UMTS Traffic Management

UMTS Traffic Management
1 © NOKIA CTXX 5324en 4.0.PPT/ 17.12.2002 / Björn Wigforss

UMTS architecture
RAN (UTRAN & GERAN) Core Network
SCEP
SMSC
Control Plane
HLR
&AuC
Node B
3G
MSC
BSC
Node B
AXC
Internet
Fiber
Fiber
Node B
ATM Access PSTN

2G 3G
RNC SGSN SGSN GGSN
BTS
Gateway Plane

UMTS network databases Used to support
subscriber
Contains subscriber IDs, Contains temporary services
service information and information on the
location attributes. In AuC subscriber
RAN subscriber security Mobility Core
SCEP
information and in some SMSC
implementations EIR
HLR
Control Plane
AuC
EIR
GSM
BTS
3G Used as an
BSC MSC intermediate
store for SMS
Triple
Mode
BTS AXC
Internet
Fiber
Fiber
WCDMA
BTS ATM access PSTN
2G 3G
RNC SGSN SGSN GGSN
Gateway Plane
Contains temporary
information on
subscriber

Unique subscriber identities one or more
MSISDN is
assigned to a
subscriber for
SCEP
different services
IMSI uniquely SMSC
identifies each Control Plane
subscriber. HLR
&AuC
Node B
3G
MSC
BSC
Node B
AXC
Internet
Fiber
Fiber
Node B
ATM Access PSTN

2G 3G
RNC SGSN SGSN GGSN
BTS
Gateway Plane
IMSI = MCC + MNC + MSIN MSISDN = CC + NDC + SN

Temporary subscriber identities
SCEP
The TMSI/TMUI is SMSC
generated by the
VLR and used for Control Plane
CS transactions HLR
&AuC
Node B
3G
MSC
BSC
Node B
AXC
Internet
Fiber
Fiber
Node B
ATM Access PSTN

2G 3G
RNC SGSN SGSN GGSN
BTS
Gateway Plane
P-TMSI is
allocated for
packet
transactions by the
SGSN.
Mobile terminal security
SCEP
RANis used to
The IMEI SMSC
track legal mobile
Control Plane
equipment (optional)
HLR
&AuC
EIR
Node B
3G
MSC
BSC
Node B
AXC
Internet
Fiber
Fiber
Node B
ATM Access PSTN

2G 3G
RNC SGSN SGSN GGSN
BTS
Gateway Plane

What is the bearer?
UE Node B RNC Core Network
Uu Iub/Iur Iu
UE Node B RNC Core Network

Uu Iub/Iur Iu
Data/Wireless Protocols are transparent to surrounding network
MGW
The MGW for 3G-MSC performs speech transcoding

Bearer characteristics
DOCUMENTTYPE 1 (1)
Mobile Phones
TypeYourNameHere TypeDateHere
•Conversational class •Streaming class

•Voice and video •Streaming video
•Interactive class •Background class

•Web browsing •Mail downloading

Types of bearer
• A bearer has
different
UE Node B RNC Core Network parameters,
Uu Iub/Iur Iu
such as
variable data
rates,
protection and
delay.
• The bearer is
Voice Video Streaming Audio Streaming
Voice Messages Videotelephony dependent on
the service
0 8 16 32 48 64 80 96 112 128 144 160 kbit/s required.
Messaging WWW browsing

Transactional Intranet access
Infoservices Downloading
Transmission over the network
Dedicated circuit
ATM link to the MGW at the HLR
MSC AuC
EIR 3G PSTN
MSC
Channels from the air-interface RNC

along the Iub Interface 3G
SGSN
GGSN Packet Data
Packets are tunneled to

the SGSN
Internet
Packets tunneled from the
SGSN to the GGSN
Physical channels in the air-

interface are separated by codes
Student Exercise:
Why do you think the RNC makes the decision on the type of bearer
that is allocated to a subscriber?
Layers - Bearer services in UMTS
TE MT UTRAN CN Iu CN TE
EDGE Gateway
NODE
End-to-End Service
TE/MT Local UMTS Bearer Service External Bearer

Bearer Service Service
Radio Access CN Bearer

Service
Bearer Service
Radio Bearer Iu Bearer Backbone

Service Service Bearer Service
UTRA Physical
FDD/TDD Bearer Service
Service

RAB (Radio Access Bearers) and
RRC (Radio Resource Connection)
4
UE RAN CN
Packet
RANAP Connection Network
re r
Bea
s s
Acce
dio
Ra
Packet Data Service
Speech Service
RRC Connection Radio Access Bearer RANAP Connection Circuit Switched
Video Service Radio Access Bearer Network
Student Exercise:
Can you think of an example where it may be necessary to
modify the radio resource connection?

Example: RAB Establishment (simplified)
4
Node B
Uu Iub RNC Iu SGSN

4
RAB Assignment Request
Iub bearer set-up

(AAL 5 virtual channel)
Iub bearer set-up
(AAL 2 virtual channel)
Radio Bearer Set-up

Radio Link Reconfiguration
Radio Link Reconfiguration Complete
Radio Bearer Set-up Complete
RAB Assignment Complete

Management of the radio bearer
Mobile has a single RRC
3G
MSC
RNC
3G
SGSN
RNC
RNC

As the subscriber moves a second
connection is made for a cell on the same
site (softer handover)
3G
MSC
RNC
3G
SGSN
RNC
RNC

As the mobile continues then the first
link is dropped, and a second cell is
added from another site (soft
handover)
3G
MSC
RNC
3G
SGSN
RNC
RNC
NOTE: Those BTS with an

active connection are known
to be part of the active set.

As the mobile continues then the second link is
dropped, and a second cell is added from
another RNC. A soft handover is possible as the
Iur interface exists.
3G
MSC
RNC
3G
SGSN
RNC
RNC
The RNC is known as the serving

(S-RNC) and the new RNC is the drift
(D-RNC). Note that the Iu connection is still
from the S-RNC.

As the mobile continues, the third connection is
dropped. The S-RNC has no active connection's
itself, so the Iu-RRC connection is moved to the D-
RNC.
3G
MSC
RNC
3G
SGSN
RNC
RNC

Finally, the mobile is now in area where the forth
connection is dropped and the new site selected is
under another RNC. The S-RNC does not have an Iur
interface to the target RNC, so the core network is used
to assist in the handover.
3G
MSC
RNC
3G
SGSN
RNC
RNC

Mobility Management - the role of the
HLR
3G
MSC
Core Network
Radio Access
RNC HLR
AuC Service Information
Location Updating EIR
Supplementary Services
3G 3G
MSC SGSN GGSN
Locating the Subscriber

3G
The HLR is a centralised MSC
database, which contains
information about the
Foreign Network
subscriber, location and RNC
3G
service information. In the SGSN
Nokia Solution authentication GGSN
information is also stored in
the HLR.
Page 29
Cellular architecture
LA = Location Area (MSC)
RA = Routing Area (SGSN)
URA = UTRAN Registration Area (RNC)
CEL Cell = Cell (RNC)
L
ROUTING Position = Positioning
Service (UTRAN)
CEL
CEL
CEL AREA L
URA L
L (RA) CEL
L
CEL CEL
Location Area (LA)
L L
CEL ROUTING
L
URA AREA CEL
L
(RA)
CEL
L CEL
L
LAI = MCC + MNC + LA Code CGI = MNC + MCC + LACode + CI

UTRAN Registration Area - URA
HLR 3G
&AuC 3G SGSN
If the LA or RA changes MSC
RNC will ensure updated
information is sent to the
core network.
RNC RNC RNC
As the subscriber moves from

one URA to another, then a
URA_update is performed.
URA URA URA URA URA URA

Page 32
Location based information
BTS
BTS
BTS
• Information about the actual

position of the subscriber (~40-
70m) can be stored and used by
the emergency services.
• This information can also be
used to provide mobility
services.
Location updating
The RNC keeps track of the
If the VLR is not
informed about the
mobiles within the URAs. It user then the data is
also informs the core removed
When switching on/off network when the
IMSI Attach/Detach subscriber moves between
HLR
RAs and LAs. 3G
MSC
VLR
RNC
3G
SGSN
RNC
Periodically over time if mobile

does perform an update
When moving from area to area - The SGSN keeps

Update on cell/LA/RA/URA level track of the mobiles

Routing area update
SGSN-1
RNC-1
RA-1
Old cell New cell

Mobility Management of states in the
SGSN
M M S ta te s in U E : M M S ta te s in S G S N :
P a c k e t R e c e iv e d P a c k e t R e c e iv e d
R a d io L in k R e le a s e I u C o n n e c t io n R e le a s e
D e ta c h P acket D e ta c h P acket
A tta c h A tta c h

Paging the subscriber
Routing Area
Paging Paging
BTS BTS
Mobile responds
to paging Paging
BTS

Network roaming
Home Network
BSC HLR
RNC
3G
MSC
3G
SGSN
2. If operators have a roaming agreement, information

is copied to visitor network (from VLR/HLR) International Network
3. Network Confirm access HLR
RNC
3G
MSC
3G
SGSN BSC
1. User requests access (IMSI Attach)
Visitor Network

Mobility Management procedures
• Location Registration (Circuit and Packet Switched)
• Location Update (Circuit Switched)
• IMSI Attach/Detach (Circuit Switched)
• Routing Area Update (Packet Switched)
• Cell Attach/Detach (Packet Switched)
• Location Info Retrieval (Circuit and Packet Switched)
• Paging (Circuit Switched)
• Paging (Packet Switched)
• Authentication Procedure (Circuit/Packet Switched)
• Ciphering Procedure (Circuit/Packet Switched)
• UE Identity Checking (Circuit/Packet Switched)
• UE Hardware (IMEI) Checking (Circuit/Packet
35 © NOKIA Switched)
CTXX 5324en 4.0.PPT/ 17.12.2002 / Björn Wigforss
Session Management
Communication Management (CM)
Session Management (SM)
Mobility Management (MM)

Radio Resource Management (RRM)
UE RAN CN

SCEP
SMSC
Control Plane
HLR
&AuC
Node B EIR
3G
BSC MSC
Node B
AXC
Internet
Fiber
Fiber
Node B
ATM Access PSTN
2G 3G
RNC SGSN SGSN GGSN
BTS
Gateway Plane

Gaining initial access to the network
Previous cell is tried and if not
there the terminal scans
frequencies and applies codes. If HLR
possible home network is 3G
selected. MSC
RNC
3G
Operator A (frequency 1) SGSN
Operator B (frequency 2)
Networks transmit
information about
themselves Operator C (frequency 3)
(MCC+MNC)

IMSI Attach when a subscriber is registered
in another VLR
1. Request Location Update (IMSI Attach) 5. HLR cancels the old location,
2. New VLR requests and receives old VLR sends acknowledgement
authentication
information and IMSI from previous VLR. 6. TMSI/TMUI allocation/acknowledgement
3. Authentication request and response and Location Update acknowledgement
4. New MSC/VLR updates HLR with new location.
HLR sends acknowledgement and subscriber
HLR
information. 4,
3G AC
MSC EIR
1, 5,
RNC
2,
3G
MSC
3G
SGSN
3, RNC also keeps

information about
6, subscribers within the
URA.

Requesting a bearer
1. Mobile sends a request for a bearer HLR

(on RACH and listens for reply) 3G
MSC
RNC
3G
SGSN
2. RNC will allocate a bearer for the

subscriber
Mobile in idle mode and

camping on a cell.

Authentication
Information is checked from the HLR
The IMSI and IMEI are checked HLR

(optional and at a changeable interval) 3G
MSC
RNC
3G
SGSN
The HLR contains information on

the subscriber, terminal, location
and services. Authentication
codes and keys are stored and
generated in the AuC
The SIM and terminal

contain authentication
keys

Authentication Data Request and
Authentication Data Response
VLR SG SN AuC
IM S I
RAND K SQ N
XRES AUTN CK IK
R A N D , A U T N , X R E S , C K , IK

User Authentication
UE VLR SG SN
RAND ,AU TN
RAND K AUTN
RES SQ N CK IK
R ES
U E c h e c k s w h e th e r th e V L R /S G S N c h e c k s
S Q N is b ig e n o u g h w h e th e r R E S = X R E S

Ciphering on radio path
In UMTS, multiple air-
interface channels are used in HLR
the connection to the mobile 3G
MSC
RNC
3G
SGSN
Ciphering is performed
in the RNC and the
mobile
Authentication codes are

used to create a signal which
is scrambled with the data. It
is almost impossible to
decode the signal without
knowing the keys

Simplified UMTS-GSM call setup
UE BS RNC MSC/VLR HLR MSC/VLR BSC BTS MS
1. Radio Resource Connection Request
2. Radio Link Setup
3. Radio Resource Connection Setup
4. RRC Setup Complete
5. Call Setup
6. Bearer Assignment Request (Create) - Bearer Parameters and Binding ID
7. RAB Setup / Radio Link Modification
8. Bearer Assignment Complete
9. HLR Enquiry
10. Send Routing Information (MSRN)
11. Call Setup Continues 12. Paging
13. Paging Response
14. Setup
15. Call Confirmed/Alert
16. Conversation

Simplified steps - PDP Context Activation
UE BS RNC 3G-SGSN DNS GGSN-1
1. Radio Resource Connection Request
2. Radio Link Setup
3. Radio Resource Connection Setup / Complete
4. PDP-Context Activation Request: Access Point Name (APN), QoS, IP Address GGSN selects the
Access Point and
5. Authentication assigns dynamic IP
6. GGSN address resolution Request (APN) Address
7. GGSN address resolution Response (192.10.45.1 = GGSN-1)
8. Create PDP Context Request; APN, Dynamic IP Address
9. Create PDP Context Response; Dyn. IP-address, Charging Id

10. Bearer Assignment Request (Create): NSAPI, offered QoS
11. RAB Setup / Radio Link Modification
13. PDP Context Activation Accept: NSAPI, given dynamic IP-address, offered QoS
PDP PDU GTP PDU GTP PDU

Packet - P D P C o n te x t A c t iv a t io n R e je c te d
states
- P D P C o n te x t A c t iv a t io n - P D P C o n te x t D e a c t iv a tio n
(la s t)
- P a c k e t D a ta D e ta c h
- P D P C o n te x t A c t iv a t io n
- P D P C o n te x t M o d if ic a t io n
- P D P C o n te x t D e a c t iv a tio n
GTP - GPRS Tunnelling Protocol
User User
t
packet User
Packet packe User
packet
User
packet
RNC
3G- GGSN
SGSN
The stream of
The stream of containers
containers
forming a tunnel.
form a 'tunnel'

De-activation of PDP Context
Releasing of bearer
UE BS RNC 3G-SGSN
1. PDP Context Deactivation Request
2. PDP Context Deactivation Accept
3. Bearer Assignment Request

(Release)
4. Radio Link Release

(Release)

Communication Management
• Email
End user application • MO-MT SMS
• etc...
• Subscriber's service profile

- location information
Service and customer - billing of service
application control - push control
- personalisation
- etc...
• Security
Network Application • Mobility
Intelligence • Charging information collection
Connection

Collection of charging data
HLR
3G
MSC
RNC Charging Gateway
3G
SGSN
GGSN
Billing Centre
CDR (Charging Data

Records) are sent to the
Billing Centre

Handling emergency calls
To different
The MSC defines if calls regional call
are allowed and where centres
HLR
they should be routed to, 3G
based upon location MSC
RNC
Location Based Server
3G
SGSN GGSN
If location based services

are used, then the
No checking is done emergency services can
(also SIM does not need gain accurate information
to be active) to make on the subscriber's location
emergency call

3G/UMTS Traffic Management
Review Questions

Review
1. In which network elements is security related information
located?
a. USIM
b. RNC
c. AuC
d. SGSN
e. Node B
f. non of all above

Review
2. Which parameter identifies the subscriber?
a. IMSI
b. IMEI
c. MCC
d. P-TMSI
e. TMSI
f. PIN

Review
3. Which location information is known in the UE?
a. LA
b. RA
c. URA
d. 3G-MSC supply area
e. 3G-SGSN supply area

Review
4. Which of the following is/are characteristic(s) of a UMTS
bearer?
a. Variable data rate
b. Transparent through the RAN
c. Different lengths of delay
d. Asymmetric connection
e. None of the above

Used in the RNC Review
UTRAN Registration Areas
______________________
Used by the CN PS Domain
Routing Areas
______________________
Used by the CN CS Domain

______________________
Location Areas
What other
information is kept?
__________________
Cell ID
__________________
Positioning Service
__________________
__________________

Review
6. Which of the following sentences about location update is NOT true?
a. IMSI attach is always made when the terminal is switched on.
b. Location/routing Area update takes place when a subscriber moves
between LAs and/or RAs.
c. Periodic location updates are not used in UMTS.
d. None of the above.
7. TRUE or FALSE
The URA (UTRAN Registration Area) is used by the core network to keep
track of subscribers in the network.

Review
7. Which of the following sentences about the RRC (Radio
8
Resource Connection) is true?
a. It is only used in GPRS networks.
b. It is a collection of radio access bearers over the air
interface.
c. It is a wireless protocol.
d. All of the above.
9
8. The operation of requesting a subscriber to contact the
network is called:
a. IMSI attach
b. Location update
c. Paging
d. Bearer allocation
Review
109. Which of the following sentences best describes authentication:
a. Security of the user information on the air interface
b. IMSI and IMEI checking
c. Supplementary service status checking (by the subscriber)
d. A process used by the GGSN to determine firewall access
10. In UMTS a terminal has two states, idle and connected.

11 In the following list, identify which state the mobile is in.
Idle
a. The mobile is in _______________mode when it is camping on a
cell.
Idle
b. The mobile is in _______________mode when it does not have
any connection state.
c. If data is being transferred from the packet core to the mobile,
Connected
then the state is _______________.

Review
12. During a PDP context activation process, which

information is transmitted from the UE to the
SGSN?
a. APN
b. PDP
c. GGSN address
d. DNS address
e. TID

Review
12. When a subscriber triggers an event in the network (e.g. a call), a
CDR is generated. What is a CDR?
a. Charging data record which is sent to a Billing/Charging Centre
b. Caller digital reset to the MSC
c. Customer data receipt, which is a bill that is sent to the customer
d. All of the above
13. True or False

SMS messages can be sent via the SGSN.

UMTS Traffic Management

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

UMTS Traffic Management

Uploaded by

Copyright:

Available Formats

UMTS Traffic Management

1 © NOKIA CTXX 5324en 4.0.PPT/ 17.12.2002 / Björn Wigforss

ATM Access PSTN

5 © NOKIA CTXX 5324en 4.0.PPT/ 17.12.2002 / Björn Wigforss

7 © NOKIA CTXX 5324en 4.0.PPT/ 17.12.2002 / Björn Wigforss

ATM Access PSTN

IMSI = MCC + MNC + MSIN MSISDN = CC + NDC + SN

ATM Access PSTN

ATM Access PSTN

11 © NOKIA CTXX 5324en 4.0.PPT/ 17.12.2002 / Björn Wigforss

UE Node B RNC Core Network

Data/Wireless Protocols are transparent to surrounding network

The MGW for 3G-MSC performs speech transcoding

12 © NOKIA CTXX 5324en 4.0.PPT/ 17.12.2002 / Björn Wigforss

•Conversational class •Streaming class

•Interactive class •Background class

13 © NOKIA CTXX 5324en 4.0.PPT/ 17.12.2002 / Björn Wigforss

Messaging WWW browsing

Channels from the air-interface RNC

Packets are tunneled to

Physical channels in the air-

TE/MT Local UMTS Bearer Service External Bearer

Radio Access CN Bearer

Radio Bearer Iu Bearer Backbone

16 © NOKIA CTXX 5324en 4.0.PPT/ 17.12.2002 / Björn Wigforss

18 © NOKIA CTXX 5324en 4.0.PPT/ 17.12.2002 / Björn Wigforss

Uu Iub RNC Iu SGSN

RAB Assignment Request

Iub bearer set-up

Radio Bearer Set-up

Radio Link Reconfiguration Complete

Radio Bearer Set-up Complete

RAB Assignment Complete

19 © NOKIA CTXX 5324en 4.0.PPT/ 17.12.2002 / Björn Wigforss

Mobile has a single RRC

20 © NOKIA CTXX 5324en 4.0.PPT/ 17.12.2002 / Björn Wigforss

21 © NOKIA CTXX 5324en 4.0.PPT/ 17.12.2002 / Björn Wigforss

NOTE: Those BTS with an

22 © NOKIA CTXX 5324en 4.0.PPT/ 17.12.2002 / Björn Wigforss

The RNC is known as the serving

23 © NOKIA CTXX 5324en 4.0.PPT/ 17.12.2002 / Björn Wigforss

24 © NOKIA CTXX 5324en 4.0.PPT/ 17.12.2002 / Björn Wigforss

25 © NOKIA CTXX 5324en 4.0.PPT/ 17.12.2002 / Björn Wigforss

Locating the Subscriber

LAI = MCC + MNC + LA Code CGI = MNC + MCC + LACode + CI

RNC RNC RNC

As the subscriber moves from

URA URA URA URA URA URA

28 © NOKIA CTXX 5324en 4.0.PPT/ 17.12.2002 / Björn Wigforss

Location based information

• Information about the actual

Periodically over time if mobile

When moving from area to area - The SGSN keeps

30 © NOKIA CTXX 5324en 4.0.PPT/ 17.12.2002 / Björn Wigforss

Old cell New cell

32 © NOKIA CTXX 5324en 4.0.PPT/ 17.12.2002 / Björn Wigforss

33 © NOKIA CTXX 5324en 4.0.PPT/ 17.12.2002 / Björn Wigforss

2. If operators have a roaming agreement, information

3. Network Confirm access HLR

34 © NOKIA CTXX 5324en 4.0.PPT/ 17.12.2002 / Björn Wigforss

Mobility Management (MM)

RAN (UTRAN & GERAN) Core Network

36 © NOKIA CTXX 5324en 4.0.PPT/ 17.12.2002 / Björn Wigforss