SS7 SIGNALLING OVERVIEW

By:- Nitin Kumar Dhingra

NSS Engineer
 Basic functional parts of the PSTN

PSTN

Switching in
Transmission
exchanges
(PDH, SDH)

Databases in
Subscriber signalling the network
Network- (HLR)
(analog or ISDN=DSS1)
internal
signalling
(SS7)
PDH and SDH transmission bit rates

PDH (Plesiochronous Digital Hierarchy)

Japan USA Europe

J1 1.5 Mbit/s T1 1.5 Mbit/s E1 2 Mbit/s
J2 6 T2 6 E2 8
J3 32 T3 45 E3 34
J4 98 T4 140 E4 140

SONET (North Am.) SDH

STS-1 51.84 Mbit/s
STS-3 155.52 STM-1
STS-12 622.08 STM-4
STS-48 2.488 Gbit/s STM-16
 Structure of E1 frame (2.048 Mbit/s)

012 16 31

32 TDM time slots (with 8 bits each / frame)

Time slots 1-31 carry digital signals (usually PCM speech) with
a bitrate of 64 kbit/s.

Time slot 0 is used for frame synchronization:

received bit stream ... where does a new frame begin?
... ...

Time slot 16 usually contains SS7 signalling information.

 Subscriber signalling

PSTN

Switching in
Transmission
exchanges
(PDH, SDH)

Databases in
Subscriber signalling the network
Network- (HLR)
(analog or ISDN=DSS1)
internal
signalling
(SS7)
 Analog subscriber signalling

The calling party (user A) tells the local exchange to set up (disconnect) a
1 call by generating a short (open) circuit in the terminal => off-hook (on-
hook) operation.

The dialled called party (user B) number is sent to the local exchange in
2 form of Dual Tone Multi-Frequency (DTMF) signal bursts.

Alerting (ringing) means that the local exchange sends a strong sinusoid
to the terminal of user B.
3
In-channel information in form of audio signals (dial tone, ringback tone,
busy tone) is sent from local exchange to user. User can send DTMF
4 information to network.
 Analog subscriber signalling in action

User A LE A LE B User B

Off-hook SS7 LE = local exchange

signalling
Dial tone (ISUP)
B number
Ringing
signal
Ringback
tone (or Off-hook
busy tone) (user B
answers)
Connection established
 ISDN subscriber signalling in action

User A LE A LE B User B

Off-hook SS7
DSS1 signalling
signalling
messages
Setup (ISUP)
B number
Call proc Setup

Alert Ringing
Tones Alert
generated Off-hook
Conn
in terminal (user B
Conn
answers)
Connection established
 PSTN vs. ISDN user access

PSTN 300 3400 Hz analog transmission band

Poor-performance subscriber signaling

Basic 2 x 64 kbit/s digital channels (B channels)

Rate 16 kbit/s channel for signaling (D channel)
Access => Digital Subscriber Signalling system nr. 1
ISDN (DSS1)

Primary 30 x 64 kbit/s digital channels (B channels)

Rate 64 kbit/s channel for signaling (D channel)
Access Mainly used for connecting private branch
ISDN exchanges (PBX) to the PSTN.
 End-to-end digital signalling

User interface PSTN Network User interface

Q.931 Q.931 ISUP SS7 ISUP Q.931 Q.931

DSS1 MTP 3 MTP 3 DSS1

Q.921 Q.921 MTP 2 MTP 2 Q.921 Q.921

I.430 I.430 MTP 1 MTP 1 I.430 I.430

contains the signalling messages for call control

 Introduction

Channel Associated Signaling

Still widely deployed today
Considered as old telephony

Common Channel Signaling

Separation of signaling and call paths
Signaling System 7 (SS7)
To enable a wide range of services to
be provided to the end-user
Caller ID, toll-free calling, call
screening, number portability, etc.
SS7 is the foundation for Intelligent
Network (IN) services.
 Channel-associated signalling (CAS)

CAS means in-band signalling over the same physical channels as the circuit-
switched user traffic (e.g. voice).

Signalling is possible
Exchange
Exchange Exchange Signalling is not possible
before previous circuit-
Circuit switched connection switched link is established

CAS has two serious draw-backs:

Setting up a circuit switched connection is very slow.

Signalling to/from databases is not feasible in practice (setting up a circuit

switched connection to the database and then releasing it would be extremely
inconvenient).
 Common channel signalling (CCS)

In practice, CCS = SS7.

Signalling is possible anywhere anytime

Exchange Exchange Database

The packet-switched signalling network is totally separated from the circuit-

switched connections. Consequently:
Signalling to/from databases is possible anytime.

End-to-end signalling is possible before call setup and also during the
conversation phase of a call.

There is one drawback: It is difficult to check if the circuit-switched connections are

really working (= continuity check).
 The Telephone Network [1/2]

SS7 Signaling
Service Service
ISUP Messages +
Control Data
INAP/TCAP Messages Point Point

Signal
Transfer Control Layer
Point

Intelligent Transport Layer

Peripheral

Class 4
Class 5
Tandem Switch
End Office Switch

Circuit Switched Network

 The Telephone Network [2/2]

5 Basic Components in Intelligent Networks

SSP/Service Switching Point
switching, service invocation
STP/Service Transfer Point
signal routing
SCP SDP
SCP/Service Control Point
TCAP messages
service logic execution
IP
STP STP
SDP/Service Data Point
subscriber data storage, access
SSP SSP
IP/Intelligent Peripheral ISUP messages
resources such as customized voice announcement, voice
Voice
recognition, DTMF digit collection
 Signalling example

Tokyo Exch Oulu

User A Exch User B

(calling Exch (called
user) user)
London

Database

A typical scenario:

User A calls mobile user B. The call is routed to a specific gateway exchange
(GMSC) that must contact a database (HLR) to find out under which
exchange (MSC) the mobile user is located. The call is then routed to this
exchange.
 SS7 Protocol Suite

OSI Layers

Application INAP MAP

Presentation
Session TCAP ISUP

Transport SCCP

Network MTP Level 3

Data Link MTP Level 2
Physical MTP Level 1
 MTP Levels 1 & 2 & 3
Message Transfer Part
Level 1
Handling the issues related to the signals on the physical links between one
signaling node and another
Closely to layer 1 of the OSI stack
Level 2
Dealing with the transfer of messages on a given link from one node to
another
Providing error detection/correction and sequenced delivery of the SS7
messages
signalling network supervision and maintenance functions
Level 3
Signaling message handling
Providing message routing between signaling points in the SS7 network
May pass a number of intermediate nodes (STP, Signal Transfer Point)
MTP level 3 users are ISUP and SCCP
 Signaling network management
Rerouting traffic to other SS7 signaling links in the case of link failure,
congestion or node failure
Load-sharing

Provides a number of services to the protocol layer above it

The transfer of messages
Indicating availability of resources
MTP-Transfer request, MTP-Transfer indication, MTP_Pause
indication, MTP-Resume indication, and MTP-Status indication
 ISUP
ISDN User Part
Used as the protocol for setting up and tearing down phone calls between
switches
Initial Address Message (IAM)
To initiate a call between two switches
Answer Message (ANM)
To indicate that a call has been accepted by the called party
Release Message (REL)
To initiate call disconnection
A connection-oriented protocol
Related to the establishment of connections between users
The path of messages and the path of the bearer might be different
 SCCP
Signaling Connection Control Part
Used as the transport layer for TCAP-based services
Free phone (800/888), calling card, wireless roaming
Both connection-oriented and connectionless
Mostly connectionless signaling
Global title translation (GTT) capabilities
The destination signaling point and subsystem number is determined from
the global title
 TCAP, MAP and INAP
TCAP (Transaction Capabilities Applications Part)
Supporting the exchange of non-circuit related information between
signaling points
Queries and responses sent between SSPs and SCPs are carried in TCAP
messages
Provides services to
INAP (IN Application Part)
MAP (Mobile Application Part)
 SS7 Network Architecture
Figure 7-4 depicts a typical SS7 network arrangement.
This configuration serves several purposes.
No direct signaling links
A fully meshed signaling network is not required.
The quad arrangement ensures great robustness.
 Signaling Point (SP)
Each node in an SS7 network is an SP.
The signaling address of the SP is known as a signaling point code (SPC).
Linkset
Group of signaling links directly connecting two SPCs
For capability and security reasons
Service Switching Point (SSP)
 Signal Transfer Point (STP)
To transfer messages from one SPC to another
 Service Control Point (SCP)
A network entity that contains additional logic and that can be used to offer
advanced services
The switch sends a message to the SCP asking for instructions.
The SCP, based upon data and service logic that is available, will tell the
switch which actions need to be taken.
An good example toll-free 800 number
An example
A subscriber dials a toll-free 800 number
The SSP knows that it needs to query the SCP
The SCP contains the translation information
The SCP responds to the SSP with a routable number
The SSP routes the call
Connectionless signaling
The application use the services of TCAP, which in turn uses the
services of SCCP
 Message Signal Units (MSUs)
The messages sent in the SS7 network

Backward Sequence Number

BSN Indicator Bit
Forward Sequence Number
Length Indicator
 Message Signal Units (MSUs)

The messages sent in the SS7 network

The format of an MSU
SIO Service Information Octet
Indicate the upper-level protocol (e.g., SCCP or ISUP)
A sub-service field indicating the signaling numbering plan
SIF Signaling Information Field
The actual user information
The ANSI version and the ITU-T version
The routing label
The Destination Point Code (DPC)
The Originating Point Code (OPC)
 Signaling Link Selection (SLS)
The particular signaling link to be used
 SS7 addressing
The ANSI version, 24 bits
Member, cluster, network codes
An operator has a network code
The ITU-T version, 14 bits
International Signaling Gateway
Use sub-service field
National, Nation Spare, International, International Spare
An international gateway has one national point code and one international
code
 International Signaling
 Same SPCs can be reused at different
network levels

International
SPC = 277

National SPC = 277

SPC = 277 means different signalling points (network elements)

at different network levels.

The Service Information Octet (SIO) indicates whether the DPC

and OPC are international or national signalling point codes.

F CK SIF SIO LI Control F

 ISDN User Part (ISUP)
ISUP is a signalling application protocol that is used for establishing
and releasing circuit-switched connections (calls).

Only for signalling between exchanges (ISUP can never be

used between an exchange and a stand-alone database)

Not only for ISDN (=> ISUP is generally used in the PSTN)

Structure of ISUP message:

SIO (one octet)

Routing label (four octets)
CIC (two octets) Must always be included in ISUP message
Message type (one octet) E.g., IAM message
Mandatory fixed part
Mandatory variable part E.g., contains called (user B) number in
Optional part IAM message
 The ISDN User Part (ISUP)
ISUP
The most-used SS7 application
The establishment and release of telephone calls
IAM
Called number, calling number, transmission requirement, type of
caller,
ACM
The call is through-connected to the destination
A one-way-audio path is opened for ring-back tone
Optional
If not returned, no ring-back tone at all
 CPG, Call Progress
Optional; provide information to the calling switch
ANM, Answer Message
Open the transmission path in both directions
Instigate charging for the call
REL, Release
RLC, Release Complete
CIC, circuit identification Code
Indicates the specific trunk between two switches
OPC, DPC, and CIC
 Difference between SLS and CIC

The four-bit signalling link selection (SLS) field in the routing label defines the
signalling link which is used for transfer of the signalling information.

The 16-bit circuit identification code (CIC) contained in the ISUP message
defines the TDM time slot or circuit with which the ISUP message is associated.

Signalling link
STP

Exchange Exchange

Circuit
 ISUP Call Establishment and Release

A given circuit between two

switches is identified by OPC,
DPC and CIC.
 Signalling using IAM message

STP
STP
SL 4
SL 7

SPC = 82 SPC = 22 Circuit SPC = 60

20
Circuit
14
Exchange Exchange Exchange

Outgoing message: Processing in (transit) exchange(s):

OPC = 82 CIC = 14 Received IAM message contains B-number.
DPC = 22 SLS = 4 Exchange performs number analysis (not part of
ISUP) and selects new DPC (60) and CIC (20).
 Setup of a call using ISUP

User A LE A Transit exchange LE B User B

Setup IAM
IAM
Setup
DSS1
signalling Number analysis
assumed Alert
ACM
ACM
Alert
Connect
ANM
ANM
Connect
Charging of call starts now
ISUP message format
Signalling Connection Control Part (SCCP)
SCCP is required when signalling information is carried between
exchanges and databases in the network.

An important task of SCCP is global title translation (GTT):

STP with GTT capability

Exchange STP Database

1. Exchange knows the global title (e.g. 0800 number or IMSI

number in a mobile network) but does not know the DPC of
the database related to this global title.
2. SCCP performs global title translation in the STP (0800 or
IMSI number => DPC) and the SCCP message can now be
routed to the database.
 Example: SCCP usage in mobile call
Mobile switching center (MSC) needs to contact the home location
register (HLR) of a mobile user identified by his/her International
Mobile Subscriber Identity (IMSI) number.

SCCP/GTT functionality

STP

SCCP SPC = 32 SCCP

MSC located in Espoo HLR located in Oslo

SPC = 82 SPC = 99

Outgoing message: Processing in STP:

OPC = 82 DPC = 32 Received message is given to SCCP for GTT.
SCCP: IMSI global title SCCP finds the DPC of the HLR: DPC = 99
 To sum it up with an example

Part B, Section 3.3 in Understanding

Telecommunications 2 PSTN

Typical operation of
Transmission
a local exchange
(PDH, SDH)

Databases in
Subscriber signalling the network
Network- (HLR)
(analog or ISDN=DSS1)
internal
signalling
(SS7)
 Basic local exchange (LE) architecture
Modern trend: Switching and control functions are separated into
different network elements (separation of user and control plane).

Subscriber stage
Switching system
TDM links
LIC Time ETC to other
Group
switch Tone network
switch
LIC Rx ETC
elements

Tone generator Sign. Exchange

Line terminal
interface circuit
Switch control
circuit
E.164 number analysis
SS7 Signalling
Charging equipment
User databases
O&M functions Control system
 Setup of a call (1)
Phase 1. User A lifts handset and receives dial tone.

Local exchange of user A

4. Tone Rx is connected Switching system

1. Off hook LIC Time ETC

Group
switch Tone switch
LIC Rx ETC

5. Dial tone Tone generator Sign.

is sent
(indicating
network is 2. Check user database. For instance, is
alive) user A barred for outgoing calls?
3. Reserve memory for user B number

Control system
 Setup of a call (2)
Phase 2. Exchange receives and analyzes user B number.

Local exchange of user A

Switching system

LIC Time ETC

Group
switch Tone switch
LIC Rx ETC

1. User A 2. Number (DTMF

signal) received Sign.
dials user B
number
3. Number analysis
4. IN triggering actions? Should an external
database (e.g. SCP, HLR) be contacted?

Control system
 Setup of a call (3)
Phase 3. Outgoing circuit is reserved. ISUP Initial address message
(IAM) is sent to next exchange.
Local exchange of user A

Switching system E.g.,

CIC = 24
LIC Time ETC
Group
switch Tone switch
LIC Rx ETC

1. Tone receiver IAM

is disconnected Sign. (contains
information
CIC = 24)
2. Outgoing circuit is reserved
3. Outgoing signalling message (ISUP IAM)
contains user B number

Control system
 Setup of a call (4)
Phase 4. ACM received => ringback or busy tone generated. ANM
received => charging starts.
Local exchange of user A

Switching system

LIC Time ETC

Group
switch
switch
LIC ETC
ACM,
2. Ringback Tone generator Sign. ANM
or busy tone
is locally
generated 1. ISUP ACM message indicates free or busy
user B
3. Charging starts when ISUP ANM message
4. Call
is received
continues
Control system
 Performance Requirements for SS7

Bellcore spec. GR-246-Core

MTP
A given route set should not be out of service for more than 10 minutes per
year
< 1*10-7 messages should be lost
< 1*10-10 messages should be delivered out of sequence
ISUP
Numerous timing requirements
A VoIP network that uses SS7
Must meet the stringent requirements
Signaling Transport (Sigtran) group of the IETF
 Performance Requirements for SS7

Long-distance VoIP network

A given route set should not be out of
service for more than 10 minutes per
year.
No more than 1x10-7 messages should
be lost.
No more than 1x10-10 messages should
be delivered out of sequence.
In ISUP, numerous timing
requirements must be met.
How to make sure that VoIP networks
can emulate the signaling performance
of SS7.
SIGTRAN (Signaling Transport) group
of IETF