s1·1g --1a l1n1g ,sy,s~e- No 7 1( _ S,71
`1C,7)
`PfOi-0 1c,oll-AJic:h1i-ectu r1'e ;a ndr S,erviic:1es
`
`/
`
`'Orld's mos opular
`A 1oompl _ ~e prac ica~ gu·1d __ ,o _h _
`s1 • n lin v , m1 tnclud11n · SIGTRA _ ~s1- -.. · AP.' ndl
`In - Iii: en . ·. -t . or -
`
`D y-_ ~ _ h
`f H = ·=,, I
`
`J
`
`
`
`Page 1 of 156
`
`GOOGLE EXHIBIT 1011 (Part 1 of 5)
`
`

`

`Signaling System No. 7 (SS7/C7):
`Protocol, Architecture, and Services
`
`Lee Dryburgh
`Jeff Hewett
`
`Cisco Press
`
`800 East 96th Street
`Indianapolis, IN 46240 USA
`
`
`
`Page 2 of 156
`
`

`

`ii
`
`Signaling System No. 7 (SS7 /C7):
`Protocol, Architectures, and Services
`Lee Dryburgh
`Jeff Hewett
`Copyright© 2005 Cisco Systems, Inc.
`Published by:
`Cisco Press
`800 East 96th Street
`Indianapolis, Indiana 46240 USA
`All rights reserved. No part of this book may be reproduced or transmitted in any form or by any means, electronic
`or mechanical, including photocopying or recording, or by any information storage and retrieval system, without
`written permission from the publisher, except for the inclusion of brief quotations in a review.
`Printed in the United States of America 1234567 8 9 0
`First Printing June 2005
`Library of Congress Cataloging-in-Publication Number: 2001090446
`ISBN: 1-58705-040-4
`
`Trademark Acknowledgments
`All terms mentioned in this book that are known to be trademarks or service marks have been appropriately capital(cid:173)
`ized. Cisco Press or Cisco Systems, Inc. cannot attest to the accuracy of this information. Use of a term in this book
`should not be regarded as affecting the validity of any trademark or service mark.
`
`Warning and Disclaimer
`This book is designed to provide information about Signaling System No. 7 and related technologies. Every effort
`has been made to make this book as complete and accurate as possible, but no warranty or fitness is implied.
`The information is provided on an "as is" basis. The authors, Cisco Press, and Cisco Systems, Inc. shall have neither
`liability nor responsibility to any person or entity with respect to any loss or damages arising from the information
`contained in this book or from the use of the discs or programs that may accompany it.
`The opinions expressed in this book belong to the authors and are not necessarily those of Cisco Systems, Inc.
`
`Corporate and Government Sales
`Cisco Press offers excellent discounts on this book when ordered in quantity for bulk purchases or special sales. For more
`information, please contact:
`U.S. Corporate and Government Sales: 1-800-382-3419 corpsales@pearsontechgroup.com
`For sales outside of the U.S. please contact:
`international@pearsoned.com
`
`Feedback Information
`At Cisco Press, our goal is to create in-depth technical books of the highest quality and value. Each book is crafted
`with care and precision, undergoing rigorous development that involves the unique expertise of members of the
`professional technical community.
`Reader feedback is a natural continuation of this process. If you have any comments about how we could improve
`the quality of this book or otherwise alter it to better suit your needs, you can contact us through e-mail at
`feedback@ciscopress.com. Please be sure to include the book title and ISBN in your message.
`We greatly appreciate your assistance.
`
`
`
`Page 3 of 156
`
`

`

`iii
`
`Publisher
`Editor-in-Chief
`Cisco Press Program Manager
`Cisco Marketing Program Manager
`Acquisitions Editor
`Managing Editor
`Development Editor
`Technical Editors
`
`Project Editor
`Copy Editors
`Team Coordinator
`Book and Cover Designer
`Production Team
`Indexers
`
`John Wait
`John Kane
`Nanette M. Noble
`Edie Quiroz
`Amy Moss
`Patrick Kanouse
`Jennifer Foster
`Franck Noel, Brad Dunsmore, Trevor Graham, Andreas Nikas,
`Jan Van Geel, Murry Gavin
`Marc Fowler
`Bridget Collins, Gayle Johnson
`Tammi Barnett
`Louisa Adair
`Octal Publishing, Inc.
`Larry Sweazy
`Tim Wright
`
`Cisco SYSTEMS
`
`--®
`
`Corporate Headquarters
`Cisco Systems, Inc.
`170 West Tasman Drive
`San Jose, CA 95134-1706
`USA
`www.c1sco.com
`Tel: 408 526-4000
`800 553-NETS (6387)
`Fax: 408 526-4100
`
`European Headquarters
`Cisco Systems International BY
`Haarlerbergpark
`Haarlerbergweg 13-19
`1101 CH Amsterdam
`The Netherlands
`www-europe.cisco.com
`Tel: 31 0 20 357 1000
`Fax: 31 0 20 357 1100
`
`Americas Headquarters
`Cisco Systems, Inc.
`170 West Tasman Drive
`San Jose, CA 95134-1706
`USA
`www.cisco.com
`Tel: 408 526-7660
`Fax: 408 527-0883
`
`Asia Pacific Headquarters
`Cisco Systems, Inc.
`Capital Tower
`168 Robinson Road
`#22-01 to #29-01
`Singapore 068912
`www.cisco.com
`Tel: +65 6317 7777
`Fax: +65 6317 7799
`
`Cisco Systems has more than 200 offices in the following countries and regions. Addresses, phone numbers, and fax numbers are listed on the
`Cisco . com Web s i te at www . cisco . com/go/offices .
`
`Argentina • Australia • Austria • Belgium • Brazil • Bulgaria • Canada • Chile • China PRC • Colombia • Costa Rica • Croatia • Czech Republic
`Denmark • Dubai, UAE • Finland • France • Germany • Greece • Hong Kong SAR • Hungary • India • Indonesia • Ireland • Israel • Italy
`Japan • Korea • Luxembourg • Malaysia • Mexico • The Netherlands • New Zealand • Norway • Peru • Philippines • Poland • Portugal
`Puerto Rico
`• Romania • Russia • Saudi Arabia • Scotland
`• Singapore • Slovakia
`• Slovenia • South Africa
`• Spain • Sweden
`Switzerland
`• Taiwan
`• Thailand
`• Turkey
`• Ukraine
`• United Kingdom
`• United States
`• Venezuela
`• Vietnam
`• Zimbabwe
`
`Copyright © 2003 Cisco Systems, Inc. All rights reserved. COP, CCSP, che Cisco Arrow logo, the Cisco Powered Network mark, the Cisco Systems Verified logo, Cisco Unity, Follow Me Browsing,
`FormShare, iQ Net Readiness Scorecard, Networking Academy, and ScriptShare are trademarks of Cisco Systems, Inc.; Changing the Way We Work, Live, Play, and Learn, The Fastest Way to Increase
`Your lnternet Quotient, and iQuick Study are service marks of Cisco Systems, Inc.; and Aironet, ASIST, BPX, Catalyst, CCDA, CCDP, CCIE, CCNA, CCNP, Cisco, the Cisco Certified Internetwork
`Expert logo, Cisco IOS, the Cisco IOS logo, Cisco Press, Cisco Systems, Cisco Systems Capital, the Cisco Systems logo, Empowering the Imemet Generation, Enterprise/Solver, EtherChannel, EtherSwitch,
`Fast Step, GigaStack, Internet Quotient, 1OS, IP/fV, iQ Expertise, the iQ logo, LightStream, MGX, MICA, the Networkers logo, Network Registrar, Packet, PIX, Post-Routing, Pre-Routing, RateMUX,
`Registrar, SlideCast, SMARTnet, Strata View Plus, Stratm, SwitchProbe, TeleRouter, TransPath, and VCO are registered trademarks of Cisco Systems, Inc. and/or its affiliates in the U.S. and certain other
`countries.
`
`All other trademarks mentioned in this document or Web site are the property of their respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any
`other company. (0303R)
`
`Printed in the USA
`
`
`
`Page 4 of 156
`
`

`

`iv
`
`About the Authors
`
`Lee Dryburgh, BSc MIEE, is a specialist in SS7 /C7 and the services it empowers. He provides training and con(cid:173)
`sulting through his company, Bit Tech Limited. His entire career has focused on SS7 /C7. He has uniquely tackled
`the subject from many career positions, including software engineering, testing, training, security auditing, and
`architectural design, in both fixed-line and cellular networks. He is a member of several professional telecommuni(cid:173)
`cations bodies and holds a degree in computer science. He is currently studying for an engineering doctorate at the
`University College of London. He can be reached at lsd@bittech.co.uk. He very much welcomes specific feedback
`about this book. Such comments can be addressed to him at book@c7.com.
`Jeff Hewett is a technical leader at Cisco Systems and is currently working in Voice over IP software development
`for the Government Systems Business Unit. Having been involved with SS7 for more than 16 years, he has worked
`in SS7 software development, testing, and training. He is a patent holder in SS7-related software development and
`has written about SS7 in popular journals. He has provided a broad range of SS7 training for Regional Bell Operating
`Companies, independent operators, and telecommunications vendors dating back to the initial rollout of SS7 in the
`U.S. network. In recent years, Jeff has been involved with Operating System development and Voice over Packet
`solutions as an engineer in the Cisco Networked Solutions Integration Test Engineering (NSITE) lab. Prior to join(cid:173)
`ing Cisco, he worked in SS7 and AIN software development for a major switching vendor. He holds degrees in
`science and engineering and computer information systems. You can contact him at jhewett@cisco.com.
`
`About the Technical Reviewers
`Franck Noel, CCNA, CCNP, CCIP, is a consulting systems engineer with Cisco Systems, Inc. He has been in the
`telecommunications industry for 13 years. Most recently he has focused on designing and deploying end-to-end
`packet-based integrated voice and data solutions for service provider customers. Before coming to Cisco, he was on
`the technical staff at AT&T Bell Labs, where he worked on switching and signaling and participated in the ITU/
`ANSI SS7 standards. He holds a master's degree in electrical engineering.
`Brad Dunsmore is a new-product instructor in advanced services at Cisco Systems. He is responsible for designing
`and deploying new networks for his group. Currently he specializes in SS7 offload solutions, WAN communication,
`and network security. He holds a B .S. in management of information systems, and he has obtained industry certifi(cid:173)
`cations in MCSE+Internet, MCDBA, CCNP, CCDP, CCSP, INFOSEC, and CCSI. He recently passed his written
`exam for the R/S CCIE and is now working on his lab.
`Trevor Graham is a seasoned professional with more than 10 years of experience in the telecommunications
`industry. During the last four years, he has been an interconnection consultant for Cisco Systems, focusing on the
`Cisco voice switching products. He is responsible for defining many of the signaling and functional requirements
`for the switching products that Cisco will introduce into new countries, regions, and operators. Before joining Cisco,
`he was European switching operations manager for a large, multinational telecommunications operator. He also
`owned an interconnect consultancy company that provided technical interconnection consultancy and SS7 testing
`services to telecom operators and vendors throughout Europe.
`Andreas Nikas works for the Multiservice Voice Solutions team at Cisco Systems. He has held positions in Advanced
`Engineering Services (AES) and Solutions Support, all with Cisco Systems. He worked for more than four years
`with various signaling and switching platforms related to both voice and SS7, such as the SC 2200/PGW 2200. Pre(cid:173)
`viously he worked for Tekelec in the Network Switching Division as a First Office Application (FOA) and Technical
`Assistance Center (TAC) engineer for five years in support of the Eagle Signaling Transfer Point (STP). He also
`worked for the U.S. Air Force and the Department of Defense for eight years in the telecommunications field .
`
`
`
`Page 5 of 156
`
`

`

`V
`
`Murry Gavin graduated from West Liberty State College in 1971 with a bachelor's degree in electrical engineer(cid:173)
`ing. In the past, he has worked for Stomberg-Carlson during the development and deployment of it's first electronic
`common control central office; Nortel and Bell Northern Research in a variety of different positions during the
`development and deployment of their SP-1, DMS-10, and DMS-100 family of products; and Sprint PCS Technology
`and Integration Center during their nation-wide deployment of services. Murry currently works at NSITE (a Cisco
`affiliate) and is involved with building its VoIP lab. He has also been involved in Lawful Intercept and Land Mobile
`Radio projects. His hobbies include amateur radio, target shooting, and sailing.
`
`
`
`Page 6 of 156
`
`

`

`vi
`
`Dedications
`
`Lee Dryburgh: To Rhoda.
`"If I have any beliefs about immortality, it is that certain dogs I have known will go to heaven, and very, very few
`persons." James Thurber
`
`Jeff Hewett: To Janet, who is always there to encourage me.
`
`
`
`Page 7 of 156
`
`

`

`vii
`
`Acknowledgments
`
`Lee Dryburgh: Thanks to all of those at Cisco Press for their great support-in particular, John Kane, Amy Moss,
`and Dayna Isley. A big hello to all of those nice people at Cisco Systems who made me most welcome during my
`time there, especially Nigel Townley. A big thank you to the technical reviewers for their valuable input and enthu(cid:173)
`siasm. A big thank you to Ken Morneault of Cisco Systems for his valuable contribution toward the book, espe(cid:173)
`cially considering the circumstances. And finally, a big thank you to Tektronix for its products and support, and in
`particular, to Wayne Newitts, who has the unique ability to inject humor into any situation over any medium, not to
`mention a strange obsession with Star Wars and the battle between good and evil.
`Jeff Hewett: As anyone who has undertaken the task knows, writing technical books is a difficult and time-consuming
`effort. My first acknowledgment must be to my wife Janet, who spent many evenings alone and never complained
`while I worked on writing material for this book. Many thanks to the people at Cisco Press for their patience and
`support throughout this endeavor. Also, thanks to Ken Morneault for his contribution on SIGTRAN, given such a
`tight schedule. I am also grateful for all of the valuable input from our technical reviewers. And finally, I'd like to
`say that it has been a great experience to work with the NSITE engineering group here at Cisco, with whom I shared
`my SS7 knowledge and from whom I gained knowledge about data networks from the best in the business.
`
`
`
`Page 8 of 156
`
`

`

`viii
`
`Contents at a Glance
`
`Introduction xxx
`
`Part I
`
`Introductions and Overviews 3
`
`Chapter 1
`
`The Evolution of Signaling 5
`
`Chapter 2
`
`Standards 27
`
`Chapter 3
`
`The Role of SS7 43
`
`Chapter 4
`
`SS7 Network Architecture and Protocols Introduction 55
`
`Chapter 5
`
`The Public Switched Telephone Network (PSTN) 81
`
`Part II
`
`Protocols Found in the Traditional SS7/C7 Stack 109
`
`Chapter 6
`
`Message Transfer Part 2 (MTP2) 111
`
`Chapter 7
`
`Message Transfer Part 3 (MTP3) 135
`
`Chapter 8
`
`ISDN User Part (ISUP) 183
`
`Chapter 9
`
`Signaling Connection Control Part (SCCP) 227
`
`Chapter 10
`
`Transaction Capabilities Application Part (TCAP) 267
`
`Part Ill
`
`Service-oriented Protocols 309
`
`Chapter 11
`
`Intelligent Networks (IN) 311
`
`Chapter 12
`
`Cellular Networks 361
`
`Chapter 13
`
`GSM and ANSl-41 Mobile Application Part (MAP) 383
`
`Part IV
`
`SS7/C7 Over IP 403
`
`Chapter 14
`
`SS7 in the Converged World 405
`
`
`
`Page 9 of 156
`
`

`

`ix
`
`PartV
`
`Supplementary Topics 453
`
`Chapter 15
`
`SS7 Security and Monitoring 455
`
`Chapter 16
`
`SS7 Testing 475
`
`Part VI
`
`Appendixes 517
`
`Appendix A
`
`MTP Messages (ANSI/ETSI/ITU) 519
`
`Appendix B
`
`ISUP Messages (ANSI/UK/ETSI/ITU-T) 525
`
`Appendix C
`
`SCCP Messages (ANSI/ETSI/ITU-T) 533
`
`Appendix D
`
`TCAP Messages and Components 539
`
`Appendix E
`
`ITU-T Q.931 Messages 543
`
`Appendix F
`
`GSM and ANSI MAP Operations 549
`
`AppendixG
`
`MTP Timers in ITU-T/ETSI/ANSI Applications 557
`
`Appendix H
`
`ISUP Timers for ANSI/ETSI/ITU-T Applications 563
`
`Appendix I
`
`GSM Mobile Country Codes (MCC) and Mobile Network Codes (MNC) 573
`
`AppendixJ
`
`ITU and ANSI Protocol Comparison 595
`
`Appendix K
`
`SS7 Standards 599
`
`Appendix L
`
`Tektronix Supporting Traffic 607
`
`Appendix M
`
`Cause Values 637
`
`Acronyms 643
`
`References 665
`
`Index 675
`
`
`
`Page 10 of 156
`
`

`

`X
`
`Table of Contents
`
`Introduction xxx
`
`Part I
`
`Introductions and Overviews 3
`
`Chapter 1 The Evolution of Signaling 5
`
`The History of Signaling 8
`1889-1976 8
`1976 to Present Day 10
`
`Subscriber Signaling 11
`Address Signals 11
`Supervisory Signals 13
`Tones and Announcements 13
`Ringing 14
`Network Signaling 15
`
`Channel Associated Signaling 15
`Address Signals 16
`Multifrequency 16
`Supervisory Signals 18
`Single Frequency(SF) 18
`Digital 20
`Limitations of CAS 20
`Susceptibility to Fraud 20
`Limited Signaling Information 20
`Inefficient Use of Resources 21
`
`Common Channel Signaling (CCS) 21
`Circuit-Related Signaling 22
`Non-Circuit-Related Signaling 22
`Common Channel Signaling Modes 22
`Associated Signaling 22
`Quasi-Associated Signaling 23
`Non-Associated Signaling 24
`
`Summary 24
`
`Chapter 2 Standards 27
`
`History of International Telephony Standards 28
`ITU-T (Formerly CCITT) International Standards 29
`
`
`
`Page 11 of 156
`
`

`

`Regional Standards 35
`ETSI 36
`3rd Generation Partnership Project 36
`3rd Generation Partnership Project 2 37
`
`National and Industry Standards 37
`ANSI 37
`Tl Committee 38
`Telcordia (Formerly Bellcore) 38
`TIA/EIA 39
`ATIS 40
`BSI 40
`NICC 40
`IETF 41
`
`Chapter 3 The Role of S87 43
`
`Signaling System No. 7-Based Services 45
`Telephone-Marketing Numbers 45
`Televoting 46
`Single Directory Number 46
`Enhanced 911 46
`Supplementary Services 46
`Custom Local Area Signaling Services (CLASS) 47
`Calling Name (CNAM) 47
`Line Information Database (LIDB) 48
`Local Number Portability (LNP) 48
`2nd and 3rd Generation Cellular Networks 49
`Short Message Service (SMS) 49
`Enhanced Messaging Service (EMS) 49
`Private Virtual Networks 50
`Do-Not-Call Enforcement 50
`
`Signaling System No. 7: The Key to Convergence 50
`Internet Call Waiting and Internet Calling Name Services 51
`Click-to-Dial Applications 51
`Web-Browser-Based of Telecommunication Services
`WLAN "Hotspot" Billing 52
`Location-Based Games 52
`
`51
`
`Summary 52
`
`xi
`
`
`
`Page 12 of 156
`
`

`

`xii
`
`Chapter 4 S87 Network Architecture and Protocols Introduction 55
`
`Pre-SS7 Systems 56
`
`History of SS7 57
`
`SS7 Network Architecture 59
`Signaling Links and Linksets 60
`Routes and Routesets 61
`Node Types 62
`Signal Transfer Point 62
`Service Switching Point 63
`Service Control Point 63
`Link Types 64
`Access Links (A Links) 64
`Cross Links (C Links) 65
`Bridge Links (B Links) 65
`Diagonal Links (D Links) 66
`Extended Links (E Links) 67
`Fully-Associated Links (F Links) 67
`Signaling Modes 68
`Signaling Network Structure 70
`
`SS7 Protocol Overview 72
`MTP 74
`MTP2 74
`MTP3 75
`TUP and ISUP 75
`SCCP 75
`TCAP 76
`
`Summary 78
`
`Chapter 5 The Public Switched Telephone Network (PSTN} 81
`
`Network Topology 82
`
`PSTN Hierarchy 83
`PSTN Hierarchy in the United States 83
`Local Exchange Network 84
`InterExchange Network 84
`International Network 84
`Service Providers 84
`Pre-Divestiture Bell System Hierarchy 86
`PSTN Hierarchy in the United Kingdom 86
`
`
`
`Page 13 of 156
`
`

`

`Access and Transmission Facilities 87
`Lines 88
`The Local Loop 88
`Analog Line Signaling 89
`Dialing 90
`Ringing and Answer 90
`Voice Encoding 90
`ISDNBRI 91
`Trunks 92
`ISDNPRI 94
`
`Network Timing 95
`
`The Central Office 97
`Main Distribution Frame 97
`The Digital Switch 97
`Switching Matrix 98
`Call Processing 99
`Origination 100
`Digit Collection 100
`Translation 101
`Routing 101
`Connection 102
`Disconnection 102
`Call Setup 102
`
`Integration of SS7 into the PSTN 103
`SS7 Link Interface 104
`
`Evolving the PSTN to the Next Generation 105
`
`Summary 106
`
`Part II Protocols Found in the Traditional SS7/C7 Stack 109
`
`Chapter 6 Message Transfer Part 2 {MTP2) 111
`
`Signal Unit Formats 112
`Fill-In Signal Units 112
`Link Status Signal Units 113
`Message Signal Units 114
`MTP2 Overhead 114
`Field Descriptions 114
`
`Signal Unit Delimitation 115
`
`Length Indicator 116
`
`xiii
`
`
`
`Page 14 of 156
`
`

`

`xiv
`
`Signal Unit Alignment 117
`
`Error Detection 117
`
`Error Correction 118
`Basic Error Correction 118
`Sequence Numbering 119
`Positive Acknowledgment 119
`Negative Acknowledgment 120
`Response to a Positive Acknowledgment 120
`Response to a Negative Acknowledgment 120
`Examples of Error Correction 121
`Preventive Cyclic Retransmission 123
`Forced Retransmission Cycles 125
`Comparison with the Basic Error Correction Method 125
`
`Signaling Link Initial Alignment 126
`Status Indications 126
`Idle 127
`Not Aligned 127
`Aligned 127
`Proving 127
`Aligned/Ready 128
`In Service 128
`
`Signaling Link Error Monitoring 130
`SUERM 130
`AERM 131
`
`Processor Outage 131
`
`Flow Control 131
`
`Summary 132
`
`Chapter 7 Message Transfer Part 3 (MTP3) 135
`
`Point Codes 136
`ITU-T International and National Point Codes 136
`ANSI National Point Codes 137
`
`Message Format 140
`Service Information Octet 140
`Signaling Information Field (SIF) 142
`ITU-T Routing Label 143
`ANSI Routing Label 144
`
`
`
`Page 15 of 156
`
`

`

`Signaling Message Handling 145
`Discrimination 145
`Distribution 146
`Routing 146
`ANSI Network and Cluster Routing 147
`Alias Point Code Routing 148
`Message Load Sharing 148
`Load Sharing and MTP3 User Parts 149
`SLS in ITU-T Networks 150
`SLS in ANSI Networks 151
`Comparing the IP and MTP3 Protocols 152
`MTP3 Message Handling Example 153
`
`Signaling Network Management 154
`Network Management Messages (H0/Hl Codes) 155
`Link Management 156
`Signaling Link Test Control 156
`Automatic Allocation of Signaling Terminals and Links 158
`Route Management 158
`Transfer Restricted 160
`Transfer Prohibited 161
`Transfer Allowed 162
`Transfer Controlled 164
`Traffic Management 167
`Changeover 167
`Emergency Changeover 169
`Time-Controlled Changeover 169
`Changeback 170
`Time-Controlled Diversion 170
`Forced Rerouting 171
`Controlled Rerouting 172
`MTP Restart 173
`Management Inhibiting 175
`MTP3/User Part Communication 178
`Signaling Network Management Example 179
`
`Summary 181
`
`Chapter 8
`
`ISDN User Part (ISUP) 183
`
`Bearers and Signaling 184
`
`ISUP and the SS7 Protocol Stack 185
`ISUP Standards and Variants 186
`
`xv
`
`
`
`Page 16 of 156
`
`

`

`xvi
`
`ISUP Message Flow 187
`Call Setup 188
`Call Release 188
`Unsuccessful Call Attempt 189
`
`Message Timers 189
`
`Circuit Identification Codes 190
`DPC to CIC Association 191
`Unidentified Circuit Codes 192
`
`Enbloc and Overlap Address Signaling 192
`Enbloc Signaling 193
`Overlap Signaling 193
`
`Circuit Glare (Dual-Seizure) 194
`Resolving Glare 195
`Avoiding Glare 195
`
`Continuity Test 196
`Loopback and Transceiver Methods 196
`Continuity Check Procedure 197
`
`ISUP Message Format 198
`Basic Call Message Formats 200
`Initial Address Message (1AM) 200
`Subsequent Address Message (SAM-ITU Networks Only) 203
`Continuity Message (COT) 203
`Address Complete Message (ACM) 204
`Answer Message (ANM) 205
`Release Message (REL) 205
`Release Complete Message (RLC) 206
`
`Detailed Call Walk-Through 206
`Call Setup 206
`Call Release 208
`Terminal Portability 208
`
`Circuit Suspend and Resume 208
`
`ISUP and Local Number Portability 209
`All Call Query (ACQ) 210
`Query On Release (QOR) 211
`Dropback (Also Known as Release to Pivot) 211
`Onward Routing (OR) 211
`
`
`
`Page 17 of 156
`
`

`

`ISUP-ISUP Tandem Calls 211
`ISUP Message Processing at a Tandem 212
`Continuity Testing 213
`Transporting Parameters 213
`
`Interworking with ISDN 213
`End-to-End Signaling 215
`ISDN Signaling Indicators in the 1AM 215
`
`Supplementary Services 216
`Calling Line Identification (CLI) Example 217
`Call Forwarding Example 218
`
`Additional Call Processing Messages 220
`
`Maintenance Messages and Procedures 220
`Circuit Ranges 220
`Circuit States 221
`Circuit Validation (ANSI Only) 222
`Continuity Testing 222
`Blocking and Unblocking Circuits 223
`Circuit Reset 223
`
`Summary 224
`
`Chapter 9 Signaling Connection Control Part (SCCP) 227
`
`SCCP Architecture 229
`
`SCCP Message Transfer Services 230
`Connection-oriented Versus Connectionless Services 231
`User Data and Segmentation 232
`Connectionless Protocol Classes 232
`Connection-oriented Protocol Classes 233
`SCCP Connectionless Control (SCLC) 234
`SCCP Connection-Oriented Control (SCOC) 234
`
`SCCP Messages and Parameters 236
`Message Structure 237
`Mandatory Fixed Part (MF) 237
`Mandatory Variable Part (MV) 238
`Optional Part (0) 239
`
`xvii
`
`
`
`Page 18 of 156
`
`

`

`xviii
`
`Message Types 240
`Connection Request (CR) 240
`Connection Confirm (CC) 240
`Connection Refused (CREF) 241
`Released (RLSD) 242
`Release Complete (RLC) 242
`Data Form 1 (DTl) 243
`Unitdata (UDT) 243
`Unitdata Service (UDTS) 244
`
`SCCP Routing Control (SCRC) 244
`Subsystem Number (SSN) Routing 245
`Global Title Routing 249
`Global Title Translation 249
`Calling Party Address (CgPA) and Called Party Address (CdPA) 253
`
`SCCP Management (SCMG) 260
`Replicate Subsystems 261
`SCMG Messages 262
`Signaling Point Status Management 263
`Subsystem Status Management 263
`
`Summary 264
`
`Chapter 1 O Transaction Capabilities Application Part (TCAP) 267
`
`Overview 268
`Generic Service Interface 268
`Role of TCAP in Call Control 269
`TCAP Within the SS7 Protocol Stack 269
`Transaction and Component Sublayers 270
`
`Message Types 270
`
`Transactions 272
`Transaction IDs 272
`Establishing Transaction IDs 273
`Releasing Transaction IDs 274
`Transaction Message Sequence 27 4
`
`Components 276
`Invoke and Return Result Components 276
`Component IDs 278
`Operation Codes 278
`
`
`
`Page 19 of 156
`
`

`

`Parameters 279
`ITU Parameters 280
`
`Dialogue Portion 280
`ITU Dialogue 280
`ANSI Dialogue 282
`
`Message Encoding 282
`
`Element Structure 283
`Element Identifier 284
`Constructors and Primitives 284
`Identifier Tag 285
`Length Identifier 286
`Message Layout 286
`
`Error Handling 288
`Protocol Errors 288
`Errors at the Transaction Layer 288
`Errors at the Component Layer 289
`Application Errors 289
`End-User Errors 289
`Handling Application and End-User Errors 289
`
`ITU Protocol Message Contents 290
`Unidirectional Message 290
`Begin Message 291
`End Message 291
`Continue Message 292
`Abort Message 292
`
`ANSI Protocol Message Contents 293
`Unidirectional Message 293
`Query With/Without Permission 294
`Conversation With/Without Permission 295
`Response Message 295
`Protocol Abort (P-Abort) Message 296
`User Abort (U-Abort) Message 296
`
`ANSI National Operations 297
`
`ANSI Parameters 299
`
`Summary 306
`
`xix
`
`
`
`Page 20 of 156
`
`

`

`xx
`
`Part Ill Service-oriented Protocols 309
`
`Chapter 11
`
`Intelligent Networks (IN) 311
`
`The Intelligent Network 312
`
`Service Logic and Data 312
`Service Logic 313
`Service Data 313
`Service Distribution and Centralization 314
`
`IN Services 315
`
`IN and the SS7 Protocol 316
`
`Evolution of the Network 317
`
`IN/1 319
`Initial Services 319
`IN/1 Toll-Free (E800) Example 320
`
`The Advanced Intelligent Network (AIN 0.X, IN CS-X) 323
`Basic Call State Models (BCSM) 323
`Point in Call (PIC) 323
`Detection Point (DP) 324
`Trigger Detection Point (TDP) 324
`Event Detection Point (EDP) 325
`Trigger and Event Precedence 326
`Escape Codes 326
`Originating and Terminating Call Models 327
`Network Architecture 328
`Service Switching Point (SSP) 329
`Service Control Point (SCP) 329
`Adjunct 329
`Intelligent Peripheral (IP) 329
`Service Management System (SMS) 330
`Service Creation Environment (SCE) 330
`ITU Intelligent Network Conceptual Model (INCM) 330
`Correlating Distributed Functional Plane and Physical Plane 331
`AIN0 332
`IN CS-1/AIN 0.1 333
`IN CS-1 OBCSM 333
`IN CS-1 TBCSM 334
`AIN Toll-Free Service Example 334
`
`
`
`Page 21 of 156
`
`

`

`IN CS-2/AIN 0.2 336
`Originating Basic Call State Model (BCSM) 337
`IN CS-2 OBCSM PICs 338
`IN CS-2 OBCSM TDPs and Trigger Types 339
`Terminating Basic Call State Model 342
`IN CS-2 TBCSM PICs 342
`IN CS-2 TBCSM TDPs and Trigger Types 343
`AIN 0.2 Call Control Messages from the SCP 345
`AIN 0.2 Time Of Day (TOD) Routing Example 346
`
`Additional IN Service Examples 34 7
`Local Number Portability (LNP) 347
`Private Virtual Network (PVN) 350
`
`Intelligent Network Application Protocol (INAP) 351
`Basic Toll-Free Example Using INAP 354
`Service Creation Environment (SCE) 355
`Service Independent Building Blocks (SIB) 356
`Service Logic Programs (SLP) 357
`
`Summary 358
`
`Chapter 12 Cellular Networks 361
`
`Network Architecture 363
`Mobile Station (MS) 366
`IMEi 366
`IMSI 367
`TMSI 368
`MSISDN 369
`MSRN 369
`Subscriber Identity Module (SIM) 369
`Base Transceiver Station (BTS) 370
`Base Station Controller (BSC) 370
`Mobile Switching Centre (MSC) 370
`Home Location Register (HLR) 370
`Visitor Location Register (VLR) 371
`Equipment Identity Register (EIR) 371
`Authentication Center (AuC) 371
`Serving GPRS Support Node (SGSN) 372
`Gateway GPRS Support Node (GGSN) 372
`
`xxi
`
`
`
`Page 22 of 156
`
`

`

`xxii
`
`Interfaces and Protocols 372
`BSSAP (DTAP/BSSMAP) 375
`Mobile Application Part (MAP) 376
`
`Mobility Management and Call Processing 378
`Location Update 378
`Mobile Terminated Call (MTC) 379
`
`Summary 381
`
`Chapter 13 GSM and ANSl-41 Mobile Application Part (MAP) 383
`
`MAP Operations 384
`
`Mobility Management 384
`Location Management 385
`updateLocation 385
`cancelLocation 386
`sendldentification 386
`purgeMS 387
`Handover 387
`prepareHandover 387
`sendEndSignal 387
`processAccessSignaling 388
`forwardAccessSignaling 388
`prepareSubsequentHandover 389
`Authentication Management 389
`IMEi Management 389
`Subscriber Management 390
`insertSubscriberData 390
`deleteSubscriberData 390
`Fault Recovery 390
`reset 391
`forwardCheckSslndication 391
`restoreData 391
`
`Operation and Maintenance 391
`Subscriber Tracing 391
`activateTraceMode 391
`deactivateTraceMode 392
`Miscellaneous 392
`
`Call Handling 393
`sendRoutinglnfo (SRI) 394
`provideRoamingNumber (PRN) 395
`
`
`
`Page 23 of 156
`
`

`

`Supplementary Services 395
`Unstructured Supplementary Services (USSs) 395
`Operations 396
`
`Short Message Service (SMS) 397
`forwardSM 398
`sendRoutinglnfoForSM 398
`reportSMDeliveryStatus 399
`informServiceCentre 400
`
`Summary 400
`
`Part IV SS7/C7 Over IP 403
`
`Chapter 14 SS7 in the Converged World 405
`
`Next Generation Architecture 405
`
`SigTran 407
`Stream Control Transmission Protocol (SCTP) 409
`Head-of-Line Blocking 410
`Failure Detection 411
`Multihoming and Failure Recovery 412
`Proposed Additions 413
`
`User Adaptation (UA) Layers 413
`UA Common Terminology 414
`Routing Keys and Interface Identifiers 416
`
`MTP Level 3 UA (M3UA) 418
`Messages and Formats 420
`Transfer Messages 423
`SS7 Signaling Network Management (SSNM) Messages 423
`ASPSM and ASPTM Messages 425
`Management (MGMT) Messages 426
`Routing Key Management (RKM) Messages 427
`SS7/C7 Variant Specifics 427
`Message Flow Example 427
`
`SCCP User Adaptation (SUA) 428
`Messages and Formats 430
`Connectionless Messages 432
`Connection-Oriented Messages 432
`MGMT Messages 433
`ASPSM and ASPTM Messages 433
`RKM Messages 433
`Message Flow Example 434
`
`xxiii
`
`
`
`Page 24 of 156
`
`

`

`xxiv
`
`MTP Level 2 User Adaptation (M2UA) 434
`Messages and Formats 435
`MTP2 User Adaptation (MAUP) Messages 437
`SS7 Variant Specifics 439
`Message Flow Examples 439
`MTP Level 2 Peer Adaptation (M2P A) 440
`M2PA and M2UA Comparison 441
`M2PA Differences from Other UAs 442
`Messages and Formats 442
`Message Flow Example 443
`
`ISDN User Adaptation (IUA) 444
`
`Transport Adaptation Layer Interface (TALI) 445
`
`Early Cisco SS7 /IP Solution 445
`
`SS7 and SIP/H.323 Interworking 448
`
`Summary 451
`
`Part V Supplementary Topics 453
`
`Chapter 15 S87 Security and Monitoring 455
`
`Traffic Screening 455
`Screening Considerations 457
`MTP 457
`SCCP 457
`
`MTP3: Management Messages 458
`Originating Point Code 459
`Destination Point Code 459
`
`SCCP 459
`SCCP User Messages 460
`ManagementMessages 460
`Subsystem Prohibited (SSP) 460
`Subsystem Allowed (SSA) 460
`Subsystem Status Test (SST) 460
`
`Parameters 461
`
`Traffic Monitoring 461
`Q.752 Monitoring Measurements 463
`MTP: Link Failures 463
`MTP: Surveillance 464
`MTP: Detection of Routing and Distribution Table Errors 465
`
`
`
`Page 25 of 156
`
`

`

`XXV
`
`MTP: Detection of Increases in Link SU Error Rates 465
`MTP: Detection of Marginal Link Faults 465
`MTP: Link, Linkset, Signaling Point, and Route Set Utilization 466
`MTP: Component Reliability and Maintainability Studies 467
`SCCP: Routing Failures 468
`SCCP: Configuration Management 469
`SCCP: Utilization Performance 469
`SCCP: Quality of Service 4 70
`ISUP: Availability/Unavailability 471
`ISUP: Errors 471
`ISUP: Performance 472
`TCAP Fault Management 472
`TCAP Performance 4 72
`
`Summary 473
`
`Chapter 16 SS7 Testing 475
`
`Test Equipment 476
`
`Test Specification Creation 478
`
`MTP 2 Testing 480
`Test Configuration 480
`Example 1: Initialization (Power-up), Test 1.1 481
`Part (a) 481
`Part (b) 482
`Example 2: Normal Alignment-Correct Procedure (FISU), Test 1.5 482
`Part (a) 483
`Part (b) 483
`Example 3: Individual End Sets Emergency, Test 1.22 484
`Example 4: SIO Received During Link In-Service, Test 1.28 485
`Example 5: Unexpected Signal Units/Orders in "In-Service" State, Test 2.7 485
`Example 6: Link Aligned Ready (Break Tx Path), Test 3.1 486
`