You are on page 1of 57

ORA000002 CDMA Communication flows (NSS)

ISSUE 1.0

Wireless Curriculum Development Section Wireless Curriculum Development Section

Objectives
Upon completion of this course, you should:

Understand

the basic flows of CDMA the information name the meaning of important parameters

Understand

Understand

Improve

the capabilities of problem analysis and fault location

according to the flows


Understand

the abbreviation of messages


2

Confidential Information of Huawei.

Security Level: Internal

Content

Chapter 1 Brief introduction of CDMA Flows Chapter 2 Communication flows of CDMA

3
Confidential Information of Huawei. Security Level: Internal

Brief introduction of CDMA flows


Basic CDMA flows

Registration flows Authentication flows Calling flows Handoff flows Supplementary service flows Short message flows

4
Confidential Information of Huawei. Security Level: Internal

Brief introduction of CDMA flows


The flows that the main services may involved in are as follows:

Mobile phone power on/off: flows

location updating flows and authentication

Mobile phone calling: calling flows and authentication flows Migration in the conversation: handoff flows and authentication flows Mobile phone hooks up : calling flows Short message: short message flows and authentication flows Supplementary service: flows supplementary service flows and authentication

5
Confidential Information of Huawei. Security Level: Internal

Content

Chapter 1 Brief introduction of CDMA Flows Chapter 2 Communication flows of CDMA

6
Confidential Information of Huawei. Security Level: Internal

Chapter 2 Communication flows of CDMA

2.1 2.2 2.3 2.4 2.5 2.6

Location registration flows Authentication flows Calling flows Handoff flows Supplementary service flows Short message flows

7
Confidential Information of Huawei. Security Level: Internal

Location Registration flow( in local VLR)

8
Confidential Information of Huawei. Security Level: Internal

Location Registration flow( involve VLR and HLR)

LOCATION UPDATE REQ: Location Update Request REGNOT : Register Notification LOCATION UPDATE ACCEPT: Location update Accept
9
Confidential Information of Huawei. Security Level: Internal

Location Registration flow ( Cross VLR)

LOCATION UPDATE REQ: Location Update Request REGNOT : Register Notification REGCANC: Register Cancellation LOC ACP: Location update Accept
Confidential Information of Huawei. Security Level: Internal

10

Location Registration flow for Switch off

LOCATION UPDATE REQ: Location Update Request MSINACT: MS inactive LOCATION UPDATE ACCETP: location update accept
11
Confidential Information of Huawei. Security Level: Internal

Questions

Why not all the location registrations are sent to HLR? What is the meaning of MSCID in the location registration function ? message, and what is the

Why does the switch off message need to be registered ?

12
Confidential Information of Huawei. Security Level: Internal

Answers

Question 1: Not all the requests of location registrations are sent to HLR. If the subscribers data has already existed in VLR and the subscriber is activated, the registration is processed by VLR. Otherwise the registration requests are sent to HLR, and processed by HLR. Question 2: MSCID is the identification of MSC mainly including SID( System Identification) and SWNO( Switch No.). It uniquely identifies one switch entity, and is used to determine whether the MS is roaming. Question 3: Switch off registration are mainly used to inform HLR that the subscriber has already powered off. If other subscribers call it, system can send the access refuse directly to the calling party according to the subscribers status in HLR.

13
Confidential Information of Huawei. Security Level: Internal

Chapter 2 Communication flows of CDMA

2.1 2.2 2.3 2.4 2.5 2.6

Location registration flows Authentication flows Calling flows Handoff flows Supplementary service flows Short message flows

14
Confidential Information of Huawei. Security Level: Internal

The Parameters in Authentication

Parameters

involved in authentication: RAND, RANDC, ESN, involved in SSD updating: A_KEY, RANDSSD, RAND, RANDC,

MIN, SSD
Parameters

ESN, RANDBS, RANDU


Random

number involved in authentication:

RANDSSD, RANDBS, RANDU

Authentication results in authentication: AUTHU

AUTHR, AUTHBS,

15
Confidential Information of Huawei. Security Level: Internal

The Parameters in Authentication

SSD

Algorithm:

RANDSSD 56bits

ESN 32bits

A_Key 64bits

SSD Algorithm

SSD_A SSD_B 64 bits 64 bits


16
Confidential Information of Huawei. Security Level: Internal

The Parameters in Authentication

CAVE

(Cellular Authentication and Voice Encryption)

RAND_CHALLENGE 32 bits

ESN 32 bits

MIN 24 bits

SSD 64 bits

CAVE

AUTHR / AUTHU / AUTHBS 18 bits

17
Confidential Information of Huawei. Security Level: Internal

Authentication flow when SSD is not shared

18
Confidential Information of Huawei. Security Level: Internal

Authentication flow when SSD is shared

19
Confidential Information of Huawei. Security Level: Internal

SSD Update when SSD is not shared

20
Confidential Information of Huawei. Security Level: Internal

SSD Update when SSD is shared

21
Confidential Information of Huawei. Security Level: Internal

Questions

What is the meaning of SSD_sharing? How flows? does the SSD_sharing influence the authentication

Why is the SSD update flow introduced? Describe the SSD update flow when SSD is not shared.

22
Confidential Information of Huawei. Security Level: Internal

Answers

Question 1: SSD_sharing means that the SSD is stored in VLR. Question 2 : whether the SSD is shared determines where the authentication is done. If SSD is shared, authentication is able to be done at the VLR, else this work is done at the AC. Question 3: The introduction of SSD update flows is mainly for the protection of invalid authentication when SSD is stolen.

Question 4: Please refers to slide introduced before.

23
Confidential Information of Huawei. Security Level: Internal

Chapter 2 Communication flows of CDMA

2.1 2.2 2.3 2.4 2.5 2.6

Location registration flows Authentication flows Calling flows Handoff flows Supplementary service flows Short message flows

24
Confidential Information of Huawei. Security Level: Internal

MS calls MS ( in local MSC)

25
Confidential Information of Huawei. Security Level: Internal

MS calls MS ( cross MSC)

26
Confidential Information of Huawei. Security Level: Internal

MS calls PSTN

27
Confidential Information of Huawei. Security Level: Internal

PSTN calls MS

28
Confidential Information of Huawei. Security Level: Internal

Questions

What

is the difference between the local call

and inter-office call?

Please

describe the flows triggered when the

MS registered in Beijing makes a call in Shenzheng.

29
Confidential Information of Huawei. Security Level: Internal

Answers

Question 1: between

There are two essential differences

Intra-office mobile calling and Inter-office

mobile calling: one is that whether the location request message carry the TLDN or not, local office assigns the TLDN in intra-office calling flows, the called office assigns the TLDN in inter-office calling flows; the other is that whether the signals route outgoing according as the TLDN.

Question 2:

Location Register flow,

Authentication

flow, Calling flow

30
Confidential Information of Huawei. Security Level: Internal

Chapter 2 Communication flows of CDMA

2.1 2.2 2.3 2.4 2.5 2.6

Location registration flows Authentication flows Calling flows Handoff flows Supplementary service flows Short message flows

31
Confidential Information of Huawei. Security Level: Internal

HandOff flow on A interface in one BSC

32
Confidential Information of Huawei. Security Level: Internal

HandOff flow on A interface between BSCs


Source BSC

33
Confidential Information of Huawei. Security Level: Internal

Forward HandOff
Anchor/Serving MSC Target MSC

34
Confidential Information of Huawei. Security Level: Internal

Backward HandOff
Target MSC Anchor/Serving MSC

35
Confidential Information of Huawei. Security Level: Internal

HandOff to Third Party

Target MSC

36
Confidential Information of Huawei. Security Level: Internal

Questions
What

is the difference between Forward does the third parties handoff happen?

HandOff and Backward HandOff?


When What

is the main function of FACDIR

37
Confidential Information of Huawei. Security Level: Internal

Answers
Question

1: the Forward Handoff is that MS handoff from the

serving MSC to a new target MSC; and the Backward HandOff is that MS handoff from the serving MSC to the primary controlling MSC.

Question

2: Whether HandOff to Third Party happens depends

on the startup standard value of Third Party HandOff and handoff depth together, when the current handoff times, viz. the handoff depth equal to the startup standard value of Third Party Handoff, the MS will handoff to the third party.

Question

3:

FACDIR is used to set up inter_office handoff

circuits, which is MAP circuit.


38
Confidential Information of Huawei. Security Level: Internal

Chapter 2 Communication flows of CDMA

2.1 2.2 2.3 2.4 2.5 2.6

Location registration flows Authentication flows Calling flows Handoff flows Supplementary service flows Short message flows

39
Confidential Information of Huawei. Security Level: Internal

FEATURE SERVICE

40
Confidential Information of Huawei. Security Level: Internal

Call Forwarding Unconditional (CFU)

41
Confidential Information of Huawei. Security Level: Internal

Call Forwarding Busy (CFB)

42
Confidential Information of Huawei. Security Level: Internal

Call Forwarding No Answer (CFNA)

43
Confidential Information of Huawei. Security Level: Internal

Call Forwarding Default (CFD)

llowing cases, the call does not be connected to the serving MSC when the CFD

cribed.

not-Disturb Service has been activated has not registered has been deactivated
44
Confidential Information of Huawei. Security Level: Internal

Message Waiting Notification (MWN)

45
Confidential Information of Huawei. Security Level: Internal

Questions
What What In

is the priority of 4 types of call forwarding? is the difference between CFNA and CFB ?

Conference Call flow, if a user exits, will the

conference call terminated?

46
Confidential Information of Huawei. Security Level: Internal

Answers
Question

1: CFU>CFB>CFNA>CFD

Question

2: There are two differences between CFNA and

CFB :

CFNA has gotten a TLDN and set up a call to the called office, while CFB dose not get any TLDN from the HLR to which the called MS belongs; Forwarded-to number of CFNA is retrieved by the calling MSC from the HLR to which the called MS belongs, while in CFB, it is sent by the HLR to which the called MS belongs directly.

Question

3: In CC, if the main controlling user exits, the

conference call terminates; but if a common user exits, other users continue the conference call.
47
Confidential Information of Huawei. Security Level: Internal

Chapter 2 Communication flows of CDMA

2.1 2.2 2.3 2.4 2.5 2.6

Location registration flows Authentication flows Calling flows Handoff flows Supplementary service flows Short message flows

48
Confidential Information of Huawei. Security Level: Internal

MS Sends Short Message in Access Channel


BSS
AD S Transfer D SM PP SD sm sdpp(ack) AD S Page D

M SC

M C

49
Confidential Information of Huawei. Security Level: Internal

MS Sends Short Message in Service Channel


BSS
ADDS Deliver SMSDPP smsdpp(ack)

MSC

MC

ADDS Deliver Ack

50
Confidential Information of Huawei. Security Level: Internal

MS Receives Short Message in Paging Channel

BSS

MSC

HLR
SMSREQ smsreq SMSDPP

MC

ADDS Page

ADDS Page Ack

smsdpp

51
Confidential Information of Huawei. Security Level: Internal

MS Receives Short Message in Service Channel

BSS

MSC

HLR SMSREQ smsreq SMSDPP

MC

ADDS Deliver ADDS Deliver Ack smsdpp

52
Confidential Information of Huawei. Security Level: Internal

Questions
1.

If the subscriber receives an extremely short

message during conversation, which channel is used to deliver the Short message?

2. What is the influence of the length of the short message when a MS originates a short message?

53
Confidential Information of Huawei. Security Level: Internal

Answers
Question Question

1: ADDS Deliver Message. 2: The length of the short message

may affect the A_interface message . If the length of the short message is less than a certain threshold, it is sent from the access channel using the ADDS transfer message; if the length is more than a certain threshold, it is sent from the service channel, using the ADDS deliver message.

54
Confidential Information of Huawei. Security Level: Internal

Review
This

section mainly describes common flows of CDMA including: location

registration, authentication, calling, handoff, supplementary services and short message.


Describing

the important messages and parameters in each flow.

55
Confidential Information of Huawei. Security Level: Internal

Reference

IOS40

Interface A Specifications Interface C/D Specifications Supplementary Service

ANSI41D ANSI-664

56
Confidential Information of Huawei. Security Level: Internal

57
Confidential Information of Huawei. Security Level: Internal

You might also like