IP Multimedia Subsystem

Part 1
Marek Średniawa
mareks@tele.pw.edu.pl

Institute of Telecommunications

EIMS - 2014 1
Project is co-financed by European Union within the European Social Fund
Introduction
 Evolution of telecom
Service Delivery Platforms (SDPs)

Intelligence Intelligence Intelligence Converged &

embedded in in a separate of cooperating embedded
software of switching service node components communications
systems

Switching system IN 3G, NGN, IMS 4G, LTE, EPC,

software SCP & CSE SDP

SIP, OSA/PARLAY, IP TV, RCS, APIs

PSTN, ISDN INAP, CAP, CAMEL, JAIN, UMTS (BONDI, REST, … )
GSM 3
EIMS - 2014
 Evolution of
service implementation model
Traditional closed model New open model

Services and Services & applications +

applications management

API Service interface

Call control and

switching Multimedia session control

API Network interface

Physical
transport Physical transport

Opening of the control infrastructure and service architecture using standard APIs - Parlay OSA/X APIs and JAIN APIs.
Breaking of the classic value chain. Separation of service development, deployment and operation. VNO and MVNO
models. EIMS - 2014 4
Change of model: „Spaghetti” →„Lasagna”

Application and content

Private networks
Mobile networks

Fixed networks

Common service
capabilities

Transport and access

„Spaghetti” type architecture „Lasagna” type architecture

EIMS - 2014 5
 Convergence - a buzzword …
• Overloaded concept – many flavours of „convergence”
• Voice - data
– Common transport network
• FMC
– ETSI TISPAN NGN
• Terminal convergence
– GSM/UMTS + WLAN
– Session continuity
– Single address (ENUM)
• Application convergence
– Context and presence embedded in applicatiions
– Click-to-call

EIMS - 2014 6
 Convergence – key factors
Telecommunications – A mix of solutions, technical and legal aspects

Presence
and Mobility Broadband Wireless
context access access

Convergence

Computer science and Internet – Content, media, networked IT services

Security Open source

Web 2.0/3.0 and Multimedia +
privacy CopyLeft
7

EIMS - 2014
 Areas of convergence

Convergence planes

Services and
Network Terminals Charging Contents
applications

EIMS - 2014 8
Everybody can offer (almost) everything …

TV TV TV TV

Mobile Mobile Mobile Mobile

Fixed Fixed Fixed Fixed

Internet Internet Internet Internet

Market liberalization (LLU, BSA, ...) + business models (MVNO/MVNE, networked IT

EIMS - 2014
services…) + resource sharing (fibers, lambdas, ducts, masts, servers, …)
9
 IP Multimedia (IM) Domain
• Implementation of multimedia services
• Integration of PS and CS domains and services

IM Domain - IMS

PDN
GSM PS Domain (IP)
BSS
Home Core network
Domain

ME CS Domain
UMTS RNS PSTN
(UTRAN)

EIMS - 2014 10
 IMS integrates services
Pre-IMS - „islands of services” IMS – integration of services
and combinational services

Voice

Voice / Video
SMS
TV SMS
Instant Instant
Messaging Messaging
MMS
MMS PoC

From separate usage of standalone services ... to integrated usage of services

based on presence
In groups – communities

EIMS - 2014 11
 IMS - requirements
• Support for:
– establishing IP Multimedia sessions
– mechanism to negotiate Quality of Service
– interworking with the Internet and circuit-switched
networks
– Roaming
– strong control imposed by the operator with respect to
the services delivered to the end-user
– rapid service creation without requiring standardization
(service capability standardization)
– access from networks other than GPRS
EIMS - 2014 12
 3GPP IP Multimedia Subsystem (1/2)
• IMS standardized by 3GPP as part of UMTS Release 5
– Basic VoIP, IM, Presence support on top of GPRS
– Adaptations to “real word” made in Release 6 (QoS, PoC support)
– Release 7 will look at unified IMS for all IP access networks (DSL, WLAN, etc.)
– Release 8 – Common IMS

• The IMS is based on the IP family of protocols:

– Adapted SIP (Session Initiation Protocol) for Session Control
– Diameter for AAA (Authentication, Authorization & Accounting)
– Others: SDP, RTP, RTCP, MGCP, etc.

EIMS - 2014 13
 3GPP IP Multimedia Subsystem (2/2)
• Key components of the IMS architecture:
– Extended AAA Server - Home Subscriber System – as
evolution of the HLR)
– SIP servers / softswitches
– Media Servers & Media Gateways
– Application Servers

EIMS - 2014 14
 Standardization of NGN/3G and IMS
3GPP Release 10
3GPP Release 9
Common IMS
3GPP Release 8
3GPP Release 7
ITU-T NGN FG
TISPAN NGN R1
OASIS, OMA
3GPP2 MMD
3GPP Release 6
3GPP Release 5
3GPP Release 4
2001 2002 2003 2004 EIMS2005
- 2014 2006 2007 2009 2010 2011
15
3GPP Specifications

EIMS - 2014 16
 Evolution of UMTS
• LTE (Long Term Evolution) - 4G wireless access technology from 3GPP
• IP based only access and high bandwidth requirements implied 3GPP study of a
converged architecture to support it - System Architecture Evolution (SAE)
• The Evolved Packet Core (EPC) is the result of this study.
– All-IP architecture to which LTE and other 3GPP (UMTS,GPRS) and non-3GPP (WiMAX,HRPD,WLAN
etc) access systems connect to.
– EPC provides a converged solution for Security, QoS , Mobility and connection to the IP based
services (IMS or the Internet)
• Evolved Packet System (EPS) = EPC + LTE access network (E-UTRAN)
• IMS is on top of the EPC as one of the possible IP Services layer.
• Data interface (SGi) from the main gateway of the EPC (PDN-Gw) to IMS
• Signaling/control interface (Rx) from the application function (the P-CSCF in IMS)
to the main session controller in charge of the authorization, admission control,
resource reservation, QoS (PCRF)

EIMS - 2014 17
General IMS architecture

Source: EIMS
3GPP -TS2014
23.002 18
 Main 3GPP IMS standards
• 22.228: IP multimedia subsystem; Stage 1
• 23.207: End-to-end QoS Concepts and Architecture
• 23.218: IP Multimedia (IM) session handling; IM call model
• 23.228: IP Multimedia Subsystem (IMS); Stage 2
• 24.228: Signalling flows for the IP multimedia call control based on SIP and SDP; Stage 3
• 24.229: IP Multimedia Call Control Protocol based on SIP and SDP; Stage 3
• 29.228: IP Multimedia (IM) Subsystem Cx Interface; Signalling flows and message contents
• 29.229: Cx Interface based on the Diameter protocol; Protocol details
• 29.328: IP Multimedia Subsystem (IMS) Sh Interface; Signalling flows and message contents
• 29.329: Sh interface based on the Diameter protocol; Protocol details
• 29.207: Policy Control over Go Interface
• 29.208: End-to-end Quality of Service (QoS) signalling flows
• 32.200: Telecommunications management; Charging management; Charging principles
• 32.225: Telecommunications management; Charging management; Charging data
description for the IMS domain
• 33.203: 3G security; Access security for IP-based services
• 33.210: 3G security; Network Domain Security (NDS); IP network layer security

EIMS - 2014 19
 From IETF SIP ….
SIP Proxy server AS – SIP application server
DNS

IP/Internet
Request

Response

SIP User Agent- UA SIP User Agent- UA

SIP User Agent- UA SIP User Agent- UA

EIMS - 2014 20
 … to 3GPP IMS SIP
DNS AS – SIP application serwer

DNS HSS

IP Core Network with QoS

support
P-CSCF
S-CSCF
I-CSCF

SIP User Agent- UA

SIP User Agent- UA Application server

SLF

EIMS - 2014 21
 IMS in UMTS
Intranet/
PS Domain Internet
“session”
SGSN GGSN
IP core network
CSCF IMS

SCP HLRHSS ???

MGCF “IP based”
CS Domain
MSC GMSC
MSC
“call” GMSC
Server Server PSTN
MGW
TDM, ATM or IP MGW

EIMS - 2014
22
 IMS standardization activities

VCC Messaging Multimedia Multimedia Multimedia

CSI Presence GLMS PoC
Telephony Telephony Telephony

Licensed radio IMS IP

Wi-Fi / WiMax wireless IMS access

WLAN Access to IMS

Mobile EIMS - 2014 Residential 23

 Protocols related to IMS services
• Instant messaging and presence
– SIP/PoC i 3G H.324M – Video Mail (VM)
– SIP – Multimedia Messaging (MMS)
– 3G-H.324M – Multimedia advertising
• Conversational multimedia services
– SIP/PoC – Push-To-Talk (PTT) over Cellular (PoC)
– SIP i 3G-H.324M – videotelephony and videoconferencing
• Video streaming
– SIP 3G-H.324M (based on DTMF video portals)
– RTSP (IP TV, monitoring)
• Multimedia games
– SIP/JSR-180 (J2ME)
– SIP/PoC
EIMS - 2014 24
 3GPP IMS architecture

Visited network Home network

Service plane
Diameter HSS AS
Diameter
SGW ISUP/MTP
SIP Diameter Control plane
I-CSCF SIP ISUP/IP

Access
SIP PSTN
P-CSCF S-CSCF SIP BGCF SIP MGCF
network
H.248
PCM
IP core VoIP – RTP – transport of media streams
MGW
network
Transport plane

HSS – Home Subscriber Server

CSCF – Call Session Control Function
control

BGCF – Breakout Gateway Control Function

MGCF – Media Gateway Control Function EIMS - 2014 transport 25
 IMS layers: transport, session control, applications
Application layer CAMEL
Parlay AS
CSE
Parlay API CAP API
SIP AS SIP AS
OSA GW IM SSF

Control layer ISC interface

HSS

P-CSCF I-CSCF S-CSCF

MRFC

Transport/user layer MRFP

B-GW

SIP Diameter PSTN 26

EIMS - 2014
H.248 / MEGACO RTP
 Three layer architecture of IMS (1/3)
• Unified architecture that supports a wide range of services enabled by the
flexibility of Session Initiation Protocol (SIP)
• Transport and Endpoint Layer
– Initiates and terminates SIP signaling to set up sessions and provide bearer
services such as conversion of voice from analog or digital formats to IP
packets using Real time Transport Protocol (RTP)
– Provides the media gateways for converting the VoIP bearer streams to the
PSTN TDM format.
– The media server provides many media related services including
conferencing, playing announcements, collecting in-band signaling tones,
speech recognition, speech synthesis, etc.

EIMS - 2014 27
 Three layer architecture of IMS (2/3)
• Session Control Layer
– Call Session Control Function (CSCF)
• provides the registration of the endpoints and routing of the SIP signaling messages
to the appropriate application server
• interworks with the transport and endpoint layer to guarantee QoS across all
services
– Home Subscriber Server (HSS) database
• maintains the unique service profile for each end user
• By centralizing this information, applications can share information to create
unified personal directories, multi client type presence information and blended
services.
– Media Gateway Control Function (MGCF)
• Interworks SIP signaling with the signaling used by the media gateway

EIMS - 2014 28
 Three layer architecture of IMS (3/3)
• Application Server Layer
– Contains application servers, which provide the
end-user service logic
• Telephony Application Server
• IP Multimedia – Services Switching Function (IM-SSF)
• Supplemental Telephony Application Servers
• Non Telephony Application Servers
• Open Service Access – Gateway (OSA-GW)

EIMS - 2014 29
 IMS architecture
Visited network Home network

<DIAMETER> Sh
HSS
AS
<SIP>
Cx
<SIP>
<SIP> ISC
P-CSCF I-CSCF S-CSCF MRF

Mw Mi
Gm
BGCF MGCF

UE Mj
EIMS - 2014
30
 Terminal - User Equipment (UE)
• SIP UA
• Establishes GPRS PDP context for
– signaling
– media transport
• ISIM for authentication
– Public and Private User identity
– User Network address
– Security algorithms and keys
– At least USIM
• Corellation of session control with QoS reservation

EIMS - 2014 31
 IMS components
Visited network Home network

<DIAMETER> Sh
HSS
AS
<SIP>
Cx
<SIP>
<SIP> ISC
P-CSCF I-CSCF S-CSCF MRF

Mw Mi
Gm
BGCF MGCF
UE Mj
EIMS - 2014
32
Proxy Call Session Control Function - P-CSCF
• P-CSCF (Proxy Call Session Control Function)
– entry point of user terminal into the IMS world
– acting as an outbound/inbound SIP proxy server
– an IMS terminal communicates with a single P-CSCF during the
registration
– establish IPsec security associations toward the IMS terminal
– verify the correctness of SIP request sent by the IMS terminal
– compressor and a decompressor of SIP messages
– may include PDF (Policy Decision Function) to authorize media
plane
– generate charging information

EIMS - 2014 33
 IMS components
Visited network Home network

<DIAMETER> Sh
HSS
AS
<SIP>
Cx
<SIP>
<SIP> ISC
P-CSCF I-CSCF S-CSCF MRF

Mw Mi
Gm
BGCF MGCF
UE Mj
EIMS - 2014
34
Interrogating Call Session Control Function
(I-CSCF)
• A SIP proxy located at the edge of an administrative
domain
• The address of the I-CSCF is listed in the DNS records
of the domain
• I-CSCF has an interface to the SLF and HSS and route
the SIP request to the appropriate destination
(typically S-CSCF)

EIMS - 2014 35
 IMS components
Visited network Home network

Sh
HSS
AS
Cx

ISC
P-CSCF I-CSCF S-CSCF MRF

Mw Mi
Gm

BGCF MGCF
UE Mj
EIMS - 2014
36
Serving Call Session Control Function S-CSCF
• S-CSCF (Serving Call Session Control Function)
– Central node of the signaling plane
– Acts as a SIP server and a SIP registrar
•Maintains binding between the user location (e.g. IP address of the terminal) and
the user’s SIP address of record (Public User Identity)
– Diameter interface to the HSS
•To download the authentication vectors of the user
•To download the user profile including service profile
•To inform the HSS of S-CSCF allocated to the user
– All the SIP signaling the IMS terminals sends and receives traverse the
allocated S-CSCF
– Provides SIP routing (e.g. translation from phone number to SIP URI)
– Enforces the policy of the network operator

EIMS - 2014 37
 IMS components
Visited network Home network
Sh
HSS

AS
Cx

ISC
P-CSCF I-CSCF S-CSCF MRF

Mw Mi
Gm
BGCF MGCF

UE Mj
EIMS - 2014
38
Breakout Gateway Control Function (BGCF)
• Selects PSTN/CS domain to forward a call
– local MGCF
– another BGCF
• MGCF selection process not defined
– configuration
– TRIP or a similar solution

EIMS - 2014 39
Media Gateway Control Function (MGCF)
• Gateway to PSTN
– SIP - PSTN mapping
– Establishes appropriate bearer capabilities
– Transcoding
– Acts as UA (registration not required)

EIMS - 2014 40
 IMS components
Visited network Home network
Sh
HSS

AS
Cx

ISC
P-CSCF I-CSCF S-CSCF MRF

Mw Mi
Gm
BGCF MGCF

UE Mj
EIMS - 2014
41
 Media Resource Function (MRF)
• Supports conference services and
announcements
• Multimedia Resource Control Function SIP
(MRFC) MRFC
– Interprets information from S-CSCF and
AS
• e.g. conference reservation
H.248
– controls MRPF
• Multimedia Resource Processor Function Media
(MRPF)
– Sets bearer capabilities based on MRFC MRPF
requests
– Mixing and distribution of media
– Media streaming for user interaction
• Uses H.248 (MEGACO)
EIMS - 2014 42
Interworking with PSTN – PSTN/CS Gateway
• PSTN/CS = MGCF + SGW + MGW
• MGCF (Media Gateway Control Function)
– ISUP-SIP mapping
– MGW control for media transcoding
– Selection of I-CSCF for calls to PSTN
• SGW (Signalling Gateway Function)
– Supports interworking between SS7 and MGCF
– Transport of ISUP messages in SIP messages to MGCF MGCF (SIP-T or
BICC)
– ISUP/BICC/MTP – ISUP/BICC/SCTP/IP
• MGW (Media Gateway)
– Termination of media streams
• RTP - PCM
• AMR - G.711 EIMS - 2014 43
BGCF - Breakout Gateway Control Function
• SIP server – routing based on telephone numbering
– Using of info delivered by TRIP protocol

• IMS – PSTN/PLMN calls

• Selection of an interworking network

• Selection of an appropriate PSTN/CS gateway (MGCF) if

interworking refers to the same network in which BGCF is
located

EIMS - 2014 44
 Application Server (AS)
• An SIP entity that hosts and executes
services
• Four modes of operation:
– AS acting as terminating UA, or redirect
server AS
– AS acting as originating UA
– AS acting as a SIP proxy
ISC
– AS performing third party call control/ 2 3
B2BUA mode
• ISC - SIP Interface to S-CSCF 1 4
S-CSCF
• Implemetation variants of ASs
– SIP AS
– OSA-SCS (Open Service Access-Service Capability
Server)
– IM-SSF (IP Multimedia Service Switching Function) 45
EIMS - 2014
Implementation variants of IMS AS
AS AS

SCIM
SIP AS
SIP Application
Server
Sh
ISC
Parlay OSA API
OSA
OSAservice
service OSA
HSS
HSS S-CSCF capability
CSCF capabilityserver
server OSA AS
application
Cx ISC (SCS
(SCS))
Si ISC
Mr
IM-SSF
IM-SSF
MAP
CAP MRFC
MRFC

Camel Service
CAMEL Service
Environment
Environment

EIMS - 2014 46
Parlay OSA application servers – third parties
Service Delivery Platform Parlay X App 1
(Application server) Parlay App 1 Parlay X App 2
Parlay App 2
Parlay App 3 Parlay X GW
HSS
Parlay Service Platform
API (MPCC, MMM,Trigger Points
Presence, Charging ...
Sh = Other access
SIP Interface Diameter networks
Diameter
Cx = Ro + Rf =
Diameter ISC Diameter
S-CSCF Online &Offline
SIP-Server Charging (ECF, CCF)

SIP S Filtering criteria

SPT
P
T
EIMS - 2014 47
Source: T. Magedanz (TU Berlin / Fraunhofer FOKUS)
 IMS components
Visited network Home network
Sh
HSS
AS
AS
Cx

ISC
P-CSCF I-CSCF
I-CSCF S-CSCF
S-CSCF MRF

Mw Mi
Gm
BGCF MGCF

UE Mj
EIMS - 2014
48
 Home Subscription Server (HSS)
• HSS (Home Subscriber Server)
– Technically, an evolution of the HLR
– Central repository for user-related information
• location information
• security information (authentication and authorization)
• user profile information (the services that the user is
subscribed to)
• S-CSCF allocated to the user
• SLF (Subscriber Location Function)
– Simple database that maps users’ addresses to
HSSs
EIMS - 2014 49
HSS – Home Subscriber Server

Sh
SLF HSS AS

Diameter ISC
MAP Dx Cx Cx SIP
Diameter
GPRS Mw Mw
access I-CSCF S-CSCF

SIP SIP

EIMS - 2014 50
 The first registration
Visited network Home network
UA P-CSCF I-CSCF HSS S-CSCF
1. Register 2. Register
3. UAR
UAR: User-Authorization-Request
4. UAA
UAA: User-Authorization-Answer
Selection of r S-CSCF MAR: Multimedia-Authentication-Request
5. Register MAA: Multimedia-Authentication-Answer
6. MAR SAR: Server-Assignment-Request
Authentication
SAA: Server-Assignment-Answer
vector selection RAND: Random challenge
7. MAA AUTN: Network Authorization Token
RAND||AUTN||XRES||CK||IK
8. 401 Unauthorised
CK: Ciphering Key
10. 401 Unauthorised 9. 401 Unauthorised
RAND||AUTN RAND||AUTN RAND||AUTN IK: Integrity Key
11. Register
RES 12. Register
RES 13. UAR
14. UAA
15. Register
RES
Authentication
18. SAR
19. SAA

21. OK 20. OK
22. OK CK||IK
CK||IK

EIMS - 2014
51
 Example: registration
Home Network of Mobile A Home network of Mobile B

HSS - A HSS - B

5 5
3 3
I-CSCF - A 4 S-CSCF - A S-CSCF - B 4 I-CSCF - B

2 2

1 1
P-CSCF - A P-CSCF - B

Call Control
Mobile A Mobile B
Network Visited by Mobile A Network Visited by Mobile B
EIMS - 2014 52
 IMS users session
1 SIP INVITE 6 Retrieving user’s profile
2 Retrieving user’s profile 7 Execution of a service scenario
3 Execution of a service scenario 8 INVITE forwarding to do User B
4 Resolution of User B home network address and 9 SDP session negotiation /
INVITE forwarding Reservation of resources
10 Ringing / Alerting
5 Identification of Registrar for user B and INVITE forwarding
11 Answer / call active

Home network of called user

Home network of
Control calling user HSS DNS HSS
Bearer
2 4 Diameter 6
Diameter Diameter
3 5 7
AS SIP S-CSCF I-CSCF S-CSCF AS
SIP
8
SIP SIP

Visited network of caller Visited network

P-CSCF P-CSCF of callee

11
10
SIP UE
SIP UE 9
1 Packet Packet
Access Core RTP Core Access
EIMS - 2014 53
 Example 2 – IMS mobile call
Home Network of Mobile A Home network of Mobile B

HSS - A HSS - B
3

4
I-CSCF - A S-CSCF - A S-CSCF - B I-CSCF - B
5

6
2
1 P-CSCF - A P-CSCF - B 7

Call Control
Mobile A Mobile B
Network Visited by Mobile A Network Visited by Mobile B

EIMS - 2014
54
 IMS to PSTN call
1 SIP INVITE 7 ISUP IAM
2 Retrieving user’s profile 8 Ringing / Alerting
3 Execution of a service scenario 9 Answer / Connect
4 Selection of access to PSTN and selection of MGCF
5 Seizing of a link/trunk and determination of MGW capabilities Control

6 SDP session negotiation / Reservation of resources Bearer

Network vizited by the caller Home network of the caller

SIP
1
Access P-CSCF S-CSCF
6 4
MGCF SIP BGCF SIP BGCF SIP
2 3
7 Diameter SIP
5 H.248 ISUP
8 9 AS
Packet HSS
Core MGW
RTP stream PCM PSTN

EIMS - 2014 55
 Call to PSTN (CS domain)
Home Network of Mobile A PSTN

User Profile
HSS - A BGCF - A 4
MGCF - B 5
User Profile 3
I-CSCF - A S-CSCF - A
Gateway
Control MGW - B

P-CSCF - A 2
1

Mobile A Network Visited by Mobile A

EIMS - 2014
56
 IMS Session Setup and Control
• Happens after user registration (and authentication!)
• Goals of IMS session setup
– Capability and media negotiation (e.g. codecs, port numbers, addresses)
– Network resource reservation and the support of QoS preconditions
• Additional functions performed by the IMS during the IMS Session Setup:
– Routing to the terminating IMS (= the IMS of the B-Party)
– Routing / Breakout to the PSTN / CS-Domain when the B-Party is not in the
IMS, but in the PSTN / CS-Domain
– Service Control / Invocation of Application Servers to trigger the execution of
Originating- and/or Terminating IMS Services
– Integrity/Confidentiality Protection of SIP Messages
– QoS/Media Authorization
– SIP Signaling Compression

EIMS - 2014 57
IMS Session Setup and Control 1/4

Source: T. Magedanz
EIMS(TU- Berlin
2014 / Fraunhofer FOKUS) 58
IMS Session Setup and Control 2/4

Source: T. Magedanz (TU Berlin / Fraunhofer FOKUS)

EIMS - 2014 59
IMS Session Setup and Control 3/4

Source: T. Magedanz (TU Berlin / Fraunhofer FOKUS)

EIMS - 2014
60
IMS Session Setup and Control 4/4

Source: IMS Tutorial -T. Magedanz (TU Berlin / Fraunhofer FOKUS)

EIMS - 2014 61
 EIMS

EIMS - 2014 62
Project is co-financed by European Union within European Social Fund