Академический Документы
Профессиональный Документы
Культура Документы
GSM BASIC
GSM Overview Signaling System 7
GSM INTERFACES
Um
GSM PROTOCOLS
MAP CAP ISUP BICC SCCP SCTP TCAP H.248 SIGTRAN
In some cases, an SP in the network may have more than one identity, for example, when interconnecting two networks. According to CCITT, the Signaling Point Code is a 14 -bit number for both national and international SPs. In the North American SS7 network, every node is addressed by a three-level number defined by its network, cluster, and member numbers. Each of these
numbers is an 8-bit number and can assume values from 0 to 255. This three -level address is known as the point code of the signaling point. Since network numbers are a relatively scarce resource, company networks are expected to meet certain size requirements to be assigned a network number.
MTP Summary
The Message Transfer Part is the part of the CCITT No. 7 Signaling System that is responsible for transmission of signal units with information provided by user parts, from one SP to another.
MTP level 3 functions are responsible for distribution and routing of messages, whereas signaling network management. Level 2 generally handles error-free point-to-point transmission (error detection and error correction by retransmissions) and supervision of the data link, on which the transmission goes. The Message Transfer Part was originally developed to handle inter-exchange circuit-related signaling, for example, call set-up controlled by the Telephony User Part or, later, ISDN User Part. MTP addressing and routing capabilities are limited to short-distance (to a neighboring SP or via an STP) signal unit transmission. This is sufficient for traditional call set -up procedures
The main transport mechanism here is traditional TDM (PDH / SDH) transmission. To decrease the amount of hardware and the number of links required, around a network, STPs are introduced. The function of an STPs is to relay SS7 messages to their correct destinations. This allows for efficient routing of SS7 messages across the network. Each connection is defined as a signaling link, groped into Link Sets of parallel links. Every Signaling Point have redundant connectio ns to at least two STPs
office in the Signaling Network MTP3 Link: A physical channel used to transfer signaling messages. MTP3 link set: The group of all links between two adjacent signaling points. MTP3 Route: A path from original signaling point to destination signaling point. SLC: Signaling Link Code, used to indicate one link in same linkset, value range : 0~15.
- Interface between MS and BTS is Um (or Air interface). - Interface between BTS and BSC is Abis. - Interface between BSC and MSC is A.
MSC is the central component of the Network Subsystem. The main functions of a MSC are: Provides 2,048Mbps(E1) or better to the other network interfaces(PSDN,ISDN). Billing Location registration Gateway to SMS Synchronizing BSS Handover management
Gateway MSC
The Gateway MSC (GMSC) is the point in the PLMN where calls to mobile subscribers enter the GSM network. Therefore each mobile terminating call must be routed via a
GMSC in the home PLMN of the called MS. The GMSC contains signaling functions for retrieving information from the concerned HLR, which tells how to proceed with call set up. Depending on the interrogation result, the call is either re -routed by GMSC to the MSC where the mobile subscriber is located or forwarded according to the forward -to number.
The mandatory elements of IAM are used as follows: Nature of connection This element contains the information on the number of satellites in the connection, request for continuity check or echo control. Forward call indicators This includes interworking information, signaling system preferences (ISUP required, preferred, not required) and indicators, A-subscriber access type (ISDN or not), and so on. Calling party category This identifies the type of calling subscriber, for example, ordinary subscriber, payphone, operator call, test call, and so on. Transmission medium requirement
Information on call type (speech, 3.1 kHz audio, 64 kbps unrestricted digital, and so on. Called party number This contains the number used to set up the connection. The nature of the number and numbering plan indicator is also included.
*** ACM (Address Complete Message) This message is sent in the backward direction from the terminating exchange to the originating exchange. It indicates that all the necessary address information is received and that the called subscriber is identified and free and alerted by a ringing signal or some other signal. When the ACM is received by the originating local exchange it initiates the sending of a D-channel message (ALERTING) to the calling subscribers terminal. This message may also contain a number of indicators and additional information elements, for example, echo control information. All signaling procedures are controlled by a number of timers. For example, when the originating exchange has sent the initial address message (IAM) the awaiting address complete timer (timer T7) is started. If this timer expires the connection is released and an indication is returned to the calling subscriber. The timer is stopped upon reception of the ACM message.
ANM (Answer Message) ANM indicates that a call has been answered. Typically, when this message is received, the charging of the call starts.
REL (Release Message) This message initiates the release of a circuit used for a call. It can be sent in both directions. Unlike in TUP or older signaling systems, the call release can be initiated by either of the subscribers or by the network.
RLC (Release Complete Message) RLC is sent in response to REL. It confirms that the release of the circuit is completed so that the circuit can return to idle state again and serve new calls.
Gateway MSC
The Gateway MSC (GMSC) is the point in the PLMN where calls to mobile subscribers enter the GSM network. Therefore each mobile terminating call must be routed via a
GMSC in the home PLMN of the called MS. The GMSC contains signaling functions for retrieving information from the concerned HLR, which tells how to proceed with call setup. Depending on the interrogation result, the call is either re -routed by GMSC to the MSC where the mobile subscriber is located or forwarded according to the forward -to number.
IMSI Detach
The IMSI detach procedure may be used by the MS when it is powered off. The subscriber is marked as detached in the VLR and will not be paged. The system information, broadcast over the cell, informs the MS whether IMSI attach and detach procedures are required or not. The IMSI detach procedure is described below: 1) When the MS power is being turned off or the SIM card is taken out, the MS requests an SDCCH. 2) On the SDCCH the MS sends a message to inform the network that the MS is about to switch to detached mode. That is, the subscriber i s no longer reachable. 3) The MSC marks the IMSI as detached in the VLR. The VLR sets an IMSI detached flag and rejects calls incoming to the MS. This procedure is not acknowledged nor is authentication performed.
2) The message received by the BTS is forwarded to the BSC. The BSC allocates an SDCCH, if there is one idle, and tells the BTS to activate it. 3) The MS is now told to tune to the SDCCH. 4) The MS sends a location updating request message that contains the identity of the MS, the identity of the old location area and the type of updating. 5) The authentication parameter is sent to the MS. In this case the MS is already registered in this MSC/VLR and the authentication parameter used is stored in the VLR. (If the MS is not already registered in this MSC/VLR the appropriate HLR or the previously used MSC/VLR must be contacted to retrieve MS subscriber data and authentication parameters) 6) MS sends an answer calculated using the received authentication parameter. 7) If the authentication is successful, the VLR is updated. If needed, the HLR and old VLR are also updated. 8) The MS receives an acceptance of the location updating. 9) The BTS is told to release the SDCCH. 10) The MS is told to release the SDCCH and switches to idle mode. In cases where the MS is busy when it changes location area, it receives the information about the new LAI on the SACCH. The location updating takes place after the call is released. The MS must set up a new connection and perform the procedures described in the previous case.
the comlement to the IMSI detach procedure 4) The VLR returns the IMSI attach acknowledge message to the MSC. 5) The MS also receives an acknowledge message. Notice: The procedure is to be used only when the IMSI detach flag is set in the VLR, not in the HLR. If the flag is set in the HLR, switching to active mode requires a normal location updating of the MS. In most GSM system, the detached flag is stored in the VLR and no information is passed to the HLR.
The image cannot be display ed. Your computer may not hav e enough memory to open the image, or the image may hav e been corrupted. Restart y our computer, and then open the file again. If the red x still appears, y ou may hav e to delete the image and then insert it again.
signaling transport stack can be used to provide redundancy and enable fallback to legacy SS7. Signaling between two SGWs over an IP network. Each SGW is at the border of an arbitrary network.
B Interface
B interface is the interface between the MSC and VLR. During a call connection, the MSC queries the location and service information of the roaming subscriber in the VLR. During the update of information on the MS location, periodic registration or power -on registration, the MSC sends the information on the location a nd status of the roaming subscriber to the VLR. When a subscriber activates a supplementary service or modifies data, the MSC sends information on the change of the data through the VLR, and updates the subscriber information in the VLR. Exchange of the in formation is performed through the B interface. Generally, the MSC and VLR are configured together. This interface is usually internal to the MSC server.
The image cannot be display ed. Your computer may not hav e enough memory to open the image, or the image may hav e been corrupt ed. Restart y our computer, and then open the file again. If the red x still appears, y ou may hav e to delete the image and then insert it again.
ISDN User Part CAMEL Application Part Transaction Capabilities Application Part Mobile Application Part
GSM Architecture
In this architecture, a mobile station (MS) communicates with a base station system (BSS) through the radio interface. The BSS is connected to the network and switching
subsystem (NSS) by communicating with a mobile switching center (MSC) using the A interface.
GSM 900
Uplink - 890 MHz to 915 MHz Downlink - 935 MHz to 960 MHz
GSM 1800
Uplink - 1710 MHz to 1785 MHz Downlink - 1805 MHz to 1880 MHz
GSM 1900
Uplink - 1850 MHz to 1910 MHz Downlink - 1920 MHz to 1990 MHz Carrier separation is 200 kHz, which provides: 124 pairs of carriers in the GSM 900 band 374 pairs of carriers in the GSM 1800 band 299 pairs of carriers in the GSM 1900 band
Using Time Division Multiple Access (TDMA) each of these carriers is divided into eight Time Slots (TS). One TS on a TDMA frame is called a physical channel, i.e. on each duplex pair of carriers there are eight physical channels. A variety of information is transmitted between the BTS and the MS. The information is grouped into different logical channels. Each logical channel is used for a specific purpose such as paging, call set-up and speech. For example, speech is sent on the logical channel Traffic CHannel (TCH). The logical channels are mapped onto the physical channels.
messages, functions and procedures required to control voice and non -voice services (for example, circuit switched data communication). The ISUP can not only implement the functions of the Telephone User Part (TUP) and the Data User Part (DUP), but also achieve the ISDN services on a wide basis, thus having a spacious application scope. The ISDN User Part (ISUP) protocol supports the establishment, supervision and release of 64 kbps circuit switched network connections between exchanges in ISDN networks. In order to establish a traffic connection between two nodes a message initiating the connection needs to be defined. Initiating a traffic connecti on means reserving one of the available traffic resources (a circuit) for the exclusive use of this connection. In case of ISUP information about which circuit was booked for the purpose of the connection travels in an Initial Address Message (IAM). This message shall also contain the called address (B-number) and other information relating to call routing and handling.
a) TDM Based
b) IP Based
(Notice in both TDM Based and IP Based, SCCP is an optional part in the protocol stack. That means you can use ISUP directly over MTP3 or through SCCP) Primitives are used for communication of ISUP messages with the lower transport layer. The primitives used between MTP (or M3UA) and ISUP include the transfer primitive, the resume primitive, the pause primitive and the status primitive.
Protocol (INAP) of the wired Intelligent Network (IN). CAP enables signaling interworking between GSM Service Switching Function (gsmSSF), GSM Specialized Resource Function (gsmSRF) and GSM Service Control Function (gsmSCF) of radio IN functional entities, for the purpose of supporting CAMEL services. CAP protocol is one of the parts of the Signaling System No. 7. CAP is the user part of the Transaction Capabilities Application Part (TCAP) in the SS7. CAP uses structured/unstructured dialog capabilities provided by the TCAP protocol, and realizes signaling interaction between functional entities.
Message Structure:
The structure of a CAP message is shown below:
The image cannot be display ed. Your computer may not hav e enough memory to open the image, or the image may hav e been corrupt ed. Restart y our computer, and then open the file again. If the red x still appears, y ou may hav e to delete the image and the n insert it again.
In SS7, CAP messages are conveyed as the component part of TCAP messages.
The image cannot be display ed. Your computer may not hav e enough memory to open the image, or the image may hav e been corrupted. Restart y our computer, and then open the file again. If the red x still appears, y ou may hav e to delete the image and then insert it again.
In UMTS, BICC is applied to the call control interface between two MSC Servers. BICC signaling develops on the basis of ISUP signaling, and is basically similar to the ISUP protocol in the aspect of supporting basic call pro cedures and supplementary service features. The additional Application Transport Mechanism (APM) in BICC makes it possible to exchange bearer related information between the call control nodes at the ends of the Nc interface. Such information includes bear er address, connection reference, bearer characteristics, bearer setup mode and supported Codec list, and so on. BICC can also provide an optional tunnel transport function on the Nc interface for the bearer control signaling between Media GateWays (MGWs).
Cells in GSM
The lowest level of functional area within a GSM Network is the Cell. An LA comprises a number of cells, each cell serving a number of mobile subscribers. As the MS is moving between cells, it distinguishes new cell by receiving the Base Station Identity Code (BSIC) which is transmitted regularly by each Base Transceiver Station (BTS). Neighboring cells cannot share the same channels. The power level of a transmitter within a single cell must be limited to reduce the
The users location is recorded in the HLR, and in case the user roaming, it is also recorded in the VLR. Suppose that the user wants to make a call: User in Home Area: MSC contacts the HLR prior to setting up the call. User is Roaming: MSC contacts the VLR prior to setting up the call.
Suppose that there is a call for the user (call goes to the home MSC): User in Home Area: Home MSC delivers the call immediately. User is Roaming: Home MSC contacts the VLR to determine the appropriate switch in the roaming area to handle the arriving call and then transfers the call to the roaming area MSC.
being used by illegal subscribers. In the GSM and UMTS networks, the Mobile Station (MS)/User Equipment (UE), VLR, and AuC (the USIM is required in the UMTS network) coordinate to perform authe ntication. The MS/UE and AuC compute authentication parameters. Then, the VLR compares the authentication results and determines whether they are consistent. Thus, the network can verify the validity of the MS/UE. The UMTS enables the UE to verify the network validity. This way, the bi-directional authentication of the UE and network is achieved.
LA - Location Area
An area in which mobile stations may roam without updating the location registers. A location area comprises one or more cells.
signaling points (SPs) and signaling transfer points (STPs) and transmit signaling messages.
SCTP Association: The SCTP association is the logical relationship between two SCTP end points. This association includes the protocol state information, Verification Tags and the currently active set of Transmission Sequence Numbers between the two SCTP end points. It can be said that the SCTP association is like the logical grouping of signaling links in traditional SS7, called a link set. (a link set provides management for a specific group of links) Communication through an SCTP association requires tran sport addresses (a combination
of IP address and port number). These are used by routers to route the IP payload through the IP network. The port numbers mentioned are defined at both ends. The SCTP endpoint can be seen as the termination of the signaling stream. The protocol data units of SCTP are referred to as SCTP packets. If SCTP runs over IP then the SCTP packet forms the payload of an IP packet. The transport addresses for the SCTP endpoint are in reality the source and destination addresses/ports put in the headers of the IP packet and the SCTP message. SCTP packets consists of a common header and a payload field. The payload field can carry several bundled messages, socalled chunks. This multiplexing of messages results in better utilization of th e signaling transport (less overhead).
The SCTP packet structure is composed of a common header and chunks. This is encapsulated inside an IP packet. Common header: The common header consists of 12 bytes. The source and destination ports (32 bits each to express the ports) of the header identify the specific association/application. In the SCTP header, along with the ports there is the verification tag (32 bits length) and finally the checksum (Also 32 bits in length). The verification tag is a 32 bit unsigned integer that is randomly generated. It provides a label that allows a receiver to verify that the SCTP packet belongs to a current association and is not an old or stale packet from a previous association. For the detection of transmission errors, the header implements a 32-bit checksum (it uses the Adler32-algorithm). This is more robust than the 16 -bit value checksum used in TCP/UDP protocols. The check-sum protects both the common header and the chunks of the message. Packets failing the checksum are silently discarded. Chunks: Following the header are a possible series of chunks. The number of chunks following depends on the maximum size of the MTU that can be carried. These chunks carry chunk specific content. The first field presented is the CHUNK type (16 bit expression); in fact this provides the SCTP message types. Chunk specific flags follow the chunk type and a length field that indicates length of the user data field is included. The final part is the user data field associated with the chunk.
connections with the VLR, HLR, EIR, MSC, SMC, GMLC, and SCP through the SS7 signaling network.
H.248 Protocol
H.248 is a protocol that is part of the ITU -T defined MEGACO protocol suite. H.248 is used between a media gateway control function (MGCF) instance and a media gateway function (MGF). In a distributed gateway system, this protocol may be operated over TDM, ATM or IP and is used by the media gateway controller (MGC) to control and communicate with a media gateway (MGW). In the UMTS Rel-4 architecture the protocol is used between the MGCF in the MSC server NE and the MGW NE. In UMTS, the MGCFMGW interface is called the Mc interface and the 3GPP defines specific usage of H.248 over the Mc.
TAC
+ MCC: A three-digit number that uniquely identifies the home country of a mobile subscriber. For example, the MCC of China is 460. + MNC: A number, containing two or three digits, that identifies the home mobile network of a subscriber. For example, the MNC of China Mobile is 00 and the MNC of China Unicom is 01. + MSIN: A number, in the H1-H2-H3-S-XXXXXX format, that uniquely identifies a mobile subscriber in a PLMN. For example, 460-00-477-7-000001 is the IMSI of a subscriber of China Mobile.
One BSC controls and manages one or more BTSs in an actual networking.
Account information of a subscriber (including telecommunication service subscription data and subscriber status data) Mobile station location information MSISDN IMSI
HLRs are used by the Mobile Switching Centers (MSCs) to originate and deliver arriving mobile calls. Some characteristics of the HLR: Performance, especially fast lookups. Ability to handle different types of networks, including 3G networks. Capability/data to support user authentication. Support for data backups, fault tolerance, and reliability. Scalability.