Documenti di Didattica
Documenti di Professioni
Documenti di Cultura
Course Objectives:
· Learning Concepts, Architecture and Functions of SS7
1 SS7 System.................................................................................................................................................. 1
i
2.1.2 SPC .......................................................................................................................................54
ii
1 SS7 System
Key points
The SS7 system is one of the key technologies in the modern telecommunication. Used
in various networks, it can transmit inter-office signaling required by the PSTN and
ISDN for circuit connection, various location information related with roaming
subscribers among all communication entities, and IN service information among all
service entities. Good knowledge of SS7 is very important to solve problems related
with various signaling in mobile communication.
1.1.1 Signaling
1
CM3G-202-E1 SS7 Signaling System
1) End to end: On the SCCP layer of the SS7 system, this mode is used
2) Link by link: On the MTP layer of the SS7 system, this mode is used for
information transfer
When only MTP and TUP are involved, the link-by-link transfer mode is used. If
SCCP is added, the end-to-end transfer mode will be used. For CSN1, the
end-to-end mode is used in normal cases. The link-by-link mode is only used in
the case of poor line quality.
3) Full-control: The two parties are mutually controlled to implement the process
such as CSN1.
Signaling can be classified in many methods. The following are some common
methods:
2) Inter-office signaling: Much more than subscriber-line signaling and much more
2
Chapter 1 SS7 System
1.1.2.3 Classified according to functions into line signaling, route signaling and
management signaling
2) Route signaling: It has the routing function. For example, the number dialed by
the calling party i.e. the called number. It is also known as selection signaling.
y Note:
1.2.1.1 Advantages
High channel utilization: Theoretically one SS7 link can serve thousands of voice
3
CM3G-202-E1 SS7 Signaling System
channels. Even if the redundancy is fully considered, the number of served voice
channels can still be kept between 2000 and 3000. To the contrary, in the
channel-associated signaling, the 15th TS16 in one multiframe can transfer information
for only 480 (16*30) lines of voice channels.
Fast transfer speed: In the SS7 system, information is transferred directly in the digital
form. Four bits can denote a number which is much better than the channel-associated
signaling.
Wide application scope: SS7 signaling can not only transfer the traditional
circuit-connected signaling, but also for various information management, maintenance
and query unrelated with circuits. It is the basis for ISDN, mobile communication and
IN services.
The technical specifications can be easily expanded to meet the requirements of future
information technology and unknown service development.
1.2.1.2 Disadvantages
In the SS7 system, one link can serve several thousand voice channels so much higher
link reliability is required compared to channel-associated signaling. Once a signaling
link fails, the corresponding voice channel will be affected.
The modern communication is actually based on the control via computers. The
universality of SS7 determines that many different application functions are contained
in the entire system, and the system structure should be flexible to expand. Therefore,
one of its important features is its modular functional structure, which ensures the
coexistence of multiple applications within the same sub rack. Namely, the SS7 system
is designed and applied according to the OSI mechanism of computers. The basic
4
Chapter 1 SS7 System
mechanism is:
2) Each hierarchy only communicates with its two adjacent hierarchies, and utilizes
the services provided by its lower hierarchy (unnecessary to know how the
services are implemented), and provides completed functions to its upper
hierarchy.
Each hierarchy is independent and can be implemented through the most appropriate
technologies suited to them. When one of them is changed due to technical
improvement, other hierarchies will not be affected if the interface relationship is kept
unchanged.
Based on this mechanism, the SS7 system can be divided into four functional layers:
The Message Transfer Part (MTP) is divided into three layers, and all the User Parts
(UP) are combined into the fourth layer. In MTP, the functional layers are the signaling
data link layer (MTP1), SL functional layer (MTP2) and signaling network functional
layer (MTP3) in the sequence from low to high functions. The function of MTP is to
transfer signaling between signaling points accurately.
The UP’s function is to process signaling information. Different applications may have
different UP. The Telephone User Part (TUP) processes the call control signaling
messages in the telephone network; the Integrated Service digital network UP (ISUP)
processes the call control signaling messages in ISDN; while the Mobile Application
Part (MAP) processes the call control signaling information and other signaling
information unrelated with calls such as roaming and location updating. The specific
protocol hierarchy is shown in Fig 1.2-1.
5
CM3G-202-E1 SS7 Signaling System
ISUP
TUP
TCAP
SCCP
MTP3
MTP2
MTP1
In the SS7 system, all messages are transmitted by means of signaling unit. The
signaling unit is a data block similar to the packet in the packet switching. The message
signaling units are used to transfer user information and transmitted in variable lengths.
According to different functions these units can be divided into the following three
types:
6
Chapter 1 SS7 System
8 16 n×8(n>1) 8 2 6 1 7 1 7 8
(a) MSU
8 16 8 or16 2 6 1 7 1 7 8
(b) LSSU
8 16 2 6 1 7 1 7 8
(c) FISU
All three kinds of signaling units transfer signals in the signaling network but they
implement different functions. They can easily be distinguished through the length
indicator bits (LI). When LI=0, this unit is FISU; If LI=1or2, the unit is LSSU; if LI>2,
the unit is MSU. Both FISU and LSSU receive and send signals at the second hierarchy.
MSU transfers the real user information and it receives and sends signals at the third
hierarchy.
The following explains the meanings of all fields in the signaling units:
F: Delimiter of a signaling unit, an octet in the mode of 01111110 indicating the ending
of the previous unit and the beginning of the next unit.
7
CM3G-202-E1 SS7 Signaling System
CK: Error detecting code containing 1 or 2 octets used to detect the error codes
probably generated during the transmission process.
LI: Length indicator of a signaling unit. Its length is 6 bits. It is used to indicate the
number of octets between LI and CK (excluding them). For MSU, LI>2; for LSSU,
LI=1 or 2; for FISU, LI=0. When a certain SU message length exceeds 63, LI will be
63.
FSN/FIB and BSN/BIB: Sequence No. and resending indicator bit of a signaling unit.
They form two octets and used to implement error correction.
FSN: Forward sequence No., namely the sequence No. of the message, in the 7-bit
form coded on the basis of 128-module.
FIB: Forward resending indicator bit, 1 bit. Reversely it indicates that the local end
will start to resend a message.
BSN: Backward sequence No., 7 bits. It informs the opposite side that all messages to
BSN have been correctly received.
BIB: Backward resending indicator bit, 1 bit. Reversely it informs the opposite end that
messages are resent starting from BSN+1.
SIO: Service indicator octet only available in MSU. It indicates message category and
network type.
SIO: Two subfields: low 4-bit SI (the service indicator indicating message category)
and high 4-bit SSF (the sub service field indicating the network type).
SIF: Signaling information field containing the information contents sent by the
subscriber actually. It consists of two parts: flag and signal information. The latter is
determined by the specific subscriber, while the former contains Destination Signaling
Point (DSP), Originating signaling Point Code (OPC) and Circuit Identification Code
(CIC) or Selection code (SL) SLS.
SF: Status field, only used for LSSU to indicate the link status. It is generated by the
second hierarchy.
8
Chapter 1 SS7 System
This is the first functional layer in the SS7 common channel signaling system. It
defines the physical, electrical and functional attributes of signaling data and the
methods to connect with the data link. It also provides full-duplex bidirectional
transmission channels. The signaling data link layer consists of a pair of data channels
of the same rate but of opposite directions. It implements transparent transmission for
the binary bit stream. The SS7 system is most suitable for the digital communication
network. Signaling digital links are often 64Kbit/s digital channels, corresponding to a
specific timeslot in the PCM transmission system. For example: In the PCM30/32
system, TS16 is often used to transfer signaling. For this transmission, other timeslots
except TS0 can be selected.
As the first layer of function, the signaling data link should be connected with the
secondary function of the digital SPC exchange. It can be accessed through the digital
switching network or interface equipment. Only digital signaling data links can be
accessed through the digital switching network in the SPC exchange. In this network,
semi-permanent channels can be established to implement automatic distribution of
signaling data links or signaling terminals (the second layer).
8 Tips:
PCM30/32 system: PCM stands for pulse code modulation. It is a modulation mode for
the digitalization of analog signals. One analog signal can be converted into digital
signal through sampling, quantization and coding. The rate of this signal is 64Kbit/s,
which is called as a timeslot. The sampling rate is compliant with the Nyquist theorem.
Namely, the sampling frequency is greater than or equal to the twice of the signal
frequency, while coding is implemented in the A Law and 13-folding method.
9
CM3G-202-E1 SS7 Signaling System
As the second layer for SL control, it co-exists with the signaling data link to provide
reliable SL transferring messages between two cascaded signaling points to ensure that
the transfer quality of signaling messages can meet the specified standard.
· Error detection
· Error correction
· Initial alignment
· Traffic control
To distinguish the individual signaling units from the bit stream of the signaling data
links, a flag should be necessary for each signaling unit to mark its start and end. In the
SS7 system, the flag is denoted in a fixed code 01111110 as the start and end of a signal
unit. Upon receiving, make sure the flag has occurred; while upon sending, make sure
the flag has been generated.
To correctly delimit a signaling unit, make sure that this flag does not appear in any
other part of the signaling unit. The “0” bit insertion is used in this case. The sending
end will detect the signaling units without flags. If 6 continuous “1” (111111) occurs in
the message, “0” will be inserted after the 5th 1, so “111111” will become “1111101”.
The receiving end will detect the signaling units with flags. If 5 continuous “1” (11111)
is found, it will insert “0” after the 5th “1” and “11111” will become “111110”.
Normally, the signaling unit length is restricted as an integer times of 8 bits. Before “0”
is deleted, “111111” should exist. Otherwise, the length is out of place. The received
signaling unit will have to be discarded, and will be measured during the signaling unit
error rate monitoring process.
10
Chapter 1 SS7 System
The purpose of this action is to judge if any error occurs in the signaling unit during bit
stream transfer.
Because noise exists at the transmission channel, interference like transient interruption
may cause error in the signaling information. To ensure the service quality, appropriate
error control measures must be taken. The control should include two aspects: error
detection and error correction.
To ensure high detection capability against burst errors caused by pulse and transient
interruption, the Cyclic Redundancy Check (CRC) is adopted. This method is carried
out through the attached redundancy code and to make the transferred information
sequences regular, while the receiving end will check if this regulation exists.
The purpose of this action is to obtain a correct signaling unit after an error occurs. In
the SS7 mode, retransmission is used for error correction. Namely, the receiving end,
after detecting an error, will require the sending end to send the information again.
Two error correction methods are available: basic error correction and preventive
cyclic retransmission. If the required transmission delay is less than 15ms, the basic
method is used. It is generally used in landing transmission. If the delay is greater than
15ms, the preventive cyclic method is used. It is used in satellite communication.
The non-control method means that the sending side can send message signaling
units continuously without waiting until the last signaling unit is acknowledged
before sending the next. This non-control mode can greatly raise the speed for
signal transfer.
latest message signaling unit received correctly to the BSN of the next signaling
unit reversely sent, which is the BSN value of the opposite side. It indicates the
FSN for which the message signaling unit sent by the local side is acknowledged.
The negative acknowledgement is implemented through BIB reversely.
y Note:
Upon SL configuration, the system requires correct error correction methods. The
system requires real-time information transfer with little delay; therefore the basic error
correction method is selected.
The initial alignment process is the control program to be used in the initial application
or in SL recovery after a fault. The whole process includes 4 statuses: Idle, not aligned,
aligned and proving. According to different proving cycles, the process can be divided
into normal initial alignment and urgent initial alignment. The selection is done by the
third hierarchy.
During initial alignment, signaling terminals at both ends need to exchange link status
information via the following four alignment status indications:
· SIO: Used to start a SL and to inform the local end to prepare to receive link
signals of uncertain type.
· SIN: Used to indicate received SIO signal from the peer end and the started local
signaling terminal, and to inform the peer end to activate the normal proving
12
Chapter 1 SS7 System
process.
· SIE: Used to indicate the received SIO signal from the peer end and the started
local signaling terminal, and to inform the peer end to activate the emergent
proving process.
· SIOS: Used to indicate link signals which cannot be sent or received via the SL.
During initial alignment, the alignment process will experience the following statuses:
1) Idle status
It is the initial status of the initial alignment process while not working.
2) Not aligned
In the idle status, the local end sends SIO to the peer end indicating that the
initial alignment process starts and the status will change to “Not aligned".
3) Aligned
Once a response (SIO, SIN or SIE) is received in the not-aligned from the peer
end, the status will change to “Aligned”, and SIN or SIE will be sent to the peer
end according to the setting of the local third layer.
4) Proving
In the aligned status, if SIN or SIE is received from the peer end, the status will
change to proving.
In the proving status, the local end monitors the error rate of a signaling unit received
from the peer end. If the error rate is acceptable, the proving is completed and the local
end will then send a FISU message to the peer end. When it receives FISU or MSU
from the peer end, the signal link will enter the “Service Activated” status. If the error
rate appears unacceptable within five times, this link will be considered unable to
complete the initial alignment process and will be changed to the idle status.
This function is used to monitor the error rate of a SL to ensure good service quality.
When an error rate of a SL reaches the threshold, this link will be judged as faulty.
Two error rate monitoring processes are available for different signal environments.
One is signaling unit error rate monitoring which is used after service is activated on
the SL, while the other is alignment error rate monitoring which is used when the SL is
13
CM3G-202-E1 SS7 Signaling System
Traffic control is to handle the congestion status at the second layer detected to prevent
the congestion of signal links from spreading, and finally recover the normal working
status of the links.
When the receiving end of a SL detects a congestion, it will stop proving (positive or
negative) the message signaling units, and sends a link status signaling unit SIB to
enable the peer end to judge whether it is a congestion or a fault. When the congestion
is cleared at the receiving end, SIB will not be sent and the link status is recovered to
normal.
If a SL cannot work due to problems at the second or higher functional layer, the
processor will be considered as failed. In this case, signal messages cannot be sent to
the third or fourth layer. The possible reason is that the central processor is faulty or
one SL is blocked manually.
When the second layer receives an indicator from the third layer that the third layer is
faulty, it will consider the local processor is faulty and begins to send SIPO to the peer
end. Meanwhile, it will discard the message signaling units received afterwards. When
the processor fault is cleared, the second layer will stop sending SIPO and resume
sending signaling unit, and then the SL will enter the normal status.
This is the third functional layer in the SS7 system. It defines the information transfer
functions and processes in the signaling network. All SL share this functional layer.
The functions of the signaling network are divided into two categories: signaling
message handling function and signaling network management function. The former
guides signaling messages to reach the right SL or user part; while the latter controls
the message route or signaling network structure based on the preset status data and
information related with the signaling network, so that the reorganized network
structure can be controlled to save or recover the normal message transfer capability.
SMH is used during signaling message transfer to ensure that the signaling message
14
Chapter 1 SS7 System
sent by a user part at the OSP can be transferred accurately to the corresponding user
part at the DSP. SMH involves three parts of functions: message routing, message
discrimination and message distribution. Their structure relationship is shown in Fig
1.3-1.
MDC is used to receive messages from the second layer and determines the
destination according to the DPC contained in the message, if the DSP of the
message is the local signaling point then the message will be sent through the
MDC function to the message distribution functional part. Otherwise, the
message will be sent to the message routing part through the MDC function for
transfer. The latter case means that the local signaling point has the Signaling
Transfer Point (STP) function
MDT distributes the message received from MDC according to the service
indication code SIO of the service information field in the signaling unit to the
corresponding user part, signaling network management and test & maintenance
part. All messages arriving at the MDT should be received by the local signaling
point.
15
CM3G-202-E1 SS7 Signaling System
1) Message source
· Messages sent from the MDC of the third layer SMH and to be transferred
(when used as STP);
· Messages generated by the third layer. These messages are sent from signaling
network management and test & maintenance function including signaling route
management message, SL management message, signaling traffic management
message and SL test control message.
2) Routing
For messages to be sent, please first check if the route to its DPC is available or
not. If unavailable, send “To-Unreachable-SP-Message-Received” to the
signaling route management part in the signaling network management. If the
route to the DPC is available, please select a SL in the load-sharing mode and
transfer the messages to be sent to second.
8 Tips:
In the message route high reliability is required for signal message transfer. Normally
there are more than one routes to the destination. The load sharing mode is used
according to SLS whichever link is used. Load sharing is implemented in two methods:
1) By different signaling links within the same link group.
Above is a brief introduction of the three different functions of MTP3 during signaling
message handling. The implementation of the third layer function must be based on
some flags attached with the signaling messages such as DPC and SLS. They are the
route flags existing in the signaling messages, the mandatory route label of each
signaling message. The following part will give a detailed description of these route
flags:
The route flag is located in the beginning of a SIF in MSU, as shown in Fig 1.3-2:
16
Chapter 1 SS7 System
SIF
Message data label
H1H0
4 14 14
Route label
(a)
4 4 24 24
Route label
(b)
DPC is the code of the DSP at which a message should arrive. OPC is the code of the
Originating Signaling Point (OSP). As shown in Fig. 1.3-2(a), the route flag contains
32 bits; DPC and OPC contain 14 bits each, while SLS contains 4 bits. The route flags
adopted in China are shown in Fig.1.3-2(b): DPC and OPC contain 24 bits each, SLS
contains 4 bits while another 4 bits are reserved.
For TUP signaling messages related with circuits and SLS uses the lowest 4 bits of the
CIC that indicates which circuit the signaling message belongs to.
y Note:
Internationally 14-bit signaling codes are used. In China 24-bit coding mode is used for
most signaling points. The 14-bit signaling point code is also used in China but very
seldom. Related details are available in the part about the signaling network.
17
CM3G-202-E1 SS7 Signaling System
The above description can also be supported with a simple example in the postal mail
service.
Suppose a mail is the message to be transferred. The recipient’s address is the DPC of
the message, while the recipient’s name is the message user. The sender’s address is the
OPC of the message, which is used as the label in the case of delivery failure. When
the mail is sent to the post office box, it will be sorted out by the working personnel as
local or foreign mail. If it is a local mail, it will be handled by the local delivery
personnel to the corresponding user. If it is a foreign mail, a route (by air, land or by
sea) will be selected for it according to the actual destination, and then it will be sent to
the railway station, port or airport.
In this example, the functions of MTP3 are completed by the post office. The MDC
function is the personnel sorting mails. The MDT function is the mailman and the MRT
function is postman.
Based on known signaling network status data and information, the MTP3 controls
message routes and signaling network structure to reorganize the signaling network if it
becomes faulty, and to recover the normal transfer capability for signaling traffic. This
signaling network management function consists of three functional processes:
Signaling traffic management, SL management and signaling route management.
The following eight potential events may affect the link status: SL faulty and recovered,
SL disconnected and connected, SL blocked and unblocked, SL disabled and enabled.
This function can be used to transfer signaling traffic from one link or route to
another link or route or several different links or routes, or in the case of
signaling point congestion to reduce signaling traffic. It involves the following
processes:
· Switchover
· Change back
· Forced rerouting
· Controlled rerouting
· Management blocking
1) Switchover
倒换
倒换switch
over
A D
倒换命令/倒换证
C
2) Change back
3) Rerouting
As shown in Fig 1.3-4, along the route A-D there are two links AB and AC. If
the link BD becomes faulty, the service from A to D cannot be transferred via B
to D. In this case, B will notify A and A will implement the rerouting program by
19
CM3G-202-E1 SS7 Signaling System
force to transfer all services for the link A-D through the link A-C, so that the
services can be transferred to D via C.
B
故 障
A D
4) Controlled rerouting
When the signaling route to a given destination becomes available, this program
can be used to transfer the service from the replaced signaling route to the
normal signaling route. The action of this program is the opposite of that
completed by the forced rerouting program.
5) Blocking management
When a SL is frequently switched over within a short time or the error rate of a
signaling unit is too high, this program can be used to indicate the UP
(generating signaling traffic) that this link is unavailable. Blocking management
is a measure to manage signaling traffic. In the blocking management program,
the SL flagged as “blocked” but still it can send maintenance and test message
for cyclic test.
When both A-B and A-C links are faulty, the signaling point A becomes isolated
in the signaling network. It is unreachable to B, C, D and E. In this case, the
change or reorganization of the signaling network is unknown to A. If A-B or
A-C becomes available, the signaling point A can execute the signaling point
restart program, and signaling points B and C can execute the adjacent signaling
point restart program, so that the route data of A can be synchronized with the
real-time status of the signaling network, and B, C, D and E can modify their
20
Chapter 1 SS7 System
E
B
A D
When a signaling transfer point (STP) needs to notify its adjacent signaling
points that it can not transfer signaling traffic to a DSP, the transfer-prohibited
procedure will be activated to send a transfer-prohibited message to the adjacent
signaling points, so that the signaling point receiving this message will
implement forced rerouting.
As shown in Fig 1.3-6, STPB detects a fault on the BD route, so it executes the
TFP procedure and sends a transfer-prohibited (TFP) message about D to the
signaling point A. Then A executes the forced rerouting program and switch over
all traffic of D to STPC for transfer.
21
CM3G-202-E1 SS7 Signaling System
B
Fault
TFP
A D
The purpose of this procedure is to inform one or more adjacent signaling points
that the message transfer capability of this STP is recovered. As shown in Fig
1.3-7, the B-D link is recovered; STPB executes the TFA procedure and sends a
TFA message about D to adjacent points, while A activates the controlled
rerouting function.
B
fault
TFA
A D
When STPB detects congestion between B and D, it sends a TFC message about
D to A. After receiving the message A will inform the UP to reduce the traffic to
D.
22
Chapter 1 SS7 System
B
Congest
TFC
A
D
C
Fig. 1.4-8 TFC Procedure
· Signaling-route-set test
The purpose of this test is to test whether the traffic can be transferred via an
adjacent STP or not. When the signaling point receives a TFP message from an
adjacent STP, it will start a cyclic route-set test.
· Signaling-route-set-congestion-test
This function is used to control all SL connected with the local end including the
connection, recovery and disconnection of SL. It provides methods to establish a
SL set and maintain it in the normal working status. When a SL is faulty this
function can recover the capability of the SL set according to the automatic
degree of the equipment for signaling distribution and reorganization. SL
management can be divided into three procedures: basic SL management
procedure and automatic allocation signaling terminal procedure, automatic
distribution signaling terminal and signaling data link procedures.
23
CM3G-202-E1 SS7 Signaling System
1.4.1 Overview
The description of the MTP layer shows that its addressing capability is based on the
DPC. MTP transfers messages to the designated destination and then distributes them
to the designated UP according to the SI. But along with the telecommunication
network development, more and more network services require to send point-to-point
control information between remote nodes. This information is unrelated with call
connection circuits and even unrelated with calls. For example, the information related
with roaming and authentication transferred among MSC, VLR and HLR in the digital
mobile communication network is transferred between SSP and SCP. However, the
address function of MTP cannot meet the requirement.
In the hierarchical structure of the SS7 mode, SCCP belongs to the MTP user part, and
provides MTP with route and routing functions based on the Global Title (GT). This
enables it to transmit various information unrelated to circuits and information between
exchanges and specialized centers in the telecom network through the SS7 signaling
network and to set up connectionless or connection-oriented services. If the data that
the user wants to transmit exceeds the limit of MTP, SCCP will provide the necessary
functions for segmentation and re-assembly. SCCP belongs to the third layer of the SS7
network. It implements the supplementary addressing functions for MTP3. Namely
working together with MTP3, it provides network layer functions similar to the OSI
reference model. To open services such as ISDN point-to-point supplementary services,
IN services, roaming and frequency handoff for mobile phones, and short message
services, the SCCP function must be added at all signaling points in the SS7 network.
y Note:
The above description tells the origin of SCCP, but what are the aspects where MTP
24
Chapter 1 SS7 System
cannot meet the requirements of modern communication? This question leads to the
limitations of MTP, which are reflected through the following four aspects:
The code for each number is related only with a given domestic network. For
connection with another domestic network, this code cannot be identified. In
some cases, for example, a mobile subscriber roams to another country; its
location information should be updated. When it searches for its HLR, the
signaling point cannot be correctly addressed.
For a signaling point, the SI code has only 4 bits and can be allocated to 16
subscribers at most, but actually more than 16 subscribers need the code.
Therefore MTP cannot satisfy the addressing requirements of more subscribers
as shown in Fig 1.4-1.
SSF SI
4bit 4bit
SIF SIO
MTP can only provide connectionless datagram service, but the development
trend of the telecom network is to transmit a lot of non-real-time messages (such
as charging files) between network nodes. These messages contain enormous
amount of data and require high reliability. They require virtual circuit
connection between network nodes to implement connection-oriented data
transmission.
25
CM3G-202-E1 SS7 Signaling System
According to the hierarchical structure of the SS7 network, the users of SCCP
are ISUP (ISDN user part) and TCAP (transaction capability application part).
ISUP implements end-to-end message transfer and supports related ISDN
supplementary services. TCAP provides perfect network layer functions through
SCCP and MTP3 to implement remote transmission of messages currently
available and unrelated with future circuits. It also supports various new service
functions such as wireless mobile communication and IN services.
The functional modules of SCCP are shown in Fig 1.4-2: Each SCCP consists of four
functional modules:
· Connection-oriented control
· Connectionless control
· SCCP management
SC C P
subscriber C onnection-oriented M TP
m essage
SC C P connection-oriented
N _transfer transfer control
prim itive R outing error
SC C P routing
control m odule
N on-connection M T P-
m essage (SC R C )
transfer
prim itive
SC C P non-connection transfer
control m odule (SC L C ) R outing error
N _transfer
prim itive
R eceiptof useless
m essages of
SOR SOG SSA SSP SST subsystem sentto
this node
M T P_
N _m anage- m anage-
m ent SC C P m anagem ent control m odule (SCMG) m ent
prim itive prim itive
26
Chapter 1 SS7 System
traffic messages. It receives messages sent by other functional modules of MTP and
SCCP for routing, and then sends the messages to other functional modules of MTP or
SCCP. The connectionless control part uses SCCP and MTP routing control to directly
transfer data in the signaling network according to the caller’s address, and uses the
routing control function to set up signaling connection to the destination and then
transfers data through the established signaling connection. After transfer, it will
release all signaling connections. The SCCP management part provides some functions
beyond the capability of the management part of MTP.
The connectionless service is similar to the datagram service in the packet switching
network, while the connection-oriented service is similar to the virtual circuit service in
the packet switching network. Specifically the following four protocols are available:
1) Connectionless service
N ode 1 N ode 2
SC C P1 SC C P2
U D T
The originating node SCCP subscriber sends out N_unit data request, primitives
to request the connectionless data transfer service. Then the SCCP route control
and MTP are used to send the unit data message to the called address, in the unit
data request primitives.
When the unit data message cannot be sent to the destination point, the Unit
Data Service (UDTS) message will be sent to the originating point; when the
destination node receives UDTS message, it sends N_unit data indication
primitive; when SCRC cannot send the unit data or UDTS message, it will send
one UDTS message to the address of the caller or call N_notice indication
primitives.
When the data length in the N_unit data request primitive is longer than X (X is
temporarily set as 200), UDT message cannot transmit the data for so large
quantities. Therefore, the data has to be divided into several shorter segments,
each transmitted via an XUDT message. Accordingly, when SCCP receives an
XUDT message, the divided data must be reassembled to form one N_unit data
indication primitive and then sent to the SCCP subscriber. This process is called
as segmentation/reassembly.
2) Connection-oriented services
SC C P1 SC C P2
C onnection request
C onnection acknow ledgem ent
D ata
D ata
C onnection release (R L SD )
C onnection com pleted (R L C )
When the SCCP function of the originating node receives the request
N_ConnectReq of a signaling connection, it analyzes the called address to
identify the destination node to which the signaling connection should be set up.
If the destination node is not a local node, SCCP will perform MTP functions to
send a Connection Request (CR) message to the DSP.
This mechanism also involves the negotiation for protocol type and flow control
credit. Besides, the SCCP of the originating node, the destination node, and the
intermediate nodes should record the necessary information of this signaling
connection so as to set up the logical signaling connection link.
29
CM3G-202-E1 SS7 Signaling System
The setup and rejection process of signaling connection is shown in Fig 1.4-5.
SCCP用户 SCCP用户
CC CC
SCCP SCCP SCCP
CR CR
SCCP用户 SCCP用户
CREF CREF
SCCP SCCP SCCP
CR CR
Flow control means to control message flow with a sliding window when the
protocol is the flow control connection-oriented service.
Whenever the connection section sends a message, the inactivity controller for
30
Chapter 1 SS7 System
sending should be reset; when the timing of the inactivity control timer expires,
the connection release process should be started.
Accelerated data transfer occurs when the protocol type is the flow control
connection-oriented service, and the minimum transferred data amount up to 32
octets, with a high rate requirement (neither flow control, nor providing
segmentation and reassembling functions).
To activate and terminate connection release, two kinds of messages are needed:
RLSD and RLC. The release process can be initiated by the SCCP users or by
SCCP. Besides the release of the logical links and local references, the release
process should also be able to freeze the local references in order to prevent the
startup of processes unsuitable for the present connection, due to the reception
of messages related to the established connections.
D) Recovery process
8 Tips:
OSI defines the information exchanged between adjacent layers N+1, N and N-1 in a
hierarchical structure as service primitive. In the SS7 system, the primitives defined by
OSI are used to form the four demotions of messages: Request, indication, response
and confirmation, the directions are shown in the following:
The MTP can indicate 16 subscribers at most. For SCCP, it can only indicate
SCCP subscribers, but cannot indicate the specific users of SCCP. Through the
SSN, more SCCP subscribers within a signaling point can be identified. The
SSN is defined with 8-bit binary code. At most 256 different subsystems can be
defined. Table 1.4-1 specifies the SCCP subscribers.
Value Description
0 Excluding SSN
1 SCCP management
2 Reserved
3 ISDN User Part
4 OMM part
5 Mobile User Part
6 HLR
7 VLR
8 MSC
9 EIR
10 AUC
11 Reserved
12 INUP
12~252 Reserved
253 BSS OMAP
254 BSSAP
· DPC+SSN
· GT
DPC is the destination signaling point code of MTP. SSN is used to identify
different SCCP subscribers within the same node.
32
Chapter 1 SS7 System
Global Title (GT) can be SCCP address denoted with various numbering plans
(such as telephone / ISDN numbering plan). Flexible routing via GT is an
important feature of SCCP. GT and DPC are different: DPC is valid only in the
defined signaling network, while GT is valid in the global scope and it has a
much larger address scope than DPC. Therefore, messages unrelated with
circuits can be transferred directly between any two signaling points in the
global scope. GT is normally used when the DPC is unknown to the originating
node, but the SCCP must translate the GT into a combination of the DPC+SSN
and the new GT before sending it to MTP, so this address can be used for
message transfer.
33
CM3G-202-E1 SS7 Signaling System
Once receiving a primitive request from a subscriber, SCCP will encapsulate the
subscriber’s data together with necessary control and routing information into a SCCP
message according to the primitive parameter and then send it to the corresponding
SCCP entity at the remote end.
ITU-T has specified 23 kinds of messages for SCCP, including 4 kinds for
connectionless services, 14 kinds for connection-oriented services and 5 kinds for
SCCP management.
1) Connectionless services:
· Expanded Unit Data (XUDT): When the data volume to be transmitted is greater
than the volume that can be carried by a message signaling unit, SCCP will
segment the subscriber data and then transmit the data with multiple XUDT
messages, while the receiving SCCP will reassemble the data and then send the
data to the subscriber.
2) Connection-oriented services:
Connection Request (CR): The originating SCCP sends a message requesting for
a signaling connection.
Connection Confirmation (CC): When the destination node allows for the
connection, it sends a CC message to the SCCP and informs it to establish a
connection.
Release Disconnected (RLSD): The resources of the sending side have entered
34
Chapter 1 SS7 System
the disconnected and reserved status, which requires the other side to release the
related resources.
Data Form 1 (DT1): It is used in the protocol category 2 to send subscriber data
from one end of the SCCP to the other end of SCCP.
SCCP messages are encapsulated in SIF fields and transferred in the signaling network
through MSU, as shown in Fig 1.4-6:
35
CM3G-202-E1 SS7 Signaling System
F B
F CK SIF SIO LI I FSN I BSN F
B B
the third layer Send direction
TUP CIC
TUP data H1 H0 OPC DPC
SLS
COMPONENT SUBLAYER
transaction
TCAP COMPONENT3 COMPONENT2 COMPONENT1 handling
1) Message types
UDT is used to transfer unit data; UDTS is used to report the reasons for
delivery failure of unit data; XUDT is used to transfer enhanced unit data;
XUDTS is used to report reasons for delivery failure of XUDT. They are
explained in the previous section.
In a SCCP message, the calling address and called address are made up of two
parts: address type indicator and address information. It is the combination of
several octet sets. The format of the address information part determines the
36
Chapter 1 SS7 System
address indicator code. The formats of calling and called addresses of the SCCP
are shown in Fig 1.4-7. The address type indicator is an octet set. Its format is
shown in Fig 1.4-8.
Bit 1(signaling point indicator): “0” excluding SPC; “1” including SPC
The “0011” GT includes translation type, numbering plan and coding mode
The “0100” GT includes translation type, numbering plan, coding mode, and
address attribute indicator
Bit 7 (routing indicator bit): “0”, routing by GT; “1”, routing by DPC+SSN;
Fig 1.4-9 is an interface for GT data configuration. This interface indicates that
to implement GT addressing, whether the above information is included in the
address must be specified upon GT data configuration: the information could be
37
CM3G-202-E1 SS7 Signaling System
SPC, SSN, addressing mode, and the information contained in the address
information GT.
8 Tips:
The following example demonstrates the formats of the calling and called
addresses of SCCP, with GT=0100 (GT=4). When the GT indicator is selected
as 0100, it contains the translation type, numbering plan, coding mode and
address attribute indicator. Its specific address information is shown in Fig
1.4-10:
38
Chapter 1 SS7 System
0010 Reserved
0000000 Idle
39
CM3G-202-E1 SS7 Signaling System
Other Idle
8 Tips:
In the CDMA system two translation types are available: 0 and 128, used to address
HLR and MC respectively. Two numbering plans are used: ISDN/telephone numbering
plan (E.164) and land mobile numbering plan (E.212), while all address attribute
indicators are presented in international numbers.
As shown in Fig. 5.4-2, the routing control function of SCCP is to select routes
according to the called address contained in the SCCP message. The messages it
receives may be the messages sent by other nodes from the MTP layer or the messages
sent by connection-oriented or connectionless control.
· CR messages
40
Chapter 1 SS7 System
The node resources are limited, it is impossible for the SCCP of one node to
translate all GT; therefore, the originating end might translate GT into the DPC
of an intermediate node whose SCCP will then translation the GT into the DPC
of the destination. One message may involve several MTP.
The specific translation process is shown in Fig 1.4-11. Between the originating
node and the DSP, several intermediate nodes may exist. During translation,
SCCP first translates the information address sent from the originating node
according to the GT information into the DPC of the first intermediate node and
then sends the DPC to MTP. After the information arrives, the first intermediate
node will find that it is not the destination, so the next translation process will
begin. SCCP will translate the address information into the DPC of the second
intermediate node and sends it to MTP for transfer. The process continues like
this, until the destination node finds that the address of the message is the local
node, so the GT translation process can stop and the SCCP of the DSP will send
the message to the corresponding user according to the specific SSN.
41
CM3G-202-E1 SS7 Signaling System
Every SCCP message “UDT” corresponds to a MAP message as shown in the above
trace. Every UDT message will show the following context;
SSN: Sub-System Number: for both Calling and Called party address
TT: Translation Type: usually “0” showing that the this UDT is intended for HLR
42
Chapter 1 SS7 System
Numbering Plan: Index 6 refers to E.212- Land Mobile Numbering Plan; it can also be
Index 1 referring to E.164- ISDN/ Telephony Numbering Plan.
Nature of Address Indicator: usually set as “4”, meaning GT includes Translation Type,
Coding Plan, Number Mode and Address Attribute Indicator
Address Information: is the GT number itself, for example IMSI, MDN, MSV/VLR or
HLR Number
Analyzing all UDT messages will determine the signal flow and information for all
MAP messages.
The TCAP user refers to various applications, such as mobile service application,
including the registration, activation and invocation of dedicated functional unit
supplementary service (free phone service) and exchange of signaling information
unrelated with circuit control (like Closed User Group). Its general purpose is to
provide session capability for information request and response.
The core of TC is based on remote operation. To provide agreed support for all
application services, TC extracts the information exchanging process between different
nodes as an "Operation” process. Namely, the user at the start node invokes a remote
operation, while the remote node implements this operation and sends the operation
result to the start node. To complete a service process, many operations may be
involved between the equivalent entities of the two nodes. The implementation
combination of these related operations form a session (transaction). The TCAP
protocol is a protocol for operation and session (transaction) management.
43
CM3G-202-E1 SS7 Signaling System
TC consists of component sub layer and transaction processing sub layer, as shown in
Fig 1.5-1.
T C -subscriber
T C -prim itive
C om ponent sub-
layer (C S L )
T R -prim itive TC
T ransaction sub-
layer (T S L )
N -prim itive
SC C P
M TP
To implement operation and session control, TCAP is divided into the following two
kinds:
TCAPTSL serves to manage the transaction, i.e. the signaling communication process
between the local transaction sub layer users and remote transaction sub layer users.
The transaction sub layer user is the TR-user. The only TR-user known at present is the
44
Chapter 1 SS7 System
To complete the signaling process of one application service, two TC-subscribers make
a two-way exchange of a series of TCAP messages. The start, end, sequence and
message content of message exchanged are all controlled and explained by the
TC-subscribers. The TCAPTSL manages the starting, holdover and termination of the
session including detection and handling of abnormalities. The protocol process is
applicable to sessions of any application services.
The main functions of the TCAPCSL include operation management, component error
detection and session component assignment.
Normally, one operation means that the TC-subscriber initiates an invocation request
and the TCAPCSL sets up a status diagram for each operation to implement operation
management.
Component errors include protocol error and response timeout. Protocol errors exactly
refer to the inconsistency between the component type received by the component sub
layer and the expected input into the operation status diagram, syntax error or
unrecognizable on the component format. Response timeout refers to the timeout of
various operation timers.
y Note:
In the CDMA system, TCAP is compliant with the American standard that is different
from the TCAP standard stipulated by ITU-T. They have the same functions, but are
different in some aspects such as primitive format and parameters.
45
CM3G-202-E1 SS7 Signaling System
In the description of SCCP messages, the messages are encapsulated in MSU for
transfer. For TUP messages the transfer method is the same. They are also encapsulated
in MSU for transfer, but the message structure is different, as shown in Fig 1.6-1.
The contents of telephone user messages are transferred in the SIF of MSU. The SIF
consists of three parts: route flag, header code and signaling information.
· The route flag is similar to the route flag in SCCP, as shown in Fig 1.6-2:
The difference between them is the CIC code. In a SCCP message CIC is a 4-bit
SL selection code, while it is different in a TUP message.
CIC is also called circuit identity code. It is assigned to various telephone voice
channels to indicate the circuits occupied by both ends. It is a 12-bit code. For
2048kbit/s digital channels, the lower 5 bits of the CIC are the timeslot code of a
voice channel, while its higher 7 bits represents the PCM system code between
OSP and DSP. For 8448kbit/S digital channels, the lower 7 bits are timeslot code
of the voice channel, while the higher 5 bits indicate the PCM system code
between OSP and DSP. Therefore, theoretically one SL can indicate 4096 voice
channels.
46
Chapter 1 SS7 System
y Note:
When configuring trunk circuits to adjacent offices, make sure that the CIC is
consistent with that of the adjacent offices; otherwise the voice channels may be
blocked.
· Header code
Any telephone signaling message has a header code used to indicate the type of
the message. The above figure shows that the header code consists of two parts:
H0 stands for the code of a message group, while H1 is the code of a specific
message. Details are available in related SS7 signaling manuals.
In a PSTN network, the signaling transferred during voice channel connection between
two exchanges is TUP signaling. The following is a typical successful calling process
demonstrating the messages used in a calling process.
node1 node2
IAM
GRQ
GSM
ACM
ring
ANC
CLF
RLG
Initial Address Message (IAM): The first message sent to set up a call. It contains all
47
CM3G-202-E1 SS7 Signaling System
information of the called party to set up a call and specify a route, including the called
number.
General Request Message (GRQ): Send a request to the calling party and the type of
the calling party.
General forward Set-up information Message (GSM): It appears together with GRQ as
the response to GRQ.
Address Complete Message (ACM): It indicates that all related information from the
calling party to the called party has been collected. After the ACM message is received,
the outgoing office should connect all voice channels.
Answer signal and Charge message (ANC): It indicates that the called party has
hooked off to answer and the originating switch begins the charging program.
Clear Forward signal (CLF): CLF is the signal executed at the first/highest priority. At
any time during a call, even when the circuit is in the idle status, once a CLF signal is
received, the circuit must be released and a RLG signal is sent out.
As shown in Fig 1.6-4, the differences between clear forward process and clear
backward process can easily be revealed.
This calling process is different from the previous one: When the signaling is sent to
the opposite exchange an IAI message is sent. Different from IAM the IAI message
carries not only the information of the called party but also the calling number and the
original called address. Therefore, when the opposite party receives the IAI message, it
will not request for the number of the calling party.
Besides, once a clear backward process is activated, a CBK signal will be sent out by
the opposite party. When the forward party receives this signal, it will repeat the clear
forward process, instead of sending a response message to the backward party. This is
also a difference between TUP signaling and ISUP signaling.
48
Chapter 1 SS7 System
node1 node2
IAI
ACM
ring
AN C
CB K
CLF
RL G
ACM----Address-Complete Message
CBK----Clear-back signal
CLF----Clear-Forward signal
49
CM3G-202-E1 SS7 Signaling System
RLG----Release-Guard signal
Summary
This chapter describes the SS7 system with its basic concepts, hierarchical architecture,
main functions and features of each layer, and the inter-layer relationship. These are
essential to SS7. The key points of this chapter are:
1. Functions of MTP3: especially the functions and addressing basis of the network
layer. Addressing by DPC is its main feature.
2. Functions of the SCCP layer; difference between SCCP and MTP layers; and the
format of SCCP address messages. GT is the address information of SCCP. It is
not only a number but also has its own numbering rules and attributes. The same
number may have quite different addressing results under different rules. This is
also a difficult point of this chapter.
Besides TUP the most important application part is the mobile application part (MAP).
It is not described in this chapter but in subsequent chapters. The coming section will
describe the construction of SS7 network in China.
What are the main types of signaling units? What are their respective purposes and
basic formats?
Which two parts contained in the functional level of the signaling network? And what
are their functions?
What is the discrimination basis of the MDC function? What is the basis of the MDT
function?
What are the aspects for which SCCP will increase the addressing function of MTP?
What is GT code? What is its function? How many types of GT codes are used in the
CDMA system?
50
Chapter 1 SS7 System
What are the service categories provided by SCCP? What are their respective features?
How many kinds of SCCP messages are used in the MAP of the CDMA system? How
they can be used?
51
2 SS7 Network
Key points
The signaling network is one of key support network constructed by the Chinese
government. Reasonable planning and construction of the signaling network are of
great importance for efficient and reliable signaling information transfer, decreasing
network load and investment cost reduction.
The controlled object of the SS7 system is an information transfer network based on
circuit switching, but the transmission and switching equipment of the SS7 signaling
itself form a separate signaling network, where a dedicated computer communication
network is overlaid on the circuit-switched network.
A signaling network consists of three parts: Signaling Point (SP), Signaling Transfer
Point (STP) and Signaling Link (SL). .
2.1.1.1 SP
53
CM3G-202-E1 SS7 Signaling System
2.1.1.2 STP
STP has the signaling transfer function. The signaling node which can transfer one
signaling link to another singling link in a message is called as signaling transfer point.
STP can be divided into integrated type and independent type. An independent STP
only has the transferring function, while an integrated STP also has the user part
function and the transferring function.
2.1.1.3 SL
The link transferring signaling messages between two SPs is called as signaling link.
The group of links connecting two SPs directly forms a signaling link group.
2.1.2 SPC
SPC is the flag exclusively specify a signaling point. The 24-bit SPC format is shown
in Fig 2.1-1:
The main signaling zones are coded in the unit of province, autonomous zone and city
in a unified manner.
Concepts like SPC, OPC and DPC are often used in the network. OPC and DPC is a
pair of relative concepts. For a signaling point, both OPC and DPC may be used
according to the direction of the signaling message. But SPC is an absolute concept. It
cannot be changed once specified.
54
Chapter 2 SS7 Network
The working mode refers to the correspondence between the channels selected for a
signaling message and a signaling relation to which the message belongs to. Three
modes are available in the signaling network: associated mode, non-associated mode
and quasi-associated mode.
The information between two SPs can be transferred through signaling links
connecting two SPs directly, as shown in Fig 2.1-2.
Signaling messages are transferred through several SLs in the current network status.
At different times, the path of a signaling message is not the same. In this mode, too
much data configuration is needed and therefore, this mode is not used at present.
55
CM3G-202-E1 SS7 Signaling System
A signaling route is a preset path used to transfer signaling message from OSP to DSP.
Routes can be divided into normal routes and alternate routes according to their
features and use.
The route of signaling traffic stream in the normal case without any fault
The route selected when signaling traffic stream cannot be normally transferred due to
SL or route fault is called as an alternate route. Any alternate route is a quasi-associated
route transferred via signaling points. It can be a single route or the combination of
several routes. According to the numbers of signaling transfer points, the alternate
route can be divided into the first alternate route, the second alternate route, and so on.
If several routes arrive at the same signaling point, the route with direct signaling link
is called as normal route. If no direct signaling link is involved, the normal route
should be the shortest one. In the case of load sharing working mode, both signaling
routes should be normal routes. If they become faulty, alternate routes should be
selected from the first, and then the second.
56
Chapter 2 SS7 Network
Fig. 2.1-5 shows the configuration interface of the signaling part in ZXC10 MSS. It
involves concepts such as signaling link, signaling link group and signaling route. To
implement correct SS7 transfer, these configurations are necessary.
57
CM3G-202-E1 SS7 Signaling System
y Note:
During signaling route configuration for a ZTE switch, four signaling routes can be
configured at most: normal route, first alternate route, second and third alternate route.
In the current network alternate routes are seldom configured only normal routes are
configured.
To the same office direction, only one signaling group can be configured and only 16
signaling links can be configured for each group. These signaling links share load
within the signaling group. One route may involve two different link groups.
Summary
This chapter describes the concepts related with the signaling network and the
signaling network structure, especially for the construction of China Unicom CDMA
signaling network. This part is essential for the implementation of normal addressing.
Therefore it is mandatory for trainees.
How many working modes are used in the signaling network? What are their features?
58