Example Network Diagram

Call Flow - Mobile to Mobile Call

MS A

BTS1 Air Interface/LAPDm Abis Interface/LAPD

BSC1 A Interface

MSC/VLR1

Subscriber A types Subscriber B's MSISDN number and presses "send button" on his mobile. RR Connection Establishment begins and the called number digits needs to be transported from Mobile A to MSC. For this first phase, Radio Resource (RR) connection is established to MSC First Step: RR CONNECTION ESTABLISHEMENT rr_t3120 start
RR CHANNEL REQUEST

RACH RR connection establishment is triggered by sending the RR CHANNEL REQUEST message. This message reque BSS for allocation for radio resources for the RR Connection setup. The mobile now waits for an Assignment on Access Grant Channel (AGCH). At this point the mobile is listening to AGCH for a reply. RR CHANNEL REQUEST sent on RACH and slotted aloha channel that can be used at random without any co ordination between the mobile any mobile can transmit on this channel whenever it wishes. If two mobiles transmit on the channel at the same tim thier messages will be lost ina collision. The mobile will detect the collision via a timeout and retransmit the messa after a random back off

CHAN RQD

CHANnel ReQuireD procedure may occur on the Abis interface at any time, on an asynchronous basis. The procedure is initiated by the TRX carrying the so called CCCH channel, upon detection of a random access from a MS. The TRX then sends a CHANnel ReQuireD message to BSC containing the Request Reference Parameter (random number selected by MS plus some low order bits of the TDMA frame number for the access) and teh acce delay

Channel Activate

Channel Act Ack

IMM ASS CMD

The IMMEDIATE ASSIGN COMMAND procedure may occur at any time, in an asynchronous basis, to initiate the immediate assignment, the BSC sends an IMMEDIATE ASSIGN COMMAND message, including an RR Immedia Assign message. The BSC will transmit this message on the AGCH channel which is mapped on the same tmeslot the received Channel Required message. Upon receipt of this message the BTS transmits the immediate assignme as received. This procedure can also be used to return an Immediate Assign Reject message to MS

rr_t3120 stop

RR IMM ASSIGNMENT rr_t3101 start AGCH (SDCCH Freq, TS, Freq and Time) The BSS shall allocate a SDCCH to the mobile. The SDCCH allocation assigns a specific frequency and a timeslo on that frequency. After the mobile receives this messa, the mobile shall only use the specified resourcs for communicaion with the mobile network. BTS transmits the radio resource assignment to the mobile via the AGCH channel. The message also conatins the time and frequency corrections. The time corrections allow the mobile to time it's transmisions so that they reach the BSS only in the specified timeslot. The frequency corrections correct f the doppler shift caused by the mobile's motion. After adjusting frequency and timing, the mobile detunes from AGC and tunes to the specified radio channel. BTS starts "rr_t3101" RR timer waiting replay from MS

RR SABM+MM CM SERVICE REQUEST SDCCH, SAPI=0

rr_t3101 stop

This is the first message that is sent after tuning to the channel. The Mobile initiates a LAPDm connection with the BSS by sending a Set Asynchronous Balanced Mode (SABM) message. SABM used to set up a logical channel SDCCH in acknowledged Multi Frame Mode. The service request message meant for the MS is also sent in this messge. On receipt of this message BTS will stop rr_t3101 timer

This is the first message that is sent after tuning to the channel. The Mobile initiates a LAPDm connection with the BSS by sending a Set Asynchronous Balanced Mode (SABM) message. SABM used to set up a logical channel SDCCH in acknowledged Multi Frame Mode. The service request message meant for the MS is also sent in this messge. On receipt of this message BTS will stop rr_t3101 timer

RR UA SDCCH, SAPI=0

The BSS replies with Unnumbered Acknowledge (UA) to complete the LAPDm setup handshake. UA acknowledge SABM

MS Power Control SACCH SCCP CONNECTION REQUEST + BSSMAP sccp_tconn est start COMPLETE LAYER 3 SS7 sccp_tconn est stopCONNECTION CONFIRM (CC) SS7 DTAP, AUT REQ SS7 dtap, I(aut req) N(S)=0;N(R)=0 LAP D Data REQ, I(AUT REQ) N(S)=0;N(R)=0 SDCCH Send I frame containing the L3 info authentication request DATA IND, I(AUT RESP) N(S)=0;N(R)=1 SDCCH

dtap, aut resp LAP D

DTAP, AUT RESP SS7 ID Request (Type:IMEI) SS7 ID Request (Type:IMEI) LAPD ID Request (Type:IMEI) SDCCH ID Response IMEI) ID Response IMEI) ID Response IMEI)

CLASSMARK REQ

REQ CLASSMARK CLASSMARK ENQ

CLASSMARK SEND UPDATE CLASSMARK CLASSMARK UPDATE BSSMAP, CIPH MODE CMD SS7

Since the subscriber has been successfully authenticated, the MSC initates ciphering of the data being sent on th channel. The channel is ciphered so as to protect the call from evesdropping. Ciphering on the radio link is enabled three steps. As a first step, the BSS starts expecting ciphered data from the mobile but continues to send data in CLEAR, since the mobile has not been informed about the ciphering, all data received from the mobile will be in err

cipher req LAP D

ENCRYPT CMD, CIPHERING MODE CMD,Mode=Clear

SDCCH

The BSS sends the CIPHERING MODE COMMAND to the Mobile. The mobile will be able to reeive this message the transmission from the BSS is still in CLEAR. As a second step, the Mobile receives the message and enables ciphering in transmit and receive directions. This action will result in all BSS data being received in error The BSS still transmitting data in CLEAR

The BSS sends the CIPHERING MODE COMMAND to the Mobile. The mobile will be able to reeive this message the transmission from the BSS is still in CLEAR. As a second step, the Mobile receives the message and enables ciphering in transmit and receive directions. This action will result in all BSS data being received in error The BSS still transmitting data in CLEAR
CIPHERING MODE COMPLETE, Mode=Ciphered

SDCCH Ciphering has already been enabled, so this message is transmitted with ciphering. The BSS will receive this message as it is already expecting ciphred data in the receive direction. The third and final step in the ciphering handshake. The BSS enables the ciphreing in transmit direction. From this point on ciphering is enabled in both directions.

ciper suc LAPD BSSMAP, CIPH CMPLT SS7 BSS replies back to the MSC, including that ciphering has been successfully enabled

DTAP: TMSI REALLOCATION COMMAND

VLR1 generates a new TMSI and forwards to MSC1 for this MS. MS stores TMSI in its non volatile store DTAP: TMSI REALLOCATIOM COMPLETE

MSC informs VLR that TMSI reallocaation was succesful. VLR associates the TMSI with IMS and old TMSI is deallocated if it is allocated by it previously

RR Connection Establishemnt completed - At this point a connection has been setup between the mo the MSC. From this point onward, the BSS is just acting as a conduit for transporting the signall messages between the mobile and the MSC

SECOND STEP: CALL SETUP DATA REQ, SET UP SDCCH

The mobile sends the setup message to establish a Voice Call. The message contains the dialled digits and othe information needed for call establishement dtap, setup LAP D

DTAP SETUP

DTAP, CALL PROC

DT1, dtap, call proc

DATA REQ, CALL PROC The mobile is informed that the call setup is in progress. At this point the mobile phone displays a meesage "Connecting.." on the screen to indicate that call setup is being attempted.

BSSMAP_T11 starts

BSSMAP: Assignment Request

The MSC Allocates a voice circuit on one of the digital trunks between the MSC and the BSS. MSC informs the BSS about the allocated voice channe The call is also switched from signalling circuit to voice circuit.

Physical Context Req

Physical Context Conf

Channel Activation

Chnal Act ACK

Initiate Assignment

Assignment Command SDCCH

BSSMAP_T10(T3107)s tarts

SABM FACCH UA FACCH Assignment Complete FACCH BSSMAP_T10(T3107)s tops

Assignment Successful BSSMAP_T11 Stops SD RF Chanl Release SD RF Chanl Rel Ack Assignment Complete

MSC1 Checks the class of service from VLR1 database. MSC1 sends VLR1 the message "Send Info O/G Call". VLR1 verifies its database and if MSA is eligible for making O/G call, VLR1 reples MSC1 with the message "Complete Call". If MSA is not eligible for making O/G c announcement will be fed to MSA. It will be transmitted to MSA by FACCH. If MSC1 receive "Complete Call" message from VLR1. MSC1 analyzes the dialled digits using GT analysis defined in GT analyses with NP=1 and routes it to GMSC

Since MSISDN-B is a mobile subscriber, MS Enquire for subscriber B. There is no direct c and HLR. MSC/VLR1 will send Send Routin refers to GT analysis with

Alerting

Connect Connect Ack s/w s/w Conversation

END Button CC Disconnect

CC Release

CLEAR BSSMAP RR Channel Release

RR Channel Release CLEAR BSSMAP RR DISC

RR UA Release indication

Example Network Diagram

Call Flow - Mobile to Mobile Call

MSC/VLR1 MAP - E Interface

GMSC

HLR 1 MAP-D Interface

HLR 2

button" on his mobile. RR Connection ed from Mobile A to MSC. For this first blished to MSC

QUEST message. This message requests mobile now waits for an Assignment on H for a reply. RR CHANNEL REQUEST is ut any co ordination between the mobiles, transmit on the channel at the same time, n via a timeout and retransmit the messa

time, on an asynchronous basis. The on detection of a random access from an ning the Request Reference Parameter me number for the access) and teh access

in an asynchronous basis, to initiate the ND message, including an RR Immediate l which is mapped on the same tmeslot as BTS transmits the immediate assignment ate Assign Reject message to MS

signs a specific frequency and a timeslot all only use the specified resourcs for assignment to the mobile via the AGCH The time corrections allow the mobile to slot. The frequency corrections correct for nd timing, the mobile detunes from AGCH R timer waiting replay from MS

le initiates a LAPDm connection with the SABM used to set up a logical channel ge meant for the MS is also sent in this p rr_t3101 timer

le initiates a LAPDm connection with the SABM used to set up a logical channel ge meant for the MS is also sent in this p rr_t3101 timer

PDm setup handshake. UA acknowledges

s ciphering of the data being sent on the g. Ciphering on the radio link is enabled in he mobile but continues to send data in a received from the mobile will be in error.

bile will be able to reeive this message as obile receives the message and enables S data being received in error The BSS is

bile will be able to reeive this message as obile receives the message and enables S data being received in error The BSS is

th ciphering. The BSS will receive this The third and final step in the ciphering his point on ciphering is enabled in both

been successfully enabled

1 for this MS. MS stores TMSI in its none

esful. VLR associates the TMSI with IMSI allocated by it previously

ction has been setup between the mobile and a conduit for transporting the signalling and the MSC

age contains the dialled digits and other ment

he mobile phone displays a meesage tup is being attempted.

on one of the digital trunks between the e BSS about the allocated voice channel. m signalling circuit to voice circuit.

base. MSC1 sends VLR1 the message d if MSA is eligible for making O/G call, ". If MSA is not eligible for making O/G call ed to MSA by FACCH. If MSC1 receives zes the dialled digits using GT analysis and routes it to GMSC

SRI (MSISDN-B) ISUP e MSISDN-B is a mobile subscriber, MSC/VLR1 has to go for HLR ire for subscriber B. There is no direct connection between MSC1 HLR. MSC/VLR1 will send Send Routing Information to GMSC. It refers to GT analysis with NP=1

TC-INV[Send_Routing_Info (MSISDN-B)] MAP/C TC-BEGIN SCCP

The GMSC refers to GT analysis for NP=1, TON = NAT or INT, depends on MSISDN format received GMSC. GT analsis in GMSC refers to HLR2. GMSC requests routing information for the GSM subscrib from HLR2.

The GMSC refers to GT analysis for NP=1, TON = NAT or INT, depends on MSISDN format received GMSC. GT analsis in GMSC refers to HLR2. GMSC requests routing information for the GSM subscrib from HLR2.

TC-INV[Provide Routing Number (MSRN TC-BEGIN

HLR2 uses MSISDN-B and finds out IMSI and the SS7 address o SS7 address of the serving MSC/VLR was obtained by HLR du MSC/VLR2 area. HLR 2 sends Provide Routing Number message MS-B to VLR2 as

TC-RES [Provide_MSRN_Ack] T SCCP[MAP/D]

MSC/VLR2 allocates a temporary roaming number (MSR

TC-RES [Send_Routing_Info_Ack(MSRN)] TC-END SCCP[MAP/C] HLR 2 Passes MSRN to GMSC SRI_ACK TCAP/SCCP IAM (MSRN)

Send Info I/C call [IAM(MSRN)] ISUP SAM (mor digits if any will be sent)

GMSC uses MSRN and refers to digit analysis and finds out the route to MSC/VLR 2. GMSC 2 GMSC to establish and sends ISUP messae IAM to MSC/VLR2. MSC/VLR2 receives the call. At this point, th other calls.

MSC/VLR2 needs to locate the subscriber in mechanism is used to locate the subscriber. Th Note that, MSC/VLR2 w

ISUP ACM

ISUP ACM

ISUP ANM

ISUP ANM

Charging Starts

s/w Conversation

s/w

REL ISUP ISUP REL

MSC/VLR2

BSC1

BTS1

AT or INT, depends on MSISDN format received by equests routing information for the GSM subscriber LR2.

AT or INT, depends on MSISDN format received by equests routing information for the GSM subscriber LR2.

TC-INV[Provide Routing Number (MSRN) {PRN(IMSI)}] MAP/D TC-BEGIN SCCP

SDN-B and finds out IMSI and the SS7 address of MSC/VLR which is serving MS-B at that moment. of the serving MSC/VLR was obtained by HLR during LU of MS-B. In this case, MS-B is present in HLR 2 sends Provide Routing Number message (PRN) to MSC/VLR2. HLR 2 sends IMSI number of MS-B to VLR2 as data

TC-RES [Provide_MSRN_Ack] TC-END SCCP[MAP/D]

LR2 allocates a temporary roaming number (MSRN). The MSRN is then passed to the HLR

ds out the route to MSC/VLR 2. GMSC 2 GMSC 2 sends MSRN as the reference number for the call R2. MSC/VLR2 receives the call. At this point, the MSRN is marked free and may be reassigned for other calls.

Check Subscriber B Class of service BSSMAP Page (UDT) SCCP-CL MSC/VLR2 needs to locate the subscriber in the loction area (which BTS?), since location area might span several cells, paging mechanism is used to locate the subscriber. The MSC/VLR2 uses TMSI of MS-B which is allocated to MS-B earlier to address MS-B. Note that, MSC/VLR2 will send PAGING messge to all BSCs that handle location area

RR Paging Request Type 3 (TMSI) LAPD

BSC1 of MSC2 receives the Page command. BSC will s all the cells that serve the subscriber's location area. serving the location area will send page messa

All cells in the location area will broadcast the Pag

All the mobiles belonging pageing group of MS-B listen to MS-B finds that the TMSI specified in the page messag The MS-B decides to respond to the page. An RR Co initiated by sending a channel request to

Channel Required Channel ACT Channel ACT Ack

IMMEDIATE Assign CMD

LAPD

MS-B tunes to the assigned SDC response and piggybacks S

Establish Ind (Page Response,CM Service Request) UA (Page Response)

When BTS and MS are in contact over SDCCH, Establis from BTS1 to BSC1. Paging Response and SABM are BSC1 sends UA(Page Response) to BTS1 and BTS1 se B

SCCP CR+RR Paging Response

BSC1 sends a SCCP Connection Request (CR) to the message is piggybacked with the

BSSMAP: CC SCCP

MSC/VLR2 initiates authentication check, IMEI Check, Ciphering activa request, TMSI Reallocation procedures to MS-B. These procedures are procedures given above and are not printed here

Assignment Req Initiate Assignment

Assignment Success Assignment Complete

CC Setup

Call Confirmed

CC Alerting

SRBT (IP Network/IP Trunks ISUP ACM

CC Connect Charging Starts

s/w Conversation

s/w

CC Release

BTS1

MSB

everal cells, paging rlier to address MS-B.

Page command. BSC will send the Page message to subscriber's location area. Note that, all the BSCs, area will send page message to all the cells

RR Paging Request Type 3 (TMSI) PCH

area will broadcast the Page message on PCH.

RR CHANNEL REQ

RACH eing group of MS-B listen to paging message in BTS1. pecified in the page message matches its own TMSI. ond to the page. An RR Connection establishmentis nding a channel request to the network

RR IMMEDIATE Assgn

AGCH RR SABM + RR PAGING RESPONSE

tunes to the assigned SDCCH channels and transmits page response and piggybacks SABM to intiate RR sesssion

UA (Page Response)

ntact over SDCCH, Establishment Indication messageis sent g Response and SABM are piggybacked on this message. onse) to BTS1 and BTS1 sends UA(Page Response) to MSB

ection Request (CR) to the MSC/VLR2. The Page response age is piggybacked with the request.

EI Check, Ciphering activation, IMEI chek, Classmark S-B. These procedures are similar to MS-A. Ref MS-A and are not printed here again.

Assignment Command Assignment Complete

nfirmed Ringing

ERS (External Ringtone Server)

RBT (IP Network/IP Trunks)

Answers the call

onnect

s/w

elease