8. ora000002 cdma communication flow(nss)issue1.1
TRANSCRIPT
-
8/6/2019 8. Ora000002 Cdma Communication Flow(Nss)Issue1.1
1/57
Wireless Curriculum Development SectionWireless Curriculum Development SectionWireless Curriculum Development SectionWireless Curriculum Development Section
ISSUEISSUE
ORA000002 CDMAORA000002 CDMA
Communication flows (NSS)Communication flows (NSS)
ORA000002 CDMAORA000002 CDMA
Communication flows (NSS)Communication flows (NSS)
1.01.0
-
8/6/2019 8. Ora000002 Cdma Communication Flow(Nss)Issue1.1
2/57
-
8/6/2019 8. Ora000002 Cdma Communication Flow(Nss)Issue1.1
3/57
Confidential Information of
Huawei. Security Level: Internal
3
ContentContent
Chapter 1 Brief introduction of CDMA Flows
Chapter 2 Communication flows of CDMA
-
8/6/2019 8. Ora000002 Cdma Communication Flow(Nss)Issue1.1
4/57
Confidential Information of
Huawei. Security Level: Internal
4
Brief introduction of CDMA flowsBrief introduction of CDMA flows
Registration flows
Authentication flows
Calling flows
Handoff flows
Supplementary service flows
Short message flows
Basic CDMA flows
-
8/6/2019 8. Ora000002 Cdma Communication Flow(Nss)Issue1.1
5/57
Confidential Information of
Huawei. Security Level: Internal
5
Brief introduction of CDMA flowsBrief introduction of CDMA flows
Mobile phone power on/off: location updating flows and authentication
flows
Mobile phone calling: calling flows and authentication flows
Migration in the conversation: handoff flows and authentication flows
Mobile phone hooks up : calling flows
Short message: short message flows and authentication flows
Supplementary service: supplementary service flows and authenticationflows
The flows that the main services may involved in are as follows:
-
8/6/2019 8. Ora000002 Cdma Communication Flow(Nss)Issue1.1
6/57
Confidential Information of
Huawei. Security Level: Internal
6
ContentContent
Chapter 1 Brief introduction of CDMA Flows
Chapter 2 Communication flows of CDMA
-
8/6/2019 8. Ora000002 Cdma Communication Flow(Nss)Issue1.1
7/57
Confidential Information of
Huawei. Security Level: Internal
7
Chapter 2 Communication flows of CDMAChapter 2 Communication flows of CDMA
2.1 Location registration flows2.1 Location registration flows
2.2 Authenticationflows
2.3 Calling flows
2.4 Handoff flows
2.5 Supplementary service flows
2.6 Short message flows
-
8/6/2019 8. Ora000002 Cdma Communication Flow(Nss)Issue1.1
8/57
Confidential Information of
Huawei. Security Level: Internal
8
Location Registration flow( in local VLR)Location Registration flow( in local VLR)
-
8/6/2019 8. Ora000002 Cdma Communication Flow(Nss)Issue1.1
9/57
Confidential Information of
Huawei. Security Level: Internal
9
Location Registration flow( involve VLR and
HLR)
Location Registration flow( involve VLR and
HLR)
LOCATION UPDATE REQ: Location Update Request
REGNOT : Register NotificationLOCATION UPDATE ACCEPT: Location update Accept
-
8/6/2019 8. Ora000002 Cdma Communication Flow(Nss)Issue1.1
10/57
Confidential Information of
Huawei. Security Level: Internal
10
Location Registration flow ( Cross VLR)Location Registration flow ( Cross VLR)
LOCATION UPDATE REQ: Location Update Request
REGNOT : Register Notification
REGCANC: Register Cancellation
LOC ACP: Location update Accept
-
8/6/2019 8. Ora000002 Cdma Communication Flow(Nss)Issue1.1
11/57
Confidential Information of
Huawei. Security Level: Internal11
Location Registration flow for Switch offLocation Registration flow for Switch off
LOCATION UPDATE REQ: Location Update Request
MSINACT: MS inactive
LOCATION UPDATE ACCETP: location update accept
-
8/6/2019 8. Ora000002 Cdma Communication Flow(Nss)Issue1.1
12/57
Confidential Information of
Huawei. Security Level: Internal12
QuestionsQuestions
Why not all the location registrations are sent
to HLR?
What is the meaning of MSCID in the location
registration message, and what is the
function ?
Why does the switch off message need to be
registered ?
-
8/6/2019 8. Ora000002 Cdma Communication Flow(Nss)Issue1.1
13/57
Confidential Information of
Huawei. Security Level: Internal13
AnswersAnswers
Question 1: Not all the requests of location registrations are
sent to HLR. If the subscribers data has already existed inVLR and the subscriber is activated, the registration is
processed by VLR. Otherwise the registration requests are
sent to HLR, and processed by HLR.
Question 2: MSCID is the identification of MSC mainlyincluding SID( System Identification) and SWNO( Switch No.).
It uniquely identifies one switch entity, and is used to
determine whether the MS is roaming.
Question 3: Switch off registration are mainly used to inform
HLR that the subscriber has already powered off. If other
subscribers call it, system can send the access refuse directly
to the calling party according to the subscribers status in HLR.
-
8/6/2019 8. Ora000002 Cdma Communication Flow(Nss)Issue1.1
14/57
Confidential Information of
Huawei. Security Level: Internal14
Chapter 2 Communication flows of CDMAChapter 2 Communication flows of CDMA
2.1 Location registration flows
2.2 Authentication flows2.2 Authentication flows2.3 Calling flows
2.4 Handoff flows
2.5 Supplementary service flows
2.6 Short message flows
-
8/6/2019 8. Ora000002 Cdma Communication Flow(Nss)Issue1.1
15/57
Confidential Information of
Huawei. Security Level: Internal15
The Parameters in AuthenticationThe Parameters in Authentication
Parameters involved in authentication: RAND, RANDC, ESN,
MIN, SSD
Parameters involved in SSD updating: A_KEY, RANDSSD,
ESN, RANDBS, RANDURandom number involved in authentication: RAND, RANDC,
RANDSSD, RANDBS, RANDU
Authentication results in authentication: AUTHR, AUTHBS,
AUTHU
-
8/6/2019 8. Ora000002 Cdma Communication Flow(Nss)Issue1.1
16/57
Confidential Information of
Huawei. Security Level: Internal16
The Parameters in AuthenticationThe Parameters in Authentication
SSD Algorithm:
RANDSSD
56bits
ESN
32bits
SSD Algorithm
SSD_A SSD_B
64 bits 64 bits
A_Key
64bits
-
8/6/2019 8. Ora000002 Cdma Communication Flow(Nss)Issue1.1
17/57
Confidential Information of
Huawei. Security Level: Internal
17
The Parameters in AuthenticationThe Parameters in Authentication
CAVE (Cellular Authentication and Voice Encryption)
RAND_CHALLENGE
32 bits
ESN
32 bits
CAVE
AUTHR / AUTHU / AUTHBS
18 bits
MIN
24 bits
SSD
64 bits
-
8/6/2019 8. Ora000002 Cdma Communication Flow(Nss)Issue1.1
18/57
Confidential Information of
Huawei. Security Level: Internal
18
Authentication flow when SSD is not sharedAuthentication flow when SSD is not shared
-
8/6/2019 8. Ora000002 Cdma Communication Flow(Nss)Issue1.1
19/57
Confidential Information of
Huawei. Security Level: Internal
19
Authentication flow when SSD is sharedAuthentication flow when SSD is shared
-
8/6/2019 8. Ora000002 Cdma Communication Flow(Nss)Issue1.1
20/57
Confidential Information of
Huawei. Security Level: Internal
20
SSD Update when SSD is not sharedSSD Update when SSD is not shared
-
8/6/2019 8. Ora000002 Cdma Communication Flow(Nss)Issue1.1
21/57
Confidential Information of
Huawei. Security Level: Internal
21
SSD Update when SSD is sharedSSD Update when SSD is shared
-
8/6/2019 8. Ora000002 Cdma Communication Flow(Nss)Issue1.1
22/57
Confidential Information of
Huawei. Security Level: Internal
22
QuestionsQuestions
What is the meaning of SSD_sharing?
How does the SSD_sharing influence the authentication
flows?
Why is the SSD update flow introduced?
Describe the SSD update flow when SSD is not shared.
-
8/6/2019 8. Ora000002 Cdma Communication Flow(Nss)Issue1.1
23/57
Confidential Information of
Huawei. Security Level: Internal
23
AnswersAnswers
Question 1: SSD_sharing means that the SSD is stored in
VLR.
Question 2 : whether the SSD is shared determines where
the authentication is done. If SSD is shared, authentication isable to be done at the VLR, else this work is done at the AC.
Question 3: The introduction of SSD update flows is mainly
for the protection of invalid authentication when SSD is
stolen.
Question 4: Please refers to slide introduced before.
-
8/6/2019 8. Ora000002 Cdma Communication Flow(Nss)Issue1.1
24/57
Confidential Information of
Huawei. Security Level: Internal
24
Chapter 2 Communication flows of CDMAChapter 2 Communication flows of CDMA
2.1 Location registration flows
2.2 Authentication flows
2.3 Calling flows2.3 Calling flows
2.4 Handoff flows
2.5 Supplementary service flows
2.6 Short message flows
-
8/6/2019 8. Ora000002 Cdma Communication Flow(Nss)Issue1.1
25/57
Confidential Information of
Huawei. Security Level: Internal
25
MS calls MS ( in local MSC)MS calls MS ( in local MSC)
-
8/6/2019 8. Ora000002 Cdma Communication Flow(Nss)Issue1.1
26/57
Confidential Information of
Huawei. Security Level: Internal
26
MS calls MS ( cross MSC)MS calls MS ( cross MSC)
-
8/6/2019 8. Ora000002 Cdma Communication Flow(Nss)Issue1.1
27/57
Confidential Information of
Huawei. Security Level: Internal
27
MS calls PSTNMS calls PSTN
-
8/6/2019 8. Ora000002 Cdma Communication Flow(Nss)Issue1.1
28/57
Confidential Information of
Huawei. Security Level: Internal
28
PSTN calls MSPSTN calls MS
-
8/6/2019 8. Ora000002 Cdma Communication Flow(Nss)Issue1.1
29/57
Confidential Information of
Huawei. Security Level: Internal
29
QuestionsQuestions
What is the difference between the local call
and inter-office call?
Please describe the flows triggered when the
MS registered in Beijing makes a call in
Shenzheng.
-
8/6/2019 8. Ora000002 Cdma Communication Flow(Nss)Issue1.1
30/57
Confidential Information of
Huawei. Security Level: Internal
30
AnswersAnswers
Question 1: There are two essential differences
between Intra-office mobile calling and Inter-office
mobile calling: one is that whether the location request
message carry the TLDN or not, local office assigns
the TLDN in intra-office calling flows, the called office
assigns the TLDN in inter-office calling flows; the other
is that whether the signals route outgoing according as
the TLDN.
Question 2: Location Register flow, Authentication
flow, Calling flow
-
8/6/2019 8. Ora000002 Cdma Communication Flow(Nss)Issue1.1
31/57
Confidential Information of
Huawei. Security Level: Internal
31
Chapter 2 Communication flows of CDMAChapter 2 Communication flows of CDMA
2.1 Location registration flows
2.2 Authenticationflows
2.3 Calling flows
2.4 Handoff flows2.4 Handoff flows
2.5 Supplementary service flows
2.6 Short message flows
-
8/6/2019 8. Ora000002 Cdma Communication Flow(Nss)Issue1.1
32/57
Confidential Information of
Huawei. Security Level: Internal
32
HandOff flow on A interface in one BSCHandOff flow on A interface in one BSC
-
8/6/2019 8. Ora000002 Cdma Communication Flow(Nss)Issue1.1
33/57
Confidential Information of
Huawei. Security Level: Internal
33
HandOff flow on A interface between BSCsHandOff flow on A interface between BSCs
Source BSC
-
8/6/2019 8. Ora000002 Cdma Communication Flow(Nss)Issue1.1
34/57
Confidential Information of
Huawei. Security Level: Internal
34
Forward HandOffForward HandOff
Target MSCAnchor/Serving MSC
-
8/6/2019 8. Ora000002 Cdma Communication Flow(Nss)Issue1.1
35/57
Confidential Information of
Huawei. Security Level: Internal
35
Backward HandOffBackward HandOff
Target MSC Anchor/Serving MSC
-
8/6/2019 8. Ora000002 Cdma Communication Flow(Nss)Issue1.1
36/57
Confidential Information of
Huawei. Security Level: Internal
36
HandOff to Third PartyHandOff to Third Party
Target MSC
-
8/6/2019 8. Ora000002 Cdma Communication Flow(Nss)Issue1.1
37/57
Confidential Information of
Huawei. Security Level: Internal
37
QuestionsQuestions
What is the difference between ForwardHandOff and Backward HandOff?
When does the third parties handoff happen?
What is the main function of FACDIR
-
8/6/2019 8. Ora000002 Cdma Communication Flow(Nss)Issue1.1
38/57
Confidential Information of
Huawei. Security Level: Internal
38
AnswersAnswers
Question 1: the Forward Handoff is that MS handoff from the
serving MSC to a new target MSC; and the Backward HandOff is
that MS handoff from the serving MSC to the primary controlling
MSC.
Question 2: Whether HandOff to Third Party happens depends
on the startup standard value of Third Party HandOff and handoff
depth together, when the current handoff times, viz. the handoff
depth equal to the startup standard value of Third Party Handoff,
the MS will handoff to the third party.
Question 3: FACDIR is used to set up inter_office handoff
circuits, which is MAP circuit.
-
8/6/2019 8. Ora000002 Cdma Communication Flow(Nss)Issue1.1
39/57
Confidential Information of
Huawei. Security Level: Internal
39
Chapter 2 Communication flows of CDMAChapter 2 Communication flows of CDMA
2.1 Location registration flows
2.2 Authentication flows
2.3 Calling flows
2.4 Handoff flows
2.5 Supplementary service flows2.5 Supplementary service flows
2.6 Short message flows
-
8/6/2019 8. Ora000002 Cdma Communication Flow(Nss)Issue1.1
40/57
Confidential Information of
Huawei. Security Level: Internal
40
FEATURE SERVICEFEATURE SERVICE
-
8/6/2019 8. Ora000002 Cdma Communication Flow(Nss)Issue1.1
41/57
Confidential Information of
Huawei. Security Level: Internal
41
Call Forwarding Unconditional (CFU)Call Forwarding Unconditional (CFU)
-
8/6/2019 8. Ora000002 Cdma Communication Flow(Nss)Issue1.1
42/57
Confidential Information of
Huawei. Security Level: Internal
42
Call Forwarding Busy (CFB)Call Forwarding Busy (CFB)
-
8/6/2019 8. Ora000002 Cdma Communication Flow(Nss)Issue1.1
43/57
Confidential Information of
Huawei. Security Level: Internal
43
Call Forwarding No Answer (CFNA)Call Forwarding No Answer (CFNA)
-
8/6/2019 8. Ora000002 Cdma Communication Flow(Nss)Issue1.1
44/57
Confidential Information of
Huawei. Security Level: Internal
44
Call Forwarding Default (CFD)Call Forwarding Default (CFD)
llowing cases, the call does not be connected to the serving MSC when the CFDribed.
ot-Disturb Service has been activated
as not registered
as been deactivated
-
8/6/2019 8. Ora000002 Cdma Communication Flow(Nss)Issue1.1
45/57
Confidential Information of
Huawei. Security Level: Internal
45
Message Waiting Notification (MWN)Message Waiting Notification (MWN)
-
8/6/2019 8. Ora000002 Cdma Communication Flow(Nss)Issue1.1
46/57
Confidential Information of
Huawei. Security Level: Internal
46
QuestionsQuestions
What is the priority of 4 types of call forwarding?What is the difference between CFNA and CFB ?
In Conference Call flow, if a user exits, will the
conference call terminated?
-
8/6/2019 8. Ora000002 Cdma Communication Flow(Nss)Issue1.1
47/57
Confidential Information of
Huawei. Security Level: Internal
47
AnswersAnswers
Question 1: CFU>CFB>CFNA>CFD
Question 2: There are two differences between CFNA and
CFB :
CFNA has gotten a TLDN and set up a call to the
called office, while CFB dose not get any TLDN from
the HLR to which the called MS belongs;
Forwarded-to number of CFNA is retrieved by the
calling MSC from the HLR to which the called MS
belongs, while in CFB, it is sent by the HLR to which
the called MS belongs directly.
Question 3: In CC, if the main controlling user exits, the
conference call terminates; but if a common user exits,
other users continue the conference call.
-
8/6/2019 8. Ora000002 Cdma Communication Flow(Nss)Issue1.1
48/57
Confidential Information ofHuawei. Security Level: Internal
48
Chapter 2 Communication flows of CDMAChapter 2 Communication flows of CDMA
2.1 Location registration flows
2.2 Authenticationflows
2.3 Calling flows
2.4 Handoff flows
2.5 Supplementary service flows
2.6 Short message flows2.6 Short message flows
-
8/6/2019 8. Ora000002 Cdma Communication Flow(Nss)Issue1.1
49/57
Confidential Information ofHuawei. Security Level: Internal
49
MS Sends Short Message in Access ChannelMS Sends Short Message in Access Channel
BSS MSCMC
ADDS Transfer
SMSDPP
smsdpp(ack)
ADDS Page
-
8/6/2019 8. Ora000002 Cdma Communication Flow(Nss)Issue1.1
50/57
Confidential Information ofHuawei. Security Level: Internal
50
MS Sends Short Message in Service ChannelMS Sends Short Message in Service Channel
BSS MSC MC
ADDS Deliver
SMSDPP
smsdpp(ack)
ADDS Deliver Ack
-
8/6/2019 8. Ora000002 Cdma Communication Flow(Nss)Issue1.1
51/57
Confidential Information ofHuawei. Security Level: Internal
51
MS Receives Short Message in Paging ChannelMS Receives Short Message in Paging Channel
BSS HLR MCMSC
SMSREQ
smsreq
SMSDPP
ADDS Page
ADDS Page Ack
smsdpp
-
8/6/2019 8. Ora000002 Cdma Communication Flow(Nss)Issue1.1
52/57
Confidential Information ofHuawei. Security Level: Internal
52
MS Receives Short Message in Service ChannelMS Receives Short Message in Service Channel
BSS HLR MC MSC
SMSREQ
smsreq
SMSDPP
ADDS Deliver
ADDS Deliver Ack
smsdpp
-
8/6/2019 8. Ora000002 Cdma Communication Flow(Nss)Issue1.1
53/57
Confidential Information ofHuawei. Security Level: Internal
53
QuestionsQuestions
1. If the subscriber receives an extremely short
message during conversation, which channel is used
to deliver the Short message?
2. What is the influence of the length of the short
message when a MS originates a short message?
-
8/6/2019 8. Ora000002 Cdma Communication Flow(Nss)Issue1.1
54/57
Confidential Information ofHuawei. Security Level: Internal
54
AnswersAnswers
Question 1: ADDS Deliver Message.
Question 2: The length of the short message
may affect the A_interface message . If the
length of the short message is less than a
certain threshold, it is sent from the access
channel using the ADDS transfer message; if
the length is more than a certain threshold, it is
sent from the service channel, using the ADDS
delivermessage.
-
8/6/2019 8. Ora000002 Cdma Communication Flow(Nss)Issue1.1
55/57
Confidential Information ofHuawei. Security Level: Internal
55
ReviewReview
This section mainly describes common flows of CDMA including: location
registration, authentication, calling, handoff, supplementary services and short
message.
Describing the important messages and parameters in each flow.
-
8/6/2019 8. Ora000002 Cdma Communication Flow(Nss)Issue1.1
56/57
Confidential Information ofHuawei. Security Level: Internal
56
ReferenceReference
IOS40 Interface A Specifications
ANSI41D Interface C/D Specifications
ANSI-664 Supplementary Service
-
8/6/2019 8. Ora000002 Cdma Communication Flow(Nss)Issue1.1
57/57
57