11.China CAI Message

8/16/2019 11.China CAI Message

1/70

Dr.CDMA - 1 - Do not copy without permission

CAI Message Analysis

For IS95A/B

2002.2nd Quarter


2/70


1.23MHz(1FA)

64 channels(64ry walsh codes)

Forward link

Pilot(1 EA)

Sync(1 EA)

Paging(1 EA in general)

Forward Traffic Channels

PN code sequence

with no data

– Sync to BTS

Sync to GPS time

on CDMA networks

Send overhead messages

to a mobile phone andpage a mobile phone etc.

Send signaling message and

Send voice data to a mobile

phone.

Channel Type

? Forward Link


3/70


1.23MHz(1FA)

Reverse link

Access

(1 EA in general)

Reverse Traffic Channels

Send registration messages

to a BTS and send originationmessages a BTS etc.

Send signaling message and

Send voice data to a BTS.

Channel Type

? Reverse Link


4/70


Channel Type

Pilot Channel

Sync Channel

Paging Channel

Access Channel

Forward Traffic Channel

Reverse Traffic Channel

Channel Type Characteristics

M : 1

M : 1

1 : 1

1 : 1


5/70


Message Type

Type 1

Broadcast Message

Dedicated Message

Type 2

One Way MessageBi-Directional Message

ACK_SEQ

MSG_SEQ

ACK_REQ

ACK_SEQ

MSG_SEQ

ACK_REQ (1)

Request Response

REF_MSG_SEQ REF_MSG_SEQ

ReferenceREF_MSG_SEQ


6/70


System Access

? Pilot Channel

? Sync Channel Message

? Channel List Message

? Registration Message

? Registration Accepted Order

Pilot Channel

Sync Channel Message

Registration

Registration Accepted Order

Channel List Message

(Pilot)

(Sync)

(Paging)

(Access)

(Paging)


7/70


Call Origination

? Origination Message

? Base Station Order(Ack)

? Channel Assignment Message


? Mobile Station Order(Ack)

?

Service Connect? Service Connect Completion


? Alert With Information


Origination Message

Base Station Order(Ack)

Channel Assignment Message



Mobile Station Order(Ack)

Service Connect Message

Service Connect Completion Message

Alert With Information Message


(Paging)

(Access)

(Paging)

(F-Traf )

(F-Traf )

(F-Traf )

(F-Traf )

(R-Traf )

(R-Traf )

(R-Traf )

? Service Option Response (F-Traf )(CF)


8/70


Call Response

? Slotted(General) Page Message

? Page Response Message


? Channel Assignment Message


?

Mobile Station Order(Ack)? Service Connect

? Service Connect Completion


? Alert With Information


? Mobile Station Order(Connect)


Slotted(General) Page Message

Page Response Message

Channel Assignment Message




Service Connect Message

Service Connect Completion Message

Alert With Information Message


Mobile Station Order(Connect)



(Paging)

(Access)

(Paging)

(F-Traf )

(F-Traf )

(F-Traf )

(F-Traf )

(R-Traf )

(R-Traf )

(R-Traf )

(Paging)

(R-Traf )

(F-Traf )

? Service Option Response (F-Traf )(CF)


9/70


Call Release

? Mobile Station Order(Release)

? Base Station Order(Release)

Mobile Station Order(Release)

Base Station Order(Release)(F-Traf )

(R-Traf )


10/70


Handoff Process

? Pilot Strength Measurement Message


? Handoff Direction Message


? Handoff Completion Message

?


Pilot Strength Measurement Message



Handoff Completion Message


Handoff Direction Message

(F-Traf )

(R-Traf )

(F-Traf )

(F-Traf )

(R-Traf )

(R-Traf )


11/70


System Parameter Update

? System Parameter Message

? Access Parameter Message

? Neighbor List Message

? In-Traffic System Parameter Message

? Neighbor List Update Message

System Parameter Message

Access Parameter Message

Neighbor List Update Message

In-Traffic System Parameter Message

Neighbor List Message

(Paging)

(Paging)

(Paging)

(F-Traf )

(F-Traf )


12/70


ETC Message

? Data Burst Message

? Send Burst DTMF Message

Status Packet

? General TA w/sup Channel information

? General TA information

? Finger information

? Searcher information

? Searcher and Finger information

? Access Probe information

? Markov statistics

? Sparse AGC Power Control information

Data Burst Message

Send Burst DTMF Message

(Paging)

(F-Traf )

(Access)

(R-Traf )

(R-Traf )


13/70


System Access

? Sync Channel Message[ 2001 Nov 22 07:48:26.986 ] Sync Channel

PROTOCOL_REV : 3

Sync channel message

MSG_TYPE: 1

P_REV: 3

MIN_P_REV: 2

SID: 13824

NID: 2PILOT_PN: 426(0x01AA)

LC_STATE[HI]: 455

LC_STATE[LO]: 2716887334

SYS_TIME[HI]: 2

SYS_TIME[LO]: 40696750

LP_SEC: 13

LTM_OFF: 16

DAYLT: 0

PRAT: 0

CDMA_FREQ: 201(0x00C9)

During Pilot and Sync Channel Processing,

the base station transmits the Pilot Channel and

Sync Channel which the mobile station uses

to acquire and synchronize to the CDMA system.

P_REV protocol revision level

MIN_P_REV minimum protocol revision

SID system identification NID network identification

PILOT_PN PN offset for serving BTS.

LC_STATE long code state

SYS_TIME system time

LP_SEC the number of leap seconds that have

occurred since the start of system time

LTM_OFF offset of local time from system time

DAYLT daylight saving time indicator

PRAT paging channel data rate0 : 9600 bps

1 : 4800 bps

CDMA_FREQ frequency assignment


14/70


System Access

? Channel List Message[ 2001 Nov 22 07:48:27.963 ] Paging Channel

PROTOCOL_REV : 3

CDMA Channel List

MSG_TYPE: 4

PILOT_PN: 426(0x01AA)

CONFIG_MSG_SEQ: 34

NUM_FREQ :1CDMA_FREQ[0]: 201(0x00C9)

It indicates the number of CDMA channel(FA’s).

MS shall synchronize to the FA that has been

determined in result of Hash function.

PILOT_PN PN offset for serving BTS

CONFIG_MSG_SEQ configuration message sequence number

NUM_FREQ the number of CDMa channels(FA's)

CDMA_FREQ CDMA channel frequency assignment(up to NUM_FREQ)


15/70


System Access

? Registration Message[ 2001 Nov 22 03:36:43.070 ] Access Channel

PROTOCOL_REV : 3

Registration

MSG_TYPE: 1

ACK_SEQ: 7

MSG_SEQ: 5

ACK_REQ: 1

VALID_ACK: 0ACK_TYPE: 0

MSID_TYPE: 0

MSID_LEN: 9

MIN1: (7890635)

MIN2: (1110017)

ESN: 2692405198(0xA07AD7CE)

AUTH_MODE: 0

REG_TYPE : Power Up

SLOT_CYCLE_INDEX: 2 -> 5.120 Sec

MOB_P_REV: 3SCM: 42

MOB_TERM: 1

MS send registration message to BTS when MS

proceed from system access state to registration

sub-state.

If BTS accept registration message legally, it shall

reply accepted order to MS.

MSID_TYPE mobile station identifier field type

MSID mobile station identifier MIN1 first part of the mobile identification number

MIN2 second part of the mobile identification number

ESN mobile station's electronic serial number

AUTH_MODE authentication mode

AUTHR authentication response

RANDC random challenge value

COUNT call history parameter

REG_TYPE registration type

SLOT_CYCLE_INDEX slot cycle index

MOB_P_REV protocol revision of the mobile stationSCM station class mark

MOB_TERM mobile terminated calls accepted indicator


16/70


System Access

? Registration Accepted Order[ 2001 Nov 26 03:21:13.963 ] Paging Channel

PROTOCOL_REV : 3

Order

MSG_TYPE: 7

ACK_SEQ: 5

MSG_SEQ: 1

ACK_REQ: 0

VALID_ACK: 1ADDR_TYPE: 1

ADDR_LEN: 4

ESN: 0xA07AD7CE

ORDER: 27

ADD_RECORD_LEN: 0

Registration Accepted Order

BTS reply registration accepted order message to MS

for registration message

ACK_SEQ ack for message sequence

ADDR_TYPE address type

ESN mobile station's electronic serial number

ORDER order code

ORDQ order qualification code


17/70


Call Origination

? Origination Message

[ 2001 Nov 22 07:44:33.310 ] Access Channel

PROTOCOL_REV : 3

Origination

MSG_TYPE: 4

ACK_SEQ: 7

MSG_SEQ: 6

ACK_REQ: 1

VALID_ACK: 0

ACK_TYPE: 0

MSID_TYPE: 3

MSID_LEN: 9

ESN: 4178081291(0xF908760B)

IMSI_CLASS: 0

IMSI_CLASS_0_TYPE: 0

RESERVED: 0

IMSI_S[HI]: 3IMSI_S[LO]: 3575089031

-> MIN : 0921051014 (0140921592)

AUTH_MODE: 0

MOB_TERM: 1

SLOT_CYCLE_INDEX: 2

MOB_P_PEV: 3

SCM: 42

REQUEST_MODE: 1 -> CDMA ONLY

SPECIAL_SERVICE: 1

SERVICE_OPTION: 3PM: 0

DIGIT_MODE: 0

MORE_FIELDS: 0

NUM_FIELDS: 3

CHARi: 1 2 1

The first message that MS send for call origination.

IMSI international mobile station identifier

REQUEST_MODE

requested mode code

1 : CDMA only

2 : wide analog only

3 : either wide analog or CDMA only

4 : narrow analog only

5 : either narrow analog or CDMA only

6 : either narrow analog or wide analog only

7 : narrow analog or wide analog or CDMA

SPECIAL_SERVICE special service option indicator

SERVICE_OPTION requested service option for this origination

PM privacy mode indicator

(request voice privacy)

DIGIT_MODE

digit mode indicator

0 : 4 bit DTMF

1 : 8 bit ASCII

CHARi a dialed digits or chacters


18/70


Call Origination

? Base Station Order(Ack)[ 2001 Nov 22 07:45:11.003 ] Paging Channel

PROTOCOL_REV : 3

Order

MSG_TYPE: 7

ACK_SEQ: 6

MSG_SEQ: 0

ACK_REQ: 0

VALID_ACK: 1ADDR_TYPE: 2

ADDR_LEN: 5

IMSI_CLASS: 0

IMSI_CLASS_0_TYPE: 0

RESERVED: 0

IMSI_S[HI]: 3

IMSI_S[LO]: 3575089031

-> MIN : 0921051014 (0140921592)

ORDER: 16

ADD_RECORD_LEN: 0Base Station Acknowledgement Order

BTS reply ack order & channel assignment message to

MS for origination message

ACK_SEQ ack for message sequence

ADDR_TYPE address type

IMSI mobile station's electronic serial number

ORDER order code


19/70


20/70


? Base Station Order(Ack)[ 2001 Nov 22 07:45:11.705 ] Forward Traffic Channel

PROTOCOL_REV : 3

Order - Base station acknowledgement

MSG_LENGTH: 8

MSG_TYPE: 1

ACK_SEQ: 7

MSG_SEQ: 0

ACK_REQ: 1ENCRYPTION: 0

USE_TIME: 0

ACTION_TIME: 0

ORDER: 16

ADD_RECORD_LEN: 0

Base Station Acknowledgement Order



Call Origination

Encrypt Mode

message encryption mode

0 : encryption disabled

1 : basic encryption of call control messages

2 : enhanced encryption of call control message

3 : reserved

ACTION_TIMEif USE_TIME = 1, set system time in unit of

80ms.


21/70


Call Origination

? Mobile Station Order(Ack)[ 2001 Nov 22 07:45:11.770 ] Reverse Traffic Channel

PROTOCOL_REV : 3

Order - Mobile station acknowledgement

MSG_Length: 7

MSG_TYPE: 1

ACK_SEQ: 0

MSG_SEQ: 0


ORDER: 16

ADD_RECORD_LEN: 0

Mobile Station Acknowledgement Order



Encrypt Mode





3 : reserved


22/70


Call Origination

? Service Connect [ 2001 Nov 22 07:45:12.005 ] Forward Traffic ChannelPROTOCOL_REV : 3Service connect

MSG_LENGTH: 21

MSG_TYPE: 20

ACK_SEQ: 7

MSG_SEQ: 1

ACK_REQ: 1

ENCRYPTION: 0

USE_TIME: 0ACTION_TIME: 0

SERV_CON_SEQ: 0

RECORD_TYPE: 7

RECORD_LEN: 12

FOR_MUX_OPTION: 1(0x0001)

REV_MUX_OPTION: 1(0x0001)

FOR_RATES: 240

REV_RATES: 240

NUM_CON_REC: 1

RECORD_LEN: 5

CON_REF: 1

SERVICE_OPTION: 3

FOR_TRAFFIC: 1

REV_TRAFFIC: 1

BTS use service connect message to negotiate service

option.

SERV_CON_SEQ connect sequence number

RECORD_TYPEinformation record type

7 : service configuration

FOR_MUX_OPTION forward traffic channel multiplex option

REV_MUX_OPTION reverse traffic channel multiplex option

FOR_RATEStransmission rates of the forward fundamental channel

'11110000' - 9600, 4800, 2400, 1200 support

REV_RATEStransmission rates of the reverse fundamental channel

'11110000' - 9600, 4800, 2400, 1200 support

CON_REF service option connection reference

SERVICE_OPTION service option

FOR_TRAFFIC

forward traffic channel traffic type

0 : do not use forward traffic channel traffic

1 : use primary traffic on the forward traffic channel

2 : use secondary traffic on the forward traffic channel

REV_TRAFFIC reverse traffic channel traffic type


23/70


Call Origination

? Service Connect Completion[ 2001 Nov 22 07:45:12.070 ] Reverse Traffic Channel

PROTOCOL_REV : 3

Service connect completion

MSG_Length: 6

MSG_TYPE: 14

ACK_SEQ: 1

MSG_SEQ: 1


SERV_CON_SEQ: 0

SERV_CON_SEQ connect sequence number

MS reply service connect completion to BTS for service

connect message


24/70


Call Origination

? Service Option Response[ 2001 Nov 26 03:34:54.003 ] Forward Traffic Channel

PROTOCOL_REV : 3

Order - Service option response

MSG_LENGTH: 11

MSG_TYPE: 1

ACK_SEQ: 7

MSG_SEQ: 1


USE_TIME: 0

ACTION_TIME: 0

ORDER: 20

ADD_RECORD_LEN: 3

Service Option Response Order

ORDQ: 0

Service Option: 3

BTS send service option response to to negotiate service

option.

Encrypt Mode





3 : reserved


25/70


26/70


Call Response

? Slotted Page Message

BTS use slotted page message to page MS in slot mode.

But slotted page message is invalid above IS95B.

[ 2001 Nov 26 03:21:05.882 ] Paging Channel

PROTOCOL_REV : 3

Slotted Page

MSG_TYPE: 5

CONFIG_MSG_SEQ: 6

ACC_MSG_SEQ: 56

MORE_PAGES: 0

MSG_SEQ: 0EXT_ADDR: 1

MIN1: 0x1B0527

MIN2: 0x038A

-> MIN : 2191937017(017-219-1306)

SPECIAL_SERVICE: 0

ACC_MSG_SEQ access parameters message sequence number

MORE_PAGES more slotted pages to follow indicator

MIN1first part of the mobile station identification

number

MIN2

second part of the mobile station identification

number

SPECIAL_SERVICE special service option indicator


27/70


Call Response

? General Page Message

BTS use general page message to page MS.[ 2001 Nov 22 07:44:38.922 ] Paging Channel

PROTOCOL_REV : 3

General Page

MSG_TYPE: 17

CONFIG_MSG_SEQ: 32

ACC_MSG_SEQ: 17

CLASS_0_DONE: 1

CLASS_1_DONE: 1TMSI_DONE: 1

ORDERED_TMSIS: 0

BROADCAST_DONE: 1

ADD_LENGTH: 0

ADD_PFIELD:

PAGE_CLASS: 0

PAGE_SUBCLASS: 0

MSG_SEQ: 0

IMSI_S[HI]: 3

IMSI_S[LO]: 3575089121

-> MIN : 0921051004 (0040921592)

Special_Service: 0

ACC_MSG_SEQ access parameters message sequence number

CLASS_0_DONE class 0 pages done

CLASS_1_DONE class 1 pages done

TMSI_DONE TMSI pages are done

ORDERED_TMSIS TMSIs sent in numerical order

BROADCAST_DONE broadcast pages done

PAGE_CLASS class of the page recordPAGE_SUBCLASS subclass of the page record

IMSI international mobile station identifier

Special Service special service option indicator


28/70


Call Response

? Mobile Station Order(Connect)

MS send connect order to notify call connect to BTS.[ 2001 Nov 22 08:34:51.991 ] Reverse Traffic Channel

PROTOCOL_REV : 3

Order - Connect

MSG_Length: 7

MSG_TYPE: 1

ACK_SEQ: 7

MSG_SEQ: 3


ORDER: 24

ADD_RECORD_LEN: 0

Connect Order

Encrypt Mode





3 : reserved


29/70


Call Release

? Mobile Station Order(Release)

MS send release order to notify call termination to BTS.[ 2001 Nov 22 07:47:31.770 ] Reverse Traffic Channel

PROTOCOL_REV : 3

Order - Release

MSG_Length: 7

MSG_TYPE: 1

ACK_SEQ: 7

MSG_SEQ: 5


ORDER: 21

ADD_RECORD_LEN: 0

Release Order (Normal Release)

Encrypt Mode





3 : reserved


30/70


Call Release

? Base Station Order(Release)

BTS send release order to notify call termination to MS.[ 2001 Nov 22 07:47:31.985 ] Forward Traffic Channel

PROTOCOL_REV : 3

Order - release

MSG_LENGTH: 8

MSG_TYPE: 1

ACK_SEQ: 5

MSG_SEQ: 5

ACK_REQ: 0

ENCRYPTION: 0

USE_TIME: 0

ACTION_TIME: 0

ORDER: 21

ADD_RECORD_LEN: 0

Release Order

Encrypt Mode





3 : reserved


31/70


Handoff Process

? Pilot Strength Measurement Message

MS report the signal strength of the searched pilot to

support handoff process.

BTS reply handoff direction message if PSMM is

suitable for handoff.

[ 2001 Nov 22 07:47:45.590 ] Reverse Traffic Channel

PROTOCOL_REV : 3

Pilot strengh measurement

MSG_Length: 10

MSG_TYPE: 5

ACK_SEQ: 2

MSG_SEQ: 1

ACK_REQ: 1

ENCRYPTION: 0

REF_PN: 375

PILOT_STRENGTH: -8.50

KEEP: 1

PN_PHASE : 10167, PN : 159 (-9, Distance : 2195.100 m)

PILOT_STRENGTH: -11.00

KEEP: 1

REF_PN time reference PN sequence offset

PILOT_STRENGTH pilot strength

KEEP keep pilot indicator 0 : drop

1 : maintain or add

PN_PHASE pilot measured phase

PN PN offset number

Distance distancd calculated from chip delay


32/70


Handoff Process

? Handoff Direction Message

BTS send handoff direction message to make handoff

process as for response of PSMM.

When received, MS shall enter handoff process.

But handoff direction message is invalid above IS95B.

[ 2001 Nov 22 03:17:32.820 ] Forward Traffic Channel

PROTOCOL_REV : 3

Handoff direction

MSG_LENGTH: 15

MSG_TYPE: 5ACK_SEQ: 1

MSG_SEQ: 3

ACK_REQ: 1

ENCRYPTION: 0

USE_TIME: 0

ACTION_TIME: 0

HDM_SEQ: 1

SRCH_WIN_A: 9

T_ADD: 20

T_DROP: 24T_COMP: 5

T_TDROP: 3

FRAME_OFFSET: 13

PRIVATE_LCM: 0

RESET_L2: 0

ENCRPT_MODE: 0

FREQ_INCL: 0

PILOT_PN: 444

PWR_COMB_IND: 0CODE_CHAN: 40

PILOT_PN: 350

PWR_COMB_IND: 0

CODE_CHAN: 33

HDM_SEQ handoff direction message sequence number

SRCH_WIN_A search window size for the active set and candidate set

T_ADD pilot detection threshold

T_DROP pilot drop threshold

T_COMP active set versus candidate set comparison threshold

T_TDROP drop timer value

FRAME_OFFSET frame offset * 1.25ms delay relative to system timing

PRIVATE_LCM

private long code mask indicator

0 : do not use

1 : use

RESET_L2 reset acknowledgement procedures command

ENCRPT_MODE message encryption mode

PILOT_PN piolt PN sequence offset index

PWR_COMB_IND

power control symbol combining indicator

1 : same BTS(share power control bits)

0 : different BTS

CODE_CHAN code channel index(walsh code)


33/70


Handoff Process

? Extended Handoff Direction Message

BTS send extended handoff direction message to make

handoff process as for response of PSMM.

When received, MS shall enter handoff process.


PROTOCOL_REV : 3

Extended handoff direction

MSG_LENGTH: 15

MSG_TYPE: 17

ACK_SEQ: 1

MSG_SEQ: 3

ACK_REQ: 1

ENCRYPTION: 0

USE_TIME: 0

ACTION_TIME: 0

HDM_SEQ: 0

SEARCH_INCLUDED: 1

SRCH_WIN_A: 6 -> 28

T_ADD: 28

T_DROP: 32

T_COMP: 8

T_TDROP: 3

HARD_INCLUDED: 0

ADD_LENGTH: 0

PILOT_PN: 375

PWR_COMB_IND: 0

CODE_CHAN: 42

PILOT_PN: 159

PWR_COMB_IND: 0

CODE_CHAN: 9

HDM_SEQ handoff direction message sequence number

SEARCH_INCLUDED pilot search parameters included

SRCH_WIN_A search window size for the active set and candidate set



T_COMP active set versus candidate set comparison threshold


HARD_INCLUDED hard handoff parameters included


PWR_COMB_IND

power control symbol combining indicator

1 : same BTS(share power control bits)

0 : different BTS

CODE_CHAN code channel index(walsh code)


34/70


Handoff Process

? Handoff Completion MessageBTS send release order to notify call termination to MS.

[ 2001 Nov 22 07:47:46.050 ] Reverse Traffic Channel

PROTOCOL_REV : 3

Handoff completion

MSG_Length: 8

MSG_TYPE: 10

ACK_SEQ: 3

MSG_SEQ: 2

ACK_REQ: 1

ENCRYPTION: 0

LAST_HDM_SEQ: 0

PILOT_PN: 375

PILOT_PN: 159

LAST_HDM_SEQ handoff direction message sequence number



35/70



BTS send system parameter message to notify various system information for MS.

? System Parameter Message : Parameters

PWR_REP_THRESH, PWR_REP_FRAMES, PWR_REP_DEALYPower report parameters

NGHBR_MAX_AGE, T_ADD, T_DROP, T_COMP, T_TDROPHandoff parameters

SRCH_WIN_A, SRCH_WIN_N, SRCH_WIN_R, RESCANPilot search parameters

Pilot PN, BASE_ID, BASE_CLASS, BASE_LAT, BASE_LONGBTS information

REG_ZONE, TOTAL_ZONE, ZONE_TIMER, MULTI_SIDS,

MULTI_NIDS, HOME_REG, FOR_SID_REG, FOR_NID_REG,

POWER_UP_REG, POWER_DOWN_REG, PARAMETER_REG,REG_PRD, REG_DIST

Registration parameters

SID, NID, MAX_SLOT_CYCLE_INDEXSystem configuration

ContentsParameters


36/70



? System Parameter Message(1)


PROTOCOL_REV : 3

System Parameters

MSG_TYPE: 1

PILOT_PN: 159

CONFIG_MSG_SEQ: 32

SID: 13824

NID: 2

REG_ZONE: 0

TOTAL_ZONE: 0

ZONE_TIMER: 0

MULT_SIDS: 0MULT_NIDS: 0

BASE_ID: 2681

BASE_CLASS: 0 -> Public Microcellular System

PAGE_CHAN: 1

MAX_SLOT_CYCLE_INDEX: 2 -> 5.120 sec

HOME_REG: 1

FOR_SID_REG: 1

FOR_NID_REG: 1

POWER_UP_REG: 1

POWER_DOWN_REG: 1

PARAMETER_REG: 1

REG_PRD: 0 -> 0.001 min

BASE_LAT: 574652

BASE_LON: 1676668

SID system identification

NID network identification

REG_ZONE registration zone

TOTAL_ZONE number of registration zones to be retained

ZONE_TIMER zone timer length

MULT_SIDS multiple SID storage indicator

MULT_NIDS multiple NID storage indicator

BASE_ID base station identification

BASE_CLASS base station classPAGE_CHAN number of paging channels

MAX_SLOT_CYCLE_INDEX maximum slot cycle index

HOME_REG home registration indicator

FOR_SID_REG SID roamer registration indicator

FOR_NID_REG NID roamer registration indicator

POWER_UP_REG power-up registration indicator

POWER_DOWN_REG power-down registration indicator

PARAMETER_REG parameter change registration indicator

REG_PRD

registration period

0 : disable

others : 2REG_PRD/4

* 0.08 sec

BASE_LAT base station latitude

BASE_LON base station longitude


37/70



? System Parameter Message(2)REG_DIST: 0

SRCH_WIN_A: 6 -> 28

SRCH_WIN_N: 8 -> 60

SRCH_WIN_R: 9 -> 80

NGHBR_MAX_AGE: 0

PWR_REP_THRESH: 2

PWR_REP_FRAMES: 9 -> 113

PWR_THRESH_ENABLE: 1

PWR_PERIOD_ENABLE: 0

PWR_REP_DELAY: 1

RESCAN: 0

T_ADD: 28

T_DROP: 32

T_COMP: 8

T_TDROP: 3

EXT_SYS_PARAMETER: 1

EXT_NGHBR_LIST: 0

GEN_NGHBR_LIST: 0

GLOBAL_REDIRECT: 0

REG_DISTregistration distance

0 : disable

SRCH_WIN_A search window size for active and candidate set

SRCH_WIN_N search window size for neighbor set

SRCH_WIN_R search window size for remaining set

NGHBR_MAX_AGE

neighbor set maximum age

Maximum age value beyond which mobile stations

are to drop members from the neighbor set

PWR_REP_THRESH power control reporting threshold

PWR_REP_FRAMES power control reporting frame count

2PWR_REP_FRAMES/2

* 5 frames

PWR_THRESH_ENABLE threshold report mode indicator

PWR_REP_DELAY power report delay

PWR_REP_DEALY * 4 frames delay

RESCAN rescan indicator



T_COMPactive set versus candidate set comparison

thresholdT_TDROP drop timer value

EXT_SYS_PARAMETER extended system parameter message indicator

GLOBAL_REDIRECT global service redirection message indicator


38/70



? In-Traffic System Parameter Message[ 2001 Nov 22 07:48:43.525 ] Forward Traffic Channel

PROTOCOL_REV : 3

In-Traffic system parameters

MSG_LENGTH: 14

MSG_TYPE: 7

ACK_SEQ: 3

MSG_SEQ: 6

ACK_REQ: 1

ENCRYPTION: 0

SID: 13824

NID: 2

SRCH_WIN_A: 6

SRCH_WIN_N: 8

SRCH_WIN_R: 9

T_ADD: 28

T_DROP: 32

T_COMP: 8

T_TDROP: 3

NGHBR_MAX_AGE: 0

BTS send in-traffic system parameter message to notify

various system information for MS in traffic state.

SID system identification

NID network identification

SRCH_WIN_A search window size for active and candidate set

SRCH_WIN_N search window size for neighbor set

SRCH_WIN_R search window size for remaining set

NGHBR_MAX_

AGE

neighbor set maximum ageMaximum age value beyond which mobile

stations are to drop members from the neighbor

set



T_COMPactive set versus candidate set comparison

threshold



39/70


BTS send access parameter message to notify various

system information about access CAI.

? Access Parameter Message(1)



PROTOCOL_REV : 3

Access Parameters

MSG_TYPE: 2

PILOT_PN: 159

ACC_MSG_SEQ: 17

ACC_CHAN: 0

NOM_PWR: 3

INIT_PWR: 29

PWR_STEP: 5

NUM_STEP: 3

ACC_CHAN number of access channels (ACC_CHAN + 1)

NOM_PWR nominal transmit power offset

INIT_PWR initial transmit power offset

PWR_STEP power increment

NUM_STEP number of access probes

First Transmit Power

: -mean input power –73 + NOM_PWR(dB) + INIT_PWR(dB)

Increasing Transmit Power for acquiring ACK from BTS

: -mean input power –73 + NOM_PWR(dB) + INIT_PWR(dB) + N * PWR_STEP(dB)

N (step counter from 0 up to NUM_STEP)


40/70



? Access Parameter Message(2)MAX_CAP_SZ: 3

PAM_SZ: 2

PSIST(0-9): 0

PSIST(10-15): 0 0 0 0 0 0

MSG_PSIST: 0

REG_PSIST: 0

PROBE_PN_RAN: 0

ACC_TMO: 1

PROBE_BKOFF: 0

BKOFF: 0MAX_REQ_SEQ: 3

MAX_RSP_SEQ: 3

AUTH: 0

NOM_PWR_EXT: 0

PSIST_EMG_INCL: 0

PWR_STEP power increment

NUM_STEP number of access probes

MAX_CAP_SZmaximum access channel message capsule size

(MAX_CAP_SZ + 3) frames

PAM_SZ access channel preamble length

PSIST

persistence value for access overload classes

0 ~ 9 : normal MS

10 : testing MS

11 : emergency MS

MSG_PSIST persistence modifier for access channel attempts for

message transmission

REG_PSIST

persistence modifier for access channel attempts for

registrations which are not responses to the registration

request order

PROBE_PN_RAN time randomization for access channel probes

ACC_TMO acknowledgement timeout

PROBE_BKOFF access channel probe backoff range

BKOFF access channel probe sequence backoff range

MAX_REQ_SEQmaximum number of access probe sequence for an

access channel request

MAX_RSP_SEQmaximum number of access probe sequence for an

access channel response

AUTH authenticaton mode


41/70



? Neighbor List Message


PROTOCOL_REV : 3

Neighbor List

MSG_TYPE: 3PILOT_PN: 426(0x01AA)

CONFIG_MSG_SEQ: 34

PILOT_INC: 3

NUM_NGHBR :20

NGHBR[0] NGHBR_CONFIG: 0 NGHBR_PN: 234(0x00EA)

NGHBR[1] NGHBR_CONFIG: 0 NGHBR_PN: 402(0x0192)

NGHBR[2] NGHBR_CONFIG: 0 NGHBR_PN: 162(0x00A2)

NGHBR[3] NGHBR_CONFIG: 0 NGHBR_PN: 330(0x014A)

NGHBR[4] NGHBR_CONFIG: 0 NGHBR_PN: 498(0x01F2)NGHBR[5] NGHBR_CONFIG: 0 NGHBR_PN: 159(0x009F)

NGHBR[6] NGHBR_CONFIG: 0 NGHBR_PN: 495(0x01EF)


NGHBR[8] NGHBR_CONFIG: 0 NGHBR_PN: 174(0x00AE)

NGHBR[9] NGHBR_CONFIG: 0 NGHBR_PN: 126(0x007E)



NGHBR[12] NGHBR_CONFIG: 0 NGHBR_PN: 123(0x007B)


NGHBR[14] NGHBR_CONFIG: 0 NGHBR_PN: 459(0x01CB)NGHBR[15] NGHBR_CONFIG: 0 NGHBR_PN: 90(0x005A)




NGHBR[19] NGHBR_CONFIG: 0 NGHBR_PN: 432(0x01B0)

BTS send neighbor list message to notify BTS’s

information around current BTS.

PILOT_PN pilot PN sequence offset inex

PILOT_INC pilot PN sequence offset index increment

NUM_NGHBR number of pilot PN offset index in neighbor list

message

NGHBR_CONFIG

neighbor configuration

0 : same configuration as the current BTS1 : different configuration

(paging channel on the current CDMA FA)

2 : different configuration

(paging channel on the 1st CDMA FA)

3 : unknown configuration

NGHBR_PN neighbor pilot PN sequence offset index


42/70



? Neighbor List Update Message


PROTOCOL_REV : 3

Neighbor list update

MSG_LENGTH: 29

MSG_TYPE: 8

ACK_SEQ: 2

MSG_SEQ: 4

ACK_REQ: 1

ENCRYPTION: 0

PILOT_INC: 3

NGHBR_PN: 468

NGHBR_PN: 381NGHBR_PN: 378

NGHBR_PN: 87

NGHBR_PN: 423

NGHBR_PN: 162

NGHBR_PN: 21

NGHBR_PN: 123

NGHBR_PN: 189

NGHBR_PN: 237

NGHBR_PN: 357

NGHBR_PN: 405

NGHBR_PN: 327

NGHBR_PN: 234

NGHBR_PN: 402

NGHBR_PN: 147

NGHBR_PN: 495

BTS send neighbor list message to notify BTS’s

information around current BTS in traffic state.

PILOT_PN pilot PN sequence offset inex

PILOT_INC pilot PN sequence offset index increment

NGHBR_PN neighbor pilot PN sequence offset index


43/70



? Data Burst MessageBTS/MS send data burst message to notify short

message data each other.

[ 2002 Mar 19 01:46:18.648 ] Reverse Traffic Channel

PROTOCOL_REV : 6

Data burst

MSG_Length: 67MSG_TYPE: 4

ACK_SEQ: 4

MSG_SEQ: 3

ACK_REQ: 1

ENCRYPTION: 0

MSG_NUMBER: 1

BURST_TYPE: 3

NUM_MSGS: 1

NUM_FIELDS: 58

SMS_MSG_TYPE: 0

Point to Point Message

PARAMETER_ID: 0

-> TELESERVICE IDENTIFIER

PARAMETER_LEN: 2

IDENTIFIER: 4098

PARAMETER_ID: 4

-> CALLED ADDRESS

PARAMETER_LEN: 7

DIGIT_MODE: 0

-> CHARi is consist of 4 bit BCD code

NUMBER_MODE: 0

NUM_FIELDS: 11

CHARi: 1 3 9 5 8 1 8 1 4 8 0

PARAMETER_ID: 6

-> BEARER RECEIVE RESPONSE OPTION

PARAMETER_LEN: 1

REPLY_SEQ: 3

PARAMETER_ID: 8

-> BEARER DATA

PARAMETER_LEN: 39

SUBPARAMETER_ID: 0

-> MESSAGE IDENTIFIER

SUBPARAMETER_LEN: 3

MESSAGE_TYPE: 2

MESSAGE_ID: 27

SUBPARAMETER_ID: 1

-> USER DATA

SUBPARAMETER_LEN: 25

MSG_ENCODING: 2

NUM_FIELDS: 26

CHARi: n o w i s t e s t i n g I a m s o r r y

SUBPARAMETER_ID: 10

-> RESPONSE OPTION

SUBPARAMETER_LEN: 1

USER_ACK_REQ: 0

DAK_SEQ: 1

SUBPARAMETER_ID: 14

-> CALLBACK NUMBER

SUBPARAMETER_LEN: 2

DIGIT_MODE: 0 (CHARi -> 4 bits)

NUM_FIELDS: 0

CHARi:

BURST_TYPEData indicator

3 : SMS(Short Message Service)


44/70



? Send Burst DTMF MessageMS send ‘send burst DTMF message’ to deliver

DTMF data to BTS.

[ 2002 Mar 20 02:10:03.275 ] Reverse Traffic Channel

PROTOCOL_REV : 3

Send burst DTMF

MSG_Length: 13

MSG_TYPE: 7

ACK_SEQ: 6

MSG_SEQ: 4

ACK_REQ: 1

ENCRYPTION: 0

NUM_DIGITS: 11

DTMF_ON_LENGTH: 1DTMF_OFF_LENGTH: 1

DIGITi : 0

DIGITi : 1

DIGITi : 1

DIGITi : 9

DIGITi : 1

DIGITi : 3

DIGITi : 6

DIGITi : 3

DIGITi : 5DIGITi : 6

DIGITi : 0

NUM_DIGITS Number of DTMF Digits

DTMF_ON_LENGTH

DTMF pulse with code

0 : 95 ms

1 : 150 ms

2 : 200 ms

3 : 250 ms4 : 300 ms

5 : 350 ms

DTMF_OFF_LENGT

H

DTMF inter-digit interval code

0 : 60 ms

1 : 100 ms

2 : 150 ms

3 : 200 ms

DIGITi DTMF digit


45/70


? General TA w/sup ChannelInformation

Status Packet

[ 2001 Nov 22 07:44:36.210 ] General TA w/sup channel info

PROTOCOL_REV : 3

BAND_CLASS : 0 (800MHz Cellular Band)

--- Searcher Information ---

SEARCH_PILOT: 375

SEARCH_PILOT_SET : Active Set , not the reference pilot

SRCH_STATE : 8 (Operation on the Traffic Channel)

WINDOW_CENTER : 0xC6F0 WINDOW_END : 0xC760

Path Position : 0x1D 0x23 0x29 0x13

Path Energy : 853 145 145 116 SearcherEc/Io : -12.651

---- Finger Information ----

Finger PN Sector POS Ec/Io

-------------------------------

1 159 0 0xC6B8 -4.732

2 375 1 0xC6F4 -12.559

3 159 0 0xC6A3 -19.829

4 159 0 0xC6C4 -17.610

** Combined Ec/Io: -3.77

RX_AGC : 235

RX_POWER : -70.248 dBm(Celluar)

TX_AGC : 126TX_GAIN_ADJ : -7

TX_POWER : -10.267 dBm(Celluar)

NUM_SUP_CHAN: 0

Rx Power, Tx Power, Tx_Adjust

Power Control information

Pilot PN offset for each finger

Chip delay for each finger

Energy Strength for each finger

Location in Active Pilot Set

Combined Ec/Io

Finger information

Pilot PN offset, Pilot Set,

Chip delay, Energy Strength(Ec/Io)

Searched Pilot information


46/70


? General TA information

Status Packet

[ 2001 Nov 26 03:21:20.127 ] General TA info

PROTOCOL_REV : 3



SEARCH_PILOT: 148

SEARCH_PILOT_SET : Active Set

SRCH_STATE : 8 (Operation on the Traffic Channel)

WINDOW_CENTER : 0x710 WINDOW_END : 0x10780

Path Position : 0x1C 0x26 0x29 0x31

Path Energy : 949 769 164 121 SearcherEc/Io : -10.634



-------------------------------

1 148 0 0x10711 -14.600

2 148 0 0x1073A -12.839

3 148 0 0x1070F -15.569

4 148 0 0x10715 -18.579


RX_AGC : 13

RX_POWER : -58.915 dBm(Celluar)

TX_AGC : 175TX_GAIN_ADJ : 20

TX_POWER : 6.060 dBm(Celluar)







Combined Ec/Io

Finger information





47/70


? Finger information

Status Packet

[ 2001 Nov 30 09:19:35.448 ] Finger info

PROTOCOL_REV : 3

PILOT: 400 400 400 0

X: 47208 47219 47228 47207

Y: 199 72 20 0




Finger information


48/70


? Searcher information

Status Packet

[ 2001 Nov 30 09:19:35.108 ] Searcher info 2

PROTOCOL_REV : 3

PREGAIN: 0

INTEGRATION: 128

NON_COHERENT: 0

PILOT_OFFSET: 9548WINDOW_POSITION: 47304

WINDOW_CENTER: 47208

TCXO_DRIFT: 0

NUM_ENTRIES: 48

ENERGIES: 0000 0000 0000 0000 0000 0000 0000 0000

ENERGIES: 0000 0000 0000 0000 0000 0000 0000 0000

ENERGIES: 0000 0000 0000 0000 0000 0000 0000 0000

ENERGIES: 0000 0000 0000 0000 0000 0000 0000 0000

ENERGIES: 0000 0000 0000 0000 0000 0000 0000 0044

ENERGIES: 0000 0000 0000 0000 0000 0000 0000 0000

Pilot PN offset, Chip delay, Energy

Strength(Ec/Io)



49/70


? Searcher and Fingerinformation

Status Packet

[ 2002 Mar 28 06:07:17.236 ] Searcher and fingerinformation

PROTOCOL_REV : 6



SEARCH_PILOT: 482

SEARCH_PILOT_SET : Active Set

SRCH_STATE : 6 -> Operation on the Paging Channel

WINDOW_CENTER : 0x2AD8 WINDOW_END : 0x2C68

Peak Pos(1/2Chp) Ec/Io

-------------------------------

1 101 -4.4192 113 -15.661

3 96 -18.552

4 197 -20.372




-------------------------------

1 This Finger is not locked

2 482 0 0x2ADE -4.147

3 482 0 0x2AD3 -16.149

4 This Finger is not assigned






Combined Ec/Io

Finger information





50/70


51/70


?

Markov Statistics

Status Packet

[ 2001 Nov 22 07:51:24.103 ] Markov statistics

PROTOCOL_REV : 3

Total # of Frames: 100

8Kbps non-Markov

Full Rate: 58

Half Rate: 4

Quarter Rate: 0

Eighth Rate: 38

Erasure: 0FER : : 0.00

It shows the statistics of frames that are received

from BTS.


52/70


?

Sparse AGC Power Controlinformation

Status Packet [ 2001 Nov 22 07:44:55.583 ] Sparse AGC power controlPROTOCOL_REV : 3

ADC_THERM: 172

BATT_COLT: 252

TX_POWER_LIMIT: 0

Sample RX PWR TX PWR POWER_CTL_VAL

--------------------------------------------------------------------

1 : -75.248 -7.269 -2.000

2 : -75.581 -4.270 0.000

3 : -76.915 -3.604 0.000

4 : -77.248 -4.937 -2.000

5 : -77.248 -6.270 -4.000

6 : -76.915 -8.269 -6.000

7 : -76.581 -10.268 -8.000

8 : -75.915 -12.600 -10.0009 : -75.248 -14.933 -12.000

10 : -74.915 -16.599 -13.000

……………………………………….

90 : -76.581 -12.267 -10.000

91 : -76.248 -12.267 -10.000

92 : -75.581 -14.600 -12.000

93 : -74.915 -15.266 -12.000

94 : -74.915 -14.933 -11.000

95 : -75.915 -15.599 -12.000

96 : -75.248 -16.599 -13.00097 : -74.581 -15.932 -12.000

98 : -74.915 -16.266 -12.000

99 : -76.581 -15.599 -12.000

100 : -77.248 -16.599 -14.000




53/70


CAI Message Analysis

with Dr.CDMA


54/70


Dr.DataDM(real-time)Message Filter Selection

Filter Edit Button Pause Button

Detailed Message

Total Message Stream

Filtered Message Stream


55/70


56/70


Appendix


57/70


MSID Table

Mobile Station Identification


58/70


IMSI Table

International Mobile Station Identifier


59/70


ADDR_TYPE

Address type


60/70


SCM Table

Station Class Mark


61/70


REG_TYPE

Registration type


62/70


ORDER Table(1) –Reverse Link


63/70


ORDER Table(2) – Reverse Link


64/70


ORDER Table(3) – Forward Link


65/70


ORDER Table(4) – Forward Link

(Addition to table)

Order : 010000

Base Station Acknowledgement Order


66/70


Service Option


67/70


Information Record Types

P R d F t


68/70


Page Record Format

Mobile Station Addressed page

Broadcast page

A S


69/70


Random value(0 ~ 1+BKOFF)

PSIST(0~9)

MAX_REQ_SEQ

MAX_RSP_SEQ

Random value

[0 ~ (2PROBE_PN_RAN – 1)] Chips

Access Sequence

A P b


70/70


(2+ACC_TMO)*80ms

Random value(1 + PROBE_BKOFF)

NUM_STEP

PWR_STEP

1+PAM_SZ

1+MAX_CAP_SZ

Access Probe

11.China CAI Message

Documents

Transcript of 11.China CAI Message