11.china CAI Message

CAI Message Analysis
For IS95A/B
2002.2nd Quarter
Dr.CDMA Do not copy without permission
-1-
Channel Type
? Forward Link
64 channels(64ry walsh codes)
Forward link
1.23MHz(1FA)
Pilot(1 EA)
Forward Traffic Channels
Sync(1 EA)
PN code sequence
with no data
Sync to BTS
Paging(1 EA in general)
Sync to GPS time

on CDMA networks
Send signaling message and

Send voice data to a mobile
phone.
Send overhead messages

to a mobile phone and
page a mobile phone etc.
-2-
Channel Type
? Reverse Link
Reverse link
1.23MHz(1FA)
Reverse Traffic Channels

Access
(1 EA in general)
Send signaling message and
Send voice data to a BTS.
Send registration messages
to a BTS and send origination
messages a BTS etc.
-3-
Channel Type
Channel Type
Pilot Channel
Sync Channel
Paging Channel
Characteristics
M:1
M:1
Access Channel
Forward Traffic Channel

Reverse Traffic Channel
1:1
1:1
-4-
Message Type
Type 1
Broadcast Message
Dedicated Message
Type 2
One Way Message
Bi-Directional Message
Request
ACK_SEQ
MSG_SEQ
ACK_REQ (1)
REF_MSG_SEQ
Response
ACK_SEQ
MSG_SEQ
ACK_REQ
REF_MSG_SEQ
Reference
REF_MSG_SEQ
-5-
System Access
?
?
?
?
?
Pilot Channel
Sync Channel Message
Channel List Message
Registration Message
Registration Accepted Order
(Pilot)
(Sync)
(Paging )
(Access )
(Paging )
Pilot Channel
Sync Channel Message
Channel List Message
Registration
-6-
Call Origination
?
?
?
?
?
?
?
?
?
?
Origination Message
Base Station Order(Ack)
Channel Assignment Message
Mobile Station Order(Ack)
Service Connect
Service Connect Completion
Alert With Information
(Access )
Origination Message
(Paging )
(Paging )
(F-Traf )
(R-Traf)
(F-Traf )
(R-Traf)
(F-Traf )
(F-Traf )
(R-Traf)

Service Connect Message
Service Connect Completion Message
Alert With Information Message
(CF)
? Service Option Response
(F-Traf )
-7-
Call Response
?
?
?
?
?
?
?
?
?
?
?
?
?
Slotted(General) Page Message (Paging)

(Access )
Page Response Message
(Paging )
Channel Assignment Message (Paging)
(F-Traf )
(R-Traf)
Service Connect
(F-Traf )
Service Connect Completion (R-Traf)
(F-Traf )
(F-Traf )
Alert With Information
(R-Traf)
Mobile Station Order(Connect)(R-Traf)
(F-Traf )
Slotted(General) Page Message

Page Response Message
Service Connect Message
Service Connect Completion Message
Alert With Information Message
Mobile Station Order(Connect)
(CF)
? Service Option Response (F-Traf)

-8-
Call Release
? Mobile Station Order(Release) (R-Traf)
? Base Station Order(Release) (F-Traf)
Mobile Station Order(Release)

Base Station Order(Release)
-9-
Handoff Process
?
?
?
?
?
?
(R-Traf)
Pilot Strength Measurement Message

(F-Traf )
Handoff Direction Message
(F-Traf )
(R-Traf)
Handoff Completion Message (R-Traf)
(F-Traf )
Pilot Strength Measurement Message

Handoff Direction Message
Handoff Completion Message
- 10 -
System Parameter Update

?
?
?
?
?
System Parameter Message

(Paging )
Access Parameter Message
(Paging )
Neighbor List Message
(Paging )
In-Traffic System Parameter Message
Neighbor List Update Message (F-Traf)
System Parameter Message

Access Parameter Message
Neighbor List Message
In-Traffic System Parameter Message
Neighbor List Update Message
(F-Traf )
- 11 -
ETC Message
? Data Burst Message
? Send Burst DTMF Message
(Access )
(Paging )
(R-Traf)
(F-Traf )
Data Burst Message
(R-Traf)
Send Burst DTMF Message
Status Packet
?
?
?
?
?
?
?
?
General TA w/sup Channel information

General TA information
Finger information
Searcher information
Searcher and Finger information
Access Probe information
Markov statistics
Sparse AGC Power Control information
- 12 -
System Access
? Sync Channel Message
During Pilot and Sync Channel Processing,
the base station transmits the Pilot Channel and
Sync Channel which the mobile station uses
to acquire and synchronize to the CDMA system.
P_REV
MIN_P_REV
SID
NID
PILOT_PN
LC_STATE
SYS_TIME
LP_SEC
LTM_OFF
DAYLT
PRAT
CDMA_FREQ
protocol revision level

minimum protocol revision
system identification
network identification
PN offset for serving BTS.
long code state
system time
the number of leap seconds that have
occurred since the start of system time
offset of local time from system time
daylight saving time indicator
paging channel data rate
0 : 9600 bps
1 : 4800 bps
frequency assignment
[ 2001 Nov 22 07:48:26.986 ] Sync Channel

PROTOCOL_REV : 3
Sync channel message
MSG_TYPE: 1
P_REV: 3
MIN_P_REV: 2
SID: 13824
NID: 2
PILOT_PN: 426(0x01AA)
LC_STATE[HI]: 455
LC_STATE[LO]: 2716887334
SYS_TIME[HI]: 2
SYS_TIME[LO]: 40696750
LP_SEC: 13
LTM_OFF: 16
DAYLT: 0
PRAT: 0
CDMA_FREQ: 201(0x00C9)
- 13 -
System Access
? Channel List Message
It indicates the number of CDMA channel(FAs).
MS shall synchronize to the FA that has been
determined in result of Hash function.
PILOT_PN
PN offset for serving BTS
CONFIG_MSG_SEQ configuration message sequence number
NUM_FREQ
the number of CDMa channels(FA's)
CDMA channel frequency assignment
CDMA_FREQ
(up to NUM_FREQ)
[ 2001 Nov 22 07:48:27.963 ] Paging Channel

PROTOCOL_REV : 3
CDMA Channel List
MSG_TYPE: 4
CONFIG_MSG_SEQ: 34
NUM_FREQ :1
CDMA_FREQ[0]: 201(0x00C9)
- 14 -
System Access
? Registration Message
MS send registration message to BTS when MS
proceed from system access state to registration
sub-state.
If BTS accept registration message legally, it shall
reply accepted order to MS.
MSID_TYPE
MSID
MIN1
MIN2
ESN
AUTH_MODE
AUTHR
RANDC
COUNT
REG_TYPE
SLOT_CYCLE_INDEX
MOB_P_REV
SCM
MOB_TERM
mobile station identifier field type

mobile station identifier
first part of the mobile identification number
second part of the mobile identification number
mobile station's electronic serial number
authentication mode
authentication response
random challenge value
call history parameter
registration type
slot cycle index
protocol revision of the mobile station
station class mark
mobile terminated calls accepted indicator
[ 2001 Nov 22 03:36:43.070 ] Access Channel

PROTOCOL_REV : 3
Registration
MSG_TYPE: 1
ACK_SEQ: 7
MSG_SEQ: 5
ACK_REQ: 1
VALID_ACK: 0
ACK_TYPE: 0
MSID_TYPE: 0
MSID_LEN: 9
MIN1: (7890635)
MIN2: (1110017)
ESN: 2692405198(0xA07AD7CE)
AUTH_MODE: 0
REG_TYPE : Power Up
SLOT_CYCLE_INDEX: 2 -> 5.120 Sec
MOB_P_REV: 3
SCM: 42
MOB_TERM: 1
- 15 -
System Access
? Registration Accepted Order
BTS reply registration accepted order message to MS
for registration message
ACK_SEQ
ADDR_TYPE
ESN
ORDER
ORDQ
ack for message sequence

address type
order code
order qualification code

PROTOCOL_REV : 3
Order
MSG_TYPE: 7
ACK_SEQ: 5
MSG_SEQ: 1
ACK_REQ: 0
VALID_ACK: 1
ADDR_TYPE: 1
ADDR_LEN: 4
ESN: 0xA07AD7CE
ORDER: 27
ADD_RECORD_LEN: 0
- 16 -
Call Origination
? Origination Message
The first message that MS send for call origination.
IMSI
REQUEST_MODE
SPECIAL_SERVICE
SERVICE_OPTION
PM
DIGIT_MODE
CHARi
international mobile station identifier

requested mode code
1 : CDMA only
2 : wide analog only
3 : either wide analog or CDMA only
4 : narrow analog only
5 : either narrow analog or CDMA only
6 : either narrow analog or wide analog only
7 : narrow analog or wide analog or CDMA
special service option indicator
requested service option for this origination
privacy mode indicator
(request voice privacy)
digit mode indicator
0 : 4 bit DTMF
1 : 8 bit ASCII
a dialed digits or chacters
[ 2001 Nov 22 07:44:33.310 ] Access Channel

PROTOCOL_REV : 3
Origination
MSG_TYPE: 4
ACK_SEQ: 7
MSG_SEQ: 6
ACK_REQ: 1
VALID_ACK: 0
ACK_TYPE: 0
MSID_TYPE: 3
MSID_LEN: 9
ESN: 4178081291(0xF908760B)
IMSI_CLASS: 0
IMSI_CLASS_0_TYPE: 0
RESERVED: 0
IMSI_S[HI]: 3
IMSI_S[LO]: 3575089031
-> MIN : 0921051014 (0140921592)
AUTH_MODE: 0
MOB_TERM: 1
SLOT_CYCLE_INDEX: 2
MOB_P_PEV: 3
SCM: 42
REQUEST_MODE: 1
-> CDMA ONLY
SPECIAL_SERVICE: 1
SERVICE_OPTION: 3
PM: 0
DIGIT_MODE: 0
MORE_FIELDS: 0
NUM_FIELDS: 3
CHARi: 1 2 1
- 17 -
Call Origination
? Base Station Order(Ack)
BTS reply ack order & channel assignment message to
MS for origination message
ACK_SEQ
ADDR_TYPE
IMSI
ORDER
ack for message sequence

address type
order code

PROTOCOL_REV : 3
Order
MSG_TYPE: 7
ACK_SEQ: 6
MSG_SEQ: 0
ACK_REQ: 0
VALID_ACK: 1
ADDR_TYPE: 2
ADDR_LEN: 5
IMSI_CLASS: 0
RESERVED: 0
IMSI_S[HI]: 3
IMSI_S[LO]: 3575089031
-> MIN : 0921051014 (0140921592)
ORDER: 16
ADD_RECORD_LEN: 0
Base Station Acknowledgement Order
- 18 -
Call Origination
? Channel Assignment Message
BTS send channel assignment message to assign a traffic
channel for MS.
assignment mode
0 : Traffic Channel Assignment
1 : Paging Channel Assignment
ASSIGN_MODE
2 : Acquire Analog System
3 : Analog Voice Channel Assignmnet
4 : Extended Traffic Channel Assignment
5 : Extended Paging Channel Assignment
BYPASS_ALERT_ANSWER bypass alert indicator
GRANTED MODE
granted mode
CODE_CHAN
code channel(walsh code)
frame offset * 1.25ms delay relative
FRAME_OFFSET
to system timing
message encryption mode
0 : encryption disabled
Encrypt Mode
1 : basic encryption of call control messages
2 : enhanced encryption of call control message
3 : reserved
band class information
BAND CLASS
0 : 800MHz Cellular System
CDMA_FREQ
frequency assignment

PROTOCOL_REV : 3
Channel Assignment
MSG_TYPE: 8
ACK_SEQ: 6
MSG_SEQ: 1
ACK_REQ: 0
VALID_ACK: 1
ADDR_TYPE: 2
ADDR_LEN: 5
IMSI_CLASS: 0
RESERVED: 0
IMSI_S[HI]: 3
IMSI_S[LO]: 3575089031
-> MIN : 0921051014 (0140921592)
ASSIGN_MODE: 4
ADD_RECORD_LEN: 5
FREQ_INCL: 1
BYPASS_ALERT_ANSWER: 0
DEFAULT_CONFIG: 0
GRANTED_MODE: 2
CODE_CHAN: 8
FRAME_OFFSET: 0
Encrypt Mode
: Encryption Disabled
BAND_CLASS: 0
CDMA_FREQ: 201
- 19 -
Call Origination
? Base Station Order(Ack)
Encrypt Mode
ACTION_TIME

3 : reserved
if USE_TIME = 1, set system time in unit of
80ms.
[ 2001 Nov 22 07:45:11.705 ] Forward Traffic Channel

PROTOCOL_REV : 3
Order - Base station acknowledgement
MSG_LENGTH: 8
MSG_TYPE: 1
ACK_SEQ: 7
MSG_SEQ: 0
ACK_REQ: 1
ENCRYPTION: 0
USE_TIME: 0
ACTION_TIME: 0
ORDER: 16
ADD_RECORD_LEN: 0
- 20 -
Call Origination
? Mobile Station Order(Ack)
Encrypt Mode

3 : reserved
[ 2001 Nov 22 07:45:11.770 ] Reverse Traffic Channel

PROTOCOL_REV : 3
Order - Mobile station acknowledgement
MSG_Length: 7
MSG_TYPE: 1
ACK_SEQ: 0
MSG_SEQ: 0
ACK_REQ: 0
ENCRYPTION: 0
ORDER: 16
ADD_RECORD_LEN: 0
Mobile Station Acknowledgement Order
- 21 -
Call Origination
? Service Connect
BTS use service connect message to negotiate service
option.
connect sequence number
information record type
RECORD_TYPE
7 : service configuration
FOR_MUX_OPTION forward traffic channel multiplex option
REV_MUX_OPTION reverse traffic channel multiplex option
transmission rates of the forward fundamental channel
FOR_RATES
'11110000' - 9600, 4800, 2400, 1200 support
transmission rates of the reverse fundamental channel
REV_RATES
'11110000' - 9600, 4800, 2400, 1200 support
CON_REF
service option connection reference
SERVICE_OPTION
service option
forward traffic channel traffic type
0 : do not use forward traffic channel traffic
FOR_TRAFFIC
1 : use primary traffic on the forward traffic channel
2 : use secondary traffic on the forward traffic channel
REV_TRAFFIC
reverse traffic channel traffic type
SERV_CON_SEQ

PROTOCOL_REV : 3
Service connect
MSG_LENGTH: 21
MSG_TYPE: 20
ACK_SEQ: 7
MSG_SEQ: 1
ACK_REQ: 1
ENCRYPTION: 0
USE_TIME: 0
ACTION_TIME: 0
SERV_CON_SEQ: 0
RECORD_TYPE: 7
RECORD_LEN: 12
FOR_MUX_OPTION: 1(0x0001)
REV_MUX_OPTION: 1(0x0001)
FOR_RATES: 240
REV_RATES: 240
NUM_CON_REC: 1
RECORD_LEN: 5
CON_REF: 1
SERVICE_OPTION: 3
FOR_TRAFFIC: 1
REV_TRAFFIC: 1
- 22 -
Call Origination
? Service Connect Completion
MS reply service connect completion to BTS for service
connect message
SERV_CON_SEQ connect sequence number

PROTOCOL_REV : 3
Service connect completion
MSG_Length: 6
MSG_TYPE: 14
ACK_SEQ: 1
MSG_SEQ: 1
ACK_REQ: 1
ENCRYPTION: 0
SERV_CON_SEQ: 0
- 23 -
Call Origination
? Service Option Response
BTS send service option response to to negotiate service
option.
Encrypt Mode

3 : reserved

PROTOCOL_REV : 3
Order - Service option response
MSG_LENGTH: 11
MSG_TYPE: 1
ACK_SEQ: 7
MSG_SEQ: 1
ACK_REQ: 1
ENCRYPTION: 0
USE_TIME: 0
ACTION_TIME: 0
ORDER: 20
ADD_RECORD_LEN: 3
Service Option Response Order
ORDQ: 0
Service Option: 3
- 24 -
Call Origination
? Alert With Information
BTS use alert with information to notify record
information.
It normally contains the information of tone signal.
ENCRYPTION
RECORD_TYPE
SIGNAL_TYPE
ALERT_PITCH
SIGNAL

2 : enhanced encryption of call control
message
3 : reserved
information record type
5 : signal
signal type
0 : tone signal
1 : ISDN alerting
2 : IS54-B Alerting
pitch of the alerting signal
signal code
1 : long

PROTOCOL_REV : 3
Alert with information
MSG_LENGTH: 10
MSG_TYPE: 3
ACK_SEQ: 7
MSG_SEQ: 2
ACK_REQ: 1
ENCRYPTION: 0
RECORD_TYPE: 5
RECORD_LEN: 2
SIGNAL_TYPE: 2
ALERT_PITCH: 0
SIGNAL: 1
-> IS-54B Alerting

-> Medium Pitch
- 25 -
Call Response
? Slotted Page Message
BTS use slotted page message to page MS in slot mode.
But slotted page message is invalid above IS95B.
ACC_MSG_SEQ
MORE_PAGES
access parameters message sequence number

more slotted pages to follow indicator
first part of the mobile station identification
MIN1
number
second part of the mobile station identification
MIN2
number
SPECIAL_SERVICE special service option indicator

PROTOCOL_REV : 3
Slotted Page
MSG_TYPE: 5
CONFIG_MSG_SEQ: 6
ACC_MSG_SEQ: 56
MORE_PAGES: 0
MSG_SEQ: 0
EXT_ADDR: 1
MIN1: 0x1B0527
MIN2: 0x038A
-> MIN : 2191937017(017-219-1306)
SPECIAL_SERVICE: 0
- 26 -
Call Response
? General Page Message
BTS use general page message to page MS.
ACC_MSG_SEQ
access parameters message sequence number
CLASS_0_DONE
class 0 pages done
CLASS_1_DONE
class 1 pages done
TMSI_DONE
TMSI pages are done
ORDERED_TMSIS
TMSIs sent in numerical order
BROADCAST_DONE broadcast pages done
PAGE_CLASS
class of the page record
PAGE_SUBCLASS
subclass of the page record
IMSI
international mobile station identifier
Special Service
special service option indicator

PROTOCOL_REV : 3
General Page
MSG_TYPE: 17
CONFIG_MSG_SEQ: 32
ACC_MSG_SEQ: 17
CLASS_0_DONE: 1
CLASS_1_DONE: 1
TMSI_DONE: 1
ORDERED_TMSIS: 0
BROADCAST_DONE: 1
ADD_LENGTH: 0
ADD_PFIELD:
PAGE_CLASS: 0
PAGE_SUBCLASS: 0
MSG_SEQ: 0
IMSI_S[HI]: 3
IMSI_S[LO]: 3575089121
-> MIN : 0921051004 (0040921592)
Special_Service: 0
- 27 -
Call Response
? Mobile Station Order(Connect)
MS send connect order to notify call connect to BTS.
Encrypt Mode

3 : reserved

PROTOCOL_REV : 3
Order - Connect
MSG_Length: 7
MSG_TYPE: 1
ACK_SEQ: 7
MSG_SEQ: 3
ACK_REQ: 1
ENCRYPTION: 0
ORDER: 24
ADD_RECORD_LEN: 0
Connect Order
- 28 -
Call Release
? Mobile Station Order(Release)
MS send release order to notify call termination to BTS.
Encrypt Mode

3 : reserved

PROTOCOL_REV : 3
Order - Release
MSG_Length: 7
MSG_TYPE: 1
ACK_SEQ: 7
MSG_SEQ: 5
ACK_REQ: 1
ENCRYPTION: 0
ORDER: 21
ADD_RECORD_LEN: 0
Release Order (Normal Release)
- 29 -
Call Release
? Base Station Order(Release)
BTS send release order to notify call termination to MS.
Encrypt Mode

3 : reserved

PROTOCOL_REV : 3
Order - release
MSG_LENGTH: 8
MSG_TYPE: 1
ACK_SEQ: 5
MSG_SEQ: 5
ACK_REQ: 0
ENCRYPTION: 0
USE_TIME: 0
ACTION_TIME: 0
ORDER: 21
ADD_RECORD_LEN: 0
Release Order
- 30 -
Handoff Process
? Pilot Strength Measurement Message
MS report the signal strength of the searched pilot to
support handoff process.
BTS reply handoff direction message if PSMM is
suitable for handoff.
REF_PN
PILOT_STRENGTH
KEEP
PN_PHASE
PN
Distance
time reference PN sequence offset

pilot strength
keep pilot indicator
0 : drop
1 : maintain or add
pilot measured phase
PN offset number
distancd calculated from chip delay

PROTOCOL_REV : 3
Pilot strengh measurement
MSG_Length: 10
MSG_TYPE: 5
ACK_SEQ: 2
MSG_SEQ: 1
ACK_REQ: 1
ENCRYPTION: 0
REF_PN: 375
PILOT_STRENGTH: -8.50
KEEP: 1
PN_PHASE : 10167, PN : 159 (-9, Distance : 2195.100 m)
PILOT_STRENGTH: -11.00
KEEP: 1
- 31 -
Handoff Process
? Handoff Direction Message
BTS send handoff direction message to make handoff
process as for response of PSMM.
When received, MS shall enter handoff process.
But handoff direction message is invalid above IS95B.
handoff direction message sequence number
SRCH_WIN_A
search window size for the active set and candidate set
T_ADD
pilot detection threshold
T_DROP
pilot drop threshold
T_COMP
active set versus candidate set comparison threshold
T_TDROP
drop timer value
FRAME_OFFSET frame offset * 1.25ms delay relative to system timing
private long code mask indicator
PRIVATE_LCM
0 : do not use
1 : use
RESET_L2
reset acknowledgement procedures command
ENCRPT_MODE message encryption mode
PILOT_PN
piolt PN sequence offset index
power control symbol combining indicator
PWR_COMB_IND 1 : same BTS(share power control bits)
0 : different BTS
CODE_CHAN
code channel index(walsh code)
HDM_SEQ

PROTOCOL_REV : 3
Handoff direction
MSG_LENGTH: 15
MSG_TYPE: 5
ACK_SEQ: 1
MSG_SEQ: 3
ACK_REQ: 1
ENCRYPTION: 0
USE_TIME: 0
ACTION_TIME: 0
HDM_SEQ: 1
SRCH_WIN_A: 9
T_ADD: 20
T_DROP: 24
T_COMP: 5
T_TDROP: 3
FRAME_OFFSET: 13
PRIVATE_LCM: 0
RESET_L2: 0
ENCRPT_MODE: 0
FREQ_INCL: 0
PILOT_PN: 444
PWR_COMB_IND: 0
CODE_CHAN: 40
PILOT_PN: 350
PWR_COMB_IND: 0
CODE_CHAN: 33
- 32 -
Handoff Process
? Extended Handoff Direction Message
BTS send extended handoff direction message to make
handoff process as for response of PSMM.
When received, MS shall enter handoff process.
HDM_SEQ
SEARCH_INCLUDED pilot search parameters included

SRCH_WIN_A
search window size for the active set and candidate set
T_ADD
T_DROP
T_COMP
T_TDROP
HARD_INCLUDED
PILOT_PN
PWR_COMB_IND
CODE_CHAN

active set versus candidate set comparison threshold
drop timer value
hard handoff parameters included
power control symbol combining indicator
1 : same BTS(share power control bits)
0 : different BTS
code channel index(walsh code)

PROTOCOL_REV : 3
Extended handoff direction
MSG_LENGTH: 15
MSG_TYPE: 17
ACK_SEQ: 1
MSG_SEQ: 3
ACK_REQ: 1
ENCRYPTION: 0
USE_TIME: 0
ACTION_TIME: 0
HDM_SEQ: 0
SEARCH_INCLUDED: 1
SRCH_WIN_A: 6
-> 28
T_ADD: 28
T_DROP: 32
T_COMP: 8
T_TDROP: 3
HARD_INCLUDED: 0
ADD_LENGTH: 0
PILOT_PN: 375
PWR_COMB_IND: 0
CODE_CHAN: 42
PILOT_PN: 159
PWR_COMB_IND: 0
CODE_CHAN: 9
- 33 -
Handoff Process
? Handoff Completion Message
BTS send release order to notify call termination to MS.
LAST_HDM_SEQ
PILOT_PN


PROTOCOL_REV : 3
Handoff completion
MSG_Length: 8
MSG_TYPE: 10
ACK_SEQ: 3
MSG_SEQ: 2
ACK_REQ: 1
ENCRYPTION: 0
LAST_HDM_SEQ: 0
PILOT_PN: 375
PILOT_PN: 159
- 34 -

? System Parameter Message : Parameters
BTS send system parameter message to notify various system information for MS.
Parameters
Contents
System configuration
SID, NID, MAX_SLOT_CYCLE_INDEX
Registration parameters
REG_ZONE, TOTAL_ZONE, ZONE_TIMER, MULTI_SIDS,

MULTI_NIDS, HOME_REG, FOR_SID_REG, FOR_NID_REG,
POWER_UP_REG, POWER_DOWN_REG, PARAMETER_REG,
REG_PRD, REG_DIST
BTS information
Pilot PN, BASE_ID, BASE_CLASS, BASE_LAT, BASE_LONG
Pilot search parameters
SRCH_WIN_A, SRCH_WIN_N, SRCH_WIN_R, RESCAN
Handoff parameters
NGHBR_MAX_AGE, T_ADD, T_DROP, T_COMP, T_TDROP
Power report parameters
PWR_REP_THRESH, PWR_REP_FRAMES, PWR_REP_DEALY
- 35 -

? System Parameter Message(1)
SID
NID
REG_ZONE
TOTAL_ZONE
ZONE_TIMER
MULT_SIDS
MULT_NIDS
BASE_ID
BASE_CLASS
PAGE_CHAN
MAX_SLOT_CYCLE_INDEX
HOME_REG
FOR_SID_REG
FOR_NID_REG
POWER_UP_REG
POWER_DOWN_REG
PARAMETER_REG
REG_PRD
registration zone
number of registration zones to be retained
zone timer length
multiple SID storage indicator
multiple NID storage indicator
base station identification
base station class
number of paging channels
maximum slot cycle index
home registration indicator
SID roamer registration indicator
NID roamer registration indicator
power-up registration indicator
power-down registration indicator
parameter change registration indicator
registration period
0 : disable
REG_PRD/4
BASE_LAT
BASE_LON
others : 2
* 0.08 sec
base station latitude
base station longitude

PROTOCOL_REV : 3
System Parameters
MSG_TYPE: 1
PILOT_PN: 159
CONFIG_MSG_SEQ: 32
SID: 13824
NID: 2
REG_ZONE: 0
TOTAL_ZONE: 0
ZONE_TIMER: 0
MULT_SIDS: 0
MULT_NIDS: 0
BASE_ID: 2681
BASE_CLASS: 0
-> Public Microcellular System
PAGE_CHAN: 1
MAX_SLOT_CYCLE_INDEX: 2
-> 5.120 sec
HOME_REG: 1
FOR_SID_REG: 1
FOR_NID_REG: 1
POWER_UP_REG: 1
POWER_DOWN_REG: 1
PARAMETER_REG: 1
REG_PRD: 0
-> 0.001 min
BASE_LAT: 574652
BASE_LON: 1676668
- 36 -

? System Parameter Message(2)
REG_DIST
SRCH_WIN_A
SRCH_WIN_N
SRCH_WIN_R
NGHBR_MAX_AGE
PWR_REP_THRESH
PWR_REP_FRAMES
PWR_THRESH_ENABLE
PWR_REP_DELAY
RESCAN
T_ADD
T_DROP
T_COMP
T_TDROP
EXT_SYS_PARAMETER
GLOBAL_REDIRECT
registration distance
0 : disable
search window size for active and candidate set
search window size for neighbor set
search window size for remaining set
neighbor set maximum age
Maximum age value beyond which mobile stations
are to drop members from the neighbor set
power control reporting threshold
power control reporting frame count
PWR_REP_FRAMES/2
2
* 5 frames
threshold report mode indicator
power report delay
PWR_REP_DEALY * 4 frames delay
rescan indicator
active set versus candidate set comparison
threshold
drop timer value
extended system parameter message indicator
global service redirection message indicator
REG_DIST: 0
SRCH_WIN_A: 6
-> 28
SRCH_WIN_N: 8
-> 60
SRCH_WIN_R: 9
-> 80
NGHBR_MAX_AGE: 0
PWR_REP_THRESH: 2
PWR_REP_FRAMES: 9
-> 113
PWR_THRESH_ENABLE: 1
PWR_PERIOD_ENABLE: 0
PWR_REP_DELAY: 1
RESCAN: 0
T_ADD: 28
T_DROP: 32
T_COMP: 8
T_TDROP: 3
EXT_SYS_PARAMETER: 1
EXT_NGHBR_LIST: 0
GEN_NGHBR_LIST: 0
GLOBAL_REDIRECT: 0
- 37 -

? In-Traffic System Parameter Message
BTS send in-traffic system parameter message to notify
various system information for MS in traffic state.
SID
NID
SRCH_WIN_A
SRCH_WIN_N
SRCH_WIN_R
NGHBR_MAX_
AGE
T_ADD
T_DROP
T_COMP
T_TDROP
search window size for active and candidate set
search window size for neighbor set
search window size for remaining set
neighbor set maximum age
Maximum age value beyond which mobile
stations are to drop members from the neighbor
set
active set versus candidate set comparison
threshold
drop timer value

PROTOCOL_REV : 3
In-Traffic system parameters
MSG_LENGTH: 14
MSG_TYPE: 7
ACK_SEQ: 3
MSG_SEQ: 6
ACK_REQ: 1
ENCRYPTION: 0
SID: 13824
NID: 2
SRCH_WIN_A: 6
SRCH_WIN_N: 8
SRCH_WIN_R: 9
T_ADD: 28
T_DROP: 32
T_COMP: 8
T_TDROP: 3
NGHBR_MAX_AGE: 0
- 38 -

? Access Parameter Message(1)
BTS send access parameter message to notify various
system information about access CAI.
ACC_CHAN
NOM_PWR
INIT_PWR
PWR_STEP
NUM_STEP
number of access channels (ACC_CHAN + 1)

nominal transmit power offset
initial transmit power offset
power increment
number of access probes

PROTOCOL_REV : 3
Access Parameters
MSG_TYPE: 2
PILOT_PN: 159
ACC_MSG_SEQ: 17
ACC_CHAN: 0
NOM_PWR: 3
INIT_PWR: 29
PWR_STEP: 5
NUM_STEP: 3
First Transmit Power

: -mean input power 73 + NOM_PWR(dB) + INIT_PWR(dB)
Increasing Transmit Power for acquiring ACK from BTS
: -mean input power 73 + NOM_PWR(dB) + INIT_PWR(dB) + N * PWR_STEP(dB)
N (step counter from 0 up to NUM_STEP)
- 39 -

? Access Parameter Message(2)
PWR_STEP
NUM_STEP
MAX_CAP_SZ
PAM_SZ
PSIST
MSG_PSIST
REG_PSIST
PROBE_PN_RAN
ACC_TMO
PROBE_BKOFF
BKOFF
MAX_REQ_SEQ
MAX_RSP_SEQ
AUTH
power increment
number of access probes
maximum access channel message capsule size
(MAX_CAP_SZ + 3) frames
access channel preamble length
persistence value for access overload classes
0 ~ 9 : normal MS
10 : testing MS
11 : emergency MS
persistence modifier for access channel attempts for
message transmission
persistence modifier for access channel attempts for
registrations which are not responses to the registration
request order
time randomization for access channel probes
acknowledgement timeout
access channel probe backoff range
access channel probe sequence backoff range
maximum number of access probe sequence for an
access channel request
maximum number of access probe sequence for an
access channel response
authenticaton mode
MAX_CAP_SZ: 3
PAM_SZ: 2
PSIST(0-9): 0
PSIST(10-15): 0 0 0 0 0 0
MSG_PSIST: 0
REG_PSIST: 0
PROBE_PN_RAN: 0
ACC_TMO: 1
PROBE_BKOFF: 0
BKOFF: 0
MAX_REQ_SEQ: 3
MAX_RSP_SEQ: 3
AUTH: 0
NOM_PWR_EXT: 0
PSIST_EMG_INCL: 0
- 40 -

? Neighbor List Message
BTS send neighbor list message to notify BTSs
information around current BTS.
pilot PN sequence offset inex
pilot PN sequence offset index increment
number of pilot PN offset index in neighbor list
NUM_NGHBR
message
neighbor configuration
0 : same configuration as the current BTS
1 : different configuration
NGHBR_CONFIG
(paging channel on the current CDMA FA)
2 : different configuration
(paging channel on the 1st CDMA FA)
3 : unknown configuration
NGHBR_PN
neighbor pilot PN sequence offset index
PILOT_PN
PILOT_INC

PROTOCOL_REV : 3
Neighbor List
MSG_TYPE: 3
CONFIG_MSG_SEQ: 34
PILOT_INC: 3
NUM_NGHBR :20
NGHBR[0] NGHBR_CONFIG: 0 NGHBR_PN: 234(0x00EA)
NGHBR[1] NGHBR_CONFIG: 0 NGHBR_PN: 402(0x0192)
NGHBR[2] NGHBR_CONFIG: 0 NGHBR_PN: 162(0x00A2)
NGHBR[3] NGHBR_CONFIG: 0 NGHBR_PN: 330(0x014A)
NGHBR[4] NGHBR_CONFIG: 0 NGHBR_PN: 498(0x01F2)
NGHBR[5] NGHBR_CONFIG: 0 NGHBR_PN: 159(0x009F)
NGHBR[6] NGHBR_CONFIG: 0 NGHBR_PN: 495(0x01EF)
NGHBR[8] NGHBR_CONFIG: 0 NGHBR_PN: 174(0x00AE)
NGHBR[9] NGHBR_CONFIG: 0 NGHBR_PN: 126(0x007E)
NGHBR[12] NGHBR_CONFIG: 0 NGHBR_PN: 123(0x007B)
NGHBR[14] NGHBR_CONFIG: 0 NGHBR_PN: 459(0x01CB)
NGHBR[15] NGHBR_CONFIG: 0 NGHBR_PN: 90(0x005A)
NGHBR[19] NGHBR_CONFIG: 0 NGHBR_PN: 432(0x01B0)
- 41 -

? Neighbor List Update Message
BTS send neighbor list message to notify BTSs
information around current BTS in traffic state.
PILOT_PN
PILOT_INC
NGHBR_PN
pilot PN sequence offset inex

pilot PN sequence offset index increment
neighbor pilot PN sequence offset index

PROTOCOL_REV : 3
Neighbor list update
MSG_LENGTH: 29
MSG_TYPE: 8
ACK_SEQ: 2
MSG_SEQ: 4
ACK_REQ: 1
ENCRYPTION: 0
PILOT_INC: 3
NGHBR_PN: 468
NGHBR_PN: 381
NGHBR_PN: 378
NGHBR_PN: 87
NGHBR_PN: 423
NGHBR_PN: 162
NGHBR_PN: 21
NGHBR_PN: 123
NGHBR_PN: 189
NGHBR_PN: 237
NGHBR_PN: 357
NGHBR_PN: 405
NGHBR_PN: 327
NGHBR_PN: 234
NGHBR_PN: 402
NGHBR_PN: 147
NGHBR_PN: 495
- 42 -

? Data Burst Message
BTS/MS send data burst message to notify short
message data each other.
BURST_TYPE
Data indicator
3 : SMS(Short Message Service)
[ 2002 Mar 19 01:46:18.648 ] Reverse Traffic Channel

PROTOCOL_REV : 6
PARAMETER_ID: 0
Data burst
- > TELESERVICE IDENTIFIER
PARAMETER_LEN: 2
IDENTIFIER: 4098
MSG_Length: 67
MSG_TYPE: 4
ACK_SEQ: 4
MSG_SEQ: 3
ACK_REQ: 1
ENCRYPTION: 0
MSG_NUMBER: 1
BURST_TYPE: 3
NUM_MSGS: 1
NUM_FIELDS: 58
SMS_MSG_TYPE: 0
Point to Point Message
PARAMETER_ID: 4
- > CALLED ADDRESS
PARAMETER_LEN: 7
DIGIT_MODE: 0
- > CHARi is consist of 4 bit BCD code
NUMBER_MODE: 0
NUM_FIELDS: 11
CHARi: 1 3 9 5 8 1 8 1 4 8 0
PARAMETER_ID: 6
- > BEARER RECEIVE RESPONSE OPTION
PARAMETER_LEN: 1
REPLY_SEQ: 3
PARAMETER_ID: 8
- > BEARER DATA
PARAMETER_LEN: 39
SUBPARAMETER_ID: 0
- > MESSAGE IDENTIFIER
SUBPARAMETER_LEN: 3
MESSAGE_TYPE: 2
MESSAGE_ID: 27
SUBPARAMETER_ID: 1
- > USER DATA
SUBPARAMETER_LEN: 25
MSG_ENCODING: 2
NUM_FIELDS: 26
CHARi: n o w i s t e s t i n g
I am sorry
SUBPARAMETER_ID: 10
- > RESPONSE OPTION
SUBPARAMETER_LEN: 1
USER_ACK_REQ: 0
DAK_SEQ: 1
SUBPARAMETER_ID: 14
- > CALLBACK NUMBER
SUBPARAMETER_LEN: 2
DIGIT_MODE: 0 (CHARi -> 4 bits)
NUM_FIELDS: 0
CHARi:
- 43 -

? Send Burst DTMF Message
MS send send burst DTMF message to deliver
DTMF data to BTS.
Number of DTMF Digits
DTMF pulse with code
0 : 95 ms
1 : 150 ms
DTMF_ON_LENGTH 2 : 200 ms
3 : 250 ms
4 : 300 ms
5 : 350 ms
DTMF inter-digit interval code
0 : 60 ms
DTMF_OFF_LENGT
1 : 100 ms
H
2 : 150 ms
3 : 200 ms
DIGITi
DTMF digit
NUM_DIGITS
[ 2002 Mar 20 02:10:03.275 ] Reverse Traffic Channel

PROTOCOL_REV : 3
Send burst DTMF
MSG_Length: 13
MSG_TYPE: 7
ACK_SEQ: 6
MSG_SEQ: 4
ACK_REQ: 1
ENCRYPTION: 0
NUM_DIGITS: 11
DTMF_ON_LENGTH: 1
DTMF_OFF_LENGTH: 1
DIGITi : 0
DIGITi : 1
DIGITi : 1
DIGITi : 9
DIGITi : 1
DIGITi : 3
DIGITi : 6
DIGITi : 3
DIGITi : 5
DIGITi : 6
DIGITi : 0
- 44 -
Status Packet
? General TA w/sup Channel
Information
Searched Pilot information
Pilot PN offset, Pilot Set,
Chip delay, Energy Strength(Ec/Io)
Finger information
Pilot PN offset for each finger
Chip delay for each finger
Energy Strength for each finger
Location in Active Pilot Set
Combined Ec/Io
Power Control information

Rx Power, Tx Power, Tx_Adjust
[ 2001 Nov 22 07:44:36.210 ] General TA w/sup channel info

PROTOCOL_REV : 3
BAND_CLASS : 0 (800MHz Cellular Band)
--- Searcher Information --SEARCH_PILOT: 375
SEARCH_PILOT_SET : Active Set , not the reference pilot
SRCH_STATE : 8 (Operation on the Traffic Channel)
WINDOW_CENTER : 0xC6F0 WINDOW_END : 0xC760
Path Position : 0x1D 0x23 0x29 0x13
Path Energy : 853 145 145 116 SearcherEc/Io : -12.651
---- Finger Information ---Finger PN Sector POS Ec/Io
------------------------------1 159 0 0xC6B8 -4.732
2 375 1 0xC6F4 -12.559
3 159 0 0xC6A3 -19.829
4 159 0 0xC6C4 -17.610
** Combined Ec/Io: -3.77
RX_AGC : 235
RX_POWER : -70.248 dBm(Celluar)
TX_AGC : 126
TX_GAIN_ADJ : -7
TX_POWER : -10.267 dBm(Celluar)
NUM_SUP_CHAN: 0
- 45 -
Status Packet
? General TA information

Finger information
Combined Ec/Io

[ 2001 Nov 26 03:21:20.127 ] General TA info

PROTOCOL_REV : 3
SEARCH_PILOT_SET : Active Set
SRCH_STATE : 8 (Operation on the Traffic Channel)
WINDOW_CENTER : 0x710 WINDOW_END : 0x10780
Path Position : 0x1C 0x26 0x29 0x31
Path Energy : 949 769 164 121 SearcherEc/Io : -10.634
------------------------------1
148 0 0x10711 -14.600
2 148 0 0x1073A -12.839
3 148 0 0x1070F -15.569
4
148 0 0x10715 -18.579
RX_AGC : 13
RX_POWER : -58.915 dBm(Celluar)
TX_AGC : 175
TX_GAIN_ADJ : 20
TX_POWER : 6.060 dBm(Celluar)
- 46 -
Status Packet
? Finger information
Finger information
[ 2001 Nov 30 09:19:35.448 ] Finger info

PROTOCOL_REV : 3

PILOT: 400 400 400 0

X: 47208 47219 47228 47207
Y: 199 72 20 0
- 47 -
Status Packet
? Searcher information

Pilot PN offset, Chip delay, Energy
Strength(Ec/Io)
[ 2001 Nov 30 09:19:35.108 ] Searcher info 2

PROTOCOL_REV : 3
PREGAIN: 0
INTEGRATION: 128
NON_COHERENT: 0
PILOT_OFFSET: 9548
WINDOW_POSITION: 47304
WINDOW_CENTER: 47208
TCXO_DRIFT: 0
NUM_ENTRIES: 48
ENERGIES: 0000 0000 0000 0000 0000 0000 0000 0000
ENERGIES: 0000 0000 0000 0000 0000 0000 0000 0000
ENERGIES: 0000 0000 0000 0000 0000 0000 0000 0000
ENERGIES: 0000 0000 0000 0000 0000 0000 0000 0000
ENERGIES: 0000 0000 0000 0000 0000 0000 0000 0044
ENERGIES: 0000 0000 0000 0000 0000 0000 0000 0000
- 48 -
Status Packet
? Searcher and Finger
information
Finger information
Combined Ec/Io
[ 2002 Mar 28 06:07:17.236 ] Searcher and finger

information
PROTOCOL_REV : 6
SEARCH_PILOT_SET : Active Set
SRCH_STATE : 6 -> Operation on the Paging Channel
WINDOW_CENTER : 0x2AD8 WINDOW_END : 0x2C68
Peak Pos(1/2Chp) Ec/Io
------------------------------1
101
-4.419
2
113
-15.661
3
96
-18.552
4
197
-20.372
------------------------------1 This Finger is not locked
2 482 0 0x2ADE -4.147
3 482 0 0x2AD3 -16.149
4 This Finger is not assigned
- 49 -
Status Packet
? Access Probe information
SEQ_NUM
PROBE_NUM
RX_AGC
TX_ADJ
PSIST
CHANNEL
RANDOM_M
BACKOFF_RS
BACKOFF_RT
Probe Sequence Number

Probe Number
Rx Power
Tx_Adjust
number of psist tests
number of access channel (+1)
Probe PN Random Delay
Sequence Backoff Delay
Probe Backoff Delay
[ 2001 Nov 22 07:44:33.408 ] Access probe info

PROTOCOL_REV : 3
SEQ_NUM: 1
PROBE_NUM: 1
RX_AGC: 222
TX_ADJ: 252
PSIST: 1
CHANNEL: 0
RANDOM_M: 0
BACKOFF_RS: 0
BACKOFF_RT: 0
- 50 -
Status Packet
? Markov Statistics
It shows the statistics of frames that are received
from BTS.
[ 2001 Nov 22 07:51:24.103 ] Markov statistics

PROTOCOL_REV : 3
Total # of Frames: 100
8Kbps non-Markov
Full Rate: 58
Half Rate: 4
Quarter Rate: 0
Eighth Rate: 38
Erasure: 0
FER : : 0.00
- 51 -
Status Packet
? Sparse AGC Power Control
information
[ 2001 Nov 22 07:44:55.583 ] Sparse AGC power control

PROTOCOL_REV : 3
ADC_THERM: 172
BATT_COLT: 252
TX_POWER_LIMIT: 0
Sample RX PWR TX PWR POWER_CTL_VAL
-------------------------------------------------------------------1 : -75.248
-7.269
-2.000
2 : -75.581
-4.270
0.000
3 : -76.915
-3.604
0.000
4 : -77.248
-4.937
-2.000
5 : -77.248
-6.270
-4.000
6 : -76.915
-8.269
-6.000
7 : -76.581
-10.268
-8.000
8 : -75.915
-12.600
-10.000
9 : -75.248
-14.933
-12.000
10 : -74.915
-16.599
-13.000
.
90 : -76.581
-12.267
-10.000
91 : -76.248
-12.267
-10.000
92 : -75.581
-14.600
-12.000
93 : -74.915
-15.266
-12.000
94 : -74.915
-14.933
-11.000
95 : -75.915
-15.599
-12.000
96 : -75.248
-16.599
-13.000
97 : -74.581
-15.932
-12.000
98 : -74.915
-16.266
-12.000
99 : -76.581
-15.599
-12.000
100 : -77.248
-16.599
-14.000
- 52 -
CAI Message Analysis

with Dr.CDMA
- 53 -
Dr.DataDM(real-time)
Message Filter Selection
Filter Edit Button
Pause Button
Total Message Stream
Detailed Message
Filtered Message Stream
- 54 -
Dr.Analyzer/Viewer (post-process)
Total Message Stream
Detailed Message
Real Packet
User Selected Message
(to be exported)
Filtered Message Stream
- 55 -
Appendix
- 56 -
MSID Table
Mobile Station Identification
- 57 -
IMSI Table
International Mobile Station Identifier
- 58 -
ADDR_TYPE
Address type
- 59 -
SCM Table
Station Class Mark
- 60 -
REG_TYPE
Registration type
- 61 -
ORDER Table(1) Reverse Link
- 62 -
ORDER Table(2) Reverse Link
- 63 -
ORDER Table(3) Forward Link
- 64 -
ORDER Table(4) Forward Link

(Addition to table)
Order : 010000
- 65 -
Service Option
- 66 -
Information Record Types
- 67 -
Page Record Format

Mobile Station Addressed page
Broadcast page
- 68 -
Access Sequence
Random value
[0 ~ (2PROBE_PN_RAN 1)] Chips
MAX_REQ_SEQ
MAX_RSP_SEQ
PSIST(0~9)
Random value(0 ~ 1+BKOFF)
- 69 -
Access Probe
NUM_STEP
PWR_STEP
(2+ACC_TMO)*80ms
Random value(1 + PROBE_BKOFF)
1+PAM_SZ
1+MAX_CAP_SZ
- 70 -

11.china CAI Message

Загружено:

Сведения о документе

Исходное описание:

Оригинальное название

Авторское право

Доступные форматы

Поделиться этим документом

Поделиться или встроить документ

Параметры публикации

Этот документ был вам полезен?

Это неприемлемый материал?

Авторское право:

Доступные форматы

11.china CAI Message

Загружено:

Авторское право:

Доступные форматы

CAI Message Analysis

Dr.CDMA Do not copy without permission

Forward Traffic Channels

Sync to GPS time

Send signaling message and

Send overhead messages

Dr.CDMA Do not copy without permission

Reverse Traffic Channels

Dr.CDMA Do not copy without permission

Forward Traffic Channel

Dr.CDMA Do not copy without permission

Dr.CDMA Do not copy without permission

Base Station Order(Ack)

Channel Assignment Message

? Service Option Response

Dr.CDMA Do not copy without permission

Slotted(General) Page Message (Paging)

Slotted(General) Page Message

? Service Option Response (F-Traf)

Dr.CDMA Do not copy without permission

Mobile Station Order(Release)

Pilot Strength Measurement Message

Dr.CDMA Do not copy without permission

Pilot Strength Measurement Message

System Parameter Update

System Parameter Message

Dr.CDMA Do not copy without permission

System Parameter Message

Data Burst Message

Send Burst DTMF Message

General TA w/sup Channel information

Dr.CDMA Do not copy without permission

protocol revision level

Dr.CDMA Do not copy without permission

[ 2001 Nov 22 07:48:26.986 ] Sync Channel

Dr.CDMA Do not copy without permission

[ 2001 Nov 22 07:48:27.963 ] Paging Channel

mobile station identifier field type

Dr.CDMA Do not copy without permission

[ 2001 Nov 22 03:36:43.070 ] Access Channel

ack for message sequence

Dr.CDMA Do not copy without permission

[ 2001 Nov 26 03:21:13.963 ] Paging Channel

international mobile station identifier

Dr.CDMA Do not copy without permission

[ 2001 Nov 22 07:44:33.310 ] Access Channel

ack for message sequence

Dr.CDMA Do not copy without permission

[ 2001 Nov 22 07:45:11.003 ] Paging Channel

Dr.CDMA Do not copy without permission

[ 2001 Nov 22 07:45:11.242 ] Paging Channel

message encryption mode

Dr.CDMA Do not copy without permission

[ 2001 Nov 22 07:45:11.705 ] Forward Traffic Channel

message encryption mode

Dr.CDMA Do not copy without permission

[ 2001 Nov 22 07:45:11.770 ] Reverse Traffic Channel

Dr.CDMA Do not copy without permission

[ 2001 Nov 22 07:45:12.005 ] Forward Traffic Channel

Dr.CDMA Do not copy without permission

[ 2001 Nov 22 07:45:12.070 ] Reverse Traffic Channel

message encryption mode