SS7 BASICS

Prepared by: Lokdeep singh (lokdeep.singh@wfinet.com) Ajay Chaudhary (ajay.chaudhary@wfinet.com)

Fixed Networks WFI

SS7 BASICS
OBJECTIVES::
To make audience aware of basics of Interoffice Basics of SS7. Applications of SS7. To prepare audience for a more detailed study of SS7 signaling.

Contents:
1. What

is a voice switch. 2. Need for inter switch signaling. 3. A brief description of Conventional Inter switch signaling 4. Need /advantages of SS7 5. Introduction to SS7 * SS7 layers v/s OSI * Message Signaling Units * SS7 User Parts * SS7 Network 6. Description of MTP and SCCP 7. Description of SS7 User Parts * ISUP * MAP,TCAP * BSSMAP , DTAP * INAP 8. Some Applications of SS7 * LNP ( Local Number Portability) * 800 Numbers * Seamless Roaming

Signaling ( conventional voice call)

Called Number Analysis

Called Number Analysis

Called Number Analysis

Switch (703)
Local Loop signaling

619-xxxxxxx Signaling

Toll Switch (212)

619-xxxxxxx Signaling

Switch (619)
Local Loop signaling

Dials 619-xxxxxxx

User

User

Voice Call with Database Query

Database query

800 Number Database

Actual Number

Switch

Conventional routing

Destination Switch

1-800-etrade1

Need For Inter switch signaling To setup a Call Call supervision messages Call tear up / Call Clearing Non circuit related messages Database queries Billing Information Inter Switch Hand over Information

CONVENTIONAL SIGNALING

DC Signaling :
SF Signaling :

signals conveyed by Current , No Current states and by varying the duration of these states. Signals conveyed by sending In Band single frequency for different durations.

MF Signaling:

Signals conveyed by sending a combination of In Band frequencies ( 2 out of 6 or 2 out of 5).

LIMITATIONS OF CONVENTIONAL SIGNALING

IN Band signaling: More prone to errors Limited signaling capability Slow rate of signaling . Limited addressing capability.

Channel Association : Undue N/W occupancy.

CONVENTIONAL SIGNALING SYSTEMS

1.DC SIGNALING: This signaling is based upon the Monitoring of DC Current
or No Current states on the Inter switch trunks .Typically a no current condition could represent IDLE state of the trunk and Trunk seizure could be represented by sending DC current on the Trunk to the other switch.Various trunk states such as Seizure Ack, Answer , release etc could be conveyed by varying the time duration of these No current and DC current stages. One type of such signaling still being used for EPABXs is E&M. A separate pair of lines labeled as E and M , is used for this type of signaling.The M lead is used to send DC current or GND to E lead of the distant Switch.On detecting this

current , the distant Switch operates a relay to send this current back thus completing the
loop.The originating Switch considers this as Acknowledgement and Speech can be put through.DC signaling is essentially analog and cant be used for Digital networks .

2. SF SIGNALING: In this type of signaling scheme, a single frequency in the

Voice band is SENT , NOT SENT and SENT for Different Duration to convey different signals.This had limited signaling capability and was prone to errors being in the same band as voice.Voice signals could sometimes be interpreted as Control Signals.

3.MF ( Multi Frequency ) Signaling

To reduce the possibility of Voice being Interpreted as Signals a more rugged signaling scheme involving , sending of a Dual frequency signal( 2 out of 6 or 2 out of 5) to convey signaling information.This type of signaling can be used for digital networks and is currently also in use in some networks.

One such signaling scheme is MFR2. This is a fully compelled signaling that is all the signals from one end should be acknowledged by the other.In such a type of signaling
the signaling information is conveyed for different time slots on a frame to frame basis on the same time slots that are eventually to be used for speech.

SS7 Network (Overlay with Voice network)

Voice N/w : Dark Blue SS7 N/W : Light Blue STP(NAT+INAT)

INTERNATIONAL BORDER

STP(NAT+INAT)
SP(nat)
Switch

SP (NAT)
Switch

STP (Nat)

STP(Nat)

SP (Nat)
Switch

SP Nat
Switch

NEED /ADVANTAGES OF SS7 Non Channel Associated Signaling Enhances Network through put More signaling Capability Non Circuit related messaging More addressing routing capability. ( SPC , GTT ,SSNs) Enhances reliability / redundancy Faster signaling rate (64/56 kpbs) Time sensitive Applications requiring fast , bulk signaling transfers become a reality

NEED /ADVANTAGES OF SS7 All conventional signaling schemes ( DC , SF , MF) are channel associated schemes.That is , the same channel is used for signaling and speech as well. In a typical telecom network not all the origination attempts mature into speech.For such attempted calls which dont reach the stage of active speech due to network or User related reasons ,speech trunks get unnecessarily occupied by control signals thereby reducing the channels actually available for Speech.SS7 signaling is carried over different channel/channels and even over different network/networks than that/those used by speech.This enhances network thorough put .

All the conventional signaling schemes discussed above ( DC, SF , MF) have limited signaling capabilities.The signaling capacity for these is limited by limited number of trunk states ( IDLE , SEIZED, ANSWER etc) conveyable by means of Current , No Current ,Tone , No tone setup. The Signaling capability for MF is limited by the fact that signaling information for a channel ( to be used for speech) is conveyed at the rate of 4/3 Bits in One PCM30 multi frame

Signaling Points (SP)

Signaling point in the SS7 network is uniquely identified by a

numeric point code. Point codes are carried in signaling messages exchanged between SP

to identify the source and destination of each message.

Each SP uses a routing table to select the appropriate signaling path STP Signalling Transfer Part An STP routes each incoming message to an outgoing signaling link based on routing information contained in the SS7 message. STP provides improved utilization of the SS7 network by eliminating the need for direct links between signaling points. An STP may perform global title translation, a procedure by which the destination signaling point is determined from digits present in the signaling message

Signaling Links SS7 messages are exchanged between network elements over 56

or 64kbps bi-directional channels called signaling links.

SP or STP2

SP or STP 1
Link 1 SP link 2
Signalling link set

Route Set

Signalling Network Element

The OSI Reference Model and the SS7 Protocol Stack

The hardware and software functions of the SS7 protocol are divided into
functional abstractions called "levels". These levels map loosely to the Open Systems Interconnect (OSI) 7-layer model.

DATA DATA DATA 2T

AH 4H 3H DATA Bits 2H

DATA DATA

AH 4H

DATA
2T DATA Bits

3H
2H

MSU

SU

SU

SF

SI

INFO CIC

LABEL O P SLS C

D P C

MESSAGE FLOW

SS7 Protocol Message Transfer Part The Message Transfer Part (MTP) is divided into three levels. The lowest level, MTP Level 1, is equivalent to the OSI Physical Layer. defines the physical, electrical, and functional characteristics of the digital signaling link. Physical interfaces defined include E-1(2048 kb/s), DS-1 (1544 kb/s) MTP Level 2 ensures accurate end-to-end transmission of a message across a signaling link. Level 2 implements flow control, message sequence validation, and error checking. When an error occurs on a signaling link, the message (or set of messages) is retransmitted. MTP Level 2 is equivalent to the OSI Data Link Layer.

SS7 Protocol Message Transfer Part MTP Level 3 provides message routing between signaling points in

the SS7 network.

Re-routes traffic away from failed links and signaling points Controls traffic when congestion occurs.

MTP Level 3 is equivalent to the OSI Network Layer.

SS7 Protocol

ISDN User Part (ISUP) The ISDN User Part (ISUP) defines the protocol used to set-up, manage, and release trunk circuits that carry voice and data between terminating line exchanges (e.g., between a calling party and a called party). ISUP is used for both ISDN and non-ISDN calls. Telephone User Part (TUP) Telephone User Part (TUP) is used to support basic call setup . TUP handles analog circuits only. ISUP has replaced TUP for call management.

SS7 Protocol

Signaling Connection Control Part (SCCP) SCCP provides connectionless and connection-oriented network services and global title translation (GTT) capabilities above MTP Level 3. A global title is an address which is translated by SCCP into a destination point code and subsystem number(SSN) A SSN uniquely identifies an application at the destination signaling point. SCCP is used as the transport layer for TCAP-based services.

SS7 Protocol

Transaction Capabilities Applications Part (TCAP)

TCAP supports the exchange of non-circuit related data between applications across the SS7 network using the SCCP connectionless

service.
Queries and responses sent between SSPs and SCPs are carried in TCAP messages.

TCAP carries Mobile Application Part (MAP) messages sent between mobile switches and databases to support user authentication, equipment identification, and roaming.

Message Transfer Part The Message Transfer Part (MTP) is divided into three levels. MTP Level 1 The lowest level, MTP Level 1, is equivalent to the OSI Physical Layer MTP Level 2 MTP Level 2 ensures accurate end-to-end transmission of a message across a signaling link, implements flow control, message sequence validation, and error checking. When an error occurs on a signaling link, the message (or set of messages) is retransmitted. MTP Level 2 is equivalent to the OSI Data Link layer An SS7 message is called a signal unit (SU). There are three kinds of signal units: Fill-In Signal Units (FISUs), Link Status Signal Units (LSSUs), and Message Signal Units (MSUs)

Signal unit (SU).

Signal unit (SU).

Fill-In Signal Units (FISUs) are transmitted continuously on a signaling

link in both directions unless other signal units (MSUs or LSSUs) are present.

FISUs carry basic level 2 information only (e.g., acknowledgment

of signal unit receipt by a remote signaling point). CRC Checksum is calculated for each FISU, signaling link

quality is checked continuously by both signaling points at either end

of the link. Link Status Signal Units (LSSUs) carry one or two octets (8-bit bytes)

of link status information between signaling points at either end of a link.

of a signaling point (e.g., local processor outage) to the remote signaling

The link status is used to control link alignment and to indicate the status

point.

Signal unit (SU).

Message Signal Units (MSUs) carry all call control, database query and
response, network management, and network maintenance data in the signaling information field (SIF).

MSUs have a routing label which allows an originating signaling

point to send information to a destination signaling point across the network. LI (Length Indicator) field determines the signal unit type: LI Value Signal Unit Type

0
1..2 3..63

Fill-In Signal Unit (FISU)

Link Status Signal Unit (LSSU) Message Signal Unit (MSU)

Signal unit (SU). LI (Length Indicator) 6-bit LI can store values between zero and 63.

If the number of octets which follow the LI and precede the CRC is
less than 63, the LI contains this number. Otherwise, the LI is set to 63. An LI of 63 indicates that the message length is equal to or greater than

63 octets (up to a maximum of 273 octets).

The maximum length of a signal unit is 279 octets:

273 octets (data) + 1 octet (flag) + 1 octet (BSN + BIB) +

1 octet (FSN + FIB) + 1 octet (LI + 2 bits spare) + 2 octets (CRC).

Signal unit (SU). Flag Flag indicates the beginning of a new signal unit and implies the end of the previous signal unit (if any). Binary value of the flag is 0111 1110. Before transmitting a signal unit, MTP Level 2 removes "false flags" by adding a zero-bit after any sequence of five one-bits. any zero-bit following a sequence of five one-bits to restore the original contents of the message.

Upon receiving a signal unit and stripping the flag, MTP Level 2 removes

Signal unit (SU). BSN (Backward Sequence Number) Used to acknowledge the receipt of signal units by the remote signaling point. BSN contains the sequence number of the signal unit being acknowledged. BIB (Backward Indicator Bit) BIB indicates a negative acknowledgment by the remote signaling point when toggled. FSN (Forward Sequence Number) The FSN contains the sequence number of the signal unit. FIB (Forward Indicator Bit) The FIB is used in error recovery like the BIB.

Signal unit (SU).

BASIC ERROR CORRECTION METHOD Positive acknowledgement if BIB=FIB FSN=7

FSN A BSN B

BSN=7 Negative acknowledgement if BIB= inverted FIB FSN=7

FSN A BSN B

BSN=6

Signal unit (SU). SIO (Service Information Octet) The SIO field in an MSU contains the 4-bit Subservice field followed by the 4-bit Service indicator.

FISUs and LSSUs do not contain an SIO.

Subservice field Contains the network indicator (e.g., national or international) and

the message priority (0..3 with 3 being the highest priority).

Message priority is considered only under congestion conditions, Low priority messages may be discarded during periods of congestion. Signaling link test messages receive a higher priority than call setup messages.

Signal unit (SU). Service indicator Specifies the MTP user, thereby allowing the decoding of the information contained in the SIF. Service Indicator 0 1 2 3 4 5 6 MTP User Signaling Network Management Message (SNM) Maintenance Regular Message (MTN) Spare Signalling Connection Control Part (SCCP) Telephone User Part(TUP) ISDN User Part (ISUP) Data User Part (call and circuit-related messages)

Data User Part (facility registration/cancellation

Signal unit (SU).

SIF (Signaling Information Field)

The SIF in an MSU contains the routing label and signaling

information (e.g., SCCP,TCAP, and ISUP message data). LSSUs and FISUs contain neither a routing label nor an SIO as they

are sent between two directly connected signaling points.

CRC (Cyclic Redundancy Check) CRC value is used to detect and correct data transmission errors.

Message Transfer Part

MTP Level 3

Provides message routing between signaling points in the SS7 network.

MTP Level 3 is equivalent in function to the OSI Network Layer Routes messages based on the routing label in the(SIF) of message

signal units.
Routing label is comprised of the destination point code (DPC), originating point code (OPC), and signaling link selection (SLS)

field.

MTP Level 3 Message routing Points codes are numeric addresses which uniquely identify each signaling point in the SS7 network. When the destination point code in a message indicates the receiving signaling point, the message is distributed to the appropriate user part

(e.g., ISUP or SCCP) indicated by the service indicator in the SIO.

Messages destined for other signaling points are transferred provided that the receiving signaling point has message transfer capabilities

(like an STP).
The selection of outgoing link is based on information in the DPC and SLS.

Signalling Connection Control Part (SCCP)

SCCP provides connectionless and connection-oriented network

services above MTP Level 3. While MTP Level 3 provides point codes
to allow messages to be addressed to specific signaling points, SCCP provides subsystem numbers to allow messages to be addressed to

specific applications (called subsystems) at these signaling points.

Global Title Translation SCCP also provides the means by which an STP can perform global

title translation (GTT), a procedure by which the destination signaling

point and subsystem number (SSN) is determined from digits (i.e., the global title) present in the signaling message.

Global Title

SCCP performs Translation function on Global Title ,SCCP provides routing function ,which maps a called address to the Signalling Point Code of the MTP service.
AI Address Information NA Nature of Address
TCAP C A AD LD LR EE DS S

MAP

Global Title

NP
SSN

Number Plan Translation Type

SCCP

TT

MTP

SCCP SCCP Message Format Service Indicator of the Service Information Octet (SIO) is coded 3 (binary 0011) for SCCP. SCCP messages are contained within the Signaling Information Field (SIF) of an MSU. SIF contains the routing label followed by the SCCP message contents
SIF SIO

MSU

SCCP Message

INFORMATION

LABEL

SI = 0011

SF

User Data

Calling Add

Called Add

Pointer to User Data

Pointer to Calling Add

Pointer to Called Add

Message Code

Routing Label

ISDN USER PART ( ISUP)

ISUP is the most widely used signaling scheme used for interoffice signaling to support conventional call routing Alternative to TUP ( Telephone User Part). Supports Bearer Traffic. Suitable for ISDN connectivity. Suitable for Broadband /ATM applications ( BISUP) Uses SCCP method for end to end signaling. Suitable for interface to IP( SS7oIP)

CONVENTIONAL ISUP CALL SETUP

<2> IAM <5>ACM

STP
<1> IAM 6> A C M

STP
<>4 ACM <3>IAM

<8> ANM <7> A N M

<9> ANM

858
Calling party Exchange Calling party dials 703-xxxxxxx

703
Called party Exchange <4*> <7*> Called party is called party ans sent ring

ISUP CALL TEAR DOWN

A PARTY CLEARS THE CALL
<2> REL <5> RLC <4> RLC <3> REL

STP
<6> RLC

STP

<1> REL

858

703
Called party Exchange <7> Speech Channel is Cleared

CALLING PARTY GOES ON HOOK

ISUP CALL TEAR DOWN B PARTY CLEARS THE CALL

B PARTY EXCHANGE A PARTY EXCHANGE

SUS
A party Switch Starts a Timer and starts waiting for RES

B Party goes on hook

RES REL
TIMER EXPIRES

B Party goes OFF hook

RLC

SPEECH IS RESUMED Timer is Reset

TYPES OF SUS MESSAGES

1. NETWORK GENERATED: In case of Analog Subscribers 2. USER GENERATED : In case of ISDN subscribers In Some Networks SUS and RES messages ( network generated) are not supported and instead Both Party Release is implemented

ISUP MESSAGE TYPES

FCS

SIF

SIO

LI

FIB FSN BIB BSN Flag

Signaling Info CIC

Routing Label

Message Type

SIO FOR ISUP IS 85

ISUP MESSAGE TYPES

IAM (Initial address message ) *SAM ( Subsequent Address Message) INR (Information request Message) INF ( Information) ACM ( Address Complete Message) ANM ( Answer) REL( Release) SUS ( Suspend ) RES( Resume) RLC (Release Complete) RSC( Reset Circuit) BLO (Blocking) UBL (Unblocking) BLA(Blocking acknowledgement) UBA( Unblocking Acknowledgement) CFN ( Confusion Message) CRG ( Charging Information)

WHAT IS TCAP
Transaction Capability Application part is a SCCP user which provides for reliable means of information transfer between higher end SS7 applications( MAP , INAP) requiring non circuit related and connectionless transactions.TCAP was originally meant for database accesses . TCAP Highlights Non circuit related messages Connectionless services Database Queries/updates (HLR/VLR, LNP , 800 numbers, LIDB, prepaid ) End to End signaling Remote feature activation ( roaming scenario)

TCAP HIGHLIGHTS

TCAP makes use of the connectionless services of SCCP .TID and IID(Transaction IDs and Invoke IDs ) are used as references. * Transaction * Invoke operation * Return result * return error

EMBEDED TCAP MESSAGE APPLICATION Primitives (dialog and components) TCAP USER DATA USER DATA SIF
CRC SIF SIO LI FIB FSN BIB BSN Flag ROUTING LABEL

SCCP

MTP

MOBILE APPLICATION PART

TCAP User. Supports signaling exchange between databases( HLR /VLR) in a cellular network. Connectionless logical signaling. Roaming applications

MAP (MOBILE APPLICATION PART)

MAP

HLR/VLR

TCAP

SCCP

MTP

PLMN A

PLMN B

AUC MAP-AUC MSC Switch VLR

HLR HLR MAP VLR MAP Direct /Thru PSTN or thru SCCP G/W
MAP_EIR

MAP EIR

B S S M A P BSC

SWITCH

ISUP
ISUP PSTN

MAP MESSAGES
Location Registration

Location Cancellation / IMSI Detach

Security / Authentication data Inter MSC Hand over. Subscriber activated Inputs( Service activation)

BSSAAP-Base Station Application Part And DTAP -Direct Transfer Application Part
BSSMAP Signaling between MSC and BSC. Uses SCCP services ( Connection Oriented and Connection less ) DTAP Signaling between MSC and MS ( Transparent to BSS) Rides on BSSAP( On Top Of Relationship)
DTAP

MSC

Initial MS BSSMAP

BSC/BTS
LAPDm

MS

DTAP MESSAGES Location Update Accept Authentication request Authentication Reject CM Service Request CM Service Reject Identity Request Identity Response. Setup Message

BSSMAP MESSAGES Connection Oriented: Assignment Request Cipher Mode Command Complete Layer 3 information Clear Command Clear Complete Connection less Paging Block Unblock

GSM CALL SETUP--Message flow

Um

M S

BSSMAP

BSS
RACH AGCH SDCCH DTAP

MSC VLR+SN

MAP-X

HLR /AUC

ISUP

PSTN

CR ( BSSMAP) Send sub data Insert Sub Data(triplets)

CM Ser Req(DTAP) CC Auth Req (DTAP) Auth Response Cipher Mode Command Cipher Mode Complete SETUP ( Called number) Call proceeding Assignment req Assignment Complete

IAM (ISUP)

GSM CALL SETUP--Message flow( contd)

Um

M S

BSSMAP

BSS
DTAP Alert Connect Connect Ack

MSC VLR+SN

MAP-X

HLR /AUC

ISUP
ACM ANM

PSTN

Speech

INAP : INTELLIGENT NETWORK APPLICATION PART

SCP PSTN
ISUP

DATA BASE

INAP

SSP

IP

SSP: SRVICE SWITCHING POINT SCP: SERVICE CONTROL POINT IP : INTELLIGENT PERIPHERALS

INAP --- Intelligent Network Application Part

Problems of Conventional approach( Non IN) * No Portability of numbers * Limited Routing /Translation Capability * Distributed Databases. * Difficult upgrades for new Services .
Concept of SCP , SSP , IPs.

A Few Applications

LNP ( Local Number Portability)

800 Numbers Prepaid services Seamless Roaming

LNP: LOCAL NUMBER PORTABILTY LRN (Local routing Number) Approach)

LNP /SCP

E. Database finds a match for 4602100( ported to 461) sends instruction to SSP to Route with LRN 4600000

D. STP routes the INAP query to LNP database

STP

SSP 919(461)

Recipient Network

SSP 919(450)

B.Call routed to end Office Voice N/w

SSP 919(460)
DONOR NETWORK

Calling party dials 919-4602100

C. Donor n/w determines 460 is a ported NPA-NXX and send a LNP (INAP) query via STP

Seamless Roaming PLMN A HLR

Send Routing Info

PLMN B

Old VLR
MSRN

GMSC (703)
MSRN

HLR Interrogation

HLR VLR

GMSC (619)
PSTN dials 619-867-7739

IAM with MSRN

MS PSTN 619-867-7739 Roamer