Intro: GSM Call Flows
Interfaces
• The A-interface lies between the MSC and the BSS (Base Station Subsystem). The A-interface consists of both user plane (PCM links) and control plane (signaling).
• The C/D-interface between the MSC and the HLR is used by the GMSC (Gateway MSC) to interrogate the HLR in order to obtain routing information for a call to a subscriber. Signaling on this interface uses the MAP over TCAP protocols (MAP/C).
• The D-interface between the VLR and HLR is used to exchange data related to the location of an MS and the management of the subscriber. Signalling on this interface uses the MAP over TCAP protocols (MAP/D).
• The E-interface between two MSCs is used during inter-MSC handover. Signalling on this interface uses the MAP over TCAP protocols (MAP/E).
• When the BSS consists of a BSC (Base Station Controller) and one or more BTSs (Base Transceiver Stations), the Abis-interface between the BSC and BTS is used to support the services offered to the GSM users and subscribers.
• When the BSS consists of a BSC (Base Station Controller) and one or more BTSs (Base Transceiver Stations), the Abis-interface between the BSC and BTS is used to support the services offered to the GSM users and subscribers.
• The Um-interface is the air interface that is used for exchanges between an MS and a BSS.
Um – DTAP (Direct Transfer Application Part )Abis – DTAPA -- BSSAP (Base Station System Application Part)
CL3I -- Complete Layer 3 Information
OSI layer Model vs SS7 protocol
Types of Registration• Normal location updating: used to update the LA (Location Area) of an
MS when the MS changes LA.
• Periodic Updating: used to periodically inform the network that the MS is still available and thus prevents the MS from accidentally becoming detached from the system.
• IMSI Attach: used to indicate the IMSI as active in the network; it is the counterpart of the IMSI detach procedure.
• IMSI Detach: An MS may invoke the IMSI detach procedure if the MS is deactivated (e.g. powered down) or if the SIM (Subscriber Identity Module) is detached from the MS.
MT Exchange Property – PURGECONTROL – MGADP;
IMSI -- International Mobile Subscriber IdentityTMSI --Temporary Mobile Subscriber Identity
Location Updating
Location Updating
GSM Authentication & Ciphering• The purpose of authentication is to protect the network against
unauthorized use.
GSM Authentication Parameters• Some of the Authentication parameters that are used in GSM network are as
follows :-• AXE parameter:• 1) AUTHENTICATE :Determines whether authentication is performed in the
MSC/VLR Server. • 2) SELAUTH in GSMMMSC parameter set determines whether selective
authentication is used in GSM MSC/VLR Server.
• Exchange Settings:• 1) IMEIFETCHCIPH : Ciphering used to fetch IMEI • 2) CIPHER : if ciphering is performed in the MSC/VLR Server • 3) AUTHENTICLAI : Authentication is not performed in LU with change of LAI
IMSI Attach
IMSI Detach
Call to MS
Pre Analysis B no.
B-no. Pre analysis & Analysis• <pnbsp:bo=all;• PRE-ANALYSIS OF B-NUMBER INFORMATION
• OPERATING AREA• BO NAPI BNT RESULT• 0 0 OBA=1• 0 1 OBA=0• 4 1 OBA=4• 4 2 OBA=4• ……………………………...• 31 1 OBA=31• 31 2 OBA=30• 31 4 OBA=31• ………………………….. • 401 4 OBA=401• 500 15 OBA=31
• END• <anbsp:b=32-09820; (OBA from Pre analysis + B no.)• B-NUMBER ANALYSIS DATA• OPERATING AREA• B-NUMBER MISCELL F/N ROUTE CHARGE L A• 32-0 CC=2• 32-09 RC=906 CC=2 L=4-8• M=0-00• D=4-2• TRD=100• END
SCCP Analysis • <anrsp:rc=906;• ROUTING CASE DATA• OPERATING AREA• RC CCH BR ROUTING SP DATA• 906 NO TMR-0• &-3• &-4 P01=1 R=MSC96SO MM1 COT EST SI ESS ESR• 0 0 1 1• BNT RN SPR OLI OLI2• 4 00 0• ISC FCP D• 0
• <exrop:r=MSC96SO;• ROUTE DATA• R ROUTE PARAMETERS• MSC96SO DETY=UPD1 TTRANS=1 FNC=3 • R=MSC96SI• ST=6 SI=ISUP4 SP=3-600
• <c7gsp:TT=0,NP=1,NA=4,NS=9198203;• CCITT7 GLOBAL TITLE SERIES DATA
• OPERATING
• TT NP NA NS GTRC • 0 1 4 9198203 2• END ……contd
SCCP Analysis Contd…• <c7gcp:gtrc=2;• CCITT7 GLOBAL TITLE ROUTING CASE DATA
• OPERATING
• GTRC PSP PTERM PINTER PSSN SSP STERM SINTER SSSN LSH • 2 3-320 YES NO 3-1000 NO YES NO
• <c7rsp:dest=3-320;• CCITT7 MTP ROUTING DATA
• DEST SPID DST PRIO LSHB LS SPID RST• 3-320 HLR2 ACC 1 3-320 HLR2 WO• 2 3-600 GMSC6 SB• <c7ltp:ls=3-320;• CCITT7 LINK SET STATE
• LS SPID SLC STATE INHIBST FCODE INFO• 3-320 HLR2 00 ACTIVE• 01 ACTIVE• 02 ACTIVE• 03 ACTIVE• 04 ACTIVE• 05 ACTIVE• 06 ACTIVE• 07 ACTIVE• 08 ACTIVE• 09 ACTIVE• 10 ACTIVE• 11 ACTIVE• 12 ACTIVE• 13 ACTIVE• 14 ACTIVE• 15 ACTIVE• END
Routing Analysis
SCCP Analysis
SCCP Routing in HLR
HLR data • <hgsdp:msisdn=919820315708,all;• HLR SUBSCRIBER DATA
• SUBSCRIBER IDENTITY• MSISDN IMSI STATE AUTHD• 919820315708 404201145038948 CONNECTED AVAILABLE
• NAM• 1
• PERMANENT SUBSCRIBER DATA• SUD• CAT-10 DBSG-1 PRBT-1 BS26-1• TS11-1 TS21-1 TS22-1 OFA-1• …………………………………………….• AMSISDN BS BC• NONE
• SUPPLEMENTARY SERVICE DATA• BSG• TS10• SS STATUS FNUM TIME• CAW ACTIVE-OP• CFU NOT ACTIVE• CFNRY NOT ACTIVE• ………………………………………………..• LOCATION DATA• VLR ADDRESS MSRN MSC NUMBER LMSID• 4-919820906441 919820906441
• PACKET DATA PROTOCOL CONTEXT DATA• NONE
• END• <
HLR SCCP routing • <c7gsp:TT=0,NP=1,NA=4,NS=919820906441;
• CCITT7 GLOBAL TITLE SERIES DATA
• OPERATING
• TT NP NA NS GTRC • 0 1 4 919820906441 39• END
• <c7gcp:gtrc=39;
• CCITT7 GLOBAL TITLE ROUTING CASE DATA
• OPERATING
• GTRC PSP PTERM PINTER PSSN SSP STERM SINTER SSSN LSH • 39 3-900 YES NO NO• END
• <
MSRN (mobile station roaming number)
Call from MS
B no. & RC analysis
B-no. Analysis & VLR data• <mgslp:imsi=404201145038948,all;• MT MOBILE SUBSCRIBER LIST• SUBSCRIBER IDENTITY• IMSI MSTAT MSISDN CAT• 404201145038948 REG 919820315708 10
• SUBSCRIBER NON SUPPLEMENTARY SERVICE DATA• BASIC SERVICE DATA• DCDA9600 SPCH SMS
• SUBSCRIBER SUPPLEMENTARY SERVICE DATA• ………………………………………………..
• <mgisp:imsis=404201145038948;• MT IMSI NUMBER SERIES ANALYSIS DATA• OPERATING TABLE• IMSIS M NA ANRES
• 40420114 5-919820 4 OBA-30• BO-33• OWNMS• NATMS• NRRG-0• PLMN-0• ERIS-0• MAPVER-2• INOPER-1• CBA-19• CBAZ-146• • END
Call Delivery in GMSC
Call Delivery in HLR
MT - SMS
Unsuccessful MT SMS
MO - SMS
MO SMS
• SC – Service Center Add –> Global Title –> SCCP translation.
• Almost 8 SC can be stored in MS
• The short message is transferred to the MS on a Standalone Dedicated Control CHannel (SDCCH) if the MS is idle, and on the Slow Associated Control CHannel SACCH if the mobile is active during a call.