UMTS UMTS Core Core Network Network

V. Mancuso, I. Tinnirello
UMTS UMTS Core Core Network Network
GSM/GPRS core network Radio access network
BSS
P
S
T
N
,

I
S
D
N
BTS
BSC
MSC
VLR
GMSC
HLR MS
GSM/GPRS Network GSM/GPRS Network Architecture Architecture
V. Mancuso, I. Tinnirello
database
IP Backbone
Internet
P
S
T
N
,

I
S
D
N
BTS
SGSN
AuC
EIR
GGSN
PCU
Core network (GSM/GPRS-based) Radio access network
UTRAN
UE
Iu CS
Iur
Uu
P
S
T
N
BS
RNC MSC
VLR
GMSC
HLR
Iub
3GPP Rel.99 Network Architecture 3GPP Rel.99 Network Architecture
V. Mancuso, I. Tinnirello
Iur
Iub
Uu
Gn
Iu PS
database
IP Backbone
Internet
BS
RNC SGSN
AuC
EIR
GGSN
Radio access network
UTRAN
UE
Iur
Uu
BS
RNC Iub
2G => 3G MS => UE
(User Equipment), often also
called (user) terminal
New air (radio) interface
based on WCDMA access
technology
3GPP 3GPP Rel Rel.99 Network Architecture .99 Network Architecture
V. Mancuso, I. Tinnirello
Iur
Iub
Uu
BS
RNC
New RAN architecture
(Iur interface is available for
soft handover,
BSC => RNC)
Core network (GSM/GPRS-based)
Iu CS
P
S
T
N
MSC
VLR
GMSC
HLR
Changes in the core
network:
MSC is upgraded to 3G
MSC
SGSN is upgraded to 3G
3GPP Rel.99 Network Architecture 3GPP Rel.99 Network Architecture
V. Mancuso, I. Tinnirello
Gn
Iu PS
IP Backbone
Internet
SGSN
AuC
EIR
GGSN
SGSN is upgraded to 3G
SGSN
GMSC and GGSN remain
the same
AuC is upgraded (more
security features in 3G)
Circuit Switched (CS) core network
UTRAN
(UMTS Terrestrial Radio
Access Network)
P
S
T
N
MSC
Server
GMSC
Server
SGW SGW
3GPP Rel.4 Network Architecture 3GPP Rel.4 Network Architecture
V. Mancuso, I. Tinnirello
P
S
T
N
New option in Rel.4:
GERAN
(GSM and EDGE Radio
Access Network)
PS core as in Rel.99
SGW
MGW
SGW
MGW
Circuit Switched (CS) core
network
P
S
T
N
MSC
Server
GMSC
Server
SGW SGW
MSC Server takes care
of call control signalling
The user connections
are set up via MGW
(Media GateWay)
Lower layer protocol
3GPP Rel.4 Network Architecture 3GPP Rel.4 Network Architecture
V. Mancuso, I. Tinnirello
P
S
T
N
PS core as in Rel.99
SGW
MGW
SGW
MGW
Lower layer protocol
conversion in SGW
(Signalling GateWay)
RANAP / ISUP
SS7 MTP IP
Sigtran
CS core
P
S
T
N
MGW
HSS
IMS (IP
Multimedia
UTRAN
(UMTS Terrestrial Radio
Access Network)
New core
network part:
3GPP Rel.5 Network Architecture 3GPP Rel.5 Network Architecture
V. Mancuso, I. Tinnirello
SGSN GGSN
I
n
t
e
r
n
e
t
HSS
Multimedia
System)
PS core
GERAN
(GSM and EDGE Radio
Access Network)
CS core
P
S
T
N
I
n
t
e
r
n
e
t

/

o
t
h
e
r

I
M
S
HSS
The IMS can establish
multimedia sessions
(using IP transport)
via PS core between
UE and Internet (or
another IMS)
IMS (IP
Multimedia
MGW
3GPP Rel.5 Network Architecture 3GPP Rel.5 Network Architecture
V. Mancuso, I. Tinnirello
SGSN GGSN
I
n
t
e
r
n
e
t

/

o
t
h
e
r

I
M
S
HSS
PS core
Call/session control
using SIP (Session
Initiating Protocol)
Interworking with the
PSTN may be required
for some time ...
Multimedia
System)
Service provider Service provider
Content provider Content provider
New Service Concept New Service Concept
V. Mancuso, I. Tinnirello
End user End user
Carrier provider
all want to make
profit
OSA is being standardised, so that services provided by
different service/content providers can be created and
seamlessly integrated into the 3G network (this is the
meaning of open architecture)
OSA means in practice:
OSA (Open Services Architecture/Access) OSA (Open Services Architecture/Access)
V. Mancuso, I. Tinnirello
3G network
API API API
Service Creation Environment (SCE)
API = Application
Programming
Interface
(Standardised)
CAMEL (Customised Applications for Mobile network Enhanced
Logic) is a set of IN (intelligent network) type functions and
procedures that make operator-specific IN services available to
subscribers who roam outside their home network.
CAMEL = IN technology + global mobility
CAMEL (2G & 3G) CAMEL (2G & 3G)
V. Mancuso, I. Tinnirello
CAMEL Service Environment (CSE) is a logical entity in the
subscribers home network which processes IN related
procedures
CSE SCP in home network
The IMS The IMS
V. Mancuso, I. Tinnirello
The IP Multimedia Subsystem
Vincenzo Mancuso, PhD
The IMS The IMS
The Third generation networks aim to merge
two most valuable resources in communication
technology, along with local PSTN networks
Cellular Networks
The Internet
V. Mancuso, I. Tinnirello
Use packet switching, IP
The IP Multimedia Subsystem or IMS is the solution to integrate all
the services that the internet provides with the cellular and other
networks
Triple Play: coordination of voice, video and data
IMS Value IMS Value--added services added services
IMS also can provide integrated
service to the user
Third party developed services can be provided by
operators, thus developing value-added services
Appropriate charging for multimedia sessions,
V. Mancuso, I. Tinnirello
Appropriate charging for multimedia sessions,
according to the content and the service offered
IMS Service Integration IMS Service Integration
Problem Statement: various
networks providing services have a
vertical infrastructure
no horizontal links between networks
V. Mancuso, I. Tinnirello
The challenge: to integrate these
networks and to create new
applications that would provide
service to next generation
networks
Component #1: the media Component #1: the media
transport transport
After many other services,
introduction of real time
voice/video on Internet
The 1
st
problem is easy: how
to transmit voice/video?
IP packets
V. Mancuso, I. Tinnirello
RTP (Real-Time Protocol) is a protocol which
transports an encoded multimedia stream as
pieces, with a timestamp on each piece, and sends
them using UDP/IP
Any encoding is permitted for voice/video with
a Codec: MP3, ACC, MPEG4, AMR
Several streams (voice+video) can be sent in
parallel with the same timestamp
The timestamp is used by the receiver to play
the voice/video in a regular way for quality
RTP is the media transport
Codec
RTP
UDP
IP
Component #2: session initiation Component #2: session initiation
The 2
nd
problem is more
difficult: how to initiate the
call? how to know the IP-
address of the called phone?
It is necessary to have a table which translates a
symbolic name Betty into an IP address
Registration of Bettys phone
and address
V. Mancuso, I. Tinnirello
symbolic name Betty into an IP address
Each time a terminal service is put on, it must
notify its presence to update the table
So, thanks to an access to this table, it is possible
to make the address resolution : name -> IP
address
The control of the address table
creates a tough competition
Registration of Johns phone
and address
Why IMS? Why IMS?
Solutions to make the address resolutions Solutions to make the address resolutions
MSN, Yahoo, AOL have
designed a calling
architecture hyper-
centralized: 1 table
worldwide, only 1 operator
Skype promotes a hyper-
decentralized architecture:
The introduction and development of
solution like Skype is highly significant
V. Mancuso, I. Tinnirello
decentralized architecture:
1 table per terminal with
peer-to-peer update
between terminals
as it alters the notion of
telecommunications operators by
making the process fully electronic
IDATE - ART, 2004
Operators dislike such approaches, so they push a way
very similar to e-mail: centralization per domain. This
approach is named Internet Protocol Multimedia
Subsystem, IMS.
IMS User IMS User Identities Identities
zzeb@tmobile.co
Sip:zehan.zeb@newstore.com
tel:+17324567888
V. Mancuso, I. Tinnirello
zzeb@tmobile.co
m
Sip:zehan.zeb@example.com
tel:+88028112347
Public User Identities
Private User Identity
IMS Subscriber
User Identity User Identity
Private identity
Issued by home provider
Used for AAA
Saved on ISIM (not modifiable)
Public identity
Normal SIP address (URI or TEL)
Identifies the user publicly
User has one or more identities

Private
User Identity 1
Public
User Identity 1
Public
User Identity 2
Public
User Identity 3
Implicitly
Registered ID
Set 1
Public
User Identity 4
Implicitly
Registered ID
Set 2
Service
Profile 1
Service
Profile 2
Service
Profile 3
IMS
Subscription
V. Mancuso, I. Tinnirello
User has one or more identities
Used for routing
Can be grouped into implicit registration sets
If one of the set is registered then the others are as well
At least one is stored on ISIM
In case no ISIM is provided
Use a temporary identity derived from USIM during initial registration (derived from
IMSI)
PIDs are then provided by the S-CSCF in its reply to the registration
Implicitly
Registered ID
Set 3
Private
User Identity 2
Public
User Identity 5
Public
User Identity 6
Service
Profile 4
UICC UICC
Universal Integrated Circuit Card
Used to store data, including authentication
information
Contains one or more applications
SMS
Phonebook

SIM
V. Mancuso, I. Tinnirello
SIM
GSM Subscriber Identity Module
USIM
UMTS SIM
ISIM
IMS SIM
Applications are independent
SIM, USIM and ISIM can coexist on the same UICC
but SIM cannot be used for IMS access (for security reasons)
IP Multimedia Subsystem IP Multimedia Subsystem
A standard
An enabler
of new
applications
Next-gen
network
architecture
SIP
SIP
IMS IMS IMS IMS
Push Push Push Push- -- -2 22 2- -- -Talk Talk Talk Talk
Converged Services Converged Services Converged Services Converged Services
Rich Communications Rich Communications Rich Communications Rich Communications
V. Mancuso, I. Tinnirello
Service Service Service Service- -- -layer layer layer layer
Control Control Control Control- -- -layer layer layer layer
Transport Transport Transport Transport- -- -layer layer layer layer
IMS is access agnostic, cost reducing, and service IMS is access agnostic, cost reducing, and service IMS is access agnostic, cost reducing, and service IMS is access agnostic, cost reducing, and service
enhancing enhancing enhancing enhancing
IMS gives the customer & carrier choice IMS gives the customer & carrier choice IMS gives the customer & carrier choice IMS gives the customer & carrier choice
SIP
SIP
SIP
SIP
At Home At Home At Home At Home In the Office In the Office In the Office In the Office
On the Move On the Move On the Move On the Move
IMS IMS IMS IMS
IP Network IP Network IP Network IP Network
SIP
Push Push Push Push- -- -2 22 2- -- -Talk Talk Talk Talk
Push Push Push Push- -- -2 22 2- -- -View View View View
Push Push Push Push- -- -2 22 2- -- -X XX X
Presence, Location Presence, Location Presence, Location Presence, Location- -- -
based Services based Services based Services based Services
Interactive Services, Interactive Services, Interactive Services, Interactive Services,
Interactive Gaming Interactive Gaming Interactive Gaming Interactive Gaming
Games, Games, Games, Games,
Music Music Music Music
Downloads Downloads Downloads Downloads
Picture Picture Picture Picture
Messaging, Messaging, Messaging, Messaging,
MM Messaging MM Messaging MM Messaging MM Messaging
Voice Voice Voice Voice
Video Clips Video Clips Video Clips Video Clips
Sports, News Sports, News Sports, News Sports, News
E EE E- -- -mail mail mail mail
IM IM IM IM
Streaming Streaming Streaming Streaming
Audio, Video Audio, Video Audio, Video Audio, Video
IMS IMS
V. Mancuso, I. Tinnirello
Goals & Tools
IMS goals IMS goals
Combine latest trends in tech
Run fast, no time for standardization of services
Mobile/Nomadic internet
Create a platform for multimedia
services
V. Mancuso, I. Tinnirello
services
and their development
Exploit/allow mobile packet-
switching networks
Not a mere circuit-switching replacement
IMS requirements IMS requirements
Support for establishing IP Multimedia
Sessions
Audio, video, messaging
Support for mechanisms to negotiate QoS
distinguish users
operators want to control QoS
V. Mancuso, I. Tinnirello
operators want to control QoS
Support for interworking
with Internet
with packet-switching networks
Support for roaming
Home and visited network
Inter-operators roaming

IMS requirements IMS requirements (contd) (contd)

Support for user activity control

policies imposed by the operator (general policies and per-user policies)
accomplish to service agreements
Support for fast service creation
dont require service standardization
V. Mancuso, I. Tinnirello
dont require service standardization
Standardize service capabilities instead
Support for multiple access
Not only GPRS, UMTS
IP is independent on lower protocol layers
Protocols in IMS Protocols in IMS
3GPP reuses protocol developed by other
standards development organizations
ETSI (European Telecommunications Standard Institute)
IETF (Internet Engineering Task Force)
ITU-T (International Telecommunications Union - Telecommunications)
3GPP interacts with standards
development organizations as for the
V. Mancuso, I. Tinnirello
development organizations as for the
development of existing and new
protocols
Protocols
RTP for media transport
Session control protocols
AAA protocols
Other
Session Control Protocol Session Control Protocol
SIP (Session Initiation Protocol, by
IETF- RFC2821)
Protocol to establish and manage multimedia session
over IP
SIP borrows some design principles from SMTP and
HTTP
V. Mancuso, I. Tinnirello
HTTP
Does not differentiate the user-to-network interface from
the network-to-network interface (unlike BICC and
H.323)
It follows the client-server model
Text-based protocol
Easy to debug, extend and reuse for service building
AAA protocol: DIAMETER AAA protocol: DIAMETER
one protocol for many interfaces one protocol for many interfaces
Authorization
What service can be used?
Authentication
Are you really who you say you
are?
Accounting
$
Diameter
Client Application
Diameter
Server Application
Session Management Session Management
V. Mancuso, I. Tinnirello
Routing Management
Connection
Management
Connection
Management
Base Protocol Base Protocol
Routing Management
DIAMETER
by IETF RFC3588
Evolution of RADIUS
Base protocol
Diameter applications
Diameter applications used to customize/extend the base protocol for different interfaces, environments, and
applications
E.g.: interact with SIP session setup (Authorization and Authentication)
E.g.: interact with the billing subsystem to control accounting
E.g.: interact with routing entities
IMS Architecture IMS Architecture
V. Mancuso, I. Tinnirello
New services for mobile New services for mobile
and fixed networks and fixed networks
Open, standardised, operator friendly, NGN
multimedia architecture for mobile and fixed services
Based on SIP, DIAMETER and COPS controls
Supports legal interception, localisation, PSTN interworking, etc.
V. Mancuso, I. Tinnirello
Access Independent
MGW
3G mobile
PSTN PSTN
IP transport
IMS Platform
WLAN
WiMAX
DSL
Fibre
Ethernet
Applications
Internet Internet
Functions and nodes Functions and nodes
IMS standardizes functions
IMS does NOT standardize nodes
The IMS Architecture is a collection of
functions linked by standardized
interfaces
V. Mancuso, I. Tinnirello
A function can be implemented through one or more nodes
Multiple functions can share a node
Commonly a function per node
A standard architecture for A standard architecture for
service delivery service delivery
AS
Application
Layer
Session
Control
HSS
SIP
SIP
DIAMETER
AS
SIP
MR
F
V. Mancuso, I. Tinnirello
MGCF
Control
Layer
Connectivity
Layer
PSTN/PLMN PSTN/PLMN PSTN/PLMN PSTN/PLMN
IP Network
HSS
H.248
SIP
SIP
F
CPE
MGW
GGS
N
Access to IMS Access to IMS
The user can connect to an IMS network in
variety of ways, all of which use the
standard Internet Protocol (IP) for packet
switching
e.g., IMS terminals can register directly
on an IMS network
e.g., mobile phones, personal digital assistants (PDAs) and computers
V. Mancuso, I. Tinnirello
e.g., mobile phones, personal digital assistants (PDAs) and computers
even when they are roaming in another network or country (the visited
network)
The only requirement is that they can use IPv6 (also IPv4 in early IMS)
and run SIP user agents
Other access examples Other access examples
Fixed access
- e.g., Digital Subscriber Line (DSL), cable modems, Ethernet
Mobile access
e.g., W-CDMA, CDMA2000, GSM, GPRS
Wireless access
V. Mancuso, I. Tinnirello
e.g., WLAN, WiMAX
Other phone systems like plain old
telephone service (POTS -- the old
analogue telephones) or PSTN, H.323
and non IMS-compatible VoIP systems,
are supported through gateways
IMS functional elements IMS functional elements
V. Mancuso, I. Tinnirello
Infrastructure of SIP Proxies Infrastructure of SIP Proxies
(media do not traverse the IMS..) (media do not traverse the IMS..)
V. Mancuso, I. Tinnirello
IMS Functional Elements IMS Functional Elements
Session Management (SIP)
Routing
Databases
Network Interoperability Elements
V. Mancuso, I. Tinnirello
Services and Support Components
Charging Components
Nodes/Functions in the IMS Nodes/Functions in the IMS
User databases
HSS (Home Subscriber Server)
SLF (Subscriber Location Function)
SIP servers
CSCF (Call/Session Control Function)
AS (Application Server)
MRF (Media Resource Function)
V. Mancuso, I. Tinnirello
MRF (Media Resource Function)
MRFC (MRF Controller)
MRFP (MRF Processor)
BGCF (Breakout Gateway Control Function)
PSTN/CS gateways, decomposed into:
SGW (Signaling Gateway)
MGCF (Media Gateway Controller Function)
MGW (Media Gateway)
Charging collection functions
Databases (HSS,SLF) Databases (HSS,SLF)
HSS is an evolution of the HLR (Home
Location Register) of GSM
Contains the user-related subscription data (e.g., location,
authorization and authentication information)
More than one HSS is possible
V. Mancuso, I. Tinnirello
If #HSS > 1 SLF required
SLF maps users address to HSSs
HSS and SLF use DIAMETER with an IMS-
specific diameter application
Home Subscriber Server (HSS) Home Subscriber Server (HSS)
Presence, Location and Profile
End-User Identity
HSS HSS
Diameter
V. Mancuso, I. Tinnirello
Private and Public End-User Information
Registration Information
Service Initiation Information
Subscriber Service Profile (SSP)
Downloaded to CSCF at Registration
More on HSS More on HSS
HSS is a master user database that
supports all the IMS network functions
that actually handle communications
contains the subscription-related information (user profiles)
performs authentication and authorization of the user
V. Mancuso, I. Tinnirello
can provide information about the user's physical location
is similar to the GSM Home Location Register (HLR) and
Authentication Centre (AUC) together
CSCF CSCF
SIP servers or proxies, collectively called Call
Session Control Function (CSCF), are used to
process SIP signaling packets/messages in
the IMS
P-CSCF (Proxy)
I-CSCF (Interrogating)
V. Mancuso, I. Tinnirello
I-CSCF (Interrogating)
S-CSCF (Server)
Call/Session Call/Session Control Control Func Func. ( . (CSCF) CSCF)
CSCF Processes SIP Signaling
P-CSCF
First Point of User Contact (located in the visited domain)
Authenticates user
II--
CSCF CSCF
SS--
CSCF CSCF
PP--
CSCF CSCF
SIP
SIP
SIP
SIP
SIP
Diameter
V. Mancuso, I. Tinnirello
Authenticates user
May Include Policy Functions
S-CSCF
Central Node of Control Plane
Acts as Registrar for User (located in the home domain)
Invokes Application Servers
Performs Primary Routing Function
I-CSCF
Located at Edge of Administrative Domain (contact point for inter-domain messages)
Is the Ingress Network Point Defined in DNS
Shields Network Topology from External Networks
IMS Signaling Path IMS Signaling Path
(1 domain, no roaming) (1 domain, no roaming)
V. Mancuso, I. Tinnirello
IMS Signaling Path IMS Signaling Path
(4 domain roaming, media goes directly) (4 domain roaming, media goes directly)
Irish
User
Sweden
User
V. Mancuso, I. Tinnirello
Irish User
In roaming
Sweden User
In roaming
CSCF CSCF
P-CSCF (Proxy)
Outbound/Inbound proxy server
First server contacted by the user
Fixed while registered
Security functions (integrity protection, IPSec,)
V. Mancuso, I. Tinnirello
Security functions (integrity protection, IPSec,)
Authenticates the user and extend the authentication to
other nodes within IMS
Compress/decompress SIP messages
Generates charging info
P P--CSFC details CSFC details
SIP proxy that is the first point of contact for the IMS
terminal
It can be located either in the visited network (in full IMS
networks) or in the home network (when the visited
network isn't IMS compliant yet)
The terminal discovers its P-CSCF with either DHCP
or it is assigned in the PDP Context (GPRS)
It is assigned to an IMS terminal during registration, and
does not change for the duration of the registration
V. Mancuso, I. Tinnirello
does not change for the duration of the registration
It sits on the path of all signaling messages, and can
inspect every message
It authenticates the user and establishes an IPsec security
association with the IMS terminal
Other nodes trust the P-CSCF, and do not have to authenticate the user again
It can also compress and decompress SIP messages
it may include a Policy Decision Function (PDF), which
authorizes media plane resources
it also generates charging records
PDF for PDF for QoS QoS in IMS in IMS
(intermediary between the application (intermediary between the application--level QOS and level QOS and
the 3G network the 3G network--level level QoS QoS))
V. Mancuso, I. Tinnirello
CSCF CSCF
I-CSCF (Interrogating)
SIP proxy at the edge of a domain
Advertised by DNS
Interface to HSS and SLF for routing purposes
V. Mancuso, I. Tinnirello
Optional: encryption of sensitive information about
the domain (THIG: topology hiding inter-network
gateway)
II--CSCF details CSCF details
It is another SIP function located at the edge of an
administrative domain
Its IP address is published in the DNS of the domain
remote servers can find it, and use it as a forwarding point (e.g. registering) for
SIP packets to this domain
The I-CSCF queries the HSS using DIAMETER to
retrieve the user location
then it routes the SIP request to its assigned S-CSCF
V. Mancuso, I. Tinnirello
then it routes the SIP request to its assigned S-CSCF
Up to Release 6 it can also be used to hide the
internal network from the outside world (encrypting
part of the SIP message)
in which case it's called a THIG (Topology Hiding Inter-network Gateway)
From Release 7 onwards this "entry point" function is removed from the I-
CSCF and is now part of the IBCF (Interconnection Border Control Function)
which is also a firewall and a nat.
CSCF CSCF
S-CSCF (Server)
SIP server with session control functions
SIP registrar (maintains a mapping between user
location and public user identity)
SIP routing
V. Mancuso, I. Tinnirello
SIP routing
PEP
Always located in the home network
Interfaced with the HSS (e.g., to download the
users profile)
S S--CSCF details CSCF details
It is the central node of the signaling plane
SIP server + session control
It is always located in the home network
It uses DIAMETER to the HSS to download and
upload user profiles
All necessary information is loaded from the HSS.
It handles SIP registrations
bind the user location and the SIP address
It sits on the path of all signaling messages, and can
inspect every message
V. Mancuso, I. Tinnirello
It sits on the path of all signaling messages, and can
inspect every message
It decides to which application server(s) the SIP
message will be forwarded, in order to provide their
services
It provides routing services, typically using
Electronic Numbering (ENUM) lookups
There can be multiple S-CSCFs in the network for
load distribution and high availability reasons
It's the HSS that assigns the S-CSCF to a user, when
it's queried by the I-CSCF.
Application Server (AS) Application Server (AS)
Contains Call Related Application Logic
Facilitates a Service Creation Environment
AS AS
AS AS
AS AS
SIP
Diameter
V. Mancuso, I. Tinnirello
Facilitates a Service Creation Environment
Queried by S-CSCF in Real Time to Execute Logic
Filters can be applied at S-CSCF in order to inspect the SIP messages and
decide whether involve or not the AS
Generally Specialized for Each Service
May Provide Gateway to Legacy Applications (e.g.
AIN)
Can Behave as a SIP Proxy or Terminal (and in this
case receive the media!)
AS AS
Three different AS types
SIP AS
native IMS application server
OSA-SCS (Open Service Access Service Capability Server)
Interface to Open Service Application (AS) framework application
server (developed by 3GPP for UMTS)
IM-SSF (IP Multimedia Service Switching Function)
Reuse/interface with CAMEL (GSM)
V. Mancuso, I. Tinnirello
Reuse/interface with CAMEL (GSM)
Gateway for GSM Service Control Function
An AS can be located in the home
network or in an external third-party
network
If located in the home network, it can query the HSS with the DIAMETER
Sh interface (for a SIP-AS) or the Mobile Application Part (MAP) interface
(for IM-SSF).
AS AS as as a SIP Proxy a SIP Proxy
(e.g. find a taxi) (e.g. find a taxi)
V. Mancuso, I. Tinnirello
AS AS as as a SIP Terminal a SIP Terminal
(e.g. web server: receive media data!) (e.g. web server: receive media data!)
V. Mancuso, I. Tinnirello
Example of Filter Rule Example of Filter Rule
(at S (at S--CSCF) CSCF)
User A wants to divert all calls from boss
to an answering machine (i.e. the AS)
(method=INVITE) AND
(P-Asserted-Identity = boss@vodafone.com) AND
(Session Case = Terminating) ->message is addressed to
AS
V. Mancuso, I. Tinnirello
AS
Multimedia Resource Function (MRF) Multimedia Resource Function (MRF)
SIP
MS MS MS MS
MRFC MRFC
V. Mancuso, I. Tinnirello
Offers Services Such as Conferencing
MRFC SIP User Interface toward S-CSCF
MRFP Controls the Media Server (MS)
MRF MRF
The MRF (Media Resource Function) provides a
source of media in the home network
It provides media related functions such as media
manipulation (e.g. voice stream mixing, media
trans-coding) and playing of tones and
announcements.
Each MRF is further divided into
Media Resource Function Controller (MRFC) signaling plane
V. Mancuso, I. Tinnirello
Media Resource Function Controller (MRFC) signaling plane
Media Resource Function Processor (MRFP) media plane
The MRFC acts as a SIP User Agent to the S-CSCF,
and controls the MRFP with a H.248 interface
The MRFP is a media plane node that implements
all media-related functions
Multiparty Calls Multiparty Calls
(MRF as a special AS) (MRF as a special AS)
V. Mancuso, I. Tinnirello
REFER:
Ask other
to join
Multiparty Call Multiparty Call
V. Mancuso, I. Tinnirello
Multiparty Call Multiparty Call
V. Mancuso, I. Tinnirello
BGCF BGCF
The Breakout Gateway Control Function is a
SIP server that includes routing
functionality based on telephone numbers
used when calling from the IMS to a phone in a circuit switched
network
e.g., IMS to Public Switched Telephone Network (PSTN) or to
V. Mancuso, I. Tinnirello
e.g., IMS to Public Switched Telephone Network (PSTN) or to
Public Land Mobile Network (PLMN)
BGCF routes to the appropriate (remote)
circuit switching domain
BGCF selects the (local) PSTN/CS gateway
PSTN Gateway PSTN Gateway
MGCF MGCF
H.248
ISUP
BGCF BGCF
SIP
SIP
TDM
SGW SGW
SIP
V. Mancuso, I. Tinnirello
BGCF Routes to Gateway Based Upon Telephone
Number
MGCF Controlling Function for SGW and MGW
SGW Provides Signaling Conversion Between SIP
and ISUP
MGW Provides Conversion between RTP and TDM
MGW MGW
TDM
Home Network Home Network -- Functional Elements Functional Elements
HSS HSS
DNS DNS
ENUM ENUM
Home Network
AS AS
AS AS
AS AS
Home Subscriber Server
Centralized DB
HLR successor
User profile
Filter criteria (sent to S-CSCF)
Which applications
Which conditions
Application Servers
Push-to-talk
Instant messaging
Telephony AS
3
rd
party or IMS Vendor Domain Name Server
SIP
SIP
SIP
Diameter
MRFC MRFC
Media Gateway
Control Function
Interfaces to PSTN/PLMN by
Converting SIP <-> ISUP
Interworking RTP to circuit
Media Resource Function Controller
Pooling of Media servers (e.g. conference)
PP- -CSCF CSCF
SIP
UA/UE
V. Mancuso, I. Tinnirello
Visited Visited
Network Network
II--CSCF CSCF S S--CSCF CSCF P P--CSCF CSCF
MGCF MGCF
MGW MGW
PSTN PSTN
H.248
ISUP
BGCF BGCF
SIP
SS7 SS7
SIP
SIP
SIP
SIP
SIP
SIP
RTP TDM
Call Session
Control Function
SIP registration
SIP session setup
MS MS MS MS
MRFC MRFC
Interworking RTP to circuit
H.248 control of MGW
Breakout Gateway Control Function
Selects network (MGCF or other BGCF)
in which PSTN/ PLMN breakout is to occur
Proxy CSCF
1
st
contact point for UA
QoS
Routes to S-CSCF
Interrogating CSCF
Entry point for incoming calls
Determines S-CSCF for Subscribers
Hides network topology
Serving CSCF
Registrar
Session control
Application Interface
SIP
UA/UE
Network Network--to to--Network Connectivity Network Connectivity
HSS HSS
DNS DNS
ENUM ENUM
SIP
AS AS
AS AS
AS AS
Backbone Backbone
Access Access
SIP
SIP SIP
SIP
SIP
Diameter
RTP
RTP
MRFC MRFC
PP- -CSCF CSCF
SIP
SIP
UA/UE
V. Mancuso, I. Tinnirello
II--CSCF CSCF S S--CSCF CSCF
Visited
Network
Home
Network
P/S P/S--CSCF CSCF
Backbone Backbone
Packet Packet
Network Network
MGCF MGCF
MGW MGW
PSTN PSTN
H.248
ISUP
BGCF BGCF
SIP
SIP
SS7 SS7
SIP SIP
SIP
SIP
SIP
RTP TDM
MS MS MS MS
MRFC MRFC
Proxy/Serving CSCF
Manages call origination
Selects destination network
Routes to I-CSCF
Interrogating CSCF
Entry point for incoming calls
Determines S-CSCF for Subscribers
Hides network topology
Home and Visited Networks Home and Visited Networks
Inherited from 2G, 3G
Most of IMS nodes and functions are located
in the Home network
P-SCFC can be either in the home or visited
network
If GPRS access P-CSCF in the same network of the GGSN
V. Mancuso, I. Tinnirello
If GPRS access P-CSCF in the same network of the GGSN
simplifies the operators management
allows roaming to non-IMS GPRS CANs (Connectivity Access networks)
Drawback: trombone effect when GGSN is in the home network (GGSN is
in the media plane)
In a long term perspective the P-CSCF will be located in the visited
network
Media servers can be out of both
IMS architecture IMS architecture
V. Mancuso, I. Tinnirello
Examples
John is calling Betty John is calling Betty
IIntroducing ntroducing the HSS and the S the HSS and the S--CSCF CSCF
The HSS is the table user/address
The S-CSCF is a SIP proxy which works
on messages to provide users
(consumers, enterprises) with calling
services including registration being a
mediation SIP2DIAMETER
HSS
When the phones
get connected they
V. Mancuso, I. Tinnirello
SIP
S-CSCF
get connected they
register their
name/IP to the HSS
Changes the SIP message replacing Betty by its IP
address found in the HSS
SIP
John is calling a taxi to meet Betty John is calling a taxi to meet Betty
Introducing Introducing the Application Server (AS) the Application Server (AS)
In addition to the basic name/address translation,
the S-CSCF routes SIP messages to:
The network of Betty, if different
The applications such as: Push-To-Talk, Instant Messaging, Advance Call Control,
Voice/video mailbox, nearest Taxi running on AS, a SIP proxy application server
V. Mancuso, I. Tinnirello
S-CSCF
AS

nearest Taxi application (location, fleet)

Changes the SIP message replacing taxi by
the IP address of the nearest available taxi
Johns and Bettys phones do Johns and Bettys phones do not support not support a common a common
voice encoding voice encoding
Introducing the MRFC and MRFP Introducing the MRFC and MRFP
Intercepting the SIP invite message, the S-CSCF/AS
detects a non compatibility between the codecs of the
phones : it forwards it to the MRFC (a SIP proxy).
The MRFC adjusts the SIP messages in order to orient the
RTP flow to the MRFP (a RTP proxy), for trans-coding
V. Mancuso, I. Tinnirello
RTP flow to the MRFP (a RTP proxy), for trans-coding
MRFC
MRFP
MGCP, H248 Megaco
RTP (codec: AMR)
SIP
S-CSCF
RTP (codec: G729)
During its travel John is calling Betty During its travel John is calling Betty
The The operator has made a segmentation of its services offer operator has made a segmentation of its services offer
IIntroducing ntroducing the the P P--CSCF, I CSCF, I--CSCF CSCF
The P-CSCF is the 1
st
SIP proxy seen by the terminal
It controls the bearer plan via COPS protocol
It adjusts the SIP message (e.g., compression) and forwards it to the I-CSCF of the home
network
The operator may have several S-CSCFs (e.g., offer
segmentation)
So it introduces, the I-CSCF SIP proxy as the entry point of its
network
V. Mancuso, I. Tinnirello
network
also used as the entry point for calls from other operators
Home Network
Visited Network
P-CSCF

S-CSCF (consumers)
S-CSCF (enterprises)
I-CSCF
HSS
John is calling Betty who has John is calling Betty who has
a legacy phone a legacy phone
Introducing the MGCF and the MGW Introducing the MGCF and the MGW
At the border of the IMS network with the phone network,
an adaptation is necessary.
The MGCF handles the control for the 2 worlds and drives
the MGW (Media gateway)
controls circuits and MGW much like a VoIP softswitch
V. Mancuso, I. Tinnirello
MGCF
MGW
H248 MGCP,
Megaco
SIP
Legacy Call control (SS7)
Phone transmission

Internet PSTN/PLMN network

RTP
IMS Communication Focus IMS Communication Focus
Roaming IMS Mobile Users Roaming IMS Mobile Users
Access Network A
P- CSCF
C
SIP / SDP
S-CSCF
A
P-CSCF
D
Service Platform A
(AS
A
)
S-CSCF
B PDF
Gm
SIP / SDP SIP / SDP
Service Platform B
(AS
B
)
PDF
Serving Network A
Serving Network B
Access Network B
V. Mancuso, I. Tinnirello
SGSN GGSN GGSN SGSN
UE
B
UE
A
SIP/SDP
inviting
Go
SIP/SDP
IP Backbone Network
Data- Path
PDP Context
Sessionlevel(SIP/SDP signalling)
Bearer level(PDP context activation / modification / Release)
Interactionbetweensession andbearer level(COPS)
Gm
Gm
PDPContext
I-CSCF (between P-CSCF and S-CSCF) not shown for simplicity
uey@homeb.com
Go
A Typical Example of an IMS Call A Typical Example of an IMS Call
Network X Network X
Network Y Network Y
P-CSCF
I-CSCF
I-CSCF
S-CSCF
S-CSCF
HSS
HSS
AS
AS
V. Mancuso, I. Tinnirello
User B
DSL/Cable Modem DSL/Cable Modem
DSLAM/CMTS
RNC
GGSN
Network Z (UMTS/GPRS) Network Z (UMTS/GPRS)
User A
SGSN
GRX GRX
P-CSCF
The Signaling Plane The Signaling Plane
V. Mancuso, I. Tinnirello
SIP functionality SIP functionality
SIPs main goal is to deliver a session descriptor to a
user at his/her/its location
A session descriptor contains the information needed
for a remote user to join the session
IP address and port
Codecs

SDP (Session Description Protocol)
A (possible) text-based way to describe the media session
V. Mancuso, I. Tinnirello
A (possible) text-based way to describe the media session
SDP SDP
Session-level
version
user
subject
Start time
user IP
V. Mancuso, I. Tinnirello
Media-level
G711-law
H.261 codec
Start time
Stream
directio
n
SIP entities SIP entities
Registrar
User Agent
SIP endpoints handled by users (also automatically, based on user-
defined rules)
Proxy server
SIP routers
V. Mancuso, I. Tinnirello
SIP routers
Usually is co-located with the registrar, and always uses the information
on the registrar (through a location server) to route the calls
Forking proxy
Parallel or serial forking in the message routing
Redirect server
For routing, but no message delivery
SIP transactions SIP transactions
Transaction structure
A request from the client
Zero or more provisional responses from the server
A final response from the server
Each message begins with a start line
Request line (in a request)
V. Mancuso, I. Tinnirello
e.g.: INVITE sip:alice@domain.com SIP/2.0
Status line (in an answer)
e.g.: SIP/2.0 180 Ringing
Start line
One or more headers (name:value)
---------EMPTY LINE ---------
Message body (OPTIONAL)
SIP message format
Method Request URI Protocol version
Protocol version
Status
code
Human
code
SIP methods SIP methods
ACK ack the final response for INVITE
BYE terminate a session
CANCEL cancel a pending request
INFO transport PSTN telephony signaling
INVITE establish a session
NOTIFY notify a UA about a particular event
OPTIONS queries a server about capabilities
V. Mancuso, I. Tinnirello
OPTIONS queries a server about capabilities
PRACK ack for provisional response
PUBLISH upload UAs info to a server
REGISTER map the current URI and location with
the public URI
SUBSCRIBE request to be notified about an event
UPDATE update session characteristics
MESSAGE instant message in the message body
REFER instruct a server to send a request
SIP in the IMS SIP in the IMS
In principle, no difference with the public
Internet
In practice, IMS imposes some
constraints
Wireless access
Security
V. Mancuso, I. Tinnirello
QoS
Roaming
3GPP/IETF defines a profile of utilization
of SIP in the IMS environment
E.g., RFC 3261 (redefinition of SIP)
RFC 3665 and 3666 (Best Current Practice)
Prerequisites Prerequisites
Two Two--phase registration phase registration
Inbound/Outbound
Offline subscription
Login to the
IP access net
V. Mancuso, I. Tinnirello
Inbound/Outbound
Fixed Proxy
Online registration
IP access net
DHCP or
Lower level
mechanism
Entering the IP Connectivity Access Entering the IP Connectivity Access
Network Network
The access to GPRS includes the
assignment of servers and IP address
V. Mancuso, I. Tinnirello
PDF Context Activation/De PDF Context Activation/De--Activation Activation
A PDP context is pre-setup for the SIP
signaling
Different PDP contexts are then activated for
the media flows (e.g. according to the agreed
codec)
When the session ends, all PDP contexts are
V. Mancuso, I. Tinnirello
When the session ends, all PDP contexts are
deactivated
P P--CSCF discovery CSCF discovery
The IMS terminal has to discover the IP address of the
P-CSCF
The procedure can be
stand alone (DHCP+DNS)
integrated with the access to the IP (e.g., with the PDP context)
V. Mancuso, I. Tinnirello
IMS IMS--level registration level registration
The user requests authorization to use
the IMS
The IMS authenticate and eventually
authorize the user
SIP REGISTER is mandatory
V. Mancuso, I. Tinnirello
DIAMETER is used by the CSCF to contact the HSS
For security reasons, the user is challenged to show its
identity this require two SIP REGISTER messages
IMS IMS--level registration level registration
U
A
A
:

U
s
e
r

A
u
t
h
.

A
n
s
.
M
A
A
:

M
u
l
t
i
l
e
d
i
a
A
u
t
h
.
A
n
s
S
A
A
:
S
e
r
v
e
r
A
s
s
i
g
n
m
e
n
t

A
n
s
.
The HSS tells the I-CSCF whether a S-CSCF
was already allocated to the user.
If not, I-CSCF will choose based on
capabilities notified by HSS in the UAA
Without
authentication
DL User Auth
vector
V. Mancuso, I. Tinnirello
U
A
R
:

U
s
e
r

A
u
t
h
.

R
e
q
M
A
R
:
M
u
l
t
i
m
e
d
i
a
A
u
t
h
.
R
e
q
S
A
R
:
S
e
r
v
e
r
A
s
s
i
g
n
m
e
n
t

R
e
q
.
Challenge the User
DL User
Profile
authentication
vector included
Basic Session Setup Basic Session Setup
V. Mancuso, I. Tinnirello
Session Session
setup setup
Many nodes and
V. Mancuso, I. Tinnirello
Many nodes and
many messages
involved in the setup
Different
planes/layers
media
signaling
CAN
core
Session setup ( Session setup (conted conted))
V. Mancuso, I. Tinnirello