Example Network Diagram

Call Flow - Mobile to Mobile Call

MS A

BTS1

BSC1 A Interface

MSC/VLR1 MAP - E Interface

Air Interface/LAPDm

Abis Interface/LAPD

Subscriber A types Subscriber B's MSISDN number and presses "send button" on his mobile. RR Connection Establishment begins and the called number digits needs to be transported from Mobile A to MSC. For this first phase, Radio Resource (RR) connection is established to MSC First Step: RR CONNECTION ESTABLISHEMENT
RR CHANNEL REQUEST

RACH RR connection establishment is triggered by sending the RR CHANNEL REQUEST message. This message requests BSS for allocation for radio resources for the RR Connection setup. The mobile now waits for an Assignment on Access Grant Channel (AGCH). At this point the mobile is listening to AGCH for a reply. RR CHANNEL REQUEST is sent on RACH and slotted aloha channel that can be used at random without any co ordination between the mobiles, any mobile can transmit on this channel whenever it wishes. If two mobiles transmit on the channel at the same time, thier messages will be lost ina collision. The mobile will detect the collision via a timeout and retransmit the messa after a random back off

message requests BSS for allocation for radio resources for the RR Connection setup. The mobile now waits for an Assignment on Access Grant Channel (AGCH). At this point the mobile is listening to AGCH for a reply. RR CHANNEL REQUEST is sent on RACH and slotted aloha channel that can be used at random without any co ordination between the mobiles, any mobile can transmit on this channel whenever it wishes. If two mobiles transmit on the channel at the same time, thier messages will be lost ina collision. The mobile will detect the collision via a timeout and retransmit the messa after a random back off

CHAN RQD CHANnel ReQuireD procedure may occur on the Abis interface at any time, on an asynchronous basis. The procedure is initiated by the TRX carrying the so called CCCH channel, upon detection of a random access from an MS. The TRX then sends a CHANnel ReQuireD message to BSC containing the Request Reference Parameter (random number selected by MS plus some low order bits of the TDMA frame number for the access) and teh access delay

Channel Activate

Channel Act Ack

IMM ASS CMD The IMMEDIATE ASSIGN COMMAND procedure may occur at any time, in an asynchronous basis, to initiate the immediate assignment, the BSC sends an IMMEDIATE ASSIGN COMMAND message, including an RR Immediate Assign message. The BSC will transmit this message on the AGCH channel which is mapped on the same tmeslot as the received Channel Required message. Upon receipt of this message the BTS transmits the immediate assignment as received. This procedure can also be used to return an Immediate Assign Reject message to MS

RR IMM ASSIGNMENT rr_t3101 start AGCH (SDCCH Freq, TS, Freq and Time) The BSS shall allocate a SDCCH to the mobile. The SDCCH allocation assigns a specific frequency and a timeslot on that frequency. After the mobile receives this messa, the mobile shall only use the specified resourcs for communicaion with the mobile network. BTS transmits the radio resource assignment to the mobile via the AGCH channel. The message also conatins the time and frequency corrections. The time corrections allow the mobile to time it's transmisions so that they reach the BSS only in the specified timeslot. The frequency corrections correct for the doppler shift caused by the mobile's motion. After adjusting frequency and timing, the mobile detunes from AGCH and tunes to the specified radio channel. BTS starts "rr_t3101" RR timer waiting replay from MS

RR SABM+MM CM SERVICE REQUEST rr_t3101 stop SDCCH, SAPI=0 This is the first message that is sent after tuning to the channel. The Mobile initiates a LAPDm connection with the BSS by sending a Set Asynchronous Balanced Mode (SABM) message. SABM used to set up a logical channel SDCCH in acknowledged Multi Frame Mode. The service request message meant for the MS is also sent in this messge. On receipt of this message BTS will stop rr_t3101 timer

RR UA SDCCH, SAPI=0 The BSS replies with Unnumbered Acknowledge (UA) to complete the LAPDm setup handshake. UA acknowledges SABM

MS Power Control SACCH SCCP CONNECTION REQUEST + BSSMAP COMPLETE LAYER 3 sccp_tconn est start INFORMATION SS7 sccp_tconn est stopCONNECTION CONFIRM (CC) SS7 DTAP, AUT REQ SS7 dtap, I(aut req) N(S)=0;N(R)=0 LAP D Data REQ, I(AUT REQ) N(S)=0;N(R)=0 SDCCH Send I frame containing the L3 info authentication request DATA IND, I(AUT RESP) N(S)=0;N(R)=1

DATA IND, I(AUT RESP) N(S)=0;N(R)=1 SDCCH

dtap, aut resp LAP D DTAP, AUT RESP SS7 ID Request (Type:IMEI) SS7 ID Request (Type:IMEI) LAPD ID Request (Type:IMEI) SDCCH ID Response IMEI) ID Response IMEI) ID Response IMEI)

CLASSMARK REQ

REQ CLASSMARK CLASSMARK ENQ

CLASSMARK SEND UPDATE CLASSMARK CLASSMARK UPDATE BSSMAP, CIPH MODE CMD SS7 Since the subscriber has been successfully authenticated, the MSC initates ciphering of the data being sent on the channel. The channel is ciphered so as to protect the call from evesdropping. Ciphering on the radio link is enabled in three steps. As a first step, the BSS starts expecting ciphered data from the mobile but continues to send data in CLEAR, since the mobile has not been informed about the ciphering, all data received from the mobile will be in error.

Since the subscriber has been successfully authenticated, the MSC initates ciphering of the data being sent on the channel. The channel is ciphered so as to protect the call from evesdropping. Ciphering on the radio link is enabled in three steps. As a first step, the BSS starts expecting ciphered data from the mobile but continues to send data in CLEAR, since the mobile has not been informed about the ciphering, all data received from the mobile will be in error.

cipher req LAP D

ENCRYPT CMD, CIPHERING MODE CMD,Mode=Clear

SDCCH

The BSS sends the CIPHERING MODE COMMAND to the Mobile. The mobile will be able to reeive this message as the transmission from the BSS is still in CLEAR. As a second step, the Mobile receives the message and enables ciphering in transmit and receive directions. This action will result in all BSS data being received in error The BSS is still transmitting data in CLEAR
CIPHERING MODE COMPLETE, Mode=Ciphered

SDCCH Ciphering has already been enabled, so this message is transmitted with ciphering. The BSS will receive this message as it is already expecting ciphred data in the receive direction. The third and final step in the ciphering handshake. The BSS enables the ciphreing in transmit direction. From this point on ciphering is enabled in both directions.

ciper suc LAPD BSSMAP, CIPH CMPLT SS7 BSS replies back to the MSC, including that ciphering has been successfully enabled

DTAP: TMSI REALLOCATION COMMAND VLR1 generates a new TMSI and forwards to MSC1 for this MS. MS stores TMSI in its non-volatile store

DTAP: TMSI REALLOCATIOM COMPLETE MSC informs VLR that TMSI reallocaation was succesful. VLR associates the TMSI with IMSI and old TMSI is deallocated if it is allocated by it previously RR Connection Establishemnt completed - At this point a connection has been setup between the mobile and the MSC. From this point onward, the BSS is just acting as a conduit for transporting the signalling messages between the mobile and the MSC

SECOND STEP: CALL SETUP DATA REQ, SET UP SDCCH The mobile sends the setup message to establish a Voice Call. The message contains the dialled digits and other information needed for call establishement dtap, setup LAP D

DTAP SETUP

DTAP, CALL PROC

DT1, dtap, call proc

DATA REQ, CALL PROC The mobile is informed that the call setup is in progress. At this point the mobile phone displays a meesage "Connecting.." on the screen to indicate that call setup is being attempted.

BSSMAP_T11 starts

BSSMAP: Assignment Request

The MSC Allocates a voice circuit on one of the digital trunks between the MSC and the BSS. MSC informs the BSS about the allocated voice channel. The call is also switched from signalling circuit to voice circuit.

The MSC Allocates a voice circuit on one of the digital trunks between the MSC and the BSS. MSC informs the BSS about the allocated voice channel. The call is also switched from signalling circuit to voice circuit. Physical Context Req

Physical Context Conf

Channel Activation

Chnal Act ACK

Initiate Assignment

Assignment Command BSSMAP_T10(T3 107)starts SDCCH

SABM FACCH UA FACCH Assignment Complete BSSMAP_T10(T3 107)stops FACCH

Assignment Successful BSSMAP_T11 Assignment Complete Stops SD RF Chanl Release SD RF Chanl Rel Ack

MSC1 Checks the class of service from VLR1 database. MSC1 sends VLR1 the message "Send Info O/G Call". VLR1 verifies its database and if MSA is eligible for making O/G call, VLR1 reples MSC1 with the message "Complete Call". If MSA is not eligible for making O/G call announcement will be fed to MSA. It will be transmitted to MSA by FACCH. If MSC1 receives "Complete Call" message from VLR1. MSC1 analyzes the dialled digits using GT analysis defined in GT analyses with NP=1 and routes it to GMSC

MSC1 Checks the class of service from VLR1 database. MSC1 sends VLR1 the message "Send Info O/G Call". VLR1 verifies its database and if MSA is eligible for making O/G call, VLR1 reples MSC1 with the message "Complete Call". If MSA is not eligible for making O/G call announcement will be fed to MSA. It will be transmitted to MSA by FACCH. If MSC1 receives "Complete Call" message from VLR1. MSC1 analyzes the dialled digits using GT analysis defined in GT analyses with NP=1 and routes it to GMSC

SRI (MSISDN-B) ISUP Since MSISDN-B is a mobile subscriber, MSC/VLR go for HLR Enquire for subscriber B. There is no connection between MSC1 and HLR. MSC/VLR1 w Send Routing Information to GMSC. It refers to GT with NP=1

The GMSC refers to on MSISDN format HLR2. GMSC reque

SRI_ACK TCAP/SCCP IAM (MSRN)

GMSC uses MSRN a MSRN as the re MSC/VLR2 receive

ISUP ACM Alerting

ISUP ANM Connect Charging Starts Connect Ack s/w s/w s/w Conversation

END Button CC Disconnect REL ISUP

CC Release

CLEAR BSSMAP RR Channel Release

RR Channel Release CLEAR BSSMAP RR DISC

RR UA Release indication

Diagram

Mobile Call

GMSC MAP-D Interface

HLR 1

HLR 2

MSC/VLR2

BSC1

AP - E Interface

as been setup st acting as a and the MSC

RI (MSISDN-B)

mobile subscriber, MSC/VLR1 has to or subscriber B. There is no direct SC1 and HLR. MSC/VLR1 will send on to GMSC. It refers to GT analysis with NP=1

TC-INV[Send_Routing_Info (MSISDN-B)] MAP/C TC-BEGIN SCCP The GMSC refers to GT analysis for NP=1, TON = NAT or INT, depends on MSISDN format received by GMSC. GT analsis in GMSC refers to HLR2. GMSC requests routing information for the GSM subscriber from HLR2.

TC-INV[Provide Routing Number (MSRN) {PRN(IMSI)}] MAP/D TC-BEGIN SCCP HLR2 uses MSISDN-B and finds out IMSI and the SS7 address of MSC/VLR which is serving MS-B at that moment. SS7 address of the serving MSC/VLR was obtained by HLR during LU of MS-B. In this case, MS-B is present in MSC/VLR2 area. HLR 2 sends Provide Routing Number message (PRN) to MSC/VLR2. HLR 2 sends IMSI number of MS-B to VLR2 as data

TC-RES [Provide_MSRN_Ack] TC-END SCCP[MAP/D] MSC/VLR2 allocates a temporary roaming number (MSRN). The MSRN is then passed to the HLR

MSC/VLR2 allocates a temporary roaming number (MSRN). The MSRN is then passed to the HLR

TC-RES [Send_Routing_Info_Ack(MSRN)] TC-END SCCP[MAP/C] HLR 2 Passes MSRN to GMSC

SRI_ACK TCAP/SCCP

IAM (MSRN)

Send Info I/C call [IAM(MSRN)] ISUP SAM (mor digits if any will be sent)

GMSC uses MSRN and refers to digit analysis and finds out the route to MSC/VLR 2. GMSC 2 GMSC 2 sends MSRN as the reference number for the call to establish and sends ISUP messae IAM to MSC/VLR2. MSC/VLR2 receives the call. At this point, the MSRN is marked free and may be reassigned for other calls. Check Subscriber B Class of service BSSMAP Page (UDT) SCCP-CL

MSC/VLR2 needs to locate the subscriber in the loction area (which BTS?) area might span several cells, paging mechanism is used to locate the su MSC/VLR2 uses TMSI of MS-B which is allocated to MS-B earlier to addre that, MSC/VLR2 will send PAGING messge to all BSCs that handle loc

RR Paging Reque Type 3 (TMSI)

BSC1 of MSC2 receives the Page co message to all the cells that serve th that, all the BSCs, serving the location the ce

All cells in the location area will broad

All the mobiles belonging pageing message in BTS1. MS-B finds that message matches its own TMSI. The page. An RR Connection establishme request to th

Channel Require Channel ACT

Channel ACT Ac

IMMEDIATE Assign CM

Establish Ind (Pag Response,CM Serv Request)

UA (Page Respon

When BTS and MS are in contact o messageis sent from BTS1 to BSC piggybacked on this message. BSC1 BTS1 sends UA(Pa SCCP CR+RR Paging Response

BSC1 sends a SCCP Connection Re response message is pig

BSSMAP: CC SCCP

MSC/VLR2 initiates authentication check, IMEI C Classmark request, TMSI Reallocation proced similar to MS-A. Ref MS-A procedures given a

Assignment Req

Initiate Assignme

Assignment Succe Assignment Complete

CC Setup

Call Confirmed

CC Alerting

SRBT (IP ISUP ACM

ISUP ACM

CC Connect Charging Starts ISUP ANM

ISUP ANM

s/w

s/w Conversation

s/w

Conversation

REL ISUP REL CC Release

BTS1

MSB

loction area (which BTS?), since location sm is used to locate the subscriber. The ed to MS-B earlier to address MS-B. Note to all BSCs that handle location area

RR Paging Request Type 3 (TMSI) LAPD

MSC2 receives the Page command. BSC will send the Page o all the cells that serve the subscriber's location area. Note BSCs, serving the location area will send page message to all the cells RR Paging Request Type 3 (TMSI) PCH

the location area will broadcast the Page message on PCH.

RR CHANNEL REQ

RACH mobiles belonging pageing group of MS-B listen to paging e in BTS1. MS-B finds that the TMSI specified in the page matches its own TMSI. The MS-B decides to respond to the RR Connection establishmentis initiated by sending a channel request to the network Channel Required Channel ACT Channel ACT Ack
IMMEDIATE Assign CMD

LAPD
RR IMMEDIATE Assgn

AGCH RR SABM + RR PAGING RESPONSE MS-B tunes to the assigned SDCCH channels and transmits page response and piggybacks SABM to intiate RR sesssion Establish Ind (Page Response,CM Service Request) UA (Page Response) UA (Page Response)

TS and MS are in contact over SDCCH, Establishment Indication geis sent from BTS1 to BSC1. Paging Response and SABM are d on this message. BSC1 sends UA(Page Response) to BTS1 and BTS1 sends UA(Page Response) to MS-B

ds a SCCP Connection Request (CR) to the MSC/VLR2. The Page response message is piggybacked with the request.

hentication check, IMEI Check, Ciphering activation, IMEI chek, TMSI Reallocation procedures to MS-B. These procedures are MS-A procedures given above and are not printed here again.

Initiate Assignment Assignment Command Assignment Complete Assignment Success

CC Setup

Call Confirmed Ringing CC Alerting

ERS (External Ringtone Server) SRBT (IP Network/IP Trunks)

Answers the call CC Connect

s/w

CC Release