Professional Documents
Culture Documents
Technical Fundamentals of UMTS
Technical Fundamentals of UMTS
www.optimi.com
Basic components of a mobile system Evolution from GSM to UMTS Standardization of UMTS Network Architecture Evolution
UMTS Architecture
1. 2. 3. 4.
CN architecture PS domain: SGSN and GGSN CS domain: MSC and MGW RAN architecture
Basic principles of WCDMA radio access technology Effects of the multipath propagation RAKE receiver Orthogonality issues Need for Power Control in WCDMA systems Simplified assessment of the system capacity
Protocol architecture PDCP Broadcast Control protocol RRC RLC: radio bearers MAC: logical channels Physical layer
Radio Resource Management Overview Power Control Soft Handover Load Control Admission Control Packet Scheduling Coverage vs. capacity in WCDMA Coverage Capacity System performance with packet data
QoS paradigms: resource reservation and DiffServ QoS mechanisms Policy Model Introduction to QoS QoS architecture QoS classes QoE vs QoS Services architecture Services QoS requirements Transport protocol characteristics
QoS in UMTS
1. 2. 3.
Bearer service level Main effects on the service performance Service performance analysis Service performance benchmarking
8
Services (ex: voice, data , messaging, video, etc.): main characteristic for the end user perception. Normally access technology independent
Backbone
1. Terminal
Access Technology (Analog, Digital, etc): main technical characteristic of the cellular system
3. Core Network (CN): large switches, routers, databases and servers in operator main site. Normally packet and circuit switched capabilities
Handover: change of access point maintaining session Roaming: capability to use other operators' networks
Radio Resource control: functions that control the use of the radio resources (that are scarce and expensive). Typically only in Radio Access Network Charging: functions that allows the operator to track the activity of the user for billing purposes Security: authentication of user and network, confidentiality, etc.
10
time
time
Combined use
11
12
25
1940
1970
NMT: Nordic Mobile Telephony (1981). 450 & 900 MHz, North Europe AMPS: American Mobile Phone System(1983) 800 MHz, US and South America TACS: Total Access Communication System, 900 MHz, Spain, Italy, U.K others
13
US US
Japan
TTC, ARIB
TDM
Proprietary
All provide similar level of service to end user. Only GSM System has SIM card
GSM History
14
Voice, Circuit Switched data and Fax Supplementary Services (forwarding, conference call, Call hold) Multiple timeslots (up to 4) for CS data, up to 44Kbit/sec
'00 HSCSD - High Speed Circuit Switched Data '01 GPRS - (General Packet Radio Service).
Add Packet Switched Data Capability in Radio ($/bits instead of $/sec) Connection to IP Network (UE has one IP Address)
15
GSM 68%
Some (global) operators: Vodafone (U.K.), T-Mobile (Ger), Telefonica (Esp), Verizon (US), AWS (US), Hutchinson (HK), DoCoMo (Jap), SKT (Kor) Some Network Infrastructure Vendors: Ericsson (Swe), Nokia (Fin), Nortel (US/Can), Lucent (US), Siemens (Ger), Alcatel (Fra), Motorola (US), NEC (Jap) Some Terminal Vendor: Nokia, Motorola, Samsung (Kor), Sony-Ericsson, Siemens, Alcatel, Qualcomm
The way to
Clear the need for new systems:
3rd
Generation
16
Support of multimedia services Improved service creation environment, security, etc Global, no regional standards New radio technology, Wide Band, higher bit rate
ITU-R (International Telecommunication Union) defined requirements and schedule for the third generation (IMT2000 technology)
17
EU project FRAMES, ACTS 13 different air interface proposals ETSI: 5 different concept group for UTRA (UMTS Terrestrial Radio Network Access).
1900
2000
2050
2100
2200
Japanese (ARIB/TTC), Korean (TTA) and American (T1P1) converge creation of 3GPP (3rd Generation Partnership project)
Chinese (CWTS) joined 3GPP: addition of the TD-SCDMA (Rel'4) Chip rate harmonization with US GERAN Included in 3GPP (Core Network Harmonization) WCDMA1900 for US Market
HSDPA (High Speed Downlink Packet Access), up to 2Mbps IP Multimedia Subsystem (for SIP Services)
18
3GPP has defined three (4 including EGPRS) 3GPP2 has developed US-CDMA into 3G capabilities (CDMA2000-1xDV)
IMT-2000 TDMA Single Carrier Multi-Carrier Direct Spread 3.84 Mcps CDMA Multi-Carrier 3.6864 Mcps TDD 3.84 Mcps 1.28 Mcps
EDGE
DECT
WCDMA
Summary of 3G Technologies
3G technology
EGPRS
19
Core Network Where first
US (2003), Europe (2003) Japan (2002), Europe (2003) Maybe never China (2005) US, Korea, Jap (2002) US, Japan, Korea (2003) US, Korea 2004
Radio Technology
TDM CDM CDM-TDM CDM-TDM CDM CDM CDM 380Kbps 2Mbps
Bit Rates
NOTE: GSM (via 3GPP), and US-CDMA (via 3GPP2) are the only 2G technologies with smooth evolution to 3G.
No evolution for PDC (->Switch to WCDMA), and US-TDMA
20
21
3GPP2
IETF: Internet Engineering Task Force. Specify protocols adopted by 3GPP & 3GPP2 (ex: SIP, SCTP, Diameter, ..)
New Services and Applications Open environment for develpment of application. Interoperability betwen operator
OMA Open Mobile Alliance: Specify API for open service creation environment
3GPP
22
TSG
TSG
Terminal
Technical Specifications
Fuente : INALTEL
23
Trunked radio, point-to-point and point-to-multipoint. Normally Regional Organization (police, fireman, taxi, etc). FDMA, 400, 800 MHz Substitute Analog radio systems
Initially planned with outdoor coverage, but currently only used locally
INMARSAT (sea and air navigation), Globalstar, Iridium Global coverage, but do not compete with cellular. Only professional usage
Those are only access techniques, but can be used as the base for a cellular system Unlicensed Band! 802.11, 802.16 (WiMAX), 802.20 (FLASH OFDM)
24
25
Mobile Station (MS): Terminal equipment + SIM card Base Station Subsystem (BSS): Radio path control Network Switching Subsystem (NSS): Call control
Within it, Circuit Switch (CS) and Packet Switch (PS) domains are also separated
IP Multimedia Subsystem (IMS) Network Management Subsystem (NMS): Operation and maintenance A, Gb, Iu Air
CS NSS
MS
BSS
PSTN/ ISDN
IP
PS NSS
IMS
O&M
NMS
26
Basic telephony Emergency calls 300 to 9600 bps data services Ciphering and authentication Supplementary services (call forwarding/barring,...) Short Message Service (SMS) also included, but deployed and commercialized successfully much later
From the radio performance viewpoint, the following features were mandatory for the terminal:
Supplementary services (identification services, call waiting, call hold, conferencing) Half rate channel mode codec
27
BSS
TC MSC
VLR
CS NSS
GMSC
MS
PSTN ISDN
On the air interface, one channel is allocated for each connection to one user.
AC BSC BTS EIR GMSC Authentication Centre Base Station Controller Base Station Subsystem Equipment Identity Register Gateway MSC HLR MS MSC TC VLR
28
New bearer services: High Speed Circuit Switched Data (HSCSD), GPRS and EDGE Enhanced Full Rate speech codec (EFR), Adaptive Multirate codec (AMR) Mobile station positioning services Multiband operation (GSM 400, 700, 850 MHz) Messaging enhancements: SMS concatenation, MultiMedia Messages (MMS) New supplementary services (call deflection, calling name presentation, explicit call transfer) Subscriber Identity Module (SIM) toolkit Customized Applications for Mobile network Enhanced Logic (CAMEL)
29
BSS
TC MSC
CS NSS
GMSC
MS
VLR
PSTN ISDN
HW and SW changes for GPRS Changes on the air interface: multiplexing, new codecs, PCU unit in BSC, specifically handling PS connections and providing packet scheduling.
Gb
GGSN PCU SGSN Gateway GPRS Support Node Packet Control Unit Serving GPRS Support Node
SGSN New Core Network for the connection to packet switched domain networks
PS NSS
GPRS IP Backbone
Data NW
30
EDGE development was started in 1997, when ETSI conducted a feasibility study about GSM evolution, and the Universal Wireless Communication Consortium (UWCC) Global TDMA forum prepared input for TIAs ITU IMT2000 program.
In 1998, the key technology parameters between the two developments were harmonized, forming a basis for converged TDMA standard using 200 kHz carrier and 8-PSK modulation in the radio interface.
31
BSS
A
MSC
VLR
CS NSS
GMSC
PSTN ISDN
MS
Uu
Node B
UTRAN
RNC
Iu-CS
HLR & AC & EIR
UE
Gb
SGSN
PS NSS
GPRS IP Backbone
GGSN
Internet Data NW
UTRAN is the revolutionary part of the UMTS system Iu-PS New Iu interface (for PS and CS)
Major changes for PS domain: -SGSN does not implement any radio protocol. Minor changes on CS domain
32
Unique Iu interface with differentiation for PS and CS (even if the architecture was defined to be more suitable for packet data services).
Interoperability with GSM (for example, GSM radio interface modified to broadcast information about CDMA system information). Updates in some network elements:
MSC/VLR to support new Iu interface (support both 2G and 3G subscribers). Transcoding in MSC (new AMR codec). SGSN: 2G responsible for Mobility Management, 3G MM divided between SGSN and RNC (3G SGSN is more like a "router", and cell changes are not visible in 3G SGSN).
33
WCDMA Uu
ATM/IP Iu
UE
UTRAN
CN
O&M
NMS
UE = User Equipment UTRAN = UMTS Terrestrial Radio Acces Network CN = Core Network NMS = Network Management System
34
Um
BSS
A
MGW
MSC
VLR
CN CS domain
MGW
MS
PSTN
ISDN
Uu
Node B
UTRAN
RNC
Iu-CS
HSS
UE
Gb
CN PS domain
3G SGSN GGSN
GPRS IP Backbone
Internet
IP,multimedia
Iu-PS
35
CS NSS
MSC GMSC
VLR
MGW
Iu-CS
MGW Media Gateway
HSS
36
Um
BSS
MGW
MSC
VLR
CN CS domain
MGW
MS
PSTN
ISDN
Uu
Node B
UTRAN
RNC
Iu-CS
HSS
UE
CN PS domain
3G SGSN GGSN
GPRS IP Backbone
- Introduction of IP Multimedia Subsystem - GERAN (support of Iu interface) - IP Transport added to Iu-CS, Iur and Iub interfaces (Iu-PS had it from Rel'99). Note: A and Gb interfaces not shown in the picture (but still existing)
IM S
Internet
IP,multimedia
Iu-PS
37
Gb
SGSN
PS NSS
GPRS IP Backbone
I M S
Internet Data NW
Iu-PS
GPRS, EDGE and UMTS networks have excellent data capabilities but these networks do not provide a mechanism by themselves to connect terminals using IP!
IP Multimedia Subsystem (IMS) - Infrastructure defined on top of GPRS network to enable the IP Connectivity between terminals - The IMS fits into existing GPRS networks and enables sessions between terminals based on IP protocol. - The session is set up using SIP (Session Initiation Protocol) and can carry any IP-based service - IMS was introduced on 3GPP Rel5 specifications
38
http://www.3gpp.org/ftp/Specs/
UMTS Architecture
Content
UMTS Core Network Architecture
39
Concepts: Access Stratum and Non-Access Stratum Split between Circuit Switched and Packet Switched Domains
Architecture Elements & Common CS and PS elements (Databases) Interfaces and Protocols (Mobility Management Protocol, Call Control Protocol, MAP protocol)
Architecture Elements Basic Concepts Interfaces and Protocols (Session Management Protocol, GPRS Mobility Management Protocol, GTP Protocol) Radio Network Controller roles UMTS Bearers Concept Interfaces and protocols( Iu, Iur, Iub, GTP, RANAP, RNSAP, NBAP)
UTRAN architecture
40
management of user location information control of network features and services transfer (switching and transmission) mechanisms for signalling and for user-generated information Switching of circuit switch calls Routing of packet data
The communication services provided to the UMTS subscribers through the UMTS CN are:
Air
Iu
UE
UTRAN
UMTS CN
Service Domain
External Networks
UE: User Equipment UTRAN: UMTS Terrestrial Radio Access Network
41
UE
UTRAN
UMTS CN
Service Domain
External Networks
AS (Radio Protocols) AS (Iu Protocols)
42
The Circuit Switched (CS) Domain refers to all the CN entities offering "CS type of connection" for user traffic as well as all the entities supporting the related signalling.
A "CS type of connection" is a connection for which dedicated network resources are allocated at the connection establishment and released at the connection release
The Packet Switched (PS) Domain refers to the set of all the CN entities offering "PS type of connection" for user traffic as well as all the entities supporting the related signalling.
A "PS type of connection" transports the user information using autonomous concatenation of bits called packets: each packet can be routed independently from the previous one
Iu
UMTS CN
Air
CS CN
Common Registers:
HLR AuC EIR
UE
UTRAN
External Networks
HLR: Home Location Register AuC: Authentication Center EIR: Equipment Identity Register PSTN: Public Switched Telephony Network ISDN: Integrated Service Digital Network
PS CN
UMTS Architecture
Content
UMTS Core Network Architecture
43
UMTS Circuit Switched Core Network UMTS Packet Switched Core Network
Concepts: Access Stratum and Non-Access Stratum Split between Circuit Switched and Packet Switched Domains Architecture Elements & Common CS and PS elements (Databases) Interfaces and Protocols (Mobility Management Protocol, Call Control Protocol, MAP protocol) Architecture Elements Basic Concepts Interfaces and Protocols (Session Management Protocol, GPRS Mobility Management Protocol, GTP Protocol) Radio Network Controller roles UMTS Bearers Concept Interfaces and protocols( Iu, Iur, Iub, GTP, RANAP, RNSAP, NBAP)
UTRAN architecture
44
SMS Service
Billing Center
MGW Nb
Lawful interception
MGW
UTRAN
MSC/VLR
Mc Nc F, D
GMSC
Mc
External Networks
CS CN
Gs
PSTN ISDN
HLR AuC EIR
Gr, Gf, Gc
PS CN
Iu CS
MSC: Mobile Switching Center VLR: Visitor Location Register MGW: Media GateWay GMSC: Gateway MSC SMS: Short Message Service
PSTN
45 VLR
MSC
Call control: Connection Setup/Clear procedures, handle calls in progress, paging, handovers, call reestablishment User Plane Control: selects the bearer characteristics for data transmission, and selects the Media Gateway (MGW) MGW control: uses H.248 (MEGACO) Protocol, to create connections, to create tones and announcements, echo cancellation control, conferencing control, handle of handovers Mobility Management: IMEI Checking, User Authentication, IMSI Attach/Detach, Roaming, Handover, Location Update, Call re-establishment It provides charging statistics to the Billing Center Intelligent Network interface and functions SMS service interface
VLR (Visitor Location Register) is a database storing information related to subscribers under the MSC area (temporarily):
Current location area. Information needed to handle the calls set-up or received by the UEs Supplementary service parameters attached to the mobile subscriber and received from the HLR A VLR may be in charge of one or several MSC areas. It's involved in Location registration, location update and Security functions
46
MGW (Media Gateway): Border element between signaling, transport and user plane
interfaces. It connects PS and CS networks. Main functions are:
Tones and announcements DTMF (Dual Tone MultiFrequency) handling: Generation/Detection capability. Assigns two specific tones to each key of the phone keyboard so that the network can obtain the number corresponding with the tones Echo Cancellation: needed for calls between the backbone network and the PSTN Continuity Check: verifies the availability of a stable connection between communication nodes. Needed for connections with PSTN Conferencing: allows various users to talk at the same connection at the same time Speech Transcoding: speech coding/decoding, Discontinuous Transmission (DTX)
47
Stores subscription data such as allowed list of services (including detailed information about service attributes), state of call forwarding service, among others Stores Routing Information: MSC/VLR or SGSN (Serving GPRS Support Node), depending on the CN domain, address serving the mobile when roaming, so that an incoming call can be routed. If MSC/VLR or SGSN serving the mobile changes due to mobile roaming, the HLR must be always informed Responsible for storing in the network the International Mobile Equipment Identities (IMEIs) Handles security functions related with the verification and identification of the mobile equipment
AuC (Authentication Center): Usually integrated within the HLR. Handles security functions
related with the verification of the identification of the user. It stores the identification key of the user (Ki), used to generate security data for each mobile subscriber
AuC communicates only with its associated HLR over the non-standardised interface H. The HLR requests the data needed for authentication and ciphering from the AuC via H interface, stores them and delivers them to the VLR and SGSN which need them to perform the security functions for a UE
EIR
HLR
AuC
48
Control Plane:
RANAP: Radio Access Network Application Protocol MAP: Mobile Application Part MM: Mobility Management CC: Call Control Mc BICC: Bearer Independent CC
EIR
D
HLR
MAP C
AuC
MAP E MAP
MGW
H.248
H.248 C MAP D Iu CS
MM/CC
UTRAN
RANAP
MSC/VLR
BICC Nc
MAP
MSC/VLR
MM/CC RANAP
GMSC
BICC
User Plane:
UTRAN
Iu_UP Iu CS Iu_UP
External Networks
MGW
Nb_UP
Nb
MGW
Nb_UP Codec PCM
PSTN ISDN
Iu_UP: Iu User Plane Nb_UP: Nb User Plane PCM: Pulse Code Modulation
49
Whenever the MSC needs data related to a given UE located in its area, it interrogates the VLR When an UE initiates a location update procedure with an MSC server, the MSC informs its VLR which stores the relevant information. This procedure occurs whenever an UE roams to another location area. This interface is internal to the MSC/VLR -> signalling is not standardised
C (GMSC HLR):
The GMSC server must interrogate the HLR of the required subscriber to obtain routing information for a call or a short message directed to that subscriber Mobile Application Part (MAP) protocol is used in the interface
D (HLR VLR):
This interface is used to exchange the data related to the location of the UE and to the management of the subscriber. The VLR informs the HLR of the location of the UEs and about the roaming numbers. The HLR sends to the VLR all the data needed to support the service to the UE. Exchanges of data may occur when the mobile subscriber requires a particular service, when he wants to change some data attached to his subscription or when some parameters of the subscription are modified by administrative means Mobile Application Part (MAP) protocol is used in the interface
50
When a mobile station moves from one MSC area to another during a call, a handover procedure has to be performed in order to continue the communication. For that purpose the MSCs have to exchange data to initiate and then to release the operation Mobile Application Part (MAP) protocol is used in the interface
F (MSC EIR):
MSC and EIR exchange data so that EIR can verify the status of the IMEI retrieved from the UE Mobile Application Part (MAP) protocol is used in the interface
G (VLR VLR):
When a mobile subscriber moves from a VLR area to another one, it performs the Location Registration procedure. Mobile Application Part (MAP) protocol is used in the interface
51
This interface has full compliance with the H.248 standard Used for the dynamic sharing of MGW physical node and transmission resources
Nc (MSC GMSC):
Performs the Network-Network based call control E.g. messages such as ISUP for bearer independent call control (BICC). Different options for signalling transport on Nc shall be possible including IP
Nb (MGW MGW):
Performs the bearer control and transport. The transport may be RTP/UDP/IP or AAL2 for transport of user data. Different options for user data transport and bearer control shall be possible on Nb, for example: AAL2/Q.AAL2, STM/none, RTP/H.245, IPBC
52
LA (Location Area) is the area where the UE may move without performing the location update procedure (in other words, without updating its position in the VLR). The LA consists of one or more cells Every Location Area is identified uniquely with the Location Area Identity (LAI) In the Location Update procedure the location of the mobile is stored in the VLR with a precision of a LA. This information is needed when a call terminated in the mobile is received. In this way the paging procedure is performed only in the LA where the mobile is located LA2 LA1 MSC Area
Compromise between number of LAs and LA size: Few and large LAs reduces signalling due to LA update procedures, but increases the signalling load in the paging channel More and smaller LAs reduces the signalling load in the paging channel, but increases the signalling due to LA update procedures
Cell
53
The main function of the Mobility Management (MM) is to support the mobility of user terminals, such as informing the network of its present location and providing user identity There are three types of MM procedures: MM Common procedures:
TMSI Reallocation: provides identity and confidentiality. Its performed at least when Location Area (LA) changes. TMSI has significance only within a LA
Authentication: to check whether the user has rights to use the network (allows UE to authenticate the network also) Identification: the network can ask the UE about specific identification information (for example IMSI or IMEI)
MM Specific procedures:
Location Update (periodical and due to user mobility) IMSI Attach: the UE is switched on
54
55
MSC/VLR
Location Update Request (I have moved) Identification (Who are you?) Authentication (Prove who you are) Ciphering (Lets protect our communication)
MM
MM MM
Location Update Accept (TMSI# assignment) TMSI Reallocation Complete Release Connection: Release Signalling Channel
MM MM
56
Establishment of the circuit: the called number is analyzed in order to setup the connection (and for charging purposes)
Release of the circuit: when the call has finished Establishment of legs (MOC: Mobile Originated Call, MTC: Mobile Terminated Call, POC: PSTN Originated Call, PTC: PSTN Terminated Call). MSC is in charge of MOC and MTC legs, and GMSC is in charge of POC and PTC legs Determine the type of call: normal (speech), emergency, data Echo Cancelling: specially needed for call originated in the cellular network and terminated in the PSTN Charging
57
MSC/VLR
Service Request
CC
Authentication and Ciphering (Prove who you are & Lets protect our communication)
CC CC
Setup (call to this number) Call Proceeding (calling to this number) Bearer Allocation: Setup Communication Channel
CC CC
CC CC CC
CC CC CC
CONNECT ACK
58
MSC/VLR
Paging Request (someone wants to contact you) Radio Access: Setup Signalling Connection
CC
Authentication and Ciphering (Prove who you are & Lets protect our communication)
CC CC CC
CC CC CC
CC CC
CC CC
UMTS Architecture
Content
UMTS Core Network Architecture
59
Concepts: Access Stratum and Non-Access Stratum Split between Circuit Switched and Packet Switched Domains Architecture Elements & Common CS and PS elements (Databases) Interfaces and Protocols (Mobility Management Protocol, Call Control Protocol, MAP protocol) Architecture Elements Basic Concepts Interfaces and Protocols (Session Management Protocol, GPRS Mobility Management Protocol, GTP Protocol) Radio Network Controller roles UMTS Bearers Concept Interfaces and protocols( Iu, Iur, Iub, GTP, RANAP, RNSAP, NBAP)
UTRAN architecture
60
CS CN
Gs Gf, Gr F, D, C Gc HLR AuC EIR
UTRAN PS CN
Iu PS
SGSN: Serving GPRS Support Node GGSN: Gateway GPRS Support Node
SGSN Gn
GGSN
External Networks
Internet
Gi
61
GGSN
GPRS IP Backbone
IP Network (Internet)
GGSN is the PLMN interface to external packet data networks From the external network point of view, GGSN looks like a data router.
Encapsulates the incoming data in tunnels (one tunnel per user), and forwards this end user data to right SGSN Routes mobile originated packets to right destination.
Allocates IP addresses to mobiles Charging data collection: Collects data necessary to support subscription and/or traffic fees Admission Control: Calculates which network resources are required to provide the QoS requested, determines if those resources are available, and then reserves those resources.
62
GGSN
GPRS IP Backbone
IP Network (Internet)
Mobility Management.
Authentication, location tracking at Routing Area level, Authorization Interaction with HLR, MSC/VLR
Session Management: manage the user context, negotiate QoS Protocol conversion between GPRS IP backbone and interface towards RAN.
63
The PDP Address is used for routing in external IP networks and for mapping packets to the GTP tunnel between GSN nodes (SGSN-GGSN)
Um
BTS MS BSC
PCU
BSS
Gb
Internet Data NW
PDP Context
64
Network Identifier: linked to access and services and stored in the HLR Operator Identifier: indicates in which operator's backbone the GGSN is located may be indicated by the UE to request home GGSN if not indicated by the UE, may be appended by the SGSN to indicate if the GGSN is in the home network or in the visited network SGSN tries first the visited network (if allowed) and then the home network
65
It is possible to connect via multiple PDP Contexts to the same Access Point (second PDP needed only if different QoS)
66
F MAP Gf MAP Iu PS
EIR
Gr
HLR
MAP
AuC
MAP
GMM/SM/SMS
UTRAN
RANAP
SGSN
BSSAP+ Gn GTP-C
Gs
BSSAP+
GMM/SM/SMS RANAP
GGSN
GTP-C
MSC/VLR
User Plane:
Iu PS
Appl. IP
UTRAN
GTP-U UDP/IP
SGSN
GTP-U UDP/IP
Gn
GGSN
IP GTP-U UDP/IP
Gi
Interne t
Appl. IP
GTP-U UDP/IP
67
Gr (SGSN - HLR):
Used to exchange data related to the location of the UE and to the management of the subscriber. The SGSN informs the HLR of the location of a UE. The HLR sends to the SGSN all the data needed to support the service to the mobile subscriber. Exchanges of data may occur when the mobile subscriber requires a particular service, when he wants to change some data attached to his subscription or when some parameters of the subscription are modified by administrative means Mobile Application Part (MAP) protocol is used in the interface
Gn (SGSN GGSN):
Used to support mobility between the SGSN and GGSN. The interface also includes a part which allows SGSNs to communicate subscriber and user data, when changing SGSN. GTP protocol is used in the interface
The SGSN may send location information to the MSC/VLR via the optional Gs interface. The SGSN may receive paging requests from the MSC/VLR via the Gs Used to exchange data so that the EIR can verify the status of the IMEI retrieved from the UE Mobile Application Part (MAP) protocol is used
68
GTP Tunnel
69
70
SGSN
SM
GGSN
HLR
Request Validation
Perform Query to DNS with APN to obtain GGSN address
RAB Establishment
SM
SM
71
RA (Routing Area) is the area where the UE may move, in certain operation modes, without performing the routing area update procedure (updating the SGSN). A routing area may include one or several cells. A RA is always contained within a location area
72
GMM Specific procedures (MS-initiated): GPRS Attach and Detach, Routing Area Update,etc
PMM-Idle
GPRS Detach
PMM-Connected
GMM States:
PMM-Detached: The network has no valid routing information for the PS connections PMM-Idle: The location of the mobile is known with a precision of a Routing Area (RA). In this state, both UE and network maintain valid routing information, and are ready for data transmission, but are not able to do it because there is no connection through the access network PMM-Connected: Data can be transferred between the UE and the network. SGSN knows valid routing information for the transfer of data, with a precision of the current RNC routing address
73
Security Functions
MM contexts and PDP context information exchange PDP Context Update Retrieve Subscriber Data
Cancel Location
UMTS Architecture
Content
UMTS Core Network Architecture
74
Concepts: Access Stratum and Non-Access Stratum Split between Circuit Switched and Packet Switched Domains Architecture Elements & Common CS and PS elements (Databases) Interfaces and Protocols (Mobility Management Protocol, Call Control Protocol, MAP protocol) Architecture Elements Basic Concepts Interfaces and Protocols (Session Management Protocol, GPRS Mobility Management Protocol, GTP Protocol) Radio Network Controller roles UMTS Bearers Concept Interfaces and protocols( Iu, Iur, Iub, GTP, RANAP, RNSAP, NBAP)
UTRAN Architecture
UTRAN Architecture
UTRAN (UMTS Terrestrial Radio Access Network) is composed as following: Radio Network Subsystem (RNS): Sub network within the UTRAN. It comprises RNC and NodeB The main network elements are:
75
Radio Network Controller (RNC): Owns and control radio resources in its domain. Service access point for the all UTRAN provided services to the CN Node B: Converts data flows and participates in radio resource management. It is the Base Station with the radio equipment
RNS Node B RNC Iub Node B Node B RNC RNS Iur
Functionalities:
Transfer of User Data across the UTRAN between the Iu and Uu reference points. Access control: admission control, congestion control or system information broadcasting. Radio channel ciphering and deciphering for protection of transmitted data against a non-authorized third-party. Integrity protection of transmitted data. Mobility: handover, SRNS Relocation, paging support and positioning. Radio Resource Management: connection setup/release,
UE
Node B
CN
Uu
UTRAN
Iu
UTRAN Architecture
Mobility Concepts
2.a.
D-RNC
76
1
Iu RNC Iur
CN
CN
Iu
SRNC
Iu Iur
Iu
S-RNC
2.b.
Iu D-RNC
CN
Iu
S-RNC
3
Iu S-RNC
CN
Iu Iur
RNC
Iur
Anchor Point
Node B
Node B
Node B
UTRAN Architecture
77
Controlling RNC (CRNC) of a Node B: RNC controlling one Node B (terminating Iub Interface).
Responsible for the load and congestion control of its cells Executes the admission control Code allocation of new radio links in its cells
In case single UTRAN connection uses resources from more that one RNS:
Serving RNC (SRNC): RNC which terminates Iu interface (signalling and data) towards the CN. One UE connected to the UTRAN has only one SRNC.
Terminates Radio Resource Control (RRC) Signalling Performs L2 data processing Mapping of Radio Access Bearer parameters into air interface transport channel parameters Handover decision Macro diversity
Drift RNC (DRNC): Any RNC, other than SRNC, that controls cells the mobile uses. One UE has one or more DRNC.
UTRAN Architecture
UMTS Bearers
UTRAN UE
SGSN GGSN
78
PDP Context
Radio Access BS
CN BS
Radio BS
Iu BS
RRC Connection
UTRAN Architecture
RAB, IuBearer and RB
Radio Access Bearer: The service provided by the protocols handling activities between UE-RAN and the RAN-CN that provides the connectivity between UE-CN for transferring of user data between UE and CN. Radio Bearer: The service provided by the Layer 2 (RRC level) for transferring of user data between UE and UTRAN Iu Bearer: The service provided by the Layer 2 (RANAP/GTP) for transferring user data between UTRAN and CN
Additionally radio links are established between UE-NodeB and between NodeB-RNC. RRC Connection is built on top of Radio Links
Radio BS Radio Access BS
79
Iu BS
CN
UTRAN Architecture
Iu interface (1/5)
Iu interfaces UTRAN and CN Original goal: To develop only one Iu interface However, fully optimized User Plane transport for CS and PS only possible if different transport technologies are allowed. Therefore,
RNS
Node B Node B Iub Node B Node B RNC RNS SAS RNC Iupc
80
UE
Iur
CN
Uu Protocols Iu-cs:
Iu-CS: towards the Circuit Switch CN Iu-PS: towards the Packet Switch CN Procedures to establish, maintain and release Radio Access Bearers. Mobility procedures to perform SRNS relocation, intra-system handover, inter-system handover and inter-system change.
UTRAN
Iu
Control Plane: RANAP on top of SS7 protocols or IPbased User Plane: Voice over AAL2 Control Plane: RANAP on top of SS7 protocols or IPbased User Plane: IP user plane over GTP
Iu-ps:
UTRAN Architecture
Iu-CS interface (2/5)
81
SCCP: Signalling Control Protocol MTP3b: Message Transfer Part SSCP-NNI: Service Specific Coordination Functions Network to Network Interfaces SSCOP: Service Specific Connection Oriented Protocol M3UA: SS7 MTP3 User Adaptation Layer SCTP: Simple Control Transmission Protocol IP: Internet Protocol AAL: ATM Adaptation Layer
AAL5
AAL2
UTRAN Architecture
Iu-PS interface (3/5)
Radio Network Layer
82
User Plane Iu user plane protocol Transport Network Control Plane Transport Network User Plane GTP-U GTP-U UDP UDP IP AAL5 IP ATM
Data Link
ATM
Data Link
Physical layer
Physical layer
UTRAN Architecture
83
Signalling transport shall provide two different service modes for RANAP:
Connection oriented data transfer service: This service is supported by a signalling connection between RNC and CN domain. Each active UE shall have its own signalling connection. Connectionless data transfer service (e.g. for paging purposes).
Mobility control: SRNC relocation, Hard Handover and Inter System to/from GSM. Overall RAB management: responsible for setting up, modifying and releasing RABs. Paging the user. This function provides the CN for capability to page the UE. Transport of NAS information between UE and CN.
NAS Non-Access-Stratum: Protocols between UE and the core network that are not terminated in the UTRAN.
UTRAN Architecture
84
GTP Tunnel: in the GTP-U plane is defined for each RAB in the RNC. A GTP tunnel is identified in each node with a TEID, an IP address and a UDP port number.
UTRAN
Control Plane RANAP Connection
RAB assignment
CN
Tunnel Endpoint 1
User Plane
GTP Tunnel
Tunnel Endpoin t2
UTRAN Architecture
Iub interface (1/3)
Iub is the standard interface between the RNC and the Node B. Some of the main Iub functions are:
85
Management of Iub Transport Resources. Carries traffic management information of Common Channels (admission control, power management and data transfer) Carries traffic management information of Dedicated Channels (radio link management and supervision, channel allocation and deallocation, power management and measurement reporting and data transfer) Carries traffic management of Shared Channels (channel allocation and deallocation, power management, dynamic Physical channel assignment, radio link management and data transfer) Timing synchronization management (Node B-RNC node synchronization, inter Node B synchronization, transport channel synchronization)
RNS Node B
SAS
Iupc RNC Iub Iur RNC
UE
Node B
CN
Node B Node B
RNS
Uu
UTRAN
Iu
UTRAN Architecture
Iub interface (2/3)
Dedicated Common
86
Shared
In the Radio Network Layer NBAP is used in the Control Plane. The User Plane Iub frame protocols define the structures of the frames and the basic in-band control procedures for every type of transport channel.
Control Plane NBAP Transport Network Control Plane Q.2630.1 Q.2150.1 MTP3b SSCF-NNI SSCOP AAL5 ATM
User Plane
FACH FP RACH FP DCH FP DSCH FP PCH FP
Data Link
SCCP IP
Data Link
FFS IP
Physical Layer
UTRAN Interfaces
87
Signalling procedures across the common signalling link that is not related to one specific UE context already existing in the Node B Main functions:
Setup of the first RL of one UE Cell configuration Handling of the RACH/FACH and PCH channels Initialisation and reporting of Cell or Node B specific measurement Location Measurement Unit control Fault Management
Signalling procedures related a UE which has requested the fist radio link via C-NBAP Main functions:
Addition, release and reconfiguration of radio links for one UE context Handling of dedicated and shared channels Handling of softer combining Initialization and reporting of radio link specific measurement Radio link fault management
88
RAB Assignment
UE NodeB RNC
CN
RRC connection Radio Bearer Iu bearer
CN
Steps: 1.UE requests a RRC Connection to the RNC. 2. Radio Link Setup. 3. RRC Connection Completed.
Steps: 1. UE requests the activation of a PDP context. 2. The CN requests to the UTRAN the RAB Assignment. 3. The radio links are reconfigured properly. 4. The RABs parameters are mapped to RB parameters. The RB is setup. 5. The RAB assignment is completed. 6.The Activation of the PDP context is completed.
89
CN
Node B
CCCH: RRC Connection Request
SRNC
RRC Allocate the user identifier, channel allocation
NBAP
NBAP
RRC
CCCH: RRC Connection Setup Ack The RAN informs about: user ID, power control info, frequency, etc The Node B achieves UL synch and informs to the SRNC
RRC
RRC
RRC
RAB Assignment
UE Node B SRNC CN
Security and Authentication procedures Attach procedure completion Activate PDP Context Request (UE->CN) RANAP RAB Assignment Request RANAP
90
RAB parameters (based on the requested QoS), Transport address, Iu Transport Association (TEIDs)
NBAP
NBAP
The Node B allocated resources and notifies the SRNC RRC DCCH: Radio Bearer Setup procedure RRC RANAP Activate PDP context completion RAB Assignment Response RANAP
91
92
93
In DS-CDMA the modulated signal is directly multiplied (spread) by the users code sequence and the resulting signal modulates the wideband carrier
WCDMA uses a carrier bandwidth of approximately 5 MHz, while DS-CDMA systems with a bandwidth of about 1 MHz, such as IS-95, are commonly referred to as narrowband CDMA systems
94
95
Data Signal
Modulation
Spreading
DeSpreading
DeModulation
Data Signal
Code Generator
fc
fc
Code Synchronization
Code Generator
96
During despreading, the receiver multiplies the spread chip sequence, bit by bit, with the same code used for spreading perfect synchronization is highly relevant
97
Symbol
1 -1
Modulated Data
Chip (Tc)
Spreading code Spread signal = Data x code
Spreading
1 -1 1 -1
Despreading
Spreading code
1 -1 1 -1
1 0
Data Signal
98
Desired signal
Desired spread signal Spreading code Data after despreading Data after integration
1 -1 1 -1 1 -1 8 -8
-1 8 -8
99
Narrowband Data
Spreading
Narrowband Filter
Noise + Interference
Code Generator
Rx- Despreading
Tx
Channel
100
With the wideband signal, the different propagation paths of the radio signal can be resolved at high accuracy diversity against fast fading (Rake receiver)
Low Probability of Interception: Due to its low power density, the spreadspectrum signal is difficult to intercept by hostile listener without the code sequence