Signaling overview

By Eng. Waleed Elsafoury

Agenda

• Introduction to SS7
• Protocol stack
• MTP
• ISUP
• SCCP
• TCAP
• BSSAP
• MAP
• SIGTRAN
Introduction to
SIGNALING system # 7
SIGNALING system # 7
In a telephony context, signaling means the passing of information and instructions from
one point to another relevant to the setting up and supervision of a telephone call.
By tradition, Signaling has been divided into two types: Subscriber Signaling i.e. signaling
between a subscriber terminal (telephone) and the local exchange, and Trunk Signaling i.e.
signaling between exchanges.

Local Local
Exchange Exchange

 Subscriber
Signalling
c c
Trunk
Signalling
c c
Subscriber
Signalling 
c a c a
s s s s
SIGNALING Modes
Common channel signaling (CCS) is signaling in which a group of voice-and-data channels
share a separate channel that is used only for control signals. This arrangement is an
alternative to channel associated signaling (CAS), in which control signals are carried in the
same channels as voice and data signals.

For example, in the public switched telephone network (PSTN) one channel of a
communications link is typically used for the sole purpose of carrying signaling for
establishment and tear down of telephone calls. The remaining channels are used entirely for
the transmission of voice data.
ADVANTAGE & DISADVANTAGE OF CCS

• CCS has the following advantages in comparison to CAS:

• Shorter length of time the calling subscriber has to wait for the call to be set up
• CCS has the following disadvantages in comparison to CAS:
• CCS links can be a single point of failure” a single link can control thousands of voice
circuits, so if a link fails and no alternative routes are found, thousands of calls could be
lost”.
• There is no testing of speech path by call set-up signaling.
SIGNALING system # 7
Common Channel Signaling System No. 7 (SS7 or C7) is a global standard for
telecommunications defined by the International Telecommunication Union (ITU)
Telecommunication Standardization Sector (ITU-T).

The standard defines the procedures and protocol by which network elements in the public
switched telephone network (PSTN) exchange information over a digital signaling network to
effect wireless (cellular) and wireline call setup, routing and control.
SIGNALING system # 7
The SS7 network and protocol are used for:

• Basic call setup, management and tear down

• Wireless services such as personal communications services (PCS), wireless
roaming and mobile subscriber authentication
• Local number portability (LNP)
• Enhanced call features such as call forwarding, calling party name/number display
and three-way
SIGNALING system # 7
For Modern telephone networks “GSM and UMTS”

• Signaling can done while a call is in progress, such as call Waiting, conferencing call

• Also appear of Non-circuit related signaling: not a call in place, such as Location
Update and registration
Ss7 terminologies
Signaling Links: The signaling links transmit signaling messages between the communicating entities.

Signaling Link Set: A signaling link set is a collection of signaling links between two signaling entities.

Signaling Route: A signaling route is defined to be the path through which signaling messages are
exchanged between two entities.

There can be multiple signaling routes between two SPCs, wherein there will be one primary route and
several alternate routes.
Ss7 terminologies
Main route

Main alternate
SIGNALING Points
Each signaling point in the SS7 network is uniquely identified by a numeric point code. Point
codes are carried in signaling messages exchanged between signaling points to identify the
source and destination of each message.

Each signaling point uses a routing table to select the appropriate signaling path for each
message.

There are three kinds of signaling points in the SS7 network:

• SSP (Service Switching Point)
• STP (Signal Transfer Point)
• SCP (Service Control Point)
SIGNALING Points

• SSPs are switches that originate, terminate or synch calls. An SSP sends signaling
messages to other SSPs to setup, manage and release voice circuits required to complete a
call.

• An SSP may also send a query message to a centralized database (an SCP) to determine
how to route a call.

• An SCP sends a response to the originating SSP containing the routing number(s)
associated with the dialed number.
SIGNALING system # 7
• SCP is an SS7 network node that supports application databases” HLR, AUC, SMSC ..etc”.

• SCPs accept data queries, retrieve the requested information, and send a response message to
the originator of the request
SIGNALING system # 7
• STP routes each incoming message to an outgoing signaling link based on routing information
contained in the SS7 message. an STP provides improved utilization of the SS7 network by
eliminating the need for direct links between signaling points.
• Acting somewhat like a router in an IP network.
• An STP is neither source nor the destination for most signaling messages.

SSP
STP

SSP
STP
SSP
SIGNALING system # 7
• Note:
• Links between signaling points are also provisioned in pairs.
• If one of the links fails, the signaling traffic is rerouted over another link in the linkset.
• The SS7 protocol provides both error correction and retransmission capabilities to allow
continued service in the event of signaling point or link failures.
SS7 Signaling Link Types
Signaling links are logically organized by link type ("A" through "F") according to their use in the SS7
signaling network.
SS7 Signaling Link Types
A link: An "A" (access) link connects a signaling end
point (e.g., an SCP or SSP) to an STP.

B Link: A "B" (bridge) link connects one STP to another.

C Link: A "C" (cross) link connects STPs performing

identical functions into a mated pair. A "C" link is used
only when an STP has no other route available to a
destination signaling point due to link failure(s).

D Link: A "D" (diagonal) link connects a secondary (e.g., local or regional) STP pair to a primary (e.g.,
inter-network gateway) STP pair.
SS7 Signaling Link Types
E Link: An "E" (extended) link connects an SSP to an
alternate STP. "E" links provide an alternate signaling
path if an SSP’s "home" STP cannot be reached via an
"A" link.

F Link: An "F" (fully associated) link connects two

signaling end points (i.e., SSPs and SCPs). "F“ links are
not usually used in networks with STPs.
TEST yourself

• The signaling of SS7 features …………….. Signaling.

a) Channel associated

b) Common channel
TEST yourself

• There can be multiple signaling routes between two SPCs.

a) True

b) False
TEST yourself

• SCPs are switches that originate, terminate or synch calls.

a) True

b) False
TEST yourself

• STP routes each incoming message to an outgoing signaling link based on

routing information contained in the SS7 message.

a) True

b) False
TEST yourself

• SS7 protocol provides both error correction and retransmission capabilities

a) True

b) False
TEST yourself

• A link connects a signaling end point (e.g., an SCP or SSP) to an STP.

a) True

b) False
TEST yourself

• “D" link is used only when an STP has no other route available to a
destination signaling point due to link failure(s).

a) True

b) False
Protocol Stack
OSI Model
Application •User interface
•Application protocol

Presentation •Format translation

•encryption

Session •Connection for charging

Transport •Segmentation

Network •Switching
•Routing

Datalink •Error management

Physical •Encoding
•modulation

OSI “Open system interconnection” model Layers

SS7 Protocol Stack
Message Transfer Part
The Message Transfer Part (MTP) is divided into three
levels.

• MTP Level 1, is equivalent to the OSI Physical Layer.

MTP Level 1 defines the physical, electrical and
functional characteristics of the digital signaling link.
Physical interfaces defined include E-1 (2048 kb/s; 32
64 kb/s channels)

• MTP Level 2 ensures accurate end-to-end transmission

of a message across a signaling link. Level 2
implements message sequence validation and error
checking. When an error occurs on a signaling link, the
message (or set of messages) is retransmitted. MTP
Level 2 is equivalent to the OSI Data Link Layer.
SS7 Protocol Stack
• MTP Level 3 provides message routing between
signaling points in the SS7 network. MTP Level 3
reroutes traffic away from failed links and signaling
points and controls traffic when congestion occurs. MTP
Level 3 is equivalent to the OSI Network Layer.
ISDN User Part (ISUP)
The ISDN User Part (ISUP) defines the protocol used to
set-up, manage and release trunk circuits that carry voice
and data between terminating line exchanges (e.g.,
between a calling party and a called party). ISUP is used
for both ISDN and non-ISDN calls. However, calls that
originate and terminate at the same switch do not use ISUP
signaling.
SS7 Protocol Stack
Telephone User Part (TUP)
In some parts of the world (i.e., China and Brazil), the
Telephone User Part (TUP) is used to support basic call
setup and tear-down. TUP handles analog circuits only. In
many countries, ISUP has replaced TUP for call
management.

Signaling Connection Control Part (SCCP)

SCCP provides connectionless and connection-oriented
network services and global title translation (GTT) capabilities.
A global title is an address (e.g., a dialed number, calling card
number or mobile subscriber identification number) that is
translated by SCCP into a destination point code.
SS7 Protocol Stack
Transaction Capabilities Applications Part (TCAP)
TCAP supports the exchange of non-circuit related data
between applications across the SS7 network using the SCCP
connectionless service. Queries and responses sent between
SSPs and SCPs are carried in TCAP messages.
In mobile networks (GSM), TCAP carries Mobile Application
Part (MAP) messages sent between mobile switches and
databases to support user authentication, equipment
identification and roaming.
SS7 Protocol Stack
BSS Application Part (BSSAP) “ for mobile networks”
is a protocol in Signaling System 7 used by the Mobile
Switching Center (MSC) and the Base station subsystem (BSS)
to communicate with each other.
For each active mobile equipment one signaling connection is
used by BSSAP having at least one active transactions for the
transfer of messages
BSSAP provides two kinds of functions:
The BSS Mobile Application Part (BSSMAP) supports
procedures to facilitate communication between the MSC and
the BSS pertaining to resource management and handover
control.
The Direct Transfer Application Part (DTAP) is used for
transfer of those messages which need to travel directly to a
Mobile equipment from MSC. These messages are generally
pertaining to Mobility management (MM) or Call Management
(CM)
SS7 Protocol Stack
The Mobile Application Part (MAP) “for mobile networks”

is an SS7 protocol that provides an application layer for the

various nodes in GSM and UMTS mobile core networks and
GPRS core networks to communicate with each other in
order to provide services to users.

The Mobile Application Part is the application-layer protocol

used to access the Home Location Register, Visitor Location
Register, Mobile Switching Center, Equipment Identity
Register, Authentication Centre, Short message service
center and Serving GPRS Support Node (SGSN).
TEST yourself

• MTP Level ………. is equivalent to the OSI Network Layer.

a) 1

b) 2

c) 3
TEST yourself

• ……….. defines the protocol used to set-up, manage and release trunk
circuits that carry voice and data between terminating line exchanges

a) TUP

b) SCCP

c) ISUP
TEST yourself

• ……….. provides connectionless and connection-oriented network services

and global title translation (GTT) capabilities

a) TUP

b) SCCP

c) ISUP
TEST yourself

• ……….. carries Mobile Application Part (MAP) messages sent between

mobile switches and databases to support user authentication, equipment
identification and roaming.

a) TUP

b) TCAP

c) ISUP
TEST yourself

• ……….. is a protocol in Signaling System 7 used by the Mobile Switching

Center (MSC) and the Base station subsystem (BSS)

a) BSSAP

b) MAP
TEST yourself

• ……….. is an SS7 protocol that provides an application layer for the various
nodes in GSM and UMTS mobile core networks and GPRS core networks to
communicate with each other in order to provide services to users.

a) BSSAP

b) MAP
TEST yourself

• ……….. supports procedures to facilitate communication between the MSC

and the BSS pertaining to resource management and handover control.

a) DTAP

b) BSSMAP
MTP
Message Transfer Part
Message Transfer Part
MTP Level 1
The lowest level, MTP Level 1, is equivalent to the OSI Physical Layer. MTP Level 1 defines the
physical, electrical and functional characteristics of the digital signaling link. Physical interfaces
defined include E-1 (2048 kb/s; 32 64 kb/s channels).

MTP Level 2
MTP Level 2 ensures accurate end-to-end transmission of a message cross a signaling link.
Level 2 implements message sequence validation and error checking. When an error occurs on a
signaling link, the message (or set of messages) is retransmitted. MTP Level 2 is equivalent to
the OSI Data Link Layer.
Message Transfer Part
An SS7 message is called a signal unit (SU).

• Signal Unit Error Rate Monitor (SUERM)

counter is increased by 1 for each SU that is
received in error.
• If the link reaches a threshold of T, MTP2
informs MTP3, which removes it from
service.
Message Transfer Part

There are three kinds of signal units:

• Fill-In Signal Units (FISUs)

• Link Status Signal Units (LSSUs)
• Message Signal Units (MSUs)
Message Transfer Part
• FISUs is used for error supervision of the link
and to keep the link running when there are
no SUs to be sent.

• FISUs are transmitted continuously on a

signaling link in both directions unless other
signal units (MSUs or LSSUs) are present.

• Because a CRC checksum is calculated for

each FISU, signaling link quality is checked
continuously by both signaling points at either
end of the link.

• FISUs are sent only at predefined timer

intervals (e.g., once every 150 milliseconds).
Message Transfer Part
• LSSUs carry one or two octets (8-bit bytes)
of link status information between signaling
points at either end of a link.

• The link status is used to control link

alignment and to indicate the status of a
signaling point (e.g., local processor outage)
to the remote signaling point.
Message Transfer Part
• MSUs carry all call control, database query
and response, network management and
network maintenance data in the signaling
information field (SIF).

• MSUs have a routing label, which allows an

originating signaling point to send
information to a destination signaling point
across the network.
Message Transfer Part

The value of the LI (Length Indicator) field

determines the signal unit type:
0

1-2

3-63
1 or 2

3 - 63
Message Transfer Part
The 6-bit LI can store values between zero and
63.

If the number of octets that follow the LI and

precede the CRC is less than 63, the LI contains
this number.

Otherwise, the LI is set to 63. An LI of 63

indicates that the message length is equal to or
greater than 63 octets (up to a maximum of 273
octets).

The maximum length of a signal unit is 279

octets: 273 octets (data) + one octet (flag) + one
octet (BSN + BIB) + one octet (FSN + FIB) + one
octet (LI + two bits spare) + two octets (CRC).
Message Transfer Part
Flag
• The flag indicates the beginning of a new
signal unit and implies the end of the
previous signal unit (if any).

• The binary value of the flag is 0111 1110.

Before transmitting a signal unit, MTP Level
2 removes "false flags" by adding a zero-bit
after any sequence of five one-bits. Upon
receiving a signal unit and stripping the flag,
MTP Level 2 removes any zero-bit following
a sequence of five one-bits to restore the
original contents of the message. Duplicate
flags are removed between signal units.
Message Transfer Part
BSN (Backward Sequence Number)
The BSN is used to acknowledge the receipt of
signal units by the remote signaling point. The
BSN contains the sequence number of the
signal unit being acknowledged.

BIB (Backward Indicator Bit)

The BIB indicates a negative acknowledgment
by the remote signaling point when toggled.

FSN (Forward Sequence Number)

The FSN contains the sequence number of the
signal unit.
Message Transfer Part
FIB (Forward Indicator Bit)
• The FIB is used in error recovery like the BIB.
• When a signal unit is ready for transmission, the
signaling point increments the FSN by one
(FSN = 0..127).
• The CRC checksum value is calculated and
appended to the forward message.
• Upon receiving the message, the remote
signaling point checks the CRC and copies the
value of the FSN into the BSN of the next
available message scheduled for transmission
back to the initiating signaling point. If the CRC
is incorrect, the remote signaling point indicates
negative acknowledgment by toggling the BIB.
• When the originating signaling point receives a
negative acknowledgment, it retransmits all
forward messages, beginning with the corrupted
message, with the FIB toggled.
Message Transfer Part
SIO (Service Information Octet)
• The SIO field in an MSU contains the 4-
bit subservice field followed by the 4-bit
service indicator. FISUs and LSSUs do
not contain an SIO.
• The subservice field contains the network
indicator (e.g., national or international) and
the message priority (zero to three with
three being the highest priority). Message
priority is considered only under congestion
conditions.

• The service indicator specifies the MTP user

thereby allowing the decoding of the
information contained in the SIF
Message Transfer Part
Message Transfer Part
SIF (Signaling Information Field)
• The SIF in an MSU contains the routing label
and signaling information (e.g., SCCP, TCAP
and ISUP message data).

• LSSUs and FISUs contain neither a routing

label nor an SIO as they are sent between two
directly connected signaling points.

CRC (Cyclic Redundancy Check)

• The CRC value is used to detect data
transmission errors.
Message Transfer Part
CRC (Cyclic Redundancy Check)
Message Transfer Part
MTP Level 3
• MTP Level 3 provides message routing between signaling points in the SS7 network. MTP
Level 3 is equivalent in function to the OSI Network Layer.

• MTP Level 3 routes messages based on the routing label in the signaling information field
(SIF) of message signal units. The routing label is comprised of the destination point code
(DPC), originating point code (OPC) and signaling link selection (SLS) field.

YES MTP3 USER

Discrimination Distribution
TUP,SCCP, …

NO
Routing
Message Transfer Part
MSC/VLR HLR
PC=1 PC=4

MAP MAP
TCAP STP
PC=2
STP
PC=3 TCAP
SCCP SCCP SCCP SCCP
MTP MTP MTP MTP
OPC=1 OPC=1 OPC=1
DPC=4 DPC=4 DPC=4
Message Transfer Part
MTP Level 3
• Point codes are numeric addresses that uniquely identify each signaling point in the SS7
network. When the destination point code in a message indicates the receiving signaling
point, the message is distributed to the appropriate user part (e.g., ISUP or SCCP) indicated
by the service indicator in the SIO.
• ANSI point codes use 24 bits (three octets); ITU-T point codes typically use 14 bits. For this
reason, signaling information exchanged between ANSI and ITU-T networks must be routed
through a gateway STP.

• ITU-T point codes are pure binary numbers, which may be stated in terms of zone,
area/network and signaling point identification numbers.
Message Transfer Part
SPC : SPC is defined as signaling point code which uniquely identifies each element within the SS7
network “14 bits”

Zone identifier Area/net SP identifier

identifier

8x256x8= 16,384 Signaling point

Message Transfer Part
International Signaling Point Codes (ISPC) for signaling system No. 7
Message Transfer Part
Signaling Link Selection (SLS)
▪The selection of outgoing link is based on information in the DPC and Signaling Link Selection field
Ensure message sequencing. Any two messages sent with the same SLS will always arrive at the
destination in the same order in which they were originally sent.
▪ Allow equal load sharing of traffic among all available links.
▪MTP Level 3 re-routes traffic away from failed links and signaling points and controls traffic when
congestion occurs.
Message Transfer Part
MTP Routing table
Test yourself
In the following figure, what's the DPC and OPC of the messages?
TEST yourself

• ……….. is used for error supervision of the link and to keep the link running
when there are no SUs to be sent.
• .

a) FISUs

b) LSSUs

c) MSUs
TEST yourself

• ……….. carry all call control, database query and response, network
management and network maintenance data .
• .

a) FISUs

b) LSSUs

c) MSUs
TEST yourself

• ……….. carry one or two octets (8-bit bytes) of link status information
between signaling points at either end of a link. .
• .

a) FISUs

b) LSSUs

c) MSUs
TEST yourself

• The maximum length of a signal unit is ………..

a) 273

b) 279

c) 292
TEST yourself

• The binary value of the flag is 0111 1110. Before transmitting a signal unit,
MTP Level 3 removes "false flags" by adding a zero-bit after any sequence of
five one-bits.

a) True

b) False
TEST yourself

• ITU-T point codes typically use 14 bits.

a) True

b) False
ISUP
ISDN User part
ISDN User part
The ISDN User Part (ISUP)

• defines the protocol and procedures used to set-up, manage and release trunk circuits that carry
voice and data calls over the public switched telephone network (PSTN).

• Calls that originate and terminate at the same switch do not use ISUP signaling.
ISDN User part
Commonly Used ISUP Signals

Initial Address Message (IAM)

An IAM is sent in the "forward" direction by each switch needed to complete the circuit between the
calling party and called party until the circuit connects to the destination switch. An IAM contains the
called party number in the mandatory variable part and may contain the calling party name and
number in the optional part.
Address Complete Message (ACM)
An ACM is sent in the "backward" direction to indicate that the remote end of a trunk circuit has
been reserved. The originating switch responds to an ACM message by connecting the calling
party's line to the trunk to complete the voice circuit from the calling party to the called party. The
originating switch also sends a ringing tone to the calling party's line.
ISDN User part
Commonly Used ISUP Signals

Answer Message (ANM)

When the called party answers, the destination switch terminates the ringing tone and sends an ANM
to the originating switch. The originating switch initiates billing after verifying that the calling party's
line is connected to the reserved trunk.
Release Message (REL)
A REL is sent in either direction indicating that the circuit is being released due to the cause indicator
specified. An REL is sent when either the calling or called party "hangs up" the call (cause = 16). An
REL is also sent in the backward direction if the called party line is busy (cause = 17).
Release Complete Message (RLC)
A RLC is sent in the opposite direction of the REL to acknowledge the release of the remote end of a
trunk circuit and end the billing cycle as appropriate.
ISDN User part
Basic ISUP Call Control

1. When a call is placed to an out-of-switch number,

the originating SSP transmits an ISUP initial
address message (IAM) to reserve an idle trunk
circuit from the originating switch to the destination
switch (1a). The IAM includes the originating point
code, destination point code, circuit identification
code (circuit "5"), dialed digits and. In the example
below, the IAM is routed via the home STP of the
originating switch to the destination switch (1b).
Note that the same signaling link(s) are used for the
duration of the call unless a link failure condition
forces a switch to use an alternate signaling link.
ISDN User part
Basic ISUP Call Control

2. The destination switch examines the dialed number,

determines that it serves the called party and that the line
is available for ringing. The destination switch rings the
called party line and transmits an ISUP address complete
message (ACM) to the originating switch (2a) (via its
home STP) to indicate that the remote end of the trunk
circuit has been reserved. The STP routes the ACM to
the originating switch (2b), which rings the calling party’s
line and connects it to the trunk to complete the voice
circuit from the calling party to the called party.
In the example shown, the originating and destination
switches are directly connected with trunks. If the
originating and destination switches are not directly
connected with trunks, the originating switch transmits an
IAM to reserve a trunk circuit to an intermediate switch.
ISDN User part
Basic ISUP Call Control
3. When the called party picks up the phone, the
destination switch terminates the ringing tone and
transmits an ISUP answer message (ANM) to the
originating switch via its home STP (3a). The STP routes
the ANM to the originating switch (3b), which verifies that
the calling party’s line is connected to the reserved trunk
and, if so, initiates billing.
4. If the calling party hangs-up first, the originating switch
sends an ISUP release message (REL) to release the
trunk circuit between the switches (4a). The STP routes
the REL to the destination switch (4b). If the called party
hangs up first, or if the line is busy, the destination switch
sends an REL to the originating switch indicating the
release cause (e.g., normal release or busy).
ISDN User part
Basic ISUP Call Control
5. Upon receiving the REL, the destination switch
disconnects the trunk from the called party’s line,
sets the trunk state to idle and transmits an ISUP
release complete message (RLC) to the originating
switch (5a) to acknowledge the release of the
remote end of the trunk circuit. When the originating
switch receives (or generates) the RLC (5b), it
terminates the billing cycle and sets the trunk state
to idle in preparation for the next call.
TEST yourself

• Calls that originate and terminate at the same switch do not use ISUP
signaling

a) True

b) False
TEST yourself

• ISUP defines the protocol and procedures used to set-up, manage and
release trunk circuits that carry voice calls only.

a) True

b) False
SCCP
Signaling Connection Control Part
Signaling Connection Control Part
In the telephone services, all signaling messages and calls have some relation with the circuit. In
general, the message transmission link corresponds to the call connection path.

In the GSM system, non-circuit-related signaling message also needs to be transmitted (e.g. location
update, authorization and so on), so the localization of MTP transmission emerges. What’s more,
Addressing within MTP is performed according to DPC, however, the signaling point code is not the
standard international code, it is only effective within a certain country. Therefore, MTP can not
provide the location registration function and authorization of the international roaming subscriber.

On the other hand, the limited capacity of the signaling point code (14-bit as specified by CCITT) also
limits the number of the signaling points to be marked.
Signaling Connection Control Part
To solve problems described above, in 1984, the CCITT came up with a new level structure: SCCP.
SCCP is based on MTP and provides the supplementary functions to MTP. When SCCP and MTP is
combined together, they are called as NSP (network service part). SCCP and MTP-3 all locate in the
network layer of the OSI model.

The SCCP provides additional functions to the Message Transfer Part to provide connectionless and
connection-oriented network services to transfer circuit-related and non-circuit-related signaling
information.

Exchange of information between two peers of the SCCP is performed by means of a protocol. The
protocol is a set of rules and formats by which the control information (and user data) is exchanged
between the two peers.
Signaling Connection Control Part

SCCP provides a routing function which allows signaling messages to be routed to a signaling point
based on, for example, dialed digits. This capability involves a translation function which translates the
global title (e.g. dialed digits) into a signaling point code and a subsystem number.

Functions of the SCCP are also used for the transfer of circuit related and call related signaling
information of the ISDN user part with or without setup of end-to-end logical signaling connections.
Signaling Connection Control Part
SCCP Message Format

• The Service Indicator of the Service Information Octet (SIO) is coded three (binary 0011) for
SCCP.

• SCCP messages are contained within the Signaling Information Field (SIF) of an MSU. The SIF
contains the routing label followed by the SCCP message contents.

• The SCCP message is comprised of a one octet message type field that defines the contents of
the remainder of the message
Signaling Connection Control Part
Addressing and Routing Functions of SCCP

The SCCP routing provides a powerful addressing information translation function on behalf of its
users. The routing function also responds to the MTP and SCCP congestion reports.
SCCP Addressing makes use of three separate elements:
▪DPC
▪Global Title (GT)
▪Sub-System Number (SSN)
Signaling Connection Control Part
Addressing and Routing Functions of SCCP

DPC
The DPC in an address requires no translation and will merely determine if the message is destined
for that SP (incoming message) or requires to be routed over the SS7 signaling network via the MTP.
For outgoing messages this DPC should be inserted in the MTP routing label. The DPC is only
effective within the defined signaling network.
Signaling Connection Control Part
SSN Sub-System Number
It uniquely identifies the SCCP user. Different telecom nodes like HLR, VLR, MSC, BSC, etc have
different SSN numbers.
Just like the MTP3 identifies the user parts using SI (Service Indicator) field in SIO of the MSU, the
SCCP layer uses SSN to identify the SCCP users.
Signaling Connection Control Part
Addressing and Routing Functions of SCCP

GT
The Global Title (GT) is used when the originating SP does not know the address of the destination
SP, it may comprise of dialed digits or another form of addresses that will not be recognized in the
SS7 network. Therefore, if the associated message requires to be routed over the SS7 network,
translation is required.
Translation of the GT will result in a DPC being produced and possibly also a new SSN and GT. A
field is also included in the address indicator to identify the format of the global title.
Signaling Connection Control Part
Global title translation
Signaling Connection Control Part
Global title translation
Signaling Connection Control Part
Primitive

In SS7 system, the information exchange between two adjacent layers is called primitive which
includes primitive name, primitive type and primitive parameters. There are four types of primitives:

▪ Request

▪ Indication

▪ Response

▪ Confirmation
Signaling Connection Control Part
Primitives between SCCP and SCCP-User (TCAP) are N_Primitives. The connectionless services
use the following N_Primitives:

N_UNITDATA_REQ：is used when SCCP-User requires SCCP to send data.

N_UNITDATA_IND：is used when SCCP reports the received data to SCCP-User.

N_NOTICE_IND：is used when SCCP reports the reason why the SCCP-User data cannot be sent
to peer point.

N-Primitives can be traced on maintenance terminals.

TEST yourself

• ……. uniquely identifies the SCCP user

a) DPC

b) SSN

c) GT
TEST yourself

• ……. is used when the originating SP does not know the address of the
destination SP

a) DPC

b) SSN

c) GT
TEST yourself

• ……. in an address requires no translation and will merely determine if the

message is destined for that SP (incoming message) or requires to be routed
over the SS7 signaling network via the MTP

a) DPC

b) SSN

c) GT
TCAP
Transaction Capabilities Application Part
Transaction Capabilities Application Part

▪Usually, MSC queries HLR for some information and the HLR replies back. The reply from HLR may
or may not be the final one, i.e. there may exist a chain of signaling transactions between MSC and
HLR which takes place over MAP layer.

▪SCCP alone can’t keep the track of all the transactions that would take place between MSC/VLR
and HLR.

▪TCAP layer serves as the secretary who manages these sort of transactions.
Transaction Capabilities Application Part
TCAP primitive may be one of the following types
Transaction Capabilities Application Part
Transaction ID

• The transaction ID is a TCAP reference for a set of TCAP operations that are performed within
a single dialog.
• When machine A starts a TCAP dialog with another machine B, the machine A sends
a Begin message to machine B.
• This Begin message contains an Originating Transaction ID, which is the Transaction ID
reference for A.
• When the machine B replies to A with a Continue message it includes A's Transaction ID as
the Destination Transaction ID.
• Furthermore B includes its own Transaction ID as the Originating Transaction ID.
Transaction Capabilities Application Part
Transaction ID
BSSAP
BSS Application Part
BSSAP (BSS Application Part)
BSS Application Part (BSSAP) “ for mobile networks”
• is a protocol in Signaling System 7 used by the Mobile Switching Center (MSC) and the Base
station subsystem (BSS) to communicate with each other.

• For each active mobile equipment one signaling connection is used by BSSAP having at least one
active transactions for the transfer of messages.

• The A interface is located between the MSC (mobile service switching center) and the BSS (base
station system or radio sub-system).
BSSAP (BSS Application Part)
BSSAP provides two kinds of functions:

The BSS Mobile Application Part (BSSMAP) supports procedures to facilitate communication
between the MSC and the BSS pertaining to resource management, paging and handover control.

The Direct Transfer Application Part (DTAP) is used for transfer of those messages which need to
travel directly to a Mobile equipment from MSC. These messages are generally pertaining to Mobility
management (MM) or Call Management (CM)
BSSAP (BSS Application Part)
BSSMAP messages
BSSAP (BSS Application Part)
DTAP messages
MAP
Mobile Application Part
MAP (Mobile Application Part)

The Mobile Application Part (MAP)

is an SS7 protocol that provides an application layer for the various nodes in GSM and UMTS mobile
core networks and GPRS core networks to communicate with each other in order to provide services
to users.

The Mobile Application Part is the application-layer protocol used to access the Home Location
Register, Visitor Location Register, Mobile Switching Center, Equipment Identity Register,
Authentication Centre, Short message service center and Serving GPRS Support Node (SGSN).
MAP (Mobile Application Part)
›MAP is used for communication between NSS element.

›For example, fetching of authentication parameters from HLR to MSC takes place over MAP/D
interface.
› Similarly, fetching of IMSI from old MSC/VLR to new MSC/VLR, while performing LU from one
MSC to another MSC, takes place over MAP/G interface.

›All non call related MSC-MSC signaling transaction takes place over MAP. The call related
signaling still uses traditional ISUP protocol.
MAP (Mobile Application Part)
The primary facilities provided by MAP are:

• Mobility Services: location management (to support roaming), authentication, managing service
subscription information, fault recovery,
• Operation and Maintenance: subscriber tracing, retrieving a subscriber's IMSI
• Call Handling: routing, managing calls whilst roaming, checking that a subscriber is available to
receive calls
• Supplementary Services
• Short Message Service
• Packet Data Protocol (PDP) services for GPRS: providing routing information for GPRS
connections
• Location Service Management Services: obtaining the location of subscriber
MAP (Mobile Application Part)
In mobile cellular telephony networks like GSM and UMTS the SS7 application MAP is used.
Voice connections are Circuit Switched (CS) and data connections are Packet Switched (PS)
applications.

Some of the GSM/UMTS Circuit Switched interfaces in the Mobile Switching Center (MSC)
transported over SS7 include the following:

B -> VLR (uses MAP/B). Most MSCs are associated with a Visitor Location Register (VLR), making
the B interface "internal".
C -> HLR (uses MAP/C) Messages between MSC to HLR handled by C Interface
D -> HLR (uses MAP/D) for attaching to the CS network and location update
E -> MSC (uses MAP/E) for inter-MSC handover
F -> EIR (uses MAP/F) for equipment identity check
H -> SMS-G (uses MAP/H) for Short Message Service (SMS) over CS
MAP (Mobile Application Part)
MAP (Mobile Application Part)
There are also several GSM/UMTS PS interfaces in the Serving GPRS Support Node (SGSN)
transported over SS7:

Gr -> HLR for attaching to the PS network and location update

Gd -> SMS-C for SMS over PS
Gs -> MSC for combined CS+PS signaling over PS
Gf -> EIR for equipment identity check
MAP (Mobile Application Part)
GSM Interfaces and Protocols
GSM Interfaces and Protocols
GSM Interfaces and Protocols
Examples for MAP Common Services
MAP (Mobile Application Part)
Example 1: Call Handling
MAP (Mobile Application Part)
Example 2: Location cancelling
MAP (Mobile Application Part)
Example 3: Sending SMS
MAP (Mobile Application Part)
Example 4: SMS Delivery
MAP (Mobile Application Part)
Example 5: Mobile terminated call

1.The calling subscriber uses the MSISDN to dial the mobile subscriber.
2.The MSISDN causes the call to be routed to the mobile network gateway
MSC (GMSC).
3.The GMSC uses information in the called number digits to locate the
mobile subscriber's HLR.
4.The HLR has already been informed about the location (VLR address) for
the mobile subscriber; it requests a temporary routing number to allow the
call to be routed to the correct MSC.
5.The MSC/VLR responds with a temporary routing number that is only valid
for the duration of this call.
6.The routing number is returned to the GMSC.
7.The call is made using ISUP (or TUP) signaling between the GMSC and
the MSC.
MAP (Mobile Application Part)
Example 6: interacting with USSD

USSD MODES
• Mobile-initiated “USSD/ PULL “
• when the user dials a code, e.g.
*139# from a GSM mobile handset
• Network-initiated “USSD/ PUSH “
• when the user receives a push
message from the network; primarily
used for promotional services

We have two operation:

• processUnstructuredSS-Request
if the MS initiated the transaction
• unstructuredSS-Request
if the Network entity initiated the
transaction
Putting all together
Putting all together
TEST yourself

• ……. Is a protocol for non call related signaling.

a) TCAP

b) BSSAP

c) MAP
TEST yourself

• ……. Is a protocol for communications between MS and MSC & MS and

BSC.

a) TCAP

b) BSSAP

c) MAP
TEST yourself

• ……. Is a protocol layer serves as the secretary who manages transactions

between MSC and HLR.

a) TCAP

b) BSSAP

c) MAP
TEST yourself

• ……. supports procedures to facilitate communication between the MSC and

the BSS pertaining to resource management and handover control

a) BSSMAP

b) DTAP
SIGTRAN
SIGTRAN
• SS7 has been the tried and true signaling mechanism for providing signaling in traditional PSTN
networks. But, with voice-over-IP (VoIP) becoming a more important technology for carriers,
carriers are starting to look for more IP friendly signaling schemes to use in their network
architectures.

• Sigtran” Signaling transport”, Developed by the Internet Engineering Task Force (IETF)

• the Sigtran protocol suite lets operators carry SS7 signaling traffic between a signaling gateway
(SG) and a media gateway controller (MGC) or IP-enabled signaling control point (IP-SCP), thus
allowing carriers to maintain their SS7 signaling schemes while being able to tap into the IP
network for transport.
SIGTRAN
For message delivery over IP on the Internet the transportation protocols Transmission Control
Protocol (TCP) and User Datagram Protocol (UDP) are used, but for real time signaling they
imply certain limitations.

However, the desired characteristics of signaling transportation are:

• Ordered, reliable transfer.
• Redundancy in case of link failure.
• Low loss and delay.
• Security against Denial of Service (DoS).
• UDP
UDP is a connectionless transport protocol that does not intrinsically use acknowledgment (ACK)
messages to guarantee reliable and ordered transportation.
• TCP
TCP is extremely sensitive to delay variance caused by the network or packet loss which often causes
retransmissions.
UDP and TCP can not support all these requirements, hence a new transport protocol was
designed by SIGTRAN, the Stream Control Transmission Protocol (SCTP)
SIGTRAN architecture
The SIGTRAN protocol suite includes the transport protocol
SCTP, along with several user adaptation (UA) layer protocols
that are necessary for the transport of SS7 messages over IP.

The SIGTRAN architecture consists of three layers: Adaptation

• IP layer
• Transport layer (SCTP)
• User adaptation layer (e.g. M2PA, M2UA, M3UA, and SUA). Transport

Internet protocol
SIGTRAN vs SS7 Stack
SIGTRAN vs SS7 Stack

• the three lower layers in the protocol stack show

the new SIGTRAN protocols.
• They replace the lower layers of the SS7 stack
(MTP1 and MTP2), enabling transportation over
IP. SCTP is a transport protocol similar to TCP,
but with a few changes to better suit SS7
signaling.
• A user adaptation protocol makes its SS7 user
(MTP3, SCCP, TCAP, ISUP etc.) unaware of that
the original lower SS7 layers have been
replaced.
Stream Control Transmission Protocol (SCTP)
SCTP provides the following features:
•Acknowledged error-free, nonduplicated transfer of user data
•Data segmentation to conform to path MTU size (dynamically assigned)
•Ordered (sequential) delivery of user messages on a per "stream" basis
•Option for unordered delivery of user messages
•Network-level fault tolerance through the support of multihoming
•Congestion avoidance behavior, similar to TCP
•Protection against blind denial of service and blind masquerade attacks
•Heartbeat mechanism, which provides continuous monitoring of reachability
Stream Control Transmission Protocol (SCTP)

• SCTP is a connection-oriented
protocol.
• Each end of the connection is a SCTP Host 1 Host 2
endpoint. IP: 10.40.60.15 IP: 10.40.60.18
• An endpoint is defined by the SCTP
transport address, which consists of SCTP SCTP
one or more IP addresses and an Port 2905 Port 2905
SCTP port.
• The two endpoints pass state
information in an initialization
procedure to create an SCTP
association. IP
• After the association has been created, Network
user data can be passed
Stream Control Transmission Protocol (SCTP)
Head-of-Line Blocking
• SCTP uses streams as a means of decreasing
the impact of head-of-line blocking.

• In SCTP, a stream is a unidirectional channel

within an association. Streams provide the ability Example of Head-of-Line Blocking in TCP
to send separate sequences of ordered
messages that are independent of one another.
Stream Control Transmission Protocol (SCTP)
Failure Detection

• Quick failure detection and recovery is important for meeting the performance and reliability
requirements.
• Two types of failures can occur:
• One or more destination addresses in the peer endpoint become unavailable or unreachable.
• The peer endpoint becomes unavailable or unreachable.

SCTP provides two mechanisms for detecting failures:

1.Use of the Path.Max.Retrans threshold, which is the maximum number of consecutive
retransmission that are allowed for a path.
2.Use of the heartbeat mechanism.
Stream Control Transmission Protocol (SCTP)
Path.Max.Retrans threshold

When an endpoint sends a data message to a particular destination address, an

acknowledgement is expected in return. If the acknowledgement has not been received
when the retransmission timer expires, SCTP increases an error counter for that
destination address and then retransmits the data message to the same destination or
to another destination address, if one is available. The destination address is considered
unreachable if the error counter reaches a defined threshold (Path.Max.Retrans).
Stream Control Transmission Protocol (SCTP)
Heartbeat mechanism

This mechanism is useful for monitoring idle destination addresses, such as a destination address
that has not received a data within the heartbeat period. The heartbeat is sent periodically, based on
a configured heartbeat timer. If a heartbeat response is not received, the same error counter is
increased. Again, when the error counter reaches a defined threshold (Path.Max.Retrans), the
destination address is considered unavailable or unreachable.

As noted, TCP is limited in this respect because most implementations do not allow the
application to tune key TCP parameters. SCTP encourages an implementation to
support tunable parameters
Stream Control Transmission Protocol (SCTP)
Multihoming and Failure Recovery

Multihoming provides a means for path level redundancy. This feature enables SCTP endpoints to
support multiple transport addresses. Each transport address is equivalent to a different path for
sending and receiving data through the network
Multihoming Allows for multiple virtual connections
on the same physical line. Each user application
might be assigned its own stream (virtual
connection). SCTP's multi-streaming allows data to
be delivered in multiple, independent streams, so
that if there is data loss in one stream, delivery will
not be affected for the other streams.
Stream Control Transmission Protocol (SCTP)
Multihoming and Failure Recovery

In the case of multihoming, one network path is selected as the primary path. Data is transmitted on
the primary path while that path is available. If a packet gets dropped for instance, because of a failure
in the path the retransmission should be sent on the alternate path
Adaptation layer

Sigtran is only for transport purposes. The user

application should not change if an ss7 node
connectivity changes from SS7 to sigtran. To make
this possible, in sigtran protocols there are
adaptation layers. An SS7 layer is the user of the
adaptation layer and the adaptation layer uses the
service of the SCTP protocol. Basis of the SS7
layer, sigtran layers are standardized.
Adaptation layer

SUA (SCCP-User Adaptation Layer)

SUA defines a protocol for the transport of any SS7
SCCP-user signaling message such as TCAP,
RANAP or MAP over IP using SCTP services.

M3UA (MTP 3 User Adaptation Layer)

M3UA supports the transport of any SS7 MTP3-User
signaling (for example, ISUP and SCCP messages)
to an IP Signaling Point (IPSP) using the services of
SCTP.
Adaptation layer
M2UA (MTP2 User Adaptation Layer)
M2UA is a protocol for the backhauling of SS7
MTP3 messages over IP using the services of
SCTP.

M2PA (MTP2 Peer-to-Peer Adaptation Layer)

MP2A is a protocol which supports the
transport of SS7 MTP3 signaling messages
over IP using the services of the SCTP.
Thank You
[email protected]