling Proce)ures&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&3$%&%&$ Pre/0ai) Ser1ice Han)ling Proce)ures&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&3$%&%&* Mo ile Originate) SMS Han)ling Proce)ure&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&.3 $%&%&3 Mo ilit5 Manage7ent E1ent ,oti!ication Han)ling Proce)ure&&&&&&&&&&&&&&&&&&&&&&&&&&&&.. $%&2 Mo ilit5 Manage7ent&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&& .% $%&2&$ O1er1ie"&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&& .% $%&2&* 8ocation Manage7ent&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&& .% $&3&$ 3asic Proce)ures&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&& .2 $&3&* Ma:or Proce)ures&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&& %0 $&3&3 Han)o1er&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&& %2 $&3&. Intra/UMTS Han)o1er&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&& %4 $&3&% Inter/S5ste7 Han)o1er&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&& 22 $%&2&3 (oa7ing (estriction&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&& -. $%&- Securit5 Manage7ent&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&& -.
Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter
Ta le o! #ontents
$%&-&$ Authentication&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&& -. $%&-&* 'SM Authentication&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&& -. $%&-&3 UMTS Authentication&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&-4 $%&-&. +ual/Mo)e MS Authentication&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&4$ $%&-&% Encr50tion&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&& 43 $%&-&2 Integrit5 Protection&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&& 4. $%&-&- TMSI (eallocation&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&4%
Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter
Ser1ice#hange>(e0l5
Figure 1.1 M'W registration 0roce)ure $< When an M'W is in ser1ice !or the !irst ti7e or restarte)= it sen)s the Ser1ice#hange 7essage to the MS# Ser1er to "hich it elongs to re?uest registration& This 7essage contains such )escri0tors as Metho) ;@(estartA= !or eBa70le<= Ser1ice#hangeA))ress ;a))ress 7essage< an) (eason& This 7essage corres0on)s to the (OOT ter7inal ;that is= the "hole M'W<& *< The MS# Ser1er authenticates the M'W an) returns the Ser1ice#hange>(e0l5 7essage ;containing Ser1ice#hangeA))ress< to acce0t registration& I! the MS# Ser1er re:ects the registration )ue to inconsistent 1ersion or M'W out o! control= it sen)s the 7essage Ser1ice#hange>(e0l5 ;containing (eason< to the M'W&
Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter
$<
When an M'W eBits= it sen)s the Ser1ice#hange 7essage to the MS# Ser1er to "hich it elongs to re?uest )eregistration& This 7essage contains such )escri0tors as Metho) ;@Force)A= !or eBa70le< an) (eason ;!or eBa70le= 60% ATer7ination ta9en out o! ser1iceA<& This 7essage corres0on)s to the (OOT ter7inal ;that is= the "hole M'W<&
*<
MGW
RNC-O
RNC-T
UE-O
UE-T
Figure 1.1 #all 7o)el ;7o ile su scri er calling 7o ile su scri er<
!.
#ote$ MS# Ser1er an) C8( are co7 ine)= so inter!ace 3 is an internal one an) the 7essages at inter!ace 3 are internal 7essages&
Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter
UE-O
MSC Server/VLR
MGW
HLR
M !_SEN"_ UTHENTIC TION_IN#O M !_SEN"_ UTHENTIC TION_IN#O_ C$ Security management r!ce"ure (! ti!na#) AUTHENTICATION REQUEST AUTHENTICATION RESPONSE SECURITY MODE COMMAND(OPTION) SECURITY MODE COMPLETE(OPTION) COMMON I" CM_SERVERICE_ CCE!T SETU! C LL !ROCEE"ING !RE! %E RER !RE! %E RER U$er #ane %earer e$ta%#i$&ment r!ce"ure at ca##er $i"e R % SSIGNMENT RE&UEST R "IO %E RER SETU! R "IO %E RER SETU! COM!LETE %E RER EST %LISHMENT R % SSIGNMENT RES!ONSE
Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter
HLR
MGW
MSC Server/VLR
RNS-T
UE-T
M !_SEN"_ROUTING_IN#ORM TION !r'ce()re '* +ettin+ r'a,in+ n),-er M !_!ROVI"E_RO MING_NUM%ER M !_!ROVI"E_RO MING_NUM%ER_ C$
VLR
M !_SEN"_ROUTING_IN#ORM TION_ C$ ! GIN G ! GING RES!ONSE AUTHENTICATION REQUEST Security management r!ce"ure (! ti!na#) AUTHENTICATION RESPONSE SECURITY MODE COMMAND SECURITY MODE COMPLETE COMMON I" SETU! C LL CON#IRME" !RE! %E RER !RE! %E RER U$er #ane %earer e$ta%#i$&ment r!ce"ure at ca##ee $i"e R % SSIGNMENT RE&UEST R "IO %E RER SETU! R "IO %E RER SETU! COM!LETE %E RER EST %LISHMENT
R % SSIGNMENT RES!ONSE
Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter
UE-O
RNS-O LERTING
VMSC/GMSC
MGW
RNC-T
UE-T
SEN"TONE SEN"TONE CONNECT STO! TONE STO! TONE CONNECT CONNECT C$ ")rin+ t.e call
"ISCONNECT RELE SE RELE SE COM!LETE IU_RELE SE_COMM N" Caller relea/e 0r'ce()re %E RER RELE SE IU_RELE SE_COM!LETE
"ISCONNECT
RELE SE RELE SE COM!LETE IU_RELE SE_COMM N" Callee relea/e 0r'ce()re %E RER RELE SE IU_RELE SE_COM!LETE RELE SE_TERM RELE SE_TERM
Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter
international 7o ile e?ui07ent i)entit5 ;IMEI<= class7ar9*= ci0hering 9e5 se?uence nu7 er ;#ES,<= an) connection 7anage7ent ;#M< ser1ice t50e ;inclu)ing 7o ile originating call setu0= e7ergenc5 call setu0= short 7essage ser1ice= su00le7entar5 ser1ices= an) location ser1ice<& *< The net"or9 7a5 initiate authentication an) ci0hering 0roce)ures= )uring "hich initiation o! the 0roce)ure o! getting authentication set !ro7 H8(FAU# 7a5 e re?uire)& I! no securit5 7anage7ent 0roce)ures ;that is= authentication= ci0hering= TMSI reallocation= or getting i)enti!ier< ha00en= ignore this ste0 an) s9i0 to ste0 3& 3< U0on recei0t o! the ser1ice acce0tance 7essage or ci0hering co70lete 7essage= UE sen)s the SETUP 7essage to the net"or9& A!ter recei1ing the SETUP 7essage= the core net"or9 ;#,< returns the #A88 P(O#EE+I,' 7essage to the calling 0art5& .< The calling si)e starts the esta lish7ent o! user 0lane earerG MS# Ser1er sen)s the Pre0are 3earer (e? 7essage to M'W& M'W allocates ATM resources )5na7icall5= an) returns the Pre0are 3earer (s0 7essage containing Ter7inationI) ;T$<& Then MS# Ser1er in1o9es the (A3 assign7ent 0roce)ure to (,S/O& (,S/O esta lishes the ATM 0roce)ure is 0arallel to that o! ste0 %& %< MS# Ser1er ?ueries the route in!or7ation to H8(& H8( o tains the roa7ing nu7 er !ro7 C8(& MS# Ser1er triggers C8( to initiate the 0aging 0roce)ure a!ter getting the inco7ing call )ata !ro7 C8(& earer resources at the access si)e together "ith M'W through the 3EA(E( ESTA38ISHME,T 0roce)ure& This
#ote$
The )i!!erence et"een earl5 assign7ent an) late assign7ent is the ti7e "hen a Tra!!ic #hannel ;T#H< is allocate)& For the calle) 0art5= earl5 assign7ent re!ers to assign7ent 0er!or7e) e!ore o!!/hoo9 "hile late assign7ent re!ers to assign7ent 0er!or7e) a!ter o!!/hoo9& For the calling 0art5= assign7ent is 0er!or7e) 0er!or7e) a!ter A8E(TI,' 7essage in a late assign7ent 0roce)ure& e!ore A8E(TI,' 7essage in an earl5 assign7ent 0roce)ure "hile assign7ent is
Earl5 assign7ent shortens call connection )ela5 an) increases call co70letion rate& 8ate assign7ent a1oi)s T#H resources !ro7 eing occu0ie) )uring alerting an) thus i70ro1es the utiliHation ratio o! T#H resources&
Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter
*<
#, initiates authentication= ci0hering= an) TMSI reallocation 0roce)ures )uring "hich initiation o! getting authentication set in!or7ation !ro7 H8(FAU# is re?uire)&
3< .<
#, sen)s the SETUP 7essage to the calle) UE& U0on recei0t o! the #A88 #O,FI(ME+ 7essage !ro7 the calle) UE= #, initiates the 0roce)ure o! esta lishing user 0lane earer& This 0roce)ure is si7ilar to the 0roce)ure o! esta lishing ATM earer at the calling si)e&
%<
The trans0ort control 0lane an) the user 0lane are esta lishe) )uring the assign7ent 0roce)ure= that is= D&AA8* esta lish7ent an) IUUP initialiHation& A!ter (A, recei1es the ESTA38ISH #O,FI(M 7essage 0ertaining to the user 0lane= it originates the (A3 ASSI',ME,T (ESPO,SE 7essage&
2<
Then #, a"aits alerting !ro7 the calle) UE an) sen)s the A8E(TI,' 7essage to the calling 0art5 an) the SE,+ TO,E 7essage to M'W !or 0la5ing the ring ac9 tone&
-< 4<
#, a"aits o!!/hoo9 at the calle) UE= that is= the #O,,E#T 7essage& #, sen)s the #O,,E#T 7essage to the calling 0art5& A!ter recei1ing the #O,,E#T 7essage= the calling 0art5 sen)s the STOP TO,E 7essage to M'W !or sto00ing the ring the calle) 0art5& ac9 tone an) the #O,,E#T A#E 7essage to the net"or9& The net"or9 !or"ar)s the #O,,E#T A#E 7essage to
6<
!*.
$<
isconnection Procedures
+uring the con1ersation= i! the calling 0art5 releases the call= the calling UE sen)s the +IS#O,,E#T 7essage to the net"or9 an) the net"or9 noti!ies the calle) 0art5 o! the )isconnection 7essage&
*<
The calle) 0art5 sen)s the (E8EASE 7essage to the net"or9 to release the resources on the current transaction& The net"or9 sen)s the (E8EASE 7essage to the calling 0art5 to release the resources on the current transaction& U0on recei0t o! the (E8EASE 7essage= the calling 0art5 res0on)s "ith the (E8EASE #OMP8ETE 7essage&
3< .<
The net"or9 acti1el5 sen)s the IU (E8EASE #OMMA,+ 7essage to start the release o! the signaling 0lane& The net"or9 sen)s to M'W the (E8EASE TE(MI,ATIO, 7essage to release the user 0lane resources&
Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter
RNC-O
MGW
!STN
UE-O
!STN USER
!!.
The 0roce)ures !or a 7o ile su scri er calling a PST, su scri er are sho"n in Figure $&$&
Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter
UE-O
MSC Server/VLR
MGW
HLR
M !_SEN"_ UTHENTIC TION_IN#O M !_SEN"_ UTHENTIC TION_IN#O_ C$ Security management r!ce"ure (! ti!na#) AUTHENTICATION REQUEST AUTHENTICATION RESPONSE SECURITY MODE COMMAND(OPTION) SECURITY MODE COMPLETE(OPTION) COMMON I" CM_SERVERICE_ CCE!T SETU! C LL !ROCEE"ING !RE! %E RER !RE! %E RER U$er #ane %earer e$ta%#i$&ment r!ce"ure at ca##er $i"e R % SSIGNMENT RE&UEST R "IO %E RER SETU! R "IO %E RER SETU! COM!LETE %E RER EST %LISHMENT R % SSIGNMENT RES!ONSE RESERVE CIRCUIT RESERVE CIRCUIT
Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter
UE-O
RNS-O
(G)MSC Server
I I CM
MGW
!STN
LERTING SEN" TONE SEN" TONE NC STO! TONE STO! TONE CONNECT CONNECT C$
"ISCONNECT RELE SE RELE SE COM!LETE RLG IU_RELE SE_COMM N" Relea/e 0r'ce()re %E RER RELE SE IU_RELE SE_COM!LETE RELE SE_TERM RELE SE_TERM RELE SE_TERM
CL#
RELE SE_TERM
Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter
0art5& .< The calling si)e starts the esta lish7ent o! user 0lane earerG MS# Ser1er sen)s the Pre0are 3earer (e? 7essage to M'W& M'W allocates ATM resources )5na7icall5= an) returns the Prepare /earer Rsp "essage containing Ter"ination!d %T1)& Then MS# Ser1er in1o9es the (A3 assign7ent 0roce)ure to (,S/O& (,S/O esta lishes the ATM 0roce)ure& %< 2< GMSC Ser0er sends an initial address "essage 1ith infor"ation %!(!) to PST#& A!ter recei1ing the IAI= PST, returns an a))ress co70lete 7essage ;A#M<& A!ter recei1ing the A#M= GMSC Ser0er sends the S&# MGW for pla'ing the 3ring bac4 tone5. -< A!ter the calle) 0art5 0ic9s u0 the 0hone= the calle) UE sen)s an ans1er signal6 charge ;A,#< to the net"or9& 'MS# Ser1er sen)s the STOP TO,E 7essage to M'W !or sto00ing the ring 4< ac9 tone& (fter the calling part' pic4s up the phone6 both parties tal4 1ith each other. A!ter the con1ersation= i! the calling 0art5 hoo9s on !irst= the calling UE sen)s a +IS#O,,E#T 7essage to 'MS# Ser1er& Then 'MS# Ser1er sen)s a clear for1ard signal %C,F) "essage to noti!5 PST, to clear the connection& A!ter clearing the connection= PST, returns a release guard signal %R,G) to 'MS# Ser1er& 6< 'MS# Ser1er sen)s a (E8EASE 7essage to the calling 0art5 to release the transaction resources& A (E8EASE #OMP8ETE 7essage is the res0onse to the (E8EASE 7essage& $0< The net"or9 sen)s to M'W the (E8EASE TE(MI,ATIO, 7essage to release the user 0lane resources& T2#& "essage to earer resources at the access si)e together "ith M'W through the 3EA(E( ESTA38ISHME,T
Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter
! GING ! GE RES!ONSE AUTHENTICATION REQUEST AUTHENTICATION RESPONSE SECURITY MODE COMMAND SECURITY MODE COMPLETE
TMSI REALLOCATION COMMAND TMSI REALLOCATION COMPLETE RESERVE CIRCUIT RESERVE CIRCUIT SETU! C LL CON#IRME" !RE! RE %E RER !RE! RE %E RER R "IO %E RER SETU! R % SSIGNMENT RE&UEST
%E R EST %LISHMENT
R % SSIGNMENT RES!ONSE LERTING CONNECT CONNECT C$NOWLE"GE C LL "ISCONNECT RELE SE RELE SE COM!LETE IU RELE SE COMM N"
%E RER RELE SE
CM NC CONNECT C$NOWLE"GE
CL# RLG
IU RELE SE COM!LETE
Figure 1.1 Proce)ures !or PST, su scri er calling 7o ile su scri er $< *< PST, sen)s an IAI to 'MS# Ser1er& 'MS# Ser1er gets routing in!or7ation !ro7 H8(& A!ter getting the 7o ile station
Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter
roa7ing nu7 er ;MS(,< o! the calle) 0art5= 'MS# Ser1er sen)s the IAI to MS# Ser1er& MS# Ser1er then noti!ies C8( o! the inco7ing call& 3< C8( !etches )ata a out the inco7ing call an) initiates a 0aging 0roce)ure& A!ter the net"or9 recei1es a 0aging res0onse !ro7 the calle) UE= s9i0 to Ste0 % i! authentication= ci0hering= or TMSI reallocation 0roce)ures )o not ha00en& .< The net"or9 initiates authentication= ci0hering= an) TMSI reallocation 0roce)ures= )uring "hich initiation o! getting authentication set in!or7ation !ro7 H8(FAU# 7a5 e re?uire)& %< 2< The net"or9 sen)s a SETUP 7essage to the calle) UE& U0on recei0t o! the #A88 #O,FI(ME+ 7essage !ro7 the calle) UE= MS# Ser1er initiates a 0roce)ure o! esta lishing user 0lane earerG MS# Ser1er sen)s the Pre0are 3earer (ED 7essage to M'W& M'W allocates ATM resources )5na7icall5= an) returns the Pre0are 3earer (s0 7essage containing Ter7inationI)& Then MS# Ser1er in1o9es the (A3 assign7ent 0roce)ure to (,S& (,S esta lishes the ATM earer resources at the access si)e together "ith M'W through the 3EA(E( ESTA38ISHME,T 0roce)ure& -< The trans0ort control 0lane an) the user 0lane are esta lishe) )uring the assign7ent 0roce)ure& A!ter (A, recei1es an ESTA38ISH #O,FI(M 7essage regar)ing the user 0lane= it sen)s a (A3 assign7ent res0onse 7essage& 4< At the sa7e ti7e= MS# Ser1er esta lishes the calling user 0lane earer& The calle) UE hoo9s o!!& MS# Ser1er recei1es an A8E(TI,' 7essage an) then sen)s an A#M to the calling 0art5& 6< The net"or9 a"aits o!!/hoo9 o! the calle) 0art5= that is= the #O,,E#T 7essage= an) sen)s a #O,,E#T 7essage to the calling 0art5& The calling 0art5 returns a #O,,E#T A#E& The net"or9 sen)s a #O,,E#T A#E to the calle) 0art5& Then the calling an) calle) 0arties enter the con1ersation status& $0< +uring the con1ersation= i! the calle) 0art5 hoo9s on= the calle) UE sen)s a +IS#O,,E#T 7essage to the net"or9 an) the net"or9 noti!ies the calling 0art5 o! the )isconnection 7essage& A!ter releasing the call= the calling UE sen)s a (8' to the net"or9& The net"or9 sen)s a (E8EASE 7essage to the calle) 0art5 !or the 0ur0ose o! releasing the transaction resources& The net"or9 acti1el5 sen)s an IU (E8EASE #OMMA,+ to release the signaling 0lane resources an) a (E8EASE TE(MI,ATIO, 7essage to M'W to release the user 0lane resources&
15.2.8 Pre9paging
Pre/0aging is a net"or9 !unction& 3e!ore 'MS# Ser1er originates to CMS# Ser1er a call setu0 re?uest= CMS# Ser1er initiates a 0aging 0roce)ure to the calle) UE "hen H8( as9s CMS# Ser1er !or the roa7ing nu7 er& Then CMS# Ser1er sen)s the roa7ing nu7 er to H8(& In this "a5= a ra)io connection et"een CMS# Ser1er an) UE has een esta lishe) "hen CMS# Ser1er recei1es the call setu0 re?uest !ro7
Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter
'MS# Ser1er& A 0re/0aging 0roce)ure initiate) )uring getting the roa7ing nu7 er 7a9es it 0ossi le to 9no" "hether or not the calle) 0art5 can e 0age) e!ore a roa7ing nu7 er is allocate)& These actions 7a9e contri utions to sa1ing net"or9 resources as the5 a1oi) such a 0ossi le case that the calle) 0art5 cannot e connecte) "hen 'MS# Ser1er accesses CMS# Ser1er accor)ing to the roa7ing nu7 er& In a))ition= )ata restoration ha00ens ;i! nee)e)< e!ore 0re/0aging= !or the 0ur0ose o! increasing the e!!icienc5 o! inco7ing calls& The 0re/0aging 0roce)ure is sho"n in Figure $&$&
GMSC Server HLR VMSC Server
Figure 1.1 Pre/0aging 0roce)ure $< It is assu7e) that 'MS# Ser1er su00orts 0re/0aging& 'MS# Ser1er originates a sen)>routing>in!or7ation ;S(I< 7essage to H8(& The S(I 7essage contains a Pre0age !lag !iel)& A!ter recei1ing the S(I 7essage= H8( !in)s that the Pre0age !lag is carrie) in the 7essage& Then H8( 0er!or7s it set on the Pre0age !lag in the 0ro1i)e>roa7ing>nu7 er ;P(,< 7essage accor)ing to the :u)g7ent "hether or not the entit5 itsel! su00orts 0re/0aging& *< CMS# Ser1er recei1es the P(, 7essage& I! the 7essage contains the Pre0age !lag= CMS# Ser1er initiates a 0aging 0roce)ure& U0on recei0t o! the 0aging res0onse !ro7 UE= CMS# Ser1er returns a P(, res0onse 7essage to H8(&
Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter
#ote$ The !ollo"ing call !or"ar)ing 0roce)ures are acti1ate) e!ore M'W 7a9es the selection& A!ter the calls are !or"ar)e) to )i!!erent o!!ices accor)ing to the actual situations= the user 0lane earer is esta lishe)& (e!er to sections 2&*&* an) 2&*&. !or the 0roce)ures !or esta lishing user 0lane earer !or )etails&
15.2.: CF.
A!ter a su scri er acti1ates #FU= the corres0on)ing in!or7ation is registere) in H8(& The !or"ar)ing 0roce)ure is as !ollo"sG 'MS# Ser1er sen)s an I,FO (EDUEST to H8( to as9 !or routing in!or7ation& I! H8( !in)s that the su scri er has registere) the #FU ser1ice= it sen)s to 'MS# Ser1er an I,FO A#E 7essage containing the !or"ar)e)/to nu7 er& 'MS# Ser1er connects the call accor)ing to the !or"ar)e)/to nu7 er& I! there is an in!or7ation ele7ent @noti!ication to calling 0art5I in the I,FO A#E 7essage= a ,oti!ication 7essage "ill e sent to the calling 0art5& The call can e !or"ar)e) to a PST, su scri er or a 7o ile su scri er&
Figure 1.1 #FU to PST, As sho"n in Figure $&$= the relate) 7essage "ill !or"ar)ing is not re?uire)& I! the call is set to e !or"ar)e) to a PST, su scri er= 'MS# Ser1er "ill !or"ar) the e route) to MS# Ser1er i!
Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter
Figure 1.1 #FU to a 7o ile su scri er As sho"n in Figure $&$= i! the call is set to e !or"ar)e) to a 7o ile su scri er=
'MS# Ser1er sen)s an I,FO(MATIO, (EDUEST 7essage to H8(c "here the !or"ar)e)/to 7o ile su scri er is resi)ent= !or the 0ur0ose o! as9ing !or routing in!or7ation& H8(c returns the routing in!or7ation to 'MS# Ser1er through an I,FO(MATIO, A#E,OW8E+'E 7essage& A!ter recei1ing the routing in!or7ation= 'MS# Ser1er sen)s a SETUP 7essage to MS# Ser1er c that "ill e res0onsi le !or continuing to 0age the calle) 7o ile su scri er&
15.2.; CF/
#F3 ha00ens "hen the calle) 0art5 is us5 or re:ects the inco7ing call& When #F3 is acti1ate)= the !or"ar)ing 0art5 can still 7a9e calls&
Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter
GMSC Server MSC Server -
MSa/TEa Set-)0
HLR-
VLR-
MS-
LEc
In*'-req In*'-ac1 Set-)0 In*' req)e/t !a+e MS %)/7 S)-/cri-er OR23N I,0'//i-le Call C',0leti'n
Relea/e Relea/e
C'nnect t' *'ll'6in+ a((re// OR234 OR534 N'ti*icati'n N'ti*icati'n OR834 Set-)0
,+U3G ,et"or9 +eter7ine) User 3us5 O($G #all to e !or"ar)e) O(*G ,oti!ication to !or"ar)ing su scri er re?uire) O(3G ,oti!ication to calling su scri er re?uire)
Figure 1.1 #F3 to PST, ;,+U3< The 0roce)ure is as !ollo"sG $< *< A!ter access= MSa originates a SETUP 7essage to 'MS# Ser1er to start the call setu0 0roce)ure& 'MS# Ser1er initiates the 0roce)ure o! getting routing in!or7ation to the MS ;calle) 0art5< resi)ent H8( "ith an I,FO/(ED 7essage& U0on recei0t o! the routing in!or7ation= H8( returns an I,FO/A#E 7essage& 3< .< Accor)ing to the routing in!or7ation returne) 5 H8( = 'MS# Ser1er sen)s a SET/UP 7essage to MS resi)ent CMS# Ser1er= that is= MS# Ser1er & A!ter recei1ing the SET/UP 7essage= MS# Ser1er a"aits a res0onse !ro7 C8( & C8( Ser1er & MS# Ser1er sen)s an I,FO (EDUEST 7essage to C8( to as9 !or user )ata 0ertaining to the inco7ing call= an) then sen)s a PA'E MS 7essage to MS# returns a res0onse to C8( = an) the res0onse carries a
@user errorI in!or7ation ele7ent in)icating that the !ailure cause is @su scri er us5I& +ata a out the su se?uent !or"ar)ing is containe) in the res0onse returne) 5 C8( to MS# Ser1er & %< 2< I! the #F3 ser1ice is not a1aila le= the call !ailsJ other"ise= s9i0 to Ste0 2& 3ase) on the !or"ar)ing )ata= MS# Ser1er to PST,& )irectl5 sen)s a SET/UP 7essage
Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter
Figure :.1 #F3 to PST, ;U+U3< The 0roce)ure is as !ollo"sG $< *< A!ter access= MSa originates a SETUP 7essage to 'MS# Ser1er to start the call setu0 0roce)ure& 'MS# Ser1er initiates the 0roce)ure o! getting routing in!or7ation to the MS ;calle) 0art5< resi)ent H8( "ith an I,FO/(ED 7essage& U0on recei0t o! the routing in!or7ation= H8( returns an I,FO/A#E 7essage& 3< .< Accor)ing to the routing in!or7ation returne) 5 H8( = 'MS# Ser1er sen)s a SET/UP 7essage to MS resi)ent CMS# Ser1er= that is= MS# Ser1er & A!ter recei1ing the SET/UP 7essage= MS# Ser1er sen)s an I,FO (EDUEST sen)s a 7essage to C8( to as9 !or user )ata= an) then a"aits a res0onse !ro7 C8( & C8( sen)s a PA'E MS 7essage to MS# Ser1er & MS# Ser1er SET/UP 7essage to MS ringing tone= the calle) 0art5 re:ects the call& MS# Ser1er to start the call setu0 0roce)ure& A!ter hearing the returns a res0onse to
C8( = an) the res0onse carries a @user errorI in!or7ation ele7ent in)icating that the !ailure cause is @su scri er us5I& +ata a out the su se?uent !or"ar)ing is containe) in the res0onse returne) 5 C8( to MS# Ser1er & %< 2< I! the #F3 ser1ice is not a1aila le= the call !ailsJ other"ise= s9i0 to Ste0 2& 3ase) on the !or"ar)ing )ata= MS# Ser1er to PST,& )irectl5 sen)s a SET/UP 7essage
Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter
Relea/e Relea/e
OR234
C'nnect t' *'ll'6in+ a((re// In*'r,ati'n Req In*'r,ati'n c1 Set-)0 OR534 N'ti*icati'n OR834
N'ti*icati'n
Figure 1.1 #F3 to a 7o ile su scri er ;,+U3< The 0roce)ure o! call !or"ar)ing to a 7o ile su scri er is si7ilar to that o! call !or"ar)ing to a PST, su scri er on net"or9 )eter7ine) us5& The onl5 eBce0tion is as !ollo"sG MS# Ser1er has to !etch routing in!or7ation !ro7 the MSc resi)ent sen)s a SET/UP 7essage H8(c accor)ing to the !or"ar)e)/to nu7 er ;I,FO(MATIO, (ED= I,FO(MATIO, A#E<& A!ter getting the routing in!or7ation= MS# Ser1er to MS# Ser1er c to start the call setu0 0roce)ure&
Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter
MSa/TEa Set-)0
GMSC Server
HLR-
VLR-
MSC Server -
MS-
HLRc
MSC Server c
In*'-req In*'-ac1 Set-)0 In*' req)e/t !a+e MS %)/7 S)-/cri-er OR23N Set-)0 U"U%
Relea/e
Relea/e
OR234
N'ti*icati'n
Figure 1.2 #F3 to a 7o ile su scri er ;U+U3< The 0roce)ure o! call !or"ar)ing to a 7o ile su scri er on user )eter7ine) user us5 has the al7ost sa7e acti1ities as that o! call !or"ar)ing to a PST, su scri er on user )eter7ine) us5 eBce0t that the call connection continues at MS# Ser1er !or"ar)ing to a 7o ile su scri er on net"or9 )eter7ine) us5& in the !or7er 0roce)ure& The continuing 0rocess has een )escri e) in the 0roce)ure o! call
15.2.< CF#R'
A!ter a su scri er su scri es an) acti1ates this ser1ice= all calls relating to e !or"ar)e) i! no re0l5 is recei1e)& asic
ser1ices an) all calls relating to certain 0articular ser1ices 7a)e to the su scri er "ill
Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter
I,0'//i-le Call C',0leti'n C'nnect t' *'ll'6in+ a((re// Set-)0 OR534 N'ti*icati'n OR834
Relea/e
Relea/e
Figure 1.1 #F,( to a PST, su scri er $< *< A!ter access= MSa originates a SETUP 7essage to 'MS# Ser1er to start the call setu0 0roce)ure& 'MS# Ser1er initiates the 0roce)ure o! getting routing in!or7ation to the MS ;calle) 0art5< resi)ent H8( "ith an I,FO/(ED 7essage& U0on recei0t o! the routing in!or7ation= H8( returns an I,FO/A#E 7essage& 3< Accor)ing to the routing in!or7ation returne) 5 H8( = 'MS# Ser1er sen)s a SET/UP 7essage to MS resi)ent CMS# Ser1er= that is= MS# Ser1er & MS# Ser1er o tains the user )ata o! the inco7ing call !ro7 C8( & A!ter C8( in1o9es a 0aging an) call res0on)s to the 0aging re?uest& At the sa7e ti7e= initiates the release noti!ies res0on)s "ith the I,FO A#E 7essage= MS# Ser1er setu0 0roce)ure to MS & MS MS# Ser1er .< starts a ti7er o! no res0onse )uration&
I! the calle) 0art5 )oes not ans"er the call= MS# Ser1er C8( o! the release "ith the I,FO (ED 7essage&
0roce)ure a!ter the ti7er ti7es out& At the sa7e ti7e= MS# Ser1er %<
C8( :u)ges "hether the call nee)s to e !or"ar)e)& I! there is no !or"ar)ing )ata= the call is release)& I! there is= C8( sen)s the !or"ar)ing )ata to MS# Ser1er & MS# Ser1er continues the call connection to the !or"ar)e)/to su scri er&
Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter
Relea/e Relea/e
OR234
C'nnect t' *'ll'6in+ a((re// In*'r,ati'n Req In*'r,ati'n c1 Set-)0 OR534 N'ti*icati'n OR834
N'ti*icati'n
Figure 1.1 #F,( to a 7o ile su scri er I! the call is set to e !or"ar)e) to a 7o ile su scri er= the 0roce)ure is as !ollo"sG $< *< A!ter access= MSa originates a SETUP 7essage to 'MS# Ser1er to start the call setu0 0roce)ure& 'MS# Ser1er initiates the 0roce)ure o! getting routing in!or7ation to the MS ;calle) 0art5< resi)ent H8( "ith an I,FO/(ED 7essage& U0on recei0t o! the routing in!or7ation= H8( returns an I,FO/A#E 7essage& 3< Accor)ing to the routing in!or7ation returne) 5 H8( = 'MS# Ser1er sen)s a SET/UP 7essage to MS resi)ent CMS# Ser1er= that is= MS# Ser1er & MS# Ser1er o tains the user )ata o! the inco7ing call !ro7 C8( & A!ter C8( in1o9es a 0aging an) call res0on)s to the 0aging re?uest& At the sa7e ti7e= initiates the release noti!ies res0on)s "ith the I,FO A#E 7essage= MS# Ser1er setu0 0roce)ure to MS & MS MS# Ser1er .< starts a ti7er o! no res0onse )uration&
I! the calle) 0art5 )oes not ans"er the call= MS# Ser1er C8( o! the release "ith the I,FO (ED 7essage&
0roce)ure a!ter the ti7er ti7es out& At the sa7e ti7e= MS# Ser1er %<
C8( :u)ges "hether the call nee)s to e !or"ar)e)& I! there is no !or"ar)ing )ata= the call is release)& I! there is= C8( sen)s the !or"ar)ing )ata to MS# Ser1er & MS# Ser1er continues the call connection to the !or"ar)e)/to su scri erG !irst= it o tains routing in!or7ation !ro7 the !or"ar)e)/to su scri er resi)ent H8(cJ neBt= it continues to connect the call&
Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter
15.2.= CF#Rc
#F,(c 7a5 e triggere) on one o! the !ollo"ing con)itionsG no 0aging res0onse= MS 0o"er/o!!= assign7ent !ailure& The !ollo"ing 0art )escri es the 0roce)ure o! call !or"ar)ing on no 0aging res0onse&
In*'-req In*'-ac1
!r'vi(e R'a, N' R'a, N' Set-)0 In*' req)e/t !a+e MS !a+in+ -/ent S)-/cri-er OR23N N' re/0'n/e
Relea/e Relea/e
OR234 N'ti*icati'n
Figure 1.1 #F,(c to a PST, su scri er ;no 0aging res0onse< $< *< MSa sen)s a SET/UP 7essage to 'MS# Ser1er& 'MS# Ser1er re?uests H8( to 0ro1i)e routing in!or7ation& H8( as9s C8( !or roa7ing nu7 er& 'MS# Ser1er sen)s a SETUP 7essage to MS# Ser1er & MS# Ser1er re?uests C8( !or user )ata o! the inco7ing call= "hich triggers C8( to initiate a 0aging 0roce)ure& Ho"e1er= a 0aging res0onse is not recei1e)& MS# Ser1er returns a PA'E (ESPO,SE "ith the cause 1alue @a sent su scri erI& 3< At this ti7e= C8( 7a9es a :u)g7ent "hether or not !or"ar)ing ha00ens& I! call !or"ar)ing )oes not ha00en= the call en)s& Other"ise= C8( connect the call accor)ing to the !or"ar)ing )ata& continues to
Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter
-/ent S)-/cri-er N' re/0'n/e Relea/e Relea/e OR23N I,0'//i-le Call C',0leti'n
OR234
C'nnect t' *'ll'6in+ a((re// In*' req In*' ac1 Set-)0 OR534
N'ti*icati'n
Figure 1.1 #F,(c to a 7o ile su scri er ;no 0aging res0onse< $< *< MSa sen)s a SET/UP 7essage to 'MS# Ser1er& 'MS# Ser1er re?uests H8( to 0ro1i)e routing in!or7ation& H8( as9s C8( !or roa7ing nu7 er& 'MS# Ser1er sen)s a SETUP 7essage to MS# Ser1er & MS# Ser1er re?uests C8( !or user )ata o! the inco7ing call= "hich triggers C8( to initiate a 0aging 0roce)ure& Ho"e1er= a 0aging res0onse is not recei1e)& MS# Ser1er returns a PA'E (ESPO,SE "ith the cause 1alue @a sent su scri erI& 3< At this ti7e= C8( 7a9es a :u)g7ent "hether or not !or"ar)ing ha00ens& I! call !or"ar)ing )oes not ha00en= the call en)s& Other"ise= C8( connect the call accor)ing to the !or"ar)ing )ata& continues to
Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter
#ell
roa)cast SMS is li9e thisG a short 7essage is sent through 3S# to all SMS
su scri ers in a s0eci!ie) area& A!ter co)ing= each 0age can acco77o)ate 4* 5tes an) the 7aBi7u7 nu7 er o! 0ages is $%& Onl5 0eer/to/0eer SMS is )escri e) in the !ollo"ing section&
MS
VMSC
VLR
SMC
-&ShortMessage Error;(P>E((O(<
8:M !_SEN"_IN#O_#OR_MO_SMS_ C$
Figure 1.1 Mo ile originate) short 7essage trans!er 0roce)ure $< *< A!ter a su scri er triggers to sen) a short 7essage= MS sen)s it to MS# through the A inter!ace ;'SM< or the Iu inter!ace ;UMTS<& U0on recei0t o! the SMS re?uest !ro7 the A inter!ace or the Iu inter!ace= MS# initiates to C8( a re?uest !or 7o ile originate) SMS user )ata )etection accor)ing to the MSIS+, o! the short 7essage originate) MS& 3< .< C8( chec9s the su scri0tion in!or7ation an) )etects "hether or not the local o!!ice su00orts SMS& The )etection results are sent to MS#& MS# anal5Hes the )etection results& I! the local o!!ice )oes not su00ort SMMO or o0erator )eter7ine) arring ;O+3< is acti1e= MS# )irectl5 returns a re:ection ;(P>E((O(< to MS& Other"ise= the SM# a))ress is got !ro7 the 7o ile originate) short 7essage= an) the short 7essage is !or"ar)e) to the 0ro0er SM#& %< A!ter recei1ing the re?uest !or !or"ar)ing 7o ile originate) short 7essage= SM# chec9s the 1ali)it5 o! the )ata& I! it is 1ali)= SM# returns a !or"ar)ing res0onse to MS#&
Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter
2<
MS# recei1es the res0onse !ro7 SM# an) sen)s the outco7e to MS&
$&MAP>SE,+>(OUTI,'>I,FO>FO(>SM *&MAP>SE,+>(OUTI,'>I,FO>FO(>SM>A#E 3&MAP>MT>FO(WA(+>SHO(T>MESSA'E;(P>+ATA< .&MAP>SE,+>I,FO>FO(>MT>SMS 2&Page -&Page res0onse %&MAP>PA'EFMAP>SEA(#H>FO(>MO3I8E>SU3S#(I3E( 4&MAP>P(O#ESS>A##ESS>(EDUEST>A#EF MAP>SEA(#H>FO(>MO3I8E>SU3S#(I3E(>A#E 6&MAP>SE,+>I,FO>FO(>MT>SMS>A#E $0&Short Message;(P>+ATA<< $$&Short Message
Ac9no"le)ge7ent;(P>A#E<
$*&MAP>MT>FO(WA(+>SHO(T>MESSA'E>A#E;(P>A#E<<
Figure 1.1 Mo ile ter7inate) short 7essage trans!er 0roce)ure $< A!ter recei1ing the 7o ile originate) short 7essage= SM# gets the calle) nu7 er !ro7 it& SM# 7a9es use o! the calle) nu7 er an) initiates to H8( a 0roce)ure !or getting routing in!or7ation& *< U0on recei0t o! the routing in!or7ation re?uest= H8( retrie1es in!or7ation a out the su scri er in the )ata ase& A !ailure cause is returne) to SM# i! one o! the !ollo"ing con)itions is encountere)G the su scri er is a sent= roa7ing is not allo"e)= O+3 is acti1e= ter7inate) SMS is not su00orte)= the Mo ile station ,ot (eacha le Flag ;M,(F< is set= M#EF is set= or the su scri er has een re7o1e) !ro7 the roa7ing )estination MS#FC8(& Other"ise= H8( returns to SM# the CMS# nu7 er "here the calle) 0art5 is resi)ent& ;,oteG In the case that in!or7ation a out location o! the calle) MS# is 1ali) ut it set is 0er!or7e) on M,(F= a !ailure res0onse is returne) to SM# i! the su scri erKs short 7essage has a lo" 0riorit5J other"ise= the routing in!or7ation is returne)&< 3< SM# )eli1ers to CMS# a re?uest !or !or"ar)ing the short 7essage accor)ing to the recei1e) CMS# nu7 er& .< U0on recei0t o! the !or"ar)ing re?uest !ro7 SM#= CMS# initiates to C8( a re?uest !or )etecting SMMT user )ata& %< C8( ?ueries the eBisting su scri0tion )ata an) 7o ilit5 7anage7ent status& It 7a5
Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter
e !oun) that SMMT is not su00orte)= MS is 0o"ere) o!!= M,(F is set= roa7ing is not allo"e)& I! the su scri er can not e 0age) )ue to one o! those reasons= MS# sen)s a !ailure res0onse to SM# gate"a5& Other"ise= initiation o! a 0aging 0roce)ure to MS starts in a s0eci!ic location area in case o! a 9no"n MS location area= or initiation o! a 0aging 0roce)ure starts in the "hole MS# ser1ing area in case o! an un9no"n MS location area& 2< MS# originates a PA'E 7essage to MS& -< MS returns a PA'E (ESPO,SE to MS#& 4< 6< $0< U0on recei0t o! the PA'E (ESPO,SE !ro7 MS= MS# initiates an access 0roce)ure i! it is re?uire)& A!ter the access is co70lete)= the short 7essage is )eli1ere) to MS through the A inter!ace ;*'< or the Iu inter!ace ;3'<& $$< $*< A!ter recei1ing the )eli1er5 outco7e relating to the short 7essage !ro7 MS= MS# noti!ies SM# o! the outco7e& I! se1eral short 7essages are to e )eli1ere) ;that is= (P/MMS !lag it is containe) in the short 7essage !or"ar)ing re?uest !ro7 SM#<= the connection is hel) an) the 0roce)ures 7entione) in 3< $0< $$< an) $*< are re0eate)& Other"ise= all connections "ill e release)&
Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter
MS
MSC
VLR
HLR
SMC
=:M !_ LERT_SERVICE_CENTRE_ C
Figure 1.1 Proce)ure o! alerting SM# )ue to 7o ile station reacha le $< *< MS accesses the net"or9 again as a call is 7a)e or ans"ere)= or its location is u0)ate)& MS# 7a5 initiate an access 0roce)ure to C8( i! a ser1ice is connecte) to MS or a 0age res0onse is originate) 5 MS& MS# 7a5 initiate a user )ata )etection 0roce)ure "hen MS location is u0)ate)& 3< C8( chec9s the user )ata& When it set 0er!or7e) on M,(F o! the su scri er is !oun)= the !lag it is cleare)& In a))ition= C8( initiates to H8( a noti!ication that it is rea)5 !or the short 7essage& The noti!ication cause is @7o ile station reacha leI& I! it is a location u0)ate 0roce)ure= C8( sen)s a location u0)ate re?uest to H8(& .< I! H8( recei1es the noti!ication that C8( is rea)5 !or the short 7essage= H8( 0er!or7s )etection on )5na7ic )ata o! the su scri er& I! it set 0er!or7e) on M,(F is !oun)= the it is cleare)= H8( originates an AlertS# noti!ication to SM#= an) H8( returns a noti!ication res0onse to C8(& I! "hat H8( recei1es is a location u0)ate re?uest an) it set 0er!or7e) on M,(F in the )5na7ic )ata o! the su scri er is !oun)= the !lag %< it is cleare)= H8( originates an AlertS# noti!ication to SM#= an) then the location u0)ate 0roce)ure goes on nor7all5& U0on recei0t o! the AlertS# noti!ication !ro7 H8(= SM# returns a res0onse& Then SM# 7a9es another atte70t to )eli1er the short 7essage in suita le situations&
Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter
since a short 7essage is )elete)= MS sen)s a @7e7or5 ca0acit5 a1aila leI 7essage to MS#& U0on recei0t o! the 7essage= MS# originates to H8( a noti!ication that it is rea)5 !or the short 7essage& The noti!ication cause is @7e7or5 ca0acit5 a1aila leI& Figure $&$ sho"s the 0roce)ure o! alerting SM# )ue to 7e7or5 ca0acit5 a1aila le&
MS
MSC
HLR
SMC
8: M !_RE "4_#OR_SM_ C$
=: M !_ LERT_SERVICE_CENTRE_ C$
Figure 1.1 Proce)ure o! alerting SM# )ue to MS 7e7or5 ca0acit5 a1aila le $< *< 3< MS sen)s a @7e7or5 ca0acit5 a1aila leI 7essage to MS# through the A inter!ace ;*'< or the Iu inter!ace ;3'<& MS# noti!ies H8( that it is rea)5 !or the short 7essage& The noti!ication cause is @7e7or5 ca0acit5 a1aila leI& A!ter recei1ing the 7essage= H8( chec9s the )5na7ic )ata o! the su scri er& I! it set 0er!or7e) on M#EF is !oun)= the it is cleare)& H8( sen)s an AlertS# noti!ication to MS# an) returns to C8( a noti!ication res0onse& MS# recei1es the res0onse an) returns a res0onse 7essage to MS& .< U0on recei0t o! the AlertS# noti!ication !ro7 H8(= SM# returns a res0onse& Then SM# 7a9es another atte70t to )eli1er the short 7essage in suita le situations&
Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter
!unctionalit5 in a cellular net"or9& The 8#S is a le to 0osition a Mo ile Station ;MS< to a cell )egree& The 8#S co1ers a "i)e range o! a00lications= inclu)ing 0u lic securit5 ser1ices as e7ergenc5 calls an) alar7s= location/ ase) roa)casting& illing an) tracing= an) location/ ase) in!or7ation ser1ices as na1igation= cit5/touring= an) locate)
,M. T'pe (
+,R
Uu
Iu3#
7G9 8g MSC-*,R
8e 'ate"a5 M,C 8c
gs"SCF
Figure 1.1 Architecture o! 8#S in 3'PP The 8#S #lient= "hich in1o9es a 8#S re?uest= is )i1i)e) into eBternal 8#S #lient an) internal 8#S client& The 8#S Ser1er contains (,#= MS#FC8(= H8(= an) S'S,& (,# acco70lishes location 7easure7ent an) calculation& MS#FC8(= H8( an) S'S, !ul!ill a))ressing o! UE= sen)ing an) recei1ing o! location 7essages= an) su scri er )ata storage 7anage7ent& 'M8# 0ro1i)es inter!ace et"een 8#S #lient an) 8#S Ser1er&
!. Related &ntities
8#S #lient
The 8#S #lient consists o! eBternal 8#S #lient an) internal 8#S #lient& An eBternal 8#S #lient is an a00lication ser1er 0ro1i)ing location/ ase) ser1ices& It connects "ith 'M8# through 8e inter!ace& An internal 8#S #lient can e inclu)e) in #, e?ui07ent ;as MS# or gs7S#F<= or o0eration & 7aintenance ;O&M< e?ui07ent "hich can e a se0arate one or the O&M e?ui07ent o! MS#& 8#S #lient in1o9es a location re?uest= an) i70le7ents location/ ase) ser1ices "ith the results& As !unctions )i!!er= 8#S #lient can e )i1i)e) into !our t50esG *< The #o77ercial 8#S #lients ;or Calue A))e) Ser1ice 8#S #lient<= "hich
Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter
The Internal 8#S #lients su00ort= or enhance "ith 8#S= certain O&M relate) tas9s= su00le7entar5 ser1ices= I, relate) ser1ices an) 'SM earer ser1ices an) teleser1ices&
.< %<
The E7ergenc5 8#S #lients assists su scri ers "ho 0lace e7ergenc5 calls& The 8a"!ul Interce0t 8#S #lient uses the location in!or7ation to su00ort 1arious legall5 re?uire) or sanctione) ser1ices 8#S Ser1er
The 8#S Ser1er is a grou0 o! so!t"are an)For har)"are entities o!!ering 8#S ca0a ilities= inclu)ing MS#= S'S, an) (,#& It is a grou0 o! entities i70le7enting location !unction coor)inatel5 rather than a s0eci!ic entit5& The 8#S Ser1er acce0ts 8#S re?uests= ser1ices re?uests= an) sen)s re?uests&
'M8# is a gate"a5 connecting "ith eBternal 8#S #lient& It recei1es location re?uests !ro7 8e inter!ace= then starts a))ressing H8( an) sen)s location re?uest to CMS#& 'M8# can also sen) the location results to relate) 8#S #lient= an) con1ert the result into local coor)inates&
MS#FC8(
MS#FC8( i70le7ents co)ec= 1ersion negotiation= an) signaling 0rocessing o! location 7essagesJ an) 0ro1i)es inter!ace !unctions as signaling tracing an) O&M& It is re?uire) to acco70lish the 0rocessing an) control o! location 0roce)ures= 0rotecting su scri er 0ri1ate in!or7ation= an) 0ro1i)ing 0rocessing results&
illing accor)ing to
H8(
It stores 8#S su scri0tion )ata= an) 0ro1i)es MS# nu7 er to locate) su scri er&
Target UE
Target UE= "hich is also na7e) MS hereina!ter= re!ers to the locate) 7o ile 0hone& The 0resent 0osition or the 0re1iousl5/locate) 0osition o! the 7o ile 0hone nee) to e 0ro1i)e) accor)ing to location re?uests& Usuall5= the target UE is the locate) o :ect= ut !or Mo ile Originate) 8ocation (e?uest ;MO/8(<= the target UE sen)s location re?uests&
Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter
2: LCS Service Req)e/t 5: M ! Sen( R')tin+ In*' *'r LCS 8: M ! Sen( R')tin+ In*' *'r LCS ac1: ;: M ! !r'vi(e S)-/cri-er L'cati'n <: MS !a+in+@ )t.enticati'n@ Ci0.erin+
Figure 1.1 MT/8( 0roce)ure $< On recei1ing the location re?uest !ro7 an eBternal client= 'M8# 1eri!ies 8#S #lient i)enti!ier an) su scri0tion )ata o! the re?ueste) 8#S= an) o tains MSIS+, or IMSI= 8#S DoS )ata o! target UE& For call/relate) location re?uests= 'M8# shall o tain an) 1eri!5 calle) nu7 er o! 8#S client& To 0rocess location re?uests to 7ulti0le UEs= re0eat ste0 *< till ste0 $*<& *< I! 'M8# 9no"s CMS# an) IMSI o! a certain MSIS+,= s9i0 to ste0 .<& Other"ise= 'M8# sen)s to H8( a MAP>SE,+>(OUTI,'>I,FO >FO(>8#S 7essage o! IMSI or MSIS+, "ith target UE& 3< H8( 1eri!ies the caller a))ress o! 'M8#= "hich has een authoriHe) an) can re?uest UE location in!or7ation= an) returns CMS# a))ress an) IMSI or MSIS+, ;MSIS+, is not inclu)e) in ste0 *<&
Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter
.<
'M8# sen)s MAP>P(OCI+E>SU3S#(I3E(>8O#ATIO, 7essage to relate) CMS#& The 7essage inclu)e) re?ueste) location in!or7ation t50e= IMSI= 8#S DoS o! UE= an) in)ication o! "hether 8#S #lient has o1erri)e ca0a ilit5& For call/relate) location re?uest= the 7essage also inclu)es calle) nu7 er o! 8#S #lient& For 1alue/a))e) 8#S #lient= client na7e can e inclu)e)& For non/call relate) location re?uest= 8#S #lient i)enti!ier is inclu)e)& For other cases= client na7e or i)enti!ier is o0tional&
%<
I! 'M8# locates in another P8M, or another nation= CMS# "ill 1eri!5 "hether in1o9ing a location re?uest !ro7 that P8M, or nation is 0er7itte)& I! not= it "ill return relate) error 7essages& I! so= CMS# 1eri!ies 8#S 0rohi ition restriction o! UE su scri0tion !ile store) in C8(& I! 8#S is 0rohi ite)= there is no nee) to in!or7 UE= an) 8#S #lient )oes not ha1e o1erri)e ca0a ilit5= CMS# returns an error 7essage& I! UE is in i)le 7o)e= the core net"or9 "ill in1o9e 0aging= authentication an) ci0hering 0roce)ures& I! target UE su00orts UE/ ase) or UE/ assiste) location 7etho)= UE "ill 0ro1i)es its location 7etho) in controlle) earl5 class7ar9 sen)ing to S(,# an) MS#&
2<
I! the location re?uest co7es !ro7 a 1alue/a))e) 8#S #lient= an) UE su scri0tion !ile in)icates that UE re?uires noti!ication ;"ith 0ri1ate 1eri!ication<= an) UE su00orts noti!ication o! 8#S= then CMS# sen)s an 8#S 8ocation ,oti!ication In1o9e 7essage to target UE= in)icating location re?uest t50e = 8#S #lient i)enti!ier= an) "hether 0ri1ate 1eri!ication is re?uire)&
-<
Target UE in!or7s su scri er that a location re?uest co7es& I! 0ri1ate 1eri!ication is authoriHe)= target UE in?uires that "hether location re?uest shall e 0er7itte) in case o! no res0onse= an) "aits !or su scri er !or )ecision& Then= UE returns the 8#S 8ocation ,oti!ication (eturn (esult 7essage to CMS#= "hich coul) also e returne) et"een Ste0 2< an) Ste0 $$<& I! no 7essage is returne) "ithin s0eci!ie) ti7e= CMS# thin9s no res0onse= an) shall return an error 7essage to 'M8# "hen 0ri1ate 1eri!ication is re?uire)= an) in)icates "hether the reason is su scri er not allo"ing location or no res0onse&
4< 6<
CMS# sen)s (A,AP 8ocation (e0ort #ontrol 7essage to S(,#= "hich inclu)es location re?uest t50e= UE location ca0a ilit5= an) DoS o! re?uest& S(,# )eter7ines an) i70le7ents the location 7etho)& (A,AP 8ocation (e0ort 7essage to CMS#& I! no location result is o taine)= the cause o! !ailure shall e inclu)e) in (A,AP 8ocation (e0ort 7essage&
$0< When o taining DoS/satis!ie) location results= S(,# returns the results in
$$< I! no 0ri1ate 1eri!ication 0roce)ure is i70le7ente)= CMS# "ill return location in!or7ation an) esti7ate) ti7e to 'M8#& I! the 0ri1ate 1eri!ication 0roce)ure is i70le7ente)= an) the 8#S 8ocation ,oti!ication (eturn (esult 7essage that MS# recei1es in)icates that location is 0er7itte)= onl5 location 7essage is returne)& I! location is not 0er7itte)= or res0onse ti7es out= an) UE su scri0tion !ile s0eci!ies that location is 0rohi ite) in case o! no res0onse= then CMS# shall return an error res0onse 7essage to 'M8#& I! 0ri1ate 1eri!ication is
Hua"ei Technologies Pro0rietar5 33
Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter
7essage= an) re?uest t50e o! 8#S #lient is current location or last 9no"n location= an) CMS# has the last 9no"n location= return the location to 'M8#& I! UE "as in i)le state= C8( shall release the MM connection "ith UE& CMS# can recor) charging in!or7ation& $*< 'M8# returns esti7ate) UE location to 8#S client that initiates the re?uest& 'M#8 can i70le7ent coor)inate con1ersion= an) recor) account in!or7ation o! 8#S client an) the net"or9&
#ote$ Ste0s $< to Ste0 4< co1er location 0re0aration= Ste0 6< is location 7easure7ent setu0 0rocess= an) Ste0s $0< to $*< are location calculation an) release 0rocesses&
Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter
LCS Client
GMLC
MSC
SRNC
2 : CM Service Req)e/t
UE
=: Me//a+e/ *'r in(ivi()al 0'/iti'nin+ ,et.'(/ 'r tran/*er '* l'cati'n a//i/tance (ata
D: R N ! L'cati'n Re0'rt:
22: LCS MO-LR Ret)rn Re/)lt 25: Relea/e CM@ MM@ RRC c'nnecti'n/
Figure 1.1 MO/8( 0roce)ure $< *< 3< .< %< UE sen)s 8#S MO/8( 7essage to S(,#& S(,# !or"ar)s 8#S MO/8( 7essage to MS#& MS# authenticates= ci0hers an) accesses the 8#S re?uest o! UE& When the access 0rocess co70letes= UE in1o9es MO/8( in)ication& I! UE re?uests its o"n location or sen)s UE location to 8#S client= the 7essage inclu)es 8#S re?uest an) DoS in!or7ationJ i! UE is re?uire) to sen) UE location to 8#S client= the 7essage shall inclu)e 8#S client i)enti!ier or 'M8# a))ress& When 'M8# a))ress is not inclu)e)= CMS# can e con!igure) as local 'M8#& #hec9 i! the 'M8# allo"s connection !ro7 8#S client& I! not= re:ect the location re?uest& I! it is UE/assiste) location )ata or ci0hering 9e5= the 7essage shall inclu)e assist )ata or ci0hering 9e5 t50e= an) in "hich 7etho) "ill these )ata e a00lie)& CMS# chec9s in UE su scri0tion !ile i! UE can re?uest its location= or can sen) its location to other 8#S client or re?uest location assist )ata an) ci0hering 9e5& I! UE sen)s location re?uest= an) call set u0 co70letes= CMS# can re:ect the re?uest !or so7e certain t50es o! non/1oice calls&
Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter
For 8#S 0roce)ures o! other location results= the5 are the sa7e as )escri e) in MT/8( 0roce)ure& S(,# re0orts location results to CMS#& CMS# re0orts location results to 'M8#& 'M8# res0onses "hether the correct location in!or7ation is recei1e)&
$0< 'M8# returns the results to UE/re?ueste) 8#S client& $$< Finall5= MS# returns location re?uest res0onse ;inclu)ing location results< $*< (elease #onnection Manage7ent ;#M<= Mo ilit5 Manage7ent ;MM<= or (a)io (esource #ontrol ;((#< connection&
UE
<: Me//a+e/ *'r in(ivi()al 0'/iti'nin+ ,et.'(/ =: R N ! L'cati'n Re0'rt D: M ! S)-/cri-er L'cati'n Re0'rt
Figure 1.1 ,I/8( 0roce)ure $< *< 3< In i)le state= UE in1o9es ((# connection re?uest to start an e7ergenc5 call& S(,# trans!ers the #M ser1ice re?uest through Iu inter!ace& UE can i)enti!ie) 5 TMSI= IMSI= or IMEI& Start e7ergenc5 call 0roce)ure& e
Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter
.<
3ase) on net"or9 o0erator re?uire7ent= 8#S re?uest 0roce)ure shall to S(,#& CMS#= S(,# an) UE continue "ith the e7ergenc5 call 0roce)ure&
in1o9e) on e7ergenc5 call origination& In1o9e the 8#S re?uest control 0roce)ure %< 2< -< 4< 6< For 8#S 0roce)ures o! other location results= the5 are the sa7e as )escri e) in MT/8( 0roce)ure& S(,# re0orts location results to CMS#& CMS# re0orts location results to 'M8#& 'M8# res0onses "hether the correct location in!or7ation is recei1e)& 'M8# returns the results to UE/re?ueste) )e!ault 8#S client&
$0< E7ergenc5 ser1ice releases& $$< For e7ergenc5 ser1ice in ,orth A7erica= MS# "ill sen) another 8ocation (e0ort to 'M8#& $*< 'M8# con!or7s= releases the e7ergenc5 call an) stores relate) in!or7ation&
Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter
MSCa /VLR/SS!
O_CSI tri++er I"!
SC!a
HLR-
MSC- /VLR
C.ar+in+ t.e callin+ 0art7 RR%E 00l7 C.ar+in+ #CI C'ntin)e SRI SRI_ c1 (MSRN) I M (MSRN) CM NC CR ER%("!A) Relea/e Call C ! /i+nalin+ M ! /i+nalin+ ISU! /i+nalin+ !RN !RN_ ac1
Figure 1.1 Proce)ure o! 0re0ai) su scri er calling or)inar5 W#+MA su scri er ;O/ #SI trigger< $< MS#aFC8(FSSP recei1es the call& Accor)ing to the calling 0art5Ks su scri0tion in!or7ation= the ser1ice is triggere) in O/#SI 7anner& MS#aFC8(FSSP resi)ent toll area co)e is 0ut in the 8ocation ,u7 er 0ara7eter o! the I+P 7essage& Then MS#aFC8(FSSP sen)s the I+P 7essage to the S#Pa& *< 3< A!ter S#Pa recei1es the I+P 7essage= S#Pa anal5Hes the calling 0art5Ks account e!ore an5thing else is )one& I! the account is 1ali)= s9i0 to Ste0 3<& S#Pa )eter7ines the calling tari!! rate ase) on the calling 0art5Ks location an) the calle) nu7 er& S#Pa calculates the alance o! the account into con1ersation )uration= an) also sen)s ((3E= A#= F#I an) #O,TI,UE to MS#aFC8(FSSP& .< U0on recei0t o! #O,TI,UE 7essage= MS#aFC8(FSSP sen)s an S(I 7essage to the calle) H8( & MS#aFC8(FSSP gets the MS(, o! the calle) 0art5 an) 0er!or7s call connection& %< A!ter a con1ersation= either 0art5 hoo9s on& MS#aFC8(FSSP re0orts the charging re0ort an) the on/hoo9 e1ent&
Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter
SC!-
HLR-
MSC- /VLR
SRI_ac1 (O-CSIHT-CSI)
T_CSI tri++er I"! C.ar+in+ t.e calle( 0art7
Sen( R')tin+ In*' SRI_ I M (MSRN) CM NC 00l7C.ar+in+Re0'rt ::: ER%("!2D) Relea/e Call c1 E F M SRN E G !RN !RN_ ac1
Figure 1.1 PST, or or)inar5 W#+MA su scri er calling 0re/0ai) su scri er $< A!ter recei1ing the call originate) 5 a PST, or W#+MA su scri er=
MS#aFC8(FSSP !in)s that the calling 0art5 is not a 0re/0ai) su scri er& Then an S(I 7essage is sent to the calle) H8( & I! the calle) 0art5 is a 0re/0ai) su scri er= the su scri0tion in!or7ation ;O>#SIMT>#SI< is returne)& *< MS#aFC8(FSSP gets the S#P a))ress !ro7 the T>#SI )ata= an) sen)s an I+P 7essage to S#P & As 'MS# to PST, or originating MS# to 'SM has the SSP !unction= the toll area co)e o! the location "here 'MS#FSSP or originating MS#FSSP is resi)ent is 0lace) in the 8ocation ,u7 er 0ara7eter o! the I+P 7essage& 3< A!ter recei1ing the I+P 7essage= S#P anal5Hes the calle) 0art5Ks account e!ore an5thing else is )one& I! the account is 1ali)= S#P )eter7ines the tari!! rate accor)ing to the ho7e location o! the calle) 0art5 an) the actual location o! the calle) 0art5 ;re!erence 8ocation In!or7ation 0ara7eter<& S#P calculates the account alance to con1ersation )uration= an) sen)s ((3E= A# an) #O,,E#T to MS#aFC8(FSSP& .< U0on recei0t o! #O,,E#T 7essage= MS#aFC8(FSSP sen)s an S(I 7essage again to H8( & This S(I 7essage )isa les T/#SI& MS(, o! the calle) 0art5 is o taine)&
Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter
%< 2<
MS#aFC8(FSSP 0er!or7s connection accor)ing to the M(S, o! the calle) 0art5& A!ter the con1ersation= either 0art5 hoo9s on& MS#aFC8(FSSP re0orts the charging re0ort an) the on/hoo9 e1ent&
SC!a
SC!-
HLR-
MSC-/VLR
I"! RR%E 00l7 C.ar+in+ C'nnect Sen( R')tin+ In*' SRI_ ac1(MSRN) I M (M SRN) CM NC 00l7C.ar+in+Re0'rt ER% ("!A) RC 00l7C.ar+in+Re0'rt ER% ("!2D) RC
C.ar+in+ t.e calle( 0art7
Figure 1.1 Pre/0ai) su scri er calling 0re/0ai) su scri er $< MS#aFC8(FSSP recei1es the call& Accor)ing to the calling 0art5Ks su scri0tion in!or7ation= the ser1ice is triggere) in O/#SI 7anner& MS#aFC8(FSSP resi)ent toll area co)e is 0ut in the 8ocation ,u7 er 0ara7eter o! the I+P 7essage& Then MS#aFC8(FSSP sen)s the I+P 7essage to S#Pa&
Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter
*<
S#Pa )eter7ines the calling tari!! rate ase) on the calling 0art5Ks location an) the calle) nu7 er& S#Pa calculates the alance o! the account into con1ersation )uration= an) sen)s ((3E= A#= F#I an) #O,TI,UE to MS#aFC8(FSSP&
3<
U0on recei0t o! the #O,TI,UE 7essage= MS#aFC8(FSSP sen)s an S(I 7essage to the calle) H8(& I! the calle) 0art5 is a 0re/0ai) su scri er= MS#aFC8(FSSP returns O>#SIMT>#SI in!or7ation an) calle) location in!or7ation ;C8(/nu7 er<&
.<
resi)ent toll area co)e is 0ut in the 8ocation ,u7 er !iel) an) the calle) location in!or7ation ;Clr/nu7 er< is 0ut in the 8ocation In!or7ation !iel)& %< A!ter recei1ing the I+P 7essage= S#P anal5Hes the calle) 0art5Ks account e!ore an5thing else is )one& I! the account is 1ali)= S#P )eter7ines the calle) tari!! rate accor)ing to the location in!or7ation o! the calle) 0art5 containe) in the I+P 7essage& S#P 2< -< 4< calculates the account alance to con1ersation )uration= an) sen)s ((3E= A#= F#I an) #O,,E#T to MS#aFC8(FSSP& MS#aFC8(FSSP sen)s an S(I 7essage again to H8( & This S(I 7essage )isa les T/#SI& MS(, o! the calle) 0art5 is o taine)& MS#aFC8(FSSP 0er!or7s connection accor)ing to the M(S, o! the calle) 0art5& A!ter the con1ersation= either 0art5 hoo9s on& MS#aFC8(FSSP re0orts the charging re0ort an) the on/hoo9 e1ent to S#Pa an) S#P res0ecti1el5&
!*. Pre9paid Subscriber Calling 2rdinar' WC M( Subscriber 1ith CF. to Pre9 paid Subscriber
It is assu7e) that the calling 0re/0ai) su scri er is resi)ent in the ser1ing area o! MS#aFC8(FSSP& O/#SI is use) to trigger a ser1ice& The call 0roce)ure is sho"n in Figure $&$&
Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter
MSCa /VLR/SS!
O-CSI tri++er
SC!a
I"!
SC!c
HLR-
HLRc
MSCc /VLR
RR%E 00l7 C.ar+in+ C'nnect SRI SRI_ ac1(MSRN) I M (MSRN) CM NC CR ER%("!A) RC CR ER%("!2D) RC
Figure 1.1 Pre/0ai) su scri er calling or)inar5 W#+MA su scri er "ith #FU to 0re/ 0ai) su scri er
*. Recharge Procedure
(echarge 0roce)ure is associate) "ith IP t50icall5= as sho"n in Figure $&$&
Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter
MSCa /VLR/SS! O-CSI tri++er I"! RR%E CTR !IC !IC Re/)lt !IC !IC Re/)lt !IC !IC Re/)lt ! SRR ! SRR ! SRR !IC ER%('- -an('n)
SC!a
Select a lan+)a+e Select a 0r'ce()re In0)t t.e car( n),-er !lea/e 6ait a ,',ent
!r',0t '* a /)cce//*)l rec.ar+e M 'ne7 U/a+e li*e O0ti'n/ *'r 't.er 0r'ce()re/ U/er 'n-.''1
Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter
MSC/VLR/SS!
SMS-CSI tri++er I"! SMS RRSE C'ntin)e SMS
SC!
SMSC
M ! MO #ORW R" SHORT MESS GE M ! MO #ORW R" SHORT MESS GE C$ ERS #CI SMS C'ntin)e SMS
C ! ,e//a+e/ M ! ,e//a+e/
Figure 1.1 Mo ile originate) SMS han)ling 0roce)ure $< MS#FC8(FSSP recei1es the 7o ile originate) short 7essage& Accor)ing to the su scri0tion in!or7ation= SMS/#SI is use) to trigger a ser1ice& MS#FC8(FSSP sen)s an I+P SMS 7essage to S#P& *< A!ter recei1ing the I+P SMS 7essage= S#P anal5Hes the calling 0art5Ks account e!ore an5thing else is )one& I! the account is 1ali)= ((SE an) #O,TI,UESMS are sent to MS#aFC8(FSSP& 3< .< MS#aFC8(FSSP sen)s the short 7essage to SMS#& U0on recei0t o! the outco7e o! sen)ing SMS= MS#aFC8(FSSP re0orts the outco7e to S#Pa&
Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter
+/,SC#
Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter
MSC processes the MS-.& location registration procedure and e?changes data 1ith *,R. The MS-.& stores the infor"ation of the ,ocation (rea %,() 1here it sta's &
The Mobile (pplication Part %M(P) of SS; is adopted bet1een +,R and MSC-*,R6 1hile Radio !nterface ,a'er 7 protocol of MM %R!,79MM) is adopted bet1een MSC-*,R and the MS-.&.
AuthenticationJ Ac?uiring International Mo ile Su scri er I)entit5 ;IMSI< !ro7 Pre1ious C8( ;PC8(<J Ac?uiring authentication set !ro7 H8(J 8ocation cancellationJ Inserting su scri er )ataJ !"plicit !MS! detach@ Purging MS-.&.
35 co7 ining so7e asic 0roce)ures 7entione) a o1e accor)ing to the triggering con)itions= the 7a:or MM 0roce)ure= location u0)ate= can e realiHe)&
#ote$ The follo1ing section describes the location update procedures of the Global S'ste" for Mobile co""unications %GSM)6 1hich are si"ilar to that of the .ni0ersal Mobile Teleco""unication S'ste" %.MTS).
AuthenticationJ Ac?uiring IMSI !ro7 PC8(J 8ocation cancellationJ Inserting su scri er )ataJ I70licit IMSI )etachJ EB0licit IMSI )etachJ Purging MS&
Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter
!. (uthentication
On recei0t o! the location u0)ate re?uest !ro7 MS= i! authentication is nee)e) ut there is no a1aila le authentication set= MS#FC8( "ill re?uest !or the authentication set !ro7 H8(= an) initiate the authentication 0roce)ure& The authentication 0roce)ure is sho"n in Figure $&$&
MS MS#F C8(
H8(
#ote$ For )etaile) )escri0tion o! the authentication 0roce)ure= see Section 3&$ Authentication in this 7anual&
Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter
ata to *,R
A!ter recei1ing the location u0)ate re?uest !ro7 MS#FC8(= i! the H8( !in)s that the su scri er roa7e)/to MS#FC8( nu7 er is change)= it "ill initiate the location cancellation 0roce)ure to )elete the su scri er in!or7ation in PC8(& A!ter"ar)s= H8( 0ro1i)es the nee)e) su scri er in!or7ation to the ne" C8(& Figure $&$ sho"s the 0roce)ure o! inserting the su scri er )ata to C8( 5 H8(&
*. Purging MS
The procedure is initiated b' *,R to delete the subscriber data fro" the database. This 0roce)ure is in)uce) "hen the MS sta's inacti0e 1ithin a long ti"e %can be set6 usuall' 28 hours)6 or 1hen the s'ste" ad"inistrator deletes the subscriber record. The 0roce)ure is sho"n in Figure $&$&
Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter
+
C8( H8(
MAP>PU('E>MS MAP>PU('E>MS>ac9
!f the i"plicit detach ti"e is set longer than the periodic location update ti"e6 and the subscriber has initiated the periodic location update 1ithin the set ti"e6 the i"plicit detach 1ill not be triggered. In this case= the IMSI )etach "ill the 0erio)ic location u0)ate "ithin the i70licit )etach ti7e& e triggere) onl5 "hen the su scri er 7o1es into a no/signal area an) )oes not 7a9e
Figure 1.1 EB0licit IMSI )etach 0roce)ure $< MS sen)s the AIMSI +etachA 7essage "hich re?uires no res0onse= an)
Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter
a an)ons the ra)io connection& *< 3< C8( recei1es the 7essage an) set the MS status to AIMSI )etache)A& MS# releases the relate) resources an) the IMSI )etach is co70lete)&
;8AI< )i!!erent !ro7 the one store) in itsel!= the MS "ill sen) the location u0)ate re?uest to the net"or9 to u0)ate the 8AI& Accor)ing to "hether or not the ne" 8AI shares the sa7e MS#FC8( "ith the ol) 8AI an) "hether or not IMSI is in1ol1e)= the location u0)ate is classi!ie) into the !ollo"ing three 9in)sG
The location update 1ithin the sa"e MSC-*,R area %onl' *,R is in0ol0ed)
MS 3SS
MS#
C8(
8O#ATIO,>UP+ATI,'>(EDUEST
8O#ATIO,>UP+ATI,'>A##EPT
ac9
MAP_FORW._NEW_TMSI ack
Figure 1.1 8ocation u0)ate "ithin the sa7e MS#FC8( area ;onl5 C8( is in1ol1e)< $< MS sends to MSC the A,ocation updating re>uestA "essage6 1hich includes the TMS!-!MS! and ,(! of the MS and indicates that it is a nor"al location update. *< 3< .< MSC sends the A.pdate location areaA "essage to *,R. *,R initiates the authentication and encr'ption procedures. These procedures are optional. *,R updates the ,( infor"ation of the MS6 stores the ne1 ,(! and sends to MSC the A.pdate location area ac4A "essage.
Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter
%< 2<
MSC sends to the MS the A,ocation updating acceptA "essage6 1hich contains the TMS!. MSC releases the channel resources and the location update is co"pleted.
The inter MSC-*,R location update %the subscriber data cannot be obtained fro" P*,R)
The MS 7o1es !ro7 8AI/$ in MS#/A to 8AI/* in MS#/3& The MS 1ill use the !MS! to initiate the location update if it enters a ne1 *,R6 registers for the first ti"e6 or the related net1or4 data are lost.
A MS 3SS MS#/3 3 C8(/3 ' PC8( 8O#ATIO,>UP+ATI,' >(EDUEST MAP>UP+ATE> 8O#ATIO,>A(EA MAP>UP+ATE>8O#ATIO, MAP>#A,#E8> 8O#ATIO, MAP>#A,#E8> 8O#ATIO, ac9 + + H8(
Figure :.1 !nter MSC-*,R location update %!MS! updating< -< MS 7o1es to the 8A ;8AI/*< in MS#/3= 7onitors the ne" 8A in!or7ation on the 3roa)cast #ontrol #hannel ;3##H<= an) !in)s that it is )i!!erent !ro7 the 8A ;8AI/$< in!or7ation in the SIM car)& 4< MS sends to MSC9/ the A,ocation updating re>uestA "essage6 1hich includes the !MS!.
Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter
6<
C8(/3 sen)s the 7essage AU0)ate locationA on + inter!ace& 7essage= PC8( )eletes all the in!or7ation o! this MS an) sen)s to H8( the A#ancel location ac9A 7essage&
$0< H8( sen)s to PC8( the A#ancel locationA 7essage& A!ter recei1ing this
$$< H8( inserts the su scri er )ata in C8(/3= "hich registers the su scri0tion in!or7ation relate) to this MS= inclu)ing IMSI an) 8AI& $*< H8( sen)s ac9 to MS#/3 the AU0)ate location ac9A 7essage= 1hich includes the +,R #o. $3< MSC9/ sends to MS the A,ocation updating acceptA "essage to infor" it to "odif' the ,(! in S!M card. $.< SIM car) sen)s the location u0)ate ac9no"le)ge7ent& ,ocation update resultsG $< *< 3< .<
The ,(! in S!M card is changed to ,(!92. The current location infor"ation of this MS is registered in +,R6 including MSC9/-*,R9/ #o. The subscriber data6 location infor"ation and status infor"ation are stored in *,R9/. The data of this subscriber in P*,R is deleted co"pletel'.
!nter MSC-*,R location update %*,R6 +,R and TMS! are in0ol0ed)
The MS 7o1es !ro7 8AI/$ in MS#/A to 8AI/* in MS#/3 ;IMSI can e use) to o tain su scri er )ata !ro7 PC8(<&
A
MS 3SS MS#
3
C8(
+
H8(
'
PC8(
8O#ATIO,>UP+ATI,' >(EDUEST
MAP>UP+ATE> 8O#ATIO,>A(EA MAP>SE,+>I+E,TIFI#ATIO, MAP>SE,+>I+E,TIFI#ATIO, ac9 MAP>UP+ATE>8O#ATIO, MAP>#A,#E8> 8O#ATIO, MAP>#A,#E8> 8O#ATIO, ac9 MAP>I,SE(T>SU3S#(I3E(>+ATA MAP>I,SE(T>SU3S#(&>+ATA ac9
Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter
%<
When the MS enters a ne" 8A ;C8(/3<= it con)ucts location update 1ith the TMS! assigned b' the P*,R& In this case= C8(/3 7ust get the IMSI o! the MS !ro7 the PC8( in or)er to get the H8( a))ress o! this MS& There!ore= C8(/3= PC8( an) H8( "ill e in1ol1e) in this location u0)ate&
2<
C8(/3 7ust get the IMSI !ro7 the PC8(& EBce0t !ro7 that= this 0roce)ure is the sa7e as the one )escri e) a o1e&
D. !MS! (ttach
The Mobile Ter"inated Call %MTC) 1ill be i"possible 1hen the MS is po1ered do1n. +o1e0er6 the circuit bet1een the calling part' and the destination MSC 1ill still be set up and the called MS 1ill be paged if the MS is not "ar4ed as detached. The circuit-radio resources are 1asted 1ithout "a4ing an' profit for
Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter
the operator. The !MS! attach-detach procedure is designed to sol0e the proble". In C8(= there is an attachF)etach !lag !or IMSI& When the MS is a1aila le= the !lag is set as AIMSI attache)A& Other"ise= it is set as AIMSI )etache)A& When the MS is po1ered do1n nor"all'= the MS "ill sen) the A(I83/MM IMSI )etachA 7essage to MS#= "hich "ill 7ar9 the MS as AIMSI )etache)A& When the MS enters the acti0e status again= an) i! it is in a ne" 8A= the nor7al location u0)ate 0roce)ure "ill e 0er!or7e)& I! it is still in the ol) 8A= the IMSI attach 0roce)ure as sho"n in Figure $&$ "ill e initiate) ;this 0roce)ure is onl5 a00lica le to the situation that the MS "as 7ar9e) as AIMSI )etache)A<&
Uu UE ;IMSI attach< .& 8ocation u0)ate acce0t ;access %& Purging co77an) ;to ac9no" le)g7ent< release resources< 2& Purging co70lete) (,S (A,AP Iu MS# MAP 3
C8( 8AIn/8Alo ;"hich 7eans no location u0)ate& Other" is e= u0)ate location 7essage "ill e sent&
$&8ocation u0)ate re?uest 83PQRS *& Access IMSI ;attach IMSI< 3&IMSI access con!ir7
Figure 1.1 IMSI attach 0roce)ure $< *< MSFUE sen)s the A8ocation u0)ating re?uestA 7essage= "hich in)icates that the location update t'pe is the !MS! attach. The !ollo"ing 0roce)ures are the sa7e as the location u0)ate "ithin the sa7e MS#FC8( area
8AG An area in "hich the MSFUE 7a5 roa7 "ithout u0)ating the location registers in 'SMFW#+MA net"or9& A 8A consists o! one or 7ore cells& (AG In 'P(S net"or9= e1er5 8A is )i1i)e) into se1eral (As& Each (A consists o! se1eral cells& 'P(S attachG A 0roce)ure that 'P(S su scri ers attach to the 'P(S net"or9 an) the su scri er in!or7ation is store) in Ser1ing 'P(S Su00ort ,o)e ;S'S,<& #o7 ine) (AF8A location u0)ate "ith IMSI attachG The 'P(S su scri ers trans7it the su scri er in!or7ation through the 's inter!ace ; et"een S'S, an) MS#< to MS#FC8( through the 'P(S net"or9 e?ui07ent )uring the co7 ine) (AF8A location u0)ate= so as to realiHe the attach to the 'SM net"or9& 8A U0)ate !ollo"e) 5 (A u0)ateG The 'P(S su scri ers trans7it the 8A u0)ate in!or7ation through 's inter!ace to MS#FC8( through S'S, )uring the co7 ine)
Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter
(AF8A location u0)ate= so as to co70lete the 8A u0)ate 0roce)ure& *< Proce)ures oth #ircuit
I! the net"or9 is con!igure) "ith 's inter!ace= an) the MS su00orts S"itche) ;#S< an) Pac9et S"itche) ;P#< ser1ices&
The co7 ine) (AF8A u0)ate 0roce)ure "ill e 0er!or7e) in the !ollo"ing casesG
The MS enters a ne" (AJ The '(PS attache) MS initiates the IMSI attachJ The MS initiates 'P(S attach an) IMSI attach concurrentl5& e set u0& Each "ill 9ee0 the Integrate) Ser1ices et"een
(outing Area I)entit5 ;(AI< an) C8( shoul) e create)= so that S'S, can !in) the corres0on)ing C8( "hen correlation is nee)e)& The co7 ine) (AF8A u0)ate !ul!ills the (A an) 8A u0)ates inter!ace resource& The nor7al 0roce)ure in co7 ine) (AF8A u0)ate is sho"n in Figure *&$& The )otte) lines re0resent o0tional 0roce)ures&
MS S'S, MS#FC8( H8(
%&Insert Su scri er +ata Ac9 2&U0)ate 8ocation Ac9 -&8ocation U0)ate Acce0t 4&(outing Area U0)ate Acce0t 6&(outeing Area U0)ate #o70lete $0&TMSI (eallocation #o70lete
Figure 2.1 ,or7al 0roce)ure o! co7 ine) (AF8A u0)ate 3< .< The MS sen)s the (A u0)ate re?uest to S'S, to initiate the co7 ine) (AF8A u0)ate& S'S, gets the location u0)ate t50e !ro7 the recei1e) 7essage& I! the location u0)ate t50e is the A#o7 ine) (AF8A location u0)ate "ith IMSI attachA= or the A8A u0)ate !ollo"e) 5 (A u0)ateA= S'S, "ill get the C8( ,o& !ro7 the (AI/
Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter
C8( 7a00ing ta le an) sen) the location u0)ate re?uest to C8(& S'S, 0er!or7s the (A u0)ate 0roce)ure at the sa7e ti7e& %< C8( )eter7ines "hether or not to sen) the location u0)ate re?uest to H8( ase) on the location u0)ate t50e ;containe) in the 7essage it recei1es< an) the MS in!or7ation store) in itsel!& I! 5es= C8( sen)s the location u0)ate re?uest to H8(& C8( stores or u0)ates the S'S, ,o& at the sa7e ti7e& 2< -< Proce)ures 3= .= % an) 2 are the sa7e as those in the none/'P(S location u0)ate& See the inter MS#FC8( location u0)ate 0roce)ure& C8( returns the A8ocation u0)ate acce0tA 7essage to S'S, a!ter the location u0)ate is co70lete)& I! the TMSI nee)s to e re/allocate)= C8( "ill sen) the allocate) TMSI to S'S, in the A8ocation u0)ate acce0tA 7essage& 4< 6< On recei0t o! the A8ocation u0)ate acce0tA 7essage= i! the (A u0)ate is also success!ul= S'S, "ill sen) to the MS the A(A u0)ate acce0tA 7essage& The MS returns to S'S, the A(A u0)ate co70leteA 7essage a!ter recei1ing the A(A u0)ate acce0tA 7essage& $0< I! the TMSI is re/allocate) 5 the C8( )uring the co7 ine) (AF8A u0)ate= S'S, "ill return to C8( the ATMSI reallocation co70leteA 7essage&
1.7.7 +ando0er
D!!. 20er0ie1
+uring the ser1ice access or an ongoing session= the MSFUE 7a5 7o1e !ro7 one cell to another& In such case= the change o! the ser1ing cell eco7es a 1er5 i70ortant !unction o! 7o ile co77unication s5ste7& The han)o1er !unction is there!ore 0ro1i)e)= "hich )eter7ines )irectl5 the s0ectru7 utiliHation an) DoS& The asic 0ara7eters in the han)o1er o0eration inclu)e the han)o1er )ecision ;"hen to 0er!or7 han)o1er< an) Ser1ice Area I)entit5 ;SAI< selection& To ensure that the current con1ersation "ill not e interru0te)= the han)o1er is con)ucte) "hen the MSFUE 7o1es out o! the current cell& To ensure relia le ser1ice ?ualit5= the han)o1er is con)ucte) "hen the MSFUE changes ser1ing cell to a1oi) strong inter!erence in the current cell= or "hen the A0re!erre) cellA is congeste)& +i!!erent han)o1er )ecision 7etho)s are a)o0te) !or )i!!erent han)o1er 0ur0oses& A han)o1er !or the 0ur0ose o! no con1ersation interru0tion is )eter7ine) on the asis o! u0lin9F)o"nlin9 trans7ission ?ualit5 ;such as trans7ission 3it Error (ate= attenuation an) e)ge trans7ission )ela5<& To get such 1alues= MSFUE an) the 3ase Transcei1er Station ;3TS<F,o)e3 "ill regularl5 7easure the u0lin9F)o"nlin9 trans7ission ?ualit5 an) recei1ing le1el& The MSFUE "ill sen) the recor)e) result to the 3TSF,o)e3 t"ice a secon)& In the han)o1er )ue to cell congestion= the )ecision is 7a)e on the asis o! the current loa) o! each 3TS= "hich is a1aila le at onl5 MS# an) (,#& In this 9in) o! han)o1er= a certain nu7 er o! MSFUEs ;uns0eci!ie)< "ill e han)e) o1er to the neigh or cell "ith relati1el5 less tra!!ic& There!ore= such han)o1er is )eter7ine) also
Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter
D!!!. Classification
There are 7an5 han)o1er causes& Accor)ing to the 7o ile co77unication s5ste7 that the MSFUE accesses a!ter the han)o1er= the han)o1er has the !ollo"ing 9in)sG $< Intra/s5ste7 han)o1erG Intra/UMTS han)o1er= that is= the han)o1er et"een (a)io ,et"or9 S5ste7s ;(,S< "ithin an UMTS& Intra/'SM han)o1er is re!erre) to as the han)o1er et"een 3ase Station Su s5ste7s ;3SS< "ithin a 'SM& *< Inter/s5ste7 han)o1erG The han)o1er "hen a UMTS su scri er 7o1es et"een 3' an) *' net"or9s& To e s0eci!ic= this 9in) o! han)o1er inclu)es the UMTS/ 'SM han)o1er an) the 'SM/UMTS han)o1er& The 0recon)ition !or the inter/ s5ste7 han)o1er is that the UMTS (,# I+ an) the 'SM cell I+ are 7utuall5 recogniHa le in the t"o s5ste7s& At the sa7e ti7e= the t"o s5ste7s shall su00ort the con1ersion o! the ser1ice ?ualit5 0ara7eters et"een the7 ;that is= the con1ersion et"een *' channel t50e an) 3' DoS<& The ter7inalNs su00ort ;such as )ual/7o)e MSFUE< is also nee)e)& In ter7s o! the e?ui07ent that 7a5 !ollo"ing 9in)s o! han)o1ersG $< Intra/(,S han)o1erG This 0roce)ure )oes no in1ol1e the #,= an) is trans0arent to the u00er/le1el #,& The han)o1er et"een (,#s re?uires the su00ort o! lur inter!ace& *< Intra/MS# han)o1erG The han)o1er et"een (,#sF3S#s ;inclu)ing (,#/(,#= 3S#/3S# an) (,#/3S#< "ithin an MS#& This 9in) o! han)o1er nee)s the su00ort o! MS#& 3< Inter/MS# han)o1erG The han)o1er et"een (,#sF3S#s that elong to )i!!erent MS#s& This 9in) o! han)o1er in1ol1es t"o or three MS#s& This 9in) o! han)o1er can e su /)i1i)e) into three 9in)sG
3asic han)o1erG The MSFUE is han)e) o1er !ro7 a controlling MS# ;MS#/A< to another MS# ;MS#/3<& Su se?uent han)o1er ac9 to MS#/AG The MSFUE is han)e) ac9 !ro7 MS#/3 to MS#/A a!ter the asic han)o1er& Su se?uent han)o1er to thir)/0art5 MS#G The MSFUE is han)e) o1er !ro7 MS#/ 3 to a thir) MS# ;MS#/3N< a!ter the asic han)o1er& ehin) are the sa7e= as sho"n in
Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter
Original net"or9
Han)o1er 0oint
,e" net"or9
Han)o1er re?uest Esta lish ne" 0ath Path esta lishe) Instruct MSFUE to start han)o1er Han)o1er co77an) UE re?uests to access
UE accesses ne" 0ath
Figure 7.1 Han)o1er 0rinci0les The han)o1er 0oint 7a5 )i!!er in )i!!erent han)o1er t50es& In intra/(,S han)o1er= the han)o1er 0oint is a (,#& In intra/MS# han)o1er= the han)o1er 0oint is MS#& In inter/ MS# han)o1er= there are t"o han)o1er 0ointsG MS#/A an) MS#/3&
Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter
UE (,S/A
Iu/(elocation/(e?uire) Iu/(elocation/(e?uest Iu/(elocation/(e?uest/Ac9 Iu/(elocation/#o77an) ((#/HO/#o77an) Iu/(elocation/+etect Iu/(elocation/#o70lete Iu/ (elease/#o77an) Iu/ (elease/#o70lete
+etection o! UE in
target(,S
((#/HO/#o70lete
Figure 1.1 Intra/MS# han)o1er 0roce)ure $< The access net"or9 (,S/A o! the UE 7a9es the )ecision to initiate the han)o1er 0roce)ure& It sen)s to MS# ;MS#/A< the han)o1er re?uest ;Iu/ (elocation/(e?uire)<& Inclu)e) in the han)o1er re?uest is the a))ress in!or7ation o! the eB0ecte) access net"or9 (,S/3= ter7e) as Target (,S ;T(,S<& *< On recei0t o! the re?uest= MS#/A chec9s in the corres0on)ing ta le& I! the T(,S is !oun) to 3< e its su or)inate (,S= MS#/A "ill generate the corres0on)ing han)o1er re?uest 7essage ;Iu/(elocation/(e?uest< an) sen) it to (,S/3& On recei0t o! the 7essage !ro7 MS#= (,S/3 assigns the necessar5 resource !or the UE to access accor)ing to the corres0on)ing re?uire7ent ;inclu)e) in the cells o! the 7essage<= an) 0er!or7s DoS con!iguration& The relate) resources "ill e assigne) at the sa7e ti7e at the MS#/A& .< A!ter assigning the relate) resources= (,S/3 sen)s to MS#/A the AIu/ (elocation/(e?uest/Ac9A 7essage= in)icating that the resources assign7ent is co70lete) an) the (,S is rea)5 !or the UE to access& %< On recei0t o! the ac9no"le)ge7ent !ro7 (,S/3= MS#/A sen)s the AIu/ (elocation/#o77an)A 7essage to (,S/A& (,S/A in turn sen)s it in the 7essage A((#/HO/#o77an)A to the UE= as9ing it to access the ne" ser1ice area& 2< (,S/3 sen)s to MS#/A the 7essage AIu/(elocation/+etectA "hen it )etects that the UE is accessing& A!ter the UE access= (,S/3 sen)s to MS#/A the 7essage AIu/(elocation/#o70leteA= in)icating that it is a le to 0ro1i)e ser1ice !or the UE& -< A!ter recei1ing the han)o1er co70lete 7essage !ro7 (,S/3= MS#/A sen)s the 7essage AIu/(elease/#o77an)A to (,S/A= as9ing it to release the relate) resources& A!ter releasing the resource= (,S/A returns the 7essage AIu/ (elease/#o70leteA to MS#/A= en)ing the han)o1er 0roce)ure&
Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter
#ote$ The (,S/3 a!ter the han)o1er eco7es the S(,S o! that UE& I! han)o1er occurs again= the (,S/3 "ill 0la5 the role o! (,S/A then&
3asic han)o1er
When an UE in an ongoing session 7o1es to another 3' ser1ice area o! a )i!!erent MS#= the han)o1er "ill in1ol1e t"o MS#s& The ne" cell 0ro1i)es ra)io resources !or the UE= :ust as "hat ha00ens in the intra/MS# han)o1er& Ho"e1er= in the inter/MS# han)o1er= an inter/MS# circuit 7ust e set u0 et"een the t"o MS#s !or the call& Figure $&$ sho"s the asic inter/MS# han)o1er 0roce)ure&
(,S/A 3'>MS#/A 3'>MS#/3 (,S/3 C8(/3
IU/(E8O#/(EDUI(E+ MAP/Allocate/Han)o1er/,u7 er re?& MAP/Pre0/Han)o1er re?& IU/(E8O#/(EDUEST IU/(E8O#/(EDUEST/A#E MAP/Pre0/Han)o1er res0& MAP/Sen)/Han)o1er/(e0ort re?& IAM
IU/(E8O#/#OMMA,+
A#M IU/(E8O#/#OMP8ETE
MAP/Process/Access/Sig re?&IU/(E8O#/+ETE#T
IU/(E8/#M+F#OM
MAP/Sen)/En)/Signal re?&
Figure 1.1 Inter/MS# han)o1er 0roce)ure $< The access net"or9 (,S/A o! the UE 7a9es the )ecision to initiate the han)o1er 0roce)ure& It sen)s to its MS# ;MS#/A< the han)o1er re?uest ;Iu/ (elocation/(e?uire)<& Inclu)e) in the han)o1er re?uest is the a))ress in!or7ation o! the eB0ecte) access net"or9 (,S/3= ter7e) as Target (,S ;T(,S<& *< On recei0t o! the re?uest= MS#/A chec9s in the corres0on)ing ta le& I! the T(,S is !oun) to e connecte) to another MS# ;MS#/3<= MS#/A "ill 0ac9 the han)o1er re?uest into a certain cell= 0ut the cell into the corres0on)ing MAP 7essage ;MAP/Pre0are/Han)o1er re?<= an) sen) it to MS#/3 through MAP signaling& 3< On recei0t o! the MAP/Pre0are/Han)o1er (e?= MS#/3 generates the corres0on)ing 7essage AIu/(elocation/(e?uestA an) sen)s it to the T(,S&
Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter
.<
U0on the rece0tion o! the han)o1er re?uest= (,S/3 assigns the corres0on)ing resources !or the UE& MS#/3 also assigns the relate) resources at the sa7e ti7e& A!ter assigning the resources= (,S/3 sen)s to MS#/3 the 7essage AIu/ (elocation/(e?uest/Ac9A& +uring or a!ter assigning the resources= MS#/3 "ill also sen) to its C8( ;C8(/3< the 7essage AMAP/Allocate/Han)o1er/,u7 er re?&A= as9ing !or the han)o1er nu7 er& C8(/3 "ill sen) the assigne) han)o1er nu7 er to MS#/3 in the 7essage AMAP/Sen)/Han)o1er/(e0ort re?&A&
%<
A!ter recei1ing the ac9no"le)ge7ent !ro7 (,S/3 an) the han)o1er nu7 er= MS#/3 sen)s to MS#/A the 7essage AMAP/Pre0/Han)o1er/res0A= in)icating that it is rea)5 !or the han)o1er& Inclu)e) in this 7essage is the han)o1er nu7 er= "ith "hich MS#/A can !in) the route to MS#/3&
2<
MS#/A then sen)s to MS#/3 the AInitial A))ress Message ;IAM<A to re?uest !or the corres0on)ing trun9 circuit& A!ter occu05ing the trun9 circuit= MS#/3 returns to MS#/A the AA))ress #o70lete Message ;A#M<A& The occu0ation o! the trun9 circuit is then co70lete)&
-<
A!ter the setu0 o! the circuit= MS#/A generates the 7essage AIu/(eloc/ #o77an)A accor)ing to the in!or7ation eBtracte) !ro7 the 7essage AMAP/Pre0/ Han)o1er/res0A= an) sen)s it to (,S/A= as9ing the UE to start the han)o1er&
4<
The UE then starts to access (,S/3& U0on the )etection o! UE access= (,S/3 sen)s to MS#/3 the 7essage AIu/(eloc/+etectA& MS#/3 0ac9s the 7essage into the MAP signaling AMAP/Process/Access/Sig re?A an) sen)s to MS#/A& MS#/3 then starts "aiting !or the han)o1er co70lete 7essage& On recei0t o! the corres0on)ing MAP signaling= MS#/A also starts "aiting !or the han)o1er co70lete 7essage&
6<
A!ter the UE accesses (,S/3= (,S/3 sen)s the han)o1er co70lete 7essage to MS#/3= "hich "ill 0ac9 the 7essage into the MAP signaling AMAP/Sen)/En)/ Signal re?A an) sen) it to MS#/A& The MS#/3 then starts so7e 0ost/han)o1er o0erations= such as sen)ing the 7essage AAns"erA to the inter/MS# circuit&
$0< A!ter recei1ing the 7essage !ro7 MS#/3= MS#/A conclu)es that the han)o1er is co70lete)& It starts releasing the resources occu0ie) 5 that UE at (,S/A 5 sen)ing to the (,S/A the 7essage AIU/(E8/#M+A& (,S/A returns the 7essage AIU/(E8/#OMPA to MS#/A a!ter the releasing& The inter/MS# circuit "ill e 7aintaine) until the session is o1er& Then= MS#/A "ill release the circuit= use the MAP signaling AMAP/Sen)/En)/Signal res0A to noti!5 MS#/3 o! the release= an) sto0 the eBchange o! MAP signaling "ith MS#/3&
#ote$ An5ti7e a!ter recei1ing the IAM 7essage !ro7 MS#/A= MS#/3 can use the MAP signaling AMAP/Sen)/Han)o1er/(e0ort res0A to noti!5 C8(/3 to release the han)o1er nu7 er= so that it can e reuse) neBt ti7e&
Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter
The (,S/3 a!ter the han)o1er eco7es the S(,S o! that UE& I! han)o1er occurs again= the (,S/3 "ill 0la5 the role o! (,S/A then&
Su se?uent han)o1er
In this han)o1er= the UE is han)e) o1er to another cell ;in a )i!!erent MS#< a!ter the asic han)o1er& The other MS# coul) e either o! the !ollo"ingG $< *< The MS#/A in the asic han)o1er& A ne" neigh or MS# other than the MS#/A& It is ter7e) here as MS#/3P or MS#/3N& The !irst 9in) o! han)o1er is 9no"n as the su se?uent han)o1er ac9 to MS#/A& The later is 9no"n as the su se?uent han)o1er to thir)/0art5 MS#&
As 7entione) a o1e= in this han)o1er= the UE is han)e) o1er !ro7 MS#/3 to MS#/A a!ter the asic han)o1er& Figure *&$ sho"s the 0roce)ure o! the su se?uent han)o1er ac9 to MS#/A&
(,S/3 3'>MS#/A 3'>MS#/3 Iu/(E8O#ATIO,/ (EDUI(E+ (,S/A C8(/3
MAP/Pre0/Su /Han)o1er re?& Iu/(E8O#ATIO,/ (EDUEST Iu/(E8O#ATIO,/ (EDUEST/A#E Iu/(E8O#ATIO,/ +ETE#T Iu/(E8O#ATIO,/ #OMP8ETE MAP/Pre0/Su /Han)o1er res0&
Iu/(E8O#ATIO,/ #OMMA,+
Iu/(E8EASE/ #M+F#OM
#ote$ (,S/A re!ers the S(,S o! the UE= "hile (,S/3 is the target (,S o! the han)o1er&
3<
A!ter the asic han)o1er= the S(,S o! the UE ;(,S/A< 7a9es the )ecision to initiate the han)o1er again& It sen)s to MS#/3 the han)o1er re?uest AIu/ (elocation/(e?uire)A& Inclu)e) in the re?uest is the a))ress in!or7ation o! the eB0ecte) access net"or9 (,S/3 ;T(,S<&
.<
On recei0t o! the re?uest= MS#/3 chec9s in the corres0on)ing ta le& I! the T(,S
Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter
is !oun) to
corres0on)ing MAP 7essage AMAP/Pre0are/Han)o1er re?A= an) sen) it to MS#/A through MAP signaling& %< On recei0t o! the han)o1er re?uest= the MS#/A !in)s that the T(,S is un)er its o"n control& MS#/A then generates an) sen)s the han)o1er re?uest AIu/ (elocation/(e?uestA to (,S/3& 2< On recei0t o! the 7essage !ro7 MS#= (,S/3 assigns the necessar5 resources !or the UE to access accor)ing to the re?uire7ent ;inclu)e) in the cells o! the 7essage<= an) 0er!or7s DoS con!iguration& The relate) resources "ill sen)s to MS#/A the 7essage AIu/(elocation/(e?uest/Ac9A& -< The MS#/A then generates an) sen)s the MAP 7essage AMAP/Pre0/Su / Han)o1er res0A to MS#/3 through the MAP signaling= in)icating that it is rea)5 !or the su se?uent han)o1er& 4< 6< MS#/3 then sen)s to (,S/A the han)o1er co77an) AIu/(elocation/#o77an)A= as9ing the UE to start han)o1er& The UE then starts to access (,S/3& U0on the )etection o! the access= (,S/3 sen)s to MS#/A the 7essage AIu/(elocation/+etectA& A!ter the access is co70lete)= (,S/3 sen)s to MS#/A the 7essage AIu/(elocation/#o70leteA= in)icating that the access is co70lete& $0< MS#/A sen)s to MS#/3 the 7essage AMAP/Sen)/En)/Signal res0A= in)icating that the su se?uent han)o1er is co70lete)& The MAP signaling eBchange et"een the t"o is then sto00e)& A!ter"ar)= MS#/A "ill release the trun9 circuit set u0 "ith MS#/3 )uring the asic han)o1er& $$< A!ter recei1ing the AMAP/Sen)/En)/Signal res0A= MS#/3 conclu)es that the han)o1er is co70lete)& It as9s (,S/A to release the resources occu0ie) 5 that UE& e assigne) at the sa7e ti7e at the MS#/A& A!ter assigning the resources= (,S/3
#ote$ The (,S/3 a!ter the han)o1er eco7es the S(,S o! that UE& I! han)o1er occurs again= the (,S/3 "ill 0la5 the role o! (,S/A then&
In this han)o1er= the UE is han)e) o1er !ro7 MS#/3 to MS#/3N a!ter the han)o1er& Figure $$&$ sho"s the 0roce)ure o! the su se?uent han)o1er to thir)/0art5 MS#&
Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter
(,S/3
(,S/3N 3'>MS#/3
3'>MS#/3N C8(/3
C8(/3N
3'>MS#/A
Iu/(E8O#ATIO,/ (EDUI(E+ MAP/Pre0/Su /Han)o1er re?& MAP/Pre0are/Han)o1er re?& Iu/(E8O#ATIO,/ (EDUEST Iu/(E8O#ATIO,/ MAP/Pre0are/Han)o1er res0& IAM A#M MAP/Pre0/Su /Ho res0& Iu/(E8O#ATIO,/#M+ Iu/(E8O#ATIO,/ +ETE#T MAP/Process/Access/Signalling re?& Iu/(E8O#ATIO,/ #OMP8ETE MAP/Sen)/En)/Signal re?& Ans"er (elease MAP/Sen)/En)/Signal res0& Iu/(E8EASE/#M+F#OM ;en) o! call< (elease (EDUEST/A#E MAP/Sen)/Han)o1er/(e0ort re?& MAP/Sen)/Han)o1er/(e0& res0& ;$< MAP/Allocate/Han)o1er/,u7 er re?&
MAP/Sen)/En)/Signal res0&
Figure 11.1 Proce)ure o! su se?uent han)o1er to thir)/0art5 MS# $*< A!ter the asic han)o1er= the S(,S o! the UE ;(,S/A< 7a9es the )ecision to initiate the han)o1er again& It sen)s to MS#/3 the han)o1er re?uest AIu/ (elocation/(e?uire)A& Inclu)e) in the re?uest is the a))ress in!or7ation o! the eB0ecte) access net"or9 (,S/3N ;T(,S<& $3< On recei0t o! the re?uest= MS#/3 chec9s in the corres0on)ing ta le& I! the T(,S is !oun) to e connecte) to another MS#= MS#/3 "ill generate the corres0on)ing MAP 7essage AMAP/Pre0/Su /Han)o1er re?&A= an) sen) it to MS#/A through MAP signaling& $.< On recei0t o! the han)o1er re?uest= the MS#/A !in)s that the T(,S is in another MS# ;MS#/3N<& MS#/A then generates the 7essage AMAP/Pre0/Han)o1er re?A an) sen)s it to MS#/3N through the MAP signaling& $%< On recei0t o! the 7essage= MS#/3N generates the 7essage AIu/(elocation/ (e?uestA an) sen)s it to the T(,S&
Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter
$2< U0on the rece0tion o! the han)o1er re?uest= (,S/3N assigns the corres0on)ing resources !or the UE& MS#/3N also assigns the relate) resources at the sa7e ti7e& A!ter assigning the resources= (,S/3N sen)s to MS#/3N the 7essage AIU/ (elocation/(e?uest/Ac9A& +uring or a!ter assigning the resources= MS#/3N "ill also sen) to its C8( ;C8(/3N< the 7essage AMAP/Allocate/Han)o1er/,u7 er re?A= as9ing !or the han)o1er nu7 er& C8(/3N "ill sen) the assigne) han)o1er nu7 er to MS#/3N in the 7essage AMAP/Sen)/Han)o1er/(e0ort re?A& $-< A!ter recei1ing the ac9no"le)ge7ent ;!ro7 (,S/3N< an) the han)o1er nu7 er= MS#/3N sen)s to MS#/A the 7essage AMAP/Pre0/Han)o1er/res0A= in)icating that it is rea)5 !or the han)o1er& Inclu)e) in this 7essage is the han)o1er nu7 er= "ith "hich MS#/A can !in) the route to MS#/3N& $4< MS#/A then sen)s to MS#/3N the Initial A))ress Message ;IAM< to re?uest !or the corres0on)ing trun9 circuit& A!ter occu05ing the trun9 circuit= MS#/3N returns to MS#/A the A))ress #o70lete Message ;A#M<& MS#/A then generates the 7essage AMAP/Pre0/Su /Han)o1er res0A an) sen)s it to MS#/3 through the MAP signaling= in)icating that it is rea)5 !or the su se?uent han)o1er& $6< MS3/3 then sen)s to (,S/A the han)o1er co77an) AIu/(elocation/#o77an)A= as9ing the UE to start han)o1er& *0< The UE starts to access (,S/3N& U0on the )etection o! the access= (,S/3N sen)s to MS#/3N the 7essage AIu/(elocation/+etectA& MS#/3N sen)s the 7essage to MS#/A in the signaling AMAP/Process/Access/Signal re?A an) "aits !or the han)o1er co70lete 7essage& A!ter the UE accesses (,S/3N= (,S/3N sen)s the han)o1er co70lete 7essage AIu/(elocation/#o70leteA to MS#/3N= "hich "ill sen) the 7essage to MS#/A in the MAP signaling AMAP/Sen)/En)/ Signal re?A& The MS#/3N then starts so7e 0ost/han)o1er o0erations= such as sen)ing the 7essage AAns"erA to the inter/MS# circuit& *$< On recei0t o! the AMAP/Sen)/En)/Signal re?A= MS#/A sen)s to MS#/3 the 7essage AMAP/Sen)/En)/Signal res0A= noti!5ing that the han)o1er has succee)e)= an) the resources occu0ie) circuit set u0 "ith MS#/3 )uring the 5 that UE can e release)& MS#/A also sto0s the eBchange o! MAP signaling "ith MS#/3= an) releases the trun9 asic han)o1er& MS#/3 initiates the Iu release 0roce)ure to release the relate) resources& The inter/MS# circuit "ill e 7aintaine) until the session is o1er& Then= MS#/A "ill release the circuit= use the MAP signaling AMAP/Sen)/En)/Signal res0A to noti!5 MS#/3N to release the relate) ra)io resources= an) sto0 the eBchange o! MAP signaling "ith MS#/3N&
Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter
#ote$ The MS#/3N a!ter the han)o1er 0la5s the role o! MS#/3 )uring the asic inter/MS# han)o1er& I! han)o1er occurs again= the target MS# "ill 0la5 the role o! MS#/3N then&
Intra/MS# han)o1er !ro7 UMTS to 'SM Intra/MS# han)o1er !ro7 'SM to UMTS Inter/MS# han)o1er !ro7 UMTS to 'SM Inter/MS# han)o1er !ro7 'SM to UMTS Su se?uent han)o1er ac9 to MS#/A UMTS cell a!ter UMTS/'SM han)o1er Su se?uent han)o1er ac9 to MS#/A 'SM cell a!ter 'SM/UMTS han)o1er Su se?uent han)o1er to MS#/3N UMTS cell a!ter UMTS/'SM han)o1er Su se?uent han)o1er to MS#/3N 'SM cell a!ter 'SM/UMTS han)o1er
There are t"o 9e5 !actors in inter/s5ste7 han)o1erG First= The (,S o! UMTS shoul) e a le to recogniHe the 'SM cells= an) the 3SS o! 'SM shoul) su00ort e a le to recogniHe the UMTS cells& In a))ition= the MS# shoul) e ca0a le o! generating 7essages that oth UMTS an) 'SM cells= an)
7eet UMTS an) 'SM 0rotocols res0ecti1el5& Secon)= The MS# shoul) su00ort the con1ersion o! UMTS an) 'SM ser1ice ?ualit5 0ara7eters& To e 7ore s0eci!ic= the MS# shoul) e a le to con1ert an) 7a0 et"een the 'SM #hannel T50e an) the UMTS DoS= so that su scri ers can o tain ser1ices o! the sa7e ?ualit5 a!ter the han)o1er& The inter/s5ste7 han)o1er in1ol1es 0ri7aril5 the MS# a)a0tation !or UMTS an) 'SM access net"or9s& There!ore= !our asic inter/s5ste7 han)o1er 0roce)ures are )escri e) elo"& Other 0roce)ures are the co7 ination an) eBtension o! these !our asic 0roce)ures&
Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter
MS 3SS/3
Iu/(elocation/(e?uire)
Figure 1.1 Proce)ure o! intra/MS# han)o1er !ro7 UMTS to 'SM $< The access net"or9 (,S/A o! the MSFUE 7a9es the )ecision to initiate the han)o1er 0roce)ure& It sen)s to its MS# ;MS#/A< the han)o1er re?uest ;Iu/ (elocation/(e?uire)<& Inclu)e) in the han)o1er re?uest is the a))ress in!or7ation o! the eB0ecte) access net"or9 3SS/3= usuall5 the #ell 'lo al I+ ;#'I< o! the target cell& *< On recei0t o! the re?uest= MS#/A chec9s in the corres0on)ing ta le& I! the target cell is !oun) to e in the 3SS un)er its o"n control= MS#/A "ill generate the corres0on)ing 'SM han)o1er re?uest 7essage AA/Han)o1er/(e?uestA an) sen) it to 3SS/3& While structuring this 7essage= MS# 0er!or7s the 0rotocol inter"or9ing et"een UMTS an) 'SM s5ste7s& 3< On recei0t o! the 7essage !ro7 MS#= 3SS/3 assigns the necessar5 resources !or the MSFUE to access accor)ing to the corres0on)ing re?uire7ent ;inclu)e) in the cells o! the 7essage<= an) 0er!or7s channel selection to ensure the ser1ice ?ualit5& .< A!ter assigning the relate) resources= 3SS/3 sen)s to MS#/A the AA/Han)o1er/ (e?uest/Ac9A 7essage= in)icating that the resources assign7ent is co70lete) an) the 3SS is rea)5 !or the MSFUE to access& %< On recei0t o! the ac9no"le)ge7ent= MS#/A generates the UMTS han)o1er co77an) AIu/(elocation/#o77an)A an) sen)s the 7essage to (,S/A& (,S/A in turn sen)s it in the 7essage A((#/HO/#o77an)A to the MSFUE= as9ing it to access the ne" ser1ice area& In this 0rocess= so7e in!or7ation ;recogniHa le to (,S/A< use) to instruct the MSFUE to con)uct ra)io access "ill e carrie) in the 'SM 7essage AA/Han)o1er/(e?uest/Ac9A& Such in!or7ation is trans0arent to MS#& MS# :ust nee)s to 0ut the in!or7ation into UMTS han)o1er 7essage an) sen)s it to (,S/A&
Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter
2<
3SS/3 sen)s to MS#/A the 7essage AA/Han)o1er/+etectA "hen it )etects that the MSFUE is accessing& A!ter the access= "hich "ill e re0orte) 5 the MSFUE= 3SS/3 sen)s to MS#/A the 7essage AA/Han)o1er/#o70leteA= in)icating that it is a le to 0ro1i)e ser1ice !or the MSFUE&
-<
A!ter recei1ing the han)o1er co70lete 7essage !ro7 (,S/3= MS#/A sen)s the 7essage AIu/(elease/#o77an)A to (,S/A= as9ing it to release the relate) resources& A!ter releasing the resource= (,S/A returns the 7essage AIu/ (elease/#o70leteA to MS#/A= en)ing the han)o1er 0roce)ure&
#ote$ The 3SS/3 a!ter the han)o1er eco7es the Ser1ing 3SS ;S3SS< o! that MS& I! han)o1er occurs again= the 3SS/3 "ill 0la5 the role o! 3SS/A then&
UE 3'>MS#/A (,S/3
Figure 1.1 Proce)ure o! intra/MS# han)o1er !ro7 'SM to UMTS $< The access net"or9 3SS/A o! the MSFUE 7a9es the )ecision to initiate the han)o1er 0roce)ure& It sen)s to its MS# ;MS#/A< the han)o1er re?uest ;A/ Han)o1er/(e?uire)<& Inclu)e) in the han)o1er re?uest is the a))ress in!or7ation o! the eB0ecte) access net"or9 (,S/3= usuall5 the I+ o! the target (,#& *< On recei0t o! the re?uest= MS#/A chec9s in the corres0on)ing ta le& I! the target cell is !oun) to e in the (,S un)er its o"n control= MS#/A "ill generate the corres0on)ing UMTS han)o1er re?uest 7essage AIu/(elocation/(e?uestA an) sen) it to (,S/3& While structuring this 7essage= MS# 0er!or7s the 0rotocol inter"or9ing et"een UMTS an) 'SM s5ste7s& 3< On recei0t o! the 7essage !ro7 MS#= (,S/3 assigns the necessar5 resources
Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter
!or the MSFUE to access accor)ing to the re?uire7ent ;inclu)e) in the cells o! the 7essage<= an) 0er!or7s DoS con!iguration& .< A!ter assigning the relate) resources= (,S/3 sen)s to MS#/A the AIu/ (elocation/(e?uest/Ac9A 7essage= in)icating that the resources assign7ent is co70lete) an) the (,S is rea)5 !or the MSFUE to access& %< On recei0t o! the UMTS ac9no"le)ge7ent= MS#/A generates the 'SM han)o1er co77an) AA/Han)o1er/#o77an)A an) sen)s the 7essage to 3SS/A& 3SS/A in turn sen)s it in the 7essage A(I/HO/#o77an)A to the MSFUE= as9ing it to access the ne" ser1ice area& In this 0rocess= so7e in!or7ation ;recogniHa le to 3SS/A< use) to instruct the MSFUE to con)uct ra)io access "ill e carrie) in the UMTS 7essage AIu/(elocation/(e?uest/Ac9A& Such in!or7ation is trans0arent to MS#& MS# :ust nee)s to 0ut the in!or7ation into 'SM han)o1er 7essage an) sen)s it to 3SS/A& 2< (,S/3 sen)s to MS#/A the 7essage AIu/(elocation/+etectA "hen it )etects that the MSFUE is accessing& A!ter the access= (,S/3 sen)s to MS#/A the 7essage AIu/(elocation/#o70leteA= in)icating that it is a le to 0ro1i)e ser1ice !or the MSFUE& -< A!ter recei1ing the han)o1er co70lete 7essage !ro7 (,S/3= MS#/A sen)s the 7essage AA/#lear/#o77an)A to 3SS/A= as9ing it to release the relate) resources& A!ter releasing the resources= 3SS/A returns the 7essage AA/#lear/ #o77an)A to MS#/A= en)ing the han)o1er 0roce)ure&
#ote$ The (,S/3 a!ter the han)o1er eco7es the S(,S o! that MSFUE& I! han)o1er occurs again= it "ill 0la5 the role o! (,S/A then&
Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter
3SS/3FMSFUE C8(/3
MAP/Pre0/Han)o1er re?&
MAP/Pre0/Han)o1er res0& IAM Iu/(E8O#ATIO,/ #OMMA,+ Iu/(E8EASE/ #M+F#OM A,SWE( (E8EASE MAP/Sen)/En)/Signal res0& A#M MAP/Process/Access/Sig re?& MAP/Sen)/En)/Signal re?&
A/HO/+ETE#T A/HO/#OMP8ETE
En) o! call
Figure 1.1 Proce)ure o! inter/MS# han)o1er !ro7 UMTS to 'SM $< The access net"or9 (,S/A o! the MSFUE 7a9es the )ecision to initiate the han)o1er 0roce)ure& It sen)s to its MS# ;MS#/A< the han)o1er re?uest AIu/ (elocation/(e?uire)A& Inclu)e) in the han)o1er re?uest is the a))ress in!or7ation o! the eB0ecte) access net"or9 3SS/3= usuall5 the #'I o! the target cell& *< On recei0t o! the re?uest= MS#/A chec9s in the corres0on)ing ta le& I! the target 3SS is !oun) to e connecte) to another MS# ;MS#/3<= MS#/A "ill 0ac9 the han)o1er re?uest into a cell= 0ut the cell into the corres0on)ing MAP 7essage AMAP/Pre0are/Han)o1er re?A= an) sen) it to MS#/3 through the MAP signaling& In this 0roce)ure= MS#/A "ill 7a0 the UMTS 7essage into 'SM 7essage "hile 0ac9ing the han)o1er re?uest= so as to 7a9e the 7essage eco7e recogniHa le to 'SM s5ste7& 3< .< On recei0t o! the 7essage= MS#/3 generates the 7essage AA/Han)o1er/ (e?uestA an) sen)s it to the target 3SS& 3SS then assigns the corres0on)ing resources !or the MSFUE& MS#/3 also assigns the relate) resources at the sa7e ti7e& A!ter assigning the resources= 3SS sen)s to MS#/3 the 7essage AA/Han)o1er/(e?uest/Ac9A& +uring or a!ter assigning the resources= MS#/3 "ill also sen) to its C8( ;C8(/3< the 7essage AMAP/Allocate/Han)o1er/,u7 er re?A= as9ing !or the han)o1er nu7 er& C8(/3 "ill then sen) the assigne) han)o1er nu7 er to MS#/3 in the 7essage AMAP/ Sen)/Han)o1er/(e0ort re?A& %< A!ter recei1ing the ac9no"le)ge7ent ;!ro7 (,S/3< an) the han)o1er nu7 er= MS#/3 sen)s to MS#/A the 7essage AMAP/Pre0/Han)o1er/res0A= in)icating that it is rea)5 !or the han)o1er& Inclu)e) in this 7essage is the han)o1er
Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter
nu7 er= "ith "hich MS#/A can !in) the route to MS#/3& 3esi)es= the 7essage AA/Han)o1er/(e?uest/Ac9A is 0ac9e) into this 7essage in the Pac9et +ata Unit ;P+U< !or7at& 2< MS#/A then sen)s to MS#/3 the IAM to re?uest !or the corres0on)ing trun9 circuit& A!ter occu05ing the trun9 circuit= MS#/3 returns to MS#/A the A#M& The occu0ation o! the trun9 circuit is then co70lete)& -< A!ter the setu0 o! inter/MS# circuit= MS#/A generates the 7essage AIu/(eloc/ #o77an)A accor)ing to the in!or7ation eBtracte) !ro7 the 7essage AMAP/Pre0/ Han)o1er/res0A an) sen)s it to (,S/A= as9ing the MSFUE to start the han)o1er& This 0roce)ure also re?uires the 0rotocol inter"or9ing et"een UMTS an) 'SM s5ste7s& 4< The MSFUE then starts to access the 3SS& U0on the )etection o! the access= 3SS sen)s to MS#/3 the 7essage AA/Han)o1er/+etectA& MS#/3 0ac9s the 7essage into the MAP signaling AMAP/Process/Access/Sig re?A an) sen)s it to MS#/A& MS#/3 then "aits !or the han)o1er co70lete 7essage& On recei0t o! the corres0on)ing MAP signaling= MS#/A also "aits !or the han)o1er co70lete 7essage& 6< A!ter the MSFUE accesses 3SS= 3SS sen)s the han)o1er co70lete 7essage to MS#/3= "hich "ill 0ac9 the 7essage into the MAP signaling AMAP/Sen)/En)/ Signal re?A an) sen) it to MS#/A& The MS#/3 then starts so7e 0ost/han)o1er o0erations= such as sen)ing the 7essage AAns"erA to the inter/MS# circuit& $0< A!ter recei1ing the 7essage !ro7 MS#/3= MS#/A conclu)es that the han)o1er is co70lete& It starts releasing the resources occu0ie) 5 that MSFUE at (,S/A 5 sen)ing to the (,S/A the 7essage AIU/(E8/#M+A& (,S/A returns the 7essage AIU/(E8/#OMPA to MS#/A a!ter the releasing& The inter/MS# circuit "ill e 7aintaine) until the session is o1er& Then= MS#/A "ill release the circuit= use the MAP signaling AMAP/Sen)/En)/Signal res0A to noti!5 MS#/3 o! the release= an) sto0 the eBchange o! MAP signaling "ith MS#/3&
#ote$
An5ti7e a!ter recei1ing the IAM 7essage !ro7 MS#/A= MS#/3 can use the MAP signaling AMAP/Sen)/Han)o1er/(e0ort res0A to noti!5 C8(/3 to release the han)o1er nu7 er= so that it can e reuse) neBt ti7e&
Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter
(,S/3FUEFMS C8(/3
MAP/Pre0/Han)o1er res0& IAM A/HO/#OMMA,+ A#M MAP/Process/Access/Sig re?& A/#8(/#M+F#OM MAP/Sen)/En)/Signal re?& A,SWE( (E8EASE En) o! call MAP/Sen)/En)/Signal res0&
Iu/(E8O#ATIO,/+ETE#T Iu/(E8O#ATIO,/#OMP8ETE
Figure 1.1 Proce)ure o! inter/MS# han)o1er !ro7 'SM to UMTS $< The access net"or9 3SS/A o! the MSFUE 7a9es the )ecision to initiate the han)o1er 0roce)ure& It sen)s to its MS# ;MS#/A< the han)o1er re?uest ;A/ Han)o1er/(e?uire)<& Inclu)e) in the han)o1er re?uest is the a))ress in!or7ation o! the eB0ecte) access net"or9 (,S/3= usuall5 the I+ o! the target (,#& *< On recei0t o! the re?uest= MS#/A chec9s in the corres0on)ing ta le& I! the T(,S ;(,S/3< is !oun) to e connecte) to another MS# ;MS#/3<= MS#/A "ill 0ac9 the han)o1er re?uest into a certain cell= 0ut the cell into the corres0on)ing MAP 7essage AMAP/Pre0are/Han)o1er re?A= an) sen) it to MS#/3 through the MAP signaling& 3< On recei0t o! the 7essage= MS#/3 eBtracts the 'SM 7essage AA/Han)o1er/ (e?uestA& 3ase) on this 7essage= MS# generates the corres0on)ing UMTS han)o1er re?uest AIu/(elocation/(e?uestA an) sen)s it to the (,S/3& In this 0roce)ure= MS#/3 "ill 7a0 the 'SM 7essage into the UMTS 7essage& .< U0on the rece0tion o! the han)o1er re?uest= (,S/3 assigns the corres0on)ing resources !or the MSFUE& MS#/3 also assigns the relate) resources at the sa7e ti7e& A!ter assigning the resources= (,S/3 sen)s to MS#/3 the 7essage AIu/ (elocation/(e?uest/Ac9A& +uring or a!ter assigning the resources= MS#/3 "ill also sen) to its C8( ;C8(/3< the 7essage AMAP/Allocate/Han)o1er/,u7 er re?A= as9ing !or the han)o1er nu7 er& C8(/3 "ill then sen) the assigne) han)o1er nu7 er to MS#/3 in the 7essage AMAP/Sen)/Han)o1er/(e0ort re?A& %< A!ter recei1ing the ac9no"le)ge7ent ;!ro7 (,S/3< an) the han)o1er nu7 er= MS#/3 sen)s to MS#/A the 7essage AMAP/Pre0/Han)o1er/res0A= in)icating
Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter
that it is rea)5 !or the han)o1er& Inclu)e) in this 7essage is the han)o1er nu7 er= "ith "hich MS#/A can !in) the route to MS#/3& 3esi)es= MS#/3 "ill 0ut the 7essage AA/Han)o1er/(e?uest/Ac9A ;0ac9e) in the P+U !or7at< into this 7essage& 2< MS#/A then sen)s to MS#/3 the IAM to re?uest !or the corres0on)ing trun9 circuit& A!ter occu05ing the trun9 circuit= MS#/3 returns to MS#/A the A#M& The occu0ation o! the trun9 circuit is then co70lete)& -< A!ter the setu0 o! inter/MS# circuit= MS#/A generates the 7essage AA/ Han)o1er/#o77an)A accor)ing to the 'SM 7essage AA/Han)o1er/(e?uest/ Ac9A eBtracte) !ro7 the 7essage AMAP/Pre0/Han)o1er/res0A& MS#/A sen)s the 7essage to 3SS/A= as9ing the MSFUE to start the han)o1er& 4< The MSFUE then starts to access (,S/3& U0on the )etection o! the access= (,S/3 sen)s to MS#/3 the 7essage AIu/(elocation/+etectA& MS#/3 con1erts the 7essage into the corres0on)ing 'SM 7essage AA/Han)o1er/+etectA= 0ac9s the 7essage into the MAP signaling AMAP/Process/Access/Sig re?A an) sen)s it to MS#/A& MS#/3 then "aits !or the han)o1er co70lete 7essage& On recei0t o! the corres0on)ing MAP signaling= MS#/A "ill also "aits !or the han)o1er co70lete 7essage& 6< A!ter the MSFUE accesses (,S/3= (,S/3 sen)s the han)o1er co70lete 7essage to MS#/3& MS#/3 con1erts the 7essage into the corres0on)ing 'SM 7essage AA/Han)o1er>#o70leteA= 0ac9s the 7essage into the MAP signaling AMAP/Sen)/En)/Signal re?A an) sen)s it to MS#/A& The MS#/3 then starts so7e 0ost/han)o1er o0erations= such as sen)ing the 7essage AAns"erA to the inter/MS# circuit& $0< A!ter recei1ing the 7essage !ro7 MS#/3= MS#/A conclu)es that the han)o1er is co70lete)& It starts releasing the resources occu0ie) 5 that MSFUE at 3SS/A 5 sen)ing to the 3SS/A the 7essage AA/#8(/#M+A& 3SS/A returns the 7essage AA/#8(/#OMPA to MS#/A a!ter the releasing& The inter/MS# circuit "ill e 7aintaine) until the session is o1er& Then= MS#/A "ill release the circuit= use the MAP signaling AMAP/Sen)/En)/Signal res0A to noti!5 MS#/3 o! the release= an) sto0 the eBchange o! MAP signaling "ith MS#/3&
#ote$
An5ti7e a!ter recei1ing the IAM 7essage !ro7 MS#/A= MS#/3 can use the MAP signaling AMAP/Sen)/Han)o1er/(e0ort res0A to noti!5 C8(/3 to release the han)o1er nu7 er= so that it can e reuse) neBt ti7e&
The (,S/3 a!ter the han)o1er eco7es the S(,S o! that MSFUE& I! han)o1er occurs again= the (,S/3 "ill 0la5 the role o! (,S/A then&
Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter
Tone #o)e is a 9in) o! su scri0tion )ata in H8(= "hich can e use) to restrict the roa7ing area o! the su scri er& MS# can )e!ine the 8A containe) in each Tone #o)e& In this "a5= the areas in "hich 7o ile su scri er are allo"e) to roa7 can !leBi l5&
e set
MS# can 0ro1i)e roa7ing restriction !unction ase) on 8A "ithout the coo0eration o! H8(& For this t50e o! roa7ing restriction= su scri er grou0 an) location grou0 ,o& ;one location grou0 ,o& 7a5 corres0on) to one or 7ore 8As< shoul) e )e!ine) !irst& Then the corres0on)ence grou0 can e esta lishe)&
shoul) e )e!ine)= so that the area in "hich roa7ing is !or i))en !or this su scri er C8( list ase) roa7ing restriction
C8( list is a 9in) o! su scri0tion )ata in H8(= "hich )e!ines the C8( areas in "hich roa7ing is allo"e)& MS# ena les this roa7ing restriction "ith the coo0eration o! H8(&
15.;.1 (uthentication
MSOFTX3000 authentication !unction inclu)es 'SM authentication an) UMTS authentication&
Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter
Soli)i!ie) )ataG IMSI= Ei= A3 ;authentication algorith7<= an) A4 ;ci0hering algorith7<& These )ata "ill not e change)& Te70orar5 net"or9 )ataG Te70orar5 Mo ile Su scri er I)entit5 ;TMSI<= 8ocation Area I)entit5 ;8AI<= #i0hering Ee5 ;Ec<= #i0hering Ee5 Se?uence ,u7 er ;#ES,<= an) 0rohi ite) P8M,& Ser1ice/relate) )ata
Au#
(A,+o7 nu7 er ;(A,+< generator Ei #i0hering algorith7s= "hich shoul) e consistent "ith those a00lie) in SIM&
!!!. Principle
The asic !unction o! Au# is to generate the AC trioG (A,+= Signe) (es0onse to (A,+ is generate) 5 (A,+ generator& S(ES is resulte) !ro7 (A,+ an) Ei in A3 algorith7& Ec is resulte) !ro7 (A,+ an) Ei in A4 algorith7&
A!ter generate)= the AC trio is store) in H8(& When authentication is re?uire)= MS#FC8( o! the MS ser1ice region "ill loa) at least one AC trio !ro7 H8(& (e!er to Figure $&$ !or the 0rinci0le o! authentication&
Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter
H8(FAU# AU# IMS ;7< IMS ;n< (A,+ generator EI ;M< EI ;,< EI ;IMSI< A4 A3 Authentication re?uest C8( SIM H8(
(A,+
E#
S(ES EI ;IMSI<
#ES,
(A,+ 3SS
A4 A3 E#
S(ES
A3 A4
S(ES E#
(A,+ EI 9c
$2 5te
$2 5te 4 5te
E# ;M< M
E# ;M< M E#
A% ;MSF3SS<
Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter
3SSAP A MAP 3
MS
U7
3SS
MS#
C8(
MAP +
H8(FA#
relate) ser1ice re?uest call esta lish7entFlocation u0)ate Fsu00le7entar5 ser1ice ;SMS<
MAP 7essage ;ser1ice re?uest< ;#ES,= IMSIFTMSI< AC retrie1al re?uest ;IMSI< authentication re?uest ;#ES,= (< authentication res0onse re?uest acce0te)F re?uest re:ecte) res0on) "ith ASE(SA a!ter a consistenc5 chec9 return se1eral ACs ;IMSI= E#= S= (<
return Aacce0te)A 7essage ;authentication success!ul such as Aser1ice acce0te)A= ;authoriHe) user<F Alocation u0)ate acce0te)A=authentication unsuccess!ul or Aauthentication re:ecte)A ;unauthoriHe) user<<
Figure 1.1 'SM authentication 0roce)ure $< *< MS in)icates the store) #ES, in the !irst #OMP8ETE 8AVE(3 I,FO ;call esta lish7entFlocation u0)ateFsu00le7entar5 ser1ice ;SMS<<& When MS# recei1es #OMP8ETE 8AVE(3 I,FO 7essage= it )eci)es "hether authentication is nee)e) ase) on )ata con!iguration& I! authentication is not nee)e)= the 0roce)ure is s9i00e)& Other"ise= chec9 i! #ES, is consistent "ith the 1alue store) in MS in the access 0rocess& I! not consistent= MS# sen)s P(O#ESS A##ESS (EDUEST to C8( to initiate an authentication 0roce)ureJ other"ise= the 0roce)ure is s9i00e) 3< C8( chec9 i! there is an AC trio= ;or reuse o! the AC trio is 0er7itte)<& I! no AC is !oun)= C8( "ill retrie1e one !ro7 H8(& H8( recei1es the AC retrie1al re?uest= it re?uests Au# ;usuall5 integrate) in H8(< to generate !i1e ACs& Then= H8( returns the !i1e ACs to C8( in AUTHE,TI#ATIO, (ESPO,SE 7essage& I! there is still an5 AC trio in C8(= H8( "ill not 0artici0ate in the 0roce)ure= an) C8( "ill initiate AUTHE,TI#ATIO, (EDUEST to MS )irectl5& .< %< C8( sen)s AUTHE,TI#ATIO, (EDUEST 7essage to in1o9e authentication 0roce)ure& The re?uest inclu)es a (A,+ an) a #ES,& U0on recei1ing the re?uest 7essage= MS generates an S(ES resulting !ro7 Ei an) the (A,+ in A3 authentication algorith7= an) a Ec resulting !ro7 Ei an) the (A,+ in A4 ci0hering algorith7& MS sen)s S(ES an) Ec AUTHE,TI#ATIO, (ESPO,SE 7essage& 2< When generating authentication 1ector set at net"or9 si)e= the sa7e algorith7 is a)o0te)& An S(ES is generate) resulting !ro7 Ei an) (A,+ in A3 algorith7& Then C8( co70ares the 1alue o! t"o S(ESs& I! the5 are the sa7e= authentication succee)s= allo"ing MS to access the net"or9& I! the5 are )i!!erent= authentication !ails= MS access to the net"or9 is )enie)& ac9 to C8( in
Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter
(A,+
(A,+ is a ran)o7 nu7 er 0ro1i)e) to UE& UE then uses it to generate) authentication res0onse (ES or (ESM(ES>EXT= an) securit5 9e5s as IE an) #E& The length o! (A,+ is $2 octets.
AUT,
X(ES re!ers to eB0ecte) UE authentication res0onse& 35 co70aring X(ES an) (ES ;or (ESM(ES>EXT< generate) #E succee)s& It is ./$2 octets in length&
IE
IE is UMTS integrit5 0rotection 9e5= "hich is $2 octets in length& Other 0ara7eters relate) to UMTS authenticationG
AUTS
AUTS is to 0ro1i)e necessar5 in!or7ation to in1o9e re/authentication 0roce)ure& When MS returns authentication !ailure= an) !ailure cause is @s5nchroniHation !ailureI= this 0ara7eter is a))e)& It is $. octets in length&
SD,
SeDuence ,u7 er ;SD,< is nee)e) to calculate MA# an) AUT, 1alue& Ti7er SD,MS an) SD,HE are store) in USIM an) Ho7e En1iron7ent ;HE<& The ti7ers are use) !or net"or9 authentication& SD,MS is an in)e0en)ent ti7er to e1er5 user= as it in)icates the 7aBi7u7 1alues that USIM recei1es&
AMF
Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter
Authentication an) 9e5 Manage7ent Fiel) ;AMF< is in)icates an) generates the algorith7 an) ci0hering 9e5 !or a certain AC& It in)icates the 7aBi7u7 )i!!erential 1alue et"een SD,MS an) SD,& I! SD,/SD,MSWAMF= an) SD,XSD,MS= SD, is 1ali)& USIM restricts #E "ith a 1ali)it5 0erio)& The 0erio) can e a):uste) in AMF&
AE
AE encr50ts SD, in AUT,& It is o taine) !ro7 (A,+ an) E ;#E constantl5 share) et"een Au# an) HE<& Alternati1el5= set AEY0&
MA#
Message Authentication #o)e ;MA#< is o taine) !ro7 the calculation o! SD,= (A,+= AMF an) E& The recei1e) en) shall re/calculate MA# to co70are "ith the recei1e) one= :u)ging i! MA# !aile)&
!!. Principle
When user accesses the net"or9= i! authentication is re?uire)= C8(FS'S, "ill select an unuse) AC ?uintet= an) initiate authentication re?uest to UE& The re?uest 7essage inclu)es (A,+= AUT, an) #ES, o! selecte) authentication 1ector& USIM chec9s i! AUT, is acce0te)& I! not= then authentication !ailsJ other"ise= "or9 out (ES= #E an) IE= an) return (ES to C8(FS'S,& C8(FS'S, co70ares the (ES returne) !ro7 UE "ith X(ES in authentication 1ector set& IF the5 are the sa7e= authentication succee)sJ other"ise= authentication !ails& On success!ul authentication= the #E an) IE that UE calculate) an) store) in USIM= an) the #E an) IE that C8(FS'S, store) in authentication 1ector set can e use) !or su se?uent encr50tion 0roce)ures& I! authentication !ails= UE "ill )elete the store) #E an) IE&
Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter
UE
Uu
(,S
(A,AP Iu
MS#FS'S,
MAP 3
C8(
MAP +
H8(FAuc
relate) ser1ice re?uest ;call esta lish7entFlocation u0)ateF su00le7entar5 ser1ice ;SMS<<
MAP 7essage ;ser1ice re?uest< ;#ES,= IMSIFTMSI< authentication re?uest AC retrie1al re?uest return se1eral ACs ;(A,+= AUT,= #E= IE= X(ES< res0on) "ith AXE(SA a!ter a consistenc5 chec9 i! (ES or (ESM(ES>EXT is returne) authentication !ailure re0ort
;(ES ;(ESM(ES>EXT< or authentication !ailure< authentication success ;return Aacce0te)A 7essage such as Aser1ice acce0te)A= Alocation u0)ate acce0te)A or Aauthentication re:ecte)A su se?uent 0rocessing ;such as getting IMSI= another authentication<
Figure 1.1 UMTS authentication 0roce)ure UMTS authentication 0roce)ure is initiate) an) controlle) 5 the net"or9= 5et UE can )en5 net"or9 authentication challenge& $< *< UE in)icates the store) #ES, in the !irst #OMP8ETE 8AVE(3 I,FO ;call esta lish7entFlocation u0)ateFsu00le7entar5 ser1ice ;SMS<< MS#FS'S, recei1es #OMP8ETE 8AVE(3 I,FO 7essage= chec9s i! #ES, 1alue ;that UE use) in 0re1ious i70le7entation< is the 1alue) store) in UE& I! so= authentication 0roce)ure is s9i00e)J other"ise= MS#FS'S3 "ill sen) re?uest to C8( !or authentication 0ara7eters& 3< I! there is no ?uintet a1aila le in C8(= C8( "ill initiate a re?uest to H8(FAu# !or authentication 1ector set& H8( recei1es the authentication set retrie1al re?uest= it re?uests Au# ;usuall5 integrate) in H8(< to generate !i1e sets o! authentication 1ectors& Then= H8( returns the !i1e sets to C8( in AUTHE,TI#ATIO, (ESPO,SE& I! there is still an5 authentication 1ector ?uintet in C8(= H8( "ill not 0artici0ate in the 0roce)ure= an) C8( "ill initiate AUTHE,TI#ATIO, (EDUEST to MS )irectl5& .< MS#FS'S, #ES,& %<
sen)s
UE
an
AUTHE,TI#ATIO,
(EDUEST
to
in1o9e
authentication 0roce)ure& The re?uest inclu)es an (A,+= an AUT, an) a UE res0onses "ith an AUTHE,TI#ATIO, (ESPO,SE 7essageG UE chec9 AUT,& I! the MA# is the sa7e as the calculate) one= UE "ill then chec9 i! the range o! SD,= "hich is calculate) ase) on AUT,= is correct& I! SD, is correct= UE "ill 7a9e out (ES ;or (ESM(ES>EXT< ase) on (A,+= an) sen) it to C8( in AUTHE,TI#ATIO, (ESPO,SE 7essage&
Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter
o1er"rite the original ones= an) shoul) e store) in USIM "ith #ES,& 2<
The net"or9 recei1es AUTHE,TI#ATIO, (ESPO,SEG On recei1ing (ES= the net"or9 co70ares (ES ;or (ESM(ES>EXT< "ith X(ES& I! the5 are i)entical= the user is legalJ other"ise= the user is illegal& In case o! authentication !ailure= i! UE uses TMSI= the net"or9 can initiate i)enti!ication 0roce)ureJ i! UE uses IMSI= or the net"or9 )eci)es not to initiate i)enti!ication 0roce)ure= it shall sen) AUTHE,TI#ATIO, (ELE#T 7essage to UE&
-<
UE authentication re:ects "ith AUTHE,TI#ATIO, FAI8U(E 7essageG UE chec9 AUT,& I! MA# !ailure occurs= "hich 7eans the MA# o! AUT, )i!!ers !ro7 the calculate) MA#= UE "ill sen) authentication !ailure 7essage to en) the 0roce)ure& MS# shall initiate the authentication !ailure re0orting 0roce)ure to H8(= an) i)enti!ication 0roce)ure as "ell as authentication 0roce)ure& I! i)enti!ication 0roce)ure is again initiate)= the net"or9 "ill con!ir7 the corres0on)ing relationshi0 et"een the recei1e) IMSI an) the sen) TMSI& I! relationshi0 is incorrect= retrie1e AC ?uintet again an) initiate the authentication 0roce)ure& In the secon) authentication re?uest= i! it is MA# !ailure again= the MS "ill regar) the 0resent ser1ice area as a 0rohi ite) one until the s5ste7 in!or7ation is u0)ate)&
I! no MA# !ailure occurs= MS "ill chec9 i! the range o! SD,= "hich is calculate) ase) on AUT,= is correct& I! SD, eBcee)s the range= MS "ill sen) s5nchroniHation !ailure 7essage to en) the 0roce)ure& The 7essage contains re:ection cause 0ara7eter @S5nch !ailureI an) re/s5nchroniHation !lag 0ara7eter AUTS= the latter o! "hich is calculate) ase) on AUT, an) (A,+& The net"or9 shall re/s5nchroniHe "ith the 0ara7eter AUTS& MS#FC8( shall )elete all unuse) ACs= retrie1e AC !ro7 H8(= an) re/initiate an authentication 0roce)ure&
15.;.8
ual9Mode MS (uthentication
!. efinition
A )ual/7o)e MS re!ers to the 7o ile 0hone that can e use) in t"o )i!!erent 7o ile co77unication s5ste7s& The asic architecture is that un)er the control o! central control unit= it a)o0ts the sa7e 7an/7achine inter!ace= an) the sa7e antenna= ut t"o se0arate s5ste7s& When the MS is 0o"ere) on= the central control unit )etects et"een the t"o s5ste7s= an) selects a 0ath& It can select either 7o ile co77unication s5ste7 as s0eci!ic en1iron7ent or o0eration re?uires& Here= the )ual/ 7o)e MS is co70ati le "ith 'SM ;*'< an) UMTS ;3'<& (66MME is a )ual/7o)e MS that can access 3SS as "ell as UT(A,&
(elate) conce0ts Authentication an) 9e5 agree7ent ;AEA< o! UMTS re!ers to the authentication an) encr50tion 0roce)ures o! sen)ing authentication 1ector ?uintet& AEA o! 'SM
Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter
re!ers to the authentication an) encr50tion 0roce)ures o! sen)ing authentication 1ector trio&
(64/G (e!ers to the net"or9 no)e or ME )esigne) on (6- or (64& (66MG (e!ers to the net"or9 no)e or ME )esigne) on (66 or later& UMTS users inclu)esG (66MME "ith USIM an) (64/ME "ith USIM& 'SM users inclu)esG (66MME "ith SIM an) (64/ME "ith SIM&
Tri0lets
ZEc[
UT(A,
(A,+ AUT, (ES (A,+ AUT, (ES
'SM 3SS
(A,+ S(ES (A,+ S(ES
(66M ME
(64/ ME
(66M ME or (64/ ME \
Ec #E= IE//X Ec (ES//X S(ES
USIM
Figure 1.1 O0ening an account o! UMTS user When (66MUE UMTS user "ith USIM accesses UT(A,= AEA o! UMTS is a)o0te)
Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter
When (66MUE UMTS user "ith USIM accesses 'SM 3SS= an) C8( is (66M= AEA o! UMTS is a)o0te) Ec is calculate) ase) on IE an) #E& When (66MUE UMTS user "ith USIM accesses 'SM 3SS= an) C8( is (64/= AEA o! 'SM is a)o0te)& Ec o! ME is calculate) ase) on IE an) #E& (64/ 7o)e C8(FS'S, uses store) Ec an) (ES&
UT(A,
(A,+ S(ES (A,+ S(ES
'SM 3SS
(A,+ S(ES (A,+ S(ES
(66M UE
Ec //X #E= IE Ec Ec
(64/ UE
(66M UE or (64/ UE
Ec
Ec
SIM
Figure 1.2 O0ening an account o! 'SM user When (66MUE 'SM user "ith SIM accesses UT(A,= AEA o! 'SM is a)o0te)& IE an) #E use) in access net"or9 an) MS is calculate) ase) on Ec o! 'SM& When (66MUE 'SM user "ith SIM accesses 'SM 3SS= an) C8(FS'S, is (66M= AEA o! 'SM is a)o0te)& When (66MUE 'SM user "ith SIM accesses 'SM 3SS= an) C8(FS'S, is (64/= AEA o! 'SM is a)o0te)&
15.;.5 &ncr'ption
The 0ur0ose o! encr50tion is to ensure trans7ission securit5 o! user )ata in the air& All encr50tion an) )ecr50tion i70le7entations are )one in the air& 'SM encr50tionG The encr50tion an) )ecr50tion o! user in!or7ation is an @eBclusi1e orI o0eration on $$./ it "ireless 0ulse co)e an) $$./ it encr50tion serial co)e& It
Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter
a00lies A% encr50tion algorith7& The algorith7 calculates ase) on Ec o! the MS an) the !ra7e nu7 er o! the 0ulse string& Ec is calculate) authentication re?uest 7essage<= an) Ei in A4 algorith7& UMTS encr50tionG To initiate encr50tion in the net"or9= inclu)e the encr50tion algorith7 an) #E in the encr50tion co77an)J (,# an) UE negotiate an algorith7 an) initiate the encr50tion 0roce)ure& Then= UE uses #E= "hich is calculate) ase) on (A,+= !or encr50tion an) )ecr50tionJ ,O+E3 uses #E sent 5 MS#FC8( !or the sa7e 0ur0ose& The net"or9 sen)s encr50tion 7essages to "ireless access net"or9& In this 0roce)ure= the core net"or9 an) "ireless access net"or9 negotiate an encr50tion algorith7 !or MS= "hich is !urther a00lie) in su se?uent ser1ice trans!er& When the MS s"itches et"een 'SM an) UMTS= the algorith7 "ill still e a00lie)= an) relate) 0ara7eters "ill e sent to s"itche) )estination (,#& The encr50tion 0roce)ure is sho"n in Figure $&$&
UEFUT(A,
SE#U(ITV MO+E #OMMA,+ SE#U(ITV MO+E #OMP8ETE or SE#U(ITV MO+E (ELE#T
#,
Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter
returns a SE#U(ITV MO+E #OMP8ETE 7essage= containing the selecte) integrit5 0rotection algorith7 an) encr50tion algorith7& The signaling )ata al"a5s a00lies the latest recei1e) 7essages !or encr50tion an) integrit5 0rotection& .< I! UE or UT(A, )oes not su00ort the s0eci!ie) algorith7 !or encr50tion or integrit5= it returns a SE#U(ITV MO+E (ELE#T 7essage= an) the reason 1alue is @re?uire) encr50tionFintegrit5 algorith7 not su00orte)I& I! the "ireless inter!ace securit5 control 0roce)ure !ails= it returns a SE#U(ITV MO+E (ELE#T 7essage= an) the reason 1alue is @"ireless inter!ace control 0roce)ure !ailureI& When encr50tion or integrit5 0rotection is acti1ate)= #, re?uires another algorith7= "hich is not su00orte) 5 UE or UT(A,= it returns a SE#U(ITV MO+E (ELE#T 7essage= an) reason 1alue is @change) encr50tion algorith7 an)For integrit5 algorith7 not su00orte)&I
MS#FC8(& The 0ur0ose o! TMSI reallocation is to ensure IMSI securit5 "hen using TMSI through "ireless inter!ace= 0re1enting an5 unauthoriHe) trace o! user acti1ities through IMSI& When a 7o ile su scri er co7es to a certain MS#FC8( control area= MS#FC8( "ill allocate a TMSI= "hich uni?uel5 i)enti!ies the su scri er= accor)ing to s0eci!ic TMSI allocation 0rinci0le& Then= the net"or9 i)enti!ies the su scri er 5 TMSI instea) o! IMSI& All signaling )ata interaction "ill e ase) on TMSI= thus achie1ing the 0ur0ose o! securit5& TMSI reallocation can e i70le7ente) in user location u0)ate= call esta lish7ent= an) in su00le7entar5 ser1ice a00lication& When a ne" TMSI is allocate)= the 0re1ious one "ill e )elete)& The TMSI reallocation 0roce)ure i70le7ente) in location u0)ate is )one together "ith location u0)ate acce0t 0rocess& See Figure $&$ !or )etails&
MSFUE MS#FC8( 8oc U0)ate Acce0t ;"ith TMSI< TMSI (ealloc co70lete
Figure 1.1 TMSI reallocation in location u0)ate $< MS#FC8( in1o9es TMSI reallocation 0roce)ure& It generates a ne" TMSI= stores the corres0on)ing relationshi0 et"een TMSI an) IMSI= an) sen) the ne" TMSI an) 8AI to MS& *< U0on recei1ing the ne"l5/allocate) TMSI= MS auto7aticall5 )elete the ol) one= sa1e the ne" one= an) returns a res0onse 7essage to MS#FC8(& MS#FC8( recei1es the res0onse 7essage= an) )eletes the original corres0on)ing
Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter