OWA000001 R4-CS Commnication Flow ISSUE1.0

8/10/2019 OWA000001 R4-CS Commnication Flow ISSUE1.0

1/69

HUAWEI TECHNOLOGIES CO., LTD. All rights reserved

www.huawei.com

Internal

OWA000001

WCDMA R4 Communication

Flow (For CN-CS)

ISSUE 1.0


2/69

HUAWEI TECHNOLOGIES CO., LTD. All rights reserved Page 2

Chapter 1 Security Management

Chapter 2 Location Update Sequence of CS

Chapter 3 Call Sequence of CS


3/69


Security Management

Network Authentication Function

User Authentication Functionfor USIM

Ciphering

Integrity Data Check

TMSI Reallocation


4/69


Generation of Authentication Vectors

K

SQNRAND

f1 f2 f3 f4 f5

MAC XRES CK IK AK

AUTN := SQN AK || AMF || MAC

AV := RAND || XRES || CK || IK || AUTN

Generate SQN

Generate RAND

AMF


5/69


AuthenticationMS VLR/SGSN HE/HLR

Generate authenticationvectors AV(1..n)

Store authentication vectors

Select authentication vector AV(i)

Authentication data request

Authentication data responseAV(1..n)

User authentication requestRAND(i) || AUTN(i)

User authentication responseRES(i)

Compare RES(i) and XRES(i)

Verify AUTN(i)Compute RES(i)

Compute CK(i) and IK(i) Select CK(i) and IK(i)

Authentication and

key establishment

Distribution ofauthenticationvectors from HEto SN


6/69


User Authentication Function

K

SQN

RAND

f1 f2 f3 f4

f5

XMAC RES CK IK

AK

SQN AK AMF MAC

AUTN

Verify MAC = XMAC

Verify that SQN is in the correct range


7/69HUAWEI TECHNOLOGIES CO., LTD. All rights reserved Page 7

Integrity and Ciphering

MS

2. Initial L3 message with user identity, KSI etc.

VLR/SGSN

3. Authentication and key generation

1. Storage of HFNs START values and UE security capability

4 Decide allowed UIAs and UEAs

SRNC

1. RRC connection establishment includingtransfer of the HFNs START values and the UE security capability from MS to SRNC

5. Security mode command (UIAs, IK, UEAs, CK, etc.)

6. Select UIA and UEA, generate FRESHStart integrity

7. Security mode command (CN domain, UIA, FRESH,UE security capability, UEA, MAC-I, etc.)

10. Verify received message

9. Security mode complete (MAC-I, etc.)

11. Security mode complete (selected UEA and UIA)

8. Control of UE security capability, Verify

message, Start of integrity

UE security capability indicates UIAs and UEAs supported by MS

Start ciphering/deciphering Start ciphering/deciphering


8/69


Integrity Data Check

f 9

COUNT-I DIRECTION

MESSAGE FRESH

IK

MAC -I

f 9

COUNT-I DIRECTION

MESSAGE FRESH

IK

XMAC -I

Sender

UE or RNC

Receiver

RNC or UE


9/69


Ciphering

PLAINTEXT

BLOCK

f8

COUNT-C DIRECTION

BEARER LENGTH

CK

KEYSTREAM

BLOCK

CIPHERTEXT

BLOCK

f8

COUNT-C DIRECTION

BEARER LENGTH

CK

KEYSTREAM

BLOCK

PLAINTEXT

BLOCK

Sender

UE or RNC

Receiver

RNC or UE


10/69


TMSI Reallocation

MS VLR/SGSN

TMUI Allocation Complete

TMUI Allocation Command

TMUIn, LAIn


11/69


Abbreviations

AK Anonymity Key

AMF Authentication management field

AUTN Authentication Token

AV Authentication Vector

XRES Expected Response CK Cipher Key

CKSN Cipher key sequence number

IK Integrity Key

KSI Key Set Identifier

SQN Sequence number

MAC The message authentication code included in AUTN,

computed using f1*


12/69






13/69


Location Update Sequence

Brief Introduction to Location Update

Several Typical Location Update Sequences


14/69


Brief Introduction to Location Update

Periodic Location Update

IMSI Attach/Detach

Normal Location Update


15/69


Intra-VLR Location UpdateMS RNS MSC Server VLR

LAI & TMSI

HLR1 RRC Connection Request

2 RRC Connection Setup

3 RRC Connection Setup Complete

4 RRC : Initial Direct Transfer

5 RANAP: Initial UE Message (SCCP,CR)

6 SCCP,CC

7 Authentication & Ciphering

8 Forward New TMSI

9 Direct Transfer (Location Update Accept)

10Direct Transfer (TMSI Reallocate Complete)

11 TMSI ACK

Only sent to HLR if this

is the first time the MS

has Location Updated in

this VLR


16/69


Intra-VLR Location UpdateMS RNS MSC Server VLR HLR

12 IU Release Command

13 RRC Release Command

14 RRC Release Complete

15 IU Release Complete

16 SCCP: RLSD

17 SCCP :RLC


17/69


Inter-VLR Location Update-Using G Interface

LAI & TMSI

MS RNS MSC Server VLRn HLR VLRo

TMSI&LAIO

TMSI,IMSI,CK,,IK,R,X,AUTN)

1 RRC Connection Request



4 RRC : Initial Direct Transfer

5 RANAP: Initial UE Message (SCCP,CR

6 SCCP,CC

7 Send IdentificationSend Identification Ack

Authentication & Ciphering


18/69


MS RNS MSC ServerVLRn HLR VLRo

Inter-VLR Location Update-Using G Interface

8 Location Update Request

9 Cancel location

10 Cancel location ACK

11 Insert Subscriber Data

12 Insert Subscriber Data Ack

13 Location Update accept


19/69


Inter-VLR Location Update-Using G InterfaceRNS MSC Server VLR HLR





18 SCCP: RLSD

19 SCCP :RLC

MS


20/69


Inter-VLR Location Update-Without G Interface

LAI & TMSI


1 RRC Connection Request



4 RRC : Initial Direct Transfer5 RANAP: Initial UE Message (SCCP,CR)

6 SCCP,CC

7 Identification Request

8 Identification Response


21/69




9 Location Update Request

10 Cancel location

11 Cancel location ACK

12 Insert Subscriber Data

13 Insert Subscriber Data Ack

14 Location Update accept


22/69



RNS MSC Server VLR HLR





19 SCCP: RLSD

20 SCCP :RLC

MS


23/69






24/69


Call Sequence

General Introduction to Call Sequence

CN-CS Detailed Call Sequence


25/69



General Introduction to MO Sequence

General Introduction to MT Sequence


26/69


MO Service Flow

UTRAN CN

AS : PLMN Selection , Cell Selection , RRC Connection Setup , Iu Connection Setup

MM Procedures of NAS : Attach , Security Functions , Location Management;

Start Service : Call Control Procedures of CS , Section Management Procedures of PS , set up the service bearer

MM Procedures of NAS : Detach ( include the IMSI Detach, GPRS Detach )

AS : RRC Connection Release

Switch on

Switch off

AS :RRC

Non Access Stratum : MM/SM/CC/SMS

AS : RANAP

Iu Connection Release

Finish Service: Call Control Procedures of CS , Section Management Procedures of PS, release the service bearer


27/69


28/69


Call Sequence




29/69



MO Sequence (UE->PSTN)

MT Sequence (PSTN->UE)

Call Clearing Sequence


30/69


PSTN->UE

TDM Connection between MGW-O and PSTN exchange

Backward Bear Establishment


31/69


UE>PSTN

C1

RANO MGWO

T1 T2

.

.

.

PSTN

Exchange

TDM

Preconditions:


32/69


UE>PSTN

UE RNC-O

MSC

server-O MGW-O

PSTN

Exchange

Query VLR For Access Data

Query VLR For

Subscription Check

CM_Service_Req(Initial UE)

[IMSI/TMSI,CM_Serv_Type]

Auth_Req(DT)

[KSI,RAND,AUTN]/[CKSN,RAND]

Auth_Rsp(DT)

[XRES]/[SRES]

Security_Mode_Control / Cipher_Mode_Setting

[IK,EK,IPA,EA]/[Kc,CipherMode]

Security_Mode_Complete / Cipher_Mode_Complete

[Chosen IPA,EA]/[Chosen,CipherMode]

Setup(DT)

[Called Party BCD,Supported Codecs,

PLMN_BC,, Facility,LLC,HLC]

Call Proceeding(DT)

[PLMN_BC,Progress_Ind,Facility]


33/69


UE>PSTN

UE RNC-O

MSC

server-O MGW-O

PSTN

ExchangeADD Request($,T2)

ADD Reply(C1,T2)

IAM

ADD Request(C1,$)

ADD Reply(C1,T1)

RAB Assignmen

TCH Assignment

TCH Assignment Complete

[ TerminationID = ?, ContextID=C1BNC-id = ?,

BIWF_Addr=?, BNC_CharNotifyNotRequested,

UPmode, UPVersion, Interface = Iu, InitDirect =Incoming,

Cut_Through_Direction = Backward(ReceiveOnly),

BC_Char = Derived from BC or Codec infor from Setup

(speech)

/Codec = Selected Codec (TrFO),

PLMN_BC = BC infor from Setup (Circuit Data) ]


34/69


UE>PSTN

UE RNC-O

MSC

server-O MGW-O

PSTN

Exchange

ERQ(Q.2630 for AAL2 )

ECF(Q.2630 for AAL2 )

RAB ASSIGNMENT COMPL

IuUPInit

IuUPInit Ack


35/69


36/69


UE>PSTN

UE RNC-O

MSC

server-O MGW-O

PSTN

Exchange

MOD Request(C1,T1)

MOD Reply(C1,T2)

Connect

[ TerminationID = T1, ContextID=C1

Cut_Through_Direction = Both ] /


37/69


PSTN->UE

TDM Connection between MGW-O and PSTN exchange



38/69


UE>PSTN (Backward Bearer Establishment)

C1

RANO MGWO

T1 T2

.

.

.

PSTN

Exchange

IP/ATM

Preconditions:


39/69



UE RNC-O

MSCserver-O MGW-O

PSTNExchange

CM_Service_Req(Initial UE)

Auth_Req(DT)

[IMSI/TMSI,CM_Serv_Type]

[KSI,RAND,AUTN]/[CKSN,RAND]

Auth_Rsp(DT)

[XRES]/[SRES]





Setup(DT)

[Called Party BCD,Supported Codecs,PLMN_BC,, Facility,LLC,HLC]

Call Proceeding(DT)

[PLMN_BC,Progress_Ind,Facility]


Query VLR For

Subscription Check


40/69



UE RNC-OMSC

server-O MGW-OPSTN

ExchangeADD Request($)


BIWF_Addr=?, BNC_CharNotifyNotRequested,UPmode, UPVersion, Interface = Iu, InitDirect

=Incoming,

Cut_Through_Direction = Backward(ReceiveOnly),

BC_Char = Derived from BC or Codec infor from Setup

(speech)/Codec = Selected Codec (TrFO),

PLMN_BC = BC infor from Setup (Circuit Data) ]

ADD Reply(C1,T1)RAB Assignment

TCH Assignment

TCH Assignment Complete

ERQ(Q.2630 for AAL2 )ECF(Q.2630 for AAL2 )


IuUPInit

IuUPInit Ack


41/69



UE RNC-OMSC

server-O MGW-OPSTN

ExchangeADD Request($)

ADD Reply(C1,T2)

IAM (With Bearer Info)Bearer Establishemnt

UP Init

UP Init ackACM

Alerting

MOD Request(T1,signal=tone ID)

MOD Reply

ANM


MOD ReplyConnect


42/69


43/69







44/69


PSTN->UE

C2

GMSC Server

C1

MSC Server-T

RANTMGW-G MGW-T

T4 T3 T2 T1

.

.

.

.

.

.

PSTN

Exchange

Preconditions:


45/69


PSTN->UE

Forward Bearer Establishment



46/69


PSTN->UE (Forward Bearer Establishment)GMSCserver MGW-G

MSCserver-T MGW-T RNC-T UE

IAM

IAM

HLR Interrogation


PagePage

RRC Connection Request

RRC Connection Setup

RRC Connection Complete

RRC:Page Response

Initial UE Message(Page Response)


47/69


PSTN->UE (Forward Bearer Establishment)GMSCserver MGW-T

MSCserver-T RNC-T UE

Auth_Req(DT)

[CKSN,RAND,AUTN]/[CKSN,RAND]

Auth_Rsp(DT)

[RES]/[SRES]





Setup (DT)

[Called Party BCD, Codecs,

PLMN_BC,, Facility,LLC,HLC,Calling Party BCD]

Call Confirm (DT)

[PLMN_BC,Facility,Supported Codecs]

MGW selection


48/69


[TerminationID = T2,ContextID=C1,BNC-ID = bearer1,BIWF_Addr = MGW-T]

ADD.req

PSTN->UE (Forward Bearer Establishment)GMSCserver MGW-G

MSCserver-T MGW-T RNC-T UE

[TerminationID = ?,ContextID=?BNC-id = ?,BIWF_Addr=?, BC_Char/Codec, BNC_CharNotifyRequested,UPmode, UPVersion, Interface = Nb,InitDirect =Incoming,Cut_Through_Direction = Both] (Codec selected whenTrFO)

(Network Side )

Prepare Bearer

ADD.rsp

APM(Bearer Info)

[BICC_Data(BNC-ID = bearer1,BIWF_Addr = MGW-T)]

MGW selection

ADD.req (Outcoming Side)

[TerminationID = ?,ContextID=?BNC-id = bearer1 ,BIWF_Addr=MGW-T, BC_Char/Codec, BNC_CharNotifyRequested,UPmode, UPVersion, Interface = Nb,InitDirect =Incoming,Cut_Through_Direction = Both]

Establish

Bearer

ADD.rsp

[TerminationID = T3,ContextID=C2


49/69


PSTN->UE (Forward Bearer Establishment)

GMSC server MGW-GMSC server-T

MGW-T RNC-T UE

ERQ(Q.2630 for AAL2 ) /Request(Q.1970 for RTP)

ERQ(Q.2630 for AAL2 ) /Request(Q.1970 for RTP)

ADD.req (Incoming Side)[TerminationID = ?,ContextID=C2BNC-id = ?,BIWF_Addr=?,BC_Char/ Codec, BNC_CharNotifyRequested,UPmode, UPVersion, Interface = Nb,InitDirect =Incoming,Cut_Through_Direction = Both] (Codec recieved when TrFO)

PrepareBearer

ADD.rsp

[TerminationID = T4,BNC-ID = bearer3,BIWF_Addr = MGW-G]

APM(Bearer Info)

ERQ

ECF

UP Init

UP Init ack


50/69



GMSC server MGW-G MSC server-T MGW-T RNC-T UE

Notify Req

Notify Rsp

UP Init

UP Init ackContinuity

Notify Req

Notify Rsp

Continuity

Prepare

Bearer


51/69


52/69






IuUP-Init

[RFCI, SubFlowSizeInfo, IPTI, etc]

IuUP-Init Ack



53/69


54/69




Modify.req


Cut_Through_Direction = Both ] ]

Modify.rsp

ANM

ANM


55/69


PSTN->UE

Forward Bearer Establishment



56/69


PSTN->UE (Backward Bearer Establishment)


IAM(+Bearer Info)

HLR Interrogation

Add req($)

Add rep

(TerminationID=T4,ContextID=C2)

Bearer Establishment

UP Init

UP Init ack

Notify Req(T4)

Notify Rep(T4)


57/69




ADD.req

ADD.rsp


IAM(Bearer Info)


PagePagePage

RRC Connection Request

RRC Connection Setup

RRC Connection Complete

RRC:Page Response

Initial UE Message(Page Response)


58/69


59/69




ADD.req (Network Side )

[TerminationID = ?,ContextID=?BNC-id = ?,

BIWF_Addr=?, BC_Char/Codec, BNC_Char

NotifyRequested,

UPmode, UPVersion, Interface = Nb,InitDirect

=Incoming,

Cut_Through_Direction = Both]

Prepare Bearer

ADD.rsp

[TerminationID = T2,ContextID=C1,

Bearer Establishment

UP Init

UP Init ack

Notify Req(T2)

Notify Rep(T2)



60/69




ADD.req (Access Side )


BIWF_Addr=?, BNC_CharNotifyNotRequested,UPmode, UPVersion, Interface = Iu, InitDirect

=Incoming,

Cut_Through_Direction = Inactive (Not Send and

Receive),

BC_Char = Derived from BC o from USI in IAM(speech)/

Codec = Selected Codec (TrFO) ]

Prepare Bearer

ADD.rsp

[TerminationID = T1, ContextID=C1,

BNC-ID = bearer5, BIWF_Addr = MGW-T]

RAB ASSIGNMENT REQ

[ RAB-ID = RAB2, RAB Param ( Traffic

Class,MBR,GBR,DeliveryOrder,

MaxSDUSize,SDU Format,SDU RBER etc.) UPMode

= SMpSDU, UPversion,TCh Assignment

TCh Assignment Complete


61/69






IuUP-Init

[RFCI, SubFlowSizeInfo, IPTI, etc]

IuUP-Init Ack



62/69




AlertingACM

ACMModify.req


NotifyOnEvent Not Included, Signal Direction = Outgoing,

SignalTiming (Singal Length, LoopTimes, Type = Begin),

Signal = specific Tone ID ]

Send Tone

Modify.rsp

Connect (DT)

Modify.req


SignalTiming (Singal Length, LoopTimes, Type = End),Signal = specific Tone ID,Signal Direction = Outgoing ]

Modify.rsp

Stop Tone


63/69




Modify.req

[ TerminationID = T1, ContextID=C1Cut_Through_Direction = Both ] ]

Modify.rsp

ANM

ANM


64/69







65/69


Network Initiated Call Clearing

MSC server-O MGW-ORNC-OUE

ReleaseDisconnect

SUB Request(T2)

SUB Reply(T2)

Rlease completeREL

RLC


IU Release Command

IU Release Complete

SUB Request(T1)

SUB Reply


66/69


UE Initiated Call Clearing


DisconnectRelease

REL

RLC

IU Release Command

IU Release Complete

SUB Request(T1)

SUB Reply(T1)

Rlease complete

SUB Request(T2)

SUB Reply (T2)

UE I iti t d C ll Cl i


67/69


UE Initiated Call Clearing


Notify Req(T2)

Notify Reply(T2)

RleaseDisconnect

REL

RLC

IU Release Command

IU Release Complete

SUB Request(T1)

SUB Reply

Rlease Complete

SUB Request(T2)

SUB Reply(T2)


68/69


Question

Please think over the sequence of UE to UE.


69/69

www.huawei.com

Thank You

OWA000001 R4-CS Commnication Flow ISSUE1.0

Documents

Transcript of OWA000001 R4-CS Commnication Flow ISSUE1.0