Académique Documents
Professionnel Documents
Culture Documents
GSM/UMTS/LTE
Guillaume BRQUIGNY
Mobile Network
.History and Evolution
PSTN
2G
e.g.: GSM
Circuit Core
3G
e.g.: UMTS
UE
Packet Core
4G Internet
e.g.: LTE
PSTN
2G
e.g.: GSM
Circuit Core
example voice over 2G
3G
e.g.: UMTS
UE
Packet Core
example data over 3G
4G Internet
e.g.: LTE
Mobile Network
.History and Evolution
CS CN
2G Circuit Switched Core Network
UE
100%
Circuit-Switched
100%
Voice
12 kb/s
Packet Core Introduction France Telecom Group restricted G.BREQUIGNY
first, there was the GSM (2G)
then, 3GPP Release 97 introduced the GPRS (2,5G) for data
GPRS
UE
EDGE
GPRS
Packet Core
UE
UE
3G
CS CN
GERAN
MGW MGW
Circuit-switched network
(PSTN, )
BSC MSC server GMSC
VLR server
BTS
UE HLR HSS
UTRAN
HSPA SGSN
IMS
RNC
GGSN
NodeB
3GDT
PS CN Packet-switched
network (Internet, )
GERAN
CS CN
BSC MGW MGW
Circuit-switched network
BTS
(PSTN, )
UTRAN MSC server GMSC
VLR server
RNC
UE NodeB
eUTRAN
IMS
LTE EPC
eNodeB
SAE
Packet-switched
3GPP or not All other Accesses network (Internet, )
pre-R8 beyond R8
R8
GSM (2,G) GPRS (2,5G) EDGE (2,5G) UMTS (3G) LTE (4G)
12 kb/s 170 kb/s 384 kb/s 42 Mb/s 11 Mb/s 100 Mb/s 50 Mb/s
PSCN
. Packet Switched Core Network
HLR MAP
Gr
GERAN Gb Gn
IP services
IuPS SGSN Gn-CP AF network
Gi
UE GGSN
UTRAN Gn Iu/ Gn-UP
GTPv1
GTPv1
(3G DT option)
Diameter
PCRF
HLR
MAP
Gx
Gr Rx
GERAN Gb Gn
SGSN IP services
IuPS Gn-CP AF network
SGi
UE GGSN
UTRAN Gn Iu/ Gn-UP
EPC
. Evolved Packet Core
UE MME
S1-MME
S11 Serving S5 PDN IP services
E-UTRAN S10 AF network
Gateway Gateway
SGi
S1-U
GTP
GERAN Gb GTP or (P)MIP
S6d Diameter
IuPS SGSN HSS
PCRF
UTRAN S6a
S3 S4
S12
Gx
Rx
UE MME
S1-MME
IMSI (International Mobile Subscriber Identity): is a private id identifying the SIM card. It is made of:
subscriber country id (Mobile Country Code, e.g.: 226 for Romania),
subscriber operator id (Mobile Network Code, e.g.: 10 for Orange), and
subscriber number (Mobile Subscriber Identification Number).
MSISDN (Mobile Station International ISDN Number <> Mobile Station International Subscriber Data
Number): is a public id identifying the user subscription in the network (e.g.: phone number:
+40.7.xx.xx.xx.xx)
TMSI (Temporary Mobile Subscriber Identity) is a temporary id, indentifying each mobile in the network
and correlating an allocated TMSI with the IMSI of the MS to which it is allocated. This id is used in
order to avoid to have to send too often the IMSI over the network for security issues.
Within the SGSN, the mobile shall be identified by the P-TMSI (Packet-TMSI)
Within the MME, the mobile shall be identified by the M-TMSI (MME-TMSI).
Note: within the MSC/VLR, the mobile shall be identified by the TMSI (TMSI)
UE SGSN/MME PGW
Data flows
S3 or S11
APN
RAN SGSN/SGW
RAB TEID TEID TEID TEID
( Bearer-id ) IP@
( Bearer-id )
IP@ Iu or S1 S4 or S5
( Bearer-id ) (for Gb , no RAB no TEID, LLC connection
from UE to SGSN)
Bearer (IP@, Bearer-id, QoS, APN)
1 IP session can carry one or more bearers (see APN: Access Point Name identifies the
default/dedicated bearer and primary/secondary external network or services that the user
PDP Context ) wants to connect. It may be considered as
a gate present on GGSN.
All the information about a UE store and exchange
through the network are named Context. The bearer The APN is composed of two parts as follows:
information regarding a UE are named Bearer Contexts The APN Network Identifier; this defines to which external network the
GGSN is connected and optionally a requested service by the
or PDP Contexts. MS. This part of the APN is mandatory.
The APN Operator Identifier; this defines in which PLMN GPRS
backbone the GGSN is located. This part of the APN is optional.
/!\ Warning: in LTE, Attach always includes IP session activation, vs. in 2G/3G
Attach may or not include activation.
Attach IMSI
Detach
Purge (optional)
Attach TMSI: named Attach P-TMSI in 2G/3G and Attach GUTI (M-TMSI) in LTE
S/PGW
EPC 1
MME/SGSN
2
eNB/RNC S/PGW
2
Under 2G or 3G coverage the UE attaches to SGSN
Under LTE coverage the UE attaches to MME
UE is attached UE is located
MME/SGSN 1 HSS/HLR
TMSI 1=IMSI 1
IMSI 1 => xA1 IMSI 1 => MME/SGSN1
UE
TMSI 1
S/PGW 1
EPC
MME/SGSN
2
eNB/RNC S/PGW 2
1. Detach Request
(TMSI 1)
MME/SGSN HSS/HLR
2. Detach Accept 1 IMSI 1 => MME/SGSN 1
TMSI 1=IMSI 1
UE
TMSI 1
S/PGW
EPC 1
MME/SGSN
2
eNB/RNC S/PGW
2
UE is detached
MME/SGSN
1
HSS/HLR
TMSI 1=IMSI 1
IMSI 1 = MME/SGSN1
UE
TMSI 1
S/PGW
1
MME/SGSN
2
eNB/RNC
S/PGW
2
Even if the UE is detached the
MME/SGSN and the HSS/HLR may
keep for some time the information
related to the detached UE
Packet Core Introduction France Telecom Group restricted G.BREQUIGNY
1.c Purge Procedure
UE is detached
MME/SGSN
1. Purge
1 (IMSI 1; e.g.: 226 10 xxx xxx) HSS/HLR
TMSI 1= IMSI 1 IMSI 1 => MME/SGSN1
UE
TMSI 1
S/PGW
EPC 1
MME/SGSN
2
eNB/RNC S/PGW
2
1. Attach Request
(TMSI 1)
MME/SGSN
5. Attach Accept
(xAi) 1 HSS/HLR
TMSI 1=IMSI 1
UE 6. Attach Complete IMSI 1 => xA1
IMSI 1 => MME/SGSN1
S/PGW
1
EPC
MME/SGSN
2
eNB/RNC
S/PGW
2
Under 2G or 3G coverage the UE achieves P-TMSI Attach (TMSI=P-TMSI), the UE attaches to SGSN
Under LTE coverage the UE achieves GUTI Attach (TMSI=GUTI), the UE attaches to MME
Packet Core Introduction France Telecom Group restricted G.BREQUIGNY
1.d Attach TMSI Results = 1.a Attach IMSI Results
MME/SGSN
UE is attached 1 UE is located
TMSI 1=IMSI 1 HSS/HLR
IMSI 1 => xA1
IMSI 1 => MME/SGSN1
UE
TMSI 1
S/PGW 1
EPC
MME/SGSN
2
eNB/RNC
S/PGW 2
Dedicated bearer for dedicated data flow (e.g.: requiring specific QoS)
Under 2G or 3G coverage the SGSN requests the UE to activate a Secondary PDP Context
Under LTE coverage the MME activates to the UE a Dedicated Bearer
MME /SGSN
2 S/PGW
eNB/RNC Intranet
2 APN 2
MME/SGSN
1
TMSI 1
MME/SGSN EPC
2
S/PGW
Bearer #1
1 APN 1
Internet
{ @ IP = 'x' ; QoS = 'a' ; Bearer-id= 1 }
S/PGW
2
UE
APN 2 Service 1
eNB/RNC
Intranet
Intranet
eNB/RNC
APN 2 Service 1
Service 2
Under PCRF information the S/PGW take the decision to activate a dedicated bearer for this new service
Under 2G or 3G coverage the SGSN requests the UE to activate a Secondary PDP Context
Intranet
Under LTE coverage the MME activates to UE a Dedicated Bearer
MME/SGSN
1
TMSI 1
MME/SGSN EPC
2
S/PGW
Bearer #1
1 APN 1
Internet
{ @ IP = 'x' ; QoS = 'a' ; Bearer-id= 1 }
S/PGW
2
UE
Bearer #2 APN 2 Service 1
{ @ IP = 'x' ; QoS = 'b' ; berarer id= 2; TFT }
eNB/RNC
Service 2
Intranet
Based on filters the UE and S/PGW is capable to map the service flows on Intranet
the relevant Bearer
Idle mode: the user is moving but DOES NOT achieve traffic:
service continuity and packe forwarding is NOT requested
=> Handover
*Warning: xArea does not exist from 3GPP perspective and stand for RA or TA. It has been defined in
this document for pedagogic purpose.
UE
TMSI 1 4.a Update Location
2. Context Rq/Rp
(TMSI 1)
S/PGW
1
1. xA Update Request
(old xAi, TMSI 1) 3.b Delete Session
5. xA Update Accept MME/SGSN 3.a Create Session
(TMSI 2, new xAi)
6. xA Update Complete
2
TMSI 2 = IMSI 1
IMSI 1=> xAi 2 S/PGW
eNB/RNC
TMSI 2
2
eNB
1 MME HSS
1. HO Required
(source) () 1
GUTI 1
IMSI 1 = MME 1
UE
GUTI 1
2. Forward Relocation R
6. HO Command
()
S/PGW
()
1
eNB 5. HO Rq
() MME 3.a Create Session
2
(target)
5a. HO Rq Ack
2
GUTI 2
S/PGW
2
Service 1
Intranet
Packet Core Introduction France Telecom Group restricted G.BREQUIGNY
3b. Handover (LTE) Procedure 2/2 Execution Phase
Service 1
Intranet
Packet Core Introduction France Telecom Group restricted G.BREQUIGNY
Multumesc
questions?
SM SM
/ GMM / GMM
L1 RF L1 RF L1 L1 L1 L1
Um Gb Gn Gi
BSS SGSN GGSN
MS
User-Plan
Appli Appli
PDP
IP IP
MAC MAC NS NS L2 L2 L2 L2
L1 RF L1 RF L1 L1 L1 L1 L1 L1
Orange Romania
UMTS Protocols
Control Plan
SM SM
/ GMM / GMM
RANAP RANAP
RRC RRC GTP-C GTP-C
SCCP SCCP
MAC MAC
L2 L2 L2 L2
L1 RF L1 RF L1 L1 L1 L1
Uu Iu-PS Gn Gi
UTRAN SGSN GGSN
UE
User-Plan
Appli Appli
PDP
IP IP
LTE Protocols
Control Plan
EMM/ EMM/
ECM/ ECM/
ESM ESM
MAC MAC
L2 L2 L2 L2
L1 RF L1 RF L1 L1 L1 L1
User-Plan
Appli Appli
bearer
IP IP
GTP
GERAN Gb GTP or (P)MIP
S6d HSS
Diameter
IuPS SGSN
PCRF
S6a
UTRAN SWx
S3 S4
S12
Gx
3GPP Rx
AAA server
MME
S1-MME S6b
S11 S5 PDN
Serving PDN
E-UTRAN AF (IP services network)
S10 Gateway Gateway SGi
S1-U
STa SWm
UE
Trusted S2b
non-3GPP
IP access S2a
SWa
MME - Mobility Management Entity
SGW - Serving Gateway
Untrusted
non-3GPP ePDG
IP access
SWn
PGW - PDN* Gateway
(*Packet Data Network)
GTP
GERAN Gb GTP or (P)MIP
S6d HSS
Diameter
IuPS SGSN
PCRF
S6a
UTRAN SWx
S3 S4
S12
Gx
3GPP Rx
AAA server
MME
S1-MME S6b
S11 S5 IP services
Serving PDN
E-UTRAN AF network
S10 Gateway Gateway SGi
S1-U
STa SWm
UE
Trusted S2b
non-3GPP
IP access S2a
SWa MME - Mobility Management Entity:
Untrusted A control entity for LTE users
ePDG
authentication (S6a) & LTE mobility
non-3GPP
IP access
SWn
management (S1-MME/S10)
Inter CN node signaling for mobility
between 3GPP access networks (S3)
Bearer management functions (S11)
GTP
GERAN Gb GTP or (P)MIP
S6d HSS
Diameter
IuPS SGSN
PCRF
S6a
UTRAN SWx
S3 S4
S12
Gx
3GPP Rx
AAA server
MME
S1-MME S6b
S11 S5 IP services
Serving PDN
E-UTRAN AF network
S10 Gateway Gateway SGi
S1-U SWm
STa
UE
Trusted S2b
non-3GPP
IP access S2a
SWa SGW - Serving Gateway:
Untrusted A user plane entity, anchoring LTE (S1-
ePDG
U) and other 3GPP accesses (S12)
non-3GPP
IP access
SWn
Bearer management function (S11/S4)
Terminates 3GPP/LTE access bearers
Lawful Interception
Packet buffering, routing and forwarding
GTP
GERAN Gb GTP or (P)MIP
S6d HSS
Diameter
IuPS SGSN
PCRF
S6a
UTRAN SWx
S3 S4
S12
Gx
3GPP Rx
AAA server
MME
S1-MME S6b
S11 S5 IP services
Serving PDN
E-UTRAN AF network
S10 Gateway Gateway SGi
S1-U SWm
STa
UE
S2b PGW PDN (Packet Data Network)
Trusted
non-3GPP Gateway:
IP access S2a
SWa
A user plane entity, anchoring 3GPP
(S5) and non-3GPP accesses (S2x) and
Untrusted terminating bearers
non-3GPP ePDG
IP access
SWn Edge gateway to PDN Accesses (SGi)
Bearer management function (IP
address allocation)
Lawful Interception
Charging & Policy Enforcement (Gx,
etc.)
Packet Core Introduction France Telecom Group restricted G.BREQUIGNY
EPC Architecture:
STa
S2b
Trusted ePDG evolved Packet Data Gateway
non-3GPP
IP access S2a Includes Multi-access SeGW (Security
SWa Gateway)
A control (users authentication and bearer
Untrusted
non-3GPP ePDG management) and user plane entity for
IP access
SWn
untrusted non-3GPP
GTPv1/v2
GERAN Gb GTP or (P)MIP
Gr HSS/HLR
SGSN- Diameter
IuPS MAP
preR8
PCRF GTPv1
S6a
UTRAN
Gn
Gn
IuPS/Gn Gx
(3GDT) Rx
UE
MME
S1-MME
S11 S5 IP services
Serving PDN
E-UTRAN AF network
S10 Gateway Gateway SGi
S1-U
2G
3G
inter-RAT
mobility