International Roaming Signaling Concepts

Rev4
1
3GPP Reference Model
2 International Roaming
Non Mobile Softswitch Solution
Mobile Softswitch Solution
SMS-SC LCS SCS CSE ADC LIS Charg SNM CA SYN

SC SMS GMLC SCS gsmSCF DCR LI-IMS LEMF BGw SOG GSC
OSS-RC
IWMSC/GMSC
Lh X1,X2
PS domain AUC HI3
Lg FNR HLR H
GGSN SGSN VIG
Engine
Gs D C Multi-Service
gsmSSF
CTM Network
(ANSI) GMSC
server
A gsmSSF Nc Nc TSC
RAN MSC server
PLMN
BSS A server Mc
EIR
F Mc
RNS Mc MGw
IuCS ISDN/PSTN
Nb
Nb
MGw MGw
DSS1/E1 Internet
Access Server Internet
PABX
Control plane
CAS, TUP
PRA User plane legacy
support support
Legacy NW
User & control
Mobile Softswitch Solution
Classic Vs MSS
HOME LOCATION REGISTER (HLR)
The HLR is a centralized network database that stores and manages all mobile subscriptions
belonging to a specific operator. It acts as a permanent store for a person's subscription
information until that subscription is cancelled.
The primary functions of the HLR include:
· Subscription database management
Communication with MSCs
· Communication with GMSCs
· Communication with AUCs
· Communication with VLRs/ILRs
Mobile switching centre (MSC)
MSC FUNCTIONS
The primary node in a GSM network is the MSC. It is the node which controls calls both to MSs
and from MSs.
The primary functions of an MSC include the following:
 Switching and call routing:
 Charging
 Service provisioning
 Communication with HLR
 Communication with the VLR
 Communication with other MSCs
 Control of connected BSCs
VISITOR LOCATION REGISTER
The role of a VLR in a GSM network is to act as a temporary storage location for subscription
information for MSs which are within a particular MSC service area.
The primary functions of the VLR are:
1. To inform the HLR that a subscriber has arrived in the particular area covered by the VLR.
2. To track where the subscriber is within the VLR area (location area) when no call is
ongoing.
3. To allow or disallow which services the subscriber may use.
4. To allocate roaming numbers during the processing of incoming calls.
5. To purge the subscriber record if a subscriber becomes inactive whilst in the area of a
VLR. The VLR deletes the subscriber's data after a fixed time period of inactivity and
informs the HLR (e.g., when the phone has been switched off and left off or when the
subscriber has moved to an area with no coverage for a long time).
6. To delete the subscriber record when a subscriber explicitly moves to another, as

instructed by the HLR.
GATEWAY MSC (GMSC)
The GMSC is an MSC serving as an interface between the mobile network and other
networks, such as the Public Switched Telephony Network (PSTN), Integrated Services
Digital Network (ISDN) and other Public Land Mobile Networks (PLMN).
For example, if a person connected to the PSTN wants to make a call to a GSM mobile
subscriber, then the PSTN exchange will access the GSM network by first connecting the
call to a GMSC.
The GMSC requests call routing information from the HLR that provides information about
which MSC/VLR to route the call to.
The same is true of a call from an MS to another MS.
Signaling Concept
Signaling is the language of telecommunication that machines
and computers use to communicate with each others.
The term signaling, refers to the exchange of control
information associated with the setup and release of a
telephone call on a telecommunications circuit.
Signaling functions
Main Function of Signaling:

To Set-up a call
To supervise the call
To clear a call
Signaling in GSM
C7/SS7 SIGNALING
Signaling System No. 7 (SS7) is a set of telephony signaling protocols

which are used to set up most of the world's public switched telephone
network telephone calls.
SS7 (also known as C7) is an internationally agreed signaling system
used for high-speed digital transmission between exchanges. C7/SS7 is
a Common Channel Signaling system.
C7/SS7 is defined by the main international organization for
telecommunications standards, the International Telecommunications
Union - Telecommunication Standardization Bureau (ITU-T). The ITU-T
replaces the former Comité Consultatif International Telegraphique et
Telephonique (CCITT).
SS7 Protocol Stack
OSI SS7
SS7 Protocol Stack
• MAP, CAP, INAP, SMS, ISUP and BICC are part of SS7 Protocol
Mobile CAMEL Intelligent
4 Application Application Network
Part Part Appl. Part
(MAP + SMS) (CAP) (INAP)
ISUP BICC
RANAP BSSAP
Transaction
Capabilities
Application Part
(TCAP)
Signaling Connection and Control Part (SCCP)
3
Message SIGTRAN
2 Transfer Part (M2UA, M3UA,SUA)
(MTP)
1
SS7 Protocols in Various Network Elements
SS7 Protocols Summary
SS7 Facts
Signaling is generally needed in complex systems for delivering
control information in order to influence procedures
In telecom networks, signaling is needed, mainly in connection
with the following procedures:
set-up, supervision and release of telecommunication
connections and services.
database queries concerning specific services, roaming in
cellular networks, etc.
in connection with management procedures
Signaling in a 3rd generation network
ADDRESSING THE SWITCHING SYSTEM
ENTITIES IN SS7
Global Title (GT)
A Global Title (GT) is the address of a node.

This unique number is used to signify where the message originated
from (referred to as the ‘Calling Party Address’) and also the destination
of the message (referred to as the ‘Called Party Address’).
The GT has a numbering format based on a dialed number; a number
like an MSISDN .
Structure of the SCCP Message
CAMEL (customized applications for mobile network enhanced logic)
• CAMEL allows users to obtain the full range of services usually
offered by their home network provider when roaming to a visited
operator’s network.
• The CAMEL application part (CAP) provides a standardized
protocol that can be used between operators.
• This protocol allows service descriptions and information such as
pre-paid subscription details to be retrieved even when the user is
roaming.
23 International Roaming 2/19/2014

CONNECTING NETWORKS
PSTN
The first automatic communications network application was the Public
Switched Telephone Network (PSTN). It is used to offer the basic telephony
functions as well as a full range of basic and advances PSTN services.
Mobile networks usually connect to the PSTN for international network
access.
ISDN
The Integrated Services Digital Network (ISDN) is a network that supports
more advanced services such as data and fax calls. The information that is
carried with a call is more detailed than that of the PSTN.
PLMN
Other Public Land Mobile Networks (PLMNs) can be connected directly to
each other. However, as already discussed, the usual way to connect to
other mobile networks is via either the ISDN or PSTN.
Cell
A cell is the basic unit of a cellular system and is defined as the area of radio
coverage given by one BS antenna system.
Each cell is assigned a unique number called Cell Global Identity (CGI).
In a complete network covering an entire country, the number of cells can be
quite high.
Location Area (LA)
A Location Area (LA) is defined as a group of cells.

Within the network a subscriber’s location is linked to the LA in which they
are currently located.
The identity of the current LA is stored in the VLR.
When an MS crosses the boundary between two cells belonging to different
LA’s, it must report its new Location Area to the network1.
If it crosses a cell boundary within a LA, it does not report its new cell
location to the network.
When there is a call for an MS, a paging message is broadcast within all the
cells belonging to the relevant LA.
MSC Service Area
An MSC service area is made up of a number of LAs and represents the

geographical part of the network controlled by one MSC.
In order to be able to route a call to an MS, the subscriber's MSC service
area is also recorded and monitored. The subscriber's MSC service area is
stored in the HLR.
PLMN Service Area
A Public Land Mobile Network (PLMN) service area is the entire set of cells
served by one network operator
defined as the area in which an operator offers radio coverage and access to
its network.
In any one country there may be several PLMN service areas, one for each
mobile operator's network.
When the user is outside of your service provider’s local (HPLMN (HPLMN,
this user is in the VPLMN (VPLMN).
GSM Network Identities
Network identities are numbers that a GSM network uses to locate a mobile
subscriber when it is establishing a call to that subscriber.
it is important that each identity is unique and correct.
Numbering plans are used to identify different networks as specified by the
International Télécommunications Union - Télécommunications (ITU-T).
Subscriber-Related Identities
1. Mobile Station ISDN Number (MSISDN)
The Mobile Station ISDN number (MSISDN) uniquely identifies a mobile telephone subscription in the PSTN
numbering plan.
This is the number dialed when calling a mobile subscriber.
As the MSISDN is the actual telephone number of the mobile subscriber, it is the only network identity that
subscribers are aware of. All other network identities discussed in this chapter are for internal network use and
subscribers do not need to be aware of them.
For Example: When dialing

Zain Sudan Subscriber from
anywhere
Int. CC NDC SN
00 249 91 2345678
CC Country Code
NDC National Destination Code
SN Subscriber Number
The maximum length is 15 digits
2. International Mobile Subscriber Identity (IMSI)
The International Mobile Subscriber Identity (IMSI) is a unique identity allocated to each subscriber that
facilitates correct subscriber identification over the radio path and through the network.
It is used for all signaling in the PLMN.
All network related subscriber information is connected to an IMSI.
The IMSI is stored in the SIM, the HLR and in the serving VLR.
For Example: IMSI of Zain

Sudan
MCC MNC MSIN

1234567890
634 01
MCC Mobile Country Code
MNC Mobile Network Code
MSIN Mobile Station Identification Number
3. Temporary Mobile Subscriber Identity (TMSI)
The Temporary Mobile Subscriber Identity (TMSI) is a temporary IMSI

number made known to an MS at registration.
It is used to protect the subscriber's identity on the air interface.
The TMSI has local significance only (that is, within the MSC/VLR area) and
is changed at time intervals or when certain events occur such as location
updating.
Every operator can choose the TMSI structure, but it should not consist of
more than 8 digits.
Equipment-Related Identities
1. International Mobile Equipment Identity (IMEI)
The International Mobile Equipment Identity (IMEI) is used to uniquely identify MS equipment to the network.
The IMEI is used for security procedures such as identifying stolen equipment and preventing unauthorized access to the network.
According to the GSM specifications, IMEI has a total length of 15 digits, and consists of the following:
TAC Type Approval Code, determined by a central GSM body
FAC Final Assembly Code, identifies the manufacturer
SNR Serial Number, an individual serial number of six digits uniquely identifies all equipment within each TAC and FAC
Spare A spare digit for future use. When transmitted by the MS this digit should always be zero
Location-Related Identities
1. Mobile Station Roaming Number (MSRN)
The Mobile Station Roaming Number (MSRN) is a temporary network

identity which is assigned during the establishment of a call to a roaming
subscriber.
The MSRN consists of three parts:
Note: In this case, SN is the address to servicing MSC/VLR. SN= Servicing

Node.
Usage of MSRN
Location-Related Identities
2. Location Area Identity (LAI)
The Location Area Identity (LAI) is a temporary network identity, which is

also required for routing.
The two main purposes of the LAI are:
A.Paging, which is used to inform the MSC of the LA in which the MS is
currently situated
B.Location updating of mobile subscribers
The LAI contains the following:
• LAC Location Area Code,
• the maximum length of LAC is16 bits, enabling 65,536 different
location areas to be defined in one PLMN
Location Updating
 For the mobile subscriber to receive a call wherever he or she is,

the network needs to know the location of the mobile station.
 The mobile station must inform the system whenever it changes
location area.
 A location area consists of one or more cells in which a mobile
station can move around without needing to update the system on
its location.
 A location area is controlled by one or more BSC/RNCs for
GSM/WCDMA but by only one MSC Server.
 In case of a call to a subscriber, BSC/RNC sends paging
messages to the Radio Base Station (RBS) defined within a
certain location area.
 If the mobile station moves between cells belonging to different
location areas, the network must be informed via a procedure
called location updating.
Location Updating
There are four different types of location updating:

1. · Normal
2. · IMSI detach
3. · IMSI attach
4. · Periodic registration
ADDRESSING THE SWITCHING SYSTEM
ENTITIES IN SS7
Mobile Global Title (MGT)
When a mobile station is powered on in a PLMN, the VLR must
communicate with the mobile station’s HLR to perform location
updating.
The only data available in the MSC/VLR Server for the SCCP addressing
of the HLR is the IMSI number.
However, for signaling in the international PSTN/ISDN network, IMSI
cannot be used. Thus it is necessary to convert the IMSI number in the
MSC/VLR into a Global Title (GT) which enables routing of the S7
signaling to the proper HLR. This converted number is called
the Mobile Global Title (MGT).
Normal Location Updating
IMSI DETACH
In the system information broadcasted on the air interface, the MS/UE receives
information on whether the IMSI attach/detach function is used or not. If it is used,
the MS/UE must inform the network when it enters an inactive state (detach).
IMSI ATTACH
IMSI attach is a complement to the IMSI detach procedure. It is used by the mobile
subscriber to inform the network that it has reentered an active state and is still in
the same location area. If the MS/UE changes location area while being switched
off, a normal location update must take place when it is powered on.
PERIODIC REGISTRATION
Call to MS
Roaming
What is Roaming?
“Roaming is defined as the ability for wireless customers to
automatically make and receive voice calls, send and receive
data, or access other services when travelling outside the
geographical coverage area of their own home network, by
means of using a visited network.”
Simplified
Service by a mobile network operator enabling access

to its network for subscribers to a foreign mobile
network for making and receiving calls
Types of Roamers
Inbound Roamer
From an operator’s perspective, someone else’s subscriber that has
roamed into that operator’s network and is receiving service. For
example, if a subscriber from operator A roams into operator B’s
network, that subscriber is an inbound roamer from operator B’s
perspective.
Outbound Roamer
From an operator’s perspective, an outbound roamer is one of their
subscribers that has roamed out of their home network and is
receiving service from a partner’s network. For example, if a
subscriber from operator A roams into operator B’s network, that
subscriber is an outbound roamer from operator A’s perspective.
Types of Roaming
There are two types of roaming:
•National – to the ability to move from one mobile operator to
another in the same country, such as from T-Mobile to O2 (in the
UK). National roaming is more dependent on regulatory actions than
business partnerships or market demand.
•International - enables the clients of one network operator to use
the services of another foreign operator where both networks have a
commercial agreement in place to permit this, once all testing and
technical implementation are completed. International roaming is
easiest using the GSM standard, as it is used by over 80% of the
world’s mobile operators.
•From this point onwards, by ‘roaming’ we mean ‘International
Roaming’.
What is GSMA ?
The GSM Association (GSMA) is an association of mobile operators

and related companies devoted to supporting the standardizing,
deployment and promotion of the GSM mobile telephone system.
GSMA publish guidelines for network interoperability on a

commercial and technical level. GSMA provides services where
common central resources are required by the industry.
Roaming Services
The service a roamer enjoys in a visited network depends on three

factors:
mobile station (MS) capabilities, the agreed list of services in the
roaming agreement, and the subscription level.
Commercially available handsets generally support the following
network capabilities: GSM , GSM + GPRS, GSM + GPRS + 3G.
Roaming services can be divided into three category :

1. Basic agreements Voice & SMS - (IR24)
2. GPRS, EDGE – (IR35)
3. CAMEL – (IR32)
The Evolution Of Mobile Phones
The Roaming Functions
 IREG (Inter-Working, Roaming Expert Group)
This person or group actually:
• Order signaling links and opening the network to testing later to commercial
Roaming.
• performs the Roaming tests.
trouble shoots for network problems
TADIG (Transferred Account Data Interchange Group)
This function will (on the basis of the data produced when performing the
technical roaming testing) perform billing tests. They will be responsible for TAP
(Transferred Account Procedure) formats, liaison with Data Clearing House (if
used) and managing the TAP file flows between networks on a daily basis. TADIG
activities can also be outsourced partially or completely to a vendor.
While the IREG testing is to test the proper functioning of the
established communication links that performed by IREG Engineers
, the TADIG testing is to check the billability of the calls.
IREG tests
IR24 back
include MAP interworking and basic CS services like MOC, MTC, Call Forwarding,
SS Barring, ODB Barring and SMS while roaming. These tests prove the roaming
functionality for MSC, VLR and HLR. These tests apply for any pair of networks that
would like to offer CS services to their customers abroad.
IR35
Tests include PS/GPRS roaming service functionality of SGSN and GGSN. The GPRS
HLR functionality is also tested. These tests apply for any pair of networks that
would like to offer PS services to their customers abroad.
IR32
Tests apply for testing the CAMEL protocol functionality in the roaming case
between networks that would like to offer IN services to their customers abroad.
DOCUMENTATION USED
AA.12 document,
In conjunction with AA.13 and AA.14 comprise The GSMA’s standard international
roaming agreement for operators who would like to establish BILATERAL
international roaming services.
AA.13 document
Begins with the description on agreement management principles on how to
update roaming agreement; i.e. Info on Billing Data, Settlement Procedure, Testing,
and Fraud.
AA.14 document
Contains operator specific information, some of the information is classified as
Operator Confidential, such as the Inter- Operator Tariff.
DOCUMENTATION USED
IR.21 document
Contains operator Specific technical details; i.e. GSMA roaming Database for Each
operator .
Billing & Transfer Information
Is the summarized info required for TAP files transfer and other billing and details
of the operator. This document is now part of AA.14
TCC – TADIG Completion Certificate
CLL – Commercial Launch Letter
Basic Building Block Of establishing International
Roaming
IREG testing •To verify the completed Commercial

IR24 (from RP) with the
• Negotiate IRAs. record captured, for billing Launch letter
• Exchange of test •Common IREG testing and rating accuracy.
SIM cards and (need to be schedule Once complete, TADIG • Official launch date will
setup signaling with the RPs for mutual tester will issue for
confirmation of launch
be signed by both IR
link – Required testing)
readiness. managers as a
before proceed •Individual IREG testing
( can be done by our
notification of the
with testing.
own) Exchange of IR24 TADIG commercial launch
once testing completed. testing
Commercial
The technical aspects of international mobile
roaming
The technical process of a roaming call is called ‘routing’.

To understand the routing of international mobile call, SMS and
data roaming services, a basic understanding of the signaling
behind mobile phone calls is needed. A mobile phone call
requires two different types of signals: the ‘control’ signal and the
‘voice’ signal. The control signal carries the network data of the
call. This signal allows for the mobile phone to be identified, and
records the destination, length and geographical location of the
call. The voice signal carries the actual voice, SMS or data
message.
How dose International Roaming work?(10/1)
The details of the roaming process differ among types of

cellular networks, but in general, the process resembles the
following:
1. When the mobile device is turned on or is transferred via a

handover to the network, this new "visited" network sees the
device, notices that it is not registered with its own system,
and attempts to identify its home network. If there is no
roaming agreement between the two networks, maintenance
of service is impossible, and service is denied by the visited
network.
How dose International Roaming work? (10/2)
2- The visited network contacts the home network and requests

service information (including whether or not the mobile should be
allowed to roam) about the roaming device using the IMSI number.
3- If successful, the visited network begins to maintain a temporary

subscriber record for the device. Likewise, the home network updates
its information to indicate that the mobile is on the host network so
that any information sent to that device can be correctly routed, and
here location update process complete (LU).
Roamer Location Update (10/3)
IMSI
Copy of the HLR
MSC/VLR Profile (data) will
634 01
be stored in
Stock. VLR
Is
roaming
allowed?
HLR
Signaling
Calling home: how does it work? (10/4)
If you are calling back home, then the visited operator analyses the
dialed number , and decides how best to route the call and the call
will be routing to home through a third operator called ‘carrier or
international transit’ .
Remember, when you call home or any other country, you have to
type in the international access code and the correct country code
along with the telephone number, omitting the leading zero.
For example, to dial the Zain mobile number 0912 XXX XXXX
from another country, you dial +249 91 XXX XXXX. If you are
calling a landline, you may need to include an area code.
Calling home: how does it work? (10/5)
Receiving calls: how does it work? (10/6)
When someone calls you the call will be routed to the operator
whose network you are using in the visited country (How?)
If you remember when the Roamer try to make Location Update the
visit network MSC/ VLR (Mobile Switch center/Visitor location
register) will contacts the home network HLR (Home location
register) through GMSC (gate way MSC) and requests service
information Likewise, the home network HLR updates its information
(address of the host VLR) to indicate that the mobile is on the Visit
network so that any Call or data can be correctly routed to the
roamer.
Don't forget; all international signaling between two operators
transferring by the carrier.
Signaling
Voice
MSC/VLR
MSISDN
09123… HLR
GWMSC
Receiving Call from another Roamer? (10/9)
When a Zain outbound Roamer -A- (let say in UK) calling another
Zain outbound Roamer roamer –B- in another country (let say in
USA) the call flow will be :
A will dial B number with (+249 91 XXX XXXX) and the call will be
routed through host GMSC to Zain in Sudan and after that our
GMSC will asking the location of B number from the home HLR and
it will know that B is roaming in USA so the call will forward to USA
(routed again) through Zain and transferring by the carrier.
Receiving Call from another Roamer? (10/10)
MSISDN
+249 91…. MSC/VLR MSC/VLR
A B
Signaling
Voice
HLR
GWMSC
How do I get billed for making and receiving calls?(2/1)
When you use your phone while roaming (both making and
receiving calls), the visited operator will keep a record of your calls.
It will send these records, along with the corresponding charges, to
your home operator.
Your home operator will aggregate these call charges, and reflect
them in your next bill. All charges will appear in your home
currency - your home operator will convert the foreign operator
charges for you automatically.
It can take some time for the call charges to be sent to your home
operator by the visited operator.
How do I get billed for making and receiving calls?(2/2)

International Roaming Signaling Concepts

Uploaded by

Document Information

Original Description:

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

International Roaming Signaling Concepts

Uploaded by

Copyright:

Available Formats

Rev4

SMS-SC LCS SCS CSE ADC LIS Charg SNM CA SYN

The primary functions of the HLR include:

· Subscription database management

Communication with MSCs

· Communication with GMSCs

· Communication with AUCs

· Communication with VLRs/ILRs

The primary functions of an MSC include the following:

 Switching and call routing:

 Communication with HLR

 Communication with the VLR

 Communication with other MSCs

 Control of connected BSCs

The primary functions of the VLR are:

3. To allow or disallow which services the subscriber may use.

4. To allocate roaming numbers during the processing of incoming calls.

6. To delete the subscriber record when a subscriber explicitly moves to another, as

The same is true of a call from an MS to another MS.

Main Function of Signaling:

Signaling System No. 7 (SS7) is a set of telephony signaling protocols

Signaling Connection and Control Part (SCCP)

A Global Title (GT) is the address of a node.

23 International Roaming 2/19/2014

A Location Area (LA) is defined as a group of cells.

An MSC service area is made up of a number of LAs and represents the

This is the number dialed when calling a mobile subscriber.

For Example: When dialing

CC Country Code

NDC National Destination Code

SN Subscriber Number

The maximum length is 15 digits

It is used for all signaling in the PLMN.

All network related subscriber information is connected to an IMSI.

For Example: IMSI of Zain

MCC MNC MSIN

MCC Mobile Country Code

MNC Mobile Network Code

MSIN Mobile Station Identification Number

3. Temporary Mobile Subscriber Identity (TMSI)

The Temporary Mobile Subscriber Identity (TMSI) is a temporary IMSI

1. International Mobile Equipment Identity (IMEI)

TAC Type Approval Code, determined by a central GSM body

FAC Final Assembly Code, identifies the manufacturer

1. Mobile Station Roaming Number (MSRN)

The Mobile Station Roaming Number (MSRN) is a temporary network

Note: In this case, SN is the address to servicing MSC/VLR. SN= Servicing

2. Location Area Identity (LAI)

The Location Area Identity (LAI) is a temporary network identity, which is

 For the mobile subscriber to receive a call wherever he or she is,

There are four different types of location updating:

Service by a mobile network operator enabling access

The GSM Association (GSMA) is an association of mobile operators

GSMA publish guidelines for network interoperability on a

The service a roamer enjoys in a visited network depends on three

Roaming services can be divided into three category :

IREG testing •To verify the completed Commercial

The technical process of a roaming call is called ‘routing’.

The details of the roaming process differ among types of

1. When the mobile device is turned on or is transferred via a

2- The visited network contacts the home network and requests

3- If successful, the visited network begins to maintain a temporary