Sei sulla pagina 1di 62

CM3G-202-E1 SS7 Signaling System

Course Objectives:
· Learning Concepts, Architecture and Functions of SS7

· Understanding Different Architecture of SS7 Network.


Contents

1 SS7 System.................................................................................................................................................. 1

1.1 Signaling-related Concepts ............................................................................................................... 1

1.1.1 Signaling ................................................................................................................................ 1

1.1.2 Signaling Classification ......................................................................................................... 2

1.2 Summary of SS7 System................................................................................................................... 3

1.2.1 Advantages and Disadvantages .............................................................................................. 3

1.2.2 Hierarchical System Structure................................................................................................ 4

1.2.3 SS7 Message Structure........................................................................................................... 6

1.3 Message Transfer Part (MTP) ........................................................................................................... 9

1.3.1 Signaling Data Link Layer (MTP1) ....................................................................................... 9

1.3.2 Signaling Link Functional Layer (MTP2)............................................................................ 10

1.3.3 Signaling Network Functional Layer (MTP3) ..................................................................... 14

1.4 Signaling Connection Control Part ................................................................................................. 24

1.4.1 Overview .............................................................................................................................. 24

1.4.2 SCCP Message Structure...................................................................................................... 34

1.5 Transaction Capability Application Part ......................................................................................... 43

1.5.1 Hierarchical Structure of TCAP ........................................................................................... 44

1.6 Telephone User Part ........................................................................................................................ 45

1.6.1 General Formats of Telephone Signaling Messages............................................................. 46

1.6.2 TUP signaling process.......................................................................................................... 47

2 SS7 Network ............................................................................................................................................. 53

2.1 Basic Concepts................................................................................................................................ 53

2.1.1 Composition of Signaling Network...................................................................................... 53

i
2.1.2 SPC .......................................................................................................................................54

2.1.3 Working Mode of Signaling Network...................................................................................55

2.1.4 Signaling Route ....................................................................................................................56

2.1.5 Configuration Description ....................................................................................................57

ii
1 SS7 System

Key points

· Understand the hierarchical structure of the SS7 system

· Understand the functions and features of each structure

· Understand all message structures and the related definitions

The SS7 system is one of the key technologies in the modern telecommunication. Used
in various networks, it can transmit inter-office signaling required by the PSTN and
ISDN for circuit connection, various location information related with roaming
subscribers among all communication entities, and IN service information among all
service entities. Good knowledge of SS7 is very important to solve problems related
with various signaling in mobile communication.

1.1 Signaling-related Concepts

1.1.1 Signaling

The purpose of communication network is to transfer various information for users


including voice and non-voice information. Therefore, various “information” will be
exchanged among various equipment to enable all equipment in the network to work
harmoniously. This information transferred among various equipment, is called
signaling. In simple words, signaling is the language used among various equipment to
exchange their own status and destinations.

“Language” implies agreed principles and specifications. Signaling is also subject to


related principles and regulations, known as “protocol” or signaling mode. In the
following part, signaling is described from three aspects: structure form, transfer mode
and control mode.

1.1.1.1 Structure form:

1) Uncoded signaling: Such as Signaling No.1 (CSN1). It creates different signals


in the “2-out-of-6” or “2-out-of-4” mode, without coding the signals at all.

1
CM3G-202-E1 SS7 Signaling System

2) Coded signaling: such as SS7 signaling.

1.1.1.2 Transfer mode

1) End to end: On the SCCP layer of the SS7 system, this mode is used

2) Link by link: On the MTP layer of the SS7 system, this mode is used for
information transfer

3) Mixed mode: Both of the above modes are used.

When only MTP and TUP are involved, the link-by-link transfer mode is used. If
SCCP is added, the end-to-end transfer mode will be used. For CSN1, the
end-to-end mode is used in normal cases. The link-by-link mode is only used in
the case of poor line quality.

1.1.1.3 Control mode:

1) Non-control: It is similar to the concept of full duplex. In this mode, Party A


sends signaling to Party B without being controlled by Party B. And Party B can
do the same. Both parties can proceed to the next step before getting the
response from the other party. This non-control mode is adopted in the SS7
system.

2) Semi-control: It is similar to the half-duplex mode for vehicle dispatching:


Neither party can proceed to the next step before the one side has accepted the
information from the other party; while the other party is not affected at all.

3) Full-control: The two parties are mutually controlled to implement the process
such as CSN1.

1.1.2 Signaling Classification

Signaling can be classified in many methods. The following are some common
methods:

1.1.2.1 Classified according to transmission areas into subscriber-line signaling and


inter-office signaling

1) Subscriber-line signaling: The signaling transferred between the subscriber’s


phone and the switch such as on-hook signaling, dialing tone and busy tone.
Such kind of signaling is short and simple.

2) Inter-office signaling: Much more than subscriber-line signaling and much more

2
Chapter 1 SS7 System

complicated. Such signaling is transferred between switches, between the switch


and the NM center, or between databases.

1.1.2.2 Classified according to signaling channel into channel-associated signaling and


common-channel signaling

1) Channel-associated signaling: The signaling related with the voice channel is


transferred via the voice-channel, or the signaling whose transfer channel is
exclusively corresponding to a voice channel. CSN1 is the typical
channel-associated signaling.

2) Common-channel signaling: Separates the channels for signaling transfer from


those for voice transfer, and then transfer signaling on a bidirectional signaling
link in the centralized mode. SS7 belongs to this type

1.1.2.3 Classified according to functions into line signaling, route signaling and
management signaling

1) Line signaling: Also called as monitoring signaling, used to monitor the


on-hook/off-hook statuses of both calling and called parties and the busy/idle
status of the equipments.

2) Route signaling: It has the routing function. For example, the number dialed by
the calling party i.e. the called number. It is also known as selection signaling.

3) Management signaling: It features operability used for the management and


maintenance of the telephone network. It is also known as maintenance
signaling.

y Note:

Along with the continuous improvement of the signaling system, it is unnecessary to


discriminate line signaling and route signaling in the SS7 system. The above functions
are implemented through unified message formats.

1.2 Summary of SS7 System

1.2.1 Advantages and Disadvantages

1.2.1.1 Advantages

High channel utilization: Theoretically one SS7 link can serve thousands of voice

3
CM3G-202-E1 SS7 Signaling System

channels. Even if the redundancy is fully considered, the number of served voice
channels can still be kept between 2000 and 3000. To the contrary, in the
channel-associated signaling, the 15th TS16 in one multiframe can transfer information
for only 480 (16*30) lines of voice channels.

Fast transfer speed: In the SS7 system, information is transferred directly in the digital
form. Four bits can denote a number which is much better than the channel-associated
signaling.

Large signaling capacity: In this system signaling is transferred by means of messages.


The coding is very flexible. The maximum message length is 272 bytes, and rich
contents can also be attached in the messages which are impossible for
channel-associated signaling.

Wide application scope: SS7 signaling can not only transfer the traditional
circuit-connected signaling, but also for various information management, maintenance
and query unrelated with circuits. It is the basis for ISDN, mobile communication and
IN services.

Easy running and maintenance management: Because the signaling network is


separated from the communication network.

The technical specifications can be easily expanded to meet the requirements of future
information technology and unknown service development.

1.2.1.2 Disadvantages

In the SS7 system, one link can serve several thousand voice channels so much higher
link reliability is required compared to channel-associated signaling. Once a signaling
link fails, the corresponding voice channel will be affected.

Besides, the compatibility of SS7 products from different suppliers is different.

1.2.2 Hierarchical System Structure

The modern communication is actually based on the control via computers. The
universality of SS7 determines that many different application functions are contained
in the entire system, and the system structure should be flexible to expand. Therefore,
one of its important features is its modular functional structure, which ensures the
coexistence of multiple applications within the same sub rack. Namely, the SS7 system
is designed and applied according to the OSI mechanism of computers. The basic

4
Chapter 1 SS7 System

mechanism is:

1) Divide its communication functions into several hierarchies. Each hierarchy


implements a part of functions and can be developed and tested separately.

2) Each hierarchy only communicates with its two adjacent hierarchies, and utilizes
the services provided by its lower hierarchy (unnecessary to know how the
services are implemented), and provides completed functions to its upper
hierarchy.

Each hierarchy is independent and can be implemented through the most appropriate
technologies suited to them. When one of them is changed due to technical
improvement, other hierarchies will not be affected if the interface relationship is kept
unchanged.

Based on this mechanism, the SS7 system can be divided into four functional layers:
The Message Transfer Part (MTP) is divided into three layers, and all the User Parts
(UP) are combined into the fourth layer. In MTP, the functional layers are the signaling
data link layer (MTP1), SL functional layer (MTP2) and signaling network functional
layer (MTP3) in the sequence from low to high functions. The function of MTP is to
transfer signaling between signaling points accurately.

The UP’s function is to process signaling information. Different applications may have
different UP. The Telephone User Part (TUP) processes the call control signaling
messages in the telephone network; the Integrated Service digital network UP (ISUP)
processes the call control signaling messages in ISDN; while the Mobile Application
Part (MAP) processes the call control signaling information and other signaling
information unrelated with calls such as roaming and location updating. The specific
protocol hierarchy is shown in Fig 1.2-1.

5
CM3G-202-E1 SS7 Signaling System

OMAP MAP INAP

ISUP

TUP
TCAP

SCCP

MTP3
MTP2
MTP1

Fig 1.2-1 SS7 System Architecture

MTP ― Message Transfer Part

SCCP ― Signaling Connection Control Part

TUP ― Telephone User Part

ISUP ― ISDN User Part

TCAP ― Transaction Capability Application Part

OMAP ― Operation and Maintenance Application Part

MAP ― Mobile Application Part

INAP ― Intelligent Network Application Protocol

1.2.3 SS7 Message Structure

In the SS7 system, all messages are transmitted by means of signaling unit. The
signaling unit is a data block similar to the packet in the packet switching. The message
signaling units are used to transfer user information and transmitted in variable lengths.
According to different functions these units can be divided into the following three
types:

6
Chapter 1 SS7 System

1) Fill-in Signaling unit (FISU)

2) Link Status signaling unit (LSSU)

3) Message Signaling unit (MSU)

FISU is an empty signal containing no information. Its function is to maintain links in


the communication status when no information is transferred to the network node and
acknowledges the messages sent from the opposite side. LSSU is the signaling unit
transferring link status information. The link status is indicated through SF fields. MSU
is the signaling unit carrying messages that are contained in the SIF and SIO fields.
The formats of these three signaling units are shown in Fig 1.2-2:

F CK SIF SIO LI FIB FSN BIB BSN F

8 16 n×8(n>1) 8 2 6 1 7 1 7 8
(a) MSU

F CK SF LI FIB FSN BIB BSN F

8 16 8 or16 2 6 1 7 1 7 8
(b) LSSU

F CK LI FIB FSN BIB BSN F

8 16 2 6 1 7 1 7 8
(c) FISU

Fig 1.2-2 Formats of all Units in the SS7 Network

All three kinds of signaling units transfer signals in the signaling network but they
implement different functions. They can easily be distinguished through the length
indicator bits (LI). When LI=0, this unit is FISU; If LI=1or2, the unit is LSSU; if LI>2,
the unit is MSU. Both FISU and LSSU receive and send signals at the second hierarchy.
MSU transfers the real user information and it receives and sends signals at the third
hierarchy.

The following explains the meanings of all fields in the signaling units:

F: Delimiter of a signaling unit, an octet in the mode of 01111110 indicating the ending
of the previous unit and the beginning of the next unit.

7
CM3G-202-E1 SS7 Signaling System

CK: Error detecting code containing 1 or 2 octets used to detect the error codes
probably generated during the transmission process.

LI: Length indicator of a signaling unit. Its length is 6 bits. It is used to indicate the
number of octets between LI and CK (excluding them). For MSU, LI>2; for LSSU,
LI=1 or 2; for FISU, LI=0. When a certain SU message length exceeds 63, LI will be
63.

FSN/FIB and BSN/BIB: Sequence No. and resending indicator bit of a signaling unit.
They form two octets and used to implement error correction.

FSN: Forward sequence No., namely the sequence No. of the message, in the 7-bit
form coded on the basis of 128-module.

FIB: Forward resending indicator bit, 1 bit. Reversely it indicates that the local end
will start to resend a message.

BSN: Backward sequence No., 7 bits. It informs the opposite side that all messages to
BSN have been correctly received.

BIB: Backward resending indicator bit, 1 bit. Reversely it informs the opposite end that
messages are resent starting from BSN+1.

SIO: Service indicator octet only available in MSU. It indicates message category and
network type.

SIO: Two subfields: low 4-bit SI (the service indicator indicating message category)
and high 4-bit SSF (the sub service field indicating the network type).

SIF: Signaling information field containing the information contents sent by the
subscriber actually. It consists of two parts: flag and signal information. The latter is
determined by the specific subscriber, while the former contains Destination Signaling
Point (DSP), Originating signaling Point Code (OPC) and Circuit Identification Code
(CIC) or Selection code (SL) SLS.

SF: Status field, only used for LSSU to indicate the link status. It is generated by the
second hierarchy.

8
Chapter 1 SS7 System

1.3 Message Transfer Part (MTP)

1.3.1 Signaling Data Link Layer (MTP1)

This is the first functional layer in the SS7 common channel signaling system. It
defines the physical, electrical and functional attributes of signaling data and the
methods to connect with the data link. It also provides full-duplex bidirectional
transmission channels. The signaling data link layer consists of a pair of data channels
of the same rate but of opposite directions. It implements transparent transmission for
the binary bit stream. The SS7 system is most suitable for the digital communication
network. Signaling digital links are often 64Kbit/s digital channels, corresponding to a
specific timeslot in the PCM transmission system. For example: In the PCM30/32
system, TS16 is often used to transfer signaling. For this transmission, other timeslots
except TS0 can be selected.

As the first layer of function, the signaling data link should be connected with the
secondary function of the digital SPC exchange. It can be accessed through the digital
switching network or interface equipment. Only digital signaling data links can be
accessed through the digital switching network in the SPC exchange. In this network,
semi-permanent channels can be established to implement automatic distribution of
signaling data links or signaling terminals (the second layer).

8 Tips:

PCM30/32 system: PCM stands for pulse code modulation. It is a modulation mode for
the digitalization of analog signals. One analog signal can be converted into digital
signal through sampling, quantization and coding. The rate of this signal is 64Kbit/s,
which is called as a timeslot. The sampling rate is compliant with the Nyquist theorem.
Namely, the sampling frequency is greater than or equal to the twice of the signal
frequency, while coding is implemented in the A Law and 13-folding method.

Through the digital multiplexing technology, 32 timeslots of this kind can be


multiplexed. The frame structure formed this way is called as PCM trunking system
with the rate as 2.048Mbit/s, which is the so-called 2Mbit/s. It contains 32 timeslots:
TS0 is used as the frame synchronization timeslot; TS16 is used for signaling transfer,
while the rest 30 timeslots are used for voice channel transfer. This is the PCM 30/32
system.

9
CM3G-202-E1 SS7 Signaling System

1.3.2 Signaling Link Functional Layer (MTP2)

As the second layer for SL control, it co-exists with the signaling data link to provide
reliable SL transferring messages between two cascaded signaling points to ensure that
the transfer quality of signaling messages can meet the specified standard.

This second layer implements the following functions:

· Signaling unit delimitation

· Signaling unit alignment

· Error detection

· Error correction

· Initial alignment

· SL error rate monitoring

· Traffic control

· Processor fault control

These functions are described in detail as follows:

1.3.2.1 Signaling unit delimitation and alignment

To distinguish the individual signaling units from the bit stream of the signaling data
links, a flag should be necessary for each signaling unit to mark its start and end. In the
SS7 system, the flag is denoted in a fixed code 01111110 as the start and end of a signal
unit. Upon receiving, make sure the flag has occurred; while upon sending, make sure
the flag has been generated.

To correctly delimit a signaling unit, make sure that this flag does not appear in any
other part of the signaling unit. The “0” bit insertion is used in this case. The sending
end will detect the signaling units without flags. If 6 continuous “1” (111111) occurs in
the message, “0” will be inserted after the 5th 1, so “111111” will become “1111101”.
The receiving end will detect the signaling units with flags. If 5 continuous “1” (11111)
is found, it will insert “0” after the 5th “1” and “11111” will become “111110”.

Normally, the signaling unit length is restricted as an integer times of 8 bits. Before “0”
is deleted, “111111” should exist. Otherwise, the length is out of place. The received
signaling unit will have to be discarded, and will be measured during the signaling unit
error rate monitoring process.

10
Chapter 1 SS7 System

1.3.2.2 Error detection

The purpose of this action is to judge if any error occurs in the signaling unit during bit
stream transfer.

Because noise exists at the transmission channel, interference like transient interruption
may cause error in the signaling information. To ensure the service quality, appropriate
error control measures must be taken. The control should include two aspects: error
detection and error correction.

To ensure high detection capability against burst errors caused by pulse and transient
interruption, the Cyclic Redundancy Check (CRC) is adopted. This method is carried
out through the attached redundancy code and to make the transferred information
sequences regular, while the receiving end will check if this regulation exists.

1.3.2.3 Error correction

The purpose of this action is to obtain a correct signaling unit after an error occurs. In
the SS7 mode, retransmission is used for error correction. Namely, the receiving end,
after detecting an error, will require the sending end to send the information again.

Two error correction methods are available: basic error correction and preventive
cyclic retransmission. If the required transmission delay is less than 15ms, the basic
method is used. It is generally used in landing transmission. If the delay is greater than
15ms, the preventive cyclic method is used. It is used in satellite communication.

1) Basic error correction

This is a non-control retransmission error correction method implemented


positive/negative acknowledgement.

The non-control method means that the sending side can send message signaling
units continuously without waiting until the last signaling unit is acknowledged
before sending the next. This non-control mode can greatly raise the speed for
signal transfer.

Positive acknowledgement means that the signaling unit is correctly received;


while negative acknowledgement means that the received signaling unit is
incorrect and retransmission is required. The acknowledgement is implemented
through the sequence numbers carried by each signaling unit: FSN, BSN, BIB
and FIB. FSN implements sequence control for signaling units and BSN
implements positive acknowledgement. The remote end assigns the FSN of the
11
CM3G-202-E1 SS7 Signaling System

latest message signaling unit received correctly to the BSN of the next signaling
unit reversely sent, which is the BSN value of the opposite side. It indicates the
FSN for which the message signaling unit sent by the local side is acknowledged.
The negative acknowledgement is implemented through BIB reversely.

2) Preventive Cyclic Retransmission (PCR)

PCR is a non-control error correction method implemented via positive


acknowledgement and cyclic retransmission. Each signaling terminal is
configured with a Retransmission Buffer (RTB) to temporarily store the
signaling units which have been sent but no positive acknowledgement has been
received. When no new signaling units are needed to be sent, those units that are
not positively acknowledged will be stored in the retransmission buffer and will
be retransmitted automatically and cyclically. If a new signaling unit comes, the
retransmission will stop and this new unit will be sent first. In this method,
active cyclic retransmission is used and thus negative acknowledgement is not
used in PCR.

y Note:

Upon SL configuration, the system requires correct error correction methods. The
system requires real-time information transfer with little delay; therefore the basic error
correction method is selected.

1.3.2.4 Initial alignment

The initial alignment process is the control program to be used in the initial application
or in SL recovery after a fault. The whole process includes 4 statuses: Idle, not aligned,
aligned and proving. According to different proving cycles, the process can be divided
into normal initial alignment and urgent initial alignment. The selection is done by the
third hierarchy.

During initial alignment, signaling terminals at both ends need to exchange link status
information via the following four alignment status indications:

· SIO: Used to start a SL and to inform the local end to prepare to receive link
signals of uncertain type.

· SIN: Used to indicate received SIO signal from the peer end and the started local
signaling terminal, and to inform the peer end to activate the normal proving

12
Chapter 1 SS7 System

process.

· SIE: Used to indicate the received SIO signal from the peer end and the started
local signaling terminal, and to inform the peer end to activate the emergent
proving process.

· SIOS: Used to indicate link signals which cannot be sent or received via the SL.
During initial alignment, the alignment process will experience the following statuses:

1) Idle status

It is the initial status of the initial alignment process while not working.

2) Not aligned

In the idle status, the local end sends SIO to the peer end indicating that the
initial alignment process starts and the status will change to “Not aligned".

3) Aligned

Once a response (SIO, SIN or SIE) is received in the not-aligned from the peer
end, the status will change to “Aligned”, and SIN or SIE will be sent to the peer
end according to the setting of the local third layer.

4) Proving

In the aligned status, if SIN or SIE is received from the peer end, the status will
change to proving.

In the proving status, the local end monitors the error rate of a signaling unit received
from the peer end. If the error rate is acceptable, the proving is completed and the local
end will then send a FISU message to the peer end. When it receives FISU or MSU
from the peer end, the signal link will enter the “Service Activated” status. If the error
rate appears unacceptable within five times, this link will be considered unable to
complete the initial alignment process and will be changed to the idle status.

1.3.2.5 SL error rate monitoring

This function is used to monitor the error rate of a SL to ensure good service quality.
When an error rate of a SL reaches the threshold, this link will be judged as faulty.

Two error rate monitoring processes are available for different signal environments.
One is signaling unit error rate monitoring which is used after service is activated on
the SL, while the other is alignment error rate monitoring which is used when the SL is

13
CM3G-202-E1 SS7 Signaling System

in the proving status during initial alignment.

1.3.2.6 Second layer traffic control

Traffic control is to handle the congestion status at the second layer detected to prevent
the congestion of signal links from spreading, and finally recover the normal working
status of the links.

When the receiving end of a SL detects a congestion, it will stop proving (positive or
negative) the message signaling units, and sends a link status signaling unit SIB to
enable the peer end to judge whether it is a congestion or a fault. When the congestion
is cleared at the receiving end, SIB will not be sent and the link status is recovered to
normal.

1.3.2.7 Processor fault

If a SL cannot work due to problems at the second or higher functional layer, the
processor will be considered as failed. In this case, signal messages cannot be sent to
the third or fourth layer. The possible reason is that the central processor is faulty or
one SL is blocked manually.

When the second layer receives an indicator from the third layer that the third layer is
faulty, it will consider the local processor is faulty and begins to send SIPO to the peer
end. Meanwhile, it will discard the message signaling units received afterwards. When
the processor fault is cleared, the second layer will stop sending SIPO and resume
sending signaling unit, and then the SL will enter the normal status.

1.3.3 Signaling Network Functional Layer (MTP3)

This is the third functional layer in the SS7 system. It defines the information transfer
functions and processes in the signaling network. All SL share this functional layer.

The functions of the signaling network are divided into two categories: signaling
message handling function and signaling network management function. The former
guides signaling messages to reach the right SL or user part; while the latter controls
the message route or signaling network structure based on the preset status data and
information related with the signaling network, so that the reorganized network
structure can be controlled to save or recover the normal message transfer capability.

1.3.3.1 Signaling message handling (SMH)

SMH is used during signaling message transfer to ensure that the signaling message
14
Chapter 1 SS7 System

sent by a user part at the OSP can be transferred accurately to the corresponding user
part at the DSP. SMH involves three parts of functions: message routing, message
discrimination and message distribution. Their structure relationship is shown in Fig
1.3-1.

Fig 1.3-1 SMH Functional Structure

1. Message discrimination (MDC)

MDC is used to receive messages from the second layer and determines the
destination according to the DPC contained in the message, if the DSP of the
message is the local signaling point then the message will be sent through the
MDC function to the message distribution functional part. Otherwise, the
message will be sent to the message routing part through the MDC function for
transfer. The latter case means that the local signaling point has the Signaling
Transfer Point (STP) function

2. Message Distribution (MDT)

MDT distributes the message received from MDC according to the service
indication code SIO of the service information field in the signaling unit to the
corresponding user part, signaling network management and test & maintenance
part. All messages arriving at the MDT should be received by the local signaling
point.

3. Message Routing (MRT)

MRT implements message route selection. Namely, it selects a SL for a


signaling message according to the information (DPC and SLS) contained in the
route flag, so that the signaling message can be sent to the DSP.

15
CM3G-202-E1 SS7 Signaling System

1) Message source

The following types of messages can be sent to the message route:

· User signaling messages from the fourth layer;

· Messages sent from the MDC of the third layer SMH and to be transferred
(when used as STP);

· Messages generated by the third layer. These messages are sent from signaling
network management and test & maintenance function including signaling route
management message, SL management message, signaling traffic management
message and SL test control message.

2) Routing

For messages to be sent, please first check if the route to its DPC is available or
not. If unavailable, send “To-Unreachable-SP-Message-Received” to the
signaling route management part in the signaling network management. If the
route to the DPC is available, please select a SL in the load-sharing mode and
transfer the messages to be sent to second.

8 Tips:

Load sharing for signaling links:

In the message route high reliability is required for signal message transfer. Normally
there are more than one routes to the destination. The load sharing mode is used
according to SLS whichever link is used. Load sharing is implemented in two methods:
1) By different signaling links within the same link group.

2) By signaling links of different link groups.

Above is a brief introduction of the three different functions of MTP3 during signaling
message handling. The implementation of the third layer function must be based on
some flags attached with the signaling messages such as DPC and SLS. They are the
route flags existing in the signaling messages, the mandatory route label of each
signaling message. The following part will give a detailed description of these route
flags:

1.3.3.2 Route flags

The route flag is located in the beginning of a SIF in MSU, as shown in Fig 1.3-2:

16
Chapter 1 SS7 System

SIF
Message data label
H1H0

SLS OPC DPC

4 14 14
Route label

(a)

SLS OPC DPC

4 4 24 24
Route label
(b)

Fig 1.3-2 Route Flags

A route flag contains the following contents:

· DPC: Destination Point Code

· OPC: Originating Point Code

· SLS: Signaling Link Selection

DPC is the code of the DSP at which a message should arrive. OPC is the code of the
Originating Signaling Point (OSP). As shown in Fig. 1.3-2(a), the route flag contains
32 bits; DPC and OPC contain 14 bits each, while SLS contains 4 bits. The route flags
adopted in China are shown in Fig.1.3-2(b): DPC and OPC contain 24 bits each, SLS
contains 4 bits while another 4 bits are reserved.

For TUP signaling messages related with circuits and SLS uses the lowest 4 bits of the
CIC that indicates which circuit the signaling message belongs to.

y Note:

Internationally 14-bit signaling codes are used. In China 24-bit coding mode is used for
most signaling points. The 14-bit signaling point code is also used in China but very
seldom. Related details are available in the part about the signaling network.

The CIC code will be described in the related chapter.

17
CM3G-202-E1 SS7 Signaling System

The above description can also be supported with a simple example in the postal mail
service.

Suppose a mail is the message to be transferred. The recipient’s address is the DPC of
the message, while the recipient’s name is the message user. The sender’s address is the
OPC of the message, which is used as the label in the case of delivery failure. When
the mail is sent to the post office box, it will be sorted out by the working personnel as
local or foreign mail. If it is a local mail, it will be handled by the local delivery
personnel to the corresponding user. If it is a foreign mail, a route (by air, land or by
sea) will be selected for it according to the actual destination, and then it will be sent to
the railway station, port or airport.

In this example, the functions of MTP3 are completed by the post office. The MDC
function is the personnel sorting mails. The MDT function is the mailman and the MRT
function is postman.

1.3.3.3 Signaling network management

Based on known signaling network status data and information, the MTP3 controls
message routes and signaling network structure to reorganize the signaling network if it
becomes faulty, and to recover the normal transfer capability for signaling traffic. This
signaling network management function consists of three functional processes:
Signaling traffic management, SL management and signaling route management.

The following eight potential events may affect the link status: SL faulty and recovered,
SL disconnected and connected, SL blocked and unblocked, SL disabled and enabled.

1. Signaling traffic management

This function can be used to transfer signaling traffic from one link or route to
another link or route or several different links or routes, or in the case of
signaling point congestion to reduce signaling traffic. It involves the following
processes:

· Switchover

· Change back

· Forced rerouting

· Controlled rerouting

· Signaling point restart


18
Chapter 1 SS7 System

· Management blocking

· Signaling traffic flow control

1) Switchover

When a signaling route becomes unavailable due to fault or blocking, the


switchover program can be used to transfer the signaling traffic from this SL to
another one or more SL as fast as possible. In this case this program should not
cause message loss, repetition or wrong sequence.

As shown in Fig 1.3-3, Link A-B is faulty, so the switchover process is


implemented at both signaling points A and B.
B
fault
故 障

倒换
倒换switch
over

A D

倒换命令/倒换证
C

Fig 1.3-3 Switchover Process

2) Change back

Change back is the opposite of switchover. It tries to change the replaced SL


back to the original link as fast as possible. During this period message loss,
repetition and wrong sequence are not allowed.

3) Rerouting

When a route to a given destination is unavailable, this program can be used to


transfer the signaling traffic to the destination to a new signaling route to
minimize the influence from the fault.

As shown in Fig 1.3-4, along the route A-D there are two links AB and AC. If
the link BD becomes faulty, the service from A to D cannot be transferred via B
to D. In this case, B will notify A and A will implement the rerouting program by

19
CM3G-202-E1 SS7 Signaling System

force to transfer all services for the link A-D through the link A-C, so that the
services can be transferred to D via C.

B
故 障

A D

Fig 1.3-4 Forced Rerouting

4) Controlled rerouting

When the signaling route to a given destination becomes available, this program
can be used to transfer the service from the replaced signaling route to the
normal signaling route. The action of this program is the opposite of that
completed by the forced rerouting program.

5) Blocking management

When a SL is frequently switched over within a short time or the error rate of a
signaling unit is too high, this program can be used to indicate the UP
(generating signaling traffic) that this link is unavailable. Blocking management
is a measure to manage signaling traffic. In the blocking management program,
the SL flagged as “blocked” but still it can send maintenance and test message
for cyclic test.

6) Signaling point restart

When both A-B and A-C links are faulty, the signaling point A becomes isolated
in the signaling network. It is unreachable to B, C, D and E. In this case, the
change or reorganization of the signaling network is unknown to A. If A-B or
A-C becomes available, the signaling point A can execute the signaling point
restart program, and signaling points B and C can execute the adjacent signaling
point restart program, so that the route data of A can be synchronized with the
real-time status of the signaling network, and B, C, D and E can modify their

20
Chapter 1 SS7 System

route data to arrive at A, as shown in Fig 1.3-5.

E
B

A D

Fig 1.3-5 Signaling Point Restart

7) Signaling traffic flow control

When the signaling network is unable to transfer signaling traffic generated by


users due to network failure or congestion, the signaling traffic flow control
program can be used to limit the signaling traffic from the originating point of
signaling traffic.

2. Signaling route management

This function is used between signaling points to exchange information


whether a signaling route is available or not and to block or unblock a signaling
route. Procedures such as transfer prohibited, transfer-limited and
transfer-allowed are used to transfer information between signaling routes about
available, unavailable and limited statuses.

· Transfer prohibited (TFP)

When a signaling transfer point (STP) needs to notify its adjacent signaling
points that it can not transfer signaling traffic to a DSP, the transfer-prohibited
procedure will be activated to send a transfer-prohibited message to the adjacent
signaling points, so that the signaling point receiving this message will
implement forced rerouting.

As shown in Fig 1.3-6, STPB detects a fault on the BD route, so it executes the
TFP procedure and sends a transfer-prohibited (TFP) message about D to the
signaling point A. Then A executes the forced rerouting program and switch over
all traffic of D to STPC for transfer.

21
CM3G-202-E1 SS7 Signaling System

B
Fault
TFP

A D

Fig 1.3-6 Transfer-prohibited Procedures

· Transfer allowed (TFA)

The purpose of this procedure is to inform one or more adjacent signaling points
that the message transfer capability of this STP is recovered. As shown in Fig
1.3-7, the B-D link is recovered; STPB executes the TFA procedure and sends a
TFA message about D to adjacent points, while A activates the controlled
rerouting function.

B
fault
TFA

A D

Fig 1.3-7 TFA Procedure

· Transfer controlled (TFC)

The purpose of the TFC procedure is to transfer the congestion status


information from the congested signaling point to the OSP. Fig. 1.4-8 shows the
process of TFC.

When STPB detects congestion between B and D, it sends a TFC message about
D to A. After receiving the message A will inform the UP to reduce the traffic to
D.

22
Chapter 1 SS7 System

B
Congest
TFC

A
D

C
Fig. 1.4-8 TFC Procedure

· Signaling-route-set test

The purpose of this test is to test whether the traffic can be transferred via an
adjacent STP or not. When the signaling point receives a TFP message from an
adjacent STP, it will start a cyclic route-set test.

· Signaling-route-set-congestion-test

The purpose of this test is to check if it is possible to send a signaling message


of a congestion priority to the destination.

3. Signaling link management:

This function is used to control all SL connected with the local end including the
connection, recovery and disconnection of SL. It provides methods to establish a
SL set and maintain it in the normal working status. When a SL is faulty this
function can recover the capability of the SL set according to the automatic
degree of the equipment for signaling distribution and reorganization. SL
management can be divided into three procedures: basic SL management
procedure and automatic allocation signaling terminal procedure, automatic
distribution signaling terminal and signaling data link procedures.

The basic SL management procedure is set according to manual distribution SL


and signaling terminal. Namely, the connection relationship between signaling
data links and signaling terminals is set according to office data. It can be
modified through man-machine commands. This procedure is the main SL
management method available currently. The two procedures are seldom used
and not required by the China national standard.

23
CM3G-202-E1 SS7 Signaling System

1.4 Signaling Connection Control Part

1.4.1 Overview

The description of the MTP layer shows that its addressing capability is based on the
DPC. MTP transfers messages to the designated destination and then distributes them
to the designated UP according to the SI. But along with the telecommunication
network development, more and more network services require to send point-to-point
control information between remote nodes. This information is unrelated with call
connection circuits and even unrelated with calls. For example, the information related
with roaming and authentication transferred among MSC, VLR and HLR in the digital
mobile communication network is transferred between SSP and SCP. However, the
address function of MTP cannot meet the requirement.

In the hierarchical structure of the SS7 mode, SCCP belongs to the MTP user part, and
provides MTP with route and routing functions based on the Global Title (GT). This
enables it to transmit various information unrelated to circuits and information between
exchanges and specialized centers in the telecom network through the SS7 signaling
network and to set up connectionless or connection-oriented services. If the data that
the user wants to transmit exceeds the limit of MTP, SCCP will provide the necessary
functions for segmentation and re-assembly. SCCP belongs to the third layer of the SS7
network. It implements the supplementary addressing functions for MTP3. Namely
working together with MTP3, it provides network layer functions similar to the OSI
reference model. To open services such as ISDN point-to-point supplementary services,
IN services, roaming and frequency handoff for mobile phones, and short message
services, the SCCP function must be added at all signaling points in the SS7 network.

y Note:

“User” is a frequently-mentioned noun. It has relative meanings. The previous


description emphasized that the SS7 network is a hierarchical structure, in which the
hierarchy No.N+1 is the user of the hierarchy No. N, while hierarchy No.N-1 is the
service provider of hierarchy No. N. SCCP is based on the MTP therefore, it is the user
of MTP, while it is the service provider of TCAP. This principle is the valid in the
whole system.

1.4.1.1 Limitations of MTP

The above description tells the origin of SCCP, but what are the aspects where MTP

24
Chapter 1 SS7 System

cannot meet the requirements of modern communication? This question leads to the
limitations of MTP, which are reflected through the following four aspects:

· The SPC is not internationally unified, so it is short of the global meaning

The code for each number is related only with a given domestic network. For
connection with another domestic network, this code cannot be identified. In
some cases, for example, a mobile subscriber roams to another country; its
location information should be updated. When it searches for its HLR, the
signaling point cannot be correctly addressed.

· Unable to meet the addressing requirements of more subscribers

For a signaling point, the SI code has only 4 bits and can be allocated to 16
subscribers at most, but actually more than 16 subscribers need the code.
Therefore MTP cannot satisfy the addressing requirements of more subscribers
as shown in Fig 1.4-1.

SSF SI

4bit 4bit

SIF SIO

Fig 1.4-1 SIO Message Bit

· Unable to satisfy the multi-service development of the telecom network

MTP can only provide connectionless datagram service, but the development
trend of the telecom network is to transmit a lot of non-real-time messages (such
as charging files) between network nodes. These messages contain enormous
amount of data and require high reliability. They require virtual circuit
connection between network nodes to implement connection-oriented data
transmission.

· MTP only supports link-by-link transfer, instead of end-to-end transmission.

1.4.1.2 Features of SCCP applications

· Transmit various signaling messages, unrelated with circuits.

· Provide routing functions based on GT and can implement direct signaling

25
CM3G-202-E1 SS7 Signaling System

transmission between various SS7 networks globally connected.

· Provide both connectionless and connection-oriented services.

According to the hierarchical structure of the SS7 network, the users of SCCP
are ISUP (ISDN user part) and TCAP (transaction capability application part).
ISUP implements end-to-end message transfer and supports related ISDN
supplementary services. TCAP provides perfect network layer functions through
SCCP and MTP3 to implement remote transmission of messages currently
available and unrelated with future circuits. It also supports various new service
functions such as wireless mobile communication and IN services.

1.4.1.3 Module structure of SCCP

The functional modules of SCCP are shown in Fig 1.4-2: Each SCCP consists of four
functional modules:

· SCCP routing control

· Connection-oriented control

· Connectionless control

· SCCP management
SC C P
subscriber C onnection-oriented M TP
m essage
SC C P connection-oriented
N _transfer transfer control
prim itive R outing error
SC C P routing
control m odule
N on-connection M T P-
m essage (SC R C )
transfer
prim itive
SC C P non-connection transfer
control m odule (SC L C ) R outing error
N _transfer
prim itive

R eceiptof useless
m essages of
SOR SOG SSA SSP SST subsystem sentto
this node

M T P_
N _m anage- m anage-
m ent SC C P m anagem ent control m odule (SCMG) m ent
prim itive prim itive

Fig 1.4-2 SCCP Functional Module Structure

SCCP routing function implements routing for connectionless and connection-oriented

26
Chapter 1 SS7 System

traffic messages. It receives messages sent by other functional modules of MTP and
SCCP for routing, and then sends the messages to other functional modules of MTP or
SCCP. The connectionless control part uses SCCP and MTP routing control to directly
transfer data in the signaling network according to the caller’s address, and uses the
routing control function to set up signaling connection to the destination and then
transfers data through the established signaling connection. After transfer, it will
release all signaling connections. The SCCP management part provides some functions
beyond the capability of the management part of MTP.

1.4.1.4 Network services provided by SCCP

The following part will be focused on two questions:

What are connectionless and connection-oriented services?

What are connectionless and connection-oriented services provided by SCCP to users?

The connectionless service is similar to the datagram service in the packet switching
network, while the connection-oriented service is similar to the virtual circuit service in
the packet switching network. Specifically the following four protocols are available:

· Category 0: Basic connectionless service.

· Category 1: Sequential connectionless service.

· Category 2: Basic connection-oriented service.

· Category 3: Traffic control connection-oriented service.

1) Connectionless service

In this service, signaling messages can be transferred without an existing


connection. The data information transferred is used as an independent message
and sent to the DSP indicated in the link flag. In the basic connectionless service,
all messages are transferred independently, without any relationship among them.
Therefore, it cannot be ensured that the messages are sent to the DSP in the
sending sequence. In the sequenced connectionless service, the data message
from the same information is attached with the same SL selection field, so as to
guarantee that these data messages will be transmitted via the same SL.
Therefore, they can arrive at the DSP according to their sending sequence. Each
time the data is sent by a connectionless service, rerouting is required.

The transmission process of the connectionless services is shown in Fig 1.4-3:


27
CM3G-202-E1 SS7 Signaling System

N ode 1 N ode 2

SC C P1 SC C P2

U D T

Fig 1.4-3 Connectionless Service Transmission

The specific operation is as follows:

The originating node SCCP subscriber sends out N_unit data request, primitives
to request the connectionless data transfer service. Then the SCCP route control
and MTP are used to send the unit data message to the called address, in the unit
data request primitives.

When the unit data message cannot be sent to the destination point, the Unit
Data Service (UDTS) message will be sent to the originating point; when the
destination node receives UDTS message, it sends N_unit data indication
primitive; when SCRC cannot send the unit data or UDTS message, it will send
one UDTS message to the address of the caller or call N_notice indication
primitives.

When the data length in the N_unit data request primitive is longer than X (X is
temporarily set as 200), UDT message cannot transmit the data for so large
quantities. Therefore, the data has to be divided into several shorter segments,
each transmitted via an XUDT message. Accordingly, when SCCP receives an
XUDT message, the divided data must be reassembled to form one N_unit data
indication primitive and then sent to the SCCP subscriber. This process is called
as segmentation/reassembly.

2) Connection-oriented services

In this kind of services, a logical connection should be established prior to data


transmission. In the basic connection-oriented services, no data message carries
a serial number, so neither sequence control nor flow control can be realized. In
the connection-oriented flow control service, however, sequence control and
flow control can be performed.
28
Chapter 1 SS7 System

Fig 1.4-4 shows the connection-oriented transmission process:


N ode 1 N ode 2

SC C P1 SC C P2

C onnection request
C onnection acknow ledgem ent
D ata
D ata
C onnection release (R L SD )
C onnection com pleted (R L C )

Fig 1.4-4 Connection-oriented Transmission

This connection involves the following parts:

A) Connection setup process

When the SCCP function of the originating node receives the request
N_ConnectReq of a signaling connection, it analyzes the called address to
identify the destination node to which the signaling connection should be set up.
If the destination node is not a local node, SCCP will perform MTP functions to
send a Connection Request (CR) message to the DSP.

When the SCCP of the destination node receives a CR message, it sends


N_ConnectInd primitives to the subscriber. If the subscriber agrees to establish a
connection, an N_ConnectRes primitive will be invoked and SCCP will send a
Connection Confirmation (CC) message to the originating node; if the
subscriber does not agree, an N_ConnectReq primitive will be invoked and
SCCP will send a Connection Rejection (CREF) message to the originating
node.

This mechanism also involves the negotiation for protocol type and flow control
credit. Besides, the SCCP of the originating node, the destination node, and the
intermediate nodes should record the necessary information of this signaling
connection so as to set up the logical signaling connection link.

29
CM3G-202-E1 SS7 Signaling System

The setup and rejection process of signaling connection is shown in Fig 1.4-5.

SCCP用户 SCCP用户

N_ConnectReq N_ConnectCon N_ConnectInd N_ConnectRes

CC CC
SCCP SCCP SCCP
CR CR

Signal connection process

SCCP用户 SCCP用户

N_ConnectReq N_ConnectInd N_ConnectReq N_ConnectRes

CREF CREF
SCCP SCCP SCCP
CR CR

Fig 1.4-5 Signaling Connection Process

B) Data transfer process

Data transfer functions ensure that subscriber’s data can be transferred in


temporary signaling connections. The functions provided here include
segmentation and reassembling, flow control, inactivity control and accelerated
data transfer. Segmentation and reassembling are to segment subscriber data if
the length is longer than 255 octets, insert them into the data parameters of DT1
or DT2 and then reassemble them with the multi-data indicating codes (M bits)
at the receiving end.

Flow control means to control message flow with a sliding window when the
protocol is the flow control connection-oriented service.

The purpose of inactivity control is to prevent:

Loss of “connection confirmation” during the connection setup

Unnoticed termination of connection segments during data transfer.

Inconsistency of the connection data held at both ends of one connection.

Whenever the connection section sends a message, the inactivity controller for
30
Chapter 1 SS7 System

sending should be reset; when the timing of the inactivity control timer expires,
the connection release process should be started.

Accelerated data transfer occurs when the protocol type is the flow control
connection-oriented service, and the minimum transferred data amount up to 32
octets, with a high rate requirement (neither flow control, nor providing
segmentation and reassembling functions).

C) Connection release process

To activate and terminate connection release, two kinds of messages are needed:
RLSD and RLC. The release process can be initiated by the SCCP users or by
SCCP. Besides the release of the logical links and local references, the release
process should also be able to freeze the local references in order to prevent the
startup of processes unsuitable for the present connection, due to the reception
of messages related to the established connections.

D) Recovery process

The purpose of the restoration process is to re-initialize the connection segment,


to reject data messages; data confirmation messages, accelerated data messages
and accelerated data confirming messages, to set the sending sequence number
P(S) to 0 and to restore the window value to the original value.

8 Tips:

OSI defines the information exchanged between adjacent layers N+1, N and N-1 in a
hierarchical structure as service primitive. In the SS7 system, the primitives defined by
OSI are used to form the four demotions of messages: Request, indication, response
and confirmation, the directions are shown in the following:

For a SCCP subscriber, information exchange between it and a remote node is in


compliant with this mechanism.
31
CM3G-202-E1 SS7 Signaling System

1.4.1.5 Basic functions of SCCP

1. Additional addressing function:

The MTP can indicate 16 subscribers at most. For SCCP, it can only indicate
SCCP subscribers, but cannot indicate the specific users of SCCP. Through the
SSN, more SCCP subscribers within a signaling point can be identified. The
SSN is defined with 8-bit binary code. At most 256 different subsystems can be
defined. Table 1.4-1 specifies the SCCP subscribers.

Table 1.4-1 SCCP Subscribers

Value Description
0 Excluding SSN
1 SCCP management
2 Reserved
3 ISDN User Part
4 OMM part
5 Mobile User Part
6 HLR
7 VLR
8 MSC
9 EIR
10 AUC
11 Reserved
12 INUP
12~252 Reserved
253 BSS OMAP
254 BSSAP

2. Address translation function

SCCP can implement addressing according to two kinds of addresses:

· DPC+SSN

· GT

DPC is the destination signaling point code of MTP. SSN is used to identify
different SCCP subscribers within the same node.

32
Chapter 1 SS7 System

Global Title (GT) can be SCCP address denoted with various numbering plans
(such as telephone / ISDN numbering plan). Flexible routing via GT is an
important feature of SCCP. GT and DPC are different: DPC is valid only in the
defined signaling network, while GT is valid in the global scope and it has a
much larger address scope than DPC. Therefore, messages unrelated with
circuits can be transferred directly between any two signaling points in the
global scope. GT is normally used when the DPC is unknown to the originating
node, but the SCCP must translate the GT into a combination of the DPC+SSN
and the new GT before sending it to MTP, so this address can be used for
message transfer.

1.4.1.6 SCCP management functions

The SCCP management function (SCMG) is to re-select signaling routes or adjust


signaling traffic when failure or congestion occurs with a signaling point and its
subsystem to ensure the normal performance of the signaling network. The subsystem
here actually refers to an SCCP user. The SCCP management function is applicable to
connectionless services and connection-oriented services. It can be divided into two
sub-functions according to its management objects:

· Signaling point status management: It modifies the address translation table of


the SCCP and the status of a node or a subsystem based on the signaling
messages provided by MTP, so that subscribers can manage to resend or reduce
signaling messages sent by some signaling points.

· Subsystem status management: It serves to modify the address translation table


of SCCP, update the status labels and implement the changeover and change
back of signaling information between the active/standby subsystems, according
to the received information about subsystem failure, exit service and recovery.

The implementation of SCCP management function depends on the acquisition of the


information of the signaling point and the subsystem status. But the signaling point
status is managed by the third layer of MTP, so information related to the failure,
recovery, and congestion of signaling points is notified by MTP to SCCP, while
information on the subsystem failure and recovery is notified by SCCP in the form of
SCMG messages to various related nodes.

33
CM3G-202-E1 SS7 Signaling System

1.4.2 SCCP Message Structure

Once receiving a primitive request from a subscriber, SCCP will encapsulate the
subscriber’s data together with necessary control and routing information into a SCCP
message according to the primitive parameter and then send it to the corresponding
SCCP entity at the remote end.

ITU-T has specified 23 kinds of messages for SCCP, including 4 kinds for
connectionless services, 14 kinds for connection-oriented services and 5 kinds for
SCCP management.

1.4.2.1 SCCP service categories

1) Connectionless services:

· Unit Data (UDT): Used to transmit user data.

· Unit Data Service (UDTS): When a UDT message cannot be correctly


transmitted to a subscriber and is required to be returned, the causes for the
transmission error are indicated through UDTS.

· Expanded Unit Data (XUDT): When the data volume to be transmitted is greater
than the volume that can be carried by a message signaling unit, SCCP will
segment the subscriber data and then transmit the data with multiple XUDT
messages, while the receiving SCCP will reassemble the data and then send the
data to the subscriber.

· Expanded Unit Data Service (XUDTS): When a XUDT message cannot be


correctly transmitted to a subscriber and is required to be returned, the causes for
the transmission error are indicated through XUDTS.

2) Connection-oriented services:

Connection Request (CR): The originating SCCP sends a message requesting for
a signaling connection.

Connection Confirmation (CC): When the destination node allows for the
connection, it sends a CC message to the SCCP and informs it to establish a
connection.

Connection Refused (CREF): A negative message against the connection request,


refusing to establish the connection.

Release Disconnected (RLSD): The resources of the sending side have entered
34
Chapter 1 SS7 System

the disconnected and reserved status, which requires the other side to release the
related resources.

Release Completed (RLC): The response of a connection release message,


which means that the RLSD has been received and all related connections have
been released.

Data Form 1 (DT1): It is used in the protocol category 2 to send subscriber data
from one end of the SCCP to the other end of SCCP.

Data Form 2 (DT2): It is used in the protocol category 3.

Data Acknowledgement (AK)

Expedited Data (ED)

Expedited Acknowledgement (EA)

Reset Request (RSR)

Reset Confirmation (RSC)

Protocol data unit error (ERR)

Inactivity Test (IT)

1.4.2.2 SCCP message formats

SCCP messages are encapsulated in SIF fields and transferred in the signaling network
through MSU, as shown in Fig 1.4-6:

35
CM3G-202-E1 SS7 Signaling System

F B
F CK SIF SIO LI I FSN I BSN F
B B
the third layer Send direction

Signal network management H1 H0 SLS OPC DPC

TUP CIC
TUP data H1 H0 OPC DPC
SLS

ISUP ISUP data message type CIC SLS OPC DPC

SCCP message SCCP


EOP message type SLS OPC DPC
data head·

COMPONENT SUBLAYER
transaction
TCAP COMPONENT3 COMPONENT2 COMPONENT1 handling

Fig 1.4-6 Encapsulation Structures of all Messages in MSU

1) Message types

The message type is the message category described above. It consists of an


octet set, defining the function and format of each SCCP messages in a uniform
manner. It is also necessary for all messages. Currently only 4 kinds of
connectionless services are used in the MAP:

UDT is used to transfer unit data; UDTS is used to report the reasons for
delivery failure of unit data; XUDT is used to transfer enhanced unit data;
XUDTS is used to report reasons for delivery failure of XUDT. They are
explained in the previous section.

2) Address code formats

SCCP is used for addressing in the network. To address correctly, the


corresponding address information is necessary at the SCCP layer. The address
information is encapsulated in a SCCP message structure in a specified format.

In a SCCP message, the calling address and called address are made up of two
parts: address type indicator and address information. It is the combination of
several octet sets. The format of the address information part determines the
36
Chapter 1 SS7 System

address indicator code. The formats of calling and called addresses of the SCCP
are shown in Fig 1.4-7. The address type indicator is an octet set. Its format is
shown in Fig 1.4-8.

Fig 1.4-7 Formats of SCCP Calling and Called Addresses

Fig 1.4-8 Format of Address Indicator

Bit 1(signaling point indicator): “0” excluding SPC; “1” including SPC

Bit 2(subsystem indicator): “0” excluding subsystem; “1” including subsystem

Bit 3~6(GT indicator)

The “0000” address field does not include GT

The “0001” GT includes only the address attribute indicator

The “0010” GT includes only the translation type

The “0011” GT includes translation type, numbering plan and coding mode

The “0100” GT includes translation type, numbering plan, coding mode, and
address attribute indicator

All the rest are reserved.

Bit 7 (routing indicator bit): “0”, routing by GT; “1”, routing by DPC+SSN;

Bit 8: Nationally reserved

Fig 1.4-9 is an interface for GT data configuration. This interface indicates that
to implement GT addressing, whether the above information is included in the
address must be specified upon GT data configuration: the information could be

37
CM3G-202-E1 SS7 Signaling System

SPC, SSN, addressing mode, and the information contained in the address
information GT.

Fig 1.4-9 GT Data Configuration Interface

8 Tips:

It must be emphasized that if GT addressing is selected, the GT indicator must be


selected as 4 and the GT contains the address information coding method. Namely, the
address information of SCCP must contain the translation type, numbering plan, coding
mode and address attribute indicator. If the DPC+SSN addressing mode is selected, the
GT indicator should be selected as “0” and its address field should not contain the GT.
Namely, if the DSP is known, it is unnecessary to use GT routing.

The following example demonstrates the formats of the calling and called
addresses of SCCP, with GT=0100 (GT=4). When the GT indicator is selected
as 0100, it contains the translation type, numbering plan, coding mode and
address attribute indicator. Its specific address information is shown in Fig
1.4-10:

38
Chapter 1 SS7 System

Fig 1.4-10 GT Format (GT=4)

a) Translation type (8 bits): Indicating the GT translation function – translating a


message address into different combinations of new DPC, SSN and GT. When a
different translation type is used, “0” should be filled in the translation type
field.

b) Numbering plan (4 bits): Indicating which numbering plan is used in the


address information.

0000 not defined

0001 ISDN/telephone numbering plan (E.164)

0010 Reserved

0011 Data numbering plan (X.121)

0100 User telegram numbering plan (F.69)

0101 Maritime mobile numbering plan (E.210)

0110 Land mobile numbering plan (E.212)

0111 ISDN/mobile numbering plan (E.214)

All the rest are reserved

c) Address attribute indicator (7 bits): Indicating the number attribute of this


address. The specific coding methods are as follows:

0000000 Idle

0000001 Subscriber number

0000010 Nationally reserved

0000011 Nationally valid number

39
CM3G-202-E1 SS7 Signaling System

0000100 International number

Other Idle

8 Tips:

In the CDMA system two translation types are available: 0 and 128, used to address
HLR and MC respectively. Two numbering plans are used: ISDN/telephone numbering
plan (E.164) and land mobile numbering plan (E.212), while all address attribute
indicators are presented in international numbers.

1.4.2.3 SCCP routing

As shown in Fig. 5.4-2, the routing control function of SCCP is to select routes
according to the called address contained in the SCCP message. The messages it
receives may be the messages sent by other nodes from the MTP layer or the messages
sent by connection-oriented or connectionless control.

1. Handle SCCP messages transferred by MTP

Messages transferred by MTP can be divided into three types:

· Various connectionless messages

· CR messages

· Connection-oriented messages (excluding CR messages)

MAP only uses connectionless services therefore only connectionless messages


are described here. Any kind of connectionless message must contain a
parameter “called address". This parameter is used for routing. The route
indicator is the basis to determine routing.

1) If the route indicator is 1 (routing according to DPC+SSN), it means that the


local node is the destination of the message. In this case, please carefully check
the status of the subsystem. If the subsystem is available, please forward this
message to connectionless control or connection-oriented control. If the
subsystem is unavailable, please activate the message return program (for
connectionless messages).

2) If the route indicator is 0 (routing according to GT code), GT code translation is


necessary and routing will be based on the translation result. In this case,
following conditions may be possible:

40
Chapter 1 SS7 System

· If GT translation is available, and the result is routing according to SSN: If the


DPC is for the local node, please handle messages as described in 1); If the DPC
is not for the local node and the all remote DPC, SCCP and SSN are available,
please transfer the messages to the MTP (for connectionless messages).

· If GT translation is available and the translation result is routing according to GT,


the translation function must provide information (DPC, OPC, SLS and SIO)
required by the MTP for message transfer, namely to specify the address of the
next translation node and then transfers the messages to MTP.

· If GT translation is unavailable, please activate the message return program


directly for connectionless service.

The node resources are limited, it is impossible for the SCCP of one node to
translate all GT; therefore, the originating end might translate GT into the DPC
of an intermediate node whose SCCP will then translation the GT into the DPC
of the destination. One message may involve several MTP.

The specific translation process is shown in Fig 1.4-11. Between the originating
node and the DSP, several intermediate nodes may exist. During translation,
SCCP first translates the information address sent from the originating node
according to the GT information into the DPC of the first intermediate node and
then sends the DPC to MTP. After the information arrives, the first intermediate
node will find that it is not the destination, so the next translation process will
begin. SCCP will translate the address information into the DPC of the second
intermediate node and sends it to MTP for transfer. The process continues like
this, until the destination node finds that the address of the message is the local
node, so the GT translation process can stop and the SCCP of the DSP will send
the message to the corresponding user according to the specific SSN.

How many intermediate nodes are involved in a GT addressing process is


determined by the specific signaling network structure and SL configuration.
The number is not fixed.

41
CM3G-202-E1 SS7 Signaling System

Fig 1.4-11 Translation Process of SCCP Node Information

1.4.2.4 SCCP Trace

Below the typical SCCP signal trace;

Every SCCP message “UDT” corresponds to a MAP message as shown in the above
trace. Every UDT message will show the following context;

SSN: Sub-System Number: for both Calling and Called party address

TT: Translation Type: usually “0” showing that the this UDT is intended for HLR

42
Chapter 1 SS7 System

Numbering Plan: Index 6 refers to E.212- Land Mobile Numbering Plan; it can also be
Index 1 referring to E.164- ISDN/ Telephony Numbering Plan.

Encoding scheme: 1 for ODD and 2 for EVEN

Nature of Address Indicator: usually set as “4”, meaning GT includes Translation Type,
Coding Plan, Number Mode and Address Attribute Indicator

Address Information: is the GT number itself, for example IMSI, MDN, MSV/VLR or
HLR Number

Route (via SCCP): Routing with GT or routing with DPC+SSN

Analyzing all UDT messages will determine the signal flow and information for all
MAP messages.

1.5 Transaction Capability Application Part


Transaction capability application part, TCAP for short, belongs to the SCCP user part
in the SS7 hierarchical structure. Its main purpose is to provide a uniform support for
various application services for information exchange in the network environment, to
transmit information unrelated with circuits, such as address translation information,
subscriber data information, accounting or management information between switching
nodes and control nodes. The TCAP signaling process is the handling and control
procedure over operations and sessions.

The TCAP user refers to various applications, such as mobile service application,
including the registration, activation and invocation of dedicated functional unit
supplementary service (free phone service) and exchange of signaling information
unrelated with circuit control (like Closed User Group). Its general purpose is to
provide session capability for information request and response.

The core of TC is based on remote operation. To provide agreed support for all
application services, TC extracts the information exchanging process between different
nodes as an "Operation” process. Namely, the user at the start node invokes a remote
operation, while the remote node implements this operation and sends the operation
result to the start node. To complete a service process, many operations may be
involved between the equivalent entities of the two nodes. The implementation
combination of these related operations form a session (transaction). The TCAP
protocol is a protocol for operation and session (transaction) management.

43
CM3G-202-E1 SS7 Signaling System

Currently in ZXC10-MSC/VLR (V3.0), TC supports INAP, and MAP as TC users.

1.5.1 Hierarchical Structure of TCAP

TC consists of component sub layer and transaction processing sub layer, as shown in
Fig 1.5-1.

T C -subscriber

T C -prim itive

C om ponent sub-
layer (C S L )

T R -prim itive TC

T ransaction sub-
layer (T S L )

N -prim itive

SC C P

M TP

Fig 1.5-1 Hierarchical Structure of TCAP

CSL — for operation management

TSL — for session management

CSL and TC - subscriber interface through TC-primitives

CSL and TSL - interface through TR-primitives

To implement operation and session control, TCAP is divided into the following two
kinds:

1.5.1.1 Transaction Capability Application Part Sub-Layer (TCAPTSL)

TCAPTSL serves to manage the transaction, i.e. the signaling communication process
between the local transaction sub layer users and remote transaction sub layer users.
The transaction sub layer user is the TR-user. The only TR-user known at present is the
44
Chapter 1 SS7 System

component sub layer. Communication between peer TCAPCSL is performed between


peer TC-subscribers called a session. So, in the currently defined TCAP protocol,
transaction is completely equivalent to the session with a one-to-one correspondence
between the two.

To complete the signaling process of one application service, two TC-subscribers make
a two-way exchange of a series of TCAP messages. The start, end, sequence and
message content of message exchanged are all controlled and explained by the
TC-subscribers. The TCAPTSL manages the starting, holdover and termination of the
session including detection and handling of abnormalities. The protocol process is
applicable to sessions of any application services.

1.5.1.2 Transaction Capacity Application Part Component Sub-layer (TCAPCSL)

The main functions of the TCAPCSL include operation management, component error
detection and session component assignment.

Normally, one operation means that the TC-subscriber initiates an invocation request
and the TCAPCSL sets up a status diagram for each operation to implement operation
management.

Component errors include protocol error and response timeout. Protocol errors exactly
refer to the inconsistency between the component type received by the component sub
layer and the expected input into the operation status diagram, syntax error or
unrecognizable on the component format. Response timeout refers to the timeout of
various operation timers.

TCAPCSL allocates session components through management of its session identity.

This part is only a brief description of the TCAP.

y Note:

In the CDMA system, TCAP is compliant with the American standard that is different
from the TCAP standard stipulated by ITU-T. They have the same functions, but are
different in some aspects such as primitive format and parameters.

1.6 Telephone User Part


The Telephone User Part (TUP) belongs to the SS7 application layer. It defines all
kinds of inter-office signaling required for telephone connection. For TUP, the message

45
CM3G-202-E1 SS7 Signaling System

signaling unit only transfers telephone signaling messages.

1.6.1 General Formats of Telephone Signaling Messages

In the description of SCCP messages, the messages are encapsulated in MSU for
transfer. For TUP messages the transfer method is the same. They are also encapsulated
in MSU for transfer, but the message structure is different, as shown in Fig 1.6-1.

Fig 1.6-1 Signaling Unit Format of Telephone Messages

The contents of telephone user messages are transferred in the SIF of MSU. The SIF
consists of three parts: route flag, header code and signaling information.

· The route flag is similar to the route flag in SCCP, as shown in Fig 1.6-2:

Fig 1.6-2 Route Flag in TUP

The difference between them is the CIC code. In a SCCP message CIC is a 4-bit
SL selection code, while it is different in a TUP message.

CIC is also called circuit identity code. It is assigned to various telephone voice
channels to indicate the circuits occupied by both ends. It is a 12-bit code. For
2048kbit/s digital channels, the lower 5 bits of the CIC are the timeslot code of a
voice channel, while its higher 7 bits represents the PCM system code between
OSP and DSP. For 8448kbit/S digital channels, the lower 7 bits are timeslot code
of the voice channel, while the higher 5 bits indicate the PCM system code
between OSP and DSP. Therefore, theoretically one SL can indicate 4096 voice
channels.

46
Chapter 1 SS7 System

y Note:

When configuring trunk circuits to adjacent offices, make sure that the CIC is
consistent with that of the adjacent offices; otherwise the voice channels may be
blocked.

· Header code

Any telephone signaling message has a header code used to indicate the type of
the message. The above figure shows that the header code consists of two parts:
H0 stands for the code of a message group, while H1 is the code of a specific
message. Details are available in related SS7 signaling manuals.

1.6.2 TUP signaling process

In a PSTN network, the signaling transferred during voice channel connection between
two exchanges is TUP signaling. The following is a typical successful calling process
demonstrating the messages used in a calling process.

1.6.2.1 Clear forward signaling process

As shown in Fig 1.6-3:

node1 node2

IAM

GRQ

GSM

ACM

ring

ANC

CLF

RLG

Fig 1.6-3 Clear Forward TUP Signaling

Initial Address Message (IAM): The first message sent to set up a call. It contains all

47
CM3G-202-E1 SS7 Signaling System

information of the called party to set up a call and specify a route, including the called
number.

General Request Message (GRQ): Send a request to the calling party and the type of
the calling party.

General forward Set-up information Message (GSM): It appears together with GRQ as
the response to GRQ.

Address Complete Message (ACM): It indicates that all related information from the
calling party to the called party has been collected. After the ACM message is received,
the outgoing office should connect all voice channels.

Answer signal and Charge message (ANC): It indicates that the called party has
hooked off to answer and the originating switch begins the charging program.

Clear Forward signal (CLF): CLF is the signal executed at the first/highest priority. At
any time during a call, even when the circuit is in the idle status, once a CLF signal is
received, the circuit must be released and a RLG signal is sent out.

RLease Guard signal (RLG): It is the response to CLF to release a circuit.

1.6.2.2 Clear backward process

As shown in Fig 1.6-4, the differences between clear forward process and clear
backward process can easily be revealed.

This calling process is different from the previous one: When the signaling is sent to
the opposite exchange an IAI message is sent. Different from IAM the IAI message
carries not only the information of the called party but also the calling number and the
original called address. Therefore, when the opposite party receives the IAI message, it
will not request for the number of the calling party.

Besides, once a clear backward process is activated, a CBK signal will be sent out by
the opposite party. When the forward party receives this signal, it will repeat the clear
forward process, instead of sending a response message to the backward party. This is
also a difference between TUP signaling and ISUP signaling.

48
Chapter 1 SS7 System

node1 node2

IAI

ACM

ring
AN C
CB K

CLF

RL G

Fig 1.6-4 CBK Signaling Process

· Sample TUP Trace (Actual)

IAM----Initial Address Message:

GRQ----General Request Message:

GSM----General forward Set-up information Message:

ACM----Address-Complete Message

ANC----Answer signal and Charge

CBK----Clear-back signal

CLF----Clear-Forward signal

49
CM3G-202-E1 SS7 Signaling System

RLG----Release-Guard signal

Summary
This chapter describes the SS7 system with its basic concepts, hierarchical architecture,
main functions and features of each layer, and the inter-layer relationship. These are
essential to SS7. The key points of this chapter are:

1. Functions of MTP3: especially the functions and addressing basis of the network
layer. Addressing by DPC is its main feature.

2. Functions of the SCCP layer; difference between SCCP and MTP layers; and the
format of SCCP address messages. GT is the address information of SCCP. It is
not only a number but also has its own numbering rules and attributes. The same
number may have quite different addressing results under different rules. This is
also a difficult point of this chapter.

3. Specific applications of the user layers in the SS7 system.

4. Formats and uses of various message units.

Besides TUP the most important application part is the mobile application part (MAP).
It is not described in this chapter but in subsequent chapters. The coming section will
describe the construction of SS7 network in China.

Topics for discussion


Briefly describe the functions of MTP.

What are the main types of signaling units? What are their respective purposes and
basic formats?

Which two parts contained in the functional level of the signaling network? And what
are their functions?

What is the discrimination basis of the MDC function? What is the basis of the MDT
function?

What are the aspects for which SCCP will increase the addressing function of MTP?

What is GT code? What is its function? How many types of GT codes are used in the
CDMA system?

50
Chapter 1 SS7 System

What are the service categories provided by SCCP? What are their respective features?

How many kinds of SCCP messages are used in the MAP of the CDMA system? How
they can be used?

What is the routing rule of the GT code?

51
2 SS7 Network

Key points

.Understand the basic concepts related with the signaling network.

.Understand the basic structure of the signaling network.

.Understand the signaling network construction in China.

The signaling network is one of key support network constructed by the Chinese
government. Reasonable planning and construction of the signaling network are of
great importance for efficient and reliable signaling information transfer, decreasing
network load and investment cost reduction.

For network maintenance personnel, a good understanding of signaling network


construction is very helpful to GT analysis.

2.1 Basic Concepts


The basic feature of common-channel signaling is that the channels for voice transfer
are separated from that for signaling transfer. Separate channels are available for
signaling transfer. These signaling transfer channels can be combined together to form
the signaling network.

The controlled object of the SS7 system is an information transfer network based on
circuit switching, but the transmission and switching equipment of the SS7 signaling
itself form a separate signaling network, where a dedicated computer communication
network is overlaid on the circuit-switched network.

2.1.1 Composition of Signaling Network

A signaling network consists of three parts: Signaling Point (SP), Signaling Transfer
Point (STP) and Signaling Link (SL). .

2.1.1.1 SP

SP is the node handling control message. The SP generating a message is the


Originating Signaling Point (OSP) of this message, while the SP at which the message

53
CM3G-202-E1 SS7 Signaling System

will arrive is it Destination SP (DSP).

2.1.1.2 STP

STP has the signaling transfer function. The signaling node which can transfer one
signaling link to another singling link in a message is called as signaling transfer point.

STP can be divided into integrated type and independent type. An independent STP
only has the transferring function, while an integrated STP also has the user part
function and the transferring function.

2.1.1.3 SL

The link transferring signaling messages between two SPs is called as signaling link.
The group of links connecting two SPs directly forms a signaling link group.

2.1.2 SPC

To achieve convenient signaling network management, both international signaling


network and individual national signaling networks are independent. Each of them has
its own signaling coding rules. The 14-bit SPC is used for the international signaling
network. In China, the 24-bit SPC is used. Therefore, SPs are not unified
internationally.

SPC is the flag exclusively specify a signaling point. The 24-bit SPC format is shown
in Fig 2.1-1:

Fig 2.1-1 SPC Format in China

The main signaling zones are coded in the unit of province, autonomous zone and city
in a unified manner.

Concepts like SPC, OPC and DPC are often used in the network. OPC and DPC is a
pair of relative concepts. For a signaling point, both OPC and DPC may be used
according to the direction of the signaling message. But SPC is an absolute concept. It
cannot be changed once specified.

54
Chapter 2 SS7 Network

2.1.3 Working Mode of Signaling Network

The working mode refers to the correspondence between the channels selected for a
signaling message and a signaling relation to which the message belongs to. Three
modes are available in the signaling network: associated mode, non-associated mode
and quasi-associated mode.

2.1.3.1 Associated working mode

The information between two SPs can be transferred through signaling links
connecting two SPs directly, as shown in Fig 2.1-2.

Fig 2.1-2 Associated Working Mode

2.1.3.2 Non-associated working mode

Signaling messages are transferred through several SLs in the current network status.
At different times, the path of a signaling message is not the same. In this mode, too
much data configuration is needed and therefore, this mode is not used at present.

2.1.3.3 Quasi-associated working mode

A message belonging to a certain signaling relation is transferred through one or more


SPs during transmission, but the path selected for the message in the signaling network
is preset and fixed at a certain time. The quasi-associated working mode is a special
case of non-associated working mode. As shown in Fig 2.1-3, all signaling messages
from A to B are transferred via C. This path has been specified.

Fig 2.1-3 Quasi-associated Working Mode

55
CM3G-202-E1 SS7 Signaling System

2.1.4 Signaling Route

A signaling route is a preset path used to transfer signaling message from OSP to DSP.
Routes can be divided into normal routes and alternate routes according to their
features and use.

2.1.4.1 Normal route

The route of signaling traffic stream in the normal case without any fault

2.1.4.2 Alternate route

The route selected when signaling traffic stream cannot be normally transferred due to
SL or route fault is called as an alternate route. Any alternate route is a quasi-associated
route transferred via signaling points. It can be a single route or the combination of
several routes. According to the numbers of signaling transfer points, the alternate
route can be divided into the first alternate route, the second alternate route, and so on.

If several routes arrive at the same signaling point, the route with direct signaling link
is called as normal route. If no direct signaling link is involved, the normal route
should be the shortest one. In the case of load sharing working mode, both signaling
routes should be normal routes. If they become faulty, alternate routes should be
selected from the first, and then the second.

This mechanism is demonstrated in the following example, as shown in Fig 2.1-4:

Fig 2.1-4 Setting of Normal Signaling Routes

56
Chapter 2 SS7 Network

2.1.5 Configuration Description

Fig. 2.1-5 shows the configuration interface of the signaling part in ZXC10 MSS. It
involves concepts such as signaling link, signaling link group and signaling route. To
implement correct SS7 transfer, these configurations are necessary.

Fig 2.1-5 SS7 Signaling Configurations

57
CM3G-202-E1 SS7 Signaling System

y Note:

During signaling route configuration for a ZTE switch, four signaling routes can be
configured at most: normal route, first alternate route, second and third alternate route.
In the current network alternate routes are seldom configured only normal routes are
configured.

To the same office direction, only one signaling group can be configured and only 16
signaling links can be configured for each group. These signaling links share load
within the signaling group. One route may involve two different link groups.

Summary
This chapter describes the concepts related with the signaling network and the
signaling network structure, especially for the construction of China Unicom CDMA
signaling network. This part is essential for the implementation of normal addressing.
Therefore it is mandatory for trainees.

Topics for discussion


How the three hierarchies of signaling networks are stipulated in China?

How many working modes are used in the signaling network? What are their features?

What is the structure of China Unicom signaling network?

58

Potrebbero piacerti anche