CDMA 1X系统消息

CDMA1X简介
cdma2000的空中接口基于宽带CDMA技术，采用该技术在快速移动环境、步行环境、以及固定位置环境下，均可达到或超过IMT-2000的技术指标要求。

cdma2000支持从2G 系统的演进，具有以下一些特性：
宽松的性能范围：支持从话音到低速数据、到非常高速的分组和电路数据业务；
提供多种复合的业务：仅传话音、同时传话音和数据、仅传数据和定位业务；
具有先进的多媒体服务质量（QoS）控制能力，支持多路话音、高速分组数据同时传送；
与现存的IS-95系统具有无缝的互操作性和切换能力；
具有从IS-95系统平滑演进的能力；
cdma2000系统一些主要的系统参数参见下表
cdma2000系统一些主要的系统参数。

CDMA信令流程
CDMA2000 1X数据业务介绍
数据业务
数据业务特指CDMA系统中发生的分组数据业务，包括呼叫、切换、释放等处理流程。

数据业务中MS的几种状态
在CDMA系统中MS可以处于三种状态，它们分别为Null状态、Dormant状态、Active状态。

CDMA2000 1X语音业务介绍
语音业务
语音业务特指CDMA系统中发生的语音业务，它在通话过程中包括呼叫、切换、释放等处理流程。

语音呼叫
语音呼叫是指在语音业务过程中发生的呼叫，包括
正常情况下的主要流程：
（1）MS发起起呼消息向BS请求服务。

（2）BS收到后向MS发确认消息。

（3）BS向MSC发配置请求消息，并开始分配相关的无线资源。

（4）MSC向BS发送指派请求消息。

（5）BS向MS发送信道指派消息请求建立无线业务信道。

（6）MS发送业务信道试探帧。

（7）BS收到试探帧后，给MS发送基站证实指令。

（8）MS向BS发送应答移动台证实消息，并且发送业务信道空帧。

（9）BS向MS发送服务连接消息，指定呼叫的服务选项配置。

MS按照指定的服务配置开始处理业务。

（10）MS向BS发送服务连接成功消息。

（11）BS向MSC发送指派完成消息。

（12）MSC向MS发送回铃音。

CDMA 1X、GPRS 增值业务对对碰2005-10-09随着短信业务的普及，人们对移动增值业务有了最基本的认识。

随后，越来越多的、更先进的移动增值业务渐渐走入人们的生活。

在3G炒作的狂潮下，我们先冷静下来了解一下向3G 过渡的移动增值业务，看看那些已经商用、广大用户已经可以享受到的业务。

目前基于中国移动的GPRS网络和中国联通CDMA 1X网络，两家都推出了丰富多彩的增值业务。

2002年5月17日，中国移动的GPRS网络在全国范围内160个城市正式商用，目前其GPRS网络覆盖全国240多个城市，推出了MMS业务“彩信”，KJA V A下载业务“百宝箱”，WAP手机上网业务“MO”，无线上网卡业务“随e行”等一系列GPRS增值业务。

中国联通去年3月底推出CDMA 1X增值业务，目前全国的CDMA网络已经全面升级到1X网络，已经上市推出多媒体邮件业务“彩e”、W AP手机上网“互动视界”、基于BREW和Unija的下载类业务“神奇宝典”、位置服务业务“定位之星”、无线上网卡业务“掌中宽带”、流媒体类业务“视讯新干线”等六大业务品牌。

两者的网络相比，中国联通的CDMA 1X有着明显的技术优势，GPRS的平均数据传输速率为20kbit/s-40kbit/s，CDMA 1X的平均数据传输速率为80kbit/s-100kbit/s。

因此，虽然CDMA 1X比GPRS晚推出将近一年，但其业务优势已经显现出来，发展前景远远优于GPRS。

截至今年5月，CDMA用户已达2256万户，其中CDMA 1X数据用户500万户，占CDMA用户总数的22.2%；中国通信学会2003年10月的调查显示，中国移动使用GPRS业务用户占其用户总数的12.2%，而在半年前的调查其比例为11%，即年增加值约为2.4%，预计到今年5月GPRS用户比例不会超过15%。

为让用户更多了解两家移动增值业务的优劣，以下逐一类比分析两家相同或相似业务，以方便用户选择适合的业务。

CDMA系统及优化中国电信CDMA20001X基础无线参数设置规范CDMA20001X是一种第三代移动通信技术，它是电信公司使用的一种CDMA系统。

CDMA20001X在中国电信网络中扮演着重要的角色，因此对其进行优化和设置是非常重要的。

CDMA20001X的优化主要包括网络参数的设置和优化、信号覆盖的优化以及数据传输的优化。

在CDMA20001X网络参数的设置方面，首先要设置好基站相关参数，如天线的高度和方位角、发射功率、邻区关系等。

其中，天线的高度和方位角的合理选择对信号的覆盖范围和效果有很大的影响，因此需要在实际情况下进行调整和优化。

另外，发射功率的合理设置有助于平衡基站与终端之间的距离和覆盖效果，也需要根据实际情况进行调整。

邻区关系的设置有助于避免邻区间的干扰，提高信号质量。

在信号覆盖的优化方面，首先要选择合适的基站位置，确保覆盖面积和信号质量。

基站布设时需要考虑到地形地貌、建筑物遮挡等因素，以提供更好的信号覆盖。

同时，还需要根据用户的需求和流量分布情况，合理安排基站的密度和覆盖范围，避免出现信号覆盖不足或过剩的问题。

另外，还需要通过测量和分析信号质量指标，及时调整基站参数和设置，提高信号质量和覆盖范围。

在数据传输的优化方面，可以采取一些优化措施，如增加基站带宽、优化调度算法、增加小区容量等。

增加基站带宽有助于提高数据传输速率和容量。

优化调度算法可以提高网络资源的利用率和用户的体验。

增加小区容量可以增加系统的承载量，提高网络的容量和效果。

总而言之，CDMA20001X的优化主要包括网络参数的设置和优化、信号覆盖的优化以及数据传输的优化。

通过科学合理地设置基站参数、优化信号覆盖和数据传输，可以提高系统性能和用户体验，提高网络的容量和效果。

2000 1x CAI MessageanalysisLecturer: Hong Jeong HoRevision HistoryVersion 1.0 2002.4 Draft version – SK Telecom Samsung System.Version 2.0 2002.5 Add Japan KDDI Motorola system dataVersion 2.1 2002.9 Re-configuration for teaching material.Contents1.CALL ORIGINATION (VOICE, DATA) (3)1.1S YNC C HANNEL M ESSAGE (3)1.2G ENERAL P AGE M ESSAGE (7)1.3N EIGHBOR L IST M ESSAGE (11)1.4CDMA C HANNEL L IST M ESSAGE (13)1.5E XTENDED S YSTEM P ARAMETERS M ESSAGE (13)1.6G ENERAL N EIGHBOR L IST M ESSAGE (19)1.7S YSTEM P ARAMETERS M ESSAGE (21)1.8A CCESS P ARAMETERS M ESSAGE (25)1.9R EGISTRA TION M ESSAGE (29)1.10O RDER M ESSAGE (32)1.11O RIGINA TION M ESSAGE (38)1.12E XTENDED C HANNEL A SSIGNMENT M ESSAGE (43)1.13S ERVICE R EQUEST M ESSAGE (46)1.14S ERVICE C ONNECT M ESSAGE (49)1.15S ERVICE C ONNECT C OMPLETION M ESSAGE (51)1.16P OWER C ONTROL M ESSAGE (51)1.17P OWER C ONTROL P ARAMETERS M ESSAGE (53)1.18P OWER M EASUREMENT R EPORT M ESSAGE (54)1.19E XTENDED S UPPLEMENTAL C HANNEL M ESSAGE (54)1.20RLP S TA TISTICS (58)1.21F AST F ORWARD P OWER C ONTROL I NFORMA TION (64)1.22F ORW ARD F RAME I NFORMA TION (65)1.23R EVERSE F RAME I NFORMA TION (68)1.24R EVERSE P OWER C ONTROL I NFORMA TION (71)1.25P ILOT S TRENGTH M EASUREMENT M ESSAGE (73)1.26U NIVERSAL H ANDOFF D IRECTION M ESSAGE (74)1.27H ANDOFF C OMPLETION M ESSAGE (77)1.28E XTENDED N EIGHBOR L IST U PDATE M ESSAGE (77)1.29I N-TRAFFIC MESSAGE (80)1.30R ELEASE O RDER M ESSAGE (81)1.31SCRM(S UPPLEMENTAL CHANNEL REQUEST MESSAGE) (82)2.CALL TERMINATION (VOICE, DATA) (83)2.1A LERT WITH I NFORMA TION M ESSAGE (83)2.2C ONNECT O RDER M ESSAGE (85)3. PAGING AND STATUS REPORT (VOICE, DATA) (85)3.1Q UICK PAGING (85)3.2A CCESS CHANNEL (P AGING RESPONSE) (86)3.3S EARCHER AND F INGER INFORMA TION (87)3.4M ARKOV STA TISTIC (88)3.5A CCESS P ROBE INFO (88)3.6S ERVICE CONFIGURATION (89)4.SERVICE REDIRECTION MESSAGE (SRM) (90)5.ENHANCED HARD H/O (92)5.1C ANDIDATE F REQUENCY S EARCH R EQUEST M ESSAGE (92)5.2C ANDIDATE F REQUENCY S EARCH R ESPONSE M ESSAGE (94)5.3C ANDIDATE F REQUENCY S EARCH R EPORT M ESSAGE (95)5.4C ANDIDATE F REQUENCY S EARCH C ONTROL (96)1.Call Origination (Voice, Data)1.1 Sync Channel Message2001 Feb 5 07:46:52.493 SYNC CHANNEL -- Sync Channel Msg (vol5. 3.7.2.3.2.25)protocol_rev = 6 (IS2000)chan_type = 0 (Sync)chansc_msggenmsg_type = 1 (Sync) ←①syncp_rev = 6 ← 1:IS95, 2:IS95A, 3:TSB74, 4,5:IS95B, 6:IS95C, protocol revision level.min_p_rev = 1 ← Minimum protocol revision that mobile can access system. It could use to prohibitthe mobile that can‘t support service from system.sid = 2236 (0x8bc) ←②nid = 113 (0x71) ←②pilot_pn = 188 (0xbc)lc_state[HI] = 507lc_state[LO] = 3582174253 ←Present long code statesys_time[HI] = 1sys_time[LO] = 4022462865 ←Difference present time between standard time (Jan 6, 00:00:00, 1980)lp_sec = 13 ←leap second count after system ―on‖ltm_off = 18 ← Local time offset (30minute unit) 18*30minute = 9 Hour★daylt = 1 ←daylight savings time (Allow ‗1‘, prohibit ‘0‘)★prat = 0 ←Paging channel data bps 0 : 9600bps , 1 : 4800bps★cdma_freq = 29 (0x1d) ← CDMA Channel Number including Primary Paging Channelext_cdma_freq = 29 (0x1d) ← Quick paging參考事項①msg_type (See vol4. LAC)Table 3.1.2.3.1.1.2-1. MSG_TYPE Values on f-csch②★SIN, NIDObiective : To help roamingRoaming condition : When SINs,NIDs mobile registered don‘t match NID, SID received.Classification : Home only, NID roamer, SID roamer(Simply ; SID = service provider idenfication number, SKT 011, STI 017, KDDI 090)NID = MSC idenfication number※If NID=65535, Mobile don‘t execute NID roaming. (To protect frequent roaming)1.2 General Page Message2001 Feb 5 07:46:54.201 PAGING CHANNEL -- General Page Msg (vol5. 3.7.2.3.2.17)protocol_rev = 6 (IS2000)chan_type = 1 (Paging)chanpc_msggenprot_disc = 0msg_id = 17gen_pageconfig_msg_seq = 6 ←①acc_msg_seq = 1 ←②class_0_done = 1 ← If GPM have information for class0 IMSI mobile, value is ―1‖.class_1_done = 1 ← If GPM have information for class1 IMSI mobile, value is ―1‖.tmsi_done = 1ordered_tmsis = 0broadcast_done = 1add_length = 0num_pages = 1 (0x1) ← Available paging CH numbergen_page[0]page_class = 0 ← Mobile do registration by class0 IMSI.page_subclass = 3 ←③Including IMSI11_12,MCC.IMSI_S, (See vol4 3.1.2.2.1.1.1.2-1)recformat3msg_seq = 0mcc = 349 (0x15d) ← Mobile Country Code (3 digits fixed) SK Telecom value 450(349+111)imsi_11_12 = 99 ← 99+11→‘00 ‗Mobile Network Code Now, SKT:‘00‘, STI: ‗22‘imsi_s[HI] = 3 ←④imsi_s[LO] = 2219332107special_service = 1 ← Ask service_option.★service_option = 3 (0x3) ←⑤Ask EVRC voice service.Consideration①Whenever system changes the message, the value should increase by the rest of ―CONFIG_SEQ/64‖.②Whenever BTS changes Access_para, BTS shall increases ACC_CONFIG_SEQ by the rest of ―ACC_CONFIG_SEQ/64‖.③If PAGE_SUBCLASS = 0, BTS don‘t send MCC and IMSI_11_12 on General Page Msg. In this case,MCC and IMSI_11_12 use the value in Extended system parameter msg. (When BSC = Wild ON)If value = ‗3‘, MCC and IMSI_11_12 use the value which Mobile have. (When BSC = Wild OFF)④IMSI Structure- MCC : Mobile Country Code (3 digits fixed)- MNC : Mobile Network Code- MSIN : Mobile Station Identification Number- NMSI : National Mobile Station Identity●IMSI type- IMSI_M : IMSI that is low 10 digit of MSIN(Mobile Station Identification Number) including MIN - IMSI_T : IMSI that have not MIN information- IMSI_O : IMSI that ME use practically in CDMA mode.- IMSI_S : IMSI that is low 10 digits of IMSI (in case of MIN based IMSI, low 10 digits is MIN .It would be said IMSI_M_S.)●Class- Class 0 IMSI : NMSI is just 12 digits.- Class 1 IMSI : NMSI is fewer than 12 digits.⑤service_option table descriptionExample) KDDI systemExtended System Parameters [ 14:22:56.841 ] Paging Channel[ 13:57:11.941 ] Paging Channel PROTOCOL_REV : 6PROTOCOL_REV : 0 General PageExtended System ParametersMSG_TYPE: 17MSG_TYPE: 13 CONFIG_MSG_SEQ: 6PILOT_PN: 426 ACC_MSG_SEQ: 6CONFIG_MSG_SEQ: 6 CLASS_0_DONE: 1DELETE_FOR_TMSI: 0 CLASS_1_DONE: 1USE_TMSI: 0 TMSI_DONE: 0PREF_MSID_TYPE: 3 ORDERED_TMSIS: 0MCC: 1023 BROADCAST_DONE: 1IMSI_11_12: 127 -> 38 ADD_LENGTH: 0TMSI_ZONE_LEN: 1 ADD_PFIELD:TMSI_ZONE: 0 PAGE_CLASS: 0BCAST_INDEX: 0 PAGE_SUBCLASS: 0 (See Consideration ②)MSG_SEQ: 022 00 07 10 C0 26 D1 4C 1A 43 82 00 16 0D D5 0C IMSI_S[HI]: 07F FF F1 00 00 60 34 86 10 00 02 AE 80 00 11 F5 IMSI_S[LO]: 14989986468C 72 -> MIN : 019-0466-9997Special_Service: 1Service_Option: 33(0x0021)1C 00 07 10 40 06 A1 28 2D 43 82 00 10 11 18 6C80 00 2C AC 73 BB 40 08 4 0 0A 27 2A★ Telephone Number calculation00 2C AC 73 BB 40 08 4 (= 0001011001 010******* 1001 1101110110 )Number : 019-0466-9997IMSI_T is fewer than 10 digits. Thus, 019-0466-9997 become 190 – 466 – 9 –997.1st : 1*100 + 9*10 + 10 *1 –111 = 89 = 00 0101 1001 2nd : 4*100 + 6*10 + 6 –111 = 355 = 01 0110 0011 3rd : 9 = 1010 (BCD code)4th : 997 = 9*100 + 9*10 + 7 –111 = 886 = 11 0111 0110imsi_s[HI](2bits) imsi_s[LO] (32 bit)1.3 Neighbor List Message2001 Feb 5 07:46:53.022 PAGING CHANNEL -- Neighbor List Msg protocol_rev = 6 (IS2000) (V ol5. 2.6.2.2.3, 3.7.2.3.2.3) chan_type = 1 (Paging) chan pc_msg genprot_disc = 0 msg_id = 3 nghbrpilot_pn = 188 (0xbc) <- Decimal 188 (HEXA bc), config_msg_seq = 6★ pilot_inc = 2 <- Mobile only checks Remain Set by a multiple of pilot_inc. (Range: 1~15 integer) num_nghbrs = 19 (0x13) <- PN 188 Neighbor List 19EAIMSI_S Digits 1010104nghbr[0] <- First Neighbor on neighbor listsnghbr_config = 0 (Config Same) <- ①If value=0, mobile receives Paging in same CDMA channel forneighbor. (range 0~3). See. Table 3.7.2.3.2.3-1nghbr_pn = 356 (0x164)nghbr[1]nghbr_config = 0 (Config Same)nghbr_pn = 454 (0x1c6)nghbr[2]nghbr_config = 0 (Config Same)nghbr_pn = 274 (0x112)nghbr[3]nghbr_config = 0 (Config Same)nghbr_pn = 20 (0x14)nghbr[4]nghbr_config = 0 (Config Same)nghbr_pn = 466 (0x1d2)nghbr[5]nghbr_config = 0 (Config Same)nghbr_pn = 352 (0x160)nghbr[6]nghbr_config = 0 (Config Same)nghbr_pn = 232 (0xe8)nghbr[7]nghbr_config = 0 (Config Same)nghbr_pn = 442 (0x1ba)nghbr[8]nghbr_config = 0 (Config Same)nghbr_pn = 286 (0x11e)nghbr[9]nghbr_config = 0 (Config Same)nghbr_pn = 106 (0x6a)nghbr[10]nghbr_config = 0 (Config Same)nghbr_pn = 58 (0x3a)nghbr[11]nghbr_config = 0 (Config Same)nghbr_pn = 200 (0xc8)nghbr[12]nghbr_config = 0 (Config Same)nghbr_pn = 492 (0x1ec)nghbr[13]nghbr_config = 0 (Config Same)nghbr_pn = 118 (0x76)nghbr[14]nghbr_config = 0 (Config Same)nghbr_pn = 16 (0x10)nghbr[15]nghbr_config = 0 (Config Same)nghbr_pn = 400 (0x190)nghbr[16]nghbr_config = 0 (Config Same)nghbr_pn = 192 (0xc0)nghbr[17]nghbr_config = 0 (Config Same)nghbr_pn = 250 (0xfa)nghbr[18]nghbr_config = 0 (Config Same)nghbr_pn = 386 (0x182)Consideration①nghber_config = 000 : Same paging channel number, Same CDMA Ch (FA)nghber_config = 001 : Primary paging paging channel number, Same CDMA Ch (FA)nghber_config = 010 : Primary paging channel number, First CDMA Ch on serving FAnghber_config = 011 : Transit initial state1.4 CDMA Channel List Message2001 Feb 5 07:46:53.082 PAGING CHANNEL -- CDMA Channel List Msgprotocol_rev = 6 (IS2000)(See V ol5. 2.6.2.2.4 and 3.7.2.3.2.4)chan_type = 1 (Paging)chanpc_msggenprot_disc = 0msg_id = 4chnlistpilot_pn = 188 (0xbc)config_msg_seq = 6 <- Ignore it if Chan_Lst_Msg_Seq value in mobile equal to this value.(See V ol5. 3.6.2.2)num_freq = 1 (0x1) <- Now, serving FA total numbers (Channel List number)★cdma_freq[0] = 29 (0x1d) <- 29 = channel number (Center frequency = (0.03*29)+870 Mhz) 1.5 Extended System Parameters Message2001 Feb 5 07:46:53.181 PAGING CHANNEL -- Extended System Parameters Msg protocol_rev = 6 (IS2000) (See V ol5. 2.6.2.2.5, 3.7.2.3.2.13)chan_type = 1 (Paging)chanpc_msggenprot_disc = 0msg_id = 13ext_sysparmpilot_pn = 188 (0xbc)config_msg_seq = 6 <- Ignore it if Ext_Sys_par_Msg_Seq value in mobile is equal to this value.Update it if Ext_Sys_par_Msg_Seq value in mobile don‘t be equal to this value.delete_for_tmsi = 0 <- Delete foreign TMSI. If TMSI_ZONE assigns other TMSI zone, BTS makesmobile delete the own TMSI.pref_msid_type = 3 <- Preferred Access Channel Mobile Station Identifier TypeValue = 3, mobile use IMSI and ESN in access channel. (See Table 3.7.2.3.2.13-1) mcc = 349 (0x15d) <- ①Mobile Country Code, (See 2.3.1)imsi_11_12 = 99 <- 11th and 12th digits for the IMSI, (See 2.3.1)tmsi_zone_len = 0 ②<- TMSI_ZONE_LENGTH, Range 1~8 octet (Shall include TMSI_ZONE)tmsi_zone[HI] = 0 <- TMSI zone numbertmsi_zone[LO] = 0bcast_index = 0 <- Broadcast slot cycle index, If value = 0, it don‘t execute broadcast paging.Range (1 ~ 7), See. V ol5. 2.6.1.1.3.3is95b_incl = 1imsi_t_supported = 0 <- If system supports 15-digit IMSI_T addressing, set the field= 1.p_rev = 6min_p_rev = 1 <- If Mob_P_Rev that mobile can support is upper than minimum protocol revisionsupported by BTS, record parameter.★soft_slope = 0 <- See V ol5. 2.6.6.2.3, 2.6.6.2.5.2★add_intercept = 0 <- See V ol5. 2.6.6.2.3, 2.6.6.2.5.2★drop_intercept = 0 <- See V ol5. 2.6.6.2.3, 2.6.6.2.5.2packet_zone_id = 0 <- System don‘t concern packet data service zone.max_num_alt_so = 0 <- Maximum number of alternative service optionsreselect_included = 0 <- In case value =0, BTS don‘t include system reselection parameter.pilot_report = 0 <- If value=0, mobile reports additional pilot exceeding T_ADD by Origination Messageand Page Response Message only. If value = 1, mobile uses all Access Channelmessages to report pilot(s) exceeding T_ADD.nghbr_set_entry_info = 0 <- Neighbor Set access entry handoff information included indicator.Set ‗1‘, if message has ―TS Neighbor Set access entry handoff‖.Set ‗0‘. If message has not.nghbr_set_access_info = 0 <- Neighbor Set access handoff included indicator, Set‗1‘,if BTS has informationabout ―Neighbor Set access handoff‖or ―access probe handoff‖. Set‗0‘, BTS don‘t have.is2000_incl = 1broadcast_gps_asst = 0 <- Value = 1, if system support Broadcast GPS Assist capability.★qpch_supported = 0 <- Value=0, if system don‘t support Quick Paging Channel.sdb_supported = 1 <- Value=1, if Mobile allow to send Short Data Burst.rlgain_traffic_pilot = 0 <- In case of RC > 2, if Reverse Traffic Channel adjusts Reverse Pilot Channel gain, set the value = 1. (See V ol2. 2.1.2.3.3)rev_pwr_cntl_delay_incl = 0 <- If this message include Rev_Pwr_Cntl_Delay field, set value=1.is2000_relA_incl = 0enc_supported_incl = 1enc_supported = 0 <- Set ‗1‘, if it includes field related on Encryption.is2000_relA_last2_incl = 1use_sync_id = 0cs_supported = 0Consideration①NMSI MCC Mobile Country CodeMNC Mobile Netw ork CodeMSIN Mobile Station Identifier NumberNMSI National Mobile Station IdentityIMSI International Mobil Station IdentityFigure 2.3.1-1. IMSI Structure②TMSI (Temporary Mobile Station Identity)This code doesn‘t have any relationship with IMSI, ESN. BTS assigns TMSI for termination call.Full TMSI = INSI_CODE (2,3, or 4 octet) + TMSI_ZONE (1~8 octet).★Extended system parameter in KDDI Motorola system[ 14:22:51.101 ] Paging ChannelPROTOCOL_REV : 6Extended System ParametersMSG_TYPE: 13PILOT_PN: 426CONFIG_MSG_SEQ: 6DELETE_FOR_TMSI: 0USE_TMSI: 0PREF_MSID_TYPE: 3MCC: 1023IMSI_11_12: 127 -> 38TMSI_ZONE_LEN: 1TMSI_ZONE: 0BCAST_INDEX: 0IMSI_T_SUPPORTED: 0 P_REV: 6 MIN_P_REV: 3 SOFT_SLOPE: 18 ADD_INTERCEPT: 6 DROP_INTERCEPT: 4 PACKET_ZONE_ID: 0 MAX_NUM_ALT_SO: 0 RESELECTED_INCLUDED: 0 PILOT_REPORT: 0NGHBR_SET_ENTRY_INFO: 0 NGHBR_SET_ACCESS_INFO: 0 BROADCAST_GPS_ASST: 0QPCH_SUPPORTED: 1 (1 = Quick channel ―on ‖)NUM_QPCH: 1 (If QPCH_SUPPORTED = 1, UNM_QPCH shall not be ―00‖) QPCH_RA TE: 0 (0 = 4800 bps, 1=9600 bps)★QPCH_POWER_LEVEL_PAGE: 5 (If QPCH_SUPPORTED = 1, message shall contain this message) ---ⓐ QPCH_CCI_SUPPORTED: 1 (If QPCH_SUPPORTED = 1, message shall contain this message. Set ‗1‘,if system support configuration change) QPCH_PWR_LVL_CFG: 5 ---ⓐSDB_SUPPORTED: 0 (Set ‗1‘, if system supports ―short data burst ‖) MAC_CF_SUPPORTED: 0RLGAIN_TRAFFIC_PILOT: 0.00 Reverse Pilot power control RC2 above. (0.123dB unit) See 2.1.2.3.3. REV_PWR_CNTL_DELAY_INCL: 0ⓐ Table 3.7.2.3.2.13-3 Quick Paging Channel Transmit Power LevelTable 2.1.2.3.3.2-1 Reverse link Nominal Attribute Gain Table (Part 1 of 2)Table 2.1.2.3.3.2-1 Reverse link Nominal Attribute Gain Table (Part 1 of 2)1.6 General Neighbor List Message2001 Feb 5 07:46:53.403 PAGING CHANNEL -- General Neighbor List Msg protocol_rev = 6 (IS2000)chan_type = 1 (Paging)chanpc_msggenprot_disc = 0msg_id = 22gen_nghbrpilot_pn = 188 (0xbc)config_msg_seq = 6pilot_inc = 2nghbr_srch_mode = 0nghbr_config_pn_incl = 0freq_fields_incl = 0use_timing = 0num_nghbr = 19nghbr[0]nghbr[1]nghbr[2]nghbr[3]nghbr[4]nghbr[5]nghbr[6]nghbr[7]nghbr[8]nghbr[9]nghbr[10]nghbr[11]nghbr[12]nghbr[13]nghbr[14]nghbr[15]nghbr[16]nghbr[17]nghbr[18]num_analog_nghbr = 0 is2000_incl = 1srch_offset_incl = 0 add_nghbr[0]add_pilot_rec_incl = 0 add_nghbr[1]add_pilot_rec_incl = 0 add_nghbr[2]add_pilot_rec_incl = 0 add_nghbr[3]add_pilot_rec_incl = 0 add_nghbr[4]add_pilot_rec_incl = 0 add_nghbr[5]add_pilot_rec_incl = 0 add_nghbr[6]add_pilot_rec_incl = 0 add_nghbr[7]add_pilot_rec_incl = 0 add_nghbr[8]add_pilot_rec_incl = 0 add_nghbr[9]add_pilot_rec_incl = 0 add_nghbr[10]add_pilot_rec_incl = 0 add_nghbr[11]add_pilot_rec_incl = 0 add_nghbr[12]add_pilot_rec_incl = 0 add_nghbr[13]add_pilot_rec_incl = 0 add_nghbr[14]add_pilot_rec_incl = 0add_nghbr[15]add_pilot_rec_incl = 0add_nghbr[16]add_pilot_rec_incl = 0add_nghbr[17]add_pilot_rec_incl = 0add_nghbr[18]add_pilot_rec_incl = 01.7 System Parameters Message2001 Feb 5 07:46:53.981 PAGING CHANNEL -- System Parameters Msg(See V ol5. 2.6.2.2.1 and 3.7.2.3.2.1)<- If ―PAGE_CHAN, REG_PRD, BASE_LAT, BASE_LONG, or PWR_REP_THRESH‖ are out range designated (See. 3.7.2.3.2.1), Mobile shall ignore ―system p arameters Message‖ that include their.protocol_rev = 6 (IS2000)chan_type = 1 (Paging)chanpc_msggenprot_disc = 0msg_id = 1sysparmpilot_pn = 188 (0xbc) (12032 PN chips)config_msg_se q = 6 <- When mobile receives ―System Parameters‖thru paging channel, mobile shallcompare ―configuration message sequence number‖, ―CONFIG_MSG_SEQ r,SYS_PAR_MSG_SEQ s‖ with stored value.If values compared are same, mobile may ignore the message. If values comparedaren‘t same, mobile shall process the remain field. (Detail processes arethere ―2.6.2.2.1.1, 2.6.2.2.1.2, 2.6.2.2.1.3, 2.6.2.2.1.4, 2.6.2.2.1.5, and2.6.2.2.1.6)★sid = 2236 (0x8bc) <- System identification, (See V ol5. 2.6.5.2)★nid = 113 (0x71) <- Network identification. It is supplied by ―system sub-identifier‖.(See V ol5. 2.6.5.20)★reg_zone = 1 (0x1) <- Registration zone number, (See V ol5. 2.6.5.1.5)★total_zones = 2 (unknown) <- zone number that mobile have for zone-based registration. . Sets ‗0‘, ifzone-based registration is disable. If we set value high, advantage isthat mobile can save battery consumption, but disadvantage is thatprobability to receiving 1st paging get low in zone boundary. (See V ol5.2.6.5.1.5)★zone_timer = 1 (2 Minutes) <- zone timer registration length, V ol5. Table 3.7.2.3.2.1-1mult_sids = 1 <- Set ‗1‘, if mobile stores SID_NID_List that have different SID. Set ‗0‘,if not.mult_nids = 1 <- Set ‗1‘, if mobile stores SID_NID_List that have different NID, Set ―0‘,if not.base_id = 2 (0x2)base_class = 0 (Public Macrocellular System) <- ①BTS type,(0 means public macrocellular system)page_chan = 1 <- paging channel count.★max_slot_cycle_index = 2 <- See. V ol5. 2.6.2.1.1home_reg = 1 <- See. Page 25for_sid_reg = 1 <- See. Page 25for_nid_reg = 1 <- See. Page 25power_up_reg = 1 <- When mobile power ‗on‘, or try roaming from analog system, do registration.power_down_reg = 1 <- When mobile power ‗off‘parameter_reg = 1 ③reg_prd = 64 (5242.88 Seconds, REG_COUNT_MAX = [2 reg_prd/4]*0.08). In case value=0,reg_prd is off.base_lat = 539805 ②base_long = 1829097 ②reg_dist = 0 (0x0) ②(Distance Based Registration DISABLED)★srch_win_a = 9 (80 PN Chips)★srch_win_n = 10 (100 PN Chips)★srch_win_r = 10 (100 PN Chips)★nghbr_max_age = 1★pwr_rep_thresh = 2 <-(Send PMRM, if mobile receive 2 error frames)★pwr_rep_frames = 7 <-(56 Frames=2(pwr_ref_frames/2)*5)★pwr_thresh_enable = 1 <-(1: threshold basis report on)★pwr_period_enable = 0 <-(0: period report off)★pwr_rep_delay = 5 <-(After sending PMRM, new period starts 21th frame (after delaying 20 frames) rescan = 0★t_add = 28★t_drop = 32★t_comp = 5★t_tdrop = 3ext_sys_parameter = 1 <- Set number #1, if Extended system parameters message exists.ext_nghbr_list = 0 <- Set #1, if extended neighbor list message is sent by paging channel.Set #0, if BTS uses Band Class 0.gen_nghbr_list = 1 <- Set #1, if General Neighbor List Message is sent by paging channel.global_redirect = 0 <- Set #1, if Global Service Redirection Message is sent by paging channel.is2000_incl = 1pri_nghbr_list = 0 <- Set #1, if Private Neighbor List Message is sent by paging channel.user_zone_id = 0 <- Set #1, if User Zone Identification Message is sent by paging channel.ext_global_redirect = 0 <- Set #1, if Extended Global Service Redirection is sent by pagingchannel.ext_chan_list = 0 <- Set #1, if Extended CDMA Channel List Message is sent by Paging Channel.Consideration①Table 3.7.2.3.2.1-2. Base Station Classes② ⎥⎥⎦⎤⎢⎢⎣⎡∆+∆=16)()(tan 22long lat ce Dis∆ lat = BASE_LAT (present location) – BASE_LAT_REG (previous registration location)∆ long = (BASE_LAT (present location) – BASE_LAT_REG (previous registration location)) ×cos (π/180 × BASE_LAT_REG/14400)③ When these parameter are changed;SLOT_SYCLE_INDEX, SCM, MOB_TERM_HOME (MOB_TERM_FOR_SID, MOB_TERM_FOR_NID). And, when NID, SID value received doesn‘t locate on SID_NID_LIST mobile have.(As usual, when SLOT_CYCLE_INDEX, SID_NID_LIST change, registration procedure is done.)★ Registration Zone Base registration Conditions1.Mobile has 7-zones_maximum. (Total_zone)2.Mobile stores ―reg_zone, SID, NID of each zone ‖.Operation1.Mobile has been comparing Zone_list information registered and system_para message received.2.If mobile receive new zone_list, mobile store it and start registration.If mobile receive stored zone_list, mobile ignore it.3.Stored zone_list has timer, thus All zone_lists will be deleted after designated time.Example) Total zone = 1 case:Mobile have only one zone_list. Whenever mobile move zone A to zone B, zone B to zone A, The mobile starts registration. Thus mobile become a ping-pong state. Disadvantage: reverse noise and system overloadAdvantage: Sure registration.Example) Total zone = 2 case:First, when mobile move zone A to zone B, do registration.Second, when mobile return zone A, don‘t registration until time expired.Third, When time expire, mobile start registration at zone A.Disadvantage: Increase 1st paging fail. (50% at boundary)Advantage: Reduce system overload. (MSC, VLR), reverse noise.Table 3.7.2.3.2.1-1 Value of Zone TimerParameter registrationObjective: At MSC boundary, It help registration, when mobile receive new SID, NID comparing Zone_list stored. MSC/VLR stores location information. HLR updates it and deleteprevious MSC/VLR information.Registration basic setting1.8 Access Parameters Message2001 Feb 5 07:46:54.141 PAGING CHANNEL -- Access Parameters Msgprotocol_rev = 6 (IS2000)(See V ol5. 2.6.2.2.2 and 3.7.2.3.2.2) chan_type = 1 (Paging)chanpc_msggenprot_disc = 0msg_id = 2accparmpilot_pn = 188 (0xbc)acc_msg_seq = 1 <- After comparing exist value with new acc_msg_seq received, update it iftwo values are not same.acc_chan = 0 <- Access channel number related on paging channel.★nom_pwr = 0 <- Nominal transmit power offset. At doing open loop power estimate, correction factor is used by mobile. (-8dB ~ +7dB)★init_pwr = 5 <- 5dB, Initial power offset for access. Correction factor used by mobile at beginning of open loop power estimation for initial Access Channel transmission.(-16dB ~ +15dB)★pwr_step = 6 <- 6dB, power interval between probes until mobile access successfully.★num_step = 5 <- During single access probe sequence, access probe number that mobile transmits.★max_cap_sz = 3 ①<- Maximum Access Channel message capsule size, 0 ~ 7★pam_sz = 3 ①<- Access Channel preamble length. Mobile sets lower value than access frame counts that each Access Channel preamble can transmit.psist_0_9 = 0psist_10 = 0 <- test mobile stationpsist_11 = 0 <- emergency mobile stationpsist_12 = 0psist_13 = 0psist_14 = 0psist_15 = 0msg_psist = 0 <- Persistence modifier for Access Channel attempts for message transmissions,(Mobile uses 2-msg_psist unit to improve transmit probability.)reg_psist = 0 <- Persistence modifier for Access Channel attempts for registrations which arenot responses to the Registration Request Order,(Mobile uses 2-reg_psist unit to go up transmit probability.)★probe_pn_ran = 0,②<-Time randomization for Access Channel probes, 0 ~ 9 (RN max = 2probe_pn_ran –1) acc_tmo = 5 ②<- After transmitting each access probe, mobile waits for BTS response during duration (TA=(2+ACC_TMO)*80ms) from end of slot.probe_bkoff = 0 ②<- When Mobile don‘t receive ―access probe ack‖, transmit access probe againwith additional back off delay (RT = 0 ~ probe_bkoff+1 slot).bkoff = 1 ②<- RS that all access probe sequence have 0 ~ 1+BKOFF slot. backoff delay happenspseudorandomly.★max_req_seq = 2 <- When mobile requests thru Access Channel, 2 mean maximum number of access probe sequence★max_rsp_seq = 2 <- When mobile response thru Access Channel. 2 mean maximum number of access probe sequence.auth = 0nom_pwr_ext = 1 <- Extended nominal transmit power, Set 0, if mobile operates Band Class 0.psist_emg_incl = 0 <- Emergency persistence included indicator, Set 0, parameter don‘t includePSIST_EMG.①Access channel slot = (3+max_cap_size) + (1+pam_size) frame unit1 frame preamble = 96 EA zeroCase study)If many subscribers stay near by BTS, small preamble value increases access failure probability.And, big preamble value reduces payload data, BTS shall increase search window size.②Objective : To prohibit the collision because mobile send a message randomly.probe_pn_ran : (range 0~512)*0.8138㎲---- ESN decides the value.★PowerAccess probe Tx= -Rx –73 +Nom_pwr +Init_pwr+ (Access Probe –1)*pwr_step1st Tx on Reverse TCH Tx = -Rx –73 +Nom_pwr+Init_pwr+All access probe corrections1st Power control bit receive Tx= -Rx-73+Nom_pwr+Init_pwr+All probe corrections +All close loop power controlTerminologyAccess probeAccess sequenceIP: Initial open loop powerPD: persistence delayPI: Power incrementRA: Access channel numberRN: PN randomization delayRS: Sequence backoffRT: Probe_backoffTA: Ack response timer (80*(2+ACC_TMO))Num_step: maximum access number of access sequence[ 13:57:29.209 ] Access probe info[ 13:57:11.581 ] Paging Channel (Motorola system logging data)PROTOCOL_REV : 0 PROTOCOL_REV : 0 Access ParametersSEQ_NUM: 1MSG_TYPE: 2 PROBE_NUM: 1PILOT_PN: 426 RX_AGC: 224ACC_MSG_SEQ: 6 TX_ADJ: 0ACC_CHAN: 0 RSIST: 1NOM_PWR: 3 CHANNEL: 0INIT_PWR: 29 ⓐ(-3 -> 2‘complement)RANDOM_M: 0PWR_STEP: 5 BACKOFF_RS: 0NUM_STEP: 3 BACKOFF_RT: 0MAX_CAP_SZ: 3PAM_SZ: 0PSIST(0-9): 0PSIST(10-15): 0 0 0 0 0 0MSG_PSIST: 0REG_PSIST: 0PROBE_PN_RAN: 0ACC_TMO: 1PROBE_BKOFF: 0BKOFF: 0MAX_REQ_SEQ: 2MAX_RSP_SEQ: 3AUTH: 0NOM_PWR_EXT: 0PSIST_EMG_INCL: 0ⓐReal value is –3. But, System sending data is 111101 (29). 2‘ complement of 000011 is 111101.Positive value +3 case, mobile shows 000011.1.9 Registration Message2001 Feb 5 07:47:58.830 ACCESS CHANNEL -- Registration Msg (vol5. 2.7.1.3.2.1) protocol_rev = 6 (IS2000)chan_type = 2 (Access)chanac_msggen_acmsg_type = 1 (Registration)hdrack_seq = 7。

中国联通CDMA1X无线上网业务介绍一、CDMA 1X无线上网简介随时随地自由接入互联网一直以来都是人们孜孜不倦追求的梦想。

今天随着中国联通CDMA1X网络的建成并正式投入商用，这个梦想已经成为现实。

现在，通过新一代的无线接入终端（PCIMA无线上网卡、CDMA无线话机终端、CDMA 1X手机＋数据线），加上电脑或手持PDA，在中国联通CDMA1X中高速数据传输网络的支持下，人们可以摆脱固定接入、电话线、调制解调器等的束缚，在有联通1X信号覆盖的区域都可以享受上网快速冲浪的乐趣（最高上网速率可达到153.6K）。

在上网的同时也可以直接使用电脑来打电话甚至向手机发送短信。

总部目前没有对CDMA1X无线上网业务定义品牌。

天津联通在推广CDMA1X无线上网卡时使用“自由e（翼）”的品牌进行推广，想通过该品牌给人一种摆脱了固定连接，无拘无束的无线高速上网的新理念。

二、CDMA1X无线上网的客户范围和业务特点1、客户范围及适用条件：本业务的客户范围不限，任何一位中国联通的用户如果要享受无线上网，只需具备以下条件即可：一部支持CDMA1X无线上网的终端（手机、无线网卡或CDMA无线话机终端）和有数据传输接口的计算机（笔记本电脑或普通台式机）或PDA（通常为：USB1.1、RS232-C 通用接口、PCMCIA接口）。

用户所处的区域有CDMA1X信号覆盖。

2、终端情况：市场上已经有了多款价格各异的CDMA1X无线上网卡、CDMA无线话机终端和可用于连接电脑上网的CDMA1X手机终端。

另外在手持PDA方面多款支持CDMA1X的PDA也将陆续上市。

CDMA1X无线上网终端广泛适用于DOS、Linux、Windows95、98 Win2000,NT4.0,Me,XP和PocketPC,PALM的多种操作系统，具有较强的适应性。

3、业务特点：·广域覆盖：目前，昆明地区的CDMA1X 网络已升级完毕，地州县城以上区域的CDMA1X 网络升级也将于2003年3月末完成。

中国联通CDMA1X BREW业务及技术介绍一、BREW简介BREW是一种无线数据业务平台，是为移动终端提供业务应用的支撑平台，就象电脑的操作系统，有了这个统一的支撑平台，各种应用就可以无缝运行于其上，用户不必进行任何专业编程和操作即可使用，大大方便了用户。

BREW应用实现客户端和服务器端的直接联系，进行静态和交互信息传递，支持浏览和在线业务，支持下载服务，满足用户对新闻消息、日常生活、位置信息、游戏娱乐、个人助理等多方面的要求。

BREW应用充分使用终端的处理和储存能力，具有高速、高效、高安全性的特点，具有丰富的调用接口，有很好的可扩展性，对于行业应用如银行、电子商务、保险、交通管理等能够进行有效的支持。

用户使用支持BREW应用的手机进行下载BREW应用，用户侧无需进行复杂的设置，大部分功能和设置都在系统侧完成，这样大大方便了用户。

韩国、日本和美国的移动运营商目前已经将基于BREW平台的应用投入商用服务，并且取得了很好的市场反应。

BREW应用平台支持基于Java(J2ME)平台的应用，这样原先很多基于Java的应用便可以成功移植到BREW应用平台，也就是说支持BREW的终端也就支持Java应用，而仅支持Java的手机却不能支持BREW应用。

与Java平台技术相比，基于BREW的应用将会更小，下载和运行将会更快，功能更强。

二、联通BREW业务介绍中国联通即将推出的BREW应用，统一命名为“娱乐空间”。

为了更好地在中国推广BREW业务，充分体现CDMA1X技术优势，中国联通和美国高通公司已经在北京成立了“博路”(BREW)技术合资公司，为BREW技术的普及和推广出谋划策，为BREW的应用提供强有力的支持。

目前中国联通首先推出的BREW应用主要以游戏、信息、娱乐等方面为主，初步将涉及移动商务、定位及行业应用。

用户在使用BREW应用时先进行了一次应用下载。

通常以下载次数为计费单位，下载之前需进行付费确认，一旦下载成功无论再使用多少次都不再另外收取费用。