Mobility Management and Connection Management

NOKIA

topic: MM & CM Procedures/ July 2003 /Markus Wimmer

Objectives
At the end of this module, you will be able to Remember the NAS related location management function See the relationship between 2G and 3G MM and CM procedures

NOKIA

topic: MM & CM Procedures/ July 2003 /Markus Wimmer

MM and CM Procedures

UE NAS:
NAS controls

CN Connection Management (CC, SS, SMS, SM) Mobility Management (MM & PMM)

AS:

RRC

RANAP

UTRAN
3 NOKIA topic: MM & CM Procedures/ July 2003 /Markus Wimmer

Part I Mobility Management

NOKIA

topic: MM & CM Procedures/ July 2003 /Markus Wimmer

Mobility Management (MM) Procedures

MM procedures MM common procedures
Network initiated: TMSI reallocation authentication identification MM information abort (MM connection established) UE initiated: IMSI detach

MM specific procedures
normal LUP periodic LUP IMSI attach

MM connection mgt procedures

MM connection establishment MM connection release

NOKIA

topic: MM & CM Procedures/ July 2003 /Markus Wimmer

Packet Switched Mobility Management Procedures

GMM procedures GMM common procedures
Network initiated: P-TMSI (re-) allocation GPRS authentication and ciphering GPRS identification GPRS information

GMM specific procedures

Network initiated: GPRS detach and combined GPRS detach UE initiated: GPRS attach and combined GPRS attach GPRS detach and combined GPRS detach normal routing area update and combined routing area update periodic routing area update service request

NOKIA

topic: MM & CM Procedures/ July 2003 /Markus Wimmer

PS Mobility Management States

3G-SGSN only: S-RNC Relocation

PS Signalling Connection Establishment

PMM-CONNECTED
PS Signalling Connection Release GPRS Attach

PMM-IDLE

GPRS Detach GPRS Attach Reject RAU Reject

PMM-DETACHED

Implicit GPRS Detach (SGSN: MS Reachable Timer expires)

(adopted from TS 23.060 V3.13.0)

NOKIA

topic: MM & CM Procedures/ July 2003 /Markus Wimmer

Packet Data Protocol States

UE

3G-SGSN Activate PDP Context

GGSN

INACTIVE

ACTIVE

Deactivate PDP Context or MM context change to PMM-DETACHED

8 NOKIA topic: MM & CM Procedures/ July 2003 /Markus Wimmer

(adopted from TS 23.060 V3.13.0)

Mobility Management Messages

Registration Security
Network initiated: LOCATION UPDATING ACCEPT LOCATION UPDATING REJECT UE initiated: IMSI DETACH INDICATION LOCATION UPDATING REQUEST

Miscellaneous
Network initiated: MM INFORMATION MM STATUS UE initiated: MM STATUS MM NULL

Network initiated: AUTHENTICATION REJECT AUTHENTICATION REQUEST IDENTITY REQUEST TMSI REALLOCATION COMMAND UE initiated: AUTHENTICATION RESPONSE IDENTITY RESPONSE TMSI REALLOCATION COMPLETE

Connection Management
Network initiated: CM SERVICE ACCEPT CM SERVICE REJECT ABORT UE initiated: CM SERVICE REQUEST CM RE-ESTABLISHMENT REQUEST CM SERVICE ABORT

NOKIA

topic: MM & CM Procedures/ July 2003 /Markus Wimmer

GPRS Mobility Management Messages

Registration

Security
Miscellaneous

Network initiated: ATTACH ACCEPT ATTACH REJECT DETACH REQUEST ROUTING AREA UPDATE ACCEPT ROUTING AREA UPDATE REJECT UE initiated: ATTACH REQUEST ATTACH COMPLETE DETACH ACCEPT DETACH REQUEST ROUTING AREA UPDATE REQUEST ROUTING AREA UPDATE COMPLETE

Network initiated: AUTHENTICATION AND CIPHERING REQUEST AUTHENTICATION AND CIPHERING REJECT IDENTITY REQUEST P-TMSI REALLOCATION COMMAND SERVICE ACCEPT SERVICE REJECT UE initiated: AUTHENTICATION AND CIPHERING RESPONSE AUTHENTICATION AND CIPHERING FAILURE IDENTITY RESPONSE P-TMSI REALLOCATION COMPLETE SERVICE REQUEST

Network initiated: GMM STATUS GMM INFORMATION UE initiated: GMM STATUS

10

NOKIA

topic: MM & CM Procedures/ July 2003 /Markus Wimmer

Network Mode of Operation and UE Modes

3G-MSC/VLR

UE

UTRAN

Gs

3G-SGSN
UE modes: CS mode PS mode CS/PS mode NMO I: Gs interface is present NMO II: Gs interface is not present

11

NOKIA

topic: MM & CM Procedures/ July 2003 /Markus Wimmer

Location Area Concepts

Location Area
LAI = MCC MNC LAC

LA1

LA2

Routing Area

RAI =

MCC

MNC

LAC

RAC

RA1

RA2

LA2

RA3 RA4

Service Area

SAI =

MCC

MNC

LAC

SAC

SA1 SA2
12 NOKIA topic: MM & CM Procedures/ July 2003 /Markus Wimmer

SA4 SA3 LA1 SA5

SA7 SA6

LA2

SA8

Location Update Types

normal location update LA1 / RA 1

LA 2 / RA 2

periodic location update (T3212)

last interaction with network Periodic timer set

timer set

Periodic timer expires

periodic update initiated by UE time

IMSI attach

I am off

3G-MSC/VLR
I am on again
13 NOKIA topic: MM & CM Procedures/ July 2003 /Markus Wimmer

Periodic Location Update Timers and the Attach Flag

System Information ( )

UTRAN

UE

CS domain

SIB1

PS domain

Node B
RAC NMO

RNC

T3212 ATT-flag

IE: CN domain specific GSM-MAP NAS system

ATTACH ACCEPT ( ) / ROUTING AREA UPDATE ACCEPT ( )

UE
14 NOKIA topic: MM & CM Procedures/ July 2003 /Markus Wimmer

(default 54 min)

T3312

3G-SGSN

Location Update Status

CS Mode U1
Last LU and registration successful USIM has valid LAI possibly TMSI
USIM operator XYZ

PS Mode Updated
Last RAU and registration successful USIM has valid RAI possibly P-TMSI

GU1

CK, IK, CKSN

U2
Last LU failed USIM has no valid location information and key are deleted.

Not Updated

GU2
Last RAU failed USIM has no valid routing area information and key are deleted.

USIM

U3
Last LU successful, but registration rejected. USIM may have valid LAI possibly TMSI
15 NOKIA topic: MM & CM Procedures/ July 2003 /Markus Wimmer

Roaming Not Allowed

GU3
Last RAU successful, but registration rejected. USIM USIM may have valid RAI possibly P-TMSI

CK, IK, CKSN

Location Update Procedure

Location Updating Request ( ) UE
Mobility management protocol discriminator Skip Indicator Location Updating Request message type Location updating type Ciphering key sequence number Location area identification Mobile station classmark Mobile identity Mobile station classmark for UMTS
16 NOKIA

0101: mobility management message 0000 xx001000: location updating request

3G-MSC/VLR
Standard format of every NAS message

Normal LU/ periodic LU / IMSI attach Follow on request pending: yes / no

MCC + MNC + LAC (previous LAI) for GSM MSs: revision level, controlled early classmark sending option, A5/1 support, RF power capability. TMSI, if not available => IMSI (previous TMSI)
OP

See MS classmark; LCS VA capability, SoLSA support, A5/2 support, A5/3 support, CM Service Prompt support, etc.

topic: MM & CM Procedures/ July 2003 /Markus Wimmer

Location Update Procedure

UE
Mobility management protocol discriminator Skip Indicator Location Updating Accept message type Location area identification Mobile Identity Follow on proceed CTS permission Equivalent PLMNs
OP OP OP OP

Location Updating Accept ( )

3G-MSC/VLR

0101: mobility management message 0000 xx000010: location updating accept MCC + MNC + LAC (new LAI) TMSI, if not available => IMSI (new TMSI)

the MS is allowed to use GSM-Cordless Telephony System in this LA

number of PLMNs and their MCC and MNC.

17

NOKIA

topic: MM & CM Procedures/ July 2003 /Markus Wimmer

Location Update Procedure

Start T3210

UE
LOCATION UPDATING REQUEST ( ) (Identification Procedure)

3G-MSC/VLR

T3210 = 20 s

Authentication Procedure Stop T3210 U1 Security Mode Procedure

LOCATION UPDATING ACCEPT ( )

e.g. new TMSI follow on proceed

CM message pending T3240 (= 10 s)

TMSI REALLOCATION COMPLETE ( )

TMSI confirmation T3250 (= 12 s)

(*) (*) Prolonged RR connection T3255 (e.g. if pending request in Location Updating Req.)
18 NOKIA topic: MM & CM Procedures/ July 2003 /Markus Wimmer

Location Update Procedure

Start T3210

UE
LOCATION UPDATING REQUEST ( )
Authentication Procedure Stop T3210 U3 Security Mode Procedure

T3210 = 20 s

3G-MSC/VLR

LOCATION UPDATING REJECT ( )

Wait for RR connection to be release

T3240 (= 10 s)
U1, if LAI on USIM equal to BCCH, and attempt counter < 4, and user status was U1
time

T3210 expiry
T3210 expiry Start T3211 U1, if UE in no new LA

15 s
T3211 expiry LU Req.

LU Req.

U2, if LAI on USIM not equal to BCCH attempt counter 4, or user status was not U1

19

NOKIA

topic: MM & CM Procedures/ July 2003 /Markus Wimmer

IMSI Detach
Abnormal Situation:
UE cannot establish RR Connection Abort IMSI Detach

UE
Start T3220 Stop T3210

RR Connection Establishment

IMSI ATTACH INDICATION ( ) RR Connection Release

3G-MSC/VLR
no response release of ongoing MM connections release of RR connection

T3220 =5s

T3220 Expiry
UE aborts internally its RR sub-layer
20 NOKIA topic: MM & CM Procedures/ July 2003 /Markus Wimmer

GPRS Attach
Start T3310

UE
ATTACH REQUEST ( ) (Identification Procedure)

3G-SGSN

T3210 = 15 s

Stop T3310 GU1

Authentication and Ciphering Procedure ATTACH ACCEPT ( )

e.g. new TMSI or P-TMSI

ATTACH COMPLETE ( )

(P-)TMSI confirmation T3350 (= 6 s)

T3310 expiry ATTACH Req. T3310 expiry Start T3311 T3211 expiry ATTACH Req. T3310 expiry Start T3311 T3310 expiry Start T3302 T3302 expiry ATTACH Req. time

15 s
GPRS attach request counter = 1
21 NOKIA topic: MM & CM Procedures/ July 2003 /Markus Wimmer

GPRS attach request counter 5 mobility status = GU2

T3302 (default 12 min.)

UE Initiated GPRS Detach

normal detach
IE Detach type: GPRS detach / IMSI detach / combined GPRS/IMSI detach normal detach / power switch off Start T3321

UE
DETACH REQUEST ( )
(Identification Procedure)

3G-SGSN

T3321 = 15 s

Stop T3321

Authentication and Ciphering Procedure

DETACH ACCEPT ( )

Expiry: retransmission of DETACH REQUEST (up to 4 times)

power switch off

UE
DETACH REQUEST ( )

3G-SGSN

Releases all resources on lower layers

22

NOKIA

topic: MM & CM Procedures/ July 2003 /Markus Wimmer

Network Initiated GPRS Detach

re-attach required
terminate all logical links and PDP Contexts re-start all logical links and PDP Contexts

UE
DETACH REQUEST ( ) (Identification Procedure) Authentication and Ciphering Procedure DETACH ACCEPT ( ) ATTACH REQUEST ( )

3G-SGSN

Start T3322

Stop T3322

T3322 =6s

IMSI detach U2

UE

DETACH REQUEST ( ) DETACH ACCEPT ( ) ROUTING AREA UPDATE REQUEST ( )

3G-SGSN

combined RA/LA updating with IMSI attach re-attach not required

23 NOKIA

See re-attach required, but with no message following the DETACH ACCEPT.
topic: MM & CM Procedures/ July 2003 /Markus Wimmer

Routing Area Update

Start T3330

UE
ROUTING AREA UPDATE REQUEST ( ) (Identification Procedure)

3G-SGSN

T3330 = 15 s

Stop T3330 GU1

Authentication and Ciphering Procedure ROUTING AREA UPDATE ACCEPT ( )

e.g. new TMSI and/or P-TMSI or Receive N-PDU number needed

ROUTING AREA UPDATE COMPLETE ( )

T3350 (= 6 s)

T3330 expiry ATTACH Req. T3330 expiry Start T3311 T3211 expiry ATTACH Req. T3330 expiry Start T3311 T3330 expiry Start T3302 T3302 expiry ATTACH Req. time

15 s
GPRS attach request counter = 1
24 NOKIA topic: MM & CM Procedures/ July 2003 /Markus Wimmer

GPRS attach request counter 5 mobility status = GU2

T3302 (default 12 min.)

The Service Request Procedure

Start T3317

UE
SERVICE REQUEST ( )
Stop T3317

Authentication and Ciphering Procedure

3G-SGSN

T3317 = 10 s

SERVICE ACCEPT ( )
Radio Bearer Setup

UE
SERVICE REQUEST ( )
Authentication and Ciphering Procedure

3G-SGSN

SERVICE REJECT ( )
T3317 expiry
I abort the procedure

25

NOKIA

topic: MM & CM Procedures/ July 2003 /Markus Wimmer

The Service Request Procedure

UE

SERVICE REQUEST ( )

3GSGSN

Protocol discriminator

Skip indicator
Service Request Ciphering key sequence number Service Type P-TMSI PDP context status
OP NSAPI x:

000: Signalling 001: Data 010: Paging Response

0 = corresponding PDP context is inactive 1 = corresponding PDP context is inactive X = 0 .. 15, (0..4 are coded as inactive)

26

NOKIA

topic: MM & CM Procedures/ July 2003 /Markus Wimmer

Nokia Parameters for NAS Mobility Management

RAN 1 supports only NMO II, where the Gs interface is not present. Consequently, procedures such as combined GPRS attach is not supported. RNC: PS_NMO In Operation Mode I it is possible to have combined CS and PS side paging via SGSN. In Operation Mode II the combined paging procedure is not possible (and neither are combined attach procedures). Used only for the PS domain. NMO is part of PS CN domain specific NAS System information in SIB1. 0 (Network Mode of Operation I), 1 (Network Mode of Operation II), default: 1 RNC: CSAttachDetachAllowed Defines whether IMSI attach and detach are allowed or not. Given only for CS domain. This is part of CS CN domain specific NAS System information in SIB1. 0 (UE shall not apply these procedures), 1 (MSs shall apply these procedures); default value: 1 RNC: CNDomainIndicator Indicates the CN domain from which the message originates, or to which the message will be sent. This parameter is also part of System Information Block 1. 0 (Circuit Switched), 1 (Packet Switched)

27

NOKIA

topic: MM & CM Procedures/ July 2003 /Markus Wimmer

Nokia Parameters for NAS Mobility Management

RNC: CS_T3212 The timeout value, in decihours (6 min), for periodic location updating. Given only for CS domain. (SIB1). The value 0 is used for an infinite timeout value. [0 ... 255] decihours, step 1 decihours; default value: 0 decihours RNC: PS_T3313

28

NOKIA

topic: MM & CM Procedures/ July 2003 /Markus Wimmer

Part II Connection Management

29

NOKIA

topic: MM & CM Procedures/ July 2003 /Markus Wimmer

UE Initiated PDP Context Activation

UE 3GSGSN
ACTIVATE PDP CONTEXT REQUEST ( ) CREATE PDP CONTEXT REQUEST CREATE PDP CONTEXT RESPONSE

GGSN

T3380 = 30 s

Radio Bearer Setup UPDATE PDP CONTEXT REQUEST ACTIVATE PDP CONTEXT ACCEPT ( ) UPDATE PDP CONTEXT RESPONSE

T3380 expiry (*) T3330 expiry (*) T3211 expiry (*) T3211 expiry (*)

time
counter = 1
30 NOKIA topic: MM & CM Procedures/ July 2003 /Markus Wimmer

counter = 4

UE aborts procedure
(*) := ACTIVATE PDP CONTEXT REQUEST

PDP Context Activation

UE
ACTIVATE PDP CONTEXT REQUEST ( )

3GSGSN

Protocol discriminator

1010: GPRS session management messages

Transaction indicator Activate PDP context request message ID

Requested NSAPI Requested LLC SAPI Requested QoS Requested PDP address Access Point Name
OP OP 01000001: Activate PDP context request Delay class Reliability class Precedence class Mean and peak throughput class Maximum UL/DL bit rate Transfer delay Guaranteed UL/DL bit rate Residual BER Delivery order etc.

Protocol configuration options

31 NOKIA

topic: MM & CM Procedures/ July 2003 /Markus Wimmer

PDP Context Activation

UE
ACTIVATE PDP CONTEXT ACCEPT ( )

3GSGSN

Protocol discriminator Transaction indicator

1010: GPRS session management messages

Activate PDP context request message ID

Negotiated LLC SAPI Negotiated QoS Radio priority Spare half octet PDP address Protocol configuration options Packet Flow Identifier
32 NOKIA

01000010: Activate PDP context accept Not required in UMTS, but transmitted to support UMTS GPRS cell reselection

OP

OP
OP

topic: MM & CM Procedures/ July 2003 /Markus Wimmer

Secondary PDP Contexts

To which PDP context if PDUs have the same PDP address?

GGSN UE Traffic Flow Template (TFT) attributes

Source Address and Subnet Mask Protocol Number (IPv4) / Next Header (IPv6) Destination Port Range Source Port Range IPSec Security Parameter Index (SPI) Type of Service (TOS) (IPv4) / Traffic class (IPv6) and Mask Flow Label (IPv6)

PDN PDP PDU

GGSN

UE
ACTIVATE SECONDARY PDP CONTEXT REQUEST ( ) CREATE PDP CONTEXT REQUEST CREATE PDP CONTEXT RESPONSE

T3380 = 30 s
33 NOKIA

ACTIVATE SECONDARY PDP CONTEXT ACCEPT ( )

SGSN
topic: MM & CM Procedures/ July 2003 /Markus Wimmer

Call Setup Flow

mandatory IEs

Call control protocol discriminator Transaction identifier Setup type message Bearer capability 1

Called party BCD number

e.g. radio channel requirement, speech version indication, information transfer capability, modem type, etc.

UE
SETUP ( ) most important info is the called party hp no.

3G-MSC/VLR
CALL PROCEEDING ALERTING CONNECT

CONNECT ACKNOWLEDGE
34 NOKIA topic: MM & CM Procedures/ July 2003 /Markus Wimmer