120 Cdma Core Princ and Opt

Course 120+ Section I
CDMA CDMA Core Core Principles Principles
October, 2007
120v5 (c) 2007 Scott Baxter
Course 120+: 1
Forward Link Signals of a 3-sector CDMA Site Using Only One Carrier Frequency
PN OFFSET
PN OFFSET
October, 2007
Course 120+: 2
Each sectors signal uses the PN Short code but with a unique timing delay. To hear this sector, a mobile makes the short PN code in step with this sector.
PN OFFSET
PN OFFSET
October, 2007
Course 120+: 3
Each sectors signal uses the PN Short code but with a unique timing delay. To hear this sector, a mobile makes the short PN code in step with this sector. Inside the signal of one sector, every users call or data session has its own private Walsh code. The administrative Pilot, Sync, and Paging channels also have their own Walsh codes. There are 64 or 128 Walsh codes available, depending on configuration. Each sector is completely free to use its own walsh codes any way it wishes.
PN OFFSET
PN OFFSET
October, 2007
Course 120+: 4
Each sectors signal uses the PN Short code but with a unique timing delay. To hear this sector, a mobile makes the short PN code in step with this sector. Inside the signal of one sector, every users call or data session has its own private Walsh code. The administrative Pilot, Sync, and Paging channels also have their own Walsh codes. There are 64 or 128 Walsh codes available, depending on configuration. Each sector is completely free to use its own walsh codes any way it wishes.
PN OFFSET
PN OFFSET
All the sectors of this base station are on the same frequency, and the bandwidth of the transmitted signals are about 1.25 MHz.
October, 2007 120v5 (c) 2007 Scott Baxter Course 120+: 5
The Capacity of One Carrier
PN OFFSET PN OFFSET
PN OFFSET
CARRIER FREQUENCY #1 If the inherent capacity of one carrier is not enough to meet traffic demand, additional carrier frequencies can be added to sectors as desired.
More Carriers for More Capacity

PN OFFSET PN OFFSET PN OFFSET
CARRIER FREQUENCY #3
PN OFFSET PN OFFSET PN OFFSET
PN OFFSET PN OFFSET
PN OFFSET
CARRIER FREQUENCY #1 Several methods are available to dynamically assign the mobiles among the available carriers.
CDMA Mobile Transmit (Reverse Link)
The forward link and reverse links are on different frequencies. In the 1900 MHz. band, the duplex separation is 80 MHz. In the 800/900 MHz. bands, the duplex separation is 45 MHz. The mobiles transmit on the low frequency of the pair.
Each mobile uses the PN Long Code at a unique timing shift different from any other mobile. This allows the mobile to be heard by the correct sector or combination of sectors without conflict from any other mobile.
Different Mobiles on Different Carriers
CARRIER FREQUENCY #1 Each mobile transmits 80 MHz. below the forward link carrier it is using. The noise level on each carrier is caused just by the mobiles on that carrier.
CDMA: Using A New Dimension

All CDMA users occupy the same frequency at the same time! Frequency and time are not used as discriminators CDMA operates by using CODING to discriminate between users CDMA interference comes mainly from nearby users Each user is a small voice in a roaring crowd -- but with a uniquely recoverable code CDMA
Figure of Merit: C/I

(carrier/interference ratio)
Raw RF of one channel vs all the energy Our end-result Traffic Channel bit power vs noise We watch Ec/Io because it is available use it for deciding handoff partners
AMPS: +17 dB TDMA: +14 to +17 dB GSM: +7 to 9 dB. CDMA: -10 to -17 dB. CDMA: Eb/No ~+6 dB. CDMA: Ec/Io >-14 dB.
Course 120+: 10
October, 2007
DSSS Spreading: Time-Domain View

Input A: Users Data
Originating Site
XOR
Exclusive-OR
At Originating Site:
Input A: Users Data @ 19,200 bits/second Input B: Walsh Code #23 @ 1.2288 Mcps Output: Spread spectrum signal
1
Input B: Spreading Code
Gate
Spread Spectrum Signal
via air interface
Input A: Received Signal
Destination Site
XOR
Exclusive-OR Gate
At Destination Site:
Input A: Received spread spectrum signal Input B: Walsh Code #23 @ 1.2288 Mcps Output: Users Data @ 19,200 bits/second just as originally sent
October, 2007
Input B: Spreading Code
Output: Users Original Data
Drawn to actual scale and time alignment

120v5 (c) 2007 Scott Baxter Course 120+: 11
Spreading from a Frequency-Domain View

TRADITIONAL COMMUNICATIONS SYSTEM Spread Spectrum Narrowband
Slow Information Sent TX Signal Slow Information Recovered
Traditional technologies try to squeeze signal into minimum required bandwidth CDMA uses larger bandwidth but uses resulting processing gain to increase capacity
RX
SPREAD-SPECTRUM SYSTEM
Wideband Signal Slow Information Sent TX RX Slow Information Recovered
Fast Spreading Sequence
Fast Spreading Sequence
Spread Spectrum Payoff:

Processing Gain
October, 2007
Course 120+: 12
Claude Shannon:
The Einstein of Information Theory
The core idea that makes CDMA possible was first explained by Claude Shannon, a Bell Labs research mathematician Shannon's work relates amount of information carried, channel bandwidth, signal-to-noise-ratio, and detection error probability It shows the theoretical upper limit attainable
In 1948 Claude Shannon published his landmark paper on information theory, A Mathematical Theory of Communication. He observed that "the fundamental problem of communication is that of reproducing at one point either exactly or approximately a message selected at another point." His paper so clearly established the foundations of information theory that his framework and terminology are standard today. Shannon died Feb. 24, 2001, at age 84. October, 2007
SHANNONS CAPACITY EQUATION C = B log2 [

1+ S N
B = bandwidth in Hertz C = channel capacity in bits/second S = signal power N = noise power

Course 120+: 13
Modulation Techniques of 1xEV Technologies

1xEV, 1x Evolution, is a family of alternative fast-data schemes that can be implemented on a 1x CDMA carrier. 1xEV DO means 1x Evolution, Data Only, originally proposed by Qualcomm as High Data Rates (HDR). Up to 2.4576 Mbps forward, 153.6 kbps reverse A 1xEV DO carrier holds only packet data, and does not support circuit-switched voice Commercially available in 2003 1xEV DV means 1x Evolution, Data and Voice. Max throughput of 5 Mbps forward, 307.2k reverse Backward compatible with IS-95/1xRTT voice calls on the same carrier as the data Not yet commercially available; work continues All versions of 1xEV use advanced modulation techniques to achieve high throughputs.
QPSK
CDMA IS-95, IS-2000 1xRTT, and lower rates of 1xEV-DO, DV
16QAM
1xEV-DO at highest rates
64QAM
1xEV-DV at highest rates
October, 2007
Course 120+: 14
Digital Modulation Systems

Each symbol of a digitally modulated RF signal conveys a number of bits of information determined by the number of degrees of modulation freedom More complex modulation schemes can carry more bits per symbol in a given bandwidth, but require better signal-to-noise ratios The actual number of bits per second which can be conveyed in a given bandwidth under given signal-to-noise conditions is described by Shannons equations
Modulation Scheme BPSK QPSK 8PSK 16 QAM 32 QAM 64 QAM 256 QAM Shannon Limit, BitsHz 1 b/s/hz 2 b/s/hz 3 b/s/hz 4 b/s/hz 5 b/s/hz 6 b/s/hz 8 b/s/hz
SHANNONS CAPACITY EQUATION
C = B log2 [
1+
S N
B = bandwidth in Hertz C = channel capacity in bits/second S = signal power N = noise power

Course 120+: 15
October, 2007
The CDMA Spread Spectrum Payoff:

Would you like a lump-sum, or monthly payments?
Shannon's work suggests that a certain bit rate of information deserves a certain bandwidth If one CDMA user is carried alone by a CDMA signal, the processing gain is large - roughly 21 db for an 8k vocoder. Each doubling of the number of users consumes 3 db of the processing gain Somewhere above 32 users, the signal-to-noise ratio becomes undesirable and the ultimate capacity of the sector is reached Practical CDMA systems restrict the number of users per sector to ensure processing gain remains at usable levels
CDMA Spreading Gain Consider a user with a 9600 bps vocoder talking on a CDMA signal 1,228,800 hz wide. The processing gain is 1,228,800/9600 = 128, which is 21 db. What happens if additional users are added?
# Users Processing Gain 1 2 4 8 16 32 21 db 18 db 15 db 12 db 9 db 6 db
64..Uh, Regis, can I just take the money I've already won, and go home now?
October, 2007
Course 120+: 16
CDMA Uses Code Channels

A CDMA signal uses many chips to convey just one bit of information Each user has a unique chip pattern, in effect a code channel To recover a bit, integrate a large number of chips interpreted by the users known code pattern Other users code patterns appear random and integrate in a random self-canceling fashion, dont disturb the bit decoding decision being made with the proper code pattern
Building a CDMA Signal Bits

from Users Vocoder
Forward Error Correction
Symbols
Coding and Spreading
Chips
October, 2007
Course 120+: 17
CDMA In Action: Multiple Users on a Sector

QPSK RF
Users
Analog Summing
BTS Demodulated Received CDMA Signal Despreading Sequence (Locally Generated, =0) Received energy: Correlation matches opposite
1 if 0 = if 1 =
Decision:
+10 -26
Matches! (=0) 1 Opposite ( =1)

-16
Time Integration
This figure illustrates the basic technique of CDMA signal generation and recovery. The actual coding process used in IS-95 CDMA includes a few additional layers, as well see in following slides.
Spreading: What we do, we can undo

ORIGINATING SITE
Spread Data Stream Input Data Recovered Data
DESTINATION
Spreading Sequence
Spreading Sequence
Sender combines data with a fast spreading sequence, transmits spread data stream Receiver intercepts the stream, uses same spreading sequence to extract original data
October, 2007
Course 120+: 19
Shipping and Receiving via CDMA

Shipping FedEx FedEx Receiving
Data
Mailer
Mailer
Data
Whether in shipping and receiving, or in CDMA, packaging is extremely important! Cargo is placed inside nested containers for protection and to allow addressing The shipper packs in a certain order, and the receiver unpacks in the reverse order CDMA containers are spreading codes
October, 2007
Course 120+: 20
CDMAs Nested Spreading Sequences

ORIGINATING SITE
X+A Spread-Spectrum Chip Streams X+A+B X+A+B+C X+A+B
DESTINATION
X+A
Input Data
Recovered Data
X
Spreading Spreading Spreading Sequence Sequence Sequence Spreading Spreading Spreading Sequence Sequence Sequence
CDMA combines three different spreading sequences to create unique, robust channels The sequences are easy to generate on both sending and receiving ends of each link What we do, we can undo
October, 2007
Course 120+: 21
The Walsh Codes

WALSH CODES
64 Magic Sequences, each 64 chips long Each Walsh Code is precisely Orthogonal with respect to all other Walsh Codes its simple to generate the codes, or theyre small enough to use from ROM Unique Properties: Mutual Orthogonality
EXAMPLE: Correlation of Walsh Code #23 with Walsh Code #59
#23 #59 Sum 0110100101101001100101101001011001101001011010011001011010010110 0110011010011001100110010110011010011001011001100110011010011001 0000111111110000000011111111000011110000000011111111000000001111
Correlation Results: 32 1s, 32 0s: Orthogonal!!
# 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63
---------------------------------- 64-Chip Sequence -----------------------------------------0000000000000000000000000000000000000000000000000000000000000000 0101010101010101010101010101010101010101010101010101010101010101 0011001100110011001100110011001100110011001100110011001100110011 0110011001100110011001100110011001100110011001100110011001100110 0000111100001111000011110000111100001111000011110000111100001111 0101101001011010010110100101101001011010010110100101101001011010 0011110000111100001111000011110000111100001111000011110000111100 0110100101101001011010010110100101101001011010010110100101101001 0000000011111111000000001111111100000000111111110000000011111111 0101010110101010010101011010101001010101101010100101010110101010 0011001111001100001100111100110000110011110011000011001111001100 0110011010011001011001101001100101100110100110010110011010011001 0000111111110000000011111111000000001111111100000000111111110000 0101101010100101010110101010010101011010101001010101101010100101 0011110011000011001111001100001100111100110000110011110011000011 0110100110010110011010011001011001101001100101100110100110010110 0000000000000000111111111111111100000000000000001111111111111111 0101010101010101101010101010101001010101010101011010101010101010 0011001100110011110011001100110000110011001100111100110011001100 0110011001100110100110011001100101100110011001101001100110011001 0000111100001111111100001111000000001111000011111111000011110000 0101101001011010101001011010010101011010010110101010010110100101 0011110000111100110000111100001100111100001111001100001111000011 0110100101101001100101101001011001101001011010011001011010010110 0000000011111111111111110000000000000000111111111111111100000000 0101010110101010101010100101010101010101101010101010101001010101 0011001111001100110011000011001100110011110011001100110000110011 0110011010011001100110010110011001100110100110011001100101100110 0000111111110000111100000000111100001111111100001111000000001111 0101101010100101101001010101101001011010101001011010010101011010 0011110011000011110000110011110000111100110000111100001100111100 0110100110010110100101100110100101101001100101101001011001101001 0000000000000000000000000000000011111111111111111111111111111111 0101010101010101010101010101010110101010101010101010101010101010 0011001100110011001100110011001111001100110011001100110011001100 0110011001100110011001100110011010011001100110011001100110011001 0000111100001111000011110000111111110000111100001111000011110000 0101101001011010010110100101101010100101101001011010010110100101 0011110000111100001111000011110011000011110000111100001111000011 0110100101101001011010010110100110010110100101101001011010010110 0000000011111111000000001111111111111111000000001111111100000000 0101010110101010010101011010101010101010010101011010101001010101 0011001111001100001100111100110011001100001100111100110000110011 0110011010011001011001101001100110011001011001101001100101100110 0000111111110000000011111111000011110000000011111111000000001111 0101101010100101010110101010010110100101010110101010010101011010 0011110011000011001111001100001111000011001111001100001100111100 0110100110010110011010011001011010010110011010011001011001101001 0000000000000000111111111111111111111111111111110000000000000000 0101010101010101101010101010101010101010101010100101010101010101 0011001100110011110011001100110011001100110011000011001100110011 0110011001100110100110011001100110011001100110010110011001100110 0000111100001111111100001111000011110000111100000000111100001111 0101101001011010101001011010010110100101101001010101101001011010 0011110000111100110000111100001111000011110000110011110000111100 0110100101101001100101101001011010010110100101100110100101101001 0000000011111111111111110000000011111111000000000000000011111111 0101010110101010101010100101010110101010010101010101010110101010 0011001111001100110011000011001111001100001100110011001111001100 0110011010011001100110010110011010011001011001100110011010011001 0000111111110000111100000000111111110000000011110000111111110000 0101101010100101101001010101101010100101010110100101101010100101 0011110011000011110000110011110011000011001111000011110011000011 0110100110010110100101100110100110010110011010010110100110010110
In CDMA2000, user data comes at various speeds, and different lengths of walsh codes can exist. See Course 332 for more details on CDMA2000 1xRTT fast data channels and additional Walsh codes. October, 2007 120v5 (c) 2007 Scott Baxter Course 120+: 22
How the PN Codes Are Made, Why They Work

An Ordinary Shift Register
The CDMA PN (pseudo-random) codes are generated in small shift registers that dont require much circuitry or much battery power Tapped shift register generates a wild, self-mutating sequence 2N-1 chips long (N=register length) Such sequences match if compared in step (no-brainer, any sequence matches itself) Such sequences appear approximately orthogonal if compared with themselves not exactly matched in time false correlation typically <2% The Short PN code is used to make sectors different from each other The Long PN code is used to make each mobiles signal different from other mobiles
October, 2007
Sequence repeats every N chips, where N is number of cells in register A Tapped, Summing Shift Register
Sequence repeats every 2N-1 chips, where N is number of cells in register A Special Characteristic of Sequences Generated in Tapped Shift Registers Compared In-Step: Matches Itself
Sequence: Self, in sync: Sum: Complete Correlation: All 0s
Compared Shifted: Little Correlation

Sequence: Self, Shifted: Sum: Practically Orthogonal: Half 1s, Half 0s
Course 120+: 23
The Short PN Code makes Sectors Different

Original IS-95 CDMA PN Scrambling
32,768 chips long 26-2/3 ms. (75 repetitions in 2 sec.)
I-sequence Walsh users symbols Same information duplicated on I and Q Q-sequence
Short PN Scrambling
RF: cos t QPSKmodulated RF Output
I Q
RF: sin t
The short PN code consists of two PN Sequences, I and Q, each New CDMA2000 1x Complex Scrambling 32,768 chips long RF: Generated in similar but cos t differently-tapped 15-bit shift I-sequence + registers users Walsh symbols the two sequences scramble + the information on the I and Q Different phase channels + Information Q-sequence on I and Q Figures to the right show how one sin t users channel is built at the bTS RF Complex Scrambling
Serial to Parallel
October, 2007
Course 120+: 24
QPSK
Output
The Long PN Code Makes Mobiles Different

LONG CODE STATE REGISTER dynamic contents, zero timing shift MASK REGISTER unique steady contents cause unique timing shift SUMMER holds dynamic modulo-2 sum of LC State and Mask registers
clock
Each clock cycle, all the Summer bits are added into a single-bit modulo-2 sum The shifted Long Code emerges, chip by chip!
Every phone and every BTS channel element has a Long Code generator Long Code State Register makes long code at system reference timing A Mask Register holds a user-specific unique pattern of bits Each clock pulse drives the Long Code State Register to its next state State register and Mask register contents are added in the Summer Summer contents are modulo-2 added to produce just a single bit output The output bits are the Long Code, but shifted to the users unique offset
Different Masks Produce Different Long PN Offsets

TRAFFIC CHANNEL NORMAL
USING THE PUBLIC LONG CODE MASK
LONG CODE STATE REGISTER fixed
PERMUTED ESN
SUMMING REGISTER
TRAFFIC CHANNEL PRIVATE

USING THE PRIVATE LONG CODE MASK
LONG CODE STATE REGISTER
calculated PRIVATE LONG CODE MASK

SUMMING REGISTER
ACCESS CHANNEL (IDLE MODE)

USING THE ACCESS CHANNEL LONG CODE MASK
LONG CODE STATE REGISTER
fixed
AC# PC#
BASE_ID
PILOT PN
SUMMING REGISTER
Ordinary mobiles use their ESNs and the Public Long Code Mask to produce their unique Long Code PN offsets main ingredient: mobile ESN Mobiles needing greater privacy use the Private Long Code Mask instead of 32-bit ESN, the mask value is produced from SSD Word B in a calculation similar to authentication Each BTS sector has an Access Channel where mobiles transmit for registration and call setup the Access Channel Long Code Mask includes Access Channel #, Paging Channel #, BTS ID, and Pilot PN The BTS transmits all of these parameters on the Paging Channel
Course 120+: 26
October, 2007
IS-95 IS-95 CDMA CDMA Forward Forward and and Reverse Reverse Channels Channels
October, 2007
Course 120+: 27
The Channels of 2G IS-95 CDMA

FORWARD CHANNELS
Sector has a Short PN Offset
Walsh 0:
REVERSE CHANNELS
PILOT SYNC ACCESS
Walsh 32:
BTS
Walsh 1:
PAGING TRAFFIC
A Long PN Offset
Walsh n:
A Long PN Offset
TRAFFIC
Existing IS-95A/JStd-008 CDMA offers one radio configuration using just the channels shown above IS-2000 CDMA is backward-compatible with this IS-95, but offers additional radio configurations with additional channels These additional modes are called Radio Configurations IS-95 Rate Set 1 and 2 are IS-2000 Radio Configurations 1 & 2
The Code Channels of 1xRTT Rev. 0

FORWARD CHANNELS
How many 1 Possible: 1 1 to 7 0 to 8 0 to 3 0 to 4
REVERSE CHANNELS
Same coding as IS-95B, Backward compatible Same coding as IS-95B, Backward compatible Same coding as IS-95B, Backward compatible Broadcast Channel Quick Paging Channel Common Power Control Channel Common Assignment Channel Common Control Channels Forward Traffic Channels Fundamental Channel Dedicated Control Channel Supplemental Reverse Fundamental Channel (IS95B comp.) Dedicated Control Channel Reverse Supplemental Channel Includes Power Control Subchannel Access Channel (IS-95B compatible) Enhanced Access Channel Common Control Channel
F-Pilot F-Sync PAGING F-BCH F-QPCH F-CPCCH F-CACH F-CCCH F-TRAFFIC F-FCH F-DCCH
R-Pilot 1 R-ACH or R-EACH

1
R-CCCH 0 or 1 R-TRAFFIC R-FCH 1 R-DCCH 0 or 1 R-SCH 0 to 2
BTS
0 to 7 0 to 7
Users: 0 to many 1 0 or 1 0 to 7 0 to 2
F-SCH IS-95B only Channels IS-95B only F-SCH

Supplemental Channels RC3,4,5
CDMA2000 1xRTT has a rich variety of traffic channels for voice and fast data There are also optional additional control channels for more effective operation
See Course 332 for more details. Course 120+: 29
October, 2007
Spreading Rates & Radio Configurations

Spreading Rate
Forward Link
Required. IS-95B Compatible No CDMA2000 coding features
Radio Configuration
Data Rates
Data Rates
Radio Configuration
Reverse Link
Required. IS-95B Compatible No CDMA2000 coding features Compatible with IS-95B RS2 No CDMA2000 coding features Quarter rate convolutional or Turbo coding; Half rate convolutional or Turbo coding; base rate 9600 Quarter rate convolutional or Turbo Coding, base rate 14400
RC1 RC2 RC3 RC4 RC5 RC6 RC7 RC8 RC9
9600
9600
RC1 RC2 RC3 RC4 RC5
SR1 1xRTT
1 carrier 1.2288 MCPS
Compatible with IS-95B RS2 No CDMA2000 coding features Quarter-rate convolutional or Turbo Coding, base rate 9600 Half-rate convolutional or Turbo Coding, base rate 9600 Quarter-rate convolutional or Turbo Coding, base rate 14400
14400 9600 153600 9600 307200 14400 230400 9600 307200 9600 614400 14400 460800 14400 1036800
14400
9600 153600 307200 14400 230400 9600 307200 614400 14400 460800 1036800
SR3 3xRTT
Fwd: 3 carriers 1.2288 MCPS Rev: 3.6864 MCPS
1/6 rate convolutional or Turbo coding, base rate 9600 Required. 1/3 rate convolutional or Turbo coding, base rate 9600 or 1/3 rate convolutional or Turbo coding, base rate 14400 or 1/3 rate convolutional or Turbo encoder, base rate 14400
Required. or 1/3 convolutional or Turbo coding, base rate 9600
RC6
or convolutional or Turbo encoding, base rate 14400
October, 2007
Course 120+: 30
Walsh Codes in 1xRTT

2G VOICE AND DATA
One Symbol of Information
19,200 symbols/second
DATA SYMBOLS WALSH CODE
1,228,800 walsh chips/second

64 chips of Walsh Code
Data Rates are different, but Chip Rates must stay the same!
3G 153.6 kb/s DATA

One Symbol of Fast Data
DATA SYMBOLS WALSH CODE
307,200 symbols/second
4 Chips of Walsh Code
1,228,800 walsh chips/second

Course 120+: 31
October, 2007
General Development of the Walsh Codes

WALSH
# 1-Chip 0 0
WALSH
# 2-Chips 0 00 1 01
WALSH
# 0 1 2 3 4-Chips 0000 0101 0011 0110
WALSH
# 0 1 2 3 4 5 6 7 8-Chips 00000000 01010101 00110011 01100110 00001111 01011010 00111100 01101001
WALSH
# 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 ---- 16-Chips ------0000000000000000 0101010101010101 0011001100110011 0110011001100110 0000111100001111 0101101001011010 0011110000111100 0110100101101001 0000000011111111 0101010110101010 0011001111001100 0110011010011001 0000111111110000 0101101010100101 0011110011000011 0110100110010110
WALSH CODES
# 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 ----------- 32-Chip Sequence ------------00000000000000000000000000000000 01010101010101010101010101010101 00110011001100110011001100110011 01100110011001100110011001100110 00001111000011110000111100001111 01011010010110100101101001011010 00111100001111000011110000111100 01101001011010010110100101101001 00000000111111110000000011111111 01010101101010100101010110101010 00110011110011000011001111001100 01100110100110010110011010011001 00001111111100000000111111110000 01011010101001010101101010100101 00111100110000110011110011000011 01101001100101100110100110010110 00000000000000001111111111111111 01010101010101011010101010101010 00110011001100111100110011001100 01100110011001101001100110011001 00001111000011111111000011110000 01011010010110101010010110100101 00111100001111001100001111000011 01101001011010011001011010010110 00000000111111111111111100000000 01010101101010101010101001010101 00110011110011001100110000110011 01100110100110011001100101100110 00001111111100001111000000001111 01011010101001011010010101011010 00111100110000111100001100111100 01101001100101101001011001101001
WALSH CODES
# 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 ---------------------------------- 64-Chip Sequence -----------------------------------------0000000000000000000000000000000000000000000000000000000000000000 0101010101010101010101010101010101010101010101010101010101010101 0011001100110011001100110011001100110011001100110011001100110011 0110011001100110011001100110011001100110011001100110011001100110 0000111100001111000011110000111100001111000011110000111100001111 0101101001011010010110100101101001011010010110100101101001011010 0011110000111100001111000011110000111100001111000011110000111100 0110100101101001011010010110100101101001011010010110100101101001 0000000011111111000000001111111100000000111111110000000011111111 0101010110101010010101011010101001010101101010100101010110101010 0011001111001100001100111100110000110011110011000011001111001100 0110011010011001011001101001100101100110100110010110011010011001 0000111111110000000011111111000000001111111100000000111111110000 0101101010100101010110101010010101011010101001010101101010100101 0011110011000011001111001100001100111100110000110011110011000011 0110100110010110011010011001011001101001100101100110100110010110 0000000000000000111111111111111100000000000000001111111111111111 0101010101010101101010101010101001010101010101011010101010101010 0011001100110011110011001100110000110011001100111100110011001100 0110011001100110100110011001100101100110011001101001100110011001 0000111100001111111100001111000000001111000011111111000011110000 0101101001011010101001011010010101011010010110101010010110100101 0011110000111100110000111100001100111100001111001100001111000011 0110100101101001100101101001011001101001011010011001011010010110 0000000011111111111111110000000000000000111111111111111100000000 0101010110101010101010100101010101010101101010101010101001010101 0011001111001100110011000011001100110011110011001100110000110011 0110011010011001100110010110011001100110100110011001100101100110 0000111111110000111100000000111100001111111100001111000000001111 0101101010100101101001010101101001011010101001011010010101011010 0011110011000011110000110011110000111100110000111100001100111100 0110100110010110100101100110100101101001100101101001011001101001 0000000000000000000000000000000011111111111111111111111111111111 0101010101010101010101010101010110101010101010101010101010101010 0011001100110011001100110011001111001100110011001100110011001100 0110011001100110011001100110011010011001100110011001100110011001 0000111100001111000011110000111111110000111100001111000011110000 0101101001011010010110100101101010100101101001011010010110100101 0011110000111100001111000011110011000011110000111100001111000011 0110100101101001011010010110100110010110100101101001011010010110 0000000011111111000000001111111111111111000000001111111100000000 0101010110101010010101011010101010101010010101011010101001010101 0011001111001100001100111100110011001100001100111100110000110011 0110011010011001011001101001100110011001011001101001100101100110 0000111111110000000011111111000011110000000011111111000000001111 0101101010100101010110101010010110100101010110101010010101011010 0011110011000011001111001100001111000011001111001100001100111100 0110100110010110011010011001011010010110011010011001011001101001 0000000000000000111111111111111111111111111111110000000000000000 0101010101010101101010101010101010101010101010100101010101010101 0011001100110011110011001100110011001100110011000011001100110011 0110011001100110100110011001100110011001100110010110011001100110 0000111100001111111100001111000011110000111100000000111100001111 0101101001011010101001011010010110100101101001010101101001011010 0011110000111100110000111100001111000011110000110011110000111100 0110100101101001100101101001011010010110100101100110100101101001 0000000011111111111111110000000011111111000000000000000011111111 0101010110101010101010100101010110101010010101010101010110101010 0011001111001100110011000011001111001100001100110011001111001100 0110011010011001100110010110011010011001011001100110011010011001 0000111111110000111100000000111111110000000011110000111111110000 0101101010100101101001010101101010100101010110100101101010100101 0011110011000011110000110011110011000011001111000011110011000011 0110100110010110100101100110100110010110011010010110100110010110
2x2 4x4
8x8
16x16
Walsh Code Names

W1232 = Walsh Code #12, 32 chips long.
Walsh Level Mapping

The Walsh Codes shown here are in logical state values 0 and 1. Walsh Codes also can exist as physical bipolar signals. Logical zero is the signal value +1 and Logical 1 is the signal value -1. Mapping: Logical 0,1 > +1, -1 Physical
32x32
All Walsh codes can be built to any size from a single zero by replicating and inverting All Walsh matrixes are square -- same number of codes and number of chips per code
October, 2007 120v5 (c) 2007 Scott Baxter
64x64
Course 120+: 32
Walsh Code Trees and Interdependencies

W316 0110 0110 0110 0110 W3
8
W332 0110 0110 0110 0110 0110 0110 0110 0110 W1932 0110 0110 0110 0110 1001 1001 1001 1001 W1132 0110 0110 1001 1001 0110 0110 1001 1001
0110 0110
W11 W34 0110
16 0110
0110 1001 1001
W2732 0110 0110 1001 1001 1001 1001 0110 0110 W732 0110 1001 0110 1001 0110 1001 0110 1001 W2332 0110 1001 0110 1001 1001 0110 1001 0110 W1532 0110 1001 1001 0110 0110 1001 1001 0110
1001 1001 0110
W364 W3564 W1964 W5164 W1164 W4364 W2764 W5964 W764 W3964 W2364 W5564 W1564 W4764 W3164 W6364
W716 0110 1001 0110 1001 W7

8
0110 1001
W15
16 0110
W3132 0110 1001 1001 0110 1001 0110 0110 1001
Entire Walsh matrices can be built by replicating and inverting -- Individual Walsh codes can also be expanded in the same way. CDMA adds each symbol of information to one complete Walsh code Faster symbol rates therefore require shorter Walsh codes If a short Walsh code is chosen to carry a fast data channel, that walsh code and all its replicative descendants are compromised and cannot be reused to carry other signals Therefore, the supply of available Walsh codes on a sector diminishes greatly while a fast data channel is being transmitted! CDMA2000 Base stations can dip into a supply of quasi-orthogonal codes if needed to permit additional channels during times of heavy loading
153,600 sps
307200 sps
76,800 sps
38,400 sps
19,200 sps
Code#
Code#
Code#
31 Code#
Code#
76.8 ksps
15
38.4k 38.4k 38.4k 38.4k 38.4k 38.4k 38.4k 38.4k 38.4k 38.4k 38.4k 38.4k 38.4k 38.4k
This way of arranging Walsh codes is called bit reversal order. It shows each Walsh codes parents and children. Remember, we cannot use any Walsh code if another Walsh code directly above it or below it is in use.
Forward Link Walsh Codes in 1xRTT
F-SCH 153.6 ksps
76.8 ksps
F-SCH 153.6 ksps
76.8 ksps
13
76.8 ksps
21
13
29
19
F-SCH 153.6 ksps
76.8 ksps
14
38.4k 38.4k 38.4k 38.4k
F-SCH 307.2 ksps
26
F-SCH 153.6 ksps
76.8 ksps
10
38.4k 10 38.4k 18 76.8 ksps 38.4k
38.4k 28 2 F-SCH 153.6 ksps 76.8 ksps 12 38.4k 12 38.4k
20
38.4k 0 24 4 76.8 ksps 38.4k 8 38.4k 0 8 0 16
QPCH QPCH QPCH TX Div PIlot
Code# 0
Sync Pilot Code# Code# Code# Code# 4 chips 8 chips 16 chips 32 chips 64 chips
Code#
128 chips
October, 2007
76.8 ksps 4
38.4k

76.8 ksps 76.8 ksps 6 22 14 30 1 17 9 25
Course 120+: 34
38.4k
63 31 47 15 55 23 39 7 59 27 43 11 51 19 35 3 61 29 45 13 53 21 37 5 57 25 41 9 49 17 33 1 62 30 46 14 54 22 38 6 58 26 42 10 50 18 34 2 60 28 44 12 52 20 36 4 56 24 40 8 48 16 32 0 F-SCH 153.6 ksps 7 F-SCH 307.2 ksps 76.8 ksps 7 3 76.8 ksps 11 11 27 7 23 15
19.2k 19.2k 19.2k 19.2k 19.2k 19.2k 19.2k Paging 7 19.2k 19.2k 19.2k 19.2k 19.2k 19.2k 19.2k Paging 3 19.2k 19.2k 19.2k 19.2k 19.2k 19.2k 19.2k Paging 5 19.2k 19.2k 19.2k 19.2k 19.2k 19.2k 19.2k Paging 19.2k 19.2k 19.2k 19.2k 19.2k 19.2k 19.2k PCH 6 19.2k 19.2k 19.2k 19.2k 19.2k 19.2k 19.2k PCH 2 19.2k 19.2k 19.2k 19.2k 19.2k 19.2k 19.2k PCH 4 19.2k 19.2k 19.2k 19.2k
127 63 95 31 111 47 79 15 119 55 87 23 103 39 71 7 123 59 91 27 107 43 75 11 115 51 83 19 99 35 67 3 125 61 93 29 109 45 77 13 117 53 85 21 101 37 69 5 121 57 89 25 105 41 73 9 113 49 81 18 97 33 65 1 126 62 94 30 110 46 78 14 118 54 86 22 102 38 70 6 122 58 90 26 106 42 74 10 114 50 82 18 98 34 66 2 124 60 92 28 108 44 76 12 116 52 84 20 100 36 68 4 120 56 88 24 104 40 72 8 112 48 80 16 96 32 64 0
Code#
9,600 4,800 2,400 sps
153,600 sps
307200 sps
76,800 sps
38,400 sps
19,200 sps
Code#
Code#
Code#
31 Code#
Code#
76.8 ksps
15
F-SCH 153K RC3
38.4k 38.4k 38.4k 38.4k 38.4k 38.4k 38.4k 38.4k 38.4k
1 F-SCH, 39 IS-95/1xRTT RC3 Voice Users, 4 Active+12 Dormant Data Users
A Possible 1xRTT RC3 BTS Dynamic State:
But it takes seconds to move various data users from Dormant to Active! Data users will get 153 kb/s peak, ~9 kb/s average, but latency will be high.
F-SCH 153.6 ksps
76.8 ksps
29
19
F-SCH 153.6 ksps
F-FCHs Data F-FCHs 9.6k RC3 Voice
76.8 ksps
13
21
13
76.8 ksps
38.4k 38.4k 38.4k 38.4k 38.4k
F-SCH 153.6 ksps
76.8 ksps
14
38.4k 38.4k 38.4k 38.4k
F-FCHs 9.6k
F-SCH 153.6 ksps
76.8 ksps
10
38.4k 10 38.4k 18 76.8 ksps 38.4k
38.4k 28 2 76.8 ksps 12 38.4k F-SCH 153.6 ksps 12 38.4k
F-FCHs 9.6k
38.4k 0 24 4 76.8 ksps 38.4k 8 38.4k 0 8 0 16
Code# 0
Sync Pilot Code# Code# Code# Code# 4 chips 8 chips 16 chips 32 chips 64 chips
Code#
128 chips
October, 2007
76.8 ksps 4
38.4k
RC3 Voice
20
RC3 Voice
F-SCH 307.2 ksps
26

76.8 ksps 76.8 ksps 6 22 14 30 1 17 9 25
Course 120+: 35
38.4k
63 31 47 15 55 23 39 7 59 27 43 11 51 19 35 3 61 29 45 13 53 21 37 5 57 25 41 9 49 17 33 1 62 30 46 14 54 22 38 6 58 26 42 10 50 18 34 2 60 28 44 12 52 20 36 4 56 24 40 8 48 16 32 0 F-SCH 153.6 ksps 7 F-SCH 307.2 ksps 76.8 ksps 7 3 76.8 ksps 11 11 27 7 23 15
19.2k 19.2k 19.2k 19.2k 19.2k 19.2k 19.2k 19.2k 19.2k 19.2k 19.2k 19.2k 19.2k 19.2k 19.2k 19.2k 19.2k 19.2k 19.2k 19.2k 19.2k 19.2k 19.2k 19.2k 19.2k 19.2k 19.2k 19.2k 19.2k 19.2k 19.2k Paging 19.2k 19.2k 19.2k 19.2k 19.2k 19.2k 19.2k 19.2k 19.2k 19.2k 19.2k 19.2k 19.2k 19.2k 19.2k 19.2k 19.2k 19.2k 19.2k 19.2k 19.2k 19.2k 19.2k 19.2k 19.2k 19.2k 19.2k 19.2k
127 63 95 31 111 47 79 15 119 55 87 23 103 39 71 7 123 59 91 27 107 43 75 11 115 51 83 19 99 35 67 3 125 61 93 29 109 45 77 13 117 53 85 21 101 37 69 5 121 57 89 25 105 41 73 9 113 49 81 18 97 33 65 1 126 62 94 30 110 46 78 14 118 54 86 22 102 38 70 6 122 58 90 26 106 42 74 10 114 50 82 18 98 34 66 2 124 60 92 28 108 44 76 12 116 52 84 20 100 36 68 4 120 56 88 24 104 40 72 8 112 48 80 16 96 32 64 0
Code#
9,600 4,800 2,400 sps
Mature 1xRTT Mixed-Mode Voice and Data:

1 RC3/RC4 Shared F-SCH, 20 RC3 Voice Users, 38 RC4 Voice Users, 4 Active+12 Control-Hold RC3 and RC4 Data Users
16 data users time-share 2 F-DCCH for Control Hold state. Data users will get 38.4, 76.4, 153.6 or 307.2 kb/s peak, ~9 or 19 kb/s average, good latency. Fwd power tight!
Code# 4 chips Code# 8 chips Code# 16 chips Code# 0 32 chips Code# 64 chips Code# 128 chips
2 F-SCH 307.2 ksps
Code# 307200 sps Code# 153,600 sps Code# 76,800 sps
F-SCH 153K RC3 F-SCH or 307.2 ksps RC4 F-SCH 307K

6 1 5 F-SCH 153.6 ksps 1 9 76.8 ksps 1 17 38.4k 9 38.4k 25 38.4k 5 76.8 ksps 5 38.4k 21 38.4k 13 76.8 ksps 13 38.4k 29 38.4k 3 7 F-SCH 153.6 ksps 7 15 76.8 ksps 15 38.4k
4 F-SCH 153.6 ksps
2 F-SCH 153.6 ksps 2 76.8 ksps 2 38.4k 18 38.4k 10 76.8 ksps 10 38.4k 26 38.4k
Or
F-SCH 153.6 ksps 6 76.8 ksps 6 38.4k 22 38.4k 14 76.8 ksps 14 38.4k 30 38.4k
F-SCH 153.6 ksps
bi m Co
8 76.8 ksps 16 8 38.4k 24 38.4k
4 76.8 ksps 4 38.4k 20 38.4k
12 76.8 ksps 12 38.4k 28 38.4k
11
76.8 ksps 3 38.4k
76.8 ksps
76.8 ksps 23
t na
7 38.4k 38.4k
19 38.4k
11 38.4k
27 38.4k
31 Code# 38.4k 38,400 sps Code# 19,200 sps Code# 9,600 4,800 2,400 sps
ns io
63 31 47 15 55 23 39 7 59 27 43 11 51 19 35 3 61 29 45 13 53 21 37 5 57 25 41 9 49 17 33 1 62 30 46 14 54 22 38 6 58 26 42 10 50 18 34 2 60 28 44 12 52 20 36 4 56 24 40 8 48 16 32 0
F-FCHs 9.6k RC3 Voice
19.2k 19.2k 19.2k 19.2k 19.2k 19.2k 19.2k 19.2k 19.2k 19.2k 19.2k 19.2k 19.2k 19.2k 19.2k 19.2k 19.2k 19.2k 19.2k 19.2k 19.2k 19.2k 19.2k 19.2k 19.2k 19.2k 19.2k 19.2k 19.2k 19.2k 19.2k Paging 19.2k 19.2k 19.2k 19.2k 19.2k 19.2k 19.2k 19.2k 19.2k 19.2k 19.2k 19.2k 19.2k 19.2k 19.2k 19.2k 19.2k 19.2k 19.2k 19.2k 19.2k 19.2k 19.2k 19.2k 19.2k 19.2k 19.2k 19.2k 19.2k 19.2k Sync Pilot
F-FCHs F-DCCHs
????
127 63 95 31 111 47 79 15 119 55 87 23 103 39 71 7 123 59 91 27 107 43 75 11 115 51 83 19 99 35 67 3 125 61 93 29 109 45 77 13 117 53 85 21 101 37 69 5 121 57 89 25 105 41 73 9 113 49 81 18 97 33 65 1 126 62 94 30 110 46 78 14 118 54 86 22 102 38 70 6 122 58 90 26 106 42 74 10 114 50 82 18 98 34 66 2 124 60 92 28 108 44 76 12 116 52 84 20 100 36 68 4 120 56 88 24 104 40 72 8 112 48 80 16 96 32 64 0
October, 2007
Course 120+: 36
Reverse Link Walsh Codes in 1xRTT

Code# 2 chips Code# 4 chips Code# 8 chips Code# 16 chips 0 8 4 12 available 2 10 0 4 0 1 Code# 614400 sps 3 Code# 307200 sps Code# 153600 sps 1 9 5 13 3 11 7 15 Code# 76800 sps
If a Walsh Code is used, the other walsh codes directly under it cannot be used.
0 2 1
R-SCH 1 (max speed)
R-SCH 2 (max speed)

2 6 1 5
R-SCH 1 (1/2 speed)

3 7
R-SCH 2 speed
6 14
Pilot DCCH FCH & Pwr if Ctrl used
A 1xRTT mobile may transmit several channels at the same time for example, R-FCH and Pilot and R-SCH. the mobile uses steady walsh codes as channels much like a BTS All mobiles use the same Walsh codes for the same functions notice the two possible speeds of R-SCH 1 and R-SCH 2
Some Some Other Other Internal Internal Processes Processes

Vocoding, Vocoding, Multiplexing, Multiplexing, Power Power Control Control
October, 2007
Course 120+: 38
Variable Rate Vocoding & Multiplexing

DSP QCELP VOCODER
20ms Sample Vocoders compress speech, reduce bit Pitch rate, greatly increasing capacity Filter CDMA uses a superior Variable Rate Codebook Vocoder FeedCoded Result back Formant full rate during speech Filter low rates in speech pauses increased capacity bits Frame Sizes more natural sound 192/288 Full Rate Frame Voice, signaling, and user secondary 96/144 1/2 Rate Frame data may be mixed in CDMA frames 48/72 1/4 Rt.
24/36
1/8
Frame Contents: can be a mixture of Primary Signaling Secondary Traffic (System (On-Air
(Voice or data) Messaging) activation, etc)
October, 2007
Course 120+: 39
How Power Control Works

REVERSE LINK POWER ADJUSTMENT
BSC Bad FER? Raise Setpoint BTS Stronger than setpoint? Eb/No Setpoint Reverse Link RX RF Digital Open Loop Closed Loop TX RF Digital
MOBILE
TXPO = -(RXdbm) -C
October, 2007
Course 120+: 40

MOBILE
IS-95, 1xRTT 800 Power Control Bits per second! ALL SAME METHOD
TXPO = -(RXdbm) -C + TXGA
October, 2007
Course 120+: 41

MOBILE
BSC Pilot Sync Paging User 1 User 2 User 3 BTS (1 sector)
FORWARD LINK POWER ADJUSTMENT
MOBILE
DGU
Voc- Selecoder tor
I Q Short PN
Transmitter, Sector X
Forward Link
October, 2007
Course 120+: 42

MOBILE
MOBILE
DGU
Voc- Selecoder tor
I Q Short PN
Forward Link
Bad Frame PMRM POWER MEAS. REPORT MSG 2 bad in last 4, Help!! Counter
IS-95 RS1 Method
S L O W ~ 1 sec. typical
October, 2007
Course 120+: 43

MOBILE
MOBILE
DGU
Voc- Selecoder tor
I Q Short PN
Forward Link
FASTER ~ 100 ms reaction

FEI Bits Mark Bad Frames Received
FEI Bits
IS-95 RS2 Method
October, 2007
Course 120+: 44

MOBILE
MOBILE
DGU
Voc- Selecoder tor
I Q Short PN
Forward Link
FASTEST ~ 4 ms reaction
POWER CONTROL BITSTREAM RIDING ON MOBILE PILOT October, 2007 120v5 (c) 2007 Scott Baxter
Eb/No Setpoint
1xRTT Method
Course 120+: 45

MOBILE
MOBILE
DGU
Voc- Selecoder tor
I Q Short PN
Forward Link
Bad Frame PMRM POWER MEAS. REPORT MSG 2 bad in last 4, Help!! Counter
FEI Bits Mark Bad Frames Received POWER CONTROL BITSTREAM RIDING ON MOBILE PILOT October, 2007 120v5 (c) 2007 Scott Baxter
IS-95 RS1 Method IS-95 RS2 Method 1xRTT Method
FEI Bits Eb/No Setpoint
Course 120+: 46
Details of Reverse Link Power Control

TXPO Handset Transmit Power Actual RF power output of the handset transmitter, including combined effects of open loop power control from receiver AGC and closed loop power control by BTS cant exceed handsets maximum (typ. +23 dBm)
C = +73 for 800 MHz. systems = +76 for 1900 MHz. systems
Subscriber Handset
BTS
Receiver>>
LNA DUP x
TXPO
x
PA LO
LO
Rake R R R S Viterbi Decoder
IF
Open Loop
Closed Loop Pwr Ctrl IF x IF Mod x Q x I Long PN Orth Mod FEC Vocoder
<<Transmitter
Typical TXPO:
+23 dBm in a coverage hole 0 dBm near middle of cell -50 dBm up close to BTS 0 dB -10 dB -20 dB Typical Transmit Gain Adjust
TXGA Transmit Gain Adjust Sum of all closed-loop power control commands from the BTS since the beginning of this call
October, 2007
Time, Seconds
Course 120+: 47
CDMA CDMA Network Network Architecture Architecture
October, 2007
Course 120+: 48
Structure of a Typical CDMA System

HLR Home Location Register (subscriber database)
CUSTOMER SERVICE
BASE STATIONS Voice Mail System SWITCH BASE STATION CONTROLLER
PSTN Local Carriers Long Distance Carriers
Mobile Telephone Switching Office

ATM Link to other CDMA Networks (Future)
October, 2007
Course 120+: 49
Voice Call Path through the CDMA Network

MTX
SLM CM
GPS
GPSR
BSC-BSM
BSM
BTS
GPS
GPSR CDSU CDSU CDSU DISCO
Ch. Card ACC
TFU
DMS-BUS LPP ENET LPP
TFU1 CDSU CDSU DISCO 1 DISCO 2
Packets
CDSU CDSU CDSU
CDSU
DS0 in T1
DTCs
Chips
Channel Element RF
Txcvr A Txcvr B Txcvr C
RFFE A RFFE B RFFE C
SBS
IOC
Vocoders Selectors
Vocoder, Selector
PSTN
October, 2007
Course 120+: 50
1x Data Call Path through the CDMA Network

MTX
SLM CM
GPS
GPSR
BSC-BSM
BSM
BTS
GPS
GPSR CDSU CDSU CDSU DISCO
Ch. Card ACC
TFU
DMS-BUS LPP ENET LPP
TFU1 CDSU CDSU DISCO 1 DISCO 2
Packets
CDSU CDSU CDSU
CDSU
DTCs
Chips
Channel Elements
(FCH, SCH)
Txcvr A Txcvr B Txcvr C
RFFE A RFFE B RFFE C
SBS
IOC
Vocoders Selectors
Selector
RF
PSTN Interface Internet VPNs

October, 2007
R-P
PDSN
The The Data Data Side Side of of 3G 3G Networks Networks
October, 2007
Course 120+: 52
Original 2nd Generation CDMA Voice Networks
(C)BSC or Access Manager Switch BTS
rf
14400 bps max
PSTN
t1
CIRCUIT-SWITCHED VOICE TRAFFIC
t1
SEL
t1
CE
Handset
POINT-TO-POINT PACKETS
2nd Generation CDMA Networks were designed primarily to handle voice The CDMA voice conversations 20-ms frames are carried as packets between mobile and the Selector The selector assembles frames being sent to the mobile and disassembles frames coming from the mobile Frame contents normally include voice and occasional signaling; may also include data if additional equipment is included (not shown) The vocoders in the BSC and the mobile convert the packet stream into continuous DS-0 audio for the end-users The MSC makes a circuit-switched connection for call
Simple IP
IP Based
Simple IP Network
FAST IP PACKET TRAFFIC Internet VPNs T
AAA
Authentication Authorization Accounting
transport to data networks Dynamic/static connection from local PDSN No mobility beyond serving PDSN
PDSN
R-P Interface
BTS
rf
Fast! CE
Wireless Mobile Device
(C)BSC/Access Manager Switch
PSTN
t1
t1
SEL
t1
CIRCUIT-SWITCHED VOICE TRAFFIC
POINT-TO-POINT PACKETS
In a Simple IP network, the mobile is able to connect to the external packet networks directly through the PDSN attached to the local BSC The IP address for the internet connection is assigned by the local PDSN from the pool of addresses available to it If the mobile moves into a different network, the data session ends The mobile can establish an entirely new connection through the new network, if desired
Mobile IP Network
Internet
Regional Data Center
Private IP Networks
Home Agent
Home Agent
AAA Server
Operator's Private Network

Nortel System
IP Data
Lucent System
IP Data
Motorola System
IP Data
PCF
PDSN FA Switch
RP Interface BSC
PDSN FA
RP
Access Mgr. Switch
PDSN/FA Switch
RP
CBSC
Voice
Voice
Voice
PSTN
October, 2007
PSTN
PSTN
Course 120+: 55
Mobile IP and Secure Tunneling: Mail Analogy

Mobile IP is a packetforwarding arrangement that allows the mobile user to send and receive packets just as if they were physically present at their home agent location.
Just like Home!
158766 158767 158768 158769 158770 158771 158772
158774 158775 158776
158782 158783 158784 158785
158790 158791 158792 158793 158794 158795 158796 158797
Foreign Agent
Home Agent
Encapsulation
158778 158779 158780 158781
158786 158787 158788 158789
FedEx
Secure Tunneling
Forward and Reverse
FedEx
158773
Mobile User
This box is the mobile user's Postal address
October, 2007
Course 120+: 56
Chapter 2
Call Call Processing Processing and and Layer Layer 3 3 Messages Messages
October, 2007
Course 120+: 57
Messages in CDMA
In CDMA, most call processing events are driven by messages Some CDMA channels exist for the sole purpose of carrying messages; they never carry users voice traffic Sync Channel (a forward channel) Paging Channel (a forward channel) Access Channel (a reverse channel) Forward or Reverse Dedicated Control Channels On these channels, there are only messages, not voice or data Some CDMA channels exist just to carry user traffic Forward Fundamental and Supplemental Channels Reverse Fundamental and Supplemental Channels On these channels, most of the time is filled with traffic and messages are sent only when there is something to do All CDMA messages have very similar structure, regardless of the channel on which they are sent
October, 2007
Course 120+: 58
Taking Apart a CDMA Layer-3 Message

CDMA messages on both forward and reverse traffic channels are normally sent via dim-and-burst Messages include many fields of binary data The first byte of each message identifies message type: this allows the recipient to parse the contents To ensure no messages are missed, all CDMA messages bear serial numbers and important messages contain a bit requesting acknowledgment Messages not promptly acknowledged are retransmitted several times. If not acknowledged, the sender may release the call Field data processing tools capture and display the messages for study
EXAMPLE: A POWER MEASUREMENT REPORT MESSAGE
Field MSG_TYPE (00000110) ACK_SEQ MSG_SEQ ACK_REQ ENCRYPTION ERRORS_DETECTED POWER_MEAS_FRAMES LAST_HDM_SEQ NUM_PILOTS Length (in bits) 8 3 3 1 2 5 10 2 4
NUM_PILOTS occurrences of this field: PILOT_STRENGTH RESERVED (0s) 6 0-7
October, 2007
Course 120+: 59
Message Vocabulary: Acquisition & Idle States

Pilot Channel
No Messages
Sync Channel
Sync Channel Msg BTS
Paging Channel
Access Parameters Msg System Parameters Msg CDMA Channel List Msg Extended System Parameters Msg Extended Neighbor List Msg Global Service Redirection Msg Service Redirection Msg SSD Update Msg Null Msg General Page Msg Order Msg
Access Channel
Registration Msg Order Msg
Mobile Station Acknowldgment Long Code Transition Request SSD Update Confirmation many others..
Base Station Acknowledgment Lock until Power-Cycled Maintenance required many others..
Channel Assignment Msg Feature Notification Msg Authentication Challenge Msg Status Request Msg TMSI Assignment Msg Data Burst Msg
Origination Msg Page Response Msg Authentication Challenge Response Msg Status Response Msg TMSI Assignment Completion Message Data Burst Msg
October, 2007
Course 120+: 60
Message Vocabulary: Conversation State

Forward Traffic Channel
Order Msg
Base Station Acknowledgment Base Station Challenge Confirmation Message Encryption Mode
Alert With Information Msg Service Request Msg Service Response Msg Service Connect Msg Service Option Control Msg Status Request Msg Flash With Information Msg Data Burst Msg Extended Handoff Direction Msg Neighbor List Update Msg In-Traffic System Parameters Msg
Reverse Traffic Channel

Service Request Msg Service Response Msg Service Connect Completion Message Service Option Control Message Status Response Msg Flash With Information Msg Data Burst Message Pilot Strength Measurement Msg Handoff Completion Msg Origination Continuation Msg Authentication Challenge Response Msg TMSI Assignment Completion Message Send Burst DTMF Msg Parameters Response Message Power Measurement Report Msg Order Message
Mobile Sta. Acknowledgment Long Code Transition Request SSD Update Confirmation Connect
Authentication Challenge Msg TMSI Assignment Msg Send Burst DTMF Msg Set Parameters Msg Power Control Parameters Msg. Retrieve Parameters Msg Analog Handoff Direction Msg SSD Update Msg Mobile Station Registered Msg
October, 2007
Course 120+: 61
Whats In a Handset? How does it work?

summing time-aligned
Chips
control
Traffic Correlator PN xxx Walsh xx Receiver RF Section IF, Detector AGC RF Duplexer RF Open Loop Traffic Correlator PN xxx Walsh xx Traffic Correlator PN xxx Walsh xx Pilot Searcher PN xxx Walsh 0 Transmit Gain Adjust
bits
Digital Rake Receiver Symbols Traffic Correlator PN xxx Walsh xx
Symbols
power
Viterbi Decoder, Convl. Decoder, Demultiplexer
Packets
Messages
Audio Vocoder Audio
CPU
Transmitter RF Section
October, 2007
Transmitter Digital Section Long Code Gen.

Messages
Course 120+: 62
Let's Let's Acquire Acquire The The System! System!
October, 2007
Course 120+: 63
1. Find the Strongest Pilot!

PN 168
BTS
W0
PILOT TIME
Rake Receiver #1 unassigned #2 unassigned #3 unassigned #4 unassigned Pilot Searcher
SCAN
Find Strongest
The pilot searcher of the phone spends about 3.4 seconds measuring the pilot strength at every possible PN delay, in miniscule 1/8 chip delay steps, to see how much energy is being received from every nearby sector The sector with the strongest pilot is chosen
Ec/Io 0
Pilot Searcher Scans the Entire Range of PNs

32K 512
-20 Chips 0 PN 0
October, 2007
2. Read the Sync Channel Message

PN 168
W32 BTS
W0
The Sync Channel is a Sesame Street for mobiles! SYNC

PILOT TIME SYN SYN SYN SYN SYN SYN SYN SYN SYN SYN SYN SYN SYN SYN SYN SYNSYN
Read Sync Ch. Msg
Rake Receiver #1 PN168+0 W32 Stay Locked! #2 PN168+2 W32 #3 PN168+9 W32 #4 PN168+5 W32 Pilot Searcher
SYNC CHANNEL MESSAGE

MSG_LENGTH, 28, 28 octets MSG_TYPE, 1, Sync Channel Message P_REV, 6, IS-2000 Revision 0 MIN_P_REV, 1, J-STD-008 SID 995, NID 3, PILOT_PN 240 LC_STATE, 0x00 25 93 12 7C FA, SYS_TIME, 0x02 20 34 B7 53, 10/23/2001 11:02:54 LP_SEC, 13, LTM_OFF, 54, -660 minutes DAYLT, 1, Yes PRAT, 1, 4800 bps CDMA_FREQ, 274 (IS-95) EXT_CDMA_FREQ, 274 (1xRTT) SR1_BCCH_SUPPORTED, 0 SR3_INCL, 0, No RESERVED, 0,
Great! We found a signal. Now we know: The strongest pilot available The exact timing of this pilot We do NOT yet know This pilots PN offset 20 msec frame timing of channels Long Code State The SYNC channel is a special channel timed exactly in step with the short PN sequence It tells us all these unknown quantities
Course 120+: 65
4. Is This the Right System to Use? Scan the PRL for Anything Better
ROAMING LIST
Roaming List Type: IS-683A Preferred Only: FALSE Default Roaming Indicator: 0 Preferred List ID: 10018
SYSTEM TABLE
INDEX 296 297 298 299 300 301 302 303 304 305 306 307 308 309 310 311 312 313 314 315 316 317 318 319 320 321 322 323 324 325 326 327 328 SID 4144 4812 205 208 208 342 342 478 1038 1050 1058 1375 1385 143 143 4103 4157 312 444 444 1008 1012 1014 1688 113 113 179 179 465 2119 2094 1005 1013 NEG/ NID PREF 65535 Pref 65535 Pref 65535 Pref 65535 Pref 65535 Pref 65535 Pref 65535 Pref 65535 Pref 65535 Pref 65535 Pref 65535 Pref 65535 Pref 65535 Pref 65535 Pref 65535 Pref 65535 Pref 65535 Pref 65535 Pref 65535 Pref 65535 Pref 65535 Pref 65535 Pref 65535 Pref 65535 Pref 65535 Pref 65535 Pref 65535 Pref 65535 Pref 65535 Pref 65535 Pref 65535 Pref 65535 Pref 65535 Pref GEO NEW SAME SAME SAME SAME SAME SAME SAME SAME SAME SAME SAME SAME SAME SAME NEW SAME SAME SAME SAME SAME SAME SAME SAME SAME SAME SAME SAME SAME SAME SAME SAME SAME ACQ ROAM PRI INDEX IND SAME 13 1 MORE 21 1 SAME 4 0 MORE 37 0 SAME 4 0 MORE 37 0 SAME 4 0 SAME 4 0 SAME 4 0 SAME 4 0 SAME 4 0 SAME 4 0 MORE 4 0 MORE 37 0 MORE 4 0 SAME 3 1 MORE 2 1 SAME 4 0 MORE 37 0 SAME 4 0 SAME 4 0 SAME 4 0 SAME 4 0 MORE 4 0 MORE 37 0 SAME 4 0 MORE 37 0 SAME 4 0 SAME 4 0 MORE 4 0 MORE 4 0 SAME 4 0 SAME 4 0
ACQUISITION TABLE
INDEX ACQ TYPE 0 6 1 6 2 6 3 6 4 1 5 6 6 6 7 6 8 6 9 6 10 6 11 6 12 6 13 6 14 6 15 6 16 6 17 6 18 6 19 6 20 6 21 6 22 6 23 6 24 6 25 6 26 6 27 1 28 1 29 5 30 5 31 5 32 5 33 5 34 5 35 4 36 4 37 4 38 6 39 6 40 6 41 6 42 6 43 6 44 6 45 6 46 6 CH1 500 575 50 25 Both 450 675 250 550 75 200 425 500 500 650 25 425 200 825 350 750 325 1150 350 25 50 500 A B A B C D E F A B Both 350 25 675 850 650 450 325 150 1025 CH2 425 625 100 200 500 500 50 375 50 250 500 575 625 500 50 550 50 850 325 725 725 1175 875 1175 200 1075 CH3 825 500 75 350 350 600 175 425 175 175 575 475 350 675 375 225 175 925 375 775 350 325 825 25 850 CH4 575 425 475 375 575 575 625 250 50 25 25 50 25 350 725 375 675 750 CH5 CH6 CH7 CH8 CH9 850 325 625 825 725 650 475 850 175 250 50 475 175 250
a GEO GROUP
Climb!
Its not enough just to find a CDMA signal We want the CDMA signal of our own system or a favorite roaming partner Phones look in the PRL to see if there is a more preferred signal than whatever they find first They check frequencies in the Acquisition Table until they find the best system, or look down the list level by level
October, 2007
325 675 375 75 250 750 250 25 375
650 775 575 725 425 425 50 575 175 775
1175 725 600 100 775 425 575 625
a GEO GROUP
375 1175 200 75 175 250 100 250 75 825
825 100 600
750
850 1175 775
475 350 375 1025 1050 1075 475 625 675 1050 1075
PRL: Preferred Roaming List

Programmed into each phone by the system operator; can be updated over the air.
Course 120+: 66
3. The Timing Shift: Adjust all Internal Clocks

PN 168
End of SCH SuperFrame W32 SYNC PILOT TIME +320 ms Rake Receiver #1 unassigned #2 unassigned #3 unassigned #4 unassigned Pilot Searcher -PN 168 The Timing Change Stay Locked! SYN SYN SYN SYN SYN SYN SYN SYN SYN SYN SYN SYN SYN SYN SYN SYNSYN
BTS
W0
Ref Time
This timeline shows each step as the mobile acquires the system First search all PNs to find the strongest pilot Read the Sync Channel Message to learn times and LC state The times and state refer to a future moment 320 ms after the end of the Sync Channel superframe, minus the BTS PN offset. This waiting period is called the Timing Change.
October, 2007
Course 120+: 67
5. Collect the Configuration Messages!

PN 168
W1 PAGING W32 SYNC PILOT TIME Global Service ** Redirection Message Extended System Parameters Message Access Parameters Message ** CDMA Channel List Message Neighbor ** List Message System Parameters Message Rake Receiver #1 PN168+0 W1 Stay Locked! #2 PN168+2 W1 #3 PN168+9 W1 #4 PN168+5 W1 Pilot Searcher Collect all the Configuration Messages (all config.messages are repeated every 1.28 sec) ACK SYS ChASN CHN XSYS NBR ChASN GSRM APM ACK GPAG ACK SYN SYN SYN SYN SYN SYN SYN SYN SYN SYN SYN SYN SYN SYN SYN SYNSYN
BTS
W0
Ref Time
Collect all the Configuration Messages Absorb and store all their parameters.
The Configuration Messages tell the mobile everything it needs to know to successfully operate on the system Access Parameters Message (how to behave on the access channel) System Parameters Message (registration, handoff, window settings) Extended System Parameters Message (how to identify; packet details) Channel List Message (list of all carrier frequencies on this sector) Neighbor List Message (list of nearby sectors to watch out for) Global Service Redirection Message (dont stay here - go over there)
6. Welcome! Just Monitor the Paging Channel

PN 168
W1 PAGING W32 SYNC PILOT TIME Rake Receiver #1 PN168+0 W1 #2 PN168+2 W1 #3 PN168+9 W1 #4 PN168+5 W1 Pilot Searcher Now monitor the Paging Channel for any incoming calls or messages ACK SYS ChASN CHN XSYS NBR ChASN GSRM APM ACK GPAG ACK SYN SYN SYN SYN SYN SYN SYN SYN SYN SYN SYN SYN SYN SYN SYN SYNSYN
BTS
W0
Ref Time
Listen to see if you get any incoming calls or short messages!
October, 2007
Course 120+: 69
Review: All The Steps Thus Far

PN 168
W1 PAGING W32 SYNC PILOT TIME Rake Receiver #1 PN168+0 W1 #2 PN168+2 W1 #3 PN168+9 W1 #4 PN168+5 W1 Pilot Searcher -PN 168 The Timing Change Stay Locked! End of SCH SuperFrame Collect all the Configuration Messages (all config.messages are repeated every 1.28 sec) ACK SYS ChASN CHN XSYS NBR ChASN GSRM APM ACK GPAG ACK SYN SYN SYN SYN SYN SYN SYN SYN SYN SYN SYN SYN SYN SYN SYN SYNSYN
BTS
W0
Ref Time
+320 ms Global Service ** Redirection Message Extended System Parameters Message Access Parameters Message ** CDMA Channel List Message Neighbor ** List Message System Parameters Message Now monitor the Paging Channel for any incoming calls or messages
Collect all the Configuration Messages Absorb and store all their parameters.
This timeline shows each step as the mobile acquires the system First search all PNs to find the strongest pilot Read the Sync Channel Message to learn times and LC state The times and state refer to a future moment 320 ms after the end of the Sync Channel superframe, minus the BTS PN offset. This waiting period is called the Timing Change. Listen to the paging channel and collect all the configuration messages Now the mobile can begin normal page monitoring operation
Registration: Mobile, Sign In Please

W1 W32 PAGING KSAKX KPCKGKSAKXPNKPPCKGKSAKXPNKPPCKGKSAKXPNKPPCKGSAKXPNGKSAKXPNKGKSAKXPG NSA SYNC SSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSS PILOT TIME ACCESS CHANNEL 20 sec. 20 seconds after system acquisition, the mobile sends a Registration Message on the access channel. R The BTS sends an ACK on the Paging Channel. The mobile is now Registered and can begin slotted mode paging.
BTS
W0
After acquiring the system, the mobile must register This allows the current system to update the HLR with the mobiles location, so incoming calls can be delivered here It also allows the mobile to tell the system if it wants to do slotted mode paging, and if so, what Slot Cycle Index. A holdoff timer delays initial registration 20 seconds after acquisition This avoids needless registration by mobiles just being turned on to check who is the owner, or other short power-on/off uses Registration has many different controlling parameters, all declared by the system on the paging channel in the System Parameters Message
Stretch Your Battery! IS-95 Slotted Mode Paging

W1 Mobile listens during its slot, every cycle NSA PAGING KGKSAKKGCKGKSAKXPNKPPCKGKSAKXPNKPPCKGKSGKXPNKPPCKGSAKXPNGKSAKXPNKGKSAKXPG
W32
SYNC SSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSS PILOT TIME
BTS
W0 Rake Receiver #1 PN168+0 W1 #2 PN168+2 W1 #3 PN168+9 W1 #4 PN168+5 W1 Pilot Searcher
P E E L S
0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 0 1 2 3 4 5 1 Slot Cycle Battery Drain 1 Slot 80 ms 1 Slot Cycle
Slotted Mode Paging is a battery-saving trick After registering with the system, the mobile goes into sleep mode with low battery drain It wakes on a schedule to listen for pages Page slots are 80 ms. Long Slot cycles can be set to many lengths Longer cycles give better battery life, but introduce longer possible delays in call delivery Each mobile uses Hashing with its IMSI and SCI to determine which slot it should always monitor
Each mobile has a preferred SCI programmed by the vendor. The system also declares a maximum slot cycle index, which mobiles may not exceed. Slot Cycle Index (SCI) 0 1 2 3 4 5 6 7 Number Slots in Cycle 16 32 64 128 256 512 1024 2048 Length of Cycle, sec. 1.28 sec. 2.56 sec. 5.12 sec. 10.24 sec. 20.48 sec. 40.96 sec. 81.92 sec. 163.84 sec.
Course 120+: 72
Even Better: CDMA2000 Slotted Mode Paging Using the Quick Paging Channel (QPCH)
W1 W48 W32 Mobile listens to PCH only when QPCH requires NSA PAGING KGKSAKKGCKGKSAKXPNKPPCKGKSAKXPNKPPCKGKSGKXPNKPPCKGSAKXPNGKSAKXPNKGKSAKXPG QPCH SYNC SSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSS PILOT TIME Rake Receiver #1 PN168+0 W1 #2 PN168+2 W1 Paging Channel Slots Paging Channel Slots 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 0 1 2 3 4 5 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 0 1 2 3 4 5 6 Battery Drain QPCH Slots QPCH Slots
BTS
W0
er p e W1P #3 PN168+9 De E
#4 PN168+5 W1 Pilot Searcher
E L S
IS-95 mobiles must monitor their PCH slots during every slot cycle Must wake up 1000s of times per hour and run high-drain message parsers, even if they are not paged The Quick Paging Channel (QPCH) is a simpler bitstream which notifies a 1xRTT mobile to monitor the PCH, only when a page is coming for its IMSI group There are at least xx IMSI groups. A mobile knows its group by hashing.
October, 2007
Mobile hashes using its IMSI to recognize which indicator bits it should monitor. If the bits are on, the mobile wakes up and listen to the next PCH slot somebody watching those bits will be paged.
PCH SLOT
GenPG 20 ms 80 ms
QPCH SLOT
80 ms 100 ms
Course 120+: 73
Idle Mode Handoff

An idle mobile always uses the best available signal In idle mode, it isnt possible to do soft handoff and listen to multiple sectors or base stations at the same time -- the paging channel information stream is different on each sector, not synchronous -- just like ABC, NBC, CBS, and CNN TV news programs arent in word-sync for simultaneous viewing Since a mobile cant combine signals, the mobile must switch quickly, always enjoying the best available signal The mobiles pilot searcher is constantly checking neighbor pilots A Mobile might change pilots for either of two reasons: It notices another pilot at least 3 db stronger than the current active pilot, and it stays this good continuously for at least five seconds: mobile switches at end of the next superframe Mobile loses the current paging channel. If another signal is better than the old active sector, change immediately to the new one. On the new paging channel, if the mobile learns that registration is required, it re-registers on the new sector
October, 2007
Course 120+: 74
Idle Mode on the Paging Channel: Meet the Neighbors, track the Strongest Pilot
Ec/Io 0 All PN Offsets
-20 Chips 0 PN 0
SRCH_WIN_A Mobile Rake RX F1 PN168 W01 F2 PN168 W01 F3 PN168 W01 Srch PN??? W0
32K 512
Active Pilot
Rake Fingers

SRCH_WIN_N
The phones pilot searcher constantly checks the pilots listed in the Neighbor List Message
Reference PN
Neighbor Set
If the searcher ever notices a neighbor pilot substantially stronger than the current reference pilot, it becomes the new reference pilot and the phone switches over to its paging channel on the next superframe. This is called an idle mode handoff.
Receiving Receiving An An Incoming Incoming Call Call
October, 2007
Course 120+: 76
Incoming Call Termination Voice

MSC HLR SS7 PSTN switch VLR BSC BTS A
W23 TRAFFIC W1 PAGING KG GenPag KS PCGKSPKG ACK KPC CHasn KPNKPPCKGKSGKXPNKPPCKGSAKXPNGKSAKXPNKGKSAKXPG NSAGSAKXPNGKSAK W32 SYNC S SSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSS PILOT TIME ACCESS TRAFFIC Rake Receiver #1 PN168+0 W01 #2 PN168+2 W01 #3 PN168+9 W01 #4 PN168+5 W01 Pilot Searcher
BTS
W0
October, 2007
Course 120+: 77

Scotts mobile, are you there? You have a call.
W23 TRAFFIC W1 PAGING KG KS PCGKSPKG ACK KPC CHasn KPNKPPCKGKSGKXPNKPPCKGSAKXPNGKSAKXPNKGKSAKXPG NSAGSAKXPNGKSAK GenPag W32 SYNC S SSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSS PILOT TIME ACCESS TRAFFIC Rake Receiver #1 PN168+0 W01 #2 PN168+2 W01 #3 PN168+9 W01 #4 PN168+5 W01 Pilot Searcher
BTS
W0
October, 2007
Course 120+: 78

W23 TRAFFIC W1 PAGING KG KS PCGKSPKG ACK KPC CHasn KPNKPPCKGKSGKXPNKPPCKGSAKXPNGKSAKXPNKGKSAKXPG NSAGSAKXPNGKSAK GenPag W32 SYNC S SSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSS PILOT TIME ACCESS TRAFFIC Rake Receiver #1 PN168+0 W01 #2 PN168+2 W01 #3 PN168+9 W01 #4 PN168+5 W01 Pilot Searcher PgResp
BTS
W0
Im here! What should I do?
October, 2007
Course 120+: 79

I hear you. Just a moment.
W23 TRAFFIC W1 PAGING KG KS PCGKSPKG KPC CHasn KPNKPPCKGKSGKXPNKPPCKGSAKXPNGKSAKXPNKGKSAKXPG NSAGSAKXPNGKSAK GenPag ACK W32 SYNC S SSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSS PILOT TIME ACCESS TRAFFIC Rake Receiver #1 PN168+0 W01 #2 PN168+2 W01 #3 PN168+9 W01 #4 PN168+5 W01 Pilot Searcher PgResp
BTS
W0
October, 2007
Course 120+: 80

BTS
W0
October, 2007
Course 120+: 81

Your channel Is ready! Walsh 23
W23 TRAFFIC W1 PAGING KG GenPag KS PCGKSPKG ACK KPC CHasn KPNKPPCKGKSGKXPNKPPCKGSAKXPNGKSAKXPNKGKSAKXPG NSAGSAKXPNGKSAK W32 SYNC S SSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSS PILOT TIME ACCESS TRAFFIC Rake Receiver #1 PN168+0 W01 #2 PN168+2 W01 #3 PN168+9 W01 #4 PN168+5 W01 Pilot Searcher PgResp
BTS
W0
October, 2007
Course 120+: 82

BTS
W0
I see frames!
October, 2007
Course 120+: 83

I see frames!
W23 TRAFFIC W1 PAGING KG GenPag KS PCGKSPKG ACK KPC CHasn KPNKPPCKGKSGKXPNKPPCKGSAKXPNGKSAKXPNKGKSAKXPG NSAGSAKXPNGKSAK W32 SYNC S SSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSS PILOT TIME ACCESS TRAFFIC Rake Receiver #1 PN168+0 W23 #2 PN168+2 W23 #3 PN168+9 W23 #4 PN168+5 W23 Pilot Searcher PgResp
BTS
W0
I see frames!
October, 2007
Course 120+: 84

I see frames!
I see you! ACK
W23 TRAFFIC
W1 PAGING KG GenPag KS PCGKSPKG ACK KPC CHasn KPNKPPCKGKSGKXPNKPPCKGSAKXPNGKSAKXPNKGKSAKXPG NSAGSAKXPNGKSAK W32 SYNC S SSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSS PILOT TIME ACCESS TRAFFIC Rake Receiver #1 PN168+0 W23 #2 PN168+2 W23 #3 PN168+9 W23 #4 PN168+5 W23 Pilot Searcher PgResp
BTS
W0
I see frames!
October, 2007
Course 120+: 85

I see frames!
I see you! ACK
W23 TRAFFIC
W1 PAGING KG GenPag KS PCGKSPKG ACK KPC CHasn KPNKPPCKGKSGKXPNKPPCKGSAKXPNGKSAKXPNKGKSAKXPG NSAGSAKXPNGKSAK W32 SYNC S SSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSS PILOT TIME ACCESS TRAFFIC Rake Receiver #1 PN168+0 W23 #2 PN168+2 W23 #3 PN168+9 W23 #4 PN168+5 W23 Pilot Searcher PgResp ACK
BTS
W0
I see frames!
I see you, too!
October, 2007
Course 120+: 86

I see frames!
I see you! ACK
Then lets use Service Option X, for voice with 8k EVRC SVCcon
W23 TRAFFIC
W1 PAGING KG GenPag KS PCGKSPKG ACK KPC CHasn KPNKPPCKGKSGKXPNKPPCKGSAKXPNGKSAKXPNKGKSAKXPG NSAGSAKXPNGKSAK W32 SYNC S SSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSS PILOT TIME ACCESS TRAFFIC Rake Receiver #1 PN168+0 W23 #2 PN168+2 W23 #3 PN168+9 W23 #4 PN168+5 W23 Pilot Searcher PgResp ACK
BTS
W0
I see frames!
I see you, too!
October, 2007
Course 120+: 87

I see frames!
I see you! ACK
W23 TRAFFIC
W1 PAGING KG GenPag KS PCGKSPKG ACK KPC CHasn KPNKPPCKGKSGKXPNKPPCKGSAKXPNGKSAKXPNKGKSAKXPG NSAGSAKXPNGKSAK W32 SYNC S SSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSS PILOT TIME ACCESS TRAFFIC Rake Receiver #1 PN168+0 W23 #2 PN168+2 W23 #3 PN168+9 W23 #4 PN168+5 W23 Pilot Searcher PgResp ACK SVCncmp
BTS
W0
I see frames!
I see you, too!
I accept.
October, 2007
Course 120+: 88

I see frames!
I see you! ACK
OK! Then start ringing and show this: 615-300-0124 Alert/Inf
W23 TRAFFIC
W1 PAGING KG GenPag KS PCGKSPKG ACK KPC CHasn KPNKPPCKGKSGKXPNKPPCKGSAKXPNGKSAKXPNKGKSAKXPG NSAGSAKXPNGKSAK W32 SYNC S SSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSS PILOT TIME ACCESS TRAFFIC Rake Receiver #1 PN168+0 W23 #2 PN168+2 W23 #3 PN168+9 W23 #4 PN168+5 W23 Pilot Searcher PgResp ACK SVCncmp
BTS
W0
I see frames!
I see you, too!
I accept.
October, 2007
Course 120+: 89

I see frames!
I see you! ACK
W23 TRAFFIC
W1 PAGING KG GenPag KS PCGKSPKG ACK KPC CHasn KPNKPPCKGKSGKXPNKPPCKGSAKXPNGKSAKXPNKGKSAKXPG NSAGSAKXPNGKSAK W32 SYNC S SSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSS PILOT TIME ACCESS TRAFFIC Rake Receiver #1 PN168+0 W23 #2 PN168+2 W23 #3 PN168+9 W23 #4 PN168+5 W23 Pilot Searcher PgResp ACK SVCncmp ACK
BTS
W0
I see frames!
I see you, too!
I accept.
I am.
October, 2007
Course 120+: 90

I see frames!
I see you! ACK
W23 TRAFFIC
W1 PAGING KG GenPag KS PCGKSPKG ACK KPC CHasn KPNKPPCKGKSGKXPNKPPCKGSAKXPNGKSAKXPNKGKSAKXPG NSAGSAKXPNGKSAK W32 SYNC S SSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSS PILOT TIME ACCESS TRAFFIC Rake Receiver #1 PN168+0 W23 #2 PN168+2 W23 #3 PN168+9 W23 #4 PN168+5 W23 Pilot Searcher PgResp ACK SVCncmp ACK Con
BTS
W0
I see frames!
I see you, too!
I accept.
I am. My owner answered! Connect the audio.
SEND
October, 2007

I see frames!
I see you! ACK
OK. ACK V
W23 TRAFFIC
W1 PAGING KG GenPag KS PCGKSPKG ACK KPC CHasn KPNKPPCKGKSGKXPNKPPCKGSAKXPNGKSAKXPNKGKSAKXPG NSAGSAKXPNGKSAK W32 SYNC S SSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSS PILOT TIME ACCESS TRAFFIC Rake Receiver #1 PN168+0 W23 #2 PN168+2 W23 #3 PN168+9 W23 #4 PN168+5 W23 Pilot Searcher PgResp ACK SVCncmp ACK Con V
BTS
W0
I see frames!
I see you, too!
I accept.
I am. My owner answered! Connect the audio.
SEND
October, 2007
Making Making an an Outgoing Outgoing Call! Call!
October, 2007
Course 120+: 93
Outgoing Call Origination IS-95 Voice

W23 TRAFFIC W1 PAGING KGKSPCGGPCGKSPKG NSAGSAKXPNGKSAK ACK KPC CHasn KPNKPPCKGKSGKXPNKPPCKGSAKXPNGKSAKXPNKGKSAKXPG W32 SYNC S SSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSS PILOT TIME ACCESS TRAFFIC Rake Receiver #1 PN168+0 W01 #2 PN168+2 W01 #3 PN168+9 W01 #4 PN168+5 W01 Pilot Searcher 6 1 5 5 5 5 1 2 3 4
BTS
W0
The mobile user dials, Then presses SEND. SEND

October, 2007

W23 TRAFFIC W1 PAGING KGKSPCGGPCGKSPKG NSAGSAKXPNGKSAK ACK KPC CHasn KPNKPPCKGKSGKXPNKPPCKGSAKXPNGKSAKXPNKGKSAKXPG W32 SYNC S SSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSS PILOT TIME ACCESS TRAFFIC Rake Receiver #1 PN168+0 W01 #2 PN168+2 W01 #3 PN168+9 W01 #4 PN168+5 W01 Pilot Searcher Hey system! I am 615-300-0124, ESN 2E5FC31. Let me call 615-555-1234 using EVRC voice. 6 1 5 5 5 5 1 2 3 4 Origination
BTS
W0
SEND
October, 2007

BTS
W0
SEND
October, 2007

BTS
W0
SEND
October, 2007

BTS
W0
SEND
October, 2007

BTS
W0
I see frames!
SEND
October, 2007

I see frames!
BTS
W0
I see frames!
SEND
October, 2007

I see frames!
I see you! ACK
W23 TRAFFIC
W1 PAGING KGKSPCGGPCGKSPKG NSAGSAKXPNGKSAK ACK KPC CHasn KPNKPPCKGKSGKXPNKPPCKGSAKXPNGKSAKXPNKGKSAKXPG W32 SYNC S SSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSS PILOT TIME ACCESS TRAFFIC Rake Receiver #1 PN168+0 W23 #2 PN168+2 W23 #3 PN168+9 W23 #4 PN168+5 W23 Pilot Searcher Hey system! I am 615-300-0124, ESN 2E5FC31. Let me call 615-555-1234 using EVRC voice. 6 1 5 5 5 5 1 2 3 4 Origination
BTS
W0
I see frames!
SEND
October, 2007

I see frames!
I see you! ACK
W23 TRAFFIC
W1 PAGING KGKSPCGGPCGKSPKG NSAGSAKXPNGKSAK ACK KPC CHasn KPNKPPCKGKSGKXPNKPPCKGSAKXPNGKSAKXPNKGKSAKXPG W32 SYNC S SSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSS PILOT TIME ACCESS TRAFFIC Rake Receiver #1 PN168+0 W23 #2 PN168+2 W23 #3 PN168+9 W23 #4 PN168+5 W23 Pilot Searcher Hey system! I am 615-300-0124, ESN 2E5FC31. Let me call 615-555-1234 using EVRC voice. 6 1 5 5 5 5 1 2 3 4 Origination ACK
BTS
W0
I see frames!
I see you, too!
SEND
October, 2007

I see frames!
I see you! ACK
W23 TRAFFIC
W1 PAGING KGKSPCGGPCGKSPKG NSAGSAKXPNGKSAK ACK KPC CHasn KPNKPPCKGKSGKXPNKPPCKGSAKXPNGKSAKXPNKGKSAKXPG W32 SYNC S SSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSS PILOT TIME ACCESS TRAFFIC Rake Receiver #1 PN168+0 W23 #2 PN168+2 W23 #3 PN168+9 W23 #4 PN168+5 W23 Pilot Searcher Hey system! I am 615-300-0124, ESN 2E5FC31. Let me call 615-555-1234 using EVRC voice. 6 1 5 5 5 5 1 2 3 4 Origination ACK
BTS
W0
I see frames!
I see you, too!
SEND
October, 2007

I see frames!
I see you! ACK
W23 TRAFFIC
W1 PAGING KGKSPCGGPCGKSPKG NSAGSAKXPNGKSAK ACK KPC CHasn KPNKPPCKGKSGKXPNKPPCKGSAKXPNGKSAKXPNKGKSAKXPG W32 SYNC S SSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSS PILOT TIME ACCESS TRAFFIC Rake Receiver #1 PN168+0 W23 #2 PN168+2 W23 #3 PN168+9 W23 #4 PN168+5 W23 Pilot Searcher Hey system! I am 615-300-0124, ESN 2E5FC31. Let me call 615-555-1234 using EVRC voice. 6 1 5 5 5 5 1 2 3 4 Origination ACK SVCncmp
BTS
W0
I see frames!
I see you, too!
I accept.
SEND
October, 2007

I see frames!
I see you! ACK
OK! ACK
W23 TRAFFIC
W1 PAGING KGKSPCGGPCGKSPKG NSAGSAKXPNGKSAK ACK KPC CHasn KPNKPPCKGKSGKXPNKPPCKGSAKXPNGKSAKXPNKGKSAKXPG W32 SYNC S SSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSS PILOT TIME ACCESS TRAFFIC Rake Receiver #1 PN168+0 W23 #2 PN168+2 W23 #3 PN168+9 W23 #4 PN168+5 W23 Pilot Searcher Hey system! I am 615-300-0124, ESN 2E5FC31. Let me call 615-555-1234 using EVRC voice. 6 1 5 5 5 5 1 2 3 4 Origination ACK SVCncmp
BTS
W0
I see frames!
I see you, too!
I accept.
SEND
October, 2007

I see frames!
I see you! ACK
OK! ACK Voice conversation
W23 TRAFFIC
W1 PAGING KGKSPCGGPCGKSPKG NSAGSAKXPNGKSAK ACK KPC CHasn KPNKPPCKGKSGKXPNKPPCKGSAKXPNGKSAKXPNKGKSAKXPG W32 SYNC S SSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSS PILOT TIME ACCESS TRAFFIC Rake Receiver #1 PN168+0 W23 #2 PN168+2 W23 #3 PN168+9 W23 #4 PN168+5 W23 Pilot Searcher Hey system! I am 615-300-0124, ESN 2E5FC31. Let me call 615-555-1234 using EVRC voice. 6 1 5 5 5 5 1 2 3 4 Origination ACK SVCncmp Voice conversation
BTS
W0
I see frames!
I see you, too!
I accept.
SEND
October, 2007
Downloading Downloading Data Data on on a a

Forward Forward Link Link Supplemental Supplemental Channel Channel
October, 2007
Course 120+: 107
Forward Supplemental Channel Assignment

Mobile: Watch Walsh Code 2 Starting in 320 ms For 1000 ms. Mobile: Watch Walsh Code 2 Starting in 320 ms For 1000 ms. Supplemental Channel Burst ESCAM ESCAM Supplemental Channel Burst
W2
W23
F-SCH
F-FCH
PN 168 BTS
W1 W32 W0 TIME
PAGING KGKSAKKNKGGKSKPG NSASPPCKGKSAKGKSAKKNKGGKSKPG NSASPPCKGKSAKGKSAKKNKGGKSKPG NSASPPCK SYNC SSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSS PILOT
ACCESS CHANNEL R-FCH
October, 2007
Course 120+: 108
Uploading Uploading Data Data on on a a

Reverse Reverse Link Link Supplemental Supplemental Channel Channel
October, 2007
Course 120+: 109
Reverse Supplemental Channel Assignment

Mobile: Send Walsh Code 1 Starting in 320 ms For 1000 ms. Mobile: Send Walsh Code 1 Starting in 320 ms For 1000 ms.
W23
F-FCH
ESCAM
ESCAM
PN 168 BTS
W1 W32 W0 TIME
ACCESS CHANNEL R-FCH SCRM Supplemental Channel Burst System: I need to Send you the Following blocks: System: I need to Send you the Following blocks: SCRM Supplemental Channel Burst
R-SCH
October, 2007
Course 120+: 110
Ending Ending A A Call Call
October, 2007
Course 120+: 111
Normal End of Call

W23 W1 W32 TRAFFIC Voice RELnorm ACK SYS ChASN CHN XSYS NBR SYN SYN SYN SYN SYN SYN SYN SYN SYN PAGING KGKSAKKNKGGKSKPG NSASPPCKGKSA SYNC SSSSSSSSSSSSSSSSSSSSSSSSSSS PILOT
BTS
W0 TIME
SCAN Ref Time

MOBILE REACQUIRES SYSTEM NORMALLY Voice RELnoRsn
ACCESS CHANNEL TRAFFIC CHANNEL
When a call ends normally, it is because the caller on one side of the conversation decided to hang up The side ending the call sends a Release Normal order The other side sends a Release No reason order It may send an acknowledgment first, if it cannot give the release order immediately After the system receives a release order from the mobile, it releases the resources it used for the call After the mobile receives a release order from the base station, it stops listening to the traffic channel and freshly reacquires the system
Abnormal End of Call Forward Link Failure

W23 W1 W32 TRAFFIC Voice 5s timer All bad frames ACK SYS ChASN CHN XSYS SYN SYN SYN SYN SYN SYN SYN SYN PAGING KGKSAKKNKGGKSKPG NSASPPCKGKSA SYNC SSSSSSSSSSSSSSSSSSSSSSSSSSS PILOT
BTS
W0 TIME
SCAN Ref Time

MOBILE REACQUIRES SYSTEM, if available Voice Mute! No pc 5s timer
The mobile is always counting and tracking the bad frames it receives on the forward link Forward Link Fade Timer: If the mobile does not receive any good frames during a 5-second period, it aborts the call If a mobile receives 10 consecutive bad frames, it mutes its transmitter until at least 2 consecutive good frames are heard If the mobile stays muted 5 seconds, the BTS will release too After a call ends for any reason, the mobile tries to reacquire the system, making an independent cold start
Abnormal End of Call Reverse Link Failure

W23 W1 W32 TRAFFIC Voice RELnoRsn ACK SYS ChASN CHN XSYS SYN SYN SYN SYN SYN SYN SYN SYN PAGING KGKSAKKNKGGKSKPG NSASPPCKGKSAAKSKPG NSAS SYNC SSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSS PILOT
BTS
W0 TIME
SCAN Ref Time

MOBILE REACQUIRES SYSTEM, if available Voice All bad frames 5s timer
The BTS is always counting and tracking the bad frames it receives on the reverse link from the mobile Reverse Link Fade Timer: If the BTS does not receive any good frames during a 5-second period, it releases the call After a call ends for any reason, the mobile tries to reacquire the system, making an independent cold start
October, 2007
Course 120+: 114
Feature Feature Notification: Notification: You You Have Have Voicemail! Voicemail!
October, 2007
Course 120+: 115
Feature Notification
FEATURE NOTIFICATION MESSAGE
98/06/30 21:16:44.368 [PCH] Feature Notification Message MSG_LENGTH = 144 bits MSG_TYPE = Feature Notification Message ACK_SEQ = 0 MSG_SEQ = 0 ACK_REQ = 1 VALID_ACK = 0 ADDR_TYPE = IMSI ADDR_LEN = 56 bits IMSI_CLASS = 0 IMSI_CLASS_0_TYPE = 3 RESERVED = 0 MCC = 302 IMSI_11_12 = 00 IMSI_S = 9055170325 RELEASE = 0 RECORD_TYPE = Message Waiting RECORD_LEN = 8 bits MSG_COUNT = 1 RESERVED = 0
The Feature Notification Message on the Paging Channel tells a specific mobile it has voice messages waiting. There are other record types to notify the mobile of other features.
MOBILE STATION ACKNOWLEDGMENT The mobile confirms it has received the notification by sending a Mobile Station Acknowledgment Order on the access channel.
The The Rules Rules of of Soft Soft Handoff Handoff
October, 2007
Course 120+: 117
The Complete Rules of Soft Handoff

The Handset considers pilots in sets Active: pilots of sectors actually in use Candidates: pilots mobile requested, but not yet set up & transmitting by system Neighbors: pilots told to mobile by system, as nearby sectors to check Remaining: any pilots used by system but not already in the other sets (div. by PILOT_INC) Handset sends Pilot Strength Measurement Message to the system whenever: It notices a pilot in neighbor or remaining set exceeds T_ADD An active set pilot drops below T_DROP for T_TDROP time A candidate pilot exceeds an active by T_COMP The System may set up all requested handoffs, or it may apply special manufacturer-specific screening criteria and only authorize some
PILOT SETS Active 6 6 Candidate 5 10
Neighbor 20 40 Remaining HANDOFF PARAMETERS

T_ADD T_TDROP T_DROP T_COMP
Exercise: How does a pilot in one set migrate into another set, for all cases? Identify the trigger, and the messages involved.
Course 120+: 118
IS-95/ J-Std008
IS-95B/ 1xRTT
# Reqd`. By Std.
Handoffs Handoffs and and Pilot Pilot Set Set Management Management
Here are some example handoffs, showing the way the handoff parameters are applied.
October, 2007
Course 120+: 119
SYSTEM ACQUISITION
0 -3 -6
Strongest
At turn-on, and after the end of every call, a mobile makes a fresh attempt to acquire the system. It scans all the PN offsets in tiny steps to be sure no pilot signal is missed. After the scan is complete, the mobile locks to the strongest pilot it has found.
EC/IO db.
-10
-15
-20
-25 54 102 134 200 248 300 328 396 416 420 488 504
October, 2007
120
IDLE MODE
0 -3 -6
The strongest pilot is now the only Active pilot. The mobile puts its rake fingers on this PN and decodes Walsh Code 32, the Sync channel. The Sync channel announces the system (SID) and network (NID); how to make the long code properly synchronized (Long Code State); and when the 20 ms. frames begin on the Paging and traffic channels. Now the mobile knows how to receive the paging channel! It begins continuously listening to the paging channel. Soon it receives the neighbor list message.
EC/IO db.
-10
-15
-20 Neighbor Neighbor
Active Pilot
Neighbor
Neighbor
Neighbor
Neighbor
Neighbor
Neighbor
Neighbor
Neighbor 488
-25
54
102
134
200
248
300
328
396
416
420
504
October, 2007
Neighbor
121
IDLE MODE HANDOFF

0 -3 -6
EC/IO db.
-10
former Active Pilot
In idle mode, listening to the paging channel, the mobile can have only one active pilot at a time. Soft handoff is not possible during idle mode, since the messages on one sectors paging channel do not match the messages on another sectors paging channel. The mobiles pilot searcher is continuously checking both the active pilot (to keep the rake fingers aligned on the best multipath signals) and the neighbor pilots. If a neighbor pilot is noticed at least 3 db stronger than the current active pilot, and it remains so for 5 seconds, the mobile just stops listening to the old active and the stronger neighbor becomes the new (Settable parameters) active pilot. If the current active pilot should fade and the mobile loses the paging channel, it is allowed to switch to another stronger sector immediately without waiting 5 seconds.
3 Db, 5 sec.
-15
-20 Neighbor Neighbor
New Active Pilot
Neighbor
Neighbor
Neighbor
Neighbor
Neighbor
Neighbor
Neighbor 488
-25
54
102
134
200
248
300
328
396
416
420
504
The system does not even know the mobile has done an idle mode handoff, since no messages are exchanged. The mobile just starts listening to a different sector! Of course, if the mobile notices that the new sector has a different SID or NID from the old sector, it will register to let the new system know it has arrived.
October, 2007
Neighbor
122
IN CALL
0 -3 -6 SEE ADDITIONAL PILOTS >T_ADD, SEND PSMM!!
When a mobile begins a call, it has only one active pilot the same sector it was listening to in idle mode. It remembers the same neighbor list from its idle time. During a call, the mobiles pilot searcher is scanning alternately the active pilot and each pilot on the neighbor list. If the mobile notices any pilots with EC/IO above T_Add, it will immediately send a PSMM to the system, asking for handoff with them.
PSMM: PN248, -5, keep;

EC/IO db. -10 T_ADD Neighbor above T_Add Neighbor above T_Add PN134, -10, keep; PN102, -11.5, keep
BTS
-13
-15
T_DROP
-20 Neighbor
Active Pilot
Neighbor
Neighbor
Neighbor
Neighbor
Neighbor
Neighbor
Neighbor 488
-25
54
102
134
200
248
300
328
396
416
420
504
October, 2007
Neighbor
123
IN CALL
0 -3 -6
WAIT for EHDM
After the mobile has sent the PSMM, the newly-requested pilots are considered Candidates. The mobile cannot begin listening to them yet, because they do not have channel elements set up yet to simulcast the traffic channel, and the mobile must also be told which walsh codes have been assigned for it to listen to. The mobile patiently waits for the Extended Handoff Direction Message.
EC/IO db.
-10 T_ADD
-13
-15
Requested Candidate
Requested Candidate
T_DROP
-20 Neighbor
Active Pilot
Neighbor
Neighbor
Neighbor
Neighbor
Neighbor
Neighbor
Neighbor 488
-25
54
102
134
200
248
300
328
396
416
420
504
October, 2007
Neighbor
124
IN CALL
0 -3 -6
RECEIVE EHDM
With approximately 500 ms after sending the PSMM, the mobile receives the Extended Handoff Direction Message (EHDM). The base station has authorized the handoff on all the requested sectors, and included the walsh codes the mobile must know in order to hear the sectors. After beginning to use the new pilots, the mobile confirms by sending a Handoff Completion Message. Then the system sends the mobile a new Neighbor List Update message.
EHDM: PN248, W14;

EC/IO db. -10 T_ADD PN134, W08; PN102, W52
BTS
-13
-15
T_DROP
Active Pilot
Active Pilot
-20 Neighbor
Active Pilot
Neighbor
Neighbor
Neighbor
Neighbor
Neighbor
Neighbor
Neighbor 488
-25
54
102
134
200
248
300
328
396
416
420
504
October, 2007
Neighbor
125
IN CALL
0 -3 -6 AN ACTIVE PILOT FALLS BELOW T_DROP
One of the active pilots, PN134, has faded below T_Drop. The mobile puts PN134 on a probation watch waiting to see if it remains below T_Drop for T_TDrop seconds .
T_TDrop
EC/IO db.
-10 T_ADD
-13
!
Active Pilot Active Pilot Active Pilot
Neighbor Neighbor Neighbor Neighbor Neighbor Neighbor Neighbor 488 Neighbor 504
126
-15
T_DROP
-20 Neighbor 54
-25
102
134
200
248
300
328
396
416
420
October, 2007
IN CALL
0 -3 -6 PILOT RECOVERS, REMAINS ACTIVE
If PN134 recovers, becoming stronger than T_Drop before the T_TDrop time has passed, the mobile forgives its earlier weakness and will not send a PSMM to request any change.
<T_TDrop
EC/IO db.
-10 T_ADD
-13
!
127
-15
T_DROP
-20 Neighbor 54
-25
102
134
200
248
300
328
396
416
420
October, 2007
IN CALL
0 -3 -6 AN ACTIVE PILOT FALLS BELOW T_DROP AGAIN
PN134 has faded below T_Drop again. The mobile puts PN134 on a probation watch waiting to see if it remains below T_Drop for T_TDrop seconds .
T_TDrop
EC/IO db.
-10 T_ADD
-13
!
128
-15
T_DROP
-20 Neighbor 54
-25
102
134
200
248
300
328
396
416
420
October, 2007
IN CALL
0 -3 -6 PILOT REMAINS BELOW T_DROP FOR T_TDROP SECONDS. SEND PSMM TO REMOVE!
If PN134 remains below T_Drop for T_TDrop seconds, the mobile sends a PSMM requesting to drop it from the handoff.
>T_TDrop
PSMM: PN248, -5, keep;

PN134, -16, drop; PN102, -11.5, keep
BTS
EC/IO db.
-10 T_ADD
-13
!
Neighbor Neighbor Neighbor
-15
T_DROP
-20 Neighbor
Neighbor
Neighbor
Neighbor
Neighbor 488
-25
54
102
134
200
248
300
328
396
416
420
504
October, 2007
Neighbor
129
IN CALL
0 -3 -6
The mobile waits for an Extended Handoff Direction Message (EHDM), giving permission to drop the pilot from the Active set.
WAIT FOR EHDM
EC/IO db.
-10 T_ADD
-13
-15
T_DROP
Active Pilot
Active Pilot
-20 Neighbor
Active Pilot
Neighbor
Neighbor
Neighbor
Neighbor
Neighbor
Neighbor
Neighbor 488
-25
54
102
134
200
248
300
328
396
416
420
504
October, 2007
Neighbor
130
IN CALL
0 -3 -6
PN134 is now dropped from the Active set, and becomes a neighbor. The mobile continues with Active pilots PN102 and PN248.
Receive EHDM, Drop Pilot

T_ADD
EHDM: PN248, W14;

PN102, W52
BTS
EC/IO db.
-10
-13
-15
T_DROP
Active Pilot
-20 Neighbor
Active Pilot
Neighbor
Neighbor
Neighbor
Neighbor
Neighbor
Neighbor
Neighbor
Neighbor 488
-25
54
102
134
200
248
300
328
396
416
420
504
October, 2007
Neighbor
131
IN CALL
PSMM: PN248, -5, keep; PN300, -3.5, keep;

PN134, -10.5, keep; PN488, -10.5, keep; PN102, -11.5, keep; PN328, -11.5, keep; PN200, -12, keep; PN396, -12.5, keep; PN420, -12, keep; PN504, -12, keep BTS
EC/IO db.
-10 T_ADD Neighbor above T_Add Neighbor above T_Add Neighbor above T_Add Neighbor above T_Add Neighbor above T_Add Neighbor above T_Add Neighbor above T_Add 488 Neighbor above T_Add 504
132
-13
-15
T_DROP
Active Pilot
-20 Neighbor
Active Pilot
-25
54
102
134
200
248
300
328
396
416
Neighbor
420
The mobile has just noticed several neighbor pilots have risen above T_ADD. It will immediately send a PSMM requesting to add them in handoff. It quickly sends a PSMM requesting handoff with them.
October, 2007
IN CALL
0 -3 -6
WAIT for EHDM
EC/IO db.
-10 T_ADD
-13
-15
Requested Candidate
Requested Candidate
Requested Candidate
Requested Candidate
Requested Candidate
Requested Candidate
Requested Candidate 488
-20 Neighbor
-25
54
102
134
200
248
300
328
396
416
420
504
October, 2007
Requested Candidate
133
T_DROP
Active Pilot
Active Pilot
Neighbor
IN CALL
0 -3 -6
EHDM: PN300, W31; PN248, W14;

PN134, W08; PN488, W10; PN328, W27; PN102, W52
BTS
RECEIVE EHDM
EC/IO db.
-10 T_ADD Unassigned Candidate Unassigned Candidate Unassigned Candidate Unassigned Candidate 504
134
-13
-15
T_DROP
Active Pilot
Active Pilot
Active Pilot
Active Pilot
Active Pilot
-20 Neighbor
-25
54
102
134
200
248
300
328
396
416
420
488
The mobile receives the Extended Handoff Direction Message, and implements the handoff with the pilots listed in the message. The BSC has chosen the strongest six pilots requested in the previous PSMM. Only the strongest 6 signals requested by the mobile are chosen to be active. PN 200, PN396, PN420 and PN504 are Unassigned Candidates.
October, 2007
Active Pilot
Neighbor
IN CALL

PN134, -10.5, keep; PN488, -10.5, keep; PN102, -11.5, keep; PN328, -11.5, keep; PN200, -12, keep; PN396, -12.5, keep; PN416, -10.5, keep; PN420, -12, keep; BTS PN504, -12, keep
EC/IO db.
-10 T_ADD Neighbor above T_Add
-13
-15
Requested Candidate
Requested Candidate
Requested Candidate
-20 Neighbor
-25
54
102
134
200
248
300
328
396
416
420
488
504
The mobile notices that PN416 has just grown stronger, and is now above T_Add. It sends a PSMM requesting handoff with it and the other 10 signals above T_Add.
October, 2007
Requested Candidate
135
T_DROP
Active Pilot
Active Pilot
Active Pilot
Active Pilot
Active Pilot
Active Pilot
IN CALL
0 -3 -6
WAIT for EHDM
EC/IO db.
-10 T_ADD
-13
-15
Requested Candidate
Requested Candidate
Requested Candidate
Requested Candidate
-20 Neighbor
-25
54
102
134
200
248
300
328
396
416
420
488
504
October, 2007
Requested Candidate
136
T_DROP
Active Pilot
Active Pilot
Active Pilot
Active Pilot
Active Pilot
Active Pilot
IN CALL
0 -3 -6
EHDM: PN300, W31; PN248, W14;

PN134, W08; PN488, W10; PN416, W52; PN396, W34
BTS
RECEIVE EHDM
EC/IO db.
-10 T_ADD Unassigned Candidate Unassigned Candidate Unassigned Candidate Unassigned Candidate Unassigned Candidate 504
137
-13
-15
T_DROP
Active Pilot
Active Pilot
Active Pilot
Active Pilot
Active Pilot
-20 Neighbor
-25
54
102
134
200
248
300
328
396
416
420
488
The mobile receives the Extended Handoff Direction Message, and implements the handoff with the pilots listed in the message. The BSC has chosen the strongest six pilots requested in the previous PSMM. Only the strongest 6 signals requested by the mobile are chosen to be active. Notice that PN416 replaces PN102. PN102, PN200, PN396, PN420 and PN504 are Unassigned Candidates.
October, 2007
Active Pilot
IN CALL
0 -3 -6

PN134, -10.5, keep; PN488, -10.5, keep; PN102, -11.5, keep; PN328, -14, keep; PN200, -12, keep; PN396, -10, keep; PN416, -10.5, keep; PN420, -12, keep; BTS PN504, -12, keep
Notice T_COMP trigger, send EHDM
T_COMP
EC/IO db. -10 T_ADD -13
-15
Requested Candidate
Requested Candidate
Requested Candidate
Requested Candidate
-20 Neighbor
-25
54
102
134
200
248
300
328
396
416
420
488
504
Suppose T_COMP = 4 db. The mobile notices that the strongest candidate, PN396, has grown T_COMP db stronger than the weakest active pilot, PN328. This triggers the mobile to send a new PSMM including all the pilots above T_ADD. All of them were already either actives or candidates, but the new PSMM includes the new current strength of each pilot.
October, 2007
Requested Candidate
138
T_DROP
Active Pilot
Active Pilot
Active Pilot
Active Pilot
Active Pilot
Active Pilot
IN CALL
0 -3 -6
WAIT for EHDM
Both before and after the mobile sends the PSMM, the active pilots are the same and the candidate pilots are the same. The mobile patiently waits for the Extended Handoff Direction Message, which may cause some of the pilots to change sets.
T_COMP
EC/IO db. -10 T_ADD -13
-15
Requested Candidate
Requested Candidate
Requested Candidate
Requested Candidate
-20 Neighbor
-25
54
102
134
200
248
300
328
396
416
420
488
504
October, 2007
Requested Candidate
139
T_DROP
Active Pilot
Active Pilot
Active Pilot
Active Pilot
Active Pilot
Active Pilot
IN CALL
0 -3 -6
EHDM: PN300, W31; PN248, W14;

PN134, W08; PN488, W10; PN416, W52; PN328, W27
BTS
RECEIVE EHDM
EC/IO db.
-10 T_ADD Unassigned Candidate Unassigned Candidate Unassigned Candidate Unassigned Candidate Unassigned Candidate 504
140
-13
-15
T_DROP
Active Pilot
Active Pilot
Active Pilot
Active Pilot
Active Pilot
-20 Neighbor
-25
54
102
134
200
248
300
328
396
416
420
488
Notice that PN396 has become Active, replacing PN328.
October, 2007
Active Pilot
A A Soft Soft Handoff Handoff
October, 2007
Course 120+: 141
Basic Soft/Softer Handoff

BTS A BSC
ctrl BTSC
BTS B
BTSC
W41
TRAFFIC PAGING SYNC PILOT TRAFFIC PAGING KGKSAKKNKGGKSKPG NSASPPCKGKSAKGKSAKKNKGGKSKPG NSASPPCKGKSAKGKSAKKNKGGKSKPG NSASPPCK SYNC SSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSS PILOT
PN 344 BTS
W1 W32 W0 W23
PN 168 BTS
W1 W32 W0 TIME
ACCESS CHANNEL TRAFFIC CHANNEL Rake Receiver #1 PN168+0 W23
!!
#2 PN168+2 W23 #3 PN168+9 W23 #4 PN168+5 W23 Pilot Searcher
October, 2007
Course 120+: 142

BTS A BSC
ctrl BTSC
BTS B
BTSC
W41
TRAFFIC PAGING SYNC PILOT TRAFFIC PAGING KGKSAKKNKGGKSKPG NSASPPCKGKSAKGKSAKKNKGGKSKPG NSASPPCKGKSAKGKSAKKNKGGKSKPG NSASPPCK SYNC SSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSS PILOT GGKSKPG NSASPPCKGKSAKGKSAKKNKGGKSKPG NSASPPCKGKSAKGKSAKKNKGGKSKPG NSASPPCK SSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSS
PN 344 BTS
W1 W32 W0 W23
PN 168 BTS
W1 W32 W0 TIME
ACCESS CHANNEL TRAFFIC CHANNEL Rake Receiver #1 PN168+0 W23
!!
Wow! PN344 is above T_ADD!
October, 2007
Course 120+: 143

BTS A BSC
ctrl BTSC
BTS B
BTSC
W41
TRAFFIC PAGING SYNC PILOT TRAFFIC PAGING KGKSAKKNKGGKSKPG NSASPPCKGKSAKGKSAKKNKGGKSKPG NSASPPCKGKSAKGKSAKKNKGGKSKPG NSASPPCK SYNC SSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSS PILOT GGKSKPG NSASPPCKGKSAKGKSAKKNKGGKSKPG NSASPPCKGKSAKGKSAKKNKGGKSKPG NSASPPCK SSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSS
PN 344 BTS
W1 W32 W0 W23
PN 168 BTS
W1 W32 W0 TIME
ACCESS CHANNEL TRAFFIC CHANNEL Rake Receiver #1 PN168+0 W23 PSMM
!!
Hey system! I want: PN168 (ref), -6, keep PN344, -11, keep
October, 2007
Course 120+: 144

BTS A BSC
ctrl BTSC
BTS B
BTSC
I hear you. Hang on W41 TRAFFIC PAGING SYNC PILOT TRAFFIC ACK GGKSKPG NSASPPCKGKSAKGKSAKKNKGGKSKPG NSASPPCKGKSAKGKSAKKNKGGKSKPG NSASPPCK SSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSS
PN 344 BTS
W1 W32 W0 W23
PN 168 BTS
W1 W32 W0 TIME
!!
October, 2007
Course 120+: 145

BTS A BSC
ctrl BTSC
BTS B
BTSC
I hear you. Hang on W41 TRAFFIC PAGING SYNC PILOT TRAFFIC ACK GGKSKPG NSASPPCKGKSAKGKSAKKNKGGKSKPG NSASPPCKGKSAKGKSAKKNKGGKSKPG NSASPPCK SSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSS
PN 344 BTS
W1 W32 W0 W23
PN 168 BTS
W1 W32 W0 TIME
!!
October, 2007
Course 120+: 146

BTS A BSC
ctrl BTSC
BTS B
BTSC
OK! You can use: PN 168 W23 PN 344 W41 EHDM
I hear you. Hang on W41 TRAFFIC PAGING SYNC PILOT TRAFFIC ACK
PN 344 BTS
W1 W32 W0 W23
GGKSKPG NSASPPCKGKSAKGKSAKKNKGGKSKPG NSASPPCKGKSAKGKSAKKNKGGKSKPG NSASPPCK SSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSS
EHDM
PN 168 BTS
W1 W32 W0 TIME
!!
October, 2007
Course 120+: 147

BTS A BSC
ctrl BTSC
BTS B
BTSC
PN 344 BTS
W1 W32 W0 W23
EHDM
PN 168 BTS
W1 W32 W0 TIME
ACCESS CHANNEL TRAFFIC CHANNEL Rake Receiver #1 PN168+0 W23 PSMM ACK
!!
OK
October, 2007
Course 120+: 148

BTS A BSC
ctrl BTSC
BTS B
BTSC
PN 344 BTS
W1 W32 W0 W23
EHDM
PN 168 BTS
W1 W32 W0 TIME
ACCESS CHANNEL TRAFFIC CHANNEL Rake Receiver #1 PN344+0 W41 PSMM ACK HOcomp
!!
OK
Great! Im using PN168 + PN344
October, 2007
Course 120+: 149

BTS A BSC
ctrl BTSC
BTS B
BTSC
OK ACK
PN 344 BTS
W1 W32 W0 W23
EHDM
ACK
PN 168 BTS
W1 W32 W0 TIME
!!
OK
October, 2007
Course 120+: 150

BTS A BSC
ctrl BTSC
BTS B
BTSC
OK ACK
OK. Heres your new Neighbor list: PN164 PN172 PN340 PN420 PN084 PN132 PN434 PN504 PN016 PN028 PN508 PN372 NLum
PN 344 BTS
W1 W32 W0 W23
EHDM
ACK
NLum
PN 168 BTS
W1 W32 W0 TIME
!!
OK
October, 2007
Course 120+: 151

BTS A BSC
ctrl BTSC
BTS B
BTSC
OK ACK
OK. Heres your new Neighbor list: PN164 PN172 PN340 PN420 PN084 PN132 PN434 PN504 PN016 PN028 PN508 PN372 NLum
PN 344 BTS
W1 W32 W0 W23
EHDM
ACK
NLum
PN 168 BTS
W1 W32 W0 TIME
ACCESS CHANNEL TRAFFIC CHANNEL Rake Receiver #1 PN344+0 W41 PSMM ACK HOcomp ACK
!!
OK
OK
October, 2007
Course 120+: 152
Handoff Example
-20
Chips 0 10752 14080 32002 32K
PN 0
Mobile Rake RX F1 PN168 W61 F2 PN168 W61 F3 PN168 W61 Srch PN??? W0
168 220
500 512
Active Pilot
Rake Fingers

The call is already in progress. PN 168 is the only active signal, and also is our timing reference. Continue checking the neighbors. Neighbor Set
Reference PN
T_ADD
!
Course 120+: 153
If we ever notice a neighbor with Ec/Io above T_ADD, ask to use it! Send a Pilot Strength Measurement Message!
Handoff Now In Effect, but still check Pilots!

-20
Chips 0 10752 14080 32002 32K
PN 0
168 220
500 512
Active Set
T_DROP
Rake Fingers
Reference PN
T_ADD
Neighbor Set
Continue checking each ACTIVE pilot. If any are less than T_DROP and remain so for T_TDROP time, send Pilot Strength Measurement Message, DROP IT!! Continue looking at each NEIGHBOR pilot. If any ever rises above T_ADD, send Pilot Strength Measurement Message, ADD IT!
The Complete Picture of Handoff & Pilot Sets

-20 Chips 0 PN 0
SRCH_WIN_A
Rake Fingers
SRCH_WIN_A
Active Set
Pilots of sectors now used for communication
32K 512
T_DROP
T_DROP
Reference PN Candidate Set SRCH_WIN_N

Pilots requested by mobile but not set up by system
Neighbor Set
Pilots suggested by system for more checking
T_ADD
Remaining Set
T_ADD
All other pilots divisible by PILOT_INC but not presently in Active, Candidate, or Neighbor sets
SRCH_WIN_R
October, 2007
Course 120+: 155
Meet Meet the the CDMA CDMA Performance Performance Indicators Indicators
October, 2007
Course 120+: 156
CDMA Performance Indicators

A Flight Data Recorder logs aircraft operational settings. Its CDMA equivalent is a file of RF performance indicators captured by drive-test equipment. Key CDMA parameters and measurements show the condition of the RF environment. They are the primary gauges used to guide CDMA optimization and troubleshooting some indicate uplink conditions, some downlink, and some, both. these parameters are collected primarily at the subscriber end of the link, and thus are easy to capture using readily available commercial equipment without requiring assistance at the BSC Understanding these parameters and their important implications requires basic knowledge in several subject areas: General: RF units, transmitter and receiver basics CDMA and spread-spectrum signal characteristics channel definitions power control systems basic CDMA call processing flow signal behavior characteristics in noise and interference
October, 2007
Course 120+: 157
Indicator #1: FER

FER Frame Erasure Rate on forward channel (realized at Handset) on reverse channel (realized at base station) FER is an excellent call quality summary statistic
Forw R ev ar d
0 2 5
100
er se
FER %
FER is the end-result of the whole transmission link if FER is good, then any other problems arent having much effect if FER is bad, thats not the problem - it is just the end-result of the problem we must investigate other indicators to get a clue what is going on
October, 2007
Course 120+: 158
Indicator #2: Received Power at the Handset

Mobile Receive Power usually expressed in dBm measured derived from handset IF AGC voltage broadband, unintelligent measurement: includes all RF in the carrier bandwidth regardless of source, not just RF from serving BTS
overload>> <<too weak
RX Level
Handset Receiver
-40
Rake R R
BW ~30 MHz.
LNA x LO
R BW 1.25 S MHz. RX Level (from AGC)
IF
-90 -105
Receive power is important, but its exact value isnt critical too much received signal (-35 dbm or higher) could drive the phones sensitive first amplifier into overload, causing intermod and code distortion on received CDMA signals too little received signal (-105 or weaker) would leave too much noise in the signal after de-spreading, resulting in symbol errors, bit errors, bad FER, and other problems
Indicator #3, Ec/Io - What does it mean?

Why cant we just use the handsets received power level to guide handoffs? Because it is a simple total RF power measurement, the total of all sectors reaching the mobile
Handset Receiver
BW ~30 MHz.
LNA x LO
R BW 1.25 S MHz. RX Level (from AGC)
IF
Rake R R
We need a way to measure the signal strength of each sector individually, and we must be able to measure it quickly and simply The solution is to use each sectors pilot (Walsh 0) as a test signal to guide handoffs At the mobile, if the pilot of a certain sector is very strong and clean, that means we also should be able to hear a traffic channel on that sector, so handoff would be a good idea if the pilot of a certain sector is weak, then we probably wont be able to get much benefit from using a traffic channel on that sector
How Ec/Io Varies with Traffic Loading

Each sector transmits a certain amount of power, the sum of: pilot, sync, and paging any traffic channels in use at that moment Ec/Io is the ratio of pilot power to total power On a sector with nobody talking, Ec/Io is typically about 50%, which is -3 db On a sector with maximum traffic, Ec/Io is typically about 20%, which is -7 db.
Light Traffic Loading
Ec/Io = (2/4) = 50% = -3 db.
Paging Sync Pilot
1.5w 0.5w 2w
EC
I0
Heavily Loaded
Traffic Channels
Ec/Io = (2/10) = 20% = -7 db.
6w
I0
1.5w 0.5w 2w
Paging Sync Pilot
EC
October, 2007
Course 120+: 161
How Ec/Io varies with RF Environment

In a clean situation, one sector is dominant and the mobile enjoys an Ec/Io just as good as it was when transmitted In pilot pollution, too many sectors overlap and the mobile hears a soup made up of all their signals Io is the power sum of all the signals reaching the mobile Ec is the energy of a single sectors pilot The large Io overrides the weak Ec; Ec/Io is low!
October, 2007
One Sector Dominant

Traffic Channels
Io = -90 dbm Ec = -96 dbm Ec/Io = -6 db
4w 1.5w 0.5w 2w
Paging Sync Pilot
I0 EC
Many Sectors, Nobody Dominant

Traffic Sync & Paging Pilot Traffic Sync & Paging Pilot Traffic Sync & Paging Pilot Traffic Sync & Paging Pilot Traffic Sync & Paging Pilot Traffic Sync & Paging Pilot Traffic Sync & Paging Pilot Traffic Sync & Paging Pilot Traffic Sync & Paging Pilot Traffic Sync & Paging
BTS10 BTS9 BTS8 BTS7 BTS6 BTS5 BTS4 BTS3 BTS2
Io = 10 signals each -90 dbm = -80 dbm Ec of any one sector = -96 Ec/Io = -16 db
I0
BTS1
Pilot
EC Course 120+: 162
Ec/Io and Pilot Pollution

When multiple sectors are about the same strength, and there is no dominant server, we call this pilot pollution To get acceptable reception during pilot pollution, the mobile must be using a majority of the sectors it is hearing. This causes too much soft handoff and consumes capacity. Overcoming pilot pollution requires careful coverage control of the related sectors EcIoPlay.xls is a good tool for experimenting
October, 2007
Ec/Io value at each BTS TX Io -3 -80.0 Signal Strength Ec/Io -90 -13.0 1 -90 -13.0 2 -90 -13.0 3 -90 -13.0 4 -90 -13.0 5 -90 -13.0 6 -90 -13.0 7 -90 -13.0 8 -90 -13.0 9 -90 -13.0 10 -80.0 Sum Power
Too Many Similar Signals! Ec/Io of each is very poor

Ec/Io of Multiple CDMA Signals
P t o l Pi
1 2 3 4
n o i t ollu
10
Ec/Io value at each Io BTS TX -3 -73.9 Signal Strength Ec/Io -90 -19.1 1 -90 -19.1 2 -90 -19.1 3 -90 -19.1 4 -75 -4.1 5 -90 -19.1 6 -90 -19.1 7 -90 -19.1 8 -90 -19.1 9 -90 -19.1 10 -73.9 Sum Power
No Problem! Great Signal.

Ec/Io of Multiple CDMA Signals
10
Course 120+: 163
Ec/Io and Pilot Pollution: Handoff Effects

This second workbook in EcIoPlay.xls demonstrates the benefits of soft handoff and the concept of composite (combined) Ec/Io during soft handoff.
Ec/Io, Handoff, and Rake Finger Pilot Status
%Pilot Power 10% % Overhead Power 20% Nominal Max Sum RF Comp Max # Power Power osite Lockable Rake W Io Ec/Io Fingers 16 -77.2 Max # Pilots in Soft Handoff 6
Relative Energies of Multiple CDMA Signals
Pilot Energy Sync, Paging, Traf fic
T_ADD -13
-4.8
0.9
Traffic Trans Path Loading mitted Loss, Signal % Ec/Io dB Strength Ec/Io 0% -3.0 120 -84.9 -10.8 0% -3.0 120 -84.9 -10.8 0% -3.0 120 -84.9 -10.8 0% -3.0 120 -84.9 -10.8 0% -3.0 120 -84.9 -10.8 0% -3.0 120 -84.9 -10.8 0% -3.0 200 -164.9 -90.8 0% -3.0 200 -164.9 -90.8 0% -3.0 200 -164.9 -90.8 0% -3.0 200 -164.9 -90.8 0% -3.0 200 -164.9 -90.8 0% -3.0 200 -164.9 -90.8 0% -3.0 200 -164.9 -90.8 0% -3.0 200 -164.9 -90.8
0.8
Rake Rake Rake Rake
Locked Locked Locked Locked
Handoff Handoff Handoff Handoff Handoff Handoff
Interferor Interferor Interferor Interferor Interferor Interferor Interferor Interferor Interferor Interferor
1 2 3 4 5 6 7 8 9 10 11 12 13 14
0.7
0.6
0.5
0.4
0.3
0.2
0.1
0 1 2 3 4 5 6 7 8 9 10 11 12 13 14
Only grey-shaded fields can be changed. Other fields calculate automatically. To unlock all cells, select TOOLS>PROTECTION>UNPROTECT SHEET.
Ind ivi d ual Sig nal s
October, 2007
Course 120+: 164
Indicator #4: Handset Transmitter Power

TXPO Handset Transmit Power Actual RF power output of the handset transmitter, including combined effects of open loop power control from receiver AGC and closed loop power control by BTS cant exceed handsets maximum (typ. +23 dBm)
Subscriber Handset
BTS
Receiver>>
LNA DUP x
TXPO
x
PA LO
LO
Rake R R R S Viterbi Decoder
IF
Open Loop
Closed Loop Pwr Ctrl IF x IF Mod x Q x I Long PN Orth Mod FEC Vocoder
<<Transmitter
Typical TXPO:
+23 dBm in a coverage hole 0 dBm near middle of cell -50 dBm up close to BTS
What is the right power TX level? Whatever the BTS asks for! As long as closed loop control is working, the phones opinion isnt the last word. Just do what the BTS wants!! However, if the BTS ever asks the phone to do the impossible, something is wrong (lower than -60 dbm, higher than +23 dbm)
Indicator #5: Transmit Gain Adjust

What is Closed Loop Transmit Gain Adjust (TXGA)? The power correction the base station is asking the mobile to make right now, in real-time At the beginning of a call, before the power control bits begin, it is zero. Then the power control bits begin, 800 per second. During a call, TXGA is the running total of all the power control bits which have been received thus far. Each power control bit asks for a 1 db correction, up or down Each power control bit is based on the base stations latest new decision: mobile is too strong, or mobile is too weak -- there is no cumulative error, since each decision is fresh
0 dB Typical Transmit Gain Adjust

-10 dB -20 dB
Time, Seconds
Course 120+: 166
October, 2007
Closed Loop Power Control Dynamics

The figures at right show the power control reactions to a sudden change in path loss The sudden change in path loss causes a sudden change in handset received signal Both open loop and closed loop control race to get the phone back to the right new power and succeed in about 10 milliseconds Open loop continues to approach the correct value better and better on its own 40 milliseconds later, no net closed loop correction is needed.
October, 2007
Course 120+: 167
Problem Problem Signatures Signatures
October, 2007
Course 120+: 168
Signatures of Common Conditions

The key CDMA RF Performance Indicators provide powerful clues in cause-and-effect analysis for understanding problem conditions There are many common conditions which are easy to recognize from their characteristic signatures -- unique relationships among the key indicators which are observed when these conditions exist We will use the simplified format shown at right to display the key indicators for each of several interesting cases. SIGNATURE: GOOD CALL
FFER
100%
RXL
-30 -40
EC/IO
0
TxGa
+25
TxPo
+23 +10
-6 50% -10
+10 0 -10
0 -10 -20 -30 -40
-15 10% 5% 2% 0% -90 -100 -110 -20 -20 -25
-50
FFER
RXL
EC/IO
TxGa
TxPo
BTS
Messaging
October, 2007
Course 120+: 169
Signature of a Successful Call

SIGNATURE: GOOD CALL
FFER
100%
If the mobile station originates successfully, remains in service area, and makes normal release, data will show:
Low forward FER Receive power > -100 dBm Good Ec/Io (> -12 dB) Normal Transmit Gain Adjust (actual value depends on site configurations, loading & NOM_PWR setting) Transmit power < +20 dBm Good Messaging Parsed message files will contain a full set of normal messages.
RXL
-30 -40
EC/IO
0
TxGa
+25
TxPo
+23 +10
-6 50% -10
+10 0 -10
0 -10 -20 -30 -40
-15 10% 5% 2% 0% -90 -100 -110 -20 -20 -25
-50
FFER
RXL
EC/IO
TxGa
TxPo
BTS
Messaging
October, 2007
Course 120+: 170
Signature of a Dropped Call in Poor Coverage

SIGNATURE: If a mobile station is taken out of the service area or into a coverage hole, and only data from the mobile station is available, the log files will show the following characteristics:
High forward FER Low receive power (<-100 dBm) Low Ec/Io (< -10 dB) Higher-than-normal Transmit Gain Adjust (actual value depends
on site configurations, loading, NOM_PWR setting)
50% -10 0 -10 -15 10% 5% 2% 0% -90 -100 -110 -20 -20 -25
DROPPED CALL, BAD COVERAGE

FFER
100%
RXL
-30 -40
EC/IO
0
TxGa
+25
TxPo
+23 +10
-6
+10
0 -10 -20 -30 -40 -50
FFER
RXL
EC/IO
TxGa
TxPo
Higher-than-normal transmit power (> +20 dBm) Poor messaging on both links
October, 2007
BTS
Messaging
Course 120+: 171
Signature of Forward Link Interference

Characteristics of data for a phone experiencing forward link interference from a source other than the current BTS:
High forward FER Good receive power (> -100 dBm) Low Ec/Io (< -10 dB) Higher-than-normal Transmit Gain Adjust Normal transmit power (< +20 dBm) Poor forward link messaging unreliable at best and may be the actual cause of the drop.
SIGNATURE:
FORWARD LINK INTERFERENCE
FFER
100%
RXL
-30 -40
EC/IO
0
TxGa
+25
TxPo
+23 +10
-6 50% -10
+10 0 -10
0 -10 -20 -30 -40
-15 10% 5% 2% 0% -90 -100 -110 -20 -20 -25
-50
FFER
RXL
EC/IO
TxGa
TxPo
BTS
Messaging
October, 2007
Course 120+: 172
A CDMA Drop Example: Forward Link Case

A mobile using Site A comes down the highway and suddenly begins to see the signal of Site B If the mobile begins soft handoff with site B, everything continues to go well If the mobile cannot begin handoff with B for any reason, the call is doomed site Bs signal will override site As signal, making it unreadable as soon as the FER goes too high, a fade timer will start the the mobile will eventually die
October, 2007
FORWARD LINK DIES ns o i t uc r t s B Ob

BTS
A
BTS
l ve a Tr
B grows stronger and stronger. Mobiles open-loop instinct is to transmit weaker; closed-loop correction from A goes higher and higher, maintaining the mobile at the right power. Finally B obscures A, which disappears in an explosion of FER. The mobile mutes since it cant hear power control bits, and a fade timer or message timer kills the call in a few seconds.
Course 120+: 173
Signature of Reverse Link Interference

Characteristics of data for a phone whose BTS has a raised noise floor due to reverse link interference
Good forward FER Good receive power (> -100 dBm) Good Ec/Io (> -10 dB) Higher-than-normal Transmit Gain Adjust Higher-than-normal transmit power (< +20 dBm) Poor reverse link messaging in the message files, youll see repeats of messages on the forward link and reverse link
SIGNATURE:
REVERSE LINK INTERFERENCE
FFER
100%
RXL
-30 -40
EC/IO
0
TxGa
+25
TxPo
+23 +10
-6 50% -10
+10 0 -10
0 -10 -20 -30 -40
-15 10% 5% 2% 0% -90 -100 -110 -20 -20 -25
-50
FFER
RXL
EC/IO
TxGa
TxPo
BTS
Messaging
October, 2007
Course 120+: 174
A CDMA Drop Example: Reverse Link Case

When a cell is penetrated by a mobile not under its own power control, bad things happen! The foreign mobile is being power controlled by a more distant cell, so it is transmitting louder than appropriate the local mobiles must power up in a deadly race to keep up with the interferor local mobiles can still hear the cell fine; the forward link is just great, to the very end
October, 2007
REVERSE LINK DIES B

BTS
ns o i t uc r t s Ob
l ve a Tr
It was a beautiful day in the neighborhood for all the mobiles on site B until the grim reaper arrived, transmitting at high power to maintain its link with distant Cell A. Cell B tried to power up each of its individual mobiles so they would be received as strong as the new interferor, but mobiles more distant than the interferor just couldnt keep up, and died. Eventually the interferor died from forward link interference, too. If only the interferor had a soft handoff, all of this violence could have been avoided.
Course 120+: 175
Solving the #1 Death Scenario: Failed Handoff

What Went Wrong??!
Steps in the Handoff Process
see ask Mobiles searcher notices the needed new pilot Mobile sends PSMM requesting handoff
s FORWARD LINK on DIES A i t BTS ruc B b st l BTS O ve a Tr
s REVERSE LINK DIES on i t uc B bstr BTS O el v a Tr
System sets up the handoff: channel elements do forward power BTS space in packet pipes Simulcasting begins! Now the system can hear the mobile better! tell System tells mobile how to hear the new sectors: BTS Handoff Direction Message Now the mobile can hear the system better, too! ok! tell Mobile confirms completion: Handoff Completion Message System makes new neighbor list, sends to mobile: Neighbor List BTS Update Message
Why didnt the mobile ask for handoff? New sector not on neighbor list Neighbor Search Window too Small? BTS in island mode, wrong PN? Why didnt the BTS set up the handoff? Old BTS didnt hear mobile rev link interf? No resources available on new BTS? T-1 unstable, messages lost Why didnt the mobile do the handoff? Couldnt hear BTS, Fwd link interf?
October, 2007
Course 120+: 176
Search Search Windows Windows and and PN PN Planning Planning
October, 2007
Course 120+: 177
What are "Search Windows"?

New pilots usually seem earlier or later than their official PNs from the neighor list Some have come from nearer, some from farther, than the reference PN A mobile must look for pilot energy through a range of chips earlier and later than the exact expected PN offset of the signal it is trying to measure These "tolerance" ranges are called "Search Windows" SRCH_WIN_A applies to active and candidate pilots SRCH_WIN_N applies to neighbors SRCH_WIN_R applies to remaining Search windows are chosen by RF engineers and transmitted to the mobile in messages from the BTS
PN360
10 KM 41 chips
+41
PN200 2 KM 8 chips
360
360+33c
+8
SRCH_WIN_N
October, 2007
Course 120+: 178
What are the Available Search Window Values?

SRCH_WIN_val Width, Chips
Search windows can't be set to the exact number of chips desired; each window can be set to a value from the list at right Remember the widths are total and apply with the mobile's reference at the center. For example, SRCH_WIN_N = 10 means when the mobile is checking for neighbor pilots, it will search a range 100 chips wide, centered on what it thinks is the reference PN. The mobile will search from 50 chips earlier to 50 chips later than the exact PN it expects to find Search windows should be wide enough to include needed signals, but not unnecessarily wide Grossly over-wide search windows will slow down the mobiles' overall pilot searching speed
0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15
4 (2) 6 (3) 8 (4) 10 (5) 14 (7) 20 (10) 28 (14) 40 (20) 60 (30) 80 (40) 100 (50) 130 (65) 160 (80) 226 (113) 330 (165) 452 (226)
Course 120+: 179
Search Window Settings: Neighbor Set

Neighbor Search Window Example
The neighbor search window must be set wide enough to include the energy of any needed neighbor pilot The mobile at right is using PN200 as its reference (and only active) pilot To the mobile, the pilot of neighbor sector PN360 seems 33 chips late SRCH_WIN_N must be set to at least 2 x 33 = 66 chips wide so the PN360 pilot can be noticed by the mobile The closest search window setting above 66 chips is SRCH_WIN_N = 9, which is 80 chips wide
PN360
Neighbor Sector
10 KM 41 chips
+41
PN200 2 KM 8 chips
360
360+33c
+8
Active Sector
SRCH_WIN_N
October, 2007
Course 120+: 180
Worst-Case Wide Neighbor Window Situation

BTS A
BTS B
1/2 mile 12 miles
In some terrain, it is possible for a mobile to be very close to one BTS and far from another BTS, yet need them both in soft handoff This occurs when local terrain or buildings obstruct the signal of the near BTS, making it much weaker than normal The far BTS may have much more favorable conditions, such as an over-water path The signals of the two BTSs may seem equally strong! Almost the entire distance between the BTSs appears as timing skew If near BTS is reference PN, distant BTS is late this number of chips If far BTS is reference PN, near BTS is late by this number of chips
Safe Initial Neighbor Search Window Value

Determining Safe Examine a cell map for an area of your system Initial SRCH_WIN_N Identify the farthest-apart pair of cells likely to be used in soft handoff F D Their distance separation determines maximum timing skew a mobile could ever E possibly encounter in this part of the B system 11.5 KM Calculate the timing skew in chips C A 6.7 chips times miles or 4.1 chips times kilometers Required Window Safe required window size = two times the = 4.1 x 11.5 x 2 = 94.3 chips skew SRCH_WIN_N = 10 Refer to table to convert required window size If locations exist near site A in chips to required value of SRCH_WIN_N where mobiles are in handoff with site F, mobiles could encounter After thorough drive-test data is available, it neighbor pilot timing skews as may be possible to reduce SRCH_WIN_N if large as the A-F distance. If locked to A, F looks late by this observed delay spread is significantly amount. If locked to F, A looks narrower than the window early by this amount. Window
must be twice the skew value. October, 2007 120v5 (c) 2007 Scott Baxter Course 120+: 182
Search Window Settings: Remaining Set

Remaining set search window size is determined by maximum possible timing skew in the same way as for neighbor set window Recommended SRCH_WIN_R is one or two steps greater than SRCH_WIN_N Remaining set pilots can be requested by the mobile in a PSMM but the system cannot assign traffic channels since it uses the Neighbor Pilot Database as its crossreference for identification of their base stations There is still value in allowing mobiles to find and request remaining pilots, since the requests help system RF engineers identify missing pilots that should be added to the neighbor lists of various sectors
F E
11.5 KM
A C
October, 2007
Course 120+: 183
Search Window Initial Settings: Active Set

Neighbor and Remaining search window centers are indexed against the mobiles Reference PN Each active search window is different a floating window centered over the earliest observed multipath energy during the previous mobile searcher scan of that individual pilot Active search windows need not accommodate distance-based timing skews they float centered on their respective pilots! The only timing variations they must accommodate are multipath delay spreads Multipath delay spreads are determined by terrain and clutter-driven scattering and reflection of the signal Measurements are better than predictions to set SRCH_WIN_A
Active Search Window

40 chips wide (typical) -20 Ec/Io 0 +20
Earliest Detected Multipath

The earliest arriving multipath seen by the mobile during this searcher sweep will be used as the center of this active window on the next searcher sweep! This makes each active search window "track" individually with its pilot.
Course 120+: 184
SRCH_WIN_A Settings from Measurements

Typical active set delay spread from actual drive-tests Notice the narrow distribution of energy! 28-chip width, SRCH_WIN_A = 6, is enough for this case Drive-test your own system to determine your own value of spread It is determined by the signal-scattering characteristics of your terrain
The Potential for PN Problems and Conflicts

After seeing the skewing effects of propagation, it is easy to anticipate problems of PN confusion and misidentification! There are many different kinds of possible PN problems: Two same-PN base stations with areas of coverage overlap Mobiles can't distinguish them, experience horrible FER Combining unintended signals into the handoff mix being heard The new signals cause interference instead of helping Mistaken identity of signals when requesting handoff The wrong base station is added, the mobile can't hear it Running out of available PNs due to bad parameter choices Fortunately, these problems can be avoided by careful planning!
October, 2007
Course 120+: 186
Co-Active PN Demodulation Errors

ACTIVE SEARCH WINDOW
BTS A PN 142
BTS B PN 142
x miles
x miles
Mobile is midway between two BTSs with the same PN, in a call on BTS A PN energy of BTS A and B is indistinguishable in active search window Rake fingers may be assigned to both A and B energy If the walsh code used on A also happens to be in use by someone on BTS B, demodulation of B will cause severe FER The mobile audio will frequently clip and mute, and the call may drop All the while, the phone will see very good Ec/Io since both A and B are recognized as good energy! Solution: Two different BTS covering the same area should never have the same PN offset. Change the PN offset for one of the sectors involved.
Adjacent-Active-PN Demodulation Errors

BTS A PN 100
ACTIVE SEARCH WINDOW
BTS B PN 99
1 mile
11 miles
Mobile is in a call on BTS A from 1 mile away; A is the reference PN The signal from BTS B on PN 99 travels 11 miles to the mobile and is approximately as strong as BTS A due to terrain effects Due to propagation delay, the signal of B is skewed and falls inside the active search window of the mobile for A A and B energy are indistinguishable to the mobile Rake fingers may be assigned to both A and B multipaths If the walsh code used by the mobile on A also is in use by someone else on B, the mobile may demodulate their symbols and combine them with its own symbols from BTS A This would cause severe FER and possibly a dropped call Solution: The PNs of the two BTSs are too close together. Use a different PN offset for BTS B.
PILOT_INC Helps Avoid PN Problems

Imagine a network with base stations spaced approximately 10 miles apart - this is 1 PN offset! Recall if we use adjacent PNs for adjacent base stations, there will be locations where their PNs are close together or even indistinguishable It would be smart to assign PNs farther apart! If properly set, PILOT_INC can prevent this problem Only PNs divisible by PILOT_INC are allowed to be assigned to sectors PILOT_INC can be chosen from 1 to 16 If too small, interfering PNs can be assigned If too large, the pool of available PNs is small PILOT_INC is set based on the density of cells 3 or 4 in typical cities with suburban density 2 in dense urban environments 6 or 8 in very rural areas
Course 120+: 189
Adjacent-Neighbor PN Recognition Errors

BTS A PN 100
BTS
20 miles
BTS G PN 198
BTS
NEIGHBOR SEARCH WINDOW
mo un tai ns BTS F PN 200

BTS
Mobile is in a call on BTS A, PN 100 Mobile checks neighbor PN 200 to see if handoff needed with BTS F Energy from distant BTS G on PN 198 is skewed so that it falls in the neighbor search window for PN 200; mobile asks for handoff with F The system sets up a traffic channel on BTS F - but mobile hears G! If the walsh code assigned on F happens also to be in use on G, the mobile may put a rake finger on it and include it in the mix Severe FER and a possible dropped call will result! Solution: Careful RF design to avoid such "pockets" of distant coverage If signal of G can't be reduced by RF methods, assign it to a different PN
Sector PN Assignments: Consecutive Assignment

Use only PNs divisible by PILOT_INC. PILOT_INC is chosen large enough to prevent aliasing of pilots in adjacent cells Assign PNs in sequence to the sectors of all the base stations Common Usage: This is the typical default method used in Nortel and Motorola CDMA networks Advantage Simple assignment When adjacent PNs are observed in the field, they are known to be from sister sectors of the same BTS or from nearby BTSs
12 4
96
88
24
16
92 84 76
20
108
100
80
36
28
104 72 64
32
120
112
68
48
40
116
44 60 52
56
October, 2007
Course 120+: 191
Sector PN Assignments: Segment Assignment

Assign only PNs divisible by PILOT_INC PILOT_INC is chosen to avoid aliasing Different ranges of PN values are reserved First 1/3 of PN offsets for alpha sectors Second 1/3 of PN offsets for beta sectors Third 1/3 of PN offsets for gamma sectors Although 512/3 = 170.666, the value 168 is usually used for the inter-sector PN increment Common Usage: default in Lucent networks Advantage: In the field, interference is suddenly noticed from PN 468. Quickly, what is the source of it? Definitely some cells gamma sector!
340 4
368
32
172
344
200 364 28
176
372
36
196
348
12
204 360 24
180
376
40
192
352
16
208
184 356 20
188
October, 2007
Course 120+: 192
PN Reuse Explorations
October, 2007
Course 120+: 193
PN Reuse Symmetrical N=37 Pattern
October, 2007
Course 120+: 194
PN Symmetrical N=37 Reuse Pattern Exploded View
October, 2007
Course 120+: 195
Chapter 3
Performance Performance Optimization Optimization and and Optimization Optimization Tools Tools
October, 2007
Course 120+: 196
What is Performance Optimization?

Performance Optimization involves design and modification of the network, gathering and analysis of data, adjustments to network parameters, and constant evaluation of current network conditions The work includes complex design and simulations, nuts-and-bolts call processing troubleshooting and hardware testing, to growth management and planning System Performance Optimization includes many different smaller processes at many points during a systems life Evaluating the system design with simulation tools to evaluate the performance and capacity of the system Finding workarounds for design issues (cant build a crucial site, too much overlap/soft handoff, coverage holes, etc.) cluster testing and cell integration to ensure new BTS hardware works, datafill is proper, and call processing is normal fine-tuning system parameters for the best possible call performance Fixing root causes of specific problems and customer complaints carefully watching system traffic growth and managing the problems it causes - implementing short-term fixes to ease hot spots, and recognizing problems before they become critical It takes many different skills and perspectives to optimize wireless networks
Performance Optimization Phases/Activities

Phase RF Design and Cell Planning New Cluster Testing and Cell Integration Solve Specific Performance Problems Well-System Performance Management Capacity Optimization Growth Management: Optimizing both Performance and Capital Effectiveness Drivers/Objectives Cover desired area; have capacity for anticipated traffic Ensure cells properly constructed and configured to give normal performance Identify problems from complaints or statistics; fix them! Ensure present plant is giving best possible performance Manage congested areas for most effective performance Activities Plan cells to effectively cover as needed and divide traffic load appropriately Drive-test: coverage, all handoff boundaries, all call events and scenarios Detect, Investigate, Resolve performance problems Watch stats: Drops, Blocks, Access Failures; identify/fix hot spots Watch capacity indicators; identify problem areas, tune parameters & configuration Main Tools Prop. Models, Test Transmitters, planning tools Drive-test tools; cell diagnostics and hardware test Drive-test tools, system stats, customer reports System statistics Smart optimization of parameters; system statistics Success Indicators Model results All handoffs occur; all test cases verified Identified problems are resolved Acceptable levels and good trends for all indicators Stats-Derived indicators; carried traffic levels Sectors are expanded soon after first signs of congestion; capital budget remains within comfortable bounds
hello
Overall traffic increases and congestion; competition for capital during tight times
Predict sector and area exhaustion: plan and validate effective growth plan, avoid integration impact
Traffic analysis and trending tools; prop. models for cell spliiting; carrier additions
October, 2007
Course 120+: 198
Good Performance is really Simple!!

Although there are many phases of optimization activities, good performance is really just compliance with a very simple idea One, Two, or Three good signals in handoff Composite Ec/Io > -10 db Enough capacity for the offered traffic No resource problems
In principle, a COW next door can solve almost any CDMA problem!
BTS
BTS
BTS
Ec/Io
BTS A
BTS B
BTS C
-10
FORWARD available LINK

power Traffic Channels In use Paging Sync Pilot
Reality Check:
1. But who has enough regular cells OR cows or money to fix every problem location?!! 2. Problems occur in the areas between cells dominant coverage. Adding a cow only pushes the problems out to its own boundary with other cells. Conclusion: We need to design better, and to use our existing cells more effectively. We need to provide one, two, or three dominant signals everywhere.
October, 2007
Course 120+: 199
Bad Performance Has Many Causes

+41 +8
360
A
BTS
360+33c
B
BTS
No Available Power!
Traffic Channels In Use
BTS Rx Pwr Overload
CEs
Vocoders Selectors
Paging Sync Pilot
x
BTS B PN 99
BTS A PN 100 ACTIVE SEARCH WINDOW
1 mile
11 miles
Weak Signal / Coverage Hole Pilot Pollution Excessive Soft Handoff Handoff Failures, Rogue mobiles Missing Neighbors Search Windows Too Small BTS Resource Overload / No Resources No Forward Power, Channel Elements No available Walsh Codes No space in Packet Pipes Pilot Surprise ambush; Slow Handoffs PN Plan errors Slow Data Problems: RF or IP congestion Improper cell or reradiator configuration Hardware and software failures But on analysis, all of these problems bad effects happen because the simple few-signal ideal CDMA environment isnt possible.
BTS Sector Transmitter
October, 2007
Early Assessment and RF Optimization Steps

RF Coverage Control try to contain each sectors coverage, avoiding gross spillover into other sectors tools: PN Plots, Handoff State Plots, Mobile TX plots Neighbor List Tuning try to groom each sectors neighbors to only those necessary but be alert to special needs due to topography and traffic tools: PSMM data from mobiles; propagation prediction Search Window Settings find best settings for SRCH_WIN_A, _N, _R especially optimize SRCH_WIN_A per sector using collected finger separation data; has major impact on pilot search speed Repeat as necessary until no large problems remain Access Failures, Dropped Call Analysis finally, iterative corrections until within numerical goals IP Data Performance Assessment Identify, manage, resolve latency and throughput issues Getting these items into shape provides a solid baseline and foundation for comparison, tracking, and planning in the future.
Performance Monitoring/Growth Management

Benchmark Existing Performance from system-side data Dropped Call %, Access Failure %, traffic levels Identify Problem Cells and Clusters weigh cells and clusters against one another Investigate and resolve any problems, using field drive data if needed Look for signs of Overload TCE or Walsh minutes -- excessive ? Soft handoff excessive? Required number of channel elements -- excessive? Forward Power Overloads: Originations, Handoffs blocked Traffic Trending and Projection track busy-hour traffic on each sector; predict exhaustion develop plan for expansion and capacity relief split cells, multi-sector expansions, multiple carriers Use high-level simulation tools to gain insight into user statistics Compare different cell configurations against statistically generated traffic simulations to identify what works best, and try it out! This process never ends. The community, the system, and the customers are always growing and presenting new problems and capacity needs.
CDMA Problems, Causes, and Cures

PROBLEMS Excessive Access Failures Excessive Dropped Calls Forward Link Interference Slow Handoff Handoff Pilot Search Window Issues PN Planning Considerations Excessive Soft Handoff Grooming Neighbor Lists Software Bugs, Protocol Violations EXAMPLES Normal Call Dropped Call - Coverage Dropped Call - Neighbor List Dropped Call - Search Window
Analyzing Analyzing System-Side System-Side Data Data
October, 2007
Course 120+: 204
Resources on System and Switch Data

CDMA networks are complex, including large conventional telephone switches, high-capacity CDMA system peripherals such as BSCs, CBSCs, and Access Managers, and many base stations (BTSs) which are usually multi-carrier A network is literally a CITY of processors and software The specific performance statistics and event counters ('peg counts') are best described in official documentation from the network manufacturers However, current documentation always seems to lag behind cuttingedge hardware and software releases Each manufacturer publishes help on its own hardware & software: Lucent: Wireless Networks Systems Documentation CDs Application notes; many good training courses Nortel: Helmsman CD, documents, training courses Motorola: Planning Guides, documents, training courses This course focuses on the generic key indications to observe, and the analytical skills and perspective necessary for optimization The manufacturers' documentation will describe the actual counters and measurements available from your network
Total Blocked Call Percentage Example

Percent
Total Block Call Percentage

8.0% 7.5% 7.0% 6.5% 6.0% 5.5% 5.0% 4.5% 4.0% 3.5% 3.0% 2.5% 2.0% 1.5% 1.0% Blkd
Date
This is an example of a cumulative system-wide total blocked call percentage chart maintained in one market
October, 2007
Course 120+: 206
Dropped Call Percentage Tracking Example

Percent
Total Drop Call Percentage

5.0% 4.5% 4.0% 3.5% 3.0% 2.5% 2.0% 1.5% 1.0% 0.5% 0.0% %Drops
Date
Dropped call percentage tracking by one market

Total System Daily MOU Example
300000
MOU
Daily Total System MOU

Daily Total System MOU
250000
200000
150000
100000
50000
Date
Total system daily MOU plotted by one market

Top Ten Performance Tracking Example

Call Attempts Eng Site 6.1 2.1 1.2 64.3 108.2 1.3 63.2 102.2 108.1 43.3 MSC Site 13X 2X 1Y 93Z 30Y 1Z 57Y 4Y 30X 42Z Call %Call Block %Blck Call Att Succ Succ Calls Calls 2561 2244 1922 1833 1740 1630 1623 1615 1490 1488 2234 2017 1743 1549 1589 1495 1486 1495 1387 1410 87.2 89.9 90.7 84.5 91.3 91.7 91.6 92.6 93.1 94.8 130 101 83 137 46 31 49 18 27 4 5.1 4.5 4.3 7.5 2.6 1.9 3.0 1.1 1.8 0.3 Acc Fail 130 101 83 136 45 31 49 18 27 4 %Acc Drop %Drop Fail Calls Calls 5.1 4.5 4.3 7.4 2.6 1.9 3.0 1.1 1.8 0.3 145 93 66 110 83 81 66 70 54 53 5.7 4.1 3.4 6.0 4.8 5.0 4.1 4.3 3.6 3.6
3000 2500 2000 1500 1000 500 Calls 0 108.2 102.2 108.1 64.3 63.2 43.3 6.1 2.1 1.2 1.3
Call Attempts
Sector
% Blocked Calls Eng Site 64.3 6.1 63.3 2.1 1.2 63.2 64.1 26.3 108.2 1.3 MSC Site 93Z 13X 57Z 2X 1Y 57Y 93X 35Z 30Y 1Z Call %Call Block %Blck Call Att Succ Succ Calls Calls 1833 2561 1282 2244 1922 1623 1027 855 1740 1630 1549 2234 1098 2017 1743 1486 926 698 1589 1495 84.5 87.2 85.7 89.9 90.7 91.6 90.2 81.6 91.3 91.7 137 130 65 101 83 49 30 24 46 31 7.5 5.1 5.1 4.5 4.3 3.0 2.9 2.8 2.6 1.9 Acc Fail 136 130 65 101 83 49 30 24 45 31
September 5, 1997
%Acc Drop %Drop Fail Calls Calls 7.4 5.1 5.1 4.5 4.3 3.0 2.9 2.8 2.6 1.9 110 145 90 93 66 66 58 112 83 81 6.0 5.7 7.0 4.1 3.4 4.1 5.7 13.1 4.8 5.0
8.0 7.0 6.0 5.0 4.0 3.0 2.0 1.0 0.0 % 108.2 64.3 63.3 63.2 64.1 26.3 6.1 2.1 1.2 Sector 1.3
% Blocked Calls
Many markets use scripts or spreadsheet macros to produce ranked lists of sites with heavy traffic, performance problems, etc.
Bracketing: Fault Notification and Alarming

Some operators develop their own software for monitoring and tracking performance data Each new 30-minute period is compared against a six-week average for that day and time If the new value is outside user-selectable tolerances (typically +/- 30%), an alarm is sent to operations personnel By SMS or pager The tolerance values can be adjusted to produce reasonable numbers of alarms Typically 20-40 alarms per day
0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23
Historic Performance Data and Automatic Alarming
SM TWT F S SM TWT F S SM TWT F S SM TWT F S SM TWT F S SM TWT F S SM TWT F S
TOO LOW
NORMAL
TOO HIGH
+30%
+30%
+30%
6-week average
-30% -30% -30%
If an important performance statistic varies outside a user-specified range, an alarm message is sent automatically to the performance specialist responsible for that base station.
October, 2007
Course 120+: 210
Autonomous Autonomous Data Data Collection Collection By By Subscriber Subscriber Handsets Handsets
October, 2007
Course 120+: 211
Autonomous Collection: A New Way to See Network Performance

Collection Server
software download collected data upload data management, analysis
PDSN/Foreign Agent
BTS
Internet VPNs
Backbone Network SECURE TUNNELS Authentication Authorization Accounting
BTS T
PDSN Home Agent
AAA
R-P Interface
BTS
PSTN
t1
Switch
t1
v SEL
t1
BTS
(C)BSC/Access Manager
An exciting new trend in network RF performance is to embed data collection software on mobile platforms Offers big advantages for RF optimization cost/effectiveness
October, 2007
Course 120+: 212
Using Autonomous Collection

Collection Server
software download collected data upload data management, analysis BTS
PDSN/Foreign Agent BTS Backbone Internet Network T SECURE TUNNELS T VPNs PDSN Authentication Authorization R-P Interface Home Agent Accounting AAA
BTS
PSTN
t1
Switch
t1 v
SEL
t1
(C)BSC/Access Manager BTS
A Server downloads software to a large population of subscriber mobiles Mobiles collect on custom profiles all or groups of mobiles can be enabled/disabled new triggers can be rapidly developed and downloaded when desired Mobiles upload compacted packets to server driven by custom triggers may be immediately if needed, or at low-traffic pre-programmed times collected data can include location/GPS/call event/L3 messaging/timestamps/etc. Server manages data, provides filtering and reporting Performance optimizers use terminals and post-processing software
Advantages of Autonomous Collection

Mobile-reported data can be location-binned post-processing provides visual identification of problem areas Collection can be rapidly enabled per cell or area for immediate investigation of problem reports Requires less employee drive time for collection Customer mobiles cover area more densely than drivetesters Customer mobiles include inbuilding populations Individual mobile identification can be included with customer permission for direct customer service interaction
October, 2007
Course 120+: 214
Current Issues in Autonomous Collection

Collection Server
software download collected data upload data management, analysis BTS
PDSN/Foreign Agent BTS Backbone Internet Network T SECURE TUNNELS T VPNs PDSN Authentication Authorization R-P Interface Home Agent Accounting AAA
BTS
PSTN
t1
Switch
t1 v
SEL
t1
(C)BSC/Access Manager BTS
Requires extensive software capability to develop/manage current progress is from specialty application consulting houses Requires cooperation of handset vendor to effectively integrate software onto handset platform caution required to avoid negative call processing side-effects Privacy issues involved if any user-specific data tracking Additional network capacity required for large-scale reporting
October, 2007
Course 120+: 215
Introduction Introduction to to Field Field Optimization Optimization Tools Tools
October, 2007
Course 120+: 216
Introduction To CDMA Field Tools: Topics

Two Important Concepts The Department Store Analogy - Tops-Down vs. Bottoms-Up The Aeronautical Analogy - Accident Investigation Resources Survey of CDMA Field Tools Mobile Tools Handsets - Maintenance Displays
October, 2007
Course 120+: 217
CDMA Field Test Tools

Field Collection Tools using Handset Data
Motorola Andrew Agilent Qualcomm
MDM, CAIT
PN Scanners
Agilent Berkeley Varitronics Qualcomm TouchWave
TouchWave Andrew Ericsson TEMS
Comarco
DTI
There are many commercial CDMA field test tools Characteristics of many test tools: capture data from data ports on commercial handsets log data onto PCs using proprietary software can display call parameters, messaging, graphs, and maps store data in formats readable for post-processing analysis small and portable, easy to use in vehicles or even on foot A few considerations when selecting test tools: does it allow integration of network and mobile data? Cost, features, convenience, availability, and support new tools are introduced every few months - investigate!
Andrews Invex3G Tool

100 MB ethernet connection to PC the eight card slots can hold receivers or dual-phone cards theres also room for two internal PN scanners Multiple Invex units can be cascaded for multi-phone loadtest applications Cards are field-swappable Users can reconfigure the unit in the field for different tasks without factory assistance
October, 2007
Course 120+: 219
Grayson Invex Playback Example

76.8 kb/s
This mobile is in a 4-way soft handoff (four green FCH walsh codes assigned) in the middle of a downlink SCH burst. Notice walsh code #2, 8 chips long, is assigned as an SCH but only on one sector, and the downlink data speed is 76.8kb/s.
October, 2007
220

153.6 kb/s
This mobile is in a 2-way soft handoff (two green FCH walsh codes assigned) in the middle of a downlink SCH burst. Notice walsh code #3, 4 chips long, is assigned as an SCH but only on one sector, and the downlink data speed is 153.6kb/s.

F-SCH rates 153.6 kbps; R-SCH 76.8kbps
CDMA Status
PN Scanner Data Current Data Task Status
Layer-3 Messages
October, 2007
222
Agilent Drive-Test Tools

Agilent offers Drive-Test tools Serial interfaces for up to four CDMA phones A very flexible digital receiver with several modes PN Scanner Fast, GPS-locked, can scan two carrier frequencies Spectrum Analyzer Can scan entire 800 or 1900 mHz. Bands Base-Station Over-Air Tester (BOAT) Can display all walsh channel activity on a specific sector Useful for identifying hardware problems, monitoring instantaneous traffic levels, etc. Post-Processing tool: OPAS32
PN Scanners
Why PN scanners? Because phones cant scan remaining set fast enough, miss transient interfering signals Berkeley Varitronics high-resolution, GPS-locked full-PN scan speed 26-2/3 ms. 2048 parallel processors for very fast detection of transient interferors Agilent (formerly Hewlett-Packard) high resolution, GPS-locked full-PN scan speed 1.2 sec. Integrated with spectrum analyzer and phone call-processing tool Andrew lower-cost, low-end solution full-PN scan speed 6.3 sec. integrated with phone & call-processing data collection tool high-end version also available using Berkeley Scanner
Post-Processing Tools
Windcatcher
Analyzer
Interpreter
Post-Processing tools display drive-test files for detailed analysis - Faster, more effective than studying data playback with collection tools alone Actix Analyzer Imports/analyzes data from almost every brand of drive-test collection tool Andrew (formerly Grayson) Interpreter Imports/analyzes data from Andrew Invex3G Nortel RF Optimizer Can merge/analyze drive-test and Nortel CDMA system data Xceed Technologies Windcatcher Imports/analyzes data from almost every brand of drive-test device Xceed Technologies Vortex Provides automated analysis of data from manual, autonomous, and stand-alone sources Verizon/Airtouch internal tool DataPro
Vortex
Course 120+: 225
Drive-Tests: Phones
Maintenance Maintenance Features Features of of CDMA CDMA Handsets Handsets
October, 2007
Course 120+: 226
Handsets as Tools: Simple but always Available!

Most CDMA handsets provide some form of maintenance display (Debug Mode) as well as instrumentation access all CDMA drive-test tools use handsets as their front-ends Using the handset as a manual tool without Commercial Test Tools: Enter the maintenance mode by special sequence of keystrokes Displayed Parameters PN Offset, Handset Mode, Received RF Level , Transmit Gain Adjust Maintenance Display Applications best serving cell/sector simple call debugging (symptoms of weak RF, forward link interference, etc.) Handset Limitations during manual observation no memory: real-time observations only; no access to messages or call details; serving PN offset not updated during voice calls
October, 2007
Course 120+: 227
Interpreting Samsung Maintenance Display: Acquisition, Idle, and Access States

Display toggles between: System Identifier (SID) Network Identifier (NID) Transmit Gain Adjust, db Reference PN Offset System Protocol Revision Level Radio Configuration (Idle mode = 0, 0)
0 - Pilot Channel Acquisition Substate 1 - Sync Channel Acquisition Substate 2 - MS Idle State 3 - System Access State 4 - Traffic Channel State 5,6,7 - various call service options
Slot Cycle Index
Processing State
Debug Screen S04274 SI2 2 T-56 D070-04 P0060 CH0350 PR6 RC0 0Z11 V206T144L:02
Receive Power, dbm Ec/Io, db (primary PN only) Carrier Freq. (Channel #) Packet Zone ID
October, 2007
Course 120+: 228
Interpreting Samsung Maintenance Display: Traffic Channel State

Transmit (RL) Vocoder Rate 1 = 1/8 2 = 1/4 4 = 1/2 8 = Full Transmit Gain Adjust, db PN Offset System Protocol Revision Level Service Option Live Cumulative FER
October, 2007
FCH Receive (FL) Vocoder Rate Walsh Code
0 - Pilot Channel Acquisition Substate 1 - Sync Channel Acquisition Substate 2 - MS Idle State 3 - System Access State 4 - Traffic Channel State 5,6,7 - various call service options
Processing State
Debug Screen TE8 RE8 40 6 T-10 D070-04 P0060 CH0350 PR6 RC33 Z11 SO00003 G207 F001.54%L:02
Radio Configuration (RC3, RC3 common)
Receive Power, dbm Ec/Io, db (primary PN only) Carrier Freq. (Channel #) Packet Zone ID
Course 120+: 229
Denso Maintenance Display

Charging Battery Voltage Average Battery Voltage System ID Network ID RF Channel Frequency Digital PN Offset Number of Bad Frames Number of Good Frames Base Station coordinates Current status of Rake Fingers Active Pilot Set Candidate Pilot Set
D CBV: 3957 ABV: 3954 ABT: 031 ARF: 0000 CCL: 01 SID: 04157 NID: 00001 CH: 0100 RSSI: 093 DPN: 084 TX:-46 BFRM:0000000968 TFRM:0000135712 FER:% 000.71 LT: 036:06:36 LG: -086:45:36 EC: -16 -63 -63 PN: 084 084 084 FNGLK: Y Y N WLSH: 01 01 01 ACT: 084 484 096 -01 -01 200 CND: 220 332 200 200 332 NGH: 076 080 340 068 196 O56 320 220 316 344 488 196 200 392 124 128 084 224 008 084
Average Battery Temperature
Received Signal Strength Estimated Transmitter Power Output Frame Erasure Rate, Percent
Neighbor Pilot Set
October, 2007
Course 120+: 230
Sanyo SPC-4500 Maintenance Display

Choose the following: DISPLAY OK 0 OK Enter Code: 0 0 0 0 0 0 Debug Menu SCREEN OK
October, 2007
Course 120+: 231
Sanyo SPC-4900 Maintenance Display

Call Proc. State

## 040793 select MENU/OK button scroll to save Phone # select
PN offset
Receive Power Io
Channel Frequency
October, 2007
Course 120+: 232
The Motorola Q
Getting Into Maintenance Mode: Enter # # 3 3 2 8 4 # Press the green Talk button A Field Test Mode screen will appear Choose one: A Call Status Screen <<< USE (this is the main maintenance display) B Field Test Menu (this controls special test modes and GPS/HDR settings) C GPS data (shows various GPS parameters) D Debug Information I/O register and error log display Getting Out of Maintenance Mode: Press EXIT at bottom of Field Test Mode screen
Maintenance Display on the Motorola Q: The CDMA Parameters
Strongest Active Pilot PN Ec/Io (-)
Number of Actives Number of Candidates Number of Neighbors
Band: P=PCS, C=800 Carrier Channel # Call Processing State Reason Last Call Ended # dropped calls # total calls
Strongest Neighbor Pilot PN Ec/Io (-) Transmit Power, dbm
Receive Power, dbm Current Service Option
CDMA 111 186 84 NA EVDO 100 111 OPN
60 1 20 P 50 120 0 IDL CE H N/A 0.00 0 4139 43 6 2 0 120 0x785B64D2 5 79 -77 -128 128 7 ACC 0 70.11.225.186
SID NID Avg. FER
October, 2007
Course 120+: 234
Maintenance Display on the Motorola Q: CDMA Call Proc. States, Call End Reasons
Current Service Option 8V 8K voice original IL 8K loopback 8EV 8K EVRC 8S 8K SMS 13L 13K loopback 13S 13K SMS 8MO 8K Markov Old DAT Data 8M 8K Markov New 13M 13K Markov New 13V 13K Voice Call Processing States CP CP Exit RST CP Restart RTC Restricted PLT Pilot Acquisition SYN Sync Acquisition TIM Timing Change BKS Background Sch IDL Idle OVD Overhead PAG Paging ORG Call Origination SMS Short Message Svc ORD Order Response REG Registration TCI Tfc Ch Initialization WFO Waiting for Order WFA Waiting for Answer CON Conversation state REL Release NON No State Last Call End Indicator NI No Indication yet MR Mobile Release BR Base Sta. Release TC Traffic Channel Lost L2 Layer 2 Ack Fail NC No Channel Assn Msg N5 N5M failure BS BS Ack failure WO L3 WFO State Timeout MP Max Probe Failure PC Paging Channel loss RR Reorder or Release on PCH ?? Unknown Condition
October, 2007
Course 120+: 235
Maintenance Display on the Motorola Q: The EVDO Parameters
UATI
Carrier Channel #
PN
HDR Session State
CDMA 111 186 84 NA EVDO 100 111 OPN
60 1 20 P 50 120 0 IDL CE H N/A 0.00 0 4139 43 6 2 0 120 0x785B64D2 5 79 -77 -128 128 7 ACC 0 70.11.225.186
Receive Power, dbm
IP Address
October, 2007
Course 120+: 236
Entering Maintenance Mode: Motorola StarTac

Contact your service provider to obtain your phones Master Subscriber entity Lock (MSL). Then enter the following: FCN 000000 000000 0 RCL You'll be prompted for your MSL, enter it and press STO. New prompts will appear, Press STO in response to each prompt until no more appear. Dont delay continue quickly and enter: FCN 0 0 * * T E S T M O D E STO The display will briefly show US then just '. Press 55#. Step 1 will appear with its current setting displayed. Press * to accept and move on to the next step. Repeat for steps 2-8. Step 9 (Option byte 2) is the only step requiring manual changes. Enter 1 0 0 0 0 0 0 0 (The leftmost bit now set to '1' is what enables test mode.) Now press STO to accept the entry and exit back to the ' prompt. Power off and back on. You should now be in test mode!
October, 2007
Course 120+: 238
Service Option
Battery Local Time Condition RX Power Strongest Active # # Channel PN Ec/Io Actives Neighbors Number Strongest Neighbor # Cand- Call Proc Last Call Exit Reason PN Ec/Io idates State Rx Power Tx Power Last Call FER% # Drops dbm dbm (Io) Current # Calls
Last Call Indicator NI No Indication yet MR Mobile Release BR Base Sta. Release TC Traffic Channel Lost L2 Layer 2 Ack Fail NC No Channel Assn Msg
N5 N5M failure BS BS Ack failure WO L3 WFO State Timeout MP Max Probe Failure PC Paging Channel loss RR Reorder or Release on PCH ?? Unknown Condition
SID
CP CP Exit RST CP Restart RTC Restricted 8V 8K voice original 13S 13K SMS PLT Pilot Acquisition IL 8K loopback 8MO 8K Markov Old SYN Sync Acquisition TIM Timing Change 8EV 8K EVRC DAT Data Background Sch 8S 8K SMS 8M 8K Markov New BKS IDL 13L 13K loopback 13M 13K Markov New OVD Idle Overhead 13V 13K Voice PAG October, 2007 120v5 (c) 2007 Scott Paging Baxter
Call Processing States ORG Call Origination
NID
Current Service Option
SMS Short Message Svc ORD Order Response REG Registration TCI Tfc Ch Initialization WFO Waiting for Order WFA Waiting for Answer CON Conversation state REL Release Course 120+: 239 NON No State
Motorola V120C Series

MENU 073887* Enter 000000 for security code. Scroll down to Test Mode. Enter subscriber entity lock code if required by your phone
Same maintenance display as shown for Startac
October, 2007
Course 120+: 240
Motorola V60C
MENU 073887* Enter 000000 for security code. Scroll down to Test Mode. Enter subscriber entity lock code if required by your phone Same maintenance display as shown for Startac
October, 2007
Course 120+: 241
Nokia 6185 Maintenance Display

Enter *3001#12345# MENU Scroll down to Field test Press Select Scroll up to Enabled Press OK Power the phone off and on You should now be in Field test mode
October, 2007
Course 120+: 242
Novatel Merlin C201 1xRTT Data Card

Enter # # D E B U G to enter maintenance mode. To exit, just click OK box in the Debug window.
October, 2007
Course 120+: 243
Audiovox Thera Maintenance Mode Screens

How to enter Debug Mode: [ctrl] [D] [enter] Advanced Usr Pwd: ##DEBUG [enter] Protocol Statistics
October, 2007
Course 120+: 244
Sierra 580 1xEV-DO Rev 0 Aircard

To enter the maintenance display, hover your cursor over the Connection Manager main indicator window or the Start button and type ##debug. The Network, Network 2, and HDR tabs provide the most useful information on the air interface. The other tabs provide details of the packet operations and error counters.
October, 2007
Course 120+: 245
Chapter 4
Multi-Carrier Multi-Carrier Operation Operation Transitions Transitions at at System System Boundaries Boundaries 1x 1x Data Data Performance Performance Additional Additional Resources Resources
October, 2007
Course 120+: 246
Its A
Multi-Carrier/Multi-System/Multi-Manufacturer
World!
Systems are forced to use multiple carriers to achieve needed traffic capacity Its important that the traffic load be divided between carriers Physically adjacent friendly systems often desire to allow seamless mobile operation across their borders, although they use different carrier frequencies Even within one large network, seamless mobile operation is desired across serving switch boundaries These situations are not completely solved in the original IS-95 CDMA vision, so additional standards documents and additional proprietary processes provide the needed functionality IS-95: hashing or GSRMs can distribute idle mobiles among carriers IS-41 - provides intersystem handoffs and call delivery Proprietary algorithms can distribute in-call traffic among carriers RF tricks and network proprietary algorithms can support inter-carrier handoff Multi-Carrier Operation is a complex sport
October, 2007
Course 120+: 247
Transitions at System Boundaries

IDLE IN-CALL IDLE IN-CALL
Boundary types between different operators same frequency, different frequency, even different band between different BSCs or Switches of Same Operator same frequency, different frequency, even different band between different carriers where number of carriers changes same frequency, different frequency, even different band! A reliable transition method must be planned for users in all circumstances all directions of approach all modes of operation (idle, active voice call, dormant data session, active data session)
Foundation for Transition Troubleshooting

Multi-carrier and intersystem boundary transitions are complex relationships between mobile, air interface, and system to solve problems, its necessary to understand the basic actions of mobile and the system this information comes from the standard, summarized in the next few slides The mobiles actions are generic, defined by the standards, and simpler/more specific than the steps taken by the system A thorough knowledge of the mobile side is the easiest-to-get resource for general troubleshooting of problems For in-call transition troubleshooting, the systems generic and proprietary algorithms must also be understood artificial proprietary trigger mechanisms and internal system order communications and IS-41 implementation this information comes from manufacturer documentation trunking and networking between adjoining systems this information comes from operators own network design
October, 2007
Course 120+: 249
Foundation: Foundation:
Understanding Understanding Mobile Mobile Actions Actions
October, 2007
Course 120+: 250
Multi-Carrier Operation: Mobiles Change Frequencies. When/Why/How?

Finding the System Idle Mode Call Start In-Call Operation
There are many situations where a mobile should change frequency Finding a new system when turning on in a new location Crossing a boundary and entering a new system when in idle mode Beginning a call on a sector that has more than one carrier Crossing a boundary and entering a new system when in a call Fortunately, there are defined triggers for all of these situations
October, 2007
Course 120+: 251

Finding the System
MRU
1025 650 25 125 250 175 384 100 375 675 625 825
PRL
XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX
Start at top Of MRU and Check until Look up found A signal is Signal in PRL found And try to climb To more preferred Signal if available
October, 2007
Course 120+: 252

Idle Mode
Channel List Message 50, 125, 175 Hash and go!
October, 2007
Course 120+: 253

Idle Mode
Global Service Redirection Message ACCOLC:1111100000100000 GO TO CH. 225 If your ACCOLC is ON, Go where they tell you!
October, 2007
Course 120+: 254

Idle Mode
Neighbor List Message F1 PN240 F1 PN168 F1 PN336 F1 PN500 F1 PN372 F1 PN232 F2 PN240 F2 PN272 F3 PN240 F2 PN474
Check neighbors on Other frequencies during Unused paging slots. If stronger than current Active, do idle mode Handoff to new frequencuy
October, 2007
Course 120+: 255

Idle Mode
Channel List Message 50, 125, 175 Hash and go! Global Service Redirection Message ACCOLC:1111100000100000 GO TO CH. 225 If your ACCOLC is ON, Go where they tell you! Neighbor List Message F1 PN240 F1 PN168 F1 PN336 F1 PN500 F1 PN372 F1 PN232 F2 PN240 F2 PN272 F3 PN240 F2 PN474
October, 2007
Course 120+: 256

Call Start
Getting Started: Mobile sends Page Response or Origination Message System evaluates Present loading on Each carrier and Prepares a traffic Channel on the Carrier it prefers. System sends channel Assignment message To the mobile Mobile goes to the Frequency it is told Nortel: MCTA Lucent: Pooling Motorola: Pooling
October, 2007
Course 120+: 257

In-Call Operation
NORMAL SOFT HANDOFFS Mobile monitors pilots And sends PSMM to Request handoffs When it desires No Frequency Changes
October, 2007
Course 120+: 258

In-Call Operation
HARD HANDOFFS Mobile cannot see signals On other frequencies. System must use special traps to trigger And decide handoffs: Pilot Beacons
PILOT DATABASE
October, 2007
Course 120+: 259

In-Call Operation
HARD HANDOFFS Mobile cannot see signals On other frequencies. System must use special traps to trigger And decide handoffs:
Round-Trip Delay, or Ec/Io and Quality Triggers Border Cells RTD rings
October, 2007
Course 120+: 260

In-Call Operation
NORMAL SOFT HANDOFFS Mobile monitors pilots And sends PSMM to Request handoffs When it desires HARD HANDOFFS Mobile cannot see signals On other frequencies. System must use special traps to trigger And decide handoffs: Pilot Beacons
PILOT DATABASE
October, 2007
Course 120+: 261

Finding the System
MRU
1025 650 25 125 250 175 384 100 375 675 625 825
Idle Mode
Channel List Message 50, 125, 175 Hash and go! Global Service Redirection Message ACCOLC:1111100000100000 GO TO CH. 225 If your ACCOLC is ON, Go where they tell you! Neighbor List Message F1 PN240 F1 PN168 F1 PN336 F1 PN500 F1 PN372 F1 PN232 F2 PN240 F2 PN272 F3 PN240 F2 PN474
Call Start
Getting Started: Mobile sends Page Response or Origination Message System evaluates Present loading on Each carrier and Prepares a traffic Channel on the Carrier it prefers. System sends channel Assignment message To the mobile Mobile goes to the Frequency it is told Nortel: MCTA Lucent: Pooling Motorola: Pooling
In-Call Operation
NORMAL SOFT HANDOFFS Mobile monitors pilots And sends PSMM to Request handoffs When it desires HARD HANDOFFS Mobile cannot see signals On other frequencies. System must use special traps to trigger And decide handoffs: Pilot Beacons
PRL
XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX
Start at top Of MRU and Check until Look up found A signal is Signal in PRL found And try to climb To more preferred Signal if available
PILOT DATABASE
October, 2007
Course 120+: 262
Hard Handoffs
Soft Handoff is the preferred mode in CDMA. Its diversity provides excellent reliability and resistance to fading. Soft Handoff is possible only if all these conditions are true: the mobile is a one-frequency-at-a-time device, so all sectors in handoff must be on the same carrier frequency on the network side, all the base stations involved must have packet paths in backhaul to the BSC/access manager currently being used by the mobile. If more than one BSC/access manager is involved, special packet links are required between them all new base stations being added in handoff must accept the call using its current frame offset (rarely a concern) If any of these conditions cannot be met, then the handoff must be hard i.e., the mobile must give up its current links and quickly jump to the new link or links Notice that if the new target sector is on a different frequency than the mobiles current call, the mobile will not even see its pilot and will not know to request a handoff!
Triggering Hard Handoffs in Traffic

Hard Handoffs during a mobiles call or data session can be triggered by a variety of methods: Pilot Beacon The mobile notices a rising pilot and sends a Pilot Strength Measurement Message asking for handoff. The system responds with an Extended Handoff Direction Message with the Hard Handoff field enabled, and sending the mobile to a different system or frequency. Border-Cell Special Triggers Unknown to the mobile, it is now using only one or more special sectors defined as border sectors in the systems databases. Special tracking is going on, either round-trip-delay measurement or Ec/Io reporting. When the system decides the mobile has reached the trigger conditions, it suddenly and without warning sends an Extended Handoff Direction Message with the Hard Handoff field enabled, sending the mobile to a different system or frequency it is not unusual for the EHDM to list multiple target sectors
Hard Handoff Messaging (Beacon Trigger)

FORWARD TRAFFIC CHANNEL REVERSE TRAFFIC CHANNEL PILOT STRENGTH MEAS. MSG. (BEACON SEEN)
BASE STATION ACK. ORDER EXTENDED HANDOFF DIRECTION MSG.
MOBILE STATION ACK. ORDER
NEW FORWARD TRAFFIC CH.

BASE STATION ACK. ORDER NEIGHBOR LIST UPDATE MESSAGE. IN-TRAFFIC SYS. PARAM. MESSAGE (OPTIONAL)
NEW REVERSE TRAFFIC CH.

HANDOFF COMPLETION MESSAGE MOBILE STATION ACK. ORDER
October, 2007
Course 120+: 265
Hard Handoff Messaging (RTD Trigger)

FORWARD TRAFFIC CHANNEL REVERSE TRAFFIC CHANNEL
EXTENDED HANDOFF DIRECTION MSG.
MOBILE STATION ACK. ORDER
NEW FORWARD TRAFFIC CH.

BASE STATION ACK. ORDER NEIGHBOR LIST UPDATE MESSAGE. IN-TRAFFIC SYS. PARAM. MESSAGE (OPTIONAL)
NEW REVERSE TRAFFIC CH.

HANDOFF COMPLETION MESSAGE MOBILE STATION ACK. ORDER
October, 2007
Course 120+: 266
f1
Basic Multi-Carrier Operation
W0 Pilot w1 Paging wa Traffic wb Traffic w32 Sync wx Traffic wy Traffic wz Traffic W0 Pilot w1 Paging wa Traffic wb Traffic w32 Sync wx Traffic wy Traffic wz Traffic W0 Pilot w1 Paging wa Traffic wb Traffic w32 Sync wx Traffic wy Traffic wz Traffic W0 Pilot w1 Paging wa Traffic wb Traffic w32 Sync wx Traffic wy Traffic wz Traffic W0 Pilot w1 Paging wa Traffic wb Traffic w32 Sync wx Traffic wy Traffic wz Traffic
f2
f3
f4
October, 2007
IS-95
IS-95
IS-95
IS-95
f1
W0 wa wb wc wd wx wy wz Pilot Traffic Traffic Traffic Traffic Traffic Traffic Traffic W0 wa wb wc wd wx wy wz W0 Pilot w1 Paging wa Traffic wb Traffic w32 Sync wx Traffic wy Traffic wz Traffic
f2
f3
Pilot Traffic Traffic Traffic Traffic Traffic Traffic Traffic
Non-originating carriers can carry more traffic!
Many Network/Carrier Configurations are Possible!
W0 wa wb wc wd wx wy wz
f4
IS-95
IS-95
IS-95
IS-95
f1
Course 120+: 267
Some Carriers may support 1xRTT
f2
f3
W0 Pilot w1 Paging wa Data w32 Sync wx Traffic wy Traffic wz Traffic
f4
1xRTT
IS-95
IS-95
IS-95
CDMA2000 CDMA2000 1xRTT 1xRTT Systems Systems

Data Data Performance Performance Optimization Optimization
October, 2007
Course 120+: 268
The Big Picture:

IP Data Environment Internet VPNs
T
PDSN/Foreign Agent Backbone Network SECURE TUNNELS Authentication Authorization Accounting
PDSN Home Agent
AAA
R-P Interface
BTS Coverage Holes Pilot Pollution Missing Neighbors Fwd Pwr Ovld Rev Pwr Ovld Search Windows Wireless Island Cells Mobile Device Slow Handoff
PSTN
t1
Switch
t1
SEL
t1
CDMA IOS PPP
CE
Traditional Telephony
1xRTT services may include both traditional circuit-switched voice and new fast IP data connections A User's link is in multiple jeopardy, both radio and packet worlds Radio environment portion Problems: FER, drops, access failures, capacity woes Causes: mainly in the RF world, because of mainly RF problems Packet environment Problems: Setup failures, dropped connections, low throughput Causes: could be IP-related, or could be RF related
IP Data Environment
CDMA RF Environment
#6 Indicator: Data Latency

T
PDSN Home Agent
AAA
R-P Interface
PSTN
t1
Switch
t1
SEL
t1
CDMA IOS PPP
CE
Latency can occur because of RF channel congestion or from IP network causes RF overload can delay availability of supplemental channels IP network congestion can delay availability of packets Ping and loopback tests with local PDSN and servers can identify whether problem is in backbone network Does latency correlate with independent evidence of RF congestion?
IP Data Environment
CDMA RF Environment
#7 Indicator: Data Throughput

T
PDSN Home Agent
AAA
R-P Interface
PSTN
t1
Switch
t1
SEL
t1
CDMA IOS PPP
CE
Throughput can be limited by RF and IP causes Traditional RF problems limit capacity of the channel Congestion in the IP network can limit speed of data available Does low throughput correlate with independent RF indicators? Does low throughput correlate with independent IP pings and tests?
October, 2007
Course 120+: 271
IP Data Environment
CDMA RF Environment
Data Data Flow Flow Management: Management: MAC/LAC MAC/LAC Layer Layer Operation Operation
October, 2007
Course 120+: 272
System MAC/LAC Parameters

How is data flow managed? Can I keep my FCH all the time? Will my connection drop in a fade? When is an SCH turned on for me? How long will my SCH burst last? What is the data rate of my SCH? If I cant get a full-rate SCH, can I at least get a lower-rate SCH? Which kinds of traffic have priority? Do some users have higher priority?
Active
T_active or Release
Initialization
Traffic channel Exists Service Option Connected Control Channel Exists
Control Channel exists
Control Hold
Packet Service Packet Service Request Deactivated PPP Terminated Release Sent! Service Option Connected Control Channel Exists
T_hold
Null Reconnect
Have New Data to send!
The answers to all these questions are determined by MAC & LAC layer processes and parameters Each network manufacturer implements some subset of the MAC/LAC states and parameters specified in the IS-2000 standard Each manufacturer has its own unique parameter set to control state transitions Most networks begin operation using manufacturer-recommended defaults as networks and applications Suspended mature, parameters will be fully optimized A basic knowledge of the manufacturers proprietary parameters gives very useful insights into configuration and Dormant performance issues
T_suspend
PPP Terminated Release Sent!
October, 2007
Course 120+: 273
MAC States
IP Session Internet VPNs Selector/ Channel PPP Svc Cfg (RLP) Element
Backbone Network SECURE TUNNELS
State
F-TRAFFIC F-FCH
PDSN/ Foreign BTS Agent
PDSN Home Agent
AAA
R-P Interface
SEL
ACTIVE
exit timer: a few seconds
R-TRAFFIC R-FCH
F-SCH
R-SCH
SCH driven by traffic
(C)BSC/ Access Manager
t1
CE
SCH driven by traffic
Internet VPNs

F-TRAFFIC F-DCCH
PDSN Home Agent
AAA
R-P Interface
SEL
CONTROL HOLD
(Optional State)
R-TRAFFIC R-DCCH intermittent
t1
CE
exit timer: a few seconds very fast return to active state
Internet VPNs

PAGING
PDSN Home Agent
AAA
R-P Interface
SEL
SUSPENDED
(Optional State)
exit timer: a few seconds between data bursts
R-EACH R-CCCH intermittent
t1
CE
Internet VPNs

PAGING
R-ACH
PDSN Home Agent
AAA
R-P Interface
SEL
DORMANT
exit timer: minutes, hours between data bursts
today R-EACH R-CCCH tomorrow
t1
October, 2007
Course 120+: 274
PDSN/Foreign Agent
Forward Link SCH Scheduling

FCH or
data Buffer
R-P Interface
FCH +
SCH?
My F-SCH Data Rate
BTS
PCF SEL
t1
CE
BTSC Wireless Mobile Device
The main bottleneck is the forward link itself: restricted by available transmitter power and walsh codes Each connected data User has a buffer in the PDSN/PCF complex When waiting data in the buffer exceeds a threshold, the PDSN/PCF asks the BTS for an F-SCH. Its data rate is limited by: Available BTS forward TX power; available walsh codes; competition from other users who also need F-SCHs; and mobile capability When the buffer is nearly empty, the SCH ends; FCH alone Occupancy timers and other dynamic or hard-coded triggers may apply QOS (Quality of Service) rules also may be implemented, giving preference to some users and some types of traffic
Forward Link Events in a Typical User Session

Data volume in PDSN buffer triggers SCH assignment. SCH rate is driven by amount of data in buffer and available TX power sector can allocate. Data volume in buffer low, SCH released. Data flow continues on FCH until complete. Data volume in PDSN buffer triggers SCH assignment. SCH rate is driven by amount of data in buffer and available TX power sector can allocate. Data volume in PDSN buffer triggers SCH assignment. SCH rate is driven by amount of data in buffer and available TX power sector can allocate.
Act Init CHld Null Dorm Rcon Susp
153.6
Data volume in buffer low, SCH released. Flow continues on FCH.
Data Rate, kbps
76.8
Active timer runs out! FCH drops. Session is dormant.
Data volume in buffer low, SCH released. Data flow continues on FCH until complete. No data, FCH idle, 1200 bps Mobile ends session.
38.4 19.2 9.6 1.2 0
TA
STATE
Session begins. No data, FCH idle, 1200 bps Data in PDSN buffer. Data flow begins on FCH FCH idle 1200 bps No data, FCH idle, 1200 bps Data in PDSN buffer. Data flow begins on FCH QOS algorithm gives SCH to another user briefly. Data meanwhile flows on FCH. No data, FCH idle, 1200 bps Data in PDSN buffer. Data flow begins on FCH
Channel Legend:
FundamentalSupplemental Idle Data Data
October, 2007
Course 120+: 276
1x 1x Data Data Tests Tests and and Optimization Optimization
October, 2007
Course 120+: 277
So S L O W ! !
T
Wheres My Data?!!
PDSN Home Agent
AAA
R-P Interface
BTS
PSTN
t1
Switch
t1
v SEL
t1
CE
CDMA IOS PPP
Coverage Holes Pilot Pollution Missing Neighbors Fwd Pwr Ovld Rev Pwr Ovld Search Windows Wireless Island Cells Mobile Device Slow Handoff
Some sessions are tormented by long latency and slow throughput Where is the problem? Anywhere between user and distant host: Is the mobile users data device mis-configured and/or congested? Is the BTS congested, with no power available to produce an SCH? Poor RF environment, causing low rates and packet retransmission? Congestion in the local IP network (PCU, R-P, PDSN FA)? Congestion in the wireless operators backbone (OSSN) network? Congestion in the PDSN HA? Congestion in the outside-world internet or Private IP network? Is the distant host congested, with long response times?
IP Data Environment
CDMA RF Environment
Finding Causes of Latency and Low Throughput

Test Server Test Server IP Data Environment
T
Test Server
PDSN/Foreign Agent
Internet VPNs
Backbone Network SECURE TUNNELS Authentication Authorization Accounting
PDSN Home Agent
AAA
R-P Interface
BTS
PSTN
t1
Switch
t1
v SEL
t1
CE
CDMA IOS PPP
Coverage Holes Pilot Pollution Missing Neighbors Fwd Pwr Ovld Rev Pwr Ovld Search Windows Wireless Island Cells Mobile Device Slow Handoff
IP network performance can be measured using test servers Problems between mobile a local test server? The problem is local check RF conditions, stats: poor environment, SCH blocking? if the RF is clean, investigate BSC/PCU/R-P/PDSN-FA Local results OK, problems accessing test server at PDSN-HA? problem is narrowed to backbone network, or PDSN-HA Results OK even through test server at PDSN-HA then the problem is in the public layers beyond.
IP Data Environment
CDMA RF Environment
Key Key Features Features and and Structure Structure of of 1xEV-DO 1xEV-DO Rev. Rev. 0 0 and and Rev. Rev. A A
October, 2007
Course 120+: 280
A Quick Survey of Wireless Data Technologies

US CDMA
1xEV-DV
5000 - 1200 DL 307 - 153 UL
ETSI/GSM
WCDMA HSDPA
12000 6000 kb/s
MISC/NEW
WI-MAX Flarion OFDM
1500 900 kb/s
1xEV-DO A
3100 800 DL 1800 600 UL
WCDMA 1
2000 - 800 kb/s
WCDMA 0 1xEV-DO 0
2400 600 DL 153.6 76 UL 384 250 kb/s
TD-SCDMA
In Development
EDGE
200 - 90 kb/s DL 45 kb/s UL
CELLULAR
IDEN IS-136 TDMA
19.2 19.2 kb/s 19.2 9.6 kb/s
1xRTT RC4
307.2 160 kb/s
GPRS
40 30 kb/s DL 15 kb/s UL
1xRTT RC3
153.6 80 kb/s
CDPD
19.2 4.8 kb/s discontinued
IS-95B
64 -32 kb/s
GSM HSCSD
32 19.2 kb/s
PAGING
Mobitex
9.6 4.8 kb/s obsolete
AMPS Cellular GSM CSD

9.6 4.8 kb/s 9.6 4.8 kb/s w/modem
IS-95
14.4 9.6 kb/s
This summary is a work-in-progress, tracking latest experiences and reports from all the high-tier (provider-network-oriented) 2G and 3G wireless data technologies Have actual experiences to share, latest announced details, or corrections to the above? Email to Scott@ScottBaxter.com. Thanks for your comments!
Channel Structure of 1xEV-DO vs. 1xRTT

CHANNEL STRUCTURE IS-95 and 1xRTT many simultaneous users, each with steady forward and reverse traffic channels transmissions arranged, requested, confirmed by layer-3 messages with some delay 1xEV-DO -- Very Different: Forward Link goes to one user at a time like TDMA! users are rapidly time-multiplexed, each receives fair share of available sector time instant preference given to user with ideal receiving conditions, to maximize average throughput transmissions arranged and requested via steady MAC-layer walsh streams very immediate!
IS-95 AND 1xRTT

Many users simultaneous forward and reverse traffic channels
PILOT SYNC PAGING F-FCH1 F-FCH2 F-FCH3 F-SCH W0 W32 W1 W17 W25 W41 W3
BTS
F-FCH4 W53
ATs
1xEV-DO
AP
(Access Terminals)
(Access Point)
1xEV-DO Forward Link
AP
Course 120+: 282
Power Management of 1xEV-DO vs. 1xRTT

IS-95: VARIABLE POWER
POWER MANAGEMENT IS-95 and 1xRTT: sectors adjust each users channel power to maintain a preset target FER 1xEV-DO IS-856: sectors always operate at maximum power sector output is timemultiplexed, with only one user served at any instant The transmission data rate is set to the maximum speed the user can receive at that moment
October, 2007
TO MAINTAIN USER FER

Maximum Sector Transmit Power 8 7 6
power
5 4 2
5 3 User 1 PAGING SYNC PILOT
time
1xEV-DO: MAX POWER ALWAYS,

DATA RATE OPTIMIZED
power
time
Course 120+: 283
1xEV-DO Transmission Timing

Forward Link
All members of the CDMA family - IS-95, IS-95B, 1xRTT, 1xEV-DO and 1xEV-DV transmit Frames One Cycle of PN Short Code IS-95, IS-95B, 1xRTT frames are usually 20 ms. long 1xEV-DO frames are 26-2/3 ms. long same length as the short PN code One 1xEV-DO Frame each 1xEV-DO frame is divided into 1/16ths, called slots The Slot is the basic timing unit of 1xEV-DO forward link transmission Each slot is directed toward somebody and holds a subpacket of information for them Some slots are used to carry the control channel for everyone to hear; most slots are intended for individual users or private groups Users dont own long continuing series of slots One Slot like in TDMA or GSM; instead, each slot or small string of slots is dynamically addressed to whoever needs it at the moment
Whats In a Forward Link Slot?

Slot 1024 chips Slot 1024 chips
PILOT
PILOT
MAC
MAC
MAC
SLOT
DATA
400 chips
DATA
400 chips
DATA
400 chips
MAC
DATA
400 chips
64
96
64
64
96
64
The main cargo in a slot is the DATA being sent to a user But all users need to get continuous timing and administrative information, even when all the slots are going to somebody else Twice in every slot there is regularly-scheduled burst of timing and administrative information for everyone to use MAC (Media Access Control) information such as power control bits a burst of pure Pilot allows new mobiles to acquire the cell and decide to use it keeps existing user mobiles exactly on sector time mobiles use it to decide which sector should send them their next forward link packet
What if theres No Data to Send?

PILOT
PILOT
MAC
MAC
MAC
SLOT
empty
400 chips
empty
400 chips
empty
400 chips
MAC
empty
400 chips
64
96
64
64
96
64
Sometimes there may be no data waiting to be sent on a sectors forward link When theres no data to transmit on a slot, transmitting can be suspended during the data portions of that slot But---the MAC and PILOT must be transmitted!! New and existing mobiles on this sector and surrounding sectors need to monitor the relative strength of all the sectors and decide which one to use next, so they need the pilot Mobiles TRANSMITTING data to the sector on the reverse link need power control bits So MAC and PILOT are always transmitted, even in an empty slot
Forward Link Slots and Frames

PILOT
PILOT
MAC
MAC
MAC
SLOT
DATA
400 chips
DATA
400 chips
DATA
400 chips
MAC
DATA
400 chips
64
96
64
64
96
64
Slot
FRAME
1 Frame = 16 slots 32k chips 26-2/3 ms
Two Half-Slots make a Slot 16 Slots make a frame
October, 2007
Course 120+: 287
Forward Link Frames and Control Channel Cycles

A Control Channel Cycle is 16 frames (thats 426-2/3 ms, about 1/2 second) The first half of the first frame has all of its slots reserved for possible use carrying Control Channel packets The last half of the first frame, and all of the remaining 15 frames, have their slots available for ordinary use transmitting subpackets to users
Slot
FRAME
CONTROL CHANNEL
USER(S) DATA CHANNEL
16-FRAME
CONTROL CHANNEL CYCLE
16 Frames 524k chips 426-2/3 ms
Thats a lot of slots! 16 x 16 = 256
October, 2007
Course 120+: 288
Forward Link Frame and Slot Structure: Big Picture Summary

PILOT
PILOT
MAC
MAC
MAC
SLOT
DATA
400 chips
DATA
400 chips
DATA
400 chips
MAC
DATA
400 chips
64
96
64
64
96
64
FRAME
CONTROL CHANNEL
USER(S) DATA CHANNEL
16-FRAME
CONTROL CHANNEL CYCLE
16 Frames 524k chips 426-2/3 ms
Slots make Frames and Frames make Control Channel Cycles!

Reverse Link Frame and Slot Structure: Big Picture Summary

SLOT
DATA
FRAME
1 Subframe holds 1 Subpacket Subframe Subframe Subframe
Reverse Link frames are the same length as forward link frames The mobile does not include separate MAC and Pilot bursts Its MAC and pilot functions are carried inside its signal by simultaneous walsh codes There is no need for slots for dedicated control purposes since the mobile can transmit on the access channel whenever it needs
Rev. A Reverse Channel Sub-Frame Structure

RRI DATA CHANNEL DRC CHANNEL ACK DSC ACK DSC ACK DSC ACK DSC
AUXILIARY PILOT CHANNEL PILOT CHANNEL
1 Slot
1 Slot 1 Sub-Frame
1 Slot
1 Slot
The mobile transmits sub-packets occupying four reverse link slots, called a reverse link sub-frame. If multiple subpackets are required to deliver a packet, the additional subpackets are spaced in every third subframe until done
EV-DO Rev. A Channels

IN THE WORLD OF CODES
FORWARD CHANNELS
W064 Pilot W264 Rev Activity
just like IS-95
REVERSE CHANNELS
Long PN offset
ACCESS
MAC
Pilot W016 Data

W24
Access Channel for session setup from Idle Mode
Access
64
DRCLock RPC ARQ
MAC
Primary Pilot W016 Auxiliary Pilot W2832

Long PN offset
Public or Private
Wx16 Control Wx16 Traffic Walsh code
Access Point (AP)
MAC
RRI W416 DRC W816 DSC W1232 ACK W1232 Data

W12
Access Terminal (User Terminal)

Traffic Channel as used during a data session
A TR IC FF
FORWARD
Walsh code
The channels are not continuous like ordinary 1xRTT CDMA Notice the differences between the MAC channels and the Rev. 0 MAC channels these are the heart of the Rev. 0/A differences
October, 2007
Course 120+: 292
AP
Functions of Rev. A Forward Channels

FORWARD CHANNELS
W064 Pilot W264 Rev Activity
just like IS-95
Access terminals watch the Pilot to select the strongest sector and choose burst speeds The Reverse Activity Channel tells ATs If the reverse link loading is too high, requiring rate reduction
64
DRCLock RPC ARQ
MAC
MAC
Wx16 Control Wx16 Traffic Walsh code
Access Point (AP)
Each connected AT has MAC channel: DRCLock indication if sector busy RPC (Reverse Power Control) ARQ to halt reverse link subpackets as soon as complete packet is recovered The Control channel carries overhead messages for idle ATs but can also carry user traffic
PILOT
Traffic channels carry user data to one user at a time

PILOT
Forward Link Slot Structure (16 slots in a 26-2/3 ms. frame)

MAC MAC MAC DATA
400 chips
DATA
400 chips
DATA
400 chips
MAC
DATA
400 chips
64 96 64 Slot 1024 chips
64 96 64 Slot 1024 chips
October, 2007
Course 120+: 293
Functions of Rev. A Reverse Channels

The Pilot is used as a preamble during access probes Data channel during access carries mobile requests Primary Pilot on traffic channel allows synchronous detection and also carries the RRI channel Auxiliary Pilot on traffic channel allows synchronous detection during high data rates RRI reverse rate indicator tells AP what rate is being sent by AT DRC Data Rate Control channel tells desired downlink speed DSC Data Source Control channel tells which sector will send burst ACK channel allows AT to signal successful reception of a packet DATA channel during traffic carries the ATs traffic bits
REVERSE CHANNELS
Long PN offset
ACCESS
Pilot W016 Data

W24
Access Channel for session setup from Idle Mode
Access Public or Private
Primary Pilot W016 Auxiliary Pilot W2832

Long PN offset
MAC
RRI W416 DRC W816 DSC W1232 ACK W1232 Data

W12
Access Terminal (User Terminal)

Traffic Channel as used during a data session
A TR IC FF
Walsh code
October, 2007
Course 120+: 294
AP
The Rev. 0 MAC Index

MACIndex MAC Channel Use 0 and 1 Not Used 2 Not Used 3 Not Used 4 RA Channel Available for RPC and DRCLock 5-63 Channel Transmissions Preamble Use Not Used 76.8 kbps CCH 38.4 kbps CCH Not Used Available for Forward Traffic Channel Transmissions
MACIndex Walsh Code Phase
MACIndex Walsh Code Phase
MACIndex Walsh Code Phase 1 3 5 7 9 11 13 15 17 19 21 23 25 27 29 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 Q Q Q Q Q Q Q Q Q Q Q Q Q Q Q Q
Each active user on a sector is assigned a unique 7-bit MAC index (64 MACs possible) Each data packet begins with a preamble, using the MAC index of the intended recipient Five values of MAC indices are reserved for multi-user packets packets intended for reception by a group for example, control channels mobiles may have individual MAC indices AND be simultaneously in various groups this trick keeps payload size low even for transmissions to groups
October, 2007
0 2 4 6 8 10 12 14 16 18 20 22 24 26 28 30
0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15
I I I I I I I I I I I I I I I I
32 34 36 38 40 42 44 46 48 50 52 54 56 58 60 62
16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31
I I I I I I I I I I I I I I I I
33 35 37 39 41 43 45 47 49 51 53 55 57 59 61 63
Course 120+: 295
MACIndex Walsh Code Phase 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 Q Q Q Q Q Q Q Q Q Q Q Q Q Q Q Q
Rev. A MAC Index Values and Their Uses

MAC INDEX MAC CHANNEL USE 0, 1 Not Used 2 Not Used 3 Not Used 4 RA Channel 5 RPC, DRC LOCK, ARQ 64 and 65 Not Used 66 Not Used 67 Not Used 68 Not Used 69 Not Used 70 Not Used 71 Not Used 6-63 and 72-127 RPC, DRC LOCK, ARQ PREAMBLE USE Not Used Control 76.8 kbps Control 38.4 kbps Not Used Fwd TC if no Bcst Not Used Multi-User 128, 256, 512, 1024 Multi-User 2048 Multi-user 3072 Multi-User 4096 Multi-User 5120 Control 19.2, 38.4, 76.8 Fwd TC, Single User PREAMBLE LENGTH N/A 512 1024 N/A Variable N/A 256 128 64 64 64 1024 Variable

114 MAC indices are available for regular single-user packets 3 MAC indices are earmarked for control channel packets 5 MAC indices are reserved for mult-user packets 1 MAC index is reserved for broadcast packets, or single-users 4 MAC indices are not used due to conflicts with multiplexing patterns
October, 2007
Course 120+: 296
Rev. A MAC Index and I/Q Channel Contents
October, 2007
Course 120+: 297
Forward Forward Link Link Data Data Transmission Transmission During During an an Established Established Connection Connection
October, 2007
Course 120+: 298
Transmission of a Packet over EV-DO

Data from PDSN for the Mobile Data Ready MP3, web page, or other content A user has initiated a1xEV-DO data session on their AT, accessing a favorite website. The requested page has just been received by the PDSN. The PDSN and Radio Network Controller send a Data Ready message to let the AT know it has data waiting.
AP
October, 2007
Course 120+: 299

Data from PDSN for the Mobile Data Ready DRC: 5 MP3, web page, or other content A user has initiated a1xEV-DO data session on their AT, accessing a favorite website. The requested page has just been received by the PDSN. The PDSN and Radio Network Controller send a Data Ready message to let the AT know it has data waiting. The AT quickly determines which of its active sectors is the strongest. On the ATs DRC channel it asks that sector to send it a packet at speed DRC Index 5. The mobiles choice, DRC Index 5, determines everything: The raw bit speed is 307.2 kb/s. The packet will have 2048 bits. There will be 4 subpackets (in slots 4 apart). The first subpacket will begin with a 128 chip preamble.
AP
DRC Modu- Preamble Payload Raw C/I Index Slots lation Chips Bits kb/s db 0x0 n/a QPSK n/a 0 null rate n/a 0x1 16 QPSK 1024 1024 38.4 -11.5 0x2 8 QPSK 512 1024 76.8 -9.2 0x3 4 QPSK 256 1024 153.6 -6.5 0x4 2 QPSK 128 1024 307.2 -3.5 0x5 4 QPSK 128 2048 307.2 -3.5 0x6 1 QPSK 64 1024 614.4 -0.6 0x7 2 QPSK 64 2048 614.4 -0.5 0x8 2 QPSK 64 3072 921.6 +2.2 0x9 1 QPSK 64 2048 1,228.8 +3.9 0xa 2 16QAM 64 4096 1,228.8 +4.0 0xb 1 8PSK 64 3072 1,843.2 +8.0 0xc 1 16QAM 64 4096 2,457.6 +10.3 0xd 2 16QAM 64 5120 1,536.0 in Rev. A 0xe 1 16QAM 64 5120 3,072.0 in Rev. A
October, 2007
Course 120+: 300

Data from PDSN for the Mobile PACKET Data Ready DRC: 5 MP3, web page, or other content 2048 bits
AP
Turbo Coder Using the specifications for + + the mobiles requested DRC + + + D D D + index, the correct-size packet + + + of bits is fed into the turbo + + + D D D + coder and the right number of + symbols are created. Symbols
Interleaver
October, 2007
Course 120+: 301

AP
Turbo Coder Using the specifications for + + the mobiles requested DRC + + + D D D + index, the correct-size packet + + + of bits is fed into the turbo + + + D D D + coder and the right number of + symbols are created. Symbols
Interleaver
To guard against bursty errors in transmission, the symbols are completely stirred up in a block interleaver.
Block Interleaver
October, 2007
Course 120+: 302

AP
Turbo Coder Using the specifications for the mobiles requested DRC + + + + + D D D + index, the correct-size packet + + + of bits is fed into the turbo + + + D D D + coder and the right number of + symbols are created. Symbols
Interleaver
To guard against bursty errors in transmission, the symbols are completely stirred up in a block interleaver. The re-ordered stream of symbols is now ready to transmit.
Block Interleaver
Interleaved Symbols
October, 2007
Course 120+: 303

AP
Turbo Coder Using the specifications for the mobiles requested DRC + + + + + D D D + index, the correct-size packet + + + of bits is fed into the turbo + + + D D D + coder and the right number of + symbols are created. Symbols To guard against bursty errors in transmission, the symbols are completely stirred up in Block Interleaver a block interleaver. The re-ordered stream of symbols is now ready to transmit. The symbols are divided into the correct number of subpackets, which Interleaved Symbols will occupy the same number of transmission slots, spaced four apart. Its up to the AP to decide when it will start transmitting the stream, taking into account any other pending subpackets for other users, and proportional fairness.
Interleaver
Subpacket 2
Subpacket 3
October, 2007
Subpacket 1
Subpacket 4
Course 120+: 304

AP
Turbo Coder When the AP is ready, the first subpacket is actually + + + + + D D D + transmitted in a slot. + + + The first subpacket begins with + + + D D D + a preamble carrying the + users MAC index, so the Symbols user knows this is the start of its sequence of subpackets, and how Block Interleaver many subpackets are in the sequence.. The user keeps collecting subpackets until either: 1) it has been able to reverse-turbo decode the Interleaved Symbols packet contents early, or 2) the whole schedule of subpackets has been transmitted.
Interleaver
Subpackets
1
SLOTS
4
Course 120+: 305
October, 2007
Hybrid Hybrid ARQ: ARQ: Hybrid Hybrid Repeat-Request Repeat-Request Protocol Protocol
October, 2007
Course 120+: 306
The Hybrid ARQ Process

CDMA2000 1xEV-DO
AP Access Point AT Access Terminal
Application layer Stream layer Session layer Connection layer Security layer MAC layer Physical layer HARQ protocol
CDMA2000 1xRTT
SYSTEM
Application layer LAC layer MAC layer Physical layer RLP Radio Link Protocol MAC layer Physical layer Application layer LAC layer RLP Radio Link Protocol
Application layer Stream layer Session layer Connection layer Security layer MAC layer Physical layer HARQ protocol
F-FCH R-FCH
F-TFC repeats R-ACK
In 1xRTT, retransmission protocols In 1xEV-DO, RLP functions are typically work at the link layer replicated at the physical layer Radio Link Protocol (RLP) HARQ Hybrid Repeat Request Protocol communicates using fast physical layer ACK bits signaling packets Chase Combining of multiple lost data packets arent repeats recognized and are unneeded repeats pre-empted discarded at the decoder by positive ACK This method is slow and wasteful! This method is fast and efficient!
Forward Link Multislot ARQ, Normal Termination

AP
User A Packet 0 Subpacket 0 diff. diff. diff. user user user A 0 1 diff. diff. diff. user user user A 0 2 diff. diff. diff. user user user A 0 3 diff. diff. diff. user user user A 1 0
F-Traffic
AT
R-DRC
1/2 Slot offset
pr e NA par K e pr e NA par K e
de co de co de co de co
R-ACK
One Slot
c de
id
c de
id
pr e NA par K e
c de
id
c de
id
NAK
NAK
NAK

AT selects sector, sends request for data AP starts sending next packet, one subpacket at a time After each subpacket, AT either NAKs or AKs on ACK channel In this example, AP transmits all 4 scheduled subpackets of packet #0 before the AT is finally able to decode correctly and send AK then the AP can begin packet #1, first subpacket
October, 2007
pr e NA par K e
de
de
de
de
AK!
Forward Link Multislot ARQ, Early Termination

AP
User A Packet 0 Subpacket 0 diff. diff. diff. user user user A 0 1 diff. diff. diff. user user user A 1 0 diff. diff. diff. user user user A 1 1 diff. diff. diff. user user user A 2 0
F-Traffic
AT
R-DRC
1/2 Slot offset
pr e NA par K e pr e NA par K e
de co de co de co de co
R-ACK
One Slot
c de
id
c de
id
pr e NA par K e
c de
id
c de
id
NAK
AK!
NAK

AT selects sector, sends request for data AP starts sending next packet, one subpacket at a time After each subpacket, AT either NAKs or AKs on ACK channel In this example, AT is able to successfully decode packet #0 after receiving only the first two subpackets AT sends ACK. AP now continues with first subpacket of packet #1
October, 2007
pr e NA par K e
de
de
de
de
AK!
Multiple ARQ Instances

bits
symbols
Data Packets
Encoding Interand leaving Scrambling
Packet 0
Subpackets
Forward Channel
Packet Subpacket
0 0
1. 0
2. 0
3. 0
0 1
1. 1
2. 1
3. 1
0 2
1. 2
2. 2
3. 2
0 3
1. 3
2. 3
3. 3
Traffic
One Slot
Definition: Number of ARQ Instances the maximum number of packets that may be in transit simultaneously sometimes also called the number of ARQ channels This figure and the preceding page appear to show 4 ARQ instances Packets in the different ARQ instances may be for the same user (the most common situation) may be for different users (determined by QOS and scheduling) Destination mobile knows its packets by their preamble

bits
symbols
Data Packets
Packet 0
Subpackets
Packet 1
Subpackets
Forward Channel
Packet Subpacket
0 0
1. 0
2. 0
3. 0
0 1
1. 1
2. 1
3. 1
0 2
1. 2
2. 2
3. 2
0 3
1. 3
2. 3
3. 3
Traffic
One Slot

bits
symbols
Data Packets
Packet 0
Subpackets
Packet 1
Subpackets
Packet 2
Subpackets
Forward Channel
Packet Subpacket
0 0
1. 0
2. 0
3. 0
0 1
1. 1
2. 1
3. 1
0 2
1. 2
2. 2
3. 2
0 3
1. 3
2. 3
3. 3
Traffic
One Slot

bits
symbols
Data Packets
Packet 0
Subpackets
Packet 1
Subpackets
Packet 2
Subpackets
Packet 3
Subpackets
Forward Channel
Packet Subpacket
0 0
1. 0
2. 0
3. 0
0 1
1. 1
2. 1
3. 1
0 2
1. 2
2. 2
3. 2
0 3
1. 3
2. 3
3. 3
Traffic
One Slot
Link Rates and Packet/Subpacket Formats

FORWARD LINK
DRC Index Slots 0x0 n/a 0x1 16 0x2 8 0x3 4 0x4 2 0x5 4 0x6 1 0x7 2 0x8 2 0x9 1 0xa 2 0xb 1 0xc 1 0xd 2 0xe 1 Modu- Preamble Payload Raw C/I lation Chips Bits kb/s db QPSK n/a 0 null rate n/a QPSK 1024 1024 38.4 -11.5 QPSK 512 1024 76.8 -9.2 QPSK 256 1024 153.6 -6.5 QPSK 128 1024 307.2 -3.5 QPSK 128 2048 307.2 -3.5 QPSK 64 1024 614.4 -0.6 QPSK 64 2048 614.4 -0.5 QPSK 64 3072 921.6 +2.2 QPSK 64 2048 1,228.8 +3.9 16QAM 64 4096 1,228.8 +4.0 8PSK 64 3072 1,843.2 +8.0 16QAM 64 4096 2,457.6 +10.3 16QAM 64 5120 1,536.0 +8.3 16QAM 64 5120 3,072.0 +11.3
REVERSE LINK
Payload Modu-Effective Rate kbps after: Code Rate (repetition) after Bits lation 4 slots 8 slots 12 slots16 slots 4 slots 8 slots 12 slots16 slots 128 B4 19.2 9.6 6.4 4.8 1/5 1/5 1/5 1/5 256 B4 38 19.2 12.8 9.6 1/5 1/5 1/5 1/5 512 B4 76 38.4 25.6 19.2 1/4 1/5 1/5 1/5 768 B4 115 57.6 38.4 28.8 3/8 1/5 1/5 1/5 1024 B4 153 76.8 51.2 38.4 1/2 1/4 1/5 1/5 1536 Q4 230 115 76.8 57.6 3/8 1/5 1/5 1/5 2048 Q4 307 153 102.4 76.8 1/2 1/4 1/5 1/5 3072 Q2 461 230 153.6 115.2 3/8 1/5 1/5 1/5 4096 Q2 614 307 204.8 153.6 1/2 1/4 1/5 1/5 6144 Q4Q2 921 461 307 230.4 1/2 1/4 1/5 1/5 8192 Q4Q2 1228 614 409 307.2 2/3 1/3 2/9 1/5 12288 E4E2 1843 921 614 460.8 2/3 1/3 1/3 1/3
The 1xEV-DO Rev. A reverse link has seven available modes offering higher speeds than available in Rev. 0 Modulation formats are hybrids defined in the standard The 1xEV-DO Rev. A forward has two available modes offering higher speeds than available in Rev. 0.
Basics Basics of of EV-DO EV-DO Operation Operation
October, 2007
Course 120+: 315
Sessions and Connections

A Session is a state shared by an Access Terminal and the network. Negotiated protocols and configurations are remembered by both sides as the basis for their communication. An access terminal must already have a session underway in order to communicate with the network The only exception is the setup communications made possible on the access channel for the purpose of initially setting up a session A Connection is a particular state of the air link in which the access terminal is assigned a forward traffic channel, reverse traffic channel, and associated MAC channels. During one ongoing session, the terminal and network may open and close their connection many times.
October, 2007
Course 120+: 316
EV-DO Terminal Identifiers

In CDMA, mobiles are identified by the familiar IMSI and ESN. These are permanent quantities stored in the mobile. EV-DO terminals have hardware addresses which can be queried by the system, but connections are coordinated by the use of Access Terminal Identifiers (ATIs) There are four types of ATIs: 00 BATI Broadcast Access Terminal Identifier 01 MATI Multicast Access Terminal Identifier 02 UATI Unicast Access Terminal Identifier Requested by the mobile at session setup and assigned by the system. Updated when crossing various boundaries 03 RATI Random Access Terminal Identifier Used by the mobile during initial access From the view of the SLP protocol, ATIs simply define connection endpoints.
October, 2007
Course 120+: 317
Setting up an EV-DO Connection

Access Point (AP)
TRAFFIC CONTROL MAC PILOT
CONNECTION ROUTE UPDATE CONNECTION REQUEST MAC ACK TRAFFIC CHANNEL ASSIGNMENT MAC RTC ACK TRAFFIC CHANNEL COMPLETE XON REQUEST NULL MESSAGE NEIGHBOR LIST XON RESPONSE ROUTE UPDATE
ACCESS TRAFFIC PILOT RRI DRC ACK DATA
Access Terminal (AT)
Rake Receiver #1 PN168+0 W23 #2 PN168+2 W23 #3 PN168+9 W23 #4 PN168+5 W23 Pilot Searcher
TRANSITION TO DORMANT
NULL MESSAGE TRAFFIC CHANNEL ASSIGNMENT TRAFFIC CHANNEL COMPLETE NEIGHBOR LIST
October, 2007
Course 120+: 318
Access Access Terminal Terminal Architecture Architecture And And Handoffs Handoffs Route Route Updates Updates
October, 2007
Course 120+: 319
Block Diagram of an Access Terminal

summing time-aligned
Chips
control
Traffic Correlator PN xxx Walsh xx Receiver RF Section IF, Detector AGC RF Duplexer RF Open Loop Traffic Correlator PN xxx Walsh xx Traffic Correlator PN xxx Walsh xx Pilot Searcher PN xxx Walsh 0
bits
Digital Rake Receiver Symbols Traffic Correlator PN xxx Walsh xx
Symbols
power
Viterbi Decoder, Convl. Decoder, Demultiplexer
Packets
UART Conv or Turbo Coder
Messages
CPU
Transmit Gain Adjust Messages Transmitter Digital Section Long Code Gen.
Transmitter RF Section
October, 2007
Course 120+: 320
1xEV-DO Forward Link: AT Rake Receivers

ONE sector at a time!!
Access Terminal
Rake Receiver PN Walsh PN RF PN PN Walsh Walsh Walsh Pilot Ec/Io
user data
AP AP
Searcher PN W=0
Burst by burst, the Access Terminal asks for transmission from whichever Active sector it hears best, at the max speed it can successfully use Using latest multipath data from its pilot searcher, the Access Terminal uses the combined outputs of the four traffic correlators (rake fingers) Each rake finger can be set to match any multipath component of the signal The terminal may be a dual-mode device also capable of 1xRTT voice/data fingers could even be targeted on different AP, but in 1xEV-DO mode only a single AP transmits to us, never more than one at a time, so this capability isnt needed or helpful in 1xEV-DO mode
1xEV-DO Reverse Link: Soft Handoff

All Active Set sectors can listen to the AT
Access Terminal
Rake Receiver PN Walsh PN RF PN PN Walsh Walsh Walsh Pilot Ec/Io
user data
AP
DO-RNC chooses cleanest packet
AP
Searcher PN W=0
The AT uses the Route Update protocol to frequently update its preferences of which sectors it wants in its active set Frame-by-frame, all the sectors in the Active Set listen for the ATs signal Each sector collects what it heard from the AT, and sends it back to the DO-RNC. The DO-RNC uses the cleanest (lowest number of errors) packet
1xEV-DO Route Update Mechanics

Access Terminal
DO-RNC
Sel.
AP AP
Rake Receiver PN Walsh
? ?
PN RF PN PN
Walsh Walsh Walsh
user data
Searcher PN W=0
Pilot Ec/Io
1xEV-DO Route Update is driven by the Access Terminal Access Terminal continuously checks available pilots Access Terminal tells system pilots it currently sees System puts those sectors in the active set, tells Access Terminal Access terminal requests data bursts from the sector it likes best tells which sector and what burst speed using the DRC channel so there is no Soft Handoff on the forward link, just fast choices All sectors in Active Set try to hear AT, forward packets to the DO-RNC so the reverse link does benefit from CDMA soft handoff
Route Update Pilot Management Rules

PILOT SETS The Access Terminal considers pilots in sets Active: sectors who listen and can transmit Active 6 Candidates: sectors AT requested, but not Candidate 6 yet approved by system to be active Neighbors: pilots told to AT by system, as Neighbor 20 nearby sectors to check Remaining Remaining: any pilots used by system but not already in the other sets (div. by PILOT_INC) Access Terminal sends a Route Update HANDOFF Message to the system whenever: PARAMETERS It transmits on the Access Channel PilotAdd PilotDrop Pilot In idle state, it notices the serving sector is PilotDrop Compare Timer far from the sector where last updated Dynamic Thresholds? In connected state, whenever it notices the Softslope Handoff Parameters suggest a change
AddIntercept DropIntercept NeighborMaxAge
AT must support
Format of Traffic Channel Assignment Message

The Traffic Channel Assignment Message assigns all or some of the sectors the access terminal requested in its most recent Route Update request The message lists every Active pilot; if it doesnt list it, its not approved as active Notice the MAC index and DRC Cover so the access terminal knows how to request forward link bursts on the data rate control channel
Neighbor Structure Maintained by the AT
Pilot PN Channel SrchWinSize SrchWinOffset
October, 2007
Course 120+: 325
1xEV-DO 1xEV-DO Network Network Architecture Architecture Simple Simple IP IP and and Mobile Mobile IP IP
October, 2007
Course 120+: 326
CDMA Network for Circuit-Switched Voice Calls
(C)BSC/Access Manager Switch
PSTN
t1
t1
SEL
t1
CE
BTS
The first commercial IS-95 CDMA systems provided only circuitswitched voice calls
October, 2007
Course 120+: 327
CDMA 1xRTT Voice and Data Network

PDSN Foreign Agent Backbone Network
Internet VPNs
PDSN Home Agent
AAA
Switch
PSTN
t1
t1
SEL
t1
CE
BTS
CDMA2000 1xRTT networks added two new capabilities: channel elements able to generate and carry independent streams of symbols on the I and Q channels of the QPSK RF signal this roughly doubles capacity compared to IS-95 a separate IP network implementing packet connections from the mobile through to the outside internet including Packet Data Serving Nodes (PDSNs) and a dedicated direct data connection (the Packet-Radio Interface) to the heart of the BSC The overall connection speed was still limited by the 1xRTT air interface
1xEV-DO Overlaid On Existing 1xRTT Network

PDSN Foreign Agent Backbone Network
Internet VPNs
PDSN Home Agent
DO Radio Network Controller

DO-OMC
AAA
Switch
CE
PSTN
t1
t1
SEL
t1
CE
BTS
1xEV-DO requires faster resource management than 1x BSCs can give this is provided by the new Data Only Radio Network Controller (DO-RNC) A new controller and packet controller software are needed in the BTS to manage the radio resources for EV sessions in some cases dedicated channel elements and even dedicated backhaul is used for the EV-DO traffic The new DO-OMC administers the DO-RNC and BTS PCF addition Existing PDSNs and backbone network are used with minor upgrading The following sections show Lucent, Motorola, and Nortels specific solutions
Lucent Lucent 1xEV-DO 1xEV-DO Architecture Architecture
October, 2007
Course 120+: 330
Lucent 1xEV-DO Radio Access Network (RAN)

OMP FX Element Management System AP
T-1/E-1 Ethernet RF
AAA Server Downlink Input Router
Router
AP
Uplink Input Router
Flexent Mobility Server
AP
RF User ATs (Access Terminals)

AP
Uplink Input Router
Flexent Mobility Server
Downlink Input Router
Packet Data Serving Node (PDSN)
Internet
A Lucent 1xEV-DO Radio Access Network (RAN) includes 1xEV-DO base stations and the 1xEV-DO Flexent Mobility Server (FMS). The 1xEV-DO equipment may be collocated with IS-95 and/or 1xRTT equipment, creating 1xEV-DO/IS-95 and 1xEVDO/3G-1X combination base stations.
1xEV-DO in Lucent Flexent Mod Cell Cabinets

Lucent Mod Cell cabinets can support up to three IS-95 or 1xRTT carriers on three sectors 1xEV-DO CDMA Digital Modules (CDM) can be mixed with conventional CDMs in the same cabinet the same RF hardware (filters, amplifiers, other RF components) can be used for IS-95, 1xRTT, and 1xEV-DO
October, 2007
Course 120+: 332
Lucent CDMA Digital Module (CDM) Configurations

At upper left is a CDM for conventional IS-95 / 1xRTT service. It includes CRC CDMA Radio controller up to 6 CCU CDMA Channel Units PCU power converter module CBR CDMA Baseband Radio At lower left is a CDM for 1xEV-DO it must be occupy the leftmost slot all CCU packs are removed and replaced by a single 1xEV-DO modem (EVM) occupying 2 slots the CRC must be 44WW13D or later
October, 2007
Course 120+: 333
1xEV-DO in Lucent Mod Cell 4.0 Cabinets

The Mod Cell 4 cabinet comes in many variations Instead of per-carrier dedicated CDMs, resources are pooled URCs (Universal Radio Controllers) are used to steer data for each carrier to EVMs for EVDO or CMUs for IS-95/1xRTT. in a mixed-mode system, a URC is required for EVDO and a URC for IS-95/1xRTT The modulated signal from a 4.0 EVM or CMU is upconverted to the RF carrier frequency by the UCR each UCR (Universal CDMA Radio) can handle up to three carriers
Course 120+: 334
FMS
Universal Radio Controller (URC)
Digital Shelf Evolution Carr1 Flow Modem

(4.0 EVM) Carr 2, 3 CDMA Modem Unit (CMU) Universal Antenna CDMA Radio (UCR)
ECP
Universal Radio Controller (URC)
October, 2007
Lucent 1xEV-DO Flexent Mobility Server (FMS)

The Flexent Mobility Server is the heart of the Radio Access Network It provides four processors running the 1xEV-DO Application Processor (DO-AP), which provides the Packet Controller Function (PCF) The PCF provides air link and radio resource management to implement 1xEV-DO user sessions, including the dormant state and other DOspecific features
October, 2007
Course 120+: 335
Motorola Motorola 1xEV-DO 1xEV-DO Architecture Architecture
October, 2007
Course 120+: 336
Motorola 1xEV-DO System Architecture

MSC MM/SDU
VPU
OMC-IP
OMC-DO BSC-DO AN-DO
AAA AN-AAA PDSNs
OMC-R
Elements Existing IS-95 New 1xEV-DO Shared IS-95/DO
1x-AN 1x-BTS MCC-DO
Packet Core Network
HAs
Connections IS-95/1x 1xEV-DO Shared 1x/DO
New 1xEV-DO carrier appears as a standard carrier addition to existing network elements new MCC-DO cards and OMC-R database revisions needed AAA and PDSN need software upgrades
October, 2007
Course 120+: 337
New Motorola 1xEV-DO Network Elements

MSC MM/SDU
VPU
OMC-IP
OMC-DO BSC-DO AN-DO
AAA AN-AAA PDSNs
OMC-R
Elements Existing IS-95 New 1xEV-DO Shared IS-95/DO
1x-AN 1x-BTS MCC-DO
Packet Core Network
HAs
Connections IS-95/1x 1xEV-DO Shared 1x/DO
MCC-DO (Multi-Channel Controller - Data Only) AN-DO (Access Node - Data only) CR (Consolidation Router) Similar in function to the 1x-AN MGX LSW (Layer 3 Switch) Similar in function to the 1x-AN CATs BSC-DO (Base Station Controller-Data Only) Mobility functions like 1x MM - Packet Control & Selection like SDU OMC-DO (Operations & Maintenance Center - Data Only) LMT (Local Maintenance Terminal)
Motorola 1xEV-DO Block Diagram and Network Upgrade Summary

BTS
1x BBX RF Front End 1x Modems DO BBX
BSC-DO
MCC-DO AN-DO
IS-2000 1xEV-DO Tool LMF LMT BTS frame & CCP shelf LPA BBX-1X BTS MCC-1X MCC-DO GLI (Traffic) GLI (Control) AN (MGX8800) CR AN AN (Catalyst 6509) LSW BSC CBSC BSC-DO OMC-R O&M OMC-DO UNO PDSN (Note 1) IP Network Telephone Network MSC/HLR Not Required Data Network Not Required AAA
BTS
CR
LSW
PDSN
T1 or E1
MCCDO
OMC-DO
AN-AAA
October, 2007
Course 120+: 339
BTS
Motorola MCC-DO Functions

BSC-DO
MCC-DO
AN-DO
BTS
CR
LSW
PDSN
T1 or E1
MCC-DO
OMC-DO
AN-AAA
1xEV-DO Modem 1 carrier, 3 sectors per MCC-DO card Supports 59 channels per sector Span Interface Up to 3 Active Span lines per MCC-DO Most operators will generally deploy with 2 spans per BTS BTS provides control: SCAP messaging Redundant BBX Selection Enhanced BBX interface
MCC- DO
Nortel Nortel 1xEV-DO 1xEV-DO Architecture Architecture
October, 2007
Course 120+: 341
A Typical Nortel CDMA2000 System

Providing 1xRTT Voice, Data, and 1xEV-DO
October, 2007
Course 120+: 342

Providing Only 1xRTT Voice, Data
October, 2007
Course 120+: 343

Providing 1xEV-DO Only
October, 2007
Course 120+: 344
Nortel DOM: Data-Only Module

The Data Only Module (DOM) adds 1xEV-DO capability to a MetroCell AP CEM shelf transmits/receives baseband data to/from the digital control group (DCG) in the CORE module CORE switches baseband to proper carrier on the MFRM for transmission the DOM performs all encoding/decoding of IP packets for transport on data-only network to the Data-Only Radio Network Controller (DO-RNC) One DOM supports up to a three-sector, one-carrier MetroCell AP Additional DOMs support additional carriers
October, 2007
Course 120+: 345
Nortels DO-RNC The Data-Only Radio Network Controller

DO-RNC is the heart of a 1xEV-DO network, located at the central office (CO) with the BSC and/or BSS Manager (BSSM) DO-RNC is a stand-alone node supporting 1xEV-DO. It manages: DOMs at multiple APs (even on different band classes) over IP-based backhaul network access terminal state, both idle and connected handoffs of ATs between cells and carrier frequencies (reverse); sector selection (fwd). Nortel DO-RNC connections from airlink to PDSN over Data-Only standard A10-A11 interfaces Radio Network Controller connects to MetroCell AP via dedicated IP backhaul network DO-RNC is the peer of the access terminal for most over-the-air signaling protocols, including session and connection layers
1xEV-DO 1xEV-DO // 1xRTT 1xRTT Interoperability Interoperability
October, 2007
Course 120+: 347
1xEV-DO/1xRTT Interoperability
The CDMA2000 1xEV-DO Rev. 0 Standard IS-856 makes no provision for any kind of handoff to or from any other technology Driven by Operator interest, a Hybrid mode has been developed to provide some types of handoff functions to the best extent possible Hybrid Mode is a mobile only function neither the EV nor 1xRTT network knows anything about it is a proprietary feature with vendor-specific implementation has no standard-defined RF triggers; no hooks In the 1xEV rev. A standard, some new features are provided Using the CDMA2000 Circuit Services Negotiation Protocol, the 1xEV control channel can carry 1xRTT pages too this and other changes will eventually make the hybrid mode unnecessary and obsolete
October, 2007
Course 120+: 348
What Handoffs are Possible in Hybrid Mode?

All switching between systems occurs in Idle Mode there are no handoffs in active traffic state in either mode Sessions can be transferred from one system to the other, but NOT in active traffic state If there is a connection, it can be closed and then re-originated on the other system In some cases this can be accomplished automatically without the end-users awareness in other cases, the user must manually reconnect
October, 2007
Course 120+: 349
Hybrid Mode Transition Scenarios

1:2 Deployment 1:1 Deployment EV-DO, F2 1xRTT, F1 1:1 Deployment
DO systems will be Implemented in Several Configurations 1:1 overlays in busy core areas 1:1 or 1:N overlays in less dense areas Many EV>1x and 1x>EV transition events may occur as a user transitions from area to area Initial system acquisition is also involved as a user activates their AT in different locations These transitions are dependent on the Hybrid mode implementation in the AT The following pages show some possible transitions assuming Mobile IP and AT Hybrid Mode are implemented
October, 2007
Course 120+: 350
1xRTT / 1xEV-DO Hybrid Idle Mode

1xRTT/1xEV-DO Hybrid Mode depends on being able to hear pages on both systems 1xRTT and 1xEV-DO is possible because of slotted mode paging 1xRTT and 1xEV-DO paging slots do not occur simultaneously mobile can monitor both During 1xEV-DO traffic operation, the hybrid-aware mobile can still keep monitoring 1xRTT paging channel During 1xRTT traffic operation, the hybrid-aware mobile is unable to break away; 1xRTT traffic operation is continuous no opportunity to see 1xEV-DO signal This hybrid Idle mode capability is the foundation for all 1xRTT/1xEV mode transfers the network does not trigger any transfers
1xEV-DO Idle
1xEV-DO Active
Idle Mode
Hybrid Mode 1xRTT Idle

Idle Mode
1xRTT Active
October, 2007
Course 120+: 351
Hybrid Dual-Mode Idle Operation 1xRTT / 1xEV-DO Paging Interoperability

16-frame Control Channel Cycle 16 slots of 26-2/3 ms = 426-2/3 ms
LONGEST POSSIBLE PACKET DRC 16 Subpackets
1xRTT Minimum Slot Cycle Index: 16 slots of 80 ms each = 48 26-2./3 ms frames
A dual-mode 1xRTT/1xEV-DO mobile using slotted-mode paging can effectively watch the paging channels of both 1xRTT and 1xEV-DO at the same time How is it possible for the mobile to monitor both at the same time? The paging timeslots of the two technologies are staggered Three of the 16 timeslots in 1xRTT conflict with the control channel slots of 1xEV-DO However, conflicts can be avoided by page repetition, a standard feature in systems of both technologies
Initial System Acquisition by Hybrid Mobile when 1xEV-DO is NOT Available

1xEV-DO Active 1xEV-DO Idle
Acquire 1xEV-DO System driven by PRL
no, cant see EV
Acquire 1xRTT System driven by PRL
Register with 1xRTT Network
1xRTT Idle
Idle Mode Classical 1xRTT Idle Mode
After entering this state, the mobile will search for EV-DO at intervals (typ. 3 min) Voice Page! Idle Mode Release
1xRTT Active
1xRTT Voice Call
October, 2007
Course 120+: 353
Initial System Acquisition by Hybrid Mobile when 1xEV-DO is Available

1xEV-DO Active
Set Up or Re-establish 1xEVDO Data Session 1xEV Traffic interrupted during 1xRTT voice call 1xEV Traffic Data Connection Closed
Triggers:
1xEV-DO Idle
Acquire 1xEV-DO System driven by PRL
yes, found EV Idle Mode
AT Data Ready! AN Data Page!
Idle Mode
Hybrid Mode
Acquire 1xRTT System driven by PRL Register with 1xRTT Network
Hybrid Mode
Voice Page! Idle Mode
Hybrid Mode
Idle Mode
1xRTT Idle
Idle Mode
Idle Mode
Release
1xRTT Active
1xRTT Voice Call
October, 2007
Course 120+: 354
Backhaul Backhaul and and Related Related Considerations Considerations
October, 2007
Course 120+: 355
Rate Limitations from Backhaul

Wireless sites are commonly connected using T-1s or E-1s, depending on local availability In the case of T-1s, the raw rate is 1.544 megabits/second. Accounting for overhead, this translates into a maximum steady throughput of roughly 400 to 450 kb/s per sector on a 3-sector, 1-carrier EV-DO site. If one sector is busy while the other two are only lightly loaded, throughput of roughly 1 mb/s can be obtained on one sector However, early 1xEV-DO cards without support for multiple ARQ instances can only achieve about 400 kb/s throughput even without backhaul limitations Solutions under study to relieve backhaul congestion include fiberbased ATM to the sites; multiple-T1s; sites linked by Cable Modems, and other methods

120 Cdma Core Princ and Opt

Caricato da

Informazioni sul documento

Titolo originale

Copyright

Formati disponibili

Condividi questo documento

Condividi o incorpora il documento

Opzioni di condivisione

Hai trovato utile questo documento?

Questo contenuto è inappropriato?

Copyright:

Formati disponibili

120 Cdma Core Princ and Opt

Caricato da

Copyright:

Formati disponibili

Course 120+ Section I

CDMA CDMA Core Core Principles Principles

120v5 (c) 2007 Scott Baxter

120v5 (c) 2007 Scott Baxter

120v5 (c) 2007 Scott Baxter

120v5 (c) 2007 Scott Baxter

The Capacity of One Carrier

More Carriers for More Capacity

CDMA Mobile Transmit (Reverse Link)

Different Mobiles on Different Carriers

CDMA: Using A New Dimension

Figure of Merit: C/I

120v5 (c) 2007 Scott Baxter

DSSS Spreading: Time-Domain View

Spread Spectrum Signal

via air interface

Input A: Received Signal

Input B: Spreading Code

Output: Users Original Data

Drawn to actual scale and time alignment

Spreading from a Frequency-Domain View

Fast Spreading Sequence

Fast Spreading Sequence

Spread Spectrum Payoff:

120v5 (c) 2007 Scott Baxter

SHANNONS CAPACITY EQUATION C = B log2 [

B = bandwidth in Hertz C = channel capacity in bits/second S = signal power N = noise power

120v5 (c) 2007 Scott Baxter

Modulation Techniques of 1xEV Technologies

120v5 (c) 2007 Scott Baxter

Digital Modulation Systems

SHANNONS CAPACITY EQUATION

B = bandwidth in Hertz C = channel capacity in bits/second S = signal power N = noise power

120v5 (c) 2007 Scott Baxter

The CDMA Spread Spectrum Payoff:

# Users Processing Gain 1 2 4 8 16 32 21 db 18 db 15 db 12 db 9 db 6 db

120v5 (c) 2007 Scott Baxter

CDMA Uses Code Channels

Building a CDMA Signal Bits

120v5 (c) 2007 Scott Baxter

CDMA In Action: Multiple Users on a Sector

Matches! (=0) 1 Opposite ( =1)

Spreading: What we do, we can undo

120v5 (c) 2007 Scott Baxter

Shipping and Receiving via CDMA

120v5 (c) 2007 Scott Baxter

CDMAs Nested Spreading Sequences

120v5 (c) 2007 Scott Baxter

The Walsh Codes

Correlation Results: 32 1s, 32 0s: Orthogonal!!

How the PN Codes Are Made, Why They Work

Compared Shifted: Little Correlation

120v5 (c) 2007 Scott Baxter

The Short PN Code makes Sectors Different

RF: cos t QPSKmodulated RF Output

120v5 (c) 2007 Scott Baxter

The Long PN Code Makes Mobiles Different

Different Masks Produce Different Long PN Offsets

TRAFFIC CHANNEL PRIVATE

calculated PRIVATE LONG CODE MASK

ACCESS CHANNEL (IDLE MODE)

120v5 (c) 2007 Scott Baxter

120v5 (c) 2007 Scott Baxter