Вы находитесь на странице: 1из 88

Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!

tS"itch #enter

Ta le o! #ontents

Table of Contents
Chapter 15 Signaling Procedures............................................................................................... 1 $%&$ M'W (egistration Proce)ure&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&& $ $%&$&$ M'W (egistration Proce)ure&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&$ $%&$&* M'W +eregistration Proce)ure&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&$ $%&* #all Proce)ures&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&& * $%&*&$ Mo ile Su scri er #alling Mo ile Su scri er&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&* $%&*&* Mo ile Su scri er #alling PST, Su scri er&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&$%&*&3 PST, Su scri er #alling Mo ile Su scri er&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&$* $%&*&. Pre/0aging&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&& $3 $%&*&% #all For"ar)ing Ser1ices&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&$. $%&*&2 #FU&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&& $% $%&*&- #F3&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&& $2 $%&*&4 #F,(5&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&& *0 $%&*&6 #F,(c&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&& *3 $%&3 SMS Proce)ures&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&& *. $%&3&$ O1er1ie"&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&& *. $%&3&* Mo ile Originate) SMS&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&*% $%&3&3 Mo ile Ter7inate) SMS&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&*2 $%&3&. SMS Alerting Proce)ures&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&*$%&. 8ocation Ser1ice Proce)ures&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&& *6 $%&.&$ O1er1ie"&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&& *6 $%&.&* 'eneral 8#S Architecture&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&30 $%&.&3 'eneral ,et"or9 8ocation Proce)ures&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&3$ $%&% I, Ser1ice Han)ling Proce)ures&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&3$%&%&$ Pre/0ai) Ser1ice Han)ling Proce)ures&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&3$%&%&* Mo ile Originate) SMS Han)ling Proce)ure&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&.3 $%&%&3 Mo ilit5 Manage7ent E1ent ,oti!ication Han)ling Proce)ure&&&&&&&&&&&&&&&&&&&&&&&&&&&&.. $%&2 Mo ilit5 Manage7ent&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&& .% $%&2&$ O1er1ie"&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&& .% $%&2&* 8ocation Manage7ent&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&& .% $&3&$ 3asic Proce)ures&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&& .2 $&3&* Ma:or Proce)ures&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&& %0 $&3&3 Han)o1er&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&& %2 $&3&. Intra/UMTS Han)o1er&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&& %4 $&3&% Inter/S5ste7 Han)o1er&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&& 22 $%&2&3 (oa7ing (estriction&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&& -. $%&- Securit5 Manage7ent&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&& -.

Hua"ei Technologies Pro0rietar5 i

Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter

Ta le o! #ontents

$%&-&$ Authentication&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&& -. $%&-&* 'SM Authentication&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&& -. $%&-&3 UMTS Authentication&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&-4 $%&-&. +ual/Mo)e MS Authentication&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&4$ $%&-&% Encr50tion&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&& 43 $%&-&2 Integrit5 Protection&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&& 4. $%&-&- TMSI (eallocation&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&4%

Hua"ei Technologies Pro0rietar5 ii

Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter

#ha0ter $% Signaling Proce)ures

Chapter 15 Signaling Procedures


15.1 MGW Registration Procedure
15.1.1 MGW Registration Procedure
When a 7e)ia gate"a5 ;M'W< is in ser1ice !or the !irst ti7e or restarte)= it 7ust e registere) "ith the corres0on)ing MS# Ser1er& A!ter success!ul registration= the M'W can re0ort its currentl5 a1aila le 0h5sical ter7inals i77e)iatel5= or the MS# Ser1er can o tain the in!or7ation o! the a1aila le 0h5sical ter7inals on the M'W using the au)it co77an)& See Figure $&$ !or the M'W registration 0roce)ure&
M'W Ser1ice#hange MS# Ser1er

Ser1ice#hange>(e0l5

Figure 1.1 M'W registration 0roce)ure $< When an M'W is in ser1ice !or the !irst ti7e or restarte)= it sen)s the Ser1ice#hange 7essage to the MS# Ser1er to "hich it elongs to re?uest registration& This 7essage contains such )escri0tors as Metho) ;@(estartA= !or eBa70le<= Ser1ice#hangeA))ress ;a))ress 7essage< an) (eason& This 7essage corres0on)s to the (OOT ter7inal ;that is= the "hole M'W<& *< The MS# Ser1er authenticates the M'W an) returns the Ser1ice#hange>(e0l5 7essage ;containing Ser1ice#hangeA))ress< to acce0t registration& I! the MS# Ser1er re:ects the registration )ue to inconsistent 1ersion or M'W out o! control= it sen)s the 7essage Ser1ice#hange>(e0l5 ;containing (eason< to the M'W&

15.1.2 MGW eregistration Procedure


3e!ore an M'W eBits= it 7ust e )eregistere) "ith the corres0on)ing MS# Ser1er& A!ter success!ul )eregistration= the M'W is out o! ser1ice& To acti1ate it= register it again& The M'W )eregistration 0roce)ure uses the sa7e 7essages as M'W registration 0roce)ure= ut uses )i!!erent )escri0tors= as sho"n in $%&$&$ IFigure $&$&

Hua"ei Technologies Pro0rietar5 $

Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter

#ha0ter $% Signaling Proce)ures

$<

When an M'W eBits= it sen)s the Ser1ice#hange 7essage to the MS# Ser1er to "hich it elongs to re?uest )eregistration& This 7essage contains such )escri0tors as Metho) ;@Force)A= !or eBa70le< an) (eason ;!or eBa70le= 60% ATer7ination ta9en out o! ser1iceA<& This 7essage corres0on)s to the (OOT ter7inal ;that is= the "hole M'W<&

*<

The MS# Ser1er returns the Ser1ice#hange>(e0l5 7essage to acce0t )eregistration&

15.2 Call Procedures


15.2.1 Mobile Subscriber Calling Mobile Subscriber
!. Call Model
The !ollo"ing 0roce)ures are Figure $&$ !or the net"or9ing& ase) on calls et"een t"o local o!!ice users& See

MSC SERVER /VLR

MGW

RNC-O

RNC-T

UE-O

UE-T

Figure 1.1 #all 7o)el ;7o ile su scri er calling 7o ile su scri er<

!.

iagra" of Call Procedures


The 0roce)ures !or a 7o ile su scri er calling another 7o ile su scri er are sho"n in Figure $&$&

#ote$ MS# Ser1er an) C8( are co7 ine)= so inter!ace 3 is an internal one an) the 7essages at inter!ace 3 are internal 7essages&

Hua"ei Technologies Pro0rietar5 *

Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter

#ha0ter $% Signaling Proce)ures

UE-O

RNS-O CM_Service_Req(Initial UE)

MSC Server/VLR

MGW

HLR

M !_SEN"_ UTHENTIC TION_IN#O M !_SEN"_ UTHENTIC TION_IN#O_ C$ Security management r!ce"ure (! ti!na#) AUTHENTICATION REQUEST AUTHENTICATION RESPONSE SECURITY MODE COMMAND(OPTION) SECURITY MODE COMPLETE(OPTION) COMMON I" CM_SERVERICE_ CCE!T SETU! C LL !ROCEE"ING !RE! %E RER !RE! %E RER U$er #ane %earer e$ta%#i$&ment r!ce"ure at ca##er $i"e R % SSIGNMENT RE&UEST R "IO %E RER SETU! R "IO %E RER SETU! COM!LETE %E RER EST %LISHMENT R % SSIGNMENT RES!ONSE

Hua"ei Technologies Pro0rietar5 3

Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter

#ha0ter $% Signaling Proce)ures

HLR

MGW

MSC Server/VLR

RNS-T

UE-T

M !_SEN"_ROUTING_IN#ORM TION !r'ce()re '* +ettin+ r'a,in+ n),-er M !_!ROVI"E_RO MING_NUM%ER M !_!ROVI"E_RO MING_NUM%ER_ C$

VLR

M !_SEN"_ROUTING_IN#ORM TION_ C$ ! GIN G ! GING RES!ONSE AUTHENTICATION REQUEST Security management r!ce"ure (! ti!na#) AUTHENTICATION RESPONSE SECURITY MODE COMMAND SECURITY MODE COMPLETE COMMON I" SETU! C LL CON#IRME" !RE! %E RER !RE! %E RER U$er #ane %earer e$ta%#i$&ment r!ce"ure at ca##ee $i"e R % SSIGNMENT RE&UEST R "IO %E RER SETU! R "IO %E RER SETU! COM!LETE %E RER EST %LISHMENT

R % SSIGNMENT RES!ONSE

Hua"ei Technologies Pro0rietar5 .

Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter

#ha0ter $% Signaling Proce)ures

UE-O

RNS-O LERTING

VMSC/GMSC

MGW

RNC-T

UE-T

SEN"TONE SEN"TONE CONNECT STO! TONE STO! TONE CONNECT CONNECT C$ ")rin+ t.e call

"ISCONNECT RELE SE RELE SE COM!LETE IU_RELE SE_COMM N" Caller relea/e 0r'ce()re %E RER RELE SE IU_RELE SE_COM!LETE

"ISCONNECT

RELE SE_TERM RELE SE_TERM

RELE SE RELE SE COM!LETE IU_RELE SE_COMM N" Callee relea/e 0r'ce()re %E RER RELE SE IU_RELE SE_COM!LETE RELE SE_TERM RELE SE_TERM

Figure 1.1 Proce)ures !or 7o ile su scri er calling 7o ile su scri er

!!. Calling Procedures %&arl' (ssign"ent Procedures)


$< UE sen)s the #M SE(CI#E (EDUEST 7essage to the net"or9& This 7essage contains such 0ara7eters as 7o ile i)enti!ications inclu)ing te70orar5 7o ile su scri er i)enti!ier ;TMSI<= international 7o ile su scri er i)entit5 ;IMSI<= an)

Hua"ei Technologies Pro0rietar5 %

Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter

#ha0ter $% Signaling Proce)ures

international 7o ile e?ui07ent i)entit5 ;IMEI<= class7ar9*= ci0hering 9e5 se?uence nu7 er ;#ES,<= an) connection 7anage7ent ;#M< ser1ice t50e ;inclu)ing 7o ile originating call setu0= e7ergenc5 call setu0= short 7essage ser1ice= su00le7entar5 ser1ices= an) location ser1ice<& *< The net"or9 7a5 initiate authentication an) ci0hering 0roce)ures= )uring "hich initiation o! the 0roce)ure o! getting authentication set !ro7 H8(FAU# 7a5 e re?uire)& I! no securit5 7anage7ent 0roce)ures ;that is= authentication= ci0hering= TMSI reallocation= or getting i)enti!ier< ha00en= ignore this ste0 an) s9i0 to ste0 3& 3< U0on recei0t o! the ser1ice acce0tance 7essage or ci0hering co70lete 7essage= UE sen)s the SETUP 7essage to the net"or9& A!ter recei1ing the SETUP 7essage= the core net"or9 ;#,< returns the #A88 P(O#EE+I,' 7essage to the calling 0art5& .< The calling si)e starts the esta lish7ent o! user 0lane earerG MS# Ser1er sen)s the Pre0are 3earer (e? 7essage to M'W& M'W allocates ATM resources )5na7icall5= an) returns the Pre0are 3earer (s0 7essage containing Ter7inationI) ;T$<& Then MS# Ser1er in1o9es the (A3 assign7ent 0roce)ure to (,S/O& (,S/O esta lishes the ATM 0roce)ure is 0arallel to that o! ste0 %& %< MS# Ser1er ?ueries the route in!or7ation to H8(& H8( o tains the roa7ing nu7 er !ro7 C8(& MS# Ser1er triggers C8( to initiate the 0aging 0roce)ure a!ter getting the inco7ing call )ata !ro7 C8(& earer resources at the access si)e together "ith M'W through the 3EA(E( ESTA38ISHME,T 0roce)ure& This

#ote$

The )i!!erence et"een earl5 assign7ent an) late assign7ent is the ti7e "hen a Tra!!ic #hannel ;T#H< is allocate)& For the calle) 0art5= earl5 assign7ent re!ers to assign7ent 0er!or7e) e!ore o!!/hoo9 "hile late assign7ent re!ers to assign7ent 0er!or7e) a!ter o!!/hoo9& For the calling 0art5= assign7ent is 0er!or7e) 0er!or7e) a!ter A8E(TI,' 7essage in a late assign7ent 0roce)ure& e!ore A8E(TI,' 7essage in an earl5 assign7ent 0roce)ure "hile assign7ent is

Earl5 assign7ent shortens call connection )ela5 an) increases call co70letion rate& 8ate assign7ent a1oi)s T#H resources !ro7 eing occu0ie) )uring alerting an) thus i70ro1es the utiliHation ratio o! T#H resources&

!!!. Called Procedures %&arl' (ssign"ent Procedures)


$< The net"or9 recei1es the PA'I,' (ESPO,SE 7essage !ro7 the calle) 0art5& I! authentication is not 0er!or7e)= s9i0 to Ste0 3&

Hua"ei Technologies Pro0rietar5 2

Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter

#ha0ter $% Signaling Proce)ures

*<

#, initiates authentication= ci0hering= an) TMSI reallocation 0roce)ures )uring "hich initiation o! getting authentication set in!or7ation !ro7 H8(FAU# is re?uire)&

3< .<

#, sen)s the SETUP 7essage to the calle) UE& U0on recei0t o! the #A88 #O,FI(ME+ 7essage !ro7 the calle) UE= #, initiates the 0roce)ure o! esta lishing user 0lane earer& This 0roce)ure is si7ilar to the 0roce)ure o! esta lishing ATM earer at the calling si)e&

%<

The trans0ort control 0lane an) the user 0lane are esta lishe) )uring the assign7ent 0roce)ure= that is= D&AA8* esta lish7ent an) IUUP initialiHation& A!ter (A, recei1es the ESTA38ISH #O,FI(M 7essage 0ertaining to the user 0lane= it originates the (A3 ASSI',ME,T (ESPO,SE 7essage&

2<

Then #, a"aits alerting !ro7 the calle) UE an) sen)s the A8E(TI,' 7essage to the calling 0art5 an) the SE,+ TO,E 7essage to M'W !or 0la5ing the ring ac9 tone&

-< 4<

#, a"aits o!!/hoo9 at the calle) UE= that is= the #O,,E#T 7essage& #, sen)s the #O,,E#T 7essage to the calling 0art5& A!ter recei1ing the #O,,E#T 7essage= the calling 0art5 sen)s the STOP TO,E 7essage to M'W !or sto00ing the ring the calle) 0art5& ac9 tone an) the #O,,E#T A#E 7essage to the net"or9& The net"or9 !or"ar)s the #O,,E#T A#E 7essage to

6<

The calling an) calle) UEs enter the con1ersation status&

!*.
$<

isconnection Procedures
+uring the con1ersation= i! the calling 0art5 releases the call= the calling UE sen)s the +IS#O,,E#T 7essage to the net"or9 an) the net"or9 noti!ies the calle) 0art5 o! the )isconnection 7essage&

*<

The calle) 0art5 sen)s the (E8EASE 7essage to the net"or9 to release the resources on the current transaction& The net"or9 sen)s the (E8EASE 7essage to the calling 0art5 to release the resources on the current transaction& U0on recei0t o! the (E8EASE 7essage= the calling 0art5 res0on)s "ith the (E8EASE #OMP8ETE 7essage&

3< .<

The net"or9 acti1el5 sen)s the IU (E8EASE #OMMA,+ 7essage to start the release o! the signaling 0lane& The net"or9 sen)s to M'W the (E8EASE TE(MI,ATIO, 7essage to release the user 0lane resources&

15.2.2 Mobile Subscriber Calling PST# Subscriber


!. Call Model
The !ollo"ing 0roce)ures are ase) on calls originate) 5 a 7o ile su scri er to a PST, su scri er& See Figure $&$ !or the net"or9ing&

Hua"ei Technologies Pro0rietar5 -

Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter

#ha0ter $% Signaling Proce)ures

MSC SERVER /VLR

RNC-O

MGW

!STN

UE-O

!STN USER

Figure 1.1 #all 7o)el

!!.

iagra" of Call Procedures

The 0roce)ures !or a 7o ile su scri er calling a PST, su scri er are sho"n in Figure $&$&

Hua"ei Technologies Pro0rietar5 4

Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter

#ha0ter $% Signaling Proce)ures

UE-O

RNS-O CM_Service_Req(Initial UE)

MSC Server/VLR

MGW

HLR

M !_SEN"_ UTHENTIC TION_IN#O M !_SEN"_ UTHENTIC TION_IN#O_ C$ Security management r!ce"ure (! ti!na#) AUTHENTICATION REQUEST AUTHENTICATION RESPONSE SECURITY MODE COMMAND(OPTION) SECURITY MODE COMPLETE(OPTION) COMMON I" CM_SERVERICE_ CCE!T SETU! C LL !ROCEE"ING !RE! %E RER !RE! %E RER U$er #ane %earer e$ta%#i$&ment r!ce"ure at ca##er $i"e R % SSIGNMENT RE&UEST R "IO %E RER SETU! R "IO %E RER SETU! COM!LETE %E RER EST %LISHMENT R % SSIGNMENT RES!ONSE RESERVE CIRCUIT RESERVE CIRCUIT

Hua"ei Technologies Pro0rietar5 6

Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter

#ha0ter $% Signaling Proce)ures

UE-O

RNS-O

(G)MSC Server
I I CM

MGW

!STN

LERTING SEN" TONE SEN" TONE NC STO! TONE STO! TONE CONNECT CONNECT C$

"ISCONNECT RELE SE RELE SE COM!LETE RLG IU_RELE SE_COMM N" Relea/e 0r'ce()re %E RER RELE SE IU_RELE SE_COM!LETE RELE SE_TERM RELE SE_TERM RELE SE_TERM

CL#

RELE SE_TERM

Figure 1.1 Proce)ures !or 7o ile su scri er calling PST, su scri er

!!!. Call Procedures


$< UE sen)s the #M SE(CI#E (EDUEST 7essage to the net"or9& The #M SE(CI#E (EDUEST 7essage contains such 0ara7eters as TMSI= IMSI= IMEI= class7ar9*= #ES,= an) #M ser1ice t50e ;inclu)ing 7o ile originating call setu0= e7ergenc5 call setu0= short 7essage ser1ice= su00le7entar5 ser1ices= an) location ser1ice<& *< The net"or9 7a5 initiate authentication an) ci0hering 0roce)ures= )uring "hich initiation o! the 0roce)ure o! getting authentication set !ro7 +,R-(.C 7a5 e re?uire)& I! there is no securit5 7anage7ent 0roce)ure ;that is= authentication= ci0hering= TMSI reallocation= an) getting i)enti!ier<= ignore this ste0 an) s9i0 to ste0 3& 3< U0on recei0t o! the ser1ice acce0tance 7essage or ci0hering co70lete 7essage= UE sen)s the SETUP 7essage to the net"or9& A!ter recei1ing the SETUP 7essage= #, returns the #A88 P(O#EE+I,' 7essage to the calling

Hua"ei Technologies Pro0rietar5 $0

Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter

#ha0ter $% Signaling Proce)ures

0art5& .< The calling si)e starts the esta lish7ent o! user 0lane earerG MS# Ser1er sen)s the Pre0are 3earer (e? 7essage to M'W& M'W allocates ATM resources )5na7icall5= an) returns the Prepare /earer Rsp "essage containing Ter"ination!d %T1)& Then MS# Ser1er in1o9es the (A3 assign7ent 0roce)ure to (,S/O& (,S/O esta lishes the ATM 0roce)ure& %< 2< GMSC Ser0er sends an initial address "essage 1ith infor"ation %!(!) to PST#& A!ter recei1ing the IAI= PST, returns an a))ress co70lete 7essage ;A#M<& A!ter recei1ing the A#M= GMSC Ser0er sends the S&# MGW for pla'ing the 3ring bac4 tone5. -< A!ter the calle) 0art5 0ic9s u0 the 0hone= the calle) UE sen)s an ans1er signal6 charge ;A,#< to the net"or9& 'MS# Ser1er sen)s the STOP TO,E 7essage to M'W !or sto00ing the ring 4< ac9 tone& (fter the calling part' pic4s up the phone6 both parties tal4 1ith each other. A!ter the con1ersation= i! the calling 0art5 hoo9s on !irst= the calling UE sen)s a +IS#O,,E#T 7essage to 'MS# Ser1er& Then 'MS# Ser1er sen)s a clear for1ard signal %C,F) "essage to noti!5 PST, to clear the connection& A!ter clearing the connection= PST, returns a release guard signal %R,G) to 'MS# Ser1er& 6< 'MS# Ser1er sen)s a (E8EASE 7essage to the calling 0art5 to release the transaction resources& A (E8EASE #OMP8ETE 7essage is the res0onse to the (E8EASE 7essage& $0< The net"or9 sen)s to M'W the (E8EASE TE(MI,ATIO, 7essage to release the user 0lane resources& T2#& "essage to earer resources at the access si)e together "ith M'W through the 3EA(E( ESTA38ISHME,T

Hua"ei Technologies Pro0rietar5 $$

Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter

#ha0ter $% Signaling Proce)ures

15.2.7 PST# Subscriber Calling Mobile Subscriber


UE(caller) RNS VMSC Server MGW HLR GMSC Server I I(TU!) M !_SEN"_ROUTING_IN#ORM TION M !_!ROVI"E_RO MING_NUM%ER M !_!ROVI"E_RO MING_NUM%ER_ C$ M !_SEN"_ROUTING_IN#ORM TION C$ I I(TU!) !STN

! GING ! GE RES!ONSE AUTHENTICATION REQUEST AUTHENTICATION RESPONSE SECURITY MODE COMMAND SECURITY MODE COMPLETE

TMSI REALLOCATION COMMAND TMSI REALLOCATION COMPLETE RESERVE CIRCUIT RESERVE CIRCUIT SETU! C LL CON#IRME" !RE! RE %E RER !RE! RE %E RER R "IO %E RER SETU! R % SSIGNMENT RE&UEST

R "IO %E RER SETU! COM!LETE

%E R EST %LISHMENT
R % SSIGNMENT RES!ONSE LERTING CONNECT CONNECT C$NOWLE"GE C LL "ISCONNECT RELE SE RELE SE COM!LETE IU RELE SE COMM N"
%E RER RELE SE

CM NC CONNECT C$NOWLE"GE

CL# RLG

IU RELE SE COM!LETE

RELE SE_TERM RELE SE_TERM RELE SE_TERM RELE SE_TERM

Figure 1.1 Proce)ures !or PST, su scri er calling 7o ile su scri er $< *< PST, sen)s an IAI to 'MS# Ser1er& 'MS# Ser1er gets routing in!or7ation !ro7 H8(& A!ter getting the 7o ile station

Hua"ei Technologies Pro0rietar5 $*

Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter

#ha0ter $% Signaling Proce)ures

roa7ing nu7 er ;MS(,< o! the calle) 0art5= 'MS# Ser1er sen)s the IAI to MS# Ser1er& MS# Ser1er then noti!ies C8( o! the inco7ing call& 3< C8( !etches )ata a out the inco7ing call an) initiates a 0aging 0roce)ure& A!ter the net"or9 recei1es a 0aging res0onse !ro7 the calle) UE= s9i0 to Ste0 % i! authentication= ci0hering= or TMSI reallocation 0roce)ures )o not ha00en& .< The net"or9 initiates authentication= ci0hering= an) TMSI reallocation 0roce)ures= )uring "hich initiation o! getting authentication set in!or7ation !ro7 H8(FAU# 7a5 e re?uire)& %< 2< The net"or9 sen)s a SETUP 7essage to the calle) UE& U0on recei0t o! the #A88 #O,FI(ME+ 7essage !ro7 the calle) UE= MS# Ser1er initiates a 0roce)ure o! esta lishing user 0lane earerG MS# Ser1er sen)s the Pre0are 3earer (ED 7essage to M'W& M'W allocates ATM resources )5na7icall5= an) returns the Pre0are 3earer (s0 7essage containing Ter7inationI)& Then MS# Ser1er in1o9es the (A3 assign7ent 0roce)ure to (,S& (,S esta lishes the ATM earer resources at the access si)e together "ith M'W through the 3EA(E( ESTA38ISHME,T 0roce)ure& -< The trans0ort control 0lane an) the user 0lane are esta lishe) )uring the assign7ent 0roce)ure& A!ter (A, recei1es an ESTA38ISH #O,FI(M 7essage regar)ing the user 0lane= it sen)s a (A3 assign7ent res0onse 7essage& 4< At the sa7e ti7e= MS# Ser1er esta lishes the calling user 0lane earer& The calle) UE hoo9s o!!& MS# Ser1er recei1es an A8E(TI,' 7essage an) then sen)s an A#M to the calling 0art5& 6< The net"or9 a"aits o!!/hoo9 o! the calle) 0art5= that is= the #O,,E#T 7essage= an) sen)s a #O,,E#T 7essage to the calling 0art5& The calling 0art5 returns a #O,,E#T A#E& The net"or9 sen)s a #O,,E#T A#E to the calle) 0art5& Then the calling an) calle) 0arties enter the con1ersation status& $0< +uring the con1ersation= i! the calle) 0art5 hoo9s on= the calle) UE sen)s a +IS#O,,E#T 7essage to the net"or9 an) the net"or9 noti!ies the calling 0art5 o! the )isconnection 7essage& A!ter releasing the call= the calling UE sen)s a (8' to the net"or9& The net"or9 sen)s a (E8EASE 7essage to the calle) 0art5 !or the 0ur0ose o! releasing the transaction resources& The net"or9 acti1el5 sen)s an IU (E8EASE #OMMA,+ to release the signaling 0lane resources an) a (E8EASE TE(MI,ATIO, 7essage to M'W to release the user 0lane resources&

15.2.8 Pre9paging
Pre/0aging is a net"or9 !unction& 3e!ore 'MS# Ser1er originates to CMS# Ser1er a call setu0 re?uest= CMS# Ser1er initiates a 0aging 0roce)ure to the calle) UE "hen H8( as9s CMS# Ser1er !or the roa7ing nu7 er& Then CMS# Ser1er sen)s the roa7ing nu7 er to H8(& In this "a5= a ra)io connection et"een CMS# Ser1er an) UE has een esta lishe) "hen CMS# Ser1er recei1es the call setu0 re?uest !ro7

Hua"ei Technologies Pro0rietar5 $3

Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter

#ha0ter $% Signaling Proce)ures

'MS# Ser1er& A 0re/0aging 0roce)ure initiate) )uring getting the roa7ing nu7 er 7a9es it 0ossi le to 9no" "hether or not the calle) 0art5 can e 0age) e!ore a roa7ing nu7 er is allocate)& These actions 7a9e contri utions to sa1ing net"or9 resources as the5 a1oi) such a 0ossi le case that the calle) 0art5 cannot e connecte) "hen 'MS# Ser1er accesses CMS# Ser1er accor)ing to the roa7ing nu7 er& In a))ition= )ata restoration ha00ens ;i! nee)e)< e!ore 0re/0aging= !or the 0ur0ose o! increasing the e!!icienc5 o! inco7ing calls& The 0re/0aging 0roce)ure is sho"n in Figure $&$&
GMSC Server HLR VMSC Server

SRI(!re0a+e) ! N(!re0a+e) !a+in+ 0a+in+ ! N_ C$ SRI_ C$

Figure 1.1 Pre/0aging 0roce)ure $< It is assu7e) that 'MS# Ser1er su00orts 0re/0aging& 'MS# Ser1er originates a sen)>routing>in!or7ation ;S(I< 7essage to H8(& The S(I 7essage contains a Pre0age !lag !iel)& A!ter recei1ing the S(I 7essage= H8( !in)s that the Pre0age !lag is carrie) in the 7essage& Then H8( 0er!or7s it set on the Pre0age !lag in the 0ro1i)e>roa7ing>nu7 er ;P(,< 7essage accor)ing to the :u)g7ent "hether or not the entit5 itsel! su00orts 0re/0aging& *< CMS# Ser1er recei1es the P(, 7essage& I! the 7essage contains the Pre0age !lag= CMS# Ser1er initiates a 0aging 0roce)ure& U0on recei0t o! the 0aging res0onse !ro7 UE= CMS# Ser1er returns a P(, res0onse 7essage to H8(&

15.2.5 Call For1arding Ser0ices


#all !or"ar)ing ser1ices 7a9e it 0ossi le to !or"ar) an inco7ing call to another su scri er& A!ter su scri0tion= su scri ers ha1e to acti1ate the7 e!ore using the7& #all !or"ar)ing ser1ices are )i1i)e) into the !ollo"ing classesG #FUG #all !or"ar)ing uncon)itional #F3G #all !or"ar)ing on 7o ile su scri er us5 #F,(5G #all !or"ar)ing on no re0l5 #F,(cG #all !or"ar)ing on 7o ile su scri er not reacha le

Hua"ei Technologies Pro0rietar5 $.

Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter

#ha0ter $% Signaling Proce)ures

#ote$ The !ollo"ing call !or"ar)ing 0roce)ures are acti1ate) e!ore M'W 7a9es the selection& A!ter the calls are !or"ar)e) to )i!!erent o!!ices accor)ing to the actual situations= the user 0lane earer is esta lishe)& (e!er to sections 2&*&* an) 2&*&. !or the 0roce)ures !or esta lishing user 0lane earer !or )etails&

15.2.: CF.
A!ter a su scri er acti1ates #FU= the corres0on)ing in!or7ation is registere) in H8(& The !or"ar)ing 0roce)ure is as !ollo"sG 'MS# Ser1er sen)s an I,FO (EDUEST to H8( to as9 !or routing in!or7ation& I! H8( !in)s that the su scri er has registere) the #FU ser1ice= it sen)s to 'MS# Ser1er an I,FO A#E 7essage containing the !or"ar)e)/to nu7 er& 'MS# Ser1er connects the call accor)ing to the !or"ar)e)/to nu7 er& I! there is an in!or7ation ele7ent @noti!ication to calling 0art5I in the I,FO A#E 7essage= a ,oti!ication 7essage "ill e sent to the calling 0art5& The call can e !or"ar)e) to a PST, su scri er or a 7o ile su scri er&

!. For1arded to a PST# Subscriber


MSa/TEa Set-)0 In*' req)e/t In*' ac1 OR23N OR234 N'ti*icati'n OR534 Set-)0 Set-)0 GMSC Server HLRMSC Server !STN

O($G For"ar)ing re?ueste) O(*G ,oti!ication to calling su scri er re?uire)

Figure 1.1 #FU to PST, As sho"n in Figure $&$= the relate) 7essage "ill !or"ar)ing is not re?uire)& I! the call is set to e !or"ar)e) to a PST, su scri er= 'MS# Ser1er "ill !or"ar) the e route) to MS# Ser1er i!

Hua"ei Technologies Pro0rietar5 $%

Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter

#ha0ter $% Signaling Proce)ures

concerne) 7essage to PST,&

!!. For1arded to a Mobile Subscriber


MSa/TEa Set-)0 In*' req)e/t In*' ac1 OR23N OR234 Set-)0 In*'r,ati'n req)e/t In*'r,ati'n ac1n'6le(+e Set-)0 N'ti*icati'n OR534 GMSC Server HLRMSC Server HLRc MSC Server c

Figure 1.1 #FU to a 7o ile su scri er As sho"n in Figure $&$= i! the call is set to e !or"ar)e) to a 7o ile su scri er=

'MS# Ser1er sen)s an I,FO(MATIO, (EDUEST 7essage to H8(c "here the !or"ar)e)/to 7o ile su scri er is resi)ent= !or the 0ur0ose o! as9ing !or routing in!or7ation& H8(c returns the routing in!or7ation to 'MS# Ser1er through an I,FO(MATIO, A#E,OW8E+'E 7essage& A!ter recei1ing the routing in!or7ation= 'MS# Ser1er sen)s a SETUP 7essage to MS# Ser1er c that "ill e res0onsi le !or continuing to 0age the calle) 7o ile su scri er&

15.2.; CF/
#F3 ha00ens "hen the calle) 0art5 is us5 or re:ects the inco7ing call& When #F3 is acti1ate)= the !or"ar)ing 0art5 can still 7a9e calls&

!. For1arded to a PST# Subscriber


It is )i1i)e) into ,et"or9 +eter7ine) User 3us5 ;,+U3< an) User +eter7ine) User 3us5 ;U+U3<&

For"ar)e) to a PST, su scri erG ,+U3

Hua"ei Technologies Pro0rietar5 $2

Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter
GMSC Server MSC Server -

#ha0ter $% Signaling Proce)ures

MSa/TEa Set-)0

HLR-

VLR-

MS-

LEc

In*'-req In*'-ac1 Set-)0 In*' req)e/t !a+e MS %)/7 S)-/cri-er OR23N I,0'//i-le Call C',0leti'n

Relea/e Relea/e

C'nnect t' *'ll'6in+ a((re// OR234 OR534 N'ti*icati'n N'ti*icati'n OR834 Set-)0

,+U3G ,et"or9 +eter7ine) User 3us5 O($G #all to e !or"ar)e) O(*G ,oti!ication to !or"ar)ing su scri er re?uire) O(3G ,oti!ication to calling su scri er re?uire)

Figure 1.1 #F3 to PST, ;,+U3< The 0roce)ure is as !ollo"sG $< *< A!ter access= MSa originates a SETUP 7essage to 'MS# Ser1er to start the call setu0 0roce)ure& 'MS# Ser1er initiates the 0roce)ure o! getting routing in!or7ation to the MS ;calle) 0art5< resi)ent H8( "ith an I,FO/(ED 7essage& U0on recei0t o! the routing in!or7ation= H8( returns an I,FO/A#E 7essage& 3< .< Accor)ing to the routing in!or7ation returne) 5 H8( = 'MS# Ser1er sen)s a SET/UP 7essage to MS resi)ent CMS# Ser1er= that is= MS# Ser1er & A!ter recei1ing the SET/UP 7essage= MS# Ser1er a"aits a res0onse !ro7 C8( & C8( Ser1er & MS# Ser1er sen)s an I,FO (EDUEST 7essage to C8( to as9 !or user )ata 0ertaining to the inco7ing call= an) then sen)s a PA'E MS 7essage to MS# returns a res0onse to C8( = an) the res0onse carries a

@user errorI in!or7ation ele7ent in)icating that the !ailure cause is @su scri er us5I& +ata a out the su se?uent !or"ar)ing is containe) in the res0onse returne) 5 C8( to MS# Ser1er & %< 2< I! the #F3 ser1ice is not a1aila le= the call !ailsJ other"ise= s9i0 to Ste0 2& 3ase) on the !or"ar)ing )ata= MS# Ser1er to PST,& )irectl5 sen)s a SET/UP 7essage

Hua"ei Technologies Pro0rietar5 $-

Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter

#ha0ter $% Signaling Proce)ures

For"ar)e) to a PST, su scri erG U+U3


MSa/TEa Set-)0 In*'-req In*'-ac1 Set-)0 In*' req)e/t !a+e MS Set-)0 U"U% %)/7 S)-/cri-er Relea/e Relea/e OR23N I,0'//i-le Call C',0leti'n C'nnect t' *'ll'6in+ a((re// OR234 N'ti*icati'n OR534 Set-)0 GMSC Server HLRVLRMSC ServerMSLEc

Figure :.1 #F3 to PST, ;U+U3< The 0roce)ure is as !ollo"sG $< *< A!ter access= MSa originates a SETUP 7essage to 'MS# Ser1er to start the call setu0 0roce)ure& 'MS# Ser1er initiates the 0roce)ure o! getting routing in!or7ation to the MS ;calle) 0art5< resi)ent H8( "ith an I,FO/(ED 7essage& U0on recei0t o! the routing in!or7ation= H8( returns an I,FO/A#E 7essage& 3< .< Accor)ing to the routing in!or7ation returne) 5 H8( = 'MS# Ser1er sen)s a SET/UP 7essage to MS resi)ent CMS# Ser1er= that is= MS# Ser1er & A!ter recei1ing the SET/UP 7essage= MS# Ser1er sen)s an I,FO (EDUEST sen)s a 7essage to C8( to as9 !or user )ata= an) then a"aits a res0onse !ro7 C8( & C8( sen)s a PA'E MS 7essage to MS# Ser1er & MS# Ser1er SET/UP 7essage to MS ringing tone= the calle) 0art5 re:ects the call& MS# Ser1er to start the call setu0 0roce)ure& A!ter hearing the returns a res0onse to

C8( = an) the res0onse carries a @user errorI in!or7ation ele7ent in)icating that the !ailure cause is @su scri er us5I& +ata a out the su se?uent !or"ar)ing is containe) in the res0onse returne) 5 C8( to MS# Ser1er & %< 2< I! the #F3 ser1ice is not a1aila le= the call !ailsJ other"ise= s9i0 to Ste0 2& 3ase) on the !or"ar)ing )ata= MS# Ser1er to PST,& )irectl5 sen)s a SET/UP 7essage

Hua"ei Technologies Pro0rietar5 $4

Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter

#ha0ter $% Signaling Proce)ures

!!. For1arded to a Mobile Subscriber


MSa/TEa Set-)0 In*'-req In*'-ac1 Set-)0 In*' req)e/t !a+e MS %)/7 S)-/cri-er OR23N I,0'//i-le Call C',0leti'n GMSC Ser*er HLRVLRMSC Server MSHLRc MSC Server c

Relea/e Relea/e

OR234

C'nnect t' *'ll'6in+ a((re// In*'r,ati'n Req In*'r,ati'n c1 Set-)0 OR534 N'ti*icati'n OR834

N'ti*icati'n

O(*G ,oti!ication to !or"ar)ing su scri er re?uire)

Figure 1.1 #F3 to a 7o ile su scri er ;,+U3< The 0roce)ure o! call !or"ar)ing to a 7o ile su scri er is si7ilar to that o! call !or"ar)ing to a PST, su scri er on net"or9 )eter7ine) us5& The onl5 eBce0tion is as !ollo"sG MS# Ser1er has to !etch routing in!or7ation !ro7 the MSc resi)ent sen)s a SET/UP 7essage H8(c accor)ing to the !or"ar)e)/to nu7 er ;I,FO(MATIO, (ED= I,FO(MATIO, A#E<& A!ter getting the routing in!or7ation= MS# Ser1er to MS# Ser1er c to start the call setu0 0roce)ure&

Hua"ei Technologies Pro0rietar5 $6

Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter

#ha0ter $% Signaling Proce)ures

MSa/TEa Set-)0

GMSC Server

HLR-

VLR-

MSC Server -

MS-

HLRc

MSC Server c

In*'-req In*'-ac1 Set-)0 In*' req)e/t !a+e MS %)/7 S)-/cri-er OR23N Set-)0 U"U%

I,0'//i-le Call C',0leti'n

Relea/e

Relea/e

OR234

C'nnect t' *'ll'6in+ a((re// In*'r,ati'n Req In*'r,ati'n c1 Set-)0 OR534

N'ti*icati'n

Figure 1.2 #F3 to a 7o ile su scri er ;U+U3< The 0roce)ure o! call !or"ar)ing to a 7o ile su scri er on user )eter7ine) user us5 has the al7ost sa7e acti1ities as that o! call !or"ar)ing to a PST, su scri er on user )eter7ine) us5 eBce0t that the call connection continues at MS# Ser1er !or"ar)ing to a 7o ile su scri er on net"or9 )eter7ine) us5& in the !or7er 0roce)ure& The continuing 0rocess has een )escri e) in the 0roce)ure o! call

15.2.< CF#R'
A!ter a su scri er su scri es an) acti1ates this ser1ice= all calls relating to e !or"ar)e) i! no re0l5 is recei1e)& asic

ser1ices an) all calls relating to certain 0articular ser1ices 7a)e to the su scri er "ill

Hua"ei Technologies Pro0rietar5 *0

Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter

#ha0ter $% Signaling Proce)ures

!. For1arded to a PST# Subscriber


MSa/TEa Set-)0 In*'-req In*'-ac1 Set-)0 In*' req)e/t In*' ac1 Set-)0 Start ti,er In*'-req OR23N OR234 N'ti*icati'n Call c'n* Ti,e e90ire/ GMSC Server HLRVLRMSC Server MSLEc

I,0'//i-le Call C',0leti'n C'nnect t' *'ll'6in+ a((re// Set-)0 OR534 N'ti*icati'n OR834

Relea/e

Relea/e

Figure 1.1 #F,( to a PST, su scri er $< *< A!ter access= MSa originates a SETUP 7essage to 'MS# Ser1er to start the call setu0 0roce)ure& 'MS# Ser1er initiates the 0roce)ure o! getting routing in!or7ation to the MS ;calle) 0art5< resi)ent H8( "ith an I,FO/(ED 7essage& U0on recei0t o! the routing in!or7ation= H8( returns an I,FO/A#E 7essage& 3< Accor)ing to the routing in!or7ation returne) 5 H8( = 'MS# Ser1er sen)s a SET/UP 7essage to MS resi)ent CMS# Ser1er= that is= MS# Ser1er & MS# Ser1er o tains the user )ata o! the inco7ing call !ro7 C8( & A!ter C8( in1o9es a 0aging an) call res0on)s to the 0aging re?uest& At the sa7e ti7e= initiates the release noti!ies res0on)s "ith the I,FO A#E 7essage= MS# Ser1er setu0 0roce)ure to MS & MS MS# Ser1er .< starts a ti7er o! no res0onse )uration&

I! the calle) 0art5 )oes not ans"er the call= MS# Ser1er C8( o! the release "ith the I,FO (ED 7essage&

0roce)ure a!ter the ti7er ti7es out& At the sa7e ti7e= MS# Ser1er %<

C8( :u)ges "hether the call nee)s to e !or"ar)e)& I! there is no !or"ar)ing )ata= the call is release)& I! there is= C8( sen)s the !or"ar)ing )ata to MS# Ser1er & MS# Ser1er continues the call connection to the !or"ar)e)/to su scri er&

Hua"ei Technologies Pro0rietar5 *$

Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter

#ha0ter $% Signaling Proce)ures

!!. For1arded to a Mobile Subscriber


MSa/TEa Set-)0 In*'-req In*'-ac1 Set-)0 In*' req)e/t In*' ac1 In*' Req OR23N Set-)0 Call C'n* GMSC Server HLRVLRMSC Server MSHLRc MSC Server c

I,0'//i-le Call C',0leti'n

Relea/e Relea/e

OR234

C'nnect t' *'ll'6in+ a((re// In*'r,ati'n Req In*'r,ati'n c1 Set-)0 OR534 N'ti*icati'n OR834

N'ti*icati'n

Figure 1.1 #F,( to a 7o ile su scri er I! the call is set to e !or"ar)e) to a 7o ile su scri er= the 0roce)ure is as !ollo"sG $< *< A!ter access= MSa originates a SETUP 7essage to 'MS# Ser1er to start the call setu0 0roce)ure& 'MS# Ser1er initiates the 0roce)ure o! getting routing in!or7ation to the MS ;calle) 0art5< resi)ent H8( "ith an I,FO/(ED 7essage& U0on recei0t o! the routing in!or7ation= H8( returns an I,FO/A#E 7essage& 3< Accor)ing to the routing in!or7ation returne) 5 H8( = 'MS# Ser1er sen)s a SET/UP 7essage to MS resi)ent CMS# Ser1er= that is= MS# Ser1er & MS# Ser1er o tains the user )ata o! the inco7ing call !ro7 C8( & A!ter C8( in1o9es a 0aging an) call res0on)s to the 0aging re?uest& At the sa7e ti7e= initiates the release noti!ies res0on)s "ith the I,FO A#E 7essage= MS# Ser1er setu0 0roce)ure to MS & MS MS# Ser1er .< starts a ti7er o! no res0onse )uration&

I! the calle) 0art5 )oes not ans"er the call= MS# Ser1er C8( o! the release "ith the I,FO (ED 7essage&

0roce)ure a!ter the ti7er ti7es out& At the sa7e ti7e= MS# Ser1er %<

C8( :u)ges "hether the call nee)s to e !or"ar)e)& I! there is no !or"ar)ing )ata= the call is release)& I! there is= C8( sen)s the !or"ar)ing )ata to MS# Ser1er & MS# Ser1er continues the call connection to the !or"ar)e)/to su scri erG !irst= it o tains routing in!or7ation !ro7 the !or"ar)e)/to su scri er resi)ent H8(cJ neBt= it continues to connect the call&

Hua"ei Technologies Pro0rietar5 **

Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter

#ha0ter $% Signaling Proce)ures

15.2.= CF#Rc
#F,(c 7a5 e triggere) on one o! the !ollo"ing con)itionsG no 0aging res0onse= MS 0o"er/o!!= assign7ent !ailure& The !ollo"ing 0art )escri es the 0roce)ure o! call !or"ar)ing on no 0aging res0onse&

!. For1arded to a PST# Subscriber


MSa/TEa Set-)0 GMSC Server HLRVLRMSC Server MSLEc

In*'-req In*'-ac1

!r'vi(e R'a, N' R'a, N' Set-)0 In*' req)e/t !a+e MS !a+in+ -/ent S)-/cri-er OR23N N' re/0'n/e

I,0'//i-le Call C',0leti'n

Relea/e Relea/e

OR234 N'ti*icati'n

C'nnect t' *'ll'6in+ a((re// Set-)0 OR534

Figure 1.1 #F,(c to a PST, su scri er ;no 0aging res0onse< $< *< MSa sen)s a SET/UP 7essage to 'MS# Ser1er& 'MS# Ser1er re?uests H8( to 0ro1i)e routing in!or7ation& H8( as9s C8( !or roa7ing nu7 er& 'MS# Ser1er sen)s a SETUP 7essage to MS# Ser1er & MS# Ser1er re?uests C8( !or user )ata o! the inco7ing call= "hich triggers C8( to initiate a 0aging 0roce)ure& Ho"e1er= a 0aging res0onse is not recei1e)& MS# Ser1er returns a PA'E (ESPO,SE "ith the cause 1alue @a sent su scri erI& 3< At this ti7e= C8( 7a9es a :u)g7ent "hether or not !or"ar)ing ha00ens& I! call !or"ar)ing )oes not ha00en= the call en)s& Other"ise= C8( connect the call accor)ing to the !or"ar)ing )ata& continues to

Hua"ei Technologies Pro0rietar5 *3

Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter

#ha0ter $% Signaling Proce)ures

!!. For1arded to a Mobile Subscriber


MSa/TEa Set-)0 In*'-req In*'-ac1 Set-)0 In*' req)e/t !a+e MS !a+in+ !r'vi(e R'a, N' R'a, N' GMSC Server HLRVLRMSC Server MSHLRc MSC Server c

-/ent S)-/cri-er N' re/0'n/e Relea/e Relea/e OR23N I,0'//i-le Call C',0leti'n

OR234

C'nnect t' *'ll'6in+ a((re// In*' req In*' ac1 Set-)0 OR534

N'ti*icati'n

Figure 1.1 #F,(c to a 7o ile su scri er ;no 0aging res0onse< $< *< MSa sen)s a SET/UP 7essage to 'MS# Ser1er& 'MS# Ser1er re?uests H8( to 0ro1i)e routing in!or7ation& H8( as9s C8( !or roa7ing nu7 er& 'MS# Ser1er sen)s a SETUP 7essage to MS# Ser1er & MS# Ser1er re?uests C8( !or user )ata o! the inco7ing call= "hich triggers C8( to initiate a 0aging 0roce)ure& Ho"e1er= a 0aging res0onse is not recei1e)& MS# Ser1er returns a PA'E (ESPO,SE "ith the cause 1alue @a sent su scri erI& 3< At this ti7e= C8( 7a9es a :u)g7ent "hether or not !or"ar)ing ha00ens& I! call !or"ar)ing )oes not ha00en= the call en)s& Other"ise= C8( connect the call accor)ing to the !or"ar)ing )ata& continues to

15.7 SMS Procedures


15.7.1 20er0ie1
Short Message Ser1ice is one o! asic teleco77unication ser1ices& SMS ena les the 7o ile net"or9 s5ste7 to 0ro1i)e users "ith a co77unication 7etho) )i!!erent !ro7 1oice trans0ort& A short 7essage 7a9es use o! signaling channels o! the 7o ile net"or9 to trans!er teBt in!or7ation o! a li7ite) length& There are t"o t50es o! SMSs= na7el5 0eer/to/0eer SMS an) cell roa)cast SMS& A short 7essage is sent !ro7 an entit5 to a s0eci!ie) calle) 0art5 through Short Message Mo ile Originate) ;SMMO< an) Short Message Mo ile Ter7inate) ;SMMT< ser1ices& This is 0eer/to/0eer SMS& The length o! a single short 7essage is $.0 5tes a!ter co)ing& $20 English characters can e carrie)&

Hua"ei Technologies Pro0rietar5 *.

Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter

#ha0ter $% Signaling Proce)ures

#ell

roa)cast SMS is li9e thisG a short 7essage is sent through 3S# to all SMS

su scri ers in a s0eci!ie) area& A!ter co)ing= each 0age can acco77o)ate 4* 5tes an) the 7aBi7u7 nu7 er o! 0ages is $%& Onl5 0eer/to/0eer SMS is )escri e) in the !ollo"ing section&

15.7.2 Mobile 2riginated SMS


Mo ile originate) SMS 7eans that a short 7essage is originate) 5 MS an) is sent to the short 7essage center ;SM#<& The 0roce)ure o! 7o ile originate) SMS is sho"n in Figure $&$&

MS

VMSC

VLR

SMC

2:S.'rt Me//a+e(R!_ " T )


5:M !_SEN"_IN#O_#OR_MO_SMS

-&ShortMessage Error;(P>E((O(<

8:M !_SEN"_IN#O_#OR_MO_SMS_ C$

;:M !_MO_#ORW R"_SHORT_MESS GE(R!_" T )

=:S.'rt Me//a+e c1n'6le(+e,ent(R!_ C$)

<:M !_MO_#ORW R"_SHORT_MESS GE_ C$(R!_ C$)

Figure 1.1 Mo ile originate) short 7essage trans!er 0roce)ure $< *< A!ter a su scri er triggers to sen) a short 7essage= MS sen)s it to MS# through the A inter!ace ;'SM< or the Iu inter!ace ;UMTS<& U0on recei0t o! the SMS re?uest !ro7 the A inter!ace or the Iu inter!ace= MS# initiates to C8( a re?uest !or 7o ile originate) SMS user )ata )etection accor)ing to the MSIS+, o! the short 7essage originate) MS& 3< .< C8( chec9s the su scri0tion in!or7ation an) )etects "hether or not the local o!!ice su00orts SMS& The )etection results are sent to MS#& MS# anal5Hes the )etection results& I! the local o!!ice )oes not su00ort SMMO or o0erator )eter7ine) arring ;O+3< is acti1e= MS# )irectl5 returns a re:ection ;(P>E((O(< to MS& Other"ise= the SM# a))ress is got !ro7 the 7o ile originate) short 7essage= an) the short 7essage is !or"ar)e) to the 0ro0er SM#& %< A!ter recei1ing the re?uest !or !or"ar)ing 7o ile originate) short 7essage= SM# chec9s the 1ali)it5 o! the )ata& I! it is 1ali)= SM# returns a !or"ar)ing res0onse to MS#&

Hua"ei Technologies Pro0rietar5 *%

Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter

#ha0ter $% Signaling Proce)ures

2<

MS# recei1es the res0onse !ro7 SM# an) sen)s the outco7e to MS&

15.7.7 Mobile Ter"inated SMS


Mo ile ter7inate) SMS 7eans that SM# )eli1ers a short 7essage to the )estination su scri er& The 0roce)ure o! 7o ile ter7inate) SMS is sho"n in Figure $&$&
MS CMS# C8( H8( SM#

$&MAP>SE,+>(OUTI,'>I,FO>FO(>SM *&MAP>SE,+>(OUTI,'>I,FO>FO(>SM>A#E 3&MAP>MT>FO(WA(+>SHO(T>MESSA'E;(P>+ATA< .&MAP>SE,+>I,FO>FO(>MT>SMS 2&Page -&Page res0onse %&MAP>PA'EFMAP>SEA(#H>FO(>MO3I8E>SU3S#(I3E( 4&MAP>P(O#ESS>A##ESS>(EDUEST>A#EF MAP>SEA(#H>FO(>MO3I8E>SU3S#(I3E(>A#E 6&MAP>SE,+>I,FO>FO(>MT>SMS>A#E $0&Short Message;(P>+ATA<< $$&Short Message
Ac9no"le)ge7ent;(P>A#E<

$*&MAP>MT>FO(WA(+>SHO(T>MESSA'E>A#E;(P>A#E<<

Figure 1.1 Mo ile ter7inate) short 7essage trans!er 0roce)ure $< A!ter recei1ing the 7o ile originate) short 7essage= SM# gets the calle) nu7 er !ro7 it& SM# 7a9es use o! the calle) nu7 er an) initiates to H8( a 0roce)ure !or getting routing in!or7ation& *< U0on recei0t o! the routing in!or7ation re?uest= H8( retrie1es in!or7ation a out the su scri er in the )ata ase& A !ailure cause is returne) to SM# i! one o! the !ollo"ing con)itions is encountere)G the su scri er is a sent= roa7ing is not allo"e)= O+3 is acti1e= ter7inate) SMS is not su00orte)= the Mo ile station ,ot (eacha le Flag ;M,(F< is set= M#EF is set= or the su scri er has een re7o1e) !ro7 the roa7ing )estination MS#FC8(& Other"ise= H8( returns to SM# the CMS# nu7 er "here the calle) 0art5 is resi)ent& ;,oteG In the case that in!or7ation a out location o! the calle) MS# is 1ali) ut it set is 0er!or7e) on M,(F= a !ailure res0onse is returne) to SM# i! the su scri erKs short 7essage has a lo" 0riorit5J other"ise= the routing in!or7ation is returne)&< 3< SM# )eli1ers to CMS# a re?uest !or !or"ar)ing the short 7essage accor)ing to the recei1e) CMS# nu7 er& .< U0on recei0t o! the !or"ar)ing re?uest !ro7 SM#= CMS# initiates to C8( a re?uest !or )etecting SMMT user )ata& %< C8( ?ueries the eBisting su scri0tion )ata an) 7o ilit5 7anage7ent status& It 7a5

Hua"ei Technologies Pro0rietar5 *2

Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter

#ha0ter $% Signaling Proce)ures

e !oun) that SMMT is not su00orte)= MS is 0o"ere) o!!= M,(F is set= roa7ing is not allo"e)& I! the su scri er can not e 0age) )ue to one o! those reasons= MS# sen)s a !ailure res0onse to SM# gate"a5& Other"ise= initiation o! a 0aging 0roce)ure to MS starts in a s0eci!ic location area in case o! a 9no"n MS location area= or initiation o! a 0aging 0roce)ure starts in the "hole MS# ser1ing area in case o! an un9no"n MS location area& 2< MS# originates a PA'E 7essage to MS& -< MS returns a PA'E (ESPO,SE to MS#& 4< 6< $0< U0on recei0t o! the PA'E (ESPO,SE !ro7 MS= MS# initiates an access 0roce)ure i! it is re?uire)& A!ter the access is co70lete)= the short 7essage is )eli1ere) to MS through the A inter!ace ;*'< or the Iu inter!ace ;3'<& $$< $*< A!ter recei1ing the )eli1er5 outco7e relating to the short 7essage !ro7 MS= MS# noti!ies SM# o! the outco7e& I! se1eral short 7essages are to e )eli1ere) ;that is= (P/MMS !lag it is containe) in the short 7essage !or"ar)ing re?uest !ro7 SM#<= the connection is hel) an) the 0roce)ures 7entione) in 3< $0< $$< an) $*< are re0eate)& Other"ise= all connections "ill e release)&

15.7.8 SMS (lerting Procedures


!. Procedure of (lerting SMC due to Mobile Station Reachable
In the 7o ile ter7inate) SMS 0roce)ure= i! the short 7essage !ails to e )eli1ere) as there is no 0age res0onse= the su scri er )oes not re0l5= or )ue to other reasons= SM# initiates to H8( a @short 7essage status re0ortI so that H8( can get in!or7ation a out MSIS+, o! the calle) 0art5 an) a))ress o! originate) SM#& H8( stores the in!or7ation in the )ata recor) o! the calle) 0art5 ;na7e) Message Waiting +ata<& 3it set is 0er!or7e) on M,(F containe) in H8(& In a))ition= SM# te70oraril5 stores the !aile) short 7essage& When MS is !oun) in the net"or9 again= MS# initiates to H8( a noti!ication that it is rea)5 !or the short 7essage& The noti!ication cause is @7o ile station reacha leI& Figure $&$ sho"s the 0roce)ure o! alerting SM# )ue to 7o ile station reacha le&

Hua"ei Technologies Pro0rietar5 *-

Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter

#ha0ter $% Signaling Proce)ures

MS

MSC

VLR

HLR

SMC

2:CM Service Req)e/t/!a+e re/0'n/e/L'cati'n U0(atin+


5:M !_!ROCESS_ CCESS_RE&UEST / M !_U!" TE_LOC TION_ RE

8:M !_RE "4_#OR_SM (M'-ile !re/ent) / M !_U!" TE_LOC TION

;:M !_RE "4_#OR_SM_ C$ <:M !_ LERT_SERVICE_CENTRE

=:M !_ LERT_SERVICE_CENTRE_ C

Figure 1.1 Proce)ure o! alerting SM# )ue to 7o ile station reacha le $< *< MS accesses the net"or9 again as a call is 7a)e or ans"ere)= or its location is u0)ate)& MS# 7a5 initiate an access 0roce)ure to C8( i! a ser1ice is connecte) to MS or a 0age res0onse is originate) 5 MS& MS# 7a5 initiate a user )ata )etection 0roce)ure "hen MS location is u0)ate)& 3< C8( chec9s the user )ata& When it set 0er!or7e) on M,(F o! the su scri er is !oun)= the !lag it is cleare)& In a))ition= C8( initiates to H8( a noti!ication that it is rea)5 !or the short 7essage& The noti!ication cause is @7o ile station reacha leI& I! it is a location u0)ate 0roce)ure= C8( sen)s a location u0)ate re?uest to H8(& .< I! H8( recei1es the noti!ication that C8( is rea)5 !or the short 7essage= H8( 0er!or7s )etection on )5na7ic )ata o! the su scri er& I! it set 0er!or7e) on M,(F is !oun)= the it is cleare)= H8( originates an AlertS# noti!ication to SM#= an) H8( returns a noti!ication res0onse to C8(& I! "hat H8( recei1es is a location u0)ate re?uest an) it set 0er!or7e) on M,(F in the )5na7ic )ata o! the su scri er is !oun)= the !lag %< it is cleare)= H8( originates an AlertS# noti!ication to SM#= an) then the location u0)ate 0roce)ure goes on nor7all5& U0on recei0t o! the AlertS# noti!ication !ro7 H8(= SM# returns a res0onse& Then SM# 7a9es another atte70t to )eli1er the short 7essage in suita le situations&

!!. Procedure of (lerting SMC due to MS Me"or' Capacit' (0ailable


I! a 7o ile ter7inate) short 7essage !ails to e )eli1ere) as MS 7e7or5 ca0acit5 is una1aila le= SM# initiates to H8( a @short 7essage status re0ortI so as to noti!5 H8( o! in!or7ation a out MSIS+, o! the calle) 0art5 an) a))ress o! originate) SM#& H8( stores the in!or7ation in the )ata recor) o! the calle) 0art5 ;na7e) Message Waiting +ata<& 3it set is 0er!or7e) on M#EF containe) in H8(& In a))ition= SM# te70oraril5

Hua"ei Technologies Pro0rietar5 *4

Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter

#ha0ter $% Signaling Proce)ures

stores the !aile) short 7essage& I! MS 7e7or5 ca0acit5

eco7es a1aila le again

since a short 7essage is )elete)= MS sen)s a @7e7or5 ca0acit5 a1aila leI 7essage to MS#& U0on recei0t o! the 7essage= MS# originates to H8( a noti!ication that it is rea)5 !or the short 7essage& The noti!ication cause is @7e7or5 ca0acit5 a1aila leI& Figure $&$ sho"s the 0roce)ure o! alerting SM# )ue to 7e7or5 ca0acit5 a1aila le&

MS

MSC

HLR

SMC

2:SM ,e,'r7 ca0acit7 availa-le


5: M !_RE "4_#OR_SM

8: M !_RE "4_#OR_SM_ C$

;:SM ,e,'r7 ca0acit7 availa-le


<: M !_ LERT_SERVICE_CENTRE

=: M !_ LERT_SERVICE_CENTRE_ C$

Figure 1.1 Proce)ure o! alerting SM# )ue to MS 7e7or5 ca0acit5 a1aila le $< *< 3< MS sen)s a @7e7or5 ca0acit5 a1aila leI 7essage to MS# through the A inter!ace ;*'< or the Iu inter!ace ;3'<& MS# noti!ies H8( that it is rea)5 !or the short 7essage& The noti!ication cause is @7e7or5 ca0acit5 a1aila leI& A!ter recei1ing the 7essage= H8( chec9s the )5na7ic )ata o! the su scri er& I! it set 0er!or7e) on M#EF is !oun)= the it is cleare)& H8( sen)s an AlertS# noti!ication to MS# an) returns to C8( a noti!ication res0onse& MS# recei1es the res0onse an) returns a res0onse 7essage to MS& .< U0on recei0t o! the AlertS# noti!ication !ro7 H8(= SM# returns a res0onse& Then SM# 7a9es another atte70t to )eli1er the short 7essage in suita le situations&

15.8 ,ocation Ser0ice Procedures


15.8.1 20er0ie1
8o#ation Ser1ice ;8#S< s0eci!ies !or o0erators= su scri ers an) thir) 0art5 ser1ice 0ro1i)ers all the necessar5 net"or9 ele7ents an) entities= their !unctionalities= inter!aces= as "ell as co77unication 7essages= so as to i70le7ent the 0ositioning
Hua"ei Technologies Pro0rietar5 *6

Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter

#ha0ter $% Signaling Proce)ures

!unctionalit5 in a cellular net"or9& The 8#S is a le to 0osition a Mo ile Station ;MS< to a cell )egree& The 8#S co1ers a "i)e range o! a00lications= inclu)ing 0u lic securit5 ser1ices as e7ergenc5 calls an) alar7s= location/ ase) roa)casting& illing an) tracing= an) location/ ase) in!or7ation ser1ices as na1igation= cit5/touring= an) locate)

15.8.2 General ,CS (rchitecture


In 3'PP net"or9ing architecture= 8#S is a s5ste7 relati1el5 in)e0en)ent to the core net"or9& MSOFTX3000 i70le7ents 8#S !unction 3'PP& 3elo" is the architecture o! 8#S in 3'PP
C/C ,ote $< 7G9 SGS# 8h .& #ode / %,M. T'pe /) Iu SR#C Iu
%SM,C functio9 nalit')

ase) on *00$ Lune 1ersion o!

,M. T'pe (

+,R

Uu

Iu3#

7G9 8g MSC-*,R

8e 'ate"a5 M,C 8c

EBternal 8#S client

Iur #ode / %,M. T'pe /) Iu R#C

8g 'ate"a5 M,C Other P8M,

gs"SCF

Figure 1.1 Architecture o! 8#S in 3'PP The 8#S #lient= "hich in1o9es a 8#S re?uest= is )i1i)e) into eBternal 8#S #lient an) internal 8#S client& The 8#S Ser1er contains (,#= MS#FC8(= H8(= an) S'S,& (,# acco70lishes location 7easure7ent an) calculation& MS#FC8(= H8( an) S'S, !ul!ill a))ressing o! UE= sen)ing an) recei1ing o! location 7essages= an) su scri er )ata storage 7anage7ent& 'M8# 0ro1i)es inter!ace et"een 8#S #lient an) 8#S Ser1er&

!. Related &ntities

8#S #lient

The 8#S #lient consists o! eBternal 8#S #lient an) internal 8#S #lient& An eBternal 8#S #lient is an a00lication ser1er 0ro1i)ing location/ ase) ser1ices& It connects "ith 'M8# through 8e inter!ace& An internal 8#S #lient can e inclu)e) in #, e?ui07ent ;as MS# or gs7S#F<= or o0eration & 7aintenance ;O&M< e?ui07ent "hich can e a se0arate one or the O&M e?ui07ent o! MS#& 8#S #lient in1o9es a location re?uest= an) i70le7ents location/ ase) ser1ices "ith the results& As !unctions )i!!er= 8#S #lient can e )i1i)e) into !our t50esG *< The #o77ercial 8#S #lients ;or Calue A))e) Ser1ice 8#S #lient<= "hich

Hua"ei Technologies Pro0rietar5 30

Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter

#ha0ter $% Signaling Proce)ures

su00ort 1alue/a))e) ser1ices= can s0eci!ic& 3<

e su scri er s0eci!ic or non/su scri er

The Internal 8#S #lients su00ort= or enhance "ith 8#S= certain O&M relate) tas9s= su00le7entar5 ser1ices= I, relate) ser1ices an) 'SM earer ser1ices an) teleser1ices&

.< %<

The E7ergenc5 8#S #lients assists su scri ers "ho 0lace e7ergenc5 calls& The 8a"!ul Interce0t 8#S #lient uses the location in!or7ation to su00ort 1arious legall5 re?uire) or sanctione) ser1ices 8#S Ser1er

The 8#S Ser1er is a grou0 o! so!t"are an)For har)"are entities o!!ering 8#S ca0a ilities= inclu)ing MS#= S'S, an) (,#& It is a grou0 o! entities i70le7enting location !unction coor)inatel5 rather than a s0eci!ic entit5& The 8#S Ser1er acce0ts 8#S re?uests= ser1ices re?uests= an) sen)s re?uests&

ac9 res0onses to the recei1e)

'ate"a5 Mo ile 8ocation #enter ;'M8#<

'M8# is a gate"a5 connecting "ith eBternal 8#S #lient& It recei1es location re?uests !ro7 8e inter!ace= then starts a))ressing H8( an) sen)s location re?uest to CMS#& 'M8# can also sen) the location results to relate) 8#S #lient= an) con1ert the result into local coor)inates&

MS#FC8(

MS#FC8( i70le7ents co)ec= 1ersion negotiation= an) signaling 0rocessing o! location 7essagesJ an) 0ro1i)es inter!ace !unctions as signaling tracing an) O&M& It is re?uire) to acco70lish the 0rocessing an) control o! location 0roce)ures= 0rotecting su scri er 0ri1ate in!or7ation= an) 0ro1i)ing 0rocessing results&

illing accor)ing to

H8(

It stores 8#S su scri0tion )ata= an) 0ro1i)es MS# nu7 er to locate) su scri er&

Target UE

Target UE= "hich is also na7e) MS hereina!ter= re!ers to the locate) 7o ile 0hone& The 0resent 0osition or the 0re1iousl5/locate) 0osition o! the 7o ile 0hone nee) to e 0ro1i)e) accor)ing to location re?uests& Usuall5= the target UE is the locate) o :ect= ut !or Mo ile Originate) 8ocation (e?uest ;MO/8(<= the target UE sen)s location re?uests&

15.8.7 General #et1or4 ,ocation Procedures


8#S 0roce)ures inclu)e Mo ile Ter7inate) 8ocation (e?uest ;MT/8(< 0roce)ure= Mo ile Originate) 8ocation (e?uest ;MO/8(< 0roce)ure= an) ,et"or9 In)uce) 8ocation (e?uest ;,I/8(< 0roce)ure&

Hua"ei Technologies Pro0rietar5 3$

Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter

#ha0ter $% Signaling Proce)ures

!. Mobile Ter"inated ,ocation Re>uest


Figure $&$ sho"s MT/8( 0roce)ure&
Client GMLC HLR VMSC SRNC UE

2: LCS Service Req)e/t 5: M ! Sen( R')tin+ In*' *'r LCS 8: M ! Sen( R')tin+ In*' *'r LCS ac1: ;: M ! !r'vi(e S)-/cri-er L'cati'n <: MS !a+in+@ )t.enticati'n@ Ci0.erin+

B=: LCS L'cati'n N'ti*icati'n Inv'1eC

BD: LCS L'cati'n N'ti*icati'n Ret)rn Re/)ltC

?: R N ! L'cati'n Re0'rtin+ C'ntr'l

A: Me//a+e/ *'r in(ivi()al 0'/iti'nin+ ,et.'(/

2>: R N ! L'cati'n Re0'rt

22: M ! !r'vi(e S)-/cri-er L'cati'n ac1:

25: LCS Service Re/0'n/e

Figure 1.1 MT/8( 0roce)ure $< On recei1ing the location re?uest !ro7 an eBternal client= 'M8# 1eri!ies 8#S #lient i)enti!ier an) su scri0tion )ata o! the re?ueste) 8#S= an) o tains MSIS+, or IMSI= 8#S DoS )ata o! target UE& For call/relate) location re?uests= 'M8# shall o tain an) 1eri!5 calle) nu7 er o! 8#S client& To 0rocess location re?uests to 7ulti0le UEs= re0eat ste0 *< till ste0 $*<& *< I! 'M8# 9no"s CMS# an) IMSI o! a certain MSIS+,= s9i0 to ste0 .<& Other"ise= 'M8# sen)s to H8( a MAP>SE,+>(OUTI,'>I,FO >FO(>8#S 7essage o! IMSI or MSIS+, "ith target UE& 3< H8( 1eri!ies the caller a))ress o! 'M8#= "hich has een authoriHe) an) can re?uest UE location in!or7ation= an) returns CMS# a))ress an) IMSI or MSIS+, ;MSIS+, is not inclu)e) in ste0 *<&

Hua"ei Technologies Pro0rietar5 3*

Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter

#ha0ter $% Signaling Proce)ures

.<

'M8# sen)s MAP>P(OCI+E>SU3S#(I3E(>8O#ATIO, 7essage to relate) CMS#& The 7essage inclu)e) re?ueste) location in!or7ation t50e= IMSI= 8#S DoS o! UE= an) in)ication o! "hether 8#S #lient has o1erri)e ca0a ilit5& For call/relate) location re?uest= the 7essage also inclu)es calle) nu7 er o! 8#S #lient& For 1alue/a))e) 8#S #lient= client na7e can e inclu)e)& For non/call relate) location re?uest= 8#S #lient i)enti!ier is inclu)e)& For other cases= client na7e or i)enti!ier is o0tional&

%<

I! 'M8# locates in another P8M, or another nation= CMS# "ill 1eri!5 "hether in1o9ing a location re?uest !ro7 that P8M, or nation is 0er7itte)& I! not= it "ill return relate) error 7essages& I! so= CMS# 1eri!ies 8#S 0rohi ition restriction o! UE su scri0tion !ile store) in C8(& I! 8#S is 0rohi ite)= there is no nee) to in!or7 UE= an) 8#S #lient )oes not ha1e o1erri)e ca0a ilit5= CMS# returns an error 7essage& I! UE is in i)le 7o)e= the core net"or9 "ill in1o9e 0aging= authentication an) ci0hering 0roce)ures& I! target UE su00orts UE/ ase) or UE/ assiste) location 7etho)= UE "ill 0ro1i)es its location 7etho) in controlle) earl5 class7ar9 sen)ing to S(,# an) MS#&

2<

I! the location re?uest co7es !ro7 a 1alue/a))e) 8#S #lient= an) UE su scri0tion !ile in)icates that UE re?uires noti!ication ;"ith 0ri1ate 1eri!ication<= an) UE su00orts noti!ication o! 8#S= then CMS# sen)s an 8#S 8ocation ,oti!ication In1o9e 7essage to target UE= in)icating location re?uest t50e = 8#S #lient i)enti!ier= an) "hether 0ri1ate 1eri!ication is re?uire)&

-<

Target UE in!or7s su scri er that a location re?uest co7es& I! 0ri1ate 1eri!ication is authoriHe)= target UE in?uires that "hether location re?uest shall e 0er7itte) in case o! no res0onse= an) "aits !or su scri er !or )ecision& Then= UE returns the 8#S 8ocation ,oti!ication (eturn (esult 7essage to CMS#= "hich coul) also e returne) et"een Ste0 2< an) Ste0 $$<& I! no 7essage is returne) "ithin s0eci!ie) ti7e= CMS# thin9s no res0onse= an) shall return an error 7essage to 'M8# "hen 0ri1ate 1eri!ication is re?uire)= an) in)icates "hether the reason is su scri er not allo"ing location or no res0onse&

4< 6<

CMS# sen)s (A,AP 8ocation (e0ort #ontrol 7essage to S(,#= "hich inclu)es location re?uest t50e= UE location ca0a ilit5= an) DoS o! re?uest& S(,# )eter7ines an) i70le7ents the location 7etho)& (A,AP 8ocation (e0ort 7essage to CMS#& I! no location result is o taine)= the cause o! !ailure shall e inclu)e) in (A,AP 8ocation (e0ort 7essage&

$0< When o taining DoS/satis!ie) location results= S(,# returns the results in

$$< I! no 0ri1ate 1eri!ication 0roce)ure is i70le7ente)= CMS# "ill return location in!or7ation an) esti7ate) ti7e to 'M8#& I! the 0ri1ate 1eri!ication 0roce)ure is i70le7ente)= an) the 8#S 8ocation ,oti!ication (eturn (esult 7essage that MS# recei1es in)icates that location is 0er7itte)= onl5 location 7essage is returne)& I! location is not 0er7itte)= or res0onse ti7es out= an) UE su scri0tion !ile s0eci!ies that location is 0rohi ite) in case o! no res0onse= then CMS# shall return an error res0onse 7essage to 'M8#& I! 0ri1ate 1eri!ication is
Hua"ei Technologies Pro0rietar5 33

Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter

#ha0ter $% Signaling Proce)ures

i70le7ente)= an) location is 0er7itte)=

ut S(,# )oes not o tain location

7essage= an) re?uest t50e o! 8#S #lient is current location or last 9no"n location= an) CMS# has the last 9no"n location= return the location to 'M8#& I! UE "as in i)le state= C8( shall release the MM connection "ith UE& CMS# can recor) charging in!or7ation& $*< 'M8# returns esti7ate) UE location to 8#S client that initiates the re?uest& 'M#8 can i70le7ent coor)inate con1ersion= an) recor) account in!or7ation o! 8#S client an) the net"or9&

#ote$ Ste0s $< to Ste0 4< co1er location 0re0aration= Ste0 6< is location 7easure7ent setu0 0rocess= an) Ste0s $0< to $*< are location calculation an) release 0rocesses&

!!. Mobile 2riginated ,ocation Re>uest


Figure $&$ sho"s MO/8( 0roce)ure&

Hua"ei Technologies Pro0rietar5 3.

Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter

#ha0ter $% Signaling Proce)ures

LCS Client

GMLC

MSC

SRNC
2 : CM Service Req)e/t

UE

*& #M Ser1ice (e?uest

8: )t.enticati'n@ Ci0.erin+ 'r CM Service cce0t

B ;: L'cati'n Service/ Inv'1eC

<: R N ! L 'cati'n Re0'rtin+ C'ntr'l

=: Me//a+e/ *'r in(ivi()al 0'/iti'nin+ ,et.'(/ 'r tran/*er '* l'cati'n a//i/tance (ata

D: R N ! L'cati'n Re0'rt:

?: M ! S)-/cri-er L'cati'n Re0'rt

A: M ! S)-/cri-er L'cati'n Re0'rt ac1:

2>: L'cati'n In*'r,ati'n

22: LCS MO-LR Ret)rn Re/)lt 25: Relea/e CM@ MM@ RRC c'nnecti'n/

Figure 1.1 MO/8( 0roce)ure $< *< 3< .< %< UE sen)s 8#S MO/8( 7essage to S(,#& S(,# !or"ar)s 8#S MO/8( 7essage to MS#& MS# authenticates= ci0hers an) accesses the 8#S re?uest o! UE& When the access 0rocess co70letes= UE in1o9es MO/8( in)ication& I! UE re?uests its o"n location or sen)s UE location to 8#S client= the 7essage inclu)es 8#S re?uest an) DoS in!or7ationJ i! UE is re?uire) to sen) UE location to 8#S client= the 7essage shall inclu)e 8#S client i)enti!ier or 'M8# a))ress& When 'M8# a))ress is not inclu)e)= CMS# can e con!igure) as local 'M8#& #hec9 i! the 'M8# allo"s connection !ro7 8#S client& I! not= re:ect the location re?uest& I! it is UE/assiste) location )ata or ci0hering 9e5= the 7essage shall inclu)e assist )ata or ci0hering 9e5 t50e= an) in "hich 7etho) "ill these )ata e a00lie)& CMS# chec9s in UE su scri0tion !ile i! UE can re?uest its location= or can sen) its location to other 8#S client or re?uest location assist )ata an) ci0hering 9e5& I! UE sen)s location re?uest= an) call set u0 co70letes= CMS# can re:ect the re?uest !or so7e certain t50es o! non/1oice calls&

Hua"ei Technologies Pro0rietar5 3%

Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter

#ha0ter $% Signaling Proce)ures

2< -< 4< 6<

For 8#S 0roce)ures o! other location results= the5 are the sa7e as )escri e) in MT/8( 0roce)ure& S(,# re0orts location results to CMS#& CMS# re0orts location results to 'M8#& 'M8# res0onses "hether the correct location in!or7ation is recei1e)&

$0< 'M8# returns the results to UE/re?ueste) 8#S client& $$< Finall5= MS# returns location re?uest res0onse ;inclu)ing location results< $*< (elease #onnection Manage7ent ;#M<= Mo ilit5 Manage7ent ;MM<= or (a)io (esource #ontrol ;((#< connection&

!!!. #et1or4 !nduced ,ocation Re>uest


Figure $&$ sho"s ,I/8( 0roce)ure&
LCS Client GMLC HLR VMSC SRNC
2: CM Service Req)e/t 5: R N ! (CM Service Req)e/t)

UE

8: E,er+enc7 Call Ori+inati'n

;: R N ! L'cati'n Re0'rtin+ C'ntr'l

<: Me//a+e/ *'r in(ivi()al 0'/iti'nin+ ,et.'(/ =: R N ! L'cati'n Re0'rt D: M ! S)-/cri-er L'cati'n Re0'rt

?: M ! S)-/cri-er L'cati'n Re0'rt ac1 A: L'cati'n In*'r,ati'n

2>: E,er+enc7 Call Relea/e

22: M ! S)-/cri-er L'cati'n Re0'rt

25: M ! S)-/cri-er L'cati'n Re0'rt ac1

Figure 1.1 ,I/8( 0roce)ure $< *< 3< In i)le state= UE in1o9es ((# connection re?uest to start an e7ergenc5 call& S(,# trans!ers the #M ser1ice re?uest through Iu inter!ace& UE can i)enti!ie) 5 TMSI= IMSI= or IMEI& Start e7ergenc5 call 0roce)ure& e

Hua"ei Technologies Pro0rietar5 32

Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter

#ha0ter $% Signaling Proce)ures

.<

3ase) on net"or9 o0erator re?uire7ent= 8#S re?uest 0roce)ure shall to S(,#& CMS#= S(,# an) UE continue "ith the e7ergenc5 call 0roce)ure&

in1o9e) on e7ergenc5 call origination& In1o9e the 8#S re?uest control 0roce)ure %< 2< -< 4< 6< For 8#S 0roce)ures o! other location results= the5 are the sa7e as )escri e) in MT/8( 0roce)ure& S(,# re0orts location results to CMS#& CMS# re0orts location results to 'M8#& 'M8# res0onses "hether the correct location in!or7ation is recei1e)& 'M8# returns the results to UE/re?ueste) )e!ault 8#S client&

$0< E7ergenc5 ser1ice releases& $$< For e7ergenc5 ser1ice in ,orth A7erica= MS# "ill sen) another 8ocation (e0ort to 'M8#& $*< 'M8# con!or7s= releases the e7ergenc5 call an) stores relate) in!or7ation&

15.5 !# Ser0ice +andling Procedures


15.5.1 Pre9paid Ser0ice +andling Procedures
!. Mobile Pre9paid Subscriber Calling 2rdinar' WC M( Subscriber
It is assu7e) that the 0re/0ai) su scri er is resi)ent in the ser1ing area o! MS#aFC8(FSSP& O/#SI is use) to trigger a ser1ice& The call 0roce)ure is sho"n in Figure $&$&

Hua"ei Technologies Pro0rietar5 3-

Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter

#ha0ter $% Signaling Proce)ures

MSCa /VLR/SS!
O_CSI tri++er I"!

SC!a

HLR-

MSC- /VLR

C.ar+in+ t.e callin+ 0art7 RR%E 00l7 C.ar+in+ #CI C'ntin)e SRI SRI_ c1 (MSRN) I M (MSRN) CM NC CR ER%("!A) Relea/e Call C ! /i+nalin+ M ! /i+nalin+ ISU! /i+nalin+ !RN !RN_ ac1

Figure 1.1 Proce)ure o! 0re0ai) su scri er calling or)inar5 W#+MA su scri er ;O/ #SI trigger< $< MS#aFC8(FSSP recei1es the call& Accor)ing to the calling 0art5Ks su scri0tion in!or7ation= the ser1ice is triggere) in O/#SI 7anner& MS#aFC8(FSSP resi)ent toll area co)e is 0ut in the 8ocation ,u7 er 0ara7eter o! the I+P 7essage& Then MS#aFC8(FSSP sen)s the I+P 7essage to the S#Pa& *< 3< A!ter S#Pa recei1es the I+P 7essage= S#Pa anal5Hes the calling 0art5Ks account e!ore an5thing else is )one& I! the account is 1ali)= s9i0 to Ste0 3<& S#Pa )eter7ines the calling tari!! rate ase) on the calling 0art5Ks location an) the calle) nu7 er& S#Pa calculates the alance o! the account into con1ersation )uration= an) also sen)s ((3E= A#= F#I an) #O,TI,UE to MS#aFC8(FSSP& .< U0on recei0t o! #O,TI,UE 7essage= MS#aFC8(FSSP sen)s an S(I 7essage to the calle) H8( & MS#aFC8(FSSP gets the MS(, o! the calle) 0art5 an) 0er!or7s call connection& %< A!ter a con1ersation= either 0art5 hoo9s on& MS#aFC8(FSSP re0orts the charging re0ort an) the on/hoo9 e1ent&

!!. PST# or 2rdinar' WC M( Subscriber Calling Pre9paid Subscriber


It is assu7e) that a PST, or or)inar5 W#+MA su scri er 7a9es a call to a 0re/0ai) su scri er& T/#SI is use) to trigger a ser1ice& The call 0roce)ure is sho"n in Figure $&$&

Hua"ei Technologies Pro0rietar5 34

Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter

#ha0ter $% Signaling Proce)ures

MSC/VLRSS! Sen( R')tin+ In*'

SC!-

HLR-

MSC- /VLR

SRI_ac1 (O-CSIHT-CSI)
T_CSI tri++er I"! C.ar+in+ t.e calle( 0art7

RR%E 00l7 C.ar+in+ C'nnect

Sen( R')tin+ In*' SRI_ I M (MSRN) CM NC 00l7C.ar+in+Re0'rt ::: ER%("!2D) Relea/e Call c1 E F M SRN E G !RN !RN_ ac1

C ! /i+nalin+ M ! /i+nalin+ ISU! /i+nalin+

Figure 1.1 PST, or or)inar5 W#+MA su scri er calling 0re/0ai) su scri er $< A!ter recei1ing the call originate) 5 a PST, or W#+MA su scri er=

MS#aFC8(FSSP !in)s that the calling 0art5 is not a 0re/0ai) su scri er& Then an S(I 7essage is sent to the calle) H8( & I! the calle) 0art5 is a 0re/0ai) su scri er= the su scri0tion in!or7ation ;O>#SIMT>#SI< is returne)& *< MS#aFC8(FSSP gets the S#P a))ress !ro7 the T>#SI )ata= an) sen)s an I+P 7essage to S#P & As 'MS# to PST, or originating MS# to 'SM has the SSP !unction= the toll area co)e o! the location "here 'MS#FSSP or originating MS#FSSP is resi)ent is 0lace) in the 8ocation ,u7 er 0ara7eter o! the I+P 7essage& 3< A!ter recei1ing the I+P 7essage= S#P anal5Hes the calle) 0art5Ks account e!ore an5thing else is )one& I! the account is 1ali)= S#P )eter7ines the tari!! rate accor)ing to the ho7e location o! the calle) 0art5 an) the actual location o! the calle) 0art5 ;re!erence 8ocation In!or7ation 0ara7eter<& S#P calculates the account alance to con1ersation )uration= an) sen)s ((3E= A# an) #O,,E#T to MS#aFC8(FSSP& .< U0on recei0t o! #O,,E#T 7essage= MS#aFC8(FSSP sen)s an S(I 7essage again to H8( & This S(I 7essage )isa les T/#SI& MS(, o! the calle) 0art5 is o taine)&

Hua"ei Technologies Pro0rietar5 36

Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter

#ha0ter $% Signaling Proce)ures

%< 2<

MS#aFC8(FSSP 0er!or7s connection accor)ing to the M(S, o! the calle) 0art5& A!ter the con1ersation= either 0art5 hoo9s on& MS#aFC8(FSSP re0orts the charging re0ort an) the on/hoo9 e1ent&

!!!. Pre9Paid Subscriber Calling Pre9paid Subscriber


It is assu7e) that the calling 0re/0ai) su scri er is resi)ent in the ser1ing area o! MS#aFC8(FSSP& O/#SI is use) to trigger a ser1ice& The call 0roce)ure is sho"n in Figure $&$&
MSCa /VLR/SS!
O_CSI tri++er I"!

SC!a

SC!-

HLR-

MSC-/VLR

RR%E C.ar+in+ t.e callin+ 0art7 00l7 C.ar+in+


#CI

C'ntin)e Sen( R')tin+ In*' SRI_ ac1 (O-CSIHT-CSI)


T_CSI tri++er

I"! RR%E 00l7 C.ar+in+ C'nnect Sen( R')tin+ In*' SRI_ ac1(MSRN) I M (M SRN) CM NC 00l7C.ar+in+Re0'rt ER% ("!A) RC 00l7C.ar+in+Re0'rt ER% ("!2D) RC
C.ar+in+ t.e calle( 0art7

!RN !RN_ ac1

C ! /i+nalin+ M ! /i+nalin+ ISU! /i+nalin+

Figure 1.1 Pre/0ai) su scri er calling 0re/0ai) su scri er $< MS#aFC8(FSSP recei1es the call& Accor)ing to the calling 0art5Ks su scri0tion in!or7ation= the ser1ice is triggere) in O/#SI 7anner& MS#aFC8(FSSP resi)ent toll area co)e is 0ut in the 8ocation ,u7 er 0ara7eter o! the I+P 7essage& Then MS#aFC8(FSSP sen)s the I+P 7essage to S#Pa&

Hua"ei Technologies Pro0rietar5 .0

Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter

#ha0ter $% Signaling Proce)ures

*<

S#Pa )eter7ines the calling tari!! rate ase) on the calling 0art5Ks location an) the calle) nu7 er& S#Pa calculates the alance o! the account into con1ersation )uration= an) sen)s ((3E= A#= F#I an) #O,TI,UE to MS#aFC8(FSSP&

3<

U0on recei0t o! the #O,TI,UE 7essage= MS#aFC8(FSSP sen)s an S(I 7essage to the calle) H8(& I! the calle) 0art5 is a 0re/0ai) su scri er= MS#aFC8(FSSP returns O>#SIMT>#SI in!or7ation an) calle) location in!or7ation ;C8(/nu7 er<&

.<

MS#aFC8(FSSP sen)s to S#P

an I+P 7essage "here MS#aFC8(FSSP

resi)ent toll area co)e is 0ut in the 8ocation ,u7 er !iel) an) the calle) location in!or7ation ;Clr/nu7 er< is 0ut in the 8ocation In!or7ation !iel)& %< A!ter recei1ing the I+P 7essage= S#P anal5Hes the calle) 0art5Ks account e!ore an5thing else is )one& I! the account is 1ali)= S#P )eter7ines the calle) tari!! rate accor)ing to the location in!or7ation o! the calle) 0art5 containe) in the I+P 7essage& S#P 2< -< 4< calculates the account alance to con1ersation )uration= an) sen)s ((3E= A#= F#I an) #O,,E#T to MS#aFC8(FSSP& MS#aFC8(FSSP sen)s an S(I 7essage again to H8( & This S(I 7essage )isa les T/#SI& MS(, o! the calle) 0art5 is o taine)& MS#aFC8(FSSP 0er!or7s connection accor)ing to the M(S, o! the calle) 0art5& A!ter the con1ersation= either 0art5 hoo9s on& MS#aFC8(FSSP re0orts the charging re0ort an) the on/hoo9 e1ent to S#Pa an) S#P res0ecti1el5&

!*. Pre9paid Subscriber Calling 2rdinar' WC M( Subscriber 1ith CF. to Pre9 paid Subscriber
It is assu7e) that the calling 0re/0ai) su scri er is resi)ent in the ser1ing area o! MS#aFC8(FSSP& O/#SI is use) to trigger a ser1ice& The call 0roce)ure is sho"n in Figure $&$&

Hua"ei Technologies Pro0rietar5 .$

Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter

#ha0ter $% Signaling Proce)ures

MSCa /VLR/SS!
O-CSI tri++er

SC!a
I"!

SC!c

HLR-

HLRc

MSCc /VLR

RR%E C.ar+in+ 00l7 C.ar+in+ #CI C'ntin)e SRI SRI_ ac1(#TN)


O)t0)t C#U -ill *'r %

SRI SRI_ c1(O-CSIHT-CSI) I"!


C.ar+in+ C

RR%E 00l7 C.ar+in+ C'nnect SRI SRI_ ac1(MSRN) I M (MSRN) CM NC CR ER%("!A) RC CR ER%("!2D) RC

!RN !RN_ ac1

Figure 1.1 Pre/0ai) su scri er calling or)inar5 W#+MA su scri er "ith #FU to 0re/ 0ai) su scri er

*. Recharge Procedure
(echarge 0roce)ure is associate) "ith IP t50icall5= as sho"n in Figure $&$&

Hua"ei Technologies Pro0rietar5 .*

Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter

#ha0ter $% Signaling Proce)ures

MSCa /VLR/SS! O-CSI tri++er I"! RR%E CTR !IC !IC Re/)lt !IC !IC Re/)lt !IC !IC Re/)lt ! SRR ! SRR ! SRR !IC ER%('- -an('n)

SC!a

Select a lan+)a+e Select a 0r'ce()re In0)t t.e car( n),-er !lea/e 6ait a ,',ent

!r',0t '* a /)cce//*)l rec.ar+e M 'ne7 U/a+e li*e O0ti'n/ *'r 't.er 0r'ce()re/ U/er 'n-.''1

Figure 1.1 (echarge 0roce)ure

15.5.2 Mobile 2riginated SMS +andling Procedure


In so7e 7o ile originate) SMS associate) 0roce)ures= MS#FC8(FSSP can re0ort SMS e1ents to 's7S#F= an) 's7S#F can 7o)i!5 SMS 0ara7eters an) in!luence the sen)ing o! the short 7essages& A t50ical SMS #AME8 0roce)ure is sho"n in Figure $&$&

Hua"ei Technologies Pro0rietar5 .3

Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter

#ha0ter $% Signaling Proce)ures

MSC/VLR/SS!
SMS-CSI tri++er I"! SMS RRSE C'ntin)e SMS

SC!

SMSC

M ! MO #ORW R" SHORT MESS GE M ! MO #ORW R" SHORT MESS GE C$ ERS #CI SMS C'ntin)e SMS

C ! ,e//a+e/ M ! ,e//a+e/

Figure 1.1 Mo ile originate) SMS han)ling 0roce)ure $< MS#FC8(FSSP recei1es the 7o ile originate) short 7essage& Accor)ing to the su scri0tion in!or7ation= SMS/#SI is use) to trigger a ser1ice& MS#FC8(FSSP sen)s an I+P SMS 7essage to S#P& *< A!ter recei1ing the I+P SMS 7essage= S#P anal5Hes the calling 0art5Ks account e!ore an5thing else is )one& I! the account is 1ali)= ((SE an) #O,TI,UESMS are sent to MS#aFC8(FSSP& 3< .< MS#aFC8(FSSP sen)s the short 7essage to SMS#& U0on recei0t o! the outco7e o! sen)ing SMS= MS#aFC8(FSSP re0orts the outco7e to S#Pa&

15.5.7 Mobilit' Manage"ent &0ent #otification +andling Procedure


A!ter ha1ing success!ull5 co70lete) a 7o ilit5 7anage7ent e1ent !ro7 a su scri er= the C8( initiates a 7o ilit5 e1ent noti!ication 0roce)ure to the 's7S#F accor)ing to the su scri0tion in!or7ation& Mo ilit5 e1ents that can e re0orte) at 0resent inclu)e intra/C8( location u0)ate ;not inclu)ing 0erio)ic location u0)ate<= inter/C8( location u0)ate= MS 0o"ere) o!!= net"or9 )eter7ine) IMSI )etach= an) IMSI attach& The 7o ilit5 7anage7ent e1ent noti!ication 0roce)ure is sho"n in Figure $&$&

Hua"ei Technologies Pro0rietar5 ..

Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter

#ha0ter $% Signaling Proce)ures

VLR M-CSI tri++er M ! NOTE MM EVENT M ! NOTE MM EVENT C$

+/,SC#

Figure 1.1 Mo ilit5 7anage7ent e1ent noti!ication han)ling 0roce)ure

15.: Mobilit' Manage"ent


15.:.1 20er0ie1
To support the "obilit' of Mobile Stations-.ser &>uip"ents %MS-.&) = the net"or9 shall 0ro1i)e relate) 7anage7ent !unctions ;7o ilit5 7anage7ent<& The Mo ilit5 Manage7ent ;MM< ai7s to locate the MSFUE an) 9ee0 the connection et"een MSFUE an) the net"or9 in the )esira le status& The action that MS-.& changes its connection 1ith the current cell-net1or4 is 4no1n as roa"ing. The MM in0ol0es 1) location "anage"ent an) 2) hando0er "anage"ent= )e0en)ing on the current status o! the roa7ing MSFUE&

15.:.2 ,ocation Manage"ent


!t is 0er' i"portant to locate an MS-.& 1hen it is in the idle status. Since 4no1ing the current location of the MS-.& is the precondition that the net1or4 can set up the connection 1ith it >uic4l' 1hen it is called& To realiHe location 7anage7ent= net"or9 "ill 9ee0 tracing MSFUENs current location an) store the location in!or7ation& The location infor"ation is stored in +,R6 *,R and MS-.& %in S!M-.S!M card). The location 7anage7ent 0roce)ure is use) to ensure the consistenc5 o! the location in!or7ation in these three entities& A7ong the three entities= +,R ser0es to store the MS-.& subscription data and location infor"ation %that is6 the MSC-*,R #o.)& *,R ser0es to store the subscriber related infor"ation6 including the MS-.& subscription data6 location infor"ation and subscriber status infor"ation do1nloaded fro" +,R.

Hua"ei Technologies Pro0rietar5 .%

Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter

#ha0ter $% Signaling Proce)ures

MSC processes the MS-.& location registration procedure and e?changes data 1ith *,R. The MS-.& stores the infor"ation of the ,ocation (rea %,() 1here it sta's &

The location 7anage7ent 0rotocol is o ser1e) et"een MS#FC8( an) MSFUE&

et"een H8( an) MS#FC8(= an)

The Mobile (pplication Part %M(P) of SS; is adopted bet1een +,R and MSC-*,R6 1hile Radio !nterface ,a'er 7 protocol of MM %R!,79MM) is adopted bet1een MSC-*,R and the MS-.&.

The MM inclu)es so7e asic 0roce)ures= such asG


AuthenticationJ Ac?uiring International Mo ile Su scri er I)entit5 ;IMSI< !ro7 Pre1ious C8( ;PC8(<J Ac?uiring authentication set !ro7 H8(J 8ocation cancellationJ Inserting su scri er )ataJ !"plicit !MS! detach@ Purging MS-.&.

35 co7 ining so7e asic 0roce)ures 7entione) a o1e accor)ing to the triggering con)itions= the 7a:or MM 0roce)ure= location u0)ate= can e realiHe)&

#ote$ The follo1ing section describes the location update procedures of the Global S'ste" for Mobile co""unications %GSM)6 1hich are si"ilar to that of the .ni0ersal Mobile Teleco""unication S'ste" %.MTS).

1.7.1 /asic Procedures


The location 7anage7ent inclu)es so7e asic 0roce)ures= such asG

AuthenticationJ Ac?uiring IMSI !ro7 PC8(J 8ocation cancellationJ Inserting su scri er )ataJ I70licit IMSI )etachJ EB0licit IMSI )etachJ Purging MS&

Hua"ei Technologies Pro0rietar5 .2

Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter

#ha0ter $% Signaling Proce)ures

!. (uthentication
On recei0t o! the location u0)ate re?uest !ro7 MS= i! authentication is nee)e) ut there is no a1aila le authentication set= MS#FC8( "ill re?uest !or the authentication set !ro7 H8(= an) initiate the authentication 0roce)ure& The authentication 0roce)ure is sho"n in Figure $&$&
MS MS#F C8(

H8(

SE,+ AUTHE,TI#ATE SE,+ AUTHE,TI#ATE A#E Authentication 0roce)ure

Figure 1.1 Authentication 0roce)ure

#ote$ For )etaile) )escri0tion o! the authentication 0roce)ure= see Section 3&$ Authentication in this 7anual&

!!. (c>uiring !MS! fro" P*,R


I! the su scri er re?uests location u0)ate "ith Te70orar5 Mo ile Su scri er I)enti!ier ;TMSI<= the MS#FC8( !in)s that the TMSI is un9no"n= an) the MS has ne1er registere) in current C8(6 the *,R 1ill get the P*,R address according to the old TMS! and ,ocation (rea !dentit' %,(!)6 an) initiates the 0roce)ure to ac?uire IMSI an) authentication set !ro7 PC8(& Figure $&$ sho"s the 0roce)ure o! ac?uiring IMSI !ro7 PC8(&
'
C8( PC8(

SE,+ I+E,TIFI#ATIO, SE,+ I+E,TIFI#ATIO, A#E

Figure 1.1 (c>uiring !MS!

Hua"ei Technologies Pro0rietar5 .-

Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter

#ha0ter $% Signaling Proce)ures

!!!. ,ocation Cancellation


On recei0t o! the location u0)ate re?uest !ro7 MS#FC8(= i! the H8( !in)s that the su scri er has 7o1e) to an area controlle) 5 a )i!!erent MS#FC8(= it "ill initiate location cancellation 0roce)ure to re7o1e the su scri er in!or7ation !ro7 PC8(& The location cancellation 0roce)ure is sho"n in Figure $&$&
+
H8( PC8(

#A,#E8 8O#ATIO, #A,#E8 8O#ATIO, A#E

Figure 1.1 ,ocation cancellation procedure

!*. +,R !nserting Subscriber

ata to *,R

A!ter recei1ing the location u0)ate re?uest !ro7 MS#FC8(= i! the H8( !in)s that the su scri er roa7e)/to MS#FC8( nu7 er is change)= it "ill initiate the location cancellation 0roce)ure to )elete the su scri er in!or7ation in PC8(& A!ter"ar)s= H8( 0ro1i)es the nee)e) su scri er in!or7ation to the ne" C8(& Figure $&$ sho"s the 0roce)ure o! inserting the su scri er )ata to C8( 5 H8(&

Figure 1.1 H8( inserts the su scri er )ata to C8(

*. Purging MS
The procedure is initiated b' *,R to delete the subscriber data fro" the database. This 0roce)ure is in)uce) "hen the MS sta's inacti0e 1ithin a long ti"e %can be set6 usuall' 28 hours)6 or 1hen the s'ste" ad"inistrator deletes the subscriber record. The 0roce)ure is sho"n in Figure $&$&

Hua"ei Technologies Pro0rietar5 .4

Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter

#ha0ter $% Signaling Proce)ures

+
C8( H8(

MAP>PU('E>MS MAP>PU('E>MS>ac9

Figure 1.1 Purging MS

*!. !"plicit !MS! etach


Once the i"plicit !MS! detach ti"er ti7es out= *,R 1ill set the subscriber status auto"aticall' to AdetachedA& The i70licit IMSI )etach ti7er recor)s the 0erio) "ithin "hich the MS is not acti1e ;no location u0)ate or calling<& When the recor)e) ti7e reaches the 0reset A)etachA 1alue= C8( "ill set the su scri er status to A)etache)A& Whether C8( "ill initiate the i70licit IMSI )etach is also relate) to the 0erio)ic location u0)ate ti7e= "hich is set in 3ase Station #ontrollerF(a)io ,et"or9 #ontroller %/SC-R#C). %!MS! etach Ti"e BBBBBBBBBBBBBBBBBBBBBBBBPeriodic ,ocation .pdate Ti"e)

!f the i"plicit detach ti"e is set longer than the periodic location update ti"e6 and the subscriber has initiated the periodic location update 1ithin the set ti"e6 the i"plicit detach 1ill not be triggered. In this case= the IMSI )etach "ill the 0erio)ic location u0)ate "ithin the i70licit )etach ti7e& e triggere) onl5 "hen the su scri er 7o1es into a no/signal area an) )oes not 7a9e

*!!. &?plicit !MS! etach


The MS 1ill initiate the !MS! detach procedure 1hen it is being po1ered off. *,R 1ill then "ar4 the !MS! as detached to indicate that the MS is inacti0e. Figure $&$ sho"s the eB0licit )etach 0roce)ure&
MS U7 3SS $&IMSIO)etach 83 7essage *&O+etac9 IMSI 3& Purging co77an) ;to release resources< .& Purging co70lete) A MS# 3 C8(

Figure 1.1 EB0licit IMSI )etach 0roce)ure $< MS sen)s the AIMSI +etachA 7essage "hich re?uires no res0onse= an)

Hua"ei Technologies Pro0rietar5 .6

Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter

#ha0ter $% Signaling Proce)ures

a an)ons the ra)io connection& *< 3< C8( recei1es the 7essage an) set the MS status to AIMSI )etache)A& MS# releases the relate) resources an) the IMSI )etach is co70lete)&

1.7.2 MaCor Procedures


The 7a:or 0roce)ure o! location 7anage7ent is the location u0)ate& There are different 4inds of location updates = inclu)ing nor"al location update= periodic location update6 !MS! attach and co"bined Routing (rea-,ocation (rea %R(-,() update.

*!!!. #or"al ,ocation .pdate


I! an MS recei1es= "hen eing 0o"ere) on or is 7o1ing= a 8ocation Area I)entit5

;8AI< )i!!erent !ro7 the one store) in itsel!= the MS "ill sen) the location u0)ate re?uest to the net"or9 to u0)ate the 8AI& Accor)ing to "hether or not the ne" 8AI shares the sa7e MS#FC8( "ith the ol) 8AI an) "hether or not IMSI is in1ol1e)= the location u0)ate is classi!ie) into the !ollo"ing three 9in)sG

The location update 1ithin the sa"e MSC-*,R area %onl' *,R is in0ol0ed)
MS 3SS

MS#

C8(

8O#ATIO,>UP+ATI,'>(EDUEST

MAP>UP+ATE>8O#ATIO,>A(EA MAP_AUTHENTICATE MAP_AUTHENTICATE ack MAP_SET_CIPHERING_MODE MAP>UP+ATE>8O#ATIO,>A(EA

8O#ATIO,>UP+ATI,'>A##EPT

ac9
MAP_FORW._NEW_TMSI ack

Figure 1.1 8ocation u0)ate "ithin the sa7e MS#FC8( area ;onl5 C8( is in1ol1e)< $< MS sends to MSC the A,ocation updating re>uestA "essage6 1hich includes the TMS!-!MS! and ,(! of the MS and indicates that it is a nor"al location update. *< 3< .< MSC sends the A.pdate location areaA "essage to *,R. *,R initiates the authentication and encr'ption procedures. These procedures are optional. *,R updates the ,( infor"ation of the MS6 stores the ne1 ,(! and sends to MSC the A.pdate location area ac4A "essage.

Hua"ei Technologies Pro0rietar5 %0

Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter

#ha0ter $% Signaling Proce)ures

%< 2<

MSC sends to the MS the A,ocation updating acceptA "essage6 1hich contains the TMS!. MSC releases the channel resources and the location update is co"pleted.

#ote$ The italiciHe) o0erations are o0tional&

The inter MSC-*,R location update %the subscriber data cannot be obtained fro" P*,R)

The MS 7o1es !ro7 8AI/$ in MS#/A to 8AI/* in MS#/3& The MS 1ill use the !MS! to initiate the location update if it enters a ne1 *,R6 registers for the first ti"e6 or the related net1or4 data are lost.
A MS 3SS MS#/3 3 C8(/3 ' PC8( 8O#ATIO,>UP+ATI,' >(EDUEST MAP>UP+ATE> 8O#ATIO,>A(EA MAP>UP+ATE>8O#ATIO, MAP>#A,#E8> 8O#ATIO, MAP>#A,#E8> 8O#ATIO, ac9 + + H8(

MAP>I,SE(T>SU3S#(I3E(>+ATA MAP>I,SE(T>SU3S#(&>+ATA ac9c

MAP>UP+ATE>8O#ATIO, ac9 MAP>UP+ATE> 8O#ATIO,>UP+ATI,' >A##EPT 8O#ATIO,>A(EA ac9

Figure :.1 !nter MSC-*,R location update %!MS! updating< -< MS 7o1es to the 8A ;8AI/*< in MS#/3= 7onitors the ne" 8A in!or7ation on the 3roa)cast #ontrol #hannel ;3##H<= an) !in)s that it is )i!!erent !ro7 the 8A ;8AI/$< in!or7ation in the SIM car)& 4< MS sends to MSC9/ the A,ocation updating re>uestA "essage6 1hich includes the !MS!.

Hua"ei Technologies Pro0rietar5 %$

Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter

#ha0ter $% Signaling Proce)ures

6<

C8(/3 sen)s the 7essage AU0)ate locationA on + inter!ace& 7essage= PC8( )eletes all the in!or7ation o! this MS an) sen)s to H8( the A#ancel location ac9A 7essage&

$0< H8( sen)s to PC8( the A#ancel locationA 7essage& A!ter recei1ing this

$$< H8( inserts the su scri er )ata in C8(/3= "hich registers the su scri0tion in!or7ation relate) to this MS= inclu)ing IMSI an) 8AI& $*< H8( sen)s ac9 to MS#/3 the AU0)ate location ac9A 7essage= 1hich includes the +,R #o. $3< MSC9/ sends to MS the A,ocation updating acceptA "essage to infor" it to "odif' the ,(! in S!M card. $.< SIM car) sen)s the location u0)ate ac9no"le)ge7ent& ,ocation update resultsG $< *< 3< .<

The ,(! in S!M card is changed to ,(!92. The current location infor"ation of this MS is registered in +,R6 including MSC9/-*,R9/ #o. The subscriber data6 location infor"ation and status infor"ation are stored in *,R9/. The data of this subscriber in P*,R is deleted co"pletel'.

!nter MSC-*,R location update %*,R6 +,R and TMS! are in0ol0ed)

The MS 7o1es !ro7 8AI/$ in MS#/A to 8AI/* in MS#/3 ;IMSI can e use) to o tain su scri er )ata !ro7 PC8(<&
A
MS 3SS MS#

3
C8(

+
H8(

'
PC8(

8O#ATIO,>UP+ATI,' >(EDUEST

MAP>UP+ATE> 8O#ATIO,>A(EA MAP>SE,+>I+E,TIFI#ATIO, MAP>SE,+>I+E,TIFI#ATIO, ac9 MAP>UP+ATE>8O#ATIO, MAP>#A,#E8> 8O#ATIO, MAP>#A,#E8> 8O#ATIO, ac9 MAP>I,SE(T>SU3S#(I3E(>+ATA MAP>I,SE(T>SU3S#(&>+ATA ac9

MAP>UP+ATE>8O#ATIO, ac9 8O#ATIO,>UP+ATI,' >A##EPT MAP>UP+ATE> 8O#ATIO,>A(EA ac9

Figure 8.1 !nter MSC-*,R location update %TMS! updating<

Hua"ei Technologies Pro0rietar5 %*

Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter

#ha0ter $% Signaling Proce)ures

%<

When the MS enters a ne" 8A ;C8(/3<= it con)ucts location update 1ith the TMS! assigned b' the P*,R& In this case= C8(/3 7ust get the IMSI o! the MS !ro7 the PC8( in or)er to get the H8( a))ress o! this MS& There!ore= C8(/3= PC8( an) H8( "ill e in1ol1e) in this location u0)ate&

2<

C8(/3 7ust get the IMSI !ro7 the PC8(& EBce0t !ro7 that= this 0roce)ure is the sa7e as the one )escri e) a o1e&

!D. Periodic ,ocation .pdate


When the MS su))enl5 enters a no/signal area= or is su))enl5 0o"ere) )o"n= the MS "ill )etach !ro7 the net"or9 e!ore it can sen) the A(I83/MM IMSI )etachA 7essage& In this case= it is i70ossi le !or C8( to 7ar9 the IMSI as )etache)& I! this MS is calle)= the circuit resources an) ra)io resources "ill e "aste)& The solution to this 0ro le7 is the 0erio)ic location u0)ate& The MS is re?uire) to u0)ate its location 0erio)icall5 ;!or eBa70le= once e1er5 30 7inutes< regar)less o! "hether or not it has entere) a ne" 8A& The *,R 1ill set the !MS! as detached if the MS does not update its location 1hen the ti"e is due & The 0erio) can 7anuall5 set !ro7 2 7inutes to *. hours= or as in!inite ;no 0erio)ic location u0)ate<& !n MS2FTD7EEE6 the !MS! detach ti"e is set in *,R & When the detach ti"e is due6 the MS 1ill be regarded as ha0ing been shut do1n6 and *,R 1ill "ar4 it as detached& The ti"e for the periodic location update is set in /SC-R#C & The IMSI )etach ti7e set in C8( an) the 0erio)ic location u0)ate ti7e set in 3S#F(,# are )eter7ine) ase) on the net"or9 0lanning& The setting o! the 0erio) !or 0erio)ic location u0)ate shoul) also ta9e into consi)eration the ele7ents such as net"or9 ?ualit5= signaling lin9 occu0anc5= an) so on& I! the 0erio) is too short= 7uch o! the signaling lin9 resources an) ra)io resources "ill e occu0ie) 5 0erio)ic location u0)ate& The o1erall connecte) ratio "ill there!ore e a!!ecte)& I! the 0erio) is too long= the ra)io resources an) circuits 7a5 also e "aste)& Therefore6 the period of the periodic location update is the balanced result of Fualit' of Ser0ice %FoS) and net1or4 resource. Through the 0erio)ic location u0)ate= the "aste o! circuitFra)io resources )ue to the )ata inconsistenc5 a!ter the acti1eFstan) 5 s"itcho1er o! the H8(FC8( )ata ase can also e a1oi)e)& The 0roce)ure o! 0erio)ic location u0)ate is the sa7e as that o! the nor7al location u0)ate& e

D. !MS! (ttach
The Mobile Ter"inated Call %MTC) 1ill be i"possible 1hen the MS is po1ered do1n. +o1e0er6 the circuit bet1een the calling part' and the destination MSC 1ill still be set up and the called MS 1ill be paged if the MS is not "ar4ed as detached. The circuit-radio resources are 1asted 1ithout "a4ing an' profit for

Hua"ei Technologies Pro0rietar5 %3

Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter

#ha0ter $% Signaling Proce)ures

the operator. The !MS! attach-detach procedure is designed to sol0e the proble". In C8(= there is an attachF)etach !lag !or IMSI& When the MS is a1aila le= the !lag is set as AIMSI attache)A& Other"ise= it is set as AIMSI )etache)A& When the MS is po1ered do1n nor"all'= the MS "ill sen) the A(I83/MM IMSI )etachA 7essage to MS#= "hich "ill 7ar9 the MS as AIMSI )etache)A& When the MS enters the acti0e status again= an) i! it is in a ne" 8A= the nor7al location u0)ate 0roce)ure "ill e 0er!or7e)& I! it is still in the ol) 8A= the IMSI attach 0roce)ure as sho"n in Figure $&$ "ill e initiate) ;this 0roce)ure is onl5 a00lica le to the situation that the MS "as 7ar9e) as AIMSI )etache)A<&
Uu UE ;IMSI attach< .& 8ocation u0)ate acce0t ;access %& Purging co77an) ;to ac9no" le)g7ent< release resources< 2& Purging co70lete) (,S (A,AP Iu MS# MAP 3

C8( 8AIn/8Alo ;"hich 7eans no location u0)ate& Other" is e= u0)ate location 7essage "ill e sent&

$&8ocation u0)ate re?uest 83PQRS *& Access IMSI ;attach IMSI< 3&IMSI access con!ir7

Figure 1.1 IMSI attach 0roce)ure $< *< MSFUE sen)s the A8ocation u0)ating re?uestA 7essage= "hich in)icates that the location update t'pe is the !MS! attach. The !ollo"ing 0roce)ures are the sa7e as the location u0)ate "ithin the sa7e MS#FC8( area

D!. Co"bined R(-,( .pdate


$< (elate) conce0ts

8AG An area in "hich the MSFUE 7a5 roa7 "ithout u0)ating the location registers in 'SMFW#+MA net"or9& A 8A consists o! one or 7ore cells& (AG In 'P(S net"or9= e1er5 8A is )i1i)e) into se1eral (As& Each (A consists o! se1eral cells& 'P(S attachG A 0roce)ure that 'P(S su scri ers attach to the 'P(S net"or9 an) the su scri er in!or7ation is store) in Ser1ing 'P(S Su00ort ,o)e ;S'S,<& #o7 ine) (AF8A location u0)ate "ith IMSI attachG The 'P(S su scri ers trans7it the su scri er in!or7ation through the 's inter!ace ; et"een S'S, an) MS#< to MS#FC8( through the 'P(S net"or9 e?ui07ent )uring the co7 ine) (AF8A location u0)ate= so as to realiHe the attach to the 'SM net"or9& 8A U0)ate !ollo"e) 5 (A u0)ateG The 'P(S su scri ers trans7it the 8A u0)ate in!or7ation through 's inter!ace to MS#FC8( through S'S, )uring the co7 ine)

Hua"ei Technologies Pro0rietar5 %.

Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter

#ha0ter $% Signaling Proce)ures

(AF8A location u0)ate= so as to co70lete the 8A u0)ate 0roce)ure& *< Proce)ures oth #ircuit

I! the net"or9 is con!igure) "ith 's inter!ace= an) the MS su00orts S"itche) ;#S< an) Pac9et S"itche) ;P#< ser1ices&

The co7 ine) (AF8A u0)ate 0roce)ure "ill e 0er!or7e) in the !ollo"ing casesG

The MS enters a ne" (AJ The '(PS attache) MS initiates the IMSI attachJ The MS initiates 'P(S attach an) IMSI attach concurrentl5& e set u0& Each "ill 9ee0 the Integrate) Ser1ices et"een

The S'S,/C8( connection "ill

+igital ,et"or9 ;IS+,< nu7 er o! the other& In S'S,= a 7a00ing ta le

(outing Area I)entit5 ;(AI< an) C8( shoul) e create)= so that S'S, can !in) the corres0on)ing C8( "hen correlation is nee)e)& The co7 ine) (AF8A u0)ate !ul!ills the (A an) 8A u0)ates inter!ace resource& The nor7al 0roce)ure in co7 ine) (AF8A u0)ate is sho"n in Figure *&$& The )otte) lines re0resent o0tional 0roce)ures&
MS S'S, MS#FC8( H8(

5 using onl5 one ra)io inter!ace& It sa1es 7uch ra)io

$&(outing Area U0)ate (e?uest

*&8ocation U0)ate (e?uest 3& U0)ate 8ocation

.&Insert Su scri er +ata

%&Insert Su scri er +ata Ac9 2&U0)ate 8ocation Ac9 -&8ocation U0)ate Acce0t 4&(outing Area U0)ate Acce0t 6&(outeing Area U0)ate #o70lete $0&TMSI (eallocation #o70lete

Figure 2.1 ,or7al 0roce)ure o! co7 ine) (AF8A u0)ate 3< .< The MS sen)s the (A u0)ate re?uest to S'S, to initiate the co7 ine) (AF8A u0)ate& S'S, gets the location u0)ate t50e !ro7 the recei1e) 7essage& I! the location u0)ate t50e is the A#o7 ine) (AF8A location u0)ate "ith IMSI attachA= or the A8A u0)ate !ollo"e) 5 (A u0)ateA= S'S, "ill get the C8( ,o& !ro7 the (AI/

Hua"ei Technologies Pro0rietar5 %%

Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter

#ha0ter $% Signaling Proce)ures

C8( 7a00ing ta le an) sen) the location u0)ate re?uest to C8(& S'S, 0er!or7s the (A u0)ate 0roce)ure at the sa7e ti7e& %< C8( )eter7ines "hether or not to sen) the location u0)ate re?uest to H8( ase) on the location u0)ate t50e ;containe) in the 7essage it recei1es< an) the MS in!or7ation store) in itsel!& I! 5es= C8( sen)s the location u0)ate re?uest to H8(& C8( stores or u0)ates the S'S, ,o& at the sa7e ti7e& 2< -< Proce)ures 3= .= % an) 2 are the sa7e as those in the none/'P(S location u0)ate& See the inter MS#FC8( location u0)ate 0roce)ure& C8( returns the A8ocation u0)ate acce0tA 7essage to S'S, a!ter the location u0)ate is co70lete)& I! the TMSI nee)s to e re/allocate)= C8( "ill sen) the allocate) TMSI to S'S, in the A8ocation u0)ate acce0tA 7essage& 4< 6< On recei0t o! the A8ocation u0)ate acce0tA 7essage= i! the (A u0)ate is also success!ul= S'S, "ill sen) to the MS the A(A u0)ate acce0tA 7essage& The MS returns to S'S, the A(A u0)ate co70leteA 7essage a!ter recei1ing the A(A u0)ate acce0tA 7essage& $0< I! the TMSI is re/allocate) 5 the C8( )uring the co7 ine) (AF8A u0)ate= S'S, "ill return to C8( the ATMSI reallocation co70leteA 7essage&

1.7.7 +ando0er
D!!. 20er0ie1
+uring the ser1ice access or an ongoing session= the MSFUE 7a5 7o1e !ro7 one cell to another& In such case= the change o! the ser1ing cell eco7es a 1er5 i70ortant !unction o! 7o ile co77unication s5ste7& The han)o1er !unction is there!ore 0ro1i)e)= "hich )eter7ines )irectl5 the s0ectru7 utiliHation an) DoS& The asic 0ara7eters in the han)o1er o0eration inclu)e the han)o1er )ecision ;"hen to 0er!or7 han)o1er< an) Ser1ice Area I)entit5 ;SAI< selection& To ensure that the current con1ersation "ill not e interru0te)= the han)o1er is con)ucte) "hen the MSFUE 7o1es out o! the current cell& To ensure relia le ser1ice ?ualit5= the han)o1er is con)ucte) "hen the MSFUE changes ser1ing cell to a1oi) strong inter!erence in the current cell= or "hen the A0re!erre) cellA is congeste)& +i!!erent han)o1er )ecision 7etho)s are a)o0te) !or )i!!erent han)o1er 0ur0oses& A han)o1er !or the 0ur0ose o! no con1ersation interru0tion is )eter7ine) on the asis o! u0lin9F)o"nlin9 trans7ission ?ualit5 ;such as trans7ission 3it Error (ate= attenuation an) e)ge trans7ission )ela5<& To get such 1alues= MSFUE an) the 3ase Transcei1er Station ;3TS<F,o)e3 "ill regularl5 7easure the u0lin9F)o"nlin9 trans7ission ?ualit5 an) recei1ing le1el& The MSFUE "ill sen) the recor)e) result to the 3TSF,o)e3 t"ice a secon)& In the han)o1er )ue to cell congestion= the )ecision is 7a)e on the asis o! the current loa) o! each 3TS= "hich is a1aila le at onl5 MS# an) (,#& In this 9in) o! han)o1er= a certain nu7 er o! MSFUEs ;uns0eci!ie)< "ill e han)e) o1er to the neigh or cell "ith relati1el5 less tra!!ic& There!ore= such han)o1er is )eter7ine) also

Hua"ei Technologies Pro0rietar5 %2

Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter

#ha0ter $% Signaling Proce)ures

ase) on other )ecision 7etho)s an) corres0on)ing 7easure7ent results&

D!!!. Classification
There are 7an5 han)o1er causes& Accor)ing to the 7o ile co77unication s5ste7 that the MSFUE accesses a!ter the han)o1er= the han)o1er has the !ollo"ing 9in)sG $< Intra/s5ste7 han)o1erG Intra/UMTS han)o1er= that is= the han)o1er et"een (a)io ,et"or9 S5ste7s ;(,S< "ithin an UMTS& Intra/'SM han)o1er is re!erre) to as the han)o1er et"een 3ase Station Su s5ste7s ;3SS< "ithin a 'SM& *< Inter/s5ste7 han)o1erG The han)o1er "hen a UMTS su scri er 7o1es et"een 3' an) *' net"or9s& To e s0eci!ic= this 9in) o! han)o1er inclu)es the UMTS/ 'SM han)o1er an) the 'SM/UMTS han)o1er& The 0recon)ition !or the inter/ s5ste7 han)o1er is that the UMTS (,# I+ an) the 'SM cell I+ are 7utuall5 recogniHa le in the t"o s5ste7s& At the sa7e ti7e= the t"o s5ste7s shall su00ort the con1ersion o! the ser1ice ?ualit5 0ara7eters et"een the7 ;that is= the con1ersion et"een *' channel t50e an) 3' DoS<& The ter7inalNs su00ort ;such as )ual/7o)e MSFUE< is also nee)e)& In ter7s o! the e?ui07ent that 7a5 !ollo"ing 9in)s o! han)o1ersG $< Intra/(,S han)o1erG This 0roce)ure )oes no in1ol1e the #,= an) is trans0arent to the u00er/le1el #,& The han)o1er et"een (,#s re?uires the su00ort o! lur inter!ace& *< Intra/MS# han)o1erG The han)o1er et"een (,#sF3S#s ;inclu)ing (,#/(,#= 3S#/3S# an) (,#/3S#< "ithin an MS#& This 9in) o! han)o1er nee)s the su00ort o! MS#& 3< Inter/MS# han)o1erG The han)o1er et"een (,#sF3S#s that elong to )i!!erent MS#s& This 9in) o! han)o1er in1ol1es t"o or three MS#s& This 9in) o! han)o1er can e su /)i1i)e) into three 9in)sG

e in1ol1e) in the han)o1er= there are the

3asic han)o1erG The MSFUE is han)e) o1er !ro7 a controlling MS# ;MS#/A< to another MS# ;MS#/3<& Su se?uent han)o1er ac9 to MS#/AG The MSFUE is han)e) ac9 !ro7 MS#/3 to MS#/A a!ter the asic han)o1er& Su se?uent han)o1er to thir)/0art5 MS#G The MSFUE is han)e) o1er !ro7 MS#/ 3 to a thir) MS# ;MS#/3N< a!ter the asic han)o1er& ehin) are the sa7e= as sho"n in

Whate1er the han)o1er t50e is= the 0rinci0les Figure 3&$&

Hua"ei Technologies Pro0rietar5 %-

Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter

#ha0ter $% Signaling Proce)ures

Original net"or9

Han)o1er 0oint

,e" net"or9

Han)o1er re?uest Esta lish ne" 0ath Path esta lishe) Instruct MSFUE to start han)o1er Han)o1er co77an) UE re?uests to access
UE accesses ne" 0ath

Assign an) acti1ate ne" channel

(elease original 0ath

Figure 7.1 Han)o1er 0rinci0les The han)o1er 0oint 7a5 )i!!er in )i!!erent han)o1er t50es& In intra/(,S han)o1er= the han)o1er 0oint is a (,#& In intra/MS# han)o1er= the han)o1er 0oint is MS#& In inter/ MS# han)o1er= there are t"o han)o1er 0ointsG MS#/A an) MS#/3&

1.7.8 !ntra9.MTS +ando0er


As 7entione) a o1e= the intra/UMTS han)o1er is the han)o1er et"een (,Ss "ithin the UMTS ;!ro7 one 3' ser1ice area to another 3' ser1ice area<& Accor)ing to the 0osition o! the target 3' SAI= the intra/UMTS han)o1er is )i1i)e) into intra/MS# han)o1er an) inter/MS# han)o1er& The later can e su /)i1i)e) into asic han)o1er= su se?uent han)o1er ac9 to MS#/A an) su se?uent han)o1er to thir)/0art5 MS#&

D!*. !ntra9MSC +ando0er


In 7ost cases= the UMTS UE 7o1es !ro7 one 3' ser1ice area to another )uring a session& I! the Ser1ing (,# ;S(,#< o! this UE !in)s that 7ore relia le ser1ice is a1aila le in the ne" ser1ice area= it "ill )eci)e to initiate the han)o1er an) change the S(,# o! this UE& Figure $&$ sho"s the intra/MS# han)o1er 0roce)ure&

Hua"ei Technologies Pro0rietar5 %4

Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter

#ha0ter $% Signaling Proce)ures

UE (,S/A
Iu/(elocation/(e?uire) Iu/(elocation/(e?uest Iu/(elocation/(e?uest/Ac9 Iu/(elocation/#o77an) ((#/HO/#o77an) Iu/(elocation/+etect Iu/(elocation/#o70lete Iu/ (elease/#o77an) Iu/ (elease/#o70lete
+etection o! UE in

UE 3'> MS#/A (,S/3

target(,S
((#/HO/#o70lete

Figure 1.1 Intra/MS# han)o1er 0roce)ure $< The access net"or9 (,S/A o! the UE 7a9es the )ecision to initiate the han)o1er 0roce)ure& It sen)s to MS# ;MS#/A< the han)o1er re?uest ;Iu/ (elocation/(e?uire)<& Inclu)e) in the han)o1er re?uest is the a))ress in!or7ation o! the eB0ecte) access net"or9 (,S/3= ter7e) as Target (,S ;T(,S<& *< On recei0t o! the re?uest= MS#/A chec9s in the corres0on)ing ta le& I! the T(,S is !oun) to 3< e its su or)inate (,S= MS#/A "ill generate the corres0on)ing han)o1er re?uest 7essage ;Iu/(elocation/(e?uest< an) sen) it to (,S/3& On recei0t o! the 7essage !ro7 MS#= (,S/3 assigns the necessar5 resource !or the UE to access accor)ing to the corres0on)ing re?uire7ent ;inclu)e) in the cells o! the 7essage<= an) 0er!or7s DoS con!iguration& The relate) resources "ill e assigne) at the sa7e ti7e at the MS#/A& .< A!ter assigning the relate) resources= (,S/3 sen)s to MS#/A the AIu/ (elocation/(e?uest/Ac9A 7essage= in)icating that the resources assign7ent is co70lete) an) the (,S is rea)5 !or the UE to access& %< On recei0t o! the ac9no"le)ge7ent !ro7 (,S/3= MS#/A sen)s the AIu/ (elocation/#o77an)A 7essage to (,S/A& (,S/A in turn sen)s it in the 7essage A((#/HO/#o77an)A to the UE= as9ing it to access the ne" ser1ice area& 2< (,S/3 sen)s to MS#/A the 7essage AIu/(elocation/+etectA "hen it )etects that the UE is accessing& A!ter the UE access= (,S/3 sen)s to MS#/A the 7essage AIu/(elocation/#o70leteA= in)icating that it is a le to 0ro1i)e ser1ice !or the UE& -< A!ter recei1ing the han)o1er co70lete 7essage !ro7 (,S/3= MS#/A sen)s the 7essage AIu/(elease/#o77an)A to (,S/A= as9ing it to release the relate) resources& A!ter releasing the resource= (,S/A returns the 7essage AIu/ (elease/#o70leteA to MS#/A= en)ing the han)o1er 0roce)ure&

Hua"ei Technologies Pro0rietar5 %6

Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter

#ha0ter $% Signaling Proce)ures

#ote$ The (,S/3 a!ter the han)o1er eco7es the S(,S o! that UE& I! han)o1er occurs again= the (,S/3 "ill 0la5 the role o! (,S/A then&

D*. !nter9MSC +ando0er

3asic han)o1er

When an UE in an ongoing session 7o1es to another 3' ser1ice area o! a )i!!erent MS#= the han)o1er "ill in1ol1e t"o MS#s& The ne" cell 0ro1i)es ra)io resources !or the UE= :ust as "hat ha00ens in the intra/MS# han)o1er& Ho"e1er= in the inter/MS# han)o1er= an inter/MS# circuit 7ust e set u0 et"een the t"o MS#s !or the call& Figure $&$ sho"s the asic inter/MS# han)o1er 0roce)ure&
(,S/A 3'>MS#/A 3'>MS#/3 (,S/3 C8(/3

IU/(E8O#/(EDUI(E+ MAP/Allocate/Han)o1er/,u7 er re?& MAP/Pre0/Han)o1er re?& IU/(E8O#/(EDUEST IU/(E8O#/(EDUEST/A#E MAP/Pre0/Han)o1er res0& MAP/Sen)/Han)o1er/(e0ort re?& IAM
IU/(E8O#/#OMMA,+

MAP/Sen)/Han)o1er/(e0ort res0& ;$<

A#M IU/(E8O#/#OMP8ETE

MAP/Process/Access/Sig re?&IU/(E8O#/+ETE#T
IU/(E8/#M+F#OM

MAP/Sen)/En)/Signal re?&

A,SWE( En) o! call (E8EASE MAP/Sen)/En)/Signal res0&

,OTE $G #an e sent at an5 ti7e a!ter the rece0tion o! IAM

Figure 1.1 Inter/MS# han)o1er 0roce)ure $< The access net"or9 (,S/A o! the UE 7a9es the )ecision to initiate the han)o1er 0roce)ure& It sen)s to its MS# ;MS#/A< the han)o1er re?uest ;Iu/ (elocation/(e?uire)<& Inclu)e) in the han)o1er re?uest is the a))ress in!or7ation o! the eB0ecte) access net"or9 (,S/3= ter7e) as Target (,S ;T(,S<& *< On recei0t o! the re?uest= MS#/A chec9s in the corres0on)ing ta le& I! the T(,S is !oun) to e connecte) to another MS# ;MS#/3<= MS#/A "ill 0ac9 the han)o1er re?uest into a certain cell= 0ut the cell into the corres0on)ing MAP 7essage ;MAP/Pre0are/Han)o1er re?<= an) sen) it to MS#/3 through MAP signaling& 3< On recei0t o! the MAP/Pre0are/Han)o1er (e?= MS#/3 generates the corres0on)ing 7essage AIu/(elocation/(e?uestA an) sen)s it to the T(,S&

Hua"ei Technologies Pro0rietar5 20

Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter

#ha0ter $% Signaling Proce)ures

.<

U0on the rece0tion o! the han)o1er re?uest= (,S/3 assigns the corres0on)ing resources !or the UE& MS#/3 also assigns the relate) resources at the sa7e ti7e& A!ter assigning the resources= (,S/3 sen)s to MS#/3 the 7essage AIu/ (elocation/(e?uest/Ac9A& +uring or a!ter assigning the resources= MS#/3 "ill also sen) to its C8( ;C8(/3< the 7essage AMAP/Allocate/Han)o1er/,u7 er re?&A= as9ing !or the han)o1er nu7 er& C8(/3 "ill sen) the assigne) han)o1er nu7 er to MS#/3 in the 7essage AMAP/Sen)/Han)o1er/(e0ort re?&A&

%<

A!ter recei1ing the ac9no"le)ge7ent !ro7 (,S/3 an) the han)o1er nu7 er= MS#/3 sen)s to MS#/A the 7essage AMAP/Pre0/Han)o1er/res0A= in)icating that it is rea)5 !or the han)o1er& Inclu)e) in this 7essage is the han)o1er nu7 er= "ith "hich MS#/A can !in) the route to MS#/3&

2<

MS#/A then sen)s to MS#/3 the AInitial A))ress Message ;IAM<A to re?uest !or the corres0on)ing trun9 circuit& A!ter occu05ing the trun9 circuit= MS#/3 returns to MS#/A the AA))ress #o70lete Message ;A#M<A& The occu0ation o! the trun9 circuit is then co70lete)&

-<

A!ter the setu0 o! the circuit= MS#/A generates the 7essage AIu/(eloc/ #o77an)A accor)ing to the in!or7ation eBtracte) !ro7 the 7essage AMAP/Pre0/ Han)o1er/res0A= an) sen)s it to (,S/A= as9ing the UE to start the han)o1er&

4<

The UE then starts to access (,S/3& U0on the )etection o! UE access= (,S/3 sen)s to MS#/3 the 7essage AIu/(eloc/+etectA& MS#/3 0ac9s the 7essage into the MAP signaling AMAP/Process/Access/Sig re?A an) sen)s to MS#/A& MS#/3 then starts "aiting !or the han)o1er co70lete 7essage& On recei0t o! the corres0on)ing MAP signaling= MS#/A also starts "aiting !or the han)o1er co70lete 7essage&

6<

A!ter the UE accesses (,S/3= (,S/3 sen)s the han)o1er co70lete 7essage to MS#/3= "hich "ill 0ac9 the 7essage into the MAP signaling AMAP/Sen)/En)/ Signal re?A an) sen) it to MS#/A& The MS#/3 then starts so7e 0ost/han)o1er o0erations= such as sen)ing the 7essage AAns"erA to the inter/MS# circuit&

$0< A!ter recei1ing the 7essage !ro7 MS#/3= MS#/A conclu)es that the han)o1er is co70lete)& It starts releasing the resources occu0ie) 5 that UE at (,S/A 5 sen)ing to the (,S/A the 7essage AIU/(E8/#M+A& (,S/A returns the 7essage AIU/(E8/#OMPA to MS#/A a!ter the releasing& The inter/MS# circuit "ill e 7aintaine) until the session is o1er& Then= MS#/A "ill release the circuit= use the MAP signaling AMAP/Sen)/En)/Signal res0A to noti!5 MS#/3 o! the release= an) sto0 the eBchange o! MAP signaling "ith MS#/3&

#ote$ An5ti7e a!ter recei1ing the IAM 7essage !ro7 MS#/A= MS#/3 can use the MAP signaling AMAP/Sen)/Han)o1er/(e0ort res0A to noti!5 C8(/3 to release the han)o1er nu7 er= so that it can e reuse) neBt ti7e&

Hua"ei Technologies Pro0rietar5 2$

Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter

#ha0ter $% Signaling Proce)ures

The (,S/3 a!ter the han)o1er eco7es the S(,S o! that UE& I! han)o1er occurs again= the (,S/3 "ill 0la5 the role o! (,S/A then&

Su se?uent han)o1er

In this han)o1er= the UE is han)e) o1er to another cell ;in a )i!!erent MS#< a!ter the asic han)o1er& The other MS# coul) e either o! the !ollo"ingG $< *< The MS#/A in the asic han)o1er& A ne" neigh or MS# other than the MS#/A& It is ter7e) here as MS#/3P or MS#/3N& The !irst 9in) o! han)o1er is 9no"n as the su se?uent han)o1er ac9 to MS#/A& The later is 9no"n as the su se?uent han)o1er to thir)/0art5 MS#&

Su se?uent han)o1er ac9 to MS#/A

As 7entione) a o1e= in this han)o1er= the UE is han)e) o1er !ro7 MS#/3 to MS#/A a!ter the asic han)o1er& Figure *&$ sho"s the 0roce)ure o! the su se?uent han)o1er ac9 to MS#/A&
(,S/3 3'>MS#/A 3'>MS#/3 Iu/(E8O#ATIO,/ (EDUI(E+ (,S/A C8(/3

MAP/Pre0/Su /Han)o1er re?& Iu/(E8O#ATIO,/ (EDUEST Iu/(E8O#ATIO,/ (EDUEST/A#E Iu/(E8O#ATIO,/ +ETE#T Iu/(E8O#ATIO,/ #OMP8ETE MAP/Pre0/Su /Han)o1er res0&

Iu/(E8O#ATIO,/ #OMMA,+

MAP/Sen)/En)/Signal res0& (elease

Iu/(E8EASE/ #M+F#OM

Figure 2.1 Proce)ure o! su se?uent han)o1er ac9 to MS#/A

#ote$ (,S/A re!ers the S(,S o! the UE= "hile (,S/3 is the target (,S o! the han)o1er&

3<

A!ter the asic han)o1er= the S(,S o! the UE ;(,S/A< 7a9es the )ecision to initiate the han)o1er again& It sen)s to MS#/3 the han)o1er re?uest AIu/ (elocation/(e?uire)A& Inclu)e) in the re?uest is the a))ress in!or7ation o! the eB0ecte) access net"or9 (,S/3 ;T(,S<&

.<

On recei0t o! the re?uest= MS#/3 chec9s in the corres0on)ing ta le& I! the T(,S

Hua"ei Technologies Pro0rietar5 2*

Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter

#ha0ter $% Signaling Proce)ures

is !oun) to

e connecte) to another MS#= MS#/3 "ill generate the

corres0on)ing MAP 7essage AMAP/Pre0are/Han)o1er re?A= an) sen) it to MS#/A through MAP signaling& %< On recei0t o! the han)o1er re?uest= the MS#/A !in)s that the T(,S is un)er its o"n control& MS#/A then generates an) sen)s the han)o1er re?uest AIu/ (elocation/(e?uestA to (,S/3& 2< On recei0t o! the 7essage !ro7 MS#= (,S/3 assigns the necessar5 resources !or the UE to access accor)ing to the re?uire7ent ;inclu)e) in the cells o! the 7essage<= an) 0er!or7s DoS con!iguration& The relate) resources "ill sen)s to MS#/A the 7essage AIu/(elocation/(e?uest/Ac9A& -< The MS#/A then generates an) sen)s the MAP 7essage AMAP/Pre0/Su / Han)o1er res0A to MS#/3 through the MAP signaling= in)icating that it is rea)5 !or the su se?uent han)o1er& 4< 6< MS#/3 then sen)s to (,S/A the han)o1er co77an) AIu/(elocation/#o77an)A= as9ing the UE to start han)o1er& The UE then starts to access (,S/3& U0on the )etection o! the access= (,S/3 sen)s to MS#/A the 7essage AIu/(elocation/+etectA& A!ter the access is co70lete)= (,S/3 sen)s to MS#/A the 7essage AIu/(elocation/#o70leteA= in)icating that the access is co70lete& $0< MS#/A sen)s to MS#/3 the 7essage AMAP/Sen)/En)/Signal res0A= in)icating that the su se?uent han)o1er is co70lete)& The MAP signaling eBchange et"een the t"o is then sto00e)& A!ter"ar)= MS#/A "ill release the trun9 circuit set u0 "ith MS#/3 )uring the asic han)o1er& $$< A!ter recei1ing the AMAP/Sen)/En)/Signal res0A= MS#/3 conclu)es that the han)o1er is co70lete)& It as9s (,S/A to release the resources occu0ie) 5 that UE& e assigne) at the sa7e ti7e at the MS#/A& A!ter assigning the resources= (,S/3

#ote$ The (,S/3 a!ter the han)o1er eco7es the S(,S o! that UE& I! han)o1er occurs again= the (,S/3 "ill 0la5 the role o! (,S/A then&

Su se?uent han)o1er to thir)/0art5 MS# asic

In this han)o1er= the UE is han)e) o1er !ro7 MS#/3 to MS#/3N a!ter the han)o1er& Figure $$&$ sho"s the 0roce)ure o! the su se?uent han)o1er to thir)/0art5 MS#&

Hua"ei Technologies Pro0rietar5 23

Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter

#ha0ter $% Signaling Proce)ures

(,S/3

(,S/3N 3'>MS#/3

3'>MS#/3N C8(/3

C8(/3N

3'>MS#/A

Iu/(E8O#ATIO,/ (EDUI(E+ MAP/Pre0/Su /Han)o1er re?& MAP/Pre0are/Han)o1er re?& Iu/(E8O#ATIO,/ (EDUEST Iu/(E8O#ATIO,/ MAP/Pre0are/Han)o1er res0& IAM A#M MAP/Pre0/Su /Ho res0& Iu/(E8O#ATIO,/#M+ Iu/(E8O#ATIO,/ +ETE#T MAP/Process/Access/Signalling re?& Iu/(E8O#ATIO,/ #OMP8ETE MAP/Sen)/En)/Signal re?& Ans"er (elease MAP/Sen)/En)/Signal res0& Iu/(E8EASE/#M+F#OM ;en) o! call< (elease (EDUEST/A#E MAP/Sen)/Han)o1er/(e0ort re?& MAP/Sen)/Han)o1er/(e0& res0& ;$< MAP/Allocate/Han)o1er/,u7 er re?&

MAP/Sen)/En)/Signal res0&

,OTE $G #an e sent at an5 ti7e a!ter the rece0tion o! IAM

Figure 11.1 Proce)ure o! su se?uent han)o1er to thir)/0art5 MS# $*< A!ter the asic han)o1er= the S(,S o! the UE ;(,S/A< 7a9es the )ecision to initiate the han)o1er again& It sen)s to MS#/3 the han)o1er re?uest AIu/ (elocation/(e?uire)A& Inclu)e) in the re?uest is the a))ress in!or7ation o! the eB0ecte) access net"or9 (,S/3N ;T(,S<& $3< On recei0t o! the re?uest= MS#/3 chec9s in the corres0on)ing ta le& I! the T(,S is !oun) to e connecte) to another MS#= MS#/3 "ill generate the corres0on)ing MAP 7essage AMAP/Pre0/Su /Han)o1er re?&A= an) sen) it to MS#/A through MAP signaling& $.< On recei0t o! the han)o1er re?uest= the MS#/A !in)s that the T(,S is in another MS# ;MS#/3N<& MS#/A then generates the 7essage AMAP/Pre0/Han)o1er re?A an) sen)s it to MS#/3N through the MAP signaling& $%< On recei0t o! the 7essage= MS#/3N generates the 7essage AIu/(elocation/ (e?uestA an) sen)s it to the T(,S&

Hua"ei Technologies Pro0rietar5 2.

Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter

#ha0ter $% Signaling Proce)ures

$2< U0on the rece0tion o! the han)o1er re?uest= (,S/3N assigns the corres0on)ing resources !or the UE& MS#/3N also assigns the relate) resources at the sa7e ti7e& A!ter assigning the resources= (,S/3N sen)s to MS#/3N the 7essage AIU/ (elocation/(e?uest/Ac9A& +uring or a!ter assigning the resources= MS#/3N "ill also sen) to its C8( ;C8(/3N< the 7essage AMAP/Allocate/Han)o1er/,u7 er re?A= as9ing !or the han)o1er nu7 er& C8(/3N "ill sen) the assigne) han)o1er nu7 er to MS#/3N in the 7essage AMAP/Sen)/Han)o1er/(e0ort re?A& $-< A!ter recei1ing the ac9no"le)ge7ent ;!ro7 (,S/3N< an) the han)o1er nu7 er= MS#/3N sen)s to MS#/A the 7essage AMAP/Pre0/Han)o1er/res0A= in)icating that it is rea)5 !or the han)o1er& Inclu)e) in this 7essage is the han)o1er nu7 er= "ith "hich MS#/A can !in) the route to MS#/3N& $4< MS#/A then sen)s to MS#/3N the Initial A))ress Message ;IAM< to re?uest !or the corres0on)ing trun9 circuit& A!ter occu05ing the trun9 circuit= MS#/3N returns to MS#/A the A))ress #o70lete Message ;A#M<& MS#/A then generates the 7essage AMAP/Pre0/Su /Han)o1er res0A an) sen)s it to MS#/3 through the MAP signaling= in)icating that it is rea)5 !or the su se?uent han)o1er& $6< MS3/3 then sen)s to (,S/A the han)o1er co77an) AIu/(elocation/#o77an)A= as9ing the UE to start han)o1er& *0< The UE starts to access (,S/3N& U0on the )etection o! the access= (,S/3N sen)s to MS#/3N the 7essage AIu/(elocation/+etectA& MS#/3N sen)s the 7essage to MS#/A in the signaling AMAP/Process/Access/Signal re?A an) "aits !or the han)o1er co70lete 7essage& A!ter the UE accesses (,S/3N= (,S/3N sen)s the han)o1er co70lete 7essage AIu/(elocation/#o70leteA to MS#/3N= "hich "ill sen) the 7essage to MS#/A in the MAP signaling AMAP/Sen)/En)/ Signal re?A& The MS#/3N then starts so7e 0ost/han)o1er o0erations= such as sen)ing the 7essage AAns"erA to the inter/MS# circuit& *$< On recei0t o! the AMAP/Sen)/En)/Signal re?A= MS#/A sen)s to MS#/3 the 7essage AMAP/Sen)/En)/Signal res0A= noti!5ing that the han)o1er has succee)e)= an) the resources occu0ie) circuit set u0 "ith MS#/3 )uring the 5 that UE can e release)& MS#/A also sto0s the eBchange o! MAP signaling "ith MS#/3= an) releases the trun9 asic han)o1er& MS#/3 initiates the Iu release 0roce)ure to release the relate) resources& The inter/MS# circuit "ill e 7aintaine) until the session is o1er& Then= MS#/A "ill release the circuit= use the MAP signaling AMAP/Sen)/En)/Signal res0A to noti!5 MS#/3N to release the relate) ra)io resources= an) sto0 the eBchange o! MAP signaling "ith MS#/3N&

Hua"ei Technologies Pro0rietar5 2%

Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter

#ha0ter $% Signaling Proce)ures

#ote$ The MS#/3N a!ter the han)o1er 0la5s the role o! MS#/3 )uring the asic inter/MS# han)o1er& I! han)o1er occurs again= the target MS# "ill 0la5 the role o! MS#/3N then&

1.7.5 !nter9S'ste" +ando0er


The inter/s5ste7 han)o1er is the han)o1er o! MSFUE !ro7 UMTS to 'SM= or !ro7 'SM to UMTS& To su00ort the inter/s5ste7 han)o1er= the 'SM s5ste7 shoul) e a le to recogniHe the (,# I+ o! UMTS= an) UMTS shoul) e a le to recogniHe the cell I+ o! 'SM& At the sa7e ti7e= the s5ste7s shoul) su00ort the con1ersion o! ser1ice ?ualit5 0ara7eters ;*' channel t50e an) 3' DoS< et"een the7& In ter7s o! the s5ste7= the inter/s5ste7 han)o1er is )i1i)e) into t"o t50esG The han)o1er !ro7 UMTS to 'SM an) the han)o1er !ro7 'SM to UMTS& Ho"e1er= there "ill e 7an5 7ore t50es i! the han)o1er 7o)es are consi)ere)G

Intra/MS# han)o1er !ro7 UMTS to 'SM Intra/MS# han)o1er !ro7 'SM to UMTS Inter/MS# han)o1er !ro7 UMTS to 'SM Inter/MS# han)o1er !ro7 'SM to UMTS Su se?uent han)o1er ac9 to MS#/A UMTS cell a!ter UMTS/'SM han)o1er Su se?uent han)o1er ac9 to MS#/A 'SM cell a!ter 'SM/UMTS han)o1er Su se?uent han)o1er to MS#/3N UMTS cell a!ter UMTS/'SM han)o1er Su se?uent han)o1er to MS#/3N 'SM cell a!ter 'SM/UMTS han)o1er

There are t"o 9e5 !actors in inter/s5ste7 han)o1erG First= The (,S o! UMTS shoul) e a le to recogniHe the 'SM cells= an) the 3SS o! 'SM shoul) su00ort e a le to recogniHe the UMTS cells& In a))ition= the MS# shoul) e ca0a le o! generating 7essages that oth UMTS an) 'SM cells= an)

7eet UMTS an) 'SM 0rotocols res0ecti1el5& Secon)= The MS# shoul) su00ort the con1ersion o! UMTS an) 'SM ser1ice ?ualit5 0ara7eters& To e 7ore s0eci!ic= the MS# shoul) e a le to con1ert an) 7a0 et"een the 'SM #hannel T50e an) the UMTS DoS= so that su scri ers can o tain ser1ices o! the sa7e ?ualit5 a!ter the han)o1er& The inter/s5ste7 han)o1er in1ol1es 0ri7aril5 the MS# a)a0tation !or UMTS an) 'SM access net"or9s& There!ore= !our asic inter/s5ste7 han)o1er 0roce)ures are )escri e) elo"& Other 0roce)ures are the co7 ination an) eBtension o! these !our asic 0roce)ures&

Hua"ei Technologies Pro0rietar5 22

Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter

#ha0ter $% Signaling Proce)ures

D*!. !ntra9MSC +ando0er fro" .MTS to GSM


Figure $&$ sho"s the 0roce)ure o! intra/MS# han)o1er !ro7 UMTS to 'SM&
UE (,S/A 3'>MS#/A
A/Han)o1er/(e?uest A/Han)o1er/(e?uest/Ac9 Iu/(elocation/#o77an) ((#/HO/#o77an) A/Han)o1er/+etect A/Han)o1er/#o70lete Iu/(elease/#o77an) Iu/(elease/#o70lete (I/HO/Access (I/HO/#o70lete

MS 3SS/3
Iu/(elocation/(e?uire)

Figure 1.1 Proce)ure o! intra/MS# han)o1er !ro7 UMTS to 'SM $< The access net"or9 (,S/A o! the MSFUE 7a9es the )ecision to initiate the han)o1er 0roce)ure& It sen)s to its MS# ;MS#/A< the han)o1er re?uest ;Iu/ (elocation/(e?uire)<& Inclu)e) in the han)o1er re?uest is the a))ress in!or7ation o! the eB0ecte) access net"or9 3SS/3= usuall5 the #ell 'lo al I+ ;#'I< o! the target cell& *< On recei0t o! the re?uest= MS#/A chec9s in the corres0on)ing ta le& I! the target cell is !oun) to e in the 3SS un)er its o"n control= MS#/A "ill generate the corres0on)ing 'SM han)o1er re?uest 7essage AA/Han)o1er/(e?uestA an) sen) it to 3SS/3& While structuring this 7essage= MS# 0er!or7s the 0rotocol inter"or9ing et"een UMTS an) 'SM s5ste7s& 3< On recei0t o! the 7essage !ro7 MS#= 3SS/3 assigns the necessar5 resources !or the MSFUE to access accor)ing to the corres0on)ing re?uire7ent ;inclu)e) in the cells o! the 7essage<= an) 0er!or7s channel selection to ensure the ser1ice ?ualit5& .< A!ter assigning the relate) resources= 3SS/3 sen)s to MS#/A the AA/Han)o1er/ (e?uest/Ac9A 7essage= in)icating that the resources assign7ent is co70lete) an) the 3SS is rea)5 !or the MSFUE to access& %< On recei0t o! the ac9no"le)ge7ent= MS#/A generates the UMTS han)o1er co77an) AIu/(elocation/#o77an)A an) sen)s the 7essage to (,S/A& (,S/A in turn sen)s it in the 7essage A((#/HO/#o77an)A to the MSFUE= as9ing it to access the ne" ser1ice area& In this 0rocess= so7e in!or7ation ;recogniHa le to (,S/A< use) to instruct the MSFUE to con)uct ra)io access "ill e carrie) in the 'SM 7essage AA/Han)o1er/(e?uest/Ac9A& Such in!or7ation is trans0arent to MS#& MS# :ust nee)s to 0ut the in!or7ation into UMTS han)o1er 7essage an) sen)s it to (,S/A&

Hua"ei Technologies Pro0rietar5 2-

Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter

#ha0ter $% Signaling Proce)ures

2<

3SS/3 sen)s to MS#/A the 7essage AA/Han)o1er/+etectA "hen it )etects that the MSFUE is accessing& A!ter the access= "hich "ill e re0orte) 5 the MSFUE= 3SS/3 sen)s to MS#/A the 7essage AA/Han)o1er/#o70leteA= in)icating that it is a le to 0ro1i)e ser1ice !or the MSFUE&

-<

A!ter recei1ing the han)o1er co70lete 7essage !ro7 (,S/3= MS#/A sen)s the 7essage AIu/(elease/#o77an)A to (,S/A= as9ing it to release the relate) resources& A!ter releasing the resource= (,S/A returns the 7essage AIu/ (elease/#o70leteA to MS#/A= en)ing the han)o1er 0roce)ure&

#ote$ The 3SS/3 a!ter the han)o1er eco7es the Ser1ing 3SS ;S3SS< o! that MS& I! han)o1er occurs again= the 3SS/3 "ill 0la5 the role o! 3SS/A then&

D*!!. !ntra9MSC +ando0er fro" GSM to .MTS


Figure $&$ sho"s the 0roce)ure o! intra/MS# han)o1er !ro7 'SM to UMTS&
MS 3SS/A
A/Han)o1er/(e?uire) Iu/(elocation/(e?uest Iu/(elocation/(e?uest/Ac9 A/Han)o1er/#o77an) (I/HO/#o77an) Iu/(elocation/+etect Iu/(elocation/#o70lete A/#lear/#o77an) A/#lear/#o70lete ((#/HO/#o70lete

UE 3'>MS#/A (,S/3

Figure 1.1 Proce)ure o! intra/MS# han)o1er !ro7 'SM to UMTS $< The access net"or9 3SS/A o! the MSFUE 7a9es the )ecision to initiate the han)o1er 0roce)ure& It sen)s to its MS# ;MS#/A< the han)o1er re?uest ;A/ Han)o1er/(e?uire)<& Inclu)e) in the han)o1er re?uest is the a))ress in!or7ation o! the eB0ecte) access net"or9 (,S/3= usuall5 the I+ o! the target (,#& *< On recei0t o! the re?uest= MS#/A chec9s in the corres0on)ing ta le& I! the target cell is !oun) to e in the (,S un)er its o"n control= MS#/A "ill generate the corres0on)ing UMTS han)o1er re?uest 7essage AIu/(elocation/(e?uestA an) sen) it to (,S/3& While structuring this 7essage= MS# 0er!or7s the 0rotocol inter"or9ing et"een UMTS an) 'SM s5ste7s& 3< On recei0t o! the 7essage !ro7 MS#= (,S/3 assigns the necessar5 resources

Hua"ei Technologies Pro0rietar5 24

Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter

#ha0ter $% Signaling Proce)ures

!or the MSFUE to access accor)ing to the re?uire7ent ;inclu)e) in the cells o! the 7essage<= an) 0er!or7s DoS con!iguration& .< A!ter assigning the relate) resources= (,S/3 sen)s to MS#/A the AIu/ (elocation/(e?uest/Ac9A 7essage= in)icating that the resources assign7ent is co70lete) an) the (,S is rea)5 !or the MSFUE to access& %< On recei0t o! the UMTS ac9no"le)ge7ent= MS#/A generates the 'SM han)o1er co77an) AA/Han)o1er/#o77an)A an) sen)s the 7essage to 3SS/A& 3SS/A in turn sen)s it in the 7essage A(I/HO/#o77an)A to the MSFUE= as9ing it to access the ne" ser1ice area& In this 0rocess= so7e in!or7ation ;recogniHa le to 3SS/A< use) to instruct the MSFUE to con)uct ra)io access "ill e carrie) in the UMTS 7essage AIu/(elocation/(e?uest/Ac9A& Such in!or7ation is trans0arent to MS#& MS# :ust nee)s to 0ut the in!or7ation into 'SM han)o1er 7essage an) sen)s it to 3SS/A& 2< (,S/3 sen)s to MS#/A the 7essage AIu/(elocation/+etectA "hen it )etects that the MSFUE is accessing& A!ter the access= (,S/3 sen)s to MS#/A the 7essage AIu/(elocation/#o70leteA= in)icating that it is a le to 0ro1i)e ser1ice !or the MSFUE& -< A!ter recei1ing the han)o1er co70lete 7essage !ro7 (,S/3= MS#/A sen)s the 7essage AA/#lear/#o77an)A to 3SS/A= as9ing it to release the relate) resources& A!ter releasing the resources= 3SS/A returns the 7essage AA/#lear/ #o77an)A to MS#/A= en)ing the han)o1er 0roce)ure&

#ote$ The (,S/3 a!ter the han)o1er eco7es the S(,S o! that MSFUE& I! han)o1er occurs again= it "ill 0la5 the role o! (,S/A then&

D*!!!. !nter9MSC +ando0er fro" .MTS to GSM


Figure $&$ sho"s the 0roce)ure o! inter/MS# han)o1er !ro7 UMTS to 'SM&

Hua"ei Technologies Pro0rietar5 26

Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter

#ha0ter $% Signaling Proce)ures

UEFMSF(,S/A 3'>MS#/A Iu/(E8O#ATIO,/ (EDUI(E+ MS#/3

3SS/3FMSFUE C8(/3

MAP/Pre0/Han)o1er re?&

MAP/Allocate/Han)o1er/,u7 er re?& A/HO/(EDUEST A/HO/(EDUEST/A#E

MAP/Pre0/Han)o1er res0& IAM Iu/(E8O#ATIO,/ #OMMA,+ Iu/(E8EASE/ #M+F#OM A,SWE( (E8EASE MAP/Sen)/En)/Signal res0& A#M MAP/Process/Access/Sig re?& MAP/Sen)/En)/Signal re?&

MAP/Sen)/Han)o1er/(e0ort re?& MAP/Sen)/Han)o1er/(e0ort res0& ;$<

A/HO/+ETE#T A/HO/#OMP8ETE

En) o! call

,OTE $G #an e sent at an5 ti7e a!ter the rece0tion o! IAM

Figure 1.1 Proce)ure o! inter/MS# han)o1er !ro7 UMTS to 'SM $< The access net"or9 (,S/A o! the MSFUE 7a9es the )ecision to initiate the han)o1er 0roce)ure& It sen)s to its MS# ;MS#/A< the han)o1er re?uest AIu/ (elocation/(e?uire)A& Inclu)e) in the han)o1er re?uest is the a))ress in!or7ation o! the eB0ecte) access net"or9 3SS/3= usuall5 the #'I o! the target cell& *< On recei0t o! the re?uest= MS#/A chec9s in the corres0on)ing ta le& I! the target 3SS is !oun) to e connecte) to another MS# ;MS#/3<= MS#/A "ill 0ac9 the han)o1er re?uest into a cell= 0ut the cell into the corres0on)ing MAP 7essage AMAP/Pre0are/Han)o1er re?A= an) sen) it to MS#/3 through the MAP signaling& In this 0roce)ure= MS#/A "ill 7a0 the UMTS 7essage into 'SM 7essage "hile 0ac9ing the han)o1er re?uest= so as to 7a9e the 7essage eco7e recogniHa le to 'SM s5ste7& 3< .< On recei0t o! the 7essage= MS#/3 generates the 7essage AA/Han)o1er/ (e?uestA an) sen)s it to the target 3SS& 3SS then assigns the corres0on)ing resources !or the MSFUE& MS#/3 also assigns the relate) resources at the sa7e ti7e& A!ter assigning the resources= 3SS sen)s to MS#/3 the 7essage AA/Han)o1er/(e?uest/Ac9A& +uring or a!ter assigning the resources= MS#/3 "ill also sen) to its C8( ;C8(/3< the 7essage AMAP/Allocate/Han)o1er/,u7 er re?A= as9ing !or the han)o1er nu7 er& C8(/3 "ill then sen) the assigne) han)o1er nu7 er to MS#/3 in the 7essage AMAP/ Sen)/Han)o1er/(e0ort re?A& %< A!ter recei1ing the ac9no"le)ge7ent ;!ro7 (,S/3< an) the han)o1er nu7 er= MS#/3 sen)s to MS#/A the 7essage AMAP/Pre0/Han)o1er/res0A= in)icating that it is rea)5 !or the han)o1er& Inclu)e) in this 7essage is the han)o1er

Hua"ei Technologies Pro0rietar5 -0

Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter

#ha0ter $% Signaling Proce)ures

nu7 er= "ith "hich MS#/A can !in) the route to MS#/3& 3esi)es= the 7essage AA/Han)o1er/(e?uest/Ac9A is 0ac9e) into this 7essage in the Pac9et +ata Unit ;P+U< !or7at& 2< MS#/A then sen)s to MS#/3 the IAM to re?uest !or the corres0on)ing trun9 circuit& A!ter occu05ing the trun9 circuit= MS#/3 returns to MS#/A the A#M& The occu0ation o! the trun9 circuit is then co70lete)& -< A!ter the setu0 o! inter/MS# circuit= MS#/A generates the 7essage AIu/(eloc/ #o77an)A accor)ing to the in!or7ation eBtracte) !ro7 the 7essage AMAP/Pre0/ Han)o1er/res0A an) sen)s it to (,S/A= as9ing the MSFUE to start the han)o1er& This 0roce)ure also re?uires the 0rotocol inter"or9ing et"een UMTS an) 'SM s5ste7s& 4< The MSFUE then starts to access the 3SS& U0on the )etection o! the access= 3SS sen)s to MS#/3 the 7essage AA/Han)o1er/+etectA& MS#/3 0ac9s the 7essage into the MAP signaling AMAP/Process/Access/Sig re?A an) sen)s it to MS#/A& MS#/3 then "aits !or the han)o1er co70lete 7essage& On recei0t o! the corres0on)ing MAP signaling= MS#/A also "aits !or the han)o1er co70lete 7essage& 6< A!ter the MSFUE accesses 3SS= 3SS sen)s the han)o1er co70lete 7essage to MS#/3= "hich "ill 0ac9 the 7essage into the MAP signaling AMAP/Sen)/En)/ Signal re?A an) sen) it to MS#/A& The MS#/3 then starts so7e 0ost/han)o1er o0erations= such as sen)ing the 7essage AAns"erA to the inter/MS# circuit& $0< A!ter recei1ing the 7essage !ro7 MS#/3= MS#/A conclu)es that the han)o1er is co70lete& It starts releasing the resources occu0ie) 5 that MSFUE at (,S/A 5 sen)ing to the (,S/A the 7essage AIU/(E8/#M+A& (,S/A returns the 7essage AIU/(E8/#OMPA to MS#/A a!ter the releasing& The inter/MS# circuit "ill e 7aintaine) until the session is o1er& Then= MS#/A "ill release the circuit= use the MAP signaling AMAP/Sen)/En)/Signal res0A to noti!5 MS#/3 o! the release= an) sto0 the eBchange o! MAP signaling "ith MS#/3&

#ote$

An5ti7e a!ter recei1ing the IAM 7essage !ro7 MS#/A= MS#/3 can use the MAP signaling AMAP/Sen)/Han)o1er/(e0ort res0A to noti!5 C8(/3 to release the han)o1er nu7 er= so that it can e reuse) neBt ti7e&

The 3SS a!ter the han)o1er

eco7es the S3SS o! that MSFUE& I! han)o1er

occurs again= the 3SS "ill 0la5 the role o! 3SS/A&

D!D. !nter9MSC +ando0er fro" GSM to .MTS


Figure $&$ sho"s the 0roce)ure o! inter/MS# han)o1er !ro7 'SM to UMTS&

Hua"ei Technologies Pro0rietar5 -$

Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter

#ha0ter $% Signaling Proce)ures

UEFMSF3SS/A MS#/A A/HO/(EDUI(E+ MAP/Pre0/Han)o1er re?& 3'>MS#/3

(,S/3FUEFMS C8(/3

MAP/Allocate/Han)o1er/,u7 er re?& Iu/(E8O#ATIO,/(EDUEST Iu/(E8O#ATIO,/(EDUEST/A#E

MAP/Pre0/Han)o1er res0& IAM A/HO/#OMMA,+ A#M MAP/Process/Access/Sig re?& A/#8(/#M+F#OM MAP/Sen)/En)/Signal re?& A,SWE( (E8EASE En) o! call MAP/Sen)/En)/Signal res0&

MAP/Sen)/Han)o1er/(e0ort re?& MAP/Sen)/Han)o1er/(e0ort res0& ;$<

Iu/(E8O#ATIO,/+ETE#T Iu/(E8O#ATIO,/#OMP8ETE

,OTE $G #an e sent at an5 ti7e a!ter the rece0tion o! IAM

Figure 1.1 Proce)ure o! inter/MS# han)o1er !ro7 'SM to UMTS $< The access net"or9 3SS/A o! the MSFUE 7a9es the )ecision to initiate the han)o1er 0roce)ure& It sen)s to its MS# ;MS#/A< the han)o1er re?uest ;A/ Han)o1er/(e?uire)<& Inclu)e) in the han)o1er re?uest is the a))ress in!or7ation o! the eB0ecte) access net"or9 (,S/3= usuall5 the I+ o! the target (,#& *< On recei0t o! the re?uest= MS#/A chec9s in the corres0on)ing ta le& I! the T(,S ;(,S/3< is !oun) to e connecte) to another MS# ;MS#/3<= MS#/A "ill 0ac9 the han)o1er re?uest into a certain cell= 0ut the cell into the corres0on)ing MAP 7essage AMAP/Pre0are/Han)o1er re?A= an) sen) it to MS#/3 through the MAP signaling& 3< On recei0t o! the 7essage= MS#/3 eBtracts the 'SM 7essage AA/Han)o1er/ (e?uestA& 3ase) on this 7essage= MS# generates the corres0on)ing UMTS han)o1er re?uest AIu/(elocation/(e?uestA an) sen)s it to the (,S/3& In this 0roce)ure= MS#/3 "ill 7a0 the 'SM 7essage into the UMTS 7essage& .< U0on the rece0tion o! the han)o1er re?uest= (,S/3 assigns the corres0on)ing resources !or the MSFUE& MS#/3 also assigns the relate) resources at the sa7e ti7e& A!ter assigning the resources= (,S/3 sen)s to MS#/3 the 7essage AIu/ (elocation/(e?uest/Ac9A& +uring or a!ter assigning the resources= MS#/3 "ill also sen) to its C8( ;C8(/3< the 7essage AMAP/Allocate/Han)o1er/,u7 er re?A= as9ing !or the han)o1er nu7 er& C8(/3 "ill then sen) the assigne) han)o1er nu7 er to MS#/3 in the 7essage AMAP/Sen)/Han)o1er/(e0ort re?A& %< A!ter recei1ing the ac9no"le)ge7ent ;!ro7 (,S/3< an) the han)o1er nu7 er= MS#/3 sen)s to MS#/A the 7essage AMAP/Pre0/Han)o1er/res0A= in)icating

Hua"ei Technologies Pro0rietar5 -*

Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter

#ha0ter $% Signaling Proce)ures

that it is rea)5 !or the han)o1er& Inclu)e) in this 7essage is the han)o1er nu7 er= "ith "hich MS#/A can !in) the route to MS#/3& 3esi)es= MS#/3 "ill 0ut the 7essage AA/Han)o1er/(e?uest/Ac9A ;0ac9e) in the P+U !or7at< into this 7essage& 2< MS#/A then sen)s to MS#/3 the IAM to re?uest !or the corres0on)ing trun9 circuit& A!ter occu05ing the trun9 circuit= MS#/3 returns to MS#/A the A#M& The occu0ation o! the trun9 circuit is then co70lete)& -< A!ter the setu0 o! inter/MS# circuit= MS#/A generates the 7essage AA/ Han)o1er/#o77an)A accor)ing to the 'SM 7essage AA/Han)o1er/(e?uest/ Ac9A eBtracte) !ro7 the 7essage AMAP/Pre0/Han)o1er/res0A& MS#/A sen)s the 7essage to 3SS/A= as9ing the MSFUE to start the han)o1er& 4< The MSFUE then starts to access (,S/3& U0on the )etection o! the access= (,S/3 sen)s to MS#/3 the 7essage AIu/(elocation/+etectA& MS#/3 con1erts the 7essage into the corres0on)ing 'SM 7essage AA/Han)o1er/+etectA= 0ac9s the 7essage into the MAP signaling AMAP/Process/Access/Sig re?A an) sen)s it to MS#/A& MS#/3 then "aits !or the han)o1er co70lete 7essage& On recei0t o! the corres0on)ing MAP signaling= MS#/A "ill also "aits !or the han)o1er co70lete 7essage& 6< A!ter the MSFUE accesses (,S/3= (,S/3 sen)s the han)o1er co70lete 7essage to MS#/3& MS#/3 con1erts the 7essage into the corres0on)ing 'SM 7essage AA/Han)o1er>#o70leteA= 0ac9s the 7essage into the MAP signaling AMAP/Sen)/En)/Signal re?A an) sen)s it to MS#/A& The MS#/3 then starts so7e 0ost/han)o1er o0erations= such as sen)ing the 7essage AAns"erA to the inter/MS# circuit& $0< A!ter recei1ing the 7essage !ro7 MS#/3= MS#/A conclu)es that the han)o1er is co70lete)& It starts releasing the resources occu0ie) 5 that MSFUE at 3SS/A 5 sen)ing to the 3SS/A the 7essage AA/#8(/#M+A& 3SS/A returns the 7essage AA/#8(/#OMPA to MS#/A a!ter the releasing& The inter/MS# circuit "ill e 7aintaine) until the session is o1er& Then= MS#/A "ill release the circuit= use the MAP signaling AMAP/Sen)/En)/Signal res0A to noti!5 MS#/3 o! the release= an) sto0 the eBchange o! MAP signaling "ith MS#/3&

#ote$

An5ti7e a!ter recei1ing the IAM 7essage !ro7 MS#/A= MS#/3 can use the MAP signaling AMAP/Sen)/Han)o1er/(e0ort res0A to noti!5 C8(/3 to release the han)o1er nu7 er= so that it can e reuse) neBt ti7e&

The (,S/3 a!ter the han)o1er eco7es the S(,S o! that MSFUE& I! han)o1er occurs again= the (,S/3 "ill 0la5 the role o! (,S/A then&

Hua"ei Technologies Pro0rietar5 -3

Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter

#ha0ter $% Signaling Proce)ures

15.:.7 Roa"ing Restriction


MSOFTX3000 su00orts Tone #o)e Tone #o)e ase) roa7ing restriction= 8A/ ase) roa7ing

restriction an) C8( list ase) roa7ing restriction&

ase) roa7ing restriction

Tone #o)e is a 9in) o! su scri0tion )ata in H8(= "hich can e use) to restrict the roa7ing area o! the su scri er& MS# can )e!ine the 8A containe) in each Tone #o)e& In this "a5= the areas in "hich 7o ile su scri er are allo"e) to roa7 can !leBi l5&

e set

8A/ ase) roa7ing restriction

MS# can 0ro1i)e roa7ing restriction !unction ase) on 8A "ithout the coo0eration o! H8(& For this t50e o! roa7ing restriction= su scri er grou0 an) location grou0 ,o& ;one location grou0 ,o& 7a5 corres0on) to one or 7ore 8As< shoul) e )e!ine) !irst& Then the corres0on)ence grou0 can e esta lishe)&

et"een the su scri er grou0 an) location grou0 ,o&

shoul) e )e!ine)= so that the area in "hich roa7ing is !or i))en !or this su scri er C8( list ase) roa7ing restriction

C8( list is a 9in) o! su scri0tion )ata in H8(= "hich )e!ines the C8( areas in "hich roa7ing is allo"e)& MS# ena les this roa7ing restriction "ith the coo0eration o! H8(&

15.; Securit' Manage"ent


The securit5 7anage7ent o! MSOFTX3000 at MS# si)e inclu)es authentication= encr50tion= integrit5 0rotection= an) TMSI reallocation&

15.;.1 (uthentication
MSOFTX3000 authentication !unction inclu)es 'SM authentication an) UMTS authentication&

15.;.2 GSM (uthentication


!. efinition
The 'SM authentication !unction is to )e!ine "hether a user has rights to access Pu lic 8an) Mo ile ,et"or9 ;P8M,<& It is )one 5 co70aring authentication res0onse o! MS an) the set o! three Authentication Cectors ;AC< 0ro1i)e) 5 Authentication #enter ;Au#<& Through authentication= the net"or9 o0erator can 0re1ent illegal su scri er ;using )u0licate) International Mo ile Su scri er I)entit5 ;IMSI< an) In)i1i)ual Su scri er Authentication Ee5 ;Ei<< !ro7 using an5 !or7 o! ser1ice&

Hua"ei Technologies Pro0rietar5 -.

Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter

#ha0ter $% Signaling Proce)ures

!!. (uthentication Para"eters


Messages store) inU

Su scri er I)entit5 Mo)ule ;SIM<

Soli)i!ie) )ataG IMSI= Ei= A3 ;authentication algorith7<= an) A4 ;ci0hering algorith7<& These )ata "ill not e change)& Te70orar5 net"or9 )ataG Te70orar5 Mo ile Su scri er I)entit5 ;TMSI<= 8ocation Area I)entit5 ;8AI<= #i0hering Ee5 ;Ec<= #i0hering Ee5 Se?uence ,u7 er ;#ES,<= an) 0rohi ite) P8M,& Ser1ice/relate) )ata

Au#

(A,+o7 nu7 er ;(A,+< generator Ei #i0hering algorith7s= "hich shoul) e consistent "ith those a00lie) in SIM&

!!!. Principle
The asic !unction o! Au# is to generate the AC trioG (A,+= Signe) (es0onse to (A,+ is generate) 5 (A,+ generator& S(ES is resulte) !ro7 (A,+ an) Ei in A3 algorith7& Ec is resulte) !ro7 (A,+ an) Ei in A4 algorith7&

(A,+ ;S(ES<= an) Ec& A7ong "hich


A!ter generate)= the AC trio is store) in H8(& When authentication is re?uire)= MS#FC8( o! the MS ser1ice region "ill loa) at least one AC trio !ro7 H8(& (e!er to Figure $&$ !or the 0rinci0le o! authentication&

Hua"ei Technologies Pro0rietar5 -%

Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter

#ha0ter $% Signaling Proce)ures

#ar) 7anu!acture center IMSI= EI A3= A4 ;A%<

SIM car) IMSI= EI A3= A4 ;A%<

H8(FAU# AU# IMS ;7< IMS ;n< (A,+ generator EI ;M< EI ;,< EI ;IMSI< A4 A3 Authentication re?uest C8( SIM H8(

(A,+

E#

S(ES EI ;IMSI<

IMSI u!!er (A,+ (A,+ E# E# S(ES S(ES $ *

(A,+ E# Te7/ 0orar5 )ata S(ES

#ES,

(A,+ 3SS

A4 A3 E#

S(ES

Ceri!5 i! 7atching (A,+ E# S(ES %

EI ;IMSI< M (A,+ EI ;IMSI< M (A,+ M M E# A% ;MSF3SS<

A3 A4

S(ES E#

(A,+ EI 9c

$2 5te

$2 5te 4 5te

E# ;M< M

SE(S . 5te #ES, The last three its o! $ 5te

E# ;M< M E#

A% ;MSF3SS<

Figure 1.1 'SM authentication 0rinci0le

!*. (uthentication Procedure


It is u0 to the net"or9 o0erators to )eci)e "hether to i70le7ent authentication& 'enerall5= authentication is i70le7ente) u0on e1er5 call connection esta lish7ent= location u0)ate= su00le7entar5 ser1ice acti1ation "ithout call connection= an) Short Message S"itching ;SMS<& Figure $&$ sho"s 'SM authentication 0roce)ure&

Hua"ei Technologies Pro0rietar5 -2

Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter
3SSAP A MAP 3

#ha0ter $% Signaling Proce)ures

MS

U7

3SS

MS#

C8(

MAP +

H8(FA#

relate) ser1ice re?uest call esta lish7entFlocation u0)ate Fsu00le7entar5 ser1ice ;SMS<

MAP 7essage ;ser1ice re?uest< ;#ES,= IMSIFTMSI< AC retrie1al re?uest ;IMSI< authentication re?uest ;#ES,= (< authentication res0onse re?uest acce0te)F re?uest re:ecte) res0on) "ith ASE(SA a!ter a consistenc5 chec9 return se1eral ACs ;IMSI= E#= S= (<

authentication re?uest authentication res0onse

authentication re?uest authentication res0onse

return Aacce0te)A 7essage ;authentication success!ul such as Aser1ice acce0te)A= ;authoriHe) user<F Alocation u0)ate acce0te)A=authentication unsuccess!ul or Aauthentication re:ecte)A ;unauthoriHe) user<<

Figure 1.1 'SM authentication 0roce)ure $< *< MS in)icates the store) #ES, in the !irst #OMP8ETE 8AVE(3 I,FO ;call esta lish7entFlocation u0)ateFsu00le7entar5 ser1ice ;SMS<<& When MS# recei1es #OMP8ETE 8AVE(3 I,FO 7essage= it )eci)es "hether authentication is nee)e) ase) on )ata con!iguration& I! authentication is not nee)e)= the 0roce)ure is s9i00e)& Other"ise= chec9 i! #ES, is consistent "ith the 1alue store) in MS in the access 0rocess& I! not consistent= MS# sen)s P(O#ESS A##ESS (EDUEST to C8( to initiate an authentication 0roce)ureJ other"ise= the 0roce)ure is s9i00e) 3< C8( chec9 i! there is an AC trio= ;or reuse o! the AC trio is 0er7itte)<& I! no AC is !oun)= C8( "ill retrie1e one !ro7 H8(& H8( recei1es the AC retrie1al re?uest= it re?uests Au# ;usuall5 integrate) in H8(< to generate !i1e ACs& Then= H8( returns the !i1e ACs to C8( in AUTHE,TI#ATIO, (ESPO,SE 7essage& I! there is still an5 AC trio in C8(= H8( "ill not 0artici0ate in the 0roce)ure= an) C8( "ill initiate AUTHE,TI#ATIO, (EDUEST to MS )irectl5& .< %< C8( sen)s AUTHE,TI#ATIO, (EDUEST 7essage to in1o9e authentication 0roce)ure& The re?uest inclu)es a (A,+ an) a #ES,& U0on recei1ing the re?uest 7essage= MS generates an S(ES resulting !ro7 Ei an) the (A,+ in A3 authentication algorith7= an) a Ec resulting !ro7 Ei an) the (A,+ in A4 ci0hering algorith7& MS sen)s S(ES an) Ec AUTHE,TI#ATIO, (ESPO,SE 7essage& 2< When generating authentication 1ector set at net"or9 si)e= the sa7e algorith7 is a)o0te)& An S(ES is generate) resulting !ro7 Ei an) (A,+ in A3 algorith7& Then C8( co70ares the 1alue o! t"o S(ESs& I! the5 are the sa7e= authentication succee)s= allo"ing MS to access the net"or9& I! the5 are )i!!erent= authentication !ails= MS access to the net"or9 is )enie)& ac9 to C8( in

Hua"ei Technologies Pro0rietar5 --

Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter

#ha0ter $% Signaling Proce)ures

15.;.7 .MTS (uthentication


!. efinition
In a))ition to the net"or9 authenticating user !unction in 'SM authentication= UMTS authentication inclu)es user authenticating net"or9 !unction an) integrit5 0rotection !unction& Further7ore= UMTS authentication increase the length o! ci0hering 9e5= a00l5ing a 7ore ro ust ci0hering algorith7 an) integrit5 algorith7& The UMTS authentication 1ector set is a DuintetG (A,+= X(ES= #i0hering Ee5 ;#E<= Integrit5 Ee5 ;IE<= an) AuthenTication To9e, ;AUT,<& These !i1e ele7ents co70rises the UMTS authentication 1ector& UMTS AC ?uintetG

(A,+

(A,+ is a ran)o7 nu7 er 0ro1i)e) to UE& UE then uses it to generate) authentication res0onse (ES or (ESM(ES>EXT= an) securit5 9e5s as IE an) #E& The length o! (A,+ is $2 octets.

AUT,

AUT, is use) 5 UE to authenticate the net"or9& It is $2 octets in length&

X(ES 5 UE= the net"or9 can )eci)e i! authentication

X(ES re!ers to eB0ecte) UE authentication res0onse& 35 co70aring X(ES an) (ES ;or (ESM(ES>EXT< generate) #E succee)s& It is ./$2 octets in length&

#E re!ers to UMTS ci0hering 9e5& It is $2 octets in length&

IE

IE is UMTS integrit5 0rotection 9e5= "hich is $2 octets in length& Other 0ara7eters relate) to UMTS authenticationG

AUTS

AUTS is to 0ro1i)e necessar5 in!or7ation to in1o9e re/authentication 0roce)ure& When MS returns authentication !ailure= an) !ailure cause is @s5nchroniHation !ailureI= this 0ara7eter is a))e)& It is $. octets in length&

SD,

SeDuence ,u7 er ;SD,< is nee)e) to calculate MA# an) AUT, 1alue& Ti7er SD,MS an) SD,HE are store) in USIM an) Ho7e En1iron7ent ;HE<& The ti7ers are use) !or net"or9 authentication& SD,MS is an in)e0en)ent ti7er to e1er5 user= as it in)icates the 7aBi7u7 1alues that USIM recei1es&

AMF

Hua"ei Technologies Pro0rietar5 -4

Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter

#ha0ter $% Signaling Proce)ures

Authentication an) 9e5 Manage7ent Fiel) ;AMF< is in)icates an) generates the algorith7 an) ci0hering 9e5 !or a certain AC& It in)icates the 7aBi7u7 )i!!erential 1alue et"een SD,MS an) SD,& I! SD,/SD,MSWAMF= an) SD,XSD,MS= SD, is 1ali)& USIM restricts #E "ith a 1ali)it5 0erio)& The 0erio) can e a):uste) in AMF&

AE

AE encr50ts SD, in AUT,& It is o taine) !ro7 (A,+ an) E ;#E constantl5 share) et"een Au# an) HE<& Alternati1el5= set AEY0&

MA#

Message Authentication #o)e ;MA#< is o taine) !ro7 the calculation o! SD,= (A,+= AMF an) E& The recei1e) en) shall re/calculate MA# to co70are "ith the recei1e) one= :u)ging i! MA# !aile)&

!!. Principle
When user accesses the net"or9= i! authentication is re?uire)= C8(FS'S, "ill select an unuse) AC ?uintet= an) initiate authentication re?uest to UE& The re?uest 7essage inclu)es (A,+= AUT, an) #ES, o! selecte) authentication 1ector& USIM chec9s i! AUT, is acce0te)& I! not= then authentication !ailsJ other"ise= "or9 out (ES= #E an) IE= an) return (ES to C8(FS'S,& C8(FS'S, co70ares the (ES returne) !ro7 UE "ith X(ES in authentication 1ector set& IF the5 are the sa7e= authentication succee)sJ other"ise= authentication !ails& On success!ul authentication= the #E an) IE that UE calculate) an) store) in USIM= an) the #E an) IE that C8(FS'S, store) in authentication 1ector set can e use) !or su se?uent encr50tion 0roce)ures& I! authentication !ails= UE "ill )elete the store) #E an) IE&

!!!. (uthentication Procedure


Figure $&$ sho"s UMTS authentication 0roce)ure&

Hua"ei Technologies Pro0rietar5 -6

Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter

#ha0ter $% Signaling Proce)ures

UE

Uu

(,S

(A,AP Iu

MS#FS'S,

MAP 3

C8(

MAP +

H8(FAuc

relate) ser1ice re?uest ;call esta lish7entFlocation u0)ateF su00le7entar5 ser1ice ;SMS<<

MAP 7essage ;ser1ice re?uest< ;#ES,= IMSIFTMSI< authentication re?uest AC retrie1al re?uest return se1eral ACs ;(A,+= AUT,= #E= IE= X(ES< res0on) "ith AXE(SA a!ter a consistenc5 chec9 i! (ES or (ESM(ES>EXT is returne) authentication !ailure re0ort

authentication re?uest authentication res0onse

;#ES,= ATU,= (A,+<

;(ES ;(ESM(ES>EXT< or authentication !ailure< authentication success ;return Aacce0te)A 7essage such as Aser1ice acce0te)A= Alocation u0)ate acce0te)A or Aauthentication re:ecte)A su se?uent 0rocessing ;such as getting IMSI= another authentication<

Figure 1.1 UMTS authentication 0roce)ure UMTS authentication 0roce)ure is initiate) an) controlle) 5 the net"or9= 5et UE can )en5 net"or9 authentication challenge& $< *< UE in)icates the store) #ES, in the !irst #OMP8ETE 8AVE(3 I,FO ;call esta lish7entFlocation u0)ateFsu00le7entar5 ser1ice ;SMS<< MS#FS'S, recei1es #OMP8ETE 8AVE(3 I,FO 7essage= chec9s i! #ES, 1alue ;that UE use) in 0re1ious i70le7entation< is the 1alue) store) in UE& I! so= authentication 0roce)ure is s9i00e)J other"ise= MS#FS'S3 "ill sen) re?uest to C8( !or authentication 0ara7eters& 3< I! there is no ?uintet a1aila le in C8(= C8( "ill initiate a re?uest to H8(FAu# !or authentication 1ector set& H8( recei1es the authentication set retrie1al re?uest= it re?uests Au# ;usuall5 integrate) in H8(< to generate !i1e sets o! authentication 1ectors& Then= H8( returns the !i1e sets to C8( in AUTHE,TI#ATIO, (ESPO,SE& I! there is still an5 authentication 1ector ?uintet in C8(= H8( "ill not 0artici0ate in the 0roce)ure= an) C8( "ill initiate AUTHE,TI#ATIO, (EDUEST to MS )irectl5& .< MS#FS'S, #ES,& %<

sen)s

UE

an

AUTHE,TI#ATIO,

(EDUEST

to

in1o9e

authentication 0roce)ure& The re?uest inclu)es an (A,+= an AUT, an) a UE res0onses "ith an AUTHE,TI#ATIO, (ESPO,SE 7essageG UE chec9 AUT,& I! the MA# is the sa7e as the calculate) one= UE "ill then chec9 i! the range o! SD,= "hich is calculate) ase) on AUT,= is correct& I! SD, is correct= UE "ill 7a9e out (ES ;or (ESM(ES>EXT< ase) on (A,+= an) sen) it to C8( in AUTHE,TI#ATIO, (ESPO,SE 7essage&

In UMTS authentication challenge= the ne"l5 generate) #E an) IE shoul)

Hua"ei Technologies Pro0rietar5 40

Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter

#ha0ter $% Signaling Proce)ures

o1er"rite the original ones= an) shoul) e store) in USIM "ith #ES,& 2<

The net"or9 recei1es AUTHE,TI#ATIO, (ESPO,SEG On recei1ing (ES= the net"or9 co70ares (ES ;or (ESM(ES>EXT< "ith X(ES& I! the5 are i)entical= the user is legalJ other"ise= the user is illegal& In case o! authentication !ailure= i! UE uses TMSI= the net"or9 can initiate i)enti!ication 0roce)ureJ i! UE uses IMSI= or the net"or9 )eci)es not to initiate i)enti!ication 0roce)ure= it shall sen) AUTHE,TI#ATIO, (ELE#T 7essage to UE&

-<

UE authentication re:ects "ith AUTHE,TI#ATIO, FAI8U(E 7essageG UE chec9 AUT,& I! MA# !ailure occurs= "hich 7eans the MA# o! AUT, )i!!ers !ro7 the calculate) MA#= UE "ill sen) authentication !ailure 7essage to en) the 0roce)ure& MS# shall initiate the authentication !ailure re0orting 0roce)ure to H8(= an) i)enti!ication 0roce)ure as "ell as authentication 0roce)ure& I! i)enti!ication 0roce)ure is again initiate)= the net"or9 "ill con!ir7 the corres0on)ing relationshi0 et"een the recei1e) IMSI an) the sen) TMSI& I! relationshi0 is incorrect= retrie1e AC ?uintet again an) initiate the authentication 0roce)ure& In the secon) authentication re?uest= i! it is MA# !ailure again= the MS "ill regar) the 0resent ser1ice area as a 0rohi ite) one until the s5ste7 in!or7ation is u0)ate)&

I! no MA# !ailure occurs= MS "ill chec9 i! the range o! SD,= "hich is calculate) ase) on AUT,= is correct& I! SD, eBcee)s the range= MS "ill sen) s5nchroniHation !ailure 7essage to en) the 0roce)ure& The 7essage contains re:ection cause 0ara7eter @S5nch !ailureI an) re/s5nchroniHation !lag 0ara7eter AUTS= the latter o! "hich is calculate) ase) on AUT, an) (A,+& The net"or9 shall re/s5nchroniHe "ith the 0ara7eter AUTS& MS#FC8( shall )elete all unuse) ACs= retrie1e AC !ro7 H8(= an) re/initiate an authentication 0roce)ure&

15.;.8

ual9Mode MS (uthentication
!. efinition
A )ual/7o)e MS re!ers to the 7o ile 0hone that can e use) in t"o )i!!erent 7o ile co77unication s5ste7s& The asic architecture is that un)er the control o! central control unit= it a)o0ts the sa7e 7an/7achine inter!ace= an) the sa7e antenna= ut t"o se0arate s5ste7s& When the MS is 0o"ere) on= the central control unit )etects et"een the t"o s5ste7s= an) selects a 0ath& It can select either 7o ile co77unication s5ste7 as s0eci!ic en1iron7ent or o0eration re?uires& Here= the )ual/ 7o)e MS is co70ati le "ith 'SM ;*'< an) UMTS ;3'<& (66MME is a )ual/7o)e MS that can access 3SS as "ell as UT(A,&

(elate) conce0ts Authentication an) 9e5 agree7ent ;AEA< o! UMTS re!ers to the authentication an) encr50tion 0roce)ures o! sen)ing authentication 1ector ?uintet& AEA o! 'SM

Hua"ei Technologies Pro0rietar5 4$

Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter

#ha0ter $% Signaling Proce)ures

re!ers to the authentication an) encr50tion 0roce)ures o! sen)ing authentication 1ector trio&

(64/G (e!ers to the net"or9 no)e or ME )esigne) on (6- or (64& (66MG (e!ers to the net"or9 no)e or ME )esigne) on (66 or later& UMTS users inclu)esG (66MME "ith USIM an) (64/ME "ith USIM& 'SM users inclu)esG (66MME "ith SIM an) (64/ME "ith SIM&

!!. (uthentication Procedure


When the )ual/7o)e MS o0ens an account= it can onl5 e UMTS or 'SM& The 'SM user re?uires authentication 1ector trio in 'SM authenticationJ "hile UMTS user re?uires the ?uintet in UMTS authentication& When the )ual/7o)e MS roa7s et"een 'SM an) UMTS net"or9= it "ill a00l5 authentication 1ector trio or ?uintet )e0en)ing on the net"or9 it situates in& In a))ition= it also re?uires con1ersion et"een trio an) ?uintet&

O0ening an account o! UMTS user

Figure $&$ illustrates the AEA o! UMTS user&


(elease 66M H8(FAu#
Duintets

#E= IE//X Ec (ES //X S(ES

Tri0lets

(elease 66M C8(FS'S,


#E= IE//X Ec #E IE ZEc[ #E= IE//X Ec (ES//X S(ES ZEc[

(elease 64/ C8(FS'S,

ZEc[

UT(A,
(A,+ AUT, (ES (A,+ AUT, (ES

'SM 3SS
(A,+ S(ES (A,+ S(ES

(66M ME

(64/ ME

(66M ME or (64/ ME \
Ec #E= IE//X Ec (ES//X S(ES

#E= IE Ec #E= IE//X Ec

#E= IE Ec #E= IE//X Ec

Ec #E= IE//X Ec (ES//X S(ES

USIM

UMTS securit5 conteBt

'SM securit5 conteBt

Figure 1.1 O0ening an account o! UMTS user When (66MUE UMTS user "ith USIM accesses UT(A,= AEA o! UMTS is a)o0te)

Hua"ei Technologies Pro0rietar5 4*

Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter

#ha0ter $% Signaling Proce)ures

When (66MUE UMTS user "ith USIM accesses 'SM 3SS= an) C8( is (66M= AEA o! UMTS is a)o0te) Ec is calculate) ase) on IE an) #E& When (66MUE UMTS user "ith USIM accesses 'SM 3SS= an) C8( is (64/= AEA o! 'SM is a)o0te)& Ec o! ME is calculate) ase) on IE an) #E& (64/ 7o)e C8(FS'S, uses store) Ec an) (ES&

O0ening an account o! 'SM user

Figure $&* illustrates the AEA o! 'SM user&


(elease 64/ or (elease 66M H8(FAu#
Tri0lets Tri0lets

(elease 66M C8(FS'S,


Ec //X #E= IE #E IE ZEc[ ZEc[

(elease 64/ C8(FS'S,


ZEc[

UT(A,
(A,+ S(ES (A,+ S(ES

'SM 3SS
(A,+ S(ES (A,+ S(ES

(66M UE
Ec //X #E= IE Ec Ec

(64/ UE

(66M UE or (64/ UE
Ec

Ec

SIM

'SM securit5 conteBt

Figure 1.2 O0ening an account o! 'SM user When (66MUE 'SM user "ith SIM accesses UT(A,= AEA o! 'SM is a)o0te)& IE an) #E use) in access net"or9 an) MS is calculate) ase) on Ec o! 'SM& When (66MUE 'SM user "ith SIM accesses 'SM 3SS= an) C8(FS'S, is (66M= AEA o! 'SM is a)o0te)& When (66MUE 'SM user "ith SIM accesses 'SM 3SS= an) C8(FS'S, is (64/= AEA o! 'SM is a)o0te)&

15.;.5 &ncr'ption
The 0ur0ose o! encr50tion is to ensure trans7ission securit5 o! user )ata in the air& All encr50tion an) )ecr50tion i70le7entations are )one in the air& 'SM encr50tionG The encr50tion an) )ecr50tion o! user in!or7ation is an @eBclusi1e orI o0eration on $$./ it "ireless 0ulse co)e an) $$./ it encr50tion serial co)e& It

Hua"ei Technologies Pro0rietar5 43

Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter

#ha0ter $% Signaling Proce)ures

a00lies A% encr50tion algorith7& The algorith7 calculates ase) on Ec o! the MS an) the !ra7e nu7 er o! the 0ulse string& Ec is calculate) authentication re?uest 7essage<= an) Ei in A4 algorith7& UMTS encr50tionG To initiate encr50tion in the net"or9= inclu)e the encr50tion algorith7 an) #E in the encr50tion co77an)J (,# an) UE negotiate an algorith7 an) initiate the encr50tion 0roce)ure& Then= UE uses #E= "hich is calculate) ase) on (A,+= !or encr50tion an) )ecr50tionJ ,O+E3 uses #E sent 5 MS#FC8( !or the sa7e 0ur0ose& The net"or9 sen)s encr50tion 7essages to "ireless access net"or9& In this 0roce)ure= the core net"or9 an) "ireless access net"or9 negotiate an encr50tion algorith7 !or MS= "hich is !urther a00lie) in su se?uent ser1ice trans!er& When the MS s"itches et"een 'SM an) UMTS= the algorith7 "ill still e a00lie)= an) relate) 0ara7eters "ill e sent to s"itche) )estination (,#& The encr50tion 0roce)ure is sho"n in Figure $&$&
UEFUT(A,
SE#U(ITV MO+E #OMMA,+ SE#U(ITV MO+E #OMP8ETE or SE#U(ITV MO+E (ELE#T

ase) on (A,+ ;in

#,

Figure 1.1 Encr50tion an) integrit5 0rotection 0roce)ure

15.;.: !ntegrit' Protection


The 0ur0ose o! integrit5 0rotection is to ensure that no illegal 7o)i!ication is )one on signaling a!ter it is sent= 5 1eri!5ing the 1ali)it5 o! signaling )ata& The source o! signaling )ata is the sen)ing 0art5& To initiate encr50tion in the net"or9= inclu)e the integrit5 0rotection algorith7 an) IE in the encr50tion co77an)J (,# an) UE negotiate an algorith7 an) initiate the integrit5 0rotection 0roce)ure& Then= UE uses IE= "hich is calculate) sa7e 0ur0ose& $%&-&% IFigure $&$ illustrates the integrit5 0rotection 0roce)ure& $< #, initiates SE#U(ITV MO+E #OMMA,+ 7essage= "hich in1o9es securit5 7o)e control 0roce)ure= an) 0ro1i)es to UT(A, the a1aila le encr50tion algorith7 ;i! an5< an) integrit5 0rotection algorith7& *< A!ter recei1ing SE#U(ITV MO+E #OMMA,+ 7essage= UT(A, "ill select an a00ro0riate algorith7 ase) on U(FUT(A, ca0a ilities= trigger rele1ant "ireless inter!ace 0roce)ures= an) initiate encr50tion )e1ices ;i! co70ati le< an) integrit5 0rotection& 3< When UT(A, "ireless inter!ace 0roce)ure success!ull5 is co70lete)= UT(A, ase) on (A,+= !or integrit5 0rotection 0rocessingJ ,O+E3 uses IE sent 5 MS#FC8( !or the

Hua"ei Technologies Pro0rietar5 4.

Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter

#ha0ter $% Signaling Proce)ures

returns a SE#U(ITV MO+E #OMP8ETE 7essage= containing the selecte) integrit5 0rotection algorith7 an) encr50tion algorith7& The signaling )ata al"a5s a00lies the latest recei1e) 7essages !or encr50tion an) integrit5 0rotection& .< I! UE or UT(A, )oes not su00ort the s0eci!ie) algorith7 !or encr50tion or integrit5= it returns a SE#U(ITV MO+E (ELE#T 7essage= an) the reason 1alue is @re?uire) encr50tionFintegrit5 algorith7 not su00orte)I& I! the "ireless inter!ace securit5 control 0roce)ure !ails= it returns a SE#U(ITV MO+E (ELE#T 7essage= an) the reason 1alue is @"ireless inter!ace control 0roce)ure !ailureI& When encr50tion or integrit5 0rotection is acti1ate)= #, re?uires another algorith7= "hich is not su00orte) 5 UE or UT(A,= it returns a SE#U(ITV MO+E (ELE#T 7essage= an) reason 1alue is @change) encr50tion algorith7 an)For integrit5 algorith7 not su00orte)&I

15.;.; TMS! Reallocation


TMSI re!ers to Te70orar5 Mo ile Su scri er I)enti!ier= "hich is 7anage) 5

MS#FC8(& The 0ur0ose o! TMSI reallocation is to ensure IMSI securit5 "hen using TMSI through "ireless inter!ace= 0re1enting an5 unauthoriHe) trace o! user acti1ities through IMSI& When a 7o ile su scri er co7es to a certain MS#FC8( control area= MS#FC8( "ill allocate a TMSI= "hich uni?uel5 i)enti!ies the su scri er= accor)ing to s0eci!ic TMSI allocation 0rinci0le& Then= the net"or9 i)enti!ies the su scri er 5 TMSI instea) o! IMSI& All signaling )ata interaction "ill e ase) on TMSI= thus achie1ing the 0ur0ose o! securit5& TMSI reallocation can e i70le7ente) in user location u0)ate= call esta lish7ent= an) in su00le7entar5 ser1ice a00lication& When a ne" TMSI is allocate)= the 0re1ious one "ill e )elete)& The TMSI reallocation 0roce)ure i70le7ente) in location u0)ate is )one together "ith location u0)ate acce0t 0rocess& See Figure $&$ !or )etails&
MSFUE MS#FC8( 8oc U0)ate Acce0t ;"ith TMSI< TMSI (ealloc co70lete

Figure 1.1 TMSI reallocation in location u0)ate $< MS#FC8( in1o9es TMSI reallocation 0roce)ure& It generates a ne" TMSI= stores the corres0on)ing relationshi0 et"een TMSI an) IMSI= an) sen) the ne" TMSI an) 8AI to MS& *< U0on recei1ing the ne"l5/allocate) TMSI= MS auto7aticall5 )elete the ol) one= sa1e the ne" one= an) returns a res0onse 7essage to MS#FC8(& MS#FC8( recei1es the res0onse 7essage= an) )eletes the original corres0on)ing

Hua"ei Technologies Pro0rietar5 4%

Technical Manual Signaling & Protocols HUAWEI MSOFTX3000 Mo ile So!tS"itch #enter

#ha0ter $% Signaling Proce)ures

relationshi0 o! TMSI an) IMSI&

Hua"ei Technologies Pro0rietar5 42

Вам также может понравиться