Simba ASIC Software

WCDMA Non Access Stratum (NAS)

Overview

Page 1
21 May 2019
 WCDMA NAS Overview
Simba ASIC Software

Background
• WCDMA protocols are an evolution of the GSM protocols.

GSM Phase 1 GSM Phase 2 GSM Phase 2+ GPRS Edge WCDMA

HSCSD

• The WCDMA protocols retain a significant amount of functionality from the GSM/GPRS protocols.
• Mobility Management (REG/MM/GMM)
• Connection management (CC/SM/SMS/SS)
• Subscriber Identity Module (SIM/SAT)

• Release 99 3GPP specifications describe requirements for GSM, GPRS and UMTS.
• Release 99 3GPP specifications describe the protocol requirements for a dual-mode WCDMA-GSM/GPRS
• The NAS code base being designed by Qualcomm will support the following modes of operation
• GSM/GPRS single mode
• UMTS single mode
• UMTS/GSM/GPRS dual-mode

21 May 2019 QUALCOMM Proprietary Page 2

 WCDMA NAS Overview
Simba ASIC Software

NAS Function
• The GSM/WCDMA infrastructure is logically divided into a Core Network and an Access Network.
• The Access network consists of functions specific to the access technique for GSM/GPRS or
WCDMA.
• The Core network contains functions to support features and services that are independent of the
Access Stratum.
• The Core network is further divided into two domains: Circuit Switched (CS) domain and Packet
Switched (PS) domain.
• NAS over the air messages are transported transparently by RRC using the Direct Transfer
procedures

CS Core Network

PS Core Network
UE NAS

Radio Technology(GSM/GPRS/UMTS)

21 May 2019 QUALCOMM Proprietary Page 3

 WCDMA NAS Overview
Simba ASIC Software

External Interfaces
Call Manager

NAS software

MN
GSDI REG SM RABM
CC SMS GSMS SS

MM GMM

GSMS-LLC (GSM Only)

GMM-RRC (UMTS Only)
GMM-LLC (GSM Only) MM-RRC (UMTS Only)
Sim Server
MM-RR (GSM Only) RABM-RRC (UMTS Only)
GMM-RR (GSM Only)
LLC RR RRC

21 May 2019 QUALCOMM Proprietary Page 4

 WCDMA NAS Overview
Simba ASIC Software

Registration (REG)
• The registration procedure informs the Core Network where the UE is by Location Area(LAI).
• Registration is required before full service is available.
• Registration States:
• No Service
• Limited Service (Emergency CS Calls Only)
• No SIM present
• No allowed PLMN or LAI present
• Access class is restricted

• Full Service (Normal MO/MT CS and PS calls)

• Modes Of Registration
• Manual Mode
• A list of all available PLMN’s is presented to the user upon request and one is selected for registration.

• Automatic Mode
• The REG module will perform PLMN selection based on the following priorities:
• HPLMN,LRPLMN,Preferred PLMN’s,Available PLMN’s,Forbidden PLMN’s

21 May 2019 QUALCOMM Proprietary Page 5

 WCDMA NAS Overview
Simba ASIC Software

Mobility Management (General)

• Responsibility for keeping the the CN informed of a UE’s location, identity and capabilities.
• MM/GMM-Coord layer handles communication between MM and GMM as well as interfaces
external to mobility management.
• Operates within the confines of several parameters
• UE Operating Class
• Class A for UMTS, meaning simultaneous PS and CS attach and data transfer.
• Network Operating Mode
• Network Mode I
• CN supports combined procedures
• Network Mode II
• No CN support for combined procedures
• UE Capability
• NV Stored parameter indicates RAT support for the UE

21 May 2019 QUALCOMM Proprietary Page 6

 WCDMA NAS Overview
Simba ASIC Software

Mobility Management (MM)- States

• Provides Mobility Management for the UE with the CS CN.
• Main States
• Idle, Null, Location Updating Initiated, MM Connection Active
• Substrates of Idle State
• Normal Service, No IMSI, PLMN Search …
• Goes to “PLMN Search” after power-on or roaming is denied
• Update Status
• Associated with a specific subscriber embodied by a SIM
• Stored in SIM
• Updated, Not Updated, Roaming Not Allowed

21 May 2019 QUALCOMM Proprietary Page 7

 WCDMA NAS Overview
Simba ASIC Software

MM Procedures [1/3]
• Location Updating Procedure
• The location update procedure is used to inform the network of the location of a UE
• The UE will initiate the Location Updating Procedure when
• A Change in LA is detected

• IMSI Attach Procedure

• The IMSI Attach Procedure is used to inform the network that a mobile is active and able to receive
pages
• The UE will initiate the IMSI Attach Procedure when
• IMSI activation (UE activation or USIM insertion) within network coverage occurs
• Entering network coverage after IMSI activation occurred outside coverage area

• IMSI Detach Procedure

• The IMSI Detach Procedure is used to inform the network that a mobile is no longer active
• The UE will initiate the IMSI Detach Procedure when
• UE deactivation
• Removal of the USIM from the UE

21 May 2019 QUALCOMM Proprietary Page 8

 WCDMA NAS Overview
Simba ASIC Software

MM Procedures [2/3]
• Authentication Procedure
• Permit the network to check whether the identity of the MS is acceptable

• Provide parameters enabling the MS to calculate a new UMTS ciphering key

• Provide parameters enabling the MS to calculate a new UMTS integrity key

• Permit the mobile station to authenticate the network

• Encryption Key Management

• Commands USIM to generate keys.

• Retrieves keys from the USIM.

21 May 2019 QUALCOMM Proprietary Page 9

 WCDMA NAS Overview
Simba ASIC Software

MM Procedures [3/3]
• Identification
• Deal with requests from the network to provide specific identification parameters to the network and
manage the NAS identities.
• International Mobile Subscriber Identity (IMSI)
• Permanent record on the USIM
• Temporary Mobile Subscriber Identity (TMSI)
• Assigned by network during TMSI reallocation procedure and stored on the USIM
• Removes the need for sending the IMSI in clear on the radio path
• International Mobile Equipment Identity (IMEI)
• Assigned to the MS during manufacturing
• Used to prevent stolen or faulty equipment from accessing the network

• Paging Response
• The MM layer responds to pages by initiating an RRC connection and sending the
PAGING_RESPONSE message.

• Core Network System Information

• A portion of the MIB and SIB data received by RRC is forwarded to MM.

21 May 2019 QUALCOMM Proprietary Page 10

 WCDMA NAS Overview
Simba ASIC Software

MM Services provided to the CM layer

• Manages the state of the RRC connection for CS and PS protocol entities.
• Manages the state of the RRC signaling session for CS and PS protocol entities.
• Provides connection management services to circuit switched Connection Management
sublayer entities.

• CC, SMS and SS

• MM Routes CM messages to the appropriate entity based on the protocol discriminator (PD)
within the message

21 May 2019 QUALCOMM Proprietary Page 11

 WCDMA NAS Overview
Simba ASIC Software

GPRS Mobility Management (GMM)

• Provides Mobility Management for the UE with the PS CN.
• Much of the MM function is re-used when operating with the PS CN.
• Performed at the “coord” level.
• Main States
• Null, De-Registered, Registered-Initiated, Registered, De-Registered initiated, Routing
Area Update Initiated, Service Request initiated.
• Substates of De-Registered state
• Normal Service, Limited Service, etc...
• Update Status
• Associated with a specific subscriber embodied by a SIM
• Stored in SIM
• Updated, Not Updated, Roaming Not Allowed

21 May 2019 QUALCOMM Proprietary Page 12

 WCDMA NAS Overview
Simba ASIC Software

GMM Procedures (1/2)

• GPRS Attach
• A successful GPRS attach procedure establishes a GMM context
• A Combined GRPS attach procedure can be used to establish packet switched (PS) services and CS
services
• GRPS Detach
• Releases the GMM context
• Routing Area Update
• Normal
• Used when the UE detects a change in the routing area of a selected cell.
• Periodic
• Used to periodically notify the network of the availability of the UE.
• Combined
• Messaging contains information for routing area update and location area update
• Type of procedure performed is dependent on network mode of operation, UE class, and current
registration state for MM and GMM

21 May 2019 QUALCOMM Proprietary Page 13

 WCDMA NAS Overview
Simba ASIC Software

GMM Procedures (2/2)

• PTMSI Reallocation
• Assigns temporary mobile station identity for GPRS services
• Usually performed during Routing Area Update procedure
• Authentication and Ciphering
• Identification
• Used by the network to request UE identity
• Paging
• Used by the network to request that the UE establish a PS signaling connection or to prompt a re-
establishment
• Service Request
• Used to manage the radio access bearer establishment

21 May 2019 QUALCOMM Proprietary Page 14

 WCDMA NAS Overview
Simba ASIC Software

Call Control (CC)

• Call Control manages Mobile Originated and Mobile Terminated CS voice, fax and data calls.
• The Call Control Protocol supports multiple independent CC entities. Each CC entity has its own state
machine and MM connection to communicate with its network peer.
• Special provision in the specifications for Multicall
• Allows simultaneous active CS calls

• Call Establishment procedures

• Mobile originated (MO) calls refer to calls initiated by the mobile
• Emergency or Normal call setup

• Mobile Terminated (MT) calls refer to calls initiated by the network

• Call Clearing procedures
• Miscellaneous procedures
• DTMF tones
• Call re-establishment
• Progress
• Status

21 May 2019 QUALCOMM Proprietary Page 15

 WCDMA NAS Overview
Simba ASIC Software

CC State Machine
user requests network sends a
establishment of call establishment
MM connection Null request

MM Connection
r'cvd Call present
Pending MS is ready
RELEASE
r'cvd COMPLETE for call
MM requests call RELEASE establishment
Release network
establishment
Request requests
from network
release MT call confirmed
network (*)
disconnects sent
ALERTING
Call Init
Disconnect Disconnect
request indication sync ind
Call received (*)
network is r'cvd
ready for call r'cvd
ALERTING
establishment CONNECT
network sent
user (*) CONNECT
disconnects
disconnects
MO call
proceeding (*)
Connect request
r'cvd r'cvd (*)
PROGRESS CONNECT
sync ind

r'cvd r'cvd
ALERTING CONNECT
ACK

Call delivered (*) Active (*)

r'cvd
CONNECT

21 May 2019 QUALCOMM Proprietary Page 16

 WCDMA NAS Overview
Simba ASIC Software

Session Manager (SM) [1/2]

• Supports Packet Data Protocol (PDP) context handling
• The PDP context describes the characteristics of the connection to the external packet data network.
• PDP type (IP, PPP)
• PDP address (may be static or dynamic)
• Access Point Name (APN)
• QOS

• Each user may subscribe to one or more PDP addresses.

• Each PDP address could be associated with one or more PDP contexts.
• SM procedures require an active GPRS Mobility Management (GMM) context
• GMM must be PS attached.

21 May 2019 QUALCOMM Proprietary Page 17

 WCDMA NAS Overview
Simba ASIC Software

Session Manager (SM) [2/2]

• SM supports the following procedures
• PDP Context activation
• The first PDP context that is activated for a particular PDP address is known as the primary PDP
context.
• Can be either MO or MT
• PDP Context deactivation
• PDP Context modification
• Protocol to modify the Qos of the specified

• Secondary PDP context Activation/Deactivation

• Subsequent PDP contexts that are activated for the same PDP address are known as secondary
PDP contexts

21 May 2019 QUALCOMM Proprietary Page 18

 WCDMA NAS Overview
Simba ASIC Software

Radio Access Bearer Manager (RABM)

• RABM receives indication from SM about any PDP activation, modification or deactivation.
• RABM coordinates with the Access stratum to setup/release Radio access bearer (based on
the RABID).
• RABM re-establishes a specified RAB upon a re-establishment request from the DS (through
CM).
• RABM notifies the RAB establish/release indication to the DS (through CM) upon receiving
the indication from the RRC, during an Active PDP context.
• RABM does not have a peer entity within the CN.
• No over the air messages.

21 May 2019 QUALCOMM Proprietary Page 19

 WCDMA NAS Overview
Simba ASIC Software

Supplementary Services (SS)

• Call Deflection (CD)
• Call Waiting (CW)
• Call Forwarding Unconditional/Busy/No Reply/Not Reachable (CFU/CFB/CFNRy/CFNRc)
• Call Barring Outgoing/International/Incoming (BAOC/BOIC/BAIC)
• Call Hold (HOLD)
• Multi Party Service (MPTY)
• Calling Line Identification Presentation/Restriction (CLIP/CLIR)
• Connected Line Identification Presentation/Restriction (COLP/COLR)
• Closed User Group (CUG)
• Advice of Charge Information/Charging (AOCI/AOCC)
• User-to-User Signaling (UUS)
• Explicit Call Transfer (ECT)
• Unstructured Supplementary Services (USSD)

21 May 2019 QUALCOMM Proprietary Page 20

 WCDMA NAS Overview
Simba ASIC Software

SS Procedures [1/2]
• SS procedures can start during the establishment of a call
• The Call Control messages are used to transport the SS protocol information elements
• SS procedures can take place during the active part of a call
• Separate SS signaling messages are sent
• Request of SS procedure during call clearing
• The Call Control messages are used to transport the SS protocol information elements
• Call Related SS procedures
• CM signalling to MN and CNM initiates a CRSS procedure
• CRSS signalling can be described as follows:
• UDUB
• CALL HOLD
• CALL RETRIEVE
• CALL JOIN
• CALL SPLIT

21 May 2019 QUALCOMM Proprietary Page 21

 WCDMA NAS Overview
Simba ASIC Software

SS Procedures [2/2]
• Request of SS procedure independent of a call
• Establishing side (Mobile or Network) must first initiate an MM connection
• The management of SS is executed within the CNM layer
• Facility messages are used to signal between the UE and the HLR.
• 5 categories of SS signal:
• Activation and deactivation:
• ACTIVATE, REGISTER, INVOKE, DEACTIVATION and ERASE
• Service enquiry:
• INTERROGATE
• Security:
• REGISTER PASSWORD and GET PASSWORD
• Unknown data:
• PROCESS UNSTRUCTURED SS DATA
• HLR management:
• FORWARD SS NOTIFICATION, FORWARD CHECK SS INDICATION

• The execution of a CISS enabled service takes place at CALL ESTABLISHMENT

21 May 2019 QUALCOMM Proprietary Page 22

 WCDMA NAS Overview
Simba ASIC Software

Short Message Services (SMS) [1/3]

• Short messages are over the air in signaling messages.
• Requires an RRC connection and RRC signaling session
• Does not utilize a dedicated Radio Access Bearer.
• The SMS entity is capable of sending messages over the PS or CS connection, selecting one
based on several criteria:
• UE capability
• Network capability
• Current operating mode
• Current GMM attach state
• SMS supports multimedia, email etc…
• SMS storage available on USIM or NV
• SMS supports usage by AT-COP, GSTK and MMI.

21 May 2019 QUALCOMM Proprietary Page 23

 WCDMA NAS Overview
Simba ASIC Software

Short Message Services (SMS) [2/3]

• The CM sublayer contains multiple SMC entities to support simultaneous MO and MT SMS transfers
• Each SMC entity communicates with a peer entity in the network using the SM-CP Protocol over the MM
connection
• SM-CP Messages
• CP-DATA
• Contains the RPDUs from the SMR entity

• CP-ACK
• Acknowledges reception of the CP-DATA message

• CP-ERROR
• Indicates an error in the transfer

21 May 2019 QUALCOMM Proprietary Page 24

 WCDMA NAS Overview
Simba ASIC Software

Short Message Services (SMS) [3/3]

• The SM-RL Layer has an SMR entity to support each SMC
• SMR communicates with a peer entity in the network using the SM-RP Protocol over an existing MM
connection
• SM-RP Messages
• RP-DATA
• Contains the TPDUs from the SM-TL

• RP-ACK
• Acknowledges reception of the RP-DATA message

• RP-ERROR
• Indicates an error in the transfer

21 May 2019 QUALCOMM Proprietary Page 25

 WCDMA NAS Overview
Simba ASIC Software

Specifications
• REG
• 23.122 and 24.008
• Division of requirements between REG and MM/GMM is somewhat arbitrary
• MM/GMM
• 23.060, 24.007(Informative), 24.008
• SM
• 24.007(Informative), 24.008
• CC
• 24.007(Informative), 24.008
• SMS
• 23.040, 24.011
• 24.007(Informative),
• SS
• 24.080
• 40 additional specifications covering each individual service
• RABM
• No real requirements present in the specifications
• Requirements primarily inferred from system level requirements.

21 May 2019 QUALCOMM Proprietary Page 26