HW flow GSM COM

7/29/2019 HW flow GSM COM

1/120

Wireless Curriculum Development SectionWireless Curriculum Development SectionWireless Curriculum Development Section

ISSUEISSUE

OMA000003 GSMCommunication Flow

OMA000003 GSMOMA000003 GSMCommunication FlowCommunication Flow

2.02.0


2/120

Confidential Information of Huawei.

No Spreading without Permission.Security Level: Internal

2

Handover Sequence

SMS Sequence

Location Update Sequence

GSM Basic Call Sequence

CONTENTCONTENT

GSM Security Management


3/120



3

GSM Security ManagementGSM Security Management

Authentication andCiphering Sequence

TMSIReallocation

Equipment

Identification


4/120



4

AuthenticationAuthentication

Authentication may beAuthentication may beexecuted during setup,executed during setup,

location updating andlocation updating andsupplementary servicessupplementary services


5/120



5

Authentication SequenceAuthentication Sequence

KI M)

KI N)

IMSI(m)

RAND

GENERATORA8 A3

KI(IMSI)

IMSIBUFFER

RAND

RANDRAND

RAND

KC

1

2

5

KC

KC

KC

SRES

SRESSRES

SRES

TEMP

DATA

AUC

HLR/ AUC

HLR

AUTH REQ

RAND

KC

SRES

RAN

DA8 A3

SRES

EQUAL

CKS

NKC

BSS

KI(IMSI)

VLR SIM

RAND 16byte

KI 16byte

kc 8byteSERS 4byte

CKSN low 3bits of 1byte

IMSI(n)

SRESKI IMSI +RANDA3

KI(IMSI)+RAND A8 KC

M+KC A5 KC(M)(MS/BSS)

KC(M)+KC MA5

(MS/BSS)


6/120



6

Authentication and Ciphering SequenceAuthentication and Ciphering Sequence

HLRMS BSS MSC VLR

1 Pre-send Triples to VLR


7/120



7

HLRMS BSS MSC VLR

RAND

RAND



2 AuthenticateAuthentication Request


8/120



8

HLRMS BSS MSC VLR

RAND

RAND

(SRES)




3 Authenticate Response


9/120



9

HLRMS BSS MSC VLR

RAND

RAND

(SRES)




3 Authenticate Response

4 Start Ciphering


10/120



10

HLRMS BSS MSC VLR

5 Cipher Mode Command

Cipher Mode Complete


2 Authenticate

Authentication Request

RAND

RAND

3 Authenticate Response (SRES)

4 Start Ciphering



11/120



11

TMSI ReallocationTMSI Reallocation

MS VLR

Location Update Req

Location Update Acc

TMSI Reallocation Comp

(TMSI)


12/120



12

Equipment IdentificationEquipment Identification

MS BSS MSC VLR HLR PSTN1 Equipment ID

Request

EIR


13/120



13


Request

2 ID Response

IMEI)

EIR



14/120



14


Request

2 ID Response

IMEI)

3 Check IMEI

Check IMEIResponse

EIR



15/120



15

GSM Basic Call SequenceGSM Basic Call Sequence

Mobile to Land Sequence

Land to Mobile Sequence

Mobile Initiated Call

Clearing Sequence


16/120



16


The process for calling MS and called MS are two

independent flow. The calling party begins withchannel request and ends with TCH assignment

competition. In general, the calling party includes

following several stages: access process,

authentication and ciphering process, TCH

assignment process. So, we take the sequence

from mobile to land as example, in this sequence,

we mainly devote to the calling party.


17/120



17

Mobile to Land SequenceMobile to Land Sequence

MS BSS MSC VLR HLR

1 CHANNEL REQUEST

DCCH ASSIGNSIGNALING LINK

ESTABLISHED

PSTN


18/120



18

MS BSS MSC VLR HLR

1 CHANNEL REQUEST

DCCH ASSIGN

SIGNALING LINK

ESTABLISHED

2 REQ. FOR SERVICECR

CC

PSTN



19/120



19

MS BSS MSC VLR HLR

1 CHANNEL REQUEST

DCCH ASSIGN

SIGNALING LINK

ESTABLISHED


CC

3 AUTHENTICATION

SET Cipher MODE

PSTN



20/120



20

MS BSS MSC VLR HLR

1 CHANNEL REQUEST

DCCH ASSIGN

SIGNALING LINK

ESTABLISHED


CC

3 AUTHENTICATION

SET Cipher MODE

4 SET-UP

Call Info

PSTN

SFOC



21/120



21

MS BSS MSC VLR HLR

1 CHANNEL REQUEST

DCCH ASSIGN

SIGNALING LINK

ESTABLISHED


CC

3 AUTHENTICATION

SET Cipher MODE

4 SET-UP

Call Info5 EQUIP. ID REQ.

PSTN

SFOC



22/120



22

MS BSS MSC VLR HLR

1 CHANNEL REQUEST

DCCH ASSIGN

SIGNALING LINK

ESTABLISHED


CC

3 AUTHENTICATION

SET Cipher MODE

4 SET-UP


6 COMPLETE CALL

CALL PROCEEDING

PSTN

SFOC



23/120



23


7 ASSIG. COMMAND

ASSIG. COMPLETE

circuit

MS BSS MSC VLR HLR PSTN


24/120



24

7 ASSIG. COMMAND

ASSIG. COMPLETE

Address Complete(ACM)

Alerting

circuit

Initial and Final Address8 Message (IFAM)

MS hears ring

tone from land

phone




25/120



25

7 ASSIG. COMMAND

ASSIG. COMPLETE


Alerting

9 Answer (ANS)Connect

circuit


MS hears ring

tone from land

phone

Ring tone

stops




26/120



26

7 ASSIG. COMMAND

ASSIG. COMPLETE


Alerting

9 Answer (ANS)Connect

10 Connect Acknowledge

circuit


MS hears ring

tone from land

phone

Ring tone

stops

HELLO!


BILLING STARTS



27/120



27

QuestionQuestion

What happens when the

calling MS activates the

SS of BAOC?


28/120



28

AnswerAnswer

MS BSS MSC VLR HLR

1 CHANNEL REQUEST

DCCH ASSIGN

SIGNALING LINK

ESTABLISHED


CC

3 AUTHENTICATION

SET Cipher MODE

4 SET-UP


6 COMPLETE CALL

CALL PROCEEDING

PSTN

SFOC

Call Barred


29/120



29


For the called party, the flow for the called party

begins when MSC sends paging command to the

called party, ends when two party start talk. In

general, this call flow includes several stages:

access process, authentication and ciphering

process, TCH assignment process, talk process,

release process.


30/120



30

Land to Mobile SequenceLand to Mobile Sequence

MS BSS MSC VLR HLR GMSC

(MSISDN)Initial and Final1 Address Message

PSTN


31/120



31


(MSISDN)

(MSISDN)(IMSI)

Initial and Final1 Address Message

PSTN

2 Send Routing Info


L d t M bil SL d t M bil S


32/120



32


(MSISDN)

(MSISDN)(IMSI)

(MSRN)


PSTN

(MSRN) (MSRN)

2 Send Routing Info

3 Routing Info Ack

Initial and Final

Address Message




33/120



33


(MSISDN)

(MSISDN)(IMSI)

(MSRN)

(MSRN)


PSTN

(MSRN) (MSRN)

2 Send Routing Info

3 Routing Info Ack

Initial and Final

Address Message

4 Send Info For I/CCall Setup




34/120



34


(MSISDN)

(MSISDN)(IMSI)

(MSRN)

(MSRN)

(LAI & TMSI)(TMSI)

(TMSI)

Initial and Final

1 Address Message

PSTN

(MSRN) (MSRN)

2 Send Routing Info

3 Routing Info Ack

Initial and Final

Address Message

4 Send Info For I/CCall Setup

5 Page

Paging Request




35/120



35

6 Channel Request

DCCH Assign

Signaling Link

Established

Page Response

*Authentication

(TMSI)(TMSI &

Status)

(Status)

CR


MS BSS MSC VLR HLR GMSC PSTN

L d t M bil SLand to Mobile Sequence


36/120



36

6 Channel Request

DCCH Assign

Signaling Link

Established

Page Response

*Authentication

7 Complete Call

Setup

(TMSI)(TMSI &

Status)

(Status)

CR





37/120



37

6 Channel Request

DCCH Assign

Signaling Link

Established

Page Response

*Authentication

7 Complete Call

Setup

8 Call Confirmation

(TMSI)(TMSI &

Status)

(Status)

CR


Ring Tone at

the land phone




38/120



38

(channel) (circuit)

9 Assignment

Command

Assignment

Complete

Alert

Address Complete



Ring Tone at

the land

phone



39/120



39

(channel) (circuit)

9 Assignment

Command

Assignment

Complete

Alert

10 Connect

Connect ACK ANS

Hello...

Address Complete


Billing

starts

Ring Tone at

the land

phone

Ringing stops

at land phoneSubscriber

picks up


QuestionsQuestions


40/120



40

QuestionsQuestions

Please give the sequence:

1.The called MS is powered off.

2.The called MS activates the CFU to aPSTN No.

3.The called MS has been barred all

incoming call.

4.The Called MS are not known at HLR

AnswersAnswers


41/120



41

1. The called MS is powered off


(MSISDN)

(MSISDN)( IMSI)

Initial and Final

1 Address Message

2 Send Routing Info

3 Routing Info Ack

PSTN

Subscriber Absent

The Land

hears the

announcementof mobile is

powered off

AnswersAnswers

AnswersAnswers


42/120



42

2. The called MS activates the CFU to a PSTN No.

(MSISDN)

(MSISDN)

CFN

4 IFAM

AnswersAnswers


Initial and Final

1 Address Message

2 Send Routing Info

3 Routing Info Ack

AnswersAnswers


43/120



43

AnswersAnswers

3. The called MS has been barred all incoming call.

Call Barred


(MSISDN)

(MSISDN)

Initial and Final

1 Address Message

2 Send Routing Info

3 Routing Info Ack

PSTN

AnswersAnswers


44/120



44

swe s

4. The Called MS are not known at HLR

Unknown Subscriber


(MSISDN)

(MSISDN)

Initial and Final

1 Address Message

2 Send Routing Info

3 Routing Info Ack

PSTN

Mobile Initiated Call Clearing SequenceMobile Initiated Call Clearing Sequence


45/120



45

MS BSS MSC VLR HLR

1 Disconnect

PSTN

PSTN Release

Mobile Release



46/120



46

MS BSS MSC VLR HLR

1 Disconnect

PSTN

PSTN Release

Mobile Release

2 PSTN Release

CompleteMobile Release

Complete

MS-MSC Signalling

Released



47/120



47

MS BSS MSC VLR HLR

1 Disconnect

PSTN

PSTN Release

Mobile Release

2 PSTN Release

CompleteMobile Release

Complete

MS-MSC Signalling

Released

3 Clear Command

Channel Release



48/120



48

4 DISCUA

Clear Complete




49/120



49

4 DISCUA

Clear Complete

5 RLSD

Release Complete


Location Update SequenceLocation Update Sequence


50/120



50

Brief Introduction toLocation Update

Several Typical Location

Update Sequences

Brief Introdution to Location UpdateBrief Introdution to Location Update


51/120



51

The types of Location Update :

Periodic Location UpdatePeriodic Location Update

IMSI Attach/DetachIMSI Attach/DetachNormal Location UpdateNormal Location Update

Several Typical Location Update SequencesSeveral Typical Location Update Sequences


52/120



52

Intra-VLR Location Update

Sequence

Inter-VLR Location Update

Sequence

Intra-VLR Location Update SequenceIntra-VLR Location Update Sequence


53/120



53

MS BSS MSC VLR

1 Channel Request

DCCH Assign

HLR

Only sent to HLR if

this is the first

time the MS hasLocation Updated

in this VLR



54/120



54

MS BSS MSC VLR

1 Channel Request

DCCH Assign

2 Location Update Request

HLR

Only sent to HLR if

this is the firsttime the MS has

Location Updated

in this VLR



55/120



55

MS BSS MSC VLR

1 Channel Request

DCCH Assign


LAI & TMSI3 Authentication & Ciphering

HLR

Only sent to HLR if

this is the first


in this VLR



56/120



56

MS BSS MSC VLR

1 Channel Request

DCCH Assign



4 Forward New TMSI

Location Update Accept

HLR

Only sent to HLR if

this is the first


in this VLR



57/120



57

MS BSS MSC VLR

1 Channel Request

DCCH Assign



4 Forward New TMSI


5 TMSI Reallocate CompleteTMSI ACK

HLR

Only sent to HLR if

this is the first


in this VLR



58/120



58

MS BSS MSC VLR

1 Channel Request

DCCH Assign



4 Forward New TMSI


5 TMSI Reallocate Complete

TMSI ACK

6 Clear Command

Clear Complete

HLR

Only sent to HLR if

this is the first


in this VLR

Inter-VLR Location Update SequenceInter-VLR Location Update Sequence


59/120



59

Location Update via IMSI

Location Update via TMSI

Inter-VLR Location Update Via IMSIInter-VLR Location Update Via IMSI


60/120



60

1 Channel Request DCCH Assign

MS BSS MSC VLRn HLR VLRo



61/120



61




LAI & IMSI



62/120



62



LAI & IMSI

Authentication & Ciphering

MS BSS MSC VLRn HLR

3 Authentication Para. Req

VLRo

.



63/120



63



LAI & IMSI


MS BSS MSC VLRn HLR



Insert Subscriber Data

Insert Subscriber Data AckLocation Update accept

VLRo



64/120



64



LAI & IMSI


MS BSS MSC VLRn HLR




Insert Subscriber Data AckLocation Update accept

VLRo

5 Cancellocation

Cancellocation Ack.



65/120



65

6 Forward New TMSI


TMSI Reallocate Complete

TMSI ACK




66/120



66

6 Forward New TMSI



TMSI ACK

7 Clear Command

Clear Complete


Inter-VLR Location Update Via TMSIInter-VLR Location Update Via TMSI


67/120



67





68/120



68




LAI & TMSI



69/120



69



LAI & TMSI


.


3 Provide Identification

provide Identification Ack

TMSI&LAIO

TMSI,IMSI,KC,R,S)



70/120



70



LAI & TMSI



3 Provide Identification

provide Identification Ack

TMSI&LAIO

TMSI,IMSI,KC,R,S)



Insert Subscriber Data Ack

Location Update accept


71/120



72/120



72

6 Forward New TMSI



TMSI ACK


5 Cancellocation

Cancellocation Ack.


73/120


74/120


75/120


76/120

MO SMS TransferMO SMS Transfer


77/120



77

MS BSS MSC VLR InterworkingMSC

1 CHANNEL REQUEST

DCCH ASSIGN

SIGNALING LINK

ESTABLISHED


CC

3 AUTHENTICATION

SET Cipher MODE

SC

4 RP_MO_DATA

SIF_MO_SMS

SIF_MO_SMS-Ack

MO SMS TransferMO SMS Transfer


78/120



78

5 MO_Forward_SM

Short_Message

MO_Forward_SM_Ack

Short_Message_Ack

(SC_No.)

MS BSS MSC VLR InterworkingMSC SC


79/120

MT SMS TransferMT SMS Transfer


80/120



80

For Forwarding a ShortMessage

For Forwarding Several

Short Message

MT SMS Transfer (A Message)MT SMS Transfer (A Message)


81/120



81

MSServicing

MSCVLR HLR

Gateway

MSC SC

1 Short Message

SRI_For_SM

SRI_For_SM_Ack

MT_Forward_SM



82/120



82

MSServicing

MSCVLR HLR

Gateway

MSC SC

1 Short Message

SRI_For_SM

SRI_For_SM_Ack

MT_Forward_SM

2 SIF_MT_SMS

Page

Page



83/120



83

MSServicing

MSCVLR HLR

Gateway

MSC SC

1 Short Message

SRI_For_SM

SRI_For_SM_Ack

MT_Forward_SM

2 SIF_MT_SMS

Page

Page

3 Paging Response

Authentication and Ciphering



84/120



84

MSServicing

MSCVLR HLR

Gateway

MSC SC

1 Short Message

SRI_For_SM

SRI_For_SM_Ack

MT_Forward_SM

2 SIF_MT_SMS

Page

Page Request

3 Paging Response

Authentication and Ciphering

4 Short_Message

Short_Message_Ack

MT_Forward_SM_Ack

Short_Message_Ack


85/120

MT SMS Transfer (Several Messages)MT SMS Transfer (Several Messages)


86/120



86

MSServicing

MSCVLR HLR

Gateway

MSC SC

1 Short Message

SRI_For_SM

SRI_For_SM_Ack

MT_Forward_SM

MT_Forward_SM

(The More message To

Send Flag is True)

2 SIF_MT_SMS

Page

Paging Request


87/120

MS S i i VLR HLR G t SC



88/120



88

MS ServicingMSC VLR HLR GatewayMSC SC

4 Short_Message

Short_Message_Ack

MT_Forward_SM_Ack

Short_Message_Ack

MSServicing

MSCVLR HLR Gateway

MSC SC



89/120



89

MSC MSC SC4 Short_Message

Short_Message_Ack

MT_Forward_SM_Ack

Short_Message_Ack

5 Short_Message

MT_Forward_SM

MT_Forward_SM

(The More message To

Send Flag is False)

Short_Message_Ack

MT_Forward_SM_Ack

Short_Message_Ack

Short_Message

QuestionQuestion


90/120



90

What is theWhat is thesequence when thesequence when theoriginatingoriginating

subscriber sets thesubscriber sets thewrong SC No. inwrong SC No. inthe mobile station.the mobile station.


91/120

Handover SequenceHandover Sequence


92/120



92

Inter - BSS handoversequence

Inter - MSC handoversequence


93/120


94/120


95/120

MS oBSS nBSS MSC

Inter - BSS Handover SequenceInter - BSS Handover Sequence


96/120



96

MS oBSS nBSS MSC

1 Periodic Measurement

reports

2 Handover required

3 Handover Request

4 Handover REQ ACK4 Handover REQ ACK

TMSI cct. code

HO Ref. No.

MS oBSS nBSS MSC



97/120



97

MS oBSS nBSS MSC


reports

2 Handover required

3 Handover Request

5 Handover Command5 Handover Command4 Handover REQ ACK

TMSI cct. code

HO Ref. No.

HO Ref. No.

MS oBSS nBSS MSC



98/120



98

MS oBSS nBSS MSC


reports

2 Handover required

3 Handover Request

5 Handover Command4 Handover REQ ACK

TMSI cct. code

HO Ref. No.

HO Ref. No.

6 Information Interchange6 Information Interchange

MS oBSS nBSS MSC



99/120



99

MS oBSS nBSS MSC


reports

2 Handover required

3 Handover Request


TMSI cct. code

HO Ref. No.

HO Ref. No.

6 Information Interchange

7 Handover Complete7 Handover Complete

MS oBSS nBSS MSC



100/120



100


reports

2 Handover required

3 Handover Request


TMSI cct. code

HO Ref. No.

HO Ref. No.

6 Information Interchange

7 Handover Complete

8 Clear Command8 Clear Command


101/120

Inter - MSC Handover SequenceInter - MSC Handover Sequence


102/120



102

Basic Inter-MSC handover

Subsequent Inter - MSC

handover

MSCA MSCB VLRB

Basic Inter-MSC handoverBasic Inter-MSC handover


103/120



103

1 PrepareHandover1 PrepareHandover

2 Allocate HandoverNo.

4 PrepareHandover_Ack

5 Send HO Report_Ack

6 Initial

Address Message

3 Send Handover Report

Address Completed

Answer


104/120


105/120


106/120

MSCA MSCB VLRB1 PrepareHandover



107/120



107

1 PrepareHandover



5 Send HO Report_Ack5 Send HO Report_Ack

6 Initial

Address Message


Address Completed

Answer

MSCA MSCB VLRB1 P H d



108/120



108

1 PrepareHandover



5 Send HO Report_Ack

6 Initial6 InitialAddress MessageAddress Message


Address CompletedAddress Completed

AnswerAnswer


109/120


110/120

MSC/VLRA MSC/VLRB HLRA



111/120



111

9 SendAuth. Info9 SendAuth. Info

Auth InfoAuth Info

Update LocationUpdate Location

InsertSubs.DataInsertSubs.Data

InsertSubs.Data_AckInsertSubs.Data_Ack

UpdateLocation_AckUpdateLocation_Ack

Cancellocation

Cancellocation_Ack

MSC/VLRA MSC/VLRB HLRA

Subsequent Inter-MSC handoverSubsequent Inter-MSC handover


112/120



112

1 PrepareSubsequentHOV1 PrepareSubsequentHOV

PrepareHandoverPrepareHandover

PrepareHandoverPrepareHandover

PrepareSubsequentHOVPrepareSubsequentHOV

2 Initial and FinalAddress Message

Address Complete

Answer

3 RLS

RLC


113/120


114/120


115/120

MSC/VLRA MSC/VLRB MSC/VLRC

Subsequent Inter-MSC handoverSubsequent Inter-MSC handover


116/120



116

5 RLS5 RLS

RLCRLC

7 Location Update

SendEndSignal_Ack

6 SendEndSignal

4 ForwardAccessSignal

ProcessAccessSignal


117/120


118/120


119/120


120/120

HW flow GSM COM

Documents

Transcript of HW flow GSM COM