Upload
manh-hung-do
View
23
Download
1
Tags:
Embed Size (px)
Citation preview
© Copyright 2000, Agilent TechnologiesAll Rights Reserved
GSM FundamentalsPage 1 sA
GSM Signaling and theGSM Signaling and theSS7 MAP ProtocolSS7 MAP Protocol
© Copyright 2000, Agilent TechnologiesAll Rights Reserved
GSM FundamentalsPage 2 A
GSM Signaling BackgroundGSM Signaling Background
© Copyright 2000, Agilent TechnologiesAll Rights Reserved
GSM FundamentalsPage 3 sA
GSM GSM -- Specific Signaling OperationsSpecific Signaling Operations
Location Updating (Roaming)Location Updating (Roaming)
PagingPaging
Network AccessNetwork Access
AuthenticationAuthentication
Encryption (cipher mode)Encryption (cipher mode)
Radio Signal ControlRadio Signal Control
Radio Signal MeasurementsRadio Signal Measurements
HandoverHandover
© Copyright 2000, Agilent TechnologiesAll Rights Reserved
GSM FundamentalsPage 4 sA
Grouping of Signaling FunctionsGrouping of Signaling FunctionsCM : sets up, maintains, releases calls
: handles ISDN-like extras (SMS, SS): involves GMSC, HLR, MSC/VLR, MS
MM : keeps track of MS: manages security: involves HLR, MSC/VLR, SIM
RR : establishes, maintains, releases call path(MS to MSC)
: copes dynamically with radio link issues: manages cell parameters for MS access: maintains radio path despite MS movement
© Copyright 2000, Agilent TechnologiesAll Rights Reserved
GSM FundamentalsPage 5 sA
Inside a GSM NetworkInside a GSM NetworkSS 7SS 7LAPLAP--DD
GMSC
MSC
SMSC
AuC
OMS/SC
PSTN
EIRHLR VLR
BSC
BSC
BSC
VLR
LAPLAP--DmDm
MSCMSC -- Mobile Switching CenterMobile Switching CenterGMSCGMSC -- Gateway MobileGateway Mobile SwSw. Center. CenterBSCBSC -- Base Station ControllerBase Station ControllerBTSBTS -- Base Transceiver StationBase Transceiver StationMSMS -- Mobile StationMobile StationHLRHLR -- Home Location RegisterHome Location RegisterVLRVLR -- Visitor Location RegisterVisitor Location RegisterEIREIR -- Equipment Info. RegisterEquipment Info. RegisterSMSC SMSC -- Short Message Service CenterShort Message Service CenterAuCAuC -- Authorization CenterAuthorization CenterOMC/SCOMC/SC -- Op/Op/MaintMaint, Service Center, Service Center
BTS
BTS
BTS
BTS
BTSBTS
MSMS
© Copyright 2000, Agilent TechnologiesAll Rights Reserved
GSM FundamentalsPage 6 sA
GSM Protocol SummaryGSM Protocol SummaryGSM Database GSM Database
AppsApps
SCCPSCCP
ISUPBSSAP
DTAP BSSOMAP
BSSMAP
TCAP
MAP
PSTN
G.703
08.56 (LAPD)
08.58RLP
LAPDm
04.04
MTPMTP
DTAPBSSOMAPDTAPuseruser
parts TUPparts
level 3level 3
level 2level 2
G.703G.703level 1level 1
BSC MSC
HLR VLR EIRMSMS
AA
BTSBTS
AirAir National SS 7National SS 7AbisAbis
© Copyright 2000, Agilent TechnologiesAll Rights Reserved
GSM FundamentalsPage 7 A
GSM IdentifiersGSM Identifiers
© Copyright 2000, Agilent TechnologiesAll Rights Reserved
GSM FundamentalsPage 8 sA
IMSI (IMSI (InternatInternat. Mobile Subscriber Identity). Mobile Subscriber Identity)
Uniquely identifies customer in GSM network.Uniquely identifies customer in GSM network.
In HLR, identifies subscription data, etc,In HLR, identifies subscription data, etc,relating to customer.relating to customer.
Stored in SIM (Subscriber Identity Module).Stored in SIM (Subscriber Identity Module).
Maps security functions in SIM toMaps security functions in SIM to AuCAuC..
Format :Format :MCC MNCNMSI
mobile networkmobile networkcode ( 2 digits )code ( 2 digits )
mobile subscriber mobile subscriber identity numberidentity number(up to 10 digits)(up to 10 digits)
mobile countrymobile countrycode ( 3 digits )code ( 3 digits )
© Copyright 2000, Agilent TechnologiesAll Rights Reserved
GSM FundamentalsPage 9 sA
TMSI (Temp. Mobile Subscriber Identity)TMSI (Temp. Mobile Subscriber Identity)
An alias to avoid sending IMSI at timesAn alias to avoid sending IMSI at timeswhen no encryption on radio path.when no encryption on radio path.
Allocated by visited network on entry to area.Allocated by visited network on entry to area.Cancelled when the mobile leaves the area.Cancelled when the mobile leaves the area.
Shorter (4 octets) and more efficient than IMSIShorter (4 octets) and more efficient than IMSI
Together with LAI, can uniquely identify MSTogether with LAI, can uniquely identify MS
© Copyright 2000, Agilent TechnologiesAll Rights Reserved
GSM FundamentalsPage 10 sA
MSISDN (Mobile Station ISDN Number) MSISDN (Mobile Station ISDN Number)
Identifies GSM subscriber in PSTN / ISDN numbering planIdentifies GSM subscriber in PSTN / ISDN numbering plan
Format:Format:
CC NDC Subscriber number
first digits = subscriber's HLRfirst digits = subscriber's HLR(up to 10 digits)(up to 10 digits)
national destination codenational destination code(= national GSM operator, (2 digits)(= national GSM operator, (2 digits)
country code (e.g. +_44 = UK)country code (e.g. +_44 = UK)(3 digits)(3 digits)
© Copyright 2000, Agilent TechnologiesAll Rights Reserved
GSM FundamentalsPage 11 sA
MSRN (MobileMSRN (Mobile SubscrSubscr. Roaming Number). Roaming Number)
Identifies subscriber in the HOST GSM network.Identifies subscriber in the HOST GSM network.
Generated on a callGenerated on a call--byby--call basiscall basis
Format as MSISDN :Format as MSISDN :
CC NDC Subscriber number
first digits = subscriber's HLRfirst digits = subscriber's HLR(up to 10 digits)(up to 10 digits)
national destination codenational destination code(= national GSM operator, (2 digits)(= national GSM operator, (2 digits)
country code (e.g. +_44 = UK)country code (e.g. +_44 = UK)(3 digits)(3 digits)
© Copyright 2000, Agilent TechnologiesAll Rights Reserved
GSM FundamentalsPage 12 sA
IMEI (IMEI (InterntlInterntl. Mobile Equipment Identity). Mobile Equipment Identity)
Uniquely Identifies a GSM Uniquely Identifies a GSM HandsetHandset..
Held in the EIRHeld in the EIR
Format :Format :
TAC FAC Serial number Spare
Type Approval Code (6 digits)Type Approval Code (6 digits)
Final Assembly code (2 digits)Final Assembly code (2 digits)
Serial Number (6 octets)Serial Number (6 octets)
1 Digit1 Digit
© Copyright 2000, Agilent TechnologiesAll Rights Reserved
GSM FundamentalsPage 13 sA
Other IdentifiersOther Identifiers
LMSI (Local Mobile Subscriber Identity)LMSI (Local Mobile Subscriber Identity)Temp key to subscriber used by VLRTemp key to subscriber used by VLR
4 octets4 octets
LAI (Location Area Identifier)LAI (Location Area Identifier)
Identifies a group of cells in same areaIdentifies a group of cells in same area
MS sends it continuously, allowing LA change detectMS sends it continuously, allowing LA change detect
When LA changes, a Location Update is requiredWhen LA changes, a Location Update is required
© Copyright 2000, Agilent TechnologiesAll Rights Reserved
GSM FundamentalsPage 14 sA
GSM and Global TitlesGSM and Global TitlesGlobal Title ( GT )Global Title ( GT )
-- Address used to discriminate network entitiesAddress used to discriminate network entities-- SCCP translates the Global Title to destination addressSCCP translates the Global Title to destination address
MSISDN : CC + NDC + SNMSISDN : CC + NDC + SNGlobal Title Global Title : CC + NDC + Part of SN: CC + NDC + Part of SN
Mobile Global Title ( MGT )Mobile Global Title ( MGT )-- It is the Global Title derived from IMSIIt is the Global Title derived from IMSI-- SCCP translates the MGT to destinationSCCP translates the MGT to destination
IMSI : MCC + MNC + MSINIMSI : MCC + MNC + MSINMGT : MCC + MNC + Part of MSINMGT : MCC + MNC + Part of MSIN
SCCP Subsystem Number ( SSN )SCCP Subsystem Number ( SSN )-- Identity of the localIdentity of the local SignallingSignalling Point EntityPoint Entity
( HLR, AUC,EIR )( HLR, AUC,EIR )
© Copyright 2000, Agilent TechnologiesAll Rights Reserved
GSM FundamentalsPage 15 A
GSM Interfaces and ProtocolsGSM Interfaces and Protocols
© Copyright 2000, Agilent TechnologiesAll Rights Reserved
GSM FundamentalsPage 16 sA
Signaling on the Air I/FSignaling on the Air I/F
04:04 SDCCH, SACCH, FACCH
LAPDm
DTAP 04:08 16Kbps (8 TDMA per cell)16Kbps (8 TDMA per cell)
LAPDmLAPDm ISDNISDN--like signalinglike signaling
3 kinds of radio channels3 kinds of radio channels
Carries all information to MSCarries all information to MS
MSMS
BTSBTS
© Copyright 2000, Agilent TechnologiesAll Rights Reserved
GSM FundamentalsPage 17 sA
Air I/F Layer 2 ConnectionsAir I/F Layer 2 Connections
SAP
Short Message Entity
SignallingEntity
3 0
BTS
SAP
Signalling Entity
Short MessageEntity
0 3
MS
Layer 2 Connection
Virtual Connections
© Copyright 2000, Agilent TechnologiesAll Rights Reserved
GSM FundamentalsPage 18 sA
Air I/F Layer 3 ProtocolsAir I/F Layer 3 Protocols
HLRBSC MSC
MSMS BTSBTS
AirAir AbisAbis AA
VLR
CMCMSMSSMSSSSSCCCC
MMMMRRRR
SMSC
© Copyright 2000, Agilent TechnologiesAll Rights Reserved
GSM FundamentalsPage 19 sA
Air I/F Layer 3 Message SetsAir I/F Layer 3 Message SetsDTAPDTAP::
Call ManagementCall Management
Call Establishment MessagesCall Establishment Messages
Call Information Phase MessagesCall Information Phase Messages
Call Clearing MessagesCall Clearing Messages
Messages for Supplementary Service ControlMessages for Supplementary Service Control
Miscellaneous MessagesMiscellaneous Messages
Mobility ManagementMobility Management
Registration MessagesRegistration Messages
Security MessagesSecurity Messages
Connection Management MessagesConnection Management Messages
Miscellaneous MessagesMiscellaneous Messages
Radio Resources:Radio Resources:Channel Establishment MessagesChannel Establishment Messages
Ciphering MessagesCiphering Messages
Handover MessagesHandover Messages
Channel Release MessagesChannel Release Messages
Paging MessagesPaging Messages
System Information MessagesSystem Information Messages
Specific messages for VBS/VGCSSpecific messages for VBS/VGCS
Miscellaneous MessagesMiscellaneous Messages
© Copyright 2000, Agilent TechnologiesAll Rights Reserved
GSM FundamentalsPage 20 sA
Signaling on theSignaling on the AbisAbis I/FI/F
BSCBTSBTS
64Kbps (4 TDMA64Kbps (4 TDMA chanchan. per PCM. per PCM tsts))
SubSub--rate (8,16,32 Kbps) also possiblerate (8,16,32 Kbps) also possible
LAPD Signaling ProtocolLAPD Signaling Protocol
Information Carried:Information Carried:
RF Measurement resultsRF Measurement resultsBTSBTS--BTS HandoversBTS HandoversDTAP informationDTAP informationRF Channel assignmentsRF Channel assignmentsRadio Resource management
LAPD - 08.56
Abis - 08.58
DTAP - 04.08
G.703
Radio Resource management
© Copyright 2000, Agilent TechnologiesAll Rights Reserved
GSM FundamentalsPage 21 sA
AbisAbis Physical I/F Physical I/F
BSCBTSBTS2 Mbps
TS0 TS1 … TS312Mbps is divided in 32 TimeSlots
A: 3 Kbps Overhead
B: 13 Kbps Vocoded Speech
1 2 3 464 Kbps is divided in 4 Sub Channels
64 Kbps
16 Kbps
A B16 Kbps is divided in 2 Sub Channels
© Copyright 2000, Agilent TechnologiesAll Rights Reserved
GSM FundamentalsPage 22 sA
AbisAbis I/F Layer 2 Frame FormatI/F Layer 2 Frame FormatLAPD
FLAG CK INFO Control Address FLAGLAPD
SAPI & TEISAPI & TEI
Depends on Frame TypeDepends on Frame Type
Cyclic Redundancy CheckCyclic Redundancy Check
Delimiter FlagDelimiter Flag
© Copyright 2000, Agilent TechnologiesAll Rights Reserved
GSM FundamentalsPage 23 sA
AbisAbis I/F Layer 3I/F Layer 3Network
ManagementTraffic
Management
0 62
Layer 2 Management
SAPI 63
RSL L2MLOML
Layer 2
© Copyright 2000, Agilent TechnologiesAll Rights Reserved
GSM FundamentalsPage 24 sA
Signaling on the A I/FSignaling on the A I/F
MTP
SCCP
DTAP BSSMAP
BSSAP
64Kbps (1 TDMA64Kbps (1 TDMA chanchan. per PCM. per PCM tsts))SS7 Signaling ProtocolSS7 Signaling ProtocolInformation Carried:Information Carried:
BSCBSC--BSC HandoversBSC HandoversBSSMAP InformationBSSMAP InformationDTAP InformationDTAP Information
BSC MSC
© Copyright 2000, Agilent TechnologiesAll Rights Reserved
GSM FundamentalsPage 25 sA
A I/F LayersA I/F Layers
MTP
SCCP
DTAP
BSSMAP
BSSAP
CM MM
MSC
MTP
SCCP
DTAP
BSSMAP
BSSAP
CM MM
BSC
CM
MM
MS
A Interface
© Copyright 2000, Agilent TechnologiesAll Rights Reserved
GSM FundamentalsPage 26 sA
BSSMAP/DTAPBSSMAP/DTAP Message StructureMessage StructureSCCP Data F/B SN FLAG
MessageMessageTypeType
CRCMSUMSU Tx direction
DLCI = Data Link Connection Identifier (SAP1 = 0, 3) DLCI = Data Link Connection Identifier (SAP1 = 0, 3)
DiscrimDiscriminatorinatorLengthLength BSSMAPBSSMAP
SCCP MTP
Information ElementsInformation Elements
Information ElementsInformation ElementsMessageMessageTypeType
LengthLength DLCIDLCIDiscrimDiscriminatorinator DTAPDTAP
© Copyright 2000, Agilent TechnologiesAll Rights Reserved
GSM FundamentalsPage 27 sA
BSSAP ProceduresBSSAP Procedures
BSSMAPBSSMAPConnection LessConnection LessSCCP Services:SCCP Services:
UDTUDTGlobal ProceduresGlobal Procedures
Dedicated ProceduresDedicated Procedures
BSSMAPBSSMAP
DTAPDTAP
Connection OrientedConnection OrientedSCCP Services:SCCP Services:
CR, CC, DT1, RLSD, RLCCR, CC, DT1, RLSD, RLC
© Copyright 2000, Agilent TechnologiesAll Rights Reserved
GSM FundamentalsPage 28 sA
List of BSSAP ProceduresList of BSSAP Procedures
Dedicated ProceduresDedicated ProceduresAssignmentAssignmentHandover Required IndicationHandover Required IndicationHandover Resource AllocationHandover Resource AllocationHandover ExecutionHandover ExecutionReleaseReleaseClassmarkClassmark UpdateUpdateCipher Mode ControlCipher Mode ControlTrace InvocationTrace InvocationInitial MS MessageInitial MS MessageQueuing IndicationQueuing IndicationDatalinkDatalink Control
Global ProceduresGlobal ProceduresBlockingBlockingResource IndicationResource IndicationResetResetHandover Candidate EnquiryHandover Candidate EnquiryPagingPagingFlow ControlFlow ControlReset CircuitReset Circuit
Control
© Copyright 2000, Agilent TechnologiesAll Rights Reserved
GSM FundamentalsPage 29 sA
DTAP MessagesDTAP MessagesRelease / CompleteRelease / CompleteRetrieve / ACK / RejectRetrieve / ACK / RejectStart / Stop DTMF / ACK / RejectStart / Stop DTMF / ACK / RejectUser Info, Status, Status Enquiry
Call ControlCall ControlAlertingAlertingCall Confirm / ProceedCall Confirm / ProceedCongestion ControlCongestion ControlConnect / ACKConnect / ACKDisconnectDisconnectSet UpSet UpFacilityFacilityHold / ACK / RejectHold / ACK / RejectNotifyNotifyProgress
User Info, Status, Status Enquiry
Mobility ManagementMobility ManagementAuth. Request / Response / RejectAuth. Request / Response / RejectCM serviceCM service ReqReq, Abort, Accept, Abort, AcceptIdentityIdentity ReqReq / Response/ ResponseLocation UpdateLocation Update ReqReq / Reject / Accept/ Reject / AcceptTMSI reTMSI re--allocationallocationIMSI detach
ProgressIMSI detach
© Copyright 2000, Agilent TechnologiesAll Rights Reserved
GSM FundamentalsPage 30 sA
Signaling on SS7 I/FSignaling on SS7 I/F
MSC
MTP
TUPTCAP
SCCP
ISUP
MAP64 Kbps channels64 Kbps channelsSS7 Signaling ProtocolSS7 Signaling ProtocolInformation Carried :Information Carried :
InterInter--MSC HandoversMSC HandoversAuthentication InformationAuthentication InformationRoaming informationRoaming informationISUP ISUP
PSTN &PSTN &other cellular systems other cellular systems
MSC
MAP, ISUPMAP, ISUP
MAPMAP HLR
MAP, ISUPMAP, ISUP
© Copyright 2000, Agilent TechnologiesAll Rights Reserved
GSM FundamentalsPage 31 sA
Details on SS7 Protocol Stack For GSMDetails on SS7 Protocol Stack For GSM
TCAP
MTP
SCCPUDT
MAP
Component Sublayer:Invoke, Return Result, Return Error, Reject
Transaction Sublayer:Begin, Continue, End, Abort
© Copyright 2000, Agilent TechnologiesAll Rights Reserved
GSM FundamentalsPage 32 sA
SCCP routes messages based on address informationSCCP routes messages based on address informationAny network element isAny network element is unicallyunically identified byidentified by
SPC + SSNSPC + SSNGlobal TittleGlobal Tittle
GenericGeneric SSNsSSNs associated to GSM elements:associated to GSM elements:SSN 5 : MAPSSN 5 : MAPSSN 6 : HLR SSN 6 : HLR SSN 7 : VLRSSN 7 : VLRSSN 8 : MSCSSN 8 : MSCSSN 9 : EIRSSN 9 : EIRSSN 10 : AUCSSN 10 : AUCSSN 11 : SMSCSSN 11 : SMSCSSN 12 : BSCSSN 12 : BSC
SCCP addressing for GSMSCCP addressing for GSM
© Copyright 2000, Agilent TechnologiesAll Rights Reserved
GSM FundamentalsPage 33 sA
The GSM MAP InterfacesThe GSM MAP Interfaces
MSC GMSC
MAP / HMAP / HHLR
VLR
VLR
AuC
EIR
Supp.Services
MAP / CMAP / C
SM-SCSMS
GATEWAY
MAP / FMAP / F
MAP / GMAP / G
MAP / DMAP / D
MAP / IMAP / I
MAP / BMAP / BMAP / EMAP / E
© Copyright 2000, Agilent TechnologiesAll Rights Reserved
GSM FundamentalsPage 34 sA
MAP MessagesMAP MessagesMAP / FMAP / FCheck IMEICheck IMEI
MAP / HMAP / HForward Short Message
MAP / CMAP / CAlert service CenterAlert service CenterSend Routing Info for Short MessageSend Routing Info for Short MessageSend Routing InformationSend Routing InformationSet Message Waiting DataSet Message Waiting DataRegister Charging Information
MAP / GMAP / GSend ParametersForward Short Message Send Parameters
MAP / DMAP / DActivate Trace ModeActivate Trace ModeCancel LocationCancel LocationDeactivate Trace ModeDeactivate Trace ModeDelete Subscriber DataDelete Subscriber DataDeregister Mobile SubscriberDeregister Mobile SubscriberInsert Subscriber DataInsert Subscriber DataNote MS PresentNote MS PresentProvide Roaming NumberProvide Roaming NumberResetResetSend ParametersSend ParametersUpdate Location
MAP / IMAP / IActivate SSActivate SSDeactivate SSDeactivate SSERASE SSERASE SSForward Check SS IndicationForward Check SS IndicationForward SS NotificationForward SS NotificationGet PasswordGet PasswordInterrogate SSInterrogate SSInvoke SSInvoke SSProcessProcess UnstructUnstruct. SS Data. SS DataRegister PasswordRegister PasswordRegister SS
Register Charging Information
MAP / EMAP / EForward Access SignalingForward Access SignalingNote Internal HandoverNote Internal HandoverPerform HandoverPerform HandoverPerform Subsequent HandoverPerform Subsequent HandoverProcess Access SignalingProcess Access SignalingSend End SignalSend End SignalTrace Subscriber Activity
Update LocationTrace Subscriber Activity Register SS
© Copyright 2000, Agilent TechnologiesAll Rights Reserved
GSM FundamentalsPage 35 A
GSM Signaling ExamplesGSM Signaling Examples
© Copyright 2000, Agilent TechnologiesAll Rights Reserved
GSM FundamentalsPage 36 sA
Call Setup (Mobile Originated)Call Setup (Mobile Originated)MS BTS MS BTS BSC BSC MSC MSC
Immediate AssignImmediate Assign
CM Service RequestCM Service RequestAuthentication Request ( RAND )Authentication Request ( RAND )
Ciphering Mode Command (key)Ciphering Mode Command (key)
Ciphering Mode CompleteCiphering Mode Complete
Call ProceedingCall Proceeding
Assign CommandAssign Command
AlertingAlerting
ConnectConnect
Connect ACKConnect ACK
Channel Request/RequiredChannel Request/RequiredRACHRACH
PAGCHPAGCHSDCCHSDCCH
SDCCHSDCCHAuthentication ResponseAuthentication ResponseSDCCHSDCCH
SDCCHSDCCHSDCCHSDCCH
SETUP (service, called number)SETUP (service, called number)SDCCHSDCCH
TCHTCH
TCHTCHAssign CompleteAssign CompleteTCHTCH
TCHTCH
TCHTCH
TCHTCH
© Copyright 2000, Agilent TechnologiesAll Rights Reserved
GSM FundamentalsPage 37 sA
Location UpdatingLocation UpdatingMS BTS BSC MS BTS BSC MSC NEW VLR PREV VLR MSC NEW VLR PREV VLR HLR HLR
Location Update Request (LAI, TMSI)Location Update Request (LAI, TMSI)Update Loc. Area ( old LAI, TMSI )Update Loc. Area ( old LAI, TMSI )
SendSend ParamParam. ( old LAI, TMSI ). ( old LAI, TMSI )
SendSend ParamParam. Result ( IMSI ). Result ( IMSI )
Update Location (IMSI, MSRN, VLR No.)Update Location (IMSI, MSRN, VLR No.)
Cancel Loc. (IMSI, VLR No.)Cancel Loc. (IMSI, VLR No.)
Cancel LocationCancel Location AckAck..
Insert Subs. Data (IMSI, service info.)Insert Subs. Data (IMSI, service info.)
Subs. Data InsertionSubs. Data Insertion AckAck..Update Loc.Update Loc. AckAck..
Update Loc. AreaUpdate Loc. Area AckAck..Forward New TMSI Forward New TMSI (TMSI)(TMSI)Location Update Accept (new LAI, TMSI)Location Update Accept (new LAI, TMSI)
TMSI Reallocation CompleteTMSI Reallocation CompleteTMSITMSI AckAck..
Channel ReleaseChannel Release
© Copyright 2000, Agilent TechnologiesAll Rights Reserved
GSM FundamentalsPage 38 sA
Retrieval of Call Routing InformationRetrieval of Call Routing Information
MSC/VLR
GATEWAYMSC
MAP/CMAP/CTCAP (Begin, Invoke)TCAP (Begin, Invoke)SRI ( MSISDN )SRI ( MSISDN )
MAP/CMAP/CTCAP (End, RR)TCAP (End, RR)SRISRI--ACK ( MSRN )ACK ( MSRN )
MAP/DMAP/DTCAP (End, RR)TCAP (End, RR)PRNPRN--ACK ( MSRN )ACK ( MSRN )
MAP/DMAP/DTCAP (Begin, Invoke)TCAP (Begin, Invoke)PRN (IMSI)PRN (IMSI)
HLR
ISUPISUP
IAM ( MSRN )IAM ( MSRN )IAM ( MSISDN )IAM ( MSISDN )
© Copyright 2000, Agilent TechnologiesAll Rights Reserved
GSM FundamentalsPage 39 sA
Call Setup & Clear (Land orig.)Call Setup & Clear (Land orig.)MS BTS BSC MSC VLR MS BTS BSC MSC VLR HLR GMSC ISDN HLR GMSC ISDN
IAM ( MSISDN, service)IAM ( MSISDN, service)Send Rout. info. ( MSISDN)Send Rout. info. ( MSISDN)
Provide Roaming Info ( IMSI )Provide Roaming Info ( IMSI )Provide Roaming InfoProvide Roaming Info respresp ( MSRN)( MSRN)
Send Rout. info.Send Rout. info. respresp ( MSRN, service)( MSRN, service)
IAM ( MSRN, service )IAM ( MSRN, service )
Page ( IMSI, TMSI, LAI )Page ( IMSI, TMSI, LAI )
Paging Request (TMSI)Paging Request (TMSI)
Paging RequestPaging Request
Channel RequestChannel RequestImmediate AssignImmediate Assign
Paging Response (TMSI)Paging Response (TMSI)Page ResultPage Result
Complete Call ResultComplete Call ResultSETUP (service)SETUP (service)
Call ConfirmedCall Confirmed
PAGCHPAGCH
RACHRACH
SDCCHSDCCHTCHTCH
© Copyright 2000, Agilent TechnologiesAll Rights Reserved
GSM FundamentalsPage 40 sA
Call Setup & Clear (Land orig.)Call Setup & Clear (Land orig.)MS BTS BSC MSC VLR MS BTS BSC MSC VLR HLR GMSC ISDN HLR GMSC ISDN
Complete Call ResultComplete Call Result
ACMACM
ANMANM
ReleaseReleaseClear CommandClear Command
Release IndicationRelease Indication
RF Channel ReleaseRF Channel Release
RF Channel ReleaseRF Channel Release AckAck..
Call ConfirmedCall ConfirmedAssign Command Assign RequestAssign Command Assign Request
TCHTCHAssign CompleteAssign CompleteTCHTCH
AlertingAlertingTCHTCHConnectConnectTCHTCH
ConnectConnect AckAck..TCHTCH
Channel ReleaseChannel ReleaseSACCHSACCH
© Copyright 2000, Agilent TechnologiesAll Rights Reserved
GSM FundamentalsPage 41 sA
Address Translation SummaryAddress Translation Summary
New VLR needs Previous VLR address during LUNew VLR needs Previous VLR address during LU→→ From previous Location Area Identification if in same net, or neFrom previous Location Area Identification if in same net, or needs IMSIeds IMSI
HLR needs VLR address (after location update)HLR needs VLR address (after location update)→→ From Called Party Address of the UPDATE LOCATION message. From Called Party Address of the UPDATE LOCATION message.
VLR needs HLR address first timeVLR needs HLR address first time→→ Convert the IMSI to a Global TitleConvert the IMSI to a Global Title
VLR needs HLR address after location updatingVLR needs HLR address after location updating→→ Use either MSISDN or E.164 HLR numbers (received in UL ACK) as GUse either MSISDN or E.164 HLR numbers (received in UL ACK) as GTT
© Copyright 2000, Agilent TechnologiesAll Rights Reserved
GSM FundamentalsPage 42 A
SS7 MAP Protocol DetailsSS7 MAP Protocol Details
© Copyright 2000, Agilent TechnologiesAll Rights Reserved
GSM FundamentalsPage 43 sA
MAP and SS7MAP and SS7
MTP
TUPTCAP
SCCP
ISUP
MAP
© Copyright 2000, Agilent TechnologiesAll Rights Reserved
GSM FundamentalsPage 44 sA
MAP and TCAPMAP and TCAP
MSC1/VLRMSC1/VLR MSC2/VLRMSC2/VLR HLRHLRLOCLOCUPDATEUPDATEREQDREQD
Update Location (IMSI, MSC/VLR No)Update Location (IMSI, MSC/VLR No)
TCAP (Begin, Invoke)TCAP (Begin, Invoke)
Insert Subs Data (MSISDN + service info)Insert Subs Data (MSISDN + service info)TCAP (Cont, Invoke)TCAP (Cont, Invoke)
Insert Subs Data ACKInsert Subs Data ACKTCAP (End, RR)TCAP (End, RR)
Location Updated (HLR No)Location Updated (HLR No)
TCAP (End)TCAP (End)
Cancel Location (IMSI)Cancel Location (IMSI)
TCAP (Begin, Invoke)TCAP (Begin, Invoke)
Cancel Location ACKCancel Location ACK
TCAP (End)TCAP (End)
© Copyright 2000, Agilent TechnologiesAll Rights Reserved
GSM FundamentalsPage 45 sA
MAP Procedures for LU (1)MAP Procedures for LU (1)
PrimitivePrimitive From From →→ToTo ParametersParametersUPDATE_LOCATION_AREAUPDATE_LOCATION_AREA
requestrequest MSCMSC→→VLRVLR Target LAI, LU type, IMSI/TMSI,Target LAI, LU type, IMSI/TMSI,prevprev LAI, cipher keyLAI, cipher key seqseq if TMSI usedif TMSI used
responseresponse VLRVLR→→MSCMSC --
UPDATE_LOCATIONUPDATE_LOCATIONrequestrequest VLRVLR→→HLRHLR IMSI, E.164IMSI, E.164 MSC #, E.164 VLR #,LMSIMSC #, E.164 VLR #,LMSIresponseresponse HLR HLR →→VLRVLR E.164 E.164 HLR #, HLR #,
CANCEL_LOCATIONCANCEL_LOCATIONrequestrequest HLRHLR→→prevprev VLRVLR IMSI, LMSIIMSI, LMSIresponseresponse prevprev VLRVLR→→HLRHLR --
© Copyright 2000, Agilent TechnologiesAll Rights Reserved
GSM FundamentalsPage 46 sA
MAP Procedures for LU (2)MAP Procedures for LU (2)
PrimitivePrimitive From From →→ToTo ParametersParameters
SEND_IDENTIFICATIONSEND_IDENTIFICATIONrequestrequest VLRVLR→→prevprev VLRVLR TMSITMSIresponseresponse prevprev VLRVLR→→VLRVLR IMSI, authentication tripletsIMSI, authentication triplets
AUTHENTICATEAUTHENTICATErequestrequest VLRVLR→→MSCMSC RAND, CKSNRAND, CKSNresponseresponse MSCMSC→→VLRVLR SRESSRES
SET_CIPHERING_MODESET_CIPHERING_MODErequestrequest VLRVLR→→MSCMSC Ciphering mode,Ciphering mode, KcKc
FORWARD_NEW_TMSIFORWARD_NEW_TMSIrequestrequest VLRVLR→→MSCMSC TMSITMSIresponseresponse MSCMSC→→VLRVLR --
© Copyright 2000, Agilent TechnologiesAll Rights Reserved
GSM FundamentalsPage 47 sA
MAP Procedures for Routing CallsMAP Procedures for Routing Calls
PrimitivePrimitive From From →→ToTo ParametersParametersPAGEPAGE
requestrequest VLR VLR →→MSCMSC Invoke ID, IMSI, LA id, TMSIInvoke ID, IMSI, LA id, TMSIresponseresponse MSCMSC→→ VLRVLR Invoke IDInvoke ID
SEND_ROUTING_INFORMATIONSEND_ROUTING_INFORMATION
requestrequest GMSC GMSC →→HLRHLR Invoke ID, MSISDN, Network signal infoInvoke ID, MSISDN, Network signal inforesponseresponse HLR HLR →→GMSCGMSC Invoke ID, IMSI, MSRN, forwarding dataInvoke ID, IMSI, MSRN, forwarding data
PROVIDE_ROAMING_NUMBERPROVIDE_ROAMING_NUMBER
requestrequest HLRHLR→→VLRVLR Invoke ID, IMSI, MSC n., MSISDN, LMSI,Invoke ID, IMSI, MSC n., MSISDN, LMSI,GSM bearer capability, NetworkGSM bearer capability, Network SigSig InfoInfo
responseresponse VLR VLR →→HLRHLR MSRNMSRN