Inter Standard Roaming (ISR) - IIF

PrePay CDMA Subscribers Can Now Roam Onto GSM Networks
Roaming services provider, Mach has launched a new service that enables prepay CDMA
customers to roam on GSM networks. Mach, working with with Accuris Networks says that it
is the first provider to offer an inter-standard roaming service for prepaid mobile users, and
is the first to offer a fully integrated prepaid and post-paid inter-standard roaming capability
to CDMA operators.
Growth in mobile subscriber numbers today is driven mainly by prepaid mobile users,
particularly in emerging markets and particularly among the lucrative younger generation
users. CDMA operators are currently forced to forego potential revenue when these prepaid
users travel out of region because it has not been possible for CDMA prepaid users to roam
on a GSM network. Roaming customers, therefore, have been required to purchase a
prepaid local SIM card or use Wi-Fi hotspots in the destination market. This also has a
significant negative impact on customer loyalty and retention rates as customers have been
required to buy services from and transition between multiple providers.
The turnkey prepaid solution, which can be implemented using existing connections, offers
prepaid end-users all of the services that are available on their home network when they
are travelling abroad.
The service is offered under the Mach brand, and is delivered using the Accuris technology
platform. Accuris Networks is a provider of Roaming Inter-Working and Convergence
solutions for mobile devices.
"Our mobile operator customers will reap three immediate benefits from this solution," said
Artur Michalczyk Mach COO. "First, they will immediately realise previously lost revenue
streams by enabling users to roam on their existing prepaid SIM, commanding a greater
share of revenues that would otherwise be spent on technologies like local prepaid GSM SIM
cards or hotel and airport WiFi. Second, they will enhance the service they deliver to their
customers, and increase customer loyalty, by providing a seamless service, wherever the
user is roaming. And third, with end-to-end, one number inter-operability, operators can
provide complete voice and messaging services without the time and investment required to
build their own platform."
Roaming
In wireless telecommunications, roaming is a general term referring to the extension of
connectivity service in a location that is different from the home location where the service was
registered. Roaming ensures that the wireless device is kept connected to the network, without
losing the connection. The term "roaming" originates from the GSM (Global System for Mobile
Communications) sphere; the term "roaming" can also be applied to the CDMA technology.
Traditional GSM Roaming is defined (cf. GSM Association Permanent Reference Document
AA.39) as the ability for a cellular customer to automatically make and receive voice calls, send
and receive data, or access other services, including home data services, when travelling outside
the geographical coverage area of the home network, by means of using a visited network. This
can be done by using a communication terminal or else just by using the subscriber identity in
the visited network. Roaming is technically supported by mobility management, authentication,
authorization and billing procedures.
Contents
• 1 Roaming in general
• 2 Home and visited networks
• 3 Roaming agreements
• 4 The roaming process
• 5 Tariffs
○ 5.1 Roaming in Europe
• 6 Additional notions and types of
roaming
• 7 See also
• 8 References
• 9 Standardisation Organizations
• 10 External links
[edit] Roaming in general

Roaming is divided into "SIM-based roaming" and "Username/password-based roaming",
whereby the technical term "roaming" also encompasses roaming between networks of different
network standards, such as e.g. WLAN (Wireless Local Area Network) or GSM. Device
equipment and functionality, such as SIM card capability, antenna and network interfaces, and
power management, determine the access possibilities.
Using the example of WLAN/GSM roaming, the following scenarios can be differentiated (cf.
GSM Association Permanent Reference Document AA.39):
• SIM-based (roaming): GSM subscriber roams onto a Public WLAN operated
by:
○ their GSM Operator, or
○ another Operator who has a roaming agreement with their GSM
Operator.
• Username/password based roaming: GSM subscriber roams onto a Public
WLAN operated by:
○ their GSM Operator, or
○ another Operator who has a roaming agreement with their GSM
Operator.
Although these user/network scenarios focus on roaming from GSM Network Operator's
network(s), clearly roaming can be bi-directional, i.e. from Public WLAN Operators to GSM
Networks. Traditional roaming in networks of the same standard, e.g. from a WLAN to a WLAN
or a GSM network to a GSM network, has already been described above and is likewise defined
by the foreignness of the network based on the type of subscriber entry in the home subscriber
register.
In terms of user service scenarios, the user can have access to the same set of services,
irrespective of access type. However, differentiation also exists. Service scenarios may include
access to a range of different services, including:
• Access to corporate Intranet services;
• Access to operator walled garden services; and
• Access to public Internet.
In the case of session continuity, seamless access to these services across different access types is
provided.
[edit] Home and visited networks

The differentiation between home network and visited network is technically given by the type
of subscriber entry in a specific network. If a subscriber has no entry in the home subscriber
register of the network (e.g. Home Location Register (HLR) in GSM networks or local customer
database in WLANs), the required subscriber data must first be requested by the visited network
e.g. from the subscriber's home network in order that the subscriber can be authenticated and any
authorization for using the network services can be checked. The "visiting" subscriber acquires
an entry in a user database of the visited network (e.g. Visited Location Register (VLR)) and the
authorized network services are enabled. For the roaming procedure in practice, the possibility of
assigning the subscriber data is always indispensable in order that authentication, authorization
and billing of the subscriber can be performed in the corresponding network. Thus, the term
roaming is not linked to a specific network standard, but rather to the type of subscriber entry in
the home subscriber register of the mobile radio network. If a subscriber can use his personal
service profile, which he uses in the home network, in the visited network as well, this is also
referred to as Global Service Roaming Capability.
Roaming agreements
The legal roaming business aspects negotiated between the roaming partners for billing of the
services obtained are usually stipulated in so called roaming agreements. The GSM Association
broadly outlines the content of such roaming agreements in standardized form for its members.
For the legal aspects of authentication, authorization and billing of the visiting subscriber, the
roaming agreements typically can comprise minimal safety standards, as e.g. location update
procedures or financial security or warranty procedures.
The roaming process

The details of the roaming process differ among types of cellular networks, but in general, the
process resembles the following:
1. When the mobile device is turned on or is transferred via a handover to the
network, this new "visited" network sees the device, notices that it is not
registered with its own system, and attempts to identify its home network. If
there is no roaming agreement between the two networks, maintenance of
service is impossible, and service is denied by the visited network.
2. The visited network contacts the home network and requests service
information (including whether or not the mobile should be allowed to roam)
about the roaming device using the IMSI number.
3. If successful, the visited network begins to maintain a temporary subscriber
record for the device. Likewise, the home network updates its information to
indicate that the mobile is on the host network so that any information sent
to that device can be correctly routed.
Tata Indicoms international roaming service One World-One Number for all its post-paid CDMAcustomers across 20
circles. This service will enable the use of both CDMA and GSM services using a single T-SIM product for
international roaming. This means that users will not have to change their number to switch between two networks
freely and will be able to take advantage of zone-based tariffs.
First telecom service provider in the world to launch a single T-SIM card for international roaming. This will provide
seamless access of different networks to our customers in 186 countries via 291 GSM roaming partners and five
CDMA partners.
Seamless International Roaming

With the BlackBerry 8830 World edition dual mode smartphone, you can now experience seamless international
roaming. Tata Indicom’s One World One Number T-SIM card which comes preloaded in your BlackBerry empowers
you to switch between CDMA & GSM networks.
Tata Teleservices Ltd. has a roaming tie-up with CDMA & GSM networks across more than 178 countries.
Now the world is no longer CDMA or GSM but one world where you get to choose the best service provider without
having to worry about CDMA or GSM
The BlackBerry Bold 9650, introduced exclusively by Tata Teleservices Limited is a new Smartphone
for CDMA subscribers, offering seamless global roaming, 512 MB of Flash Memory, an Optical
Trackpad, and enhanced Wi-Fi and GPS capabilities
NEW DELHI, INDIA: Tata Indicom, the CDMA arm of Tata Teleservices Limited, a dual-technology pan-India
telecom services provider, and Research in Motion today announced the launch of the BlackBerry Bold 9650,
the first combined CDMA-GSM 3G-ready Smartphone in the BlackBerry Bold series.
The BlackBerry Bold 9650, introduced exclusively by Tata Teleservices Limited is a new Smartphone for
CDMA subscribers, offering seamless global roaming, 512 MB of Flash Memory, an Optical Trackpad, and
enhanced Wi-Fi and GPS capabilities, said a press release.
Commenting on the launch of the BlackBerry Bold 9650, Sunil Batra, president of CDMA Operations at Tata
Teleservices Limited, said, “As the youngest dual-technology telecom service provider in India, the addition
of a Smartphone like the BlackBerry Bold 9650 to our portfolio of products and services from Research In
Motion is an important step in strengthening our offerings to consumers.”
“The BlackBerry Bold 9650 Smartphone delivers premium phone and multimedia features, together with
global roaming support and the industry’s leading mobile solution for e-mail, messaging and social
networking,” said Frenny Bawa, managing director-India, Research In Motion.
Customers purchasing the BlackBerry Bold 9650 Smartphone in the month of October will also be given a
special data usage offer. For the first two months, these customers will receive a free data pack worth
Rs.900 per month, as well as 500 MB of tethered modem data usage per month. Customers using the
BlackBerry Bold 9650 smartphone will also have exclusive access to Tata’s Photon TV, powered by Photon +,
on the go, the release said.
The BlackBerry Bold 9650 Smartphone offers a compact design and an easy-to-use full-QWERTY keyboard. It
includes a variety of useful productivity applications and a wide range of popular features, including
advanced multimedia capabilities, Bluetooth 2.1 and a 3.2-megapixel camera with flash, image stabilization
and video recording.
Syniverse signs a contract with Tata Teleservices, one of India's fastest growing mobile phone
service providers with pan-India coverage. Syniverse will provide Tata Teleservices' customers
with seamless international wireless roaming services.
Syniverse Technologies (NYSE:SVR), a leading provider of mission-critical technology services
to wireless telecommunications companies worldwide, announced today that it has signed a
contract with Tata Teleservices of India to provide seamless CDMA international roaming
services. With Syniverse's services, Tata Teleservices subscribers will now be able to use their
mobile phone for voice services and SMS on CDMA networks throughout the world where
CDMA coverage is available.
India's mobile subscriber base is approximately 50 million today and is considered to be one of
the fastest growing telecommunications markets with less than 10% penetration. Additionally,
the number of tourists traveling in and out of India is expected to grow by 30 percent this year,
according to forecasts by the World Tourism Organization of Madrid. Syniverse will provide
Tata Teleservices with a multi-service offering that includes clearinghouse services for roaming
revenue settlement and exchange; SS7 transport and conversion; ANSI-41 signaling
interoperability; a near-real time, on-line customer management application used to track and
troubleshoot roamers; and SMS routing, which will enable SMS mobile origination and
termination for Tata Teleservices subscribers who are roaming internationally.
On the occasion Mr. Firdose Vandrevala, Chairman, Tata Teleservices, said, "Tata Teleservices
already has a pan-India operation and is the world leader in fixed wireless service. We plan to
expand our presence by further enhancing our service offerings. The ability to offer seamless
international roaming based on Syniverse's proven interoperability solutions will help us to tap
into the potential of the booming international mobile communications market. This tie-up is an
extension to our efforts of providing our customers the very best."
"Tata Teleservices is an innovative technology leader in one of the fastest growing telecom
markets in the world. Their vision for subscriber growth and international roaming is perfectly
matched with our expertise in roaming interoperability services," said Syniverse CEO Ed Evans.
"We continue to secure significant customer contracts in Asia Pacific, which demonstrates our
commitment to international expansion and our unique technical capabilities that enable
subscribers to take advantage of both voice and data services on a worldwide basis."
About Tata Teleservices
Tata Teleservices is one of India's leading private telecom service provider. The company offers
integrated telecom solutions to its customers under the Tata Indicom brand, and uses the latest
CDMA 3G1X technology for its wireless network. Tata Teleservices operates in 20 circles i.e.
Andhra Pradesh, Chennai, Gujarat, Karnataka, New Delhi, Maharashtra, Mumbai, Tamil Nadu,
Orissa, Bihar, Rajasthan, Punjab, Haryana, Himachal Pradesh, Uttar Pradesh (E), Uttar Pradesh
(W), Kolkata, Kerala, Madhya Pradesh and West Bengal. The company has a customer base of
over 3.66 million.
About Syniverse
Syniverse is a leading provider of mission-critical technology services to wireless
telecommunications companies worldwide. Syniverse solutions simplify technology
complexities by integrating disparate carriers' systems and networks in order to provide seamless
global voice and data communications to wireless subscribers. Carriers depend on Syniverse's
integrated suite of services to solve their most complex technology challenges and to facilitate
the rapid deployment of next generation wireless services. Syniverse provides services to over
300 telecommunications carriers in approximately 40 countries, including the ten largest U.S.
wireless carriers and six of the ten largest international wireless carriers. Headquartered in
Tampa, Fla., U.S.A., with offices in major cities throughout North America and in The
Netherlands, Syniverse has a global sales force in London, Luxembourg, Rome, Beijing, Hong
Kong, Rio de Janeiro and Belo Horizonte.
If a call is made to a roaming mobile, the public telephone network routes the call to the phone's
registered service provider, who then must route it to the visited network. That network must
then provide an internal temporary phone number to the mobile (MSRN). Once this number is
defined, the home network forwards the incoming call to the temporary phone number, which
terminates at the host network and is forwarded to the mobile.
In order that a subscriber is able to "latch" on to a visited network, a roaming agreement needs to
be in place between the visited network and the home network. This agreement is established
after a series of testing processes called IREG (International Roaming Expert Group) and
TADIG (Transferred Account Data Interchange Group). While the IREG testing is to test the
proper functioning of the established communication links, the TADIG testing is to check the
billability of the calls.
The usage by a subscriber in a visited network is captured in a file called the TAP (Transferred
Account Procedure) for GSM / CIBER (Cellular Intercarrier Billing Exchange Record) for
CDMA, AMPS etc... file and is transferred to the home network. A TAP/CIBER file contains
details of the calls made by the subscriber viz. location, calling party, called party, time of call
and duration, etc. The TAP/CIBER files are rated as per the tariffs charged by the visited
operator. The home operator then bills these calls to its subscribers and may charge a mark-
up/tax applicable locally. As recently many carriers launched own retail rate plans and bundles
for Roaming, TAP records are generally used for wholesale Inter-Operators settlements only.
Tariffs
Roaming fees are traditionally charged on a per-minute basis and they are typically determined
by the service provider's pricing plan. Several carriers in the both United States and India have
eliminated these fees in their nationwide pricing plans. All of the major carriers now offer
pricing plans that allow consumers to purchase nationwide roaming-free minutes. However,
carriers define "nationwide" in different ways. For example, some carriers define "nationwide"
as anywhere in the U.S., whereas others define it as anywhere within the carrier's network.
An operator intending to provide roaming services to visitors publishes the tariffs that would be
charged in his network at least sixty days prior to its implementation under normal situations.
The visited operator tariffs may include tax, discounts etc. and would be based on duration in
case of voice calls. For data calls, the charging may be based on the data volume sent and
received. Some operators also charge a separate fee for call setup i.e. for the establishment of a
call. This charge is called a flagfall charge.
Roaming in Europe
In the European Union, the Regulation on roaming charges has been in force since 30 June 2007,
forcing service providers to lower their roaming fees across the 27-member bloc. It later also
included EEA member states. The regulation sets a price cap of €0.39 (€0.49 in 2007, €0.46 in
2008, €0.43 in 2009) per minute for outgoing calls, and €0.15 (€0.24 in 2007, €0.22 in 2008,
€0.19 in 2009) per minute for incoming calls - excluding tax.[2] If the Commission is satisfied
that competition will continue to keep prices at this level, or lower, the regulation will expire in
mid 2012. Since mid 2009 there is also an €0.11 (excluding tax) maximum price for SMS text
message included into this regulation.
Additional notions and types of roaming

• Regional roaming:
This type of roaming refers to the ability of moving from one region to another region inside
national coverage of the mobile operator. Initially, operators may have provide commercial
offers restricted to a region (sometimes to a town). Due to the success of GSM and the decrease
in cost, regional roaming is rarely offered to clients except in nations with wide geographic areas
like the USA, Russia, India, etc., in which there are a number of regional operators.
• National roaming:
This type of roaming refers to the ability to move from one mobile operator to another in the
same country. For example, a subscriber of T-Mobile USA who is allowed to roam on AT&T
Mobility's service would have national roaming rights. For commercial and license reasons, this
type of roaming is not allowed unless under very specific circumstances and under regulatory
scrutiny. This has often taken place when a new company is assigned a mobile telephony license,
to create a more competitive market by allowing the new entrant to offer coverage comparable to
that of established operators (by requiring the existing operators to allow roaming while the new
entrant has time to build up its own network). In a country like India, where the number of
regional operators is high and the country is divided into circles, this type of roaming is
common[citation needed].
• International roaming:
This type of roaming refers to the ability to move to a foreign service provider's network. It is,
consequently, of particular interest to international tourists and business travellers.
Broadly speaking, international roaming is easiest using the GSM standard, as it is used by over
80% of the world's mobile operators. However, even then, there may be problems, since
countries have allocated different frequency bands for GSM communications (there are two
groups of countries: most GSM countries use 900/1800 MHz, but the United States and some
other countries in the Americas have allocated 850/1900 MHz): for a phone to work in a country
with a different frequency allocation, it must support one or both of that country's frequencies,
and thus be tri or quad band.
• Inter-standards roaming (ISR):
This type of roaming refers to the ability to move seamlessly between mobile networks of
different technologies.
Since mobile communication technologies have evolved independently across continents, there
is significant challenge in achieving seamless roaming across these technologies. Typically,
these technologies were implemented in accordance with technological standards laid down by
different industry bodies and hence the name.
A number of the standards making industry bodies have come together to define and achieve
interoperability between the technologies as a means to achieve inter-standards roaming. This is
currently an ongoing effort.
• Mobile Signature Roaming:
The concept of Mobile signature Roaming is: an access point should be able to get a Mobile
Signature from any end-user, even if the AP and the end-user have not contracted a commercial
relationship with the same MSSP. Otherwise, an AP would have to build commercial terms with
as many MSSPs as possible, and this might be a cost burden. This means that a Mobile Signature
transaction issued by an Application Provider should be able to reach the appropriate MSSP, and
this should be transparent for the AP(reference).
• Inter MSC Roaming:
Network elements belonging to the same Operator but located in different areas (a typical
situation where assignment of local licenses is a common practice)pair depends on the switch
and its location. Hence, software changes and a greater processing capability are required, but
furthermore this situation could introduce the fairly new concept of roaming on a per MSC basis
instead of per Operator basis. But this is actually a burden, so it is avoided.
• Permanent Roaming:
This type of roaming refers to customers who purchase service with a mobile phone operator
intending to permanently roaming, or be off-network. This becomes possible because of the
increasing popularity and availability of "free roaming" service plan, where there is no cost
difference between on and off network usage. The benefits of getting service from a mobile
phone operator that isn't local to you can include cheaper rates, or features and phones that aren't
available on your local mobile phone operator, or to get to a particular mobile phone operator's
network to get free calls to other customers of that mobile phone operator through a free
unlimited mobile to mobile feature. Accidentally become a permanent roaming customer does
not usually happen. Most mobile phone operators will require the customer's living or billing
address be inside their coverage area or less often inside the government issued radio frequency
license of the mobile phone operator, this is usually determined by a computer estimate because
it its impossible to guarantee coverage (see Dead zone (cell phone)). If a potential customer's
address is not within the requirements of that mobile phone operator, they will be denied service.
In order to permanently roam customers may use a false address and online billing, or a relative
or friends address which is in the required area, and a 3rd party billing option.
Most mobile phone operator discourage or prohibit permanent roaming since they must pay per
minute rates to the network operator their customer is roaming onto to, while they can not pass
that extra cost onto customers ("free roaming").
• Trombone roaming:
Roaming calls within a local tariff area, when at least one of the phones belong outside that area.
Usually implemented with trombone routing also known as tromboning
The routing of trombone roaming.
• IEEE 802.11
○ IEEE 802.11f
○ IEEE 802.11r
• Home Location Register
• Handoff
• Mobile IP
• Mobile phone
• Mobile phones on aircraft
• Mobility management
• Regulation on roaming charges in the European Union
• Roaming sim
• GSM frequency bands
• UMTS frequency bands
• Vertical handoff
• Visitor Location Register
Standardisation Organizations
• ETSI website, European Telecommunications Standards Institute.
• Direct access to ETSI standards publications.
• GSM website, Global System for Mobile communications by the GSM
Association (GSMA)
• GSM operators and their roaming agreements - Index of GSM operators in a
country, and their roaming partners indexed by country. Maintained by GSM
Alliance
• International Forum on ANSI-41 Standards Technology - Lists some of the
issues in Inter-standards roaming
• Local Roaming Number - Article talk about the Local Roaming Number Value
Add Service.
cdma_roaming
About CDMA and GSM roaming you can find a lot of information from those sites:
http://www.tsiconnections.com
http://www.telesoft-technologies.com
And there are some companies from India who provide soft-converters of IS41d GSM MAP
protocols.
About GSM1X, it's not intended to provide roaming capability. You can read from it's
description, that the GSM1X have been created for GSM operators to be able to use CDMA
radio network for enhanced radio frequency source of CDMA standard.
CDMA has already implemented full IMSI. It is just that most of the operators need to yet
convert their n/w in to full IMSI networks. This will happen but will take time. In fact in India
some networks are not even full MIN complient ( meaning that they are using some bulid up
numbers not the MIN ranges managed by some independent agency
Let us look at the factors which causes the problem and how to overcome them..
1> difference between MIN and IMSI
IMSI is MCC+MNC+SN=15
MIN=10
SO we have do some Mobile GTT to convert MIN in to the format of MCC+MNC+Min=IMSI
2> GSM+CDMA handset.
3> any other issue ...
SMS-Interworking doesnt mean that roaming is possible between CDMA2000 and GSM.
But this can provide a step forward towards MAP-Interworking...
This is no roaming. This is interworking between GSM and CDMA n/w so that a GSM
subscriber can send message to CDMA subscriber and visa versa. This is kind of black box
that converts the CDMA SMS messages of IS-41 format into GSM MAP format so that the
GSM network entities can send that message to The GSM subscribers.
This is in no way roaming.

IS41D and GSM - MAP Protocal Interworking is currenly used in INDIA for SMS-Interworking
between CDMA2000 and GSM Networks.
For this the CDMA Operator is using a "SPECIAL UNIT" to do the CONVERSION JOB.
Regarding roaming between GSM and CDMA, the answer is yes and did not have to wait 4G
or 3G and it's available right now with GSM1X (u can refer to www.GSM1X.com). The
product and technology built by Qualcom and it's already complete trial by China
Unicom( according to news)...
GSM (Global System for Mobile communications, originally from Groupe Spécial Mobile) is the most
popular standard for mobile phones in the world, with its promoter, the GSM Association, estimating
that the GSM service provides 82% of the global mobile market and is used by over 2 billion people
across more than 212 countries and territories.
Code division multiple access (CDMA) describes a communication channel access principle that
employs spread-spectrum technology and a special coding scheme (where each transmitter is
assigned a code). CDMA also refers to digital cellular telephony systems that use this multiple access
scheme, as pioneered by QUALCOMM, and W-CDMA by the International Telecommunication Union
(ITU), which is used in GSM’s UMTS.
Whereas Global System for Mobile Communications (GSM) is a specification of an entire network
infrastructure, CDMA relates only to the air interface — the radio portion of the technology. For
example, GSM specifies an infrastructure based on internationally approved standard, while CDMA
allows each operator to provide network features it finds suitable. On the air interface, the signalling
suite (GSM: ISDN SS7) work has been progressing to harmonise these features.
Subscriber Identity Module (SIM Card)

SIM (subscriber identity module) card, the onboard memory device that identifies a user and stores all
of his information on the handheld. You can swap GSM SIM cards between handsets when a new one
is necessary, which enables you to carry all of your contact and calendar information over to a new
handset with no hassle. CDMA operators answer this flexibility with their own service that stores user
data, including phone book and scheduler information, on the operator’s database. This service makes
it possible to not only swap over to a new handset with little trouble, but it also gives users the ability
to recover contact date even if their phone is lost or stolen.
International Roaming with GSM and CDMA

Where international business travel is an issue, GSM leaps forward in the race for the title of “Most
Accessible.” Because GSM is used in more than 74% of the markets across the globe, users of tri-band
or quad-band handsets can travel to Europe, India, and most of Asia and still use their cell phones.
CDMA offers no multiband capability, however, and therefore you can’t readily use it in multiple
countries. However, certain phones like the Blackberry Tour and the HTC Touch Pro 2 now have Quad-
band GSM built in so they can be used overseas with special calling plans from carriers.
Data Transfer Methods in GSM vs. CDMA

Another difference between GSM and CDMA is in the data transfer methods. GSM’s high-speed
wireless data technology, GPRS (General Packet Radio Service), usually offers a slower data
bandwidth for wireless data connection than CDMA’s high-speed technology (1xRTT, short for single
carrier radio transmission technology), which has the capability of providing ISDN (Integrated Services
Digital Network)-like speeds of as much as 144Kbps (kilobits per second). However, 1xRTT requires a
dedicated connection to the network for use, whereas GPRS sends in packets, which means that data
calls made on a GSM handset don’t block out voice calls like they do on CDMA phones.
Interaction between GSM and CDMA

In cities and densely populated areas, there are often high concentrations of GSM and CDMA
connection bases. In theory, GSM and CDMA are invisible to one another and should "play nice" with
one another. In practice, however, this is not the case. High-powered CDMA signals have raised the
"noise floor" for GSM receivers, meaning there is less space within the available band to send a clean
signal. This sometimes results in dropped calls in areas where there is a high concentration of CDMA
technology. Conversely, high-powered GSM signals have been shown to cause overloading and
jamming of CDMA receivers due to CDMA’s reliance upon broadcasting across its entire available band.
The result of this little cross-broadcasting joust has led some cities to pass ordinances limiting the
space between cell towers or the height they can reach, giving one technology a distinct advantage
over the other. This is something to note when choosing a wireless provider. The distance between
towers will severely affect connectivity for GSM-based phones because the phones need constant
access to the tower’s narrow band broadcasting.
Prevalence of CDMA vs. GSM
GSM is a lot more widespread in Europe and Asia. In the United States, Sprint and Verizon networks
are CDMA whereas AT&T and T-Mobile are on GSM. In India, Hutch, Bharti, TATA DOCOMO and BSNL
are on GSM whereas Reliance and Tata INDICOM are on CDMA networks.
HSPA is build on top of W-CDMA. It actually incorporates multiple technologies (TDMA, W-CDMA and
code multiplexing). Most GSM operators have a UMTS (aka. 3GSM, WCDMA, HSPA) overlay network.
GSM also has had a constant roadmat through 3G to 4G. Also roaming works globally. LTE and WiMAX
are essentially the same technology. WiMax's main problem is that it didn't do mobility very well. LTE
was brought out to make sure mobility works
CDMA is actually a superior technology to GSM. It propagates further, works better inside structures,
has built in noise cancellation, more calls per cel cite, automatically hands off calls to different cel
cites to minimize congestion, and works better in low signal areas to name a few. The only thing that
GSM brings top the table other than coverage, is better battery life, but that's because it is a less
powerful chip-set. It is true that eventually almost everyone int he world is going LTE.
LTE supports both FDD and TDD mode. GSM does not, it is strictly Time Division.
WiMAX is a niche trechnology at best and is seriously struggling - it's losing money all over the world.
The future is quite clearly GSM - so HSPA, HSPA Evolved/+ and LTE. There's no point comparing
WiMAX with LTE - We should be comparing HSPA with WiMAX. HSPA and HSPA+ are used globally and
gaining traction (200 million HSPA subscribers vs. WiMAX's 100,000 globally) - everything will lead to
LTE (also part of the GSM family of technologies), but HSPA will be around for a good few years yet.
Think global traction and economies of scale! Neither of which WiMAX has. So LTE is the future - just
look at what the operators in the US are doing: - Verizon moving from CDMA to LTE in 2010 - AT&T
moving from HSPA to LTE - T-Mobile moving from HSPA to HSPA+, and the LTE We'll ALL be using
LTE withing 10 years - CDMA and WiMAX will be technologies of the past. Johan Lassing, Sweden
- by 80.64.49.212 on 2009-11-26 12:08:21

GSM's only advantage is data/voice simultaneously. CDMA is faster, clearer, more secure, and much
less likely to drop calls. Its the newest mobile technology. There could be an eventual change in the
near future shifting to WiMax and LTE using VoIP insead of traditional cellular voice. WiMax is the
future. If the LTE network is eventually built, it will be very powerful. But WiMax may have a
stronghold on the wireless broadband industry by then.
Data using HSDPA on mobiles is very fast. GSM phones can also be unlocked and used on different
networks, unlike CDMA thus, giveing customers greater choice.
GSM -> GSM Vs CDMA
The ultimate outcome of the battle for dominance between these two competing
cellular data transmission technologies may lie more in their history than their respective
merits. To understand the current prevalence of GSM, one needs a foundation in the forces that
converged to push one technology ahead of the other.
One of the most contentious battles being waged in the wireless infrastructure industry is the
debate over the efficient use and allocation of finite airwaves. For several years, the world's two
main methods -- Code-Division Multiple Access (CDMA) and Global System for Mobile
communications (GSM) -- have divided the wireless world into opposing camps. Ultimately, the
emergence of a victorious technology may owe more to historical forces than the latest wireless
innovation, or the merits of one standard over the other.
CDMA's World War II Foundations
CDMA, put into an historical context, is a recently patented technology that only became
commercially available in the mid-1990s, but had its roots in pre-World War II America. In
1940, hollywood actress turned inventor, Hedy Lamarr, and co-inventor George Antheil, with
World War II looming, co-patented a way for torpedoes to be controlled by sending signals over
multiple radio frequencies using random patterns. Despite arduous efforts by the inventors to
advance the technology from experiment to implementation, the U.S. Navy discarded their work
as architecturally unfeasible. The idea, which was known as frequency-hopping, and later as
frequency-hopping spread-spectrum technology (FHSS), remained dormant until 1957 when
engineers at the Sylvania Electronic Systems Division, in Buffalo, New York took up the idea,
and after the Lamarr-Antheil patent expired, used it to secure communications for the U.S.
during the 1962 Cuban Missile Crisis. After becoming an integral part of government security
technology, the U.S. military, in the mid-80s, declassified what has now become CDMA
technology, a technique based on spread-spectrum technology.
What interested the military soon caught the eye of a nascent wireless industry. CDMA,
incorporating spread-spectrum, works by digitizing multiple conversations, attaching a code
known only to the sender and receiver, and then dicing the signals into bits and reassembling
them. The military loved CDMA because coded signals with trillions of possible combinations
resulted in extremely secure transmissions.
Qualcomm, which patented CDMA, and other telecommunications companies, were attracted to
the technology because it enabled many simultaneous conversations, rather than the limited stop-
and-go transmissions of analog and the previous digital option.
CDMA was not field tested for commercial use until 1991, and was launched commercially in
Hong Kong in 1995. CDMA technology is currently used by major cellular carriers in the United
States and is the backbone of Sprint's Personal Communications System (PCS). Along with
Sprint, major users of CDMA technology are Verizon and GTE.
Advantages of CDMA include:
• Increased cellular communications security.
• Simultaneous conversations.
• Increased efficiency, meaning that the carrier can serve more subscribers.
• Smaller phones.
• Low power requirements and little cell-to-cell coordination needed by
operators.
• Extended reach - beneficial to rural users situated far from cells.
Disadvantages of CDMA include:
• Due to its proprietary nature, all of CDMA's flaws are not known to the
engineering community.
• CDMA is relatively new, and the network is not as mature as GSM.
• CDMA cannot offer international roaming, a large GSM advantage.
The Euro-Asian Alternative: GSM

Analysts consider Qualcomm's major competitive disadvantage to be its lack of access to the
European market now controlled by Global System for Mobile communications (GSM). The
wireless world is now divided into GSM (much of Western Europe) and CDMA (North America
and parts of Asia).
Bad timing may have prevented the evolution of one, single global wireless standard. Just two
years before CDMA's 1995 introduction in Hong Kong, European carriers and manufacturers
chose to support the first available digital technology - Time Division Multiple Access (TDMA).
GSM uses TDMA as its core technology. Therefore, since the majority of wireless users are in
Europe and Asia, GSM has taken the worldwide lead as the technology of choice.
Mobile Handset manufacturers ultimately split into two camps, as Motorola, Lucent, and Nextel
chose CDMA, and Nokia and Ericsson eventually pushed these companies out and became the
dominant GSM players.
Advantages of GSM:
• GSM is already used worldwide with over 450 million subscribers.

• International roaming permits subscribers to use one phone throughout
Western Europe. CDMA will work in Asia, but not France, Germany, the U.K.
and other popular European destinations.
• GSM is mature, having started in the mid-80s. This maturity means a more
stable network with robust features. CDMA is still building its network.
• GSM's maturity means engineers cut their teeth on the technology, creating
an unconscious preference.
• The availability of Subscriber Identity Modules, which are smart cards that
provide secure data encryption give GSM m-commerce advantages.
Conclusion
Today, the battle between CDMA and GSM is muddled. Where at one point Europe clearly
favored GSM and North America, CDMA, the distinct advantage of one over the other has
blurred as major carriers begin to support GSM, and recent trials even showed compatibility
between the two technologies.
GSM still holds the upper hand however. There's the numerical advantage for one thing: 456
million GSM users versus CDMA's 82 million.
MACH’s ISR Solution Opens Up Roaming For Visafone's Pre-Paid CDMA
Customers
MACH, the leading provider of hub-based mobile communication solutions, today announced
the successful launch of Visafone’s pre-paid roaming service for CDMA subscribers using
MACH’s market leading Inter-Standard Roaming (ISR) Solution. Visafone, Nigeria’s fastest
growing mobile network operator, will be able to provide more than three million mostly pre-
paid customers with seamless access to international roaming on GSM networks and other
wireless technologies. By signing up yet another network operator to its industry-leading
solution, MACH has firmed up its leadership position in the pre-paid roaming market.
Network operators are striving to deliver seamless connectivity worldwide for both their pre-paid
and post-paid subscribers. By doing so, they improve customer experience, reduce churn and
increase roaming revenues. Traditional inter-standard roaming solutions provide seamless
connectivity for post-paid subscribers only. MACH’s ISR managed service solution is unique in
the industry as it is able to provide for both pre-paid and post-paid subscribers. It offers an
efficient and value added approach for CDMA operators, unlocking new revenue opportunities,
and providing service continuity for their customers whilst travelling.
“One of Visafone’s stated goals is to be the pre-eminent and most customer focused telecom
operator in Nigeria. Part of the plan to achieve this is the emphasis on seamless and efficient
services that will ensure the best clarity and the widest coverage. By signing up to MACH’s ISR
solution, we are one step closer to achieving this aim. MACH’s fully managed, outsourced
solution as it provides for both pre-paid and post-paid subscribers, it is quick and easy to
implement, and it has been adopted by major mobile operators around the world.”
offer seamless roaming - with one device, one number and one bill – to its mostly pre-paid
CDMA customers in a very short space of time. customers will have full access to all their usual
services while roaming, regardless of whether they are on pre-paid or post-paid packages.”
MACH ISR is a fully hosted inter-standard roaming solution in which a single agreement
provides full featured voice and data roaming in more than 200 countries with minimal capital
investment and operational expenditure. Based on Accuris Networks’ inter-working platform for
voice and SMS, and MACH’s own patented Mobile IP Proxy for seamless data roaming, it is
delivered through a proven managed services infrastructure. It offers turnkey interoperability
between wireless technologies, including CDMA, 1X/EVDO, GSM, GPRS/UMTS, Wi-Fi,
WiMAX and, soon, LTE. The solution, which can be implemented using existing connections,
offers end users all of the services that are available on their home network, even when they are
travelling. With end-to-end, one number interoperability, mobile operators can provide complete
voice and messaging services without the time and investment required to build their own
platform.
How handoffs could be performed between the two Technologies.
R-UIM identity module. international roaming between CDMA and GSM networks, via a unique
smart card. R-UIM (Removable User Identity Module) standard for CDMA phones, which allows
CDMA subscribers to place the card into the SIM slot of a GSM phone when travelling and obtain
GSM network coverage.
The RoamFree™ Gateway is designed to enable seamless roaming between GSM networks and
IS-41 based CDMA networks
that handoffs could be performed between

the two.)
to forum · permalink · 2001-09-20 15:26:32 ·
Top of Form
reply
Bottom of Form
Anon
This is the world's first commercial

application for the R-UIM. Schlumberger
produced the new card for KTF to very tight
timescales, to ensure that the new service
would be available to Korean visitors to the
Sydney Olympic games.
The R-UIM specification provides
subscribers with an internationally
compatible and removable identity module
for both the CDMA and GSM networks. As
well as making it possible to enjoy GSM
network coverage throughout the world,
the R-UIM provides a flexible platform for
the development and deployment of value-
added services (VAS) for KTF's subscribers.
Value added services can now be developed
with the existing GSM SIM Toolkit (STK).
Thanks to compatibility with the Java Card
standard, it is also possible to re-load and
change applets on the Simera Airflex in the
field.
This approach greatly simplifies VAS
development compared with producing
dedicated application firmware for the
embedded processor inside the phone.
Moreover, the new card opens up a
migration path for KTF to the use of
identity modules in the 3G evolution for
CDMA terminals, providing the benefits of
smart card-based security for mobile
commerce.
KTF's CDMA subscribers travelling to
countries within the global GSM footprint
now simply take their R-UIM module and
plug it into a GSM handset to gain instant
access to the new network. KTF is offering
rental handsets that are available at the
company's lounge in Kimpo International
Airport.
"Simera Airflex cards give us a powerful
platform for evolving our mobile
communications brand", says Mr Pyo Hyun
Myung, Vice President of Korea Telecom
Freetel. "Right now, they help us to
introduce truly international roaming
services. In the future, they will give us an
additional flexible route for delivering
value-added services, which can be
personalised to suit individual subscribers."
What I would like to invetigate it the

possibility for GSM subscribers to go
roaming in CDMA networks.
Top of Form
reply
Bottom of Form
After reading that, it's not simply roaming

from one type of network into the other,
it's that someone made a phone/card
system for CDMA, where you take the card,
get a separate GSM phone, and use the
mballard card in the GSM phone for roaming on a
Premium,ExMod 1999-03 GSM network. So if you own all your own
join:1999-11-15 equipment for roaming/home use, you end
up with two phones and one card, on one
Los Angeles, CA
account, with one phone able to be used at
a time.
It also sounds like that a GSM provider

could enable the same service, but they
would have to choose so, and again it
would still require two phones.
Top of Form
reply
Bottom of Form
reply to Anon
The CDMA providers in the states will
provide users with a GSM SIM card, and
will be glad to sell a phone. Then when
people call your cell phone number, it gets
dobie0 routed to a gsm phone. This is pretty much
the same thing. The phones are still
join:2000-06-22 different.
Englewood, CO
Top of Form
reply
Bottom of Form
reply to Anon
Hi !
Mork6
I belive that CDMA is involved when they
join:2001-09-14
move GSM into so-called 3G (3
Norway
Generation). I's this the stuff you look for ?
Try the headlines: "Ericsson - The TDMA

Operator path to GSM" and "3GSM - The
Future of Communications" on this link
»www.gsmworld.com/technology/index.ht
ml
Top of Form
reply
Bottom of Form
reply to Anon
There are still 2 3g standards. One is
CDMA2000 (the current upgrade path for
CDMA providers like Sprint), and the other
is WCDMA. WCDMA is the upgrade path
dobie0 that most non CDMA operators are taking.
join:2000-06-22
Englewood, CO
International Roaming Using CDMA

Courtesy of: CNP-Wireless
International roaming allows users of CDMA wireless phones to travel to a foreign
country and enjoy many of the same services there that they can at home.
While there are still many challenges to obtain fully seamless international roaming,
CDMA subscribers can enjoy some of the finest international roaming available. And,
it will only get better in the future.
What is Roaming?
Roaming is the ability of a system to provide the same services to customers

('roamers') from other systems, even from other countries. This involves the
resolution of a number of business and technical challenges. Some of the major
services that can be provided are:
○ The ability to make a call ('Mobile Origination'). While this sounds simple, this
fundamental service requires a wireless system to verify that the customer's
subscription is valid, that the phone is not stolen, that it is not illegally
emulating another phone, and to ensure that the type of call being made is
not restricted.
○ The ability to receive a call ('Mobile Termination' or 'Call Delivery'). This is
technically much more complex, and requires the roamer's phone to first
register in the system in which it wishes to receive calls. This is done
automatically, and causes an exchange of information over the SS7/ANSI-41
network to the home system. When a call comes in to the home system it
already knows where the mobile is, and can route a call to it.
○ Inter-system handoff. This allows a mobile call to continue uninterrupted when
the mobile crosses the boundary between two cellular systems.
○ Short Message Service. When an SMS message comes in to the home system
it will be forwarded to the mobile, wherever it is.
○ Calling Name/Number Presentation. When receiving a call, the number of the
caller or even their name will be displayed on their handset.
○ International dialing. Some phones provide a "+" key or equivalent menu
option that makes it easy to place an international call without knowing the
local access number.
What Makes CDMA Roaming Work?
A standard known as ANSI-41 (aka TIA/EIA-41 or IS-41) provides roaming services for
AMPS and CDMA systems. It is a good example of a Mobile Application Protocol
(MAP), which is a high-level protocol that allows major elements of the wireless
network to communicate. The major network elements are:
○ Base Station. Contains the radio equipment for one or more cells.
○ MSC (Mobile Switching Center). Connects mobiles to other mobiles or to
phones in the telephone network or on other cellular systems.
○ HLR (Home Location Register). Contains information about a subscription,
including the types of services which are to be provided.
○ AC (Authentication Center). Contains cryptographic information that allows
the network to determine that a mobile is valid. Usually contained within an
HLR.
○ MC (Message Center). Stores and forwards short messages.
Some of the more important roaming capabilities that are provided by ANSI-41 are:
○ Authentication, Registration and Location Management

○ Call Delivery
○ Short Message Service (SMS)
○ Mobile Originations
Internationalization of ANSI-41
ANSI-41 is often criticized for its international roaming capabilities. This was a valid
criticism in the mid-1990's, but since then ANSI-41 has been upgraded with
international roaming capabilities that make it fully equivalent with GSM. Some of the
capabilities that have been added are:
○ Support for international digit strings in IS-41 Revision C (1996)

○ Support for International Mobile Subscription Identifiers (IMSI) in TIA/EIA/IS-
751 (1998).
○ Assignment of International Roaming MIN's by IFAST (1998).
○ Support for SS7 global titles in TIA/EIA/IS-807 (1999).
○ Enhancements for calling number identification, '+' code dialing and callback
(2001).
Although the roaming capabilities of ANSI-41 and GSM are largely comparable, there
are some ways in which ANSI-41 is superior:
○ Call forward no-answer/busy can be handled more efficiently by ANSI-41
systems. Calls are forwarded from the home system, with the connection to
the serving system being released. GSM systems forward from the serving
system, often resulting in calls looping from home system to serving system
and back to the home system.
○ Inter-system handoff is supported more efficiently in ANSI-41. It is performed
directly by neighboring MSC's, without requiring a special gateway MSC, as in
GSM.
○ ANSI-41 supports mobiles that can operate in multiple technologies (e.g.
analog and CDMA).
○ Authentication of mobiles can be done locally. In GSM authentication
calculations must be performed by the AC, requiring one transfer of
authentication data for every call. In practice, GSM carriers often avoid this,
which reduces the level of security that their systems provide.
What is SS7?
Telephony networks contain many highly computerized elements, that need to

communicate by sending messages. This is known as signaling. SS7 (Signaling
System Number 7) is a digital signaling system that connects the telephony network
together. It has largely replaced older, tone-based signaling systems, particularly in
the core network. SS7 is ideally suited for transporting ANSI-41 messages. It has the
ability to transport messages between any two points on the network (e.g. between
an MSC and an HLR) quickly, reliably and because it is purely packet oriented,
without setup delay. SS7 messages are addressed either by point-code (a unique
numeric address assigned to every telephony network) or by global title (use of a
telephony-oriented address, such as a calling card number, IMSI or phone number).
The point-code corresponds to the IP address on the internet (it even has a
subsystem number that corresponds to the port number used by TCP and other
higher-level IP protocols) and the global title corresponds to a domain name.
Most ANSI-41 networks either use the ANSI SS7 network, or have a method of directly
addressing ANSI point codes. Use of global titles is a future development.
Roaming with GSM
The other major network standard in the world is the GSM MAP, that supports the
GSM radio interface. GSM roaming is usually done with a SIM, a Subscriber Identity
Module, also known as UIM or 'Smart Card'. Originally, the SIM was credit-card sized,
but now it is just a computer chip packaged so that it can be safely removed.
Roaming with a SIM requires removing it from your phone at home and then placing
it in a rented phone at your destination. Because your subscription identity (IMSI) is
on the SIM, billing will be to the same account. Taking your phone would seem to be
more convenient, but is not possible if the destination country uses different
frequencies, or even requires different plugs or voltages for your charger.
Many CDMA companies are implementing SIM-roaming with GSM systems, or even
putting a SIM in their own phones. If a CDMA phone does not support a SIM, the
CDMA carrier can still provide them to their customers for use when they roam in
countries that only support GSM systems.
Future Challenges
No system is perfect, and although ANSI-41 international roaming provides a high

level of service, there are still has some improvements that should be made. Most of
these have already been incorporated in standards, but still remain to be
implemented by carriers. Some of the major future challenges for this network are:
○ Transition to global title. This will simplify routing between network elements
in different countries. Current international roaming systems work well, but
cannot use standard international SS7 signaling gateways.
○ International TLDN (Temporary Local Directory Number). This is very
important to routing and should be an internationally formatted phone
number, as allowed by IS-41-C and TIA/EIA-41-D. The use of national numbers
requires some complex digit translations.
○ Transition to IMSI (International Mobile Station Identity). The use of IMSI will
allow each country to assign identifiers to its mobile phones independently.
The use of the IRM (International Roaming MIN) requires coordination of each
block of one million mobile identifiers through the International Forum on
ANSI-41 Standards Technology (IFAST) organization.
○ Roaming with GSM. Several groups are working at improving the services that
can be provided to subscribers who roam from a CDMA area, including the
GSM Global Roaming Forum (GGRF) G-95 group. This involves interworking of
signaling (ANSI-41 and GSM MAP's) as well as billing issues and many business
and implementation issues.
How did ANSI-41 Evolve?
ANSI-41 has grown incrementally through a number of major revisions. Between each
revision a number of application-specific interim standards (IS's) have been
produced. The major revisions are:
○ 1983 - AMPS analog cellular started commercial service as standalone

systems in Chicago and Washington/Baltimore. It quickly spread throughout
the US, into Canada and into other countries. This provided a single standard
cellular protocol while Europe had a large number of incompatible standards,
each available in only a handful of countries.
○ 1988 - IS-41 Rev. 0 provided inter-system handoff and subscriber validation
capabilities. These capabilities were not, in the grand scheme of things, all
that important. What was important was that inter-system operations were a
reality. They worked and worked well. This standard was published in 1988
and the first field trials were in 1989.
○ 1991 - IS-41 Rev. A added true networking, through the use of SS7 protocols,
and the all-important capabilities of location management (letting the HLR
know where a mobile is), call delivery, subscriber validation and profile
transfer. It was published in January, 1991.
○ 1991 - IS-41 Rev. B was an incremental release over Revision A. The most
important advance was to add forward/backward compatibility capabilities to
ensure that a mixture of revision levels could co-exist. This was published in
December, 1991 and is still in widespread use in systems that just did basic
roaming capabilities - making and receiving calls.
○ 1993 - The first CDMA digital standard (IS-95 Revision 0) was published. IS-41
was quickly adapted to provide support for CDMA systems. Although there
were now two different digital systems in North America (CDMA and TDMA),
nationwide coverage was ensured by dual-mode analog/digital phones, with
seamless roaming provided by IS-41.
○ 1996 - IS-41 Rev. C was a major advance over previous revisions, including
the ability to incorporate 'Intelligent Network'-like capabilities. This allows the
development of services such as PBX-dialing extended worldwide. By querying
the HLR, an MSC anywhere can translate an office extension into the real
telephone number on a subscriber-by-subscriber basis. Itwas published in
1996. This version incorporated further support for CDMA digital systems.
○ 1997 - TIA/EIA-41 Rev. D was the first version to be approved by ANSI. It
included only incremental improvements over IS-41-C. It was published in
1997.
○ 2002 - TIA/EIA-41 Rev. E is nearing completion. Several parts of this very
large standard are already being balloted. It further extends the international
capabilities of ANSI-41. It includes many enhancements, but notably
incorporates IS-751 (IMSI) and IS-807 (global title recommendations), as well
as the Wireless Intelligent Network (WIN), Calling Name presentation, data
services, over-the-air programming and other capabilities that are currently
available as separate IS documents
○ 2002/3 - TIA/EIA-41 Rev. F is being planned. It is likely that this will have
enhancements to support better interworking with GSM, packet data support
and location-based services.
About the Author
David Crowe is the editor of Cellular Networking Perspectives and Wireless Security
Perspectives, monthly technical bulletins available by subscription. He is a well known
wireless standards consultant, and is a columnist for the Canadian Wireless
Telecommunications Association's magazine Wireless Telecom.
CDMA Authentication commands description

Run CAVE
Generate Key/VPM
Base Station Challenge
Update SSD
Confirm SSD
Store ESN
Below in this article we will go through CDMA CAVE atuhentication.
Initial card values are as follows (some of them will change during authentication
process):
Start Values
IMSI 255074400077067
UIMID A1A2A3A4
SSD A 0000000000000000
SSD B 0000000000000000
A-KEY 0102030405060708
Run CAVE
This command is used to produce an Authentication response. The GET RESPONSE

command shall be used to get the response data. If the SAVE_REGISTER flag is set, some
values of the cave algorithm are held in the card to be used by the GENERATE KEY VPM
command. For the calculation of the AUTHR/AUTHU value, the card uses the
"Auth_Signature" procedure:
Syntax
CLA INS P1 P2 Lc
A0 88 00 00 11
Data
Bytes Description Length
RANDTYPE
1 1
(RAND/RANDU)
2-5 RAND or RANDU 4
6 Digits Length 1
7-9 Digits 3
10 Process control 1
11-17 ESN (of the ME) 7
Response

The 18-bit
authentication
1-3 signature 3
(AUTHR/AUTHU)
value
Example
.DEFINE %RAND32 00000064

.DEFINE %DIG_LEN 00
.DEFINE %DIGITS 000000
.DEFINE %ESN 000000A1A2A3A4
.DEFINE %AUTH 006422
; .DEFINE %PIN1 30303030 FFFFFFFF
.POWER_ON
; A020 0001 08 %PIN1 (9000) ; verify PIN1
A0A4 0000 02 3F00 (9FXX) ; select MF

Command A0 A4 00 00 02
Data In 3F 00
Data Out
Status 9F 22
A0A4 0000 02 7F25 (9FXX) ; select DF_CDMA

Command A0 A4 00 00 02
Data In 7F 25
Data Out
Status 9F 22
A088 0000 11 00 %RAND32 %DIG_LEN %DIGITS 00 %ESN (9F03) ; run CAVE

Command A0 88 00 00 11
Data In 00 00 00 00 64 00 00 00 00 00 00 00 00 A1 A2 A3
A4
Data Out
Status 9F 03
A0C0 0000 03 [%AUTH] (9000)

Command A0 C0 00 00 03
Data In
Data Out 00 64 22
Status 90 00
;; it is now time for 'Generate Key/VPM' or for 'Base Station

Challenge'
Generate Key/VPM
This command generates "key bits" and a "VPM key bits". Part of the VPM key bit is given as
response to the ME.
Syntax
CLA INS P1 P2 Lc
A0 8E 00 00 02
Data
First octet of VPM to

1 1
be output
Last octet of VPM to

2 1
be output
Response
1-8 Key 8
9-* VPM Key part *
(*) the number of VPM bytes varies as specified by command parameter.
Example
;; run Cave just executed
.DEFINE %KEY 933A0DC379956849

.DEFINE %VPM C2264FC8D8D0
A08E 0000 02 3B40 (9F0E) ; Generate Key/VPM

Command A0 8E 00 00 02
Data In 3B 40
Data Out
Status 9F 0E
A0C0 0000 0E [%KEY %VPM] (9000) ; 8 bytes %KEY, 6 bytes %VPM

Command A0 C0 00 00 0E
Data In
Data Out 93 3A 0D C3 79 95 68 49 C2 26 4F C8 D8 D0
Status 90 00
.POWER_OFF
Base Station Challenge
This command is used to generate the RANDBS random value.

The random value is held until a successful UPDATE SSD, otherwise it is lost.
The GET RESPONSE command shall be used to get the response data of this command.
Syntax
CLA INS P1 P2 Lc
A0 8A 00 00 04
Data
1-4 RANDseed 4
Response
1-4 RANDBS 4
Example
;; run Cave just executed
A08A 0000 04 11223344 (9F04) ; Base Station Challenge

Command A0 8A 00 00 04
Data In 11 22 33 44
Data Out
Status 9F 04
A0C0 0000 04 (9000)

Command A0 C0 00 00 04
Data In
Data Out 33 2F F9 DF
Status 90 00
;; and now - time for 'Update SSD', 'Confirm SSD'
Update SSD
This command performs the calculation of a new Shared Secret Data (AUTHBS, SSD_A_NEW
and SSD_B_NEW). These values are held until a successful CONFIRM SSD, otherwise they are
lost. The card uses either ESN or UIMID (stored in EFUIMID) depending on the value stored in
EF R-UIMID:
Syntax
CLA INS P1 P2 Lc
A0 84 00 00 0F
Data
1-7 RANDSSD 7
8 Process Control 1
9-15 ESN 7
Response: 9000
Example
;; Base Station Challenge just executed
.DEFINE %RANDBS R
.DEFINE %AUTH 00750D
.DEFINE %RANDSSD F24F2B0A9983D3
A0 84 00 00 0F %RANDSSD 00 %ESN (9000) ; Update SSD

Command A0 84 00 00 0F
Data In F2 4F 2B 0A 99 83 D3 00 00 00 00 A1 A2 A3 A4
Data Out
Status 90 00
;; and, finally, Confirm SSD
Confirm SSD
This command is used to validate the new Shared Secret Data (SSD_A_NEW and
SSD_B_NEW) by comparing the AUTHBS value calculated by the UPDATE SSD command with
the AUTHBS received from the system. If successful, SSD_A and SSD_B values are updated
in EF SSD.
Example
;; Update SSD just executed
A0 82 00 00 03 %AUTH (9000) ; Confirm SSD

Command A0 82 00 00 03
Data In 00 75 0D
Data Out
Status 90 00
.POWER_OFF
Store ESN
This command is used to store the ESN of the ME into the EF ESN_ME file and return a flag
indicating if ESN_ME is different from the previous ESN which was stored in EFESN_ME. It
modifies the value stored in the EF R-UIMID. No modification are involved if the file is
invalidated. EF R-UIMID is always 0x00 (Usage Indicator Preference is RFU).
Syntax
CLA INS P1 P2 Lc
A0 DE 00 00 08
Data
ESN_ME Length
1 and ME Usage 1
Indicator Preference
2 - (X+1) ESN_ME X
(X+2) - 8 Padding bytes 8-(X+1)
Response
Change Flag and

1 Usage Indicator 1
Confirmation
EUIMID Migration: How To

Overview
• Existing hardware identifiers, ESN (Electronic Serial Number) and UIMID (User Identity
Module Identifier), are almost completely depleted
• A replacement mobile device hardware identifier is available – MEID (Mobile
Equipment Identifier)
• A replacement RUIM (Removable User Identification Module) identifier is available –
EUIMID (Expanded UIMID)
• Networks need to be upgraded to support these new identifiers
• New devices, such as phones and RUIMs must be capable of supporting these new
identifiers
• Operators must provision phones, RUIMs, back office systems and network databases
with the new identifiers
New Identifier: EUIMID
• EUIMID – New identifier designed to address the exhaust of the UIMID resource
• Two different formats of EUIMID
○ Short Form EUIMID (SF_EUIMID)
– Share the same address space as the MEID. RUIM card manufacturers are
allocated MEID manufacturer codes in the same manner, and from the same
range, as handset manufacturers
○ Long Form EUIMID (LF_EUIMID)
– This is equal to the value of the ICCID of the card
SF_EUIMID: Short Form EUIMID
SF_EUIMID – 56 bits identifier based on the MEID format
When the SF_EUIMID is used, bit 2 of the Usage Indicator describes whether the
SF_EUIMID of the card replaces the MEID of the device wherever it is used
It is recommended that RUIMs be provisioned to provide not only a pUIMID but also
the SF_EUIMID to override the phone’s MEID. This will, however, not allow EIR
(Equipment Identity Register) capabilities
Advantages Disadvantages
○ Familiarity ○ Card requirement

- SF_EUIMID represents a - Cards which do not support
minimum change from SF_EUIMID will not be able to
current operation, where the override the device MEID
UIMID overrides the device
ESN
○ Stolen Phone
- Device MEID is unlikely to be
○ Retrievable transmitted to the network, it
- Available from MS in either is not possible to take
the Status Response advantage of the new
Message, or the Extended X.S0008 CheckMEID
Protocol Capability Response operation to track lost/stolen
Message (both methods phones through
require the device itself to communications with an EIR
have an MEID)
○ Common Identifier
- Both the card and device
can be managed by a
commonly formatted and
administered 56 bit identifier
LF_EUIMID: Long Form EUIMID
LF_EUIMID – 72 bits identifier based on the ICCID format
The ICCID already exists on all RUIMs for all technologies
Advantages Disadvantages
○ Simplicity
○ Not retrievable
- ICCID already existed in the
- This can have impact on
card
OTASP session, where there
- No new storage
may be a need to receive a
requirements in terms of files
unique card identifier in order
on the RUIM to support
to access card specific
LF_EUIMID
information
- Administration procedures
- New standards is currently
are already established for
in progress to retrieve the
ICCID
LF_EUIMID over the air
○ Backward compatibility
○ Long Identifier
- As no new data structure,
- 72 bit ICCID, if used to track
current cards (that may not
the card, will require separate
support C.S0023-C) can
handling from the device
simply have pUIMID
MEIDs
programmed into the
EFRUIMID file on the cards ○ Manufacturer Code
○ EIR Support Limitations
- Countries with 3 digit
- Device MEID remains
telephony country codes are
available to the network, use
restricted to only 100 unique
of LF_EUIMID allows the
manufacturer codes. 2 digits –
implementation of an
1000, 1 digit – 10,000
Equipment Identity Register
to track/block lost/stolen
device
pUIMID (Pseudo-UIMID)
pUIMID – A 32 bits identifier derived from EUIMID (either Short or Long Form), used in
place of the UIMID
pUIMID consists of an 8 bit reserved manufacturer’s code (Hex 80) and a 24 bit
hashed EUIMID
Derivation of the pUIMID
Provide 16,777,216 pUIMID from this method
The pUIMID is derived from the EUIMID in the same manner as the pESN is derived
from the MEID (therefore shares the same space as the pESN)
Authentication
Authentication is performed on the basis of the pUIMID.
The SF_EUIMID, if included, will not be used for authentication calculations.
A-KEY checksum calculations should use the pUIMID as an input for verification.
What is USSD
Source: TruTeq University
USSD (Unstructured Supplementary Service Data) is a unique service for
mobile networks comprised of two-directional session-based exchange of
unstructured data in GSM mobile networks. USSD technology is defined in GSM
standard 02.90 (USSD Stage 1) and 03.90 (USSD Stage 2). The USSD service
supports high-speed real-time information exchange between subscriber and service
application. Originally, Supplementary Services Data was designed for use where
supplementary services such as call forwarding or multiparty calls were needed. For
instance, a call-forwarding option is needed for all incoming calls. Such service can
be activated by this command: **21*#. There is a whole set of preset commands for
call-forwarding and for other purposes that work on all GSM telephones.
Combinations that have not been reserved can be used for other services.
The USSD bearer is accessed by calling a number that starts with an asterisk (star) or
gate (hash) characters ("*" or "#") and then a combination of numerals, asterisks and
finally a gate or hash character "#". A handset recognizes such numbers and useë
the USSD bearer instead of a voice call. Instead of calling another subscriber or a
service, the handset communicates with the USSD infrastructure. The subscriber
does not have to get special software for the handset or special SIM cards to be able
to use USSD.
Unstructured Supplementary Service Data is a capability of all GSM phones. It is

generally associated with real-time phone services. There is no store-and-forward
functionality typical of 'normal' short messages (in other words, an SMSC is not used
in processing). Response times for interactive USSD based services are generally
quicker than those used for SMS. After entering a USSD code on your GSM handset,
reply from an GSM operator is displayed within a few seconds. USSD Phase 1 only
supports mobile initiated operation (pull operation). USSD Phase 2 specified supports
network initiated operation (pull and push operations). Therefore, Phase 2 provides
for interactive dialogues.
GSM handsets supported USSD from the first days of GSM. Phase 2 has been
supported for years and over 99% of handsets currently in use can use USSD
sessions. Our technical support department agrees that almost all telephones
support USSD. There are, however, exceptions: for instance, old Siemens phones
display USSD-messages as a moving line that severely limits interaction with the
USSD menu (and if the subscriber does not know she will not understand what to do).
Most handsets also support NI USSD (network initiated USSD), also called "USSD
Push". With NI USSD, the network can push information to the subscriber's handset.
Where is USSD push used? USSD push does not manifest itself (the phone will not
ring, make sounds or vibrate) so that in order to get a message a user has to look at
the display at the very moment USSD push has come. Therefore, USSD push is used
in mixed services: a user sends an SMS or makes a call and in return gets a USSD
menu.
Another important fact about USSD is that messages from handsets to the numbers
100-149 always route to the home network. This means that if you are roaming in
another network, dialing a USSD number from 100 to 149 on your phone will always
route to the application on your home network. If you are used to accessing a
particular service in your home network, then you will also be able to access it from
another country. USSD codes other than within 100 and 150 are routed at discretion
of a guest network.
USSD compared to SMS
USSD differs from the other short message bearer, SMS, in a number of significant
ways.
It is not a store-and-forward bearer like SMS, but a transparent session-based bearer

ideal for transacting. Information is delivered and responses obtained in real-time.
Simply put, USSD is similar to speaking to someone on a phone as SMS is sending a
letter.
USSD is also not a point-to-point bearer such as SMS. One subscriber cannot send
another text using USSD unless there is a special network application offering such
an application.
One can send 182 characters using USSD, but SMS only allows for 140 x 8-bit, or 160
x 7-bit characters.
Like SMS, USSD uses the GSM control channels for data transfer. SMS and USSD both
use the SDCCH (stand-alone dedicated control channel) when the handset is not in a
call. When the handset is busy with a call, USSD will use the FACCH (fast associated
control channel) with a significant improvement in transfer speed (1000 bits/second).
This use of the SDCCH channel leads to the one drawback with USSD. Because the
SDCCH channel is also used by GSM for call-setup, many open USSD sessions may
limit new call-setups in congested networks. In practise, this doesn't happen often
and GSM Network Operatorss can upgrade the radio resources in highly congested
cells to prevent this from happening.
Unlike SMS, the subscriber does not have to create a message. The USSD call string
can even be stored in the phone book under a name. Some applications will also
allow menu shortcuts where the subscriber can add the menu item selection after an
"*" seperation character. In our earlier example, the user might create a phonebook
entry call "Pretoria Weather" with the number *150*1234*12*3#. The additional "*3"
denotes menu selection 3.
On a GSM network level, the USSD Gateway is defined as a gsmSCF (GSM Service
Control Function), whereas an SMSC is defined as another HLR (Home Location
Register).
Routing and Rating

Historically, USSD Gateways have extremely limited routing and billing functionality
and are limited to signalling. "Routing and Rating" platforms need to be added to the
USSD Gateway to deconcentrate the connectivity to hundreds of application and
content providers.
When subscribers dial the published USSD strings, the Routing and Rating platform
routes the sessions to the correct application via an interface such as XML over HTP,
SMPP3.4, or SSMI.
The application must accept the session and serve the appropriate menu to the
subscriber. The Routing and Rating platform maintains the session and will generate
billing tickets for the billing system for post-paid subscribers and reserve funds and
debit prepaid accounts. Depending on the sophistication of the Routing and Rating
platform, the subscriber can be billed based on a once-off cost, the number of menu
transactions, or the time spent browsing the menus.
Due to the fact that an open USSD session takes up network resources, the time-
based model is usually deployed and subscribers are encouraged to browse the
menus quickly. For roaming subscribers, the service code is always sent back to the
home network.
Applications
The menus are served by applications. This may not be at the GSM network operator,
but at a content provider connected to the USSD infrastructure. Applications or
content can therefore be served from:
• Standard supplementary services

• GSM Network Operators value-added services
• Third party content and application providers
Standard supplementary services
The supplementary services are the standard offerings as described by the ETSI
standards. These services are accessed by the handset without the need for the
subscriber to know the codes. When the subscriber selects an action on the handset's
internal menu, the handset will communicate with the GSM.
Even though the handset hides the complexities in accessing the supplementary
services, it is still possible to access them directly using USSD.
One example of such a service is call forwarding. The service codes associated with
call forwarding service, are 004, 21, 61, 62 and 67:
All
Service All Calls If No Reply If Unavailable If Busy Conditional
Diverts
**21*[dest **61*[dest **62*[dest **67*[dest **004*[dest

Forwarding
number]# number]# number]# number]# number]#
Activate *21# *61# *62# *67# *004#
Deactivate #21# #61# #62# #67# #004#
Delete ##21# ##61# ##62# ##67# ##004#
Check Status *#21# *#61# *#62# *#67# *#004#
•
These service codes are fixed and all GSM handsets will be able to use them to
provision the relevant supplementary services.
GSM Network Operator services
These services include value-adding services such as airtime top-up, airtime transfer,
call-back services and prepaid roaming. The Network Operator service codes depend
on the routing inside the GSM Network Operators and may be anything in the range
1XY, where X = 1,2,3,4 and Y=1,2,3,4,5,6,7,8,9
As an example, a call-back service to alert subscriber 0855551234 that another

subscriber want to be called, might be *120*0855551234#
The menu items could also be embedded in the dial string, so that an airtime transfer
string might look like: *123*1234*2*0855551234# where "1234" is the pin number,
"2" is the menu item for airtime transfer, and "0855551234" is the target number.
Third Party Content and Services - application examples
By connecting to the routing and rating platform on a USSD Gateway, third parties
can offer services to all the subscribers on a GSM network.
Some examples of USSD applications include:

• Information services such as weather forecasts, traffic, news, geo-location services,
directory services etc.
• Entertainment services such as games, sports etc.
• Lifestyle services such as dating, horoscopes etc.
• Financial services such as airtime top-up, banking etc.
R-UIM Tool
Cave: Tool verifies Cave authentication, Update SSD, Confirm SSD commands
CDMA2000: Tool verifies Compute IP 3GPD commands: HRPD, Simple IP, Mobile
IP authentication commands
Scan R-UIM: Performs R-UIM scan to build card file tree structure, and 3GPP2
standard compliance
CDMA ST: Check the integrity of card and CDMA service table
PRL: Update PRL, Extended PRL on the card
Others... Additional features like to calculate CDMA specific parameters (IMSI_M,

A-KEY crc, 3GPD Shared Secrets, etc)
USIM Tool: The tool now has many useful functions to work with (U)SIM cards
1.5.16.185 Current version released 08-FEB-2011.
Professional CDMA, GSM, UMTS support and consulting
Download View Price Buy License Snapshot Buy with
WebMoney
xOTA: Over-The-Air Tools and Services
xOTA: PC software to create and test GSM 03.48 Envelopecard functionality
Platform: We develope and run OTA capmaign according to your requiremets
Flexibility: GSM 03.48 standard, proprietary solution, and CDMA standard

supported
Pilot: We are always open to perform a pilot, fast and reliable
Cost Effective: Rent or Buy? You can choose any option to satisfy your needs the
best way
Network Access: xOTA tool supports network card readers over TCP/IP
Questions? Contact us!
Download More info

APDU Logger and Analyzer
Visualization: It is an analysis tool that visualises the data exchanges between a

Smart Card and Smart Card Reader (i.e. mobile handset, POS terminal, etc), with a
very deep level of interpretation
Debugging: The tool helps in debugging and analysing Smart Card

communications
1.0.5.42 Current version released 29-NOV-2010.
00112 Current firmware build
Try and Buy: Contact us and we discuss possibility of sending you the hardware
to try it.
Download Download FirmWare Manual Green Spy Flyer
Snapshot
2G + 3G/4G Auhtentication
All Standard Algos: Powerful COMP128-1, COMP128-2, COMP128-3 and

MILENAGE calculation
Xor: Test AKA (aka XOR) algorithm is also supported
Commands: Tool executes and verifies 2G and 3G Authentication commands,

including Run GSM Algo, 2G Virtual Context, and 3G Synchronisation Failure
APDU Scripts: Detailed Authentication APDU scripts available for exploration
Easy to use: Two-click card Authentication
Standard: 3GPP Specifications compliant
4G: KASME derivation is now supported
Download Demo View Price Buy Full Version Buy with
WebMoney
Cipher Box
DES: DES and Triple DES (ECB, CBC) encryption and decryption
AES: AES (Rijndael) 128-bit key encryption and decryption
Hash: MD5 and SHA1 hash calculation
RSA: RSA key generation, Encryption, Decryption, Signing and Sign Verification
Others: Simple but yet powerfull ASCII expand/collapse, EMV MAC, XOR
calculations
GSM: 7-bit GSM Packing and Unpaking functionality
HMAC: Keyed hashes (MD5, SHA-1, SHA256) have been implemented
Download
cap2java: javacard decompiler
Decompiler: Reconstructs .java source code from .cap file
Flexibility: Different levels of source code optimization
Smart: Intellectual analisys for naming of valiables, arrays and functions
Javacard 2.1.1: Javacard Virtual Machine v. 2.1.1 .cap file format supported
Javacard 2.2: Will be available soon
Final java: .java source code is ready to be compiled again
Coming soon: cap2java will be available in November 2010
View Price More info
APDU Script Assistant & Network Reader
Network Access: Network access to any PC/SC compliant smart card reader over
TCP/IP stack
Script Assistant: Powerfull APDU script Assistant to edit, manage and run APDU
scripts on local or network reader
At-Hand-Commands: Tool stores most frequently used script in database to be

always ready executed (like Select MF - Get Response, or Change PIN1)
Download
Roaming
Wireless customers have become accustomed to staying connected anywhere they
go, including when traveling internationally. The CDMA2000 community is rapidly
expanding its roaming capabilities and services to meet customers’ needs.
CDMA2000 operators offer roaming on all continents and are leading the way in
providing roaming services across different wireless standards.
What is Roaming?
Roaming is the ability to use a wireless device outside the home service area,
including in foreign countries. Enabling roaming involves providing back-end
services that recognize authorized “roamers” and allow them to use their home
network services while on the visited network. Truly universal roaming requires
handsets capable of multiple technologies and/or are designed to operate in
different bands of the radio spectrum. With the growing adoption of data,
especially Third Generation (3G) data services, providing seamless connectivity to
home content while roaming is becoming increasingly important.
Roaming applies to domestic and international markets.
• Domestic roaming is where customers roam from their home network to

other networks within the same country.
• International roaming allows users of wireless devices to travel to a foreign
country and enjoy many of the same services they have in their home
service area.
International Roaming on CDMA
CDMA2000 operators offer international roaming to their customers in major travel

destinations either through agreements with other CDMA (cdmaOneTM and
CDMA2000) operators, WCDMA or GSM carriers. CDMA2000 operators have taken
the lead in offering true global roaming by introducing multi-mode, multi-band
phones that work on GSM and CDMA networks.
With nearly 300 networks in over 100 countries, CDMA has the presence in key
global markets to support international roaming. CDMA to CDMA roaming is
available in many countries across North America, Latin America, the Caribbean,
Asia and the Middle East. Many CDMA2000 operators have also established
agreements with GSM operators, enabling them to offer international roaming in
GSM markets. With the introduction of WorldModeTM multi-mode, multi-band
phones, CDMA2000 operators can now provide transparent roaming across
CDMA2000 and GSM networks with a single device.
The CDG has established the International Roaming Team (IRT) to lead the
industry’s effort in providing subscribers with the ability to enjoy the benefits of
CDMA service globally. The charter of the team is to develop tools and recommend
best practices to assist operators in the deployment, maintenance and marketing of
international roaming services.
Abstract:
This invention relates to a method and apparatus to provide Short Message Services (SMS)
provisioning when different SS7 signaling networks are in use. The method can be used when
mobile units are roaming in a SS7 network different than the MS home network, and when the
MS is roaming inside or outside of its SS7 type of network.The HLR, which includes a memory
for storing a database of point code schemes and country codes, also stores all location data for
the MSC including the SMS Address and the MSCIN. The HLR analyzes the SMS Address to
determine the nationality of the MSC. The HLR compares the MSC's REGNOT point code and
MSCIN country code with the country code in the MC's SMSREQ calling party address to
determine whether the MC and MSC point codes are the same. If they are the same, the smsreq is
populated with the common point code from the SMS Address. If not the same, the smsreq is
populated with the MSCIN parameter.
Claims:
• 1. A method in a Home Location Register for Short Message Services (SMS) provisioning in a
system including a Message Center (MC), and a Mobile Switching Center-Visitor Location
Register (MSC-VLR), the method comprising the steps of: receiving a Registration Notification
(REGNOT) message, containing address information associated with a mobile station (MS),
from the MSC-VLR, storing a SMS address and Mobile Switching Center Identification
(MSCIN) of the MS; comparing a country code in the MSCIN with a country code in a calling
party address of the MC; determining whether the MC and the MSC share a common point code
scheme; selectively populating a SMS Request Return Result (smsreq) relative to said REGNOT
message with a common point code from the SMS address if the MSC and MC share the same
point code schemes or populating said smsreq with the MSCIN if the MSC and MC do not share
the same point code scheme; and forwarding said smsreq to said MC.
• 2. The method of claim 1, wherein the MSCIN parameter is in Global Title Address (GTA)
format.
• 3. The method of claim 2, wherein said GTA format uses an E.212 identifier.
• 4. The method of claim 2, wherein said GTA format uses an E.164 identifier.
• 5. The method of claim 2, wherein said GTA format uses a combination of said E.212 and E.164
identifiers.
• 6. The method of claim 1, wherein said HLR has a database including at least one country code
and at least one corresponding point code scheme.
• 7. The method of claim 6, wherein said point code scheme is specified according to American
National Standards Institute (ANSI) standard-41.
• 8. The method of claim 6, wherein said point code scheme is specified according to International
Telecommunication Union (ITU) standard Q.700.
• 9. The method of claim 6, wherein the step of comparing the MC point code scheme with the
MSC point code scheme occurs in said database in said HLR.
• 10. The method of claim 1, wherein the step of determining the MC point code scheme further
includes the step of determining a nationality of the MC.
• 11. A home location register (HLR) in a system further comprising a Messaging center (MC), a
Mobile Switching Center, the HLR comprising: a database for storing a Short Message Service
address and Mobile Switching Center Identification (MSCIN) of a Mobile Station; receiver
means for receiving a request from said Messaging Center to deliver a SMS message to said
MSC and for receiving a Registration Notification (REGNOT) message from the MSC-VLR
containing address information associated with a mobile station (MS), means for comparing a
country code in the MSCIN with a country code in a calling party address of the MC; means for
determining whether the MC and the MSC share a common point code scheme; means for
selectively populating a SMS request response (smsreq) relative to said REGNOT message with
a common point code from the SMS address if the MSC and MC share the same point code
schemes or populating said smsreq with the MSCIN if the MSC and MC do not share the same
point code scheme; and means for forwarding said smsreq to said MC.
Description:
• BACKGROUND OF THE INVENTION
• 1. Technical Field
• This invention relates generally to Short Message Service operations in mobile cellular
telecommunication networks. More particularly, this invention relates to a method to provide
Short Message Service (SMS) services to mobile units roaming in a Signaling System #7 (SS7)
network different from the Mobile Station (MS) home network.
• 2. History of Related Art
• The Short Message Service (SMS) provides a means of sending text messages, containing up to
160 alphanumeric characters, to and from mobile stations. SMS makes use of a Message Center
(MC), which acts as a store and forward center for short messages. The performance of different
telecommunication network entities during an SMS operation is described in the American
National Standards Institute (ANSI)-41 telecommunications standard, including the SMS
Delivery Point to Point (DPTP) operation. This operation is defined as “a general purpose
operation that is used to convey a short message or in general any other information or
encapsulated data from one point to another point and report on the success or failure of that
transfer.”
• When a MS registers at a Mobile Switching Center-Visitor Location Register (MSC-VLR), the
MSC-VLR sends a Registration Notification Invoke (REGNOT) message to the Home Location
Register (HLR). This message contains the address of the MSC currently serving the MS. This
information is used by the HLR to find the MS. The MSC-VLR may provide the following
ANSI-41 parameters in the REGNOT message: Point Code-Subsystem Number (PC-SSN),
MSCIdentification (MSCID), MSCIdentificationNumber (MSCIN), and the SMS Address.
Additionally, the Signaling Connection Control Part (SCCP) address information, such as Point
Code or Global Title Address (GTA), may be used by the HLR to locate the MS.
• When a Short Message Entity (SME) receives a request to deliver an SMS, the SME sends the
SMSDPTP Invoke message to the MC. When the destination of the Short Message is a MS, the
MC requests the address of the serving MSC from the HLR. This may be accomplished using an
ANSI-41 SMS Request Invoke (SMSREQ) message. Since the HLR already has the information
regarding the MS location, it will respond to the SMSREQ message with the serving MSC
Address. The address of the serving MSC (SMSC) is provided to the MC in the SMS Request
Return Result (smsreq) in the ANSI-41 parameter “SMS Address.”
• This SMS Address may be the SMS Address parameter received in response to the REGNOT
message, or the PC SSN, or the MSCID translated into a PC SSN, or even the lower layer SCCP
information received during registration. With such information, the MC is able to send the SMS
to the MSC, and the MSC forwards it to the MS via air interface, (typically TDMA or CDMA).
The HLR can also provide the MS's Serving MSC Address using a SMS Notification
(SMSNOT) message. This message is used when the MS is inactive at the time the HLR receives
a SMSREQ message.
• The preferred way to provide the SMS Address in the smsreq message is for the HLR to use the
same SMS Address parameter received at REGNOT. Currently, the use of alternate addresses
such as the MSCID, the PC-SSN, or the MSCIN to provide the SMS Address has disadvantages.
For example, using the MSCID received during registration requires translation to a point code
by the HLR, so its use may not be recommended. Using the PC-SSN parameter, or the lower
layer address, may point to the VLR instead of the MSC when the MSC and VLR are different
entities, thus creating confusion. Finally, the MSCIN parameter is not currently used by the HLR
for SMS purposes, and is mainly used to let the HLR know that the MSC is International
Roaming capable.
• The SMS Address parameter has been modified in various usage standards, and it is suggested to
use an E.212 address (taken from the International Telecommunication Union (ITU)
Recommendation E.212 “International Identification Plan for Mobile Terminals and Mobile
Users”, incorporated herein by reference in its entirety) for international SMS message routing,
and either an SS7 point code address or an E.212 address for national scenarios. When the MSC
determines that the MS is roaming into a different SS7 network, the MSC may include its own
E.212 address number in the SMS Address parameter in the REGNOT message. In this case, the
HLR will populate the same SMS Address in the smsreq response message. This method is
efficient for an international scenario, that is, when the MSC and MC are not connected by a
common national signaling point code addressing scheme (i.e., utilize a different SS7 network
type).
• However, to provide SMS services to a national MS roaming in a different SS7 network, the
MSC is required to provide the SMS Address with a Global Title Address (GTA) during
registration, i.e., an E.212 GTA or E.164 (the ITU Recommendation E.164 “The International
Public Telecommunication Numbering Plan”, incorporated herein by reference in its entirety)
GTA identifier, or a combination of these two identifiers. When a national roaming MS registers
with the MSC, the MSC will typically provide a PC address in the SMS Address parameter in the
REGNOT message (or the smsreq response). The HLR will store this address and provide it
when a MC requests the address. However, a problem with this scenario occurs if the MC that
issues the SMSREQ is in a different SS7 network type than the HLR (and therefore the S-MSC).
The smsreq response from the HLR will include a PC in the SMS address provided by the MSC
that is not recognized by the MC as the intended SMS address. Therefore, the SMSDPTP
operation will not be possible.
• Therefore, what is needed is a method which allows the HLR to determine the proper address for
the MSC (or VLR) serving the roaming MS when requested by an external node. This method
should enable communication between the external node and the MS, MSC, or VLR, so as to
provide proper addressing of SMS services to MSs roaming in an SS7 network that is different
from the MS home network, and SMS reception from SS7 networks not being used by the MS.
• SUMMARY OF THE INVENTION
• The present invention relates to a method and apparatus to provide SMS services when different
SS7 signaling networks are in use, both for SMS termination to mobile units roaming in an SS7
network different than the MS's home network, and for receiving SMS messages from an SS7
network different from the MS network when the MS is roaming inside or outside of its home
SS7 network.
• The HLR must store all relevant information related to the location of the MS, including the
SMS Address and the MSCIN. The HLR must have the ability to determine which address needs
to be provided to the requesting node. The SMS Address received at REGNOT will most
probably contain a PC. For example, the REGNOT message contains a PC and the MSCIN,
which in turn contains a country code. According to the method of the present invention, the
HLR first analyzes the SMS Address for its country of origin to determine whether it is national
or international. The HLR compares the MSCIN country code with the country code in the GTA
provided in the calling party address of the MC (i.e., in the SMSREQ message) to determine
whether the same point code scheme is used. The country codes do not need to be the same and
some countries have more than one country code. If the country code is not present, it can be
assumed by the HLR that the MC is in the same country (or region) as the HLR.
• Absence of a MSCIN indicates that the roaming MS is national, since all international SMS
addresses have a MSCIN. However, the MSC sometimes sends the MSCIN with a national
roaming MS, even though it is not necessary. For a national roaming MS, the smsreq response is
populated with the common point code from the SMS Address, because the SMS Address will
not have a GTA. Usually, the SMS Address will have a PC or GTA if international, and only a
PC if national. The HLR has a database of country code and point code schemes [e.g., in ANSI-
41 or International Telecommunication Union (ITU) Q.708 format, both incorporated herein by
reference in their entirety] and knows the location of the MS and the external requesting node.
The present invention allows the HLR to determine the proper address from this database for the
MSC or VLR serving the MS when requested by an external node. In turn, this information
enables the external node to easily address and communicate with the MS, MSC or VLR.
• DETAILED DESCRIPTION OF PRESENTLY PREFERRED EXEMPLARY
EMBODIMENTS
• FIG. 1 illustrates a prior art signal flow diagram illustrating the activity of different network
entities during a SMS Delivery Point to Point operation as defined in the ANSI-41 standard.
During this operation, a short message, encapsulated data, or other information is conveyed from
one point to another, with a subsequent report on the success or failure of the transfer. A MS 10
supporting a SME 15 becomes known to a MSC 20 via registration or other system access in step
110. The MSC 20 sends a REGNOT message to notify the VLR 30 of the location of a MS 10 in
step 120. The VLR 30 forwards the REGNOT message to the MS's 10 HLR 40 in step 130. The
HLR 40 records the SMS delivery address for the MS 10 and sends a regnot response to the VLR
30 containing subscriber profile information in step 140. The VLR 30 forwards the regnot
response to the serving MSC 20 in step 150.
• The MC 50 then receives and accepts a SMSDPTP message requesting delivery of a SMS
message from a MS-based SME 60 in step 160. The MC 50 responds with a smdptp positive
acknowledgment (which may contain a SMS_BearerData parameter if there is bearer data to
return) in step 170. Because the MC 50 does not have a current, temporary SMS routing address
and status for the addressed MS-based SME 15, the MC 50 sends a SMSREQ message to the
HLR 40 serving the MS 10 which contains the Mobile Identification Number (MIN) for the MS
10 associated with the SME 15 in step 180. If the HLR 40 does not have a current temporary
SMS routing address and status for the addressed MS-based SME 15, the HLR 40 forwards the
SMSREQ message to the VLR 30 serving the MS 10 in step 190. The VLR 30 forwards the
SMSREQ message to the MSC 20 serving the MS 10 in step 200. The MSC 20 sends a smsreq
response containing the temporary SMS routing address for the served MS 10 in step 210. The
VLR 30 forwards the smsreq response to the HLR 40 in step 220. The HLR 40, in turn, sends the
smsreq response to the MC 50 in step 230.
• The destination MC 50 forwards the SMDPTP to the destination MSC 20 using the temporary
SMS routing address for the MS-based SME 15 in step 240. The MSC 20 sends a SMS Air
Interface Delivery (SMD) REQUEST to the destination SME 15 using the air interface address
of the MS-based SME 15 in step 250. The destination SME 15 responds with an automatic
acknowledgment (SMD-ACK) which may include the SMS_BearerData parameter if there is
data to return in step 260. The MSC 20 translates the SMD-ACK into a smdptp positive
acknowledgment and returns it to the source of the corresponding SMDPTP in step 270. The
smdptp may include a SMS_BearerData parameter if bearer data was provided in the destination
SME 15 response.
• FIG. 2 is a prior art signal flow diagram illustrating unsuccessful SMS message delivery from a
MC 52 residing in a different SS7 network (i.e., international MC). A MS 10 supporting a SME
12 becomes known to a MSC 20 via registration or other system access in step 310. The MSC 20
sends a REGNOT message to notify the VLR 30 of the location of the MS 10 in step 320. The
VLR 30 forwards the REGNOT message to the MS's 10 HLR 40 in step 330. The HLR 40
records the SMS delivery address for the MS 10 and sends a regnot response to the VLR 30
containing subscriber profile information in step 340. The VLR 30 forwards the regnot response
to the serving MSC 20 in step 350.
• The MC 52 then receives and accepts a SMDPTP message from an international originator SME
62 requesting delivery of a SMS message to the MS-based SME 12 that is from a different SS7
network in step 360. The MC 52 responds to the originator SME 62 with a smdptp positive
acknowledgment (which may include a SMS_BearerData parameter if there is bearer data to
return) in step 370.
• If the MC 52 does not have a current, temporary SMS routing address and status for the
addressed MS-based SME 12, the MC 52 then sends a SMSREQ message to the HLR 40 serving
the MS 10, containing the MIN for the MS 10 associated with the SME 12 in step 380. In FIG. 2,
the Border MSC 45 is used as a SS7 gateway, translating the GTA provided in the Calling and
Called Party Addresses to allow communication between the two different SS7 systems. If the
HLR 40 does not have a current, temporary SMS routing address and status for the addressed
MS-based SME 12, the HLR 40 forwards the SMSREQ message to the VLR 30 serving the MS
10 in step 390. The VLR 30 forwards the SMSREQ message to the MSC 20 serving the MS 10
which contains the addressed SME 12 in step 400. The MSC 20 responds with a smsreq response
containing the temporary SMS routing address for the served MS 10 in step 410, this address
contains the PC of the Serving MSC (S-MSC) 20. The VLR 30 forwards the smsreq response to
the HLR 40 in step 420, and the HLR 40 forwards the smsreq response to the MC 52 in step 430.
• The Border MSC 45 translates the SCCP Global Title Addresses provided in the Called and
Calling Party Address, and the destination MC 52 forwards the SMDPTP message to the
destination SME 12 using the temporary SMS routing address for the MS-based SME 12 in step
440.
• Since the routing of the SMSDPTP is done using Point Codes, and since the S-MSC 20 and the
MC 52 are in different SS7 network types, the SMSDPTP is discarded by the Border MSC 45
(i.e., the gateway only translates GTA information).
• FIG. 3 illustrates successful prior art SMS message delivery to a MS 10 roaming in a different
SS7 network type (i.e., national MC). A MS 10 supporting a SME 12 becomes known to a MSC
20 via registration or other system access in step 510. The MSC 20 sends a REGNOT message to
notify the VLR 30 of the location of the MS 10 in step 520. The VLR 30 forwards the REGNOT
message to the MS's HLR 40 that is in a different SS7 network in step 530. This REGNOT
message is sent using GTA so that the Border MSC 45 is able to translate the SCCP message
header from one format to the other. The HLR 40 records the SMS delivery address for the MS
10 and responds with a regnot response to the VLR 30 containing subscriber profile information
in step 540. The regnot response is sent using GTA so that the Border 45 is able to translate the
SCCP message header from one format to the other. The VLR 30 forwards the regnot response
to the serving MSC 20 in step 550.
• The MC 54 then receives and accepts a SMDPTP from a national originator SME 64 requesting
delivery of a SMS message to the MS-based SME 12 for the MS 10 that is roaming in a different
SS7 network in step 560. The MC 54 responds with a smdptp positive acknowledgment (which
may include a SMS_BearerData parameter if there is bearer data to return) to the originator SME
64 in step 570.
• If the MC 54 does not have a current, temporary SMS routing address and status for the
addressed MS-based SME 12, the MC 54 sends a SMSREQ message to the HLR 40 serving the
MS 10 which contains the addressed SME 12 in step 580. If the HLR 40 does not have a current
temporary SMS routing address and status for the addressed MS-based SME 12, the HLR 40
forwards the SMSREQ message to the VLR 30 serving the MS 10 which contains the addressed
SME 12 in step 590. The VLR 30 then forwards the SMSREQ message to the MSC 20 serving
the MS 10 which contains the addressed SME 12 in step 600. The MSC 20 responds with a
smsreq response containing the temporary SMS routing address for the served MS 10 in step
610, and the VLR 30 forwards the smsreq response to the HLR 40 in step 620. The HLR 40 then
forwards the smsreq response to the MC 54 in step 630.
• The destination MC 54 then sends a SMDPTP message toward the destination SME 12 using the
temporary SMS routing address for the MS-based SME 12 (i.e., the GTA of the Serving MSC
20) in step 640. This is accomplished using GTA, so that the Border MSC 45 is able to translate
from one SS7 format to another. The MSC 20 sends an SMD-REQUEST message to the
destination SME 12 using the air interface address of the MS-based SME 12 in step 650. The
destination SME 12 then responds with an automatic acknowledgment (SMD-ACK) in step 660,
which may include the SMS_BearerData parameter if there is data to return. The MSC 20
translates the SMD-ACK into a smdptp positive acknowledgment and returns it to the source of
the corresponding SMDPTP in step 670. The smdptp may include a SMS_BearerData parameter
if bearer data was provided by the destination SME 12. The smdptp is sent using GTA.
• FIG. 4 illustrates various message pathways used in implementing the method of the present
invention. In general, the MS 10 accesses the telecommunication network at a node 20, such as a
MSC 20, in step 710. The MSC 20 then sends a REGNOT message to the VLR 30 with its
address information in step 720 (e.g., SMSADDR, MSCIN, etc.). The VLR 30 forwards the
REGNOT message including the address information in step 730. The HLR 40 stores all the
addresses that may be required by an external node, such as node X 70, and answers with a
regnot response in step 740. The VLR 30 then forwards the response to the MSC 20 in step 750.
• At some later time, an external node X 70 may require the address of the Serving MSC 20 or
VLR 30 in step 760. The HLR 40 provides the proper address to the requesting node X 70 in step
770 based on its stored internal information and information acquired about the node requesting
the address, including the location of the HLR 40, the location of the Serving MSC-VLR, and the
location of the requesting node. The node X 70 may then send a message (e.g., Y-message) to
the MSC 20 or VLR 30 where the MS 10 is registered. The Y-message is sent to the MSC 20 or
VLR 30 in step 780 depending on the X-node 70 needs, using the address obtained in step 770.
The MSC 20 or VLR 30 then responds to the node X 70 message in step 790.
• FIG. 5 illustrates the procedure utilized by the HLR 40 to complete the smsreq response for
providing SMS services according to the present invention. The HLR 40 receives a REGNOT
message from the MSC 20 in step 810. The HLR 40 then stores the SMS Address and MSCIN
sent by an international roaming MS 10 in step 820. The HLR 40 determines the nationality of
the MC 56 in step 830. Using the country code and point code scheme database 42 which is
stored in a memory in the HLR 40, a determination is made as to whether the MC 56 and MSC
20 share the same point code scheme in step 840. If so, the HLR 40 populates the smsreq
response with the common point code from the SMS Address in step 850. If not, the system
populates the smsreq with the MSCIN in GTA format in step 860.
• FIG. 6 is a diagram illustrating the invention as a node (HLR) 40 with a database 42 including a
plurality of country codes and a corresponding plurality of point code schemes contained within
a memory 41. The database 42 includes point code schemes 43 such as ANSI and ITU, as well as
the country codes 44 for each country. The HLR 40 utilizes this database 42 to compare the point
code schemes for the MC 56 and the MSC 20 as previously described in FIG. 5.
• Although the invention has been described with reference to specific embodiments, this
description is not meant to be construed in a limited sense. The various modifications of the
disclosed embodiments, as well as alternative embodiments of the invention, will become
apparent to persons skilled in the art upon reference to the description of the invention. It is,
therefore, contemplated that the appended claims will cover such modifications that fall within
the scope of the invention, or their equivalents.
Description of related drawings:
• A more complete understanding of the structure and operation of the present invention may be
had by reference to the following detailed description when taken in conjunction with the
accompanying drawings, wherein:
• FIG. 1 is a prior art signal flow diagram illustrating the activity of different network entities
during an SMS message delivery operation as defined in the ANSI-41 standard;
• FIG. 2 is a prior art signal flow diagram illustrating successful SMS message delivery from a
MC in a different SS7 network (international MC);
• FIG. 3 is a prior art signal flow diagram illustrating unsuccessful SMS message delivery to a MS
roaming in a different SS7 network (national MC);
• FIG. 4 is a signal flow diagram illustrating various message pathways used in implementing the
method of the present invention;
• FIG. 5 is a flow chart illustrating the procedure utilized by the HLR to respond to a SMSREQ
message for SMS service provision using the method of the present invention; and
• FIG. 6 is a diagram illustrating the invention as a node having a database of country codes and
point code schemes stored in a memory.
• Can someone enlight me on the right way to locate the orig. MSC (orig. VPMN) in CDMA
netwrok, in case MSCIN is not included ?
• So far I've understand that in REGNOT message there are 2 parameters identifying MSC number
:
1. MSCID (mandatory) - includes the market ID field
2. MSCIN (optional) (msc identification number) - a MSC E.164 number
• In case MSCID is used - what is the right way to use this parameter.
• Re: CDMA REGNOT
• The MSCID is a number that is shared amongst the signaling partners, and is unique to the MSC
(You probably already knew that).
• The MSCIN is a GT based Node address, and is part of the bridging of the GSM and CDMA
networks. It is still optional because I am not sure if it is used anywhere in the ANSI network for
signaling.
This is an issue with mobile subscribers roaming in another network(VPLMN) apart from their
own network(HPLMN) :
Scenarios:
Location Update=OK
All outgoing Voice calls from Roamer=OK
All Terminating Voice calls to Roamer= Fails.
SMS=all OK
A trace is taken on the failing voice calls and the last MAP Operation is 'Provide Roaming
Number'.
Can anyone assist on this please?
Top
• Login or register to post comments
• Email this page

Wed, 03/24/2010 - 11:30
#1
pramod
Offline
Joined: 08/03/2007
Posts:
Points: 0
Re: Provide Roaming Number Issue
plz provide the trace if it is possible

Top

Wed, 03/24/2010 - 13:59
#2
csmstopher@gmail.com
Offline
Joined: 03/24/2010
Posts:
Points: 0
Heres a tracce:
SCCPUSERMessage
0> 00 00000000
1> 6C 01101100 ..message-length:00 6C
2> 15 00010101 ..msg-type:n-UNITDATA-REQ (21)
..direction
3> 03 000000-- ....reserved1:0x0 (0)
------1- ....reserved2:0x1 (1)
-------1 ....message-direction:user-to-sccp (1)
4> 03 00000011 ..user:map (3)
..msgContent
....n-UNITDATA-REQ
......sio
5> 83 10------ ........networkIndicator:national-network (2)
--00---- ........spare-for-ITU-or-Message-Priority-for-ANSI:spare-or-priority-0 (0)
----0011 ........serviceIndicator:sccp (3)
6> 07 00000111
7> 00 00000000 ......reserved:07 00
8> 00 00000000
9> 00 00000000 ......reserved1:00 00
10> 00 00000000 ......reserved2:00
......protocol-class
11> 80 ----0000 ........classlevel:class0 (0)
1000---- ........specify-message-handling:return-message-on-error (8)
......udt-pdu
12> 03 00000011
13> 0E 00001110
14> 1B 00011011 *
15> 0B 00001011 L
........called-party-address
..........address-indicator
16> 12 0------- ............reserved-for-national-use:0x0 (0)
-0------ ............routing-indicator:route-on-GT (0)
............global-title-ssn-point-code-indicator
--0100-- ..............global-title-indicator:global-title-includes-translation-type-numbering-
plan-encoding-scheme-nature-of-address-indicator (4)
------1- ..............ssn-indicator:0x1 (1)
-------0 ..............point-code-indicator:0x0 (0)
..........called-address
17> 06 00000110 ............subsystem-number:hlr (6)
............global-title
..............itut-global-title4
18> 00 00000000 ................translation-type:unknown (0)
19> 11 0001---- ................numbering-plan:isdn-telephony-numbering-plan (1)
----0001 ................encoding-scheme:bcd-odd-number-of-digits (1)
20> 04 0------- ................spare:0x0 (0)
-0000100 ................nature-of-address-indicator:international-number (4)
................global-title-address-information
21> 14 00010100
22> 87 10000111
23> 39 00111001
24> 01 00000001
25> 40 01000000
26> 04 00000100 ..................global-title-address-es-information:41789310044
27> 0D 00001101 L
........calling-party-address
..........address-indicator
28> 13 0------- ............reserved-for-national-use:0x0 (0)
-0------ ............routing-indicator:route-on-GT (0)
............global-title-ssn-point-code-indicator
--0100-- ..............global-title-indicator:global-title-includes-translation-type-numbering-
plan-encoding-scheme-nature-of-address-indicator (4)
------1- ..............ssn-indicator:0x1 (1)
-------1 ..............point-code-indicator:0x1 (1)
..........calling-address
............signalling-point-code
..............point-code-14
29> A4 10100100
30> 10 --010000 ................point-code-14:0x10a4 (4260)
00------ ................spare:0x0 (0)
31> 07 00000111 ............subsystem-number:vlr (7)
............itut-global-title
..............itut-global-title4
32> 00 00000000 ................translation-type:unknown (0)
33> 11 0001---- ................numbering-plan:isdn-telephony-numbering-plan (1)
----0001 ................encoding-scheme:bcd-odd-number-of-digits (1)
34> 04 0------- ................spare:0x0 (0)
-0000100 ................nature-of-address-indicator:international-number (4)
................global-title-address-information
35> 76 01110110
36> 75 01110101
37> 06 00000110
38> 00 00000000
39> 08 00001000
40> 00 00000000 ..................global-title-address-es-information:67576000800
........sccp-data
41> 47 01000111 ..........data-length-ind:0x47 (71)
..........tcap-part
............tcap
42> 64 01100100 T
43> 45 01000101 L
..............itu-end
44> 49 01001001 T
45> 04 00000100 L
46> F1 11110001
47> C4 11000100
48> 10 00010000
49> 33 00110011 ................dtid:F1 C4 10 33
50> 6B 01101011 T
51> 26 00100110 L
................dialoguePortion
52> 28 00101000 T
53> 24 00100100 L
..................structed-dialogue
54> 06 00000110 T
55> 07 00000111 L
....................structured-DialogueAS
56> 00 00000000 ......................ccitt-recommendation:0x0 (0)
57> 11 00010001 ......................q:0x11 (17)
58> 86 10000110
59> 05 00000101 ......................x-305:0x8605 (34309)
60> 01 00000001 ......................as-1:0x1 (1)
61> 01 00000001 ......................dialoguePDU-1:0x1 (1)
62> 01 00000001 ......................version-1:0x1 (1)
63> A0 10100000 T
64> 19 00011001 L
....................single-asn1-type
......................dialoguePDU
65> 61 01100001 T
66> 17 00010111 L
........................dialogueResponse
67> A1 10100001 T
68> 09 00001001 L
..........................application-context-name
69> 06 00000110 T
70> 07 00000111 L
71> 04 00000100
72> 00 00000000
73> 00 00000000
74> 01 00000001
75> 00 00000000
76> 03 00000011
77> 03 00000011 ............................application-context-name:04 00 00 01 00 03 03
78> A2 10100010 T
79> 03 00000011 L
..........................result
80> 02 00000010 T
81> 01 00000001 L
82> 00 00000000 ............................a-result:0x0 (0): accepted
83> A3 10100011 T
84> 05 00000101 L
..........................result-source-diagnostic
............................associate-source-diagnostic
85> A1 10100001 T
86> 03 00000011 L
..............................dialogue-service-user
87> 02 00000010 T
88> 01 00000001 L
89> 00 00000000 ................................user:0x0 (0): null
90> 6C 01101100 T
91> 15 00010101 L
................components
..................Component
92> A2 10100010 T
93> 13 00010011 L
....................returnResultLast
94> 02 00000010 T
95> 01 00000001 L
96> 00 00000000 ......................invokeID:0x0 (0)
97> 30 00110000 T
98> 0E 00001110 L
......................result
........................operationCode
99> 02 00000010 T
100> 01 00000001 L
..........................localOperationCode
101> 04 00000100 ............................map-operation-Code:provide-roaming-number (4)
102> 30 00110000
103> 09 00001001
104> 04 00000100
105> 07 00000111
106> 91 10010001
107> 76 01110110
108> 75 01110101
109> 06 00000110
110> 20 00100000
111> 95 10010101
112> F3 11110011 ........................parameter:30 09 04 07 91 76 75 06 20 95 F3
Top
Thu, 04/01/2010 - 11:16
#3
akhtar
Offline
Joined: 08/21/2008
Posts:
Points: 0
Since last message is PRN, i guess the issue can be at VPLMN , might be on gateway msc. You
need to check at gateway VPLMN for the missing PRN response.
____________________
Proud To be a Pakistani...
Top

Tue, 04/06/2010 - 13:58
#4
csmstopher@gmail.com
Offline
Joined: 03/24/2010
Posts:
Points: 0
You are right Akhtar, there was a blockage to HPLMN code in the VPLMN GMSC. It was open
up allowing PRN to take place between the 2 plmn.
Thanks for your assistance and lead up to the solution
Top

Mon, 04/26/2010 - 07:16
#5
anandnokia
Offline
Joined: 04/14/2010
Posts:
Points: 0
it seems that MSRN of roamers serving MSC is not defined in the gateway MSC of HPLMN
my friend name
Top

Wed, 04/28/2010 - 10:13
#6
akhtar
Offline
Joined: 08/21/2008
Posts:
Points: 0
MSRNs are particular to HPLMN i guess and no seperate MSRNs are defined for any foreign
MSC on HPLMN Gateway MSC.
Only gateway MSC needs to define foreign VLR in its white list in order to allow it to make
calls towards Home network.
____________________
Top

Wed, 04/28/2010 - 14:10
#7
anandnokia
Offline
Joined: 04/14/2010
Posts:
Points: 0
For this let's take sub A is ROAMING and the sub B in HPLMN calling the Sub A.
MSC of B Sub send the HLR enq (SRI) to get the routing info of A subscriber and receives the
MSRN of A sub's serving MSC in SRI result(SRIR).
MSC(ie MSC of B sub) perfoms dig analysis on MSRN in bo= 8'th origin in case of Ericsson
MSC or Tree=50 in case of nokia MSC and routes MSRN (ISUP IAM) to the destination.
So check the MSRN of Roamers MSC is opened in the SRI orginating MSC.
my friend name
Top

Wed, 05/26/2010 - 11:11
#8
harish
Offline
Joined: 05/26/2010
Posts:
Points: 0
pre paid MO forward SMS flow
hi
can anyone explain the pre=paid MO forward SMS flow
Top

Thu, 07/08/2010 - 07:03
#9
akhtar
Offline
Joined: 08/21/2008
Posts:
Points: 0
Hi, its too late late to
Hi, its too late late to respond now :) but you shoud've opened a new thread.
____________________
Top

Wed, 02/09/2011 - 03:56
#10
khang768
Offline
Joined: 02/09/2011
Posts:
Points: 0
while roaming, MOC fail, and MTC ok
on my device I can see I log into VPLMN sucessfully. but MOC fail. but MTC ok. After the
MTC, MOC becomes OK. any one has the same experience and want to talk about it and share
how to solve this?
Thanks for any advise..
KH
Best Regards,
KH
Top

Wed, 02/09/2011 - 12:51
#11
akhtar
Offline
Joined: 08/21/2008
Posts:
Points: 0
Re: while roaming, MOC fail, and MTC ok
Well i am unable to understand your query.

If you can explain it a bit in detail.
Regards,
____________________
Top

Inter Standard Roaming (ISR) - IIF

Încărcat de

Informații document

Descriere originală:

Titlu original

Drepturi de autor

Formate disponibile

Partajați acest document

Partajați sau inserați document

Opțiuni de partajare

Vi se pare util acest document?

Este necorespunzător acest conținut?

Drepturi de autor:

Formate disponibile

Inter Standard Roaming (ISR) - IIF

Încărcat de

Drepturi de autor:

Formate disponibile

PrePay CDMA Subscribers Can Now Roam Onto GSM Networks

[edit] Roaming in general

[edit] Home and visited networks

The roaming process

Seamless International Roaming

Additional notions and types of roaming

But this can provide a step forward towards MAP-Interworking...

This is in no way roaming.

Subscriber Identity Module (SIM Card)

International Roaming with GSM and CDMA

Data Transfer Methods in GSM vs. CDMA

Interaction between GSM and CDMA

was brought out to make sure mobility works

- by 80.64.49.212 on 2009-11-26 12:08:21

stronghold on the wireless broadband industry by then.

networks, unlike CDMA thus, giveing customers greater choice.

GSM -> GSM Vs CDMA

The Euro-Asian Alternative: GSM

• GSM is already used worldwide with over 450 million subscribers.

that handoffs could be performed between

to forum · permalink · 2001-09-20 15:26:32 ·

This is the world's first commercial

What I would like to invetigate it the

to forum · permalink · 2001-09-21 08:12:07 ·

After reading that, it's not simply roaming

It also sounds like that a GSM provider

to forum · permalink · 2001-09-21 12:36:26 ·

Try the headlines: "Ericsson - The TDMA

to forum · permalink · 2001-09-25 17:00:19 ·

International Roaming Using CDMA

Roaming is the ability of a system to provide the same services to customers

What Makes CDMA Roaming Work?

○ Authentication, Registration and Location Management

○ Support for international digit strings in IS-41 Revision C (1996)

Telephony networks contain many highly computerized elements, that need to

Roaming with GSM

No system is perfect, and although ANSI-41 international roaming provides a high

How did ANSI-41 Evolve?

○ 1983 - AMPS analog cellular started commercial service as standalone

About the Author

CDMA Authentication commands description

This command is used to produce an Authentication response. The GET RESPONSE

Bytes Description Length

2-5 RAND or RANDU 4

11-17 ESN (of the ME) 7

Bytes Description Length

.DEFINE %RAND32 00000064

; .DEFINE %PIN1 30303030 FFFFFFFF

; A020 0001 08 %PIN1 (9000) ; verify PIN1

A0A4 0000 02 3F00 (9FXX) ; select MF

A0A4 0000 02 7F25 (9FXX) ; select DF_CDMA

A088 0000 11 00 %RAND32 %DIG_LEN %DIGITS 00 %ESN (9F03) ; run CAVE

A0C0 0000 03 [%AUTH] (9000)

;; it is now time for 'Generate Key/VPM' or for 'Base Station

Bytes Description Length

First octet of VPM to

Last octet of VPM to

Bytes Description Length

9-* VPM Key part *

(*) the number of VPM bytes varies as specified by command parameter.

;; run Cave just executed

.DEFINE %KEY 933A0DC379956849

Activate 21# 61# 62# 67# *004#

Check Status #21# #61# #62# #67# *#004#