47
© Copyright 2000, Agilent Technologies All Rights Reserved GSM Fundamentals Page 1 sA GSM Signaling and the GSM Signaling and the SS7 MAP Protocol SS7 MAP Protocol

53173454-GSM-MAP

Embed Size (px)

Citation preview

Page 1: 53173454-GSM-MAP

© Copyright 2000, Agilent TechnologiesAll Rights Reserved

GSM FundamentalsPage 1 sA

GSM Signaling and theGSM Signaling and theSS7 MAP ProtocolSS7 MAP Protocol

Page 2: 53173454-GSM-MAP

© Copyright 2000, Agilent TechnologiesAll Rights Reserved

GSM FundamentalsPage 2 A

GSM Signaling BackgroundGSM Signaling Background

Page 3: 53173454-GSM-MAP

© Copyright 2000, Agilent TechnologiesAll Rights Reserved

GSM FundamentalsPage 3 sA

GSM GSM -- Specific Signaling OperationsSpecific Signaling Operations

Location Updating (Roaming)Location Updating (Roaming)

PagingPaging

Network AccessNetwork Access

AuthenticationAuthentication

Encryption (cipher mode)Encryption (cipher mode)

Radio Signal ControlRadio Signal Control

Radio Signal MeasurementsRadio Signal Measurements

HandoverHandover

Page 4: 53173454-GSM-MAP

© Copyright 2000, Agilent TechnologiesAll Rights Reserved

GSM FundamentalsPage 4 sA

Grouping of Signaling FunctionsGrouping of Signaling FunctionsCM : sets up, maintains, releases calls

: handles ISDN-like extras (SMS, SS): involves GMSC, HLR, MSC/VLR, MS

MM : keeps track of MS: manages security: involves HLR, MSC/VLR, SIM

RR : establishes, maintains, releases call path(MS to MSC)

: copes dynamically with radio link issues: manages cell parameters for MS access: maintains radio path despite MS movement

Page 5: 53173454-GSM-MAP

© Copyright 2000, Agilent TechnologiesAll Rights Reserved

GSM FundamentalsPage 5 sA

Inside a GSM NetworkInside a GSM NetworkSS 7SS 7LAPLAP--DD

GMSC

MSC

SMSC

AuC

OMS/SC

PSTN

EIRHLR VLR

BSC

BSC

BSC

VLR

LAPLAP--DmDm

MSCMSC -- Mobile Switching CenterMobile Switching CenterGMSCGMSC -- Gateway MobileGateway Mobile SwSw. Center. CenterBSCBSC -- Base Station ControllerBase Station ControllerBTSBTS -- Base Transceiver StationBase Transceiver StationMSMS -- Mobile StationMobile StationHLRHLR -- Home Location RegisterHome Location RegisterVLRVLR -- Visitor Location RegisterVisitor Location RegisterEIREIR -- Equipment Info. RegisterEquipment Info. RegisterSMSC SMSC -- Short Message Service CenterShort Message Service CenterAuCAuC -- Authorization CenterAuthorization CenterOMC/SCOMC/SC -- Op/Op/MaintMaint, Service Center, Service Center

BTS

BTS

BTS

BTS

BTSBTS

MSMS

Page 6: 53173454-GSM-MAP

© Copyright 2000, Agilent TechnologiesAll Rights Reserved

GSM FundamentalsPage 6 sA

GSM Protocol SummaryGSM Protocol SummaryGSM Database GSM Database

AppsApps

SCCPSCCP

ISUPBSSAP

DTAP BSSOMAP

BSSMAP

TCAP

MAP

PSTN

G.703

08.56 (LAPD)

08.58RLP

LAPDm

04.04

MTPMTP

DTAPBSSOMAPDTAPuseruser

parts TUPparts

level 3level 3

level 2level 2

G.703G.703level 1level 1

BSC MSC

HLR VLR EIRMSMS

AA

BTSBTS

AirAir National SS 7National SS 7AbisAbis

Page 7: 53173454-GSM-MAP

© Copyright 2000, Agilent TechnologiesAll Rights Reserved

GSM FundamentalsPage 7 A

GSM IdentifiersGSM Identifiers

Page 8: 53173454-GSM-MAP

© Copyright 2000, Agilent TechnologiesAll Rights Reserved

GSM FundamentalsPage 8 sA

IMSI (IMSI (InternatInternat. Mobile Subscriber Identity). Mobile Subscriber Identity)

Uniquely identifies customer in GSM network.Uniquely identifies customer in GSM network.

In HLR, identifies subscription data, etc,In HLR, identifies subscription data, etc,relating to customer.relating to customer.

Stored in SIM (Subscriber Identity Module).Stored in SIM (Subscriber Identity Module).

Maps security functions in SIM toMaps security functions in SIM to AuCAuC..

Format :Format :MCC MNCNMSI

mobile networkmobile networkcode ( 2 digits )code ( 2 digits )

mobile subscriber mobile subscriber identity numberidentity number(up to 10 digits)(up to 10 digits)

mobile countrymobile countrycode ( 3 digits )code ( 3 digits )

Page 9: 53173454-GSM-MAP

© Copyright 2000, Agilent TechnologiesAll Rights Reserved

GSM FundamentalsPage 9 sA

TMSI (Temp. Mobile Subscriber Identity)TMSI (Temp. Mobile Subscriber Identity)

An alias to avoid sending IMSI at timesAn alias to avoid sending IMSI at timeswhen no encryption on radio path.when no encryption on radio path.

Allocated by visited network on entry to area.Allocated by visited network on entry to area.Cancelled when the mobile leaves the area.Cancelled when the mobile leaves the area.

Shorter (4 octets) and more efficient than IMSIShorter (4 octets) and more efficient than IMSI

Together with LAI, can uniquely identify MSTogether with LAI, can uniquely identify MS

Page 10: 53173454-GSM-MAP

© Copyright 2000, Agilent TechnologiesAll Rights Reserved

GSM FundamentalsPage 10 sA

MSISDN (Mobile Station ISDN Number) MSISDN (Mobile Station ISDN Number)

Identifies GSM subscriber in PSTN / ISDN numbering planIdentifies GSM subscriber in PSTN / ISDN numbering plan

Format:Format:

CC NDC Subscriber number

first digits = subscriber's HLRfirst digits = subscriber's HLR(up to 10 digits)(up to 10 digits)

national destination codenational destination code(= national GSM operator, (2 digits)(= national GSM operator, (2 digits)

country code (e.g. +_44 = UK)country code (e.g. +_44 = UK)(3 digits)(3 digits)

Page 11: 53173454-GSM-MAP

© Copyright 2000, Agilent TechnologiesAll Rights Reserved

GSM FundamentalsPage 11 sA

MSRN (MobileMSRN (Mobile SubscrSubscr. Roaming Number). Roaming Number)

Identifies subscriber in the HOST GSM network.Identifies subscriber in the HOST GSM network.

Generated on a callGenerated on a call--byby--call basiscall basis

Format as MSISDN :Format as MSISDN :

CC NDC Subscriber number

first digits = subscriber's HLRfirst digits = subscriber's HLR(up to 10 digits)(up to 10 digits)

national destination codenational destination code(= national GSM operator, (2 digits)(= national GSM operator, (2 digits)

country code (e.g. +_44 = UK)country code (e.g. +_44 = UK)(3 digits)(3 digits)

Page 12: 53173454-GSM-MAP

© Copyright 2000, Agilent TechnologiesAll Rights Reserved

GSM FundamentalsPage 12 sA

IMEI (IMEI (InterntlInterntl. Mobile Equipment Identity). Mobile Equipment Identity)

Uniquely Identifies a GSM Uniquely Identifies a GSM HandsetHandset..

Held in the EIRHeld in the EIR

Format :Format :

TAC FAC Serial number Spare

Type Approval Code (6 digits)Type Approval Code (6 digits)

Final Assembly code (2 digits)Final Assembly code (2 digits)

Serial Number (6 octets)Serial Number (6 octets)

1 Digit1 Digit

Page 13: 53173454-GSM-MAP

© Copyright 2000, Agilent TechnologiesAll Rights Reserved

GSM FundamentalsPage 13 sA

Other IdentifiersOther Identifiers

LMSI (Local Mobile Subscriber Identity)LMSI (Local Mobile Subscriber Identity)Temp key to subscriber used by VLRTemp key to subscriber used by VLR

4 octets4 octets

LAI (Location Area Identifier)LAI (Location Area Identifier)

Identifies a group of cells in same areaIdentifies a group of cells in same area

MS sends it continuously, allowing LA change detectMS sends it continuously, allowing LA change detect

When LA changes, a Location Update is requiredWhen LA changes, a Location Update is required

Page 14: 53173454-GSM-MAP

© Copyright 2000, Agilent TechnologiesAll Rights Reserved

GSM FundamentalsPage 14 sA

GSM and Global TitlesGSM and Global TitlesGlobal Title ( GT )Global Title ( GT )

-- Address used to discriminate network entitiesAddress used to discriminate network entities-- SCCP translates the Global Title to destination addressSCCP translates the Global Title to destination address

MSISDN : CC + NDC + SNMSISDN : CC + NDC + SNGlobal Title Global Title : CC + NDC + Part of SN: CC + NDC + Part of SN

Mobile Global Title ( MGT )Mobile Global Title ( MGT )-- It is the Global Title derived from IMSIIt is the Global Title derived from IMSI-- SCCP translates the MGT to destinationSCCP translates the MGT to destination

IMSI : MCC + MNC + MSINIMSI : MCC + MNC + MSINMGT : MCC + MNC + Part of MSINMGT : MCC + MNC + Part of MSIN

SCCP Subsystem Number ( SSN )SCCP Subsystem Number ( SSN )-- Identity of the localIdentity of the local SignallingSignalling Point EntityPoint Entity

( HLR, AUC,EIR )( HLR, AUC,EIR )

Page 15: 53173454-GSM-MAP

© Copyright 2000, Agilent TechnologiesAll Rights Reserved

GSM FundamentalsPage 15 A

GSM Interfaces and ProtocolsGSM Interfaces and Protocols

Page 16: 53173454-GSM-MAP

© Copyright 2000, Agilent TechnologiesAll Rights Reserved

GSM FundamentalsPage 16 sA

Signaling on the Air I/FSignaling on the Air I/F

04:04 SDCCH, SACCH, FACCH

LAPDm

DTAP 04:08 16Kbps (8 TDMA per cell)16Kbps (8 TDMA per cell)

LAPDmLAPDm ISDNISDN--like signalinglike signaling

3 kinds of radio channels3 kinds of radio channels

Carries all information to MSCarries all information to MS

MSMS

BTSBTS

Page 17: 53173454-GSM-MAP

© Copyright 2000, Agilent TechnologiesAll Rights Reserved

GSM FundamentalsPage 17 sA

Air I/F Layer 2 ConnectionsAir I/F Layer 2 Connections

SAP

Short Message Entity

SignallingEntity

3 0

BTS

SAP

Signalling Entity

Short MessageEntity

0 3

MS

Layer 2 Connection

Virtual Connections

Page 18: 53173454-GSM-MAP

© Copyright 2000, Agilent TechnologiesAll Rights Reserved

GSM FundamentalsPage 18 sA

Air I/F Layer 3 ProtocolsAir I/F Layer 3 Protocols

HLRBSC MSC

MSMS BTSBTS

AirAir AbisAbis AA

VLR

CMCMSMSSMSSSSSCCCC

MMMMRRRR

SMSC

Page 19: 53173454-GSM-MAP

© Copyright 2000, Agilent TechnologiesAll Rights Reserved

GSM FundamentalsPage 19 sA

Air I/F Layer 3 Message SetsAir I/F Layer 3 Message SetsDTAPDTAP::

Call ManagementCall Management

Call Establishment MessagesCall Establishment Messages

Call Information Phase MessagesCall Information Phase Messages

Call Clearing MessagesCall Clearing Messages

Messages for Supplementary Service ControlMessages for Supplementary Service Control

Miscellaneous MessagesMiscellaneous Messages

Mobility ManagementMobility Management

Registration MessagesRegistration Messages

Security MessagesSecurity Messages

Connection Management MessagesConnection Management Messages

Miscellaneous MessagesMiscellaneous Messages

Radio Resources:Radio Resources:Channel Establishment MessagesChannel Establishment Messages

Ciphering MessagesCiphering Messages

Handover MessagesHandover Messages

Channel Release MessagesChannel Release Messages

Paging MessagesPaging Messages

System Information MessagesSystem Information Messages

Specific messages for VBS/VGCSSpecific messages for VBS/VGCS

Miscellaneous MessagesMiscellaneous Messages

Page 20: 53173454-GSM-MAP

© Copyright 2000, Agilent TechnologiesAll Rights Reserved

GSM FundamentalsPage 20 sA

Signaling on theSignaling on the AbisAbis I/FI/F

BSCBTSBTS

64Kbps (4 TDMA64Kbps (4 TDMA chanchan. per PCM. per PCM tsts))

SubSub--rate (8,16,32 Kbps) also possiblerate (8,16,32 Kbps) also possible

LAPD Signaling ProtocolLAPD Signaling Protocol

Information Carried:Information Carried:

RF Measurement resultsRF Measurement resultsBTSBTS--BTS HandoversBTS HandoversDTAP informationDTAP informationRF Channel assignmentsRF Channel assignmentsRadio Resource management

LAPD - 08.56

Abis - 08.58

DTAP - 04.08

G.703

Radio Resource management

Page 21: 53173454-GSM-MAP

© Copyright 2000, Agilent TechnologiesAll Rights Reserved

GSM FundamentalsPage 21 sA

AbisAbis Physical I/F Physical I/F

BSCBTSBTS2 Mbps

TS0 TS1 … TS312Mbps is divided in 32 TimeSlots

A: 3 Kbps Overhead

B: 13 Kbps Vocoded Speech

1 2 3 464 Kbps is divided in 4 Sub Channels

64 Kbps

16 Kbps

A B16 Kbps is divided in 2 Sub Channels

Page 22: 53173454-GSM-MAP

© Copyright 2000, Agilent TechnologiesAll Rights Reserved

GSM FundamentalsPage 22 sA

AbisAbis I/F Layer 2 Frame FormatI/F Layer 2 Frame FormatLAPD

FLAG CK INFO Control Address FLAGLAPD

SAPI & TEISAPI & TEI

Depends on Frame TypeDepends on Frame Type

Cyclic Redundancy CheckCyclic Redundancy Check

Delimiter FlagDelimiter Flag

Page 23: 53173454-GSM-MAP

© Copyright 2000, Agilent TechnologiesAll Rights Reserved

GSM FundamentalsPage 23 sA

AbisAbis I/F Layer 3I/F Layer 3Network

ManagementTraffic

Management

0 62

Layer 2 Management

SAPI 63

RSL L2MLOML

Layer 2

Page 24: 53173454-GSM-MAP

© Copyright 2000, Agilent TechnologiesAll Rights Reserved

GSM FundamentalsPage 24 sA

Signaling on the A I/FSignaling on the A I/F

MTP

SCCP

DTAP BSSMAP

BSSAP

64Kbps (1 TDMA64Kbps (1 TDMA chanchan. per PCM. per PCM tsts))SS7 Signaling ProtocolSS7 Signaling ProtocolInformation Carried:Information Carried:

BSCBSC--BSC HandoversBSC HandoversBSSMAP InformationBSSMAP InformationDTAP InformationDTAP Information

BSC MSC

Page 25: 53173454-GSM-MAP

© Copyright 2000, Agilent TechnologiesAll Rights Reserved

GSM FundamentalsPage 25 sA

A I/F LayersA I/F Layers

MTP

SCCP

DTAP

BSSMAP

BSSAP

CM MM

MSC

MTP

SCCP

DTAP

BSSMAP

BSSAP

CM MM

BSC

CM

MM

MS

A Interface

Page 26: 53173454-GSM-MAP

© Copyright 2000, Agilent TechnologiesAll Rights Reserved

GSM FundamentalsPage 26 sA

BSSMAP/DTAPBSSMAP/DTAP Message StructureMessage StructureSCCP Data F/B SN FLAG

MessageMessageTypeType

CRCMSUMSU Tx direction

DLCI = Data Link Connection Identifier (SAP1 = 0, 3) DLCI = Data Link Connection Identifier (SAP1 = 0, 3)

DiscrimDiscriminatorinatorLengthLength BSSMAPBSSMAP

SCCP MTP

Information ElementsInformation Elements

Information ElementsInformation ElementsMessageMessageTypeType

LengthLength DLCIDLCIDiscrimDiscriminatorinator DTAPDTAP

Page 27: 53173454-GSM-MAP

© Copyright 2000, Agilent TechnologiesAll Rights Reserved

GSM FundamentalsPage 27 sA

BSSAP ProceduresBSSAP Procedures

BSSMAPBSSMAPConnection LessConnection LessSCCP Services:SCCP Services:

UDTUDTGlobal ProceduresGlobal Procedures

Dedicated ProceduresDedicated Procedures

BSSMAPBSSMAP

DTAPDTAP

Connection OrientedConnection OrientedSCCP Services:SCCP Services:

CR, CC, DT1, RLSD, RLCCR, CC, DT1, RLSD, RLC

Page 28: 53173454-GSM-MAP

© Copyright 2000, Agilent TechnologiesAll Rights Reserved

GSM FundamentalsPage 28 sA

List of BSSAP ProceduresList of BSSAP Procedures

Dedicated ProceduresDedicated ProceduresAssignmentAssignmentHandover Required IndicationHandover Required IndicationHandover Resource AllocationHandover Resource AllocationHandover ExecutionHandover ExecutionReleaseReleaseClassmarkClassmark UpdateUpdateCipher Mode ControlCipher Mode ControlTrace InvocationTrace InvocationInitial MS MessageInitial MS MessageQueuing IndicationQueuing IndicationDatalinkDatalink Control

Global ProceduresGlobal ProceduresBlockingBlockingResource IndicationResource IndicationResetResetHandover Candidate EnquiryHandover Candidate EnquiryPagingPagingFlow ControlFlow ControlReset CircuitReset Circuit

Control

Page 29: 53173454-GSM-MAP

© Copyright 2000, Agilent TechnologiesAll Rights Reserved

GSM FundamentalsPage 29 sA

DTAP MessagesDTAP MessagesRelease / CompleteRelease / CompleteRetrieve / ACK / RejectRetrieve / ACK / RejectStart / Stop DTMF / ACK / RejectStart / Stop DTMF / ACK / RejectUser Info, Status, Status Enquiry

Call ControlCall ControlAlertingAlertingCall Confirm / ProceedCall Confirm / ProceedCongestion ControlCongestion ControlConnect / ACKConnect / ACKDisconnectDisconnectSet UpSet UpFacilityFacilityHold / ACK / RejectHold / ACK / RejectNotifyNotifyProgress

User Info, Status, Status Enquiry

Mobility ManagementMobility ManagementAuth. Request / Response / RejectAuth. Request / Response / RejectCM serviceCM service ReqReq, Abort, Accept, Abort, AcceptIdentityIdentity ReqReq / Response/ ResponseLocation UpdateLocation Update ReqReq / Reject / Accept/ Reject / AcceptTMSI reTMSI re--allocationallocationIMSI detach

ProgressIMSI detach

Page 30: 53173454-GSM-MAP

© Copyright 2000, Agilent TechnologiesAll Rights Reserved

GSM FundamentalsPage 30 sA

Signaling on SS7 I/FSignaling on SS7 I/F

MSC

MTP

TUPTCAP

SCCP

ISUP

MAP64 Kbps channels64 Kbps channelsSS7 Signaling ProtocolSS7 Signaling ProtocolInformation Carried :Information Carried :

InterInter--MSC HandoversMSC HandoversAuthentication InformationAuthentication InformationRoaming informationRoaming informationISUP ISUP

PSTN &PSTN &other cellular systems other cellular systems

MSC

MAP, ISUPMAP, ISUP

MAPMAP HLR

MAP, ISUPMAP, ISUP

Page 31: 53173454-GSM-MAP

© Copyright 2000, Agilent TechnologiesAll Rights Reserved

GSM FundamentalsPage 31 sA

Details on SS7 Protocol Stack For GSMDetails on SS7 Protocol Stack For GSM

TCAP

MTP

SCCPUDT

MAP

Component Sublayer:Invoke, Return Result, Return Error, Reject

Transaction Sublayer:Begin, Continue, End, Abort

Page 32: 53173454-GSM-MAP

© Copyright 2000, Agilent TechnologiesAll Rights Reserved

GSM FundamentalsPage 32 sA

SCCP routes messages based on address informationSCCP routes messages based on address informationAny network element isAny network element is unicallyunically identified byidentified by

SPC + SSNSPC + SSNGlobal TittleGlobal Tittle

GenericGeneric SSNsSSNs associated to GSM elements:associated to GSM elements:SSN 5 : MAPSSN 5 : MAPSSN 6 : HLR SSN 6 : HLR SSN 7 : VLRSSN 7 : VLRSSN 8 : MSCSSN 8 : MSCSSN 9 : EIRSSN 9 : EIRSSN 10 : AUCSSN 10 : AUCSSN 11 : SMSCSSN 11 : SMSCSSN 12 : BSCSSN 12 : BSC

SCCP addressing for GSMSCCP addressing for GSM

Page 33: 53173454-GSM-MAP

© Copyright 2000, Agilent TechnologiesAll Rights Reserved

GSM FundamentalsPage 33 sA

The GSM MAP InterfacesThe GSM MAP Interfaces

MSC GMSC

MAP / HMAP / HHLR

VLR

VLR

AuC

EIR

Supp.Services

MAP / CMAP / C

SM-SCSMS

GATEWAY

MAP / FMAP / F

MAP / GMAP / G

MAP / DMAP / D

MAP / IMAP / I

MAP / BMAP / BMAP / EMAP / E

Page 34: 53173454-GSM-MAP

© Copyright 2000, Agilent TechnologiesAll Rights Reserved

GSM FundamentalsPage 34 sA

MAP MessagesMAP MessagesMAP / FMAP / FCheck IMEICheck IMEI

MAP / HMAP / HForward Short Message

MAP / CMAP / CAlert service CenterAlert service CenterSend Routing Info for Short MessageSend Routing Info for Short MessageSend Routing InformationSend Routing InformationSet Message Waiting DataSet Message Waiting DataRegister Charging Information

MAP / GMAP / GSend ParametersForward Short Message Send Parameters

MAP / DMAP / DActivate Trace ModeActivate Trace ModeCancel LocationCancel LocationDeactivate Trace ModeDeactivate Trace ModeDelete Subscriber DataDelete Subscriber DataDeregister Mobile SubscriberDeregister Mobile SubscriberInsert Subscriber DataInsert Subscriber DataNote MS PresentNote MS PresentProvide Roaming NumberProvide Roaming NumberResetResetSend ParametersSend ParametersUpdate Location

MAP / IMAP / IActivate SSActivate SSDeactivate SSDeactivate SSERASE SSERASE SSForward Check SS IndicationForward Check SS IndicationForward SS NotificationForward SS NotificationGet PasswordGet PasswordInterrogate SSInterrogate SSInvoke SSInvoke SSProcessProcess UnstructUnstruct. SS Data. SS DataRegister PasswordRegister PasswordRegister SS

Register Charging Information

MAP / EMAP / EForward Access SignalingForward Access SignalingNote Internal HandoverNote Internal HandoverPerform HandoverPerform HandoverPerform Subsequent HandoverPerform Subsequent HandoverProcess Access SignalingProcess Access SignalingSend End SignalSend End SignalTrace Subscriber Activity

Update LocationTrace Subscriber Activity Register SS

Page 35: 53173454-GSM-MAP

© Copyright 2000, Agilent TechnologiesAll Rights Reserved

GSM FundamentalsPage 35 A

GSM Signaling ExamplesGSM Signaling Examples

Page 36: 53173454-GSM-MAP

© Copyright 2000, Agilent TechnologiesAll Rights Reserved

GSM FundamentalsPage 36 sA

Call Setup (Mobile Originated)Call Setup (Mobile Originated)MS BTS MS BTS BSC BSC MSC MSC

Immediate AssignImmediate Assign

CM Service RequestCM Service RequestAuthentication Request ( RAND )Authentication Request ( RAND )

Ciphering Mode Command (key)Ciphering Mode Command (key)

Ciphering Mode CompleteCiphering Mode Complete

Call ProceedingCall Proceeding

Assign CommandAssign Command

AlertingAlerting

ConnectConnect

Connect ACKConnect ACK

Channel Request/RequiredChannel Request/RequiredRACHRACH

PAGCHPAGCHSDCCHSDCCH

SDCCHSDCCHAuthentication ResponseAuthentication ResponseSDCCHSDCCH

SDCCHSDCCHSDCCHSDCCH

SETUP (service, called number)SETUP (service, called number)SDCCHSDCCH

TCHTCH

TCHTCHAssign CompleteAssign CompleteTCHTCH

TCHTCH

TCHTCH

TCHTCH

Page 37: 53173454-GSM-MAP

© Copyright 2000, Agilent TechnologiesAll Rights Reserved

GSM FundamentalsPage 37 sA

Location UpdatingLocation UpdatingMS BTS BSC MS BTS BSC MSC NEW VLR PREV VLR MSC NEW VLR PREV VLR HLR HLR

Location Update Request (LAI, TMSI)Location Update Request (LAI, TMSI)Update Loc. Area ( old LAI, TMSI )Update Loc. Area ( old LAI, TMSI )

SendSend ParamParam. ( old LAI, TMSI ). ( old LAI, TMSI )

SendSend ParamParam. Result ( IMSI ). Result ( IMSI )

Update Location (IMSI, MSRN, VLR No.)Update Location (IMSI, MSRN, VLR No.)

Cancel Loc. (IMSI, VLR No.)Cancel Loc. (IMSI, VLR No.)

Cancel LocationCancel Location AckAck..

Insert Subs. Data (IMSI, service info.)Insert Subs. Data (IMSI, service info.)

Subs. Data InsertionSubs. Data Insertion AckAck..Update Loc.Update Loc. AckAck..

Update Loc. AreaUpdate Loc. Area AckAck..Forward New TMSI Forward New TMSI (TMSI)(TMSI)Location Update Accept (new LAI, TMSI)Location Update Accept (new LAI, TMSI)

TMSI Reallocation CompleteTMSI Reallocation CompleteTMSITMSI AckAck..

Channel ReleaseChannel Release

Page 38: 53173454-GSM-MAP

© Copyright 2000, Agilent TechnologiesAll Rights Reserved

GSM FundamentalsPage 38 sA

Retrieval of Call Routing InformationRetrieval of Call Routing Information

MSC/VLR

GATEWAYMSC

MAP/CMAP/CTCAP (Begin, Invoke)TCAP (Begin, Invoke)SRI ( MSISDN )SRI ( MSISDN )

MAP/CMAP/CTCAP (End, RR)TCAP (End, RR)SRISRI--ACK ( MSRN )ACK ( MSRN )

MAP/DMAP/DTCAP (End, RR)TCAP (End, RR)PRNPRN--ACK ( MSRN )ACK ( MSRN )

MAP/DMAP/DTCAP (Begin, Invoke)TCAP (Begin, Invoke)PRN (IMSI)PRN (IMSI)

HLR

ISUPISUP

IAM ( MSRN )IAM ( MSRN )IAM ( MSISDN )IAM ( MSISDN )

Page 39: 53173454-GSM-MAP

© Copyright 2000, Agilent TechnologiesAll Rights Reserved

GSM FundamentalsPage 39 sA

Call Setup & Clear (Land orig.)Call Setup & Clear (Land orig.)MS BTS BSC MSC VLR MS BTS BSC MSC VLR HLR GMSC ISDN HLR GMSC ISDN

IAM ( MSISDN, service)IAM ( MSISDN, service)Send Rout. info. ( MSISDN)Send Rout. info. ( MSISDN)

Provide Roaming Info ( IMSI )Provide Roaming Info ( IMSI )Provide Roaming InfoProvide Roaming Info respresp ( MSRN)( MSRN)

Send Rout. info.Send Rout. info. respresp ( MSRN, service)( MSRN, service)

IAM ( MSRN, service )IAM ( MSRN, service )

Page ( IMSI, TMSI, LAI )Page ( IMSI, TMSI, LAI )

Paging Request (TMSI)Paging Request (TMSI)

Paging RequestPaging Request

Channel RequestChannel RequestImmediate AssignImmediate Assign

Paging Response (TMSI)Paging Response (TMSI)Page ResultPage Result

Complete Call ResultComplete Call ResultSETUP (service)SETUP (service)

Call ConfirmedCall Confirmed

PAGCHPAGCH

RACHRACH

SDCCHSDCCHTCHTCH

Page 40: 53173454-GSM-MAP

© Copyright 2000, Agilent TechnologiesAll Rights Reserved

GSM FundamentalsPage 40 sA

Call Setup & Clear (Land orig.)Call Setup & Clear (Land orig.)MS BTS BSC MSC VLR MS BTS BSC MSC VLR HLR GMSC ISDN HLR GMSC ISDN

Complete Call ResultComplete Call Result

ACMACM

ANMANM

ReleaseReleaseClear CommandClear Command

Release IndicationRelease Indication

RF Channel ReleaseRF Channel Release

RF Channel ReleaseRF Channel Release AckAck..

Call ConfirmedCall ConfirmedAssign Command Assign RequestAssign Command Assign Request

TCHTCHAssign CompleteAssign CompleteTCHTCH

AlertingAlertingTCHTCHConnectConnectTCHTCH

ConnectConnect AckAck..TCHTCH

Channel ReleaseChannel ReleaseSACCHSACCH

Page 41: 53173454-GSM-MAP

© Copyright 2000, Agilent TechnologiesAll Rights Reserved

GSM FundamentalsPage 41 sA

Address Translation SummaryAddress Translation Summary

New VLR needs Previous VLR address during LUNew VLR needs Previous VLR address during LU→→ From previous Location Area Identification if in same net, or neFrom previous Location Area Identification if in same net, or needs IMSIeds IMSI

HLR needs VLR address (after location update)HLR needs VLR address (after location update)→→ From Called Party Address of the UPDATE LOCATION message. From Called Party Address of the UPDATE LOCATION message.

VLR needs HLR address first timeVLR needs HLR address first time→→ Convert the IMSI to a Global TitleConvert the IMSI to a Global Title

VLR needs HLR address after location updatingVLR needs HLR address after location updating→→ Use either MSISDN or E.164 HLR numbers (received in UL ACK) as GUse either MSISDN or E.164 HLR numbers (received in UL ACK) as GTT

Page 42: 53173454-GSM-MAP

© Copyright 2000, Agilent TechnologiesAll Rights Reserved

GSM FundamentalsPage 42 A

SS7 MAP Protocol DetailsSS7 MAP Protocol Details

Page 43: 53173454-GSM-MAP

© Copyright 2000, Agilent TechnologiesAll Rights Reserved

GSM FundamentalsPage 43 sA

MAP and SS7MAP and SS7

MTP

TUPTCAP

SCCP

ISUP

MAP

Page 44: 53173454-GSM-MAP

© Copyright 2000, Agilent TechnologiesAll Rights Reserved

GSM FundamentalsPage 44 sA

MAP and TCAPMAP and TCAP

MSC1/VLRMSC1/VLR MSC2/VLRMSC2/VLR HLRHLRLOCLOCUPDATEUPDATEREQDREQD

Update Location (IMSI, MSC/VLR No)Update Location (IMSI, MSC/VLR No)

TCAP (Begin, Invoke)TCAP (Begin, Invoke)

Insert Subs Data (MSISDN + service info)Insert Subs Data (MSISDN + service info)TCAP (Cont, Invoke)TCAP (Cont, Invoke)

Insert Subs Data ACKInsert Subs Data ACKTCAP (End, RR)TCAP (End, RR)

Location Updated (HLR No)Location Updated (HLR No)

TCAP (End)TCAP (End)

Cancel Location (IMSI)Cancel Location (IMSI)

TCAP (Begin, Invoke)TCAP (Begin, Invoke)

Cancel Location ACKCancel Location ACK

TCAP (End)TCAP (End)

Page 45: 53173454-GSM-MAP

© Copyright 2000, Agilent TechnologiesAll Rights Reserved

GSM FundamentalsPage 45 sA

MAP Procedures for LU (1)MAP Procedures for LU (1)

PrimitivePrimitive From From →→ToTo ParametersParametersUPDATE_LOCATION_AREAUPDATE_LOCATION_AREA

requestrequest MSCMSC→→VLRVLR Target LAI, LU type, IMSI/TMSI,Target LAI, LU type, IMSI/TMSI,prevprev LAI, cipher keyLAI, cipher key seqseq if TMSI usedif TMSI used

responseresponse VLRVLR→→MSCMSC --

UPDATE_LOCATIONUPDATE_LOCATIONrequestrequest VLRVLR→→HLRHLR IMSI, E.164IMSI, E.164 MSC #, E.164 VLR #,LMSIMSC #, E.164 VLR #,LMSIresponseresponse HLR HLR →→VLRVLR E.164 E.164 HLR #, HLR #,

CANCEL_LOCATIONCANCEL_LOCATIONrequestrequest HLRHLR→→prevprev VLRVLR IMSI, LMSIIMSI, LMSIresponseresponse prevprev VLRVLR→→HLRHLR --

Page 46: 53173454-GSM-MAP

© Copyright 2000, Agilent TechnologiesAll Rights Reserved

GSM FundamentalsPage 46 sA

MAP Procedures for LU (2)MAP Procedures for LU (2)

PrimitivePrimitive From From →→ToTo ParametersParameters

SEND_IDENTIFICATIONSEND_IDENTIFICATIONrequestrequest VLRVLR→→prevprev VLRVLR TMSITMSIresponseresponse prevprev VLRVLR→→VLRVLR IMSI, authentication tripletsIMSI, authentication triplets

AUTHENTICATEAUTHENTICATErequestrequest VLRVLR→→MSCMSC RAND, CKSNRAND, CKSNresponseresponse MSCMSC→→VLRVLR SRESSRES

SET_CIPHERING_MODESET_CIPHERING_MODErequestrequest VLRVLR→→MSCMSC Ciphering mode,Ciphering mode, KcKc

FORWARD_NEW_TMSIFORWARD_NEW_TMSIrequestrequest VLRVLR→→MSCMSC TMSITMSIresponseresponse MSCMSC→→VLRVLR --

Page 47: 53173454-GSM-MAP

© Copyright 2000, Agilent TechnologiesAll Rights Reserved

GSM FundamentalsPage 47 sA

MAP Procedures for Routing CallsMAP Procedures for Routing Calls

PrimitivePrimitive From From →→ToTo ParametersParametersPAGEPAGE

requestrequest VLR VLR →→MSCMSC Invoke ID, IMSI, LA id, TMSIInvoke ID, IMSI, LA id, TMSIresponseresponse MSCMSC→→ VLRVLR Invoke IDInvoke ID

SEND_ROUTING_INFORMATIONSEND_ROUTING_INFORMATION

requestrequest GMSC GMSC →→HLRHLR Invoke ID, MSISDN, Network signal infoInvoke ID, MSISDN, Network signal inforesponseresponse HLR HLR →→GMSCGMSC Invoke ID, IMSI, MSRN, forwarding dataInvoke ID, IMSI, MSRN, forwarding data

PROVIDE_ROAMING_NUMBERPROVIDE_ROAMING_NUMBER

requestrequest HLRHLR→→VLRVLR Invoke ID, IMSI, MSC n., MSISDN, LMSI,Invoke ID, IMSI, MSC n., MSISDN, LMSI,GSM bearer capability, NetworkGSM bearer capability, Network SigSig InfoInfo

responseresponse VLR VLR →→HLRHLR MSRNMSRN