1 Introduction. 2 Assumptions. Implementing roaming for OpenBTS



Similar documents
GSM and IN Architecture

Wireless and Mobile Network Architecture

Mobile Communications

Mobile Networking. SS7 Network Architecture. Purpose. Mobile Network Signaling

An Oracle White Paper November Typical Key Performance Indicator Reports for Performance Intelligence Centers

Global System for Mobile Communication Technology

Chapter 10 VoIP for the Non-All-IP Mobile Networks

Worldwide attacks on SS7 network

Mobile Application Part protocol implementation in OPNET

The GSM and GPRS network T /301

Intelligent Networks. John Anderson. Principles and ApplicaHons. The Institution of Electrical Engineers

SS7: Locate. Track. Manipulate.

TELECOMMUNICATIONS REGULATORY AUTHORITY BAHRAIN. Bahrain Number Portability Implementation Routing and Charging specification

Wireless and Mobile Network Architecture

SS7 & LTE Stack Attack

Digital Communications Exploring SS7 signaling fraud that threatens mobile network security and subscriber privacy

Advanced SIP Series: SIP and 3GPP

GSM Voice Mail Service TDM Call Control

MODELLING OF INTELLIGENCE IN INTERNET TELEPHONE SYSTEM

End-2-End QoS Provisioning in UMTS networks

EAP-SIM Authentication using Interlink Networks RAD-Series RADIUS Server

GSM Architecture and Interfaces

Advanced SIP Series: SIP and 3GPP Operations

How To Connect Gsm To Ip On A Gsm Network On A Pnet On A Microsoft Cell Phone On A Pc Or Ip On An Ip Onc (Gsm) On A Network On An Iph (Gms) On An

ETSI ETR 363 TECHNICAL January 1997 REPORT

Mobile SCTP Transport Layer Mobility Management for the Internet

IMT-2000 Network Architecture

Toolkit for vulnerability assessment in 3G networks. Kameswari Kotapati The Pennsylvania State University University Park PA 16802

2 System introduction

Cleep Solution Description

OpenBTS and the Future of Cellular Networks

Dodatek 1 - wyja nienie skrótów UTE Marek redniawa

Mobility Management 嚴 力 行 高 雄 大 學 資 工 系

3GPP TS V8.0.0 ( )

Nokia Siemens Networks his 700 Integrated signaling application solutions

GSM GSM TECHNICAL November 1996 SPECIFICATION Version 5.0.0

Internet Protocol (IP)/Intelligent Network (IN) Integration

GSM Architecture Training Document

GeoMatrix. Positioning of Mobile Phones System

Overview of Network Architecture Alternatives for 3GPP2 Femto Cells Jen M. Chen, et al. QUALCOMM Incorporated

SIP Based Architecture for Integration of 1xRTT Femtocells

EP A1 (19) (11) EP A1 (12) EUROPEAN PATENT APPLICATION. (43) Date of publication: Bulletin 2006/26

Mobile Wireless Overview

Juha Heinänen

Introduction to SS7 Signaling This tutorial provides an overview of Signaling System No. 7 (SS7) network architecture and protocols

ETSI TR V8.0.0 ( )

VITAL. Enabling convergence of IP Multimedia Services over NGN Technology. Contents. Project overview. VITAL Platform. User scenarios.

Global System for Mobile Communications (GSM)

II. Service deployment

M E M O R A N D U M. Wireless Roaming Services for Emergency Medical Facilities

Provides a communication link between MS and MSC; Manages DB for MS location. Controls user connection. Transmission.

CHANGE REQUEST CR xx

3G TR V3.0.0 ( )

SIP Roaming Server Product Overview. Mobile Convergence Technology

4th European Tcl/Tk User Meeting. Tcl used for testing in the mobile world

INTELLIGENT NETWORK SERVICES MIGRATION MORE VALUE FOR THE

SERVICE PROVIDER ACCESS IN MOBILE NETWORKS. March 2003

Theory and Practice. IT-Security: GSM Location System Syslog XP 3.7. Mobile Communication. December 18, GSM Location System Syslog XP 3.

Chapter 10 Session Initiation Protocol. Prof. Yuh-Shyan Chen Department of Computer Science and Information Engineering National Taipei University

Preparatory Meeting for Phase 2 of Philippine National ENUM Trial

This tutorial gives provides an introduction to the terms and structure of the Signalling System Number 7 (SS7) protocol.

1. Public Switched Telephone Networks vs. Internet Protocol Networks

Mobile Security. Practical attacks using cheap equipment. Business France. Presented the 07/06/2016. For. By Sébastien Dudek

VoIP-PSTN Interoperability by Asterisk and SS7 Signalling

Technical Specification Railway Telecommunications (RT); Rel-4 Core Network requirements for GSM-R

MAP/C SEND ROUTING INFO FOR SM. Destination Mobile Number. Obtain the SS7 address of the MSC VLR currently serving the specified Mobile Number

EE4607 Session Initiation Protocol

Lecture overview. History of cellular systems (1G) GSM introduction. Basic architecture of GSM system. Basic radio transmission parameters of GSM

Mobility Management Alternatives for Migration to Mobile Internet Session-Based Services

ETSI SMG3 Plenary Meeting #7, Madrid, Spain 13 th 15 th March 2000

ETSI TS V7.5.0 ( )

SMS SS7 Fraud February 2005

Dialogic Distributed Signaling Interface Protocol Stacks

GSM GPRS. Course requirements: Understanding Telecommunications book by Ericsson (Part D PLMN) + supporting material (= these slides)

3GPP TS V7.0.0 ( )

Protecting Mobile Networks from SS7 Attacks. Telesoft White Papers

Operation Manual Voice Overview (Voice Volume) Table of Contents

Mobile SMS and Data Roaming Explained

Teknillinen Korkeakoulu Teletekniikan laboratorio S Teletekniikan erikoistyö. General Packet Radio Service

GPRS Overview. GPRS = General Packet Radio Service. GPRS Network

3GPP TR V3.1.0 ( )

Wireless Mobile Telephony

Delivery of Voice and Text Messages over LTE

Cellular Networks: Background and Classical Vulnerabilities

UMTS/GPRS system overview from an IP addressing perspective. David Kessens Jonne Soininen

Cellular Technology Sections 6.4 & 6.7

SOLUTIONS FOR ROAMING AND INTEROPERABILITY PROBLEMS BETWEEN LTE AND 2G OR 3G NETWORKS

GSM Databases. Virginia Location Area HLR Vienna Cell Virginia BSC. Virginia MSC VLR

GSM BASICS GSM HISTORY:

The Intel NetStructure SIU520 Signaling Interface

Global System for Mobile Communication (GSM)

Integrating VoIP Phones and IP PBX s with VidyoGateway

Penetrating into Mobile Market

Mobile Office Security Requirements for the Mobile Office

IP Multimedia System: general aspects and migration perspectives

of the existing VoLTE roaming and interconnection architecture. This article compares existing circuit-switched models with the earlier

GSM System Architecture

Network Security. Chapter 14. Security Aspects of Mobile Communications

USING THE SGCP INTERACTIVE CONTROL PANEL FOR IP TELEPHONY TESTING

Solution for Non-Repudiation in GSM WAP Applications

Transcription:

Implementing roaming for OpenBTS 1 Introduction One of the main advantages of OpenBTS TM system architecture is absence of a legacy GSM core network. SIP is used for registering, call control and messaging. Such an approach allows easily perform test calls in the lab and mostly eliminate the cost of the core network while deploying. Lack of E1 interfaces and various GSM nodes (BSC, MSC, HLR, SCF etc) is an advantage for greenfield cases, while it makes impossible to integrate OpenBTS system into existing GSM world. ETSI specifies a list of GSM core network elements and their performance. A set of sophisticated signaling protocols called SS7 is used for interfacing. A subset of protocols varies depending on the network element. GSM Mobile Application Part (MAP) is one of the application level protocols that is the must for roaming. In the case of roaming it determines transactions between HLR/AUC, MSC/VLR, SMSC and USSD servers. Another application protocol is CAMEL (Customized Application for Mobile Enhanced Logic) or CAP (CAMEL Application Part), that extends GSM core network performance and introduces IN (intelligent Network) philosophy. When discussing GSM roaming technical implementation, we must separately discuss 2 cases: allowing OpenBTS subscribers to roam and serving foreign subscribers in OpenBTS network. In the first case, at least GMSC and HLR/AuC elements must me implemented and corresponding MAP procedures supported. In the second case, our MSC/VLR must be reachable from outside world. If CAMEL is used, first case must be extended with SCP (Service Control Point), and the second one requires MSC to act as SSP (Service Switching Point). We should also mention that MAP is just the upper layer protocol that requires a complete SS7 stack to be supported, including SS7 MTP (2 layers: link and network), SCCP and TCAP. Another architectural issue worth mentioning is SIP registrar, that currently unites functionality of both legacy HLR and VLR. Meanwhile their goals are different, and the related procedures are defined in GSM documents. Currently SQLite DB of the registrar is used by Asterisk/FreeSWITCH scripts for routing, to convert MSISDN to OpenBTS ip. This works fine while a system is isolated, but as soon as foreign subscribers will appear and home subscribers will start roam, such a mixture will be a bottle neck. 2 Assumptions As the first step towards a legacy GSM world, few MAP scenarios are needed for both incoming and outgoing roaming. So, let us initially initially assume that: only voice calls and SMs are served supplementary services are not supported CAMEL is not used. In fact, this mostly eliminates the value. Meanwhile this functionality will be added later on, and it is reflected in scenarios below: one can use MAP without CAP, while CAP is useless if MAP is not supported. So, CAMEL implementation is just the next phase. ISUP can be replaced with SIP for call control purposes. This is not an issue, cause SIP-to-ISUP conversion is a common practice at PSTN GSM authentication is skipped (IMSIs are trusted) and no encryption is used. The only reason is to focus at GSM core signaling and to reduce the initial amount of code, while there are no obstacles to use both OpenBTS features. MAP version negotiation is skipped, MAP v3 is everywhere 1/5

3 Changes to existing system As mentioned earlier, it seems reasonable to keep all the advantages of the system in hand. The only change we need is to move MSISDN-to-IMSI translation closer to SIP Registrar. This also allows to reduce custom scripts from Asterisk/FreeSWITCH. SIP PBX will route INVITE to the updated node, that will reply with SIP 302 Moved Temporary, providing IMSI and redirecting a call to the particular OpenBTS instance (fig.1). Fig.1 SIP-based MSISDN-to-IMSI translation Other changes are required to support roaming related procedures. We are introducing two logical elements: Incoming Roaming Gateway (irgw) to allow foreign subscribers to use our network resources, Outgoing Roaming Gateway (orgw) to let our subscribers to roam An updated SIP Registrar must get the knowledge about own MCC and MNC, and route registration attempts of foreign IMSIs to IRGW. SIP registrar will supply multiple triplets per a request. 2/5

4 Incoming Roaming Architecture GSM MAP defines about 80 services, while the key to understand them is MT call. Let us follow both registration and MT call setup procedures for a (foreign) roamer. 4.1 Incoming Roaming. Registration. Fig.2. Registering a roamer As shown at fig.2, SIP Registrar detects a roamer and allows IRGW to perform the sequence. After the procedure performed, IRGW will have both a set of triplets and the knowledge about location. 3/5

4.2 Incoming Roaming. MT call As mentioned earlier, MT call is one of the key GSM scenarios. In a legacy world, each VLR has a set of E.164 numbers, that are dynamically allocated during call setup. Please find MT call scenario at fig.3. Asterisk/whatever-else knows E.164 numbering range that is allocated for VLR activities. Fig.3 Incoming Roaming, MT call setup So, IRGW is a VLR for roaming. Later on, when CAMEL SSF (service switching function) will be implemented, SIP 302 Moved Temporary at the 7-th step will be replaced with INVITE, so IRGW will be able to control each phase of a call. 4/5

5 Outgoing Roaming Outgoing roaming implementation is quite native for OpenBTS. ORGW is treated as an ordinary BTS. When a mobile is registered outside a home network, OpenBTS considers that a MS is located at ORGW (fig.4). Fig.4 Outgoing Roaming, MT call setup I'll appreciate any comments. Hope to start implementing Roaming when there will be enough time for it 2013. Open source version of handover http://wush.net/trac/rangepublic/wiki/handover is supposed to be finished. Dmitri Soloviev, Ph. D http://opensigtran.org http://telecomequipment.narod.ru/en http://fairwaves.ru 5/5