ITU/BDT Arab Regional Workshop on 4G Wireless Systems -Tunisia 2010

ITU/BDTArab ITU/BDT Arab Regional Workshop on Workshopon 4GWirelessSystems LTETechnology Session6:LTE/SAEMobility andSession Managment
Speakers Date M.Lazhar BELHOUCHET M.HakimEBDELLI M Hakim EBDELLI 27 29January 2010

LTE/SAEMobilityandSessionManagment

www.cert.nat.tn

ITU/BDT Arab Regional Workshop on 4G Wireless Systems -Tunisia 2010

Agenda
LTE/SAEMobilityAreas TrackingAreas T ki A UEIdentifications LTEMobility&ConnectionStates S Co ect o a age e t ( C ) a d ad o EPSConnectionManagement(ECM)andLTERadio ResourceControlStates RRCStates RRC States LTE/SAEBearer
2
LTE/SAEMobilityandSessionManagment

www.cert.nat.tn

ITU/BDT Arab Regional Workshop on 4G Wireless Systems -Tunisia 2010

LTE/SAEMobilityAreas
TwoareasaredefinedforhandlingofmobilityinLTE/SAE: The Cell TheCell
identifiedbytheCellIdentity.

Tracking Area (TA) TrackingArea(TA)

Itisthesuccessoroflocationandroutingareasfrom2G/3G. WhenaUEisattachedtothenetwork,theMMEwillknowtheUEs positionontrackingarealevel. IncasetheUEhastobepaged,thiswillbedoneinthefulltracking area. area. TrackingareasareidentifiedbyaTrackingAreaIdentity(TAI).

LTE/SAEMobilityandSessionManagment

www.cert.nat.tn

ITU/BDT Arab Regional Workshop on 4G Wireless Systems -Tunisia 2010

TrackingAreas
Tracking Area
HSS TAI1 TAI1 TAI2 TAI2 TAI2 TAI2 TAI3 TAI3 TAI3 TAI3 TAI1 TAI1 TAI1 TAI2 TAI2 TAI2 TAI2 TAI3 TAI3 TAI3
S eNB S-eNB eNB eNB

MME

MME

Cell Identity

LTE/SAEMobilityandSessionManagment

www.cert.nat.tn

ITU/BDT Arab Regional Workshop on 4G Wireless Systems -Tunisia 2010

TrackingAreas:UseofS1flexInterface
HSS TAI1 TAI1 TAI1 TAI2 TAI2 TAI2 TAI2 TAI2 TAI3 TAI3
S-eNB eNB eNB

1 2 3

TAI1-2 TAI1-2 TAI2 TAI2 TAI2 TAI2 TAI2 TAI2 TAI3 TAI3

MME

1 2 3 S-MME

MME Pooling : several MME handle the same tracking area

Cell Identity

LTE/SAEMobilityandSessionManagment

www.cert.nat.tn

ITU/BDT Arab Regional Workshop on 4G Wireless Systems -Tunisia 2010

UEIdentifications
IMSI
I t InternationalMobileSubscriberIdentity ti l M bil S b ib Id tit

STMSI
SAETemporaryMobileSubscriberIdentity

CRNTI C RNTI
CellRadioNetworkTemporaryIdentity

S1 AP UE ID S1APUEID
S1ApplicationProtocolUserEquipmentIdentity
6
LTE/SAEMobilityandSessionManagment

www.cert.nat.tn

ITU/BDT Arab Regional Workshop on 4G Wireless Systems -Tunisia 2010

UEIdentifications:IMSI
IMSI:InternationalMobileSubscriberIdentity. UsedinSAEtouniquelyidentifyasubscriberworldwide. ItsstructureiskeptinformofMCC+MNC+MSIN:
MCC:mobilecountrycode MNC: mobile network code MNC:mobilenetworkcode MSIN:mobilesubscriberidentificationnumber

AsubscribercanusethesameIMSIfor2G,3GandSAEaccess. MMEusestheIMSItolocatetheHSSholdingthesubscriberspermanent registrationdatafortrackingareaupdatesandattaches.

MCC
3 digits g 7 MNC 2 digits g MSIN 10 digits g

IMSI

LTE/SAEMobilityandSessionManagment

www.cert.nat.tn

ITU/BDT Arab Regional Workshop on 4G Wireless Systems -Tunisia 2010

UEIdentification:STMSI
STMSI:SAETemporaryMobileSubscriberIdentity ItisdynamicallyallocatedbytheservingMME(SMME). ItsmainpurposeistoavoidusageofIMSIonair. InternallytheallocatingMMEcantranslateSTMSIintoIMSIandvice versa. versa WhethertheSTMSIisuniqueperMMEorperTAisnotclearyet. IncasetheS1flexinterfaceoptionisused,thentheeNBmustselectthe p , rightMMEforaUE.ThisisdonebyusingsomebitsoftheSTMSIto identifytheservingMMEoftheUE.Thisidentifiermightbeaunique MMEIDoraformofMMEcolorcode.Underinvestigation. MME ID or a form of MME color code Under investigation
MME-ID or MME color code

S-TMSI

32 bits 8
LTE/SAEMobilityandSessionManagment

www.cert.nat.tn

ITU/BDT Arab Regional Workshop on 4G Wireless Systems -Tunisia 2010

UEIdentifications:CRNTI
CRNTI:CellRadioNetworkTemporaryIdentity C RNTI i ll t d b th NB servingaUE CRNTIisallocatedbytheeNB i UE whenitisinactivemode(RRC_CONNECTED) Thisisatemporaryidentityfortheuseronly g validwithintheservingcelloftheUE. Itisexclusivelyusedforradiomanagement procedures. procedures XRNTIidentificationsunderinvestigation.
9
LTE/SAEMobilityandSessionManagment

www.cert.nat.tn

ITU/BDT Arab Regional Workshop on 4G Wireless Systems -Tunisia 2010

UEIdentifications:S1APUEID
S1APUEID:S1ApplicationProtocolUserEquipmentIdentity. Two additional temporary identifiers allocated by eNB and TwoadditionaltemporaryidentifiersallocatedbyeNBand MME:
eNBS1APUEID MMES1APIEID

TheirpurposeistoallowefficientimplementationofS1 controlsignaling(S1AP=S1ApplicationProtocol) TheyshallalloweasydistributionofS1signalingmessages insideMMEandeNB. i id MME d NB NOTE:ThisconceptissimilartoSCCPlocalreferencesknown fromIuorAinterfacein3G/2G. from Iu or A interface in 3G/2G www.cert.nat.tn LTE/SAEMobilityandSessionManagment 10

ITU/BDT Arab Regional Workshop on 4G Wireless Systems -Tunisia 2010

HSS

UEIdentificationsSummary
TAI1 TAI1 TAI1 TAI1 TAI1 TAI2 TAI2 TAI2 TAI2 TAI2 TAI2 TAI2 TAI2 TAI2 TAI2 TAI2 TAI3 TAI3 TAI3 TAI3 1 2 3

IMSI
MCC MNC MSIN

MME
eNB

Cell Identity C ll Id i

eNB

MME Identity eNB S1-AP UE-ID | MME S1-AP UE-ID 1 2 3

C-RNTI

S-MME S MME
S-eNB

IMSI S-TMSI C-RNTI S-MME S-eNB TAI

International Mobile Subscriber Identity S-Temporary Mobile Subscriber Identity Cell Radio Network Temporary Identity Serving MME Serving E-Node B Tracking Area Identity (MCC+MNC+TAC) 11

S-TMSI
MME-ID MME ID or MME color code

LTE/SAEMobilityandSessionManagment

www.cert.nat.tn

ITU/BDT Arab Regional Workshop on 4G Wireless Systems -Tunisia 2010

Terminologyfor3G&LTE:Connection& MobilityManagement Mobility Management

12

LTE/SAEMobilityandSessionManagment

www.cert.nat.tn

ITU/BDT Arab Regional Workshop on 4G Wireless Systems -Tunisia 2010

LTEMobility&ConnectionStates
TherearetwosetsofstatesdefinedfortheUE basedontheinformationheldbytheMME. b d th i f ti h ld b th MME Theseare:
1.EPS*MobilityManagement(EMM)states 2 EPS*ConnectionManagement(ECM)states 2.EPS Connection Management (ECM) states

13

LTE/SAEMobilityandSessionManagment

www.cert.nat.tn

ITU/BDT Arab Regional Workshop on 4G Wireless Systems -Tunisia 2010

EPSMobilityManagement(EMM)states
EMMDEREGISTERED: InthisstatetheMMEholdsnovalidlocationinformationabouttheUE MMEmaykeepsomeUEcontextwhentheUEmovestothisstate(e.g.toavoid MME may keep some UE context when the UE moves to this state (e g to avoid theneedforAuthenticationandKeyAgreement(AKA)duringeveryattach procedure) SuccessfulAttachandTrackingAreaUpdate(TAU)proceduresleadtotransitionto EMMREGISTERED EMMREGISTERED: EMM REGISTERED InthisstatetheMMEholdslocationinformationfortheUEatleasttothe accuracyofatrackingarea accuracy of a tracking area InthisstatetheUEperformsTAUprocedures,respondstopagingmessagesand performstheservicerequestprocedureifthereisuplinkdatatobesent.
14
LTE/SAEMobilityandSessionManagment

www.cert.nat.tn

ITU/BDT Arab Regional Workshop on 4G Wireless Systems -Tunisia 2010

EPSMobilityManagement(EMM)states
Attach EMM deregistered Detach EMM registered i t d

15

LTE/SAEMobilityandSessionManagment

www.cert.nat.tn

ITU/BDT Arab Regional Workshop on 4G Wireless Systems -Tunisia 2010

EPSConnectionManagement(ECM)andLTERadio ResourceControlStates Resource Control States

UEandMMEenterECMCONNECTEDstatewhenthesignalingconnection isestablishedbetweenUEandMME UEandEUTRANenterRRCCONNECTEDstatewhenthesignaling connectionisestablishedbetweenUEandEUTRAN

16

LTE/SAEMobilityandSessionManagment

www.cert.nat.tn

ITU/BDT Arab Regional Workshop on 4G Wireless Systems -Tunisia 2010

EPSConnectionManagement(ECM)states
ECMIDLE: InthisstatethereisnoNASsignalingconnectionbetweentheUEandthe In this state there is no NAS signaling connection between the UE and the networkandthereisnocontextfortheUEheldintheEUTRAN. ThelocationoftheUEisknowntowithintheaccuracyofatrackingarea Mobilityismanagedbytrackingareaupdates. ECMCONNECTED: InthisstatethereisasignalingconnectionbetweentheUEandtheMME g g whichisprovidedintheformofaRadioResourceControl(RRC)connection betweentheUEandtheEUTRANandanS1connectionfortheUEbetween theEUTRANandtheMME. th E UTRAN d th MME ThelocationoftheUEisknowntowithintheaccuracyofacell. Mobilityismanagedbyhandovers.
17
LTE/SAEMobilityandSessionManagment

www.cert.nat.tn

ITU/BDT Arab Regional Workshop on 4G Wireless Systems -Tunisia 2010

RRCStates
RRC_IDLE:
Nosignallingconnection betweentheUEandtheE UTRAN. I.e.:PLMNSelection. UEReceivessysteminformation y andlistensforPaging. MobilitybasedonCellRe selectionperformedbyUE. selection performed by UE. NoRRCcontextstoredinthe eNB. RACH procedure used on RRC RACHprocedureusedonRRC connectionestablishment.

RRC_CONNECTED:
UEhasanEUTRANRRC connection. UEhascontextinEUTRAN(C RNTIallocated). EUTRANknowsthecellwhich theUEbelongsto. Networkcantransmitand/or receivedatato/fromUE. receive data to/from UE. Mobilitybasedonhandovers UEreportsneighbourcell measurements

18

LTE/SAEMobilityandSessionManagment

www.cert.nat.tn

ITU/BDT Arab Regional Workshop on 4G Wireless Systems -Tunisia 2010

ECM Connected RRC Connected + S1 Connection Connected=

UE eNB

EPSConnectionManagement

RRC Connection

S1 Connection

MME

ECM Connected

19

LTE/SAEMobilityandSessionManagment

www.cert.nat.tn

ITU/BDT Arab Regional Workshop on 4G Wireless Systems -Tunisia 2010

EMM&ECMStatesTransitions
Power On Registration (Attach) Allocate C-RNTI, S_TMSI Allocate IP addresses Authentication Establish security context Release due to Inactivity Release RRC connection Release C-RNTI Configure DRX for paging

EMM_Deregistered ECM_Idle

EMM_Registered ECM_Connected

EMM_Registered ECM_Idle

Deregistration (Detach) Change PLMN

New Traffic

Establish RRC Connection Release C-RNTI, S-TMSI Allocate C-RNTI Release IP addresses Release S-TMSI Release IP addresses Timeout of Periodic TA Update

20

LTE/SAEMobilityandSessionManagment

www.cert.nat.tn

ITU/BDT Arab Regional Workshop on 4G Wireless Systems -Tunisia 2010

EMM&ECMStatesSummary
EMM_Deregistered ECM_Idle
Network Context: no context exists Allocated IDs: IMSI UE Position: unknown to network Mobility: PLMN/cell l ti PLMN/ ll selection UE Radio Activity: none

EMM_Registered ECM_Connected
Network Context: all info for ongoing transmission/reception Allocated IDs: IMSI, S-TMSI per TAI 1 or several IP addresses C-RNTI UE Position: known on cell level Mobility: NW controlled handover UE Radio Activity: DL w/o DRX UL w/o DTX

EMM_Registered ECM_Idle
Network Context: security keys enable fast transition to ECM_CONNECTED Allocated IDs: IMSI, S TMSI per TAI S-TMSI 1or several IP addresses UE Position: known on TA level (TA list) Mobility: cell reselection UE Radio Activity: DL DRX for paging no UL

21

LTE/SAEMobilityandSessionManagment

www.cert.nat.tn

ITU/BDT Arab Regional Workshop on 4G Wireless Systems -Tunisia 2010

LTE/SAEBearer
Themainfunctionofeverymobile h i f i f bil radiotelecommunicationnetworkis toprovidesubscriberswithtransport bearersfortheiruserdata. b f th i d t Incircuitswitchednetworksusersget afixedassignedportionofthe networksbandwidth. t k b d idth Inpacketnetworksusersgetabearer withacertainqualityofservice(QoS) rangingfromfixedguaranteed f f d d bandwidthdowntobesteffort serviceswithoutanyguarantee. LTE/SAEisapacketorientedsystem

PDN GW

LTE/SAE Bearer

UE
22
LTE/SAEMobilityandSessionManagment

www.cert.nat.tn

ITU/BDT Arab Regional Workshop on 4G Wireless Systems -Tunisia 2010

SAEBearerArchitecture
SAE B Bearer spans th complete network, f the l t t k from UE over EUTRAN and EPS up t th d to the connector of the external PDN. The SAE bearer is associated with a quality of service (QoS) usually expressed by a label or QoS Class Identifier (QCI).
LTE-Uu S1-U cell eNB End-to-End Service SAE Bearer Service (EPS Bearer)
SAE Radio Bearer Service (SAE RB) SAE Access Bearer Service S5/S8 Bearer Service External Bearer Service

Serving Gateway

S5

PDN Gateway

Sgi PDN

Physical Radio Bearer Service

S1 Physical Bearer Service

E-UTRAN

EPC

PDN

23

LTE/SAEMobilityandSessionManagment

www.cert.nat.tn

ITU/BDT Arab Regional Workshop on 4G Wireless Systems -Tunisia 2010

SAEBearerSections
S5/S8bearer
BetweenthePDNGWandSAEGW. ThisisusuallyaGTPorMIPtunnelbetweenthetwonetworkelements.

SAEAccessBearerBetweeneNB andSAEGW.
The SAE Access Bearer is implemented using the 2G/3G GTP protocol which TheSAEAccessBearerisimplementedusingthe2G/3GGTPprotocolwhich buildsaGTPtunnelbetweeneNB andSAEGW. ThesetupofthisSAEAccessBearerismanagedbytheMME. SAEGWandeNB d d donotdirectlyexchangesignalingtocreateit. di l h i li i

RadiobearersBetweenUEandeNB.
TheeNB connectsaradiobearerinternallywiththeassociatedSAEaccess y beareronS1Uinterface. Themappingofradiobearerstophysicalresourcesontheairinterfaceisthe majortaskoftheeNB major task of the eNB scheduler.
24
LTE/SAEMobilityandSessionManagment

www.cert.nat.tn

ITU/BDT Arab Regional Workshop on 4G Wireless Systems -Tunisia 2010

Thanks for your Attention foryour

25

LTE/SAEMobilityandSessionManagment

www.cert.nat.tn