Você está na página 1de 120

OMA000003 GSM Communication Flow

ISSUE 2.0

Wireless Wireless Curriculum Curriculum Development Development Section Section

CONTENT

GSM Security Management GSM Basic Call Sequence Location Update Sequence SMS Sequence Handover Sequence

2
Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

GSM Security Management

Authentication and Ciphering Sequence

TMSI Reallocation Equipment Identification


3
Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

Authentication

Authentication may be executed during setup, location updating and supplementary services

4
Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

Authentication Sequence

HLR/AUC AUC
IMSI(m) IMSI(n)
RAND GENERATOR KI M) KI N) KI(IMSI)

HLR VLR
AUTH REQ

KI IMSI +RAND A3 SRES

SIM

KI(IMSI)+RAND A8 M+KC A5 KC(M)

KC

A8 A3 KC

A5 KC(M)+KC (MS/BSS) M
KI(IMSI)

(MS/BSS)

RAND

SRES CKS RAN D

IMSIBUFFER RAND KC SRES RAND KC SRES RAND KC SRES

1 2

TEMP DATA

RAND N KC SRES SRES EQUAL

A8 A3 KC

BSS

RAND 16byte KI 16byte kc 8byte SERS 4byte CKSN low 3bits of 1byte

5
Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

Authentication and Ciphering Sequence


MS
1 Pre-send Triples to VLR

BSS

MSC

VLR

HLR

6
Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

Authentication and Ciphering Sequence


MS
1 Pre-send Triples to VLR
RAND

BSS

MSC

VLR

HLR

2 Authenticate Authentication Request

< SDCCH>

RAND

7
Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

Authentication and Ciphering Sequence


MS
1 Pre-send Triples to VLR
RAND

BSS

MSC

VLR

HLR

2 Authenticate Authentication Request 3 Authenticate Response

< SDCCH>

RAND

<SDCCH> (SRES)

8
Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

Authentication and Ciphering Sequence


MS
1 Pre-send Triples to VLR
RAND

BSS

MSC

VLR

HLR

2 Authenticate Authentication Request 3 Authenticate Response 4 Start Ciphering

< SDCCH>

RAND

<SDCCH> (SRES)

9
Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

Authentication and Ciphering Sequence


MS
1 Pre-send Triples to VLR
RAND

BSS

MSC

VLR

HLR

2 Authenticate Authentication Request 3 Authenticate Response 4 Start Ciphering 5 Cipher Mode Command Cipher Mode Complete

< SDCCH>

RAND

<SDCCH> (SRES)

< SDCCH> < SDCCH>

10
Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

TMSI Reallocation

MS Location Update Req

VLR

Location Update Acc TMSI Reallocation Comp

(TMSI)

11
Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

Equipment Identification

MS
1 Equipment ID Request

BSS

MSC

VLR

HLR PSTN EIR

<SDCCH>

12
Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

Equipment Identification

MS
1 Equipment ID Request 2 ID Response

BSS

MSC

VLR

HLR PSTN EIR

<SDCCH>

<SDCCH> IMEI)

13
Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

Equipment Identification

MS
1 Equipment ID Request 2 ID Response

BSS

MSC

VLR

HLR PSTN EIR

<SDCCH>

<SDCCH> IMEI)

3 Check IMEI Check IMEI Response

14
Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

GSM Basic Call Sequence

Mobile to Land Sequence

Land to Mobile Sequence

Mobile Initiated Call Clearing Sequence


15
Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

GSM Basic Call Sequence

The process for calling MS and called MS are two independent flow. The calling party begins with channel request and ends with TCH assignment competition. In general, the calling party includes following several stages: access process, authentication and ciphering process, TCH assignment process. So, we take the sequence from mobile to land as example, in this sequence, we mainly devote to the calling party.

16
Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

Mobile to Land Sequence


MS
1 CHANNEL REQUEST DCCH ASSIGN
SIGNALING LINK ESTABLISHED

BSS

MSC

VLR

HLR

PSTN

<RACH> <AGCH>

17
Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

Mobile to Land Sequence


MS
1 CHANNEL REQUEST DCCH ASSIGN
SIGNALING LINK ESTABLISHED

BSS

MSC

VLR

HLR

PSTN

<RACH> <AGCH>

<SDCCH> 2 REQ. FOR SERVICE

CR CC

18
Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

Mobile to Land Sequence


MS
1 CHANNEL REQUEST DCCH ASSIGN
SIGNALING LINK ESTABLISHED

BSS

MSC

VLR

HLR

PSTN

<RACH> <AGCH>

<SDCCH> 2 REQ. FOR SERVICE 3 AUTHENTICATION SET Cipher MODE

CR CC

19
Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

Mobile to Land Sequence


MS
1 CHANNEL REQUEST DCCH ASSIGN
SIGNALING LINK ESTABLISHED

BSS

MSC

VLR

HLR

PSTN

<RACH> <AGCH>

<SDCCH> 2 REQ. FOR SERVICE 3 AUTHENTICATION SET Cipher MODE 4 SET-UP <SDCCH> Call Info

CR CC

SFOC

20
Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

Mobile to Land Sequence


MS
1 CHANNEL REQUEST DCCH ASSIGN
SIGNALING LINK ESTABLISHED

BSS

MSC

VLR

HLR

PSTN

<RACH> <AGCH>

<SDCCH> 2 REQ. FOR SERVICE 3 AUTHENTICATION SET Cipher MODE 4 SET-UP 5 EQUIP. ID REQ. <SDCCH> Call Info

CR CC

SFOC

21
Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

Mobile to Land Sequence


MS
1 CHANNEL REQUEST DCCH ASSIGN
SIGNALING LINK ESTABLISHED

BSS

MSC

VLR

HLR

PSTN

<RACH> <AGCH>

<SDCCH> 2 REQ. FOR SERVICE 3 AUTHENTICATION SET Cipher MODE 4 SET-UP 5 EQUIP. ID REQ. 6 COMPLETE CALL CALL PROCEEDING
Confidential Information of Huawei. No Spreading without Permission.

CR CC

<SDCCH> Call Info

SFOC

<SDCCH>
22
Security Level: Internal

Mobile to Land Sequence

MS
7 ASSIG. COMMAND ASSIG. COMPLETE

BSS

MSC

VLR

HLR

PSTN

<SDCCH> <FACCH> circuit

23
Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

Mobile to Land Sequence


MSC VLR HLR PSTN

MS
7 ASSIG. COMMAND ASSIG. COMPLETE Initial and Final Address 8 Message (IFAM) Address Complete(ACM) Alerting

BSS

<SDCCH> <FACCH> circuit

<FACCH> MS hears ring tone from land phone

24
Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

Mobile to Land Sequence


MS
7 ASSIG. COMMAND ASSIG. COMPLETE Initial and Final Address 8 Message (IFAM) Address Complete(ACM) Alerting <FACCH> MS hears ring tone from land phone <FACCH> circuit

BSS

MSC

VLR

HLR

PSTN

<SDCCH>

9 Answer (ANS)Connect <FACCH> Ring tone stops

25
Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

Mobile to Land Sequence


MSC VLR HLR PSTN

MS
7 ASSIG. COMMAND ASSIG. COMPLETE Initial and Final Address 8 Message (IFAM) Address Complete(ACM) Alerting

BSS

<SDCCH> <FACCH> circuit

<FACCH> MS hears ring tone from land phone

9 Answer (ANS)Connect <FACCH> Ring tone stops 10 Connect Acknowledge <FACCH> <TCH>
26
Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

BILLING STARTS
HELLO!

Question

What happens when the calling MS activates the SS of BAOC?

27
Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

Answer
MS
1 CHANNEL REQUEST DCCH ASSIGN
SIGNALING LINK ESTABLISHED

BSS

MSC

VLR

HLR

PSTN

<RACH> <AGCH>

<SDCCH> 2 REQ. FOR SERVICE 3 AUTHENTICATION SET Cipher MODE 4 SET-UP 5 EQUIP. ID REQ. 6 COMPLETE CALL CALL PROCEEDING
Confidential Information of Huawei. No Spreading without Permission.

CR CC

<SDCCH> Call Info

SFOC
Call Barred

<SDCCH>
28
Security Level: Internal

GSM Basic Call Sequence

For the called party, the flow for the called party begins when MSC sends paging command to the called party, ends when two party start talk. In general, this call flow includes several stages: access process, authentication and ciphering process, TCH assignment process, talk process, release process.

29
Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

Land to Mobile Sequence


MS
Initial and Final 1 Address Message

BSS

MSC

VLR

HLR

GMSC

PSTN

(MSISDN)

30
Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

Land to Mobile Sequence


MS
Initial and Final 1 Address Message 2 Send Routing Info (IMSI)

BSS

MSC

VLR

HLR

GMSC

PSTN

(MSISDN) (MSISDN)

31
Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

Land to Mobile Sequence


PSTN

MS
Initial and Final 1 Address Message 2 Send Routing Info

BSS

MSC

VLR

HLR

GMSC

(MSISDN) (MSISDN)

(IMSI) 3 Routing Info Ack Initial and Final Address Message (MSRN) (MSRN)

(MSRN)

32
Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

Land to Mobile Sequence


PSTN

MS
Initial and Final 1 Address Message 2 Send Routing Info

BSS

MSC

VLR

HLR

GMSC

(MSISDN) (MSISDN)

(IMSI) 3 Routing Info Ack Initial and Final Address Message (MSRN) (MSRN) 4 Send Info For I/C Call Setup

(MSRN)

(MSRN)

33
Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

Land to Mobile Sequence


MS
Initial and Final 1 Address Message 2 Send Routing Info (IMSI) 3 Routing Info Ack Initial and Final Address Message (MSRN) (MSRN) 4 Send Info For I/C Call Setup 5 Page Paging Request < PCH> (TMSI)
Confidential Information of Huawei. No Spreading without Permission.

BSS

MSC

VLR

HLR

GMSC

PSTN

(MSISDN) (MSISDN)

(MSRN)

(MSRN)

(LAI & TMSI) (TMSI)


34
Security Level: Internal

Land to Mobile Sequence

MS
6 Channel Request DCCH Assign Signaling Link Established Page Response *Authentication

BSS
<AGCH>

MSC

VLR

HLR

GMSC

PSTN

<RACH>

<SDCCH> <SDCCH> (TMSI) (TMSI & Status)

CR
(Status)

35
Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

Land to Mobile Sequence


MS
6 Channel Request DCCH Assign Signaling Link Established Page Response *Authentication 7 Complete Call Setup

BSS
<AGCH>

MSC

VLR

HLR

GMSC

PSTN

<RACH>

<SDCCH> <SDCCH> (TMSI) (TMSI & Status)

CR
(Status)

<TMSI> <SDCCH>

36
Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

Land to Mobile Sequence


MS
6 Channel Request DCCH Assign Signaling Link Established Page Response *Authentication 7 Complete Call Setup

BSS
<AGCH>

MSC

VLR

HLR

GMSC

PSTN

<RACH>

<SDCCH> <SDCCH> (TMSI) (TMSI & Status)

CR
(Status)

<TMSI> <SDCCH> <SDCCH>

8 Call Confirmation

Ring Tone at the land phone


37

Confidential Information of Huawei. No Spreading without Permission.

Security Level: Internal

Land to Mobile Sequence


PSTN

MS
9 Assignment Command Assignment Complete Alert Address Complete

BSS

MSC

VLR

HLR

GMSC

(channel) <FACCH> < TCH>

(circuit)

Ring Tone at the land phone

38
Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

Land to Mobile Sequence


MS
9 Assignment Command Assignment Complete Alert Address Complete 10 Connect <FACCH>

BSS

MSC

VLR

HLR

GMSC

PSTN

(channel) <FACCH> < TCH>

(circuit)

Ring Tone at the land phone

Subscriber picks up
Connect ACK ANS < FACCH>

Ringing stops at land phone Billing starts

< TCH> Hello...


39
Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

Questions

Please give the sequence: 1.The called MS is powered off. 2.The called MS activates the CFU to a PSTN No. 3.The called MS has been barred all incoming call. 4.The Called MS are not known at HLR

40
Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

Answers
1. The called MS is powered off
MS
Initial and Final 1 Address Message 2 Send Routing Info ( IMSI) 3 Routing Info Ack

BSS

MSC

VLR

HLR

GMSC

PSTN

( MSISDN)

( MSISDN)

Subscriber Absent The Land hears the announcement of mobile is powered off

41
Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

Answers
2. The called MS activates the CFU to a PSTN No.
MS
Initial and Final 1 Address Message 2 Send Routing Info

BSS

MSC

VLR

HLR

GMSC

PSTN

(MSISDN)

(MSISDN)

3 Routing Info Ack

CFN 4 IFAM

42
Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

Answers
3. The called MS has been barred all incoming call.
MS
Initial and Final 1 Address Message 2 Send Routing Info (MSISDN) 3 Routing Info Ack

BSS

MSC

VLR

HLR

GMSC

PSTN

(MSISDN)

Call Barred

43
Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

Answers
4. The Called MS are not known at HLR
MS
Initial and Final 1 Address Message 2 Send Routing Info (MSISDN) 3 Routing Info Ack

BSS

MSC

VLR

HLR

GMSC

PSTN

(MSISDN)

Unknown Subscriber

44
Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

Mobile Initiated Call Clearing Sequence

MS
1 Disconnect PSTN Release Mobile Release

BSS

MSC

VLR

HLR

PSTN

< FACCH> < FACCH>

45
Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

Mobile Initiated Call Clearing Sequence

MS
1 Disconnect PSTN Release Mobile Release 2 PSTN Release Complete Mobile Release Complete
MS-MSC Signalling Released

BSS

MSC

VLR

HLR

PSTN

< FACCH> < FACCH>

< FACCH>

46
Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

Mobile Initiated Call Clearing Sequence

MS
1 Disconnect PSTN Release Mobile Release 2 PSTN Release Complete Mobile Release Complete
MS-MSC Signalling Released

BSS

MSC

VLR

HLR

PSTN

< FACCH> < FACCH>

< FACCH>

3 Clear Command Channel Release < FACCH>

47
Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

Mobile Initiated Call Clearing Sequence

MS
4 DISC UA Clear Complete

BSS

MSC

VLR

HLR

PSTN

<FACCH> <FACCH>

48
Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

Mobile Initiated Call Clearing Sequence

MS
4 DISC UA Clear Complete 5 RLSD Release Complete

BSS

MSC

VLR

HLR

PSTN

<FACCH> <FACCH>

49
Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

Location Update Sequence

Brief Introduction Location Update

to

Several Typical Location Update Sequences

50
Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

Brief Introdution to Location Update

The types of Location Update :

Periodic Location Update IMSI Attach/Detach Normal Location Update

51
Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

Several Typical Location Update Sequences

Intra-VLR Location Update Sequence

Inter-VLR Location Update Sequence

52
Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

Intra-VLR Location Update Sequence


MS
1 Channel Request DCCH Assign
<RACH> <AGCH> Only sent to HLR if this is the first time the MS has Location Updated in this VLR

BSS

MSC

VLR

HLR

53
Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

Intra-VLR Location Update Sequence


MS
1 Channel Request DCCH Assign 2 Location Update Request
<RACH> <AGCH> <SDCCH> Only sent to HLR if this is the first time the MS has Location Updated in this VLR

BSS

MSC

VLR

HLR

54
Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

Intra-VLR Location Update Sequence


MS
1 Channel Request DCCH Assign 2 Location Update Request 3 Authentication & Ciphering
<RACH> <AGCH> <SDCCH> Only sent to HLR if this is the first time the MS has Location Updated in this VLR LAI & TMSI

BSS

MSC

VLR

HLR

55
Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

Intra-VLR Location Update Sequence


MS
1 Channel Request DCCH Assign 2 Location Update Request 3 Authentication & Ciphering 4 Forward New TMSI Location Update Accept
<RACH> <AGCH> <SDCCH> Only sent to HLR if this is the first time the MS has Location Updated in this VLR LAI & TMSI <TMSI> <SDCCH> <TMSI>

BSS

MSC

VLR

HLR

56
Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

Intra-VLR Location Update Sequence


MS
1 Channel Request DCCH Assign 2 Location Update Request 3 Authentication & Ciphering 4 Forward New TMSI Location Update Accept 5 TMSI Reallocate Complete TMSI ACK
<RACH> <AGCH> <SDCCH> Only sent to HLR if this is the first time the MS has Location Updated in this VLR LAI & TMSI <TMSI> <SDCCH> <TMSI> <SDCCH>

BSS

MSC

VLR

HLR

57
Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

Intra-VLR Location Update Sequence


MS
1 Channel Request DCCH Assign 2 Location Update Request 3 Authentication & Ciphering 4 Forward New TMSI Location Update Accept 5 TMSI Reallocate Complete TMSI ACK 6 Clear Command Clear Complete
Confidential Information of Huawei. No Spreading without Permission.

BSS
<AGCH>

MSC

VLR

HLR
Only sent to HLR if this is the first time the MS has Location Updated in this VLR

<RACH>

<SDCCH>

LAI & TMSI <TMSI> <SDCCH> <TMSI> <SDCCH>

<SDCCH> <SDCCH>
58
Security Level: Internal

Inter-VLR Location Update Sequence

Location Update via IMSI

Location Update via TMSI

59
Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

Inter-VLR Location Update Via IMSI


MS
1 Channel Request DCCH Assign

BSS
<AGCH>

MSC

VLRn

HLR VLRo

<RACH>

60
Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

Inter-VLR Location Update Via IMSI


MS
1 Channel Request DCCH Assign <SDCCH> 2 Location Update Request LAI & IMSI

BSS
<AGCH>

MSC

VLRn

HLR VLRo

<RACH>

61
Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

Inter-VLR Location Update Via IMSI


MS
1 Channel Request DCCH Assign <SDCCH> 2 Location Update Request LAI & IMSI 3 Authentication Para. Req Authentication & Ciphering

BSS
<AGCH>

MSC

VLRn

HLR VLRo

<RACH>

.
62
Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

Inter-VLR Location Update Via IMSI


MS
1 Channel Request DCCH Assign <SDCCH> 2 Location Update Request 3 Authentication Para. Req Authentication & Ciphering 4 Location Update Request Insert Subscriber Data Insert Subscriber Data Ack Location Update accept LAI & IMSI

BSS
<AGCH>

MSC

VLRn

HLR VLRo

<RACH>

63
Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

Inter-VLR Location Update Via IMSI


MS
1 Channel Request DCCH Assign <SDCCH> 2 Location Update Request 3 Authentication Para. Req Authentication & Ciphering 4 Location Update Request Insert Subscriber Data Insert Subscriber Data Ack Location Update accept 5 Cancellocation Cancellocation Ack .
64
Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

BSS
<AGCH>

MSC

VLRn

HLR

VLRo

<RACH>

LAI & IMSI

Inter-VLR Location Update Via IMSI


MS
6 Forward New TMSI Location Update Accept TMSI Reallocate Complete TMSI ACK

BSS

MSC

VLRn

HLR

VLRo

65
Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

Inter-VLR Location Update Via IMSI


MS
6 Forward New TMSI Location Update Accept TMSI Reallocate Complete TMSI ACK

BSS

MSC

VLRn

HLR

VLRo

7 Clear Command Clear Complete

66
Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

Inter-VLR Location Update Via TMSI


MS
1 Channel Request DCCH Assign

BSS
<AGCH>

MSC

VLRn

HLR

VLRo

<RACH>

67
Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

Inter-VLR Location Update Via TMSI


MS
1 Channel Request DCCH Assign <SDCCH> 2 Location Update Request LAI & TMSI

BSS
<AGCH>

MSC

VLRn

HLR VLRo

<RACH>

68
Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

Inter-VLR Location Update Via TMSI


MS
1 Channel Request DCCH Assign <SDCCH> 2 Location Update Request LAI & TMSI 3 Provide Identification provide Identification Ack Authentication & Ciphering TMSI&LAIO TMSI,IMSI,KC,R,S)

BSS
<AGCH>

MSC

VLRn

HLR VLRo

<RACH>

.
69
Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

Inter-VLR Location Update Via TMSI


MS
1 Channel Request DCCH Assign <SDCCH> 2 Location Update Request LAI & TMSI TMSI&LAIO TMSI,IMSI,KC,R,S)

BSS
<AGCH>

MSC

VLRn

HLR VLRo

<RACH>

3 Provide Identification provide Identification Ack Authentication & Ciphering

4 Location Update Request Insert Subscriber Data Insert Subscriber Data Ack Location Update accept
70
Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

Inter-VLR Location Update Via TMSI


MS
5 Cancellocation Cancellocation Ack .

BSS

MSC

VLRn

HLR

VLRo

71
Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

Inter-VLR Location Update Via TMSI


MS
5 Cancellocation Cancellocation Ack . 6 Forward New TMSI Location Update Accept TMSI Reallocate Complete TMSI ACK

BSS

MSC

VLRn

HLR

VLRo

72
Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

Inter-VLR Location Update Via TMSI


MS
5 Cancellocation Cancellocation Ack . 6 Forward New TMSI Location Update Accept TMSI Reallocate Complete TMSI ACK

BSS

MSC

VLRn

HLR

VLRo

7 Clear Command Clear Complete

73
Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

MO SMS Transfer
MS
1 CHANNEL REQUEST DCCH ASSIGN SIGNALING LINK ESTABLISHED

BSS

MSC

VLR

Interworking MSC

SC

<RACH> <AGCH>

74
Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

MO SMS Transfer
MS
1 CHANNEL REQUEST DCCH ASSIGN SIGNALING LINK ESTABLISHED 2 REQ. FOR SERVICE <SDCCH> CR CC

BSS

MSC

VLR

Interworking MSC

SC

<RACH> <AGCH>

75
Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

MO SMS Transfer
MS
1 CHANNEL REQUEST DCCH ASSIGN SIGNALING LINK ESTABLISHED 2 REQ. FOR SERVICE <SDCCH> CR CC 3 AUTHENTICATION SET Cipher MODE

BSS

MSC

VLR

Interworking MSC

SC

<RACH> <AGCH>

76
Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

MO SMS Transfer
MS
1 CHANNEL REQUEST DCCH ASSIGN SIGNALING LINK ESTABLISHED 2 REQ. FOR SERVICE <SDCCH> CR CC

BSS

MSC

VLR

Interworking MSC

SC

<RACH> <AGCH>

3 AUTHENTICATION SET Cipher MODE 4 RP_MO_DATA SIF_MO_SMS SIF_MO_SMS-Ack


77
Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

MO SMS Transfer
MS
5 MO_Forward_SM Short_Message Short_Message_Ack MO_Forward_SM_Ack

BSS

MSC

VLR

Interworking MSC

SC

(SC_No.)

78
Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

MO SMS Transfer
MS
5 MO_Forward_SM Short_Message Short_Message_Ack MO_Forward_SM_Ack

BSS

MSC

VLR

Interworking MSC

SC

(SC_No.)

6 RP_ACK "Send Successfully" is displayed on the mobile

79
Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

MT SMS Transfer

For Forwarding a Short Message

For Forwarding Several Short Message

80
Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

MT SMS Transfer (A Message)


MS
1 Short Message SRI_For_SM SRI_For_SM_Ack MT_Forward_SM Servicing MSC

VLR

HLR

Gateway MSC

SC

81
Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

MT SMS Transfer (A Message)


MS
1 Short Message SRI_For_SM SRI_For_SM_Ack MT_Forward_SM 2 SIF_MT_SMS Page Page Servicing MSC

VLR

HLR

Gateway MSC

SC

82
Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

MT SMS Transfer (A Message)


MS
1 Short Message SRI_For_SM SRI_For_SM_Ack MT_Forward_SM 2 SIF_MT_SMS Page Page 3 Paging Response Authentication and Ciphering Servicing MSC

VLR

HLR

Gateway MSC

SC

83
Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

MT SMS Transfer (A Message)


MS
1 Short Message SRI_For_SM SRI_For_SM_Ack MT_Forward_SM 2 SIF_MT_SMS Page Page Request 3 Paging Response Authentication and Ciphering 4 Short_Message Short_Message_Ack MT_Forward_SM_Ack Short_Message_Ack
Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

Servicing MSC

VLR

HLR

Gateway MSC

SC

84

MT SMS Transfer (Several Messages)


MS
1 Short Message SRI_For_SM SRI_For_SM_Ack MT_Forward_SM MT_Forward_SM (The More message To Send Flag is True) Servicing MSC

VLR

HLR

Gateway MSC

SC

85
Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

MT SMS Transfer (Several Messages)


Servicing MSC

MS
1 Short Message SRI_For_SM SRI_For_SM_Ack MT_Forward_SM MT_Forward_SM (The More message To Send Flag is True) 2 SIF_MT_SMS Page Paging Request

VLR

HLR

Gateway MSC

SC

86
Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

MT SMS Transfer (Several Messages)


MS
1 Short Message SRI_For_SM SRI_For_SM_Ack MT_Forward_SM MT_Forward_SM (The More message To Send Flag is True) 2 SIF_MT_SMS Page Paging Request Servicing MSC

VLR

HLR

Gateway MSC

SC

3 Paging Response Authentication and Ciphering


87
Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

MT SMS Transfer (Several Messages)


MS
4 Short_Message Short_Message_Ack MT_Forward_SM_Ack Short_Message_Ack Servicing MSC

VLR

HLR

Gateway MSC

SC

88
Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

MT SMS Transfer (Several Messages)


MS
4 Short_Message Short_Message_Ack MT_Forward_SM_Ack Short_Message_Ack 5 Short_Message MT_Forward_SM MT_Forward_SM (The More message To Send Flag is False) Short_Message Short_Message_Ack MT_Forward_SM_Ack Short_Message_Ack Servicing MSC

VLR

HLR

Gateway MSC

SC

89
Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

Question

What is the sequence when the originating subscriber sets the wrong SC No. in the mobile station.

90
Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

Answer
MS
MO_Forward_SM Short_Message Short_Message_Ack
Illegal Subscriber

BSS

MSC

VLR

Interworking MSC

SC

(SC_No.)

MO_Forward_SM_Ack
Illegal Subscriber

RP_ACK "Send Not Successfully" is displayed on the mobile

91
Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

Handover Sequence

Inter - BSS handover sequence Inter - MSC handover sequence

92
Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

Inter - BSS Handover Sequence


MS
1 Periodic Measurement reports
<SACCH>

oBSS

nBSS

MSC

93
Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

Inter - BSS Handover Sequence


MS
1 Periodic Measurement reports 2 Handover required
<SACCH>

oBSS

nBSS

MSC

94
Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

Inter - BSS Handover Sequence


MS
1 Periodic Measurement reports 2 Handover required 3 Handover Request
TMSI cct. code <SACCH>

oBSS

nBSS

MSC

95
Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

Inter - BSS Handover Sequence


MS
1 Periodic Measurement reports 2 Handover required 3 Handover Request 4 Handover REQ ACK
TMSI cct. code HO Ref. No. <SACCH>

oBSS

nBSS

MSC

96
Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

Inter - BSS Handover Sequence


MS
1 Periodic Measurement reports 2 Handover required 3 Handover Request 4 Handover REQ ACK 5 Handover Command
<FACCH> HO Ref. No. TMSI cct. code HO Ref. No. <SACCH>

oBSS

nBSS

MSC

97
Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

Inter - BSS Handover Sequence


MS
1 Periodic Measurement reports 2 Handover required 3 Handover Request 4 Handover REQ ACK 5 Handover Command 6 Information Interchange
<FACCH> <FACCH> HO Ref. No. TMSI cct. code HO Ref. No. <SACCH>

oBSS

nBSS

MSC

98
Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

Inter - BSS Handover Sequence


MS
1 Periodic Measurement reports 2 Handover required 3 Handover Request 4 Handover REQ ACK 5 Handover Command 6 Information Interchange 7 Handover Complete
<FACCH> <FACCH> HO Ref. No. TMSI cct. code HO Ref. No. <SACCH>

oBSS

nBSS

MSC

99
Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

Inter - BSS Handover Sequence


MS
1 Periodic Measurement reports 2 Handover required 3 Handover Request 4 Handover REQ ACK 5 Handover Command 6 Information Interchange 7 Handover Complete 8 Clear Command
<FACCH> <FACCH> HO Ref. No. TMSI cct. code HO Ref. No. <SACCH>

oBSS

nBSS

MSC

100
Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

Inter - BSS Handover Sequence


MS
1 Periodic Measurement reports 2 Handover required 3 Handover Request 4 Handover REQ ACK 5 Handover Command 6 Information Interchange 7 Handover Complete 8 Clear Command 9 Periodic Meas. reports
Confidential Information of Huawei. No Spreading without Permission.

oBSS
<SACCH>

nBSS

MSC

TMSI cct. code HO Ref. No. <FACCH> <FACCH> HO Ref. No.

<SACCH>

101
Security Level: Internal

Inter - MSC Handover Sequence

Basic Inter-MSC handover Subsequent Inter - MSC handover

102
Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

Basic Inter-MSC handover


MSCA
1 PrepareHandover 2 Allocate HandoverNo. 3 Send Handover Report 4 PrepareHandover_Ack 5 Send HO Report_Ack 6 Initial Address Message Address Completed Answer
103
Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

MSCB

VLRB

Basic Inter-MSC handover


MSCA
1 PrepareHandover 2 Allocate HandoverNo. 3 Send Handover Report 4 PrepareHandover_Ack 5 Send HO Report_Ack 6 Initial Address Message Address Completed Answer

MSCB

VLRB

104
Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

Basic Inter-MSC handover


MSCA
1 PrepareHandover 2 Allocate HandoverNo. 3 Send Handover Report 4 PrepareHandover_Ack 5 Send HO Report_Ack 6 Initial Address Message Address Completed Answer

MSCB

VLRB

105
Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

Basic Inter-MSC handover


MSCA
1 PrepareHandover 2 Allocate HandoverNo. 3 Send Handover Report 4 PrepareHandover_Ack 5 Send HO Report_Ack 6 Initial Address Message Address Completed Answer
106
Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

MSCB

VLRB

Basic Inter-MSC handover


MSCA
1 PrepareHandover 2 Allocate HandoverNo.
3 Send Handover Report

MSCB

VLRB

4 PrepareHandover_Ack 5 Send HO Report_Ack 6 Initial Address Message Address Completed Answer


107
Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

Basic Inter-MSC handover


MSCA
1 PrepareHandover 2 Allocate HandoverNo.
3 Send Handover Report

MSCB

VLRB

4 PrepareHandover_Ack 5 Send HO Report_Ack 6 Initial Address Message Address Completed Answer


108
Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

Basic Inter-MSC handover


MSC/VLRA
7 Process Access Signal Send End Signal Forward Access Signal Process Access Signal 8 Clear Forward Release Guard Send End Signal_Ack

MSC/VLRB

109
Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

Basic Inter-MSC handover


MSC/VLRA
7 Process Access Signal Send End Signal Forward Access Signal Process Access Signal 8 Release Release Complete Send End Signal_Ack

MSC/VLRB

110
Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

Basic Inter-MSC handover


MSC/VLRA
9 SendAuth. Info Auth Info Update Location InsertSubs.Data InsertSubs.Data_Ack UpdateLocation_Ack Cancellocation Cancellocation_Ack
111
Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

MSC/VLRB

HLRA

Subsequent Inter-MSC handover


MSC/VLRA
1 PrepareSubsequentHOV PrepareHandover PrepareHandover PrepareSubsequentHOV 2 Initial and Final Address Message Address Complete Answer 3 RLS RLC
112
Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

MSC/VLRB

HLRA

Subsequent Inter-MSC handover


MSC/VLRA
1 PrepareSubsequentHOV PrepareHandover PrepareHandover PrepareSubsequentHOV 2 Initial and Final Address Message Address Complete Answer 3 RLS RLC
113
Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

MSC/VLRB

HLRA

Subsequent Inter-MSC handover


MSC/VLRA
1 PrepareSubsequentHOV PrepareHandover PrepareHandover PrepareSubsequentHOV 2 Initial and Final Address Message Address Complete Answer 3 RLS RLC
114
Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

MSC/VLRB

HLRA

Subsequent Inter-MSC handover


MSC/VLRA
4 ProcessAccessSignal ForwardAccessSignal 5 RLS RLC 6 SendEndSignal SendEndSignal_Ack 7 Location Update
115
Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

MSC/VLRB

MSC/VLRC

Subsequent Inter-MSC handover


MSC/VLRA
4 ForwardAccessSignal ProcessAccessSignal 5 RLS RLC 6 SendEndSignal SendEndSignal_Ack 7 Location Update
116
Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

MSC/VLRB

MSC/VLRC

Subsequent Inter-MSC handover


MSC/VLRA
4 ForwardAccessSignal ProcessAccessSignal 5 RLS RLC 6 SendEndSignal SendEndSignal_Ack 7 Location Update
117
Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

MSC/VLRB

MSC/VLRC

Subsequent Inter-MSC handover


MSC/VLRA
4 ForwardAccessSignal ProcessAccessSignal 5 RLS RLC 6 SendEndSignal SendEndSignal_Ack 7 Location Update
118
Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

MSC/VLRB

MSC/VLRC

Summary

1. GSM Security Mangement 2. GSM Basic Call Sequence 3. Location UpdateSequence 4. SMS Sequence 5. HandoverSequence

119
Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

120
Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

Você também pode gostar