402

Optimization Seminar
CDMA
CDMA Field
Field RF
RF Optimization
Optimization
Background
Background and
and Principles
Principles
Scott Baxter
www.howcdmaworks.com
800-890-0829
615-331-3880fax
Scott_Baxter@msn.com
CDMA Optimization Seminar ©2000 Scott Baxter February, 2000 Page 1

Outline: Field RF Optimization
■ Introduction: Review of CDMA Principles (optional based on

portions needed)
• CDMA Air Interface Review
– CDMA Spread Spectrum Basics
– CDMA Signal RF Characteristics
– CDMA Spreading Sequences and Code Channels
– Forward Link
– Reverse Link
• Call Processing from perspective of Subscriber Handset
– Anatomy of a Handset
– RF section, digital section, correlators
– Operation of the Pilot Searcher
– Subscriber Handset Operation, “wakeup” thru end of call
• Messaging Overview
• CDMA Handoff
– Pilot Sets: Relationships, number of members, promotion
& demotion
– Handoff Parameters
– Handoff Messaging
– RF Implications of Handoff Situations
• CDMA System Network Architecture and Hardware Basic
Elements
■ CDMA Datagathering Introduction
• System-side resources, principles, tools: (overview)
• Subscriber-side resources, principles, and techniques
– Handset maintenance mode
– Data Collection Tools
– Post-Processing Tools

■ Interpreting Real-Time Drive-Tool Displays from Field Tools

• Parameters and values
• RF significance of observed values (Ec/Io, TX Gain, TX PO,
RX Level)
• Seeing the situation through the eyes of the handset
■ Real-World CDMA Problems and Solutions

What’s
What’s Different
Different about
about CDMA?
CDMA?
Basic
Basic Principles
Principles Review
Review

Conventional RF Technologies:
Recovering the Signal / Avoiding Interference
AMPS-TDMA-GSM
■ In conventional radio technologies, the 1
desired signal must be strong enough to 4 1
override any interference 6

7 2
7
3
■ AMPS, TDMA and GSM depend on 1 5 6
4 5
physical distance separation to keep 2
1
4 1
interference at low levels 3 7 2
6 3
■ Co-channel users are kept at a safe 1 5
distance by careful frequency planning 1
■ Nearby users and cells must use different

frequencies to avoid interference Figure of Merit: C/I
(carrier/interference ratio)
AMPS: +17 dB
TDMA: +14 to 17 dB
GSM: +7 to 9 dB.

CDMA: Using A New Dimension
■ All CDMA users occupy the same frequency CDMA

at the same time! Frequency and time are
not used as discriminators, the signals are
hopelessly entangled both in time and
frequency
■ CDMA operates by using CODING to
discriminate between users
■ In CDMA systems, the interference comes
mainly from other nearby CDMA users
Figure of Merit: C/I
■ Each user’s signal is like a small voice in a (carrier/interference ratio)
roaring crowd -- but built using a unique AMPS: +17 dB
code that allows the signal to be uniquely TDMA: +14 to +17 dB
decoded and recovered by the recipient GSM: +7 to 9 dB.
CDMA: -10 to -17 dB.
CDMA: Eb/No ~+6 dB.

Introducing Bits, Symbols, and Chips
Building a
■ A CDMA signal uses many chips to convey just CDMA Signal
one bit of information
■ Each user has a unique chip pattern, in effect a Bits
code channel from User’s Vocoder
■ To recover a bit, integrate a large number of chips

interpreted by the user’s known code pattern Forward Error
Correction
■ Other users’ code patterns appear random and
add up to zero in a random self-canceling fashion, Symbols
thus they don’t disturb the bit decoding decision
being made with the proper code pattern
Coding and
■ The process of going from Symbols into Chips is Spreading
called “spreading”, since the slow, narrow- Chips
bandwidth information is “spread” so that it
occupies a much larger bandwidth

Spreading, from a Time-Domain point of view
Input A: User’s Data Originating Site
At Originating Site: 1
■ Input A: User’s Data @ Input B: Spreading Code
XOR
Exclusive-OR
19,200 bits/second Gate
■ Input B: Walsh Code #23

@ 1.2288 Mcps Spread Spectrum Signal
■ Output: Spread
spectrum signal
via air interface Input A: Received Signal Destination Site
At Destination Site: XOR

Input B: Spreading Code Exclusive-OR
Gate
■ Input A: Received
spread spectrum signal
■ Input B: Walsh Code #23 Output: User’s Original Data
@ 1.2288 Mcps 1
■ Output: User’s Data @
19,200 bits/second just
as originally sent Drawn to actual scale and time alignment

Spreading: a Frequency-Domain Point of View
■ Traditional wireless technologies try to
squeeze one signal into a minimum TRADITIONAL COMMUNICATIONS SYSTEM
amount of bandwidth, so there can be Spread Spectrum
Narrowband
many one-user channels Slow Signal Slow
Information Information
• the data rate of the information Sent Recovered
dictates how wide a bandwidth the TX RX
signal requires; it’s narrow
■ CDMA mixes slow information with a fast
spreading sequence SPREAD-SPECTRUM SYSTEM
• this makes a CDMA signal with much
Wideband
wider bandwidth than the information Signal
alone would require Slow
Information
Slow
Information
• the extra bandwidth gives a payback Sent Recovered
of “processing gain” which extends TX RX
coverage range and improves the

radio link performance for users Fast Fast
Spreading Spreading
■ Multiple users can occupy one CDMA Sequence Sequence
signal, if each user’s information is mixed
with a unique, distinct personal spreading Spread Spectrum Payoff:
sequence, and then all added together. Processing Gain
• Decode the combined signal using Multiple users with diferent codes
one user’s spreading sequence, and
that one user’s signal is recovered

Basic CDMA in Action
QPSK RF
Users Σ Summing
Analog
BTS
Demodulated
Received
CDMA Signal
1
Despreading Sequence
if 0 = (Locally Generated, =0) Decision:
if 1 =
Received energy: Correlation Matches!
matches (=0) 1
Σ
+10
opposite -26
Opposite
Time ( =1)
Integration
-16
This figure illustrates the basic technique of
CDMA signal generation and recovery.
The actual coding process used in IS-95 CDMA includes
a few additional layers, as we’ll see in following slides.
Nonlinearity produces Code Channel Interference
■ The view below, taken remotely with the Agilent E74xx tool,
shows the measured power in the code domain for each walsh
code on a CDMA BTS in actual service
• Notice that not all walsh codes are active
• Pilot, Sync, Paging, and certain traffic channels are in use
■ The noise floor seen on unused walsh codes comes from
nonlinearities in the transmit chain, and/or received interference

The Concept of Orthogonality
Comparing Signals:
Are they Orthogonal?
■ Each user’s signal must be 0 1 1 0 1 1 1 0 Signal A
“built” using a unique
spreading sequence, if we are + 0 0 1 0 1 1 0 0 Signal B
to recover it individually = 0 1 0 0 0 0 1 0 Binary Sum
• if users’ spreading Not these two signals!
sequences aren’t unique,
all users’ signals will be •Two signals are orthogonal if their
hopelessly jumbled corresponding bits match in half the
together and positions, and don’t match in half the
positions
unrecoverable
•One way to check for orthogonality is
■ This “uniqueness” is called to add the two signals in binary form
Orthogonality (modulo 2).
•If the signals are orthogonal, the sum
■ The spreading sequences we will contain exactly as many ones as
use in CDMA are orthogonal zeroes..

Spreading: Whatever we encode, we can decode
ORIGINATING SITE DESTINATION

Spread Data Stream
Input Recovered
Data Data
Spreading Spreading
Sequence Sequence
■ Sender combines data with a fast spreading sequence, transmits

spread data stream
■ Receiver intercepts the stream, uses same spreading sequence
to extract original data
■ If this basic idea makes sense, you’re ready to understand the full
process used in commercial CDMA
“Shipping and Receiving” via CDMA
Shipping Receiving
FedEx
FedEx
Data Mailer Mailer Data
■ Whether in package shipping and receiving, or in CDMA signals,

packaging methods are extremely important!
■ Cargo is placed inside “nested” containers. Each container has
some special purpose -- for example, the disk is readable by a
PC, the mailer keeps the disk from getting bent or damaged, and
the shipping envelope can be addressed to the final destination
■ The shipper packs in a certain order, and the recipient unpacks
in the reverse order
■ For CDMA signals, the “containers” for our shipment are three
different kinds of spreading codes, and each one is used for a
specific purpose
CDMA’s Three Nested Spreading Sequences
ORIGINATING SITE DESTINATION
Spread-Spectrum Chip Streams
X+A X+A+B X+A+B+C X+A+B X+A
Input Recovered
Data Data
X X
Spreading Spreading Spreading Spreading Spreading Spreading

Sequence Sequence Sequence Sequence Sequence Sequence
A B C C B A
■ CDMA signals are built up using three different types of spreading
sequences -- this makes each signal unique and very rugged/robust
■ These sequences are easy to generate, in a base station and in a handset
■ Using these sequences, “Whatever we encode, we can decode”
■ Next step is to meet these sequences, see their special properties
• what are their functions on the forward link (base station to mobile) ?
• what are their functions on the reverse link (mobile to base station) ?
■ Don’t worry about each sequence’ exact purpose yet; these are different on
the forward and reverse links; we’ll see their jobs after the introductions
Meet the Walsh Codes
WALSH CODES
# ---------------------------------- 64-Chip Sequence ------------------------------------------
0 0000000000000000000000000000000000000000000000000000000000000000
1 0101010101010101010101010101010101010101010101010101010101010101
2 0011001100110011001100110011001100110011001100110011001100110011
■ 64 “Magic” Sequences, each 64 chips long 3

4
5
6
0110011001100110011001100110011001100110011001100110011001100110
0000111100001111000011110000111100001111000011110000111100001111
0101101001011010010110100101101001011010010110100101101001011010
0011110000111100001111000011110000111100001111000011110000111100
■ Each Walsh Code is precisely Orthogonal

7 0110100101101001011010010110100101101001011010010110100101101001
8 0000000011111111000000001111111100000000111111110000000011111111
9 0101010110101010010101011010101001010101101010100101010110101010
10 0011001111001100001100111100110000110011110011000011001111001100
compared against any other Walsh Code

11 0110011010011001011001101001100101100110100110010110011010011001
12 0000111111110000000011111111000000001111111100000000111111110000
13 0101101010100101010110101010010101011010101001010101101010100101
14 0011110011000011001111001100001100111100110000110011110011000011
15 0110100110010110011010011001011001101001100101100110100110010110
• it’s simple to generate these codes, or

16 0000000000000000111111111111111100000000000000001111111111111111
17 0101010101010101101010101010101001010101010101011010101010101010
18 0011001100110011110011001100110000110011001100111100110011001100
19 0110011001100110100110011001100101100110011001101001100110011001
20 0000111100001111111100001111000000001111000011111111000011110000
• they’re small enough to store in ROM 21

22
23
24
0101101001011010101001011010010101011010010110101010010110100101
0011110000111100110000111100001100111100001111001100001111000011
0110100101101001100101101001011001101001011010011001011010010110
0000000011111111111111110000000000000000111111111111111100000000
25 0101010110101010101010100101010101010101101010101010101001010101
26 0011001111001100110011000011001100110011110011001100110000110011
27 0110011010011001100110010110011001100110100110011001100101100110
28 0000111111110000111100000000111100001111111100001111000000001111
Unique Properties:
29 0101101010100101101001010101101001011010101001011010010101011010
30 0011110011000011110000110011110000111100110000111100001100111100
31 0110100110010110100101100110100101101001100101101001011001101001
32 0000000000000000000000000000000011111111111111111111111111111111
Mutual Orthogonality
33 0101010101010101010101010101010110101010101010101010101010101010
34 0011001100110011001100110011001111001100110011001100110011001100
35 0110011001100110011001100110011010011001100110011001100110011001
36 0000111100001111000011110000111111110000111100001111000011110000
37 0101101001011010010110100101101010100101101001011010010110100101
38 0011110000111100001111000011110011000011110000111100001111000011
39 0110100101101001011010010110100110010110100101101001011010010110
40 0000000011111111000000001111111111111111000000001111111100000000
41 0101010110101010010101011010101010101010010101011010101001010101
42 0011001111001100001100111100110011001100001100111100110000110011
EXAMPLE: 43
44
45
0110011010011001011001101001100110011001011001101001100101100110
0000111111110000000011111111000011110000000011111111000000001111
0101101010100101010110101010010110100101010110101010010101011010
46 0011110011000011001111001100001111000011001111001100001100111100
47 0110100110010110011010011001011010010110011010011001011001101001
Correlation of Walsh Code #23 with Walsh Code #59 48

49
50
0000000000000000111111111111111111111111111111110000000000000000
0101010101010101101010101010101010101010101010100101010101010101
0011001100110011110011001100110011001100110011000011001100110011
51 0110011001100110100110011001100110011001100110010110011001100110
52 0000111100001111111100001111000011110000111100000000111100001111
#23 0110100101101001100101101001011001101001011010011001011010010110 53 0101101001011010101001011010010110100101101001010101101001011010
54 0011110000111100110000111100001111000011110000110011110000111100
#59 0110011010011001100110010110011010011001011001100110011010011001 55 0110100101101001100101101001011010010110100101100110100101101001
56 0000000011111111111111110000000011111111000000000000000011111111
Sum 0000111111110000000011111111000011110000000011111111000000001111 57 0101010110101010101010100101010110101010010101010101010110101010
58 0011001111001100110011000011001111001100001100110011001111001100
59 0110011010011001100110010110011010011001011001100110011010011001
60 0000111111110000111100000000111111110000000011110000111111110000
Correlation Results: 32 1’s, 32 0’s: they’re Orthogonal!! 61
62
0101101010100101101001010101101010100101010110100101101010100101
0011110011000011110000110011110011000011001111000011110011000011
63 0110100110010110100101100110100110010110011010010110100110010110

Meet the Mother of the PN Sequences
An Ordinary Shift Register
■ The two CDMA PN sequences are
generated in shift registers
Sequence repeats every N chips,
■ An ordinary shift register is no fun, where N is number of cells in register
sequence length = register length
A Tapped, Summing Shift Register
■ A Tapped shift register generates
a wild, self-mutating sequence
2N-1 chips long (N=register length) Sequence repeats every 2N-1 chips,
• Such sequences match if where N is number of cells in register
compared in step (no-brainer,
A Special Characteristic of Sequences
any sequence matches itself) Generated in Tapped Shift Registers
• Such sequences appear Compared In-Step: Matches Itself
approximately orthogonal if Sequence:
compared with themselves not Self, in sync:

Sum: Complete Correlation: All 0’s
exactly matched in time
Compared Shifted: Little Correlation
• false correlation typically ~1% Sequence:
Self, Shifted:
Sum: Practically Orthogonal: Half 1’s, Half 0’s

Daughter #1: The PN Short Code
Acronym: PN = Pseudorandom Noise
The PN Short Code

32,768 chips long
26-2/3 ms. CDMA QPSK Phase Modulator
(75 repetitions in 2 sec.) Using I and Q PN Sequences
I
Q I-sequence cos ωt
QPSK-
■ The PN Short Code consists of two chip modulated
Σ RF
PN Sequences, I (in-phase) and Q input
Output
(quadrature), each 32,768 chips long
• They’re generated in similar but
Q-sequence * sin ωt
differently-tapped 15-bit-long shift
registers * In BTS, I and Q are used in-phase.
• I&Q always used simultaneously, In handset, Q is delayed 1/2 chip to
modulating the two phase axes avoid zero-amplitude crossings which
of a QPSK RF modulator would require a linear power amplifier

Modulation used in CDMA Systems
Mobiles: OQPSK
■ CDMA mobiles use offset Q Axis
QPSK modulation Short
PN I cos ωt
• the Q-sequence is
delayed half a chip, so User’s
Σ
that I and Q never chips
I Axis
change simultaneously
and the mobile TX never Short 1/2
PN Q chip sin ωt
passes through (0,0)
■ CDMA base stations use
QPSK modulation Base Stations: QPSK
Q Axis
• every signal (voice, pilot, Short
cos ωt
sync, paging) has its own PN I
amplitude, so the
transmitter is unavoidably User’s
Σ
going through (0,0) chips
I Axis
sometimes; no reason to
include 1/2 chip delay Short
PN Q sin ωt

Daughter #2: The PN Long Code
Long Code
State Register
(@ 1.2288 MCPS)
+ Public
1100011000 P h o n e ‘ s ESN , P e r mu t e d Long Code Mask
=
(STATIC)
SUM
User Long Code
Modulo-2 Addition Sequence
(@1.2288 MCPS)
■ Generated in a 42-bit register, the PN Long code is more than 40 days long
(~4x1013 chips) -- too big to store in ROM in a handset, so it’s generated chip-
by-chip using the scheme shown above
■ Each handset codes its signal with the PN Long Code, but at a unique offset
computed masking with its ESN (32 bits) and 10 bits set by the system
• this is called the “Public Long Code Mask”; produces unique shift
• private long code masks are available for enhanced privacy
■ Integrated over a period even as short as 64 chips, phones with different PN
long code offsets will appear practically orthogonal

The Complete Recipe for the CDMA Channels
FORWARD CHANNEL
scrambled + WALSH CODE

scrambled + WALSH CODE PN SHORT CODE
at unique PN offset
of BTS sector
by Long Code
REVERSE CHANNEL
SHORT PN: All WALSH CODES
used at offset 0, PN LONG CODE used as “tokens”
gives OQPSK at user’s offset for user bits,
BTS modulation makes signal
very robust
■ All three spreading codes are used on both the forward and reverse links
■ Forward Channel: Each Sector has a unique PN Short Code offset, each user
in that sector has a personal Walsh Code
• long code is used incidentally for scrambling
■ Reverse Channel: Each phone has a unique PN Long Code offset, different
from every other phone in the world
• Incidentally, Walsh Codes used as symbols, short code for modulation
How a BTS Builds the Forward Code Channels
(C)BSC or BTS (1 sector) Short PN Code
Access PN Offset 246
Manager Walsh #0 I Q
Pilot FEC
Switch Trans-
Walsh #32 mitter,
Sync FEC Sector X
Walsh #1
Paging FEC
A Forward Channel
Walsh #12 is identified by:
Vocoder FEC
Walsh #23
Σ ❖ its CDMA RF
carrier Frequency
Vocoder FEC a Channel Element ❖ the unique Short
Walsh #27 Code PN Offset of
Vocoder FEC the sector
❖ the unique Walsh
Walsh #44
Vocoder FEC Code of the user
more more more

Functions of the CDMA Forward Channels
Pilot Walsh 0 ■ PILOT: WALSH CODE 0

Paging Walsh 1 • The Pilot is a “structural beacon” which
does not contain a character stream. It is a
Walsh 6 timing source used in system acquisition
and as a measurement device during
Walsh 11 handoffs
Walsh 19 ■ SYNC: WALSH CODE 32
• This carries a data stream of system
Walsh 20 identification and parameter information
used by mobiles during system acquisition
Sync Walsh 32
■ PAGING: WALSH CODES 1 up to 7
Walsh 37 • There can be from one to seven paging
Walsh 41 channels as determined by capacity needs.
They carry pages, system parameters
Walsh 42 information, and call setup orders
Walsh 55 ■ TRAFFIC: any remaining WALSH codes

• The traffic channels are assigned to
Walsh 56 individual users to carry call traffic. All
remaining Walsh codes are available,
Walsh 60 subject to overall capacity limited by noise

Forward Link Capacity: Limitations
■ Forward link capacity of a sector is limited by several factors

• There are only 64 walsh codes – Pilot, Sync and Paging use three, so
only 61 are left to be used as traffic channels
• Forward Power of a sector is limited by the transmitter’s power
amplifier peak power capability
– When the amplifier is driven to maximum power, no more traffic
channels can be added (this is usually the capacity bottleneck!)
– The Agilent BOAT test display above shows the power amplifier
is using an estimated 23% of its capacity
• Reverse link (BTS receive) power level limits the ability of the weakest
mobiles to be heard, reducing capacity
■ A typical BTS sector can handle from 20 to 35 simultaneous calls,
depending on interference, network configuration, and software

Code Channels in the Reverse Direction
Switch BSC BTS (1 sector)
(Access A Reverse Channel is identified by:
Manager) Long Code Gen ❖ its CDMA RF carrier Frequency
Access Channels Channel Element ❖ the unique Long Code PN Offset
of the individual handset
Long Code Gen Long
Code
Vocoder Channel Element
Long
Receiver, Code
Long Code Gen Sector X
Long Code Gen

Long Long
Vocoder Channel Element Code Code
Long
Code
Long
Long Code Gen Code
more more more

Functions of the CDMA Reverse Channels
There are two types of CDMA Reverse Channels:
■ TRAFFIC CHANNELS are used by individual users

during their actual calls to transmit traffic to the BTS
• a reverse traffic channel is defined by a user-
specific public or private Long Code mask
• there are as many reverse Traffic Channels as
there are CDMA phones in the world
BTS ■ ACCESS CHANNELS are used by mobiles not yet in a
call to transmit registration requests, call setup
requests, page responses, order responses, and other
signaling information
• an access channel is defined by a public long
REG
code mask specific to the BTS sector
• Access channels are paired with Paging 1-800
Channels. There can be up to 32 access 242
4444
channels per paging channel

Basic CDMA Network Architecture
Switch Access Manager BTS

or (C)BSC GPS
Ch. Card
Packets
DISCO 1 CDSU
CDSU Σα
Chips
Σβ Txcvr RFFE
DS0 in T1 DTCs Σχ
B B
Vocoders Vocoder Channel RF

Selectors
Element
PSTN

Variable Rate Vocoding & Multiplexing
DSP QCELP VOCODER
■ Vocoders compress speech, reduce bit 20ms Sample

rate Pitch
Filter
■ CDMA uses a superior Variable Rate Codebook
Vocoder
Coded Result Feed-
• full rate during speech back Formant
Filter
• low rates in speech pauses
• increased capacity bits Frame Sizes
• more natural sound 288 Full Rate Frame
■ Voice, signaling, and user secondary 144 1/2 Rate Frame
data may be mixed in CDMA frames 72 1/4 Rt.
■ The protocols governing the mixture are 36 1/8
the “Multiplex Options”; 1 = 8K, 2 = 13K
Frame Contents: can be a mixture of
■ The content of the primary traffic bits are Voice Signaling Secondary
determined by Service Options which the
mobile and system negotiate

Forward Power Control
BSC BTS (1 sector) Help!

Pilot
Trans-
Sync mitter, Forward
Paging Sector X RF
User 1 Σ I Q
User 2 Short PN
Vocoder/
Selector User 3
more
■ The BTS continually reduces the strength of each user’s forward

baseband chip stream
■ When a particular handset sees errors on the forward link, it
requests more energy
■ The complainer’s chip stream gets a quick boost; afterward,
continues to diminish

Reverse Power Control
800 bits per second
BSC BTS RX RF Digital

Stronger than Reverse Closed
RF Open
setpoint? Loop Loop
Bad FER?
Raise Setpoint Setpoint TX RF Digital
Occasionally, Handset
as needed
■ Three methods work in tandem to equalize all handset signal levels
at the BTS
• Reverse Open Loop: handset adjusts power up or down based
on received BTS signal (AGC)
• Reverse Closed Loop: Is handset too strong? BTS tells up or
down 1 dB 800 times/second
• Reverse Outer Loop: BSC has FER trouble hearing handset?
BSC adjusts BTS setpoint

What’s In a Handset?
Digital
Rake Receiver Symbols
Chips Traffic Correlator
PN xxx Walsh xx Symbols
Receiver
RF Section
IF, Detector
Traffic Correlator
PN xxx Walsh xx Σ Viterbi
Decoder
AGC Traffic Correlator Packets

PN xxx Walsh xx
RF Audio
Messages
Open Loop
Pilot Searcher
Duplexer
PN xxx Walsh 0 CPU Vocoder
RF Audio
Transmit Gain Adjust
Messages
Transmitter
Transmitter Digital Section
RF Section
Long Code Gen.

The Rake Receiver
Handset Rake Receiver
PN Walsh
Voice,
RF PN Walsh Σ Data,
BTS Messages
PN Walsh
BTS
Searcher Pilot Ec/Io
PN W=0
■ Every frame, handset uses combined outputs of the three traffic

correlators (“rake fingers”)
■ Each finger can independently recover a particular PN offset and
Walsh code
■ Fingers can be targeted on delayed multipath reflections, or even on
different BTSs
■ Searcher continuously checks pilots

CDMA Soft Handoff Mechanics
Switch BSC Handset Rake Receiver
PN Walsh
Voice,
Sel. RF PN Walsh Σ Data,
PN Walsh Messages
BTS
BTS Searcher
Pilot Ec/Io
PN W=0
■ CDMA soft handoff is driven by the handset

• Handset continuously checks available pilots
• Handset tells system pilots it currently sees
• System assigns sectors (up to 6 max.), tells handset
• Handset assigns its fingers accordingly
• All messages sent by dim-and-burst, no muting!
■ Each end of the link chooses what works best, on a frame-by-frame
basis!
• Users are totally unaware of handoff

Softer Handoff
Handset Rake Receiver
Switch BSC PN Walsh
Voice,
RF PN Walsh Σ Data,
Sel. BTS Messages
PN Walsh
Searcher
PN W=0 Pilot Ec/Io
■ Each BTS sector has unique PN offset & pilot

■ Handset will ask for whatever pilots it wants
■ If multiple sectors of one BTS simultaneously serve a handset, this is
called Softer Handoff
■ Handset is unaware, but softer handoff occurs in BTS in a single
channel element
■ Handset can even use combination soft-softer handoff on multiple
BTS & sectors

CDMA
CDMA Messaging
Messaging and
and Call
Call Flow
Flow

Messaging as an Investigative Resource:
Why did a Flight Crash? Why did a Call Drop?
■ Layer-3 Messaging between system
and phone during a call is much like CDMA Messaging is much like
in-flight voice messaging between Air Traffic Control messaging
air traffic controllers and pilots.
■ When a call drops or a flight goes
down, intense investigation of the
messaging will often identify the
cause of the problem.
■ The Cockpit Voice Recorder gives
extremely valuable information. The
CDMA equivalent is a log file from
drive-test equipment. It can answer:
• What was the call state at the
time of the crash? (handoffs,
primary PN, mobile parameters)
• Was messaging reliable?
• Were there any pending
messages not acknowledged or
requests not yet implemented BTS
on either side?
• Was either link under stress?
Sources of CDMA Data and Tools for Processing
CDMA NETWORK EQUIPMENT HANDSET
Switch Access Mgr./BSC-BSM BTS
SLM CM
NOIS Messages GPSR IS-95/J Std 8
GPSR Messages
BSM
DMS-BUS TFU1
NMIS
CDSU
CDSU
Messages
CDSU DISCO TFU1
DISCO 1 Ch. Card ACC

CDSU CDSU
LPP ENET LPP
CDSU DISCO 2 CDSU Σα Txcvr A RFFE A
DTCs
CDSU Σβ Txcvr B RFFE B
Handset
SBS CDSU Σχ Txcvr C RFFE C
Vocoders Messages PC-based
IOC Selectors QC-Specific Messages
Mobile Data
Selector IS-95/J Std 8 Messages Capture Tools
Switch OMs, Logs
pegs, logs Unix-based,
Various PC-based PC-based
External Data Analysis Mobile Data
Analysis Post-Processing Post-Processing
Tools Tools Tools
■ CDMA optimization data flows from three places:

• Switch, CDMA peripherals and base stations, and the Handset
■ Various software and hardware tools are available for collection
and analysis of each of these streams of data
■ Data contains messages and various indicators of RF performance
Structure of CDMA Messages
EXAMPLE:
■ CDMA messages on both forward A POWER MEASUREMENT
and reverse links are normally sent
via dim-and-burst REPORT MESSAGE
■ Messages include many fields of Field Length
binary data (in bits)
■ The first byte of each message MSG_TYPE (‘00000110’) 8

identifies message type to allow the ACK_SEQ 3
recipient to parse the contents MSG_SEQ 3
■ To ensure no messages are ACK_REQ 1
missed, all CDMA messages bear
serial numbers and important ENCRYPTION 2
messages contain a bit requesting ERRORS_DETECTED 5
acknowledgment
POWER_MEAS_FRAMES 10
■ Messages not promptly
acknowledged are retransmitted LAST_HDM_SEQ 2
several times, after which the NUM_PILOTS 4
sender may release the call
NUM_PILOTS occurrences of this field:
■ Test tools parse all messages for
review and analysis PILOT_STRENGTH 6
RESERVED (‘0’s) 0-7

Messages In Acquisition and Idle States
Pilot Channel Sync Channel
No Messages Sync Channel Msg
Access Channel
Paging Channel BTS
Registration Msg
Access Parameters Msg General Page Msg
Order Msg
System Parameters Msg Order Msg • Mobile Station Acknowldgment
•Base Station Acknowledgment
•Lock until Power-Cycled • Long Code Transition Request
• Maintenance required • SSD Update Confirmation
CDMA Channel List Msg many others….. many others…..
Extended System Channel Assignment Origination Msg

Parameters Msg Msg
Extended Neighbor Page Response Msg

List Msg Feature Notification Msg
Authentication Challenge
Global Service Authentication Response Msg
Redirection Msg Challenge Msg
Status Response Msg

Service Redirection Msg Status Request Msg
TMSI Assignment
SSD Update Msg TMSI Assignment Msg Completion Message
Data Burst Msg

Null Msg Data Burst Msg

Messages During a Call: Conversation State
Forward Traffic Channel
Order Msg Alert With Reverse Traffic Channel
• Base Station Acknowledgment Information Msg
• Base Station Challenge
Confirmation
Service Request Msg Service Request Msg Origination
• Message Encryption Mode Continuation Msg
Authentication Service Response Msg Service Response Msg Authentication Challenge

Challenge Msg Response Msg
TMSI Assignment Msg Service Connect Msg Service Connect TMSI Assignment
Completion Message Completion Message
Send Burst DTMF Msg Service Option Service Option Control Send Burst DTMF Msg
Control Msg Message
Set Parameters Msg Status Request Msg Status Response Msg Parameters Response
Message
Power Control Flash With Flash With Power Measurement

Parameters Msg. Information Msg Information Msg Report Msg
Retrieve Parameters Msg Data Burst Msg Data Burst Message Order Message
• Mobile Sta. Acknowledgment
Analog Handoff Extended Handoff Pilot Strength •Long Code Transition
Direction Msg Direction Msg Measurement Msg Request
• SSD Update Confirmation
SSD Update Msg Neighbor List Handoff Completion Msg • Connect
Update Msg
Mobile Station In-Traffic System

Registered Msg Parameters Msg

Adventures
Adventures in
in Call
Call Processing
Processing
55 Minutes
Minutes in
in the
the Life
Life of
of aa CDMA
CDMA Handset
Handset
n d s
e c o
30 S
da y!)
in one
e to do
o t tim
we ’ve g
l
’s al
(that

Our Call Processing Adventures
■ Let’s Acquire the System!

■ Let’s do an Idle Mode Handoff!
■ Let’s Register!
■ Let’s Receive an Incoming Call!
■ Let’s Make an Outgoing Call!
■ Let’s End a Call!
■ Let’s Receive Notification of a Voice Message!
■ Let’s Do a Handoff!

CDMA Call Processing
Let’s
Let’s Acquire
Acquire the
the System!
System!

Find a Frequency with a CDMA RF Signal
Reverse Link Frequencies Forward Link Frequencies

(Mobile Transmit) (Base Station Transmit)
800 MHz. Cellular Spectrum
824 MHz. 835 845 849 870 880 890 894
A B Paging, ESMR, etc. A B

825 846.5 869 891.5
1900 MHz. PCS Spectrum
unlic. unlic.
A D B E F C data voice A D B E F C
1850MHz. 1910MHz. 1930MHz. 1990 MHz.
FREQUENCY LISTS:
Mobile scans forward link frequencies:
HISTORY PREFERRED
(Cellular or PCS, depending on model) LIST ROAMING
History List LIST
Last-used:
Preferred Roaming List Freq/SID x Freq/SID 1
Freq/SID y
until a CDMA signal is found. Freq/SID z
Freq/SID 2
Freq/SID 3
NO CDMA?! Go to AMPS, Freq/SID t Freq/SID 4
Freq/SID u Freq/SID 5
or to a power-saving standby mode etc. etc.

Find Strongest Pilot, Read Sync Channel
All PN Offsets
0
Ec/Io
1. Pilot Searcher Scans the Entire Range of PNs

-20
Chips 0 32K
PN 0 512
SYNC CHANNEL MESSAGE
2. Put Rake finger(s) on strongest 98/05/24 23:14:09.817 [SCH]
available PN, decode Walsh 32, Sync Channel Message
MSG_LENGTH = 208 bits
and read Sync Channel Message MSG_TYPE = Sync Channel Message
P_REV = 3
MIN_P_REV = 2
Active Pilot SID = 179
NID = 0
PILOT_PN = 168 Offset Index
Handset Rake Receiver n Rake Fingers LC_STATE = 0x0348D60E013
F1 PN168 W32 o SYS_TIME = 98/05/24 23:14:10.160
LP_SEC = 12
RF F2 PN168 W32 p LTM_OFF = -300 minutes
≈ x ≈ F3 PN168 W32 DAYLT = 0
LO
Srch PN??? W0 PRAT = 9600 bps
Reference PN RESERVED = 1

The Configuration Messages
■ After reading the Sync Channel, the mobile is now capable of

reading the Paging Channel, which now monitors constantly
■ Before it is allowed to transmit or operate on this system, the
mobile must collect a complete set of configuration messages
■ Collection is a short process -- all configuration messages are
repeated on the paging channel every 1.28 seconds
■ The configuration messages contain sequence numbers so the
mobile can recognize if any of the messages have been freshly
updated as it continues to monitor the paging channel
• Access parameters message sequence number
• Configuration message sequence number
• If a mobile notices a changed sequence number, or if 600
seconds passes since the last time these messages were read,
the mobile reads all of them again

Go to Paging Channel, Get Configured
All PN Offsets
0
Ec/Io
-20
Chips 0 32K
PN 0 Read the 512
Configuration Messages
Access Parameters Msg
Keep Rake finger(s) on strongest
available PN, decode Walsh 1, System Parameters Msg
and monitor the Paging Channel
CDMA Channel List Msg
Active Pilot Extended System
Parameters Msg (*opt.)
Handset Rake Receiver n Rake Fingers

(Extended*) Neighbor
List Msg
F1 PN168 W01 o
Global Service
RF F2 PN168 W01 p Redirection Msg (*opt.)
≈ x ≈ F3 PN168 W01
LO
Srch PN??? W0
Now we’re ready to operate!!
Reference PN
Two Very Important Configuration Messages
SYSTEM PARAMETERS MESSAGE

ACCESS PARAMETERS MESSAGE 98/05/24 23:14:11.126 [PCH] System Parameter Message
98/05/24 23:14:10.427 [PCH]
MSG_TYPE = System Parameters Message
MSG_TYPE = Access Parameters Message
CONFIG_MSG_SEQ = 0
SID = 179 NID = 0
ACC_MSG_SEQ = 27
REG_ZONE = 0 TOTAL_ZONES = 0 ZONE_TIMER = 60 min
ACC_CHAN = 1 channel
MULT_SIDS = 0 MULT_NID = 0 BASE_ID = 8710
NOM_PWR = 0dB INIT_PWR = 0dB PWR_STEP = 4dB
BASE_CLASS = Public Macrocellular
NUM_STEP = 5 Access Probes Maximum
PAGE_CHAN = 1 channel
MAX_CAP_SZ = 4 Access Channel Frames Maximum
MAX_SLOT_CYCLE_INDEX = 0
PAM_SZ = 3 Access Channel Frames
HOME_REG = 0 FOR_SID_REG = 0 FOR_NID_REG = 1
Persist Val for Acc Overload Classes 0-9 = 0
POWER_UP_REG = 0 POWER_DOWN_REG = 0
Persist Val for Acc Overload Class 10 = 0
PARAMETER_REG = 1 REG_PRD = 0.08 sec
BASE_LAT = 00D00'00.00N BASE_LONG = 000D00'00.00E
REG_DIST = 0
SRCH_WIN_A = 40 PN chips
SRCH_WIN_N = 80 PN chips
SRCH_WIN_R = 4 PN chips
Persistance Modifier for Msg Tx = 1
NGHBR_MAX_AGE = 0
Persistance Modifier for Reg = 1
PWR_REP_THRESH = 2 frames
Probe Randomization = 15 PN chips
PWR_REP_FRAMES = 56 frames
Acknowledgement Timeout = 320 ms
PWR_THRESH_ENABLE = 1
Probe Backoff Range = 4 Slots Maximum
PWR_PERIOD_ENABLE = 0
Probe Sequence Backoff Range = 4 Slots Max.
PWR_REP_DELAY = 20 frames
Max # Probe Seq for Requests = 2 Sequences
RESCAN = 0
Max # Probe Seq for Responses = 2 Sequences
T_ADD = -13.0 dB T_DROP = -15.0 dB T_COMP = 2.5 dB
Authentication Mode = 1
T_TDROP = 4 sec
Random Challenge Value = Field Omitted
EXT_SYS_PARAMETER = 1
Reserved Bits = 99
RESERVED = 0
GLOBAL_REDIRECT = 0

Four Additional Configuration Messages
CDMA CHANNEL LIST MESSAGE EXTENDED SYSTEM PARAMETERS

98/05/24 23:14:10.786 [PCH] CDMA Channel List Message 98/05/24 23:14:10.946 [PCH]
MSG_LENGTH = 72 bits Extended System Parameters Message
MSG_TYPE = CDMA Channel List Message MSG_LENGTH = 104 bits
PILOT_PN = 168 Offset Index MSG_TYPE = Extended System Parameters Message
CONFIG_MSG_SEQ = 0 PILOT_PN = 168 Offset Index
CDMA_FREQ = 283 CONFIG_MSG_SEQ = 0 RESERVED = 0
RESERVED = Field Omitted PREF_MSID_TYPE = IMSI and ESN
MCC = 000 IMSI_11_12 = 00
NEIGHBOR LIST RESERVED_LEN = 8 bits
RESERVED_OCTETS = 0x00
98/05/24 23:14:11.486 [PCH] Neighbor List Message BCAST_INDEX = 0
MSG_LENGTH = 216 bits RESERVED = 0
MSG_TYPE = Neighbor List Message
CONFIG_MSG_SEQ = 0
PILOT_INC = 4 Offset Index
NGHBR_CONFIG = 0 NGHBR_PN = 220 Offset Index GLOBAL SERVICE REDIRECTION
NGHBR_CONFIG = 0 NGHBR_PN = 52 Offset Index
98/05/17 24:21.566 Paging Channel: Global Service Redirection
PILOT_PN: 168, MSG_TYPE: 96, CONFIG_MSG_SEQ: 0
Redirected access overload classes: { 0, 1 },
RETURN_IF_FAIL: 0,
DELETE_TMSI: 0,
Redirection to an analog system:
EXPECTED_SID = 0
Do not ignore CDMA Available indicator on the redirected analog system
Attempt service on either System A or B with the custom system selection
process
RESERVED = 0

Let’s
Let’s do
do an
an
Idle
Idle Mode
Mode Handoff!
Handoff!

Idle Mode Handoff
■ An idle mobile always demodulates the best available signal

• In idle mode, it isn’t possible to do soft handoff and listen to
multiple sectors or base stations at the same time -- the paging
channel information stream is different on each sector, not
synchronous -- just as the TV news programs on different
networks are not in sync word-by-word if viewed together
• Since a mobile can’t combine signals, the mobile must switch
quickly, always enjoying the best available signal
■ The mobile’s pilot searcher is constantly checking neighbor pilots
■ If the searcher notices a better signal, the mobile continues on the
current paging channel until the end of the current superframe,
then instantly switches to the paging channel of the new signal
• The system doesn’t know the mobile did this! (Does NBC’s
Tom Brokaw know you just switched your TV to CNN?)
■ On the new paging channel, if the mobile learns that registration is
required, it re-registers on the new sector

Idle Mode on the Paging Channel:
Meet the Neighbors, track the Strongest Pilot
All PN Offsets
0
Ec/Io
-20
Chips 0 SRCH_WIN_A Mobile Rake RX 32K

PN 0 F1 PN168 W01 512
Active Pilot F2 PN168 W01
Rake Fingers n F3 PN168 W01
o Srch PN??? W0
p
SRCH_WIN_N The phone’s pilot searcher constantly checks
the pilots listed in the Neighbor List Message
Reference PN
Neighbor Set
If the searcher ever notices a neighbor pilot substantially stronger than

the current reference pilot, it becomes the new reference pilot
and the phone switches over to its paging channel on the next superframe.
This is called an idle mode handoff.

Phone Operation on the Access Channel
A Successful Access Attempt
■ A sector’s Paging Channel announces 1
(typ) to 32 (max) Access Channels: PN Origination Msg ACCESS
Long Code offsets for mobiles to use if Success!
accessing the system. BTS MS
• For mobiles sending Registration, Probing
Origination, Page Responses an Access Probe
• Base Station always listening! a Probe Sequence
an Access Attempt
■ On the access channel, phones are not
yet under BTS closed-loop power control! PAGING Base Sta. Acknlgmt. Order
■ Phones access the BTS by “probing” at
FW TFC TFC frames of 000s
power levels determined by receive power
and an open loop formula PAGING Channel Assnmt. Msg.
• If “probe” not acknowledged by BTS
within ACC_TMO (~400 mS.), phone TFC preamble of 000s RV TFC
will wait a random time (~200 mS)
FW TFC Base Sta. Acknlgmt. Order
then probe again, stronger by PI db.
• There can be 15 max. (typ. 5) probes Mobile Sta. Ackngmt. Order RV TFC
in a sequence and 15 max. (typ. 2)
sequences in an access attempt FW TFC Service Connect Msg.
• most attempts succeed on first probe!
Svc. Connect Complete Msg RV TFC
■ The Access Parameters message on the
paging channel announces values of all FW TFC Base Sta. Acknlgmt. Order
related parameters
Call is Established!
Let’s
Let’s Register!
Register!

Registration
■ Registration is the process by which an idle mobile lets the system

know it’s awake and available for incoming calls
• this allows the system to inform the mobile’s home switch of
the mobile’s current location, so that incoming calls can be
delivered
• registration also allows the system to intelligently page the
mobile only in the area where the mobile is currently located,
thereby eliminating useless congestion on the paging channels
in other areas of the system
■ There are many different conditions that could trigger an obligation
for the mobile to register
• there are flags in the System Parameters Message which tell
the mobile when it must register on the current system

An Actual Registration
18:26.826 [PCH] System Parameters Message
Pilot_PN: 32 The System Parameters Message tells
CONFIG_MSG_SEQ: 14 SID: 16420 NID: 0,
REG_ZONE: 0 TOTAL_ZONES: 0 Zone timer length (min): 1 all mobiles when they should register.
MULT_SIDS: 0 MULT_NIDS: 0 This mobile notices that it is obligated to
BASE_ID: 1618 BASE_CLASS: Reserved
PAG_CHAN: 1 MAX_SLOT_CYCLE_INDEX: 2 register, so it transmits a Registration
HOME_REG: 1 FOR_SID_REG: 1 FOR_NID_REG: 1,
POWER_UP_REG: 1 POWER_DOWN_REG: 1
Message.
PARAMETER_REG: 1 Registration period (sec): 54
Base station 0°00´00.00¨ Lon., 0°00´00.00° Lat. REG_DIST: 0 REGISTRATION MESSAGE
SRCH_WIN_A (PN chips): 28 SRCH_WIN_N (PN chips): 100,
SRCH_WIN_R (PN chips): 130 NGHBR_MAX_AGE: 2 16:18:27.144 Access Channel: Registration
PWR_REP_THRESH: 2 PWR_REP_FRAMES (frames): 15 ACK_SEQ: 7 MSG_SEQ: 1 ACK_REQ: 1 VALID_ACK: 0
PWR_THRESH_ENABLE: 1 PWR_PERIOD_ENABLE: 0, ACK_TYPE: 0
PWR_REP_DELAY: 1 (4 frames) RESCAN: 0, MSID_TYPE: 3, ESN: [0x 01 99 0d fc]
T_ADD: -14.0dB T_DROP: -16.0dB T_COMP: 2.5dB, MFR 1, Reserved 38, Serial Number 69116,
T_TDROP: 4s IMSI: (Class: 0, Class_0_type: 1) [0x 01 8d 31 74 29 36]
EXT_SYS_PARAMETER: 1 00-416-575-0421
EXT_NGHBR_LIST: 1 AUTH_MODE: 0
GLOBAL_REDIRECT: 0 REG_TYPE: Timer-based
SLOT_CYCLE_INDEX: 2
MOB_P_REV: 1
EXT_SCM: 1
SLOTTED_MODE: 1
BASE STATION ACKNOWLEDGMENT MOB_TERM: 1
16:18:27.506 Paging Channel: Order
ACK_SEQ: 1 MSG_SEQ: 0 ACK_REQ: 0 VALID_ACK: 1
MSID_TYPE: 2 IMSI: (Class: 0, Class_0_type: 3)
[0x 02 47 8d 31 74 29 36] (302) 00-416-575-0421 The base station confirms that the
Order type: Base Station Acknowledgement Order mobile’s registration message was
received. We’re officially registered!

Let’s
Let’s Receive
Receive
an
an incoming
incoming Call!
Call!

Receiving an Incoming Call
■ All idle mobiles monitor the paging channel to receive incoming

calls.
■ When an incoming call appears, the paging channel notifies the
mobile in a General Page Message.
■ A mobile which has been paged sends a Page Response
Message on the access channel.
■ The system sets up a traffic channel for the call, then notifies the
mobile to use it with a Channel Assignment Message.
■ The mobile and the base station notice each other’s traffic channel
signals and confirm their presence by exchanging
acknowledgment messages.
■ The base station and the mobile negotiate what type of call this will
be -- I.e., 13k voice, etc.
■ The mobile is told to ring and given a “calling line ID” to display.
■ When the human user presses the send button, the audio path is
completed and the call proceeds.
An Actual Page and Page Response
GENERAL PAGE MESSAGE
98/05/24 23:14:46.127 [PCH] General Page Message
MSG_LENGTH = 128 bits The system pages the mobile,
MSG_TYPE = General Page Message
CONFIG_MSG_SEQ = 1 ACC_MSG_SEQ = 20
615-330-0644.
CLASS_0_DONE = 1
CLASS_1_DONE = 1 RESERVED = 0 PAGE RESPONSE MESSAGE
BROADCAST_DONE = 1 RESERVED = 0
ADD_LENGTH = 0 bits ADD_PFIELD = Field Omitted 98/05/24 23:14:46.425 [ACH] Page Response Message
PAGE_CLASS = 0 PAGE_SUBCLASS = 0 MSG_LENGTH = 216 bits
MSG_SEQ = 1 MSG_TYPE = Page Response Message
IMSI_S = 6153300644 ACK_SEQ = 1 MSG_SEQ = 2 ACK_REQ = 1
SPECIAL_SERVICE = 1 VALID_ACK = 1 ACK_TYPE = 2
SERVICE_OPTION = 32768 MSID_TYPE = IMSI and ESN MSID_LEN = 9 octets
RESERVED = Field Omitted ESN = 0xD30E415C IMSI_CLASS = 0
IMSI_CLASS_0_TYPE = 0 RESERVED = 0
IMSI_S = 6153300644
AUTH_MODE = 1
The mobile responds to the page. AUTHR = 0x307B5 RANDC = 0xC6 COUNT = 0
MOB_TERM = 1 SLOT_CYCLE_INDEX = 0
MOB_P_REV = 3 SCM = 106
BASE STATION ACKNOWLEDGMENT REQUEST_MODE = Either Wide Analog or CDMA Only
SERVICE_OPTION = 32768 PM = 0
98/05/24 23:14:46.768 [PCH] Order Message NAR_AN_CAP = 0 RESERVED = 0
MSG_TYPE = Order Message
ACK_SEQ = 2 MSG_SEQ = 0 ACK_REQ = 0
VALID_ACK = 1
ADDR_TYPE = IMSI ADDR_LEN = 40 bits
IMSI_CLASS = 0 IMSI_CLASS_0_TYPE = 0 RESERVED = 0 The base station confirms that the mobile’s
IMSI_S = 6153300644
ORDER = Base Station Acknowledgement Order
page response was received. Now the
ADD_RECORD_LEN = 0 bits mobile is waiting for channel assignment,
Order-Specific Fields = Field Omitted RESERVED = 0
expecting a response within 12 seconds.
Channel Assignment and
Traffic Channel Confirmation
CHANNEL ASSIGNMENT MESSAGE
18:14:47.027 Paging Channel: Channel Assignment
Only about 400 ms. after the base station
MSID_TYPE: 2 IMSI: (Class: 0, Class_0_type: 0) acknowledgment order, the mobile receives
[0x 01 f8 39 6a 15] 615-330-0644
ASSIGN_MODE: Traffic Channel Assignment the channel assignment message.
ADD_RECORD_LEN: 5 FREQ_INCL: 1 GRANTED_MODE: 2
CODE_CHAN: 43 FRAME_OFFSET: 2
ENCRYPT_MODE: Encryption disabled
BAND_CLASS: 800 MHz cellular band
CDMA_FREQ: 283
The mobile sees at least two
The base station is already good blank frames in a row on
sending blank frames on the forward channel, and
the forward channel,using concludes this is the right traffic
the assigned Walsh code. channel. It sends a preamble
of two blank frames of its own
on the reverse traffic channel.
BASE STATION ACKNOWLEDGMENT
MOBILE STATION ACKNOWLEDGMENT
18:14:47.581 Forward Traffic Channel: Order
ACK_SEQ: 7 MSG_SEQ: 0 ACK_REQ: 1 18:14:47.598 Reverse Traffic Channel: Order
ENCRYPTION: 0 USE_TIME: 0 ACTION_TIME: 0 ACK_SEQ: 0 MSG_SEQ: 0 ACK_REQ: 0
Base Station Acknowledgement Order ENCRYPTION: 0
Mobile Station Acknowledgement Order
The base station acknowledges The mobile station acknowledges the
receiving the mobile’s preamble. base station’s acknowledgment.
Everybody is ready!
Service Negotiation and Mobile Alert
SERVICE CONNECT MESSAGE
18:14:47.760 Forward Traffic Channel: Service Connect
ACK_SEQ: 0 MSG_SEQ: 1 ACK_REQ: 0 ENCRYPTION: 0
Now that both sides have arrived on the
USE_TIME: 0 ACTION_TIME: 0 SERV_CON_SEQ: 0 traffic channel, the base station
Service Configuration: supported Transmission:
Forward Traffic Channel Rate (Set 2): 14400, 7200, 3600, 1800 bps
proposes that the requested call
Reverse Traffic Channel Rate (Set 2): 14400, 7200, 3600, 1800 bps actually begin.
Service option: (6) Voice (13k) (0x8000)
Forward Traffic Channel: Primary Traffic
Reverse Traffic Channel: Primary Traffic
SERVICE CONNECT COMPLETE MSG.
18:14:47.835 Reverse Traffic Channel:
Service Connect Completion
ACK_SEQ: 1 MSG_SEQ: 3 ACK_REQ: 1
ENCRYPTION: 0 SERV_CON_SEQ: 0
ALERT WITH INFORMATION MESSAGE
18:14:47.961 Forward Traffic Channel:
The mobile agrees and
Alert With Information says its ready to play.
SIGNAL_TYPE = IS-54B Alerting
ALERT_PITCH = Medium Pitch (Standard Alert)
SERVICE CONNECT COMPLETE is a
SIGNAL = Long RESERVED = 0 major milestone in call processing. Up
RECORD_TYPE = Calling Party Number until now, this was an access attempt.
RECORD_LEN = 96 bits
NUMBER_TYPE = National Number Now it is officially a call.
NUMBER_PLAN = ISDN/Telephony Numbering Plan
PI = Presentation Allowed SI = Network Provided
18:14:48.018 Reverse Traffic Channel: Order
CHARi = 6153000124 RESERVED = 0 RESERVED = 0
ENCRYPTION: 0
The base station orders the mobile to ring, and Mobile Station Acknowledgement Order
gives it the calling party’s number to display. The mobile says it’s ringing.

The Human Answers! Connect Order
The mobile has been ringing for several

seconds. The human user finally
comes over and presses the send
button to answer the call.
CONNECT ORDER
ENCRYPTION: 0
Connect Order

ENCRYPTION: 0 USE_TIME: 0 ACTION_TIME: 0
Base Station Acknowledgement Order
Now the switch completes the audio circuit and

the two callers can talk!

Let’s
Let’s make
make an
an Outgoing
Outgoing Call!
Call!

Placing an Outgoing Call
■ The mobile user dials the desired digits, and presses SEND.
■ Mobile transmits an Origination Message on the access channel.
■ The system acknowledges receiving the origination by sending a
base station acknowledgement on the paging channel.
■ The system arranges the resources for the call and starts
transmitting on the traffic channel.
■ The system notifies the mobile in a Channel Assignment Message
on the paging channel.
■ The mobile arrives on the traffic channel.
■ The mobile and the base station notice each other’s traffic channel
signals and confirm their presence by exchanging
acknowledgment messages.
■ The base station and the mobile negotiate what type of call this will
be -- I.e., 13k voice, etc.
■ The audio circuit is completed and the mobile caller hears ringing.

Origination
ORIGINATION MESSAGE
The mobile sends an 17:48:53.144 Access Channel: Origination
origination message ACK_SEQ: 7 MSG_SEQ: 6 ACK_REQ: 1
VALID_ACK: 0 ACK_TYPE: 0 MSID_TYPE: 3
on the access ESN: [0x 00 06 98 24] MFR 0 Reserved 1
Serial Number 170020
channel. IMSI: (Class: 0, Class_0_type: 0)
[0x 03 5d b8 97 c2] 972-849-5073
AUTH_MODE: 0 MOB_TERM: 1
SLOT_CYCLE_INDEX: 2 MOB_P_REV: 1 EXT_SCM: 1
DualMode: 0 SLOTTED_MODE: 1 PowerClass: 0
BASE STATION ACKNOWLEDGMENT REQUEST_MODE: CDMA only SPECIAL_SERVICE: 1
Service option: (6) Voice (13k) (0x8000) PM: 0
17:48:53.487 Paging Channel: Order
DIGIT_MODE: 0 MORE_FIELDS: 0 NUM_FIELDS: 11
Chari: 18008900829
MSID_TYPE: 2
NAR_AN_CAP: 0
IMSI: (Class: 0, Class_0_type: 0)
[0x 03 5d b8 97 c2] 972-849-5073
The base station confirms
that the origination message
CHANNEL ASSIGNMENT MESSAGE was received.
17:48:54.367 Paging Channel: Channel Assignment
MSID_TYPE: 2
IMSI: (Class: 0, Class_0_type: 0)
[0x 03 5d b8 97 c2] 972-849-5073
ASSIGN_MODE: Traffic Channel Assignment, The base station sends a
ADD_RECORD_LEN: 5 FREQ_INCL: 1 GRANTED_MODE: 2
CODE_CHAN: 12 FRAME_OFFSET: 0 Channel Assignment
ENCRYPT_MODE: Encryption disabled
BAND_CLASS: 1.8 to 2.0 GHz PCS band
Message and the mobile
CDMA_FREQ: 425 goes to the traffic channel.

Traffic Channel Confirmation
The mobile sees at least two

The base station is already good blank frames in a row on
sending blank frames on the forward channel, and
the forward channel,using concludes this is the right traffic
the assigned Walsh code. channel. It sends a preamble
of two blank frames of its own
on the reverse traffic channel.
ACK_SEQ: 7 MSG_SEQ: 0 ACK_REQ: 1 ENCRYPTION: 0 17:48:54.835 Reverse Traffic Channel: Order
USE_TIME: 0 ACTION_TIME: 0 ACK_SEQ: 0 MSG_SEQ: 0 ACK_REQ: 0
Base Station Acknowledgement Order ENCRYPTION: 0
Mobile Station Acknowledgement Order
The base station acknowledges The mobile station acknowledges the
receiving the mobile’s preamble. base station’s acknowledgment.
Everybody is ready!

Service Negotiation and Connect Complete
SERVICE CONNECT MESSAGE

17:48:55.098 Forward Traffic Channel: Service Connect
Now that the traffic channel is working
USE_TIME: 0 ACTION_TIME: 0 SERV_CON_SEQ: 0 in both directions, the base station
Service Configuration Supported Transmission:
Forward Traffic Channel Rate (Set 2): 14400, 7200, 3600, 1800 bps
proposes that the requested call
Reverse Traffic Channel Rate (Set 2): 14400, 7200, 3600, 1800 bps actually begin.
Service option: (6) Voice (13k) (0x8000)
Forward Traffic Channel: Primary Traffic
Reverse Traffic Channel: Primary Traffic
SERVICE CONNECT COMPLETE MSG.
17:48:55.137 Reverse Traffic Channel: Service Connect
Completion ACK_SEQ: 1, MSG_SEQ: 0, ACK_REQ: 1,
ENCRYPTION: 0, SERV_CON_SEQ: 0

The mobile agrees and
ACK_SEQ: 0 MSG_SEQ: 0 ACK_REQ: 0 ENCRYPTION: 0 says its ready to play.
USE_TIME: 0 ACTION_TIME: 0
The base station agrees. SERVICE CONNECT COMPLETE is a

major milestone in call processing. Up
until now, this was an access attempt.
Now it is officially a call.
Now the switch completes the audio circuit and

the two callers can talk!

Let’s
Let’s End
End aa Call!
Call!

Ending A Call
■ A normal call continues until one of the parties hangs up. That
action sends a Release Order, “normal release”.
■ The other side of the call sends a Release Order, “no reason given”.
• If a normal release is seen, the call ended normally.
■ At the conclusion of the call, the mobile reacquires the system.
• Searches for the best pilot on the present CDMA frequency
• Reads the Sync Channel Message
• Monitors the Paging Channel steadily
■ Several different conditions can cause a call to end abnormally:
• the forward link is lost at the mobile, and a fade timer acts
• the reverse link is lost at the base station, and a fade timer acts
• a number of forward link messages aren’t acknowledged, and the
base station acts to tear down the link
• a number of reverse link messages aren’t acknowledged, and the
mobile station acts to tear down the link

A Beautiful End to a Normal Call
MOBILE RELEASE ORDER
ENCRYPTION: 0
Release Order (normal release)
BASE STATION ACKNOWLEDGMENT At the end of a normal call, this

17:49:21.936 Forward Traffic Channel: Order mobile user pressed end.
ACK_SEQ: 1 MSG_SEQ: 2 ACK_REQ: 0 ENCRYPTION: 0,
The base station acknowledged
BASE STATION RELEASE ORDER
receiving the message, then sent
a release message of its own.
Release Order (no reason given)
SYNC CHANNEL MESSAGE The mobile left the traffic channel,

17:49:22.517 Sync Channel scanned to find the best pilot, and read
MSG_TYPE: 1 Sync Channel Message the Sync Channel Message.
P_REV: 1 MIN_P_REV: 1
SID: 4112 NID: 2 Pilot_PN: 183
LC_STATE: 0x318fe5d84a5
SYS_TIME: 0x1ae9683dc
LP_SEC: 9 LTM_OFF: -10 DAYLT: 1
Paging Channel Data Rate: 9600
CDMA_FREQ: 425

Let’s
Let’s receive
receive Notification
Notification
of
of aa Voice
Voice Message!
Message!

Feature Notification
FEATURE NOTIFICATION MESSAGE
98/06/30 21:16:44.368 [PCH] Feature Notification Message
MSG_LENGTH = 144 bits The Feature Notification Message on
MSG_TYPE = Feature Notification Message
ACK_SEQ = 0 the Paging Channel tells a specific
MSG_SEQ = 0 mobile it has voice messages waiting.
ACK_REQ = 1
VALID_ACK = 0
ADDR_TYPE = IMSI
ADDR_LEN = 56 bits
There are other record types to notify
IMSI_CLASS = 0 the mobile of other features.
IMSI_CLASS_0_TYPE = 3
RESERVED = 0
MCC = 302
IMSI_11_12 = 00
IMSI_S = 9055170325
RELEASE = 0
RECORD_TYPE = Message Waiting
RECORD_LEN = 8 bits
MSG_COUNT = 1
RESERVED = 0

The mobile confirms it has received the
notification by sending a Mobile Station
Acknowledgment Order on the access
channel.

Let’s
Let’s do
do aa Handoff!
Handoff!

The Detailed Rules of Soft Handoff
■ Handset views pilots in sets PILOT SETS

• Active: pilots of sectors actually in use
Active 6
Max. Members
Req’d. By Std.
• Candidates: pilots mobile requested, but
not yet set up & transmitting by system Candidate 5
• Neighbors: pilots told to mobile by system,
as nearby sectors to check Neighbor 20
• Remaining: any pilots used by system but
not already in the other sets (div. by PILOT_INC) Remaining
■ Handset sends Pilot Strength Measurement
Message to the system whenever triggered by: HANDOFF
• It notices a pilot in neighbor or remaining set PARAMETERS
exceeds T_ADD
T_ADD T_DROP
• An active set pilot drops below T_DROP for
T_TDROP time T_TDROP T_COMP
• A candidate pilot exceeds an active by
T_COMP Exercise: How does a pilot
■ The System may set up all requested handoffs, in one set migrate into
or it may apply special manufacturer-specific another set, for all cases?
screening criteria and authorize only some Identify the trigger, and the
messages involved.
The Call is Already Established. What Next?
All PN Offsets
0
Ec/Io
-20
Chips 0 10752 14080 32000 32K
PN 0 168 220 500 512
Mobile Rake RX Active Pilot
F1 PN168 W61 Rake Fingers n The call is already in progress.
F2 PN168 W61 o PN 168 is the only active signal,
F3 PN168 W61 p and also is our timing reference.
Srch PN??? W0
Continue checking the neighbors.
Reference PN
!
Neighbor Set
T_ADD
!
If we ever notice a neighbor with Ec/Io above T_ADD,
ask to use it! Send a Pilot Strength Measurement Message!

Mobile Requests the Handoff!
PILOT STRENGTH MEASUREMENT MESSAGE

98/05/24 23:14:02.205 [RTC]
Pilot Strength Measurement Message
Just prior to this message, this particular MSG_TYPE = Pilot Strength Measurement Message
mobile already was in handoff with PN 168 ENCRYPTION = Encryption Mode Disabled
and 220. REF_PN = 168 Offset Index (the Reference PN)
PILOT_STRENGTH = -6.0 dB
This pilot strength measurement message KEEP = 1
PILOT_PN_PHASE = 14080 chips (PN220+0chips)
reports PN 500 has increased above PILOT_STRENGTH = -12.5 dB
T_Add, and the mobile wants to use it too. KEEP = 1
PILOT_PN_PHASE = 32002 chips (PN500 + 2 chips)
PILOT_STRENGTH = -11.0 dB
KEEP = 1
RESERVED = 0

98/05/24 23:14:02.386 [FTC] Order Message
MSG_TYPE = Order Message
The base station acknowledges receiving
ACK_SEQ = 0 MSG_SEQ = 0 ACK_REQ = 0 the Pilot Strength Measurement Message.
ENCRYPTION = Encryption Mode Disabled
USE_TIME = 0 ACTION_TIME = 0
ORDER = Base Station Acknowledgement Order
ADD_RECORD_LEN = 0 bits
Order-Specific Fields = Field Omitted
RESERVED = 0

System Authorizes the Handoff!
HANDOFF DIRECTION MESSAGE
98/05/24 23:14:02.926 [FTC] Extended Handoff Direction Message The base station sends a Handof
MSG_TYPE = Extended Handoff Direction Message Direction Message authorizing the
ACK_SEQ = 0 MSG_SEQ = 6 ACK_REQ = 1 mobile to begin soft handoff with all
USE_TIME = 0 ACTION_TIME = 0 HDM_SEQ = 0 three requested PNs. The pre-existing
SEARCH_INCLUDED = 1
link on PN 168 will continue to use
T_ADD = -13.0 dB T_DROP = -15.0 dB T_COMP = 2.5 dB Walsh code 61, the new link on PN220
T_TDROP = 4 sec
HARD_INCLUDED = 0FRAME_OFFSET = Field Omitted will use Walsh Code 20, and the new
PRIVATE_LCM = Field Omitted RESET_L2 = Field Omitted link on PN500 will use Walsh code 50.
RESET_FPC = Field Omitted RESERVED = Field Omitted
ENCRYPT_MODE = Field Omitted RESERVED = Field Omitted
NOM_PWR = Field Omitted NUM_PREAMBLE = Field Omitted
BAND_CLASS = Field Omitted CDMA_FREQ = Field Omitted
ADD_LENGTH = 0
PILOT_PN = 168 PWR_COMB_IND = 0 CODE_CHAN = 61
RESERVED = 0
98/05/24 23:14:02.945 [RTC] Order Message
MSG_LENGTH = 56 bits MSG_TYPE = Order Message
The mobile acknowledges it has received ENCRYPTION = Encryption Mode Disabled
ORDER = Mobile Station Acknowledgement Order
the Handoff Direction Message. ADD_RECORD_LEN = 0 bits
Order-Specific Fields = Field Omitted RESERVED = 0

Mobile Implements the Handoff!
HANDOFF COMPLETION MESSAGE
98/05/24 23:14:02.985 [RTC] Handoff Completion Message
The mobile searcher quickly re-checks MSG_LENGTH = 72 bits
MSG_TYPE = Handoff Completion Message
all three PNs. It still hears their pilots! ACK_SEQ = 6 MSG_SEQ = 1 ACK_REQ = 1
The mobile sends a Handoff Completion LAST_HDM_SEQ = 0
Message, confirming it still wants to go PILOT_PN = 168 Offset Index
ahead with the handoff. PILOT_PN = 500 Offset Index
RESERVED = 0

The base station confirms it has
98/05/24 23:14:03.085 [FTC] Forward Traffic Channel: Order
ACK_SEQ: 0 MSG_SEQ: 1 ACK_REQ: 0 ENCRYPTION: 0 received the mobile’s Handoff
USE_TIME: 0 ACTION_TIME: 0 Completion message, and will
continue with all of the links
active.

Neighbor List Updated, Handoff is Complete!
NEIGHBOR LIST UPDATE MESSAGE
98/05/24 23:14:03.166 [FTC] Neighbor List Update Message
MSG_TYPE = Neighbor List Update Message
In response to the mobile’s Handoff
PILOT_INC = 4 Offset Index Completion Message, the base station
NGHBR_PN = 164 Offset Index
NGHBR_PN = 68 Offset Index assembles a new composite neighbor
NGHBR_PN = 52 Offset Index list including all the neighbors of each of
NGHBR_PN = 304 Offset Index the three active pilots.
This is necessary since the mobile
NGHBR_PN = 372 Offset Index could be traveling toward any one of
NGHBR_PN = 8 Offset Index these pilots and may need to request
NGHBR_PN = 384 Offset Index soft handoff with any of them soon.
RESERVED = 0
98/05/24 23:14:03.245 [RTC] Order Message
The mobile confirms receiving the MSG_LENGTH = 56 bits MSG_TYPE = Order Message
Neighbor List Update Message. It is ACK_SEQ = 7 MSG_SEQ = 7 ACK_REQ = 0
already checking the neighbor list and ORDER = Mobile Station Acknowledgement Order
will do so continuously from now on. ADD_RECORD_LEN = 0 bits
Order-Specific Fields = Field Omitted
The handoff is fully established. RESERVED = 0

Handoff Now In Effect, keep checking Pilots!
All PN Offsets
0
Ec/Io
-20
Chips 0 10752 14080 32000 32K
PN 0 168 220 500 512
Mobile Rake RX Active Set
F1 PN168 W61 n Rake Fingers
p o
F2 PN500 W50
T_DROP
F3 PN220 W20
Srch PN??? W0
Reference PN
Neighbor Set
T_ADD
Continue checking each ACTIVE pilot. If any are less than T_DROP and remain
so for T_TDROP time, send Pilot Strength Measurement Message, DROP IT!!
Continue checking each NEIGHBOR pilot. If any ever rises above T_ADD, send
PSMM, ADD IT! Keep watching CANDIDATES vs ACTIVES using T_COMP, too.
The Complete Picture of Handoff & Pilot Sets
All PN Offsets
0
Ec/Io
-20
Chips 0 SRCH_WIN_A 32K

Rake Fingers n
PN 0 o p Active Set 512
Pilots of sectors
SRCH_WIN_A
T_DROP now used for Mobile Rake RX
communication
F1 PN168 W61
Reference PN F2 PN500 W50
T_DROP
Candidate Set SRCH_WIN_N F3 PN220 W20
Pilots requested Srch PN??? W0
by mobile but not
set up by system Neighbor Set
Pilots suggested
T_ADD by system for
more checking
All other pilots divisible by PILOT_INC but not

Remaining Set presently in Active, Candidate, or Neighbor sets
T_ADD
SRCH_WIN_R

Timing of Phone’s Pilot Searcher Measurements
CURRENT PILOT SET CONTENTS R
3 A1 A2 A3 The searcher checks pilots in nested
1 C1 loops, much like meshed gears. R
12 N1 N2 N3 N4 N5 N6 N7 N8 N9 N10 N11 N12 Actives and candidates N
occupy the fastest- N NR
112 R1 R2 R3 R4 R5 R6 R7 R8 R9 R10 R11 R12
R13 R14 R15 R16 R17 R18 R19 R20 R21 R22 R23 R24 spinning wheel. N
R25 R26 R27 R28 R29 R30 R31 R32 R33 R34 R35 R36 Neighbors are A R
R37 R38 R39 R40 R41 R42 R43 R44 R45 R46 R47 R48 next, advancing A AN
R49 R50 R51 R52 R53 R54 R55 R56 R57 R58 R59 R60
one pilot for each R
R61 R62 R63 R64 R65 R66 R67 R68 R69 R70 R71 R72
Act+Cand. revolution. N
R73 R74 R75 R76 R77 R78 R79 R80 R81 R82 R83 R84 R
Remaining is slowest, N
R85 R86 R87 R88 R89 R90 R91 R92 R93 R94 R95 R96
N N
advancing one pilot each
R97 R98 R99 R100R101R102R103R104R105R106R107R108 R
R109R110R111R112
time the Neighbors revolve.
PILOT SEARCHER VIEWED IN SEQUENCE: Typical Elapsed Time = 4 seconds

A1 A2 A3 C1 N1 A1 A2 A3 C1 N2 A1 A2 A3 C1 N3 A1 A2 A3 C1 N4 A1 A2 A3 C1 N5 A1 A2 A3 C1 N6 A1 A2 A3 C1 N7
A1 A2 A3 C1 N8 A1 A2 A3 C1 N9 A1 A2 A3 C1 N10 A1 A2 A3 C1 N11 A1 A2 A3 C1 N12 R1 A1 A2 A3 C1 N1 A1 A2 A3 C1
N2 A1 A2 A3 C1 N3 A1 A2 A3 C1 N4 A1 A2 A3 C1 N5 A1 A2 A3 C1 N6 A1 A2 A3 C1 N7 A1 A2 A3 C1 N8 A1 A2 A3 C1
N9 A1 A2 A3 C1 N10 A1 A2 A3 C1 N11 A1 A2 A3 C1 N12 R2 A1 A2 A3 C1 N1 A1 A2 A3 C1 N2 A1 A2 A3 C1 N3 A1 A2 A3
C1 N5 A1 A2 A3 C1 N5 A1 A2 A3 C1 N6 A1 A2 A3 C1 N7 A1 A2 A3 C1 N8 A1 A2 A3 C1 N9 A1 A2 A3 C1 N10 A1 A2 A3
C1 N11 A1 A2 A3 C1 N12 R3
Only 3 of 112 remaining set pilots have been checked thus far!
Types of CDMA Handoffs
■ Soft & Softer Handoffs are preferred, but not always possible
• a handset can receive BTS/sectors simultaneously only on one
frequency
• all involved BTS/sectors must connect to a networked BSCs.
Some manufacturers do not presently support this, and so are
unable to do soft-handoff at boundaries between BSCs.
• frame timing must be same on all BTS/sectors
■ If any of the above are not possible, handoff still can occur but can
only be “hard” break-make protocol like AMPS/TDMA/GSM
• intersystem handoff: hard
• change-of-frequency handoff: hard
• CDMA-to-AMPS handoff: hard, no handback
– auxiliary trigger mechanisms available (RTD), Ec/Io
■ Global Service Redirection Messages on outlooking sectors….

CDMA
CDMA Performance
Performance Indicators
Indicators
and
and Problem
Problem “Signatures”
“Signatures”

Introducing CDMA RF Performance Indicators
■ Earlier we compared a Cockpit Voice Recorder in aviation to the message
files captured by CDMA drive-test equipment.
■ Continuing this analogy, a Flight Data Recorder logs aircraft operational
settings. Its CDMA equivalent is a file of RF performance indicators
captured by drive-test equipment.
■ Key CDMA parameters and measurements show the condition of the RF
environment. They are the primary gauges used to guide CDMA
optimization and troubleshooting
• some indicate uplink conditions, some downlink, and some, both.
• these parameters are collected primarily at the subscriber end of the
link, and thus are easy to capture using readily available commercial
equipment without requiring assistance at the BSC
■ Understanding these parameters and their important implications requires
basic knowledge in several subject areas:
• General: RF units, transmitter and receiver basics
• CDMA and spread-spectrum signal characteristics
– channel definitions
– power control systems
– basic CDMA call processing flow
– signal behavior characteristics in noise and interference
Key CDMA RF Performance Indicators
■ FER Frame Erasure Rate Forw

• on forward channel ard 0 2 5 100
(realized at Handset)
• on reverse channel Rev
er s e
FER
(realized at base station) %
• FER is an excellent call
quality “summary” statistic
■ Mobile Receive Power RX Level
overload>>
• usually expressed in dBm
• measured derived from Handset Receiver -40
Rake
handset IF AGC LNA IF R
• broadband, “unintelligent” ≈ x
≈ R
BW BW R
measurement: includes all ~30 LO 1.25
S
<<too weak
MHz. MHz.
RF in the carrier bandwidth RX Level
(from AGC) -90
regardless of source, not
-105
just RF from serving BTS
More Key CDMA RF Performance Indicators
■ Ec/Io
• Ratio of one pilot’s power to -25 -15 -10 0
total receive power
– could be expressed as a Ec/Io dB
ratio or in percent
– Is commonly expressed in
dB
• guides soft handoff decisions
– a sector with strong pilot
will have strong traffic
channels too Ec Energy of
desired pilot alone
• is digitally measured by the
search correlator for one PN
offset
• can’t have values higher than
1, which is 0 db
• Values > -10 db are good
Io Total energy received

How Ec/Io Varies with Traffic Loading
Light Traffic Loading

■ Each sector transmits a certain
amount of power, the sum of:
• pilot, sync, and paging Ec/Io = (2/4)
= 50%
• any traffic channels in use = -3 db. Paging 1.5w
at that moment Sync 0.5w I0
Pilot 2w EC
■ Ec/Io is the ratio of pilot power
to total power
• On a sector with nobody Heavily Loaded
talking, Ec/Io is typically
Traffic Channels
about 50%, which is -3 db
• On a sector with maximum Ec/Io = (2/10) 6w
= 20%
traffic, Ec/Io is typically I0
= -7 db.
about 20%, which is -7 db. Paging
Sync
1.5w
0.5w
Pilot 2w EC

How Ec/Io varies with RF Environment
One Sector Dominant

■ In a “clean situation”, one
Channels
Traffic
sector is dominant and the Io = -90 dbm
4w
mobile enjoys an Ec/Io just Ec = -96 dbm I0

as good as it was when Ec/Io = -6 db
Paging
Sync
1.5w
0.5w
transmitted Pilot 2w EC
■ In “pilot pollution”, too many

sectors overlap and the Many Sectors, Nobody Dominant
mobile hears a “soup” made Traffic BTS10
up of all their signals

Sync & Paging
Pilot
Traffic BTS9
Sync & Paging
• Io is the power sum of all Pilot

Traffic BTS8
the signals reaching the Io = 10 signals Sync & Paging

Pilot
Traffic BTS7
mobile each -90 dbm Sync & Paging
Pilot
= -80 dbm Traffic BTS6

• Ec is the energy of a Ec of any one
Sync & Paging
Pilot
I0
single sector’s pilot
Traffic BTS5
Sync & Paging
sector = -96 Pilot
Traffic BTS4
• The large Io overrides the Ec/Io = -16 db Sync & Paging
Pilot
weak Ec; Ec/Io is low! Traffic

Sync & Paging
Pilot
BTS3
Traffic BTS2
Sync & Paging
Pilot
Traffic BTS1
Sync & Paging
Pilot EC
More Key CDMA RF Performance Indicators
Subscriber Handset
■ TXPO Handset Transmit Power BTS
Receiver>> Rake
R
• Actual RF power output of the LNA
Viterbi
DUP x ≈ IF R Σ
handset transmitter, including TXPO PA ∼ LO R
Decoder
combined effects of open x ~

LO
Open Loop S
loop power control from Closed Loop Pwr Ctrl
receiver AGC and closed IF

x
I Long PN Vocoder
Orth
loop power control by BTS IF Mod
x
x Mod FEC
Q <<Transmitter
• can’t exceed handset’s
maximum (typ. +23 dBm) Typical TXPO:
+23 dBm in a coverage hole
TXPO = -(RXdbm) -C + TXGA 0 dBm near middle of cell
C = +73 for 800 MHz. systems -50 dBm up close to BTS
= +76 for 1900 MHz. systems
Typical Transmit Gain Adjust
■ TXGA Transmit Gain Adjust 0 dB
• Sum of all closed-loop -10 dB

power control commands
from the BTS since the
beginning of this call -20 dB
Time, Seconds
“Signatures” of Common Conditions
SIGNATURE:
■ The key CDMA RF Performance
GOOD CALL
Indicators provide powerful clues
in cause-and-effect analysis for FFER RXL EC/IO TxGa TxPo
understanding problem conditions 100%
-30 0 +25
+23
■ There are many common -40 +10
conditions which are easy to -6 +10

0
recognize from their characteristic -10

50% -10 0
“signatures” -- unique -20
relationships among the key -10 -30
indicators which are observed 10% -90

-15
-40
when these conditions exist 5%

2%
-100
-20
-50
0% -110 -20 -25
■ We will use the simplified format FFER RXL EC/IO TxGa TxPo
shown at right to display the key
indicators for each of several
Messaging
interesting cases. BTS

Signature of a Successful Call
SIGNATURE:
■ If the mobile station originates GOOD CALL
successfully, remains in service
FFER RXL EC/IO TxGa TxPo
area, and makes normal release, 100% +23
-30 0 +25
data will show:
-40 +10
• Low forward FER
0
-6 +10
• Receive power > -100 dBm
-10
• Good Ec/Io (> -12 dB) 50% -10 0
-20
• Normal Transmit Gain Adjust
-10 -30
(actual value depends on site
-15
configurations, loading & 10% -90
-40
NOM_PWR setting) 5%
-100
-20
-50
2%
• Transmit power < +20 dBm 0% -110 -20 -25
• Good Messaging FFER RXL EC/IO TxGa TxPo

• Parsed message files will
contain a full set of normal
messages. BTS Messaging

Signature of a Dropped Call in Poor Coverage
SIGNATURE:
■ If a mobile station is taken out DROPPED CALL, BAD COVERAGE
of the service area or into a
coverage hole, and only data FFER RXL EC/IO TxGa TxPo
100% +23
from the mobile station is -30 0 +25
available, the log files will show -40 +10
the following characteristics: -6 +10

0
• High forward FER -10

50% -10 0
-20
• Low receive power (<-100
dBm) -10 -30
-15
• Low Ec/Io (< -10 dB) 10% -90
-40
5% -20
-100 -50
• Higher-than-normal Transmit 2%
0% -110 -20 -25
Gain Adjust (actual value depends
on site configurations, loading, FFER RXL EC/IO TxGa TxPo
NOM_PWR setting)
• Higher-than-normal transmit BTS Messaging
power (> +20 dBm)
• Poor messaging on both links

Signature of Forward Link Interference
SIGNATURE:
■ Characteristics of data for a phone FORWARD LINK INTERFERENCE
experiencing forward link
interference from a source other FFER RXL EC/IO TxGa TxPo
than the current BTS: 100%
-30 0 +25
+23
• High forward FER -40 +10
• Good receive power (> -100 dBm) -6 +10

0
• Low Ec/Io (< -10 dB) -10

50% -10 0
• Higher-than-normal Transmit Gain -20
Adjust -10 -30

-15
• Normal transmit power (< +20 10% -90
-40
dBm) 5%
2%
-100
-20
-50
• Poor forward link messaging 0% -110 -20 -25
– unreliable at best and may be FFER RXL EC/IO TxGa TxPo

the actual cause of the drop.
BTS Messaging

Signature of Reverse Link Interference
SIGNATURE:
■ Characteristics of data for a phone REVERSE LINK INTERFERENCE
whose BTS has a raised noise
floor due to reverse link FFER RXL EC/IO TxGa TxPo
interference 100%
-30 0 +25
+23
• Good forward FER -40 +10
• Good receive power (> -100 dBm) -6 +10

0
• Good Ec/Io (> -10 dB) -10

50% -10 0
• Higher-than-normal Transmit Gain -20
Adjust -10 -30

-15
• Higher-than-normal transmit power 10% -90
-40
(< +20 dBm) 5%

2%
-100
-20
-50
• Poor reverse link messaging 0% -110 -20 -25
– in the message files, you’ll FFER RXL EC/IO TxGa TxPo

see repeats of messages on
the forward link and reverse Messaging
BTS
link

Starting Optimization on a New System
■ RF Coverage Control
• try to contain each sector’s coverage, avoiding gross spillover
into other sectors
• tools: PN Plots, Handoff State Plots, Mobile TX plots
■ Search Window Settings
• find best settings for SRCH_WIN_A, _N, _R
• especially optimize SRCH_WIN_A per sector using collected
finger separation data; has major impact on pilot search speed
■ Neighbor List Tuning
• try to groom each sector’s neighbors to only those necessary
but be alert to special needs due to topography and traffic
• tools: diagnostic data, system logs
■ Access Failures, Dropped Call Analysis
• finally, iterative corrections until within numerical goals
Getting these items into shape provides a solid baseline and foundation from
which future performance issues can be addressed.
Statistical CDMA Performance Indicators
The performance indicators described

previously show mainly the ■ Dropped Call Statistics
condition of the RF links, and are ■ Failed Access Attempts
useful primarily for debugging link
problems. ■ Blocking Statistics
There is an entire additional world of • BTS sector level
data available to indicate overall • BSC resource level
system performance on a statistical
basis. These indications are • Switch resource level
collected from the Switch and BSM • PSTN trunking level
and should be analyzed using
external software, archived, and ■ Counts of specific call
tracked and trended for system processing error events
performance benchmarking.
These indications should be examined
from many perspectives: overall for
an entire system, by individual
sector and cell, and both in
absolute numbers and by
percentages of total traffic.
Pilot Search Order, Speed, and Implications
WINDOW SIZE
PILOT SEARCHING IN NESTED LOOPS: IN CHIPS AND DATA UNITS
THE CAR ODOMETER ANALOGY
Datafill Window
The searcher checks pilots in the Value Size (Chips)
order they would appear if pasted
Active+Cand
on the wheels of a car odometer.

Remaining
4 14 (±7)
Neighbor
Actives and candidates occupy the 5 20 (±10)

fastest-spinning wheel.
6 ±14)
28 (±
Neighbors are next, advance one
pilot each time Act+cand revolves. 7 40 (±20)
Remaining is slowest, advance one 8 60 (±30)
pilot each time Neighbors revolve.
9 80 (±40)
■ Actives & candidates have the biggest influence. 10 100 (±50)
• Keep window size as small as possible 11 130 (±65)

• During soft handoff, this set dominates searcher 12 160 (±80)
– Minimize excessive Soft HO!
13 226 (±113)
■ Neighbor set is second-most-important
• Keep window size as small as possible 14 320 (±160)
• Keep neighbor list as small as possible 15 452 (±226)

• But don’t miss any important neighbors!
■ Remaining Set: pay your dues, but get no reward
• You must spend time checking them, but the system can’t assign one to you
Handoff Problems: “Window” Dropped Calls
SITUATION 1 Locked to distant
■ Calls often drop when strong
site, can’t see
neighbors suddenly appear A 12 mo
un one nearby
outside the neighbor search BTS 80 m i l e tai
Ch s ns
ips
window and cannot be used to B
establish soft handoff. SRCH_WIN_N = 130 BTS
BTS A is reference. 1 mi.

■ Neighbor Search Window BTS B appears (7-80) chips 7 Chips
SRCH_WIN_N should be set early due to its closer distance. vel
This is outside the 65-chip window.Tra
to a width at least twice the Mobile can’t see BTS B’s pilot, but its
propagation delay between strong signal blinds us and the call drops.
any site and its most distant SITUATION 2
neighbor site Locked to nearby
A mo site, can’t see
■ Remaining Search Window 12 un distant one
80 m i l e tai
BTS
SRCH_WIN_R should be set Ch s ns
B
ips
to a width at least twice the SRCH_WIN_N = 130 BTS
propagation delay between BTS B is reference. 1 mi.

BTS A appears (80-7) chips 7 Chips
any site and another site late due to its farther distance. l
which might deliver occasional This is outside the 65-chip window. Trave
RF into the service area Mobile can’t see BTS A’s pilot.
Setting Pilot Search Window Sizes
■ When the handset first powers up, it does an exhaustive search for the
best pilot and no windows apply to this process.
■ When finally on the paging channel, the handset learns the window sizes
SRCH_WIN_A, N, R and uses them when looking for neighbors both in
idle mode and during calls.
■ During a call, when a strong neighbor is recognized, a PSMM is sent
requesting soft handoff. The former neighbor pilot is now a candidate set
pilot and its offset is precisely remembered and frequently rechecked and
tracked by the phone.
■ The window size for active and candidate pilots doesn’t need to be very
large, since the searcher has already found them and is tracking them
very frequently. We need only enough width to accommodate all
multipath components of these pilots.
• This greatly speeds up the overall pilot search management!
■ Most post-processing tools deliver statistics on the spread (in chips)
between fingers locked to the same pilot. These statistics literally show us
how wide the SRCH_WIN_A should be set.
■ Neighbor and Remaining search windows should be set based on intercell
distances as described in a preceding slide.
TX Gain Adjust as a Per-Site Debugging Tool
■ Collect Transmit Gain Adjust Statistics
■ For an unloaded system, the average should be -7 to -12 db. and
should be fairly constant throughout the coverage area
■ Look for big “jumps” in TX GA from sector to sector. Look for
hardware problems (antennas OK, RX noise figure OK?, etc.)
■ If you see values generally outside the range above uniformly
across the coverage area, look at the BS Eb/Nt. It should be 5-9
dB for mobile systems, or 3-4 dB. for fixed wireless access.
■ Other parameters can have similar uses; compare and study.
Typical Mobile Station Transmit Gain Adjust
0 dB
-10 dB
-20 dB
Time, Seconds
Supplement
Multi-Carrier
Multi-Carrier Operation
Operation
Intersystem
Intersystem Soft
Soft && Hard
Hard Handoff
Handoff
Multi-Carrier Optimization Issues
■ Most operators are now adding multiple-carrier operation, and

systems in major cities are using three, four, or even five carriers
■ Troubleshooting multiple carrier operation requires:
• Understanding of carrier selection processes for idle mobiles
– Multiple methods are defined in the standards
• Understanding of handoff processes for in-call operation
– Each network manufacturer has its own preferred methods
• Tools capable of operating on each carrier frequency
– Multiple handsets and receivers
• The ability to separate multi-carrier data for analysis
– distinguishing differences in performance among carriers
■ This section gives the basics of all these points
Section A
The
The Big
Big Picture
Picture &
& Important
Important Questions
Questions
The Big Picture:
CDMA Multicarrier System Overlaying Analog Partner
CDMA Frequency 3
CDMA Frequency 2
CDMA Frequency 1
Analog System
Important Questions:
■ How do idle dual-mode mobiles choose a system?
• When do they select analog operation?
■ How do idle CDMA mobiles change carrier frequencies?
■ How do CDMA mobiles in a call handoff to other carrier
frequencies?
■ Can CDMA mobiles in a call hand down to analog operation?
■ When can a dual mode mobile return from analog to CDMA?
Adjoining CDMA Networks of Different Manufacturers
Freq 3
Freq 2 Freq 2
Freq 1
Brand X System Brand Y System
PSTN
Ordinary Interswitch Trunks
(can’t transmit packets, so soft handoff impossible)
At present, hard handoffs are the only type available between some systems
■ What happens if bordering cells are on the same frequency?
• Advantages and drawbacks
■ What happens if bordering cells are on different frequencies?
Adjoining CDMA Networks of the Same Manufacturer
Freq 3 Freq 4
Freq 2
Freq 1 Freq 1
Brand X System Brand X System

ATM links
PSTN between packet networks
(soft handoffs are possible)
At present, most manufacturers support intersystem soft handoff

■ What happens if bordering cells are on the same frequency?
■ What happens if bordering cells are on different frequencies?
Section B
Basic
Basic Principles:
Principles:
Who
Who Decides,
Decides, Who
Who Controls,
Controls, and
and When?
When?
Basic Principles:
System Determination in Idle Mode
CDMA Idle Mode

Mobile has control, follows the System Determination Algorithm
Look at most recently used frequency.
Find Strongest Pilot > Read Sync > Read Paging/Config Messages
If system denied or not preferred, check other frequencies in PRL.
If Multiple Frequencies appear in CDMA Channel List Message, Hash and
go to proper frequency
If GSRM transmitted, go wherever directed
Monitor Paging Channel
Analog Idle Mode

Mobile has control, follows procedures of the Standard
Find Strongest CCH
Monitor Paging Channel
Every 3 minutes, rescan for CDMA signal
Basic Principles:
System Determination During A Call
CDMA Conversation State

System has control, follows Standard or proprietary procedures
•Initial channel assignment: system can select which frequency
(most common trigger would be congestion on present frequency)
•Normal handoffs are soft, on same frequency, to mobile-selected pilots
•Artificial trigger mechanisms can force mobile handoff to different:
1) CDMA frequency, 2) CDMA system, or 3) analog system
Analog Conversation State

System has control, follows procedures of the Standard
•Mobile can be handed off to different analog cell or even different
analog system based on locate receiver measurements
•No handoff possible to CDMA from ongoing analog call
Section C
Acquiring
Acquiring aa System
System
System Determination: SDA, MRU, and PRL
Reverse Link Frequencies Forward Link Frequencies

(Mobile Transmit) (Base Station Transmit)
800 MHz. Cellular Spectrum
824 MHz. 835 845 849 870 880 890 894
A B Paging, ESMR, etc. A B

825 846.5 869 891.5
1900 MHz. PCS Spectrum
unlic. unlic.
A D B E F C data voice A D B E F C
1850MHz. 1910MHz. 1930MHz. 1990 MHz.
The SDA (System Determination Algorithm) guides the System

Acquisition Process.
First, check frequencies from the MRU (Most Recently Used) list.
After any signal is found, check it against the PRL (Preferred
Roaming List) to see if it is SID-denied. If not denied, use it.
If it is denied, use it to position the phone into a GEO group to
speed the further searching.
The System Determination Algorithm (SDA)
Handsets can be programmed with their Preferred Only bit set to True or
TRUE
Preferred Only Bit FALSE
False. If True, the handset can only used preferred systems. If False, the
handset can use non-preferred systems, but will prefer preferred systems
when available.
Acquisition Index There are 29 Acq Indexes in the current PRL. It

is normal for some to contain duplicate channels.
0 CDMA channels 350,400
1 CDMA channels 50, 100
2 Analog Block A When the phone Every three minutes idle
3 Analog Block B loses service, it phones rescan for any more-
scans the list of preferred signals in the current
channels in its Geo Group. This is called
current GEO group. “climbing the GEO group”.
System Records
SID NID PREF GEO Priority Index Roam Indicator
4139 65535 Pref New More 0 Off
59 65535 Pref Same More 2 On
52 65535 Pref Same More 3 Flash Some records are merely analog
“Guideposts” to allow the phone to
67 65535 Neg Same Same 3 Short-short-long
recognize where it is and position into the
4412 65535 Pref New More 1 Off proper GEO group “GEO confinement”.
: : : : : : :
61737 226 Neg New More 0 Off The last system record is not a real
system. It merely contains the version
65535 is a “wildcard” NID. Preferred “more” number of the PRl and is used by some
The phone is to accept any than the following phones to allow displaying the version.
NID it sees on this system. record.
Find Strongest Pilot, Read Sync Channel
All PN Offsets
0
Ec/Io
1. Pilot Searcher Scans the Entire Range of PNs

-20
Chips 0 32K
PN 0 512
SYNC CHANNEL MESSAGE
2. Put Rake finger(s) on strongest 98/05/24 23:14:09.817 [SCH]
Sync Channel Message
available PN, decode Walsh 32, MSG_LENGTH = 208 bits
and read Sync Channel Message MSG_TYPE = Sync Channel Message
P_REV = 3
MIN_P_REV = 2
Active Pilot SID = 179
NID = 0
PILOT_PN = 168
Offset Index
LC_STATE = 0x0348D60E013
F1 PN168 W32 o SYS_TIME = 98/05/24 23:14:10.160
RF F2 PN168 W32 p LP_SEC = 12
≈ x ≈ F3 PN168 W32 LTM_OFF = -300 minutes
LO
DAYLT = 0
Srch PN??? W0 PRAT = 9600 bps
Reference PN RESERVED = 1
The Configuration Messages
■ After reading the Sync Channel, the mobile is now capable of

reading the Paging Channel, which it now monitors constantly
■ Before it is allowed to transmit or operate on this system, the
mobile must collect a complete set of configuration messages
■ Collection is a short process -- all configuration messages are
repeated on the paging channel every 1.28 seconds
■ The configuration messages contain sequence numbers so the
mobile can recognize if any of the messages have been freshly
updated as it continues to monitor the paging channel
• Access parameters message sequence number
• Configuration message sequence number
• If a mobile notices a changed sequence number, or if 600
seconds passes since the last time these messages were read,
the mobile reads all of them again
Go to Paging Channel, Get Configured
All PN Offsets
0
Ec/Io
-20
Chips 0 32K
PN 0 Read the 512
Configuration Messages
Access Parameters Msg
Keep Rake finger(s) on strongest
available PN, decode Walsh 1, System Parameters Msg
and monitor the Paging Channel
CDMA Channel List Msg
Active Pilot Extended System
Parameters Msg (*opt.)

(Extended*) Neighbor
List Msg
F1 PN168 W01 o
Global Service
RF F2 PN168 W01 p Redirection Msg (*opt.)
≈ x ≈ F3 PN168 W01
LO
Srch PN??? W0
Now we’re ready to operate!!
Reference PN
Two Very Important Configuration Messages

ACCESS PARAMETERS MESSAGE 98/05/24 23:14:11.126 [PCH] System Parameter Message
98/05/24 23:14:10.427 [PCH]
MSG_TYPE = System Parameters Message
MSG_TYPE = Access Parameters Message
CONFIG_MSG_SEQ = 0
SID = 179 NID = 0
ACC_MSG_SEQ = 27
REG_ZONE = 0 TOTAL_ZONES = 0 ZONE_TIMER = 60 min
ACC_CHAN = 1 channel
MULT_SIDS = 0 MULT_NID = 0 BASE_ID = 8710
NOM_PWR = 0 dB INIT_PWR = 0 dB PWR_STEP = 4 Db
BASE_CLASS = Public Macrocellular
NUM_STEP = 5 Access Probes Maximum
PAGE_CHAN = 1 channel
MAX_CAP_SZ = 4 Access Channel Frames Maximum
MAX_SLOT_CYCLE_INDEX = 0
PAM_SZ = 3 Access Channel Frames
HOME_REG = 0 FOR_SID_REG = 0 FOR_NID_REG = 1
Persist Val for Acc Overload Classes 0-9 = 0
POWER_UP_REG = 0 POWER_DOWN_REG = 0
PARAMETER_REG = 1 REG_PRD = 0.08 sec
BASE_LAT = 00D00'00.00N BASE_LONG = 000D00'00.00E
REG_DIST = 0
SRCH_WIN_N = 80 PN chips
SRCH_WIN_R = 4 PN chips
Persistance Modifier for Msg Tx = 1
NGHBR_MAX_AGE = 0
Persistance Modifier for Reg = 1
PWR_REP_THRESH = 2 frames
Probe Randomization = 15 PN chips
PWR_REP_FRAMES = 56 frames
Acknowledgement Timeout = 320 ms
PWR_THRESH_ENABLE = 1
Probe Backoff Range = 4 Slots Maximum
PWR_PERIOD_ENABLE = 0
Probe Sequence Backoff Range = 4 Slots Max.
PWR_REP_DELAY = 20 frames
Max # Probe Seq for Requests = 2 Sequences
RESCAN = 0
Max # Probe Seq for Responses = 2 Sequences
T_ADD = -13.0 Db T_DROP = -15.0 dB T_COMP = 2.5 dB
Authentication Mode = 1
T_TDROP = 4 sec
Random Challenge Value = Field Omitted
EXT_SYS_PARAMETER = 1
Reserved Bits = 99
RESERVED = 0
GLOBAL_REDIRECT = 0
Four Additional Configuration Messages
If more than 1 frequency listed, HASH!!
CDMA CHANNEL LIST MESSAGE EXTENDED SYSTEM PARAMETERS

98/05/24 23:14:10.786 [PCH] CDMA Channel List Message 98/05/24 23:14:10.946 [PCH]
MSG_LENGTH = 72 bits Extended System Parameters Message
MSG_TYPE = CDMA Channel List Message MSG_LENGTH = 104 bits
PILOT_PN = 168 Offset Index MSG_TYPE = Extended System Parameters Message
CONFIG_MSG_SEQ = 0 PILOT_PN = 168 Offset Index
CDMA_FREQ = 283 CONFIG_MSG_SEQ = 0 RESERVED = 0
RESERVED = Field Omitted PREF_MSID_TYPE = IMSI and ESN
MCC = 000 IMSI_11_12 = 00
NEIGHBOR LIST RESERVED_LEN = 8 bits
RESERVED_OCTETS = 0x00
98/05/24 23:14:11.486 [PCH] Neighbor List Message BCAST_INDEX = 0
MSG_LENGTH = 216 bits RESERVED = 0
MSG_TYPE = Neighbor List Message
CONFIG_MSG_SEQ = 0
PILOT_INC = 4 Offset Index
NGHBR_CONFIG = 0 NGHBR_PN = 220 Offset Index GLOBAL SERVICE REDIRECTION
98/05/17 24:21.566 Paging Channel: Global Service Redirection
PILOT_PN: 168, MSG_TYPE: 96, CONFIG_MSG_SEQ: 0
Redirected access overload classes: { 0, 1 },
RETURN_IF_FAIL: 0,
DELETE_TMSI: 0,
Redirection to an analog system:
EXPECTED_SID = 0
Do not ignore CDMA Available indicator on the redirected analog
system
Attempt service on either System A or B with the custom system
selection process
RESERVED = 0
The Hashing Algorithm
■ Whenever a phone encounters multiple available resources, it

uses its number (IMSI, International Mobile Subscriber Identity)
and a randomized process called “hashing” to determine which
resource it should use. This is the method for selecting:
• Carrier Frequencies in idle mode
• Preferred Paging Channel
• Preferred Access Channel
• Paging Time Slot in Slotted Mode
■ Optimization personnel may wish to carry a phone for each carrier
frequency, or use the multiple NAM capability of some handsets to
operate on different numbers so as to prefer different frequencies
Hashing Examples
■ Try your own phone in the spreadsheet Hashing.xls
CDMA Hashing Examples Slot Cycle Time, S

1.28 2.56 5.12 10.24 20.48 40.96 81.92 163.84
Total Slots in Cycle
16 32 64 128 256 512 1024 2048
How Many How Many Paging
Frequencies? Channels? Slot Cycle Index
2 1 0 1 2 3 4 5 6 7
10-digit IMSI Use Freq# Use PCH # Slot# Slot# Slot# Slot# Slot# Slot# Slot# Slot#
6153000124 1 1 7 15 31 63 127 127 895 1752
6153000125 1 1 3 11 27 27 27 27 1563 1752
6153000126 1 1 5 5 5 5 69 69 69 1752
4258769703 2 1 7 7 7 7 7 135 903 856
4258769704 2 1 1 9 25 57 121 121 121 856
4258769705 1 1 4 4 20 20 20 20 1044 1752
4258769706 2 1 1 1 17 49 49 177 1457 856
4258769707 1 1 5 5 5 5 5 133 1413 1752
4258769708 1 1 1 9 9 41 105 233 745 1752
4258769709 2 1 0 8 8 40 104 104 1896 856
4258769710 2 1 5 5 21 53 53 53 309 856
4258769711 2 1 0 8 8 40 104 232 1768 856
Some MultiCarrier Optimization
Considerations
■ Drive-test equipment commonly used today relies solely on data

from phones - subscriber handsets - to follow call processing
events
■ Today’s phones do not continuously report the carrier frequency.
It is reported only when frequency references occur in layer 3
messages:
• Paging Channel: CDMA Channel List Message
• Paging Channel: Channel Assignment Message
• Forward Traffic Channel: Handoff Direction Message
■ The phone is simply assumed to follow these messages
Avoiding Unwanted Acquisition of
Supplemental CDMA Carriers
CDMA Carrier Frequency 2
GSRM GSRM
CDMA Carrier Frequency 1
■ System acquisition is primarily controlled by the mobile

• dual-mode mobiles look for last-used frequency first
■ Distant mobiles may notice weak Carrier 2 signals beyond the
edge of Carrier 2 coverage, and originate calls likely to drop
• system can transmit Global Service Redirection Messages on
all out-looking Carrier 2 sectors to immediately force any
distant mobiles to reacquire Carrier 1
– there will be no F2 originations on outermost F2 sectors!
– However, still possible to soft-handoff into F2 outer sectors
Section D
Special
Special CDMA
CDMA Handoff
Handoff Triggers
Triggers
Intersystem Hard Handoff
Same Frequency causes Interference Problems!
BSC1 SW1
City 2
Frequency 1
Interference
SW2 BSC2 City 1
■ Consider two adjacent CDMA systems:

• Same frequency
• If not equipped for intersystem soft handoff, only hard handoff is
possible between them; “dragged” handoffs become a big problem
■ Handoff Performance Results:
• Mobiles CAN see pilots from adjoining system, so mobile-directed
handoff is possible
• However, due to hard handoff mobiles can use only one system or the
other, not both, and simultaneous shared power control is not possible
• “dragging” mobiles cause severe interference in border cells
• border area has poor capacity, high access failures and dropped calls
Intersystem Soft Handoff:
Avoids Border Area Interference Problems
BSC1 SW1
City 2
Frequency 1
no problems!
SW2 BSC2
City 1
Intersystem Soft Handoff
ATM link

• Same frequency
• ATM connection between BSCs allows soft handoff
■ Handoff Performance Results:
• Mobiles CAN see pilots from adjoining system, so mobile-directed
handoff is possible
• Intersystem soft handoff is possible, so simultaneous power control is
possible for mobiles in border area
• Border RF environment is the same as internal RF environment, no
special problems
Avoid Interference, Use Different Frequencies?
Hard Handoff Logistical Problems
F2 Mobiles
can’t see F1 pilots! BSC1 SW1
Frequency 2 City 2
Frequency 1
SW2 BSC2 F1 Mobiles

can’t see F2 pilots!
City 1
• Suppose intersystem soft handoff is not available
• Systems are deliberately on different frequencies. This definitely
avoids interference in the border area, but causes other complications
■ Conversation-State Handoff Logistical Problems:
• Mobiles on one system can’t see the pilots of adjoining cells on the
other system! So, the mobiles will never request trans-border handoff
• Some method must be employed to force unsuspecting mobiles into
transborder handoffs
• Common solutions: 1) implement intersystem soft handoff, 2) Pilot
beacon cells, 3) auxiliary trigger mechanisms (Ec/Io, RTD, etc.)
One Solution to the Multi-Frequency Problem
2-Frequency Trigger Method: Beacon Cells
F2 Mobiles
can see F2 beacon BSC1 SW1
Frequency 2 City 2
Frequency 1
SW2 BSC2 F1 Mobiles

can see F1 beacon
City 1
■ The Beacon Solution
• A pilot beacon cell is a “mannequin” -- a signal which can be seen by
arriving mobiles from the other system on their own frequency,
inducing them to request handoff as soon as it is appropriate
• When mobiles request soft handoff with the beacon, the old system
steps in and instructs the mobiles to do intersystem hard handoff to
the real cell which the mobiles are approaching on the other system
■ Special Logistical Concerns with Beacons
• Of course, it’s possible for mobiles of one system to “wake up” looking
at the pilot of a beacon cell in the border area, rather than a real cell.
• Therefore, a beacon cell must transmit not only its pilot, but also a
sync channel and a paging channel with global service redirection
Another Solution for Multi-Frequency Handoffs
Bridge Cells, RTD Trigger in Boundary Sectors
BSC1 SW1
Frequency 2 Boundary Sector
City 2
SW2 BSC2
City 1
■ All along the intersystem border, a one-cell-thick “transition zone” is

created. The “bridge” cells in this zone are equipped with dual equipment,
one set operating on each system.
• The outlooking sector of each bridge cell is tagged in the site
database as a “boundary sector”. Whenever a mobile is served
exclusively by a boundary sector, the system continuously monitors
that mobile’s round trip delay (RTD).
• When the mobile’s RTD passes upward through a datafilled threshold,
the system steps in and orders a hard handoff to the matching sector
of the bridge cell on the other system
– this ensures the handoffs happen in clean environments with high
probability of success
– disadvantage: more BTS hardware needed than otherwise
Another Solution for Multi-Frequency Handoffs
Arbitrary Ec/Io Trigger Mechanisms
BSC1 SW1
Frequency 2 Boundary Sector City 2
SW2 BSC2
City 1
■ Outlooking sectors of border cells are tagged as “boundary sectors” in the

system database
• Whenever a mobile is served exclusively by a boundary sector, the
system frequently interrogates the mobile with pilot measurement
request messages
• When the mobile’s reports the boundary sector’s Ec/Io is below a
preset threshold, the system immediately commands a hard handoff
to a previously defined sector on the other system. Everyone hopes
(prays?) that sector is able to hear the mobile for a successful
handoff.
– The Ec/Io trigger threshold is sometimes a fixed value (usually 11
db above the T_Drop in the serving sector, although some
networks’ later software allows an arbitrary trigger level to be set
Section E
CDMA/Analog
CDMA/Analog Overlay
Overlay Considerations
Considerations
CDMA/AMPS Overlays: Idle CDMA Acquisition
CDMA Overlay
GSRM GSRM
AMPS Existing System
■ System acquisition is primarily controlled by the mobile

• dual-mode mobiles look for CDMA first, then AMPS if needed
■ Distant mobiles may notice weak CDMA signals beyond the edge
of CDMA coverage, and originate calls likely to drop
• most systems transmit Global Service Redirection Messages
on all out-looking sectors to immediately force any distant
mobiles to reacquire AMPS system
– hence no CDMA originations on outermost CDMA sectors!
– However, still possible to soft-handoff into outer sectors
■ Most operators request handset manufacturers to add feature of
periodic rechecking by idle handsets seeking to acquire CDMA
CDMA/AMPS Overlays: Analog Handdown
CDMA Overlay
AMPS Existing System
■ CDMA mobiles approaching the edge of CDMA coverage must

hand down to AMPS
• however, CDMA mobiles cannot see AMPS signals during
CDMA calls, and therefore will not request handoff
■ Methods for triggering CDMA-to-AMPS Handdown: the same ones
we considered for CDMA-CDMA intersystem handoff
• beacon cells
• bridge cells with RTD trigger
• arbitrary Ec/Io thresholds on boundary sectors
■ Once a CDMA phone hands down to analog, it cannot be handed
back up during the same call (due to long CDMA acquisition time)
Bibliography
“Wireless Communications Principles & Practice” by Theodore S. Rappaport. 641 pp., 10 chapters, 7 appendices.
Prentice-Hall PTR, 1996, ISBN 0-13-375536-3. If you can only buy one book, buy this one. Comprehensive
summary of wireless technologies along with principles of real systems. Includes enough math for
understanding and solving real problems. Good coverage of system design principles.
“The Mobile Communications Handbook” edited by Jerry D. Gibson. 577 pp., 35 chapters. CRC Press/ IEEE Press
1996, ISBN 0-8493-0573-3. $89 If you can buy only two books, buy this second. Solid foundation of modulation
schemes, digital processing theory, noise, vocoding, forward error correction, excellent full-detailed expositions
of every single wireless technology known today, RF propagation, cell design, traffic engineering. Each chapter
is written by an expert, and well-edited for readability. Clear-language explanations for both engineers and
technicians but also includes detailed mathematics for the research-inclined. Highly recommended.
“CDMA Systems Engineering Handbook” by Jhong Sam Lee and Leonard E. Miller, 1998 Artech House, ISBN 0-
89006-990-5. Excellent treatment of CDMA basics and deeper theory, cell and system design principles,
system performance optimization and capacity issues. Highly recommended.
“Applications of CDMA in Wireless/Personal Communications” by Garg, Smolik & Wilkes. 360 pp., Prentice Hall,
1997, ISBN 0-13-572157-1 $65. Good CDMA treatment. Excellent treatment of IS-95/JStd. 008 as well as W-
CDMA. More than just theoretical text, includes chapters on IS-41 networking, radio engineering, and practical
details of CDMA signaling, voice applications, and data applications.
“CDMA RF System Engineering” by Samuel C. Yang, 1998 Artech House, ISBN 0-89006-991-3. Good general
treatment of CDMA capacity considerations from mathematical viewpoint.
"CDMA: Principles of Spread Spectrum Communication" by Andrew J. Viterbi. 245 p. Addison-Wesley 1995. ISBN
0-201-63374-4, $65. Definitive very deep CDMA Theory. You can design CDMA chipsets after reading it, but
beware lots of triple integrals; not very relevant to operations. Prestige collector’s item among CDMA faithful.
"Mobile Communications Engineering" 2nd. Edition by William C. Y. Lee. 689 pp. McGraw Hill 1998 $65.
ISBN 0-07-037103-2 Lee’s latest/greatest reference work on all of wireless; very complete and well done.
"Spread Spectrum Communications Handbook" by Simon, Omura, Scholtz, and Levitt. 1227 pp., 15 illus., McGraw-
Hill # 057629-7, $99.50 Definitive technical reference on principles of Spread Spectrum including direct
sequence as used in commercial IS-95/JStd008 CDMA. Heavy theory.
Bibliography (concluded)
“Wireless and Personal Communications Systems” by Garg, Smolik & Wilkes. 445 pp., Prentice Hall, 1996, $68.
ISBN 0-13-234-626-5 $68. This is the little brother of “The Mobile Communications Handbook”. Good
explanation of each technology for a technical newcomer to wireless, but without quite as much authoritative
math or deep theoretical insights. Still contains solid theory and discussion of practical network architecture.
"Voice and Data Communications Handbook" by Bates and Gregory 699 pp, 360 illus., McGraw-Hill # 05147-X, $65
Good authoritative reference on Wireless, Microwave, ATM, Sonet, ISDN, Video, Fax, LAN/WAN
"Communication Electronics" by Louis E. Frenzel, 2nd. Ed., list price $54.95. Glencoe/MacMillan McGraw Hill,
April, 1994, 428 pages hardcover, ISBN 0028018427. All the basic principles of transmission and their
underlying math. If you didn’t take signals & systems in school, this is your coach in the closet.
“Digital Communications: Fundamentals and Applications” by Bernard Sklar. 771 pp., Prentice Hall, 1988. $74
ISBN# 0-13-211939-0 Excellent in depth treatment of modulation schemes, digital processing theory, noise.
"Wireless Personal Communications Services" by Rajan Kuruppillai. 424 pp., 75 illus., McGraw-Hill # 036077-4, $55
Introduction to major PCS technical standards, system/RF design principles and process, good technical
reference
"PCS Network Deployment" by John Tsakalakis. 350 pp, 70 illus., McGraw-Hill #0065342-9, $65 Tops-down view
of the startup process in a PCS network. Includes good traffic section.
"The ARRL Handbook for Radio Amateurs (1997)" published by the American Radio Relay League (phone 800-594-
0200). 1100+ page softcopy ($44); useful exposure to nuts-and-bolts practical ideas for the RF-unfamiliar.
Solid treatment of the practical side of theoretical principles such as Ohm’s law, receiver and transmitter
architecture and performance, basic antennas and transmission lines, and modern circuit devices. Covers
applicable technologies from HF to high microwaves. If you haven’t had much hands-on experience with real
RF hardware, or haven’t had a chance to see how the theory you learned in school fits with modern-day
communications equipment, this is valuable exposure to real-world issues. Even includes some spread-
spectrum information in case you’re inclined to play and experiment at home. At the very least, this book will
make dealing with hardware more comfortable. At best, it may motivate you to dig deeper into theory as you
explore why things behave as they do.

402

Încărcat de

Informații document

Descriere originală:

Drepturi de autor

Formate disponibile

Partajați acest document

Partajați sau inserați document

Opțiuni de partajare

Vi se pare util acest document?

Este necorespunzător acest conținut?

Drepturi de autor:

Formate disponibile

402

Încărcat de

Drepturi de autor:

Formate disponibile

Optimization Seminar

CDMA Optimization Seminar ©2000 Scott Baxter February, 2000 Page 1

■ Introduction: Review of CDMA Principles (optional based on

CDMA Optimization Seminar ©2000 Scott Baxter February, 2000 Page 3

■ Interpreting Real-Time Drive-Tool Displays from Field Tools

CDMA Optimization Seminar ©2000 Scott Baxter February, 2000 Page 4

CDMA Optimization Seminar ©2000 Scott Baxter February, 2000 Page 5

desired signal must be strong enough to 4 1

override any interference 6

■ Nearby users and cells must use different

CDMA Optimization Seminar ©2000 Scott Baxter February, 2000 Page 6

■ All CDMA users occupy the same frequency CDMA

CDMA Optimization Seminar ©2000 Scott Baxter February, 2000 Page 7

■ To recover a bit, integrate a large number of chips

CDMA Optimization Seminar ©2000 Scott Baxter February, 2000 Page 8

■ Input B: Walsh Code #23

At Destination Site: XOR

CDMA Optimization Seminar ©2000 Scott Baxter February, 2000 Page 9

of “processing gain” which extends TX RX

coverage range and improves the

CDMA Optimization Seminar ©2000 Scott Baxter February, 2000 Page 10

CDMA Optimization Seminar ©2000 Scott Baxter February, 2000 Page 12

CDMA Optimization Seminar ©2000 Scott Baxter February, 2000 Page 13

ORIGINATING SITE DESTINATION

■ Sender combines data with a fast spreading sequence, transmits

■ Whether in package shipping and receiving, or in CDMA signals,

Spreading Spreading Spreading Spreading Spreading Spreading

■ 64 “Magic” Sequences, each 64 chips long 3

■ Each Walsh Code is precisely Orthogonal

compared against any other Walsh Code

• it’s simple to generate these codes, or

• they’re small enough to store in ROM 21

Correlation of Walsh Code #23 with Walsh Code #59 48

CDMA Optimization Seminar ©2000 Scott Baxter February, 2000 Page 17

compared with themselves not Self, in sync:

CDMA Optimization Seminar ©2000 Scott Baxter February, 2000 Page 18

The PN Short Code

CDMA Optimization Seminar ©2000 Scott Baxter February, 2000 Page 19

CDMA Optimization Seminar ©2000 Scott Baxter February, 2000 Page 20

CDMA Optimization Seminar ©2000 Scott Baxter February, 2000 Page 21

scrambled + WALSH CODE

more more more

CDMA Optimization Seminar ©2000 Scott Baxter February, 2000 Page 23

Pilot Walsh 0 ■ PILOT: WALSH CODE 0

Walsh 55 ■ TRAFFIC: any remaining WALSH codes

CDMA Optimization Seminar ©2000 Scott Baxter February, 2000 Page 24

■ Forward link capacity of a sector is limited by several factors

CDMA Optimization Seminar ©2000 Scott Baxter February, 2000 Page 25

Long Code Gen

more more more

CDMA Optimization Seminar ©2000 Scott Baxter February, 2000 Page 26

■ TRAFFIC CHANNELS are used by individual users

CDMA Optimization Seminar ©2000 Scott Baxter February, 2000 Page 27

Switch Access Manager BTS

Vocoders Vocoder Channel RF

CDMA Optimization Seminar ©2000 Scott Baxter February, 2000 Page 28

■ Vocoders compress speech, reduce bit 20ms Sample

CDMA Optimization Seminar ©2000 Scott Baxter February, 2000 Page 29

BSC BTS (1 sector) Help!

■ The BTS continually reduces the strength of each user’s forward

CDMA Optimization Seminar ©2000 Scott Baxter February, 2000 Page 30

BSC BTS RX RF Digital

CDMA Optimization Seminar ©2000 Scott Baxter February, 2000 Page 31