2 TekonsultContents Olsen — Call Flow Overview Attach Procedure Registration and authentication Session establishment and termination T-ADS and Homing IMS Emergency Call DeregistrationVoLTE (IR.92) in Terminals cS Terminal industry trend is that VoIP (VoLTE 1R.32) client will be integrated in a chipset ~ not in a terminal as an separate application VolTE client (GSMA IR.92) run on the modem processor while the application processor can enter sleep mode. The same approach is used for CS voice. Today VolP (application) runs on top of OS in the application processor which is power hungry. VoLTE (GSMA IR.92) calls are invisible to end User as those will be done same way as CS call = press the green button. CSFB and CS VolTE (1R.92) BE Voice clients: (_ramiscrenesen CSFB, VoLTE, SRVCC) (Somes | in chipset.Negotiation of VoLTE Configuration? ==" between UE and EPS UE provides it’s settings to network in attact MME responses to UE attach procedure: [Voice domain preference and UE’ usage setting value (ociet 3 bi 103) UES usage setting (1 bit fle) Bit 3 0 Voice contic 1 Data centre Voice domain preference for E-UTRAN (2 bitfield) 24 0.0 CS Voice ony (01 IMSS Voies only 10 CS voice prefered, IMS PS Voice as secondary 11 __ IMS PS voice prefered, CS Voice as secondary [MS not supporting IMSS voice shall indicate "CS Voice only" MS only supporting IMS voce shallindicate "IMS PS Voice only” 'SRVCC fo GERANIUTRAN capab 0 SRVCC from UTRAN HSPA or E-UTRAN to GERANIUTRAN not supported 4 SRVCC from UTRAN HSPA or E-UTRAN to GERANUTRAN supported Combined Attach INS voice over PS session indicator (MS VOPS) (octal 3, DIT) jst Is lo IMS voice aver PS session in $1 mode not supported 1 IMS voice over PS session in $1 mode supported |emorgoncy bearer services indicator (EMC BS) (ocit 3, bit 2) la 2 lo ‘emergency bearer services in $1 made not supported 1 emergency bearer services in Si made supported. [Radiional update result value (eciot 1) is aa ©. no addtional information lo + CS Fallback not preferred ls 0 SMS only hy 1 reserved! [eis 4 and 3 of octet 1 ere spare and shall allbe coded as zero Combined Attach / EPS onlyUE Capabilities @Tekonsutt * UE s considered as VolP-capable if the following Fl bits are set to TRUE: ~ bit 3 (Sbit RLC UM SN, 7bit PDCP SN} = bit 7 (RUC UM) ‘+ ifferont settings of FGI BIt7 and Bit 20, allow for ‘combinations “+ Bit7 indicates if RICUM is supported = Bit7 can only be set to Oif the UE does not support VoLTE + Bie 20%ssetto1 then: = IF Bie7 is set 0.0 UE supports: *SRBL and SRB2 for DCCH + 8x AM ORB = ifBIR7 is setto1: '+ RBI and SRB2 for DCCH + 8x AM DRB ‘+ RBI and SRB? for DCCH + 5x AM ORB + 3x UM DRB + Regardless of what Blt 7 and Bit 20s set to, UE shal support at least: SABI and SR82 for DCCH + 4x AM DRB sogardess of what Bit 20s st to, if Bt 7is set to 1, UE shall support at least: SRB and SR2 for DCCH + 4x AM DRB + 1x UM DRB lllUE Capabilities @Tekonsutt ‘Additional FGI bts indicates suppor for other VoIP related functions: QTM Bundling Q save Q srs GIS reese eect eee | [FGI11_ | EUTRA RRC_CONNECTED to CDMA2000 LxRTT CS Active handover [FG127 |. EUTRARRC_CONNECTED to UTRA FD or UTRA TOD CEL_OCH CS handover ifthe UE et eaemie ernie te UTRARRC_CONNECTED to UTRA FD CELL_DCH CS handover ifthe UE supports both _UTRAN FDD and UTRAN TDD £6128 TT! Bundling 6129 Semi-Persistant Scheduling F140 _ EUTRA RRC_CONNECTED to UTRA TDD CELL_DCH CS handover ifthe UE supports both UTRAN FDD and UTRAN TDD LSUE Capabilities @Tekonsutt tego: (8 eg 4 1 ed ae {ect reat rt Reb et ft ia PE 34833 Spe nn te om oy rele pe Pal PE pe PE <1 ce) a ee Sapte 1 arr nee perigee ine re ren eg et Sg ods ie soe peg et et epee Saat er ram epi at = ep SRVEC to UTRAN/GSM ee i i ene ane et = SpeeUE Voice Preference Olsen During intial attach or TAU procedure, VOLTE UE, indicate ts voice domain preferences tothe MME (in the Information Element “Voice domain preference and UF's usage setting”): — IMS PS Voice preferred and CS Voice as secondary IMS PS Voice only — CS Voice preferred and IMs PS Voice as secondary = CSVoice only if VolP is available in the area, MME informs the UE about that with the help of the I: EPS network feature support within Attach Accept or TAU Accept message ‘upon receiving IE: EPS network feature support with information that IMS PS Voice is supported, the UE initiates the IMS Registration procedure |MIME informs the UE about the VoIP availabilty by the IE: EPS network feature support within Attach ‘Accept or TAU Accept message In 3GPP Rel.11 UE Radio Capability Match procedure is intvoduced = when MME requires more information onthe UE radio capabilities support the decision s signaled within S1-AP: UE Radio Capability Match Response (IE: Voice Support Match Indicator)UE Voice Preference ‘Amach Request TAU IE: Yoe domain pretrence and UEs usage seting eee 2.Atach Accept! TAU Accept EPS natrk feature support oeUE Voice Preference Olsen © mon-Access-Steatun (S)POL Del .... = Security header type: Integrity protected (1) iid « protocol discrininator: EPS mobility management wessages (6:7) ‘esbage euthentdeation coder Oxtet6eo0 Sequence numbers 32 000s... = Security header types Plain WAS wessoge, not security protected (0) ‘vvs Oi4d = Protocol dlscrininetor: EFS mcbility sanagenent wessoges (017) Ais eps nonsiity Managenent Message Type: attach request (Ont) ° * Type of security context #1ag (TSC): Native security contest (for ¥Stasee) (001 22 + MAS hey set identifier: (2). i = Spare Bit(s): 0100 9 = €P5 attach type! Combined EFS/TIST attach (2) > Eee mobile Sdontity > Ue network capability > ean message container > Tracking area identity ~ Last visited registered Tar > ORE Paraseter > RS network Capability > Location aren identification - Old location ares Sdentification > mobile station elesenerk 2 > nobile station elasanark 3 > Supported Cocec List ~ Supported Codecs Y voice Dowain Preference and UE's Usage setting lesent 0: 0x54 Length: 2 (0000 0... = spare bit(s): @Negotiation of LTE voice support @****°=* between UE and EPS 3. Location-Update (SGs) 4, Update Location (MAP) + Emergency bearer services in $1 mode no/yes 5. ATTACH ACCEPT + Combined EPS/IMSI attach result “IMS voice over PS support indicator [ue ® st O° | HiR/Hss MAP 0 p= 5 = 0 Mss 1. ATTACH REQUEST + Combined EPS/IMSI attach *\oice_Domain_ Preference ‘+ MS_Over_IP_Networks_Indication + SRVCC support (GERAN/UTRAN) Request / Answer '* Network-Access-Mode Now terminal knows how to make MO calls, MO SMS and emergency calls.Contents Olsen UE Capabilities Call Flow Overview Attach Procedure Registration and authentication Session establishment and termination T-ADS and Homing IMS Emergency Call Deregistration(ve) [aw] (nme) (rw [ussin) (rene) [eer] Radio setup Terminal - Le ( TS registration and ser authentication { TMS ValFsesnon stip VoLTE calll aaa EPS dedicated bearer setup Ko nae vetrecat TMS Vo acsson ane de este bearer ease I oI Tt od IContents Olsen UE Capabilities Call Flow Overview Attach Procedure Registration and authentication Session establishment and termination T-ADS and Homing IMS Emergency Call DeregistrationVoLTE Call Flow 2 EPS Registration, Default bearer setup and VoLTE support discovery 6.68 Loaon tate 2. Update Location (=) pore Btn) a eee ee 6. Location Updo 1. Attach (SR-VCC, combined EPS/ titan ecoaaceers) (wat) (cw) comes () 8 Atcha MS Nolbs ovens (U7) 7. Voice support decision CSFB support (Y/N) IMS Voice over PS (YIN) 9. UE decision CSFB support (¥/N) lllAttach Procedure with IMSI (1) @ Tekenault g came New MME Hss scw Pow PCRF a & = = a EMM: Attach Request {(SR-VCC, combined EPS) Ini attach, Veice domain preference ) ‘ae ESM: PON Connectivity request (PDN address req IPvdorIPv6) ‘ain EMM: Authentication Request EMM: Authentication Response EMM: Security Mode Command EMM: Security Mode Complete iii ed ree ator ——_ SUP *oneas te GW wat 248 emmsacw * performs th IMS Bearer afc conversion 29 VaceRTPIUDPIP € 9 VotcelTDldSession establishment tony Sty INVITE 407 AUTH Challange ; invire | 100 tring | a0 ing} INVITE ‘ 100 Trying are 180 RingingVoLTE Call Flow OTekensut VoLTE Routing Principles TAS uses HLR profile for VoLTE Services ‘+ Same services regardless of access (2G/3GILTE) providing consistent user experiences. ‘+ Same service provisioning interface for VoLTE as 2G/3G subs. ‘+ Nonew service provisioning is required for existing subs. ‘+ Comply with One Voice profile GSMA IR.92 Optimized routing in CS Originating call case of VoLTE subs. |A)CS Originating Cal ‘donot need fo be anchored in IMS. A) CS Originating Calls of IMSIVOLTE subscribers: CS calls established in GSMUMTS and are routed the CS way. No need to “anchor” call in IMS on the originating ide 5B) IMS Originating Calls Use tho seme HLR Profle a yuo, CS onginaing calls CC) Terminating Calis: af anchored in IMS ©) Terminating Cal B) IMSVoLTE Originating Call: from CS, LTE for MSIVoLTE subscribers: ~IMSISIP calls established in LTE ae routed the IMS way. ~ SFC stbscretare cxecuieg nthe mee Se ~ Originating service executions performed inthe TAS ser the service execution the SCC.AS perorme TADS ‘Terminating Access Domain Selection)VoLTE Call Flow Ser QoS Control for IMS Services with EPS Dedicated Bearer Setup Key Principles: 1. The SIP UE communicates with the IMS through a Default EPS Bearer, which was set up when the UE attached to the network. The SIP UE sends its session description (as SDP) within the SIP Invite message (and/or within subsequent SIP signaling messages). 2. ‘The P-CSCF derives the service information (media type, code, bandwidth, etc.) from the SDP and passes it to the PCRF (via the Rx interface) 3. The PCRF derives the allowed QoS and policy settings from the service information policy. The QoS parameters/policies are passed via the Gx-interface to the PDN-GW. 4, The P-GW initiates the Dedicated EPS Bearer Setup and enforces the QoS. oa ‘Default Beare always-on with MS-APN_|( SAE Declcated Bearer VolP user planeNetwork Initiated Dedicated Bearer Activation @zekensutt ea oe cre {Greate Boarer Request E-RAB Setup Request. (EBI:6, QCI 1) Retivate Dedicated EPS RRC Connection bearer Context Request Reconfiguration Activate Dedicated EPS bearer Context Request RRC Connection —Riconfiguration —*_E-RAB Setup Response Complete Direct Tanster 5 uplink NAS Tansport _Retivate Default EPS —yctvat Dedested EPS "Crone Bearer Responss bearer Context Accept CreatUE Initiated Dedicated Bearer Activation @ Tekonsutt B i a - =- 3 Bearer Resource Allocation Request itearelaaaiTies comman Boarer Resource [command *__ecr cca i E-RAB Setup Request _¢°"°ste Seaver Request Request Fee apeeton + Activato Dedicated EPS (EBES, act 7) (EBI:6, Qc 1) ‘Activate Desieated EPS bearer Context Request bearer Context Request RRC Connection, E-RAB Setup Response Reconfiguration? eSPO SS Complete Direct Transfer yet ct renee +__Uplink NAS Transport “Retivate Default EPS re vane comertRoope | Aebi Dned ES txxn aeons CreatVoLTE Call Flow Olsen IMS Terminating Call Setup IMS Terminating Call Set-up Example: = the UE (A-Party) in the PSTN or in another IMS network makes a call to UE (B-Party) inthe IMSILTE network @ = > A ¢ J be SCSCF "evokes the AS dopening on to User rofl of tho UE Pax) “eryards he SI inietotheP- CCSCF known tom be MS Regitaton ota UE (Bary) ‘orwards te SP Inve the UE (BPat)Contents Olsen UE Capabilities Call Flow Overview Attach Procedure Registration and authentication Session establishment and termination — IMS Emergency Call DeregistrationChallenge + Terminal can have simultaneous registration in IMS and MSS. Few examples: + IMS VoLTE and SMSoversGs * CS voice and RCS in 3G * Terminal “drop” from LTE to CS, but not de-register IMS subscription + There is a need for a mechanism to find ‘out which way terminated call is routed to the IMS VoLTE subscriber ~via IMS (PS) or Mss (CS). + This procedure is called as Terminated ‘Access Domain Selection (T-ADS) CmNetwork Based T-ADS Set SCCAS in TAS support sequential and Rel9 T-ADS ‘Sequential T-ADS (3GPP Release 8) Rel9 T-ADS (3GPP Release 9) str ‘LThe terminating INVITE arrives at the S-CSCF 2.The SCC-AS queries the HSS via Sh. 2.The SCC-AS terminate the call first LTE 3.1n case first access fails then SCCAS terminate callto | }3-The HSS retrieves VoIP support indication and time of latest another access. TAU/RAU ‘L-The terminating INVITE arrives at the S-CSCF 4.The HSS provides the collected information to SCC-AS. ‘The SCC-AS terminate the call using VoIP (ePC/PS) or via CS. SCCAS makes T-ADS possible also without HSS/MME/SGSN support lllChallenge Cm * When terminated call is coming from. CS access via GMSC VoLTE subscriber, there need to be a mechanism to tell GMC, that call need to be routed to IMS for T-ADS. * One way to route MT calls for VoLTE subscriber is to use functionality implemented in TAS which tells to GMSC call need to be routed to SCC AS. * This procedure is called as a Homing.Terminated call from CS VoLTE and SMSoverSGs GMSC Is not able to make decision in which access subscriber locate Terminated calls are routed always to IMS/SCCAS. SCCAS is managing the T-ADS for MT call. ‘Subscriber's voice data in MSS and IMS ‘SCC-AS functionality makes a domain selection.VoLTE Call Flow @ Tekensut Homing and T-AD + SCC-AS quotes the HSS via Sh + HSS retrieves VoIP support >(IMS capability in LTE 6b) VoIP is not supported 3G or LTE >MSSReference architecture in 3GPP R9@™="= NOTE 1: P-CSCF, EATF and E-CSCF are always located in the same (serving) network; this is the visited network when the UE is roaming. Dee eae te Ra ee cee ee etContents Olsen UE Capabilities Call Flow Overview Attach Procedure Registration and authentication Session establishment and termination T-ADS and Homing — IMS Emergency Call DeregistrationIMS Emergency Call See Basic IMS Emergency Call Support: + provided for 1) registered subscribers by the S-CSCF or E-CSCF; and 2) provided for un-registered subscribers by the E-CSCF mis ae Location Information Support: Eeepetataditowenne | | GRR eaoaes © Option A: based on the Cell-ID in the SIP PANI header following 3GPP TS 24.229 / GSMA IR.92 : the 5/E-CSCF supports the mapping of the Cell 1D/Sector1D to the PSAP. * Option B: based on a PSAP provisioned per subscriber in the HSS: solution for Fixed Networks: the CSCF routes Emergency Calls to the PSAP pre-provisioned for the subscriber in the HSS. =, = eenVoLTE/IMS Infrastructure Services 27°" Overview about the related procedures: IMS Emergency Registration IMS Emergency Call IMS Emergency Call Back {ns imerene Rag LR Locaton Refeal FunctContents Tekecmat UE Capabilities Call Flow Overview Attach Procedure Registration and authentication Session establishment and termination T-ADS and Homing IMS Emergency Call Deregistration ‘SMS over IP lllUE Initiated De-registration is Sr ag ne an pore es Register Sieve) fern einai Results: 200 OK Urisuneered rom ms eas Procedure: Ne 0 jotit Ue sends SIP REGISTER message wth Notify |. Notify _ ox eter eb aoregneateyte he: co 200 OK S-CSCF responds with a 200 OK. Message, oe 200 OK clears all temporary information from UE & 200 OK aoe SCSCF nies UE about deren Uc econeagentieaton wth on 20 oxen Notify S SCF nforms PSC about noon P-CSCF acknowleges with an 200 OK 200 |OK ee 200 OKNetwork Initiated De-registration Olekerat sia Fc ws rei 205 fon NS Da or al Ue's reported stolen or needs to be shut down for adminstrative reasons) Notify Requsites: Uciseistere inthe IMS Domain Results: 2 UE unregistered from IMS Procedure: S-CSCF notifies UE about de-regstration UE acknowledges de-registration with an 200 OK message S-CSCF informs P-CSCF about de-tegistration Notify 200 OK Notify P-CSCF acknowleges with an 200 OX message 200 OKContents Olsen UE Capabilities, Call Flow Overview Attach Procedure Registration and authentication Session establishment and termination T-ADS and Homing IMS Emergency Call Deregistration —, SMS over IPSuccessful encapsulated MO Short Messagé=*"** ‘Procedure used for sending a Short Message = = — from a UE via IP-SM-GW Requisites: IMS Ragistration / Re-registration UE registered in EPS, IMS & IP-SM.GW Resul ee UE sends successfully aM to 8 Party tee Procedure: a LUE submits to S-CSCF an encapsulated SM | _inee (Ms submit, SC Address) with appropriate SIP oe ‘method, which is forwarded to IP-SM-GW — Forwaro SHORT MESSACE based on stored iFC & acknowledged ea IP-SM-GW checks f UE is authorised to use 7 ‘SMS & encapsulated SM delivery via IMS sar eros If negative, P-SM-GW returns appropriate sar esonr —— error information to the UE in afallure report a | If positive, extracts SM & forwards for oo livery ta SNIS-SC (from SC Adress) ia SMS- ee iwmsc ———— ‘Submit report returned to IP-SM-GW, = \which encapsulates tin appropriate SIP om ‘equost & sends to UE, acknowledging with 2000KSuccessful encapsulated MT Short Message=*"** Procedure used for delivering SM to UE via IP-SM- ‘ow Requisites: UE is registered in IMS &1P-SM-GW Results: UE gets successfully SM from B-Party Procedure: 'SMS-SC sends MT to SMS-GMSC, which interrogates HSS for Ri & based on pre-configured address for user, the requests forwarded to Corresponding 16.SM-GW |P-SM.GW retrieves IMSI, MSC & SGSN address {for SM Delivery in C5/PS Domain fram HSS; correlates SR for SM with subsequent FSMis) based fon IMSI& returns its address with MT Correlation ID 25 RItOSMS-GMSC SSMS.GMSC delivers SM to P-SV-GW, which checks if UE is authorised to use SMS & encapsulated ‘SM delivery via IMS negative, I-S-GW returns appropriate error information tothe UE ina fallure report lee, performs Domain Selection (In case IMS, TEL URI is Lsed to send encapsulated SM in appropriate SIP ‘method to UE, which acknowledges with 200 OK)Delivery Report Procedure used for delivering SM to UE via IP-SM- ‘ow Requisites: UE is registered in IMS &1P-SM-GW Results: UE gets successfully SM from B-Party Procedure: 'SMS-SC sends MT to SMS-GMSC, which interrogates HSS for Ri & based on pre-configured address for user, the requests forwarded to Corresponding 16.SM-GW |P-SM.GW retrieves IMSI, MSC & SGSN address {for SM Delivery in C5/PS Domain fram HSS; correlates SR for SM with subsequent FSMis) based fon IMSI& returns its address with MT Correlation ID 25 RItOSMS-GMSC SSMS.GMSC delivers SM to P-SV-GW, which checks if UE is authorised to use SMS & encapsulated ‘SM delivery via IMS negative, I-S-GW returns appropriate error information tothe UE ina fallure report lee, performs Domain Selection (In case IMS, TEL URI is Lsed to send encapsulated SM in appropriate SIP ‘method to UE, which acknowledges with 200 OK)