Documente Academic
Documente Profesional
Documente Cultură
- Y I - B I N GL I N A N D S T E V E N K. DEVRIES
The basic parts of the SS7 protocol and the cor- W Figure 1. An example of the SS7 network architecture.
responding OS1 layers are shown in Fig. 2. In the
protocol hierarchy, the Operations, Maintenance,
and AdministrationPart ( O W ) and Mobile Appli-
cation Part (MAP) are TCAP (i.e., Transaction OS1 layers The SS7 layers
Capabilities Application Part; to be defined)
applications. The details of the OMAP are omit-
ted and can be found in [7].
-/I
Application
The MAP will be elaborated based on the IS- * I I
41 protocol. The other parts of the SS7 protocol
...__________-.--..-.~-~~
are described below.
*The Message Transfer Part (MTP) consists of ISDN-UP
Presentation
three levels corresponding to the OS1physical layer, session
data link layer, and network layer, respectively. transport
The MTP Level 1 defines the physical, electrical,
and functional characteristics of the signaling links
connecting SS7 components. The MTP Level 2
provides reliable transfer of signaling messages
between two directly connected signalingpoints. The
MTP Level 3 provides the functions and procedures
related to message routing and network manage-
ment.
* T h e Signaling Connection Control Part
I MTP level 3
I
(SCCP) provides additional functions such as
Global Title Translation to the MTP to transfer
non-circuit-related signaling information such as
Data link
I MTP level 2
I
PCS registration and cancellation.
*The Transaction Capabilities Application
Physical I MTP level 1 I
Part (TCAP) provides the ability t o exchange
.~ _ . ~
information between applications using non-circuit
related signaling. W Figure 2. The SS7signalingprotocol.~ ~
Using TCAP
QualificationRequest INVOKE(Last) QUERYWITHPERMISSION
wenty six TCAP operations2 are defined in
T
QualificationRequest RETURN RESULT(Last) RESPONSE
QualificationRequest RETURN ERROR RESPONSE IS-41.B [ 131 for three purposes: Inter-MSC
QualificationRequest REJECT RESPONSE Handoff [15], Automatic Roaming [12], and
Operations, Administration, and Maintenance
RegistrationCancellation INVOKE(Last) QUERYWITHPERMISSION [16]. The details of handoff and automatic roam-
RegistrationCancellation RETURN RESULT(Last) RESPONSE ing (mobility management) alternatives can be
RegistrationCancellation RETURN ERROR RESPONSE found in [21-271.
RegistrattonCancellation REJECT RESPONSE A TCAP message consists of two portions: the
RegistrationNotification INVOKE(Last) QUERYWITHPERMISSION Transaction Portion and the Component Portion.
RegistrationNotification RElllRN RESULT(Last) RESPONSE The Transaction Portion specifies the Package
RegistrationNotification RETURN ERROR RESPONSE Type. Four of the seven Package Types [5, 131 are
RegistrationNotification REJECT RESPONSE defined in IS-41.5-B.3
~~
~YwI~PEREIIssIoNNnitiates aTCAP transaction
ServiceProfileRequest INVOKE(Last) QUERYWITHPERMISSION and informs the terminating node that it may ~
ations are expected to be layer or the ISUP layer of the same node. The with a query message (QueryWithPermission
included. Destination Point Code (DPC) of the message in IS-41), and ends with a response message
uniquely identifies the destination node. Routing to (Responsein IS-41). In IS-41,both the INVOKE and
In IS-41.C, another the destination node is determined by the MTP using the RETURN RESULT types are “Last”which
Package Type called Con- look-up tables. imply that every IS-41 TCAP message performs
versationWithoutPer- In the mobile application, every handset is exactly one operation. In an IS-41 implementa-
mission will be assigned a Mobile Identification Number (MIN).l tion, we may expect that operations such as
introduced. When an MIN is dialed, the originating node may authentication and registration notificationare com-
not have enough knowledge to identify the actual bined into a TCAPmessage. In the remainder of this
Same number of the address of the destination. In this case, the actual article, we omit the notation “Last.”All IS-41.B
Cvmponent Types are destinationaddress is translated by a technique called transactions are two-message (a query and a response)
expected in IS-41 Global Title Translation (GTT) performed at the transactions except for two cases.
Revision C. SCCP level of the protocol. GTT is supported in *A TCAP message with the operation FlashRe-
PSTN
(a) Type 2A with 557 trunk interface (b) Type 2A with 557 trunk interface
supported by a Type 5 A-link supported by a Type 5 D-link
signaling interface signaling interface
office
PSTN
quest has a PackageType UNIDIRECTIONAL.Thismes- flows of IS-41 TCAP transactions. The TCAP mes-
sage is sent from the serving MSC to the anchor MSC sages described in these examples are summa-
to convey information for call control. No response rized in Table 1.
is expected from the anchor MSC, and no TCAP
transaction is established. This message is defined Inter-MSC Handoff
in IS-41 Revisions B and C, but is not supported The inter-MSC handoff procedures are defined
in IS-41 Revision A [12]. in IS-41.2 [15]. We assume that the inter-MSC
* A TCAP transaction including the operation handoff occurs within a PCN, and the SS7 mes-
FacilitiesDirective consists of three messages sages are not delivered t o the PSTN. Figure 4
exchanges. We will elaborate on this transaction illustrates the IS-41 TCAP message flow for
later. handoff-forward. In this figure, a communicating
(In IS-41.C,other transactionssuch as “inter-MSC handset (mobile user) moves out of the base sta-
setup” also involve more than two messages.) IS-41 tion servedby MSC A. Two transactionsare required
TCAP uses SCCP Class 0 connectionless service to perform inter-MSC handoff.
[4] that provides efficient routing without main-
taining message sequencing between two or more Transaction 7 - MSC A sends a HandoffMea-
messages from the same originating node. Message surementRequest (INVOKE) to the candidate
sequencing is implied in the two-message IS-41 MSC B, and waits for the response from MSC B.
transactions. For the three-message IS-41 transac- When MSC B receives the HandoffMeasure-
tions described above, message sequencing is also mentRequest (INVOKE),it selectsacandidate base For simplicity, we
guaranteed (to be elaborated). station BS2for handoff. If nocandidate base station express an IS-41 TCAP
Every IS-41 TCAP transaction accompaniesa time- is found, MSC B may exit this transaction. Other- message as a pair “Opera-
out constraint. Typically, recovery procedures wise, MSC B sends a HandoffMeasurementRe- tion (Package Type)” or
(definedinIS-41.4B [16]) areexecutedwhen a timer quest (RETURN RESULT) to MSC A.6 “Component Type.”
expires. For most IS-41 transactions timer expira-
..tion is considered as an error (i.e., the arrival of a Transadeon2 - Before this transaction is started, The result includes the
RETURN ERROR TCAP message). MSC A checks if the handset has made too many signal quality parameter
We use two examples to illustrate the message handoffs or if inter-MSC trunks are not available. values.
1;-
FacilitiesDirective (RETURN RESULT) action and performs some actions (e.g., blocks
the handoff call). If MSC A receives the Hand-
OffMeasurementRequest (RETURN) afterLMMRT
has expired, then it sends a HandoffMeasure-
MobileOnChannel (INVOKE) mentRequest (REJECT) message to inform MSC
B that Transaction 1 has been terminated without
completion. At the beginning of Transaction 2,
MSC A sets a 12-second timer HOT. If H O T
expires before the FacilitiesDirective (RETURN)
arrives, MSC A exits Transaction 2 and releases
associated inter-MSC facilities (see Section 4.3
in [15]). If MSC A receives the RETURN message
MSC A exits this transaction, and the hand-off call from MSC B, it stops HOT. MSC A expects to
maybeforcedterminatedif there are toomanyhand- receive subsequent messages from MSC B, and
offs or if there are no trunks. Otherwise, MSC A another 7-second timer HMOT is set. If HMOT
sends a FacilitiesDirective (INVOKE) to MSC B. expires before the MobileOnChannel (INVOKE)
When MSC B receives the FacilitiesDirective arrives,then MSCAexitsTransaction 2 and reclaims
(INVOKE),it replies with a FacilitiesDirective the resources.
(RETURN ERROR) if no voice channel is available
in BS2.' If BS2 is available to accommodate the Mobile Registration
call, MSC B replies with a FacilitiesDirective Figure 5 illustrates the message flow for the regis-
*
( R E T " RESULT) to MSC A. tration and validation process as a mobile user
When MSC A receives the FacilitiesDirective roams from PCN 1 to PCN 2. This figure assumes
(RETURN), one of the following two events occurs. that an MSC and the corresponding VLR are
If the message is a RETURN ERROR,then MSC A connected by an STP. In reality, it is more likely
executes recovery procedures and exits the trans- that the VLR is collocated with the MSC. The
action. If the message is a R E T " RESULT,then process consists of six two-message TCAP trans-
MSC A sends the handset a handoff order. actions. When MSC 2 detects that the mobile
After the handset is connected to BS2, MSC B user is in its service area, it initiates Transaction 1
sends a MobileOnChannel (INVOKE)to MSCAand witha RegistrationNotification (INVOKE) toitsVLR
exits this transaction. (VLR 2).
When MSC A receives the MobileOnChannel If both MSCs 1 and 2 are served by VLR2,
(INVOKE),it connects the call path (trunk) to VLR 2 finds that the mobile user had previously
MSC B and exits this transaction. registered with an MSC within the domain of
VLR 2. In this case, VLR 2 may take no further
T h e IS-41 TCAP messages are delivered action other than to record the identity of MSC 1.
through the PCN SS7 signaling links. (See dashed Otherwise, VLR 2 initiates Transaction 2 by
links 1 and 2 in Fig. 4. In this example, an STP is sending a RegistrationNotification (INVOKE)to
-
in the signaling path.) Before the handoff, the the mobile user's HLR. Note that this TCAP
voice path is (3) ++ (4) ++ (5). If the handoff is message is likely to be routed by using the global
successful, the new voice path is ( 3 ) H (4) H (6) title translation because VLR 2 may not recog-
(7). nize the actual address of the HLR by the mobile
The error code of the Transaction 1is a typical two-message IS-41trans- user's MIN. Thus, the mobile user's MIN is used
message is resource action . T h e H a n d off Me a s u r e m e nt Req u est as the global title address, and the translation
shortage[13]. (INVOKE)is of type QUERYWITHPERMISSION. With type of the message is marked "3"for CellularNation-
this Package Type, MSC A implies that MSC B wide Roaming Services (see Appendix B for more
The result includes the may end this transaction after the response is details). Our example assumes that STP 3 will per-
parameters of the selected sent. The message replied from MSC B is of type formGTT(i.e.,theDPCof themessage points to STP
voice channel. RESPONSE,which terminates the transaction. 3). After global title translation,the actual destination
RegistrationNotifica‘ion (INVOKE)
Registrationcancellat o n (INVOKE)
*
RegistrationCancellat on (RETURN RESULT)
-
Registrationcan dlation (INVOKE)
ServiceProfileReques: (INVOKE)
ServiceProfileRequesI(RETURN RESULT
*
address is found. STP 3 forwards this message to STF’ a registration record for the mobile user, and
2 and thus to the HLR. The HLR confirms the reg- may send a QualificationRequest (INVOKE)to
istration by sending a Registration N o t if ica t i o n the HLR in order to authenticate the mobile user
(RETURN RESULT) to VLR 2. This message may (see Transaction 5) [18].
be delivered without global title translation VLR 2 may also send a ServiceProfileRequest
because the actual address of VLR 2 is included (INVOKE)to the HLR to obtain the service pro-
as part of the SCCP in the previous Registra- file for the roaming mobile user (see Transaction 6).
tionNotification (INVOKE)sent from VLR 2 to the Transaction 6 is required in some call delivery
HLR. Note that Transaction 2 is nested within schemes [21,24].
Transaction 1.
The HLR sends a RegistrationCancellation
(INVOKE)to the mobile user’s previously visited PCNIPSTN Call Control
VLR (VLR 1) to cancel the obsolete registration
record (see Transaction 3). T h e cancellation Using I S U P
propagates to MSC 1 (see Transaction 4). Since
the actual address of VLR 1 has been recorded in he ISUP messages a r e used for call
the HLR (in the previous registration operation),
the cancellation message may be delivered by
using the actual HLR address (Le., no GTT is
T setuphelease between the PSTN and a PCN
in the interconnection networks using Type
2A or Type 2B with SS7 trunk interfaces (see the
required). Note that the cancellation process (see section, “Interconnection and Message Routing
Transactions 3 and 4) can be performed at any between PCN and PSTN”). Nine of the 57 ISUP
time after Transaction 2. message types [2] are discussed in this section for
After Transaction 2 is completed, VLR 2creates basic call setup. Figure 6 illustrates the typical
. .
Note that if the called party is a wireline user,
the busy line situation is not detected until Step 3.
Step 5 - REL
REL
L
checked to ensure a satisfactory transmission
path. After the continuity check is successfully
completed, a Continuity Message (COT) is sent
from the E O to the tandem, and the trunk is set
up. The same procedure could be performed
when the MSC receives the IAM from the tan-
dem.
Signaling path from Step3 - When the IAM arrivesat the MSC, the MSC
PSTN to PCN pages the mobile user. One of the following three
Signaling path from
PCN to PSTN e4bQ+e-.9 events occurs:
-The mobile user is connected with another
call (the call setup occurs between the end of
m g K 6 . Typical message flowfor Type 24 with Sfiland-to-mobile call setup
~~
-,,' Priority = 0 or 1
SIC = 3
--_
ing
jsccp1'...\.
[ T I
(a) The MTP message (b) The SCCP message
I
- .1
National/lntl.
I
i RI = 0
I I
Address
RI = 1 Address GT ind. = 2
GT ind. = 0
SPC ind. = 0
SPC ind. = 1
SSN ind. = 1
SSN ind. = 1
SPC
SSN
Address
'yDq
GT translation type
GT address Address
(c) Calledlcalling party address format (d) Called/calling party address format
(without global title translation) (with global title translation)
1
~
~ _- ~
~- -
W Figure 8 The IS-41message format (only SCCPMTP-related fields are shown).
_-
Six of the fourteen SSNs are described in IS-41.
SSN 5 Mobile Application Part (MAP) all setuplrelease between a PCN and the
SSN 6 Home Location Register (HLR)
SSN 7 Visitor Location Register (VLR) PSTN follows standard ISUP procedures. In the P S T N s
SSN 8 Mobile Switching Center (MSC) view, PCN call control is similar to other applications such
SSN 9 Equipment Identification Register
(EIR). This code is reserved in IS-41. as 800 service.
SSN 10 Authentication Center (AC). This code
is reserved in IS-41 B but will be accommodated Case 1.1.2 (Step 10)The DPC is not the node itself.
in IS-41 C. There are two possibilities.
If GTT is required, the address of an IS-41 *Case 1.1.2.1 (Step 1l)] If the DPC cannot be
message always contains a subsystem number. used to deliver the message, an error occurs.
Before GTT, the SSN is encoded 0. After the The Return procedure is invoked (Step 5).
translation, the actual SSN is given. *Case 1.1.2.2 (Step 11) If the DPC is appro-
priate, the message will be sent to the MTP
for delivery. If RI = 1 (Step 12),it implies that
The Routing Procedure G'IT will not be performed. In this case, an
appropriate SSN is required (Step 14) before
igure 9 illustrates the SCCP routing for an the message is sent to the MTP (Step 17).
IS-41 message. We note that this procedure If R I = 0 at Step 12, GTT is necessary.
is ageneral routing procedure and is not unique Since the actual SSN is not expected before
to IS-41. The message processed by the SCCP may the GTT, the message is sent directly to the
came from the MTP layer or the TCAP layer. MTP without checking the SSN status.
Case 7 Case 7.2 (the DPC is not specified at Step 7)- A
The IS-41 message is transferred from the TCAP GTT is required to find the DPC (and the SSN).
to the SCCP (Step 1 in Fig. 9). A UDT message This case occurs when an MIN is used to access
is constructed based on the information provid- theHLR.IfRI= 1atStep8(noGTTrequired),then
ed by the MAP/TCAP (Step 4). One of the fol- an error occurs. If RI = 0, GTT is performed at
lowing two events occurs. Step 6. Before the translation, the SSN is 0, the
translation type is 3 (Cellular Nationwide Roaming
Case 1 . 7 - (the DPC is specified at Step 7). There Services), and the global title is the 10-digit MIN.
are two possibilities. Since the G T indicator is 2 for an IS-41 message,
Case 1.1.1 (Step 10) The DPC is the node itself. the 10-digitMIN and the translation type are used for
In this case, no G7T is required. Next, the Called the translation. After the translation, both the
Party Field is examined. If RI = 0, it must be a DPC and the SSN are specified, and the routingpro-
mistake and the Return procedure is invoked cedure proceeds to Step 10 (see Case 1.1). If the
(Step 5). The Return procedure returns or dis- translation fails (e.g., the MIN is not recognized
cards IS-41 messages (based on the option field) at Step 9), the Return procedure is invoked.
which encounter routing failures and cannot
be delivered to their final destination. Case 2
If RI = 1, the SSN in the SCCP field is used The IS-41 message is transferred from the MTP to
to determine the local subsystem (e.g., HLR, the SCCP (Step 2 in Fig. 9). If RI = 1 (Step 3), then
VLR, and so on). If an appropriate subsystem the receiving SCCP is the termination point of
number is indicated in the message (Step 15), the message. The action taken is the same as Step
then the message is forwarded to that SSN 15 at Case 1.1.1 (with RI = 1). If RI = 0, then the
TCAP layer (e.g., a query is sent to the HLR to G 7 T is required. The Steps 6 and 9 are performed
access the user profile) at Step 16. Otherwise, as in Case 1.2. After the GTT is performed, the
an error occurs, and the Return procedure is situation is the same as Case 1.1 except that RI = 0
invoked (Step 5). when the message is processed at Steps 12 or 13.