You are on page 1of 10

Signaling Analysis Manual

M900/M1800 Base Station Subsystem Table of Contents

Table of Contents

Chapter 4 Location Update Procedure........................................................................................ 4-1


4.1 Overview ............................................................................................................................ 4-1
4.2 Location Updating Procedure ............................................................................................ 4-2
4.2.1 Periodic Updating .................................................................................................... 4-3
4.2.2 IMSI Attach Procedure ............................................................................................ 4-4
4.2.3 Generic Location Updating Procedure.................................................................... 4-4
4.3 Internal Handling of BSC ................................................................................................... 4-9

Huawei Technologies Proprietary

i
Signaling Analysis Manual
M900/M1800 Base Station Subsystem Chapter 4 Location Update Procedure

Chapter 4 Location Update Procedure

4.1 Overview

In GSM system, MS location information need be known by HLR, VLR and MS,
When the location information changes, it is required that the relevant information in
HLR, VLR and MS should be consistent, which can be realized through the location
updating procedure. As the major procedure of location management, the location
updating procedure is always initiated on MS side.

The location updating procedure is a general procedure, and is used for 3 purposes,
i.e. normal location updating, periodic updating and IMSI attach.

The normal location updating procedure is used to update the registration of the
actual location area of MS in the network. The location updating type information
element in the LOCATION UPDATING REQUEST message shall indicate normal
location updating.

When the network indicates that MS is unknown in VLR, the normal location
updating procedure will be started, as a response to the MM connection
establishment request.
In case that location updating is unsuccessful, to limit the number of location
updating attempts, an attempt counter need be used. The attempt counter is reset
when MS is switched on or a SIM card is inserted.

MS contains a list of "forbidden location areas for roaming", as well as a list of


"forbidden location areas for regional provision of service". These lists shall be
erased when an MS is switched off or when SIM is removed. Whenever a
LOCATION UPDATING REJECT message is received with the cause "Roaming not
allowed in this location area" or with the cause "Location area not allowed", the LAI
received on BCCH that triggered the location updating request shall be added to the
relevant list. The two lists shall accommodate 10 or more entries. When the list is full
and a new entry has to be inserted, the oldest entry shall be deleted.

Upon successful location updating, MS sets the update status to "UPDATED" in SIM
(UPDATED status indicates the last location updating request is successful) , and
save LAI, TMSI, Cipher Key and Cipher Sequence Number in SIM, and stores the
received new location area information in SIM.

Huawei Technologies Proprietary

4-1
Signaling Analysis Manual
M900/M1800 Base Station Subsystem Chapter 4 Location Update Procedure

4.2 Location Updating Procedure

The normal location updating procedure, periodic location updating procedure and
IMSI attach procedure are basically the same (The difference are described in
details in relevant subsections below). See Figure 4-1 for the location updating
procedure.

MS BTS BSC MSC

Channel REQ (1) Channel RQD (2)


Channel ACT (3)
Channel ACT ACK (4)
I MM ASS CMD (5)
SABM (6)
UA (7)
EST IND( LOC UPD REQ) (8)
CR(CMP L3 information) (9)

CC (10)
Location Updating Accept (11)
Location Updating Reject (12)
TMSI Reallocation CMP (13)
Clear Command (14)
Clear Complete (15)

Figure 4-1 Location updating procedure

1) MS sends a CHANNEL REQUEST message to BTS on the access channel of


Um interface (The message contains the access cause value "Location
2) BTS sends a CHANNEL REQUEST message to BSC.
update").
3) Upon receipt of the CHANNEL REQUEST message, BSC allocates signaling
channels, and sends a CHANNEL ACTIVATION message to BTS.
4) If the channel type is correct, upon receipt of the CHANNEL ACTIVATION
message, BTS opens the power amplifier on the specified channel, and sends
a CHANNEL ACTIVATION ACKNOWLEDGE message to BSC.
5) BSC sends an IMMEDIATE ASSIGNMENT COMMAND message to MS via
BTS.
6) MS sends an SABM frame for establishing link with BTS
7) BTS returns a UA frame for acknowledgement.
8) BTS sends an ESTABLISHMENT INDICATION message to BSC, which
contains the content of the LOCATION UPDATE REQUEST message.
9) BSC establishes SCCP link connection on A interface, and sends a LOCATION
UPDATE REQUEST message to MSC. The parameter including the CGI of the
current cell.
10) MSC returns a link acknowledge message to BSC.

Huawei Technologies Proprietary

4-2
Signaling Analysis Manual
M900/M1800 Base Station Subsystem Chapter 4 Location Update Procedure

11) MSC sends a LOCATION UPDATING ACCEPT message to BSC, indicating


that location updating has succeeded.
12) The network shall deliver a LOCATION UPDATING REJECT message to MS if
it rejects the location updating request.
13) If "Allocate TMSI upon location updating" is set to "No" in MSC, MS shall not
report the TMSI REALLOCATION COMPLETE message in the location
updating procedure.
14) The network shall initiate the channel release procedure if no further
transactions are scheduled.

4.2.1 Periodic Updating

Periodic updating is used to notify periodically the availability of MS to the network.


It is performed by using the location updating procedure. The location updating type
information element in the LOCATION UPDATING REQUEST message shall
indicate periodic updating.

The procedure is controlled by timer T3212 in MS. If the timer has not been started,
the timer shall be started each time MS enters the "NORMAL SERVICE" or
"ATTEMPTING TO UPDATE" sub-state of the "MM IDLE" state. When MS leaves
the "MM Idle" state (MM IDLE state indicates MS in inactivation state, namely, it
doesn't process any call procedure, only in interception state. For example, in MOC
or MOT procedure, MS will leave MM_IDLE state), timer T3212 shall continue
running until it is overtime.

In the following cases, the timer shall be stopped (MS shall set the timer to its initial
value for the next location update).
z A LOCATION UPDATING ACCEPT or LOCATION UPDATING REJECT
message is received.
z An AUTHENTICATION REJECT message is received.
z The first MM message (Such as LOCATION ACCEPT, CM SERVICE ACCEPT
etc.) is received, or ciphering mode setting is completed in the case of MM
connection establishment, except when the most recent service state is
"LIMITED SERVICE".
z MS has responded to paging and thereafter has received the first correct layer
3 message except RR message.
z Timer T3212 expires.
z MS is deactivated (i.e. MS switched off or SIM removed).
When timer T3212 expires, the location updating procedure shall be started.

When MS is in the service state of "NO CELL AVAILABLE", "LIMITED SERVICE",


"PLMN SEARCH" or "PLMN SEARCH-NORMAL SERVICE", if the T3212 timer
expires, the location updating procedure shall be delayed until the MS leaves this
service state. The (periodic) location updating procedure is not be started if the

Huawei Technologies Proprietary

4-3
Signaling Analysis Manual
M900/M1800 Base Station Subsystem Chapter 4 Location Update Procedure

system information at the time the T3212 timer expires indicates that periodic
location update shall not be used. The timeout value is contained in control channel
description IE of the SYSTEM INFORMATION TYPE 3 message.

The T3212 timeout value shall not be changed when MS is in the state of "NO CELL
AVAILABLE", "LIMITED SERVICE", "PLMN SEARCH or PLMN SEARCH-NORMAL"
etc.

When a change of the T3212 timeout value has to be taken into account and the
timer is running (at change of the serving cell or, the broadcast of T3212 timeout
value), MS shall take the mod that the current T3212 value to the new T3212
timeout value as the new initial value.

When MS is activated, or when a change of the T3212 timeout value has to be


taken into account and the timer is not running, the new timer shall be started at a
value randomly, uniformly drawn between 1 and the new initial value.

4.2.2 IMSI Attach Procedure

The IMSI attach procedure is the complement of the IMSI detach procedure. It is
used to indicate the IMSI as active in the network. There is a flag (ATT) in the
SYSTEM INFORMATION TYPE 3 message, which indicates whether the attach and
detach procedures are required to be used or not.

The IMSI attach procedure is invoked when the IMSI is activated by MS, if the
detach/attach procedures are required by the network.

When IMSI is activated by MS within the network coverage area, or if MS is moved


from outside the coverage area to the coverage area. The IMSI attach procedure is
used only if the update status is "UPDATED" and if the stored LAI is the same as the
one which is actually broadcasted on the BCCH of the current serving cell.
Otherwise a normal location updating procedure shall be invoked, which is
independent of the ATT flag indication.

IMSI attach is performed by using the location updating procedure. The location
updating type information element in the LOCATION UPDATING REQUEST
message must in this case indicate IMSI attach.

4.2.3 Generic Location Updating Procedure

Any timer used for triggering the location updating procedure (e.g. T3211 and T3212)
is stopped if running.

As no RR connection exists at the time when the location updating procedure has to
be started, the MM sublayer within MS will request the RR sublayer to establish a

Huawei Technologies Proprietary

4-4
Signaling Analysis Manual
M900/M1800 Base Station Subsystem Chapter 4 Location Update Procedure

RR connection and enter the state of "WAIT FOR RR CONNECTION (LOCATION


UPDATE)".

MS initiates the location updating procedure by sending a LOCATION UPDATING


REQUEST message to the network, starts the timer T3210 and enters the state of
"LOCATION UPDATING INITIATED". The location updating type information
element shall indicate what kind of updating is requested.

I. Network requests for additional MS capability information

The network may initiate the classmark interrogation procedure, for example, to
obtain further information on MS's encryption capabilities.

II. Identification request

The network may initiate the identification procedure, e.g. if the network is unable to
get the IMSI based on the TMSI and LAI used as identification by MS

III. Authentication procedure

The authentication procedure may be initiated by the network upon receipt of the
LOCATION UPDATING REQUEST message from MS.

IV. Ciphering mode setting procedure

The ciphering mode setting procedure may be initiated by the network, if a new
TMSI has to be allocated.

V. Attempt counter

When location updating is unsuccessful, to limit the number of location updating


attempts, an attempt counter is used. It counts the number of consecutive
unsuccessful location update attempts.

The attempt counter is incremented by 1 each time a location update procedure fails.
In the following cases, the attempt counter shall be reset.
z MS is powered on
z A SIM card is inserted
z Location update is successfully completed
z Location update is completed with cause 11/12/13
z Service state changes from "ATTEMPTING" into "UPDATE"
z A new location area is entered
z Timer T3212 expires
z Location update is triggered by a CM sublayer request

Huawei Technologies Proprietary

4-5
Signaling Analysis Manual
M900/M1800 Base Station Subsystem Chapter 4 Location Update Procedure

The attempt counter is used when MS decides whether to re-attempt a location


update after timeout of timer T3211.

VI. Location updating accepted

If the location updating is accepted by the network, a LOCATION UPDATING


ACCEPT message shall be transferred to MS.

In case the identity confidentiality service is active, the TMSI reallocation may be
part of the location updating procedure. The TMSI allocated is then contained in the
LOCATION UPDATING ACCEPT message together with LAI. The network shall in
this case start the supervision timer T3250.

Upon receipt of a LOCATION UPDATING ACCEPT message, MS stores the


received LAI, stops timer T3210, resets the attempt counter and sets the update
status in SIM to "UPDATED". If the message contains an IMSI, MS is not allocated
any TMSI, and shall delete any TMSI from SIM accordingly. If the message contains
a TMSI, the MS is allocated this TMSI, and shall store this TMSI in SIM and send a
TMSI REALLOCATION COMPLETE to the network. If neither IMSI nor TMSI is
received in the LOCATION UPDATING ACCEPT message, the old TMSI if any
available shall be kept.

If the LAI or PLMN identity contained in the LOCATION UPDATING ACCEPT


message is a member of any of the "forbidden lists", the relevant entries shall be
deleted.

VII. Location updating rejected

If the location updating cannot be accepted, the network sends a LOCATION


UPDATING REJECT message to the MS. After receipt of the LOCATION
UPDATING REJECT message, MS shall stop timer T3210, store the reject cause,
start T3240, enter the state of "LOCATION UPDATING REJECTED" and await the
release of the RR connection triggered by the network. Upon the release of the RR
connection, MS shall take the following actions depending on the stored reject
cause.
z Cause 2: IMSI unknown in HLR
z Cause 3: illegal MS
z Cause 6: illegal ME
For cause 2/3/6, the MS shall set the update status to "ROAMING NOT ALLOWED",
and delete any TMSI, stored LAI and ciphering key sequence number and shall
consider IMSI invalid until switch-off.
z Cause 11: PLMN not allowed
z Cause 12: location area not allowed
z Cause 13: roaming not allowed in this location area

Huawei Technologies Proprietary

4-6
Signaling Analysis Manual
M900/M1800 Base Station Subsystem Chapter 4 Location Update Procedure

For cause 11/12/13, MS shall delete any LAI, TMSI and ciphering key sequence
number stored in from SIM, reset the attempt counter, and set the update status to
"ROAMING NOT ALLOWED". MS shall store the LAI or the PLMN identity in the
relevant forbidden list, i.e. in the "forbidden PLMN list" for cause 11, in the list of
"forbidden location areas for regional provision of service" for cause 12, and in the
list of "forbidden location areas for roaming" for cause 13. In addition, MS will
memorize if cause 13 is received, so to perform PLMN selection instead of cell
selection when it is back to the "MM IDLE" state.

Other cause values are considered as abnormal cases.

VIII. Release of RR connection after location updating

When the location updating procedure is completed, MS shall (except in the case
that MS has a follow-on CM application request pending and has received the
follow-on proceed indication) set timer T3240 and enter the state of "WAIT FOR
NETWORK COMMAND", expecting the release of RR connection. The network may
decide to keep the RR connection for network-initiated establishment of a new MM
connection, or to allow for MS-initiated MM connection establishment.

Any release of RR connection shall be initiated by the network. If the RR connection


is not released within a given time controlled by timer T3240, MS shall abort the RR
connection. In both cases, either after a RR connection release triggered from the
network side or after a RR connection abort requested by MS side, MS shall return
to the state of "MM IDLE".

At transition to the state "MM IDLE", sub-state "NORMAL SERVICE" or


"ATTEMPTING TO UPDATE", either timer T3212 or timer T3211 is started.

IX. Abnormal cases on MS side

There are the following abnormal cases on MS side.


1) Access barred because of access class control
MS stays in the current serving cell and initiates the normal cell reselection
procedure. The procedure is started as soon as the access is allowed.
2) The answer to random access is an IMMEDIATE ASSIGNMENT REJECT
message
MS stays in the chosen cell and applies the normal cell selection procedure. Timer
T3122 is reset when a cell change occurs. The procedure is started as soon as
timer T3122 expires.
3) Random access failure

Huawei Technologies Proprietary

4-7
Signaling Analysis Manual
M900/M1800 Base Station Subsystem Chapter 4 Location Update Procedure

If random access failure occur, Timer T3213 is started. When it expires, the random
access procedure is attempted again. The location updating procedure is aborted if
random access fails twice successively.
4) RR connection failure
The procedure is aborted.
5) T3210 timeout
The procedure is aborted, and the RR connection is terminated.
6) RR released before the normal end of procedure
The procedure is aborted.
7) Location updating rejected, due to cause except 2/3/6/11/12/13
MS waits for release of the RR connection. In cases 4~7 and for repeated failures
as defined in case 3, MS proceeds as follows. Timer T3210 is stopped if still running.
The RR connection is released if timer T3210 expires. The attempt counter is
incremented by 1. The next actions depend on LAI and the value of the attempt
counter.

Case 1: The update status is "UPDATED", and the stored LAI is equal to the one
received on the BCCH from the current serving cell. The attempt counter is smaller
than 4.

In case 1, MS shall keep the update status to "UPDATED". The MM IDLE sub-state
after RR connection release is "NORMAL SERVICE". MS shall memorize the
location updating type used in the location updating procedure. It shall start timer
T3211 when the RR connection is released. When timer T3211 expires, the location
updating procedure is triggered again with the memorized location updating type.

Case 2: Either the update status is different from "UPDATED", or the stored LAI is
different from the one received on the BCCH from the current serving cell, or the
attempt counter is greater or equal to 4.

In case 2, MS shall delete any LAI, TMSI and ciphering key sequence number
stored in SIM, set the update status to "NOT UPDATED" and enter the MM IDLE
sub-state "ATTEMPTING TO UPDATE" when the RR connection is released. If the
attempt counter is smaller than 4, MS shall start timer T3211. Otherwise, it starts
timer T3212.
X. Abnormal cases on network side

1) RR connection failure
If a RR connection failure occurs during a common procedure which is integrated
with the location updating procedure, the behavior of the network should be
according to the description of that common procedure.

Huawei Technologies Proprietary

4-8
Signaling Analysis Manual
M900/M1800 Base Station Subsystem Chapter 4 Location Update Procedure

If there is no other common procedure integrated, the location updating procedure


towards MS shall be aborted.
2) Protocol error
If the LOCATION UPDATING REQUEST message is received with a protocol error,
the network shall, if possible, return a LOCATION UPDATING REJECT message
with one of the following causes.
z Cause 96: Mandatory IE error
z Cause 99: IE non-existent or not implemented
z Cause 100: Conditional IE error
z Cause 111: Protocol error, unspecified
After sending the response message, the network will start the channel release
procedure.

4.3 Internal Handling of BSC

The location updating procedure is a general procedure for three purposes: normal
location updating, periodic updating and IMSI attach.

The BSC retrieves the periodic location updating period from the “T3212” field in the
[System information table] and sends it to the MS through the SYSTEM
INFORMATION TYPE 3 message.

The BSC sends a LOCATION UPDATING REQUEST message to the MSC to set
up an SCCP connection over interface A. This message includes the CGI of the
serving cell. See [BSC Cell Table] for the CGI.

Huawei Technologies Proprietary

4-9

You might also like