Principles
www.huawei.com
2. Key Concepts
UMTS:
GSM/ LTE/SAE:
3GPP R99/R4/R5/R6/R
GPRS R8/R9/R10…
7
1.PS core network only support non- 1. The all-IP network contains the
real time services. PS. Voice services are jointly
2. Voice services are carried in the CS provided by the PS and the IP
domain. Multimedia Subsystem (IMS).
3. Low efficiency of routes in 2. Flattened network architecture.
forwarding data due to the over-layered 3. Support of the multiple access
networks. technologies.
4. Incapability of supporting multiple 4. High data transmission rate:
radio access systems downlink 100 Mbit/s and uplink
traffic 50 Mbit/s.
Rx
LTE Gxc
X2 S1-U Gx
-Uu S11
UE LTE SAE
Security Functions.
UTRAN
SGSN
S12
NodeB RNC
UTRAN
SGSN
S12
NodeB RNC
GERAN S3 PCRF
S6a
HSS
BTS BSC/PCU S4
MME Gx Rx
S11
S1-MME
LTE Operator's
IP Services
S1-U S5 SGi
eNodeB
S-GW P-GW
Supporting inter-operator charging based on subscriber and QoS class identifier (QCI) granularity
IP address allocation for UEs Uplink and downlink rate enforcement based on
access point name-aggregate maximum bit rate
(APN-AMBR)
Supporting packet marking for uplink and Downlink rate enforcement based on
downlink data based on transfer priority guaranteed bit rate (GBR)
Uplink and downlink charging based on traffic DHCPv4 (server/relay) and DHCPv6 (server)
functions
The PCRF is mainly used for prescribing rules for policy and
charging control.
1 MME
ICP/ISP
internet
2 S-GW P-GW
eNodeB
Signaling
Data
IMS domain
MGCF
EPC Signaling
IMS Signaling 3
SS7 Signaling
CSCF IMS-MGW SS7
Data (VOIP)
MME 4
1
2
MSC
4 PLMN
S-GW P-GW
eNodeB
EPC
GERAN
Iu
S3 S4
S6a Rx
Gx
S12
UTRAN
S11
S1-C MME S8
SGi
Operator’s
IP Service
S1-U
VPLMN HPLMN
Gb SGSN HSS H-PCRF
Rx
Operator’s
GERAN
Iu IP Service
S3 S4
S9
S6a
V-PCRF
S12
UTRAN
S11 Gx
S1-C MME S5
SGi Operator’s
S1-U IP Service
E-UTRUAN S-GW PDN-GW
VPLMN HPLMN
Gb SGSN HSS H-PCRF
Operator’s
GERAN
Iu IP Service
S3 S4
S9
S6a
V-PCRF
S12 Rx
UTRAN
S11 Gx
S1-C MME S5
SGi Operator’s
S1-U IP Service
E-UTRUAN S-GW PDN-GW
2. Key Concepts
2.2 Security
EPS Bearer
Mobility Principles
PDN # 3
PDN # 1 PDN # 2 Corporate
internet IMS Network
Evolved Packet
Core
IPv6
Delay
etc
Dedicated bearer
Created on demand
TFT in UE
IP Packet IP Packet
and PDN GW
4G 2G/3G
bearer PDP
EPS bearer id NSAPI
EPS bear context PDP context
Dedicated bearer activation Secondary PDP context
activation
Linked EPS Bearer Identity Linked NSAPI
TFT same
Packet filter same
TA list
A list of different TAs
Handover
Benefit of ISR
limit the signaling between the UE and the network as well as
signaling within the network.
Paging
ISR Deactivation
HSS HSS
P-GW P-GW
④
S-GW ③ S-GW
1. Downlink Data
2. Downlink Data
2. Downlink Data S-GW Notification
Notification
6. Stop 5. Establish
downlink data MME
SGSN paging
connection
4. Paging 3. Paging in TA
3. Paging in RA
Response
UE
Serving GW changed
ISR deactivation by UE
Modification of any EPS bearer context or PDP context which was
activated before the ISR is activated in the UE;
After updating either MME or SGSN about the change of the DRX
parameters or UE capabilities
TAI=MCC+MNC+TAC
TA List 1 TA List 2
TA 1 TA 2 TA 3 TA 5
CELL1 CELL2 CELL3 CELL4 CELL1 CELL2 CELL3 CELL4
TA 4
CELL3 CELL4
IMSI
MSISDN
GUTI=GUMMEI+M-TMSI
=MCC+MNC+MMEI+M-TMSI
MME IP address
HSS
APN-NI:determined by operators
APN-OI:mnc<MNC>.mcc<MCC>.gprs
An APN example:
4GNET.MNC012.MCC462.GPRS
2.2 Security
UE MME
NAS Ciphering/integrity
NAS NAS
eNodeB
RRC Ciphering/integrity
RRC RRC
UP Ciphering
PDCP
PDCP
KeNB / NH
UE / eNB
MME HSS
eNodeB MME
2.2 Security
UE eNB Serving
GW
PDN
GW
internet
SLA
Traffic flow and bearer is associated and mapped with TFT,and TFT associate with RB-
Id in Radio side and with TEID in CN side.
It is UE to associate UL Traffic and TFT and is PGW to associate DL Traffic and TFT.
EPS Bearer
QoS
GBR Non-GBR
Priority Delay Loss
MBR AMBR
GBR
EPS
QoS is subscribed in HSS and PCRF
AMBR
QCI, ARP, GBR (Guaranteed bit rate), MBR (Maximum bit rate)
Non-GBR bearers
A non-GBR bearer does not have a fixed bandwidth allocated and
there is thus no guarantee for how much traffic it can carry
Enforced by PDN GW
Enforced by eNodeB
2.2 Security
The PCRF makes the gating decisions which are then enforced
by the PCEF.
QoS Control
QoS control allows the PCRF to provide the PCEF with the
authorized QoS for the IP flow(s), like bit rate and QoS class.
Charging characteristic
Flat rate/hot-billing/normal
2.2 Security
2. Key Concepts
3.1.5 Others
Function of GTP
Mobility management: RAU/TAU/etc.
MME …… S-GW
GTP-C Tunnel for subscriber N
MME S8
eNodeB
PLMN 2 P-GW
PLMN 2 P-GW
3.1.5 Others
3.1.5 Others
Two levels:
Diameter base protocol (RFC 3588)
Diameter applications
Diameter AVPs
IP IP
S-GW P-GW
L2/L1 L2/L1
Gx/Gxc PCRF
PGW/SGW
3.1.5 Others
3.1.5 Others
AAA Server
SGi
Internet
P-GW Intranet
3.2 Procedures
3.2.1 Overview
3.2.2 Attach and Detach for E-UTRAN
3.2.7 CS fallback
EMM-REGISTERED
ECM-CONNECTED
Detach,
Attach Reject,
TAU reject,
E-UTRAN interface switched off due to Non-3GPP handover,
All bearers deactivated
Detach,
Attach Reject,
TAU reject,
All bearers deactivated
RRC connection
released
S1 connection
released
ECM-IDLE ECM-CONNECTED ECM state in MME
S1 connection
established
EPS EPS
UE state 2G/PS 3G
EMM ESM
PMM- EMM-
Power off IDLE ECM-IDLE
detached Deregistered
EMM-
Standby Standby PMM-idle ECM-IDLE
Registered
PMM- EMM-
PS service Ready ECM-Connected
connected Registered
ICP/ISP
internet
MM context S-GW P-GW
3.2 Procedures
3.2.1 Overview
3.2.2 Attach and Detach for E-UTRAN
3.2.7 CS fallback
Copyright © 2015 Huawei Technologies Co., Ltd. All rights reserved.
Attach Procedure
Function of attach procedure:
The UE register to the EPS network.
2. Identification req/rsp
3. Identity req/rsp
4. Security function
Implicit detach
1. Detach request
6. Detach accept
7. Signaling connection release
MME
After S1-release
MME
S1-release
1. By eNodeB when UE_Inactive_Timer expires (60s by default)
2. By eNodeB OAM command
3. By MME OAM command
Initiated by:
UE triggered (stand along service request)
2. Authentication / Security
3. S1-AP: Initial Context Setup Request
5. Uplink data
Downlink data
3.2 Procedures
3.2.1 Overview
3.2.7 CS fallback
Copyright © 2015 Huawei Technologies Co., Ltd. All rights reserved.
TAU Procedure
S-GW2
S-GW1
4. Security function
5. Context Ack
2. Context request
3. Context response
4. Security function
5. Context Ack
3.2 Procedures
3.2.1 Overview
3.2.7 CS fallback
Copyright © 2015 Huawei Technologies Co., Ltd. All rights reserved.
Handover procedure
Handover procedure types
Intra-E-UTRAN handover (handover in EPS)
X2-based handover (MME unchanged)
Data forwarding
T-MME S-MME
signaling
Data packet T-ENB S-ENB
3. Forward
Relocation 2. Handover
Request Required
5. Handover
Request/ACK
signaling
T-ENB S-ENB
1. Decision to trigger a
relocation via S1
7. Forward
Relocation
Response
signaling 9. Handover
Command
T-ENB S-ENB
T-MME S-MME
signaling
User data path T-ENB S-ENB
data path for 11. Handover Detach from
forwarding Confirm old cell
13. Forward
Relocation
Complete
Notification /
12. Handover Acknowledge
notify
signaling
User data path T-ENB S-ENB
Perform TAU
Procedure
3.2 Procedures
3.2.1 Overview
3.2.7 CS fallback
Copyright © 2015 Huawei Technologies Co., Ltd. All rights reserved.
Session Management Procedure
EPS bearer management procedure
Bearer activation procedure
MME
Dedicated Dedicated
bearer bearer
Default Default
bearer bearer
•2 MME allocate EPS bearer ID; QoS parameter mapping for 2G/3G MS;
•Construct SM message(PTI, TFT, QoS,PCO).
Copyright © 2015 Huawei Technologies Co., Ltd. All rights reserved. Page147
Dedicated Bearer Modification
Function: To modify QOS,AMBR,TFT of dedicated bearer
etc.
•E-RAB
•S1 bearer
•modify •S5/S8 bearer
•modify
modify
Dedicated Dedicated
bearer bearer
eNodeB S-GW P-GW
Case A:
1 MS download FTP files
2 After finishing FTP service, MS initiates streaming
service with the same QCI&ARP before the dedicated Case B:
bearer age , So P-GW Initiated Bearer Modification With PCRF operation
QoS Update
MME
•S1 bearer
modify •S5/S8 bearer
modify
Dedicated Dedicated
bearer bearer
eNodeB S-GW P-GW
7. Direct Transfer
8. Session management response
Dedicated Dedicated
bearer bearer
Dedicated Dedicated
bearer bearer
eNodeB
Default
1 MS finish downloading FTP files . After bearer bearer
ages , dedicated bearer is deactivation. So P-GW
Initiated Dedicated Bearer Deactivation.
Dedicated Dedicated
bearer bearer
Dedicated Dedicated
bearer bearer P-GW
eNodeB S-GW
Default
Command of all bearer deactivation is sent by bearer
OAM. So P-GW Initiated Dedicated Bearer
Deactivation(all bearer)
Trigger condition
when handovers from 3GPP to non-3GPP, in which case, the
default bearer and all the dedicated bearers associated with
the PDN address are released, but the PDN address is kept in
the PDN GW.
PGW Bearer:
QCI=1,ARP=1,MBR=100k,GBR=100k
3.2 Procedures
3.2.1 Overview
3.2.7 CS fallback
Copyright © 2015 Huawei Technologies Co., Ltd. All rights reserved.
Voice over IMS
Gx:
1) QoS(QCI=1,GBR,ARP,Bandwidth=23k)
2) Charging-rule, Flow-Description
S1-C:
QoS(QCI=5, MME PCRF
ARP,) Rx:
eNodeB
⑤ 1) Media-Type=AUDIO
② 2) Codec-Data=G.723
① SAE-GW 3) Bandwidth=23k IMS CN
③ SIP signalling ④
Default bearer: SIP signalling IP backbone
UE Dedicated bearer: Voice media(QCI=1)
⑥ Voice media
SRVCC AS
IMS CN
SAE-GW Voice media flows
Callee
CS network party
LTE G/U network
Callee leg1(IMS)
handover
Callee leg2(CS)
ME only can receive or send Low cost for UE; Handover from LTE
one kind of wireless signal. Low requirement to 2/3G and session
ME can receive or send two Service is not High cost for UE.
kind of wireless signal. UE interrupt. High requirement for
Dual Radio
can realize the voice UE.
continuity.
Iu-ps/Gb
Sv
SGSN
S3
IMS Remote
MME
S6a leg
HSS
S1-MME S11
1.Measurement
Reports
2.Handover to UTRAN/GERAN
required
8.To eUTRAN
7.PS HO response to MME
Coordinates SRVCC
(CS resources)
9.Handover CMD and PS HO response
10.Handover
execution
Step1-2,
handover
trigger
Step3-
9,step13-14
Handover
preparation
Step10-12 session
transfer
step15-17
Handover
execution
Step18 suspend
PS because
GERAN has no
DTM
Step19-22
handover
complete
3.2 Procedures
3.2.1 Overview
BS SGSN SGs
Iu/Gb HSS
Gn/S3 S6a
S1-C S11
Uu S1-U
eNB SAE-GW
3
eNB SAE-GW
5. S1 UE Context Release
3a. PS HO as specified in 23.401 [2] (preparation phase and start of execution phase)
3b. Suspend
Additional 3c. Update Bearer(s)
connection setup
procedure (M-M)
Coverage Supports LTE + IMS hot spot Provides PS services within the
coverage and provides voice and LTE coverage, and voice
data services. services within the 2G/3G
coverage.
Trigger condition Triggered when a subscriber Triggered when the subscriber
moves from a location within the uses the CS service.
LTE coverage to a location within
the 2G/3G coverage.
The MME Queries the DNS according to the Configures the MSC IP statically
addresses the MSC. Target ID. according to the Target TAI.
Target ID -> hostname -> IP Target TAI -> LAI -> VLR NO. ->
MSC IP
Voice indicator in SRVCC indicator CSFB indicator
the extended
service request.
Attach type EPS attach Combined IMSI/EPS attach
Function of each