UMTS System

y Overview

Phone Lin
Mobile Communications Networking (MCN)
LAB,
Dept. of Computer Science & Information
Engineering,
National Taiwan University
E
Email:
il plin@pcs.csie.nctu.edu.tw
li @ i t d t
1
Reference

aThe Most Materials of this talk is summarized byy

the UMTS System Overview course held by the
Informa Telecoms Ltd
Informa Ltd .

2
Outlines

aPart 1: UMTS Services and Applications

pp
aPart 2: UMTS Architecture
aPart 3: WCDMA in UMTS
aPart 4: Mobility Management Procedure in
UMTS

3
Part 1: UMTS Services and
A li ti
Applications

4
Outlines

aFundamental UMTS Service Concepts

p
aExample Services
aQuality of Service
aThe Virtual Home Environment
aSecurity
aUser Equipment

5
F d
Fundamental
t l UMTS S
Service
i C
Concepts
t

a Fundamental UMTS Service Concept 1:

Service Support Requirements

a Fundamental UMTS Service Concept 2:

Interactive vs. Distribution Services

a Fundamental
F d t l UMTS S
Service
i C Conceptt 3
3:
Service Differentiation

a Fundamental UMTS Service Concept 4:

Telecommunications Service Types
yp

a Fundamental UMTS Service Concept 5:

The Service Architecture Concept
6
Concept 1: Service Support
Requirements (1/3)

aThe continued evolution of GSM toward UMTS

Key GSM Phase 2+ features carry straight into UMTS
High
Hi h data
d t rates
t (up
( to
t 2 Mbps)
Mb )
Open Service Creation
Flexible Multimedia Service Support
QoS Guarantee
Roaming with All Services
Efficient
Effi i t Interworking
I t ki with
ith the
th Internet
I t t

7
Concept 1: Service Support
Requirements (2/3)

aFrom narrowband ((e.g.,

g , speech)
p ) to wideband
(up to 2Mbps)
The
Th circuit-switched
i it it h d services
i are in
i practice
ti limited
li it d 64kb/s
64kb/
in UMTS This is the capability of the MSC switching

aService Creation by Third party developers or

service providers.
p
UMTS is designed to offer a Toolkit of Functionality, i.e.,
guidelines and service capability
g p y definitions which
application developers can follows.

8
Concept
p 1: Service Support
pp
Requirements (3/3)

aSupport
pp for services made up p of different media
sources, capable of being delivered as the same
time.
time
Multimedia

aDefinitions and Guarantees on Service quality.

aSeamless roaming with UMTS applications and
services.

9
Concepts 2: Interactive vs.
Distribution Services

a Interactive Services:
Two way
Conversational
Messaging
Retrieval

a Distribution Services:
Without user control: Broadcasting Services
With user control: access to the sequence numbering allows
users to control of the start or order

a Cell Broadcasting is defined as a requirement in

Release 99 to guarantee continuity

10
Concepts 3: Service Differentiation
(1/3)

aStandardized Services ((Defined end-to-end))

These are implemented in UMTS using standardized
interfaces to ensure interoperability.
They are available to all operators.
Example:
E l Speech
S h services,
i tele-services,
t l i bearer
b services,
i
and supplementary services.

11
Concepts
p 3: Service Differentiation
(2/3)

aOperator
p specific
p services
Not standardized, and thus offer differentiation between
operators.
They can be implemented at UMTS entities or by using
toolkits, such as CAMEL, SAT MExE.
Implementation of these services on different platform is
completely vendor specific.
Developers can be sure that the same application will work
in other networks supporting such toolkits.

12
Concepts
p 3: Service Differentiation
(3/3)

aApplications:
pp
These are not standardized, but can be implemented by
using standardized programming interfaces (APIs) to the
service capability.
Service Capability Features: which describes the
functionalities of the service capabilities.
(1) They can be used by developers as guidelines to build
applications.
(2) Within the end
end-user
user terminal, service capabilities are
again accessed via APIs.

13
Concepts 4: Telecommunications Service
Types

aTwo types
yp of basic telecommunications
services:
Basic
B i Services:
S i Bearer
B i Additional
Service
S Additi l Services:
S i
Bearer Services & Supplementary Service
Basic
B i Services:
S i Teleservices
T l i Additional
Additi l Services:
S i
Teleservices & Supplementary Service

14
Bearer Services: An Important Element in
the New QoS Control Capabilities of UMTS

a Bearer services are defined as basic transport Pipes

with specified capabilities.
a For a user-requested
q service to be delivered,,
The network will assign the most relevant bearer services needed
to carry that service type.

a Assignment and release of bearers is provided by a

bearer control function.
a Bearers are independent of
radio environment
environment, fixed with transmission systems (i
(i.e.,
e the
underlying transport).

15
B
Bearer Services
S i

aBearer services can be considered as layers.

y
aThe overall UMTS bearer service required to
enable an end
end-to-end
to end service must in turn
depend on lower level bearer services:
For example, Radio Access Bearer and Core Network
Bearer

a Fall into two categories: (1) Circuit Switched

Bearer Services;; (2)
( ) Packet Switched Bearer
Services.

16
Teleservices

aTeleservices are defined end-to-end.

Include definition of the terminal equipment function.

a(1) Speech (Adaptive Multirate; AMR); (2) Voice

Groupp Services;; (3)
( ) Internet Access;; (4)
( )
Emergency Call; (5) Fax; (6) SMS
aVoice Group Services: Voice Group Call &
Voice Broadcast

17
Supplementary Services (1/2)

aCall Filtering
g
aNumber Identification (Calling Line ID
Functions)
aCall Offering (Call Forwarding Functions)
aCall Completion (Call Waiting, Call Hold)
aMulti Party Service
aCommunity Of Internet (Closed User Groups)

18
Supplementary Services (2/2)

a User to User Signaling

g g
a Charging Advice & Information
a Call Restriction (Call Barring Functions)
a Call Transfer
a Call Completion when Busy
a Name Identification
a Multicall
M lti ll

19
Concepts 5: Service Architecture
Concept

a Bearer Control = In order to assign

g the most appropriate
pp p
resources in transport of the application data
a Call Control = to set-up,
set up manage and release circuit
circuit-
switched call connections
a Session Management = to manage packet-switched
data transport
a Mobility Management = to track a users movement and
ensure data delivery to the current location

20
Example Services

aMultimedia Services Circuit-Switched Domain

aMultimedia Services Packet-Switched Domain
aThe Multimedia Messaging Service

21
Multimedia Services: Circuit
Circuit-
Switched Domain

a Is one where two or more media components are

combined within one call, for example,
Speech + Video + Graphic Data

a CS multimedia in UMTS is based on H324

a The following bit
bit-rate
rate options are defined in UMTS to
ease inter-working of 3G-324M Calls
64,
64 56
56, 33
33.6,
6 32 and 28
28.8
8 kb/s for mobile to mobile
64 & 56 for mobile to/from N-ISDN
33.6
33 6 and 28
28.8
8 for mobile to/from PSTN
32 for mobile to/from PHS call

22
Multimedia Services: Packet
Packet-
Switched Domain

aTwo solutions are discussed for PS Multimedia

ITU defined codec H.323
IETF protocol
t l SIP (S
(Session
i IInitiation
iti ti Protocol)
P t l)

aAn initial invitation is used to locate all the

user(s) to which a session is directed
Each
E h user
may be
b actual
t l mobile
bil terminal,
t i l or could
ld equally
ll
be a media source of some kind, for example, a PC-based
application
The users are identified by SIP URLs.

23
Multimedia Services: Multimedia
Messaging Service (MMS)

a MMS is a non real-time service, in the same vein as

SMS.
The messages can be stored before forwarded on to the recipient
whenever
h they
th are available
il bl and/or
d/ requestt to
t see the
th messages.

a MMS supports e-mail address or MSISDN address and

WAP development
d l t also
l provides
id significant
i ifi t supportt ffor
MMS.
a The user terminal operates the MMSE (Multimedia
Messaging Service Environment).
MMSE provides delivery, storage and notification, which may be
located in one network or distributed across networks.

24
The Elements in MMS

a (1) The MMSE describes all the elements which provides the
complete
l t service
i tto a user.
In the case of roaming, the visited network is included.

a (2) The
Th MMS Relay
R l facilities
f iliti ttransfer
f b between
t diff
differentt messaging
i
systems, and can generate charging data, enabling the service to
be billed.
a (3) The MMS server is responsible for storage and handling of
incoming and outgoing messages.
a (4) The MMS user database contain subscription information.
a (5)
( ) The MMS user agent
g resides on the user equipment
q p or on a
device attached to this. It is an application layer function providing
the users with the ability to view, compose and handle messages.

25
Quality of Services

a Important
p for p
packet-based services
a Designed for efficient use of resources
a Allow independent evolution of radio access and core
networks
a Support asymmetric services
a Enable applications to define
f required QoS
Q S
a --
Based upon assignement of appropriate UMTS
bearer services.

26
UMTS bearer service attributes

a QoS Class (Traffic Classes)

a Maximum bit-rate
a Guaranteed bit-rate
bit rate
a Delivery in-sequence
a Size of data units
a Error rates
a Delivery erroneous data
a Maximum transfer delayy
a Traffic handling priority
a Allocation/retention priority
27
Conversational Class (delay
sensitive & real time)

a Examples include speech, VoIP, video conferencing.

a The characteristics required are controlled by human perception.
a This class needs veryy low delayy and to keep
p the time relation
between information entities.
a Speech (4-25kps): Delay tolerance << 1s; Time Relation: Preserve;
E
Error Tolerance
T l < 3% FER
a Video (32-384kps): Delay tolerance << 1s; Time Relation: Preserve;
Error Tolerance < 1% FER
a Interactive games (<1k bps): Delay tolerance << 1s; Time Relation:
-;; Error Tolerance: No loss

28
Streaming Class (Real Time)

a For example, listening to real time video or audio.

a This class involves one way transport, live at the
destination.
a There is the need to preserve the time relation between
information by aligning at the receive end
Delay are possible, but cant be too big.

a Audio Streaming/Video
g Streaming:
g Delay y Tolerance <
10s; Time Relation: Preserve; Error Tolerance: Tolerant
a Still Image
g Paging:
g g Delay y Tolerance < 10s;; Time
Relation: Preserve; Error: intolerant

29
Interactive Class

a This is for Internet-Type

yp Applications,
pp requiring
q g
responsiveness.
a At the message destination
destination, a response is expected
within a certain time, so round-trip delay needs to be
minimized.
minimized
a Voice Messaging: Delay Tolerance: < 1 s; Error
tolerance: tolerant.
aE
E-commerce
commerce WWW Browsing: Delay tolerance < 1 s;
Error Tolerance: Intolerant

30
Background Class

a For applications
pp which are entirely
y delay
y insensitive.
a Information is only sent when resource is available.
a Examples include file transfer, email delivery, SMS.
a There is no expectation of when data will arrive
arrive. Data
loss must be minor.
a Fax: Delay Tolerance: > 10 s; Error tolerance: tolerant.
aE
E-mail
mail arrival notification: Delay Tolerance: > 10 s; Error
tolerance: intolerant.

31
Th Vi
The Virtual
t lH Home Environment
E i t (VHE)

32
Th Vi
The Virtual
t lH Home Environment
E i t (VHE)

aIt is defined as a concept

p for Personal Service
Environment (PSE) portability across network
boundaries and between terminals
terminals.
aPSE is defined in terms of one or more user
profiles, which consists of two kinds of info:
Interface related Info (User Interface Profile Service look &
Feel)
Service Related Info (User Services Profile
personalization etc.)

33
Features of SIM Toolkit

a SIM belongs to the operator

a Enables remote downloading of value added services
a Secure
a Enables operator-specific services and handset
customization:
Control of MMI
Menu Management
Application Control
Accessory
y Management
g
Communications & proactive commands

34
CAMEL

aCAMEL stands for Customized Applications

pp for
Mobile Network Enhanced Logic.
aPhase 1 Basic Call
Call-Related
Related Activity
aPhase 2 Includes Supplementary Services
and User Interaction
aPhase 3 Includes
aPh I l d SMSSMS, GPRS,
GPRS HLR d
data,
t
network signaling Load
aPhase 4 is part of 3GPP Release 4

35
CAMEL

36
Mobile Execution Environment

37
Security Threats

aMasquerading
q g ((most common in 2G systems)
y )
aEavesdropping (most common in 2G systems)
aSubscription fraud (most common in 2G
systems)
aData manipulation
aService mis-use
aRepudiation

38
UMTS Security Domains

aUser Domain Security

y
aNetwork Access Security
aNetwork Domain Security
aApplication Domain Security

39
User Domain Security

aProviding
g Secure Access to the mobile terminal
aThe usage of USIM:
The USIM contains user i.d. and an association with a home
environment, and is based on Phase 2+ GSM SIM.
Emergency calls are allowed without USIM.
4 to 8 digit PIN

40
Network Access Security

a Providing secure access to UMTS, in particular

protecting the radio access link
a The user is identified by
y a temporary
p y ID g
given by
y the
visited network.
a Authentication of the user and confirmation that the
network is permitted to provide services happens each
time a user sets upp a connection.
a Confidentiality is provided by a cipher algorithm
operating between terminal and the serving network
node.

41
Network Domain Security

aProvides secure exchangeg of info between

nodes within the fixed part of the network, e.g.,
between the serving network and home
environment.

42
Application domain security

aEnabling
g users and applications
pp to securely
y
exchange messages.
aApplication domain security involves secure
g g between the USIM and network,,
messaging
which requires authentication of the application
and the origin of the data received
received.
aThese features are all based on the GSM SIM
Application Toolkits security features.

43
Mandatory
y User Equipment
q p
Requirements (1/2)

aEncrypted
yp interface between terminal & UICC
(UMTS IC Card)
aSupport GSM Ph2 & Ph2+ SIM
aHome & Serving Network
registration/deregistration
aL
aLocation
ti U Update
d t
aOriginate/receive a connection/connectionless
service

44
Mandatory User Equipment
Requirements (2/2)

aTerminal capability
p y i.d.
E.g., MExE class mark, and bearer service support

aEmergency call support

aE
aEncryption
ti algorithm
l ith execution
ti
aCiphering indicator
aNetwork Selection

45
Elements of the UMTS IC Card

46
Information Storage on UICC

aUICC Card i.d.

aPreferred language
aDirectory of applications

47
Information Storage on USIM
a USIM Service
a Forbidden networks a Capabilities Info
Table: Optional
S i
Services a Phase
Ph Id
Identification
tifi ti a Configuration
C fi ti IInfo
f
Provided a Ciphering key for a Home Network
a IMSI (unique GPRS search period
subscriber i.d. a GPRS Location a Broadcast channel
number) Information info used in cell
a Language selection
a Cell Broadcast
Indicator Information a Various security
information
a Location a Emergence call
Information codes
a Cipher key a Phone
Ph numbers
b
a Access Control a Short messages
Classes and related info
48
Partt 2
P 2: Th
The UMTS
Architecture

49
Outlines

a UMTS Architecture The Requirement

q
a The User Domain (USIM + ME Domains)
a The Access Network
a The Core Network
a Other Network Elements
a Release 4
a Network
N t k Evolution
E l ti

50
Aims of the UMTS Architecture

aFlexibilityy
aIMT2000 Interworking aModular
Approach
aMinimize Signaling
aBuilding on
aOptimize Transmission evolved
aProtect existing Investments GSM

aEnable evolution

51
Some Key
y New Features of UMTS
(1/2)

a Upgrades to existing GSM/GPRS elements

a ATM transport
a New speech codec
a Flexibility in connection set-up, re-negotiation & clearing
a Flexibility in bearers
a Support for VHE
a Enhanced charging & billing support
a Interworking with other networks & numbering schemes
a Traffic flow measurements to enable management
g efficiencies
a Enhanced IP mobility support

52
UMTS Domains Overview

53
User Domain

aMS = ME domain + USIM domain

aME = MT (Radio) + TE (Applications)
aThe USIM domain and the ME domain are liked
by the Cu interface
aThe USIM Domain contains the data and
procedures allowing ME to securely identify
itself.
itself

54
Th T
The Terms relevant
l t tto user d
domain
i

aThe subscriber
Is associated with the home environment & responsible for
payment

aThe user
Is
I authorized
th i d tot use services
i by
b the
th subscriber
b ib (and
( d may
have their user profile)

aAnother party
For example,
p the calling
g party
p y in a call, the called party.
p y
They may not be a 3G user.

55
Access Domain & Interfaces

56
Node B

aIt p
provides radio resources for a UMTS network
aUses UMTS Channel Allocation to
Communicate with the Handset
Handset.
aIt provides all the RF processing, enabling
transmission and reception information to and
from the mobile terminal
aThis information is encoded using the WCDMA
t h l
technology

57
RNC (Radio Network Controller)

aIt controls the operation

p of multiple
p Node Bs,,
aManages resources such as allocating capacity
for data calls
calls, and
aProvides critical signaling, e.g., call set-up,
set up, plus
switching and traffic routing functionality
aAll h
handovers
d processes, even where
h moving
i
between cells controlled by different RNCs, are
k t within
kept ithi th
the UTRAN
UTRAN.

58
RNC
Terminology
owned by
informa
Telecoms

59
Further New UTRAN Features

a W-CDMA
a ATM Transport
a Flexible bearer support & connection management
a Handover functions
a Location Determination
a Support for procedure and function interworking with
GSM BSS

60
The Core Network Domain

61
Specific Entities in the UMTS R99
R 99 Core
Network Architecture

a GSM core network elements:

MSC, VLR, HLR, AuC and EIR

a GSM enhancements (GSM Phase 2+):

GPRS to support packet-switching
CAMEL (and other toolkits) as a basis for the VHE

a New UMTS-specific
p enhancements
New UTRAN and USIM
This new UTRAN can be connected to the GSM Phase 2+ core
network.

62
Th Ci
The Circuit-Switched
it S it h d D
Domain
i (1/2)

a MSC ((Mobile Switching

g Center))
Provides the interface between the UTRAN and fixed network
Performs all necessary to handle CS services to/from mobile
terminal
Performs switching and signaling functions
Impacts the location registration & handover between calls

a Gateway MSC
Provides routing to the appropriate MSC where a mobile terminal
is located
located, after having interfaced with the database within the
home environment

63
Th Ci
The Circuit-Switched
it S it h d D
Domain
i (2/2)

aVLR ((Visitor Location Register)

g )
Is used by the MSC to retrieve information for MS currently
within its area.

aInterworking Function (IWF)

An IWF provides the functionality to allow interworking of
differing networks, e.g., ISDN, PSDN, and PDNs (protocol
conversion).
E.g., the A interface (GSM) and the Iu-CS (UMTS) interface
conversion

64
HLR AuC,
HLR, AuC and EIR = HSS

a HLR (Home Location Register)

Contains subscriber information, and information enabling charging and
packet routing of the messages.
Subscriber information = IMSI, MSISDN, PDP addresses for GPRS,
information on service access/restrictions

a AuC (Authentication Center)

AuC stores data for each subscriber to allow the IMSI to be authenticated
and to allow of communication over the radio path.

a EIR (Equipment ID Register)

Responsible for storing the International Mobile Equipment IDs (IMEIs)

a HSS = HLR + AuC + EIR

65
The Packet-Switched
Packet Switched Domain

aThe SGSN ((Serving

g GPRS Support
pp Node)) =
MSC/VLR
Are IP routers
Includes a location register function which stores
subscription
p information and location information for
packet-switched services

a The (Gateway GPRS Support Node) = GMSC

Stores subscription information and routing information for
each subscriber for which the GGSN has at least one PDP
context active.
The information is used to tunnel p
packet data destined for a
GPRS terminal through to the SGSN
66
Other Network Entities (1/2)

a Short Message Service Center

For SMS service
Connects to the UMTS Core network via SMS Gateway/Interworking MSC

a Serving Mobile Location Center (SMLC)

For Location Services
Located
d within
i hi the
h UTRAN R
Radio
di NNetwork
kCController
ll (RNC)

a CAMEL Service Environment

Located within the Home Network

a Cell Broadcast Center

For Cell Broadcast Services
Connects directly to the UTRAN Radio Network Controller (RNC)

67
E l ti
Evolution off Ci
Circuit-Switched
it S it h d D
Domain
i

68
IP Multimedia Subsystem

69
Domains in All-IP
All IP UMTS

a The radio access and user domains remain structurally

y
the same.
a The core network remains divided into circuit and packet
switched domains,
With the
th IP multimedia
lti di Core
C Network
N t k subsystem
b t newly
l added.
dd d

a The Service Subsystem can link into each of the core

network domains and the IP multimedia subsystem by
means of a service control point to the OSA (Open
Service Architecture).

70
UMTS Core Network

aCore Network Architecture and Functions

aThe Core Network CS Domain
aThe Core Network PS Domain
aCore Network Transmission
aCharging
aNetwork Management

71
Main Functions of the Core Network
(1/2)

aTransport
p of User Data: CS and PS
aMobility Management (MM): CS and PS
aConnection Management (CM): CS
Bearer Management
Call Control
Supplementary
S l t Services
S i
Short Message Service

aSession Management (SM): PS

72
Main Functions of the Core Network
(2/2)

aCharging:
g g CS and PS
aNetwork Management: CS and PS
aInterworking with External networks: CS and PS
aService Provision (hosting of Open Service
Architecture CAMEL etc
Architecture, etc.):
): CS and PS
aSecurity:
y CS and PS

73
CN to UE Control Plane

74
User and Control Information in CS Domain

a MSC:
provides the (1) switching functionality and (2) control for (1)
setting up, (2) tearing down, and (3) supervising circuits.

a The HLR and SCP (SS7 node):

Provide support for (1) Mobility and (2) Operator Specific Services.

a The VLR
Provides support for mobility and is co-located with the MSC.
MSC

a The control information is passed within SS7 (Signaling

System Number 7 protocols)
protocols), and makes use of the
lower layer signaling network.

75
SS7 Nodes

aSCP ((Service Control Point):

)
A database which may control information relevant to
routing

aSSP (Service Switching Point):

Provides the switching functions, and call control functions

aSTP (Signaling
(Si li T Transfer
f Point):
P i t)
Is designed to route packets across the network

76
User and Control Information in the
PS Domain

aThe intermediate routers between SGSN and

GGSN route the packets on to the SGSN or
GGSN.
GGSN
aFor mobility
y control and p
provision of operator
p
specific services, the GSNs communicate with
the HLR and SCP
SCP, respectively
respectively.

77
Tunneling (Transmission)

aPDU
a(Header, Tunneling Info) GTP
a(Header) UDP/TCP
a(Header IPv4 Address) (Fragmentation) IP
aPrepare for Transmission

78
Tunneling (Reception)

aReceived Data
a(Remove Header) (Reassemble) IP
a(Checksum etc) UDP/TCP
a(Remove Header) GTP
aPDU

79
Charging (1/2)

a CS Domain:
Time
Location
Number of Channels

a PS domain:
d i
Time
Location
QoS
Data Volume

80
Charging PS Domain
Charging-PS

a In the PS domain, a Charging Gateway Function (CGF) collects

charging records which are collected as follows:
a Charging data recorded at SGSN
Usage of the radio interface (amount of data & QoS characterisation)
Length of time for which PDP addresses where used
Usage of PS domain resources
Location of the mobile station
a At the GGSN,
Destination and source addresses
Usage of external data network (amount of data)
Length of time for which PDP addresses were used
a Another new requirement in UMTS is that such data needs to be
available on a real-time basis, to allow real-time and online billing to
th user
the
81
Th k
The key aims
i for
f ththe UMTS O
Operator
t

aMinimize the cost & Complexity

p y
aMaximize the flexibility
aManage equipment supplied by different
vendors
aEnsure scalability
aRe-use existing g standards, and ensure
interoperability with other networks

82
TMN Model

a TMN ((Telecommunication Management

g Networks))
standard has been developed by ITU.
a This model is used for UMTS network management
a TMN provides:
An architecture of Operational Systems and Network elements
with defined interfaces between them
Tools to refine the management architecture in a given network
management area
C
Common ffunctions
i which
hi h can be
b applied
li d to various
i TMN
interfaces

83
Part 3: WCDMA in UMTS

84
Outlines

aWideband Code Division Multiple

p Access ((W-
CDMA) Principle
aThe Spreading/Despreading Process
aUMTS Codes
aCell Coverage and Handovers

85
Th Spread
The S d Spectrum
S t Concept
C t (2/2)

aIn Spread
p Spectrum,
p , the information bandwidth
is spread across a wider transmission
bandwidth.
aTo allow the signals from different sources can
be distinguished at a receiver
receiver,
Signals (which coexist within the transmission frequency
b d) mustt be
band) b separated
t d using
i CODES which
hi h have
h a low
l
cross-correlation with the other codes.
Decoding signals using wrong code will simply produce
NOISE.

86
Direct Sequence CDMA

aW-CDMA is an example
p of a direct-sequence
q
CDMA system.
aDS-CDMA is one where user information bits
p
are spread over a wide bandwidth by y multiplying
py g
this information signal (user data) directly with
CDMA spreading codes
CDMA codes comprised of Chips
Chips .
The rate of change of these chips must be higher than the
user data rate spread

87
Spreading Direct Sequence
Spreading-Direct

88
W CDMA Key Parameters (1/2)
W-CDMA

aChip
p rate = 3.84 Mcps
p
A key difference between UMTS and previous CDMA
system, e.g., IS
IS-95/cdmaOne
95/cdmaOne has the chip rate = 1.23 Mc/s

aBandwidth = 5 Mhz
In WCDMA, the carrier bandwidth = 5 MHz, where IS-95 only
uses 1 MHz. 15 MHz licence band provides 3 cell layers.

89
W CDMA Key Parameters (2/2)
W-CDMA

aFrame Length
g = 10 ms
In the Time domain, users are allocated ``frames of 10 ms
duration.
Within a frame, the data rate and spreading factor is
constant.
In UMTS, the data rate to change from frame to frame
bandwidth
bandwidth on demand
demand..

aSpecified to utilize advanced receivers

Multi-user detection and smart adaptive antennas.

90
T
Two A
Access Methods:
M th d FDD & TDD

a FDD (Frequency Division Duplex):

Uplink and downlink operate on entirely separate frequency bands
(PAIRED SPECTRUM).
A DUPLEX SEPERATION of 190 MHz is used to avoid
interference between the two signals.
FDD is better suited to covering wide areas with lower
transmission rate.

a TDD (Time Division Duplex):

Uplink and downlink share the same frequency band.
To avoid overlap between uplink and downlink from propagation
delays, a GUARD PERIOD is allocated.
TDD is suitable for small cell areas where higher data rates can be
provided.
91
92
Spreading and Despreading of DS-CDMA
(1/2)

a The operation of spreading:

Combine the original data with the spreading code, resulting in the
spread signal.
The rate of change of data in the spread signal is higher than in
g
the original data, and it is equal to the chip rate.
X-OR function:
1 xor 1 = 0; 1 xor 0 = 1; 0 xor 1 = 1; 0 xor 0 = 0

a The operation of despreading:

The same XOR function is applied to the transmitted signal using
the same spreading code.
Thi
This recovers theth original
i i l data,
d t and d returns
t the
th rate
t off change
h off
the data (i.e., bandwidth) to its pre-spreading value.

93
Spreading and Despreading of DS-CDMA
(2/2)

aData signals
g are not transmitted as 1s and 0s.
aThey are converted into a bipolar waveform,
+1 and -1.
a1 -1;
1; 0 1

94
Spreading Multiple Signals

aA Receiver must be able to separate the various

signals and associate them with the particular
user,
ser user
ser data and/or control information as
required.
Different signals are assigned different spreading codes.
TIME
TIME ALIGNMENT
ALIGNMENT is made between various spreading
codes.
This is most simply illustrated using a case involving two
data sources.

95
Spreading Multiple Signals 96
De Spreading Multiple Signals
De-Spreading

a At the receiver, to reassemble data, the combined

waveform signal is de-spread using the specific code
assigned to that original set of data.
a The de-spread signal is then determined by taking the
value of the integration at the decision point at the end
off each
h symbol
b l period.
i d
a The integrator
g is then reset to zero at the start of the
next symbol period.
a Spreading Factor = the ratio of transmitted bandwidth to
information bandwidth (chip rate/data rate).

97
 98
De-spreading Multiple Signals
Spreading Factors and Capacity

aCapacity
p y limited by
y ((1)) Number of users ; ((2))
Higher data rates
aNoise level varies depending on which signal is
g despread
being p
As the wanted signal is despread, its contributions to the
overall system
y noise level need not be considered with
respect to the despread signal

99
Spreading Factors and Capacity

100
UMTS CODES
a Channelisation Codes and Scrambling Codes have the
same chip rate

101
Channelisation Codes
aThe codes are used to separate different
transmissions from a single source (from UE
i uplink,
in li k from
f Node
N d B in
i downlink)
d li k)
In the uplink, this means the separation of the physical
y
(user) data and control and signalling data from the same
terminal.
In the downlink, this means the separation of downlink
connections (control channels and traffic channels) to
different users within one cell
cell.

aUplink
p code lengths:
g 4 to 256
aDownlink code lengths: 4 to 512
102
OVSF (Orthogonal Variable Spreading
F t ) Codes
Factor) C d

103
The Use of OVSF Codes

a The Spreading Factor (SF) can be changed (e.g., for variable bit-
rate
t services)
i )
a A new spreading code with the new length can be chosen while still
remaining orthogonal to the original code
code.
a The chip-rate remains constant at 3.84 Mcps.
a C
Code
d clashes
l h will
ill occurs where
h ttwo codes
d are chosen
h ffrom th
the
same branch.
a Codes on separate branches are orthogonal
orthogonal and can be used
simultaneously.
a The generations of channelisation codes are based on the OVSF
codes.

104
Scrambling Codes (1/2)

a The scrambling codes differentiate signals from different

sources.
a At the receiver, the reverse process occurs, with the
signal
i l fi
firstt d
de-spread
d using
i ththe scrambling
bli code,
d and d
then combined with the channelisation codes.
a Uplink:
U li k million
illi off codes
d
a Downlink: limited to up to 512 codes
a Spreading factor defines the number of channelisation
codes per scrambling code
a Scrambling doesnt change the chip rate

105
Scrambling Codes (2/2)

a WCDMA is described as asynchronous

y
since it uses different scrambling codes to separate users from
cells.

a By contrast, IS-95 is synchronous

Without assigning different scrambling codes instead requires
that the application of spreading codes is synchronized with GPS
at the BS.

a Generated by using Pseudo-Random number

sequences known as a PN sequence.
A sequence of binary numbers which appears to be random.

106
Cell Breathing

aCell Breathing.
The
Th effective
ff ti expansion
i andd contraction
t ti off a given
i cell
ll due
d
to sudden changes in the number of mobile users within
the cell.

aIn order to continue to provide good service

quality to users close to the cell site
site, users
further away must be excluded.
This means that the cell must in effect shrink.
The users who are further away must then be served by
adjacent
dj t cells
ll by
b performing
f i soft
ft handovers.
h d

107
Cell Breathing
figure owned by
Informa Telecoms

108
Part 4: MM Procedure in
UMTS

109
Outlines

a GSM/GPRS/UMTS Network
a Control Plane for UMTS and GPRS Mobility
Management
a User Plane for UMTS and GPRS
a Service Areas Partition in GPRS and UMTS
a UTRAN Tracking
a MM Functions
a MM State
a MM Context and PDP Context

110
GSM/GPRS/UMTS Network[3g23.060]
N t k[3 23 060]
SMS-GMSC
SM SC
SM-SC
SMS-IWMSC

E C CAMEL GSM-
Gdd SCF

MSC/VLR HLR
D Ge
Gs
A Iu Gc
Gr
R Uu Iu Gi
TE MT UTRAN SGSN GGSN PDN TE
Gn
Ga
Gb Ga
TE MT BSS Gp
Gn Billing
R Um CGF
System
GGSN
SGSN Gf EIR
Other PLMN

Signalling
Si lli Interface
I t f
Signalling and Data Transfer Interface
111
GPRS Network
a To be simplified (but may be misleading), GPRS is evolved from
GSM by introducing two new core network nodes Serving GPRS
Support Node (SGSN) and Gateway GPRS Support Node (GGSN).(GGSN)
a Existing GSM nodes (BSS, MSC/VLR, and HLR) are upgraded.
a GPRS BSS consistsi t off Base
B Transceiver
T i St
Station
ti (BTS) andd Base
B
Station Controller (BSC) where the BSC is connected to the SGSN
through
g frame relay y link.
a The BTS communicates with the MS through the radio interface Um
based on the TDMA technology.
a Three operation modes are defined for GPRS MS:
Class A MS allows simultaneous CS and PS connections.
Class B MS provides automatic choice of CS or PS connection, but only
one at a time.
Class C MS only supports PS connection.
connection

112
UMTS Network
a UMTS is evolved from GPRS byy replacing
p g the radio access
network.
a The UTRAN (UMTS Terrestrial Radio Access Network) consists of
Node Bs (the 3G term for BTS) and Radio Network Controllers
(RNCs) connected by an ATM network.
a The RNC and the Node B serving
g an MS are called the Serving
g
Radio Network System (SRNS).
a In UMTS, every Node B is connected to an RNC through the Iub
interface.
interface
a Every RNC is connected to an SGSN through the IuPS interface,
g the IuCS interface.
and to an MSC through
a An RNC may connect to several RNCs through the Iur interface.
a Unlike RNCs in UMTS, the BSCs in GPRS/GSM do not connect to
each other.
a The IuCS, IuPS, Iub, and Iur interfaces are implemented on the
ATM net
network.
ork
113
UMTS User Equipment

aThe User Equipment

q p ((UE;; the 3G term for MS))
connects with Node Bs through the radio
interface Uu based on the WCDMA (Wideband
(
CDMA) technology.
aThree operation modes are defined for UMTS
UE:
PS/CS mode UE is equivalent to GPRS Class A MS.
PS mode UE is equivalent to GPRS Class C MS.
CS mode UE can only attach to the CS domain.

114
Core Network Evolution

a In terms of the core network evolution from GPRS to

UMTS, both SGSN and MSC need to be modified.

a Other core network nodes such as HLR (specifically,

HLR packet domain subscription data), VLR
(
(specifically,
ifi ll VLR and d SGSN association),
i ti ) and d GGSN
(specifically, PDP contexts) are basically the same.

a The SGSN and the MS are modified (specifically MM

and PDP contexts and the related procedures)
procedures).

115
C t l Planes
Control Pl ffor UMTS and
d GPRS (1/2)

(a) Control plane for UMTS Mobility Management

(b) Control Plane for GPRS Mobility Management

116
 Control Planes for UMTS and GPRS (2/2)
a Unlike GPRS, the LLC layer is not supported in UMTS. In GPRS, reliable
communication between MS and SGSN is guaranteed by LLC LLC.
a In UMTS, Radio Resource Control (RRC) protocol is responsible for reliable
connection between MS and UTRAN, and Signaling Connection Control Part
(SCCP) is responsible for reliable connection between UTRAN and SGSN.
a Specifically,
p y, radio resources are managed
g byy RRC exercised between the MS and
the UTRAN.
a On top
p of SCCP,, the Radio Access Network Application
pp Part ((RANAP)) p
protocol
supports transparent mobility management signaling transfer between the MS and
the CN which are not interpreted by the UTRAN.
a RANAP is also responsible for serving RNC relocation, radio access bearer ( RAB)
management, and so on.
a In both GPRS and UMTS the GPRS Mobility Management (GMM) protocol
supports mobility management functionality, which is the focus of this paper. In
3GPP 23.121,
23 121 GMM for UMTS is also referred to as UMTS MM (UMM).(UMM)
117
MM M
Messaging
i b
between
t MS and
d SGSN

a In GPRS, the mobility

y management
g ((MM)) messages
g are
delivered through the Gb and the Um interfaces.
Specifically,
p y, an LLC link p
provides signaling
g g connection between
the MS and the SGSN in GPRS.

a In UMTS, the MM message transmission is performed

through the Iu and the Uu interfaces.
IIn UMTS
UMTS, the
h signaling
i li connection
i consists
i off an RRC connection
i
between the MS and UTRAN, and an Iu connection ( one RANAP
instance) between the UTRAN and the SGSN.

118
MM Messaging between SGSN and
Oth CN Nodes
Other N d

a In both GPRS and UMTS, GSM Mobile Application

pp Part
(MAP) is used to interface SGSN and the GSM nodes.
For example, Gr for HLR and Gs (the BSSAP
BSSAP+ protocol or
BSS Application Protocol + ) for MSC/VLR. SGSNs and
GGSNs communicate by using the GPRS Tunneling
P t
Protocol
l (GTP) through
th h the
th Gn
G interface.
i t f
Specifically, a GTP tunnel is established between two GPRS
nodes
d to t deliver
d li the
th packets.
k t This
Thi tunnel
t l is
i identified
id tifi d by
b a
tunnel endpoint identifier (TEID), an IP address and a UDP
port number.

119
User Planes for GPRS and UMTS
Application

E.g., IP, E.g., IP,

PPP PPP

Relay Relay

PDCP PDCP GTP-U GTP-U GTP-U GTP-U

RLC RLC UDP/IP UDP/IP UDP/IP UDP/IP

MAC MAC AAL5 AAL5 L2 L2

L1 L1 ATM ATM L1 L1
Uu Iu-PS Gn Gi
MS UTRAN 3G-SGSN 3G-GGSN

(a) User plane for UMTS

Application
IP IP
Relay
y
SNDCP SNDCP GTP-U GTP-U

LLC LLC
Relay UDP UDP
RLC RLC BSSGP BSSGP
IP IP
MAC MAC Network Network L2 L2
Service Service
GSM RF GSM RF L1bis L1bis L1 L1
Um Gb Gn Gi
MS BSS SGSN GGSN

(b) User Plane for GPRS

120
Summary: GPRS and UMTS
A hit t
Architecture

a In both GPRS and UMTS, IMSI is used as the common

user Identity, and common MAP signaling is applied to
both systems as well as GSM.
a Unlike GPRS, UMTS Radio network parameters and
radio resources are managed in the UTRAN
UTRAN.
a Link GPRS BSS, the UTRAN does not coordinate MM
procedures that are logically between the MS
S and CN.
C

121
Concepts of Mobility Management

a In order to track the MSs,

MSs the cells (i
(i.e.,
e BTSs/Node Bs) in GPRS
/UMTS service area are partitioned into several groups. To deliver
services to an MS, the cells in the group covering the MS will page the
MS to establish the radio link
link.

a In the CS domain, cells are partitioned into location areas (LAs). The
LA of an MS is tracked by the VLR
VLR.

a In the PS domain, the cells are partitioned into routing areas (RAs). An
RA is typically a subset of an LA
LA. The RA of an MS is tracked by the
SGSN.

a In GPRS,
GPRS the SGSN also tracks the cell of an MS in PS connection
(i.e., when packets are delivered between the MS and the SGSN).

a In UMTS,
UMTS the cells in an RA are further partitioned into UTRAN RAs
(URAs). The URA and the cell of an MS are tracked by the UTRAN.

122
Location Areas, Routing Areas, and
UTRAN Routing
R ti Areas
A

123
Areas Tracked by the Network
N d
Nodes

124
UTRAN Tracking (1/2)
a In UMTS
UMTS, the UTRAN tracking is triggered bby the
establishment of the RRC connection. In the MS and the
UTRAN an RRC state machine is executed.
UTRAN, executed

125
UTRAN Tracking (2/2)

a In the RRC Idle mode, no RRC connection is

established, and the MS is tracked by the SGSN at the
RA level.
a When the RRC connection is established, the state
moves from RRC Idle to RRC Cell Connected,, and the
MS is tracked by the UTRAN at the cell level.
a If,
If for example
example, no PDUs are transmitted before an
inactivity timer expires, the state moves from RRC Cell
Connected to RRC URA Connected, and the MS is
tracked by UTRAN at the URA level.

126
MM Functions (1/2)

a The MM functions for PS-based services are

(1) PS attach procedure allows an MS to be known by the
PS service domain of the network.
For example, after the MS is powered on, the PS attach procedure
must be executed before the MS can obtain access to the PS
services.
Note that the term PS attach is used in UMTS and the term
GPRS attach is used in GPRS.
Similarly
Similarly, we have the term CS attach for UMTS and IMSI
attach for GPRS.

(2) PS detach procedure allows the MS or the network to inform

each other that the MS will not access the SGSN-based services.

127
MM Functions (2/2)

((3)) Tunneling
g of non-GSM signaling
g g message
g
procedures support communication between
GPRS/UMTS and non-GSM systems (e (e.g.,
g
EIA/TIA IS-136).
The SGSN forwards the signaling messages to the non-
GSM MSC/VLR using the BSSAP+ protocol in the Gs
interface.
interface

128
MM States
a In GPRS and UMTS,
UMTS an MM finite state machine is
exercised in both SGSN and MS to characterize the
y management
mobility g activities for the MS.
a In GPRS, the states in the machine are IDLE,
STANDBY and READY
READY.
a For UMTS PS service domain, these states are
renamed
d as PMM-DETACHED,
PMM DETACHED PMM PMM-IDLE
IDLE andd PMM
PMM-
CONNECTED.
a The MM state machines for both GPRS and UMTS
are basically the same.
a The MM states are stored in the MM contexts
y the MS and the SGSN.
maintained by
129
MM State Diagram (MS)

130
MM State Diagram (SGSN)

131
MM and PDP Contexts

a Mobility Management (MM) context provides mobility

i f
information
ti off an MS.
MS
a Packet Data Protocol (PDP) context provides
i f
information
ti tot supportt packet
k t delivery
d li between
b t an MS
and the network.
a While
Whil an MS may be b associated
i t d with
ith severall PDP
contexts, it only has one MM context.
a The
Th MM context
t t is
i maintained
i t i d in
i MS and
d SGSN
SGSN.
a The PDP contexts are maintained in MS, SGSN, and
GGSN.
GGSN

132
MM Context

aThe following
g fields in the MM context are
maintained in both GPRS and UMTS SGSN:
IMSI, MM state, P
P-TMSI,
TMSI, P
P-TMSI
TMSI signature,
International Mobile Equipment Identity (IMEI),
Mobile Station ISDN Number (MSISDN),
(MSISDN)
routing area, VLR number, new SGSN address
MS network access capability,
authentication triplets, Kc (currently used ciphering key),
selected
l t d ciphering
i h i algorithm,
l ith subscribed
b ib d charging
h i
characteristics, and several flags.

133
MM SGSN Context: GPRS vs UMTS
(L
(Location
ti Information)
I f ti ) (1/2)

aGPRS SGSN maintains cell identityy ((current cell

in READY state, or the last known cell in
STANDBY or IDLE state) and cell identity age
(time elapsed since the last LLC PDU was
received from the MS at the SGSN)
SGSN).
aThese two fields are not maintained in UMTS
SGSN because cell tracking is performed by the
serving RNC
RNC.

134
MM SGSN Context: GPRS vs UMTS
(L
(Location
ti Information)
I f ti ) (2/2)

a UMTS SGSN maintains the service area code (SAC),

and
d the
th elapsed
l d titime since
i th
the llastt SAC was received
i d att
the SGSN.
a Th
The SAC is
i usedd tto uniquely
i l id
identify
tif an area consisting
i ti
of one or more cells belonging to the same location
area.
a SAC and the location reporting procedure are used in
UMTS
U S for
o location
ocat o se
service
ce ((LCS)
CS) a
and
d ot
other
e se
services
ces
such as emergency calls .
a These fields are not maintained in GPRS SGSN
because the concept of SAC does not exist in GPRS.

135
MS MM Context: GPRS vs UMTS

aLocation Information
GPRS MS maintains cell identity.
In UMTS, cell tracking is not conducted at the mobility
management layer between the MS and the SGSN.
Thus, cell identity is not maintained in the MM context of
the MS. Instead, it is maintained between the MS and the
UTRAN.
UTRAN

aSecurityy Information
UMTS MS maintains extra security parameter CK next.

136
PDP SGSN Context: GPRS vs UMTS
(1/2)

aCore Network to Radio Access Network

Connection
The
Th UMTS maintains
i t i the
th TEID ffor th
the IIu interface
i t f and
d the
th IP
address of the RNC currently used.
These
Th two
t fields
fi ld are nott maintained
i t i d in
i the
th GPRS SGSN

aRadio Resource Information

The GPRS SGSN maintains radio priority (the RLC/MAC
radio priority level for uplink user data transmission).
These fields are not kept in UMTS SGSN.

137
PDP SGSN Context: GPRS vs UMTS
(2/2)

aPDU Information
GPRS SGSN maintains Send N-PDU number (SNDCP
sequence number of the next downlink NN-PDU
PDU to be sent to
the MS), Receive N-PDU number (SNDCP sequence
number of the next uplink N-PDU to be received from the
MS) packet
MS), k t fl
flow identifier
id tifi andd aggregate
t BSS QoS
Q S profile
fil
negotiated.
On
O the
th other
th hand,
h d UMTS SGSN maintains
i t i PDCP-SND
PDCP SND (the
(th
next PDCP sequence number to be sent to the MS) and
PDCP-SNU
PDCP SNU (the next PDCP sequence number expected
from the MS).

138
MS PDP context

aPDP type,
yp , PDP address,, PDP state,, dynamic
y
address allowed,
aAPN requested, NSAPI, TI,
aQoS profile requested,
requested QoS profile negotiated
negotiated,
and
aA flag

139
MS PDP Context: GPRS vs UMTS

aRadio Information
The GPRS MS maintains radio priority.
In
I UMTS,
UMTS th
the radio
di priority
i it for
f data
d t delivery
d li is
i determined
d t i d
by QoS profile, and the radio priority is not kept separately
in the MS.

aPDU Delivery Information

GPRS MS maintains BSS packet flow identifier, Send N-PDU
number and Receive N-PDU number.
UMTS MS maintains PDCP-SND and PDCP-SNU.

140
Relationship between MM States &
C t t (1/3)
Contexts

aThe status of an MM/PDP context is affected byy

the MM states
aIDLE (PMM
(PMM-DETACHED)
DETACHED)
The PDP context in the GGSN is deleted.
The MM and PDP contexts in MS and SGSN may or may not be
deleted.
If the MM state moves from STANDBY/PMM-IDLE
STANDBY/PMM IDLE to IDLE/MM-
IDLE/MM
DETACHED because the mobile reachable timer expires (e.g., the
MS is temporarily out of the GPRS/UMTS coverage), then these
two contexts shall not be deleted.
deleted
In this case, the location and routing information is stale.

141
Relationship between MM States &
C t t (2/3)
Contexts

aSTANDBY (PMM-IDLE)
(PMM IDLE)
In the STANDBY/PMM-IDLE state, valid MM contexts are
maintained in the MS and the SGSN.
SGSN
In this state, the PDP context can be activated and
deactivated.
deactivated
In UMTS, when the PDP context is activated in this state, no
Iu/radio connection is established between the MS and the
network because PDU delivery is not allowed in this state.
In GPRS the LLC link is connected.
connected

142
Relationship between MM States &
C t t (3/3)
Contexts

aREADY (PMM-CONNECTED)
( )
In the READY/PMM-CONNECTED state, valid MM contexts
are maintained in the MS and the SGSN.
As in the STANDBY/PMM-IDLE state, the MS may initiate
PDP context activation and deactivation.
In this state, the signaling connection is established in
UMTS.

143