Академический Документы
Профессиональный Документы
Культура Документы
ITU/BDTArab ITU/BDT Arab Regional Workshop on Workshopon 4GWirelessSystems LTETechnology Session6:LTE/SAEMobility andSession Managment
Speakers Date M.Lazhar BELHOUCHET M.HakimEBDELLI M Hakim EBDELLI 27 29January 2010
LTE/SAEMobilityandSessionManagment
www.cert.nat.tn
Agenda
LTE/SAEMobilityAreas TrackingAreas T ki A UEIdentifications LTEMobility&ConnectionStates S Co ect o a age e t ( C ) a d ad o EPSConnectionManagement(ECM)andLTERadio ResourceControlStates RRCStates RRC States LTE/SAEBearer
2
LTE/SAEMobilityandSessionManagment
www.cert.nat.tn
LTE/SAEMobilityAreas
TwoareasaredefinedforhandlingofmobilityinLTE/SAE: The Cell TheCell
identifiedbytheCellIdentity.
LTE/SAEMobilityandSessionManagment
www.cert.nat.tn
TrackingAreas
Tracking Area
HSS TAI1 TAI1 TAI2 TAI2 TAI2 TAI2 TAI3 TAI3 TAI3 TAI3 TAI1 TAI1 TAI1 TAI2 TAI2 TAI2 TAI2 TAI3 TAI3 TAI3
S eNB S-eNB eNB eNB
MME
MME
Cell Identity
LTE/SAEMobilityandSessionManagment
www.cert.nat.tn
TrackingAreas:UseofS1flexInterface
HSS TAI1 TAI1 TAI1 TAI2 TAI2 TAI2 TAI2 TAI2 TAI3 TAI3
S-eNB eNB eNB
1 2 3
TAI1-2 TAI1-2 TAI2 TAI2 TAI2 TAI2 TAI2 TAI2 TAI3 TAI3
MME
1 2 3 S-MME
Cell Identity
LTE/SAEMobilityandSessionManagment
www.cert.nat.tn
UEIdentifications
IMSI
I t InternationalMobileSubscriberIdentity ti l M bil S b ib Id tit
STMSI
SAETemporaryMobileSubscriberIdentity
CRNTI C RNTI
CellRadioNetworkTemporaryIdentity
S1 AP UE ID S1APUEID
S1ApplicationProtocolUserEquipmentIdentity
6
LTE/SAEMobilityandSessionManagment
www.cert.nat.tn
UEIdentifications:IMSI
IMSI:InternationalMobileSubscriberIdentity. UsedinSAEtouniquelyidentifyasubscriberworldwide. ItsstructureiskeptinformofMCC+MNC+MSIN:
MCC:mobilecountrycode MNC: mobile network code MNC:mobilenetworkcode MSIN:mobilesubscriberidentificationnumber
IMSI
LTE/SAEMobilityandSessionManagment
www.cert.nat.tn
UEIdentification:STMSI
STMSI:SAETemporaryMobileSubscriberIdentity ItisdynamicallyallocatedbytheservingMME(SMME). ItsmainpurposeistoavoidusageofIMSIonair. InternallytheallocatingMMEcantranslateSTMSIintoIMSIandvice versa. versa WhethertheSTMSIisuniqueperMMEorperTAisnotclearyet. IncasetheS1flexinterfaceoptionisused,thentheeNBmustselectthe p , rightMMEforaUE.ThisisdonebyusingsomebitsoftheSTMSIto identifytheservingMMEoftheUE.Thisidentifiermightbeaunique MMEIDoraformofMMEcolorcode.Underinvestigation. MME ID or a form of MME color code Under investigation
MME-ID or MME color code
S-TMSI
32 bits 8
LTE/SAEMobilityandSessionManagment
www.cert.nat.tn
UEIdentifications:CRNTI
CRNTI:CellRadioNetworkTemporaryIdentity C RNTI i ll t d b th NB servingaUE CRNTIisallocatedbytheeNB i UE whenitisinactivemode(RRC_CONNECTED) Thisisatemporaryidentityfortheuseronly g validwithintheservingcelloftheUE. Itisexclusivelyusedforradiomanagement procedures. procedures XRNTIidentificationsunderinvestigation.
9
LTE/SAEMobilityandSessionManagment
www.cert.nat.tn
UEIdentifications:S1APUEID
S1APUEID:S1ApplicationProtocolUserEquipmentIdentity. Two additional temporary identifiers allocated by eNB and TwoadditionaltemporaryidentifiersallocatedbyeNBand MME:
eNBS1APUEID MMES1APIEID
TheirpurposeistoallowefficientimplementationofS1 controlsignaling(S1AP=S1ApplicationProtocol) TheyshallalloweasydistributionofS1signalingmessages insideMMEandeNB. i id MME d NB NOTE:ThisconceptissimilartoSCCPlocalreferencesknown fromIuorAinterfacein3G/2G. from Iu or A interface in 3G/2G www.cert.nat.tn LTE/SAEMobilityandSessionManagment 10
HSS
UEIdentificationsSummary
TAI1 TAI1 TAI1 TAI1 TAI1 TAI2 TAI2 TAI2 TAI2 TAI2 TAI2 TAI2 TAI2 TAI2 TAI2 TAI2 TAI3 TAI3 TAI3 TAI3 1 2 3
IMSI
MCC MNC MSIN
MME
eNB
Cell Identity C ll Id i
eNB
C-RNTI
S-MME S MME
S-eNB
International Mobile Subscriber Identity S-Temporary Mobile Subscriber Identity Cell Radio Network Temporary Identity Serving MME Serving E-Node B Tracking Area Identity (MCC+MNC+TAC) 11
S-TMSI
MME-ID MME ID or MME color code
LTE/SAEMobilityandSessionManagment
www.cert.nat.tn
12
LTE/SAEMobilityandSessionManagment
www.cert.nat.tn
LTEMobility&ConnectionStates
TherearetwosetsofstatesdefinedfortheUE basedontheinformationheldbytheMME. b d th i f ti h ld b th MME Theseare:
1.EPS*MobilityManagement(EMM)states 2 EPS*ConnectionManagement(ECM)states 2.EPS Connection Management (ECM) states
13
LTE/SAEMobilityandSessionManagment
www.cert.nat.tn
EPSMobilityManagement(EMM)states
EMMDEREGISTERED: InthisstatetheMMEholdsnovalidlocationinformationabouttheUE MMEmaykeepsomeUEcontextwhentheUEmovestothisstate(e.g.toavoid MME may keep some UE context when the UE moves to this state (e g to avoid theneedforAuthenticationandKeyAgreement(AKA)duringeveryattach procedure) SuccessfulAttachandTrackingAreaUpdate(TAU)proceduresleadtotransitionto EMMREGISTERED EMMREGISTERED: EMM REGISTERED InthisstatetheMMEholdslocationinformationfortheUEatleasttothe accuracyofatrackingarea accuracy of a tracking area InthisstatetheUEperformsTAUprocedures,respondstopagingmessagesand performstheservicerequestprocedureifthereisuplinkdatatobesent.
14
LTE/SAEMobilityandSessionManagment
www.cert.nat.tn
EPSMobilityManagement(EMM)states
Attach EMM deregistered Detach EMM registered i t d
15
LTE/SAEMobilityandSessionManagment
www.cert.nat.tn
16
LTE/SAEMobilityandSessionManagment
www.cert.nat.tn
EPSConnectionManagement(ECM)states
ECMIDLE: InthisstatethereisnoNASsignalingconnectionbetweentheUEandthe In this state there is no NAS signaling connection between the UE and the networkandthereisnocontextfortheUEheldintheEUTRAN. ThelocationoftheUEisknowntowithintheaccuracyofatrackingarea Mobilityismanagedbytrackingareaupdates. ECMCONNECTED: InthisstatethereisasignalingconnectionbetweentheUEandtheMME g g whichisprovidedintheformofaRadioResourceControl(RRC)connection betweentheUEandtheEUTRANandanS1connectionfortheUEbetween theEUTRANandtheMME. th E UTRAN d th MME ThelocationoftheUEisknowntowithintheaccuracyofacell. Mobilityismanagedbyhandovers.
17
LTE/SAEMobilityandSessionManagment
www.cert.nat.tn
RRCStates
RRC_IDLE:
Nosignallingconnection betweentheUEandtheE UTRAN. I.e.:PLMNSelection. UEReceivessysteminformation y andlistensforPaging. MobilitybasedonCellRe selectionperformedbyUE. selection performed by UE. NoRRCcontextstoredinthe eNB. RACH procedure used on RRC RACHprocedureusedonRRC connectionestablishment.
RRC_CONNECTED:
UEhasanEUTRANRRC connection. UEhascontextinEUTRAN(C RNTIallocated). EUTRANknowsthecellwhich theUEbelongsto. Networkcantransmitand/or receivedatato/fromUE. receive data to/from UE. Mobilitybasedonhandovers UEreportsneighbourcell measurements
18
LTE/SAEMobilityandSessionManagment
www.cert.nat.tn
EPSConnectionManagement
RRC Connection
S1 Connection
MME
ECM Connected
19
LTE/SAEMobilityandSessionManagment
www.cert.nat.tn
EMM&ECMStatesTransitions
Power On Registration (Attach) Allocate C-RNTI, S_TMSI Allocate IP addresses Authentication Establish security context Release due to Inactivity Release RRC connection Release C-RNTI Configure DRX for paging
EMM_Deregistered ECM_Idle
EMM_Registered ECM_Connected
EMM_Registered ECM_Idle
New Traffic
Establish RRC Connection Release C-RNTI, S-TMSI Allocate C-RNTI Release IP addresses Release S-TMSI Release IP addresses Timeout of Periodic TA Update
20
LTE/SAEMobilityandSessionManagment
www.cert.nat.tn
EMM&ECMStatesSummary
EMM_Deregistered ECM_Idle
Network Context: no context exists Allocated IDs: IMSI UE Position: unknown to network Mobility: PLMN/cell l ti PLMN/ ll selection UE Radio Activity: none
EMM_Registered ECM_Connected
Network Context: all info for ongoing transmission/reception Allocated IDs: IMSI, S-TMSI per TAI 1 or several IP addresses C-RNTI UE Position: known on cell level Mobility: NW controlled handover UE Radio Activity: DL w/o DRX UL w/o DTX
EMM_Registered ECM_Idle
Network Context: security keys enable fast transition to ECM_CONNECTED Allocated IDs: IMSI, S TMSI per TAI S-TMSI 1or several IP addresses UE Position: known on TA level (TA list) Mobility: cell reselection UE Radio Activity: DL DRX for paging no UL
21
LTE/SAEMobilityandSessionManagment
www.cert.nat.tn
LTE/SAEBearer
Themainfunctionofeverymobile h i f i f bil radiotelecommunicationnetworkis toprovidesubscriberswithtransport bearersfortheiruserdata. b f th i d t Incircuitswitchednetworksusersget afixedassignedportionofthe networksbandwidth. t k b d idth Inpacketnetworksusersgetabearer withacertainqualityofservice(QoS) rangingfromfixedguaranteed f f d d bandwidthdowntobesteffort serviceswithoutanyguarantee. LTE/SAEisapacketorientedsystem
PDN GW
LTE/SAE Bearer
UE
22
LTE/SAEMobilityandSessionManagment
www.cert.nat.tn
SAEBearerArchitecture
SAE B Bearer spans th complete network, f the l t t k from UE over EUTRAN and EPS up t th d to the connector of the external PDN. The SAE bearer is associated with a quality of service (QoS) usually expressed by a label or QoS Class Identifier (QCI).
LTE-Uu S1-U cell eNB End-to-End Service SAE Bearer Service (EPS Bearer)
SAE Radio Bearer Service (SAE RB) SAE Access Bearer Service S5/S8 Bearer Service External Bearer Service
Serving Gateway
S5
PDN Gateway
Sgi PDN
E-UTRAN
EPC
PDN
23
LTE/SAEMobilityandSessionManagment
www.cert.nat.tn
SAEBearerSections
S5/S8bearer
BetweenthePDNGWandSAEGW. ThisisusuallyaGTPorMIPtunnelbetweenthetwonetworkelements.
SAEAccessBearerBetweeneNB andSAEGW.
The SAE Access Bearer is implemented using the 2G/3G GTP protocol which TheSAEAccessBearerisimplementedusingthe2G/3GGTPprotocolwhich buildsaGTPtunnelbetweeneNB andSAEGW. ThesetupofthisSAEAccessBearerismanagedbytheMME. SAEGWandeNB d d donotdirectlyexchangesignalingtocreateit. di l h i li i
RadiobearersBetweenUEandeNB.
TheeNB connectsaradiobearerinternallywiththeassociatedSAEaccess y beareronS1Uinterface. Themappingofradiobearerstophysicalresourcesontheairinterfaceisthe majortaskoftheeNB major task of the eNB scheduler.
24
LTE/SAEMobilityandSessionManagment
www.cert.nat.tn
25
LTE/SAEMobilityandSessionManagment
www.cert.nat.tn