Chapter 6 -CDMA Network Architecture

1. System Architecture
The CDMA cellular mobile communication system consists of four independent subsystems: Mobile Station (MS), Base Transceiver Subsystem (BSS), Mobile Switching Subsystem (MSS) and Operation & Maintenance Subsystem (OMM). MS and BSS can communicate directly, while the communication between BSS and MSS is implemented through the standard A interface. Other interfaces, such as B, C, D, E, H, M, N, O and P represents the interfaces among the functional entities. When different functional entities are configured in each physical unit, some interfaces will become internal interfaces that may not follow the unified interface standard. Ai, Di and Pi are the systems interfaces to interconnect with other communication networks. Fig. 1 shows the architecture and interfaces of the CDMA system:
MSC EIR IWF

MS

Um

L Pi

PSPDN

BTS

Abis

BSC

MSC

Ai Di

PSTN

ISDN

OMC

AUC

HLR

VLR

SME

SME

SC

SC

VLR

Fig. 1 Network Architecture of the CDMA Cellular Mobile Communications System

56

BSC BTS MSC OMC AUC EIR HLR VLR: MS ISDN PSTN PSPDN PLMN SC

Base Station Controller Base Transceiver Station Mobile services Switching Center Operation and Maintenance Center Authentication Center Equipment Identification Register Home Location Register Visitor Location Register Mobile Station Integrated Services Digital Network Public Switched Telephone Network Public Switched Public Data Network Public Land Mobile Network Short Message Center

2. An Introduction to Network Entities 2.1 BTS Subsystem

The BTS Subsystem (BSS) is the assembly of radio equipment and radio channel control equipment, serving one or more cellular cells. In certain radio coverage, it is controlled by the Mobile Switching Center (MSC) to implement channel assignment, user access and paging, and information transfer. Normally, the BSS consists of one or more BSCs and BTSs. The BTS is responsible for radio transmission and BSC for control and management.
1. Base Transceiver

The Base Transceiver (BTS) belongs to the radio part of a basestation system. Controlled by BSC, it serves the radio transceiving equipment of a certain cell, implements the conversion between BSC and radio channels, radio transmission through air interface between BTS and MS and related control, and communicates with BSC through the Abis interface.
2. Base Station Controller

One end of the Base Station Controller (BSC) can be connected with one or more BTSs, while its other end can be connected with MSC and OMC. Oriented to radio network, BSC implements radio network management, radio resource management
57

and radio BTS monitoring and management. It also controls the establishment, connection and disconnection of radio connection between MS and BTS, controls the positioning, handoff and paging of MS, provides voice coding and rate adjustment and carries out operation and maintenance of the BSS. 2.2 Mobile Switching Subsystem The Mobile Switching Subsystem (MSS) implements the main switching functions of the CDMA network. Meanwhile it manages the database for user data and mobility. Mobile Switching Center MSC is the core of the CDMA network. It controls and implements voice channel connection for MSs within its coverage, namely serving as an interface between CDMA and other networks. The functions MSC carries out include call connection, charging, BSS-MSC handoff, assist radio resource management and mobility management. Besides, each MSC also implements the GMSC function for call route establishment to the MS, namely, to query the location information of each MS. MSC gets all data required for call request processing from three databases, VLR, HLR and AUC. Visitor Location Register The Visitor Location Register (VLR) is a dynamic user database, storing the related user data of all MSs (visitors) within the MSCs management range, including user ID, MSs location area information, user status and services available for the user. VLR gets and stores all necessary data from the HLR of a mobile subscriber. Once the mobile subscriber leaves the control area of the VLR, it will be registered in another VLR, and the previous VLR will delete its data log. Home Location Register The Home Location Register (HLR) is a static database, storing the data for mobile subscriber management. Each mobile subscriber should be registered in its HLR. It stores two kinds of information: parameters related with the mobile subscriber, including the subscribers ID, access capability, user type and supplementary service; current location information of the subscriber for call route establishment. For example: the address of MSC or VLR. No matter where the mobile subscriber roams, its HLR should provide all related parameters and input the latest location into the database.
58

Authentication Center The Authentication Center (AUC), a functional entity managing the authentication information related with mobile stations (MSs). It implements MS authentication, stores the MS authentication parameters, generates and sends the corresponding authentication parameters according to the requests of MSC or VLR, including AKEY, SSD, ESN, MIN and AAV, and then calculates all random numbers to get the authentication result. Short Message Center The Short Message Center (SC) is responsible for receiving, storing and forwarding short messages between the CDMA mobile subscribers and fixed line users or between mobile subscribers. It serves as a postal office, receiving mails from every place, sorts them out and then distribute them to the corresponding users. Through SC, the messages can be sent to destination more reliably. The short message services include point-to-point server and cell broadcast service. Note Currently the MSC of ZTE features the functions of the Intelligent Network (IN) Service Switching Point (SSP) to process IN service requests at the Service Control Point (SCP). For convenient management, MSC is always combined with VLR. Besides, the signaling to AUC must pass HLR first, so HLR and AUC are normally combined together to minimize network load. 2.3. Operation and Maintenance Management Subsystem (OMM)
The Operation & Maintenance Center (OMC) provides equipment operators with network operation and maintenance services, manages subscriber information, makes network planning and improves the efficiency and service quality of the whole system. OMC includes OMC-S and OMC-R, depending on the part for maintenance. OMC-S is responsible for the maintenance on the MSS side while OMC-R is responsible for the maintenance on the BSS side. Its specific functions include: maintenance test, obstacle check and handling, system status monitoring, realtime system control, office data modification, performance management, subscriber tracking, alarm and traffic measurement.

3. Interfaces and Protocols

According to the Open System Interconnection (OSI) model, we can analyze the CDMA network on the aspects of interface, protocol and interface functions in detail.

59

3.1 Interfaces As shown in Fig. -1, various interfaces exist in the CDMA system. They can divided into the following categories according to different subsystems: Air interface Um between mobile terminals and the BSS, A interface between BSS and MSS, and other interfaces between internal entities of the network. Air interface The Um interface is defined as the communication interface between MS and BTS. It is the key distinguishing the CDMA network from the GSM network and the most important interface of the CDMA network. This interface grants compatibility to MSs from different suppliers and networks of different operators, enables MSs to roam, ensures the frequency efficiency of the cellular system, and adopts a series of anti-interference technologies and interference preventing measures. Obviously, the Um interface implements the physical connection from MS to the fixed part of the CDMA system, i.e. the wireless connection. Besides, it transfers information for radio resource management, mobility management and connection management. Interface between BSS and MSS A interface The A interface is located between MSC and BSC. Its physical link is implemented through standard PCM digital transmission link of 2.048Mbit/s. It transfers information for MS management, BTS management, mobility management and connection management. BSS internal interface (Abis) An interface between BSC and BTS is called the Abis interface. BSC on the Abis interface provides signaling control information for BTS configuration, monitoring, and testing and service control. Please refer to related documentation about the BTS side.

60

MSS internal interfaces

BTS

BSC

MSC B
VLR

C
D HLR/AUC

BSS E

VLR

N B
Q MC

MSC

Fig. 2. Internal Interfaces of the Network In Fig. 2., the MSS part contains the names of interfaces between equipment entities. They will be described one by one in the coming part. B interface As an internal interface between VLR and MSC, the B interface is used by the MSC to request the current location information of the MS from VLR or notify the VLR to update the location information of the MS. C interface As an interface between HLR and MSC, the C interface transfers information for route selection and management. Once a call is required to a MS, the Gateway MSC (GMSC) will request the roaming number of the called MS from the HLR of the called side. The physical link of the C interface is 2.048Mbit/s standard PCM digital transmission cable. D interface As an interface between HLR and VLR, the D interface exchanges information related with MS location and user management. It ensures that the MS can establish and receives calls within the entire service area. Its physical link is 2.048Mbit/s standard digital link. E interface It is the interface controlling different MSCs of adjacent areas. When the MS moves, during a call, from the control area of one MSC to that of another MSC, this interface
61

can be used to exchange related handoff information to activate and complete handoff, and thus to complete the cross-cell channel handoff process without interrupting the communication. Its physical link is implemented through 2.048Mbit/s standard digital link between MSCs. N interface This interface is used to transfer route information related with the called subscriber between MC and HLR. Its physical link is implemented through 2.048Mbit/s standard digital link. Q interface It is an interface between MS and MSC transferring short messages. Note In the CDMA system, Um, A and other interfaces on the network side are all open interfaces. The Abis interface is normally used as an internal interface. If MSC and VLR are combined, the B interface will be used as an internal interface. All open interfaces are compliant with standard protocols. 3.2 Interface Protocols A protocol is the common language among various functional entities. It transfers messages through interfaces to establish an effective information transmission channel to complete all communication and management functions of the CDMA system. Different interfaces may require different physical links to complete their own functions. When the hierarchical protocol structure is adopted for the systems interfaces, the interworking with ISDN can be considered. Therefore, the interfaces match the OSI reference model. The purpose of this structure is to allow the isolation of different signaling protocols, describing protocols according to continuous independent hierarchy. Each layer of protocol provides specified service at the agreed service access point for its upper layer protocol. Fig. 2. shows the protocol structure of the CDMA network.

62

MS
IS95 L3 IS95 L2 IS95 L1

BTS
IS95 L3 Abis L3

BSC
Abis L3 BSSAP Abis L2 SCCP Abis L1 MTP

MSC
MAP
BSSAP

TCAP SCCP

IS95 L2 IS95 L1

Abis L2 Abis L1

MTP

Um

Abis

Fig. 3 CDMA Network Protocol Structure

On the BTS side, the IS-95 protocol of Qualcomm is used for the CDMA system. At the A interface, related standards stipulated by the Ministry of Information Industry. The signaling model is shown in Fig. 3:
BSC A? MSC

DTAP

BSSMAP

DTAP

BSSMAP

Allocation function SCCP

Allocation function SCCP

MTP

MTP

Fig. 4. Signaling Protocol Reference Model of A Interface DTAP: Direct Transfer Application Part BSSMAP: BSS Mobile Application Part SCCP: Signaling Connection Control Part MTP: Message Transmission Part The third layer consists of DTAP and BSSMAP. DTAP messages are transparent to the A interface, therefore the A interface supports various air interfaces to implement call processing and mobility management, while radio resource management is mapped into a BSSMAP message and then transferred through the A interface. Layer 2: Based on the MTP of SS7 signaling. Layer 1 features digital transmission at the rate of 2048 Kbit/s.

63

On the network side, the functional entities communicate through SS7 MAP protocol, which reflects the SS7 signal protocol structure.
M AP IS U P

TUP

TCAP

SCCP

M TP

Fig. 5 :SS7 Signaling Hierarchical Structure Cross reference: Concepts related with the SS7 signaling system are widely used in the CDMA network. Information transfer is implemented through the MAP application layer among MSC, VLR, HLR, AUC and SC. Due to its important position, SS7 will be described separately in this set of textbooks.

Summary This chapter briefly describes the structure and related interfaces of the CDMA system. It is the study of the CDMA theory, also the basis for equipment maintenance. In the subsequent chapters, the CDMA system will be further described based on this chapter.

Topics for discussion: How many parts can the CDMA network be divided and what are they? What is the main signaling transferred at each interface of the CDMA network? Why is the SS7 signaling system important? What is its structure?

64

Numbering Plan

In the CDMA network, different numbers are used in different places. Because of the roaming feature of mobile subscribers, these numbers must be accepted and identified at any switching equipment. Therefore, in mobile communication, it is very necessary to give a unified numbering plan for different numbers to enable entities in the network to distinguish and identify mutually.

4.1

Knowledge Points
Tips: Understand the meanings of each number in the CDMA network Remember the numbering rules for each number

4.2

Mobile Directory Number (MDN)

MDN is the number the caller must dial to call a mobile subscriber of the CDMA network. Structure of the MDN:
CC + MAC + H0H1H2H3
BB BB BB BB BB BB BB

+
BB

ABCD

MDN of an international mobile subscriber Mobile subscriber number nationally effective

CC: Country Code, "86" stands for China. MAC: Mobile Access Code, which is 133, according to the network number solution used in this network. HBB0BBHBB1BBHBB2BBHBB3: BBHLR identification code, allocated by the headquarters to local networks in a uniform way. ABCD: Mobile subscriber number, allocated by each HLR.

65

4.3

IMSI and MIN

International Mobile Subscriber Identity (IMSI) is the unique number that identifies a mobile subscriber in the CDMA digital public land cellular mobile communication network. This number should be written into the MS. It is a 15-digit decimal number in the following structure:
MCC + MNC + MSIN

International mobile subscriber identity National mobile subscriber identity

MCC: Mobile country code, 460 for China; MNC: Mobile network code, 03 for the local network; MSIN: Mobile subscriber identification number, a 10-digit decimal number. MIN is defined following the AMPS standard to ensure the CDMA/AMPS bimodal operation, and is the last 10 digits of IMSI, namely MSIN, as required by this system. MSIN is of the following structure:
+ XX

H0H1H2H3
BB BB BB BB BB BB BB

+
BB

ABCD

XX is the MIN number segment allocated to China. 09 and 03 are used by this network. H 0 H 1 H 2 H 3 : same as the H 0 H 1 H 2 H 3 in MDN.
BB BB BB BB BB BB BB BB BB BB BB BB BB BB BB BB

ABCD: Subscriber number, obtainable according to the ABCD in MDN by certain means of scrambling defined by the headquarters.

4.4

HLR Number

Define an all-0 subscriber number for the HLR number. If the IMSI of a subscriber belonging to the HLR is 460 03 09 H 0 H 1 H 2 H 3 ABCD, The number of this HLR will be:
BB BB BB BB BB BB BB BB

460 03 09 H 0 H 1 H 2 H 3 0000
BB BB BB BB BB BB BB BB

Currently in China Unicom, H 0 =2 is defined, which means that the HLR number is
BB BB

46003092H 1 H 2 H 3 0000.
BB BB BB BB BB BB

66

4.5

MSC Number

It is the unique number identifying the MS during GT addressing, also the evidence for the network to locate the MSC. The MSC number is:
460 03 09 44 M 1 M 2 M 3 100
BB BB BB BB BB BB

M 1 M 2 M 3 stand for different MSCs, same with M 1 M 2 and H 1 H 2 .

BB BB BB BB BB BB BB BB BB BB BB BB BB BB

4.6

Temporary Local Directory Number (TLDN)

To call a mobile subscriber, VLR allocates a temporary number to the mobile subscriber for the network to select a route. China Unicom has specified 133, followed by 44. If the number segment 44 is not enough, 34 is also reserved as supplement, so the number structure is:
CC + MAC + 44 + M1M2M3
BB BB BB BB BB

+
BB

ABC

CC shares the same MDN with MAC M 1 M 2 M 3 = the M 1 M 2 M 3 of MSC

BB BB BB BB BB BB BB BB BB BB BB BB BB

4.7

Electronic Sequence Number (ESN)

ESN is the unique number used to identify a MS. One unique SN (Serial Number) is allocated to every individual bimodal MS. It consists of 32 bits, and the equipment serial number is set by the MS manufacturer. 4.8 System Identification (SID) and Network Identification (NID) In the CDMA network, MS judges roaming based on a pair of identification codes (SID and NID). The SID consists of 15 bits. This network first uses the 512 numbers from bit 14 to bit 9, 110010. Each mobile local network is allocated with one SID number, determined by the headquarters. The NID consists of 16 bits, with 0 and 65535 reserved. 0 is used to represent those BSs in a certain SID area that does not belong to a specific NID area. 65535 means that a mobile subscriber can roam in the whole SID area. The NID is allocated by each local network.

67

Note
In the network, IMSI, MDN and MSC are used as GT code during network addressing. The unified GT code format for all equipment except HLR: 46003 09 44 M 1 M 2 M 3 X00 X=1 MSC X=2 MC X=3 SCP X=4 IP X=5 VC M 1 M 2 is corresponding to H 1 H 2 in 1332 H 1 H 2 H 3 ABCD. It is emphysized that the current ESN is different from the ESN identifying specific hardware, because the mobile phone and card are detachable.
BB BB BB BB BB BB BB BB BB BB BB BB BB BB BB BB BB BB BB BB

Cross reference
The GT number is the address information of the SCCP layer. It will be described in the description of SS7 signaling. Summary This chapter describes all numbers involved now by the CDMA network and their numbering rules. Most of them are specified by the headquarters of China Unicom. These numbers are important evidence for addressing when we use the CDMA network. How to use these numbers will be described in the coming chapters.

68