M900/M1800 Base Station Subsystem

Signaling Analysis Manual

Contents

Contents
4 Location Update Procedure ......................................................................................................4-1
4.1 Overview...........................................................................................................................................................4-2
4.2 Location Updating Procedure ..........................................................................................................................4-2
4.2.1 Periodic Updating ...................................................................................................................................4-4
4.2.2 IMSI Attach Procedure ...........................................................................................................................4-4
4.2.3 Generic Location Updating Procedure ...................................................................................................4-5
4.3 Internal Handling of BSC.................................................................................................................................4-8

Issue 01 (2007-03-15)

Huawei Technologies Proprietary

i

.............4-3 ii Huawei Technologies Proprietary Issue 01 (2007-03-15) .................................................................................................M900/M1800 Base Station Subsystem Signaling Analysis Manual Figures Figures Figure 4-1 Location updating procedure..

2 Location Updating Procedure Describes location updating procedures: periodic location updating procedure. 4.M900/M1800 Base Station Subsystem Signaling Analysis Manual 4 Location Update Procedure 4 Location Update Procedure About This Chapter The following table lists the contents of this chapter. and normal location updating procedure.3 Internal Handling of BSC Describes the internal handling of location updating in the BSC. Issue 01 (2007-03-15) Huawei Technologies Proprietary 4-1 . 4.1 Overview Introduces the location updating technology in the BSS. Title Description 4. IMSI attach location updating procedure.

periodic location updating procedure and IMSI attach procedure are basically the same (The difference are described in details in relevant subsections below). as well as a list of "forbidden location areas for regional provision of service". normal location updating. The two lists shall accommodate 10 or more entries. When the list is full and a new entry has to be inserted. As the major procedure of location management. an attempt counter need be used. In case that location updating is unsuccessful. VLR and MS should be consistent. These lists shall be erased when MS is switched off or when SIM is removed. The attempt counter is reset when MS is switched on or a SIM card is inserted. and stores the received new location area information in SIM. MS contains a list of "forbidden location areas for roaming". Whenever a Location Update Reject message is received with the cause "Roaming not allowed in this location area" or with the cause "Location area not allowed". The normal location updating procedure is used to update the registration of the actual location area of MS in the network. it is required that the relevant information in HLR. and is used for 3 purposes. 4-2 Huawei Technologies Proprietary Issue 01 (2007-03-15) . The location updating type information element in the Location Updating Request message shall indicate normal location updating. When the location information changes. the location updating procedure is always initiated on MS side. the LAI received on BCCH that triggered the location updating request shall be added to the relevant list. which can be realized through the location updating procedure.M900/M1800 Base Station Subsystem Signaling Analysis Manual 4 Location Update Procedure 4. Cipher Key and Cipher Sequence Number in SIM. The location updating procedure is a general procedure. to limit the number of location updating attempts.1 Overview In GSM system. When the network indicates that MS is unknown in VLR. MS sets the update status to "UPDATED" in SIM (UPDATED status indicates the last location updating request is successful) . i. as a response to the MM connection establishment request.e. the oldest entry shall be deleted. TMSI. MS location information need be known by HLR. and save LAI. the normal location updating procedure will be started. Upon successful location updating. See Figure 4-1 for the location updating procedure. VLR and MS.2 Location Updating Procedure The normal location updating procedure. periodic updating and IMSI attach. 4.

and sends a Location Update Request message to MSC. which contains the content of the Location Update Request message. Step 6 MS sends an SABM frame for establishing link with BTS Step 7 BTS returns a UA frame for acknowledgement. The parameter including the CGI of the current cell. and sends a Channel Activation message to BTS. Step 2 BTS sends a Channel Request message to BSC. Step 5 BSC sends an Immediate Assignment Command message to MS through BTS. Step 4 If the channel type is correct. Step 14 The network shall initiate the channel release procedure if no further transactions are scheduled. upon receipt of the Channel Activation message. BSC allocates signaling channels. Step 9 BSC establishes SCCP link connection on A interface.M900/M1800 Base Station Subsystem Signaling Analysis Manual 4 Location Update Procedure Figure 4-1 Location updating procedure BTS MS Channel REQ (1) BSC MSC Channel RQD (2) Channel ACT (3) Channel ACT ACK (4) I MM ASS CMD (5) SABM (6) UA (7) EST IND( LOC UPD REQ) (8) CR(CMP L3 information) (9) CC (10) Location Updating Accept (11) Location Updating Reject (12) TMSI Reallocation CMP (13) Clear Command (14) Clear Complete (15) Step 1 MS sends a Channel Request message to BTS on the access channel of Um interface (The message contains the access cause value "Location update"). Step 3 Upon receipt of the Channel Request message. and sends a Channel Activation Acknowledge message to BSC. Step 11 MSC sends a Location Updating Accept message to BSC. indicating that location updating has succeeded. Step 10 MSC returns a link acknowledge message to BSC. Step 13 If "Allocate TMSI upon location updating" is set to "No" in MSC. BTS opens the power amplifier on the specified channel. Issue 01 (2007-03-15) Huawei Technologies Proprietary 4-3 . MS shall not report the TMSI Reallocation Complete message in the location updating procedure. Step 12 The network shall deliver a Location Updating Reject message to MS if it rejects the location updating request. Step 8 BTS sends an Establishment Indication message to BSC.

The timeout value is contained in control channel description IE of the system information type 3 message. the broadcast of T3212 timeout value).M900/M1800 Base Station Subsystem Signaling Analysis Manual 4 Location Update Procedure ----End 4. the new timer shall be started at a value randomly. or ciphering mode setting is completed in the case of MM connection establishment. "PLMN SEARCH or PLMN SEARCH-NORMAL" etc. it doesn't process any call procedure. CM SERVICE ACCEPT etc. in MOC or MOT procedure.2. "LIMITED SERVICE". the timer shall be stopped (MS shall set the timer to its initial value for the next location update). 4-4 Huawei Technologies Proprietary Issue 01 (2007-03-15) . the location updating procedure shall be started. For example. except when the most recent service state is "LIMITED SERVICE". z MS is deactivated (i. 4. In the following cases. There is a flag (ATT) in the system information type 3 message. z MS has responded to paging and thereafter has received the first correct L3 message except RR message. the location updating procedure shall be delayed until the MS leaves this service state.2. z A Location Updating Accept or Location Updating Reject message is received. "LIMITED SERVICE". z The first MM message (Such as Location Accept. When MS leaves the "MM Idle" state (MM IDLE state indicates MS in inactivation state. When MS is activated. When timer T3212 expires. or when a change of the T3212 timeout value has to be taken into account and the timer is not running. When a change of the T3212 timeout value has to be taken into account and the timer is running (at change of the serving cell or. "PLMN SEARCH" or "PLMN SEARCH-NORMAL SERVICE". MS switched off or SIM removed).2 IMSI Attach Procedure The IMSI attach procedure is the complement of the IMSI detach procedure. It is used to indicate the IMSI as active in the network.) is received. When MS is in the service state of "NO CELL AVAILABLE". uniformly drawn between 1 and the new initial value. timer T3212 shall continue running until it is overtime. z Timer T3212 expires.1 Periodic Updating Periodic updating is used to notify periodically the availability of MS to the network.e. MS will leave MM_IDLE state). The procedure is controlled by timer T3212 in MS. only in interception state. The location updating type information element in the Location Updating Request message shall indicate periodic updating. if the T3212 timer expires. The T3212 timeout value shall not be changed when MS is in the state of "NO CELL AVAILABLE". The (periodic) location updating procedure is not be started if the system information at the time the T3212 timer expires indicates that periodic location update shall not be used. namely. which indicates whether the attach and detach procedures are required to be used or not. MS shall take the mod that the current T3212 value to the new T3212 timeout value as the new initial value. the timer shall be started each time MS enters the "NORMAL SERVICE" or "ATTEMPTING TO UPDATE" sub-state of the "MM IDLE" state. It is performed by using the location updating procedure. If the timer has not been started. z An Authentication Reject message is received.

if a new TMSI has to be allocated. The location updating type information element in the Location Updating Request message must in this case indicate IMSI attach. starts the timer T3210 and enters the state of "LOCATION UPDATING INITIATED". Identification request The network may initiate the identification procedure. Issue 01 (2007-03-15) Huawei Technologies Proprietary 4-5 . 4. Otherwise a normal location updating procedure shall be invoked.g.M900/M1800 Base Station Subsystem Signaling Analysis Manual 4 Location Update Procedure The IMSI attach procedure is invoked when the IMSI is activated by MS. the MM sublayer within MS will request the RR sublayer to establish a RR connection and enter the state of "WAIT FOR RR CONNECTION (LOCATION UPDATE)". IMSI attach is performed by using the location updating procedure. T3211 and T3212) is stopped if running. Ciphering mode setting procedure The ciphering mode setting procedure may be initiated by the network. to obtain further information on MS's encryption capabilities. In the following cases. an attempt counter is used. The attempt counter is incremented by 1 each time a location update procedure fails. which is independent of the ATT flag indication. The location updating type information element shall indicate what kind of updating is requested. if the network is unable to get the IMSI based on the TMSI and LAI used as identification by MS Authentication procedure The authentication procedure may be initiated by the network upon receipt of the Location Updating Request message from MS. the attempt counter shall be reset. e. if the detach/attach procedures are required by the network.g. MS initiates the location updating procedure by sending a Location Updating Request message to the network. the IMSI attach procedure is used only if the update status is "UPDATED" and if the stored LAI is the same as the one which is actually broadcasted on the BCCH of the current serving cell. When IMSI is activated by MS within the network coverage area. As no RR connection exists at the time when the location updating procedure has to be started. to limit the number of location updating attempts. Network requests for additional MS capability information The network may initiate the classmark interrogation procedure.3 Generic Location Updating Procedure Any timer used for triggering the location updating procedure (e. for example. Attempt counter When location updating is unsuccessful.2. or if MS is moved from outside the coverage area to the coverage area. It counts the number of consecutive unsuccessful location update attempts.

z Cause 2: IMSI unknown in HLR z Cause 3: illegal MS z Cause 6: illegal ME For cause 2/3/6. After receipt of the Location Updating Reject message. MS stores the received LAI. If the message contains an IMSI. a Location Updating Accept message shall be transferred to MS. If the LAI or PLMN identity contained in the Location Updating Accept message is a member of any of the "forbidden lists". start T3240. and shall store this TMSI in SIM and send a TMSI REALLOCATION COMPLETE to the network. MS shall take the following actions depending on the stored reject cause. the old TMSI if any available shall be kept. The TMSI allocated is then contained in the Location Updating Accept message together with LAI. the MS shall set the update status to "ROAMING NOT ALLOWED". the network sends a Location Updating Reject message to the MS. the relevant entries shall be deleted. If the message contains a TMSI. the TMSI reallocation may be part of the location updating procedure. Upon receipt of a Location Updating Accept message. store the reject cause. and delete any TMSI. stops timer T3210. and shall delete any TMSI from SIM accordingly. The network shall in this case start the supervision timer T3250. Upon the release of the RR connection. If neither IMSI nor TMSI is received in the Location Updating Accept message. resets the attempt counter and sets the update status in SIM to "UPDATED". MS shall stop timer T3210. MS is not allocated any TMSI. In case the identity confidentiality service is active. 4-6 z Cause 11: PLMN not allowed z Cause 12: location area not allowed z Cause 13: roaming not allowed in this location area Huawei Technologies Proprietary Issue 01 (2007-03-15) . Location updating rejected If the location updating cannot be accepted. enter the state of "LOCATION UPDATING REJECTED" and await the release of the RR connection triggered by the network. the MS is allocated this TMSI. stored LAI and ciphering key sequence number and shall consider IMSI invalid until switch-off. Location updating accepted If the location updating is accepted by the network.M900/M1800 Base Station Subsystem Signaling Analysis Manual 4 Location Update Procedure z MS is powered on z A SIM card is inserted z Location update is successfully completed z Location update is completed with cause 11/12/13 z Service state changes from "ATTEMPTING" into "UPDATE" z A new location area is entered z Timer T3212 expires z Location update is triggered by a CM sublayer request The attempt counter is used when MS decides whether to re-attempt a location update after timeout of timer T3211.

due to cause except 2/3/6/11/12/13 Issue 01 (2007-03-15) Huawei Technologies Proprietary 4-7 . Step 5 T3210 timeout The procedure is aborted. Step 4 RR connection failure The procedure is aborted. i. in the "forbidden PLMN list" for cause 11. MS will memorize if cause 13 is received. In both cases. MS shall return to the state of "MM IDLE". reset the attempt counter. The procedure is started as soon as the access is allowed. Step 2 The answer to random access is an Immediate Assignment Reject message MS stays in the chosen cell and applies the normal cell selection procedure. TMSI and ciphering key sequence number stored in from SIM. Step 6 RR released before the normal end of procedure The procedure is aborted. Release of RR connection after location updating When the location updating procedure is completed. and set the update status to "ROAMING NOT ALLOWED".M900/M1800 Base Station Subsystem Signaling Analysis Manual 4 Location Update Procedure For cause 11/12/13. either after a RR connection release triggered from the network side or after a RR connection abort requested by MS side. MS shall abort the RR connection. sub-state "NORMAL SERVICE" or "ATTEMPTING TO UPDATE". or to allow for MS-initiated MM connection establishment. MS shall store the LAI or the PLMN identity in the relevant forbidden list. Other cause values are considered as abnormal cases.e. Step 7 Location updating rejected. and in the list of "forbidden location areas for roaming" for cause 13. When it expires. The network may decide to keep the RR connection for network-initiated establishment of a new MM connection. Timer T3122 is reset when a cell change occurs. in the list of "forbidden location areas for regional provision of service" for cause 12. and the RR connection is terminated. MS shall (except in the case that MS has a follow-on CM application request pending and has received the follow-on proceed indication) set timer T3240 and enter the state of "WAIT FOR NETWORK COMMAND". If the RR connection is not released within a given time controlled by timer T3240. Abnormal cases on MS side There are the following abnormal cases on MS side. expecting the release of RR connection. The location updating procedure is aborted if random access fails twice successively. The procedure is started as soon as timer T3122 expires. the random access procedure is attempted again. Timer T3213 is started. so to perform PLMN selection instead of cell selection when it is back to the "MM IDLE" state. MS shall delete any LAI. Step 1 Access barred because of access class control MS stays in the current serving cell and initiates the normal cell reselection procedure. At transition to the state "MM IDLE". either timer T3212 or timer T3211 is started. Step 3 Random access failure If random access failure occurs. Any release of RR connection shall be initiated by the network. In addition.

The attempt counter is smaller than 4. If the attempt counter is smaller than 4.3 Internal Handling of BSC The location updating procedure is a general procedure for three purposes: normal location updating. or the stored LAI is different from the one received on the BCCH from the current serving cell. MS shall memorize the location updating type used in the location updating procedure. z Cause 96: Mandatory IE error z Cause 99: IE non-existent or not implemented z Cause 100: Conditional IE error z Cause 111: Protocol error. In case 2. it starts timer T3212. The RR connection is released if timer T3210 expires. the network shall. When timer T3211 expires. ----End Abnormal cases on network side Step 1 RR connection failure If a RR connection failure occurs during a common procedure which is integrated with the location updating procedure. the network will start the channel release procedure. unspecified After sending the response message.M900/M1800 Base Station Subsystem Signaling Analysis Manual 4 Location Update Procedure MS waits for release of the RR connection. If there is no other common procedure integrated. the location updating procedure towards MS shall be aborted. if possible. Case 1: The update status is "UPDATED". or the attempt counter is greater or equal to 4. Otherwise. MS proceeds as follows. In cases 4~7 and for repeated failures as defined in case 3. It shall start timer T3211 when the RR connection is released. The MM IDLE sub-state after RR connection release is "NORMAL SERVICE". the behavior of the network should be according to the description of that common procedure. TMSI and ciphering key sequence number stored in SIM. ----End 4. Step 2 Protocol error If the Location Updating Request message is received with a protocol error. Case 2: Either the update status is different from "UPDATED". The attempt counter is incremented by 1. MS shall start timer T3211. and the stored LAI is equal to the one received on the BCCH from the current serving cell. 4-8 Huawei Technologies Proprietary Issue 01 (2007-03-15) . the location updating procedure is triggered again with the memorized location updating type. The next actions depend on LAI and the value of the attempt counter. MS shall delete any LAI. In case 1. Timer T3210 is stopped if still running. set the update status to "NOT UPDATED" and enter the MM IDLE sub-state "ATTEMPTING TO UPDATE" when the RR connection is released. periodic updating and IMSI attach. MS shall keep the update status to "UPDATED". return a Location Updating Reject message with one of the following causes.

This message includes the CGI of the serving cell. See [BSC Cell Table] for the CGI. Issue 01 (2007-03-15) Huawei Technologies Proprietary 4-9 .M900/M1800 Base Station Subsystem Signaling Analysis Manual 4 Location Update Procedure The BSC retrieves the periodic location updating period from the “T3212” field in the [System information table] and sends it to the MS through the SYSTEM INFORMATION TYPE 3 message. The BSC sends a LOCATION UPDATING REQUEST message to the MSC to set up an SCCP connection over interface A.