the various incarnations of min and imsi

InternationalRoaming

1Engineering Services

[email protected] CDG IRT, September 2005

The various incarnations of MIN and IMSI

Andrew HunterQUALCOMM Engineering Services




Overview

Acronym soup MIN, MDN, IRM, MSID IMSI_M, IMSI_T, IMSI_O, IMSI_S

How does a Network tell a Mobile what to use?

How does a mobile decide how to identify itself (access)

How is mobiles identity stored in the core (VLR)

How to address page a mobile (paging & page matching)

Summary




Mobile Identification Number (MIN)

An MS in analog mode use a mobile identification number (MIN) and in CDMA mode use an IMSI (International MS Identity)

The MIN is a 10-digit (34-bit) number and consists of two parts

MIN1 corresponds to the least significant 7 digits (24-bits) of MIN.

MIN2 corresponds to the most significant 3 digits (10-bits) of MINTIA/EIA/IS-2000-6; 2.3.1

MIN 2 MIN 1

MIN Digits




Mobile Directory Number

A Mobile Directory Number (MDN) is a dialable number associated with the mobile station

through a service subscription. A Mobile Directory Number is not necessarily the same as

the mobile station identification on the air interface, i.e., MIN, IMSI_M or IMSI_T.

An MDN consists of up to 15 digits. The mobile station has memory space to store at least one

TIA/EIA/IS-2000-5; 2.3.1.4

Note: - Convention in the North American Numbering Plan (NANP) often assigned MIN and MDN equal values.

- Wireless Number Portability forced this to change.




Mobile Satation Identification (MSID)Meaning #1

When the MIN and MDN bond was broken a new term started to be used to avoid confusion

Mobile Station ID is a MIN that cannot be assumed to be the same as the MDN

The MSID is a 10-digit (34-bit) number with the same structure as a MIN

MIN 2 MIN 1

MIN Digits




Equipment Serial Number (ESN)

Each mobile station is assigned a single electronic serial number (ESN) at time of manufacture

The ESN uniquely identifies the mobile station to any wireless system.

The ESN cannot be changed The ESN is a 32-bit binary number

a manufacturer's identity code (8 or 14 bits) the equipment serial number (18 bits), For an 8 bit manufacturer code 6 bits are reserved

TIA/EIA/IS-2000-5; 2.3.2




International Roaming Mobile Identification Number (IRM)

An International Roaming Mobile Identification Number (IRM) is a special form of MIN only used by countries outside of the North American Numbering Plan

(NANP)

IRMs are administered by IFAST and to ensure that they are globally unique.

The IRM is a 10-digit (34-bit) number with the same structure as a MIN.

MIN 2 MIN 1

MIN Digits




International MS Identification (IMSI) Number

The IMSI consists of up to 15 numerical characters (0-9). Mobile Country Code (MCC is the first 3 digits of the IMSI National MS Identity (NMSI) is formed by the remaining digits.

The NMSI comprises Mobile Network Code (MNC) and MS Identification Number (MSIN).




The Class of IMSI

An IMSI can be one of two classes, 0 or 1.

Class 0 IMSI An IMSI that is 15 digits in length - i.e. the National MS Identity (NMSI) is

12 digits in length.

Class 1 IMSI An IMSI that is less than 15 digits in length is called a class 1 IMSI i.e.

the National MS Identity (NMSI) is less than 12 digits in length) If the MS has a class 1 IMSI, it also has an IMSI_ADDR_NUM IMSI_ADDR_NUM is equal to the number of digits in the NMSI minus

four. A Class 1 IMSI is rarely encountered in CDMA




IMSI and its various incarnations: IMSI_M, IMSI_T & IMSI_O

True IMSI Supported

MS has an IMSI_T

MS has an IMSI_M IMSI_O uses

No No -NoYesYes No Not specified

No -Yes IMSI_M

Yes No IMSI_TNotes

1IMSI_O cannot be formed from IMSI_T when the network does not support True IMSI and no IMSI_M is assigned.

Yes

Yes

No

IMSI_MNo

Forming the Operational IMSI (IMSI_O)

MIN Based IMSI (IMSI_M) An IMSI that contains a MIN in the right-

most 10 digits of the NMSI. Can be a class 0 or a class 1 IMSI. MIN is the forms the last 10 digits of

IMSI_M (IMSI_M_S) An unassigned IMSI_M is indicated by a

10 digit value equal to an encoding the 4 least-significant digits of the ESN with leading zeros.

Operational IMSI (IMSI_O) IMSI value the MS actually uses Is either the IMSI_M or the IMSI_T The choice of IMSI_O is based on

the MS assigned IMSI values IMSI_T_SUPPORTED field of the

Extended System Parameters Message

True IMSI (IMSI_T) An IMSI that is not associated with the

MIN. Can be a class 0 or class 1 IMSI. An unassigned IMSI_T is indicated by a

10 digit value equal to an encoding the 4 least-significant digits of the ESN with leading zeros.




The Short IMSI (IMSI_S) & its various incarnations

IMSI_S 10-digit (34-bit) number derived from the IMSI. An IMSI with ten or more digits has IMSI_S is equal to the last ten digits. A 10-digit IMSI_S consists of

IMSI_S2 the most significant 3- digit part (10 bits) IMSI_S1 the remaining 7-digit part (24 bits)

All IMSI forms have a short form

IMSI_M_S An IMSI_S derived from IMSI_M IMSI_M_S2 = MIN2 IMSI_M_S1 = MIN1

IMSI_T_S An IMSI_S derived from IMSI_T.

IMSI_O_S An IMSI_S derived from from IMSI_O.




Mobile Country Code & IMSI_11_12 (Mobile Network Code)

Mobile Country Code (MCC) Three digit ITU specified code identifying the home country. Some countries have more than one MCC Comes from the CCITT Recommendation E.212.

IMSI_11_12 IMSI_11_12 denotes the 11th and 12th digits of the IMSI. IMSI_T_11_12p is the programmed value for the IMSI_T IMSI_M_11_12p is the programmed value for the IMSI_M

Mobile Network Code A two or three digit code allocated within a MCC to a network A two digit MNC and the IMSI_11_12 are the same thing




Special or Wildcard MCC & IMSI_11_12

MCC & IMSI_11_12 is broadcast in the Extended System ParametersMessage (ESPM)

The MS stores the serving networks MCC and MNC identity

An IMSI_M based networks can use wild card values of MCC & IMSI_11_12 MCC received (MCCr) of all 1s i.e. 1111111111 or 1023 IMSI_11_12 received (IMSI_11_12r) of all 1s i.e. 1111111 or 127

Receiving the wildcard values means: MS uses IMSI_M assumes network has the same MCC and IMSI_11_12 as those of IMSI_M

TIA/EIA 95B SECTION 2.6.2.2.5 Extended System Parameters Message

Network supports

True IMSI?MCC received IMSI_11_12 received MCC stored

IMSI_11_12 stored

All 1s (1023) All 1s (127) IMSI_M_MCC IMSI_M_11_12

***

No

Yes NNN* nn** NNN*

NNN is any valid MCC 000- 999nn is any valid 00-99

nn**

Storing the Network's MCC & IMSI_11_12




Serving Network

How the network declares to the mobile what it wants

PREF_MSID_TYPE IMSI and ESN110 = NOUSE_TMSI

EXTENDED SYSTEM PARAMETERS (Abridged)ValueField0 = NOIMSI_T_SUPPORTED

Mobile Station

Base StationCDMA Air Interface

True IMSI support is declared in the IMSI_T_SUPPORTED parameter TMSI requirements declared in the USE_TMSI parameter The serving network declare how the MS should identify itself by

the PREF_MSID_TYPE parameter.




How the MS chooses which identity to useMobile Station ID (Meaning #2!)

MS identifies itself on the Access Channel by the Mobile Station Id (MSID)

MS chooses form of MSID based on the provisioned IMSIsand the Networks desire

MS conveys the chosen format in the MSID_TYPE parameter in access channel messages

MS Addressing.xls

IMSINetwork supports

True IMSI?IMSI_O is

formed from? Network Prefers MS will use

Dont Care None XX (Don't Care) 001 (ESN) ALL00 (IMSI_S & ESN) 000 (IMSI_M_S and ESN) 0 only10 (IMSI) 010 (IMSI_M)11 (IMSI and ESN) 011 (IMSI_M and ESN)10 (IMSI) 010 (IMSI_M)11 (IMSI and ESN) 011 (IMSI_T and ESN)10 (IMSI) 010 (IMSI_T)11 (IMSI and ESN) 011 (IMSI_T and ESN)

No

Yes

IMSI & Mobile Station Id parameterApplies to

Band class

MSID Type

IMSI_M

IMSI_M

IMSI_T

ALL




How MS decides how much of the IMSI needs to be sent

A MS can decide to send 15 digits MCC + MNC + IMSI_S 12 digits The MNC + IMSI_S only 13 digits The MCC + IMSI_S only 10 digits The IMSI_S only

The combination is determined by How the network and MS values of MCC compare How the network and MS values of IMSI_11_12 (IMSI_11_12s) compare. Coincident values need not be included in the MSID The combination used is declared by IMSI Class Type (IMSI_Class_0_Type)

Network MCCs = IMSI_O_MCC

Network IMSI_11_12 = IMSI_O_11_12

IMSI CLASS 0 TYPE MCC IMSI_11_12 IMSI_S

Yes Yes 00 - - IMSI_O_SYes No 01 - IMSI_O_11_12 IMSI_O_SNo Yes 10 IMSI_O_MCCs - IMSI_O_SNo No 11 IMSI_O_MCCs IMSI_O_11_12 IMSI_O_S

MCC and IMSI _11_12 ComparisonCLASS of IMSI_O

MSID used on the Access Channel

0




IMSI_MDevice

IMSI_M Serving Network

Access Today: Network broadcasting wildcard MCC/MNC


EXTENDED SYSTEM PARAMETERS (Abridged)ValueField

0 = NOIMSI_T_SUPPORTED

1111111111 = 1023MCC1111111 = 127IMSI_11_12


RECEIVEDValueItem

1111111IMSI_11_12r1111111111MCCr11PREF_MSID

3F-11-87-CEESN

S1S2

000esn48906015

00000000IMSI_T61900

IMSI_SMNC

PROGRAMMED

MCCItem

310IMSI_M

- 6198906015-MSID IMSI

8906015S1

619S2

IMSI_S

00

MNCMCCItem

310IMSI_O

00 (10 digits IMSI_S only)IMSI Class Type0 (15 digits / 10 digit MIN)IMSI_CLASS

OPERATIONAL

00IMSI_11_12s310MCCs11 (IMSI and ESN)PREF_MSID

3F-11-87-CEESN00 (IMSI_S)IMSI_CLASS_0_TYPE

--MNCMCC

6198906015IMSIIMSI_S

IMSI & ESN

REGISTRATION MESSAGE (Abridged)ValueField

MSID

011MSID TYPE

1 2

3

4 5




IMSI_MDevice

IMSI_M Serving Network

Access Today: MS & Network MCC/MNC are different




311MCC28IMSI_11_12


RECEIVEDValueItem


3F-11-87-CEESN

S1S2

000esn48906015

00000000IMSI_T61900

IMSI_SMNC

PROGRAMMED

MCCItem

310IMSI_M

00 6198906015310MSID IMSI

8906015S1

619S2

IMSI_S

00

MNCMCCItem

310IMSI_O

11 (15 digit IMSI)IMSI Class Type0 (15 digits / 10 digit MIN)IMSI_CLASS

OPERATIONAL


3F-11-87-CEESN11 (15 digit IMSI)IMSI_CLASS_0_TYPE

00310MNCMCC

8906015619IMSIIMSI_S1IMSI_S2

IMSI & ESN


MSID

011MSID TYPE

1 2

3

4 5




Roaming Device Serving Network

Access Today: MS & Network have same MCC/MNC




311MCC28IMSI_11_12


RECEIVEDValueItem


3F-11-87-CEESN

S1S2

000esn48906015

00000000IMSI_T61928

IMSI_SMNC

PROGRAMMED

MCCItem

311IMSI_M

28 6198906015311MSID IMSI

8906015S1

619S2

IMSI_S

28

MNCMCCItem

311IMSI_O

11 (15 digit IMSI)IMSI Class Type0 (15 digits / 10 digit MIN)IMSI_CLASS

OPERATIONAL


3F-11-87-CEESN00 (IMSI_S)IMSI_CLASS_0_TYPE

--MNCMCC


IMSI & ESN


MSID

011MSID TYPE

1 2

3

4 5




Serving Network

Home NetworkSignaling Network

HLR

MAP

Mobile Identity in the IMSI_M Core

3F-11-87-CEESN00310

MNCMCC8906015619

IMSIIMSI_S1IMSI_S2

IMSI & ESNREGISTRATION MESSAGE (Abridged)

MSID

011MSID TYPE

MSC/VLR (MCC,IMSI_11_12 = 311,28 )

PROFILE

VLR Record (Abridged)

3F-11-87-CEESN00310

MNCMCC6198906015IMSI

MIN

PROFILE

REGNOT RETURN RESULT (Abridged)

1

2

45

Validation & ProfileQUAL Code

MIN3F-11-87-CEESN6198906015

REGNOT MESSAGE (Abridged) 3

MCC,IMSI_11_12 = 311,28




Page Class & Page Sub-Class

To identify the type of the page record, the base station uses

PAGE_CLASS and the PAGE_SUBCLASS

Page CLASS Type of Page address00 Device registered with a class 0 IMSI. 01 Device registered with a class 1 IMSI. 10 Page using a TMSI. 11 Announcing a broadcast message

Page Class on Paging Channel

Class Same MCC as Serving SystemSame IMSI_11_12

as Serving SystemPage Class

Page Sub-Class

MCC (7 bits)

IMSI_11_12 (10 bits)

IMSI_S(34 bits)

Yes Yes 00 (not sent) (not sent) IMSI_S 0Yes No 01 (not sent) IMSI_11_12 IMSI_S 1No Yes 10 IMSI_MCC (not sent) IMSI_S 2No No 11 IMSI_MCC IMSI_11_12 IMSI_S 3

0

Record Format Number

Page Record contents on the Paging Channel

00

IMSI used in Registration (stored by Serving System)




Page Matching

For page matching the following four criteria must ALL match IMSI CLASS (of the IMSI_O and that described by the Page Class) MCC (IMSI_O_MCC and the paged IMSI_MCC_ MNC (IMSI_O_11_12 and the paged IMSI_11_12) MIN ( IMSI_O_S and the Paged IMSI_S)

Page Message will only contain data for the parts that are not coincident

Page sub-class indicates which parts are being sent

MCCr(Serving System) IMSI_O_MCC

IMSI_11_12r(Serving System) IMSI_O_11_12

00 =IMSI_O_S01 =IMSI_O_11_12 =IMSI_O_S10 =IMSI_O_MCC =IMSI_O_S11 =IMSI_O_MCC =IMSI_O_11_12 =IMSI_O_SDon't CareDon't Care

0 00Equal EqualDon't CareDon't Care

Equal Equal

Stored in Mobile Device Page Record contents on the Paging Channel

Page Class

Page Sub-Class

MCC (7 bits)

IMSI_11_12 (10 bits)

IMSI_S(34 bits)

MCC IMSI_11_12Class of

IMSI_O





Paging: Network broadcasting wildcard MCC/MNC

EXTENDED SYSTEM PARAMETERS (Abridged)

ValueField1111111111MCC1111111IMSI_11_12

Base Station

CDMA Air Interface

3F-11-87-CEESN000000esn400000IMSI_T619890601500

IMSI_SMNC

PROGRAMMED

MCCItem310IMSI_M

6198906015IMSI_S

00MNCMCCItem

310IMSI_O

0 (15 digits / 10 digit MIN)IMSI_CLASS

OPERATIONAL

00IMSI_11_12s310MCCs

00 - Class 0 IMSI11 (IMSI_S only)

--MNCMCC


Page MESSAGE (Abridged)

ValueField

Page Sub ClassPage Class

1

3

4

MSC/VLR (Assume MCC=310 &IMSI_11_12 = 00 )

MATCHVALUECRITERIA

6198906015Paged IMSI_S 96198906015IMSI_O_S

00IMSI_O_11_12 900IMSI_11_12s310IMSI_O_MCC

99310

0

PAGE MATCHING (All 4 must match)

MCCsIMSI CLASS

PROFILE


3F-11-87-CEESN--


MIN

2

5

3





Paging: MS & Network MCC/MNC are different



Base Station

CDMA Air Interface

3F-11-87-CEESN000000esn400000IMSI_T619890601500

IMSI_SMNCPROGRAMMED

MCCItem310IMSI_M

6198906015IMSI_S

00MNCMCCItem

310IMSI_O


OPERATIONAL


00 - Class 0 IMSI11 (MCC + IMSI_11_12 + IMSI_S)

00310MNCMCC


Page MESSAGE (Abridged)ValueField


1

3

4

MSC/VLR

MATCHVALUECRITERIA


00Paged IMSI_11_12 900IMSI_O_11_12310Paged MCC

99310

0


IMSI_O_MCCIMSI CLASS

PROFILE


3F-11-87-CEESN00310


MIN2

5

3





Paging: MS & Network have same MCC/MNC



Base Station

CDMA Air Interface

3F-11-87-CEESN000000esn400000IMSI_T619890601527

IMSI_SMNCPROGRAMMED

MCCItem311IMSI_M

6198906015IMSI_S

27MNCMCCItem

311IMSI_O


OPERATIONAL


00 - Class 0 IMSI11 (IMSI_S Only)

--MNCMCC




1

3

4

MSC/VLR

MATCHVALUECRITERIA


27IMSI_O_11_12 927IMSI_11_12s311IMSI_O_MCC

99311

0


MCCsIMSI CLASS

PROFILE


3F-11-87-CEESN27311

MNCMCC

6198906015IMSIMIN

2

5

3





Paging: MS & Network have same MCC and different MNC



Base Station

CDMA Air Interface

3F-11-87-CEESN000000esn400000IMSI_T619890601527

IMSI_SMNCPROGRAMMED

MCCItem311IMSI_M

6198906015IMSI_S

27MNCMCCItem

311IMSI_O


OPERATIONAL


00 - Class 0 IMSI01 (IMSI_11_12 + IMSI_S)

27-MNCMCC




1

3

4

MSC/VLR

MATCHVALUECRITERIA


27Paged IMSI_11_12 927IMSI_O_11_12311IMSI_O_MCC

99311

0


MCCsIMSI CLASS

PROFILE


3F-11-87-CEESN27311

MNCMCC

6198906015IMSIMIN

2

5

3




Summary

MIN Based IMSI MIN part can be used to identify an HLR MCC/MNC part can be non unique With properly configured MCC/MNC then MIN based IMSI can be

used as a TRUE IMSI

TRUE IMSI MSIN part can never be relied upon to identify HLR MCC and MNC parts must be used as part of the routing

Both will coexist during any transition

Vendors are considering solutions Operators may want to communicate their requirements on this

issue

the various incarnations of min and imsi

Documents