cdma signaling and data services

Upload: mohammed-ghaleb

Post on 17-Jan-2016

39 views

Category:

Documents


0 download

DESCRIPTION

CDMA Signaling and data services

TRANSCRIPT

  • CDMA2000

  • CDMA

    CDMA2000 1X

  • CDMA

  • .

  • Traffic is terminated Initialization State

    Pilot DetectionRelease order

    Sync

    Paging

    (Acquired Pilot)

    Sync Channel

    Bit rate : 1200bps

  • All PN Offsets

    Rake Fingers

    Reference PN

    Active Pilot

    Ec/Io

    00

    32K512

    ChipsPN

    1. Pilot Searcher Scans the Entire Range of PNs0

    -20

    98/05/24 23:14:09.817 [SCH] Sync Channel MessageMSG_LENGTH = 208 bitsMSG_TYPE = Sync Channel MessageP_REV = 3MIN_P_REV = 2SID = 179NID = 0PILOT_PN = 168Offset IndexLC_STATE = 0x0348D60E013SYS_TIME = 98/05/24 23:14:10.160LP_SEC = 12LTM_OFF = -300 minutesDAYLT = 0PRAT = 9600 bpsRESERVED = 1

    2. RAKEPN, Walsh 32,

    SYNC CHANNEL MESSAGE

    Handset Rake Receiver

    RF x

    LO Srch PN??? W0

    F1 PN168 W32F2 PN168 W32F3 PN168 W32

  • SYNC CHANNEL -- Sync Channel Msgprotocol_rev = 6 chan_type = 0 (Sync)chan

    sc_msggen

    msg_type = 1 (Sync) sync

    p_rev = 6 min_p_rev = 1sid = 2236 (0x8bc) nid = 113 (0x71) pilot_pn = 188 (0xbc)lc_state[HI] = 507 lc_state[LO] = 3582174253sys_time[HI] = 1 sys_time[LO] = 4022462865lp_sec = 13 ltm_off = 18daylt = 1prat = 0 cdma_freq = 29 (0x1d)ext_cdma_freq = 29 (0x1d)

    Protocol revision level used by the system1:IS95, 2:IS95A, 3:TSB74, 4,5:IS95B, 6:IS95C

    The prat means the paging rate of the paging channel0 : 9600bps , 1 : 4800bps

  • .

  • B

    T

    S

    M

    S

    System parameter message

    Extended system parameter message

    CDMA channel list

    Extended Channel list message

    Access parameter message

    Neighbor list message

    Extended neighbor list message

    Channel assignment message

    Extended channel assignment message

    General page message

    Overhead

    Message

    Transmission

    Page Message

  • PAGING CHANNEL -- System Parameters Msgprotocol_rev = 6 chan_type = 1 (Paging)sysparm

    pilot_pn = 188 (0xbc) (12032 PN chips)config_msg_seq = 6sid = 2236 (0x8bc) System identificationnid = 113 (0x71) Network identificationreg_zone = 1 (0x1) Registration zone numbertotal_zones = 2 zone_timer = 1 (2 Minutes) mult_sids = 1 mult_nids = 1 base_id = 2 (0x2) base_class = 0 (Public Macrocellular System)page_chan = 1 paging channel #max_slot_cycle_index=2 5.12sec periodic paging slot

    monitorhome_reg = 1 for_sid_reg = 1for_nid_reg = 1power_up_reg = 1power_down_reg = 1parameter_reg = 1reg_prd = 64 (5242.88 Seconds) 2 ^ (reg_prd /4)*

    80msbase_lat = 539805

    method. etc

    base_long = 1829097reg_dist = 0 (0x0) (Distance Based Registration

    DISABLED)srch_win_a = 9 (80 PN Chips)srch_win_n = 10 (100 PN Chips)srch_win_r = 10 (100 PN Chips)nghbr_max_age = 1 pwr_rep_thresh = 2pwr_rep_frames = 7 (56 Frames) pwr_thresh_enable = 1pwr_period_enable = 0pwr_rep_delay = 5 rescan = 0 t_add = 28 -14dBt_drop = 32 -16dBt_comp = 5 2.5dBt_tdrop = 3 4secext_sys_parameter = 1 ext_nghbr_list = 0gen_nghbr_list = 1

    ----------------------------------------------------------------------

  • Number of registration zones to be retainedThe base station shall set this field to the number

    of registration zones the mobile station is to retain

    for purposes of zone-based registration

    Zone Timer Length(1,2,3,4,5,6,7) (1,2,5,10,20,30,45,60)minutes

    Multiple SID/NId Storage IndicatorIf mobile stations may store entries of

    SID_NID_LIST containing different SIDs(OR NIDs), the base

    station shall set this field to 1

    Neighbor MAX AgeThe BS shall set this field to the maximum AGE

    value beyond which MS are to drop members from the Neighbor Set

    PWR_REP_FRAMES2(PWR_REP_FRAMES/2) X 5 frames is the number of

    framesover which mobile stations are to count frame

    errors byPower Report Measurement Message. If

    PWR_PERIOD ENALE equals 0, the MS doesnt uses periodic

    PWR_REPORT DELAYThe period that mobile stations wait following a

    PowerMeasurement Report Message before restarting

    frame counting for power control purposes. The base station shall set this field to the power

    reportdelay value, in units of 4 frames

    RESCANIf mobile stations are to re-initialize and re-

    acquire thesystem upon receiving this message, the base

    station shall set this field to 1

  • PAGING CHANNEL -- Extended System Parameters Msgprotocol_rev = 6 chan_type = 1 (Paging)

    ext_sysparmpilot_pn = 188 (0xbc)config_msg_seq = 6.delete_for_tmsi = 0pref_msid_type = 3 mcc = 349 (0x15d) Mobile Country Codeimsi_11_12 = 99 11th and 12th digits of the imsitmsi_zone_len = 0.

    --------------------------------------------------imsi_t_supported = 0.p_rev = 6min_p_rev = 1.soft_slope = 0 add_intercept = 0 drop_intercept = 0 packet_zone_id = 0max_num_alt_so = 0reselect_included = 0pilot_report = 0 nghbr_set_entry_info = 0nghbr_set_access_info = 0

    qpch_supported = 0 -----------------------------------------------------------------------------------

    BSIMSIH/O

    Preferred ACH Mobile Station Identifier TypeThe MS is to use on the Access Channel using the corresponding to the type of MSID

    0: imsi_S and ESN, 1: ESN 2: imsi, 3: imsi and ESN

    This parameters are used in the Dynamic H/O

    The BS shall set this field to 1 if the MS is to report t h e

    additional pilots which have pilot strengths e x c e e d i n g

    T_ADD in all Access Channel messages. The BS s h a l l s e t

    this field to 0 if the mobile station is to report the additional pilots which have pilot strengths

    e x c e e d i n g T_ADD only in the Origination Message and Page Response Message.

    MSINMNCMCC

    3 digits NMSI

    IMSI (15 digits)

    MCC Mobile Country CodeMNC Mobile Network CodeMSIN Mobile Station Identifier NumberNMSI National Mobile Station IdentityIMSI International Mobil Station Identity

    * imsi

  • PAGING CHANNEL -- CDMA Channel List Msgprotocol_rev = 6chan_type = 1 (Paging)chan

    pc_msggen

    prot_disc = 0msg_id = 4

    chnlistpilot_pn = 188 (0xbc)config_msg_seq = 6 num_freq = 1 (0x1)cdma_freq[0] = 29 (0x1d)

    CDMAIDLEFA.Hash

    Configuration Message SequenceWhen the mobile station receives a page message, it

    s h a l l compare the configuration message sequence number, CONFIG_MSG_SEQr, to CONFIG_MSG_SEQs. If the comparison results in a mismatch, then the MS shall

    s e tCONFIG_ MSG_SEQs to CONFIG_MSG_SEQr.

    CDMA Channel frequency assignmentThe base station shall set each occurrence of this field

    t o the CDMA channel number corresponding to the

    C D M A frequency assignment for that CDMA Channel

    29

    1011

    363

    29

    1011

    363

    404

  • PAGING CHANNEL -- Access Parameters Msgaccparm

    pilot_pn = 188 (0xbc)acc_msg_seq = 1.acc_chan = 0 The number of Access channelnom_pwr = 0init_pwr = 5pwr_step = 6num_step = 5max_cap_sz = 3 Maximum ACH Msg capsule sizepam_sz = 3 Access Channel preamble length.psist_0_9 = 0psist_10 = 0 test mobile stationpsist_11 = 0 emergency mobile station

    ----------------------------------------------------------psist_15 = 0msg_psist = 0reg_psist = 0probe_pn_ran = 0acc_tmo = 5 Acknowledgement Timeoutprobe_bkoff = 0bkoff = 1max_req_seq = 2max_rsp_seq = 2.----------------------------------------------------------

    The base station shall set this field to one less than the

    number of Access Channels associated with this Paging Channel.

    Mobile stations are to wait after the end of an Access CH transmission before determining that the base station did not receive the transmission, in units of 80 ms.

    Probe_bkoff : Access Channel probe backoff rangeBKOFF: Access Channel probe sequence backoff rangeMAX_REQ_SEQ: Maximum number of access probe

    sequences for an Access Channel requestMAX_RSP_SEQ: Maximum number of access probe

    sequences for an Access CH response Channel requestPROBE_PN_RAN: Time randomization for Access CH

    probes

    Maximum access timeInter Access Probe

    TA = 0.08 x (2 + ACC_TMO) = 0.08 x 7 = 560 msRT = 0 = 1 + probe_BKOFF = 1+ 0 = 1 slot = 0.16 secProbe Num = 1 + Num_STEP = 1 + 5 = 61 Access Seq. Time = (560 + 160 ) x 6 + 560 = 4.88 sec

    Inter Access SequenceRS = 1+BKOFF = 1 + 1 = 2 slot = 2 x 0.16 sec = 0.32 secPD = 0 MAX # of Step = 2

    Access Attempt total time = (4.88 x 2) + (0.32 x 1) = 10.08 sec

  • PAGING CHANNEL -- Neighbor List Msgprotocol_rev = 6chan_type = 1 (Paging)nghbr

    pilot_pn = 188 (0xbc) config_msg_seq = 6pilot_inc = 2

    num_nghbrs = 19 (0x13)nghbr[0]

    nghbr_config = 0 (Config Same) .nghbr_pn = 356 (0x164)

    nghbr[1]nghbr_config = 0 (Config Same)nghbr_pn = 454 (0x1c6)

    nghbr[2]nghbr_config = 0 (Config Same)nghbr_pn = 274 (0x112)

    nghbr[3]nghbr_config = 0 (Config Same)nghbr_pn = 20 (0x14)

    nghbr[4]nghbr_config = 0 (Config Same)

    -----------------------------------------------------

    Idle20

    The unit which is used by MS when the MS searches t h e

    neighbor list which is with in a Remain Set

    This BTS use the same CDMA frequency assignment on the

    neighbor base station

    Neighbor for the messages sent on the Paging C h a n n e l ,

    if BAND_class is equal to 00001, the BS shall sendthe Extended Neighbor List Message and may also

    s e n d the General Neighbor List Message. If BAND_class is equal to and 00000, the BS shall send the

    N e i g h b o r List Message, and may also send the General

    N e i g h b o r List Message. If the BS is sending the Neighbor List Message, it shall send it at least once per T1b

    s e c o n d s .

    T1b: Maximum period between subsequent transmission of

    an overhead message on the paging ch by the BS:1.28s

    Band class Description

    0 800 MHz Cellular Band

    1 1.8 to 2.0 GHz PCS Band

    6 2 GHz IMT-2000 Band

  • .

  • General Page Message

    Origination Message

    BS_ACK_Order

    NULL_Traffic

    Extended Ch Assignment Message

    NULL_Traffic

    BS_ACK_Order

    Power Control

    Service Connect Msg

    Service Connect Completion Msg

    Paging &AccessChannel

    Traffic Channel

    Page Response Message

    MS BS

  • PAGING CHANNEL -- General Page Msgprotocol_rev = 6 chan_type = 1 (Paging)

    gen_pageconfig_msg_seq = 6 In units of 64acc_msg_seq = 1 class_0_done = 1class_1_done = 1tmsi_done = 1ordered_tmsis = 0broadcast_done = 1add_length = 0num_pages = 1 (0x1)gen_page[0]

    page_class = 0page_subclass = 3 imsi11_12,MCC.imsi_Srec

    format3msg_seq = 0mcc = 349 (0x15d) SKT 450imsi_11_12 = 99 SKT:00 WCDMA 05imsi_s[HI] = 3 imsi_s[LO] = 2219332107special_service = 1 service_option = 3 (0x3) EVRC

    MCC(Mobile Country Code)349 349+111=450imsi_11_12(MNC): 99 99+11=00

    If the SPECIAL_SERVICE field is included in the p a g e

    type specific fields, and is set to 1, the BS shall set t h i s

    field to the service option code, corresponding to therequested service option.

    * imsi_S: A 10-digit number derived from the imsi

    Mobile Station recognize that the MIN number in this message is itself

  • Access Channel -- Page Response Message--------------------------------------------------------msid_type: 3 msid_length: 9 esn: 1071129974(0x3FD82576) imsi_class: 0 imsi_class_0_type: 0 reserved: 0 imsi_s[hi]: 0imsi_s[lo]: 137485210

    -> min : 1192006033 (0331193229) ---------------------------------------------------------num_add_pilots: 1 pilot_pn_phase: 9472 pilot_strength: 24 access_ho_en: 0 access_attempted: 0 mob_term: 1 slot_cycle_index: 2 mob_p_rev: 6 scm: 42 request_mode: 1 service_option: 3

    ---------------------------------------------------------

    IMSI_S equals MIN number.

    MS monitors its slot every 5.12 sec0: 1.28 sec 1: 2.56 sec 2: 5.12 sec 3:

    10.24 sec4: 20.48 sec 5:40.96 sec .MS selects smaller value between this value and

    max_slotcycle_index

    Request modebinary Description

    000 Reserved001 CDMA Only010 Wide Analog Only011 Either wide analog or CDMA only100 Narrow analog only101 Either narrow analog or CDMA only110 Either narrow analog or wide analog only111 Narrow analog or wide analog or CDMA

  • Paging Channel order messagePROTOCOL_REV : 6Order

    msg_type: 7 ack_seq: 0 msg_seq: 1 ack_req: 0 valid_ack: 1 addr_type: 2 addr_length: 5 imsi_class: 0 imsi_class_0_type: 0 reservedD: 0 imsi_s[hi]: 0imsi_s[lo]: 137485210

    -> min : 1192006033 (0331193229) order: 16 add_length_rec: 0 Base Station Acknowledgement Order

    This message is the response Page response message.There are many kinds of order in 95C. If some

    message contains ack_req as 1, this means that message

    needs some response message and this order message is

    the one of the response message

  • ACCESS CHANNEL -- Origination Msgchan

    ac_msggen_ac

    msg_type = 4 (Origination)--------------------------------------------------------------------

    active_pilot_strength = 16first_is_active = 1 first_is_pta = 0num_add_pilots = 1

    var[0]pilot_pn_phase = 24962 (0x6182) pilot_strength = 16access_ho_en = 0access_attempted = 0

    mob_term = 1 slot_cycle_index = 2mob_p_rev = 6scm = 42request_mode = 1 System mode Indicatorspecial_ser ice = 1service_option = 33 (0x21) Packet Data Servicepm = 0 Voice Privacy Mode Indicator

    digit_mode=0 Digit Mode Indicatormore_fields = 0num_fields = 4 dialed digits # 1501chari[0] = 1chari[1] = 5chari[2] = 10chari[3] = 1

    nar_an_cap = 0paca_reorig = 0return_cause = 0.

    more_records = 0paca_supported = 0num_alt_so = 0 drs = 1 Data Ready to Send uzid_incl = 0 User Zone Identifierch_ind = 1 Channel Indicator(Fundamental Channel)sr_id = 1 Orthogonal Transmit Diversity supported indicator.otd_supported = 0 orthogonal transmit diversityqpch_supported = 1 Quick Paging Channelenhanced_rc = 1 Radio Configuration class2 for_rc_pref = 3 Forward Radio Configuration preferencerev_rc_pref = 3 Reverse FCH Radio Configuration fch_supported = 1 Fundamental Channel supported indicator

    -------------------------------------------

  • Request mode

    Service option

    Dial numberTo originate the call using the binary

    representationof DTMF digits, the mobile station shall set this

    fieldto 0. To originate the call using ASCII

    characters, the mobile station shall set this field to 1.

    Channel indicator

    binary Description000 Reserved001 CDMA Only010 Wide Analog Only011 Either wide analog or CDMA only100 Narrow analog only101 Either narrow analog or CDMA only110 Either narrow analog or wide analog only111 Narrow analog or wide analog or CDMA

    SO Service Type1 Basic Variable Rate Voice (8 Kbps)2 Mobile station Loopback (8 Kbps)3 Enhanced Variable Rate Voice(8Kbps)4 Asynchronous Data (9.6 Kbps)6 Short Message Service (Rate set 1)

    25 95B MDR Packet Data Service(RS2 forward, RS2 reverse)33 IS-2000 High speed Packet Data Service

    DIgit Code1 00012 00103 00114 01005 01016 0110

    All other codes are reserved

    DIgit Code7 01118 10009 10010 1010* 1011# 1100

    CH_IND Channel Requested

    000 Reserved001 Fundamental channel010 Dedicated Control channel011 Fundamental channel & Dedicated control channel

  • PAGING CHANNEL -- Extended Channel Assignment Msgprotocol_rev = 6 (IS2000)chan_type = 1 (Paging)---------------------------------------

    ext_chnasnnum_chns = 1 (0x1)chns[0]

    genhdr

    ack_seq = 7msg_seq = 2ack_req = 0valid_ack = 0addr_type = 2 imsiaddr

    type2imsiimsi_class = 0 Use 15digitsi_class

    zeroimsi_class_0_type=3 imsi_S, imsi_11_12,

    MCCtype

    threemcc = 349 (0x15d) imsi_11_12 = 99

    imsi_s[HI] = 0imsi_s[LO] = 137485978

    assign_mode = 0 Traffic Channel Assignmentfreq_incl = 0 default_config = 4 Default Configurationbypass_alert_answer = 0num_pilots = 0.granted_mode = 0 frame_offset = 0encrypt_mode = 0pilot_rec[0]

    pilot_pn = 16 (0x10)pwr_comb_ind = 0 Power Control Symbol Combing

    Indicatorcode_chan = 48

    is2000_incl = 1for_fch_rc = 3 Forward Fundamental Channel Radio Config.rev_fch_rc = 3 Reverse Fundamental Channel Radio

    Config.fpc_fch_init_setpt = 56 7dB, unit: 0.125dBfpc_subchan_gain = 0 unit: 0.25dB.rl_gain_adj = 0 reverse traffic CH power. In unit of 1dBfpc_fch_fer = 2 1%, Target Frame Error Ratefpc_fch_min_setpt = 16 2dB, in unit of 0.125dBfpc_fch_max_setpt = 96 12dB, in unit of 0.125dBrev_fch_gating_mode = 0

  • Address Type0: imsi_S 1: ESN 2: imsi3:TMSI 5: Broadcast others:

    Reserved

    imsi_class_0_Type0: imsi_S 1:imsi_S and imsi_11_122: ISMI_S and MCC 3:imsi_S, imsi_11_12,

    MCC

    Traffic Channel Assignment ModeBase Station shall set this field corresponding to

    theassignment mode for this assignment. The

    includedfield in a channel assignment will be changed according to the assignment mode

    Default Configuration

    CH_IND Channel Requested

    000 Traffic Channel Assignment001 Paging Channel Assignment010 Acquire Analog System011 Analog Voice Channel Assignment010 Enhanced Traffic Channel Assignment

    All other values are reserved

  • Granted Mode00 : Indicate that the MS is to use an initial service configuration consisting of the multiplex

    o p t i o n a n d radio configuration defined by the DEFAULT_CONFIG field for the For/Rev-Traffic Channels,

    a n d t o indicate that service negotiation may take place before the BS sends the first Service Connect

    M e s s a g e

    01 : Indicate that the MS is to use an initial service configuration consisting of the default multiplex o p t i o n

    and transmission rates corresponding to the service option requested by the MS either in the O r i g i n a t i o n

    Message or Page Response Message, and to indicate that service negotiation may take place b e f o r e t h e

    base station sends the first Service Connect Message10: Indicate that the MS is to use an initial service configuration consisting of the default multiplex

    o p t i o n and transmission rates corresponding to the service option requested by the MS either in the

    O r i g i n a t i o n Message or Page Response Message, and to indicate that service negotiation is not to take place

    b e f o r e the base station sends the first Service Connect Message

    Power Control Symbol Combining IndicatorIf the FCH associated with this pilot will carry the same closed-loop power control subchannel bits

    a s t h a t o f the previous pilot in this message, the BS shall set this field to 1; otherwise, 0

    For_FCH_RC & Rev_FCH_RCDefault config=4, granted mode=0 => This value =3, default config 4, granted mode =2 => value

    =1 or 2

    FPC_FCH_INIT_SETPTInitial Fundamental Channel outer loop Eb/Nt setpoint, in units of 0.125 dB

  • FORWARD TRAFFIC CHANNEL -- Power Control Msgprotocol_rev = 6 chan_type = 3 (Forward Traffic)---------------------------------------------------------msg_type = 25 (Power Control)---------------------------------------------------------

    pwr_cntl_step = 0 1dB, Close loop power controluse_time = 0 Not usedf pc_incl = 1

    fpc_mode = 1 fpc_pri_chan = 0 fpc_olpc_fch_incl = 1fpc_fch_fer = 2 1% ,fch target FERfpc_fch_min_setpt = 16 2dB(0.125dB unit)fpc_fch_max_setpt = 96 12dB(0.125dB unit)fpc_olpc_dcch_incl = 0num_sup = 0 supplemental channel total numberfpc_thresh_incl = 1fpc_setpt_thresh = 24 3dBfpc_thresh_sch_incl = 1fpc_setpt_thresh_shc = 24 3dBrpc_incl = 0

    Power Control Step0: 1dB, 1: 0.5dB, 2: 0.25dB

    Forward power control operation mode indicator

    Power Control subchannel IndicatorIndicate the primary inner loop estimation is

    performed on the Forward FCH or Dedicated Control CH

    channel

    FPC_FCH_FER

    Value Frame Error Rate00000 0.2 %

    00001 - 10100 0.5% - 10% (in units of 0.5%)10101 - 11001 11% - 15% (in units of 1.0%)11010 -11110 18% - 30% (in units of 3.0%)

    11111 Resrved

  • REVERSE TRAFFIC CHANNEL -- Service Request Msgprotocol_rev = 6 (IS2000)chan_type = 4 (Reverse Traffic)chan

    rtc_msggen

    msg_type = 12 (Service Request)srv_req

    hdrack_seq = 0msg_seq = 0ack_req = 1encryption = 0

    serv_req_seq = 0 req_purpose = 2 service configuration Request.Cfg

    for_mux_option = 1 (0x1) rev_mux_option = 1 (0x1)for_rates = 240rev_rates = 240 num_con_rec = 1 service option connection recordcon[0]

    con_ref = 0 service option connection referenceservice_option = 33 (0x21) High packet Data

    Service

    for_traffic = 1 Primary for_traffic CHrev_traffic = 1 Primary rev_traffic CHui_encrypt_mode = 0 User Information Encryption disabledsr_id = 1 Ser ice Reference Indicatorrlp_info_incl = 1rlp_blob_len = 5 RLP information.Block of bits length rlp_blob[0] = 46 Radio Link Protocol block of bits.rlp_blob[1] = 219rlp_blob[2] = 101rlp_blob[3] = 50rlp_blob[4] = 152

    fch_cc_incl = 1fch_frame_size = 0 for_fch_rc = 3 Forward Fundamental CH Radio Configuration 3rev_fch_rc= 3 Reverse Fundamental CH Radio Configuration 3dcch_cc_incl = 0 DCCH Channel Configuration included

    indicatorfor_sch_cc_incl = 1 F-SCH Channel Configuration included

    indicatornum_for_sch = 1 Number of Forward Supplemental Channelsfor_sch[0]for_sch_id = 0for_sch_mux = 2337 (0x921) Max 153kbps supportsch_chn_cfgsch_rc = 3 coding = 1

    rev_sch_cc_incl = 0

  • Request Purpose

    Service OptionOx21(33) means High Speed Packet Data Service.

    I n1X system, this service option is used for high

    s p e e d

    Forward Traffic Channel Traffic Type

    Reverse Traffic Channel Traffic TypeSimilar to Forward Traffic Channel Traffic Type

    Fundamental CH frame size supported indicator

    The MS shall set this field to 1 to propose that the

    5ms frame size in addition to the 20 ms frame size is

    used for the proposed service configuration;

    Forward Supplemental Channel Multiplex Option

    Forward Supplemental Channel Multiplex Option

  • FORWARD TRAFFIC CHANNEL -- Service Connect Msgprotocol_rev = 6 (IS2000)chan_type = 3 (Forward Traffic)------------------------------------------------------

    msg_type = 20 (Service Connect)encryption = 0use_time = action_time = 0serv_con_seq = 0cfg

    for_mux_option = 1 (0x1) rev_mux_option = 1 (0x1)for_rates = 240 rev_rates = 240 num_con_rec = 1con[0]

    con_ref = 0service_option = 33 (0x21) high speed data servicefor_traffic = 1 rev_traffic = 1ui_encrypt_mode = 0sr_id = 1rlp_info_incl = 0fch_cc_incl = 1 fch_frame_size = 0

    for_fch_rc = 3rev_fch_rc = 3dcch_cc_incl = 0for_sch_cc_incl = 1num_for_sch = 1for_sch[0]for_sch_id = 0for_sch_mux = 2337 (0x921) Max 153.6 kbps

    supportsch_chn_cfgsch_rc = 3coding = 1

    rev_sch_cc_incl = 0non_neg_cfg

    fpc_incl = 1 reference power control messagefpc_pri_chan = 0 fpc_mode = 1 reference power control messagefpc_olpc_fch_incl = 1fpc_fch_fer = 2 1% target ferfpc_fch_min_setpt = 16 2 dB, 0.125 dB unitfpc_fch_max_setpt = 96 12 dB, 0.125 dB unitfpc_olpc_dcch_incl = 1fpc_dcch_fer = 2 1% target ferfpc_dcch_min_setpt = 16 2 dB. 0.125 dB unitfpc_dcch_max_setpt = 96 12 dB, 0.125 dB unitgating_rate_incl = 0lpm_ind = 0

    .

  • Forward Fundamental and Dedicated Control

    Channel multiplex optionThis field indicates the multiplex option for the forward FCH and DCCH. Forward & Reverse Rate set240=> 11110000This means 9600, 4800,2400,1200 bps support

    for forward and reverse rate

    SCH multiplex optionreference service request message2337(0x912) means rate set 1 and MuxPDU

    Type 3 and Double Coding Type Indicator0 means that the convolution coding will be used for data for transmission and 1 means that turbo

    coding will be used

    Forward Link Power Control parameter included indicatorIf the forward power control related information isincluded in this message, the BS shall set this to 1; otherwise, the BS shall set this field to 0.

    Power Control subchannel indicatorThe BS shall set this field to 0 if the MS is to

    perform the primary inner loop estimation on the received Forward Fundamental Channel and the BS is to multiplex the Power Control Subchannel on Forward Fundamental Channel; the BS shall set this field to 1 if the Mobile station is to perform the primary inner loop estimation on the received Forward Dedicated control Channel and the BS is to multiplex the Power Control Subchannel on Forward Dedicated Control Channel. In Samsung system, it doesnt use the dedicate channel, so this value is zero.

  • Reverse TCH -- Service Connect Completion Msgprotocol_rev : 6Service connect completion

    msg_length: 6 msg_type: 14 ack_seq: 1 msg_seq: 2 ack_req: 1 encription: 0 serv_con_seq: 0

  • . Sync Channel

  • .

  • T-Add

    T-drop

    Candidate Set

    1 2 3 4 5 6 7

    Neighbor Set Active Set Neighbor Set

    Time

    Pilot Strength Measurement Message

    (Universal) Handoff Direction Message

    Handoff Completion Message

    (Extended) Neighbor List Update Message

    BSMS

    T-Drop

    T-Add

    Pa

    T-Comp x 0.5 dB

  • REVERSE TRAFFIC CHANNEL -- Pilot Strength Measurement Msgprotocol_rev = 6 (IS2000)chan_type = 4 (Reverse Traffic)chan

    rtc_msggen

    msg_type = 5 (Pilot Strength Measurement)pil_str

    ---------------------------------------------------------ref_pn = 16 (0x10) reference pnpilot_strength = 18 -9dB (-0.5*pilot_strength)keep = 1 keep indicator(1:keep, 0:drop)num_msr = 3 (0x3)meas[0]

    pilot_pn_phase = 24962 (0x6182 ) PN390pilot_strength = 16 -8dBkeep = 1

    meas[1]pilot_pn_phase = 2198 (0x896) PN 34pilot_strength = 26 -13dBkeep = 1

    meas[2]pilot_pn_phase = 11776 (0x2e00) 184

    pilot_strength = 28 -14dBkeep = 1

    MS sends if there is some events for Pilot add or Pilot drop

    Pilot PN PhasePILOT_ARRIVAL+(64*PILOT_PN))mod 215Pilot_pn_phase= 24960 pilot_pn = 390PILOT_PN_PHASE=(3+(64*390))mod 215 = 24963

    PN 390 + 3chip delay

    Keep Pilot IndicatorIf the handoff drop timer corresponding to the pilot

    u s e dby the mobile station to derive its time reference has expired, the mobile station shall set this field to 0; otherwise, the mobile station shall set this field to 1

    PN 16 and PN 184 are the same BTS and PN 34 is theother sector. Hence there are 2 BTS and 3 sector

    => 3waysoftsofter handoff areaAnd all of the keep fields within the message are 1, so we know this is the add procedure

  • BS determines the pilots for handoff and sends this information by UHDM or HDM

    FORWARD TCH--Universal Handoff Direction Msgprotocol_rev = 6 (IS2000)chan_type = 3 (Forward Traffic)-------------------------------------------------

    msg_type = 34 (Universal Handoff Direction)uhdm_msg

    hdrack_seq = 1msg_seq = 0ack_req = 1encryption = 0

    use_time = 0hdm_seq = 2parms_incl = 0 p_rev & serv_neg_type nclude

    indicatorsearch_included = 1 pilot search parameter include

    indicatorsrch

    srch_win_a = 9 80chipsrch_win_n = 10 100chipsrch_win_r = 10 100chipt_add = 28 -14dB,pilot detection thresholdt_drop = 32 -16dB, pilot drop thresholdt_comp = 5 2.5dBt_tdrop = 3 Drop Timer Value, 4Secsoft_slope = 0add_intercept = 0drop_intercept = 0

    extra_parms = 0use_pwr_cntl_step = 0 1dBclear_retry_delay = 0 sch_incl = 0 SCH relation parameter include indicatorfpc_subchan_gain = 27 6.75dB(0.25dB unit)use_pc_time = 0ch_ind = 5 channel indicatornum_pilots = 4 the number of pilots included this message

    srch_offset_incl = 0 target pilot channel search window offset include

    pilot[0]pilot_pn = 16 (0x10)add_pilot_rec_incl = 0 additional pilot information included

    indicatorpwr_comb_ind = 0 Power control symbol combining indicatorcode_chan_fch = 48 (0x30)qof_mask_id_fch = 0 Quasi-orthogonal function index on

    FCHpilot[1]

    pilot_pn = 184 (0xb8)add_pilot_rec_incl = 0pwr_comb_ind = 1code_chan_fch = 48 (0x30)qof_mask_id_fch = 0

    --------------------------------------------------------rev_fch_gating_mode = 0

  • Search Window Size

    T_Tdrop: Drop Timer Value

    Power Control Step Size IndicatorThe Power Control Step Size used by MS

    Forward Power Control Subchannel relative Gain

    Power level of the forward link power control Subchannel relative to that of 20 ms frames at a

    9.6k

    Channel Indicator

    Quasi-orthogonal function index on the Fundamental Channel

  • REVERSE TRAFFIC CHANNEL -- Handoff Completion Msgprotocol_rev = 6 (IS2000)chan_type = 4 (Reverse Traffic)chan

    rtc_msggen

    msg_type = 10 (Handoff Completion)comp

    hdrack_seq = 0msg_seq = 3ack_req = 1encryption = 0

    last_hdm_seq = 2num_pilots = 4 Pilot number in HCM pilot_pn[0] = 16 (0x10) master pilot pnpilot_pn[1] = 184 (0xb8) 2nd pilot pnpilot_pn[2] = 390 (0x186) 3rd pilot pnpilot_pn[3] = 34 (0x22) 4th pilot pn

    HCMCurrent Cell

    HCM New Cell

    HDM is transmitted from master sector but HCM Message is transmitted to all of the

    active sets

  • FORWARD TCH -- Extended Neighbor List Update Msgprotocol_rev = 6 (IS2000)chan_type = 3 (Forward Traffic)chan

    ftc_msggen

    msg_type = 26 (Extended Neighbor List Update)ext_nlu

    hdrack_seq = 3msg_seq = 1ack_req = 1encryption = 0

    pilot_inc = 2nghbr_srch_mode = 0 srch_win_n = 10 use_timing = 0num_nghbr = 20 The number of Neighbor list messagenghbr[0]

    nghbr_pn = 54 (0x36)nghbr[1]

    nghbr_pn = 222 (0xde)nghbr[2]

    ----------------------------------------------------------------

    MS shall update the neighbor list on receiving this message

    Neighbor Search Mode

    If Search mode is included , Nghbr_Srch_Mode=2 or 3

    Search Window NeighborDefault search window size to be used by the mobile station for its Neighbor Set. The MS uses the default search window size for all

    pilots in its Neighbor Set when the search window is not specified for each pilot individually

    (Nghbr_Srch_Modeis set to a value other than 10 and 11)

  • .

  • CF Search Request Message

    CF Search Response Message

    CF Search Report Message

    CF Search Control Message

    BSMS

    Traffic Channel

    Handoff Direction Message

    Handoff Completion Message

    Neighbor List Update Message

    Release Order

    H/O Procedure

    Call Termination

  • F-TCH -- Candidate Frequency Search Request Msgmsg_type = 27 (Candidate Frequency Search Request)-----------------------------------------------------

    cfsrm_seq = 2search_type = 3 search_period = 2 (2sec)search_mode = 0

    modemod_0band_class = 0cdma_freq = 779 (0x30b)sf_total_ec_thresh = 31 11111 , not usedsf_total_ec_io_thresh = 31 :11111, not

    useddiff_rx_pwr_thresh = 0 min_total_pilot_ec_io = 0 cf_t_add = 23 tf_wait_time = 3 cf_pilot_inc = 2 cf_srch_win_n = 10cf_srch_win_r = 0pilot_update = 1 num_pilots = 12cf_nghbr_srch_mode = 0 pilot_rec[0]

    nghbr_pn = 188 (0xbc)search_set = 0

    Search Command

    Successive Searching Time

    Search Mode

    search type Meaning00 Directs the MS to stop any periodic search in progress01 Directs the MS to perform a single search10 Directs the MS t perform a periodic search11 Reserved

    search mode Meaning0000 Searches for multiple CDMA pilots on a candidate frequency0001 Search for analogue channels

    0010 ~ 1111 Reserved

    CF

  • Serving Frequency total pilot Ec(Ec/Io) thresholdIf the MS is not to use the measurement of total Ec(or Ec/Io) of the pilots in the Serving FrequencyActive Set in the CF periodic search procedure, the BS shall set this field to 11111; otherwise,

    (10 X log10 (total_ec_thresh) + 120) / 2where total_ec_thresh is defined by the following rule: the MS is not to visit the CDMA Candidate Frequency to search for pilots if the total Ec of the pilots in the Serving Frequency Active Set is greater than total_ec_thresh

    Minimum difference in received powerIf the MS is to search for pilots on the CDMA CF irrespective of the received power on the CF, the BSshall set this field to 00000; otherwise

    [ (minimum_power_diff + 30) / 2 ]where minimum_power_diff is determined :The MS is not to search for pilots on the CDMA CF if (cand_freq_pwr - serving_freq_pwr) is less than minimum_power_diff (in dB), where cand_freq_pwr is the received power on the CDMA CF , in dBm / 1.23 MHz, and serving_freq_pwr is the received power on the Serving Frequency, in dBm / 1.23 MHz.

    Minimum total pilot Ec/ IoIf the MS is to attempt to demodulate the Forward TCH irrespective of the strength of pilots in the ActiveSet, the BS shall set this field to 00000; otherwise

    ( 20 X log10 total_pilot_threshold )where total_pilot_threshold is defined by : The MS is not to attempt to demodulate the FTCH ifthe sum of Ec/Io of all pilots in the MSs Active Set is less than total_pilot_threshold

    Pilot detection threshold for the CDMA CFTo trigger the sending of the Candidate Frequency Search Report Message during a periodic search of the CDMA CF. The BS shall set this field to the pilot detection threshold, expressed as an unsigned binary number equal to (-2 X 10 X log10 Ec/Io)

    CDMA Candidate Frequency total wait time(max_wait_time /0.08 )

    where max_wait_time is the maximum time, in seconds, that the MS is to spend waiting for a periodof (N11m X 20) ms with sufficient signal quality on the CDMA Target Frequency

    CF

  • Pilot PN sequence offset index after handoffPilot PN sequence increment, in units of 64 PN

    c h i p s , that the mobile station is to use for searching the Remaining Set, after a handoff to the CDMA CF

    i s successfully completed. The BS should set this

    f i e l d to the largest increment such that the pilot PN sequence offsets of all its neighbor base stations

    a r e integer multiples of that increment

    Pilot search parameter update indicatorIf the MS is to change its pilot search parameters,the BS shall set this field to 1

    Search mode for Candidate Frequency Search

    Set

    Flag to indicate if the corresponding pilot is to

    be searchedIf the MS should add the corresponding pilot to

    its Candidate Frequency search set the field set as

    search type Meaning00 No search priorities or search windows specified01 Search priorities specified11 Search windows specified10 Search windows and search priorities specified

    1FA

    2FA

    3FA

    4FA

    1FA

    All of the active cell is border cell, the BS sends CFSRQM

    If MS searches the CF, MS sends CFSRPM

    CF

  • RTCH -- Candidate Frequency Search Response Msgprotocol_rev = 6 (IS2000)chan_type = 4 (Reverse Traffic)chan

    rtc_msggen

    msg_type = 19 (Candidate Frequency Search Response)

    cfs_rsphdr

    ack_seq = 3msg_seq = 3ack_req = 1encryption = 0

    last_cfsrm_seq = 2total_off_time_fwd = 7 max_off_time_fwd = 7 total_off_time_rev = 7 max_off_time_rev = 7 pcg_off_times = 0 align_timing_used =0

    CF

    Total time that the MS is off the FTCH/RTCHThe MS shall set this field to the MSs estimate of the totalnumber of frames or power control groups for which the MS will need to suspend its current Forward Traffic hannelprocessing in order to tune to the CF, to perform the requested search, and to re-tune to the Serving Frequency. If the MS requires multiple visits to the CF to complete the requested search, the MS shall set this field to the total number of frames (if PCG_OFF_TIME is set to 0) or powercontrol groups (if PCG_OFF_TIME is set to 1) for all visits to the CF in a search period

    Maximum time that the MS is off the FTCH/RTCHSame to total_off_time_fwd excepting Maximum number of frames

    Indicator if off times are expressed in units of power control groups

    1: the units is expressed as power control group0: the units is expressed as frames

    Maximum time that the MS is off the FTCH/RTCHThe MS shall set this field to 1 if it will align the times of its visits away from the SF, as requested by the BS

  • RTCH -- Candidate Frequency Search Report Msgprotocol_rev = 6 (IS2000) chan_type = 4 (Reverse Traffic)chan

    rtc_msggen

    msg_type = 20 (Candidate Frequency Search Report)------------------------------------------------

    last_srch_msg = 0last_srch_msg_seq = 2search_mode = 0

    varmod0

    band_class = 0cdma_freq = 779 (0x30b)sf_total_rx_pwr = 10 -90dBmcf_total_rx_pwr = 14 -90dBmnum_pilots = 1

    pilot[0]pilot_pn_phase = 1942 (0x796) PN

    30pilot_strength = 7 -3.5dB

    CF

    Total received power on the Serving FrequencyThe MS shall set this field to min (31, (total_received_power+110) / 2 ), where total_received_power is the mean inputpower received by the MS on the Serving Frequency, in dBm/1.23 MHz

    Indicates the total received power on the Target Frequency or the Candidate FrequencyIf this message is being sent to report an unsuccessful hardhandoff attempt, the MS shall include the total received power on the Target Frequency; if this message is being sent to report measurements on a CF, the MS shall include the total received power on the CF. The MS shall set this field to

    min (31, ( (total_received_power + 110) / 2 ))where total_received_power is the mean input power

    received by the MS on the Target Frequency or the CF, in dBm/1.23 MHz

    CF

  • FTCH -- Candidate Frequency Search Control Msgprotocol_rev = 6 (IS2000)chan_type = 3 (Forward Traffic)chan

    ftc_msggen

    msg_type = 28 (Candidate Frequency Search Control)

    cfs_ctrlhdr

    ack_seq = 2msg_seq = 5ack_req = 1encryption = 0

    use_time = 0action_time = 0 cfscm_seq = 2search_type = 0

    CF

    Action TimeIf this field is set to 1, the BS shall set this field to the System Time, in units of 80 ms (modulo 64), at which themessage is to take effect

    Search Command

    search type Meaning00 Directs the MS to stop any periodic search in progress01 Directs the MS to perform a single search10 Directs the MS t perform a periodic search11 Reserved

    CF

  • FORWARD TRAFFIC CHANNEL -- Order Msgprotocol_rev = 6 (IS2000)chan_type = 3 (Forward Traffic)chan

    ftc_msggen

    msg_type = 1 (Order)ftc_ord

    genhdr

    ack_seq = 4msg_seq = 3ack_req = 0encryption = 0

    use_time = 0action_time = 0order = 16 (Base Station Acknowledgement

    Order)

  • .

  • Power Control Parameter Message

    Supplemental Channel Request Message

    Extended S Channel Assignment Message

    Power Measurement Report Message

    BSMS

    SCH Assignment

    A B C A B C

    80ms

    Scheduling Period (260ms)

    T T+260 T+520

    Guard Time (20ms)

    SS Scheduling

  • FORWARD TRAFFIC CHANNEL -- Power Control Parameters Msgprotocol_rev = 6 (IS2000)chan_type = 3 (Forward Traffic)chan

    ftc_msggen

    msg_type = 10 (Power Control Parameters)pwr_ctl

    hdrack_seq = 0msg_seq = 2ack_req = 1encryption = 0

    pwr_rep_thresh = 2 2 framepwr_rep_frames = 2 10 framepwr_thresh_enable = 0 Disable threshold reportpwr_period_enable = 1 Enable Periodic reportpwr_rep_delay = 5 ,20 frame(4 frame unit)

    This message indicates the way how to report the forward link quality to the BS

    Power Control Reporting thresholdThe number of bad frames to be received in a

    measurement period on the channel

    Power Control Reporting Frame Counter(2(PWR_REP_FRAMES/2) x 5) framesis the number of frames over which the mobile station

    is to count frame errors (2 -> 10 frames)

    Threshold Report Mode IndicatorIf the MS is to generate threshold Power Measurement Report Messages, the base station shall set this field

    to 1

    Periodic Report Mode IndicatorIf the MS is to generate periodic Power Measurement

    Report Messages, the base station shall set this field to 1

    Power Report DelayThe period that MS waits following a Power

    Measurement Report Message before restarting frame counting

    AT this value, MS sends Power Measurement Report Message to the BS in the interval of every 30 frames ( 0.6sec)

  • Through this message, BS determines which MS is selected for data service

    Forward Traffic CH - Extended S Channel Assignment Msgchan_type = 3 (Forward Traffic)-------------------------------------------------

    msg_type = 35 (Extended Supplemental Channel Assignment)-------------------------------------------------

    start_time_unit = 0 rev_sch_dtx_duration = 0 use_t_add_abort = 0 reverse use T_ADD indicatoruse_scrm_seq_num = 0add_info_incl = 0 rev_cfg_included = 0num_rev_sch = 0 assigned reverse SCH #for_cfg_included = 1 fsch configuration included for_sch_fer_rep = 0num_for_cfg_recs = 0 for_cfgs[0]

    for_sch_id = 0 fsch identifiersccl_index = 0 index of record in sch code list for_sch_rate = 4 153.6kbps(1:9.6K, 2:19.2, 3:38.4, 4:

    76.8) num_sup_sho = 0 this means 1

    sup_shos[0]pilot_pn = 390 (0x186)add_pilot_rec_incl = 0 additional pilot information included

    indicatorfor_sch_cc_index = 3 (0x3)qof_mask_id_sch = 0

    num_for_sch = 1 assigned SCH Numberfor_schs[0]

    for_sch_id = 0

  • Unit for Start TimeThe base station shall set this field to indicate the units of start time included in Extended Supplemental Channel Assignment Message. Set less than number of20 ms frames that determines the START_TIME_UNIT

    Discontinuous Transmission on R-Sup ChannelThe maximum duration of time in units of 20 ms that the MS is allowed to stop transmission on a Reverse Supplemental Channel within the reverse assignment duration. O means 0ms. 1111 means MS is allowed to resume transmission on a Reverse Supplemental CH at any time within the reverse assignment duration

    Reverse Use T_Add abort IndicatorUtilize the T_ADD Reverse Supplemental Channel abortfeature for this reverse assignment. If pilot which not included active set is the strongest signal, the MS stops Reverse Supplemental Channel transmission and sends SCRM(Supplemental Channel Request Message) andPSMM. If handoff is completed, then the MS reassignedthe RSCH

    Additional information included indicatorNotify whether the FPC_PRI_CHAN field is contained ornot

    # of the Forward SCH configuration RecordsSet one less than the number of forward SCH configuration records.

    Duration of SCH Assignment

  • FPC Parameter Include IndicatorInform the forward power control related information isincluded in this message

    Initial SCH Outer Loop Eb/Nt setpoint optionIndicate that FPC_SCH_INIT_SETPT contains the absolute value of the initial F-SCH Eb/Nt setpoint. TheBS shall set this field to 1 to indicate that FPC_SCH_ INIT_SETPT contains the offset value of the initial F-SCH Eb/Nt setpoint relative to the current value used in the mobile station for the channel carrying the Forward Power Control Subchanne

    Initial SCH Output Loop Eb/Nt setpointInitial Supplemental Channel Outer Loop Eb/Ntsetpoint (absolute value or offset value as indicated by FPC_SCH_INIT_SETPT_OP) as follows:

    If FPC_SCH_INIT_SETPT_OP is set to '0', the unit is 0.125 dB

    If FPC_SCH_INIT_SETPT_OP is set to '1', the unit is 0.125 dB and the offset is expressed as two's complement signed number

    SCH Setpoint Report Threshold Included Indicator

    If FPC_INCL is set to 1 and SCH setpoint report threshold is included in this message, set as 1

    SCH Setpoint Report ThresholdSet the value to SETPT_THRESH_SCH (in units of 0.125 dB) above which the outer loop report

    message will be sent by the mobile station. The MS can

    send theouter loop report message only above this value.

  • REVERSE TRAFFIC CHANNEL -- Power Measurement Report Msgprotocol_rev = 6 (IS2000)chan_type = 4 (Reverse Traffic)chan

    rtc_msggen

    msg_type = 6 (Power Measurement Report)pwr_rpt

    hdrack_seq = 4msg_seq = 3ack_req = 0encryption = 0

    errors_detected = 0 0 framepwr_meas_frames = 10 (0xa) 10framelast_hdm_seq = 0 num_pilots = 2 pilot_strength[0] = 15 -7.5dB (-0.5*pilot_strength)pilot_strength[1] = 18 -9dB (-0.5*pilot_strength)dcch_pwr_meas_incl = 0 forward dcch power measurement

    include indicatorsch_pwr_meas_incl =0 sch power measurement include

    indicator

    (FER, Ec/Io)

    Extended/General/Universal Handoff DirectionMessage sequence number.

    If an Extended/General /Universal Handoff Direction Message has been received during this call, the MS shall set this field to the value of the HDM_SEQ field from the Extended/General /Universal Handoff Direction Message that determined the current Active Set. If no Extended/ General /Universal Handoff Direction Message has been received during this call, the MS shall set this field to 11.

    Number of Pilots ReportedThe mobile station shall set this field to the number of pilotsin the current Active Set

  • .

  • Distance Based RegDistance Based Reg

    Zone Based or Parameter change Reg

    Power Up Reg Power Down Reg

    Ordered Reg Implicit Reg Traffic Channel Reg

    MSC MSC

    Zone Based RegZone Based Reg

    Timer-based

  • ACCESS CHANNEL -- Registration Msgprotocol_rev = 6 chan_type = 2 (Access)chan

    ac_msggen_ac

    msg_type = 1 (Registration)hdr

    ack_seq = 7msg_seq = 0ack_req = 1 Request Acknowledgement Messagevalid_ack = 0ack_type = 0msid_type = 3 imsi and ESNmsidtype3

    esn = 3925846604imsi

    imsi_class = 0 i_class

    zeroimsi_class_0_type = 0 imsi_S type

    zeroimsi_s[HI] = 0imsi_s[LO] = 137485978

    regauth_mode = 0 pilot_rpt

    fixactive_pilot_strength = 9 -4.5dBfirst_is_active = 1first_is_pta = 0num_add_pilots = 0

    reg_type = 1 Power-up reg, , slot_cycle_index = 2 mob_p_rev = 6

  • Registration Type Return CauseRETURN_CAUS

    E Redirect Failure Condition

    0000 Normal access.0001 Service redirection failed as a result of system not found.0010 Service redirection failed as a result of protocol mismatch.0011 Service redirection failed as a result of registration rejection.0100 Service redirection failed as a result of wrong SID.0101 Service redirection failed as a result of wrong NID.

    All other RETURN_CAUSE values are reserved.

    station class mask(SCM) TypeFunction Bit(s) Setting

    Extended SCM Indicator 7 Band class 0 0XXXXXXXBand class 1 1XXXXXXX

    Dual Mode 6 CDMA Only X0XXXXXXDual Mode X1XXXXXX

    Slotted class 5 Non-Slotted XX0XXXXXSlotted XX1XXXXX

    IS-54 Power class 4 Always 0 XXX0XXXX

    25 MHz Bandwidth 3 Always 1 XXXX1XXX

    Transmission 2 Continuous XXXXX0XXDiscontinuous XXXXX1XX

    Power class for Band class 0 Analog Operation 1 - 0

    class I XXXXXX00class II XXXXXX01class III XXXXXX10Reserved XXXXXX11

    RETURN_CAUSE Reg_Type

    0000 Timer-based0001 Power-up0010 Zone-based0011 Power-down0100 Parameter-change0101 ordered

    All other REG_Type values are reserved0101 User-Zone based

  • BSC

    MSC PSTNVLR

    HLR

    PCF PDSN

    AAA

    Packet NetworkPacket

    Network

    Telephone Network

    Telephone Network

    HomeAgent

    HomeAAA

    SS7 NetworkSS7

    Network

  • IPIP IP(IP) IPIP

    BSC PCF PDSN Packet NetworkPacket

    Network

    BSC

    PCFPDSN

  • IP

    Mobile registers its care of address

    HA replies with lifetime

    PDSN(FA)

    Packet NetworkPacket

    Network Home AgentBSS

    MIP-RRQ

    MIP-RRQ

    MIP-RRPMIP-RRP

    Packet Data Tunnel (UDP over IP)

  • PCF (Packet Control Function)

    PCFIP PDSN

    PDSN

    dormancy PDSN (Packet Data Serving Node)

    PPP PCF IP IPFA

  • AAA (Authentication, Authorization, and Accounting) FA Foreign AAA.

    HA (Home Agent)FAMIPFA

    MIP

  • Assign Complete

    MSCPDSNBSC / PCF

    Origination

    Base Station AckCMServReq

    SCCP-CC

    Assign RequestTCH Setup

    A11-RRQ

    A11-RRP

    User Packet Data

    PPP Link Establishment and Mobile IP Registration

    A8 /A10 setup

    Packet NetworkPacket

    Network

    UCSD Ericsson ///

  • BSC/PCF PDSN

    A11

    UDP

    IP

    Link

    Phys

    A11

    UDP

    IP

    Link

    Phys

  • BSC/PCF PDSN

    RS

    -232

    RLPRS-232

    GRE

    AIRInter-face

    RLP

    AIRInter-face

    IP

    Link

    Phys

    EndHost

    IP

    PPP

    A10

    IP

    PPP

    IP

    Link

    Phys

    IP

    Link

    Phys

    GRE

    IP

    Link

    Phys

  • BSC/PCF PDSN

    RS

    -232

    RLPRS-232

    GRE

    AIRInter-face

    RLP

    AIRInter-face

    IP

    Link

    Phys

    EndHost

    IPSLIP or

    PPP

    A10

    IP

    PPP

    IP

    Link

    Phys

    IP

    Link

    Phys

    GRE

    IP

    Link

    Phys

    SLIP or PPP

    IP

    PPP

    IP

  • MAC (1/3) DTX

    10-20~200ms

    Control/Hold Dormantsecond minute

    ActiveFCH

    ActiveSCH

    millisecond

  • MAC States (2/3)

    Triggered when the data traffic is idle ~1-2 seconds

    Signaling only Power control is maintained Reverse pilot can be gated MS Stores radio information

    Control/Hold Dormantsecond minute

    ActiveFCH

    ActiveSCH

    millisecond

  • MAC States (3/3) Dormancy

    Triggered when data traffic is idle ~1-2 minutes Traffic channels and A8 (BSC-PCF) connection is

    released A10 (PCF-PDSN) connection and PPP is

    maintained

    Control/Hold Dormantsecond minute

    ActiveFCH

    ActiveSCH

    millisecond

  • Dormant Mode

    Initiation BSC initiates when inactivity timer is expired or RF

    failure occurred MS initiates when inactivity timer is expired or TCH is

    released

    Reactivation Initiated when network or MS has data to send Since PPP is maintained no extra control plane

    signaling required User data is exchanged after reactivation

  • Inter BSC Intra PDSN HHO

    MSC PDSNSourceBSC/PCF

    HO Required

    HO Command

    User Packet Data

    HO Request

    HO Request ACK

    HO Commenced

    TargetBSC/PCF

    HO Direction Msg

    Null Fwd Traffic

    Rev Traffic

    HCMTear Down Channels

    Clear Command

    Clear Complete

    A11 RRQ (Lifetime = 0)

    A11 RRP

    A11 RRQ

    A11 RRP

    Handoff Complete

    User Packet Data

  • Still standardization is continuing Air interface is bottleneck for an

    end-to-end QoS Some parameters are defined such

    as Users priority level (14 possible

    levels) Minimum acceptable data rate

    (2x, 4x, ) Acceptable FER (1%, 2%, 5%,

    10%)

  • CDMA

  • 3G ITU IMT-2000

    T1P1CWT

    S

    WCDMATD-SCDMA

    ETSI TTAARIB/TTC

    CDMA20001xRTT/ 3xRTT1xEV-DO1xEV-DV

    TIA

  • ITU 3G

    Source: ITU What is IMT-2000

    TD-SCDMA

  • WCDMA Ericsson Nokia Siemens Alcatel UTstarcom Lucent Motorola Samsung () LG

    cdma2000 Lucent Motorola Ericsson Samsung LG

    TD-SCDMA Siemens

  • 200

    BREWJ2MESymbianSmartphone

    2005, TD-

    SCDMA2002,

    2003,

    2.1GHz

    800/1900MHz

    cdma2000

    TDD 55 MHz 100MHz

    2.1GHz FDD 2X60MHz()

    TD-SCDMAWCDMA

    1xRTT

  • cdma2000cdma2000 cdma2000 1xRTT/3xRTT

    1x (1.25 MHz) and 3x (3.75 MHz) Radio Transmit Technology (RTT)

    cdma2000 1xEV-DO 1xRTT Evolution Data Optimized

    cdma2000 1xEV-DV 1xRTT Evolution Data and Voice

    CDMA20001X

    Up to 153.6 kbpsVoice & Data

    CDMA20001xEV-DO2.45 Mbps

    DataCDMA20001xEV-DV

    3 MbpsVoice & Data

  • -1.5~2

    -/

    (SCH) -(153.6kbps)

    Turbo

    (MAC) -QoS

    1xRTT1xRTT

  • 1xRTT1xRTT

    cdma20002

    1xEV-DO 1.25 MHz;

    2.45 Mbps900kbps() & 220 kbps()

    , 2Mbps

    1xRTT

    1xEV-DV 1.25 MHz

    3.12MbpsDO1xRTT

    ,

  • cdma2000

    1700 18001900 200021002200MHz 800 900450

    CDMA2000 (1.25 MHz)

    YES*YES

    Cellular PCSNMT

    YES YES

    EuropeAsia

    IMT-2000

    *2.1GHz

  • BSC

    BTS1BTS1BTS1BTS1BTS1BTS1BTS

    BSC

    BSC

    BTS2BTS2BTS2BTS2BTS

    BTS2BTS2BTS2BTS2BTS

    MSC

    RP Interface

    Public InternetInternetInternet

    HLR

    AAARADIUSServer

    PDSN

    IWF

    ManagedIP Network

    PSTN

    PublicInternet

    Home Agent

    Service Creation System

    CDMA 1xRTT Network

  • Access Network Core NetworkMSC

    PSTN1x Backhaul

    1x BSC

    Private Packet DataIP Network

    AAA, DNS, DHCP ServersPolicy

    Services

    Internet

    Intranet

    PDSN

    1xEV-DO Module 1xEV-DO RNC

    1xEV DO Backhaul

    1xEV-DOOAMP

    CDMA 1xRTT Networkwith 1xEV-DO Overlay