Wireless and mobile all-IP networks

P1: OSM/FFX P2: OSM/FFX QC: OSM/FFX T1: OSM

GRBT093-DRI Lin-2306G GRBT093-Lin-v5.cls September 26, 2005 5:54

Wireless and Mobile

All-IP Networks

Yi-Bing Lin and Ai-Chun Pang

Wiley Publishing, Inc.

i

TEAM LinG

P1: OSM/FFX P2: OSM/FFX QC: OSM/FFX T1: OSM

GRBT093-DRI Lin-2306G GRBT093-Lin-v5.cls September 26, 2005 5:54

Wireless and Mobile All-IP Networks

Published by

Wiley Publishing, Inc.

10475 Crosspoint Boulevard

Indianapolis, IN 46256

Copyright © 2005 by Wiley Publishing, Inc., Indianapolis, Indiana

Published simultaneously in Canada

ISBN: 0-471-74922-2

Manufactured in the United States of America

10987654321

No part of this publication may be reproduced, stored in a retrieval system or transmitted in

any form or by any means, electronic, mechanical, photocopying, recording, scanning or oth￾erwise, except as permitted under Sections 107 or 108 of the 1976 United States Copyright Act,

without either the prior written permission of the Publisher, or authorization through pay￾ment of the appropriate per-copy fee to the Copyright Clearance Center, 222 Rosewood Drive,

Danvers, MA 01923, (978) 750-8400, fax (978) 646-8600. Requests to the Publisher for

permission should be addressed to the Legal Department, Wiley Publishing, Inc., 10475

Crosspoint Blvd., Indianapolis, IN 46256, (317) 572-3447, fax (317) 572-4355, e-mail:

[email protected].

Limit of Liability/Disclaimer of Warranty: The publisher and the author make no rep￾resentations or warranties with respect to the accuracy or completeness of the contents of

this work and specifically disclaim all warranties, including without limitation warranties of

fitness for a particular purpose. No warranty may be created or extended by sales or pro￾motional materials. The advice and strategies contained herein may not be suitable for every

situation. This work is sold with the understanding that the publisher is not engaged in ren￾dering legal, accounting, or other professional services. If professional assistance is required,

the services of a competent professional person should be sought. Neither the publisher nor

the author shall be liable for damages arising herefrom. The fact that an organization or

Website is referred to in this work as a citation and/or a potential source of further informa￾tion does not mean that the author or the publisher endorses the information the organization

or Website may provide or recommendations it may make. Further, readers should be aware

that Internet Websites listed in this work may have changed or disappeared between when

this work was written and when it is read.

For general information on our other products and services or to obtain technical support,

please contact our Customer Care Department within the U.S. at (800) 762-2974, outside the

U.S. at (317) 572-3993 or fax (317) 572-4002.

Wiley also publishes its books in a variety of electronic formats. Some content that appears

in print may not be available in electronic books.

Trademarks: Wiley, the Wiley logo, and related trade dress are trademarks or registered

trademarks of John Wiley & Sons, Inc. and/or its affiliates, in the United States and other

countries, and may not be used without written permission. ExtremeTech and the Extreme￾Tech logo are trademarks of Ziff Davis Publishing Holdings, Inc. Used under license. All rights

reserved. All other trademarks are the property of their respective owners. Wiley Publishing,

Inc., is not associated with any product or vendor mentioned in this book.

ii

P1: OSM/FFX P2: OSM/FFX QC: OSM/FFX T1: OSM

GRBT093-DRI Lin-2306G GRBT093-Lin-v5.cls September 26, 2005 5:54

About the Authors

Yi-Bing Lin is chair professor of the Department of Computer Science and

Information Engineering (CSIE), National Chiao Tung University (NCTU).

He also serves as vice president of the Office of Research and Development,

NCTU (2005–2006). Dr. Lin is a senior technical editor of IEEE Network, an

editor of IEEE Transactions on Wireless Communications, an associate

editor of IEEE Transactions on Vehicular Technology, an editor of IEEE

Wireless Communications Magazine, an editor of ACM Wireless Networks,

program chair for the 8th Workshop on Distributed and Parallel Simulation,

general chair for the 9th Workshop on Distributed and Parallel Simulation,

program chair for the 2nd International Mobile Computing Conference, guest

editor for the ACM MONET special issue on Personal Communications,

guest editor for IEEE Transactions on Computers special issue on Mobile

Computing, guest editor for IEEE Transactions on Computers special issue

on Wireless Internet, and guest editor forIEEE Communications Magazine

special issue on Active, Programmable, and Mobile Code Networking. Lin

is co-author of the book Wireless and Mobile Network Architecture (with

Imrich Chlamtac; published by John Wiley & Sons). Lin received 1997, 1999,

and 2001 Distinguished Research Awards from the National Science Council,

ROC; the 2005 Pan, Wen-Yuen Outstanding Research Award; the 2004 K.-T.

Li Breakthrough Award; and the 1998 Outstanding Youth Electrical Engineer

Award from CIEE, ROC. He also received the NCTU Outstanding Teaching

Award in 2002. Lin is an Adjunct Research Fellow of Academia Sinica, and

is an adjunct chair professor of Providence University. He is also an IEEE

Fellow, an ACM Fellow, an AAAS Fellow, and an IEE Fellow.

iii

P1: OSM/FFX P2: OSM/FFX QC: OSM/FFX T1: OSM

GRBT093-DRI Lin-2306G GRBT093-Lin-v5.cls September 26, 2005 5:54

iv About the Authors

Ai-Chun Pang received B.S., M.S., and Ph.D. degrees in Computer

Science and Information Engineering from National Chiao Tung University.

She joined the Department of Computer Science and Information Engineer￾ing, National Taiwan University, Taipei, Taiwan, as an Assistant Professor

in 2002 and an Associate Professor in 2006. Since August 2004, Dr. Pang has

also joined in the Graduate Institute of Networking and Multimedia, National

Taiwan University, Taipei, Taiwan. Her research interests include design and

analysis of personal communications services networks, mobile computing,

voice over IP, and performance modeling.

P1: OSM/FFX P2: OSM/FFX QC: OSM/FFX T1: OSM

GRBT093-DRI Lin-2306G GRBT093-Lin-v5.cls September 26, 2005 5:54

Credits

Executive Editor

Carol Long

Development Editor

Luann Rouff

Production Editor

Pamela Hanley

Copy Editor

Luann Rouff

Editorial Manager

Mary Beth Wakefield

Vice President & Executive

Group Publisher

Richard Swadley

Vice President and Publisher

Joseph B. Wikert

Composition

TechBooks

Proofreading

Publication Services

v

P1: OSM/FFX P2: OSM/FFX QC: OSM/FFX T1: OSM

GRBT093-DRI Lin-2306G GRBT093-Lin-v5.cls September 26, 2005 5:54

vi

P1: OSM/FFX P2: OSM/FFX QC: OSM/FFX T1: OSM

GRBT093-DRI Lin-2306G GRBT093-Lin-v5.cls September 26, 2005 5:54

Contents

Acknowledgments xv

Introduction xvii

1 Short Message Service and IP Network Integration 1

1.1 SMS-IP Integration with SM-SC 3

1.1.1 NCTU Short Message System 4

1.1.2 Statistics for SMS Delivery 7

1.2 iSMS System Architecture 10

1.3 iSMS Communication Protocols 14

1.3.1 SMS AT Command Set 15

1.3.2 iSMS Communication API 17

1.3.3 Implementation of an Echo Server 18

1.4 Examples of Services 20

1.4.1 Accessing the Web from GSM MSs 20

1.4.2 Handset Music Service 23

1.4.3 Train Schedule System 25

1.4.4 Other iSMS Services 26

1.5 Caching for iSMS-Based Wireless

Data Access 29

1.6 Concluding Remarks 34

1.7 Questions 36

2 Mobility Management for GPRS and UMTS 39

2.1 Network Architectures 39

2.2 Concepts of Mobility Management 45

2.3 Mobility Management States 48

vii

P1: OSM/FFX P2: OSM/FFX QC: OSM/FFX T1: OSM

GRBT093-DRI Lin-2306G GRBT093-Lin-v5.cls September 26, 2005 5:54

viii Contents

2.4 MM and PDP Contexts 51

2.4.1 Contexts in SGSN 51

2.4.2 Contexts in the MS 54

2.4.3 Relationship between the MM States and the

Contexts 55

2.5 Attach and Detach 56

2.6 Location Update 59

2.7 Serving RNC Relocation 64

2.8 UMTS-GPRS Intersystem Change 70

2.8.1 SGSN Change from UMTS to GPRS 70

2.8.2 SGSN Change from GPRS to UMTS 72

2.9 Concluding Remarks 73

2.10 Questions 74

3 Session Management for Serving GPRS Support Node 77

3.1 Session Management Functions 80

3.1.1 PDP Context Activation 80

3.1.2 PDP Context Deactivation 83

3.1.3 PDP Context Modification 85

3.2 SM Software Architecture 86

3.2.1 SM REGistration 86

3.2.2 SNDCP SM 88

3.2.3 Relay Unit 89

3.2.4 QoS Manager 89

3.2.5 GMM SM 89

3.2.6 Maintenance Unit and Operating Service 90

3.2.7 Network Manager 90

3.2.8 SM for UMTS 90

3.3 SM Software Initiation and Configuration 91

3.3.1 Initiation 91

3.3.2 Configuration 93

3.4 SM Procedures in the SGSN 93

3.4.1 PDP Context Activation 93

3.4.2 PDP Context Deactivation 97

3.4.3 PDP Context Modification 101

3.5 Concluding Remarks 103

3.6 Questions 103

4 Session Management for Gateway GPRS Support Node 105

4.1 APN Allocation 108

4.2 IP Address Allocation 110

4.3 PDP Context Activation 112

P1: OSM/FFX P2: OSM/FFX QC: OSM/FFX T1: OSM

GRBT093-DRI Lin-2306G GRBT093-Lin-v5.cls September 26, 2005 5:54

Contents ix

4.4 Tunneling between UMTS and External PDN 115

4.5 Quality of Service 118

4.6 Concluding Remarks 123

4.7 Questions 124

5 Serving Radio Network Controller Relocation for UMTS 125

5.1 SRNC Duplication 127

5.2 Core Network Bi-casting 130

5.3 Fast SRNC Relocation 132

5.4 Comparison of the Relocation Mechanisms 135

5.5 Concluding Remarks 137

5.6 Questions 137

6 UMTS and cdma2000 Mobile

Core Networks 143

6.1 UMTS and cdma2000 Protocol Stacks 146

6.1.1 Point-to-Point Protocol 149

6.1.2 Tunneling Protocols 150

6.2 Mobility and Session Management Mechanisms 151

6.2.1 Mobility Management 152

6.2.2 Session Management 154

6.2.3 Remarks on Mobility and Session Management 157

6.3 IP Mobility 157

6.4 UMTS and cdma2000 Interworking 164

6.5 Concluding Remarks 167

6.6 Questions 168

7 UMTS Charging Protocol 171

7.1 The GTP’ Protocol 173

7.2 Connection Setup Procedure 176

7.3 GTP’ CDR Transfer Procedure 177

7.4 GTP’ Failure Detection 178

7.5 Concluding Remarks 180

7.6 Questions 182

8 Mobile All-IP Network Signaling 185

8.1 Signaling System Number 7 186

8.2 Stream Control Transmission Protocol (SCTP) 190

8.3 UMTS Network Signaling 193

P1: OSM/FFX P2: OSM/FFX QC: OSM/FFX T1: OSM

GRBT093-DRI Lin-2306G GRBT093-Lin-v5.cls September 26, 2005 5:54

x Contents

8.4 UMTS MAP Software Architecture 196

8.4.1 The MAP Layer Architecture 196

8.4.2 An MTP-based SS7 Implementation 197

8.4.3 An SCTP-based SS7 Implementation 199

8.5 TCAP and SCCP Based on M3UA 201

8.5.1 SCCP Stack Entity 202

8.5.2 TCAP Stack Entity 203

8.6 MAP Message Delivery 207

8.7 SCTP and MTP Approaches 210

8.7.1 Message Format 210

8.7.2 Connection Setup 213

8.7.3 Data Transmission 217

8.8 Concluding Remarks 223

8.9 Questions 223

9 UMTS Security and Availability Issues 225

9.1 Authentication Signaling for UMTS 225

9.1.1 UMTS Authentication Procedure 227

9.1.2 Network Traffic Due to UMTS Authentication 229

9.2 Fraudulent Usage in UMTS 230

9.2.1 Circuit-Switched Registration and Call Termination 231

9.2.2 Fraudulent Registration and Call Setup 235

9.3 Eavesdropping a Mobile User 239

9.4 HLR Failure Restoration 242

9.5 Concluding Remarks 245

9.6 Questions 246

10 VoIP for the Non-All-IP Mobile Networks 255

10.1 GSM-IP: VoIP Service for GSM 256

10.1.1 MGCP Connection Model and the GSM-IP

Architecture 259

10.1.2 GSM-IP Message Flows 261

10.2 vGPRS: VoIP Service for GPRS 274

10.2.1 Registration 277

10.2.2 MS Call Origination 279

10.2.3 MS Call Termination 281

10.2.4 Intersystem Handoff 283

10.2.5 Comparing vGPRS and

3GPP TR 21.978 285

10.3 Concluding Remarks 288

10.4 Questions 289

P1: OSM/FFX P2: OSM/FFX QC: OSM/FFX T1: OSM

GRBT093-DRI Lin-2306G GRBT093-Lin-v5.cls September 26, 2005 5:54

Contents xi

11 Multicast for Mobile Multimedia Messaging Service 291

11.1 Existing Multicast Mechanisms for Mobile

Networks 294

11.2 The SMS Multicast Approach III 296

11.2.1 Location Tracking of the Multicast Members 297

11.2.2 Mobile Multicast Message Delivery 298

11.3 The MMS Multicast Approach IV 300

11.3.1 Location Tracking of the Multicast Members 301

11.3.2 Mobile Multicast Message Delivery 305

11.4 Concluding Remarks 306

11.5 Questions 307

12 Session Initiation Protocol 309

12.1 An Overview of SIP 309

12.2 SIP-based GPRS Push Mechanism 316

12.3 SIP-based VoIP Prepaid Mechanism 319

12.3.1 Prepaid Call Setup 323

12.3.2 Forced Termination of a Prepaid Call 325

12.4 Concluding Remarks 326

12.5 Questions 326

13 Mobile Number Portability 329

13.1 Number Portability for Mobile Telecommunications

Networks 332

13.2 Call Routing Mechanisms with Number Portability 333

13.2.1 The SRF-based Solution for Call-Related Signaling 335

13.2.2 The SRF-based Solution for Noncall-Related

Signaling 339

13.2.3 The IN-based Solution for Call-Related Signaling 341

13.3 Number Porting and Cost Recovery 343

13.3.1 Number Porting Administration 343

13.3.2 Costs of Number Portability 346

13.4 Concluding Remarks 348

13.5 Questions 349

14 Integration of WLAN and Cellular Networks 351

14.1 The WGSN Approach 353

14.1.1 WGSN Network Architecture 353

14.1.2 WGSN Features 354

14.2 Implementation of WGSN 356

14.3 Attach and Detach 362

P1: OSM/FFX P2: OSM/FFX QC: OSM/FFX T1: OSM

GRBT093-DRI Lin-2306G GRBT093-Lin-v5.cls September 26, 2005 5:54

xii Contents

14.4 WGSN Push Mechanism 366

14.5 IEEE 802.1X-based Authentication 368

14.5.1 Related Protocols for IEEE 802.1X Authentication 370

14.5.2 SIM-based IEEE 802.1X Authentication 373

14.5.3 EAPOL Timers 376

14.6 Concluding Remarks 378

14.7 Questions 379

15 UMTS All-IP Network 381

15.1 All-IP Architecture 382

15.1.1 Option 1 for All-IP Architecture 382

15.1.2 Option 2 for All-IP Architecture 385

15.1.3 Partitioning of All-IP Architecture in Horizontal

Layers 386

15.2 All-IP Core Network Nodes 387

15.2.1 Call Session Control Function 388

15.2.2 Home Subscriber Server 389

15.2.3 Other Network Nodes 390

15.3 Registration and Call Control 391

15.3.1 Application-Level Registration 392

15.3.2 CS Mobile Call Origination 395

15.3.3 PS Mobile Call Origination 396

15.3.4 PS Mobile Call Termination 400

15.4 Open Service Access 403

15.5 Efficiency of IP Packet Delivery 407

15.6 Concluding Remarks 409

15.7 Questions 410

16 Issues for the IP Multimedia Core Network Subsystem 413

16.1 Caching in I-CSCF 414

16.1.1 Standard IMS Registration and Call Setup 414

16.1.2 IMS Registration and Call Setup with Cache 416

16.2 Integrated Authentication

for GPRS and IMS 421

16.2.1 3GPP Two-Pass Authentication 422

16.2.2 One-Pass Authentication Procedure 425

16.2.3 Correctness of the One-Pass Procedure 429

16.3 Concluding Remarks 432

16.4 Questions 432

17 A Proxy-based Mobile Service Platform 439

17.1 iProxy Middleware 442

P1: OSM/FFX P2: OSM/FFX QC: OSM/FFX T1: OSM

GRBT093-DRI Lin-2306G GRBT093-Lin-v5.cls September 26, 2005 5:54

Contents xiii

17.1.1 iProxy System Architecture 442

17.1.2 Personal Services 447

17.2 iMobile Service Platform 450

17.2.1 Dev-Let 451

17.2.2 Info-Let 453

17.2.3 App-Let 458

17.3 User and Device Management 459

17.3.1 Device Profile and Device-to-User Mapping 459

17.3.2 User Profile 461

17.4 iMobile-based Peer-to-Peer Mobile Computing 462

17.4.1 iMobile ME Services 465

17.4.2 Queue Synchronization 465

17.5 Concluding Remarks 468

17.6 Questions 468

Bibliography 471

Index 487

P1: OSM/FFX P2: OSM/FFX QC: OSM/FFX T1: OSM

GRBT093-DRI Lin-2306G GRBT093-Lin-v5.cls September 26, 2005 5:54

xiv