You are on page 1of 90

CDMA2000

CDMA

CDMA2000 1X

CDMA

Traffic is terminated

Release order

Initialization State

Bit rate : 1200bps

Pilot Detection

Sync

(Acquired Pilot)
Sync Channel

Paging


All PN Offsets

Ec/Io

1. Pilot Searcher Scans the Entire Range of PNs

-20
Chips 0
PN 0

32K
512

SYNC CHANNEL MESSAGE

2. RAKE
PN, Walsh 32,

Active Pilot

Handset

Rake Receiver
F1 PN168 W32

RF
x

LO

F2 PN168 W32

Rake Fingers

F3 PN168 W32
Srch PN??? W0

Reference PN

98/05/24 23:14:09.817 [SCH]


Sync Channel Message
MSG_LENGTH = 208 bits
MSG_TYPE = Sync Channel Message
P_REV = 3
MIN_P_REV = 2
SID = 179
NID = 0
PILOT_PN = 168
Offset Index
LC_STATE = 0x0348D60E013
SYS_TIME = 98/05/24 23:14:10.160
LP_SEC = 12
LTM_OFF = -300 minutes
DAYLT = 0
PRAT = 9600 bps
RESERVED = 1

SYNC CHANNEL -- Sync Channel Msg


protocol_rev = 6
chan_type = 0 (Sync)
chan
sc_msg
gen
msg_type = 1 (Sync)
sync
p_rev = 6
min_p_rev = 1
sid = 2236 (0x8bc)
nid = 113 (0x71)
pilot_pn = 188 (0xbc)
lc_state[HI] = 507
lc_state[LO] = 3582174253
sys_time[HI] = 1
sys_time[LO] = 4022462865
lp_sec = 13
ltm_off = 18
daylt = 1
prat = 0
cdma_freq = 29 (0x1d)
ext_cdma_freq = 29 (0x1d)

Protocol revision level used by the system


1:IS95, 2:IS95A, 3:TSB74, 4,5:IS95B, 6:IS95C
The prat means the paging rate of the paging channel
0 : 9600bps , 1 : 4800bps


System parameter message
Extended system parameter message

CDMA channel list

Overhead

Extended Channel list message

Message

Access parameter message

Transmissio
n

Neighbor list message


Extended neighbor list message

Channel assignment message


Extended channel assignment message
General page message

Page
Message


method. etc
PAGING CHANNEL -- System Parameters Msg
protocol_rev = 6
chan_type = 1 (Paging)
sysparm
pilot_pn = 188 (0xbc) (12032 PN chips)
config_msg_seq = 6
sid = 2236 (0x8bc) System identification
nid = 113 (0x71) Network identification
reg_zone = 1 (0x1) Registration zone number
total_zones = 2
zone_timer = 1 (2 Minutes)
mult_sids = 1
mult_nids = 1
base_id = 2 (0x2)
base_class = 0 (Public Macrocellular System)
page_chan = 1 paging channel #
max_slot_cycle_index=25.12sec periodic paging slot
monitor
home_reg = 1
for_sid_reg = 1
for_nid_reg = 1
power_up_reg = 1
power_down_reg = 1
parameter_reg = 1
reg_prd = 64 (5242.88 Seconds) 2 ^ (reg_prd /4)*
80ms
base_lat = 539805

base_long = 1829097
reg_dist = 0 (0x0) (Distance Based Registration
DISABLED)
srch_win_a = 9 (80 PN Chips)
srch_win_n = 10 (100 PN Chips)
srch_win_r = 10 (100 PN Chips)
nghbr_max_age = 1
pwr_rep_thresh = 2
pwr_rep_frames = 7 (56 Frames)
pwr_thresh_enable = 1
pwr_period_enable = 0
pwr_rep_delay = 5
rescan = 0
t_add = 28 -14dB
t_drop = 32 -16dB
t_comp = 5 2.5dB
t_tdrop = 3 4sec
ext_sys_parameter = 1
ext_nghbr_list = 0
gen_nghbr_list = 1
----------------------------------------------------------------------

Number of registration zones to be retained


The base station shall set this field to the number
of
registration zones the mobile station is to retain
for
purposes of zone-based registration
Zone Timer Length
(1,2,3,4,5,6,7) (1,2,5,10,20,30,45,60)minutes

PWR_REPORT DELAY
The period that mobile stations wait following a
Power
Measurement Report Message before restarting
frame
counting for power control purposes.
The base station shall set this field to the power
report
delay value, in units of 4 frames

Multiple SID/NId Storage Indicator


If mobile stations may store entries of
SID_NID_LIST
containing different SIDs(OR NIDs), the base
station
shall set this field to 1

RESCAN
If mobile stations are to re-initialize and reacquire the
system upon receiving this message, the base
station
shall set this field to 1

Neighbor MAX Age


The BS shall set this field to the maximum AGE
value
beyond which MS are to drop members from the
Neighbor Set
PWR_REP_FRAMES
2(PWR_REP_FRAMES/2) X 5 frames is the number of
frames
over which mobile stations are to count frame
errors by
Power Report Measurement Message. If
PWR_PERIOD
ENALE equals 0, the MS doesnt uses periodic


BSIMSIH/O
PAGING CHANNEL -- Extended System Parameters Msg
protocol_rev = 6
chan_type = 1 (Paging)
ext_sysparm
pilot_pn = 188 (0xbc)
config_msg_seq = 6.
delete_for_tmsi = 0
pref_msid_type = 3
mcc = 349 (0x15d) Mobile Country Code
imsi_11_12 = 99 11th and 12th digits of the imsi
tmsi_zone_len = 0.
-------------------------------------------------imsi_t_supported = 0.
p_rev = 6
min_p_rev = 1.
soft_slope = 0
add_intercept = 0
drop_intercept = 0
packet_zone_id = 0
max_num_alt_so = 0
reselect_included = 0
pilot_report = 0
nghbr_set_entry_info = 0
nghbr_set_access_info = 0
qpch_supported = 0
-----------------------------------------------------------------------------------

Preferred ACH Mobile Station Identifier Type


The MS is to use on the Access Channel using the
corresponding to the type of MSID
0: imsi_S and ESN, 1: ESN 2: imsi, 3: imsi and ESN
This parameters are used in the Dynamic H/O
The BS shall set this field to 1 if the MS is to report
t
h
e
additional pil ots which have pilot strengths
e
x
c
e
e
d
i
n
g
T_ADD in all Access Channel messages. The BS
s
h
a
l
l
s
e
t
this field to 0 if the mobile station is to report the
additional pil ots which have pilot strengths
e
x
c
e
e
d
i
n
g
T_ADD only in the Origination Message and Page
* imsi
Response Message.
MCC

MNC

MSIN

3 digits

NMSI
IMSI (15 digits)

MCC
MNC
MSIN
NMSI
IMSI

Mobile Country Code


Mobile Network Code
Mobile Station Identifier Number
National Mobile Station Identity
International Mobil Station Identity


CDMAI
DLEFA.Hash

PAGING CHANNEL -- CDMA Channel List Msg


protocol_rev = 6
chan_type = 1 (Paging)
chan
pc_msg
gen
prot_disc = 0
msg_id = 4
chnlist
pilot_pn = 188 (0xbc)
config_msg_seq = 6
num_freq = 1 (0x1)
cdma_freq[0] = 29 (0x1d)

Configuration Message Sequence


When the mobile station receives a page message, it
s
h
a
l
l
compare the configuration message sequence number,
CONFIG_MSG_SEQr, to CONFIG_MSG_SEQs. If the
comparison results in a mismatch, then the MS shall
s
e
t
CONFIG_ MSG_SEQs to CONFIG_MSG_SEQr.
CDMA Channel frequency assignment
The base station shall set each occurrence of this field
t
o
the CDMA channel number corresponding to the
C
D
M
A
frequency assignment for that CDMA Channel

29

29

1011

1011

363

363

404

PAGING CHANNEL -- Access Parameters Msg


accparm
pilot_pn = 188 (0xbc)
acc_msg_seq = 1.
acc_chan = 0 The number of Access channel
nom_pwr = 0
init_pwr = 5
pwr_step = 6
num_step = 5
max_cap_sz = 3 Maximum ACH Msg capsule size
pam_sz = 3 Access Channel preamble length.
psist_0_9 = 0
psist_10 = 0 test mobile station
psist_11 = 0 emergency mobile station
---------------------------------------------------------psist_15 = 0
msg_psist = 0
reg_psist = 0
probe_pn_ran = 0
acc_tmo = 5 Acknowledgement Timeout
probe_bkoff = 0
bkoff = 1
max_req_seq = 2
max_rsp_seq = 2.
----------------------------------------------------------

The base station shall set this field to one less than the
number of Access Channels associated with this Paging
Channel.
Mobile stations are to wait after the end of an Access CH
transmission before determining that the base station did
not receive the transmission, in units of 80 ms.
Probe_bkoff : Access Channel probe backoff range
BKOFF: Access Channel probe sequence backoff range
MAX_REQ_SEQ: Maximum number of access probe
sequences for an Access Channel request
MAX_RSP_SEQ: Maximum number of access probe
sequences for an Access CH response Channel request
PROBE_PN_RAN: Time randomization for Access CH
probes

Maximum access time


Inter Access Probe
9 TA = 0.08 x (2 + ACC_TMO) = 0.08 x 7 = 560 ms
9 RT = 0 = 1 + probe_BKOFF = 1+ 0 = 1 slot = 0.16 sec
9 Probe Num = 1 + Num_STEP = 1 + 5 = 6
9 1 Access Seq. Time = (560 + 160 ) x 6 + 560 = 4.88 sec
Inter Access Sequence
9 RS = 1+BKOFF = 1 + 1 = 2 slot = 2 x 0.16 sec = 0.32 sec
9 PD = 0
9 MAX # of Step = 2
Access Attempt total time = (4.88 x 2) + (0.32 x 1) = 10.08
sec


Idle20
PAGING CHANNEL -- Neighbor List Msg
protocol_rev = 6
chan_type = 1 (Paging)
nghbr
pilot_pn = 188 (0xbc)
config_msg_seq = 6
pilot_inc = 2
num_nghbrs = 19 (0x13)
nghbr[0]
nghbr_config = 0 (Config Same) .
nghbr_pn = 356 (0x164)
nghbr[1]
nghbr_config = 0 (Config Same)
nghbr_pn = 454 (0x1c6)
nghbr[2]
nghbr_config = 0 (Config Same)
nghbr_pn = 274 (0x112)
nghbr[3]
nghbr_config = 0 (Config Same)
nghbr_pn = 20 (0x14)
nghbr[4]
nghbr_config = 0 (Config Same)
-----------------------------------------------------

The unit which is used by MS when the MS searches


t
h
e
neighbor list which is with in a Remain Set
This BTS use the same CDMA frequency assignment
on the
neighbor base station
Neighbor for the messages sent on the Paging
C
h
a
n
n
e
l
,
if BAND_class is equal to 00001, the BS shall send
the Extended Neighbor List Message and may also
s
e
n
d
the General Neighbor List Message. If BAND_class is
equal to and 00000, the BS shall send the
N
e
i
g
h
b
o
r
List Message, and may also send the General
N
e
i
g
h
b
o
r
List Message. If the BS is sending the Neighbor List
Message, it shall send it at least once per T1b
s
e
c
o
n
d
s
.
Band class
Description
T1b: Maximum period between subsequent
0
800 MHz Cellular Band
transmission
of
an overhead
message 1.8
on the
paging
by Band
the
1
to 2.0
GHzch
PCS
BS:1.28s
6
2 GHz IMT-2000 Band


MS

BS
General Page Message
Page Response Message
Origination Message

Paging &Access
Channel

BS_ACK_Order
NULL_Traffic
Extended Ch Assignment Message
NULL_Traffic
BS_ACK_Order

Traffic Channel

Power Control
Service Connect Msg
Service Connect Completion Msg

PAGING CHANNEL -- General Page Msg


protocol_rev = 6
chan_type = 1 (Paging)
gen_page
config_msg_seq = 6 In units of 64
acc_msg_seq = 1
class_0_done = 1
class_1_done = 1
tmsi_done = 1
ordered_tmsis = 0
broadcast_done = 1
add_length = 0
num_pages = 1 (0x1)
gen_page[0]
page_class = 0
page_subclass = 3 imsi11_12,MCC.imsi_S
rec
format3
msg_seq = 0
mcc = 349 (0x15d) SKT 450
imsi_11_12 = 99 SKT:00 WCDMA 05
imsi_s[HI] = 3
imsi_s[LO] = 2219332107
special_service = 1
service_option = 3 (0x3) EVRC

MCC(Mobile Country Code)349 349+111=450


imsi_11_12(MNC): 99 99+11=00
If the SPECIAL_SERVICE field is included in the
p
a
g
e
type specific fields, and is set to 1, the BS shall set
t
h
i
s
field to the service option code, corresponding to the
requested service option.
* imsi_S: A 10-digit number derived from the imsi

Mobile Station recognize that the MIN


number in this message is itself

Access Channel -- Page Response Message


-------------------------------------------------------msid_type: 3
msid_length: 9
esn: 1071129974(0x3FD82576)
imsi_class: 0
imsi_class_0_type: 0
reserved: 0
imsi_s[hi]: 0
imsi_s[lo]: 137485210
-> min : 1192006033 (0331193229)
--------------------------------------------------------num_add_pilots: 1
pilot_pn_phase: 9472
pilot_strength: 24
access_ho_en: 0
access_attempted: 0
mob_term: 1
slot_cycle_index: 2
mob_p_rev: 6
scm: 42
request_mode: 1
service_option: 3
---------------------------------------------------------

IMSI_S equals MIN number.


MS monitors its slot every 5.12 sec
0: 1.28 sec
1: 2.56 sec
2: 5.12 sec
3:
10.24 sec
4: 20.48 sec
5:40.96 sec .
MS selects smaller value between this value and
max_slot
cycle_index
Request
mode
binary

Description

000

Reserved

001

CDMA Only

010

Wide Analog Only

011

Either wide analog or CDMA only

100

Narrow analog only

101

Either narrow analog or CDMA only

110

Either narrow analog or wide analog only

111

Narrow analog or wide analog or CDMA

Paging Channel order message


PROTOCOL_REV : 6
Order
msg_type: 7
ack_seq: 0
msg_seq: 1
ack_req: 0
valid_ack: 1
addr_type: 2
addr_length: 5
imsi_class: 0
imsi_class_0_type: 0
reservedD: 0
imsi_s[hi]: 0
imsi_s[lo]: 137485210
-> min : 1192006033 (0331193229)
order: 16
add_length_rec: 0
Base Station Acknowledgement Order

This message is the response Page response message.


There are many kinds of order in 95C. If some
message
contains ack_req as 1, this means that message
needs
some response message and this order message is
the
one of the response message

ACCESS CHANNEL -- Origination Msg


chan
ac_msg
gen_ac
msg_type = 4 (Origination)
-------------------------------------------------------------------active_pilot_strength = 16
first_is_active = 1
first_is_pta = 0
num_add_pilots = 1
var[0]
pilot_pn_phase = 24962 (0x6182)
pilot_strength = 16
access_ho_en = 0
access_attempted = 0
mob_term = 1
slot_cycle_index = 2
mob_p_rev = 6
scm = 42
request_mode = 1 System mode Indicator
special_ser ice = 1
service_option = 33 (0x21) Packet Data Service
pm = 0 Voice Privacy Mode Indicator

digit_mode=0 Digit Mode Indicator


more_fields = 0
num_fields = 4 dialed digits # 1501
chari[0] = 1
chari[1] = 5
chari[2] = 10
chari[3] = 1
nar_an_cap = 0
paca_reorig = 0
return_cause = 0.
more_records = 0
paca_supported = 0
num_alt_so = 0
drs = 1 Data Ready to Send
uzid_incl = 0 User Zone Identifier
ch_ind = 1 Channel Indicator(Fundamental Channel)
sr_id = 1 Orthogonal Transmit Diversity supported indicator.
otd_supported = 0 orthogonal transmit diversity
qpch_supported = 1 Quick Paging Channel
enhanced_rc = 1 Radio Configuration class2
for_rc_pref = 3 Forward Radio Configuration preference
rev_rc_pref = 3 Reverse FCH Radio Configuration
fch_supported = 1 Fundamental Channel supported indicator
-------------------------------------------


Request mode
binary
000
001
010
011
100
101
110
111

Description
Reserved
CDMA Only
Wide Analog Only
Either wide analog or CDMA only
Narrow analog only
Either narrow analog or CDMA only
Either narrow analog or wide analog only
Narrow analog or wide analog or CDMA

Service option
SO
1
2
3
4
6
25
33

Service Type
Basic Variable Rate Voice (8 Kbps)
Mobile station Loopback (8 Kbps)
Enhanced Variable Rate Voice(8Kbps)
Asynchronous Data (9.6 Kbps)
Short Message Service (Rate set 1)
95B MDR Packet Data Service
(RS2 forward, RS2 reverse)
IS-2000 High speed Packet Data Service

Dial number
To originate the call using the binary
representation
of DTMF digits, the mobile station shall set this
field
to 0. To originate the call using ASCII
characters,
DIgit
Code
DIgit
Code
the mobile station shall set this field to 1.
1
0001
7
0111
2
0010
8
1000
3
0011
9
1001
4
0100
0
1010
5
0101
*
1011
6
0110
#
1100
All other codes are reserved

CH_IN
Channel Requested
D
Channel
indicator
000
Reserved
001
Fundamental channel
010
Dedicated Control channel
Fundamental channel & Dedicated control
011
channel

PAGING CHANNEL -- Extended Channel Assignment


Msg
protocol_rev = 6 (IS2000)
chan_type = 1 (Paging)
--------------------------------------ext_chnasn
num_chns = 1 (0x1)
chns[0]
gen
hdr
ack_seq = 7
msg_seq = 2
ack_req = 0
valid_ack = 0
addr_type = 2 imsi
addr
type2
imsi
imsi_class = 0 Use 15digits
i_class
zero
imsi_class_0_type=3 imsi_S, imsi_11_12,
MCC
type
three
mcc = 349 (0x15d)
imsi_11_12 = 99

imsi_s[HI] = 0
imsi_s[LO] = 137485978
assign_mode = 0 Traffic Channel Assignment
freq_incl = 0
default_config = 4 Default Configuration
bypass_alert_answer = 0
num_pilots = 0.
granted_mode = 0
frame_offset = 0
encrypt_mode = 0
pilot_rec[0]
pilot_pn = 16 (0x10)
pwr_comb_ind = 0 Power Control Symbol Combing
Indicator
code_chan = 48
is2000_incl = 1
for_fch_rc = 3 Forward Fundamental Channel Radio Config.
rev_fch_rc = 3 Reverse Fundamental Channel Radio
Config.
fpc_fch_init_setpt = 56 7dB, unit: 0.125dB
fpc_subchan_gain = 0 unit: 0.25dB.
rl_gain_adj = 0 reverse traffic CH power. In unit of 1dB
fpc_fch_fer = 2 1%, Target Frame Error Rate
fpc_fch_min_setpt = 16 2dB, in unit of 0.125dB
fpc_fch_max_setpt = 96 12dB, in unit of 0.125dB
rev_fch_gating_mode = 0


Address Type
0: imsi_S
3:TMSI
Reserved

1: ESN
5: Broadcast

imsi_class_0_Type
0: imsi_S
2: ISMI_S and MCC
MCC

2: imsi
others:

1:imsi_S and imsi_11_12


3:imsi_S, imsi_11_12,

Traffic Channel Assignment Mode


Base Station shall set this field corresponding to
the
assignment mode for this assignment. The
included
CH_IN
field in a channel assignment will be changed
Channel Requested
D
according
to the assignment mode
000
Traffic Channel Assignment
001
Paging Channel Assignment
010
Acquire Analog System
011
Analog Voice Channel Assignment
010
Enhanced Traffic Channel Assignment
All other values are reserved

Default Configuration


Granted Mode
00 : Indicate that the MS is to use an initial service configuration consisting of the multiplex
o
p
t
i
o
n
a
n
d
radio configuration defined by the DEFAULT_CONFIG field for the For/Rev-Traffic Channels,
a
n
d
t
o
indicate that service negotiation may take place before the BS sends the first Service Connect
M
e
s
s
a
g
e
o
O
b
o
O
b

01 : Indicate that the MS is to use an initial service configuration consisting of the default multiplex
p
t
i
o
n
and transmission rates corresponding to the service option requested by the MS either in the
r
i
g
i
n
a
t
i
o
n
Message or Page Response Message, and to indicate that service negotiation may take place
e
f
o
r
e
t
h
e
base station sends the first Service Connect Message
10: Indicate that the MS is to use an initial service configuration consisting of the default multiplex
p
t
i
o
n
and transmission rates corresponding to the service option requested by the MS either in the
r
i
g
i
n
a
t
i
o
n
Message or Page Response Message, and to indicate that service negotiation is not to take place
e
f
o
r
e
the base station sends the first Service Connect Message

Power Control Symbol Combining Indicator


If the FCH associated with this pilot will carry the same closed-loop power control subchannel bits
a
s
t
h
a
t
o
f
the previous pilot in this message, the BS shall set this field to 1; otherwise, 0
For_FCH_RC & Rev_FCH_RC
Default config=4, granted mode=0 => This value =3, default config 4, granted mode =2 => value
=1 or 2
FPC_FCH_INIT_SETPT
Initial Fundamental Channel outer loop Eb/Nt setpoint, in units of 0.125 dB

FORWARD TRAFFIC CHANNEL -- Power Control Msg


protocol_rev = 6
chan_type = 3 (Forward Traffic)
--------------------------------------------------------msg_type = 25 (Power Control)
--------------------------------------------------------pwr_cntl_step = 0 1dB, Close loop power control
use_time = 0 Not used
f pc_incl = 1
fpc_mode = 1
fpc_pri_chan = 0
fpc_olpc_fch_incl = 1
fpc_fch_fer = 2 1% ,fch target FER
fpc_fch_min_setpt = 16 2dB(0.125dB unit)
fpc_fch_max_setpt = 96 12dB(0.125dB unit)
fpc_olpc_dcch_incl = 0
num_sup = 0 supplemental channel total number
fpc_thresh_incl = 1
fpc_setpt_thresh = 24 3dB
fpc_thresh_sch_incl = 1
fpc_setpt_thresh_shc = 24 3dB
rpc_incl = 0

Power Control Step


0: 1dB, 1: 0.5dB, 2: 0.25dB
Forward power control operation mode indicator

Power Control subchannel Indicator


Indicate the primary inner loop estimation is
performed
on the Forward FCH or Dedicated Control CH
channel
Value
FPC_FCH_FER
00000
00001 - 10100
10101 - 11001
11010 -11110
11111

Frame Error Rate


0.2 %
0.5% - 10% (in units of 0.5%)
11% - 15% (in units of 1.0%)
18% - 30% (in units of 3.0%)
Resrved

REVERSE TRAFFIC CHANNEL -- Service Request Msg


protocol_rev = 6 (IS2000)
chan_type = 4 (Reverse Traffic)
chan
rtc_msg
gen
msg_type = 12 (Service Request)
srv_req
hdr
ack_seq = 0
msg_seq = 0
ack_req = 1
encryption = 0
serv_req_seq = 0
req_purpose = 2 service configuration Request.
Cfg
for_mux_option = 1 (0x1)
rev_mux_option = 1 (0x1)
for_rates = 240
rev_rates = 240
num_con_rec = 1 service option connection record
con[0]
con_ref = 0 service option connection reference
service_option = 33 (0x21) High packet Data
Service

for_traffic = 1 Primary for_traffic CH


rev_traffic = 1 Primary rev_traffic CH
ui_encrypt_mode = 0 User Information Encryption disabled
sr_id = 1Ser ice Reference Indicator
rlp_info_incl = 1
rlp_blob_len = 5 RLP information.Block of bits length
rlp_blob[0] = 46 Radio Link Protocol block of bits.
rlp_blob[1] = 219
rlp_blob[2] = 101
rlp_blob[3] = 50
rlp_blob[4] = 152
fch_cc_incl = 1
fch_frame_size = 0
for_fch_rc = 3 Forward Fundamental CH Radio Configuration 3
rev_fch_rc= 3 Reverse Fundamental CH Radio Configuration 3
dcch_cc_incl = 0 DCCH Channel Configuration included
indicator
for_sch_cc_incl = 1 F-SCH Channel Configuration included
indicator
num_for_sch = 1 Number of Forward Supplemental Channels
for_sch[0]
for_sch_id = 0
for_sch_mux = 2337 (0x921) Max 153kbps support
sch_chn_cfg
sch_rc = 3
coding = 1
rev_sch_cc_incl = 0


Request Purpose

Fundamental CH frame size supported


indicator
The MS shall set this field to 1 to propose that
the
5ms frame size in addition to the 20 ms frame
size is
used for the proposed service configuration;
Forward Supplemental Channel Multiplex
Option

Service Option
Ox21(33) means High Speed Packet Data Service.
I
n
1X system, this service option is used for high
s
p
e
e
d
Forward Traffic Channel Traffic Type
Forward Supplemental Channel Multiplex
Option

Reverse Traffic Channel Traffic Type


Similar to Forward Traffic Channel Traffic Type

FORWARD TRAFFIC CHANNEL -- Service Connect Msg


protocol_rev = 6 (IS2000)
chan_type = 3 (Forward Traffic)
-----------------------------------------------------msg_type = 20 (Service Connect)
encryption = 0
use_time =
action_time = 0
serv_con_seq = 0
cfg
for_mux_option = 1 (0x1)
rev_mux_option = 1 (0x1)
for_rates = 240
rev_rates = 240
num_con_rec = 1
con[0]
con_ref = 0
service_option = 33 (0x21) high speed data service
for_traffic = 1
rev_traffic = 1
ui_encrypt_mode = 0
sr_id = 1
rlp_info_incl = 0
fch_cc_incl = 1
fch_frame_size = 0

for_fch_rc = 3
rev_fch_rc = 3
dcch_cc_incl = 0
for_sch_cc_incl = 1
num_for_sch = 1
for_sch[0]
for_sch_id = 0
for_sch_mux = 2337 (0x921) Max 153.6 kbps
support
sch_chn_cfg
sch_rc = 3
coding = 1
rev_sch_cc_incl = 0
non_neg_cfg
fpc_incl = 1
reference power control message
fpc_pri_chan = 0
fpc_mode = 1 reference power control message
fpc_olpc_fch_incl = 1
fpc_fch_fer = 2 1% target fer
fpc_fch_min_setpt = 16 2 dB, 0.125 dB unit
fpc_fch_max_setpt = 96 12 dB, 0.125 dB unit
fpc_olpc_dcch_incl = 1
fpc_dcch_fer = 2 1% target fer
fpc_dcch_min_setpt = 16 2 dB. 0.125 dB unit
fpc_dcch_max_setpt = 96 12 dB, 0.125 dB unit
gating_rate_incl = 0
lpm_ind = 0


Forward Fundamental and Dedicated
Control
Channel multiplex option
This field indicates the multiplex option for the
forward FCH and DCCH.
Forward & Reverse Rate set
240=> 11110000
This means 9600, 4800,2400,1200 bps support
for forward and reverse rate
SCH multiplex option
reference service request message
2337(0x912) means rate set 1 and MuxPDU
Type 3 and Double
Coding Type Indicator
0 means that the convolution coding will be used
for data for transmission and 1 means that turbo
coding will be used
Forward Link Power Control parameter
included indicator
If the forward power control related information is
included in this message, the BS shall set this to
1; otherwise, the BS shall set this field to 0.

Power Control subchannel indicator


The BS shall set this field to 0 if the MS is to
perform the primary inner loop estimation on the
received Forward Fundamental Channel and the
BS is to multiplex the Power Control
Subchannel on Forward Fundamental Channel;
the BS shall set this field to 1 if the Mobile
station is to perform the primary inner loop
estimation on the received Forward Dedicated
control Channel and the BS is to multiplex the
Power Control Subchannel on Forward Dedicated
Control Channel. In Samsung system, it doesnt
use the dedicate channel, so this value is zero.

Reverse TCH -- Service Connect Completion Msg


protocol_rev : 6
Service connect completion
msg_length: 6
msg_type: 14
ack_seq: 1
msg_seq: 2
ack_req: 1
encription: 0
serv_con_seq: 0

. Sync Channel


MS

BS
Pilot Strength Measurement Message
(Universal) Handoff Direction
Message
Handoff Completion Message
(Extended) Neighbor List Update
Message
T-Comp x 0.5 dB

Pa
T-Add
T-Add
T-drop
T-Drop

Time
1
Neighbor Set

2 3

Candidate
Set

4
Active Set

5 6

7
Neighbor Set


MS sends if there is some events for Pilot add or Pilot drop
REVERSE TRAFFIC CHANNEL -- Pilot Strength Measurement
Msg
protocol_rev = 6 (IS2000)
chan_type = 4 (Reverse Traffic)
Pilot PN Phase
chan
PILOT_ARRIVAL+(64*PILOT_PN))mod 215
rtc_msg
Pilot_pn_phase= 24960 pilot_pn = 390
gen
PILOT_PN_PHASE=(3+(64*390))mod 215 = 24963
msg_type = 5 (Pilot Strength Measurement)
PN 390 + 3chip delay
pil_str
-------------------------------------------------------- Keep Pilot Indicator
ref_pn = 16 (0x10) reference pn
If the handoff drop timer corresponding to the pilot
pilot_strength = 18 -9dB (-0.5*pilot_strength)
u
s
e
d
keep = 1 keep indicator(1:keep, 0:drop)
by the mobile station to derive its time reference has
num_msr = 3 (0x3)
expired, the mobile station shall set this field to 0;
meas[0]
otherwise, the mobile station shall set this field to 1
pilot_pn_phase = 24962 (0x6182 ) PN390
pilot_strength = 16 -8dB
keep = 1
PN 16 and PN 184 are the same BTS and PN 34 is
meas[1]
the
pilot_pn_phase = 2198 (0x896) PN 34
other sector. Hence there are 2 BTS and 3 sector
pilot_strength = 26 -13dB
=> 3waysoftsofter handoff area
keep = 1
And all of the keep fields within the message are 1,
meas[2]
so
pilot_pn_phase = 11776 (0x2e00) 184
we know this is the add procedure
pilot_strength = 28 -14dB
keep = 1


BS determines the pilots for handoff and sends this information by UHDM or
HDM

FORWARD TCH--Universal Handoff Direction Msg


protocol_rev = 6 (IS2000)
chan_type = 3 (Forward Traffic)
------------------------------------------------msg_type = 34 (Universal Handoff Direction)
uhdm_msg
hdr
ack_seq = 1
msg_seq = 0
ack_req = 1
encryption = 0
use_time = 0
hdm_seq = 2
parms_incl = 0 p_rev & serv_neg_type nclude
indicator
search_included = 1 pilot search parameter include
indicator
srch
srch_win_a = 9 80chip
srch_win_n = 10 100chip
srch_win_r = 10 100chip
t_add = 28 -14dB,pilot detection threshold
t_drop = 32 -16dB, pilot drop threshold
t_comp = 5 2.5dB
t_tdrop = 3 Drop Timer Value, 4Sec
soft_slope = 0
add_intercept = 0
drop_intercept = 0

extra_parms = 0
use_pwr_cntl_step = 0 1dB
clear_retry_delay = 0
sch_incl = 0 SCH relation parameter include indicator
fpc_subchan_gain = 27 6.75dB(0.25dB unit)
use_pc_time = 0
ch_ind = 5 channel indicator
num_pilots = 4 the number of pilots included this message
srch_offset_incl = 0 target pilot channel search window offset
include
pilot[0]
pilot_pn = 16 (0x10)
add_pilot_rec_incl = 0 additional pilot information included
indicator
pwr_comb_ind = 0 Power control symbol combining indicator
code_chan_fch = 48 (0x30)
qof_mask_id_fch = 0 Quasi-orthogonal function index on
FCH
pilot[1]
pilot_pn = 184 (0xb8)
add_pilot_rec_incl = 0
pwr_comb_ind = 1
code_chan_fch = 48 (0x30)
qof_mask_id_fch = 0
-------------------------------------------------------rev_fch_gating_mode = 0


Search Window Size

Channel Indicator

T_Tdrop: Drop Timer Value

Quasi-orthogonal function index on the


Fundamental Channel

Power Control Step Size Indicator


The Power Control Step Size used by MS
Forward Power Control Subchannel relative
Gain
Power level of the forward link power control
Subchannel relative to that of 20 ms frames at a
9.6k

REVERSE TRAFFIC CHANNEL -- Handoff Completion


Msg
protocol_rev = 6 (IS2000)
chan_type = 4 (Reverse Traffic)
chan
rtc_msg
gen
msg_type = 10 (Handoff Completion)
comp
hdr
ack_seq = 0
msg_seq = 3
ack_req = 1
encryption = 0
last_hdm_seq = 2
num_pilots = 4 Pilot number in HCM
pilot_pn[0] = 16 (0x10) master pilot pn
pilot_pn[1] = 184 (0xb8) 2nd pilot pn
pilot_pn[2] = 390 (0x186) 3rd pilot pn
pilot_pn[3] = 34 (0x22) 4th pilot pn

Current
Cell

HCM

HCM

HDM is transmitted from master sector but


HCM Message is transmitted to all of the
active sets

Ne
w
Cell


MS shall update the neighbor list on receiving this message
FORWARD TCH -- Extended Neighbor List Update Msg
protocol_rev = 6 (IS2000)
chan_type = 3 (Forward Traffic)
chan
ftc_msg
gen
msg_type = 26 (Extended Neighbor List Update)
ext_nlu
hdr
ack_seq = 3
msg_seq = 1
ack_req = 1
encryption = 0
pilot_inc = 2
nghbr_srch_mode = 0
srch_win_n = 10
use_timing = 0
num_nghbr = 20 The number of Neighbor list message
nghbr[0]
nghbr_pn = 54 (0x36)
nghbr[1]
nghbr_pn = 222 (0xde)
nghbr[2]
----------------------------------------------------------------

Neighbor Search Mode

If Search mode is included , Nghbr_Srch_Mode=2 or 3

Search Window Neighbor


Default search window size to be used by the mobile
station for its Neighbor Set.
The MS uses the default search window size for all
pilots
in its Neighbor Set when the search window is not
specified for each pilot individually
(Nghbr_Srch_Mode
is set to a value other than 10 and 11)


MS

BS
CF Search Request Message
CF Search Response Message

Traffic Channel

CF Search Report
Message
CF Search Control Message

Handoff Direction Message

H/O Procedure

Handoff Completion Message


Neighbor List Update Message

Call Termination

Release Order

CF

F-TCH -- Candidate Frequency Search Request


Msg
msg_type = 27 (Candidate Frequency Search Request)
----------------------------------------------------cfsrm_seq = 2
search_type = 3
search_period = 2 (2sec)
search_mode = 0
mode
mod_0
band_class = 0
cdma_freq = 779 (0x30b)
sf_total_ec_thresh = 31 11111 , not used
sf_total_ec_io_thresh = 31 :11111, not
used
diff_rx_pwr_thresh = 0
min_total_pilot_ec_io = 0
cf_t_add = 23
tf_wait_time = 3
cf_pilot_inc = 2
cf_srch_win_n = 10
cf_srch_win_r = 0
pilot_update = 1
num_pilots = 12
cf_nghbr_srch_mode = 0
pilot_rec[0]
nghbr_pn = 188 (0xbc)
search_set = 0

Search Command
Meaning
search type
00
Directs the MS to stop any periodic search in progress
01
Directs the MS to perform a single search
10
Directs the MS t perform a periodic search
11
Reserved
Successive Searching Time

Search Mode
Meaning
search mode
0000
Searches for multiple CDMA pilots on a candidate frequency
0001
Search for analogue channels
0010 ~ 1111
Reserved

CF
Serving Frequency total pilot Ec(Ec/Io) threshold
If the MS is not to use the measurement of total Ec
(or Ec/Io) of the pilots in the Serving Frequency
Active Set in the CF periodic search procedure, the
BS shall set this field to 11111; otherwise,
(10 X log10 (total_ec_thresh) + 120) / 2
where total_ec_thresh is defined by the following rule:
the MS is not to visit the CDMA Candidate Frequency
to search for pilots if the total Ec of the pilots in the
Serving Frequency Active Set is greater than total_ec_
thresh
Minimum difference in received power
If the MS is to search for pilots on the CDMA CF
irrespective of the received power on the CF, the BS
shall set this field to 00000; otherwise
[ (minimum_power_diff + 30) / 2 ]
where minimum_power_diff is determined :
The MS is not to search for pilots on the CDMA CF
if (cand_freq_pwr - serving_freq_pwr) is less than
minimum_power_diff (in dB), where cand_freq_pwr is
the received power on the CDMA CF , in dBm / 1.23
MHz, and serving_freq_pwr is the received power on
the Serving Frequency, in dBm / 1.23 MHz.

Minimum total pilot Ec/ Io


If the MS is to attempt to demodulate the Forward
TCH irrespective of the strength of pilots in the Active
Set, the BS shall set this field to 00000; otherwise
( 20 X log10 total_pilot_threshold )
where total_pilot_threshold is defined by :
The MS is not to attempt to demodulate the FTCH if
the sum of Ec/Io of all pilots in the MSs Active Set is
less than total_pilot_threshold
Pilot detection threshold for the CDMA CF
To trigger the sending of the Candidate Frequency
Search Report Message during a periodic search of
the CDMA CF. The BS shall set this field to the pilot
detection threshold, expressed as an unsigned binary
number equal to (-2 X 10 X log10 Ec/Io)
CDMA Candidate Frequency total wait time
(max_wait_time /0.08 )
where max_wait_time is the maximum time, in
seconds, that the MS is to spend waiting for a period
of (N11m X 20) ms with sufficient signal quality on
the CDMA Target Frequency

CF
Pilot PN sequence offset index after handoff
Pilot PN sequence increment, in units of 64 PN
c
h
i
p
s
,
that the mobile station is to use for searching the
Remaining Set, after a handoff to the CDMA CF
i
s
successfully completed. The BS should set this
f
i
e
l
d
to the largest increment such that the pilot PN
sequence offsets of all its neighbor base stations
a
r
e
integer multiples of that increment
Pilot search parameter update indicator
If the MS is to change its pilot search parameters,
the BS shall set this field to 1
Meaning
search type
Search mode for Candidate Frequency
00
No search priorities or search windows specified
Search
01
Search priorities specified
Set
11
Search windows specified
10
Search windows and search priorities specified

Flag to indicate if the corresponding pilot is


to
be searched
If the MS should add the corresponding pilot to
its
Candidate Frequency search set the field set as

1FA
2FA
3FA
4FA
All of the active cell is border
cell, the BS sends CFSRQM

1FA
If MS searches the CF,
MS sends CFSRPM


CF
RTCH -- Candidate Frequency Search
Response Msg
protocol_rev = 6 (IS2000)
chan_type = 4 (Reverse Traffic)
chan
rtc_msg
gen
msg_type = 19 (Candidate Frequency
Search Response)
cfs_rsp
hdr
ack_seq = 3
msg_seq = 3
ack_req = 1
encryption = 0
last_cfsrm_seq = 2
total_off_time_fwd = 7
max_off_time_fwd = 7
total_off_time_rev = 7
max_off_time_rev = 7
pcg_off_times = 0
align_timing_used =0

Total time that the MS is off the FTCH/RTCH


The MS shall set this field to the MSs estimate of the total
number of frames or power control groups for which the
MS will need to suspend its current Forward Traffic hannel
processing in order to tune to the CF, to perform the
requested search, and to re-tune to the Serving Frequency.
If the MS requires multiple visits to the CF to complete the
requested search, the MS shall set this field to the total
number of frames (if PCG_OFF_TIME is set to 0) or power
control groups (if PCG_OFF_TIME is set to 1) for all visits
to the CF in a search period
Maximum time that the MS is off the FTCH/RTCH
Same to total_off_time_fwd excepting Maximum number of
frames
Indicator if off times are expressed in units of power
control groups
1: the units is expressed as power control group
0: the units is expressed as frames
Maximum time that the MS is off the FTCH/RTCH
The MS shall set this field to 1 if it will align the times of
its visits away from the SF, as requested by the BS

CF
CF
RTCH -- Candidate Frequency Search
Report Msg
protocol_rev = 6 (IS2000)
chan_type = 4 (Reverse Traffic)
chan
rtc_msg
gen
msg_type = 20 (Candidate Frequency
Search Report)
-----------------------------------------------last_srch_msg = 0
last_srch_msg_seq = 2
search_mode = 0
var
mod0
band_class = 0
cdma_freq = 779 (0x30b)
sf_total_rx_pwr = 10 -90dBm
cf_total_rx_pwr = 14 -90dBm
num_pilots = 1
pilot[0]
pilot_pn_phase = 1942 (0x796) PN
30
pilot_strength = 7 -3.5dB

Total received power on the Serving Frequency


The MS shall set this field to min (31, (total_received_power
+110) / 2 ), where total_received_power is the mean input
power received by the MS on the Serving Frequency, in dBm
/1.23 MHz
Indicates the total received power on the Target
Frequency or the Candidate Frequency
If this message is being sent to report an unsuccessful hard
handoff attempt, the MS shall include the total received
power on the Target Frequency; if this message is being
sent to report measurements on a CF, the MS shall include
the total received power on the CF. The MS shall set this
field to
min (31, ( (total_received_power + 110) / 2 ))
where total_received_power is the mean input power
received by the MS on the Target Frequency or the CF, in
dBm/1.23 MHz

CF
CF

FTCH -- Candidate Frequency Search


Control Msg
protocol_rev = 6 (IS2000)
chan_type = 3 (Forward Traffic)
chan
ftc_msg
gen
msg_type = 28 (Candidate Frequency
Search Control)
cfs_ctrl
hdr
ack_seq = 2
msg_seq = 5
ack_req = 1
encryption = 0
use_time = 0
action_time = 0
cfscm_seq = 2
search_type = 0

Action Time
If this field is set to 1, the BS shall set this field to the
System Time, in units of 80 ms (modulo 64), at which the
message is to take effect
Search Command
Meaning
search type
00
Directs the MS to stop any periodic search in progress
01
Directs the MS to perform a single search
10
Directs the MS t perform a periodic search
11
Reserved

FORWARD TRAFFIC CHANNEL -- Order Msg


protocol_rev = 6 (IS2000)
chan_type = 3 (Forward Traffic)
chan
ftc_msg
gen
msg_type = 1 (Order)
ftc_ord
gen
hdr
ack_seq = 4
msg_seq = 3
ack_req = 0
encryption = 0
use_time = 0
action_time = 0
order = 16 (Base Station Acknowledgement
Order)


MS

BS

Power Control Parameter Message


Supplemental Channel Request Message

SCH Assignment

Extended S Channel Assignment


Message
Power Measurement Report Message

SS Scheduling
T

T+260

80ms
Scheduling Period (260ms)

T+520

Guard Time (20ms)


This message indicates the way how to report the forward link quality to the BS
FORWARD TRAFFIC CHANNEL
-Power Control
Parameters Msg
protocol_rev = 6 (IS2000)
chan_type = 3 (Forward Traffic)
chan
ftc_msg
gen
msg_type = 10 (Power Control Parameters)
pwr_ctl
hdr
ack_seq = 0
msg_seq = 2
ack_req = 1
encryption = 0
pwr_rep_thresh = 2 2 frame
pwr_rep_frames = 2 10 frame
pwr_thresh_enable = 0 Disable threshold report
pwr_period_enable = 1 Enable Periodic report
pwr_rep_delay = 5 ,20 frame(4 frame unit)
AT this value, MS sends Power
Measurement Report Message to the BS
in the interval of every 30 frames ( 0.6sec)

Power Control Reporting threshold


The number of bad frames to be received in a
measurement
period on the channel
Power Control Reporting Frame Counter
(2(PWR_REP_FRAMES/2) x 5) frames
is the number of frames over which the mobile station
is to
count frame errors (2 -> 10 frames)
Threshold Report Mode Indicator
If the MS is to generate threshold Power Measurement
Report Messages, the base station shall set this field
to 1
Periodic Report Mode Indicator
If the MS is to generate periodic Power Measurement
Report Messages, the base station shall set this field
to 1
Power Report Delay
The period that MS waits following a Power
Measurement
Report Message before restarting frame counting


Through this message, BS determines which MS is selected for data service
Forward Traffic CH - Extended S Channel Assignment
Msg
chan_type = 3 (Forward Traffic)
------------------------------------------------msg_type = 35 (Extended Supplemental Channel
Assignment)
------------------------------------------------start_time_unit = 0
rev_sch_dtx_duration = 0
use_t_add_abort = 0 reverse use T_ADD indicator
use_scrm_seq_num = 0
add_info_incl = 0
rev_cfg_included = 0
num_rev_sch = 0 assigned reverse SCH #
for_cfg_included = 1 fsch configuration included
for_sch_fer_rep = 0
num_for_cfg_recs = 0
for_cfgs[0]
for_sch_id = 0 fsch identifier
sccl_index = 0 index of record in sch code list
for_sch_rate = 4 153.6kbps(1:9.6K, 2:19.2, 3:38.4, 4:
76.8)
num_sup_sho = 0 this means 1

sup_shos[0]
pilot_pn = 390 (0x186)
add_pilot_rec_incl = 0 additional pilot information included
indicator
for_sch_cc_index = 3 (0x3)
qof_mask_id_sch = 0
num_for_sch = 1 assigned SCH Number
for_schs[0]
for_sch_id = 0 <- fsch identifier
for_sch_duration = 9 320ms FSCH duration
for_sch_start_time_incl = 1 start time included indicator
for_sch_start_time = 16
sccl_index = 0
fpc_incl = 1 power control message
fpc_mode_sch = 1
fpc_sch_init_setpt_op = 0
num_sup = 1
sups[0]
sch_id = 0
fpc_sch_fer = 10 5%
fpc_sch_init_setpt = 56 7dB(0.125dB unit)
fpc_sch_min_setpt = 0 0dB(0.125dB unit)
fpc_sch_max_setpt = 112 14dB(0.125dB unit)
fpc_thresh_sch_incl = 1
fpc_setpt_thresh_sch = 24 3dB(0.125dB unit)
rpc_incl = 0


Unit for Start Time
The base station shall set this field to indicate the
units of start time included in Extended Supplemental
Channel Assignment Message. Set less than number of
20 ms frames that determines the START_TIME_UNIT
Discontinuous Transmission on R-Sup Channel
The maximum duration of time in units of 20 ms that
the MS is allowed to stop transmission on a Reverse
Supplemental Channel within the reverse assignment
duration. O means 0ms. 1111 means MS is allowed
to resume transmission on a Reverse Supplemental
CH at any time within the reverse assignment duration
Reverse Use T_Add abort Indicator
Utilize the T_ADD Reverse Supplemental Channel abort
feature for this reverse assignment. If pilot which not
included active set is the strongest signal, the MS stops
Reverse Supplemental Channel transmission and sends
SCRM(Supplemental Channel Request Message) and
PSMM. If handoff is completed, then the MS reassigned
the RSCH
Additional information included indicator
Notify whether the FPC_PRI_CHAN field is contained or
not

# of the Forward SCH configuration


Records
Set one less than the number of forward SCH
configuration records.
Duration of SCH Assignment

FPC Parameter Include Indicator


Inform the forward power control related information is
included in this message

SCH Setpoint Report Threshold Included


Indicator
If FPC_INCL is set to 1 and SCH setpoint report
threshold is included in this message, set as 1

Initial SCH Outer Loop Eb/Nt setpoint option


Indicate that FPC_SCH_INIT_SETPT contains the
absolute value of the initial F-SCH Eb/Nt setpoint. The
BS shall set this field to 1 to indicate that FPC_SCH_
INIT_SETPT contains the offset value of the initial FSCH Eb/Nt setpoint relative to the current value used
in the mobile station for the channel carrying the
Forward Power Control Subchanne

SCH Setpoint Report Threshold


Set the value to SETPT_THRESH_SCH (in units of
0.125 dB) above which the outer loop report
message
will be sent by the mobile station. The MS can
send the
outer loop report message only above this value.

Initial SCH Output Loop Eb/Nt setpoint


Initial Supplemental Channel Outer Loop Eb/Nt
setpoint (absolute value or offset value as indicated by
FPC_SCH_INIT_SETPT_OP) as follows:
If FPC_SCH_INIT_SETPT_OP is set to '0', the unit is
0.125 dB
If FPC_SCH_INIT_SETPT_OP is set to '1', the unit is
0.125 dB and the offset is expressed as two's
complement signed number


(FER, Ec/Io)
REVERSE TRAFFIC CHANNEL -- Power Measurement Report
Msg
protocol_rev = 6 (IS2000)
chan_type = 4 (Reverse Traffic)
chan
Extended/General/Universal Handoff Direction
rtc_msg
Message sequence number.
gen
If an Extended/General /Universal Handoff Direction
msg_type = 6 (Power Measurement Report)
Message has been received during this call, the MS shall
pwr_rpt
set this field to the value of the HDM_SEQ field from the
hdr
Extended/General /Universal Handoff Direction Message
ack_seq = 4
that determined the current Active Set. If no Extended/
msg_seq = 3
General /Universal Handoff Direction Message has been
ack_req = 0
received during this call, the MS shall set this field to 11.
encryption = 0
errors_detected = 0 0 frame
Number of Pilots Reported
pwr_meas_frames = 10 (0xa) 10frame
The mobile station shall set this field to the number of pilots
last_hdm_seq = 0
in the current Active Set
num_pilots = 2
pilot_strength[0] = 15 -7.5dB (-0.5*pilot_strength)
pilot_strength[1] = 18 -9dB (-0.5*pilot_strength)
dcch_pwr_meas_incl = 0 forward dcch power measurement
include indicator
sch_pwr_meas_incl =0 sch power measurement include
indicator


MSC

MSC

Zone Based Reg

Zone Based Reg


Zone Based or Parameter change Reg

Distance Based Reg

Timer-based

Power Up Reg

Distance Based Reg

Power Down
Reg

Ordered Reg

Implicit Reg

Traffic Channel
Reg

ACCESS CHANNEL -- Registration Msg


protocol_rev = 6
chan_type = 2 (Access)
chan
ac_msg
gen_ac
msg_type = 1 (Registration)
hdr
ack_seq = 7
msg_seq = 0
ack_req = 1 Request Acknowledgement Message
valid_ack = 0
ack_type = 0
msid_type = 3 imsi and ESN
msid
type3
esn = 3925846604
imsi
imsi_class = 0
i_class
zero
imsi_class_0_type = 0 imsi_S
type

zero
imsi_s[HI] = 0
imsi_s[LO] = 137485978
reg
auth_mode = 0
pilot_rpt
fix
active_pilot_strength = 9 -4.5dB
first_is_active = 1
first_is_pta = 0
num_add_pilots = 0
reg_type = 1 Power-up reg, ,
slot_cycle_index = 2
mob_p_rev = 6 <- Protocol Revision of the mobile
scm = 42 Station class mark.
mob_term = 1
return_cause = 0 Normal Access
qpch_supported = 1
enhanced_rc = 1
uzid_incl = 0


Return Cause

Registration Type

RETURN_CAUS
Reg_Type
E
0000
Timer-based
0001
Power-up
0010
Zone-based
0011
Power-down
0100
Parameter-change
0101
ordered
0101
User-Zone based
All other REG_Type values are reserved

RETURN_CAUS
E
0000

Redirect Failure Condition


Normal access.

0001

Service redirection failed as a result of system not found.

0010

Service redirection failed as a result of protocol mismatch.

0011

Service redirection failed as a result of registration rejection.

0100

Service redirection failed as a result of wrong SID.

0101

Service redirection failed as a result of wrong NID.


All other RETURN_CAUSE values are reserved.

station class mask(SCM) Type


Function

Bit(s)

Setting

Extended SCM Indicator

Band class 0
Band class 1

0XXXXXXX
1XXXXXXX

Dual Mode

CDMA Only
Dual Mode

X0XXXXXX
X1XXXXXX

Slotted class

Non-Slotted
Slotted

XX0XXXXX
XX1XXXXX

IS-54 Power class

Always 0

XXX0XXXX

25 MHz Bandwidth

Always 1

XXXX1XXX

Transmission

Power class for Band class 0


Analog Operation

1-0

Continuous
Discontinuous
class I
class II
class III
Reserved

XXXXX0XX
XXXXX1XX
XXXXXX00
XXXXXX01
XXXXXX10
XXXXXX11


SS7
SS7
Network
Network
VLR

HLR

MSC

Telephone
Telephone
Network
Network

PSTN
AAA

BSC

PCF

PDSN

Packet
Packet
Network
Network

Home
Agent

Home
AAA

IPIP

IP (IP)
IP IP

BSC

PCF

PDSN

Packet
Packet
Network
Network

PDSN
PCF

BSC

IP
BSS

PDSN
(FA)

Packet
Packet
Network
Network

MIP-RRQ
MIP-RRQ

MIP-RRP
MIP-RRP
Packet Data Tunnel (UDP over IP)

Home Agent

Mobile
registers
its care of
address
HA replies
with
lifetime


PCF (Packet Control Function)
PCFIP
PDSN


PDSN

dormancy

PDSN (Packet Data Serving Node)

PPP
PCF
IP
IPFA


AAA (Authentication, Authorization,
and Accounting)

FA Foreign AAA.

HA (Home Agent)
FAMIP
FA
MIP


Ericsson ///

UCSD

MSC

BSC / PCF

PDSN

Origination
Base Station Ack

CMServReq
SCCP-CC

TCH Setup

Assign Request
A11-RRQ
A11-RRP

A8 /A10
setup

Assign Complete
PPP Link Establishment and Mobile IP Registration
User Packet Data

Packet
Packet
Network
Network


A11

A11

UDP

UDP

IP

IP

Link

Link

Phys

Phys

BSC/PCF

PDSN


IP

IP

PPP

PPP

RS-232

RS-232

RLP
AIR
Interface

GRE

GRE

IP

IP

RLP
AIR Link
Interface Phys

IP

IP

Link

Link

Phys

Phys

Link
Phys

BSC/PCF

PDSN
A10

End
Host


IP

IP

IP

IP

SLIP or
PPP

SLIP or
PPP

PPP

PPP

RS-232

RS-232

RLP
AIR
Interface

GRE

GRE

IP

IP

RLP
AIR Link
Interface Phys

IP

IP

Link

Link

Phys

Phys

Link
Phys

BSC/PCF

PDSN
A10

End
Host

MAC (1/3)
DTX


10-20~200ms

Active
SCH
millisecond

Active
FCH

Control/Hold
second

Dormant
minute

MAC States (2/3)



Triggered when the data traffic is idle ~1-2
seconds
Signaling only
Power control is maintained
Reverse pilot can be gated
MS Stores radio information
Active
SCH
millisecond

Active
FCH

Control/Hold
second

Dormant
minute

MAC States (3/3)


Dormancy
Triggered when data traffic is idle ~1-2 minutes
Traffic channels and A8 (BSC-PCF) connection is
released
A10 (PCF-PDSN) connection and PPP is
maintained
Active
SCH
millisecond

Active
FCH

Control/Hold
second

Dormant
minute

Dormant Mode
Initiation
BSC initiates when inactivity timer is expired or RF
failure occurred
MS initiates when inactivity timer is expired or TCH is
released

Reactivation
Initiated when network or MS has data to send
Since PPP is maintained no extra control plane
signaling required
User data is exchanged after reactivation

Inter BSC Intra PDSN HHO


Source
MSC
BSC/PCF
User Packet Data
HO Required

HO Direction Msg

Target
BSC/PCF

PDSN

HO Request

Null Fwd Traffic


HO Request ACK

HO Command

Rev Traffic
HO Commenced

Tear Down Channels

HCM
Clear Command

A11 RRQ
A11 RRP

Clear Complete
A11 RRQ (Lifetime = 0)
A11 RRP

Handoff Complete

User Packet Data


Still standardization is continuing
Air interface is bottleneck for an
end-to-end QoS
Some parameters are defined such
as
Users priority level (14 possible
levels)
Minimum acceptable data rate
(2x, 4x, )
Acceptable FER (1%, 2%, 5%,
10%)

CDMA

3G
ITU IMT-2000

WCDMA
TD-SCDMA

T1P1

ETSI

CDMA2000

CWT
S

ARIB
/TTC

TTA

1xRTT/ 3xRTT
1xEV-DO
1xEV-DV

TIA

ITU 3G

TD-SCDMA

Source: ITU What is IMT-2000


WCDMA

Ericsson
Nokia
Siemens
Alcatel


UTstarcom
Lucent
Motorola
Samsung ()
LG

cdma2000

Lucent
Motorola


Ericsson
Samsung
LG

TD-SCDMA


Siemens


cdma2000

TD-SCDMA

2.1GHz
800/1900MHz

TDD 55 MHz

2003, 2002,

2005, TDSCDMA

WCDMA

2.1GHz
FDD 2X60MHz
()

J2MESymbian
Smartphone

200
BREW

1xRTT

100MHz

cdma2000
cdma2000 1xRTT/3xRTT
1x (1.25 MHz) and 3x (3.75 MHz) Radio Transmit Technology (RTT)

cdma2000 1xEV-DO
1xRTT Evolution Data Optimized

cdma2000 1xEV-DV
1xRTT Evolution Data and Voice
CDMA2000
1xEV-DO
CDMA2000
1X
Up to 153.6 kbps
Voice & Data

2.45 Mbps
Data

CDMA2000
1xEV-DV
3 Mbps
Voice & Data

1xRTT

- 1.5~2
- /
(SCH) - (153.6kbps)
Turbo
(MAC) - QoS

1xRTT
1xEV-DO

1.25 MHz;
2.45 Mbps
900kbps() & 220 kbps()
, 2Mbps
1xRTT

1xEV-DV
1.25 MHz

3.12Mbps
DO1xRTT
,

cdma20002

cdma2000
CDMA2000
(1.25 MHz)
YES

NMT

YES

YES

PCS

Cellular

YES*

IMT-2000

Europe
Asia

MHz 450

800 900

1700 18001900 20002100 2200

*2.1GHz

CDMA 1xRTT Network


HLR

PSTN

BTS1
BTS
BTS1
MSC

IWF
BSC
Home Agent

BTS2
BTS2
BTS
BSC
PDSN

Managed
IP Network

BTS2
BTS2
BTS
RP Interface

BSC

Service
Creation
System

AAA
RADIUS
Server

Public
Public
Internet
Internet

CDMA 1xRTT Network


with 1xEV-DO Overlay
Access Network

MSC

Core Network
PSTN

1x Backhaul
1x BSC

PDSN
Internet
1xEV-DO
Module

1xEV-DO
RNC
1xEV DO Backhaul

Intranet
Private Packet Data
IP Network

1xEV-DO
OAMP

Policy
Services

AAA, DNS,
DHCP Servers