Mobile Station States in IS-95A

by
Rahul Chauhan
 Mobile Station States
On power Up MS Initialization

Mobile station has

Unable to receive acquired timing
Paging Channel System

MS Idle State

MS receives a message on
Receives an ack for
the paging channel requiring
Access Channel message
M other than ORM and PRM
a ack;originates a call or
performs registration.

System Access State Released traffic

channel .
Assigned a traffic
channel.

MS Traffic State

Note : Transitions arising from error conditions are not shown in the diagram.
 CDMA Message Structure
Field Bits
The figure shows the Registration Message MSG_TYPE (‘00000001’) 8
Structure which is sent on the Access
Channel.A typical variable length PDU in IS- ACK_SEQ 3
95A. MSG_SEQ 3
ACK_REQ 1
Points to Note : VALID ACK
1
• MSG_TYPE which uniquely identifies a 3
ACK_TYPE
message and helps in parsing.In IS-2000 this 8- MSID_TYPE 3
bit field is split into a 2 bit field PD(protocol MSID_LEN 4
descriptor) and 6 bit message identifier MSID 8 x MSID_LEN
MSG_TYPE.In IS-2000 PD is (01)binary.
AUTH_MODE 2
•To ensure no messages are not missed, all 0 or 18
AUTHR
CDMA messages bear serial numbers and RANDC 0 or 8
important messages contain a bit requesting COUNT
acknowledgment.The slide window of 7 is used 4
for transfer of information. REG_TYPE 4
SLOT_CYCLE_INDEX 3
•Addressing fields identify the type of
MOB_PREV 8
addressing to be used.
SCM 8
•Authentication information to prevent spurious
MOB_TERM 1
users from accessing the resources of the
network.If the values in the PDU match the RESERVED 6
values generated at the BS,access is allowed.
 Messages Sent in Initialization and Idle States
Pilot Channel Sync Channel
No Messages Sync Channel Msg

Access Channel
Paging Channel BTS

Access Parameters Msg General Page Msg Registration Msg

System Parameters Msg Order Msg
•Base Station Acknowledgment
•Lock until Power-Cycled
• Maintenance required
CDMA Channel List Msg many others…..
Order Msg
• Mobile Station Acknowledgment
• Long Code Transition Request
• SSD Update Confirmation
many others…..

Extended System Channel Assignment Origination Msg

Parameters Msg Msg

Extended Neighbor Feature Notification Msg Page Response Msg

List Msg

Global Service Authentication Authentication Challenge

Response Msg
Redirection Msg Challenge Msg

Service Redirection Msg Status Request Msg Status Response Msg

TMSI Assignment
SSD Update Msg TMSI Assignment Msg Completion Message

Null Msg Data Burst Msg Data Burst Msg

 Messages in Traffic State
Forward Traffic Channel Reverse Traffic Channel
Order Msg Alert With
• Base Station Acknowledgment Information Msg
• Base Station Challenge
Confirmation
Service Request Msg Service Request Msg Origination
• Message Encryption Mode Continuation Msg

Authentication Service Response Msg Service Response Msg Authentication Challenge

Challenge Msg Response Msg

TMSI Assignment Msg Service Connect Msg Service Connect TMSI Assignment
Completion Message Completion Message

Send Burst DTMF Msg Service Option Service Option Control Send Burst DTMF Msg
Control Msg Message

Set Parameters Msg Status Request Msg Status Response Msg Parameters Response
Message

Power Control Flash With Flash With Power Measurement

Parameters Msg. Information Msg Information Msg Report Msg

Retrieve Parameters Msg Data Burst Msg Data Burst Message Order Message
• Mobile Sta. Acknowledgment
Analog Handoff Extended Handoff Pilot Strength •Long Code Transition
Direction Msg Direction Msg Measurement Msg Request
• SSD Update Confirmation
SSD Update Msg Neighbor List Handoff Completion Msg • Connect
Update Msg

Mobile Station In-Traffic System

Registered Msg Parameters Msg
 MS Initialization State
On power up or
from any other state Does system selection.Updates the
System Determination
registration parameters
Substate
ZONE_LIST(SID,NID).Update the value
of CDMABAND and CDMACH.Enters
CDMA System the next state if the selected system
selected is a CDMA system.

Acquisition •The mobile station shall tune to the

Pilot Channel
failure CDMA Channel number equal to
Acquisition Substate
CDMACHs.
Protocol mismatch Acquires •Searches for Pilot in T20ms
Pilot Channel •Receives the Sync Channel Message in
The following values are updated T21ms.
from the Sync Channel Message:
Protocol revision level (P_REVs = Sync Channel •Compares the value of MOB_P_REV
P_REVr) Acquisition Substate and sets the value of PRAT.
Minimum protocol revision level
(MIN_P_REVs = MIN_P_REVr)
Receives Sync •The mobile station synchronizes its long
System identification (SIDs = SIDr)
Network identification (NIDs = NIDr) Channel Message code timing and system timing to those
Pilot PN sequence offset (PILOT_PNs of the CDMA system, using the
= PILOT_PNr) PILOT_PNs, LC_STATEs, and
Long code state (LC_STATEs = Timing SYS_TIMEs.
LC_STATEr) •Set PAGECHs to the Primary Paging
System Time (SYS_TIMEs =
Change Substate
SYS_TIMEr)
Channel.
Paging Channel data rate (PRATs = MS Idle State
PRATr) Note : Transitions arising from error conditions are not shown in the diagram.
 Mobile Station Idle State

"Idle" phone is plenty busy!

While a mobile is latched to a particular network, for most of the time is in the idle state. Being in
this state the mobile monitors the Paging Channel. If there is a procedure that requires to be
carried out for a message received on Paging Channel, the mobile enters the System Access
State.
Paging Channel messages or user actions can cause the mobile to go from idle state to System
Access State.
So in this state the mobile station can receive messages, receive an incoming call (mobile
station terminated call), initiate a call (mobile station originated call), initiate a registration, or
initiate a message transmission.
The mobile constantly turning parts of itself on and off; on to perform vital functions and off again
to save power so that the battery lasts longer. This periodic on and off of the mobile transceiver is
called slotted mode of operation.It the mobile listens to all slots it is in non-slotted mode of
operation.
The mobile can operate in the slotted mode only in the idle state.While performing idle handoff
the mobile has to be in non-slotted mode of operation.
 Mobile Station Idle State - 2

While in the Mobile Station Idle State, the mobile station shall perform the
following procedures:
The mobile station shall perform Paging Channel monitoring procedures .
The mobile station shall perform message acknowledgement procedures .
The mobile station shall perform registration procedures .
The mobile station shall perform idle handoff procedures .
The mobile station shall perform the Response to Overhead Information Operation the mobile
station receives a system overhead message (System Parameters Message, CDMA Channel List
Message, Extended System Parameters Message, Neighbor List Message, Global Service
Redirection Message, or Access Parameters Message).
 The mobile station shall perform the Mobile Station Page Match Operation whenever it receives
a General Page Message, Page Message, or Slotted Page Message.
 The mobile station shall perform the Mobile Station Order and Message Processing
Operation whenever a message or order directed to the mobile station is received other than a
General Page Message, Page Message, or Slotted Page Message.
The mobile station shall perform the Mobile Station Origination Operation 5 if directed by the
user to initiate a call.
If the mobile station supports Data Burst Message transmission, it shall perform the
Mobile Station Message Transmission Operation if directed by the user to transmit a message.
The mobile station shall perform the Mobile Station Power-Down Operation if directed by the
user to power down.
 System Access State
From MS in Idle State
In the System Access State MS remains in Update Information
the MS uses the Open Loop Overhead Substate and monitors the
Power Control. Update Information Paging Channel till it has the current
Overhead Substate set of overhead messages.
Received General
Received a Message or User generated Data Page Message
Order requiring a Ack. Or Burst Message
Response
Registration access User initiated
a Call
MS Order/Message Registration Access
Response Substate Substate Page Response
Substate

In this state the MS listens

on the Paging channel and
responds on the Access
Channel associated to the
Paging Channel to which MS Message MS Origination
listens.The Access Transmission Substate Attempt Substate
Channel is allocated on fair
contention by using Slotted
ALOHA.

To MS in Idle State To MS on Traffic Channel State

Note : Transitions arising from error conditions are not shown in the diagram.
 From System Access State
MS Control on Traffic Traffic Channel
Channel State Initialization Substate

MS Terminated Call,when MS
receives Base Station Ack. Order
MS Originated Call,when MS
receives Base Station Ack. Order
Waiting for Order
Substate
Receives
Release Order MS receives AWI

After the of every call the MS Waiting for Mobile Station

goes to System Determination Answer Substate
Substate. Receives
Release Order
•It searches again for the best MS user answers call.
pilot on the present frequency
I.e. CDMACH.
Conversation Substate
•Read Sync Channel W32. MS receives AWI

•Goes to Idle State and listens to MS user initiates a disconnect

Paging Channel. or MS receives Release Order.

Release Substate

Note:Substate transitions due to error conditions are no To System Determination Substate of

shown. MS Initialization State.
 1. How Mobile Selects CDMA Carriers ?
Reverse Link Frequencies Forward Link Frequencies
(Mobile Transmit) (Base Station Transmit)
800 MHz. Cellular Spectrum
824 MHz. 835 845 849 870 880 890 894
A B Paging, ESMR, etc. A B
825 846.5 869 891.5
1900 MHz. PCS Spectrum
unlic. unlic.
A D B E F C data voice A D B E F C
1850MHz. 1910MHz. 1930MHz. 1990 MHz.

Power up: self diagnostics, battery check

Find a frequency with CDMA RF
•last frequency used? other recent history?
FREQUENCY LISTS: •home market? preferred roaming list?
Scan all PN offsets (Pilot W0), find best Ec/Io meaning of better strength
HISTORY PREFERRED Lock Traffic Correlators on best PN offset, read the sync channel (W32)
LIST ROAMING •learn true PN offset, SID/NID, time & leap seconds, Long Code
state, paging channel
LIST Read the Paging Channel (W1): collect all the current configuration
Last-used: messages.This process is called collection.The configuration messages
Freq/SID x Freq/SID 1 are repeated on the Paging channel every 1.28 seconds.
Freq/SID y Freq/SID 2 •System Parameters Message
Freq/SID z Freq/SID 3 •Extended System Parameters Message
Freq/SID t •Access Parameters Message
Freq/SID 4
Freq/SID u •CDMA Channel List Message
Freq/SID 5 •Extended Neighbor List Message
etc. etc. •Global Service Redirection Message
Register if required
Now you’re ready to operate!
 2. How Mobile Selects CDMA Carriers ?

On power on,the mobile uses proprietary algorithms to select a carrier intended for them to use.The
MS uses the above procedure whenever it has to select a CDMA system.
 CDMA Forward Traffic Channels
Pilot Walsh 0 Pilot Channel Walsh Code 0
The Pilot is a beacon which does not contain a character stream. It is a
Paging Walsh 1
timing source used in system acquisition and as a measurement device
Traffic Walsh 6 during handoffs.
Traffic Walsh11 SYNC: WALSH CODE 32
Traffic Walsh19 This carries a data stream of system identification and parameter
information used by mobiles during system acquisition
Traffic Walsh20
Paging Channel W1-W7
Sync Walsh32 There can be from one to seven paging channels as determined by
Traffic Walsh37 capacity needs.They carry the overhead messages,pages, call setup
messages and orders.
Traffic Walsh41
Forward Traffic Channel Renaming Walsh Codes.
Traffic Walsh42 The traffic channels are assigned to individual users to carry call traffic.
Traffic Walsh55 All remaining Walsh codes are available, subject to overall capacity
limited by noise.
Traffic Walsh56
Traffic Walsh60 Note: A Forward Channel is identified by:
•. its CDMA RF carrier Frequency
•. the unique Short Code PN Offset of the sector
•. the unique Walsh Code of the user
 CDMA Reverse Traffic Channels
Access ACCESS CHANNELS are used by mobiles not yet in a call; to transmit
registration requests, call setup requests, page responses, order
responses, and other signaling information
Reverse Traffic • an access channel is really just a public long code offset unique to the
BTS sector
• Access channels are paired to Paging Channels.Each paging channel
can have up to 32 access channels.

TRAFFIC CHANNELS are used by individual users during their actual

calls to transmit traffic to the BTS
• a reverse traffic channel is really just a user-specific public or private
Long Code mask
• there are as many reverse Traffic Channels as there are CDMA
phones in the world!

A Reverse Channel is identified by:

•. its CDMA RF carrier Frequency
•. the unique Long Code PN Offset of the individual handset
 Phone Operation on Access Channel.
•The behavior of the mobile while using the Access
98/05/24 23:14:10.427 [PCH] ACCESS Channel is determined by the Access Parameter
MSG_LENGTH = 184 bits Message.
MSG_TYPE = Access Parameters Message
PARAMETERS
PILOT_PN = 168 Offset Index MESSAGE •MS transmission on the Access Channel using a
ACC_MSG_SEQ = 27
ACC_CHAN = 1 channel random access procedure.The parameters to this
NOM_PWR = 0 dB INIT_PWR = 0 dB PWR_STEP = 4 Db procedure are supplied by the Access Parameters
NUM_STEP = 5 Access Probes Maximum
MAX_CAP_SZ = 4 Access Channel Frames Maximum Message.
PAM_SZ = 3 Access Channel Frames
Persist Val for Acc Overload Classes 0-9 = 0 •Phones access the BTS by “probing” at power levels
Persist Val for Acc Overload Class 10 = 0 determined by a procedure.
Persist Val for Acc Overload Class 11 = 0
Persist Val for Acc Overload Class 12 = 0 •Within an Access attempt, Access probes are grouped
Persist Val for Acc Overload Class 13 = 0
Persist Val for Acc Overload Class 14 = 0 into access group sequences.
Persist Val for Acc Overload Class 15 = 0
Persistance Modifier for Msg Tx = 1
Persistance Modifier for Reg = 1
Probe Randomization = 15 PN chips
Acknowledgement Timeout = 320 ms
Probe Backoff Range = 4 Slots Maximum
Probe Sequence Backoff Range = 4 Slots Max.
Max # Probe Seq for Requests = 2 Sequences
Max # Probe Seq for Responses = 2 Sequences
Authentication Mode = 1
Random Challenge Value = Field Omitted
Reserved Bits = 99
A Successful Access Attempt

Access Channel Msg

Success!
BTS MS
Probing
an Access Probe
a Probe Sequence
an Access Attempt
Phone Operation on Access Channel -2

Access Channel Attempts

 Phone Operation on Access Channel -3
Transmit probe on Access
Begin
Channel RA at system timing
plus RN chips.Set TA

PROBE=0,SEQ=0
Increase transmit
YES
Access power by
Ack. Received
PN Randomization Successful PWR_STEP dB

Wait RT slots
YES Access Channel NO
Timer TA expired
Response

NO
Generate random
number RT between
If beginning of slot PROBE = PROBE +1 PROBE_BKOFF +1
generate RP.
YES
Wait RT slots PROBE < = NUM_STEP
NO
RP < P

YES SEQ= SEQ +1

Generate random
number RT between
Generate random number RA
PROBE_BKOFF +1
between 0 and ACC_CHAN

YES NO
Initialize Transmit Power. SEQ <=
Access Failure.
MAX_REQ_SEQ
MAX_RSP_SEQ Enter SDS
Access Procedure