Académique Documents
Professionnel Documents
Culture Documents
Signaling in GSM
a) Signaling protocols in GSM
HLR
VLR
MAP
MAP
MAP
VLR
MAP
PSTN /
ISDN
HLR
MAP/ISUP
AUC
MAP
MAP/ISUP
MAP/ISUP
MSC
MAP
MSC
MAP
MSC
EIR
PLMN
BSSAP/Q.931
BSC
BSS
LAPD/Q.931/RR/MM
BTS
LAPDm/Q.931/RR/MM
MS
Note:
-------------------------------------------------------------------------------------------------86
MAP
MAP
TCAP
Transaction
TCAP
SCCP
SCCP
SCCP
MTP
MTP
MTP
Node A
Node X
Node B
Application
Layer 7
NSP
Layers 1-3
Location Registration
Location cancellation
De-registration
Transfer of subscriber data/service profile
Transfer of authentication/security data
Routing of mobile-terminated calls
Handover
MAP Application Entities (AEs) with
Subsystem Numbers (SSNs)
MAP-MSC
MAP-VLR
MAP-HLR
MAP-EIR
MAP-AUC
MAP-SM-SC
-------------------------------------------------------------------------------------------------87
ASE
1
Node A
Node B
MAP-VLR
MAP-HLR
ASE
2
ASE
1
ASE
3
ASE
2
ASE
3
TCAP ASE
TCAP ASE
Component sub-layer
Component sub-layer
Transaction sub-layer
Transaction sub-layer
SSN
SSN
NSP
Figure 3.3 MAP AEs & ASEs
ASEs are software functions within Application Entities and
handle one or more operations to handle a task. One entity may
have to interact concurrently with several other entities, as in the
case of hand-over.
ASE 1
MAP
VLR
Logical connections
ASE 1
ASE 2
ASE 2
ASE 1
ASE 1
ASE 2
ASE 2
MAP
HLR
Location updating
Insert subscriber data
Location Cancellation
Functions
Functions
Location
Updating
Location
Updating
Location
Cancellation
T
C
A
P
N
S
P
N
S
P
T
C
A
P
Location
Cancellation
Roaming
Number
Roaming
Number
MSC/VLR
HLR
LAPDm
M
Initial MS Messages M
BSSMAP
S
C
BSC/BTS
Figure 3.6 BSSAP protocols between MS & MSC
-------------------------------------------------------------------------------------------------89
Connection
management (CM)
messages
Security messages
Location Updating
Request
Authentication
Request
CM Service Request
Location Updating
Accept
Authentication
Response
CM Service Accept
Location Updating
Reject
Authentication
Reject
CM Service Reject
Identity Request
Identity Response
Figure 3.7 DTAP messages for mobility management
-------------------------------------------------------------------------------------------------90
Call supervision
Call clearing
Setup
Modify
Disconnect
Call Proceeding
Modify Reject
Release
Emergency Setup
Release Complete
Progress
Alerting
Connect
Connect
Acknowledged
Figure 3.8 DTAP messages for circuit-mode connections
Supplementary service control messages
FACILITY (Request/Accepted/Reject)
The message contains an Information Element called
Facility in which the service to be invoked is specified.
2) Initial MS Messages
Some Initial MS messages
-------------------------------------------------------------------------------------------------91
Connection-oriented
Block
Assignment Request
Blocking Acknowledge
Assignment Complete
Unblock
Assignment Failure
Unblocking Acknowledge
Reset
Clear Request
Reset Acknowledge
Clear Command
Reset Circuit
Clear Complete
Class-mark Update
Paging
Handover Command
Handover Complete
Handover Failure
Complete Layer 3 Information
BSSAP
DTAP
BSSAP
BSSMAP
DTAP
BSSMAP
Distribution
Sub-layer
Distribution
Sub-layer
SCCP
SCCP
MTP
MTP
BSC
A-Interface
MSC
-------------------------------------------------------------------------------------------------93
BSSMAP
DTAP
Discrimination
Discrimination
DLCI
Length
Length
Message Type
Message type
TI / PD
INFO
INFO
Figure 3.12 BSSAP Message structure
Header Discrimination
Discrimination field of one octet (and also DLCI octet in the case of
DTAP) constitutes the header for analysis by the Distribution Sublayer.
In the case of DTAP messages bit 7 of Discrimination further
distinguishes whether the message is transparent through the BSS.
Bit 7:
0
1
not transparent
transparent
00
10
FACCH
SACCH
Bit 1 0:
00
SAPI = 0 = Call control signaling (Q.931)
11
SAPI = 3 = Short Message Service
Message Type examples
H 01
H 02
H 10
H 11
Assign Request
Assign Complete
Handover Request
Handover Required
-------------------------------------------------------------------------------------------------94
Call Control
Mobility Management
Radio Resource Management
Supplementary Service control
Others
10
FCS
Info
Control
Address
SAPI
C/R
Command / Response
Service Access Point Identifier
Terminal Endpoint Identifier
Figure 3.14 LAPD Address field
SAPI = 62
SAPI = 63
-------------------------------------------------------------------------------------------------96
11
Abis
BSC
TRX 3
MSC
BC
BTS site
BC
TRX
Figure 3.15 Abis interface between the BSC & the BTS
One of the timeslots in the PCM link between the BSC & the BTS
is used for signaling between them. The signaling uses LAPD
protocol for layer 2.
SAPI = 62 (O&M)
TEI = 3
TEI = 4
TEI = 5
BC functions
BC
BC
SAPI = 63 (Layer 2)
TEI = 6
Layer 2 functions
TEI = 0
TEI = 1
TEI = 2
TRX 1
TRX 2
TRX 3
12
C/R
15 14 13 12 11 10 9
7 6 5 4 3 2 1
N(R)
N(S)
3 2 1 0
C/R
RR
N(R)
P/F
0 0 0 0
0 0 0 1
RNR
N(R)
P/F
0 0 0 0
0 1 0 1
REJ
N(R)
P/F
0 0 0 0
1 0 0 1
13
3 2 1 0
SABME
0 0 1
1 1 1 1
DM
0 0 0
1 1 1 1
UI
0 0 0
0 0 1 1
DISC
0 1 0
0 0 1 1
UA
0 0 1
0 0 1 1
SABME
DM
UI
DISC
UA
-------------------------------------------------------------------------------------------------99
14
FCS
Info
N(R)
Control
P/F
N(S)
N(S)
N(R)
Counter R
N(S)
Counter R
(R)
XX
XX
00
00
00
01
01
01
I
02
01
02
02
Counter S
UA
I
02
N(R)
SABME
I
01
Counter S
(S)
Address
00
00
00
01
01
01
REJ
01
01
01
01
02
X
S
I
(S)
(R)
XX
XX
00
00
00
01
01
01
01
01
01
02
02
02
DISC
UA
Figure 3.20 Send Receive Counters and N(S) & N(R)
-------------------------------------------------------------------------------------------------100
15
16
Layer 3 Information
Layer 3 Information
22 Octets
Layer 2 operation
Layer 2 operation
Unacknowledged
Mode
BCCH
CCCH
Acknowledged Mode
SDCCH
SACCH
FACCH
22 Octets
Buffer
Max
249
20 (18) Octets
Octets
22 Octets
184 bits
20 Octets
31
23 Octets
18 Octets
31
21 Octets +
Timer Alignment
Power Order
Interleaving
17
LAPDm functions
Filler
Info
Length
Control
Address
0
C/R
SAPI
LPD
LPD
SAPI
C/R
Command / Response
Service Access Point Identifier
Link Protocol Discriminator
Figure 3.23 LAPDm Address field
18
N(R)
C/R
N(S)
C/R
RR
N(R)
P/F
RNR
N(R)
P/F
REJ
N(R)
P/F
SABM
DM
0
7 0
6 1
5
0 0 0
P
4
F
1
3 1
2 1
1 1
0
1 1 1 1
R
C
UI
0 0 0
0 0 1 1
DISC
0 1 0
0 0 1 1
UA
0 0 1
0 0 1 1
SABM
DM
UI
DISC
UA
-------------------------------------------------------------------------------------------------104
19
Length
EL
FF
2B
--------------------------------------------------------------------------------------------------
20
105
3) LAPDm Protocol & a Traffic Case
MS
BTS
SABM (Paging Response)
UA (Paging Response)
I (Authentication Request)
N(S) = 0, N(R) = 0
I (Authentication Response)
N(S) = 0, N(R) = 1
I (Cipher Mode Command)
N(S) = 1, N(R) = 1
I (Cipher Mode Complete)
N(S) = 1, N(R) = 2
I (Setup)
N(S) = 2, N(R) = 2
RR
N(R) = 3
I (Setup)
An S-frame RR is lost;
After timeout, I-frame
N(S) = 2 is repeated
N(S) = 2, N(R) = 2
RR
N(R) = 3
I (Setup)
N(S) = 3, N(R) = 2
Figure 3.28 LAPDm & a call setup scenario
--------------------------------------------------------------------------------------------------
21
106
HLR
MSC/VLR
IAM (ISUP)
Figure 3.29 a) MAP dialog for MSRN
MSC/VLR
BSC
MS
22
107
MSC/VLR
BSC
MS
ALERTING (DTAP)
CPG
CONNECT (DTAP)
ANM
RELEASE (DTAP)
RELESE COMPLETE (DTAP)
Clear Command (DT1)
Clear Complete (DT1)
SCCP-RLSD
SCCP-RLC
Figure 3.29 c) Call completion & clear BSSMAP & Q.931 over DTAP
2) Call handling phases within the BSS
Call to MS
Call from MS
Paging
Immediate Assignment
Assignment
Handover
Call clearing
Figure 3.30 Call handling phases in the BSS
--------------------------------------------------------------------------------------------------
23
108
3) Paging & Immediate Assignment
MSC/VLR
BSC
BTS
MS
Page (UDT)
Paging Command
Channel Required
Channel ACT
Paging (PCH)
Channel REQ
(RACH)
Immediate Assign
(AGCH)
SABM (Page Resp.)
(SDCCH)
UA (Page Resp.)
Establish Ind.
(Paging Response)
SCCP-CR
(Page Resp.)
SCCP-CC
Figure 3.31 Paging & Immediate Assignment
Paging
The procedure starts with the PAGING message sent by the MSC
to the BSC. The BSC in turn sends PAGING COMMAND to each
BTS of the cells of the specified Location Area.
Immediate Assignment
On receipt of a request on the RACH, the BTS sends a
CHANNEL REQUIRED message to the BSC. BSC allocates a
free SDCCH and asks BTS to activate it.
--------------------------------------------------------------------------------------------------
24
109
On receipt of acknowledgement, BSC sends an IMMEDIATE
ASSIGNMENT to the BTS which relays this to the MS on the
AGCH asking the MS to switch to the allocated SDCCH.
The BTS & the MS establish a LAPDm data link on the SDCCH
by means of SABM & UA frames. The MS piggybacks the
PAGING RESPONSE information on the SABM. The BTS then
sends the ESTABLISH INDICATION message to the BSC.
The BSC initiates the SCCP logical connection with the MSC and
the PAGING RESPONSE from the MS is piggybacked on the CR
message.
4) Authentication & Ciphering
MSC sends the RAND in a DTAP message Authentication
Request to which the MS sends the SRES in a DTAP message
Authentication Response.
On SRES match, the MSC sends a BSSMAP message to BSC.
The Ciphering Constant contained in the message is used by the
BTS for ciphering purposes.
MSC/VLR
BSC
BTS
MS
Cipher Mode
Complete (DT1)
Cipher Mode
Command
Cipher Mode
Complete
Cipher Mode
Comm
and.
Cipher Mode
Complete
25
110
5) Assignment of a TCH
The MSC sends an ASSIGNMENT REQUEST containing the
frequency and timeslot information. The BSC then allocates a
traffic channel in the correct cell and sends a CHANNEL
ACTIVATION message to the BTS. BTS responds with
CHANNEL ACTIVATION ACK.
BSC establishes a circuit-switched connection between the
channel towards the MSC and that of the BTS. BSC then sends
an ASSIGNMENT COMMAND to the MS via BTS asking both of
them to switch to the new TCH.
The MS establishes the LAPDm data link with the BTS on the
SACCH. BTS sends Establish Indication to the BSC. The MS
then sends Assignment Complete using FACCH that is conveyed
to the MSC. MS sends a DTAP ALERT message.
MSC/VLR
BSC
Assignment
Request
BTS
MS
Channel
Activation
Channel Act. Ack.
Assignment Cmd.
Establish Ind.
Assignment
Complete
Assignment Comp.
Assignment
Command
(SDCCH)
SABM (TCH-SACCH)
UA (TCH-SACCH)
Assignment
Comp.
(FACCH)
Alert (DTAP)
Figure 3.33 TCH Assignment procedure
--------------------------------------------------------------------------------------------------
26
111
6) Handover
General
The Handover procedure is initiated by the Locating function of
the BSC. The locating function sends a list of candidate cells
with priority to the Connection Management function. If the
topmost cell in the list belongs to the same BSC and a channel is
free, it is a case of intra-BSC handover.
Intra-BSC Handover
BSC sends Channel Activation message to BTS including the
encryption information. After getting acknowledgement, BSC
sends a HANDOVER COMMAND over the FACCH to the MS.
When the MS switches to the new channel, BTS sends a
Handover Detection message to the BSC. On establishing the
data link, the BTS sends an Establish Indication to the BSC.
MSC/VLR
BSC
BTS 1
BTS 2
MS
Channel Activation
Channel Act. Ack.
Handover Command (FACCH)
Handover Detection
Establish Indication
Handover Complete
Handover
Performed
RF Channel
Release
RF Channel REL
Ack.
Handover
Co
mp
27
112
After receiving the Handover Complete message from the MS, the
old channel is released by sending the RF Channel Release
message. MSC is then informed about Handover.
7) Call clear
The purpose of the procedure is to clear all the dedicated
resources used for the call and are no longer required.
MSC initiates the procedure by sending a CLEAR COMMAND.
After releasing the resources, the BSC sends a Clear Complete
message.
BSC then sends a Channel Release message to the MS and then
asks the BTS to release the data link over SACCH. After getting
the Release Indication from the BTS, BSC sends RF Channel
Release message to the BTS. The procedure is complete when
the BTS returns acknowledgement.
MSC/VLR
BSC
BTS
MS
Clear Cmd
Clear Comp
--------------------------------------------------------------------------------------------------
28
113
29