鼎立测试信令解释

2000 1x CAI Message analysis Lecturer: Hong Jeong Ho Revision History Version 1.0 2002.4 Draft version SK Telecom Samsung System. Version 2.0 2002.5 Add Japan KDDI Motorola system data Version 2.1 2002.9 Re-configuration for teaching material. Contents 1.CALL ORIGINATION (VOICE, DATA).3 1.1 SYNC CHANNEL MESSAGE.3 1.2 GENERAL PAGE MESSAGE.7 1.3 NEIGHBOR LIST MESSAGE.11 1.4 CDMA CHANNEL LIST MESSAGE.13 1.5 EXTENDED SYSTEM PARAMETERS MESSAGE.14 1.6 GENERAL NEIGHBOR LIST MESSAGE.19 1.7 SYSTEM PARAMETERS MESSAGE.21 1.8 ACCESS PARAMETERS MESSAGE.26 1.9 REGISTRATION MESSAGE.30 1.10 ORDER MESSAGE.32 1.11 ORIGINATION MESSAGE.41 1.12 EXTENDED CHANNEL ASSIGNMENT MESSAGE.46 1.13 SERVICE REQUEST MESSAGE.49 1.14 SERVICE CONNECT MESSAGE.52 1.15 SERVICE CONNECT COMPLETION MESSAGE.53 1.16 POWER CONTROL MESSAGE.54 1.17 POWER CONTROL PARAMETERS MESSAGE.55 1.18 POWER MEASUREMENT REPORT MESSAGE.56 1.19 EXTENDED SUPPLEMENTAL CHANNEL MESSAGE.57 1.20 RLP STATISTICS.61 1.21 FAST FORWARD POWER CONTROL INFORMATION.67 1.22 FORWARD FRAME INFORMATION.68 1.23 REVERSE FRAME INFORMATION.71 1.24 REVERSE POWER CONTROL INFORMATION.74 1.25 PILOT STRENGTH MEASUREMENT MESSAGE.76 1.26 UNIVERSAL HANDOFF DIRECTION MESSAGE.77 1.27 HANDOFF COMPLETION MESSAGE.80 1.28 EXTENDED NEIGHBOR LIST UPDATE MESSAGE.80 1.29 IN-TRAFFIC MESSAGE.83 1.30 RELEASE ORDER MESSAGE.84 1.31 SCRM (SUPPLEMENTAL CHANNEL REQUEST MESSAGE).85 2.CALL TERMINATION (VOICE, DATA).86 2.1 ALERT WITH INFORMATION MESSAGE.86 2.2 CONNECT ORDER MESSAGE.88 3. PAGING AND STATUS REPORT (VOICE, DATA).88 3.1 QUICK PAGING.88 3.2 ACCESS CHANNEL (PAGING RESPONSE).89 3.3 SEARCHER AND FINGER INFORMATION.90 3.4 MARKOV STATISTIC.91 3.5 ACCESS PROBE INFO.91 3.6 SERVICE CONFIGURATION.92 4.SERVICE REDIRECTION MESSAGE (SRM).93 5.ENHANCED HARD H/O.95 5.1 CANDIDATE FREQUENCY SEARCH REQUEST MESSAGE.95 5.2 CANDIDATE FREQUENCY SEARCH RESPONSE MESSAGE.98 5.3 CANDIDATE FREQUENCY SEARCH REPORT MESSAGE.98 5.4 CANDIDATE FREQUENCY SEARCH CONTROL.100 1.Call Origination (Voice, Data) 1.1 Sync Channel Message 2001 Feb 5 07:46:52.493SYNC CHANNEL - Sync Channel Msg (vol5. 3.7.2.3.2.25) protocol_rev = 6 (IS2000) chan_type = 0 (Sync) chan sc_msg gen msg_type = 1 (Sync) sync p_rev = 6 1:IS95, 2:IS95A, 3:TSB74, 4,5:IS95B, 6:IS95C, protocol revision level. min_p_rev = 1 Minimum protocol revision that mobile can access system. It could use to prohibit the mobile that cant support service from system. sid = 2236 (0 x8bc) nid = 113 (0 x71) pilot_pn = 188 (0 xbc) lc_stateHI = 507 lc_stateLO = 3582174253 Present long code state sys_timeHI = 1 sys_timeLO = 4022462865 Difference present time between standard time (Jan 6, 00:00:00, 1980) lp_sec = 13 leap second count after system “on” ltm_off = 18 Local time offset (30minute unit) 18*30minute = 9 Hour daylt = 1 daylight savings time (Allow 1, prohibit 0) prat = 0 Paging channel data bps 0 : 9600bps , 1 : 4800bps cdma_freq = 29 (0 x1d) CDMA Channel Number including Primary Paging Channel ext_cdma_freq = 29 (0 x1d) Quick paging 參考事項 msg_type (See vol4. LAC) Table 3.1.2.3.1.1.2-1. MSG_TYPE Values on f-csch MSG_NAMEMSG_TAG MSG_TYPE binary Logical CH System Parameters Message SPM1 Broadcast Access Parameters MessageAPM10 Broadcast Neighbor List Message NLM11 Broadcast CDMA Channel List Message CCLM100 Broadcast Order Message ORDM111 General signaling Channel Assignment Message CAM1000 General signaling Data Burst MessageDBM1001 General signaling Authentication Challenge Message AUCM1010 General signaling SSD Update Message SSDUM1011 General signaling Feature Notification Message FNM1100 General signaling Extended System Parameters MessageESPM1101 broadcast Extended Neighbor List MessageENLM1110 broadcast Status Request Message STRQM1111 General signaling Service Redirection Message SRDM10000 General signaling General Page Message GPM10001 General signaling Global Service Redirection Message GSRDM10010 Broadcast TMSI Assignment MessageTASM10011 General signaling PACA MessagePACAM10100 General signaling Extended Channel Assignment MessageECAM10101 General signaling General Neighbor List MessageGNLM10110 broadcast User Zone Identification Message UZIM10111 broadcast Private Neighbor List MessagePNLM11000 broadcast Reserved N/A11001 N/A Extended Global Service Redirection MessageEGSRM11010 broadcast Extended CDMA Channel List Message ECCLM11011 broadcast Sync Channel Message SCHM1 sync User Zone Reject MessageUZRM11100 General signaling ANSI-41 System Parameters MessageA41SPM11101 broadcast MC-RR Parameters MessageMCRRPM11110 broadcast ANSI-41 RAND Message A41RANDM11111 broadcast Enhanced Access Parameters MessageEAPM100000 broadcast Universal Neighbor List MessageUNLM100001 broadcast Security Mode Command MessageSMCM100010 broadcast Universal Page MessageUPM100011 General signaling Table 3.2.2.2.1.2-1. MSG_TYPE Values for Regular PDUs on f-dsch MSG_NAME MSG_TAG MSG_TYPE binary Order Message ORDRM1 Authentication Challenge MessageAUCM10 Alert With Information MessageAWIM11 Data Burst Message DBM100 Analog Handoff Direction Message AHDM110 In-Traffic System Parameters MessageITSPM111 Neighbor List Update MessageNLUM1000 Send Burst DTMF Message BDTMFM1001 Power Control Parameters MessagePCNPM1010 Retrieve Parameters Message RTPM1011 Set Parameters Message STPM1100 SSD Update MessageSSDUM1101 Flash With Information MessageFWIM1110 Mobile Station Registered MessageMSRM1111 Status Request Message STRQM10000 Extended Handoff Direction MessageEHDM10001 Service Request Message SRQM10010 Service Response MessageSRPM10011 Service Connect MessageSCM10100 Service Option Control MessageSOCM10101 TMSI Assignment MessageTASM10110 Service Redirection MessageSRDM10111 Supplemental Channel Assignment MessageSCAM11000 Power Control MessagePCNM11001 Extended Neighbor List Update MessageENLUM11010 Candidate Frequency Search Request MessageCFSRQM11011 Candidate Frequency Search Control MessageCFSCNM11100 Power Up Function Message PUFM11101 Power Up Function Completion MessagePUFCM11110 General Handoff Direction MessageGHDM11111 Resource Allocation Message RAM100000 Extended Release Message ERM100001 Universal Handoff Direction MessageUHDM100010 Extended Supplemental Channel Assignment MessageESCAM100011 Mobile Assisted Burst Operation Parameters MessageMABOPM100100 User Zone Reject Message UZRM100101 User Zone Update Message UZUM100110 Call Assignment Message CLAM100111 Extended Alert With Information MessageEAWIM101000 DS-41 Inter-system Transfer MessageD41ISTM101001 Extended Flash With Information MessageEFWIM101010 Security Mode Command Message SMCM101011 Table 2.1.1.4.1.1.2-1. MSG_ID values on r-csch MSG_NAMEMSG_TAG MSG_TYPE binary Registration Message RGM1 Order MessageORDM10 Data Burst MessageDBM11 Origination MessageORM100 Page Response MessagePRM101 Authentication Challenge Response MessageAUCRM110 Status Response Message STRPM111 TMSI Assignment Completion MessageTACM1000 PACA Cancel MessagePACNM1001 Extended Status Response MessageESTRPM1010 Reserved N/A1011 Reserved N/A1100 Device Information MessageDIM1101 Security Mode Request MessageSMRM1110 Data Burst Response MessageDBRM1111 Table 2.2.1.2.1.2-1. MSG_TYPE Values for Regular PDUs on r-dsch MSG_NAMEMSG_TAG MSG_TYPE binary Order Message ORDM1 Authentication Challenge Response MessageAUCRM10 Flash With InformationFWIM11 Data Burst MessageDBM100 Pilot Strength Measurement MessagePSMM101 Power Measurement Report Message PMRM110 Send Burst DTMF Message BDTMFM111 Status MessageSTM1000 Origination Continuation MessageORCM1001 Handoff Completion Message HOCM1010 Parameters Response MessagePRSM1011 Service Request Message SRQM1100 Service Response Message SRPM1101 Service Connect Completion MessageSCCM1110 Service Option Control Message SOCM1111 Status Response Message STRPM10000 TMSI Assignment Completion MessageTACM10001 Supplemental Channel Request MessageSCRM10010 Candidate Frequency Search Response MessageCFSRSM10011 Candidate Frequency Search Report MessageCFSRPM10100 Periodic Pilot Strength Measurement MessagePPSMM10101 Outer Loop Report MessageOLRM10110 Resource Request MessageRRM10111 Extended Release Response MessageERRM11000 Enhanced Origination MessageEOM11010 Extended Flash With Information MessageEFWIM11011 Extended Pilot Strength Measurement MessageEPSMM11100 Extended Handoff Completion MessageEHOCM11101 Resource Release Request MessageRRRM11110 Security Mode Request Message SMRM11111 Data Burst Response MessageDBRM100000 DS-41 Inter-system Transfer Message D41ISTM100001 User Zone Update RequestUZURM100010 Call Cancel Message CLCM100011 Device Information Message DIM100100 SIN, NID Obiective : To help roaming Roaming condition : When SINs,NIDs mobile registered dont match NID, SID received. Classification : Home only, NID roamer, SID roamer (Simply ; SID = service provider idenfication number, SKT 011, STI 017, KDDI 090) NID = MSC idenfication number If NID=65535, Mobile dont execute NID roaming. (To protect frequent roaming) 1.2 General Page Message 2001 Feb 5 07:46:54.201 PAGING CHANNEL - General Page Msg (vol5. 3.7.2.3.2.17) protocol_rev = 6 (IS2000) chan_type = 1 (Paging) chan pc_msg gen SID=0SID=2 SID=3SID=4 NID=ANID=B SID=1 3 DIGITSNMSI IMSI=15digits prot_disc = 0 msg_id = 17 gen_page config_msg_seq = 6 acc_msg_seq = 1 class_0_done = 1 If GPM have information for class0 IMSI mobile, value is “1”. class_1_done = 1 If GPM have information for class1 IMSI mobile, value is “1”. tmsi_done = 1 ordered_tmsis = 0 broadcast_done = 1 add_length = 0 num_pages = 1 (0 x1) Available paging CH number gen_page0 page_class = 0 Mobile do registration by class0 IMSI. page_subclass = 3 Including IMSI11_12,MCC.IMSI_S, (See vol4 3.1.2.2.1.1.1.2-1) rec format3 msg_seq = 0 mcc = 349 (0 x15d) Mobile Country Code (3 digits fixed) SK Telecom value 450(349+111) imsi_11_12 = 99 99+1100 Mobile Network Code Now, SKT:00, STI: 22 imsi_sHI = 3 imsi_sLO = 2219332107 special_service = 1 Ask service_option. service_option = 3 (0 x3) Ask EVRC voice service. Consideration Whenever system changes the message, the value should increase by the rest of “CONFIG_SEQ/64”. Whenever BTS changes Access_para, BTS shall increases ACC_CONFIG_SEQ by the rest of “ACC_CONFIG_SEQ/64”. If PAGE_SUBCLASS = 0, BTS dont send MCC and IMSI_11_12 on General Page Msg. In this case, MCC and IMSI_11_12 use the value in Extended system parameter msg. (When BSC = Wild ON) If value = 3, MCC and IMSI_11_12 use the value which Mobile have. (When BSC = Wild OFF) IMSI Structure MCCMNCMSIN MCCp 2digits(Imsi_11_12 p) 3digits(Imsi_S2p ) 7digits(Imsi_S1p) - MCC : Mobile Country Code (3 digits fixed) - MNC : Mobile Network Code - MSIN : Mobile Station Identification Number - NMSI : National Mobile Station Identity IMSI type - IMSI_M : IMSI that is low 10 digit of MSIN(Mobile Station Identification Number) including MIN - IMSI_T : IMSI that have not MIN information - IMSI_O : IMSI that ME use practically in CDMA mode. - IMSI_S : IMSI that is low 10 digits of IMSI (in case of MIN based IMSI, low 10 digits is MIN . It would be said IMSI_M_S.) Class - Class 0 IMSI : NMSI is just 12 digits. - Class 1 IMSI : NMSI is fewer than 12 digits. service_option table description HEXDECNAMEDESCRIPTION 0 x00011VOICE_IS96A Basic Variable Rate Voice Service (IS-96A) 0 x00022LOOPBACK Mobile Station Loopback (IS-126) 0 x00033VOICE_EVRC Enhanced Variable Rate Voice Service 0 x00044ASYNC_DATA_PRE707 Asynchronous Data Service (IS-99) 0 x00055G3_FAX_PRE707 Group 3 FAX Service (IS-99) 0 x00066SMS Short Message Services (IS-637) 0 x00077PPP_PKT_DATA_PRE707 Internet Standard PPP Packet Data Service (IS-657) 0 x00099LOOPBACK_13K Mobile Station Loopback (IS-126) 0 x000C12ASYNC_DATA_13K_PRE707 Asynchronous Data Service (IS-99) over Rate set 2 0 x000D13G3_FAX_13K_PRE707 Group 3 FAX Service (IS-9