Contents

1 Network Architecture

2 Procedures in EPC

3 Quality of Service

4 Voice Service

5 SMS Service

6 Key Features in LTE/SAE

Page 48
2 Procedures in EPC

1.1 Key Concepts

1.2 Attach and Detach Procedure

1.3 Tracking Area Update

1.4 Handover Procedure

Page 49
 Default and Dedicated Bearers
The “bearer” is a central element of the EPS QoS concept. It provides a logical
transport channel between the UE and the PDN for transporting IP traffic and a
set of QoS parameters (i.e. bit rates, delay and bit error rate, etc)
MME

E-UTRUAN PDN-GW
S-GW
Operator’s
IP Service

Default Bearer Dedicated Bearers

▪The first EPS bearer that is activated
when PDN connection is established.
▪It remains established during the
lifetime of the PDN connection.
▪ It assigns basic conectivity (IP,
QoS).
▪Additional EPS Bearers that may be
activated for a PDN connection.
▪ Used for new QoS requirements
▪It can be activated/desactivated by
demand.
▪ Share IP address with Default Bearer.

Page 50
UE Identifiers
Globally Unique Temporary Identifier
HSS

MME
GUTI –Registered-MME
GUMMEI: Global Unique MME Identifier
M-TMSI: MME Temporary Subscriber Identity
MCC: Mobile Country Code
E-UTRAN MNC: Mobile Network Code
S-GW P-GW
MMEI: MME Identifier within the network
MMEGI: MME group ID

MMEC: MME Code

IP Address-Registered-PGW

Page 51
Tracking Area
Tracking
Area List 1

TA1
TA 6
TA2
TA4

TA3
Tracking
TA 6 Area List 2

• TrakingArea is a set of contiguous cells. Several TrackingAreas are combined into one TA
list in which UE’s movement will not trigger Tracking Area Updateprocedure.
• All TAs of TA list are managed by the same MME.
• The UE also performs TA Update when the periodic TA Update timer expires.

Page 52
Mobility Scenario: Idle and Connected Mode
Handover decision and cell priorities based on
criterias such as:

▪ Target cell/system capabilities

Candidate cells
▪ Coverage
LTE ▪ Load in own and target system
HSPA
WCDMA ▪ UE type or behavior (broadband , mobile phone,
Load information cell selection statistics, speed)
▪ Services in use by user (QCI: non-GBR, GBR,
multiple bearers)

UE LTE
Load balancing
X2 supports load information sharing in LTE
▪ RAT target radio link load

Handover decision
▪ Node load (GBR, non-GBR)
• Source eNB/RNC selects target cell ▪ Transport link load
Idle mode cell selection
Load information used in handover decision and
• eNB sets priorities in neighbour cell list to set cell selection priority in broadcasted
• UE selects target cell Neighbor cell/RAT lists

Benefits
Improved probability for successful handover

Page 53
Mobility Management: Idle Mode
UE periodically updates its
MME current location to MME,
at TAlevel.
UE State

S-GW PGW

SDF PDN
eNodeB
RRC-Iddle Mode

What is idle mode? What are the benefits?

• An UE is considering in idle mode when • Conserves resources in UTRAN and still

there is no NAS signaling connection between
UE and network;
• eNB has no information of UE, no RRC
connection, no S1 connection;
• At least one PDN connection exist.
maintain the contact with UE (paging)
on timely basis;
• Conserves battery power in UE.

Page 54
2 Procedures in LTE/SAE

1.1 Key Concepts

1.2 Attach and Detach Procedure

1.3 Tracking Area Update

1.4 Cell Selection and Cell Reselection

1.5 Handover

Page 55
Network Attach Procedure

Page 56
 Network Attach Procedure
E-UTRAN HSS
UE MME S-GW P-GW

Network Discovery, access system selection

Step 0. and RRC connection

Step 1.
InitialAttach

MME selection & S1 Bearer Setup

Step 2.
Authentication and Secutiry

SGW & PGW selection

Step 3.
Default EPS Bearer Setup

Step 4.
IP AddressAllocation

Page 57
 1. Initial Attach
E-UTRAN
UE MME

0. Signalling Radio Bearer

1A Attach Request

1C. Initial UE Message

1B. MME Selection 1D. Downlink NAS Transport

1E. S1-MME Bearer

1A.The initial attach process begins with an Attach Request from UE, including the UE identity,its network capabilitiesand
the resources it wants.

1B. The eNB selects a MME for the UE. eNB may eb connected to multiple MMEs (for redundancy and network sharing) and
the MMEs may be grouped into pools.

1C. The eNB forwards the Attach Request to the selected MME over the S1 interface in an initial UEmessage.

1D. The MME processes the request and responds with a NAS message within a Downlink NAS Transport Message.

1E. At this point the S1-MME signalling bearer is inplace

Page 58
 2. Authentication and Security
UE MME HSS

2A Authentication InformationRequest

2D. Store KASME &

XRES
2C. Auth. InformationResponse

2E. Auth. Request 2F. Generate KASME, AUTN & RES using 2B. Generate KASME, AUTN &
K & RAND and compares if XRES using K & RAND
AUTNUE=AUTNMME

2G. Auth.
Response 2H. CompareRES=XRES

SGW and PGW Selection

2I. AS and NAS Secutiry Procedure

2A. MME retrieves UE’s security information from the HSS using an Authentication Information Request Message.
2B. The HSS maps the IMSI to a Subscriber Authentication Key (K) and generates : XRES, KASME and AUTN.
2C. XRES and KASME are sent to MME into the Authentication Information Response message.
2D. These parameters are stored into the MME for later used.
2E. The MME sends K, AUTN and RAND to UE into the Authentication Request message.
2F. The UE generates KASME, AUTN and RES and compares AUTN value generated with the AUTN received form MME to decide if the network has
been authenticated successfully.
2G. UE responds with an Authentication Response Message including the RES value.
2H. The MME compares RES with XRES. If the values match, then the UE has been successfully authenticated
2I. AS and NAS encryption and integrity checking can be established.

Page 59
 3. Default EPS Bearer Setup - 1
MME S-GW P-GW

IP Address Allocation
3A. Create Session Request

3B. Create Session Request

3C. Create Session Response

3D. Create Session Response

Default S11 GTP-C Tunnel Default S5/S8 GTP-C Tunnel

Default EPS S5/S8 Bearer

2A. MME retrieves UE’s security information from the HSS using an Authentication Information Request Message.
2B. The HSS maps the IMSI to a Subscriber Authentication Key (K) and generates : XRES, KASME and AUTN.
2C. XRES and KASME are sent to MME into the Authentication Information Response message.
2D. These parameters are stored into the MME for later used.
2E. The MME sends K, AUTN and RAND to UE into the Authentication Request message.
2F. The UE generates KASME, AUTN and RES and compares AUTN value generated with the AUTN received form MME to decide if the network has
been authenticated sucessfully.

Page 60
 3. Default EPS Bearer Setup - 2
E-UTRAN MME
UE

Signalling Radio Bearer S1-MME Bearer

3E. Initial Context Setup Request

3F. RRC Connection Reconfiguration • New GUTI

• TAI list
IP address •Default Bearer
3G. RRC Connection Reconfiguration Complete Context information
• IP address assigned

3H. Initial Context Setup Response

Default EPS Radio Bearer

3E. MME send an AttachAccept Message. The attach accept is sent in an Initial Context Setup Request Message.
Which instructs the eNB to create the necessary radio and S1 bearers. A default bearer isalways established.

3F. The eNB configures its radio resources for the default bearer, and fowards the radio bearer parameters to the UE in an
RRC connection Reconfiguration message. This message also carries the Attach Accept Message from he MME
informing the UE of this IP address.

3G. The UE acknowledges the radio bearer reconfiguration with an RRC Connection Reconfiguration Complete message.

3H. The eNB informs MME of the sucessful setup of the default radio bearer with an Initial Context SetupResponse
Message.

Page 61
 3. Default EPS Bearer Setup - 3
E-UTRAN
UE MME S-GW P-GW

EPS Radio Bearer S1 MME Bearer Default S11 GTC Tunnel Default S5/S8 GTP-C tunnel
3K. Modify Default S5/S8 EPS Bearer
3I. Attach 3J. Attach Bearer Request
Complete Complete
3K. Modify Bearer
Response

Default S1-U EPS Access Bearer

Default S1-U EPS Bearer

3I. The UE finishes the process by sending an Attach Complete Message to eNB, indicating the successful completion of the
network attach.
3J. UE begins using NAS security mechanisms (encryption and Integrity checking). eNB forwards this message to MME and
provides information about its end of the default S1-U bearer.
3K. The MME sends the bearer configuration to SGW to finish establishing the S1-U bearer.
3L. SGW acknowledges the successful completion of the bearer with a Modify Bearer Response message. And the UE is
finally ready to being using its IP address to send packets into thenetwork.

Page 62
Network Detach Procedure

Page 63
Network Detach Procedure

Page 64
 UE Initiated Detach Procedure
E-UTRAN HSS
UE MME S-GW P-GW

1. Detach Request
2. Delete Bearer Request

3. Delete Bearer Response

2. Dettach Accept

3. Signalling Connection Release

1. UE sends a Detach Request to MME because it’s turned off.

2. The MME instruts the SGW and PGW to delete any bearers for the UE and the PCEF in the PGW
informs CRF that the bearers are being removed.
3. The MME may confirm the detach with Detach Accept message and remove the signalling connection.

Page 65
Selection Functions

Page 66
 MME Selection

MME selection Functionality allocates an available MME for serving an UE

GUMMEI
•Selection is based mainly on network topology, determining the
MME that serves the UEs location.
•When the MME/SGSN selects a target MME, the selection
+
Load Status of MME
functions performs a simple load balancing between thepossible within a Pool
target MME. When an eNodeB selects an MME, the selection
shall achieve load balancing.
•Each MME has a Weight Factor. It is typically set according to
S1-AP
the capacity of an MME node relative to other MME nodes.
eNodeB

The MME selection function was designed to be efficient from the UE movement point of view and
have been developed to reduce MME change when serving within certain operationboundaries.

Page 67
 SGW and PGW Selection
HSS
MME

Selection criteria for PGW

subscription data:
1. Update Location Request
• List of APNs
• DefaultAPNs
• PDN type of eachAPN 2. Update LocationAnswer
• QoS requirements
• IP address
• Services supported

MME PGW S-GW

1 2

PGW selection First SGW selection next

1. MME updates the HSS with the current location of the UE using an Update Location Requestmessage.
2. HSS responds back with an Update LocationAnswer message, and includes the U E ’ s subscription information. This
information lists the U E ’ s registered APN configurations.

Then the MME maps each APN to a PGW and then chooses an appropiate SGW based on UE location andmobility
mechanisms supported (GTP vs PMIP)

Page 68
 SGW Selection

MME selection Functionality allocates an available SGW for serving an UE

• Selection is based mainly on network topology.

•When the SGW IP address returned from the DNS server
include Weigh Factors, the MME should use it if load balancing is TA I
required.
•SGW may need to support both protocols for a single UE
connected to different PDNs.

The MME selection function in the MME is used to ensure that all TA in the TA List belong to the
same SGW service Area.

Page 69
2 Procedures in LTE/SAE

1.1 Key Concepts

1.2 Attach and Detach Procedure

1.3 Tracking Area Update

1.4 Handover Procedure

Page 71
Tracking Area Update
Whenever the UE selects a
cell with a different TAI than
its previous serving cell, it has
entered a new Tracking Area,
and informs the network.

If the 2 cells has the same

TAI, then the update is not
required.

Detect a new TAI different

from old TAI If an idle UE needs to be
paged, the page request will
be sent to all cells within the
Tracking Update Procedure UE’s last known Tracking
Area.

Page 72
 TA Update Procedure
eNodeB RNC/BSC MME Old MME/ old S4 S-GW PGW PCRF HSS
UE SGSN

1. Tracking Area Update Request

3. Deactivate
Context Request
2. Context Response bearers not
active in UE
Authentication Security
2. Context Acknowledge

Update Bearer Request

3. Update Bearer Response

Update Location Request

Cancel Location
4. Cancel LocationAck

Update Location Ack

Iu Release Command
5. Iu Release Complete

TA Update Accept
6. TA Update Complete

Triggers for TA update

• UE detects it has entered a new TA that is not in the list of TAIs that UE registered with the network.
• The periodic TA update timer has expired.

Page 73
2 Procedures in LTE/SAE

1.1 Key Concepts

1.2 Attach and Detach Procedure

1.3 Tracking Area Update

1.4 Handover Procedure

Page 74
 Basic Handover
If we consider radio access and packet core network level handover, the following
possible handover combinations can be found:

Optimized HO E-UTRAN to/from

HRPD *

Intra EUTRAN Non Optimized HO trusted non 3GPP

Within eNBs to/from GERAN/UTRAN/EUTRAN **
Non-
3GPP
Inter EUTRAN Handover Handover
Toward other nodes for 3GPP
access Non Optimized HO untrusted non 3GPP
to/from GERAN/UTRAN/EUTRAN **

Inter RAT
Different Radio Technologies

* For GTP and PMIP.

** With GTP/PMIP on 3GPP access and PMIP/MIPv4FA/DSMIPv6 on non-3GPP access
*** With GTP/PMIP on 3GPP access and PMIP/DSMIPv6 on non-3GPP access

Page 75
Contents

1 Network Architecture

2 Procedures in EPC

3 Quality of Service

4 Voice Service

5 SMS Service

6 Key Features in LTE/SAE

Page 101
4 Voice Solution in SAE

1.1 CSFB-Circuit Switching Fallback

1.2 VoLGA

1.3 SRVCC- Single Radio Voice Call Continuity

1.4 Voice over IMS

1.5 Conclusion

Page 102
Options for Voice in LTE
Non SIP UE CS Fallback 0

DP2 VoLGA 1
How to provide
voice service?

DP1

SRVCC 2
Dual Mode Terminals

IMS 3
New SIP Infrastructure

Page 103
CS Fall Back Solution

GSM/UMTS LTE
coverage hotspot

In the overlaid Core network requirement:

coverage of LTE ⚫ Reuse traditional GSM / UMTS
and GSM/UMTS… Core (Sw upgrade);
⚫ No additional equipment;

Principle Benefit
⚫ GSM/UMTS has the highest priority to provide
⚫ Voice service can be deployed
voice service for multi-mode UE;
quickly and minimize new
⚫ If CSFB voice service initiated, two options for
investment.
the ongoing LTE data service:
➢ Service handed over to GSM/UMTS network ⚫ Guarantee users’ data service
(DTM supported by GU network); quality when handover occurs.
➢ Service suspended in LTE network until voice
call is over (DTM not supported);

Page 104
 Voice Call in CSFB

Initiate voice call

MSC/VLR

NodeB RNC
Inter-system change

HSS/HLR
2G/3G SGs

LTE
SGsAP SGsAP
MME SCTP SCTP

IP IP
Paging L2 L2

L1 L1

eNodeB SAE-GW MME SGs MSC Server

SGs AP: SGs Application Part

▪ CSFB needs RAN/LTE cover simultaneously

▪ Possible to handover the ongoing data session to 2G/3G PS if the target cell support PS/CS
simultaneous sessions
▪ CSFB and IMS-based service shall be able to co-exist in the same network (Roaming in)

Page 105
Flow Chart of MO in CSFB

Voice call established

MSC/VLR
Fallback to GSM/UMTS

BTS/NodeB BSC/RNC
HSS/HLR
2G/3G SGs

LTE Service Request

Signaling
MME Service Bearer

eNodeB
SAE-GW

MO CSFB procedure:
1. Voice service request is activated from UE;

2. MME indicates UE fall back to G/U network for voice service via eNodeB, UE sends
service request to GERAN/UTRAN; in the mean time, MME informs G/U CS Core to
prepare resource;
3. When resource in G/U network is allocated, UE falls back to GERAN/UTRAN for voice
service

Page 106
Flow Chart of MT CSFB
Voice call established
MSC/VLR
Fallback to GSM/UMTS

BTS/NodeB BSC/RNC
HSS/HLR
2G/3G SGs

LTE Paging
Service Request
CS paging MME
Signaling
Service Bearer

eNodeB
SAE-GW

MT CSFB procedure:
1. GSM/UMTS MSC initiates CS paging to the called party (LTE UE), voice service is
requested by LTE UE;
2. MME indicates UE fall back to GERAN/UTRAN for voice service via eNodeB, UE sends
service request to GERAN/UTRAN; in the mean time, MME informs GSM/UMTS CS
Core to prepare resource;
3. When resource in GSM/UMTS network is allocated, UE falls back to GERAN/UTRAN
for voice service;

Page 107
CSFB- Pros and Cons
Advantages

▪ Full re-use of Stable and Proven CS Core

Mechanisms such as Roaming,
Iu-ps Interconnection and Handovers etc.
UTRAN
SGSN
▪ No major impact on IT OSS/BSS,
Gs Provisioning, Billing Systems
Gb
Iu-cs
MSC ▪ Only Minor Upgrade on MSC, SGSN and
GERAN CSFB Enabled MME required.

CSFB UE S3
SGs ▪ Co-existence with IMS with minor
requirement on UE for domain selection
functions (R9)
S1-MME

E-UTRAN MME
CSFB Enabled
CSFBEnabled

Disadvantages

▪ Possible Poor Service Experience with delay between ▪ Superior Spectral efficiency of
answering the call and the actual speech path setup. VoPS is not utilized to lower costs

▪ Data Applications running over the LTE may get ▪ Only voice centric services as
disrupted during CS Call, as no simultaneous CS and compared to IMS Multimedia
LTE access would be supported by UE.

Page 108
4 Voice Solution in SAE

1.1 CSFB-Circuit Switching Fallback

1.2 VoLGA

1.3 SRVCC- Single Radio Voice Call Continuity

1.4 Voice over IMS

1.5 Conclusion

Page 118
 Voice with IMS
Principle

⚫ Deployment of IMS core

⚫ The IMS concept is based around the

Session Initiation Protocol (SIP).

⚫ Data retains LTE’s bandwith

during voice calls.

⚫ Traditional services are implemented

over the packet network

Benefit

⚫ IMS provides VoIP using a fully

packet switched network.
⚫ Only method that is all-IP.
• Rich Communication Suite for
enhanced service experience

Note: SRVCC facilitates the session transfer of voice component from LTE to the CS domain.

Page 119
 IMS Architecture S-CSCF: Serving-Call Session Control Function
P-CSCF：Proxy-Call Session Control Function
I-CSCF：Interrogating-Call Session Control
Function
CSCF (Call Session Control Function)
⚫ The core element with the same position as softswitch and
MSC Application
⚫ S-CSCF performs routing and triggers services
⚫ P-CSCF validates and forwards requests
⚫ I-CSCF interworks with other IMS networks ISC (SIP)
⚫ In a small network, S-CSCF, P-CSCF, and I-CSCF are PSTN
Cx/Dx(Diameter)
commonly integrated into one physical element. Mg (SIP)
HSS (Home Subscriber Server)
⚫ Stores all subscriber and service-related data HSS P/I/S-CSCF MGCF PLMN
⚫ The same as the HLR in the existing mobile network Gq(Diameter) Mr (SIP)
MRS (Media Resource Server)
⚫ Plays announcements and collects digits H.323
MGW
PDF Core MRS
PDF (Policy Decision Function)
⚫ Manages QoS policies
MGCF (Media Gateway Control Function)
⚫ Provides conversion between SIP and SUP signaling GGSN AC
⚫ Interworks with the existing signaling network
BAS PDSN
MGW (MediaGateway) GSM/WCDMA WiMAX/
WiFi
⚫ Provides the conversion between the IP bearer and the CDMA
xDSL/LAN
TDM bearer
⚫ Interworks with the existing bearer network

Page 120
 iFC contains the address of AS to which the subscriber has subscribed services.

IMS Call Flow

HSS B
Caller Part Calle Part
AS A
Fisrt entry AS B
point of a call
HSS A signalling

S-CSCF A
I-CSCF B S-CSCF B

I-CSCF A

DNS/ENUM P-CSCF B

P-CSCF A It is the only portalfor

all subscribers to
access IMS dpmain
IP Media

Procedure:
1. The caller AS forwards the call to SCSCF_A and it analyzes the Callee ID (IP or phone number) and request the DNS for the IP address of the
ICSCF_B.
2. ICSCF_B then forwards the message to the HSS_B to authenticate the callee. If the callee is a valid subscriber and has already successfully
registered, the HSS returns the address of the SCSCF_B to the ICSCF_B. Then, the ICSCF_B forwards the call to the SCSCF_B.
3. UE sends a call request message to the P-CSCF_A and it forwards the message to the S-CSCF_A. S-CSCF_A triggers the call to the specified
AS and it processes the call based on the service subscription and registration information of caller.
4. When the call reaches SCSCF_B, it triggers the service to the AS_B according to the iFC subscribed by the callee.
5. Then the AS processes the call and the SCSCF_B forwards the call to the callee via the P-CSCF at the callee side.

Page 121
IMS User Initial Call to PSTN/PLMN User
IMS Caller Part PSTN Callee Part
HSS A
S-CSCF A BGCF

MGCF PSTN
IAM
I-CSCF A

Media Control
ENUM
P-CSCF A

UMG

Procedure:
1. When the call is sent to S-CSCF A, it query the DNS/ENUM (because the caller number doesn’t belong
to IMS domain).
2. S-CSCF A forwards the call to the BGCF and it forwards the call to the correspondingMGCF.
3. The MGCF forwards the call to the PSTN/PLMN in traditional signalling mode (that is SS7 or BICC).

Page 122
PSTN/PLMN User Initial Call to IMS User
IMS Caller Part PSTN Callee Part
HSS A I-CSCF A

S-CSCF A
MGCF PSTN/PLMN
IAM

Media Control

P-CSCF A

UMG

Procedure:
1. The SS7 signaling message is transmitted from the PSTN to the MGCF and it converts
the SS/ signaling message to SIP message.
2. Then, the MGCF forwards this message to the ICSCF.
3. The subsequent process is the same as the process at the callee side in Intra-IMS call.

Page 123
IMS Pros and Cons
Advantages

▪ Preserves LTE’s bandwith during voice

calls while minimizing call setup delay.

▪ Assures global interoperability and

roaming

▪ Provides the largest possible ecosystem

which affects such matters as handset
supply and multivendor interworking

▪ Provides an all-IP network for operational

savings and HD voice

▪ Enables full blending of voice with

advanced services beyond GSMA RCS.

Disadvantages ▪ Convergence via ICS

▪ Investment in new equipments.

▪ Complexity of the system.
▪ Only the packet domain to circuit domain transition.
▪ Limited LTE coverage if only hot spots at initial phase.

Page 124