134 V 2

Course 134
Current
Current CDMA
CDMA Networks
Networks
Architectures,
Architectures, Algorithms,
Algorithms, &
& Performance
Performance
April, 2001 Course 134v2.0 (c) 2001 Scott Baxter Page 1

Section A
CDMA
CDMA Principles
Principles Review
Review

CDMA: Using A New Dimension
All CDMA users occupy the same frequency CDMA

at the same time! Frequency and time are
not used as discriminators
CDMA operates by using CODING to
discriminate between users
CDMA interference comes mainly from
nearby users
Each user is a small voice in a roaring
crowd -- but with a uniquely recoverable Figure of Merit: C/I
code (carrier/interference ratio)
AMPS: +17 dB
TDMA: +14 to +17 dB
GSM: +7 to 9 dB.
CDMA: -10 to -17 dB.
CDMA: Eb/No ~+6 dB.

DSSS Spreading: Time-Domain View
Input A: User’s Data Originating Site
At Originating Site: 1
Input A: User’s Data @ Input B: Spreading Code
XOR
19,200 bits/second Exclusive-OR
Gate
Input B: Walsh Code #23
@ 1.2288 Mcps
Output: Spread Spread Spectrum Signal
spectrum signal
via air interface Input A: Received Signal Destination Site

At Destination Site:
Input A: Received XOR
Input B: Spreading Code Exclusive-OR
spread spectrum signal Gate
Input B: Walsh Code #23

@ 1.2288 Mcps
Output: User’s Original Data
Output: User’s Data @
19,200 bits/second just 1
as originally sent
Drawn to actual scale and time alignment

Spreading from a Frequency-Domain View
TRADITIONAL COMMUNICATIONS SYSTEM

Spread Spectrum
Traditional technologies try Slow
Narrowband
Signal Slow
to squeeze signal into Information
Sent
Information
Recovered
minimum required TX RX
bandwidth
CDMA uses larger SPREAD-SPECTRUM SYSTEM
bandwidth but uses Wideband
resulting processing gain to Slow
Signal
Slow
increase capacity Information
Sent
Information
Recovered
TX RX
Fast Fast
Spreading Spreading
Sequence Sequence
Spread Spectrum Payoff:

Processing Gain

CDMA Uses Code Channels
Building a
The purpose of a CDMA system is to transmit bits CDMA Signal
from one user to another
• Vocoder bits are the “payload” in voice calls Bits
from User’s Vocoder
• Fax or Web TCP/IP data bits are also possible
A CDMA signal uses many chips to convey just
one bit of information Forward Error
Correction
Each user has a unique chip pattern, in effect a Symbols
channel made from codes
To recover a bit, integrate a large number of chips
interpreted by the user’s known code pattern Coding and
Spreading
Other users’ code patterns appear random and
add up in a random self-canceling fashion; they Chips
don’t disturb the bit decoding decision being
made regarding information transmitted on the
proper code pattern

“Sneak Preview”: How One Traffic Channel
Is Transmitted by One Sector to a Mobile
QPSK RF
Users Σ Summing
Analog
BTS
Demodulated
Received
CDMA Signal
1
Despreading Sequence
if 0 = (Locally Generated, =0) Decision:
if 1 =
Received energy: Correlation Matches!
(=0) 1
Σ
matches +10
opposite -26
Opposite
Time ( =1)
Integration
-16
This figure illustrates the basic technique of CDMA signal
generation at the sector and recovery at the mobile.
The complete coding process uses two additional codes,
as described in following slides.
Spreading: What we do, we can undo
ORIGINATING SITE DESTINATION

Spread Data Stream
Input Recovered
Data Data
Spreading Spreading
Sequence Sequence
Sender combines data with a fast spreading sequence, transmits

spread data stream
Receiver intercepts the stream, uses same spreading sequence
to extract original data

“Shipping and Receiving” via CDMA
Shipping Receiving
FedEx
FedEx
Data Mailer Mailer Data
Whether in shipping and receiving, or in CDMA, packaging is

extremely important!
Cargo is placed inside “nested” containers for protection and to
allow addressing
The shipper packs in a certain order, and the receiver unpacks in
the reverse order
CDMA “containers” are spreading codes

CDMA’s Nested Spreading Sequences
ORIGINATING SITE DESTINATION

Spread-Spectrum Chip Streams
X+A X+A+B X+A+B+C X+A+B X+A
Input Recovered
Data Data
X X
Spreading Spreading Spreading Spreading Spreading Spreading

Sequence Sequence Sequence Sequence Sequence Sequence
A B C C B A
CDMA combines three different spreading sequences to create unique,
robust channels
The sequences are easy to generate on both sending and receiving ends of
each link
“What we do, we can undo”

One of the CDMA Spreading Sequences:
Walsh Codes
WALSH CODES
# ---------------------------------- 64-Chip Sequence ------------------------------------------
0 0000000000000000000000000000000000000000000000000000000000000000
1 0101010101010101010101010101010101010101010101010101010101010101
64 “Magic” Sequences, each 64 chips long

2 0011001100110011001100110011001100110011001100110011001100110011
3 0110011001100110011001100110011001100110011001100110011001100110
4 0000111100001111000011110000111100001111000011110000111100001111
5 0101101001011010010110100101101001011010010110100101101001011010
Each Walsh Code is precisely Orthogonal with

6 0011110000111100001111000011110000111100001111000011110000111100
7 0110100101101001011010010110100101101001011010010110100101101001
8 0000000011111111000000001111111100000000111111110000000011111111
9 0101010110101010010101011010101001010101101010100101010110101010
respect to all other Walsh Codes 10

11
12
0011001111001100001100111100110000110011110011000011001111001100
0110011010011001011001101001100101100110100110010110011010011001
0000111111110000000011111111000000001111111100000000111111110000
13 0101101010100101010110101010010101011010101001010101101010100101
• it’s simple to generate the codes, or 14

15
16
0011110011000011001111001100001100111100110000110011110011000011
0110100110010110011010011001011001101001100101100110100110010110
0000000000000000111111111111111100000000000000001111111111111111
17 0101010101010101101010101010101001010101010101011010101010101010
• they’re small enough to use from ROM 18

19
20
0011001100110011110011001100110000110011001100111100110011001100
0110011001100110100110011001100101100110011001101001100110011001
0000111100001111111100001111000000001111000011111111000011110000
21 0101101001011010101001011010010101011010010110101010010110100101
22 0011110000111100110000111100001100111100001111001100001111000011
23 0110100101101001100101101001011001101001011010011001011010010110
24 0000000011111111111111110000000000000000111111111111111100000000
25 0101010110101010101010100101010101010101101010101010101001010101
26 0011001111001100110011000011001100110011110011001100110000110011
27 0110011010011001100110010110011001100110100110011001100101100110
28 0000111111110000111100000000111100001111111100001111000000001111
29 0101101010100101101001010101101001011010101001011010010101011010
Unique Properties: 30
31
32
0011110011000011110000110011110000111100110000111100001100111100
0110100110010110100101100110100101101001100101101001011001101001
0000000000000000000000000000000011111111111111111111111111111111
33 0101010101010101010101010101010110101010101010101010101010101010
Mutual Orthogonality 34
35
36
0011001100110011001100110011001111001100110011001100110011001100
0110011001100110011001100110011010011001100110011001100110011001
0000111100001111000011110000111111110000111100001111000011110000
37 0101101001011010010110100101101010100101101001011010010110100101
38 0011110000111100001111000011110011000011110000111100001111000011
39 0110100101101001011010010110100110010110100101101001011010010110
40 0000000011111111000000001111111111111111000000001111111100000000
41 0101010110101010010101011010101010101010010101011010101001010101
42 0011001111001100001100111100110011001100001100111100110000110011
EXAMPLE: 43
44
45
0110011010011001011001101001100110011001011001101001100101100110
0000111111110000000011111111000011110000000011111111000000001111
0101101010100101010110101010010110100101010110101010010101011010
46 0011110011000011001111001100001111000011001111001100001100111100
47 0110100110010110011010011001011010010110011010011001011001101001
Correlation of Walsh Code #23 with Walsh Code #59 48

49
50
0000000000000000111111111111111111111111111111110000000000000000
0101010101010101101010101010101010101010101010100101010101010101
0011001100110011110011001100110011001100110011000011001100110011
51 0110011001100110100110011001100110011001100110010110011001100110
52 0000111100001111111100001111000011110000111100000000111100001111
#23 0110100101101001100101101001011001101001011010011001011010010110 53 0101101001011010101001011010010110100101101001010101101001011010
54 0011110000111100110000111100001111000011110000110011110000111100
#59 0110011010011001100110010110011010011001011001100110011010011001 55 0110100101101001100101101001011010010110100101100110100101101001
56 0000000011111111111111110000000011111111000000000000000011111111
Sum 0000111111110000000011111111000011110000000011111111000000001111 57 0101010110101010101010100101010110101010010101010101010110101010
58 0011001111001100110011000011001111001100001100110011001111001100
59 0110011010011001100110010110011010011001011001100110011010011001
60 0000111111110000111100000000111111110000000011110000111111110000
Correlation Results: 32 1’s, 32 0’s: Orthogonal!! 61

62
0101101010100101101001010101101010100101010110100101101010100101
0011110011000011110000110011110011000011001111000011110011000011
63 0110100110010110100101100110100110010110011010010110100110010110

Other Sequences: Generation & Properties
An Ordinary Shift Register
Other CDMA sequences are
generated in shift registers
Sequence repeats every N chips,
Plain shift register: no fun, where N is number of cells in register
sequence = length of register
A Tapped, Summing Shift Register
Tapped shift register generates a
wild, self-mutating sequence 2N-1
chips long (N=register length) Sequence repeats every 2N-1 chips,
• Such sequences match if where N is number of cells in register
compared in step (no-brainer,
A Special Characteristic of Sequences
any sequence matches itself) Generated in Tapped Shift Registers
• Such sequences appear Compared In-Step: Matches Itself
approximately orthogonal if Sequence:
compared with themselves not Self, in sync:

Sum: Complete Correlation: All 0’s
exactly matched in time
Compared Shifted: Little Correlation
• false correlation typically <2% Sequence:
Self, Shifted:
Sum: Practically Orthogonal: Half 1’s, Half 0’s

Another CDMA Spreading Sequence:
The Short PN Code
32,768 chips long

26-2/3 ms. CDMA QPSK Phase Modulator
(75 repetitions in 2 sec.) Using I and Q PN Sequences
I
Q I-sequence cos ωt
QPSK-
chip modulated
The short PN code consists of two Σ RF
PN Sequences, I and Q, each input Output
32,768 chips long
• Generated in similar but Q-sequence * sin ωt
differently-tapped 15-bit shift
registers
* In BTS, I and Q are used in-phase.
• They’re always used together, In handset, Q is delayed 1/2 chip to
modulating the two phase axes avoid zero-amplitude crossings which
of a QPSK modulator would require a linear power amplifier

Third CDMA Spreading Sequence: Long Code
Generation & Masking to establish Offset
Long Code Register
(@ 1.2288 MCPS)
AND Public Long Code Mask

1100011000 PERMUT ED ESN
SUM
= (STATIC)
User Long Code

Modulo-2 Addition Sequence
(@1.2288 MCPS)
Generated in a 42-bit register, the PN Long code is more than 40 days long
(~4x1013 chips) -- too big to store in ROM in a handset, so it’s generated chip-
by-chip using the scheme shown above
Each handset codes its signal with the PN Long Code, but at a unique offset
computed using its ESN (32 bits) and 10 bits set by the system
• this is called the “Public Long Code Mask”; produces unique shift
• private long code masks are available for enhanced privacy
Integrated over a period even as short as 64 chips, phones with different PN
long code offsets will appear practically orthogonal

Putting it All Together: CDMA Channels
FORWARD CHANNELS
One LONG CODE:

Sector Data WALSH CODE: Individual User
Scrambling SHORT PN OFFSET: Sector
REVERSE CHANNELS
WALSH CODES:
used as symbols
LONG CODE OFFSET: for robustness
individual handset SHORT PN:
BTS used at 0 offset
for tracking
The three spreading codes are used in different ways to create the
forward and reverse links
A forward channel exists by having a specific Walsh Code assigned to the
user, and a specific PN offset for the sector
A reverse channel exists because the mobile uses a specific offset of the
Long PN sequence

Section B
IS-95
IS-95 CDMA
CDMA Forward
Forward and
and
Reverse
Reverse Channels
Channels

How a BTS Builds the Forward Code Channels
Switch BSC or BTS (1 sector) Short PN Code
Access PN Offset 246
Manager Walsh #0 I Q cos ωt
Pilot FEC x Trans-
Walsh #32 + mitter,
Sync FEC Sector X
x
Walsh #1 sin ωt
Paging FEC
A Forward Channel
Walsh #12 is identified by:
Vocoder FEC ΣΣ its CDMA RF
Walsh #23 carrier Frequency
Vocoder FEC a Channel Element
I Q the unique Short
Walsh #27 Code PN Offset of
Vocoder FEC the sector
the unique Walsh
Walsh #44
Vocoder FEC Code of the user
more more more

Functions of the CDMA Forward Channels
Pilot Walsh 0 PILOT: WALSH CODE 0

Paging Walsh 1 • The Pilot is a “structural beacon” which
does not contain a character stream. It is a
Walsh 6 timing source used in system acquisition
and as a measurement device during
Walsh 11 handoffs
Walsh 19 SYNC: WALSH CODE 32
• This carries a data stream of system
Walsh 20 identification and parameter information
used by mobiles during system acquisition
Sync Walsh 32
PAGING: WALSH CODES 1 up to 7
Walsh 37 • There can be from one to seven paging
Walsh 41 channels as determined by capacity needs.
They carry pages, system parameters
Walsh 42 information, and call setup orders
Walsh 55 TRAFFIC: any remaining WALSH codes

• The traffic channels are assigned to
Walsh 56 individual users to carry call traffic. All
remaining Walsh codes are available,
Walsh 60 subject to overall capacity limited by noise

Code Channels in the Reverse Direction
Switch BSC, BTS (1 sector)
CBSC, A Reverse Channel is identified by:
Access Long Code Gen its CDMA RF carrier Frequency
Manager
Channel Element the unique Long Code PN Offset
Access Channels
of the individual handset
Long Code Gen Long
Code
Vocoder Channel Element offset Long
Code
Receiver, offset
Long Code Gen Sector X
Vocoder Channel Element
a Channel Element
Long Code Gen

Long Long
Vocoder Channel Element Code Code
offset Long
Code offset
offset Long
Long Code Gen Code
offset
Vocoder Channel Element
more more more

Functions of the CDMA Reverse Channels
There are two types of CDMA Reverse Channels:
TRAFFIC CHANNELS are used by individual users
during their actual calls to transmit traffic to the BTS
• a reverse traffic channel is really just a user-
specific public or private Long Code mask
• there are as many reverse Traffic Channels as
there are CDMA phones in the world!
BTS ACCESS CHANNELS are used by mobiles not yet
in a call to transmit registration requests, call setup
requests, page responses, order responses, and
other signaling information
• an access channel is really just a public long
code offset unique to the BTS sector REG
• Access channels are paired to Paging Channels.
Each paging channel can have up to 32 access 1-800
242
channels. 4444
Although a sector can have up to seven paging channels, and each paging channel
can have up to 32 access channels, nearly all systems today use only one paging
channel per sector and only one access channel per paging channel.
Basic CDMA Network Architecture
Switch Access Manager BTS

GPS or (C)BSC GPS
GPSR
SLM CM GPSR
BSM CDSU CDSU DISCO TFU
DMS-BUS TFU1 CDSU

Ch. Card ACC
DISCO 1 CDSU
LPP ENET LPP
CDSU
CDSU
Packets
DISCO 2
CDSU Σα Txcvr
A
RFFE
A
Σβ
Chips
Txcvr RFFE
CDSU
DS0 in T1DTCs CDSU Σχ
B
Txcvr
C
B
RFFE
C
SBS
IOC Vocoders
Vocoder Channel RF
Selectors Element
PSTN

Forward Traffic Channel:
Generation Details from IS-95
bits symbols chips
I PN
CHANNEL ELEMENT
Power
Control Walsh
9600 bps function
Bit
4800 bps R = 1/2 19.2
2400 bps ksps Scrambling M 1.2288
1200 bps Convolutional Block Mcps
U
or Encoding and Interleaving
14400 bps Repetition Symbol X
7200 bps 28.8 Puncturing 19.2
3600 bps ksps (13 kb only) ksps
1800 bps
19.2
(From Vocoder)
1.2288 ksps
Q PN
User Address Long PN Code Mcps
Mask Decimator Decimator 800 Hz
Generation
(ESN-based)

Reverse Traffic Channel:
Generation Details from IS-95
I PN
9600 bps (no offset)
4800 bps R = 1/3
1.2288
2400 bps 28.8 28.8 307.2 Mcps
1200 bps Convolutional ksps ksps Orthogonal kcps Data Burst 1/2 PN
Block
or Encoder & Randomizer Chip
Interleaver Modulation
14400 bps Repetition Delay
7200 bps D
3600 bps R = 1/2
1800 bps 1.2288 Q PN
User Address Long Mcps (no offset)
Mask PN Code
Generator Direct
Sequence
Spreading

Section C
IS-95
IS-95 Operational
Operational Details
Details
Vocoding,
Vocoding, Multiplexing,
Multiplexing, Power
Power Control
Control

Variable Rate Vocoding & Multiplexing
DSP QCELP VOCODER
Vocoders compress speech, reduce bit 20ms Sample

rate, greatly increasing capacity Pitch
Filter
CDMA uses a superior Variable Rate Codebook
Vocoder
Coded Result Feed-
• full rate during speech back Formant
Filter
• low rates in speech pauses
• increased capacity bits Frame Sizes
• more natural sound 288 Full Rate Frame
Voice, signaling, and user secondary 144 1/2 Rate Frame
data may be mixed in CDMA frames 72 1/4 Rt.
36 1/8
Frame Contents: can be a mixture of

Primary Signaling Secondary
Traffic (System (On-Air
(Voice or
data) Messaging) activation, etc)

Forward Power Control
BSC BTS (1 sector) Help!

Pilot
Trans-
Sync mitter, Forward
Paging Sector X RF
User 1 Σ I Q
User 2 Short PN
Vocoder/
Selector User 3
more
The BTS continually reduces the strength of each user’s forward

baseband chip stream
When a particular handset sees errors on the forward link, it
requests more energy
The complainer’s chip stream gets a quick boost; afterward,
continues to diminish
Each network manufacturer uses FER-based triggers and initial,
minimum, and maximum traffic channel DGU values

Reverse Power Control
800 bits per second
BSC BTS RX RF Digital

Stronger than Reverse Closed
Open
setpoint? RF Loop Loop
Bad FER?
Raise Setpoint Setpoint TX RF Digital
Occasionally, Handset
as needed
Three methods work in tandem to equalize all handset signal levels
at the BTS
• Reverse Open Loop: handset adjusts power up or down based
on received BTS signal (AGC)
• Reverse Closed Loop: Is handset too strong? BTS tells up or
down 1 dB 800 times/second
• Reverse Outer Loop: BSC has FER trouble hearing handset?
BSC adjusts BTS setpoint

Details of Reverse Link Power Control
Subscriber Handset
TXPO Handset Transmit Power BTS
Receiver>> Rake
R
• Actual RF power output of the LNA
≈
Viterbi
DUP x IF R Σ
Decoder
handset transmitter, including TXPO PA ∼ LO R
combined effects of open loop x ~
LO
Open Loop S
power control from receiver Closed Loop Pwr Ctrl

IF I Long PN
AGC and closed loop power x
Vocoder
Orth
control by BTS IF Mod
x
x Mod FEC
Q <<Transmitter
• can’t exceed handset’s maximum
(typ. +23 dBm) Typical TXPO:
+23 dBm in a coverage hole
TXPO = -(RXdbm) -C + TXGA 0 dBm near middle of cell
C = +73 for 800 MHz. systems -50 dBm up close to BTS
= +76 for 1900 MHz. systems
Typical Transmit Gain Adjust
TXGA Transmit Gain Adjust 0 dB
• Sum of all closed-loop power
control commands from the BTS -10 dB
since the beginning of this call
-20 dB
Time, Seconds
Course 134
CDMA
CDMA Air
Air Interface
Interface Capacity
Capacity

The Basic CDMA Capacity Equation
Basic Capacity of a CDMA Cell
Case A Case B
Vocoder or Data Rate, kb/s 9.6 14.4 (9.6 for Rate Set 1, 14.4 for Rate Set 2)
Bandwidth, MHz. 1.25 1.25 (IS-95/J-Std 008 is 1.25 MHz.)
Eb/No in dB 7 7 5.01 Eb/No as ratio
Voice Duty factor 0.40 0.40 100% when talking, 12.5% when listening
Freq Reuse Efficiency 0.60 0.60 fraction of energy coming from within same cell
Sectorization Gain 2.55 2.55 (2.55 observed for 3-sector cells in tests)
Gross Number of Users/Cell 99.4 66.2
Percentage of Users in Soft Handoff 50% 50%
Net Unique Users Per Cell 66.2 44.2
As this spreadsheet shows, actual traffic capacity is influenced

strongly by the degree of soft handoff actually in progress

Capacity Issues with Current CDMA Networks
Today, CDMA networks for the most part are still single-carrier
• this severely limits the capacity of one BTS to approximately 20
erlangs
• implementing additional carriers brings logistical problems
involving handoffs and system acquisition by mobiles
Multiple-carrier operation is essential to achieve reasonable
capacities
Within networks, there are strategies for squeezing the most out of
overloaded single-carrier BTSs. Some of the main points are:
• reduce Pilot, Sync, and Paging levels as low as possible,
thereby gaining precious additional energy for traffic channels
• reduce BTS traffic channel DGU settings as low as possible
without provoking forward link FER.

Wireless System Capacity Comparisons
Each wireless technology (AMPS,
NAMPS, D-AMPS, GSM, CDMA) AMPS, D-AMPS, N-AMPS
uses a specific modulation type 1 3 1 Users 2
7 3
with its own unique signal 1
6 4
characteristics Vulnerability: 5
C/I ≅ 17 dB
Signal Bandwidth determines 30 30 10 kHz Bandwidth
how many RF signals will “fit” in Typical Frequency Reuse N=7
the operator’s licensed spectrum
Robustness of RF signal
determines tolerable level of Vulnerability: 2
interference and necessary 8 Users C/I ≅ 6.5-9 dB 1
3
physical separation of cochannel 4
cells 200 kHz
Typical Frequency Reuse N=4
Number of users per RF signal
directly affects capacity CDMA Vulnerability: 1
EbNo ≅ 6 dB 1 1
In the following page, we will 1
1 1
develop the number of users and 22 Users 1 1
traffic in erlangs per site for each 1 1
1
of the popular wireless 1250 kHz
1 1
1
technologies Typical Frequency Reuse N=1

Comparison of Wireless System Capacities 8 8
824 835 845 849 870 880 9 9
0 4
A B Paging, ESMR, etc. A B
825 846.5 869 891.5
800 Cellular (A,B) 1900 PCS (A, B, C) 1900 PCS (D, E, F)

Fwd/Rev Spectrum kHz. 12,500 12,500 12,500 15,000 15,000 15,000 5,000 5,000 5,000
Technology AMPS TDMA CDMA TDMA GSM CDMA TDMA GSM CDMA
Req'd C/I or Eb/No, db 17 17 6 17 12 6 17 12 6
Freq Reuse Factor, N 7 7 1 7 4 1 7 4 1
RF Signal BW, kHz 30 30 1250 30 200 1250 30 200 1250
Total # RF Carriers 416 416 9 500 75 11 166 25 3
RF Sigs. per cell @N 59 59 9 71 18 11 23 6 3
# Sectors per cell 3 3 3 3 3 3 3 3 3
#CCH per sector 1 1 0 1 0 0 1 0 0
RF Signals per sector 18 18 9 22 6 11 6 2 3
Voicepaths/RF signal 1 3 22 3 8 22 3 8 22
SH average links used 1.66 1.66 1.66
Unique Voicepaths/carrier 13.253 13.253 13.253
Voicepaths/Sector 18 54 198 66 48 242 18 16 66
Unique Voicepaths/Sector 18 54 119 66 48 145 18 16 39
P.02 Erlangs per sector 11.5 44 105.5 55.3 38.4 130.9 11.5 9.83 30.1
P.02 Erlangs per site 34.5 132 316.5 165.9 115.2 392.7 34.5 29.49 90.3
Capacity vs. AMPS800 1 3.8 9.2 4.8 3.3 11.4 1.0 0.9 2.6
A D B E F C unlic. unlic. A D B E F C
data voice
15 5 15 5 5 15 15 5 15 5 5 15
1850 1910 1930 1990
MHz. MHz. MHz. MHz.

Multicarrier CDMA Capacity Implications
CDMA Carrier Frequencies
1 2 3 4 5 6 7 8 9 1011
Fwd/Rev Spectrum kHz. 12,500 1,800 3,050 4,300 5,550 6,800 8,050 9,300 10,550 11,800 13,050 14,300
Technology AMPS CDMA CDMA CDMA CDMA CDMA CDMA CDMA CDMA CDMA CDMA CDMA
Req'd C/I or Eb/No, db 17 6 6 6 6 6 6 6 6 6 6 6
Freq Reuse Factor, N 7 1 1 1 1 1 1 1 1 1 1 1
RF Signal BW, kHz 30 1250 1250 1250 1250 1250 1250 1250 1250 1250 1250 1250
Total # RF Carriers 416 1 2 3 4 5 6 7 8 9 10 11
RF Sigs. per cell @N 59 1 2 3 4 5 6 7 8 9 10 11
# Sectors per cell 3 3 3 3 3 3 3 3 3 3 3 3
#CCH per sector 1 0 0 0 0 0 0 0 0 0 0 0
RF Signals per sector 18 1 2 3 4 5 6 7 8 9 10 11
Voicepaths/RF signal 1 22 22 22 22 22 22 22 22 22 22 22
SH average links used 1 1.66 1.66 1.66 1.66 1.66 1.66 1.66 1.66 1.66 1.66 1.66
Unique Voicepaths/carrier 1 13.3 13.3 13.3 13.3 13.3 13.3 13.3 13.3 13.3 13.3 13.3
Voicepaths/Sector 18 22 44 66 88 110 132 154 176 198 220 242
Unique Voicepaths/Sector 18 13 26 39 53 66 79 92 106 119 132 145
P.02 Erlangs per sector 11.5 7.4 18.4 30.1 43.1 55.3 67.7 80.2 93.8 105.5 119.1 130.9
P.02 Erlangs per site 34.5 22.2 55.2 90.3 129.3 165.9 203.1 240.6 281.4 316.5 357.3 392.7
Capacity vs. AMPS800 1 0.64 1.60 2.6 3.7 4.8 5.9 7.0 8.2 9.2 10.4 11.4

Course 134
CDMA
CDMA Network
Network Architecture
Architecture

Structure of a Typical Wireless System
HLR Home Location Register
(subscriber database)
SUPPORT
FUNCTIONS
BASE STATIONS
Voice Mail System SWITCH BASE STATION
CONTROLLER
PSTN Mobile Telephone

Local Carriers Switching Office
Long Distance ATM Link
Carriers to other CDMA
Networks
(Future)

Signal Flow: Two-Stage Metamorphosis
MTX BSC-BSM BTS

GPS GPS
GPSR
SLM CM GPSR
DMS-BUS TFU1 CDSU

Ch. Card ACC
DISCO 1 CDSU
LPP ENET LPP
CDSU
CDSU
Packets
DISCO 2
CDSU Σα Txcvr
A
RFFE
A
Σβ
Chips
Txcvr RFFE
CDSU
DS0 in T1DTCs CDSU Σχ
B
Txcvr
C
B
RFFE
C
SBS
IOC Vocoders
Vocoder Channel RF
Selectors Element
PSTN

Course 134
Nortel
Nortel CDMA
CDMA Network
Network
Architecture
Architecture
www.nortel.com

NORTEL CDMA System Architecture
MTX BSC-BSM BTS
GPS GPS
GPSR
SLM CM GPSR
DMS-BUS TFU1 CDSU

Ch. Card ACC
CDSU DISCO 1 CDSU
LPP ENET LPP CDSU Σα Txcvr
A
RFFE
A
CDSU DISCO 2
CDSU Σβ Txcvr
B
RFFE
B
DTCs CDSU Σχ Txcvr
C
RFFE
C
SBS
IOC Vocoders
Selectors
•Current Product Capabilities:

PSTN & Billing •Each BSC can have up to 4 DISCO shelves
Other MTXs
•About 240 sites, roughly 6000 erlangs capacity
•Each MTX can have up to 2 BSCs
Switch: The Nortel MTX
MTX
SLM CM
DMS-BUS Primary functions

CDMA • Call Processing
BSC
LPP ENET LPP Unch. T1 • Mobility Management
Ch.T1 CDMA – HLR-VLR access
DTCs SBS – Intersystem call delivery (IS-41C)
– Inter-MTX handover (IS-41C)
IOC
• Billing Data Capture
Ch MAP,
T1 • Calling Features & Services
CCS7
VDUs
• Collecting System OMs, Pegs
Billing
PSTN & High reliability, redundancy
Other MTXs
The Nortel BSC
BSC
GPS
GPSR
BSM CDSU
TFU1 CDSU
MTX BTSs
LPP CDSU DISCO 1 CDSU
CDSU DISCO 2 CDSU Primary functions

CDSU • vocoding
CDSU • soft handoff management
MTX SBS • FER-based power control
(voice Vocoders
trunks) Selectors • routing of all traffic and control
packets
Scaleable architecture
T1 channelized (24 DS0) • expand SBS to keep pace with
traffic growth
T1 unchannelized
• expandable DISCO
BCN link (HDLC)
The Nortel BTS
Base Transceiver Station

Primary function: Air link
• generate, radiate, receive CDMA RF
signal IS-95/J.Std. 8
• high-efficiency T1 backhaul
BTS • test capabilities
GPS Configurations
GPSR
• 1, 2, or 3 sectors
CDSU DISCO TFU • 800 MHz.: indoor
BSC
• 1900 MHz.: self-contained outdoor,
Ch. Card ACC
remotable RFFEs
Σα Txcvr
A
RFFE
A • new indoor, 800 MHz. & 1900 MHz.
Σβ Txcvr
B
RFFE
B multi-carrier options
Σχ Txcvr
C
RFFE
C • Metrocell

The Nortel BSM
NORTEL CDMA
BSM BSM Base Station Manager
Ethernet LAN
Primary functions: OA&M for CDMA
components
• Configuration management
X-Windows terminals
– BSC, BTS configuration and
GNP TELCO
parameters
WORKSERVER
• Fault management
SHELF
---------
HIGH
AVAILABILITY
BSM Workstation
– Alarm Reporting
BCN Links
• Performance management
GPS BSC BTS GPS – interface for CDMA statistics
GPSR
GPSR
CDSU CDSU DISCO TFU
and peg counts collection
TFU1
CDSU DISCO 1
CDSU
CDSU
Ch. Card ACC • Security management
CDSU Σα Txcvr RFFE
CDSU DISCO 2
CDSU Σβ
A
Txcvr
B
A
RFFE
B
• Unix-based
CDSU Σχ Txcvr
C
RFFE
C
SBS
Vocoders
Selectors

Nortel Operational Capacity Considerations
DISCO has
MTX 192 ports
GPS
max. Each
BSC-BSM One T-1 can carry all
traffic originated by a BTS
Typical CM processor one-carrier BTS; special
capacity considerations
BTS uses 1,
consideration required if
GPS
SBS shelf 1,
LPP CIU 1, daisy-chaining
CDMA LPP:
GPSR
Link 2, Ctrl. 2,
One pair SLM CM BSM GPSR
4.
CIUs and BSM
One pair CDSU CDSU DISCO TFU
Sufficient channel
CAUs per elements required for
approx. 600 DMS-BUS TFU1 CDSU traffic of all sectors:
erlangs one CE per link; 20
Ch. Card ACC CE per Channel Card
CDSU DISCO 1 CDSU
LPP ENET LPP CDSU Σα64 Walsh
Txcvr
A
RFFE
Codes/sector
A
CDSU DISCO 2
CDSU Σβ64 Walsh
Txcvr
B
RFFE
Codes/sector
B
DTCs CDSU Σχ64 Walsh
Txcvr
C
Codes/sector
RFFE
C
DTC & ENET: SBS Forward RF Capacity:

One port per IOC links use available
Vocoders BTS TX power
Vocoder plus
one port per Selectors Sufficient vocoders/selectors
outgoing trunk. required in BSC SBS, one per
Reverse RF Capacity:
simultaneous call on the system.
links cause noise floor
8 Vocoders per SBS card, 12
rise, use mobile power
cards per shelf, 4 shelves per
SBS cabinet.
PSTN •1-2001 Current Product Capabilities:
PSTN trunk groups must •Each BSC can have up to 4 DISCO shelves
be dimensioned to
support erlang load. •About 240 sites, roughly 6000 erlangs capacity
•Each MTX can have up to 2 BSCs
Course 134
Lucent
Lucent CDMA
CDMA Network
Network
Architecture
Architecture
www.lucent.com

Lucent CDMA System Architecture
PSTN &
Other MTXs
CDMA MSC (NO BSC)

ECP Access Manager BTS
Circuit Switch
Executive
Cellular Platform
Processor
Complex
(ECPC) ATM Channel ACU
CDMA Speech Unit
Handling Equipment Cluster Σ Baseband
α Combiner & Radio
Σβ Baseband
Combiner & Radio
Packet Switch Σχ Baseband

Combiner & Radio
Platform
Three Sizes of CDMA MSC: Two Access Manager sizes

•#5ESS-2000 large markets •Large: 16 MSCs, 200K BHCA,
•Compact Digital Exchange (CDX) medium market 222 BTSs, 500K HLR/VLR entries
•Very Compact Digital Exchange (VCDX) small mkts. •Small: 32 BTSs, ~30K subs

The Lucent ECP
Executive Cellular Processor

Primary functions
ECP
• Call Processing
• Mobility Management
Executive
Cellular – HLR-VLR access
Processor
Complex – Intersystem call delivery (IS-41C)
(ECPC)
– Inter-MTX handover (IS-41C)
• Calling Features & Services
• Collecting System OMs, Pegs
High reliability, redundancy

The Lucent #5ESS and Access Manager
PSTN &
Other MTXs
Primary functions
5ESS-2000 DCS • vocoding
• soft handoff management
Circuit Switch
Platform
• FER-based power control
• routing of all traffic and control
packets
CDMA Speech Scaleable architecture
Handling Equipment
• expand speech handlers
• expandable packet switch
Packet Switch
Platform

The Lucent BTS
Primary function: Air link

• generate, radiate, receive
CDMA RF signal IS-95/J.Std. 8
• high-efficiency T1 backhaul
• test capabilities
BTS
Channel ACU
Unit
Cluster Σ Baseband
α Combiner & Radio
Σβ Baseband
Combiner & Radio
Σχ Baseband
Combiner & Radio

Course 134
Motorola
Motorola CDMA
CDMA Network
Network
Architecture
Architecture
www.motorola.com

Motorola CDMA System Architecture
OMC-R BTS (SC614T/611)
OMC-R Motorola
PCSC Processor Advanced
Personal Wideband
Communications Application Interface
Switching Processor (MAWI)
Center (or SC-UNO)
CBSC BTS (SC9600/4800/2400)
Group Line
DSC Mobility Manager
EMX-2500 Interface (GLI)
PSTN or
EMX-5000
Multichannel
Transcoder
CDMA Card (MCC)
PC
Local
Maintenance
Facility

The Motorola PCSC
Personal Communications Switching Center

EMX-2500 Primary functions
• Call Processing
• HLR-VLR access
• Intersystem call delivery (IS-41C)
• Calling Features & Services
DSC
EMX-2500
PSTN or
EMX-5000

The Motorola CBSC
Centralized Base Station Controller

Mobility Manager
• allocation of BTS resources
• handoff management
• Call management & supervision
Transcoder
• vocoding
CBSC
• soft handoff management
Mobility Manager • FER-based power control
• routing of all traffic and control
packets
Transcoder

The Motorola BTS Family
BTS (SC614T/611) Primary function: Air link
Motorola • generate, radiate, receive
Advanced CDMA RF signal IS-
95/J.Std. 8
Wideband
Interface • high-efficiency T1
(MAWI) backhaul
• test capabilities
BTS (SC9600/4800/2400) SC611 Microcell
Group Line
Interface (GLI)
Multichannel
CDMA Card (MCC)
PC
Local
Maintenance
Facility
SC614T SC4852
Course 134
Samsung
Samsung CDMA
CDMA Network
Network
Architecture
Architecture
www.samsungelectronics.com

Samsung Switching Architecture
Samsung offers both a large switching product, the SDX100, and a

small modular switch for wireless local loop (including ISDN)
applications, the SDX-RB

Samsung CDMA BTS
Claimed capability for configuration up to 7 carriers

Omni, 2-sector, 3-sector configurations
Claimed capacity of approx. 20 calls/channel/sector
Large RF Footprint
800, 1800, 1900 versions available
Samsung has proposed to some customers BTS configurations
compatible with Nortel BSCs

Samsung CDMA Network Architecture
Samsung’s network architecture is

typical of other networks
• includes the same basic
elements as Qualcomm, Nortel,
Motorola, and Lucent
• uses Qualcomm chipsets
To date, Samsung has not found
network customers in North
America, despite live
demonstrations at industry
exhibitions
Samsung is known in North America
primarily for its handsets

Course 134
CDMA
CDMA Handset
Handset Architecture
Architecture

Functional Anatomy of a CDMA Handset
Antenna
Receiver Traffic Correlator
chips PN Generator Walsh Generator symbols
RF IF IF bits
Duplexer & RF IF Traffic Correlator Viterbi
Bandpass LNA Mixer BPF IF Decoder Vocoder
Filters PN Generator Walsh Generator
Power
Traffic Correlator
audio
Amplifier LO
PN Generator Walsh Generator messages
RF
Local
Mixer Oscillator
LO (Synthesized) Search Correlator (Pilots)
PN Generator Walsh =0 CPU &
IF Open Loop Pwr Control Control
Algorithms
IF
IF Transmit Gain Adjust: Closed Loop Pwr Control
IF
LONG CODE Generator
messages audio
Modulator
chips symbols symbols bits
Baseband Quadrature Direct Seq. Data Burst Orthogonal Block Conv. Encoder Vocoder
Filtering Spreading Spreading Randomizer Modulator Interleaver & Symbol Rep.
Transmitter

The Rake Receiver
Handset Rake Receiver
PN Walsh
Voice,
RF PN Walsh Σ Data,
BTS Messages
PN Walsh
BTS
Searcher Pilot Ec/Io
PN W=0
Every frame, handset uses combined outputs of the three traffic

correlators (“rake fingers”)
Each finger can independently recover a particular PN offset and
Walsh code
Fingers can be targeted on delayed multipath reflections, or even on
different BTSs
Searcher continuously checks pilots

CDMA Soft Handoff Mechanics
Switch BSC Handset Rake Receiver
PN Walsh
Voice,
Sel. RF PN Walsh Σ Data,
PN Walsh Messages
BTS
BTS Searcher
Pilot Ec/Io
PN W=0
CDMA soft handoff is driven by the handset

• Handset continuously checks available pilots
• Handset tells system pilots it currently sees
• System assigns sectors (up to 6 max.), tells handset
• Handset assigns its fingers accordingly
• All messages sent by dim-and-burst, no muting!
Each end of the link chooses what works best, on a frame-by-frame
basis!
• Users are totally unaware of handoff

Adventures
Adventures in
in Call
Call Processing
Processing
55 Minutes
Minutes in
in the
the Life
Life of
of aa CDMA
CDMA Handset
Handset
o n ds !)
Se c ne d
ay
30 o do
in
t
o
t ime
t
ego
a ll we’v
’s
(that

Our Call Processing Adventures
Layer-3 Messaging Review

Let’s Acquire the System!
Let’s do an Idle Mode Handoff!
Let’s Register!
Let’s Receive an Incoming Call!
Let’s Make an Outgoing Call!
Let’s End a Call!
Let’s Receive Notification of a Voice Message!
Let’s Do a Handoff!

CDMA Call Processing
Layer-3
Layer-3 Messaging
Messaging Review
Review

How CDMA Messages are Sent
EXAMPLE:
CDMA messages on both forward A POWER MEASUREMENT
and reverse traffic channels are REPORT MESSAGE
normally sent via dim-and-burst
Field Length
Messages include many fields of (in bits)
binary data MSG_TYPE (‘00000110’) 8
The first byte of each message ACK_SEQ 3
identifies message type: this allows
MSG_SEQ 3
the recipient to parse the contents
ACK_REQ 1
To ensure no messages are
missed, all CDMA messages bear ENCRYPTION 2
serial numbers and important ERRORS_DETECTED 5
messages contain a bit requesting POWER_MEAS_FRAMES 10
acknowledgment LAST_HDM_SEQ 2
Messages not promptly NUM_PILOTS 4
acknowledged are retransmitted
several times. If not acknowledged, NUM_PILOTS occurrences of this field:
the sender may release the call PILOT_STRENGTH 6 t
Field data processing tools capture
and display the messages for study RESERVED (‘0’s) 0-7

Message Vocabulary: Acquisition & Idle States
Pilot Channel Sync Channel
No Messages Sync Channel Msg
Access Channel
Paging Channel BTS
Registration Msg
Access Parameters Msg General Page Msg
Order Msg
System Parameters Msg Order Msg • Mobile Station Acknowldgment
•Base Station Acknowledgment
•Lock until Power-Cycled • Long Code Transition Request
• Maintenance required • SSD Update Confirmation
CDMA Channel List Msg many others….. many others…..
Extended System Channel Assignment Origination Msg

Parameters Msg Msg
Extended Neighbor Page Response Msg

List Msg Feature Notification Msg
Authentication Challenge
Global Service Authentication Response Msg
Redirection Msg Challenge Msg
Status Response Msg

Service Redirection Msg Status Request Msg
TMSI Assignment
SSD Update Msg TMSI Assignment Msg Completion Message
Data Burst Msg

Null Msg Data Burst Msg

Message Vocabulary: Conversation State
Forward Traffic Channel
Order Msg Alert With Reverse Traffic Channel
• Base Station Acknowledgment Information Msg
• Base Station Challenge
Confirmation
Service Request Msg Service Request Msg Origination
• Message Encryption Mode Continuation Msg
Authentication Service Response Msg Service Response Msg Authentication Challenge

Challenge Msg Response Msg
TMSI Assignment Msg Service Connect Msg Service Connect TMSI Assignment
Completion Message Completion Message
Send Burst DTMF Msg Service Option Service Option Control Send Burst DTMF Msg
Control Msg Message
Set Parameters Msg Status Request Msg Status Response Msg Parameters Response
Message
Power Control Flash With Flash With Power Measurement

Parameters Msg. Information Msg Information Msg Report Msg
Retrieve Parameters Msg Data Burst Msg Data Burst Message Order Message
• Mobile Sta. Acknowledgment
Analog Handoff Extended Handoff Pilot Strength •Long Code Transition
Direction Msg Direction Msg Measurement Msg Request
• SSD Update Confirmation
SSD Update Msg Neighbor List Handoff Completion Msg • Connect
Update Msg
Mobile Station In-Traffic System

Registered Msg Parameters Msg

Let’s
Let’s Acquire
Acquire the
the System!
System!

Find a Frequency with a CDMA RF Signal
Reverse Link Frequencies Forward Link Frequencies

(Mobile Transmit) (Base Station Transmit)
800 MHz. Cellular Spectrum
824 MHz. 835 845 849 870 880 890 894
A B Paging, ESMR, etc. A B

825 846.5 869 891.5
1900 MHz. PCS Spectrum
unlic. unlic.
A D B E F C data voice A D B E F C
1850MHz. 1910MHz. 1930MHz. 1990 MHz.
FREQUENCY LISTS:
Mobile scans forward link frequencies:
HISTORY PREFERRED
(Cellular or PCS, depending on model) LIST ROAMING
History List LIST
Last-used:
Preferred Roaming List Freq/SID x Freq/SID 1
Freq/SID y Freq/SID 2
until a CDMA signal is found. Freq/SID z Freq/SID 3
NO CDMA?! Go to AMPS, Freq/SID t Freq/SID 4
Freq/SID u Freq/SID 5
or to a power-saving standby mode etc. etc.

Find Strongest Pilot, Read Sync Channel
All PN Offsets
0
Ec/Io
1. Pilot Searcher Scans the Entire Range of PNs

-20
Chips 0 32K
PN 0 512
SYNC CHANNEL MESSAGE
2. Put Rake finger(s) on strongest 98/05/24 23:14:09.817 [SCH]
available PN, decode Walsh 32, Sync Channel Message
MSG_LENGTH = 208 bits
and read Sync Channel Message MSG_TYPE = Sync Channel Message
P_REV = 3
MIN_P_REV = 2
Active Pilot SID = 179
NID = 0
PILOT_PN = 168 Offset Index
Handset Rake Receiver n Rake Fingers LC_STATE = 0x0348D60E013
F1 PN168 W32 o SYS_TIME = 98/05/24 23:14:10.160
LP_SEC = 12
RF F2 PN168 W32 p LTM_OFF = -300 minutes
≈ x ≈ F3 PN168 W32 DAYLT = 0
LO
Srch PN??? W0 PRAT = 9600 bps
Reference PN RESERVED = 1

The System Determination Algorithm (SDA)
Handsets can be programmed with their Preferred Only bit set to True or
TRUE False. If True, the handset can only used preferred systems. If False, the
Preferred Only Bit FALSE handset can use non-preferred systems, but will prefer preferred systems
when available.
Acquisition Index There are 29 Acq Indexes in the current PRL. It

is normal for some to contain duplicate channels.
0 CDMA channels 350,400
1 CDMA channels 50, 100
2 Analog Block A When the phone Every three minutes idle
3 Analog Block B loses service, it phones rescan for any more-
scans the list of preferred signals in the current
channels in its Geo Group. This is called
current GEO group. “climbing the GEO group”.
System Records
SID NID PREF GEO Priority Index Roam Indicator
4139 65535 Pref New More 0 Off
59 65535 Pref Same More 2 On
52 65535 Pref Same More 3 Flash Some records are merely analog
“Guideposts” to allow the phone to
67 65535 Neg Same Same 3 Short-short-long
recognize where it is and position into the
4412 65535 Pref New More 1 Off proper GEO group “GEO confinement”.
: : : : : : :
61737 226 Neg New More 0 Off The last system record is not a real
system. It merely contains the version
65535 is a “wildcard” NID. Preferred “more” number of the PRl and is used by some
The phone is to accept any than the following phones to allow displaying the version.
NID it sees on this system. record.

How Idle Mobiles Choose CDMA Carriers
At turnon, Idle mobiles use proprietary algorithms to find the initial CDMA
carrier intended for them to use
Within that CDMA signal, two types of paging channel messages could
cause the idle mobile to choose another frequency: CDMA Channel List
Message and GSRM
Start
Preferred
MRU Only Bit 0 PRL Acq Idx
Yes
Go to last Strongest Is better
Is SID
frequency PN, read SID
permitted?
from MRU Sync available? F3
No Signal
Denied SID
No
CDMA Ch HASH using
F2 Config
List Message IMSI F1 Messages:
Read remain
Paging
Channel Global Svc my ACCOLC?
Redir Msg redirect
to another CDMA frequency or system
Legend
to Analog
Steps from Steps from Proprietary Typical Mobile
the CDMA proprietary SDA
standards SDAs databases System Determination Algorithm

How an Idle Mobile might change Carriers:
Method 1: Hashing from CDMA Channel List Message

• Message gives list of carrier frequencies used on its sector
• Mobiles Hash using their IMSIs (phone number), randomly select
• After hashing, the mobile will immediately jump to its chosen carrier
• End result: roughly equal division of idle mobiles among all available
carriers
Frequencies
How in Channel
M obiles List
TYPICAL CDMA CHANNEL LIST MESSAGE Hash 3
98/05/24 23:14:10.786 [PCH] CDMA Channel List Message 10 Digit IMSI Use Freq. #
6153000124 1
MSG_LENGTH = 96 bits 6153000125 2
MSG_TYPE = CDMA Channel List Message 6153000126 1
PILOT_PN = 168 Offset Index 6153000127 1
CONFIG_MSG_SEQ = 0 6153000128 3
6153000129 3
CDMA_FREQ = 100 CDMA_FREQ = 125 CDMA_FREQ = 175 6153000130 1
RESERVED = Field Omitted 6153000131 2
6153000132 1
6153000133 1

How an Idle Mobile might change Carriers:
Method 2: GSRM Global Service Redirection Message
• A GSRM on the Paging Channel redirects to another carrier or
system, all mobiles whose Access Overload Classes (ACCOLC) are
listed within the message
• A phone’s ACCOLC is normally equal to the last digit of its number
• The GSRM can be set to send any desired ACCOLC groups of
mobiles to other carriers; chosen ACCOLCs determine percentages
• Either GSRM or Hashing methods can be used, but not both!
EXAMPLE GLOBAL SERVICE REDIRECTION MESSAGE

98/05/17 24:21.566 Paging Channel: Global Service Redirection
PILOT_PN: 168, MSG_TYPE: 96, CONFIG_MSG_SEQ: 0
Redirected access overload classes: { 0, 1 }, RETURN_IF_FAIL: 0,
DELETE_TMSI: 0,
Redirection to an analog system:
EXPECTED_SID = 0
Do not ignore CDMA Available indicator on the redirected analog system
Attempt service on either System A or B with the custom system selection process

The Configuration Messages
After reading the Sync Channel, the mobile is now capable of

reading the Paging Channel, which now monitors constantly
Before it is allowed to transmit or operate on this system, the
mobile must collect a complete set of configuration messages
Collection is a short process -- all configuration messages are
repeated on the paging channel every 1.28 seconds
The configuration messages contain sequence numbers so the
mobile can recognize if any of the messages have been freshly
updated as it continues to monitor the paging channel
• Access parameters message sequence number
• Configuration message sequence number
• If a mobile notices a changed sequence number, or if 600
seconds passes since the last time these messages were read,
the mobile reads all of them again

Go to Paging Channel, Get Configured
All PN Offsets
0
Ec/Io
-20
Chips 0 32K
PN 0 Read the 512
Configuration Messages
Access Parameters Msg
Keep Rake finger(s) on strongest
available PN, decode Walsh 1, System Parameters Msg
and monitor the Paging Channel
CDMA Channel List Msg
Active Pilot Extended System
Parameters Msg (*opt.)
Handset Rake Receiver n Rake Fingers

(Extended*) Neighbor
List Msg
F1 PN168 W01 o
Global Service
RF F2 PN168 W01 p Redirection Msg (*opt.)
≈ x ≈ F3 PN168 W01
LO
Srch PN??? W0
Now we’re ready to operate!!
Reference PN
Two Very Important Configuration Messages
SYSTEM PARAMETERS MESSAGE

ACCESS PARAMETERS MESSAGE 98/05/24 23:14:11.126 [PCH] System Parameter Message
98/05/24 23:14:10.427 [PCH]
MSG_TYPE = System Parameters Message
MSG_TYPE = Access Parameters Message
CONFIG_MSG_SEQ = 0
SID = 179 NID = 0
ACC_MSG_SEQ = 27
REG_ZONE = 0 TOTAL_ZONES = 0 ZONE_TIMER = 60 min
ACC_CHAN = 1 channel
MULT_SIDS = 0 MULT_NID = 0 BASE_ID = 8710
NOM_PWR = 0 dBINIT_PWR = 0 dBPWR_STEP = 4 Db
BASE_CLASS = Public Macrocellular
NUM_STEP = 5 Access Probes Maximum
PAGE_CHAN = 1 channel
MAX_CAP_SZ = 4 Access Channel Frames Maximum
MAX_SLOT_CYCLE_INDEX = 0
PAM_SZ = 3 Access Channel Frames
HOME_REG = 0 FOR_SID_REG = 0 FOR_NID_REG = 1
Persist Val for Acc Overload Classes 0-9 = 0
POWER_UP_REG = 0 POWER_DOWN_REG = 0
Persist Val for Acc Overload Class 10 = 0
PARAMETER_REG = 1 REG_PRD = 0.08 sec
BASE_LAT = 00D00'00.00N BASE_LONG = 000D00'00.00E
REG_DIST = 0
SRCH_WIN_A = 40 PN chips
SRCH_WIN_N = 80 PN chips
SRCH_WIN_R = 4 PN chips
Persistance Modifier for Msg Tx = 1
NGHBR_MAX_AGE = 0
Persistance Modifier for Reg = 1
PWR_REP_THRESH = 2 frames
Probe Randomization = 15 PN chips
PWR_REP_FRAMES = 56 frames
Acknowledgement Timeout = 320 ms
PWR_THRESH_ENABLE = 1
Probe Backoff Range = 4 Slots Maximum
PWR_PERIOD_ENABLE = 0
Probe Sequence Backoff Range = 4 Slots Max.
PWR_REP_DELAY = 20 frames
Max # Probe Seq for Requests = 2 Sequences
RESCAN = 0
Max # Probe Seq for Responses = 2 Sequences
T_ADD = -13.0 Db T_DROP = -15.0 dB T_COMP = 2.5 dB
Authentication Mode = 1
T_TDROP = 4 sec
Random Challenge Value = Field Omitted
EXT_SYS_PARAMETER = 1
Reserved Bits = 99
RESERVED = 0
GLOBAL_REDIRECT = 0

Four Additional Configuration Messages
CDMA CHANNEL LIST MESSAGE EXTENDED SYSTEM PARAMETERS

98/05/24 23:14:10.786 [PCH] CDMA Channel List Message 98/05/24 23:14:10.946 [PCH]
MSG_LENGTH = 72 bits Extended System Parameters Message
MSG_TYPE = CDMA Channel List Message MSG_LENGTH = 104 bits
PILOT_PN = 168 Offset Index MSG_TYPE = Extended System Parameters Message
CONFIG_MSG_SEQ = 0 PILOT_PN = 168 Offset Index
CDMA_FREQ = 283 CONFIG_MSG_SEQ = 0 RESERVED = 0
RESERVED = Field Omitted PREF_MSID_TYPE = IMSI and ESN
MCC = 000 IMSI_11_12 = 00
NEIGHBOR LIST RESERVED_LEN = 8 bits
RESERVED_OCTETS = 0x00
98/05/24 23:14:11.486 [PCH] Neighbor List Message BCAST_INDEX = 0
MSG_LENGTH = 216 bits RESERVED = 0
MSG_TYPE = Neighbor List Message
CONFIG_MSG_SEQ = 0
PILOT_INC = 4 Offset Index
NGHBR_CONFIG = 0 NGHBR_PN = 220 Offset Index GLOBAL SERVICE REDIRECTION
NGHBR_CONFIG = 0 NGHBR_PN = 52 Offset Index
98/05/17 24:21.566 Paging Channel: Global Service Redirection
PILOT_PN: 168, MSG_TYPE: 96, CONFIG_MSG_SEQ: 0
Redirected access overload classes: { 0, 1 },
RETURN_IF_FAIL: 0,
DELETE_TMSI: 0,
Redirection to an analog system:
EXPECTED_SID = 0
Do not ignore CDMA Available indicator on the redirected analog
system
Attempt service on either System A or B with the custom system
selection process
RESERVED = 0

Let’s
Let’s do
do an
an
Idle
Idle Mode
Mode Handoff!
Handoff!

Idle Mode Handoff
An idle mobile always demodulates the best available signal

• In idle mode, it isn’t possible to do soft handoff and listen to
multiple sectors or base stations at the same time -- the paging
channel information stream is different on each sector, not
synchronous -- just as the TV news programs on different
networks are not in sync word-by-word if viewed together
• Since a mobile can’t combine signals, the mobile must switch
quickly, always enjoying the best available signal
The mobile’s pilot searcher is constantly checking neighbor pilots
If the searcher notices a better signal, the mobile continues on the
current paging channel until the end of the current superframe,
then instantly switches to the paging channel of the new signal
• The system doesn’t know the mobile did this! (Does NBC’s
Tom Brokaw know you just switched your TV to CNN?)
On the new paging channel, if the mobile learns that registration is
required, it re-registers on the new sector

Idle Mode on the Paging Channel:
Meet the Neighbors, track the Strongest Pilot
All PN Offsets
0
Ec/Io
-20
Chips 0 SRCH_WIN_A Mobile Rake RX 32K

PN 0 F1 PN168 W01 512
Active Pilot F2 PN168 W01
Rake Fingers n F3 PN168 W01
o Srch PN??? W0
p
SRCH_WIN_N The phone’s pilot searcher constantly checks
the pilots listed in the Neighbor List Message
Reference PN
Neighbor Set
If the searcher ever notices a neighbor pilot substantially stronger than

the current reference pilot, it becomes the new reference pilot
and the phone switches over to its paging channel on the next superframe.
This is called an idle mode handoff.

Phone Operation on the Access Channel
A Successful Access Attempt
A sector’s Paging Channel announces 1
(typ) to 32 (max) Access Channels: PN Origination Msg ACCESS
Long Code offsets for mobiles to use if Success!
accessing the system. BTS MS
• For mobiles sending Registration, Probing
Origination, Page Responses an Access Probe
• Base Station always listening! a Probe Sequence
an Access Attempt
On the access channel, phones are not
yet under BTS closed-loop power control! PAGING Base Sta. Acknlgmt. Order
Phones access the BTS by “probing” at
FW TFC TFC frames of 000s
power levels determined by receive power
and an open loop formula PAGING Channel Assnmt. Msg.
• If “probe” not acknowledged by BTS
within ACC_TMO (~400 mS.), phone TFC preamble of 000s RV TFC
will wait a random time (~200 mS)
FW FC Base Sta. Acknlgmt. Order
then probe again, stronger by PI db.
• There can be 15 max. (typ. 5) probes Mobile Sta. Ackngmt. Order RV TFC
in a sequence and 15 max. (typ. 2)
sequences in an access attempt FW TFC Service Connect Msg.
• most attempts succeed on first probe!
Svc. Connect Complete Msg RV TFC
The Access Parameters message on the
paging channel announces values of all FW TFC Base Sta. Acknlgmt. Order
related parameters
Call is Established!
Let’s
Let’s Register!
Register!

Registration
Registration is the process by which an idle mobile lets the system

know it’s awake and available for incoming calls
• this allows the system to inform the mobile’s home switch of
the mobile’s current location, so that incoming calls can be
delivered
• registration also allows the system to intelligently page the
mobile only in the area where the mobile is currently located,
thereby eliminating useless congestion on the paging channels
in other areas of the system
There are many different conditions that could trigger an obligation
for the mobile to register
• there are flags in the System Parameters Message which tell
the mobile when it must register on the current system

An Actual Registration
SYSTEM PARAMETERS MESSAGE
18:26.826 [PCH] System Parameters Message
Pilot_PN: 32 The System Parameters Message tells
CONFIG_MSG_SEQ: 14 SID: 16420 NID: 0,
REG_ZONE: 0 TOTAL_ZONES: 0 Zone timer length (min): 1 all mobiles when they should register.
MULT_SIDS: 0 MULT_NIDS: 0 This mobile notices that it is obligated to
BASE_ID: 1618 BASE_CLASS: Reserved
PAG_CHAN: 1 MAX_SLOT_CYCLE_INDEX: 2 register, so it transmits a Registration
HOME_REG: 1 FOR_SID_REG: 1 FOR_NID_REG: 1,
POWER_UP_REG: 1 POWER_DOWN_REG: 1
Message.
PARAMETER_REG: 1 Registration period (sec): 54
Base station 0°00´00.00¨ Lon., 0°00´00.00° Lat. REG_DIST: 0 REGISTRATION MESSAGE
SRCH_WIN_A (PN chips): 28 SRCH_WIN_N (PN chips): 100,
SRCH_WIN_R (PN chips): 130 NGHBR_MAX_AGE: 2 16:18:27.144 Access Channel: Registration
PWR_REP_THRESH: 2 PWR_REP_FRAMES (frames): 15 ACK_SEQ: 7 MSG_SEQ: 1 ACK_REQ: 1 VALID_ACK: 0
PWR_THRESH_ENABLE: 1 PWR_PERIOD_ENABLE: 0, ACK_TYPE: 0
PWR_REP_DELAY: 1 (4 frames) RESCAN: 0, MSID_TYPE: 3, ESN: [0x 01 99 0d fc]
T_ADD: -14.0dB T_DROP: -16.0dB T_COMP: 2.5dB, MFR 1, Reserved 38, Serial Number 69116,
T_TDROP: 4s IMSI: (Class: 0, Class_0_type: 1) [0x 01 8d 31 74 29 36]
EXT_SYS_PARAMETER: 1 00-416-575-0421
EXT_NGHBR_LIST: 1 AUTH_MODE: 0
GLOBAL_REDIRECT: 0 REG_TYPE: Timer-based
SLOT_CYCLE_INDEX: 2
MOB_P_REV: 1
EXT_SCM: 1
SLOTTED_MODE: 1
BASE STATION ACKNOWLEDGMENT MOB_TERM: 1
16:18:27.506 Paging Channel: Order
ACK_SEQ: 1 MSG_SEQ: 0 ACK_REQ: 0 VALID_ACK: 1
MSID_TYPE: 2 IMSI: (Class: 0, Class_0_type: 3)
[0x 02 47 8d 31 74 29 36] (134) 00-416-575-0421 The base station confirms that the
Order type: Base Station Acknowledgement Order mobile’s registration message was
received. We’re officially registered!

Let’s
Let’s Receive
Receive
an
an incoming
incoming Call!
Call!

Receiving an Incoming Call
All idle mobiles monitor the paging channel to receive incoming

calls.
When an incoming call appears, the paging channel notifies the
mobile in a General Page Message.
A mobile which has been paged sends a Page Response
Message on the access channel.
The system sets up a traffic channel for the call, then notifies the
mobile to use it with a Channel Assignment Message.
The mobile and the base station notice each other’s traffic channel
signals and confirm their presence by exchanging
acknowledgment messages.
The base station and the mobile negotiate what type of call this will
be -- I.e., 13k voice, etc.
The mobile is told to ring and given a “calling line ID” to display.
When the human user presses the send button, the audio path is
completed and the call proceeds.
An Actual Page and Page Response
GENERAL PAGE MESSAGE
98/05/24 23:14:46.127 [PCH] General Page Message
MSG_LENGTH = 128 bits The system pages the mobile,
MSG_TYPE = General Page Message 615-330-0644.
CONFIG_MSG_SEQ = 1 ACC_MSG_SEQ = 20
CLASS_0_DONE = 1
CLASS_1_DONE = 1 RESERVED = 0 PAGE RESPONSE MESSAGE
BROADCAST_DONE = 1 RESERVED = 0
ADD_LENGTH = 0 bits ADD_PFIELD = Field Omitted 98/05/24 23:14:46.425 [ACH] Page Response Message
PAGE_CLASS = 0 PAGE_SUBCLASS = 0 MSG_LENGTH = 216 bits
MSG_SEQ = 1 MSG_TYPE = Page Response Message
IMSI_S = 6153300644 ACK_SEQ = 1 MSG_SEQ = 2 ACK_REQ = 1
SPECIAL_SERVICE = 1 VALID_ACK = 1 ACK_TYPE = 2
SERVICE_OPTION = 32768 MSID_TYPE = IMSI and ESN MSID_LEN = 9 octets
RESERVED = Field Omitted ESN = 0xD30E415C IMSI_CLASS = 0
IMSI_CLASS_0_TYPE = 0 RESERVED = 0
IMSI_S = 6153300644
AUTH_MODE = 1
The mobile responds to the page. AUTHR = 0x307B5 RANDC = 0xC6 COUNT = 0
MOB_TERM = 1 SLOT_CYCLE_INDEX = 0
MOB_P_REV = 3 SCM = 106
BASE STATION ACKNOWLEDGMENT REQUEST_MODE = Either Wide Analog or CDMA Only
SERVICE_OPTION = 32768 PM = 0
98/05/24 23:14:46.768 [PCH] Order Message NAR_AN_CAP = 0 RESERVED = 0
MSG_TYPE = Order Message
ACK_SEQ = 2 MSG_SEQ = 0 ACK_REQ = 0
VALID_ACK = 1
ADDR_TYPE = IMSI ADDR_LEN = 40 bits
IMSI_CLASS = 0 IMSI_CLASS_0_TYPE = 0 RESERVED = 0 The base station confirms that the mobile’s
IMSI_S = 6153300644
ORDER = Base Station Acknowledgement Order
page response was received. Now the
ADD_RECORD_LEN = 0 bits mobile is waiting for channel assignment,
Order-Specific Fields = Field Omitted RESERVED = 0
expecting a response within 12 seconds.
Channel Assignment and
Traffic Channel Confirmation
CHANNEL ASSIGNMENT MESSAGE
18:14:47.027 Paging Channel: Channel Assignment Only about 400 ms. after the base station
MSID_TYPE: 2 IMSI: (Class: 0, Class_0_type: 0) acknowledgment order, the mobile receives
[0x 01 f8 39 6a 15] 615-330-0644
ASSIGN_MODE: Traffic Channel Assignment the channel assignment message.
ADD_RECORD_LEN: 5 FREQ_INCL: 1 GRANTED_MODE: 2
CODE_CHAN: 43 FRAME_OFFSET: 2
ENCRYPT_MODE: Encryption disabled
BAND_CLASS: 800 MHz cellular band
CDMA_FREQ: 283
The mobile sees at least two
The base station is already good blank frames in a row on
sending blank frames on the forward channel, and
the forward channel,using concludes this is the right traffic
the assigned Walsh code. channel. It sends a preamble
of two blank frames of its own
on the reverse traffic channel.
BASE STATION ACKNOWLEDGMENT
MOBILE STATION ACKNOWLEDGMENT
18:14:47.581 Forward Traffic Channel: Order
ACK_SEQ: 7 MSG_SEQ: 0 ACK_REQ: 1 18:14:47.598 Reverse Traffic Channel: Order
ENCRYPTION: 0 USE_TIME: 0 ACTION_TIME: 0 ACK_SEQ: 0 MSG_SEQ: 0 ACK_REQ: 0
Base Station Acknowledgement Order ENCRYPTION: 0
Mobile Station Acknowledgement Order
The base station acknowledges The mobile station acknowledges the
receiving the mobile’s preamble. base station’s acknowledgment.
Everybody is ready!
Service Negotiation and Mobile Alert
SERVICE CONNECT MESSAGE
18:14:47.760 Forward Traffic Channel: Service Connect Now that both sides have arrived on the
ACK_SEQ: 0 MSG_SEQ: 1 ACK_REQ: 0 ENCRYPTION: 0
USE_TIME: 0 ACTION_TIME: 0 SERV_CON_SEQ: 0 traffic channel, the base station
Service Configuration: supported Transmission:
Forward Traffic Channel Rate (Set 2): 14400, 7200, 3600, 1800 bps
proposes that the requested call
Reverse Traffic Channel Rate (Set 2): 14400, 7200, 3600, 1800 bps actually begin.
Service option: (6) Voice (13k) (0x8000)
Forward Traffic Channel: Primary Traffic
Reverse Traffic Channel: Primary Traffic
SERVICE CONNECT COMPLETE MSG.
18:14:47.835 Reverse Traffic Channel:
Service Connect Completion
ACK_SEQ: 1 MSG_SEQ: 3 ACK_REQ: 1
ENCRYPTION: 0 SERV_CON_SEQ: 0
ALERT WITH INFORMATION MESSAGE
18:14:47.961 Forward Traffic Channel:
The mobile agrees and
Alert With Information says its ready to play.
SIGNAL_TYPE = IS-54B Alerting
ALERT_PITCH = Medium Pitch (Standard Alert)
SERVICE CONNECT COMPLETE is a
SIGNAL = Long RESERVED = 0 major milestone in call processing. Up
RECORD_TYPE = Calling Party Number until now, this was an access attempt.
RECORD_LEN = 96 bits
NUMBER_TYPE = National Number Now it is officially a call.
NUMBER_PLAN = ISDN/Telephony Numbering Plan
PI = Presentation Allowed SI = Network Provided
18:14:48.018 Reverse Traffic Channel: Order
CHARi = 6153000124 RESERVED = 0 RESERVED = 0
ENCRYPTION: 0
The base station orders the mobile to ring, and Mobile Station Acknowledgement Order
gives it the calling party’s number to display. The mobile says it’s ringing.

The Human Answers! Connect Order
The mobile has been ringing for several

seconds. The human user finally
comes over and presses the send
button to answer the call.
CONNECT ORDER
ENCRYPTION: 0
Connect Order

ENCRYPTION: 0 USE_TIME: 0 ACTION_TIME: 0
Base Station Acknowledgement Order
Now the switch completes the audio circuit and

the two callers can talk!

Let’s
Let’s make
make an
an Outgoing
Outgoing Call!
Call!

Placing an Outgoing Call
The mobile user dials the desired digits, and presses SEND.
Mobile transmits an Origination Message on the access channel.
The system acknowledges receiving the origination by sending a
base station acknowledgement on the paging channel.
The system arranges the resources for the call and starts
transmitting on the traffic channel.
The system notifies the mobile in a Channel Assignment Message
on the paging channel.
The mobile arrives on the traffic channel.
The mobile and the base station notice each other’s traffic channel
signals and confirm their presence by exchanging
acknowledgment messages.
The base station and the mobile negotiate what type of call this will
be -- I.e., 13k voice, etc.
The audio circuit is completed and the mobile caller hears ringing.

Origination
ORIGINATION MESSAGE
The mobile sends an 17:48:53.144 Access Channel: Origination
origination message ACK_SEQ: 7 MSG_SEQ: 6 ACK_REQ: 1
VALID_ACK: 0 ACK_TYPE: 0 MSID_TYPE: 3
on the access ESN: [0x 00 06 98 24] MFR 0 Reserved 1
Serial Number 170020
channel. IMSI: (Class: 0, Class_0_type: 0)
[0x 03 5d b8 97 c2] 972-849-5073
AUTH_MODE: 0 MOB_TERM: 1
SLOT_CYCLE_INDEX: 2 MOB_P_REV: 1 EXT_SCM: 1
DualMode: 0 SLOTTED_MODE: 1 PowerClass: 0
BASE STATION ACKNOWLEDGMENT REQUEST_MODE: CDMA only SPECIAL_SERVICE: 1
Service option: (6) Voice (13k) (0x8000) PM: 0
17:48:53.487 Paging Channel: Order
DIGIT_MODE: 0 MORE_FIELDS: 0 NUM_FIELDS: 11
Chari: 18008900829
MSID_TYPE: 2
NAR_AN_CAP: 0
IMSI: (Class: 0, Class_0_type: 0)
[0x 03 5d b8 97 c2] 972-849-5073
The base station confirms
that the origination message
CHANNEL ASSIGNMENT MESSAGE was received.
17:48:54.367 Paging Channel: Channel Assignment
MSID_TYPE: 2
IMSI: (Class: 0, Class_0_type: 0)
[0x 03 5d b8 97 c2] 972-849-5073
ASSIGN_MODE: Traffic Channel Assignment, The base station sends a
ADD_RECORD_LEN: 5 FREQ_INCL: 1 GRANTED_MODE: 2
CODE_CHAN: 12 FRAME_OFFSET: 0 Channel Assignment
ENCRYPT_MODE: Encryption disabled
BAND_CLASS: 1.8 to 2.0 GHz PCS band
Message and the mobile
CDMA_FREQ: 425 goes to the traffic channel.

Traffic Channel Confirmation
The mobile sees at least two

The base station is already good blank frames in a row on
sending blank frames on the forward channel, and
the forward channel,using concludes this is the right traffic
the assigned Walsh code. channel. It sends a preamble
of two blank frames of its own
on the reverse traffic channel.
ACK_SEQ: 7 MSG_SEQ: 0 ACK_REQ: 1 ENCRYPTION: 0 17:48:54.835 Reverse Traffic Channel: Order
USE_TIME: 0 ACTION_TIME: 0 ACK_SEQ: 0 MSG_SEQ: 0 ACK_REQ: 0
Base Station Acknowledgement Order ENCRYPTION: 0
Mobile Station Acknowledgement Order
The base station acknowledges The mobile station acknowledges the
receiving the mobile’s preamble. base station’s acknowledgment.
Everybody is ready!

Service Negotiation and Connect Complete
SERVICE CONNECT MESSAGE

17:48:55.098 Forward Traffic Channel: Service Connect Now that the traffic channel is working
USE_TIME: 0 ACTION_TIME: 0 SERV_CON_SEQ: 0 in both directions, the base station
Service Configuration Supported Transmission:
Forward Traffic Channel Rate (Set 2): 14400, 7200, 3600, 1800 bps
proposes that the requested call
Reverse Traffic Channel Rate (Set 2): 14400, 7200, 3600, 1800 bps actually begin.
Service option: (6) Voice (13k) (0x8000)
Forward Traffic Channel: Primary Traffic
Reverse Traffic Channel: Primary Traffic
SERVICE CONNECT COMPLETE MSG.
17:48:55.137 Reverse Traffic Channel: Service Connect
Completion ACK_SEQ: 1, MSG_SEQ: 0, ACK_REQ: 1,
ENCRYPTION: 0, SERV_CON_SEQ: 0

The mobile agrees and
ACK_SEQ: 0 MSG_SEQ: 0 ACK_REQ: 0 ENCRYPTION: 0 says its ready to play.
USE_TIME: 0 ACTION_TIME: 0
The base station agrees. SERVICE CONNECT COMPLETE is a

major milestone in call processing. Up
until now, this was an access attempt.
Now it is officially a call.
Now the switch completes the audio circuit and

the two callers can talk!

Let’s
Let’s End
End aa Call!
Call!

Ending A Call
A normal call continues until one of the parties hangs up. That
action sends a Release Order, “normal release”.
The other side of the call sends a Release Order, “no reason given”.
• If a normal release is seen, the call ended normally.
At the conclusion of the call, the mobile reacquires the system.
• Searches for the best pilot on the present CDMA frequency
• Reads the Sync Channel Message
• Monitors the Paging Channel steadily
Several different conditions can cause a call to end abnormally:
• the forward link is lost at the mobile, and a fade timer acts
• the reverse link is lost at the base station, and a fade timer acts
• a number of forward link messages aren’t acknowledged, and the
base station acts to tear down the link
• a number of reverse link messages aren’t acknowledged, and the
mobile station acts to tear down the link

A Beautiful End to a Normal Call
MOBILE RELEASE ORDER
ENCRYPTION: 0
Release Order (normal release)
BASE STATION ACKNOWLEDGMENT At the end of a normal call, this

17:49:21.936 Forward Traffic Channel: Order mobile user pressed end.
ACK_SEQ: 1 MSG_SEQ: 2 ACK_REQ: 0 ENCRYPTION: 0,
The base station acknowledged
BASE STATION RELEASE ORDER
receiving the message, then sent
a release message of its own.
Release Order (no reason given)
SYNC CHANNEL MESSAGE The mobile left the traffic channel,

17:49:22.517 Sync Channel scanned to find the best pilot, and read
MSG_TYPE: 1 Sync Channel Message the Sync Channel Message.
P_REV: 1 MIN_P_REV: 1
SID: 4112 NID: 2 Pilot_PN: 183
LC_STATE: 0x318fe5d84a5
SYS_TIME: 0x1ae9683dc
LP_SEC: 9 LTM_OFF: -10 DAYLT: 1
Paging Channel Data Rate: 9600
CDMA_FREQ: 425
Let’s
Let’s receive
receive Notification
Notification
of
of aa Voice
Voice Message!
Message!
Feature Notification
FEATURE NOTIFICATION MESSAGE
98/06/30 21:16:44.368 [PCH] Feature Notification Message
MSG_LENGTH = 144 bits The Feature Notification Message on
MSG_TYPE = Feature Notification Message
ACK_SEQ = 0 the Paging Channel tells a specific
MSG_SEQ = 0 mobile it has voice messages waiting.
ACK_REQ = 1
VALID_ACK = 0
ADDR_TYPE = IMSI
ADDR_LEN = 56 bits
There are other record types to notify
IMSI_CLASS = 0 the mobile of other features.
IMSI_CLASS_0_TYPE = 3
RESERVED = 0
MCC = 134
IMSI_11_12 = 00
IMSI_S = 9055170325
RELEASE = 0
RECORD_TYPE = Message Waiting
RECORD_LEN = 8 bits
MSG_COUNT = 1
RESERVED = 0

The mobile confirms it has received the
notification by sending a Mobile Station
Acknowledgment Order on the access
channel.
Let’s
Let’s do
do aa Handoff!
Handoff!
The Detailed Rules of Soft Handoff
Handset views pilots in sets PILOT SETS

• Active: pilots of sectors actually in use
Active 6
Max. Members
Req’d. By Std.
• Candidates: pilots mobile requested, but
not yet set up & transmitting by system Candidate 5
• Neighbors: pilots told to mobile by system,
as nearby sectors to check Neighbor 20
• Remaining: any pilots used by system but
not already in the other sets (div. by PILOT_INC) Remaining
Handset sends Pilot Strength Measurement
Message to the system whenever triggered by: HANDOFF
• It notices a pilot in neighbor or remaining set PARAMETERS
exceeds T_ADD
T_ADD T_DROP
• An active set pilot drops below T_DROP for
T_TDROP time T_TDROP T_COMP
• A candidate pilot exceeds an active by
T_COMP Exercise: How does a pilot
The System may set up all requested handoffs, in one set migrate into
or it may apply special manufacturer-specific another set, for all cases?
screening criteria and authorize only some Identify the trigger, and the
messages involved.
The Call is Already Established. What Next?
All PN Offsets
0
Ec/Io
-20
Chips 0 10752 14080 32000 32K
PN 0 168 220 500 512
Mobile Rake RX Active Pilot
F1 PN168 W61 Rake Fingers n The call is already in progress.
F2 PN168 W61 o PN 168 is the only active signal,
F3 PN168 W61 p and also is our timing reference.
Srch PN??? W0
Continue checking the neighbors.
Reference PN
Neighbor Set
T_ADD
! !
If we ever notice a neighbor with Ec/Io above T_ADD,
ask to use it! Send a Pilot Strength Measurement Message!
Mobile Requests the Handoff!
PILOT STRENGTH MEASUREMENT MESSAGE

98/05/24 23:14:02.205 [RTC]
Pilot Strength Measurement Message
Just prior to this message, this particular MSG_TYPE = Pilot Strength Measurement Message
mobile already was in handoff with PN 168 ENCRYPTION = Encryption Mode Disabled
and 220. REF_PN = 168 Offset Index (the Reference PN)
PILOT_STRENGTH = -6.0 dB
This pilot strength measurement message KEEP = 1
PILOT_PN_PHASE = 14080 chips (PN220+0chips)
reports PN 500 has increased above PILOT_STRENGTH = -12.5 dB
T_Add, and the mobile wants to use it too. KEEP = 1
PILOT_PN_PHASE = 32002 chips (PN500 + 2 chips)
PILOT_STRENGTH = -11.0 dB
KEEP = 1
RESERVED = 0

98/05/24 23:14:02.386 [FTC] Order Message
MSG_TYPE = Order Message
The base station acknowledges receiving
ACK_SEQ = 0 MSG_SEQ = 0 ACK_REQ = 0 the Pilot Strength Measurement Message.
ENCRYPTION = Encryption Mode Disabled
USE_TIME = 0 ACTION_TIME = 0
ORDER = Base Station Acknowledgement Order
ADD_RECORD_LEN = 0 bits
Order-Specific Fields = Field Omitted
RESERVED = 0
System Authorizes the Handoff!
HANDOFF DIRECTION MESSAGE
98/05/24 23:14:02.926 [FTC] Extended Handoff Direction Message The base station sends a Handof
MSG_TYPE = Extended Handoff Direction Message Direction Message authorizing the
ACK_SEQ = 0 MSG_SEQ = 6 ACK_REQ = 1 mobile to begin soft handoff with all
USE_TIME = 0 ACTION_TIME = 0 HDM_SEQ = 0 three requested PNs. The pre-existing
SEARCH_INCLUDED = 1
SRCH_WIN_A = 40 PN chips
link on PN 168 will continue to use
T_ADD = -13.0 dB T_DROP = -15.0 dB T_COMP = 2.5 dB Walsh code 61, the new link on PN220
T_TDROP = 4 sec
HARD_INCLUDED = 0FRAME_OFFSET = Field Omitted will use Walsh Code 20, and the new
PRIVATE_LCM = Field OmittedRESET_L2 = Field Omitted link on PN500 will use Walsh code 50.
RESET_FPC = Field OmittedRESERVED = Field Omitted
ENCRYPT_MODE = Field OmittedRESERVED = Field Omitted
NOM_PWR = Field OmittedNUM_PREAMBLE = Field Omitted
BAND_CLASS = Field OmittedCDMA_FREQ = Field Omitted
ADD_LENGTH = 0
PILOT_PN = 168 PWR_COMB_IND = 0 CODE_CHAN = 61
RESERVED = 0
98/05/24 23:14:02.945 [RTC] Order Message
MSG_LENGTH = 56 bits MSG_TYPE = Order Message
The mobile acknowledges it has received ENCRYPTION = Encryption Mode Disabled
ORDER = Mobile Station Acknowledgement Order
the Handoff Direction Message. ADD_RECORD_LEN = 0 bits
Order-Specific Fields = Field Omitted RESERVED = 0
Mobile Implements the Handoff!
HANDOFF COMPLETION MESSAGE
98/05/24 23:14:02.985 [RTC] Handoff Completion Message
The mobile searcher quickly re-checks MSG_LENGTH = 72 bits
MSG_TYPE = Handoff Completion Message
all three PNs. It still hears their pilots! ACK_SEQ = 6 MSG_SEQ = 1 ACK_REQ = 1
The mobile sends a Handoff Completion LAST_HDM_SEQ = 0
Message, confirming it still wants to go PILOT_PN = 168 Offset Index
ahead with the handoff. PILOT_PN = 500 Offset Index
RESERVED = 0

The base station confirms it has
98/05/24 23:14:03.085 [FTC] Forward Traffic Channel: Order
ACK_SEQ: 0 MSG_SEQ: 1 ACK_REQ: 0 ENCRYPTION: 0 received the mobile’s Handoff
USE_TIME: 0 ACTION_TIME: 0 Completion message, and will
continue with all of the links
active.
Neighbor List Updated, Handoff is Complete!
NEIGHBOR LIST UPDATE MESSAGE
98/05/24 23:14:03.166 [FTC] Neighbor List Update Message
MSG_TYPE = Neighbor List Update Message
In response to the mobile’s Handoff
PILOT_INC = 4 Offset Index Completion Message, the base station
NGHBR_PN = 164 Offset Index
NGHBR_PN = 68 Offset Index assembles a new composite neighbor
NGHBR_PN = 52 Offset Index list including all the neighbors of each of
NGHBR_PN = 304 Offset Index the three active pilots.
This is necessary since the mobile
NGHBR_PN = 372 Offset Index could be traveling toward any one of
NGHBR_PN = 8 Offset Index these pilots and may need to request
NGHBR_PN = 384 Offset Index soft handoff with any of them soon.
RESERVED = 0
98/05/24 23:14:03.245 [RTC] Order Message
The mobile confirms receiving the MSG_LENGTH = 56 bits MSG_TYPE = Order Message
Neighbor List Update Message. It is ACK_SEQ = 7 MSG_SEQ = 7 ACK_REQ = 0
already checking the neighbor list and ORDER = Mobile Station Acknowledgement Order
will do so continuously from now on. ADD_RECORD_LEN = 0 bits
Order-Specific Fields = Field Omitted
The handoff is fully established. RESERVED = 0
Handoff Now In Effect, keep checking Pilots!
All PN Offsets
0
Ec/Io
-20
Chips 0 10752 14080 32000 32K
PN 0 168 220 500 512
Mobile Rake RX Active Set
F1 PN168 W61 n p Rake Fingers o
F2 PN500 W50
T_DROP
F3 PN220 W20
Srch PN??? W0
Reference PN
Neighbor Set
T_ADD
Continue checking each ACTIVE pilot. If any are less than T_DROP and remain
so for T_TDROP time, send Pilot Strength Measurement Message, DROP IT!!
Continue checking each NEIGHBOR pilot. If any ever rises above T_ADD, send
PSMM, ADD IT! Keep watching CANDIDATES vs ACTIVES using T_COMP, too.
The Complete Picture of Handoff & Pilot Sets
All PN Offsets
0
Ec/Io
-20
Chips 0 SRCH_WIN_A 32K

Rake Fingers n o p
PN 0 Active Set 512
Pilots of sectors
SRCH_WIN_A
T_DROP now used for Mobile Rake RX
communication
F1 PN168 W61
Reference PN F2 PN500 W50
T_DROP
Candidate Set SRCH_WIN_N F3 PN220 W20
Pilots requested Srch PN??? W0
by mobile but not
set up by system Neighbor Set
Pilots suggested
T_ADD by system for
more checking
All other pilots divisible by PILOT_INC but not

Remaining Set presently in Active, Candidate, or Neighbor sets
T_ADD
SRCH_WIN_R
Timing of Pilot Searcher’s Measurement Process
CURRENT PILOT SET CONTENTS R
3 A A A The searcher checks pilots in nested
1 C loops, much like meshed gears. R
12 N N N N N N N N N N N N Actives and candidates N
occupy the fastest- N NR
112 R R R R R R R R R R R R
R R R R R R R R R R R R spinning wheel. N
R R R R R R R R R R R R Neighbors are A R
R R R R R R R R R R R R next, advancing A AN
R R R R R R R R R R R R
one pilot for each R
Act+Cand. revolution. N
R R R R R R R R R R R R R
Remaining is slowest, N
N N
advancing one pilot each
R R R R R R R R R R R R R
R R R R
time the Neighbors revolve.
PILOT SEARCHER VIEWED IN SEQUENCE: Typical Elapsed Time = 4 seconds

A A A C N A A A C N A A A C N A A A C N A A A C N A A A C N A A A C N
A A A C N A A A C N A A A C N A A A C N A A A C N R A A A C N A A A C
N A A A C N A A A C N A A A C N A A A C N A A A C N A A A C N A A A C
N A A A C N A A A C N A A A C N R A A A C N A A A C N A A A C N A A A
C N A A A C N A A A C N A A A C N A A A C N A A A C N A A A C N A A A
C N A A A C N R
Only 3 of 112 remaining set pilots have been checked thus far!
Troubleshooting Call Events:
Watch Messaging, Mobile State
Your current capabilities
• Earlier in this course we reviewed handset call processing
states
• You have just seen the entire vocabulary of messages
ordinarily used in call processing
• Now you’re equipped to do serious troubleshooting of CDMA
calls!
Auditing Call Processing Problems using messages
• Watch the messages from birth (origination) to death (release)
– is the order proper? are there inappropriate responses?
– are any messages repeated? why? which link is bad?
– are any messages missed or not acknowledged?
– are contents and included parameter values reasonable?
– is the timing appropriate -- delays not too long?
– track the state in which the mobile and system should be
Course 134
Handoff
Handoff Perspective
Perspective
Overall Handoff Perspective
Soft & Softer Handoffs are preferred, but not always possible
• a handset can receive BTS/sectors simultaneously only on one
frequency
• all involved BTS/sectors must connect to a networked BSCs.
Some manufacturers do not presently support this, and so are
unable to do soft-handoff at boundaries between BSCs.
• frame timing must be same on all BTS/sectors
If any of the above are not possible, handoff still can occur but can
only be “hard” break-make protocol like AMPS/TDMA/GSM
• intersystem handoff: hard
• change-of-frequency handoff: hard
• CDMA-to-AMPS handoff: hard, no handback
– auxiliary trigger mechanisms available (RTD), Ec/Io
Global Service Redirection Messages on outlooking sectors….
Which is better - 3-way or 6-way Soft Handoff?
3 Way or 6 Way?
• All handsets are capable of up to 6-way soft handoff
• Nortel & Qualcomm networks allow up to 6-way soft-handoff
• Lucent and Motorola networks allow only up to 3 way soft
handoff
– “bug” or “feature”?
– Advantage of 6-way: mobile does not depend on speedy
system reaction to handoff requests; this gives somewhat
improved dropped call rates in areas with extensive RF
overlap
– Disadvantage: additional channel elements are used
Optional Network-Specific Handoff Features
Ec/Io Handoff Candidate Screening

• all networks rank the pilots reported by the mobiles, and in
cases where more candidates are proposed than the network
can support in soft handoff, the soft handoff is set up using the
best N pilots
• Some networks also screen candidates and apply a more
conservative theory when authorizing handoffs
– some networks use T_Comp as a secondary parameter to
implement hysteresis and prevent hyperactive handoffs
• Some networks are experimenting with algorithms for dynamic,
adaptive assignment of T_Add, T_Drop, and T_Comp
Nortel Handoff & Channel Allocation Features
Inter-System Soft Handoff (ISSHO)

• Soft handoff across SBS and MTX boundaries
Multi-Carrier Traffic Allocation (MCTA)
• Intelligent carrier selection during call setup
Soft Handoff Reduction Algorithm (SHORA)
• Eliminating unneeded excessive soft handoff to improve capacity
Multi_Pilot Hard HandOff (MPHHO)
• Round-trip delay triggers, Pilot Beacon techniques
Enhanced Hard HandOff (EHHO)
• Call quality triggers hard handoff when necessary
Multi-Mode Hard HandOff (MMHHO)
• Sending capable CDMA mobiles between band classes or to analog
For more detail and latest improvements to all these features and
algorithms, take the Nortel 1203 handoffs course!
Course 134
Nortel
Nortel ISSHO:
ISSHO:
Inter-System
Inter-System Soft
Soft Handoff
Handoff
ISSHO Overview
Before ISSHO, mobiles could not enjoy soft handoff between

BTSs on different BSCs. This caused major problems:
• Hard handoffs were the only type available, with annoying
muting
• If the disjoint BTSs were on the same frequency, serious
interference and capacity problems plagued the boundary
area
• If the disjoint BTSs were on different frequencies, auxiliary
trigger mechanisms (RTD and Pilot_Beacon) were necessary
to allow the system to determine when the handoff should be
implemented
ISSHO allows mobiles to handoff over simultaneous links through
BTSs on more than one BSC
• This improves call quality, reduces drops, eliminates muting
• However, ISSHO requires special networking between the
BSCs involved so that packets from all BTSs can be routed to
the vocoder responsible for the call
Inter-BSC/Inter-System ISSHO Configuration
INTER-BSC/INTER-SYSTEM ISSHO CONFIGURATION
SBS Virtual CIS SBS

T1s
SBS BSC1 BSC2 SBS
CIS CIS
or ATM
Border
BTS BTS BTS BTS
ISSHO networks multiple BSCs’ CISs together into one virtual CIS,
using T1 links or ATM
• If both BSCs are on the same MTX, this is an Inter-BSC soft
handoff
• If BSCs are on different MTXs, this is an intersystem soft handoff
BTSs on the two BSCs must be on the same frequency
All packets from all BTSs in handoff with the mobile are routed to one
common Vocoder in one BSC
Course 134
Nortel
Nortel MCTA:
MCTA:
Multi-Carrier
Multi-Carrier Traffic
Traffic Allocation
Allocation
Who Chooses Carriers during Call Setup?
Idle mobiles choose their carriers by Hashing or GSRM, and originate or

respond to pages on those carriers
The system has the last word on the carrier to be used during a call
• System can force the mobile to any channel it chooses for call setup
– Chosen channel is listed in the Channel Assignment Message
• The System can force the mobile to any channel it chooses anytime
while the call is in progress
– If any form of hard handoff trigger condition occurs, the system
can choose the carrier frequency to be commanded to the mobile
in the handoff direction message
• Idle mobiles are like automobile drivers – they choose what they
want to do, consistent with the rules of the road
• Mobiles in calls are like airline passengers – they board when
instructed, and sit where they are told
MCTA: Choosing best Carrier for Call Setup
Idle-mode selection methods can help equalize the distribution of

mobiles among carriers, but traffic inequalities can still occur
among carriers
Nortel’s proprietary Multi-Carrier Traffic Allocation feature takes
current conditions into account when determining the channel for
a mobile’s call
• This allows carriers to supplement each other in true trunking
fashion for maximum system capacity
• MCTA can be deployed on networks of up to three carriers
• MCTA can be deployed on Legacy BTSs, MetroCell BTSs,
and combinations of the two types
• SBS interrogates all BTSs at a site for their current available
capacities during call setup; may also use arbitrary priorities
• Channel assignment is made to the carrier with the most
capacity and and/or highest preference
Initial MCTA Configuration Considerations
Cell requirements for MCTA use

• All carriers of each sector must have same cell ID (cell number
& sector ID)
• Multiple records (of individual BTSs) will share same Cell Ids
– Only one Pilot DataBase record (PDB) will exist per sector
Selector chooses carrier during call setup
• All BTSs receive Capacity Request message and respond
• PDB is used to return information from queried cell
– BTSC address, neighbor list, HO thresholds, search
windows, type of cell
• PDB is configured with the following:
– Frequency Priorities (can favor some frequencies over
others)
– Thresholds – capacity value which triggers carrier
migration
The MCTA Call Determination Algorithm
The CDA is the algorithm which drives MCTA

• Assigns carriers based on frequency priority and Excess
Forward Link Capacity (EFLC) threshold response
• Responses received after an arbitrary time delay are ignored
• CDA selects BTS with first positive relative threshold in the
Capacity Response Message
• If all responses are negative, CDA will choose least negative
(closest to zero)
• It’s best to set the Threshold parameter high enough that all
values are negative; otherwise, CDA will select first positive
return it sees, not necessarily the best carrier
Course 134
Nortel
Nortel SHORA:
SHORA:
Soft
Soft Handoff
Handoff Reduction
Reduction Algorithm
Algorithm
Soft Handoff: The Tradeoffs
Soft Handoff improves call quality!

• Mobile experiences diversity gain due to multiple
forward link pathways combined in rake receiver
• System experiences more reliable reverse link ,
listening to mobile frame-by-frame over whichever
BTS hears mobile best
– Mobile reverse link power actually decreases
during soft handoff, improving reverse capacity
Soft Handoff uses up resources!
• Each involved BTS must dedicate a channel
element to this call while soft handoff is in effect
• Forward link: Each involved BTS uses a few
percent of precious transmit power for this call
• System resources: more packet traffic over T-1s
between BTSs and the BSC
IS-95A Handoff: Inflexible, Threshold Driven
Active
Mobile requests soft handoff with all -3
All Six
pilots above T_Add sectors in
Pilot Strength
soft handoff!
(Ec/Io, db)
• This occasionally leads to some
rigid, less-than-optimum decisions! Active
Active
Active
Active Active
Problem Situation 1 T_Add
• One dominant, strong signal and a
lot of weak ones: -20
– Mobile asks for them all, but

only one is really needed!
-3
Problem Situation 2 Only One
Sector in soft
Pilot Strength
• Heavy pilot pollution, many signals handoff!
(Ec/Io, db)
lurk barely below the threshold
Active
– Mobile may request one or two, T_Add
but ignore the others which
could have helped call survive
-20
Two Methods for Improving Rigid Handoffs
IS-95B Improved Handoff Algorithm

• Uses additional soft handoff parameters to make handoffs
smarter -- slopes and intercepts
• Only by IS-95B-equipped mobiles can use these parameters
– pre-existing mobiles can’t benefit from the improvements
– Net system improvement depends on IS-95A/IS-95B user
mix
Nortel’s Proprietary Soft Handoff Reduction Algorithm (SHORA)
• Uses additional intelligent algorithms in system to evaluate all
handoffs requested by mobile
• Handoff performance of all mobiles is improved, not just IS-
95B-capable mobiles
The IS-95B Approach to Handoff Reduction
Additional Soft Handoff Parameters:

SOFT_SLOPE
ADD_INTERCEPT
DROP_INTERCEPT
Special Selection Criteria:
CANDIDATE CRITERIA
NEIGHBOR>CANDIDATE CRITERIA
ACTIVE SET REMOVAL CRITERIA
IS-95B Handoff Trigger
A handoff process more intelligent than fixed thresholds

• Handoff events driven by smarter, situation-influenced triggers
Candidate Set Removal:
Neighbor-to-Active transition:
Removal from Active Set:
Nortel’s Proprietary Approach
The soft-handoff reduction improvements in IS-95B can be

achieved without requiring all mobiles to upgrade to IS-95B
New Parameters are used in the Nortel Soft Handoff Reduction
Algorithm (SHORA)
Mobiles continue to request handoffs using the original parameters
T_Add, T_Drop, T_TDrop and T_Comp
• BSC analyzes pilot strength data received from each mobile
• The system dynamically updates T_Add, T_Drop, T_TDrop
and T_Comp to each mobile for best performance in current
situation
The system uses special DELTA parameters to avoid excessive
soft handoff
SHORA Algorithm Operation Perspective
SHORA works in two main ways:

The threshold manipulation parameters
• The main benefit of these is to ensure that mobiles in multi-pilot
soft handoff situations are not restricted from asking for the
pilots they need due a fixed T_Add
• These ensure that all needed pilots will be requested
The DELTA parameters
• DELTA parameters are used to safeguard against too much
soft handoff
• The delta parameters inhibit excessive soft handoff by making
sure that each additional sector added in handoff is really
needed
The DELTA parameters require careful setup!
SHORA Parameters
After each PSMM is received from the mobile, Nortel’s SHORA

analyzes the reported strengths and applies the following
parameters
New values of T_Add, T_Drop, T_Comp, and T_Tdrop are then
communicated to the mobile for use in future handoffs
Valid Step Datafill To Disable, Recommended

Parameter Name Range, dB Size, db Values Set Value Function Initial Value Comments
T_ADD_OFFSET_A 0-4 dB 0.5 dB 0-8 0 Offset added to T_ADD when 2 pilots active 1 - 2 db
T_ADD_OFFSET_B 0-4 dB 0.5 dB 0-8 0 Offset added to T_ADD when 3 or more active 1 - 2 db depends on level of
T_DROP_OFFSET_A 0-4 dB 0.5 dB 0-8 0 Offset added to T_DROP when 2 pilots active 1 - 2 db reduction desired,
T_DROP_OFFSET B 0-4 dB 0.5 dB 0-8 0 Offset added to T_DROP when 3 or more active 1 - 2 db higher = more reduction
T_COMP_OFFSET_A -2 to +2 dB 0.5 dB -4 to +4 0 Offset added to T_COMP when 2 pilots active 0
T_COMP_OFFSET_B -2 to +2 dB 0.5 dB -4 to +4 0 Offset added to T_COMP when 3 or more active 0 not recommended for
T_TDROP_OFFSET_B -2 to +2 sec 0.5 sec. -4 to +4 0 Offset added to T_TDROP when 3 or more active 0 use
DELTA_6 0 to 15.5 0.5 dB 0 - 31 31 Strongest vs 6th strongest pilot strength delta 1 to 4 db depends on level of
DELTA_5 0 to 15.5 0.5 dB 0 - 31 31 Strongest vs 5th strongest pilot strength delta 1 to 4 db reduction desired,
DELTA_4 0 to 15.5 0.5 dB 0 - 31 31 Strongest vs 4th strongest pilot strength delta 1 to 4 db experiment for optimum
DELTA_3 0 to 15.5 0.5 dB 0 - 31 31 Strongest vs 3th strongest pilot strength delta 1 to 4 db results in specific
Course 134
Nortel
Nortel MPHHO:
MPHHO:
Multiple
Multiple Pilot
Pilot Hard
Hard Handoff
Handoff
Comparing Hard Handoff Trigger Methods
Round-Trip Delay (RTD)

• Generally the best method for multi-carrier/same system situations
– allows precise tailoring of where the handoffs will occur
– This allows the good coverage of boundary sectors to be fully
exploited for maximum system capacity
Pilot Beacons (PB)
• Pilot beacons are cells or scaled-down pilot-sync-paging transmitting
devices which do not carry traffic but which mobiles can see,
measure, and request for handoff – like police posing as fences for
stolen merchandise
• The PN offsets of their pilots are specially “tagged” in the pilot
database so when a mobile requests to use a beacon, the system
can step in and send the mobile where it belongs – the other carrier!
Enhanced Hard Handoff (EHHO)
• This unique method allows you to design your own trigger based on
a flexible selection of quality measurements and thresholds you
specify
• EHHO is so flexible, it has its own chapter later in this course!
How Round Trip Delay Method Operates
Datafill as
Mobile’s path Cell_Border
Hard handoff is triggered when the system

detects all the following conditions are met:
Frequency F1
• All Active pilots are defined as
CELL_BORDER in pilot database
records
• The shortest measured RTD on any System Border
active sector must exceed the datafilled
BorderRefPilotRTDThresh Frequency F2
Method
• BTSs send RTD measurements to IHM
• IHM sorts meas in order of increasing
delay RTD = round trip delay
• Minimum RTD is compared against
maximum BorderRefPilotRTDThresh of IHM = Intersystem
all active sectors Handoff Manager
• If min. meas. RTD > max RTDThresh,
HO!! PDB = Pilot DataBase
RTD Reference Sector & First Target Sector
IHM uses sector with shortest RTD as Reference Sector

• Not necessarily the mobile’s timing reference PN!!
IHM’s choice of reference sector is very important!
• Datafill of “MPHHOEnabled” for the reference sector
determines whether MPHHO will be used
• All datafilled target sectors of the reference sector are selected
• The MSCId for the reference sector’s first target sector
becomes the target MSCId for the hard handoff
– Any target CellIds not appearing with this MSCId will not be
used in the MPHHO and are not passed to the target MSC
• The frequency/bandclass for the reference’s first target sector
becomes the target frequency for the hard handoff unless
MCTA is enabled
– Any target CellIds lacking this frequency won’t be used in
MPHHO
RTD Reference, First Target Sector, & MCTA
MCTA will be triggered if it is available for the first target sector

• Any target CellIds lacking the MCTA-chosen frequency will not
be used in the MPHHO
• Notice MCTA may result in a frequency change across an
ISSHO border!
OMs and Billing Implications of MPHHO
• All OMs relating to the hard handoff are pegged against the
first target sector
• Logs, billing, and VLR entries use the first target sector
RTD Calculations: Setting Delay Thresholds
BTS
RTD is the total delay the signal encounters from BTS to

mobile back to BTS
hips
• Every 244.14 meters traveled adds 1 chip of delay
.4 c
s
chip
– 800.98 feet is 1 chip of delay
= 16
• Every kilometer traveled adds 4.1 chips of delay
16.4
4 KM
– 1 mile is 6.7 chips of delay
M=
Example in the figure at right:
4K
• BTS to Mobile is 4 KM; delay is 4 x 4.1 = 16.4 chips
• Mobile to BTS is 4 KM, delay is 4 x 4.1 = 16.4 chips
• Total round-trip delay is 16.4 + 16.4 = 32.8 chips
MOBILE
Exercise:
• If we want to trigger MPHHO when the mobile is 1 RTD = 16.4 + 16.4
KM from the BTS, what RTD in chips should be set? = 32.8 chips
• Ans.: 1 KM is 4.1 chips. RTD = 4.1 + 4.1 = 8.2
chips
Pilot Beacon Triggers
Pilot_Beacon
Mobile’s path
Cell
Pilot Beacon Trigger is activated MTX1
whenever Logical
• Mobile sees pilot beacon, sends Cell
PSMM
• The SHM in the BSC recognizes System Border
the reported pilot is from a
CELL_PILOT_BEACON in the
PDB MTX2
• The MultiPilotHHOEnabled flag is

set to allow MPHHO
If all the above are true, the SHM
sends orders to set up the MPHHO
• If SHORA is enabled, only
SHORA-acceptable pilots are set
up in handoff
• If SHORA is not enabled, SHM
sets up links for all requested pilots
Pilot Beacon Reference and Target Sectors
The IHM arranges pilots from the PSMM in order of strongest-first

• Pilot with strongest reported Ec/Io becomes the IHM reference sector
– IHM reference sector may not be the mobile’s reference PN!!
IHM’s choice of reference sector is very important!
• Datafill of “MPHHOEnabled” for the reference sector determines
whether MPHHO will be used
• All datafilled target sectors of the reference sector are selected
• The MSCId for the reference sector’s first target sector becomes the
target MSCId for the hard handoff
– Any target CellIds not appearing with this MSCId will not be used
in the MPHHO and are not passed to the target MSC
• The frequency/bandclass for the reference’s first target sector
becomes the target frequency for the hard handoff unless MCTA is
enabled
– Any target CellIds lacking this frequency won’t be used in
MPHHO
Multiple Target Selection for MPHHO
The main advantage of MPHHO is allowing multiple target sectors for the
hard handoff
• Since most hard handoffs occur in difficult RF conditions, this feature
improves the likelihood of a successful handoff
RTD Trigger RTD increases
Pilot_Beacon Pilot Ec/Io increases

Trigger
Pilot0 Pilot1 Pilot2 Pilot3 Pilot4 Pilot5
(VirRef)
1st traverse
All of Ref Pilot 2nd traverse
Targets selected 3rd traverse
4th traverse
Target Lists
Target Selection Process for Pilot_Beacon
Example Target List
Demonstration: Sector TargetCellIdList
• A PSMM is received with four pilots A A, B, E, G
– Assume already Ec/Io ranked: A, B, C, D B B, A, C, F
• Their target lists are as shown at right C D, E, F
Handoff MPHHO process is: D B, H, J, K
• Take ref sector A’s target list (now ABEG)

• Add 1st target from second ranked sector (B) (list still
ABEG)
• Add 1st target from third ranked sector ( C) (now ABEGD)
• Add 1st target from fourth ranked sector ( D) (still ABEGD)
• Add 2nd target from 2nd ranked sector (B) (still ABEGD)
• Add 2nd target from 3rd ranked sector (C ) (still ABEGD)
• Add 2nd target from 4th ranked sector (D) (now ABEGDH)
• Six targets is the limit, so scanning now stops
Course 134
Nortel
Nortel EHHO:
EHHO:
Enhanced
Enhanced Hard
Hard Handoff
Handoff
EHHO Background & Perspective
MPHHO is a big step forward in utilizing overlay sectors

• Extended target lists allows RTD threshold to be pushed far
away
When the underlay is analog or an unfriendly network, there is
desire to stretch the overlay coverage even farther if possible
There is a need for additional trigger mechanisms to allow the call
to remain on the overlay sector(s) as long as possible
• Only hand down to the underlay when call quality is impacted
The answer to this need is Nortel’s Enhanced Hard HandOff
(EHHO)
EHHO: Using Call Quality as an HHO Trigger
What is EHHO?
• Another Hard Handoff Triggering Mechanism, like RTD and
Pilot_Beacon
What’s different about EHHO?
• RTD is based on absolute time delay, which is absolute distance
• Pilot_Beacon is based on visibility of pilots
• Neither RTD nor Pilot_Beacon triggers mean the Overlay CDMA
service is bad; in fact, premature handoff is still often triggered
How EHHO Works
• User-configured trigger conditions are defined from many parameters
– FER, Forward Traffic Gain, Eb/No are common triggers,
individually or in combinations specified by the operator
• The triggers can be set to occur only when the mobile exhausts the
coverage of the CDMA overlay, making handdown appropriate
EHHO can be deployed for individual sectors
• Allows customized response to individual sector propagation
Course 134
Nortel
Nortel MMHHO:
MMHHO:
Multi-Mode
Multi-Mode Hard
Hard Handoff
Handoff
The Current Mode Algorithm
MMHHO performs target cell selection using the current mode

algorithm, based on
• The mobile’s multimode capabilities
• The created handoff target list
• The current mode of operation
MMHHO Handoff Capabilities
Dual Mode
This diagram shows all of the Network:
handoff types available in the 1900 CDMA 1900 Mhz CDMA
MMHHO feature 800 AMPS
Not all transitions are possible for Tri-Mode
all phones, but the feature Network:
supports all possible transitions 1900 CDMA,
Note there is no handoff from 800 CDMA,
800 AMPS
Analog back to CDMA because
of the long lockup time (~10 sec.) 800 Mhz CDMA
required by the mobile
Dual Mode
• Most users would assume Network:
the call had dropped! 800 CDMA
800 AMPS
800 Mhz AMPS
Bibliography
“Wireless Communications Principles & Practice” by Theodore S. Rappaport. 641 pp., 10 chapters, 7 appendices.
Prentice-Hall PTR, 1996, ISBN 0-13-375536-3. If you can only buy one book, buy this one. Comprehensive
summary of wireless technologies along with principles of real systems. Includes enough math for
understanding and solving real problems. Good coverage of system design principles.
“The Mobile Communications Handbook” edited by Jerry D. Gibson. 577 pp., 35 chapters. CRC Press/ IEEE Press
1996, ISBN 0-8493-0573-3. $89 If you can buy only two books, buy this second. Solid foundation of modulation
schemes, digital processing theory, noise, vocoding, forward error correction, excellent full-detailed expositions
of every single wireless technology known today, RF propagation, cell design, traffic engineering. Each chapter
is written by an expert, and well-edited for readability. Clear-language explanations for both engineers and
technicians but also includes detailed mathematics for the research-inclined. Highly recommended.
“CDMA Systems Engineering Handbook” by Jhong Sam Lee and Leonard E. Miller, 1998 Artech House, ISBN 0-
89006-990-5. Excellent treatment of CDMA basics and deeper theory, cell and system design principles,
system performance optimization and capacity issues. Highly recommended.
“Wireless Telecom FAQs” by Clint Smith, 2001 McGraw Hill, ISBN 0-07-134102-1. Succint, lucid explanations of
telecom terms in both wireless and landline technologies. Includes cellular architecture, AMPS, GSM, TDMA,
iDEN, CDMA. Very thorough coverage; an excellent reference for new technical people or anyone wishing for
clear explanations of wireless terms.
“CDMA RF System Engineering” by Samuel C. Yang, 1998 Artech House, ISBN 0-89006-991-3. Good general
treatment of CDMA capacity considerations from mathematical viewpoint.
"CDMA: Principles of Spread Spectrum Communication" by Andrew J. Viterbi. 245 p. Addison-Wesley 1995. ISBN
0-201-63374-4, $65. Definitive very deep CDMA Theory. You can design CDMA chipsets after reading it, but
beware lots of triple integrals; not very relevant to operations. Prestige collector’s item among CDMA faithful.
"Mobile Communications Engineering" 2nd. Edition by William C. Y. Lee. 689 pp. McGraw Hill 1998 $65.
ISBN 0-07-037103-2 Lee’s latest/greatest reference work on all of wireless; very complete and well done.
"Spread Spectrum Communications Handbook" by Simon, Omura, Scholtz, and Levitt. 1227 pp., 15 illus., McGraw-
Hill # 057629-7, $99.50 Definitive technical reference on principles of Spread Spectrum including direct
sequence as used in commercial IS-95/JStd008 CDMA. Heavy theory.
Bibliography (concluded)
“Wireless and Personal Communications Systems” by Garg, Smolik & Wilkes. 445 pp., Prentice Hall, 1996, $68.
ISBN 0-13-234-626-5 $68. This is the little brother of “The Mobile Communications Handbook”. Good
explanation of each technology for a technical newcomer to wireless, but without quite as much authoritative
math or deep theoretical insights. Still contains solid theory and discussion of practical network architecture.
"Voice and Data Communications Handbook" by Bates and Gregory 699 pp, 360 illus., McGraw-Hill # 05147-X, $65
Good authoritative reference on Wireless, Microwave, ATM, Sonet, ISDN, Video, Fax, LAN/WAN
"Communication Electronics" by Louis E. Frenzel, 2nd. Ed., list price $54.95. Glencoe/MacMillan McGraw Hill,
April, 1994, 428 pages hardcover, ISBN 0028018427. All the basic principles of transmission and their
underlying math. If you didn’t take signals & systems in school, this is your coach in the closet.
“Digital Communications: Fundamentals and Applications” by Bernard Sklar. 771 pp., Prentice Hall, 1988. $74
ISBN# 0-13-211939-0 Excellent in depth treatment of modulation schemes, digital processing theory, noise.
"Wireless Personal Communications Services" by Rajan Kuruppillai. 424 pp., 75 illus., McGraw-Hill # 036077-4, $55
Introduction to major PCS technical standards, system/RF design principles and process, good technical
reference
"PCS Network Deployment" by John Tsakalakis. 350 pp, 70 illus., McGraw-Hill #0065342-9, $65 Tops-down view
of the startup process in a PCS network. Includes good traffic section.
"The ARRL Handbook for Radio Amateurs (1997)" published by the American Radio Relay League (phone 800-594-
0200). 1100+ page softcopy ($44); useful exposure to nuts-and-bolts practical ideas for the RF-unfamiliar.
Solid treatment of the practical side of theoretical principles such as Ohm’s law, receiver and transmitter
architecture and performance, basic antennas and transmission lines, and modern circuit devices. Covers
applicable technologies from HF to high microwaves. If you haven’t had much hands-on experience with real
RF hardware, or haven’t had a chance to see how the theory you learned in school fits with modern-day
communications equipment, this is valuable exposure to real-world issues. Even includes some spread-
spectrum information in case you’re inclined to play and experiment at home. At the very least, this book will
make dealing with hardware more comfortable. At best, it may motivate you to dig deeper into theory as you
explore why things behave as they do.

134 V 2

Uploaded by

Document Information

Original Description:

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

134 V 2

Uploaded by

Copyright:

Available Formats

Course 134

April, 2001 Course 134v2.0 (c) 2001 Scott Baxter Page 1

April, 2001 Course 134v2.0 (c) 2001 Scott Baxter Page 2

 All CDMA users occupy the same frequency CDMA

April, 2001 Course 134v2.0 (c) 2001 Scott Baxter Page 3

via air interface Input A: Received Signal Destination Site

 Input B: Walsh Code #23

Drawn to actual scale and time alignment

April, 2001 Course 134v2.0 (c) 2001 Scott Baxter Page 4

TRADITIONAL COMMUNICATIONS SYSTEM

Spread Spectrum Payoff:

April, 2001 Course 134v2.0 (c) 2001 Scott Baxter Page 5

April, 2001 Course 134v2.0 (c) 2001 Scott Baxter Page 6

ORIGINATING SITE DESTINATION

 Sender combines data with a fast spreading sequence, transmits

April, 2001 Course 134v2.0 (c) 2001 Scott Baxter Page 8

 Whether in shipping and receiving, or in CDMA, packaging is

April, 2001 Course 134v2.0 (c) 2001 Scott Baxter Page 9

ORIGINATING SITE DESTINATION

Spreading Spreading Spreading Spreading Spreading Spreading

April, 2001 Course 134v2.0 (c) 2001 Scott Baxter Page 10

 64 “Magic” Sequences, each 64 chips long

 Each Walsh Code is precisely Orthogonal with

respect to all other Walsh Codes 10

• it’s simple to generate the codes, or 14

• they’re small enough to use from ROM 18

Correlation of Walsh Code #23 with Walsh Code #59 48

Correlation Results: 32 1’s, 32 0’s: Orthogonal!! 61

April, 2001 Course 134v2.0 (c) 2001 Scott Baxter Page 11

compared with themselves not Self, in sync:

April, 2001 Course 134v2.0 (c) 2001 Scott Baxter Page 12

32,768 chips long

April, 2001 Course 134v2.0 (c) 2001 Scott Baxter Page 13

AND Public Long Code Mask

User Long Code

April, 2001 Course 134v2.0 (c) 2001 Scott Baxter Page 14

One LONG CODE:

April, 2001 Course 134v2.0 (c) 2001 Scott Baxter Page 15

April, 2001 Course 134v2.0 (c) 2001 Scott Baxter Page 16

more more more

April, 2001 Course 134v2.0 (c) 2001 Scott Baxter Page 17

Pilot Walsh 0  PILOT: WALSH CODE 0

Walsh 55  TRAFFIC: any remaining WALSH codes

April, 2001 Course 134v2.0 (c) 2001 Scott Baxter Page 18

Long Code Gen

more more more

April, 2001 Course 134v2.0 (c) 2001 Scott Baxter Page 19

Switch Access Manager BTS

DMS-BUS TFU1 CDSU

April, 2001 Course 134v2.0 (c) 2001 Scott Baxter Page 21

April, 2001 Course 134v2.0 (c) 2001 Scott Baxter Page 22

April, 2001 Course 134v2.0 (c) 2001 Scott Baxter Page 23

April, 2001 Course 134v2.0 (c) 2001 Scott Baxter Page 24

 Vocoders compress speech, reduce bit 20ms Sample

Frame Contents: can be a mixture of

April, 2001 Course 134v2.0 (c) 2001 Scott Baxter Page 25

BSC BTS (1 sector) Help!

 The BTS continually reduces the strength of each user’s forward

April, 2001 Course 134v2.0 (c) 2001 Scott Baxter Page 26

BSC BTS RX RF Digital

April, 2001 Course 134v2.0 (c) 2001 Scott Baxter Page 27

power control from receiver Closed Loop Pwr Ctrl

All CDMA users occupy the same frequency CDMA

Input B: Walsh Code #23

Sender combines data with a fast spreading sequence, transmits

Whether in shipping and receiving, or in CDMA, packaging is

64 “Magic” Sequences, each 64 chips long

Each Walsh Code is precisely Orthogonal with

Pilot Walsh 0 PILOT: WALSH CODE 0

Walsh 55 TRAFFIC: any remaining WALSH codes

Vocoders compress speech, reduce bit 20ms Sample

The BTS continually reduces the strength of each user’s forward

As this spreadsheet shows, actual traffic capacity is influenced

DMS-BUS Primary functions

CDSU DISCO 2 CDSU Primary functions

Base Transceiver Station

Executive Cellular Processor

Primary function: Air link

Personal Communications Switching Center

Centralized Base Station Controller

Samsung offers both a large switching product, the SDX100, and a

Claimed capability for configuration up to 7 carriers

Samsung’s network architecture is

Every frame, handset uses combined outputs of the three traffic

CDMA soft handoff is driven by the handset

Layer-3 Messaging Review