SS7 Signalling System

ZTE Corporation
 Signalling System –Basic Concepts

 Supporting Networks
 Synchronization Network

 TMN (telecom management network)

 Signalling Network
 Signalling message is transmitted or exchanged between
exchanges(switches) for the controlling of call-setup, connection,
management and.

 Signalling for connection monitoring: seizure, release, called

answer, etc

 Signalling for routing: MSISDN message

 Signalling System –Basic Concepts
 Signalling System
 CAS (Channel associated signalling)
 Channel Associated Signalling is transmitted in-band over the
associated voice/data traffic channel
 CCITT No.1--No.5,

 R1 (Bell) and R2(Europe).

 Chinese No.1 system similar to R2

 CCS (Common channel signalling)

 Common Channel Signalling is transmitted out-of-band over a
dedicated common channel separate from the voice/data traffic
channel. This common channel transmits signalling messages
for multiple voice channels
 SS6: analog, outdated

 SS7
Signalling System –Basic Concepts

DT Trunk line DT Exchange

Exchange

Register Register
CAS

DT Trunk line DT Exchange

Exchange

Signalling
Control Signalling link
Signalling Control
Equipment Equipment Equipment Equipment

CCS
 Features of CCS System

 Transmission via coded MSU, packet delivery

 Synchronization, flag, error correction
 1 link serves multiple voice channels
 MSU label identification
 receive and forward section by section
 High reliability requirement
 Redundant equipment
 SS7 Signalling System

 Overview

 Functional Structure(protocol
stack)
 Signalling Network
 Overview
 Overview (SS7 or C7)
 A global standard for telecom defined by ITU-T
 Procedures and protocol by which PSTN exchange
information over a digital signalling network to effect
wireless (cellular) and wire-line call setup, routing and
control
 ITU allows for national variants
 ITU-T: typically use 14-bits point codes
 ANSI :24-bits point codes
 ETSI (European Telecom Standards Institute)
 24-bits ITU-T point code is used in China
 Overview
 Functions of SS7 Network
The SS7 network and protocol are used for :
 Basic call setup, management and disconnection
 Wireless services such as PCS, wireless roaming and
MS authentication.
 Local Number Portability
 Toll-free(800/888) and toll (900) wire-line service
 Enhanced call features such as call forwarding, calling
party number/name display and three-way calling
 Efficient and secure worldwide telecommunications
 Overview
 Advantages
 Faster call setup times (compared to in-band
signalling using MF signalling tones)
 Large capacity
 1 link can support up to 4096 voice channels
 Transmission via message unit,up to 272 bytes, flexible
coding
 More efficient use of voice circuits
 Wide application: circuit-related, non-circuit-related
 support for IN services which require signalling to
Network elements without voice trunks (e.g.,
database systems),
 mobile communication, ISDN
 Improved control over fraudulent network usage
 Easy maintenance and expansion
 SS7 Signalling System

 Overview

 Functional Structure(protocol
stack)
 Signalling Network
 SS7 Protocol Stack—Functional Layers
 The hardware and software functions of SS7 protocol
are divided into functional abstractions (levels)
 Map loosely to OSI 7-layer model defined by ISO
OAMP MAP
ISUP TUP DUP
OSI－7
TCAP

OSI－4～6

SCCP
OSI－3

MTP－3

OSI－2 MTP－2

OSI－1 MTP－1
 MTP-1

MTP-1: signaling link level

 Defines the physical, electrical and functional characteristics of the
digital signaling link
 A bi-directional channel. Interfaces defined include
 64 kbps digital, 4.8 kbps analog link

 TS 16 or other

 Connection of MTP-1 to MTP-2

 via DSN or interface equipment

 ZXC10-MSS: Digital Trunk Board provides physical link

 TS 16 or other of E1 2048Kbit/s, 64kbps

 MTP-2
MTP-2 Signaling link Control
 Ensures accurate end-to-end transmission of a message across a signaling
link.
 Implements flow control, message sequence validation, error checking and correction.
 Retransmit when error occurs
 SS7 message structure: signal unit (SU)
 FISU (Fill-in Signal unit) :
 transmitted continuously on a link on both directions unless MSU or LSSU are

present.
 MTP-2 information only(eg. Acknowledge of signal unit receipt by a remote
signaling point
 LSSU (Link status signal unit): 8 or bits status information.
 Control link alignment and indicate status of a signaling point.

 MTP-3 information, used when starting using link or link failure

 MSU (Message signal unit):

 SIF field carries all call control, database query and response, network
management and maintenance data.
 Routing label:
 Signal Unit

 SS7 message structure: signal unit (SU)

MSU F CK SIF SIO LI FIB FSN BIB BSN F

8 16 n×8(n>1) 8 2 6 1 7 1 7 8

F CK SF LI FIB FSN BIB BSN F

LSSU 8 16 8 or 16 2 6 1 7 1 7 8

F CK LI FIB FSN BIB BSN F

FISU
8 16 2 6 1 7 1 7 8
 Signal Unit
 F: Flag, delimit the unit.
 Beginning of a new signal and implies the end of the previous signal (if any)
 Fixed Binary value: 0111 1110

 Before transmission, MTP-2 removes “false flags” by adding a 0 bit after

any sequence of five 1 bits; Upon receiving a signal unit and stripping the
flag, MTP-2 removes any 0-bit following a sequence of five 1 bits.
 CK: Checksum:
 CRC value is used to detect and correct data transmission errors
 BSN: Backward Sequence Number
 Acknowledge the receipt of signal units by the remote signaling point
 Contains the sequence number of the signal unit being acknowledged

 BIB: Backward Indicator Bit

 Indicates a negative acknowledge by the remote signaling point when
toggled
 Retransmission indication: from sequence BSN+1

 FSN: Forward Sequence Number (0..127)

 Contains the sequence number of the signal unit
 Signal Unit
 FIB: Forward Indicator Bit
 Used in error recovery like the BIB.
 When toggled, it indicates that the originating point retransmits the
message。
Procedures:
 When ready for transmission, the SP increments the FSN by1.

 The CRC checksum value is calculated and appended to the forward

message.
 Upon receiving the message, the remote SP checks the CRC and
copies the value of the FSN into the BSN of the next message
scheduled for transmission back to the initiating SP.
 If the CRC is correct, the backward message is transmitted. If the
CRC is incorrect, the remote SP indicates negative acknowledge by
toggling the BIB prior to sending the backward message.
 When the originating signaling point receives a negative
acknowledgement, it retransmits all forward messages, beginning
with the corrupted message (BSN+1), with FIB toggled
 Signal Unit
 LI: Length Indicator :6 bits
 Indicating the number of bytes (8-bit octet) between LI and CK. Used to
identify the type of SU., distinguishing MSU(LI>2), LSSU(LI=1/2) and
FISU(LI=0).
 SIO: Service Information (Octet)
 Only in MSU.
 Contains the 4-bit sub-service field: Include network indicator (national or
international) and the message priority . Priority is considered only under
congestion conditions. Low priority messages may be discarded during
congestion.(signaling link test message receive a higher priority than call setup
messages.
 Followed by the 4-bit service indicator: Specifies the MTP user, indicating
message type, thereby allowing the decoding of information in the SIF
 Signal Unit
 SIO: Service Information (Octet)
 Service Indicator

Service Indicator MTP User

0 SNM (Signaling Network Management Message)
1 Maintenance Regular Message (MTN)
2 Maintenance Special Message (MTNS)
3 Signaling Connection Control part (SCCP)
4 Telephone User Part (TUP)
5 ISDN User Part (ISUP)
6 Data User Part (Call and Circuit-related Message)
7 Data User Part (facility registration/cancellation
message
 Signal Unit
 SIF: Signaling Information Field
 Only in MSU (FISU and LSSU are sent between two directly connected
signaling points)
 Contains the Routing Label and signaling information(e.g., SCCP, TCAP and
ISUP message data).

 SIO: Service Information (Octet)

 Only in MSU.
 Contains the 4-bit sub-service field: Include network indicator (national or
international) and the message priority . Priority is considered only under
congestion conditions. Low priority messages may be discarded during
congestion.(signaling link test message receive a higher priority than call setup
messages.
 Followed by the 4-bit service indicator: Specifies the MTP user, indicating
message type, thereby allowing the decoding of information in the SIF
 MTP-2

 Delimit of SU: use of flag to identify the beginning and

the end.
 Generate flag before transmission. Identify flag upon reception
 MTP-2 removes “false flags” by adding a 0 bit after any
sequence of five 1 bits; Upon receiving a signal unit and
stripping the flag, MTP-2 removes any 0-bit following a sequence
of five 1 bits
 Alignment: Loss of alignment monitoring
 SU must meets certain conditions, otherwise will be discarded and
perform statistic on error rate
 Any sequence of more than six 1-bit

 Not multiples of 8-bit

 MTP-2
 Error Detection.
 CRC is adopted by CCITT to ensure high error detection capability.
 Using 16-bit CRC field at the end of each SU.

 Error Correction: Basic Correction Method and PCR.

 Basic Correction Method:
 Sequence control, validation and retransmission are implemented
by the cooperation of FSN, FIB, BSN, BIB.
 Fist transmit in sequence MSU1, MSU2---- they are stored in the
cache memory of the originating SP before validation is received
from the remote SP. Upon reception of validation, they are erased.
If a negative acknowledge is received, stop transmitting new MSU,
and retransmit the corrupted message.
 MTP-2
 Error Correction.
 PCR : preventative cyclic retransmission.
 Using FSN and BSN.

 All MSUs scheduled for transmission are stored in Retransmission

Cache Memory and transmitted in sequence. MSU will be erased
for those messages validation is received.. When there is no new
MSU for delivery, the unconfirmed MSU will be retransmitted.
Retransmission will be paused when there is new MSU to be
transmitted.
 Only unconfirmed MSU will be retransmitted.(while the Basic
Method need to retransmit all the MSU following the corrupted
one.
 Initial Alignment
 Used for testing the link prior to usage or in case of link failure
 Using SF (status field) in LSSU.
 MTP-2
 Error rate monitoring
 MSU reception error rate monitoring: used in normal operation
 Alignment error rate monitoring :executed at initial alignment. Counter
increments upon detection of an error . If the counter threshold is
exceeded, then the link is corrupt
 Flow Control
 Process congestion detected by MTP-2.
 When congestion is detected by the remote SP, it will stop
confirmation/validation(BSN, BIB will not update) and sends
LSSU(SIB )Using FSN and BSN.
 Upon reception of LSSU(SIB), start the maximum validation delay
timer(T7) and the remote SP congestion timer(T6). If T6 exceeds
threshold, it considered failed link.
 When congestion is removed, MSU transmission resumes. T6, T7
stop working.
 MTP-3
 Main Functions: In case availability of signaling network is affected ,
defining the functions and procedures to transmit management
messages between SPs to ensure reliable transmission of signaling
message.
 Signaling message handling

 MRT (Message Routing)

 MDC (Message Discrimination)

 MDT (Message Distribution)

 Signaling network management

 STM (Signaling Traffic Management)

 SRM (Signaling Routing Management)

 SLM (Signaling Link Management)

 MTP-3
 Routing Label:
 Contained in the Service Information Field(SIF) of MSU.

 Comprised of Destination Point Code (DPC), Originating Point Code

(OPC), and Signaling Link Selection(SLS) field.
SIF
message Header label
H1H0

SLS OPC DPC

4 14 14

Routing
Label
(a)

SLS OPC DPC

4 4 24 24

Routing
Label

(b)
 MTP-3
 SLS: Signaling Link Selection
 Ensure message sequencing. Any two messages sent with the same
SLS will always at the destination in the same order they were
originally sent.
 Allow equal load sharing of traffic among all available links.

SLS=0
A B
SLS=1
(a)

B D
SLS=00

SLS=0 SLS=01 SLS=10

A F
SLS=1

C SLS=11 E

(b)
 MTP-3
 MRT: Message Routing.
 Selection of a link based on DPC (link group)and SLS(specific link) in
the routing label(in SIF).
 MDC: Message Discrimination
 MDC receives message from MTP-2 and identifies the message:
 when the DPC indicates the receiving SP, the message is delivered
to MDT to be distributed to the appropriate user part (ISUP, SCCP)
 messages destined for other SP are transferred to MRT, which
indicates that the receiving SP has STP capabilities.
 MDT: Message Distribution
 Distribute discriminated message to the appropriate user parts(ISUP,
SCCP, SNM, MTN) according to Service Indicator in SIO
 MTP-3
Signaling Network Management: resetting of signaling
network in case of failure(Signaling link or SP) or
controlling traffic when congestion occurs.
 Traffic Management:
 transfer the signaling service from one routing or link to another, or
temporary reducing service in case of congestion
 Change link：reroutes traffic away from failed links and signaling
points.
 Change-back: when the original link is available again, bring the
service back to the original link.
 Forced change of routing:change to lateral link when normal link
fails
 Management blocking: indicating to user part that link is available
in case of frequent change/change-back and high error rate.
MTP-2 doesn't change. For purposes of maintenance and test
 MTP-3
 SP restart. In case all signaling links connecting SP failed. SP
needs to be restarted in order to be updated of routing data.
 Traffic Control: in case the signaling network cannot transmit any
of signaling service of the User Parts due to failure or congestion,
use the flow control process to limit the traffic from signaling
originating points.
B B
Failure

Change failure Forced Change

A D
change
A D

COO/COA
C E

B
Failure

A D

Restart SP

C
 MTP-3
 Routing Management: Used By SP/STP to distribute signaling
network status information in order to block or unblock
signaling routing
B
 TFP : transfer prohibited TFP
failure

A D

 TFA: transfer Allowed

B
recovery
TFA

A D
 MTP-3
 TFC : transfer controlled
 Deliver congestion status to originating point

B
Congestion
TFC

A D

C
 RSM: test of routing group.
 SP use the function every 30 seconds to see if the signaling service
can be transferred via neighboring STP ( in case TFP is received
from the STP) until TFA is received.
 MTP-3
 Signaling Link Management
 Used to control local signaling link(s) and recover failed link(s) in
order to connect idle unaligned link(s) and disconnect aligned link(s).
 Basic link management: manual intervention(via man-machine
instructions) to the configuration data in the system.(currently
widely used one)
 Automatic signaling terminal allocation: automatic selection of idle
or other connected terminal to provide new link in case of link
failure
 Automatic signaling terminal and data link: automatic allocation of
both terminal and data link.( data link can be normally used for
voice traffic, and will be reallocated for signaling when normal
signaling link fails. (efficient use of signaling equipment but with
control quite complicated)
 Limitation of MTP：

1、 MTP can only be used for LINK BY LINK ，but not

END TO END application.

2、 Maximum Number of different users are 16.

3、OPC and DPC of MTP are not for global purpose.

4、MTP can only be used for connectionless services, not

used to services of Connection-oriented.
 Limitation of MTP

SSI SI

F CK SIF SIO LI FIB FSN BIB BSN F

8 16 8n(n≥2) 8 2 6 1 7 1 7 8 The first transmitted bit
LEAD CODES

SI H1 H0 LABEL

8n 4 4 64

CIC OPC D PC

4 12 24 24
 SCCP

SCCP (Signaling Connection and Control Part )

is one of the protocols of SS7 regulated by ITU.
It provides supplementary functions for MTP, so
as to realize transmission of signaling
information which is either circuit-related or
non-circuit-related and other types of
information between switches and between switch
and special usage center, and to establish
connectionless and connection-oriented network
services.
 SCCP--Features
 The reason for using SCCP
 circuit-related message (voice traffic)
 Circuit related message (MTP): once established, the circuit will be
occupied (exclusively) for the duration of the call
 Non-circuit related message (data):Routing can be changed.
 Connection mode transmission. A logic path is initially established
through the network and is maintained for the transmission of a group
of messages.(virtual circuits for the transmission of such non-real
time data as Network management and billing record data.
 Connectionless mode transmission. No path is set up prior to or
during the transmission.
 Abundant services:
 SI=4 bits, SSN=8 bits allows the addition of new services (MAP,
INAP,)
 Addressing:
 MTP: OPC, DPC (specific signaling codes), SSN (specific
applications),
 GT (global title) for global routing (national, international) and
end-to-end transmission
 SCCP—Message Unit

F B
F CK SIF SIO LI I FSN I BSN F
B B
Transmission

MTP3 Signaling network

H1 H0 SLS OPC DPC
management info.

TUP CIC
TUP Data H1 H0 OPC DPC
SLS

ISUP ISUP Data Message type CIC SLS OPC DPC

SCCP Message
User Data Message type SLS OPC DPC
header

CSL TSL
TCAP
component 1 component2 Component3

SI=0011
 SCCP--functions
 Network services of SCCP
 Connectionless transmission services (data packet):
 0:basic services: message not in sequence, SLS random. (IS-41 MAP
UDT)
 1: transmission in sequence: Same SLS for messages from the same

origination.
 Connection-oriented transmission services (virtual circuits):
 2: basic connection-oriented services
 3: flow controlled connection-oriented services

First establish connection (by connection request, CR), then send large
volume of data via the connection(no routing needed), and release
the connection.
 SCCP--functions
 Addressing and Routing Functions: routing can be
performed on the basis of the following address codes
 DPC+SSN

 DPC is the destination point code used by MTP

 SSN: Subsystem number for the identification of different user
applications in the same SP.
 GT
 SCCP provides the means for Global title translation(GTT) to
determine the DPC and SSN from digits(GT) present in the message.
 First GTT, then forward to MTP for transmission. GT allows global
end-to-end transmission(within the network or among different
networks)
 GT may be any sequence of digits pertinent to the service requested
(e.g. the dialed 800/888 number, calling card number, MDN)
 Because GTT, originating Signaling points do not need to know the
DPC and SSN of the associated service. Only the STPs need to
maintain a database of DPCs and SSNs associated with specific
services and possible destinations.
 SCCP offers service classification ：
connectionless services ：
（1）basic connectionless classification ( classification 0）

（2） sequential connectionless classification （ classification 1）

connection- -oriented services ：

（3） basic Connection-oriented classification （ classification 2）

（4） Flow control Connection-oriented classification

（ classification 3）
Connectionless service

Node 2
Node 1

SCCP 1 SCCP 2

UDT
Connection-oriented service
node 1 node 2
SCCP 1 SCCP 2

Connection request (CR)

Connection confirmed (CC)

Data

Data

Connection released (RLSD)

Release completed (RLC)

2、SCCP message
 (1)、message classification
Connectionless services include 4 types

SCCP has 18
message types
(ITU
prescribes 23 Connection-oriented services include 14types
message types
totally)

SCCP management services are 5 types

 F B
F CK SIF SIO LI I FSN I BSN F
B B
Transmit

Signaling network
MTP3 H1 H0 SLS OPC DPC
management message

TUP CIC
TUP message H1 H0 OPC DPC
SLS

message type
ISUP ISUP message CIC SLS OPC DPC
code

SCCP SCCP message type

user data SLS OPC DPC
head code

component part TCAP

TCAP
Component 3 Component 2 Component 1
 Message Signal Unit of the SCCP
D C B A D C B A
For SCCP For TUP
0 0 1 1 SSI SI 0 1 0 0

F CK SIF SIO LI FIB FSN BIB BSN F

8 16 8n(n≥2) 8 2 6 1 7 1 7 8 The first transmitted bit

7 Route label 0
Message type code

Necessary fixed parts

Necessary variable parts

Optional parameter parts
 Route label

SLS OPC DPC

4 24/14 24/14

DPC: destination point code OPC: originating point code

SLS: signaling link selector

used to select signaling link in load-sharing mode

Currently only 4 lower bits are used. 4 higher bits are

standby bits.
 Message type code

Presently MAP only used 4 types of connectionless

services. Transmit UDT
Unit data type UDT 0000 1001
Indicates the reason why UDT does not reaches

Unit data type service UDTS 0000 1010

Transmit XUDT
Extend Unit data type XUDT 0001 0001

Extend Unit data type service XUDTS 0001 0010

Indicates the reason why XUDT does not reaches
 Address indicator

8 7 6 5 4 3 2 1

Routing Subsystem SPC

standby GT indicator indicator indicator
indicator
Bit 1

Bit 2

Bit 7
Bit 3~6
SCCP management interface

Bit 1

Bit 2

Bit 3~6 Bit 7

 GT format:
There are 4 types of GT and there lengths are variable.
According to GT indicator (bit 3~6 ), normally 4 (0100) is
chosen for GT routing.
0100 ： GT includes address attribute indicator 、
translator type,number plan and code mode
Translator Types

Number Plan coding mode

standby address attribute indicator

Address information
 Number Plan
Serial No. Plan
1 ISDN/telephone coding plan
2 standby
3 data coding plan
4 Telex coding plan
5 Sea Mobile digital plans
6 Land Mobile digital plan

8 domestic coding plan

9 Private coding plan
Number Plan
Address attribute indicator
 Coding mode
4321
0000 undefined
0001 BCD number is odd
0010 BCD number is even
0011 Standby

to

1111 Standby
 Address attribute indicator
Coding
7654321
0000000 idle
0000001 User number
0000010 Domestic standby
0000011 Domestic effectual number

0000100 International number

0000110 IN number
0000101
to
1111111 standby
 Addressing and Routing of SCCP
There are three class :
（1）Signaling Point Code（SPC）(OPC &DPC)
（2）Subsystem number（SSN）:used to identify the various
users of SCCP
（3）GT: Global Title, is a number that contains location
information, MSISDN or IMSI number, for example .
Usually GT is the number of coding plan in ITU-T
DPC+SSN Routing
GT Routing
The GT Routing can be used when the DPC is not known.
 GT Routing

SCCP must translate GT to DPC or DPC＋SSN，

then transmit to MTP in STP. In this case , coding
plan must be indicated.

There is a limit to the node resource, one STP

node can not translate all GT addresses.

Therefore, first translating GT to DPC of interim

nodes, the interim STP will route to the final DPC.
A message of SCCP need several STPs to transmit
it
 GT translate process

originator interim node 1 interim node 2 destination

MAP MAP MAP MAP

SCCP SCCP SCCP SCCP

MTP MTP MTP MTP

UDT