CA2303751A1 - Method for communicating in a wireless communication system - Google Patents

Abstract

A communications system in which information is transmitted in a plurality of time slots grouped into a plurality of superframes which are, in turn, grouped into a plurality of paging frames. A remote station receives paging messages once in each paging frame.

Description

Patent Application Dockat (15735/0073 A METHOD FOR COMMUNICATING IN A WIRELESS
COMMUNICATION SYSTEM
This is a division of co-pending Canadian Patent Application No. 2,134,695.
This application contains subject matter which is related to U.S. Patent 5,353,332 entitled "Method and Apparatus for Communication Control in a Radiotelephone System" issued October 4, 1994; U.S. Patent 5,404,355 entitled "Digital Control Channel" issued April 4, 1995 and U.S. Patent 5,610,917 entitled "Layer 2 Protocol for the Random Access Channel and the Access Response Channel"
issued March 11, 1997.

Patent Application Docket #15735/0073 BACKGROUND OF THE INVENTION
gield of the Invention The present invention relates to wireless communication systems, and more particularly, to a method and apparatus for communicating information in wireless communications systems including, for example, a cellular radio system.
History of the Prior Art Cellular Telephone Service Cellular mobile telephony is one of the fastest growing segments in the worldwide telecommunications market. Between 1984 and 1992, for example, the number of mobile telephone subscribers in the United States grew from around 25,000 to over 10 million. It is estimated that the number of subscribers will rise to nearly 22 million by year end 1995 and to 90 million by the year 2000.
Cellular telephone service operates much like the fixed, wireline telephone service in homes and offices, except that radio frequencies rather than telephone wires are used to connect telephone calls to and from the mobile subscribers. Each mobile subscriber is assigned a private (10 digit) directory telephone number and is billed based on the amount of "airtime" he or she spends talking on the cellular telephone each month. Many of the service features available to landline telephone users, e.g., call waiting, call forwarding, three-way calling, etc., are also generally available to mobile subscribers.

2 Patent Application Docket #15735/0073 In the United States, cellular licenses are awarded by the Federal Communications Commission (FCC) pursuant to a licensing scheme which divides the country into geographic service markets defined according to the 1980 Census. Only two cellular licenses are awarded for each market. The two cellular systems in each market are commonly referred to as the "A" system and "B" system, respectively. Each of the two systems is allocated a different frequency block in the 800 MHz band (called the A-band and B-band, respectively). To date, the FCC has released a total of 50 Mhz for cellular services (25 MHz per system).
Mobile subscribers have the freedom to subscribe to service from either the A-system or the H-system operator (or both). The local system from which service is subscribed is called the "home" system. When travelling ("roaming") outside the home system, a mobile subscriber may be able to obtain service in a distant system if there is a roaming agreement between the operators of the home and "visited" systems.
The Cellular System In a typical cellular radio system, a geographical area, e.g., a metropolitan area, is divided into several smaller, contiguous radio coverage areas called "cells."
The cells are served by a series of fixed radio stations called "base stations." The base stations are connected to and controlled by a mobile services switching center (MSC). The MSC, in turn, connected to the landline (wireline) public switched telephone network (PSTN). The

3 Patent Application Docket #15735/0073 telephone users (mobile subscribers) in the cellular radio system are provided with portable (hand-held), transportable (hand-carried) or mobile (car-mounted) telephone units (mobile stations) which communicate voice and/or data with the MSC through a nearby base station.
The MSC switches calls between and among wireline and mobile subscribers, controls signalling to the mobile stations, compiles billing statistics, and provides for the operation, maintenance and testing of the system.
FIG. 1 illustrates the architecture of a conventional cellular radio system built according to the Advanced Mobile Phone Service (AMPS) standard. In FIG.
1, an arbitrary geographic area may be seen divided into a plurality of contiguous radio coverage areas, or cells, C1-C10. While the system of FIG. 1 is, for illustration purposes, shown to include only ten cells, the number of cells may be much larger in practice. Associated with and located in each of the cells C1-C10 is a base station designated as a corresponding one of a plurality of base stations H1-BIO. Each of the base stations B1-B10 includes a plurality of channel units, each comprising a transmitter, a receiver and a controller, as is well known in the art.
In FIG. 1, the base stations B1-H10 are located at the center of the cells Cl-C10, respectively, and are equipped with omni-directional antennas transmitting ' equally in all directions. In this case, all the channel units in each of the base stations B1-B10 are connected to one antenna. However, in other configurations of the

4 Patent Application Docket #15735/0073 cellular radio system, the base stations H1-H10 may be located near the periphery, or otherwise away from the centers of the cells C1-C10 and may illuminate the cells C1-C10 with radio signals directionally. For example, the base station may be equipped with three directional antennas, each one covering a 120 degrees sector cell as shown in FIG. 2. In this case, some channel units will be connected to one antenna covering one sector cell, other channel units will be connected to another antenna covering another sector cell, and the remaining channel units will be connected to the remaining antenna covering the remaining sector cell. In FIG. 2, therefore, the base station serves three sector cells. However, it is not always necessary for three sector cells to exist and only one sector cell needs to be used to cover, for example, a road or a highway.
Returning to FIG. 1, each of the base stations B1-BIO is connected by voice and data links to a mobile switching center (MSC) 20 which is, in turn, connected to a central office (not shown) in the public switching telephone network (PSTN), or a similar facility, e.g., an integrated system digital network (ISDN). The relevant connections and transmission modes between the mobile switching center MSC 20 and the base stations B1-H10, or between the mobile switching center MSC 20 and the PSTN
or ISDN, are well known to those of ordinary skill in the art and may include twisted wire pairs, coaxial cables, fiber optic cables or microwave radio channels operating in either analog or digital mode. Further, the voice and

5 Patent Application Docket #15735/0073 data links may either be provided by the operator or leased from a telephone company (telcv).
With continuing reference to FIG. 1, a plurality of mobile stations M1-M10 may be found within the cells Cl C10. Again, while only ten mobile stations are shown in FIG. 1, the actual number of mobile stations may be much larger in practice and will generally exceed the number of base stations. Moreover, while none of the mobile stations M1-M10 may be found in some of the cells C1-C10, the presence or absence of the mobile stations M1-M10 in any particular one of the cells C1-C10 depends on the individual desires of each of the mobile subscribers who may travel from one location in a cell to another or from one cell to an adjacent or neighboring cell.
Each of the mobile stations M1-M10 includes a transmitter, a receiver, a controller and a user interface, e.g., a telephone handset, as is well known in the art. Each of the mobile stations M1-M10 is assigned a mobile identification number (MIN) which, in the United States, is a digital representation of the telephone directory number of the mobile subscriber. The MIN
defines the subscription of the mobile subscriber on the radio path and is sent from the mobile station to the MSC
20 at call origination and from the MSC 20 to the mobile station at call tenaination. Each of the mobile stations M1-M10 is also identified by an electronic serial number (ESN) which is a factory-set, "unchangeable" number designed to protect against the unauthorized use of the mobile station. At call origination, for example, the

6 Patent Application Docket #15735/0073 mobile station will send the ESN to the MSC 20. The MSC
20 will compare the received ESN to a "blacklist" of the ESNs of mobile stations which have been reported to be stolen. If a match is found, the stolen mobile station will be denied access.
Each of the cells C1-C10 is allocated a subset of the radio frequency (RF) channels assigned to the entire cellular system by the concerned government authority, e.g., the Federal Communications Commission (FCC) in the United States. Each subset of RF channels is divided into several voice or speech channels which are used to carry voice conversations, and at least one paging/access or control channel which is used to carry supervisory data messages, between each of the base stations Bl-B10 and the mobile stations M1-M10 in its coverage area.
Each RF channel comprises a duplex channel (bidirectional radio transmission path) between the base station and the mobile station. The RF channel consists of a pair of separate frequencies, one for transmission by the base station (reception by the mobile station) and one for transmission by the mobile station (reception by the base station). Each channel unit in the base stations BI-H10 normally operates on a preselected one of the radio channels allocated to the corresponding cell, i.e., the transmitter (TX) and receiver (RX) of the channel unit are tuned to a pair of transmit and receive frequencies, respectively, which is not changed. The transceiver (TX/RX) of each mobile station M1-M10, however, may tune to any of the radio channels specified in the system.

7 Patent Application Docket #15735/0073 Depending on capacity needs, one cell may have 15 voice channels, while another may have over a 100 voice channels, and corresponding channel units. Generally speaking, however, there is only one control channel (CC) in each omnidirectional or sector cell served by a base station, i.e., a base station serving an omnidirectional cell (FIG. 1) will have one control channel unit while a base station serving three sectors cells (FIG. 2) will have three control channel units. The RF (control and voice) channels allocated to any given cell may be reallocated to a distant cell in accordance with a frequency reuse pattern as is well known in the art. To avoid radio interference, all radio channels in the same cell will operate on different freguencies and, I5 furthermore, the radio channels in any one cell will operate on a set of frequencies which is different from that used in any neighboring cell.
When in the idle state (turned on but not in use), each of the mobile stations M1-M10 tunes to and then continuously monitors the strongest control channel (generally, the control channel of the cell in which the mobile station is located at that moment) and may receive or initiate a telephone call through the corresponding one of the base stations B1-B10 which is connected to the mobile switching center MSC 20. When moving between cells while in the idle state, the mobile station will eventually "lose" radio connection on the control channel of the "old" cell and tune to the control channel of the "new" cell. The initial tuning to, and the change of,

8 Patent Application Docket #15735/0073 control channel are both accomplished automatically by scanning all the control channels in operation in the cellular system to find the "best" control channel (in the United States, there are 2i "dedicated" control channels in each AMPS system, i.e., their TX/RX
frequencies are predefined and cannot be changed, which means that the mobile station has to scan a maximum number of 21 channels). When a control channel with good reception quality is found, the mobile station remains tuned to this channel until the quality deteriorates again. In this manner, all mobile stations are always "in touch" with the system.
While in the idle (standby) state, each of the mobile stations MI-M10 continuously determines whether a page message addressed to it has been received over the control channel. When, for example, an ordinary (landline) subscriber calls one of the mobile subscribers, the call is directed from the PSTN to the MSC 20 where the dialed number is analyzed. If the dialed number is validated, the MSC 20 requests some or all of the base stations B1-H10 to page the called mobile _ station throughout their corresponding cells Ci-C10.
Each of the base stations B1-B10 which receive the request from the MSC 20 will then transmit over the control channel of the corresponding cell a page message containing the MIN of the called mobile station. Each of the idle mobile stations M1-M10 will compare the MIN in the page message received over the control channel being monitored with the MIN stored in the mobile station. The

9 Patent Application Docket #15735/0073 called mobile station with the matching MIN will automatically transmit a page response over the control channel to the base station which forwards the page response to the MSC 20.
Upon receiving the page response, the MSC 20 selects an available voice channel in the cell from which the page response was received, turns the selected voice channel transceiver on, and requests the base station in that cell to order the mobile station via the control channel to tune to the selected voice channel (the MSC
keeps a list of all of the channels in its service area and their status, i.e., free, busy, blocked, etc., at any time). A through-connection is established once the mobile station has tuned to the selected voice channel.
When, on the other hand, a mobile subscriber initiates a call, e.g., by dialing the telephone number of an ordinary subscriber and pressing the "send" button on the telephone handset in the mobile station, the MIN
and ESN of the mobile station and the dialed number are sent over the control channel to the base station and forwarded to the MSC 20 which validates the mobile station, assigns a voice channel and establishes a through-connection for the conversation as before.
If the mobile station moves between cells while in the conversation state, the MSC will perform a "handoff"
of the call from the old base station to the new base station. The MSC selects an available voice channel in the new cell and then orders the old base station to send to the mobile station on the current voice channel in the Patent Application Docket #15735/0073 old cell a handoff message which informs the mobile station to tune to the selected voice channel in the new cell. The handoff message is sent in a "blank and burst"
mode which causes a short but hardly noticeable break in the conversation. Upon receipt of the handoff message, the mobile station tunes to the new voice channel and a through-connection is established by the MSC via the new cell. The old voice channel in the old cell is marked idle in the MSC and may be used for another conversation.
In addition to call originations and page responses, an AMPS mobile station may access the cellular system for registrations. Two types of registrations are possible in AMPS: (i) periodic registration which is based on time or, more specifically, on the REGID value ("current time") and REGINCR value ("registration period") transmitted by the base station and the NXTREG value ("wake-up time") stored in the mobile station, and (ii) system area registration which is based on location or, more specifically, on the system identification (SID) transmitted in the serving cellular system. Periodic registration may be used to determine whether a mobile station is active (within radio range and switched on) or not in a cellular system. System area registration may be used to determine when a mobile station has crossed the border from one cellular system to another.
Upon receipt of a REGID message on the forward control channel (base station to mobile station), if registration is enabled in the serving cellular system, the mobile station compares the REGID value to the NXTREG

Patent Application Docket #15735/0073 value and compares the last received SID value with the value of the SID of the cellular system in which the mobile station last registered. If either the value of REGID is greater or equal to the value of NXTREG
indicating that periodic registration is due, or the value of the last received SID is different than the value of the last stored SID indicating that the mobile station has travelled from one cellular system to another since the last successful registration, the mobile station will automatically send a registration access message over the reverse control channel (mobile station to base station) and will update the NXTREG value with the sum of the last received REGID value and REGINCR
value, after receipt of a registration acknowledgement message on the forward control channel (the mobile station also updates the NXTREG value after each call origination or page response).
Radio Transmission Format From its inception, the radio transmission format in cellular systems has been analog frequency modulation (FM). In each cell, the voice (analog) signals and data (digital) signals form the input signals to a transmitter (in the base station or the mobile station) which generates a sinusoidal carrier wave having a constant frequency corresponding to one of the frequencies allocated to the cell. With FM, the frequency of the carrier wave is modulated (varied) in proportion to the instantaneous amplitude of the input signal. The modulated carrier occupies a relatively narrow region of Patent Application Docket #15735/0073 the spectrum about a nominal center frequency (the unmodulated carrier frequency). The resulting deviation of the modulated carrier wave frequency about the unmodulated (center) frequency is normally limited (by the use of bandpass filters) within a certain bandwidth, e.g., 30 F~iz in the U.S., to avoid overlapping adjacent RF channels and causing adjacent channel interference.
Each analog voice signal, therefore, occupies 30 IUiz of spectrum, and a voice conversation requires 60 biz.
In the conventional AMPS system, therefore, an analog speech signal modulates the carrier wave used for transmission over the RF channel. The AMPS system uses analog frequency modulation (FM) and is a single-channel-per-carrier (SCPC) system, i.e., one voice circuit (telephone conversation) per RF channel. The radio channel access scheme in the AIDS system is frequency division multiple access (FDMA) in which multiple users have access to the same set of RF channels, each user is assigned one of the available RF channels on demand, and different users are assigned different RF channels.
The Migration from Analog to Digital Recent developments have ushered in a new digital era for cellular communications. The main driving force behind the switch to digital has been the desire to increase spectrum efficiency to meet the ever-increasing demands on system capacity. As each cellular system is allocated a finite amount of radio spectrum, capacity may be increased by reducing the amount of bandwidth required for each voice channel or, conversely, by sharing each RF

Patent Application Docket #15735/0073 channel among several voice conversations. This is made possible with the use of digital technology.
By encoding (digitizing and compressing) speech from several voice circuits prior to modulation and transmission, a single RF voice channel may be shared by several digital speech channels instead of being occupied by only one analog speech channel (one voice conversation). In this manner, the channel capacity and, consequently, the overall system capacity, may be increased dramatically without increasing the bandwidth of the voice channel. As a corollary, the cellular radio system is able to serve a substantially greater number of mobile stations at a significantly lower cost, e.g., a smaller number of channel units (transceivers) required in the base stations. Furthermore, the digital format facilitates integration of the cellular system with the emerging digital network.
In the United States, the migration from analog to digital has been spearheaded by the Electronics Industries Association (EIA) and the Telecommunication Industry Association (TIA). The EIA/TIA have undertaken the task of formulating a common air interface standard to meet industry requirements for the next generation digital cellular systems. To date, the EIA/TIA has published two separate air interface standards which are based on different radio channel multiple access schemes.
The first EIA/TIA interim standard (IS) is based on a time division multiple access (TDMA) scheme and is known as the "Dual-Mode Mobile Station-Hase Station Patent Application Docket #15735/0073 Compatibility Standard" (IS-54B). The second standard is based on a code division multiple access scheme (CDMA) and is known as "Mobile Station-Base Station Compatibility Standard for Dual-Mode Wideband Spread Spectrum Cellular System" (PN-3118 to be published as IS-95). Copies of these standards and the various revisions thereof may be obtained from the Electronics Industry Association;
2001 Pennsylvania Avenue, N.W., Washington; D.C. 20006.
The term "dual-mode" in these two standards refers to the capability of the system to operate in either an analog or a digital mode. The analog mode of operation uses analog FM and draws on the older EIA/TIA-553 standard which is based on the AMPS standard. The digital mode of operation uses TDMA (IS-54B) or CDMA (PN-3118). The dual-mode capability facilitates the deployment of digital systems through a gradual reduction in analog capacity, i.e., the removal of RF channels from analog FM service to provide digital service. This was deemed desirable to ease the transition from analog to digital and to provide so-called "backward" compatibility with the existing analog system. Although the analog and digital modes of operation can exist alone, the goal is for them to coexist, at least in the short term, in order to allow roaming in existing systems Which have not deployed the new digital technology. In the transition phase, existing analog-only mobile stations will continue Patent Application Docket X15735/0073 to be served while the use of digital-capable mobile stations and base stations becomes more widespread.
A mobile station which complies with the defined specifications (IS-54B or PN-3118) can obtain service from an analog-only base station, a digital-only base station or an analog-digital (dual-mode) base station.
The type of system serving the mobile station will depend on the availability of digital service (TDMA or CDMA) in the geographic area of the mobile station and the preference of the mobile subscriber. At call set-up or handoff, a dual-mode mobile stations can access either an analog voice channel (AVC) or, alternatively, a digital traffic channel (DTC). An analog-only or a digital-only mobile station, however, can only be assigned an AVC or DTC, respectively.
TDMA Systems TDMA is a multiple access scheme which is based on time division multiplexing (TDM) techniques long used in the land-line telephone network to carry multiple telephone conversations simultaneously over one physical channel. In the wire-line telephone network, analog speech signals transmitted by local telephone subscribers over separate lines (subscriber loops) to the local telephone company (telco) central office are sequentially sampled and the amplitudes of the samples are quantized and then encoded into binary numbers represented by constant amplitude pulses in a process called pulse code modulation (PCM). A predetermined number of PCM channels (digital speech channels) are transmitted in a series of Patent Application Docket #15735/0073 frames, each containing a burst of information (coded samples) from each of the PCM channels. The bursts from the different PCM channels occupy different time slots (time intervals) in each frame transmitted on the physical channel, e.g., copper wire plant. Most long-distance telephone calls are transmitted through the switching hierarchy using TDM. This technique can also be applied to transmissions on the RF channels of a cellular radio system.
An RF channel operating in TDM mode is divided into a series of repeating time slots (periodic train of time intervals) each containing'a burst of information from a different data source, e.g., encoded speech from a source coder for a voice circuit. The time slots are grouped into frames of a predetermined duration. The number of time slots per frame varies depending on the number digital channels sought to be accommodated on the RF
channel given the coding rates of the digital channels, the modulation level and the bandwidth of the RF channel.
Each slot in a frame normally represents a different digital channel. The length of each TDM frame on the RF
channel, therefore, is the minimum amount of time between two repeating time slots which are used by the same digital channel (assigned to the same user). In other words, each TDM frame consists of no more than one slot for each user.
According to IS-54B, each digital TDM RF channel can carry from three to six digital speech channels (three to six telephone conversations) depending on the source rate 05/04/00 09:51 FAX 613 230 8821 MARKS & CL,ERR f~ 002 latent Applicatiosa Docket #15735/0073 of the speech codex used for each digital speech channel (the modulation level and channel bandwidth are sit in ZS--548). The speech coder for each digital traffic Channel (DTC) can opera'~e at either f~xll~x-ate o7~ hasf-rat~ (full-rate speech codera are expec~:ed to ba need ix~ the sear future until half-rate coders are developed which produce acceptable speech quality). A full-rate DTC requires twice as many time slots in a giver. time period as a half-rate DTC. In IS-54H, each TDM RF c:.~.annel can carry up to three full-rate DTCs or six half-rate DTCs.
The TDM RF channel frame stru~ature for I!3-54B is shown in F=G. 3. The TDM channel occupies one of the 30 lea channels of the existing analog system. Each °ft~atte° on the TDM RF
channel comprises six equally s:izad time slots (1-6) and the length of the fratrie is 40 ms (25 frames per seCOi7,d) . Each full-rate DTC uses two equally spaced slots of the frame shown i~a FIG. 3, i.e., slots 1 ~ 4, or slots 2 & 5, or slots 3 ~ 6. When operating at full-rate, the TDM RF thermal xktay be assigned to three users (A~C), i.a., user A is assigned t.o slots 1 & 4; user B is assigned to slots 2 & 5; and user C is assigned to slots 3 & 6 of the ~~frasne" shown. iu gIG. 3 (for fv~ll-rate. therefore, each TDM frame actually consists of three slots and not nix slots, and is 20 ms long and not 40 ms long) . Each half-rate DrC uses orie time slot of th!
frame shown in FYG. 3. At half~rate, the TDM RF channel may be asBigned to six users (A-F) with each of the users A-F
being assigned to one of the six slots of 1t~

Patent Application Docket #15735/0073 the frame shown in FIG. 3 (for half-rate, each TDM frame actually consists of six slots and coincides with the definition of "frame" in IS-54B).
Hence, unlike an analog FDMA cellular system in which the base station and the mobile station transmit and receive continuously over an RF channel, a TDMA
cellular system operates in a buffer and burst dis continuous transmission mode. Each mobile station transmits (and receives) in an assigned slot on the RF
channel. At full rate, for example, the mobile station of user A would transmit on slot 1, hold for slot 2, receive in slot 3, transmit in slot 4, hold for slot 5, and receive in slot 6, and then repeat the cycle (the transmit and receive slots are offset from each other to avoid using duplexer circuitry which would otherwise be needed to allow the transmitter and receiver at the mobile station to operate simultaneously). The mobile station, therefore, transmits (or receives) in a fraction of the time (one third for full rate and one sixth for half-rate) and can be switched off to save power the rest of the time.
CDMA Systems -CDMA is a multiple access scheme which is based on spread spectrum communication techniques long used in military communications to counteract radio jamming and to protect against interception. Unlike FDMA and TDMA
systems in which each transmission (signal) , at any given time, is confined to its own separate frequency and its own distinct channel isolated from adjacent channels, Patent Application Docket #15735/0073 ~8133 COMA systems transmit multiple signals simultaneously over the same spectrum band. The two chief spread spectrum techniques are frequency-hopping spread spectrum and direct-sequence or noise-modulated spread spectrum.
In frequency-hopping spread spectrum, a relatively wide band of frequencies (e. g., several MHz) is divided into a large number of much narrower channels. The transmitter "hops" from one channel to another, i.e., transmits a very short burst in one channel after another. The hopping sequence is pseudo-random, generated according to a key which is available to both transmitter and receiver. The total transmission, viewed over a longer period than the individual bursts, appears to occupy the entire bandwidth thus "spreading" the spectrum, although at any moment, for any one burst, it occupies only a small percentage of the channel. Many users can share the same channel with each user's transmissions following an orthogonal pseudorandom sequence of frequency hops.
The PN-3118 standard uses direct sequence or direct coding spread spectrum which is a digital version of noise modulation. In noise modulation, the original signal is added to (mixed with) a stronger noiselike signal with known characteristics. The resulting signal modulates a carrier for transmission to a receiver. At the receiver, a copy of the noiselike input to the transmitter is subtracted from the received signal to recover the original signal. In direct sequence, a fast rate pseudorandom binary sequence is used for the Patent Application Docket X15735/0073 noiselike signal. This pseudonoise (PN) sequence is added to the digital information signal (e. g., digital speech) and the resulting bit stream is transmitted. At the receiver, the PN sequence is subtracted to yield the information signal. Because the transmitted signal has a high bit rate (e. g., 100 Mbps), a "spread spectrum"
(i.e., wide band) is required (e. g., 100 MHz), as with frequency hopping spread spectrum. Unlike frequency-hopping spread spectrum, however, direct sequence spread spectrum transmissions occupy the entire channel bandwidth all of the time. Here also, many users can share the same channel with each user being assigned a code for generating the orthogonal random sequence which is mixed with the information signal. The signals are separated in each receiver by using a correlator or a matched filter which accepts only signal energy from the assigned binary sequence for despreading.
FIG. 4 shows the overall structure of the forward (base station to mobile station) CDMA channel specified in PN-3118. The forward CDMA channel occupies a 1.23 MHz segment of spectrum centered on one of the 30 I~iz channels of the existing analog system. According to PN-3118, the forward CDMA channel consists of up to 64 code channels (WO-W63) assigned to different uses, far example, a pilot channel (WO), a synchronization channel (W32), seven paging channels (W1-W7), and fifty five traffic channels (W8-W31 and W33-W63). Each of these code channels is spread by an orthogonal PN sequence at a fixed chip rate of 1.23 Mcps (a "PN chip" is one bit in Patent Application Docket #15735/0073 the PN sequence). Multiple for~rard CDMA channels may be transmitted by a base station in a frequency division multiplexed manner.
The pilot channel carries an unmodulated direct sequence spread spectrum signal which is continuously transmitted on each active forward CDMA channel of a base station. A mobile station operating within the coverage area of the base station uses this signal for synchronization (acquisition, timing and phase reference for coherent demodulation) and for signal strength comparisons between base stations to determine when to handoff. Each base station uses a time offset of the pilot PN sequence to identify the forward CDMA channels.
Different base stations are, therefore, identified by different pilot PN sequence offsets.
The sync channel is used by the mobile station to obtain system configuration and timing information (e.g., system identification, system time, pilot PN sequence offset, paging channel data rate, etc.). Each traffic channel (user) is identified by a distinct long code sequence (1.23 Mcps) which is added to the information bits prior to spreading by the PN sequence. Each paging - channel is divided into a number of 80 ms time slots. A
mobile station can operate in either "slotted" or "non slotted" mode for purposes of receiving paging and control messages on the paging channel. In the slotted mode, the mobile station monitors the paging channel only during certain assigned slots. In the non-slotted mode, Patent Application Docket #15735/0073 the mobile station monitors all slots of the paging channel.
~iybrid Systems Some systems use a combination of access methods.
The IS-548 digital cellular standard, for example, uses a combination of FDMA and TDMA. More specifically, IS
54B uses 30 Khz FDMA channels which are subdivided into 3 or 6 time slots for TDMA transmissions (3 or 6 voice calls per 30 Khz of bandwidth). Similarly, the CDMA
system can also be a hybrid of FDMA and CDMA techniques where the total system bandwidth is divided into a set of wideband channels, each of which contains a large number of CDMA signals.
personal Communications Services lPCS1 I5 Cellular telephony had its origin in the provision of car telephone service. More recently, however, there has been an increasing shift towards the use of lightweight pocket telephones in homes, offices, public meeting places, and in virtually any other place the user can obtain service. The next step in this evolution is the emerging concept of "personal communication services"
(PCS) , or what has sometimes been referred to as services at "walking speeds." The idea is that not only telephone calls but also facsimile, computer data, paging messages and even video signals can be transmitted and received by a user moving around, for example, inside a building, a factory, a warehouse, a shopping mall, a convention center, an airport, or an open area.

Patent Application Docket f 15735/0073 PCS systems operate on lower power, and use smaller cellular structures than conventional wide area (vehicular) cellular systems, to provide the high-quality, high-capacity radio coverage needed far business and other applications. By reducing the transmit power of the base station, the size of the cell (or cell radius) and, with it, the frequency reuse distance are reduced resulting in more channels per geographic area.

Additional benefits of a smaller cell include a longer talk-time (battery life time) for the user since the mobile station will use substantially Lower transmit power than in a larger cell.

The industry has grown accustomed to using the terms "macrocell," "micocell," and "picocell" to distinguish the relative size of the cells required for a particular application (indoor or outdoor). The term "macrocell"

generally refers to a cell which is comparable in size to cells in a conventional cellular telephone system (e. g., a radius of 1 Km or more). A macrocell serves rapidly moving users and covers low to medium usage areas. The terms "microcell" and "picocell," on the other hand, refer to the progressively smaller cells which are used in a PCS system, for example. A microcell serves the slowly moving users and may cover a public indoor or outdoor area, e.g., a convention center or a busy street.

A picocell may cover an office corridor or a floor of a high rise building. Microcells and picocells can also cover high-density pedestrian areas or busy thorough-Patent Application Docket #15735/0073 fares (streets or highways) in a conventional cellular system.
It is now clear that future cellular systems will likely implement a hierarchial cell structure of macrocells, microcells and picocells. From a system (MSC) perspective, the base stations in the microcells and picocells can be viewed as extensions of the base stations in adjoining or overlapping macrocells. In this case, the microcell and picocell base stations may be connected to the macrocell base station via digital transmission lines, for example. Alternatively, the microcells and picocells may be treated just like macrocells and be connected directly to the MSC.
From a radio coverage perspective, the macrocells, microcells and picocells may be distinct from each other or, alternatively, overlaid one on top of the other to handle different traffic patterns or radio environments.
For example, handoff between microcells may sometimes be difficult to perform around street corners, particularly where the users are moving so rapidly that the signal strength variations are in excess of 20 dH per second.
In this situation, it may be possible to use an "umbrella" macrocell for the rapidly moving users and to use microcells for the slowly moving users. By managing different types of users differently in this way, handoff between microcells may be avoided for the rapidly moving users which are subject to the severe street corner ef f ects .

Patent Application Docket #15735/0073 It will be readily appreciated that the capacity improvements sought for the next generation cellular systems can be achieved by more advanced macrocellular technology, e.g., digital TDMA or CDMA, or by the introduction of microcells and picocells to the specific areas where increased capacity is needed, or by a combination of both approaches. Thus, for example, analog microcells may be implemented to cover "dead spots" (areas where topography, zoning or other restrictions prevent penetration of radio signals) or "hot spots" (areas with heavy localized traffic). In this instance, coverage or capacity may be improved for the existing subscriber base of analog mobile stations.
The effectiveness of the microcellular concept in increasing capacity, however, is maximized by the use of digital technology which requires new digital-capable mobile stations.
Control Channel The continued need to serve existing analog-only mobile stations has led to the specification in IS-54B
and PN-3118 of an analog control channel (ACC) which has been inherited from the prior AMPS or the equivalent EIA/TIA-553 standard. According to EIA/TIA-553, the analog forward control channel (FOCC) on the down-link from the base station to the mobile stations carries a continuous data stream of messages (words) in the format shown in FIG. 4. Several different types (functional classes) of messages may be transmitted on the analog FOCC. These messages include a system parameter overhead Patent Application Docket #15735/0073 message (SPOM), a global action overhead message (GAOM), a registration identification message (REGID), a mobile station control message, e.g., a paging message, and a control-filler message. The SPOM, LOAM and REGID are overhead messages which are intended for use by all mobile stations in the coverage area of the base station.
Overhead messages are sent in a group called an overhead message train (OMT). The first message of each OMT must always be the SPOM which is transmitted every 0.8 ~ 0.3 seconds.
The format of the analog FOCC shown in FIG. 4 requires an idle mobile station listening to the FOCC to read all the messages transmitted in each OMT (not just paging messages) even though the information contained in these messages may not have changed from one OMT to the next OMT. This requirement tends to unnecessarily limit the mobile station battery life. One of the goals of the next generation digital cellular systems, however, is to extend the "talk time" for the user, that is, the battery life of the mobile station. To this end, U.S. Patent 5,404,355, entitled "Digital Control Channel"
issued April 4, 1995 discloses a digital FOCC which can carry the types of messages specified for the analog FOCC, but in a format which allows an idle ~ mobile station to read overhead messages when locking onto the FOCC and thereafter only when the information has changed, and to enter "sleep mode" at all other times. While in sleep mode, the mobile station turns off most internal circuitry and saves battery power.

Patent Application Docket #15735/0073 The above-referenced U.S. Patent Serial No.
5,404,355, which issued April 4, 1995, shows how a digital control channel (DCC) may be defined alongside the digital traffic channels (DTC) specified in IS-54B. Referring to FIG. 3, a half-rate DCC would occupy 1 slot, while a full-rate DCC would occupy 2 slots, out of the 6 slots in each 40 ms frame. For additional DCC capacity, additional half-rate or full-rate DCCs may be defined in place of the DTCs until there are no more available slots on the carrier (DCCs may then be defined on another carrier if needed). Each IS-54B RF channel, therefore, can carry DTCs only, DCCs only, or a mixture of both DTCs and DCCs.
Within the IS-54B framework, each RF channel can have up to 3 full-rate DTCs/DCCs, or 6 half-rate DTCs/DCCs, or any I5 combination in-between, for example, one full-rate and four half-rate DTCs/DCCs.
In general, however, the transmission rate of the DCC need not coincide with the half-rate and full-rate specified in IS-54B, and the length of the DCC slots may not be uniform and may not coincide with the length of the DTC slots. FIG. 6 shows the more general case of a forward DCC configured as a series of time slots. These DCC slots may be defined on an IS-54B RF channel and may consist, for example, of every nth slot in the TDM
stream. In this case, the length of each DCC slot may or may not be equal to 6.66 ms, which is the length of a DTC
slot according to IS-54B (there are 6 DTC slots in each 40 ms frame). Alternatively (and without limitation on other possible alternatives), these DCC slots may be Patent Application Docket #15735/0073 defined on the paging channel specified in PN-3118 but may or may not be 80 ms long, which is the length of each paging channel slot according to PN-3118.
The DCC slots shown in FIG. 6 may be organized into higher-level structures called "superframes." Each superframe consists of logical channels which carry different kinds of information. One or more DCC slots may be allocated for each logical channel in the superframe. FIG. 6 shows an exemplary superframe which includes at least three logical channels, namely, a broadcast control channel (HCCH) , a paging channel (PCH) , and an access response channel (ARCH). The BCCH, which in this example is allocated 6 DCC slots, carries overhead messages. The PCH, which i~s allocated one DCC
slot, carries paging messages. The ARCH, which is also allocated one DCC slot, carries channel assignment and other messages. The exemplary superframe of FIG. 6 may contain other logical channels, including additional paging channels. If more than one PCH is defined, different groups of mobile stations identified by different traits (e.g., last digit of MIN) may be assigned to different PCHs.
For purposes of efficient sleep mode operation and fast cell selection, the BCCH may be divided into a number of subchannels. The aforementioned U.S. Patent 5,404,355 discloses a structure which allows the mobile station to read only a minimum amount of information at power up (when locking onto a DCC) before being able to access the system (place Patent Application Docket #15735/0073 or receive a call). After power up, the idle mobile station needs to regularly monitor only its assigned PCH
(paging slot) in each superframe and can return to sleep mode during other slots.
SUMMARY OF THE INVENTION
In one aspect, the present invention provides a method for communicating information to a remote station which comprises the steps of grouping the information into a plurality of time slots; grouping the time slots into a plurality of superframes; grouping the superframes into a plurality of paging frames; assigning the remote station to one of the time slots in each of the paging frames, the assigned slot being used for paging the remote station; and sending to the remote station in the assigned slot an indication of a change in paging frame.
In another aspect, the present invention provides a method for registration of a remote station with a communications system comprising the steps of sending a registration number from the system to the remote station; comparing in the remote station the received registration number with a list of registration numbers stored in memory; sending a registration message from the remote station to the system if the registration number is found in the list; sending a list of registration numbers from the system to the remote station; and replacing the list of registration numbers stored in the Patent Application Docket #15735/0073 remote station with the list of registration numbers received from the system.
In yet another aspect, the present invention provides a method for acknowledging registration of remote stations, each of which is assigned an identity number, with a communications system comprising the steps of receiving a plurality of registration messages sent from the remote stations; and transmitting to at least two of the remote stations an acknowledgement message containing the identity numbers of at least the two remote stations.
In a further aspect, the present invention provides a method for communicating information to a remote station comprising the steps of grouping the information into a plurality of repeating time slots; grouping the time slots into a plurality of superframes; assigning the time slots in the superframes to a plurality of logical channels; and varying the repetition rate of messages transmitted in at least one of the logical channels.
In another aspect, the present invention provides a method for identifying to a remote station the services available in one of a plurality of communication systems comprising the steps of assigning an operator code to each of the systems; storing in the remote station a list of the services associated with each of the operator codes; sending from the remote station a request for an Patent Application Docket #15735/0073 operator code; and sending the operator code from one of the systems to the remote station.
In yet another aspect, the present invention provides a method for communicating information to a remote station comprising the steps of grouping the information into a plurality of time slots; grouping the time slots into a plurality of superframes; and sending in each slot in each of the superframes superframe phase information to enable the remote station to identify the start of each superframe.
In a further aspect, the present invention provides a method for supervising the transmission of messages from a communications system to a remote station comprising the steps of segmenting each message into layer two (L2) frames; sending the frames over a first channel from the system to the remote station; sending over a second channel from the system to the remote station an indication of the identity of the remote station; and sending over a third channel from the remote station to said system, if the identity indication matches an identity indication stored in the remote station, an indication of whether each of the frames has been received correctly.
In another aspect, the present invention provides a method of registration of a remote station with a communications system comprising the steps of sending Patent Application Docket #15735/0073 from the system to the station a message containing a list of communication channels in neighboring cells, an indication of whether registration is required in each of the corresponding cells and an indication of signal strength hystersis for each cell; and using the signal strength hystersis for selecting one of the channels if registration is required in the corresponding cell.
BRIEF DESCRIPTION OF THE DRAWINGS
The present invention will be better understood and its numerous objects and advantages will become apparent to those skilled in the art by reference to the following drawings in which:
FIG. 1 shows the architecture of a conventional cellular radio system;
FIG. 2 shows a three sector cell which may be used in the system shown in FIG. 1;
FIG. 3 shows the structure of the forward time division multiple access (TDMA) channel according to IS
54B, a known cellular industry standard;
FIG. 4 shows the structure of the forward code division multiple access (CDMA) channel according to PN-3118, another known cellular industry standard;
FIG. 5 shows the format of the forward analog 2' control channel (ACC) specified IS-54B and PN-3118;
FIG. 6 is a generalized view of a digital control channel (DCC) having time slots which are grouped into superframes;

Patent Application Docket #15735/0073 FIG. 7 shows the logical channels of the DCC;
FIG. 8 shows an exemplary TDMA frame structure;
FIG. 9 shows exemplary slot formats on the DCC;
FIG. 10 shows the BRI field in FIG. 9C;
FIG. 11 shows the partitioning of the data before channel endoding.
FIG. 12 shows the mapping of the CPE into the slot format;
FIG. 13 shows the R/N field in FIG. 9C;
FIG. 14 shows the CFSP field in FIG. 9C;
FIG. 15 shows the Hyperframe structure;
FIG. 16 shows the Paging frame structure;
FIG. 17 shows the SMS Frame structure;
FIG. 18 shows an example of SMS subchannel multiplexing;
FIG. I9 shows a list of DCCs breadcasted en the HCCH;
FIG. 20 shows the relationship between the uplink timeslots and the downlink SCF flags;
FIG. 21 shows an L3 acknowledged dialogue between MS
and HS;
FIGs. 22A-L show RACH Layer 2 Frames;
FIGs. 23A-C show F-BCCH Layer 2 Frames;
FIGS. 24A-C show E-BCCH Layer 2 Frames;
FIGs. 25A-C show F-BCCH Layer 2 Frames;
FIGS. 26A-N show SPACH Layer 2 Frames;
FIGS . 27A-H show the Random Access Procedures for MS
and HS;

Patent Application Docket #15735/0073 FIGS. 28A-B show MS and HS operation in SPACH ARQ
Mode;
FIG. 29 shows the Mobile Station State diagram; and FIGs. 30-37 show various aspects of authentication procedures acccording to the present invention.
FIG. 38 illustrates an exemplary cellular mobile radio telephone system.
DETAILED DESCRIPTION
Although the description hereinafter focuses on systems which comply with IS-54B, the principles of the present invention are equally applicable to a variety of wireless communication systems, e.g., cellular and satellite radio systems, irrespective of the particular mode of operation (analog, digital, dual-mode, etc. ) , the access technique (FDMA, TDMA, CDMA, hybrid FDMA/TDMA/CDMA, etc.), or the architecture (macrocells, microcells, picocells, etc.). As will be appreciated from the preceding discussion of FDMA, TDMA and CDMA
systems, the logical channel which carries speech and/or data may be implemented in different ways at the physical layer level. The physical channel may be, for example, a relatively narrow RF band (FDMA), a time slot on a radio frequency (TDMA), a unique code sequence (CDMA), or a combination of the foregoing. For purposes of the present invention, therefore, the term "channel" means any physical channel which can carry speech and/or data, and is not limited to any particular mode of operation, access technique or system architecture.
The description below, together with the description in Appendix A hereto, provide a detailed framework for Patent Application Docket (15735/0073 operation on the AVC, ACC, DTC and DCC. The description below is primarily directed to the DCC air interface and is divided into distinct sections for Layer l, Layer 2 and Layer 3 operation. Appendix A addresses the air interface requirements for the ACC, DTC and AVC through modifications to the IS-548 standard. In what follows, the term "IS-54B" shall mean the existing IS-54B
standard, or the IS-54B standard as amended by Appendix A, depending on the context.
GLOSSARY OF TERM, ACC Analog control channel AG Abbreviated guard time ARCH Access response channel ARQ Automatic retransmission request AVC Analog voice channel BC Begin Continue BCN Broadcast channel change notification flag BER Bit error rate BMI Base station, MSC and interworking function BMR Base measurement requirement BP Bit position BRI Busy Reserved Idle BS Base station BSCO Hase station challenge order BSMC Base station manufacture code BT Burst type BU Burst usage Patent Application Docket f15735/0073 CDL Coded DCC locator CDVCC Coded DVCC
CLI Continuation length indicator CPE Coded partial echo CR Continue repeat CRC Cyclic redundancy check CSFP Coded superframe phase DCC Digital control channel DL DCC locator DTC Digital traffic channel DVCC Digital verification color code E-BCCH Extended broadcast control channel ECS Extended broadcast channel cycle start F-BCCH Fast broadcast control channel FRNO Frame number G Guard time HP Hyperframe IDT Mobile station identity type IMSI International mobile station identification L3DATA Layer 3 data L3LI Layer 3 message length indicator MAC Media access control MACA Mobile assisted channel allocation MAHO Mobile assisted handoff MLRQ Monitoring of radio link quality MS Mobile station MSC Mobile telephone service center Patent Application Docket #I5735/0073 MSID Mobile station identification PCB Paging channel PCON Page continuation PE Partial echo PF Paging frame PFM Paging frame modifier PREAM Preamble R Ramp time R/N Received/not received RACH Random access control channel RDCC Reverse digital control channel RSS Received signal strength RSVD Reserved S-HCCH Short message service-Broadcast control channel SAP Service access point SCF Shared control feedback SF Superframe SMS Short message service SMSCH Short message service point to point channel SMSN Broadcast short-message service change notification SOC System operator code SPACH SMS, PCB and ARCH

SSD Shared secret data SYNC Synchronization SYNC+ Additional SYNC for abbreviated RACH burst TDMA Time division multiplex access Patent Application Docket #15735/0073 TID Transaction identifier WER Word error rate DCC Logical Channel Definition The DCC comprises the logical channels shown in FIG. 7.
The DCC logical channels include the HCCH (F-BCCH, E-BCCH, S-BCCH), SPACH, PCB, ARCH, SMSCH and RACH.
Broadcast Control Channel IBCCH1 The BCCH is an acronym used to refer collectively to the F-HCCH, E-BCCH and S-BCCH logical channels. These 3 logical channels are used, in general, to carry generic, system-related information. The attributes of these 3 channels are: unidirectional (downlink), shared, point-to-multipoint, and unacknowledged.
Fast Broadcast Control Channel fF-BCCH) T h i s logical channel is used to broadcast time critical system information.
Extended BCCH (E-BCC~1_ This logical channel is used to broadcast system information that is less critical than the information sent on the F-BCCH.
SMS Broadcast HCCH lS-BCCH) This logical channel is used to broadcast short messages used for the SMS broadcast service.

Patent Application Docket #15735/0073 t. Paaina and Access Response C
This logical channel is used to send information to specific mobile stations regarding SMS point-to-point (SMSCH) paging and to provide an access response channel (ARCH) as described below. The SPACH may be considered to be further subdivided into 3 logical channels, the SMSCH, ARCH and PCH, as also described below. The attributes of the SPACH are: unidirectional (downlink), shared, and unacknowledged. The SMSCH is point-to-multipoint. The ARCH and SMSCH are point-to-point.
Paging Channel (PCH) This logical a subset of the SPACH dedicated to delivering pages and orders.
ccess Response Channel (ARCH
This logical channel is a subset of the SPACH to which the mobile station autonomously moves upon successful completion of an access on an RACH. The ARCH may be used to convey AVC or DTC assignments or other responses to the mobile access attempt. Layer 2 ARQ is possible using acknowledgement messages) on the RACH.
~~ point-to=Point Channel (SMSCH) This logical channel is used to deliver short messages to a specific mobile station receiving SMS services.

Patent Application Docket #15735/0073 Random Access Chann t rRAC-H~ This logical channel is a random access channel used to request access to the system. The attributes of this channel are:
unidirectional (uplink), shared, point-to-point, and acknowledged. Contention resolution and/or collision avoidance feedback is provided on the corresponding forward subchannel.
Layered Approach IO For a better understanding of the structure and operation of the present invention, the DCC may be divided into three (3) layers: Layer 1 (physical layer), Layer 2 and Layer 3. The physical layer (L1) defines the paramaters of the physical communications channel, e.g., RF spacing, modulation characteristics, etc. Layer 2 (L2) defines the techniques necessary for the accurate transmission of information within the constraints of the physical channel, e.g., error correction and detection, etc. Layer 3 (L3) defines the procedures for reception and processing of information transmitted over the physical channel.
Physical Laper ~tadio Freguencv Carrier Sgacing and Designation The radio frequency carrier spacing and designation used in IS-548 may also be used in the present invention.

Patent Application Docket #15735/0073 Modulation Characteristics The modulation characteristics of the radio frequency carrier can be similar to those of IS-54H.
TDMA Frame Structure An exemplary frame structure is shown in FIG. 8 (FIG.
8 is similar to FIG. 3). The frame length on each DCC
TDMA RF channel is 40 milliseconds (MS). Each frame consists of six equally-sized time slots (1-6), exactly 162 symbols (324 bits) in length. The Bit Position (HP) of forward and reversed slots/bursts are numbered sequentially from 1 to 324.
TDMA Slot Structure Possible slot formats for the DCC uplink and downlink are shown in FIG. 9. FIG. 9A shows the normal slot format MS-BS on DCC. FIG. 9B shows the abbreviated slot format for MS-BS on DCC. FIG. 9C shows the slot format for BS-MS on DCC.
In the forward direction, the first transmitted bit of the SYNC word has BP = 1 and the Last transmitted bit of the RSVD field has BP equal to 324. In the reverse direction, the first transmitted bit of the Guard has BP
= 1. In the normal slot format, the last transmitted bit of the DATA field has HP equal to 324. In the abbreviated slot format, the last transmitted bit of the AG field has HP equal to 324.

Patent Application Docket #15735/0073 The field AG denotes guard time for the abbreviated access burst format. The field is 22 symbols (44 bits) in length.
The field HRI is used to indicate whether the channel is Busy, Reserved or Idle. The field totals 6 bits in length and is divided into two 3 bit fields. The bits of the HRI are transmitted as shown in FIG. 10.
DATA
User data bits are mapped onto the Field DATA for transmission. In the forward direction, the field is 260 bits in length. In the reverse direction, the length of the DATA field is 244 bits for the full length slot format and 200 bits for the abbreviated slot format.
Encoding FIG. 11 shows the partitioning of the data before channel encoding. All logical channels, BCCH, SPACH and RACH (normal and abbreviated), use a 1/2 rate convolutional encoding. The same encoding polynomials as for full rate speech in IS-54B may be used. The first bit received from Layer 3 is the left most bit in FIG. 11 and shall be the first bit delivered to channel encoding.
The last five bits sent to the channel encoder are set to Zero (tail bits). The CRC polynomial may be the same as in IS-54H. Generally, the DVCC is added as information Patent Application Docket #15735/0073 bits when calculating the CRC as in IS-54H. However, for the F-HCCH, the DVCC value is set to zero before calculating the CRC.
The length of the Information ffield in FIG. 11 depends on the burst length (See FIGS. 9A-C):
SPACH and BCCH: - 130-16-5 = 109 RACH (nornal length) : - 122-16-5 = 101 RACH (abbreviated length) - 100-16-5 = 79 Interleavinq For all channel types and burst lengths, all bits are sent within one burst, i.e., only intra-burst interleaving is performed. The output bits from the interleaves are sent in sequential order, i.e., the first bit out is the first bit transmitted in the first Data field. After the first Data field has been completed, the output of the interleaves is sent in the first position in the second Data field.
Qownlink ISPACH1 The 260 encoded data bits are interleaved in a 13 rows by 20 columns matrix. The data bits are placed into a -rectangular interleaving array as shown in the matrix below, where the bits have been numbered 0 - 259, corresponding to their order at the output of the encoder. The data bits are entered into the array column-wise. The bits are then transmitted row-wise using the following algorithm:
Do row = 0 to 12 -.
Patent Application Docket #15735/0073 Do column to 19 = 0 Transmit (array(row, column)) End Do End Do 0 13 26 ... 234 247 1 14 27 ... 235 248 2 15 28 ... 236 249 ... ... ... ... ... ...
11 24 37 ... 245 258 12 25 38 ... 246 259 Thus, the bits are transmitted in the order of:
0,13,...,247 (row 1), 1,14,....,248 (row 2), ...
12,25,...,259 (row 13).
Normal Length Hurst The 244 encoded data bits are interleaved in a 12 rows by 20 columns matrix with an extra partial column of 4 bits. The data bits are placed into a rectangular interleaving array as shown in the matrix below, where the bits have been numbered 0 - 243, corresponding to their order at the output of the encoder. The data bits Patent Application Docket #15735/00?3 are entered into the array column-wise. The bits are then transmitted row-wise using the following algorithm:
Do row = 0 to Do column to 20 = 0 Transmit (array(row, column)) End Do End Do Do row = 4 to ii Do column to 19 = 0 Transmit (array(row, column)) End Do End Do 0 12 24 ... 228 240 1 13 25 ... 229 241 2 14 26 ... 230 242 3 15 27 ... 231 243 ... ... ... ... ...
11 23 35 ... 239 -Thus, the bits are transmitted in the order of:
0,12,...,240 (row 1), 1,13,....,241 (row 2),:
...
13., 23, . . . , 239 (row 12) .

Patent Application Docket #15735/0073 Abbreviated Length Hurst The 200 encoded data bits are interleaved in a 12 rows by 16 columns matrix with an extra partial column of 8 bits. The data bits are placed into a rectangular interleaving array as shown in the matrix below, where the bits have been numbered 0 - 199, corresponding to their order at the output of the encoder. The data bits are entered into the array column-wise. The bits are then transmitted row-wise using the following algorithm:
Do row = 0 to 7 Do column = 0 to 16 Transmit (array(row, column)) End Do End Do Do row = 8 to 11 Do column = 0 to 15 Transmit (array(row, column)) End Do End Do 0 12 24 ... 180 192 - 1 13 25 ... 181 193 2 14 26 ... 182 194 ... ... ... ... ... ...

10 22 36 ... 190

11 23 35 ... 191 Patent Application Docket #15735/0073 Thus, the bits are transmitted in the order of:
0,12,...,192 (row 1), 1,13,....,193 (row 2), 11,23,...,191 (row 12).
_G
Field G in FIGS. 9A-B provides guard time and is 3 symbols (6 bits) in duration. During this time, the ms shall maintain carrier-off condition.
The Partial Echo (PE) in FIG. 9-C is used to identify which mobile was captured after the initial burst of a random access, or to identify for which mobile a slat is marked as reserved. The channel encoding of the PE into CPE is similar to how CDVCC is handled in IS-548(i.e., a (12,8) code) . The d7 bit in IS-54H is omitted (set to zero) in the encoding process and not transmitted as part of CDL. The LSB of PE is d0. After the encoding, according to the IS-54B CDVCC process, the mapping into the slot format is as shown in FIG. 12. The check bits - b3, b2, bi and bo are all inverted, i.e., EXORed with (1, 1, 1, 1), before fonaing the resulting CDL information.
DREAM
The DREAM (preamble) field in FIGS. 9A-H allows the BS
to perform automatic gain control (AGC) and obtain symbol synchronization before the subsequent data and burst Patent Application Docket #15735/0073 synchronization portions of the received burst are reached. The field consists of the bit pattern 1001 repeated four times.
The R field in FIGS. 9A-B denotes a power ramp-up interval and is 3 symbols (6 bits) in duration.
The R/N field in FIG. 9 is used to convey the received/not received status of individual bursts sent to the base station on the RACH. The bits of the R/N are transmitted as shown in FIG. 13.
RSW
These two bits are set to 11 (FIG. 9C).
CSFP (Coded Super Frame Phase) The CSFP field in FIGS. 9C is used to convey information regarding the Superframe Phase (SFP) so that mobile stations can find the start of the superframe.
The content in this field may also be used ,to discriminate between DCC and DTC in that the CSFP of a DCC and the CDVCC of a DTC have no common codewords.
This is accomplished by using the same basic coding method together with changing the checkbits of all CSFP
codewords before transmission. The CFSP field is 12 bits in length.

Patent Application Docket #15735/0073 The channel encoding of the SFP into CSFP is similar to how DVCC is handled in IS-54B (i.e. a (12,8) code). The Least significant bit (LSB) of SFP, i.e., the bit which is incremented each TDMA block is d0 (a TDMA block is 20 ~ ms. long). The bits d7, d6 and d5 are reserved and all set to zero (000). After the encoding, according to the IS-54B DVCC process, the check bits b3~ b2~ bl, b0 are all inverted, i.e., EXORed with (1,1,1,1,), and denoted b3, b2~ bl, bQ, before forming the resulting CSFP information.
The bits are transmitted as shown in FIG. 14 (exact as CDVCC ) .
SYNC
The SYNC word in FIGS. 3A-C may be similar in content and function to the SYNC word in IS-54B.
SYNC+
The SYNC+ field in FIGS. 9A-B provides additional synchronization information to improve HS receiver performance. The SYNC+ word is specified by the following phase changes in radians: r~/4, -~t/4, 3rr/4, -3~r/4, -~r/4, -~r/4, -3n/4, 3~r/4, 3~r/4, n/4, n/4k and -~t/4.
Superframe S~~.perframe Definition A Superframe is defined as the interval between non-consecutive F-BCCH slots. The length of the Superframe (SF) is fixed. The length is 32 TDMA blocks (l6 for half rate), i.e., 32 * 20 - 640 ms. The Superframe Phase Patent Application Docket #15735/0073 counter is hence assigned 5 bits. The first F-BCCH SFP
value in a Superframe is assigned the value 0, the next slot of the same logical DCC is assigned 1, etc. For half rate DCC, the values 0, 2, 4,... are used in the consecutive bursts assigned to the DCC.
Master and Slave DCC
A DCC may be a master or slave DCC. Each frequency carrying a DCC must have one master DCC assigned to time slot 1, and may have additional slave DCCs. Only a master DCC carries BCCH. A MS assigned to a slave DCC uses the BCCH on the corresponding master DCC.
DCCs on Different Freauencies i5 If several DCCs are assigned to different frequencies so that there are several master DCCs, a different number of slots may be allocated to the combined BCCH (F-BCCH, E-BCCH and S-BCCH) on each master DCC. Layer 2/3 information may also be different for each master DCC.
A mobile station must therefore always acquire all its BCCH information on the same frequency as its PCH channel (see PCH allocation Algorithm below). The first step in the PCH assignment algorithm is to select the frequency.
If the MS is assigned to a different frequency than the one it is currently locked onto, it must re-read the DCC
structure message on the new frequency before it continues with the PCH slot assignment calculation.

Patent Application Docket #15735/0073 jiyperframe Definition The hyperframe structure is shown in FIG. 15. A
Hyperframe (HP) consists of two Superframes. Every SPACH
in the first Superframe is always repeated in the second Superframe. This is denoted "specification guaranteed repeat". The slots in the first SF in an HF are referred to as "primary" while the slots in the second SF are referred to as "secondary". The F-BCCH carries the same information in every Superframe until a change flag toggles (changes value) in the PCH. At this point, new data may be placed on the F-BCCH. The E-BCCH and S-BCCH
information may be different from SF to SF.
Rules of SPACH Continuation If the PCON bit in the assigned PCH is set, the mobile station shall read a number of additional SPACH slots indicated by the parameter PCH DISPLACEMENT which is sent on the BCCH. The additional slots to be read are separated by 40 ms from the assigned PCH for both full and half rate DCC. For full rate DCC operation, this means that the mobile station reads every other SPACH
slot up to the limit indicated by the information element PCH_DISPLACF~iENT. HCCH slots and reserved slots are not be counted as part of the page reading continuation process.
The transmission of ARCH or SMSCH messages to one mobile station may be interrupted to allow for the transmission of messages to another mobile station. Each interruption of an ARCH and SMSCH message by another Patent Application Docket (15735/0073 SPACH message may be limited to no more than n timeslots, or L3 timeout for SMSCH or ARCH. The number of interruptions for each mobile station may also be limited.
Paq_ina Frame Definition A Paging Frame (PF) is defined as an integer number of Hyperframes (see FIG. 16). There are four PF classes defined PFl...PF4_ PF1 is considered the "lowest" PF
class and PF4 the "highest". There are three terms used to define the operation of the PF classes: Default PF
.class, Assigned PF class, and Current PF class.
A Mobile Station is assigned to one of the PF classes at time of subscription. This is referred to as the Default PF class. If the Default PF class is higher than the highest class supported as defined by the parameter MAX SUPPORTED PFC broadcasted on the BCCH, the mobile shall use the PF class defined by MAC SUPPORTED PFC.
The MS can also be assigned to another PF class at registration. When the MS makes a registration, it shall temporarily change the PF class to PFl until it receives a registration response. If the response contains a PF
class, the MS shall use that PF class; otherwise it shall use the previous PF class. The resulting PF class according to the registration response or broadcast information is referred to as the assigned PF class.
The actual used PF class is referred to as the current PF class. The current PF class is equal to the assigned PF class if the Paging Frame Modifier (PFM) transmitted Patent Application Docket (15735/0073 on the SPACH is not set, or is equal to the assigned PF
class + 1 if PFM is set. The highest PF class is PF4 for all conditions.
A Hyperframe counter and a Primary SF indicator are provided in the BCCH. These two counters together (2*HF
counter + Primary SF indicator] constitute the Superframe counter. The least common multiple of the Paging Frame classes is 12. Hence the HF counts: 0,1..11,0,1...
In FIG. 16, a Secondary PCH is always placed into the next superframe. For PF(i), i = 2, 3, 4, only the PCH
assignments which are aligned to HFo are shown for illustration purposes.
Verifvina Status ofE-BCCH Information The Mobile Station shall store the value of the E-BCCH
change notification flag transmitted in the F-BCCH before reading the E-BCCH. After the Mobile Station has acquired the relevant infonaation (which may be dependent on the specific task the mobile is engaged in), the Mobile Station shall read the E-BCCH change notification flag again. The process of updating/initiating of the E-BCCH
_ messages set is considered successful only if the flag is the same before and after E-BCCH reading.
SMS Broadcast SMS broadcast (S-BCCH) is a broadcast channel in the superframe.

Patent Application Docket #15735/0073 SMS Frame The S-HCCH channel is organized into fixed length SMS-frames each consisting of 24 superframes, as shown in FIG. 7. The SF number is derived from the Hyperframe Counter and Primary Superframe Indicator sent on the BCCH
(SF number = 2*HF counter + primary SF indicator). The first S-BCCH slot within each SMS frame (Superframe 0) contains a header that describes the structure of the SMS
channel. The number of Superframes within each SMS frame is fixed. Thus, the number of slots assigned to the SMS
frame are 0,24,48,72...depending on how many slots per superframe are assigned to S-BCCH. The SMS frame is aligned to start at HF counter equal to zero.
Furthermore, regardless of which set of Paging Frames are supported, the system must increment the Hyperframe counter (0 to 11 mod 12) to provide SMS frame synchronization information to the mobile station.
SMS Subchannels SMS subchannels are defined to allow different repetition cycles for different messages. Each subchannel has its own repetition cycle defined in terms of units of possible SMS frames. The number of sub-channels are:
0,1...N. To limit the subchannel repetition time, Max N
may be set equal to 4. Subchannels are sub-multiplexed on the S-BCCH channel in units of SMS frames, SMS(i), where i - 1..N. FIG. 18 shows an example of SMS
subchannel multiplexing in which N=4.

Patent Application Docket #15735/0073 According to L2 information found in every first slot in each SMS frame, the set of messages in SMS(i) may span M(i) number of SMS frames before a cycle is completed.
Regardless of varying message set cycles among the sub-s channels, SMS frame number "i" is always followed by frame number ((i+1) mod N+1) in order of transmission.
A transition flag (TF) is provided for each SMS
subchannel (SMSN). The flags for all SMS subchannels are submultiplexed onto a single flag transmitted on the SPACH channel and which points to the Next logical SMS
frame (see FIG. 18). If there is a transition in the flag for a subchannel, the MS has to read the S-BCCH
header field at the start of the next logical SMS frame to obtain further information, as described more fully below.
Header Information The header information describes the sub-channeling of the broadcast SMS and is provided in the first slot of every SMS frame. The MS can also find the L3 structure of the SMS frame associated with this header. The SMS
Header Element (start of every SMS frame) is shown in the table below.
Information Element Range (hogical) Bits Numlxr of Subchannels 1-4 2 Subchaaael Number 1~ 2 Patent Application Docket X15735/0073 Phase L,eagth of Subch. Cycle 1~4 6 Phase Number of Subcb. Cycle 1 ~4 6 Number of SMS Messages (N) 1-G4 (set to 1 plus 6 value in field) a SMS Message ID (Note 1) 0-255 (unique ID is 8 o I2 Frame Start (Note 1) cycle) 8 0-255 (1j2 frame identifier) Note l: N instances of these two elements are sent consecutively.
Even though the SMS data may span several SMS frames, the change flag may interrupt the sub-channel cycle (cycle clearing). The MS now assumes that the next sub-channel is the start of the new cycle. There are two ways to change the data provided on the broadcast SMS:
changing the L3 messages within the SMS (messages may be added and/or deleted from any position in the cycle) , and changing the structure of the sub-channels.
The SMS Message IDs and their associated L2 Frame Starts comprise a list of all messages-appearing in this SMS frame. IDs must be unique for each SMS frame and all 256 values must be used before re-use to aid the mobile in searching for the changed messages) and avoiding reading messages which have not changed. The L2 Frame Start parameter is provided to point to the start of the L2 frame in which this message begins (the message does not have to be at the start of the L2 frame). Refer to Patent Application Docket #15735/0073 the S-HCCH L2 format for a description of message delivery. .
In the example shown in the table below, 4 messages make-up SMS frame 1. In this example, 1 slot is dedicated to S-BCCH per superframe and, hence, there are 24 slots per SMS frame.
Previous SMS New SMS

Frame 1 Header Frame 1 Header Number of subchaaaels 3 Number of subchaaneLs 3 Subchaanel number 1 Subchaanel number 1 L,eagth of subch. ' 2 Leagth of subch. cycle 2 cycle Phasa of subch. 1 Phase of subch. cycle 1 cycle Number of SMS 4 Number of SMS messages 5 massages (N) (I~

a 1 SMS message 1 ~ 1 SMS message ID 1 ID

o l L2 Frame Start1 ~ 1 LZ Frame Start 1 a2 SMS message 2 ~2 SMS message ID 2 ID

02 L2 Frame Start2 a2 L2 Frame Start 2 a3 SMS message 3 04 SMS message ID 4 ID

~3 L2 Frame Start2 04 L2 Frame Stet 2 04 SMS message 4 ~5 SMS mGSSage ID 5 ID

04 LZ Frame Start3 ~5 L2 Frame Start 3 06 SMs message ID 6 06 L2 Frame Start 3 Patent Application Docket X15735/0073 In the table above, the mobile is assumed to be monitoring the SPACH when the SMSN toggles to indicate a change in the S-BCCH. The mobile knows from the Superframe Counter that SMS subchannel three is currently being broadcast and now determines that the SMSN points to a change in SMS subchannel one. When SMS subchannel one begins, the MS reads the SMS header. It determines that message 3 is removed, the position of message 4 has changed (but the ID is the same so the mobile does not need to re-read this message), and new messages 5 and 6 have been added and must be read. The mobile may skip the appropriate number of L2 frames to read the new messages.
NCH Allocation to MSs Each MS shall be allocated a specific PCH subchannel within the paging frame on a specific DCC. The available PCH subchannels and DCCs can be identified by the DCC
parameters broadcasted on HCCH. The subchannel to be used is defined by the MSs IS-54B MIN identity which is referred to below as MSID.
DCC Selection The DCCs are identified in a list broadcasted on BCCH.
This list must be identical for alI DCC frequencies. The list contains:
1. The frequency or channels (fi, i=l..k). For the current DCC, the position in the list (i) is broadcasted instead of the frequency.

Patent Application Docket #15735/0073 2. The number of slots used for DCC (ni, i=l..k), where k is the number of DCC frequencies in the list.
One frequency can have any one of the number of DCC
slots shown in he first table below. The used slots (sj) are numbered as shown in the second table below.
Number of Slots (n~ Used Slots (st, Rata j=O..n,-1) 1 I half 2 1.4 full 1 0 4 1,4,2,5 2 full 1,4,2,5,3,6 3 full The used slots (s~ are numbered as follows:
j s!

Patent Application Docket #15735/0073 >r8133 The DCCs are numbered according to the order of appearance in the list (fi) and in FIG. 16 as follows:
p = SUM(nm, m=O..i-1)+j, n0 = 0, j = O..ni-1, i = l..k DCCp = fi~ s j, Note that a full rate DCC is given two numbers. The. total number of slots assigned to the DCCs is N - SUM(ni, i=0..k).
i0 FIG. 19 shows an example of a list broadcasted on BCCH
(after including the current frequency). This is a case with two frequencies, fl with 4 slots and fz with l slot.
The total number of DCCs is N = 5. The DCCs are numbered a~ fnllows~_ DCC Number Frequency Slot Rate I f, I full f, 4 full 3 f, 2 full 4 f, S full 2 0 5 f= 1 half A MS is assigned to a DCC according to the following algorithm:
DCC GROUP = MSID mod N, where N is defined above.

Patent Application Docket #15735/0073 DCC GROUP is the DCC number (p) according to the list above. If it (implicitly) indicates a full rate channel (ni>1), the whole full rate channel shall be assigned.
The following PCH assignments are based on the parameters broadcasted on the assigned DCC frequency.
PCH Subchannel Selection A MS is assigned to a PCH slot within the superframe according to the following algorithm:

Case 1: Master Half rate, (j=0, ni=1) PCH SUBCH = [(MSID div N) mod NP + NB]'Z

NP = 16-NB

Case 2: Master Full rate, (j=0,1, ni>1) PCH SUBCH = (MSID div N+j mod 2) mod NP + NB

NP = 32-NB

Case 3: Slave Full rate, (j=2,3,4,5) PCH SUBCH = (MSID div N+j mod 2) mod NP +

NB+2*

NP = 32-4-NB

where:

* = The slots in frames corresponding to BCCH and one frame before and after can not be used for PCH on a slave DCC.

NB - NFB+NEB+NSB+NSS

NFB = number of F-BCCH

NEH = number of E-BCCH

NSH = number of S-BCCH

NSS = number of skipped slots N,j,ni = defined above.

Patent Application Docket #15735/0073 PCH SUHCH is the TDMA block number of the PCH
subchannel within the superframe. The TDMA block numbers (SF phase counter) are broadcasted in the CSFP field.
PCH Hyperframe Selection A MS is assigned to a PCH hyperframe within the paging frame according to the following algorithm:
(MSID div N div NP) mod PFC = HFC mod PFC return where:
PFC = Paging Frame Class (1..4) for the actual MS.
HFC = Hyperframe counter (broadcasted on HCCH).
Subchannelincr of the RACH
General In order to allow for some processing time in the base station and the mobile station, a multiplexing of the RACH is performed. In addition, it is required that the time between the transmission of the burst and the SCF
response corresponding to that burst is the same on both a full rate and a half rate DCC. Thus, the number of sub channels for a full rate DCC may be set, for example, to six. _ SCF Flaas - Uplink and Downlink Burst Relations FIG. 20 shows the relation between the uplink time slats and the downlink SCF flags. Thus, following the arrows from left to right on subchannel P1, the BRI
reading of the SCF flags indicates the availability of the following P1 uplink slot as shown in the figure. If Patent Application Docket #15735/0073 an uplink burst is transmitted in that time slot, the R/N

status of the next P1 downlink SCF, as given by the arrows, indicates whether that burst was received or not.

Also, in the case of the burst being the first burst of a random access, the consecutive downlink PE value indicates to the mobiles which mobile was captured. If the mobile station burst was received correctly, the HS

will set the P accordingly, which informs the MS to send its next burst of its message (provided that the message is longer than one burst) in the next occurrence of P1 in the uplink. Note that this subchanneling is performed for SCF information in the downlink payload on the RACH only.

Payload data in the downlink will not be transmitted with this subchanneling.

In case of a reservation based access (as distinguished from a random access), the partial echo value is used together with the reservation flag in the preceding occurrence of that subchannel downlink in order to identify a reserved access for a particular mobile. FIG.

21 shows the subchannels in the case of using a full rate DCC. In the case of a half rate DCC, only sub channels P1, P3 and P5 are used.

FIG. 21 shows an example of an L3 acknowledged dialogue between a mobile and a base (only the timeslots 1 and 4 corresponding to a full rate DCC are shown). The mobile first transmits a two burst message by a random access, checking the PE after the first burst. The actual transmit occasions for the MS are marked with X. Within a predetermined time (generally longer than shown in the Patent Application Docket #15735/0073 figure), the base responds with a two burst long message (marked Y in the figure). Finally, the mobile transmits a single burst by a reserved access (this reservation based access is optional by the BS). FIG. 21 also shows the relevant SCF values.
Layer 2/3 Information Map~ina Onto E-BCCH
The set of Layer 3 E-BCCH messages sent on the E-BCCH
forms a message train. The start of the message set is indicated by the E-BCCH Cycle Start (ECS) found in the L2 header.
Layer 2 Operation Protocols The layer 2 protocols used for downlink operation support the transmission of layer 3 messages on the SPACH
(SMSCH, PCH and ARCH), F-BCCH, E-BCCH, and the S-BCCH.
The layer 2 protocol includes support for an ARQ mode of operation for the SMSCH and ARCH. The layer 2 protocol used for uplink operation supports the transmission of layer 3 messages on the RACH. Because of the Shared Channel Feedback (SCF) defined for random access channel operation, no further ARQ capability is explicitly built into RACH layer 2 protocol.
The layer 2 protocols defined herein are comprised of Media Access Control (MAC) functionality although higher level Logical Link Control (LLC) may be included. The layer 2 protocol frames identified herein are always Patent Application Docket #15735/0073 logically transmitted beginning with the left most bit of a frame and ending with the rightmost bit of a frame.
RACH Protocol The RACH layer 2 protocol is used on the uplink where all TDMA bursts are used to carry RACH information. Two RACH layer 2 protocol frames are constructed so as to fit within a 117 or 95 bit envelope. An additional 5 bits are reserved for use as tail bits resulting in a total of I22 or 100 bits of information carried within each RACH
burst. The layer 2 protocol defined for RACH operates using the Shared Channel Feedback mechanism and, as such, supports only an ARQ type of operation. A range of possible RACH layer 2 frames are shown in FIGS. 22A-L.
A summary of the fields comprising layer 2 protocol frames for RACH operation is provided in the table below.
Multiple L3 messages may be sent in one transaction.
ormal Length Protocol. Frames 2o When system broadcast information indicates that normal length bursts are to be sent during a mobile station access procedure, the range of layer 2 protocol frames-shown in FIGS. 22A-F may be used for the entire access.
FIG. 22 shows a BEGIN Frame (MSID type TMS1). FIG. 22B
shows a BEGIN Frame (MSID type IS-54B MIN). FIG. 22C
shows a BEGIN Frame (MSID type IMS1). FIG. 22D shows a CONTINUE Frame. FIG. 22E shows an END Frame. FIG. 22F
shows a SPACH ARQ Status Frame.

Patent Application Docket #15735/0073 Normal Length Frame Usage BEGIN Frame A BEGIN frame must be used for the initial burst of a random access transaction. The size of the L3DATA field changes based on the size of MSIDs and the number of layer 3 messages indicated by NL3M. A complete access transaction may be carried within this burst.
CONTINUE Frame A CONTINUE frame is used when a random access requires more than two frames to complete the access transaction.
As many CONTINUE frames as needed are sent to complete a mufti-burst access transaction. The value in the CI
field toggles between 1 and 0 (starting with 0) with every new (i.e., non-repeated) frame transmitted by the mobile station as directed by SCF information. If the SCF requires the re-transmission of a previously sent frame, the frame shall be repeated and the CI field shall not toggle.
END Frame An END frame is sent as the last burst of a random access requiring more than one frame to complete the access transaction.
SPACH ARO Status Frame A SPACFi ARQ STATUS frame is used to report the partial or complete status of an ARQ based transmission received by the mobile station on the SPACH. The FRNO MAP bit map Patent Application Docket #15735/0073 field is set to "1" for received or "0" for not received for each ARQ mode BEGIN or CONTINUE frame received on the SPACH.
Abbreviated Length Protocol Frames When system broadcast information indicates that abbreviated length bursts are to be sent during a mobile station access procedure, then the range of layer 2 protocol frames shown in FIGS. 22G-L shown in may be used. FIG. 22G shows BEGIN Frame (MSID type TMS1). FIG.
22H shows BEGIN Frame (MSID type IS54B MIN). FIG. 22I
shows BEGIN Frame (MSID type IM51). FIG. 22J shows CONTINUE Frame. FIG. 22K shows END Frame. FIG. 22L
shows SPACH ARQ status Frame. The size of the L3DATA
field changes based on the size of MSIDs and the number of layer 3 messages indicated by NL3M.
Abbreviated Length Frame Usage The abbreviated length frame usage does not differ from the Normal Length Frame Usage.
RACH Field Summaries Th following table summarizes the RACH Layer 2 protocol fields Patent Application Docket #15735/0073 Field Name Leagth (bits)Values gT = Bit Type 3 000 = BEGIN

00 t = CONTINUE

010 = END

011 = SPACH ARQ Status 100..111 = Reserved RSVD = Reserved 1 Set to zero.

CI = Change Indicator 1 Starts at 0, toggles for every new transmitted frame.
Stays the sane for every repeated frame.

IDT = Identity Type 2 00 = 20 bit TMSI

01 = 34 bit MIN per 10 = 50 bit IMSI

11 = Reserved MSID = Mobile Station Ideatity20/34/50 20 bit TMSI

34 bit IS-54B MIN

50 bit IMSI

NL3M = Number of Layer 3 Messages2 00 = 1 layer 3 message O1 = 2' ' ' 10=3' ' ' 11 =4' ' ' L3LI = Layer 3 Leagth Indicator8 Variable length layer messages supported up to a maximum of 255 octets.

Patent Application Docket #15735/0073 L3DATA = Layer 3 Data Variable Contains a portion (some or all) of the layer 3 message having as overall length as indicated by L3L.I. The portion of this field not used to carry layer 3 information is filled with zeros.

PE = Partial Echo 7 The 7 least significant bits of the awbile station MIN.

T)D = Transaction Identity 2 Indicates which ARQ
mode trsasaciion the status report is associated with.

FRNO MAP = Frame Number Map 32 A partial or complete bit map representation of the receive status of an ARCH
or SMSCH ARQ mode transaction ( 1 =
Frame Received, 0 = Frame Not Received).

FILLER = Burst Filler Variable All filler bits are set zero.

CRC = Cyclic Redundancy Code 16 Same generator polynomial as IS-54B (includes DVCC) F-BCCH Protocol The F-HCCH layer 2 protocol is used whenever a TDMA
burst is used to carry F-BCCH information. The first F-BCCH slot of a superframe must have its Superframe Phase value set to zero. All F-HCCH slots in a superframe assume a DVCC value of zero for the purpose of Patent Application Docket #15735/0073 calculating the layer 2 CRC value. It should be noted that a full cycle of F-BCCH information (i.e., a set of layer 3 messages) always starts in the first F-BCCH slot of a superframe and is completed within the same superframe using as many F-BCCH slots as necessary.
A single F-BCCH layer 2 protocol frame is constructed so as to fit within a 125 bit envelope. An additional 5 bits are reserved for use as tail bits resulting in a total of 130 bits of information carried within each F-BCCH burst. The layer 2 protocol defined for F-BCCH
operation supports only unacknowledged operation. A
range of possible F-HCCH layer 2 frames is shown in FIGS.
23A-C. A summary of the fields comprising layer 2 protocol frames for F-BCCH operation is provided in the table below.
~,-BCCH Frame Usaae ~1EGIN Frame FIG. 24A shows a F-BCCH BEGIN Frame (mandatory minimum). FIG. 24B shows another F-BCCH BEGIN Frame (two L3 messages with the second L3 message continued). The BEGIN frame is used for starting the delivery of one or more L3 messages on the F-BCCH. If the first L3 message is shorter than one frame, the BE is added to the end of the L3DATA field to indicate whether or not an additional L3 message is started within the BEGIN frame. If the BE
is equal to "END", the rest of the BEGIN frame is padded with FILLER. If the HE is equal to "BEGIN", a new L3 message is started in the BEGIN frame. If the L3DATA

Patent Application Docket #15735/0073 field ends on a frame boundary, there will be no BE bit.
The 'END' is implied. If the L3DATA field ends with less than 9 bits remaining in the frame, BE is set to 'END' and the rest of the frame is padded with FILLER.
CONTINUE Frame FIG. 24C shows a F-HCCH CONTINUE Frame (mandatory minimum). The CONTINUE frame is used for continuation of a L3 message which was too long to fit into the previous frame. The CLI indicates how many bits of the frame belong to the continued message. Since the CLI is given in bits, the preceding L3 message may have to be padded with FILLER. If the HE is equal to "END", the rest of the CONTINUE frame is padded with FILLER. If the BE is equal to "BEGIN", a new L3 message is started in the CONTINUE
frame. If the L3DATA field ends on a frame boundary, there will be no BE bit. The 'END' is implied. If the L3DATA field ends with less than 9 bits remaining in the frame, HE is set to 'END' and the rest of the frame is padded with FILLER. CLI makes it possible for mobile stations to receive any message starting in a continuation frame even if the preceding frame was not received.
F-BCCH Field Summaries The following table summarizes the F-BCCH Layer 2 Protocol fields:

Patent Application Docket #15735/0073 Field Name Length alues (bits) EC = E-BCCH Change 1 Toggles to indicate a change in the E-BCCH.

BC = Hegin / Continue 1 0 = Begin 1 = Continue CLI = Continuation Length 7 Number of bits Indicator remaining in the previous L3 essage.

L3LI = Layer 3 Length 8 ariable length Indicator layer 3 messages supported up to a aximum of 255 octets Patent Application Docket #15735/0073 L3DATA = Layer 3 Data ariable Contains a portion (some or all) of the layer 3 message having an overall length as indicated by L3LI. The portion of this field not used to carry layer 3 information is filled with zeros.

BE = Hegin / End 1 0 = Begin 1 = End FILLER = Burst Filler ariable 11 filler bits are set zero.

CRC = Cyclic Redundancy Code 16 Same generator polynomial as IS-54B. A zero value for DVCC is applied in the calculation of CRC

for each F-BCCH L2 frame.

Patent Application Docket #15735/0073 F-BCCH Protocol The E-BCCH layer 2 protocol is used whenever a TDMA
burst is used to carry E-BCCH information. It should be noted that a full cycle of E-BCCH information (i.e., a set of layer 3 messages) need not be aligned to start in the first E-HCCH slot of a superframe and may span multiple superframes. A single E-BCCH layer 2 protocol frame is constructed so as to fit within a 125 bit envelope. An additional 5 bits are reserved for use as tail bits resulting in a total of 130 bits of information carried within each E-HCCH burst. The layer 2 protocol defined for E-HCCH operation supports only unacknowledged operation. A range of possible E-BCCH layer 2 frames is shown in FIGS. 24A-C. FIG. 24A shows on E-BCCH BEGIN
Frame (mandatory minimum). FIG. 24B shows another E-BCCH
BEGIN Frame (two L3 messages with the second L3 message contineud). FIG. 24C shows an E-BCCH CONTINUE Frame (mandatory minimum). A summary of the fields comprising layer 2 protocol frames for E-BCCH operation is provided in the table below.
ame Usaae The E-BCCH Frame usage is the same as the F-BCCH Frame usage except that:
1. ECS is the opening field of E-BCCH frames as opposed to EC used in F-BCCH frames.
2 . An E-BCCH BEGIN ( ECS=1 ) must be used as the f first frame of the E-HCCH cycle.

Patent Application Docket X15735/0073 E-BCH Field Summaries The following table summarizes the E-BCCH Layer 2 protocol fields:
Fieid Name Length Values (bits) ECS = E-BCCH Cycle Start I 0 = Not the start of as E-HCCH cycle 1 = Start of an E-BCCH

cycle BC = Begin / Continue I 0 = Begin 1 = COntlnuC

CLI = Continuation Length Indicator7 Number of bits remaining in the previous L3 message.

L3LI = Layer 3 Length Indicator8 Variable length layer messages supported up to a aazimum of Z55 octets IO L3DATA = Layer 3 Data Variable Contains a portion (some or all) of the layer 3 message having as overall length as indicated by L3LI.
The portion of this field not used to carry layer 3 information is filled with zeros.

BE = Begin / Ead 1 0 = Beginning 1 = End FILLER = Burst Filler Variable All filler bits are set zero.

Patent Application Docket #15735/0073 CRC = Cyclic Redundancy Code 16 Same generator polynomial as IS-54B. The nominal DVCC
is applied in the calculation of CRC for each E-BCCH L2 frame.
S-BCCH Protocol The S-BCCH layer 2 protocol is used whenever a TDMA
burst is used to carry S-BCCH information. A single S
BCCH layer 2 protocol frame is constructed so as to fit within a 125 bit envelope. An additional 5 bits are reserved for use as tail bits resulting in a total of 130 bits of information carried within each S-HCCH burst.
The layer 2 protocol defined for S-BCCH operation supports only unacknowledged operation. A range of possible S-HCCH layer 2 frames is shown in FIGs. 25A-C.
FIG. 25A shows S-BCCH BEGIN Frame (Mandatory Minimum).
FIG. 25B shows S-BCCH BEGIN Frame (Two L3 Messages with the Second L3 Message continued). FIG. 25C shows S-BCCH
CONTINUE Frame (Mandatory Minimum). A summary of the fields comprising layer 2 protocol frames for S-BCCH
operation is provided in the table below.
S-BCCH Frame Usage The S-HCCH frame usage is the same as the F-BCCH frame usage with the following exceptions:
1. SCS is the opening field of S-BCCH frames as opposed to EC used in F-BCCH frames.
2. An S-BCCH BEGIN must be used as the first frame of the S-HCCH cycle.

Patent Application Docket #15735/0073 >r8133 Field Name L,eagth Values (bits) SCS = S-BCCH Cycle Start 1 0 = Not the start of as S-BCCH cycle I = Start of as S-BCCH

cycle BC = Begin / Continue 1 0 = Begin 1 = Continue CI-I = Continuation Length 7 Number of bits rensaining Indicator in the previous L3 message.

L3LI = layer 3 Length Indicator8 Variable length Iayer messages supported up to a maximum of 255 octets L3DATA = Layer 3 Data Variable Contains a portion (some or all) of the Layer 3 message having as overall length as indicated by L3LI.
The portion of this field not used to carry layer 3 information is filled with zeros.

BE = Begin I End I 0 = Beginning 1 = End FILLER = Hursi Filler Variabia All filler bits are set zero.

CRC = Cyclic Redundancy Code 16 Same generator polynomial zs IS-54B. The nominal DVCC

is applied is the calcu)ation of CRC for each E-BCCH

frame.

Patent Application Docket #15735/0073 SPACH Protocol The SPACH layer 2 protocol is used whenever a TDMA
burst is used to carry point-to-point SMS, Paging, or ARCH information. A single SPACH layer 2 protocol frame is constructed so as to fit within a 125 bit envelope.
An additional 5 bits are reserved for use as tail bits resulting in a total of 130 bits of information carried within each slot assigned for SPACH purposes. FIGS.
26A-N show a range of possible SPACH layer 2 protocol frames under various conditions. A summary of the possible SPACH formats is provided in the first table below. A summary of the fields comprising layer 2 protocol frames for SPACH operation is provided in the second table below.
SPACH Frame Usaae Similar frame formats are used far all SPACH channels such that all frames will always have a common Header A:
The contents of Header A determine whether or not Header B is present in any given SPACH frame. Header A
discriminates between hard (dedicated) page frames, PCH
frames; ARCH frames and SMSCH frames. A Hard Triple Page frame containing three 34-bit MSIDs can be sent on the pCH (BU = Hard Triple Page) . A Hard Quadruple Page frame containing four 20 bit or 24 bit MSIDs can be sent on the pCH (BU a Hard Quadruple Page).
One or more L3 messages may be transmitted in one frame, or continued over many frames. MSIDs are only carried within frames where BU = PCH, ARCH or SMSCH with Patent Application Docket #15735/0073 BT - Single MSID, Double MSID, Triple MSID, Quadruple MSID or ARQ Mode BEGIN. The IDT field identifies the format of all MSIDs carried within a given SPACH frame (i.e., no mixing of MSID formats is allowed). Pages carried on the PCH are not allowed to continue beyond a single SPACH frame (even though the protocol allows for it). All other PCH messages may continue beyond a single SPACH frame.
For non ARQ mode operation, the L2 SPACH protocol l0 supports sending a single L3 message to multiple MSIDs in addition to the fixed one-to-one relationship between MSIDs and L3 messages. The Message Mapping field (MM) is used to control this aspect of layer 2 frame operation.
A valid SPACH frame requires that all L2 header pertinent to a given L2 frame be included entirely within that frame (i.e., L2 header from a given SPACH frame cannot wrap into another SPACH frame). The Offset Indicator field (OI) is used to allow both the completion of a previous started layer 3 message and the start of a new layer 3 message to occur within a single SPACH frame.
Summary of SPACH Frame Formats The following table summarizes the possible SPACH
formats:

Patent Application Docket #15735/0073 Can Be Continued SMS PCH ARCH

Single MSID Y Y Y Y

Double MSID N Y Y Y

Triple MSID N Y Y Y

Quadruple MSID N Y Y Y

Hard Triple Page N Y N N
(MIN) Hard Quadruple Page N Y N N
(MINI) Continue Y Y Y Y

ARQ Mode BfiGIN Y N Y Y

ARQ Mode CONZTNUE Y N Y Y

FIG. 26A shows the SPACH Header A. FIG. 268 shows the SPAC'H Header B. FIG. 26C shows the Null Frame. FIG. 26D
shows the Hard Triple Page Frame (34 bit MIN). FIG. 26E
shows the Hard Quadruple Page Frame (24 bit MIND . FIG.
26F shows the Single MSID Frame (PCH) . FIG. 26G shows the Double MSID Frame (ARCH). FIG. 26H shows the Double MSID Frame with Continuation (ARCH). FIG. 26I shows the Continue Frame (ARCH). FIG. 26J shows the Offset Single MSID Frame (ARCH). FIG. 26K shows the Triple MSID Frame Patent Application Docket #15735/0073 (ARCH, 1 L3 Message for 3 MSIDs) . FIG. 26L shows the Continue Frame (ARCH). FIG. 26M shows the ARQ Made Begin (SMSCH). FIG. 26N shows the ARQ Mode Continue (SMSCH).
SPACH Header A
The SPACH Header A contains burst usage information and flags for managing mobile stations in sleep mode. The BU
field provides a high level indication of burst usage.
The f lags indicate changes in sleep mode configuration as well as BCCH information. This header is always present in all possible SPACH frame types.
SPACH Header B
The SPACH Header B contains supplementary header information used to identify the remaining content of the layer 2 frame. This header is present when Header A
indicates a burst usage of type PCH, ARCH or SMSCH.
Null Frame The Null frame is sent as necessary by the BMI when there is nothing else to be transmitted for any given SPACH burst.
~iard Triple Paae Frame A Hard Triple Page is a single frame page message containing three 34-bit MINs.

Patent Application Docket #15735/0073 Hard Ouadrunle Paae Frame A Hard Quadruple Page is a single frame page message containing four 20 or 24-bit MINs as detenained by IDT.
Single MSID Frame The Single MSID frame is used for starting the delivery of ARCH or SMSCH L3 messages in non ARQ mode. In addition, this frame may also be used for sending a L3 PCH messages (pages or otherwise) which are non ARQ by definition. Page messages sent using a Single MSID frame cannot be continued into another frame.
If an ARCH or SMSCH L3 message is too long to fit into Single MSID frame then the remaining L3 infonaation is carried using additional CONTINUE frames or MSID frames as necessary. If a complete ARCH or SMSCH L3 message does fit within a Single MSID frame, it is padded with FILLER as necessary.
If a non-page PCH L3 message is too long to fit into Single MSID frame then the remaining L3 information is carried using additional CONTINUE frames or MSID frames as necessary. If a complete PCH L3 message does fit within a Single MSID frame, it is padded with FILLER as necessary.
Double MSID Frame The Double MSID frame is used for starting the delivery of two ARCH messages in non ARQ mode or two PCH L3 messages. The number of MSIDs is indicated in the BT
field with the same IDT format used for both instances of Patent Application Docket #15735/0073 MSID. Page messages sent using a Double MSID frame cannot be continued into another frame.
Trir~le MSID Frame The Triple MSID frame is used far starting the delivery of three ARCH L3 messages in non ARQ mode or three PCH L3 messages. The number of MSIDs is indicated in the HT
ffield with the same IDT format used for all instances of MSID. Page messages sent using a Triple MSID frame cannot be continued into another frame.
Quadruple MSID Frame The Quadruple MSID frame is used for starting the delivery of four ARCH L3 messages in non ARQ mode or four PCH L3 messages. The number of MSIDs is indicated in the BT field with the same IDT fonaat used for all instances of MSID. Page messages sent using a Quadruple MSID frame cannot be continued into another frame.
CONTINUE Frame The CONTINUE frame is used for continuation of the L3 messages which are too long to fit into the previous frame. Note that L2 header which is specific to any given SPACH frame must always be carried entirely within that frame (i.e., L2 header associated with a given SPACH frame shall not be completed using a subsequent SPACH f tame ) .

Patent Application Docket #15735/0073 ,SRO Mode BEGIN
The ARQ Mode BEGIN frame is used for starting the delivery of a L3 ARCH or SMSCH message in ARQ mode. The ARQ Mode BEGIN frame contains only one MSID within its L2 header as well as a portion of the L3 message itself. If the L3 message is too long to fit into a single ARQ Mode BEGIN frame, then the remaining L3 information is carried using additional ARQ Mode CONTINUE frames as necessary.
If the L3 message does fit within a single ARQ Mode BEGIN
frame, it is padded With FILLER as necessary.
The PE field in conjunction with TID field identifies the transaction initiated by the ARQ Mode BEGIN frame and serves to associate any subsequent ARQ Mode CONTINUE
frames with this same transaction. An ARQ Mode BEGIN
frame has an implicit FRNO value of zero associated with it.
ARO Mode CONTINUE Frame The ARQ Mode CONTINUE frame is used for continuing a L3 ARCH or SMSCH message which is too long to fit into the previous ARQ Mode frame (BEGIN or CONTINUE). The FRNO
field identifies the CONTINUE frames within the context of the overall L3 message. The FRNO field value is incremented for each CONTINUE frame sent in support of a given transaction (i.e., multiple CONTINUE frames may be sent to complete the transaction initiated by the ARQ
Mode BEGIN frame). The ARQ Mode Continue frame is also used to repeat any previously sent ARQ Mode CONTINUE
frames received incorrectly by the mobile station.

Patent Application Docket X15735/0073 SPACH Field Summaries The following table summarizes the SPACH Layer 2 Protocol fields:
Field Name ~n8~

(bits) Values BU = Burst Usage 3 000 = Hard Triple Page (34 bit MSID) 001 = Hard Quad Page (20 or 24 bit MSID) 010 = PCH Bursi 011 = ARCH Bunt 100 = SMSCH Burst 101 = Reserve 110 = Reserved 111 ~ Null PCON = PCH Continuation 1 0 = No PCH Continuation 1 = PCH Continuation.

Activiate BCN = BCCH Change Notification 1 Transitions whenever these is a change in F-BCCH information.

SMSN = SMS Notification 1 Transitions whenever there is s change in S-BCCH information.

PFM = Paging Frame Modifier 1 0 = Use assigned PF
-1 = Use one higher thaw assigned PF

Patent Application Docket #15735/0073 BT i Burst Type 3 000 = Single MSID
Frame 001 = Double MSID
Frame 010 = Triple MSID
Frame OI1 = Quadruple MSID
Frame 100 = Continue Frame lOl = ARQ Mode Begin 110 = ARQ Mode Continue 111 = Reserved IDT = Identity Type 2 00 = 20 bit TMSI

O1 = Z4 bit MINI per 10 = 34 bit MIN per 11 = 50 bit I~tSI

MSID = Mobile Station Identity 20/24/3420 bit TMSI

I50 24 bit MINI

34 bit MIN

50 bit IMSI

MM = Message Mapping 1 0 = One instance of L3LI and L3DATA per instance of MSID.

1 = One instance of L3LI and L3DATA for multiple MSIDs.

OI = Offset Indicator 1 0 = No message offset included.

1 = Message offset included.

CLI = Continuation Length Indicator7 Number of bits remaining is the previous L3 message.

L3LI = Layer 3 Length Indicator 8 Variable length layer 3 messages supported up to a muimum of 255 octets.

Patent Application Docket #15735/0073 L3DATA = Layer 3 Data VariableContains a portion (some or all) of the layer 3 message having an overall length as indicated by L3LI. The portion of this field not used to carry layer 3 information is filled with zeros.

PE = partial Echo 7 The 7 least significant bits of the mobile station IS-54B
MIN.

TID = Transaction Identity 2 Indicates which ARQ
mode transaction is being transmitted on the ARCH or SMSCH.

FRNO = Frame Number 5 Uniquely identifies specific frames seat in support of as ARQ mode transaction.

FILLER = Burst Filler VariableAll filler bits are set zero.

CRC = Cyclic Redundancy Cade 16 Same generator polynomial as IS-548 (includes DVCC) random Access States MS Side Start Random Access A mobile station shall be in the "start random access"
state before the first unit of a message that is to be transmitted by a random access has been transmitted.
Start Reserved Access The mobile station shall be in the "start reserved access" state before the first unit of a message that is Patent Application Docket X15735/0073 to be transmitted by a reservation based access has been transmitted.
More Units The mobile station shall be in the "more units" state if there are more units associated with the same access event pending for transmission After Last Burst The mobile station shall be in the "after last burst"
state if the last unit of an access event has been transmitted.
Success The mobile station shall be in the "success" state after a message has been sent successfully.
Protocol Elements forward Shared Control Feedback Flags Genera The forward shared control feedback (SCF) flags are used to control the reverse channel, i.e., the RACH.
usv /.Reserved ! Idle The busy/reserved/idle (HRI) flag is used to indicate whether the corresponding uplink RACH slot is Busy, Reserved or Idle. Six bits are used for these flags and the different conditions are encoded as shown in the table below:

Patent Application Docket #15735/0073 BRI, BRI, BRI, BRI= BRI, BRie Biuy i ~ i i o 0 g~v~ 0 0 1 1 1 1 Idle 0 0 0 0 0 0 eceived. L Not Received The received/not received (R/N) flag is used to indicate whether or not the base station received the i0 last transmitted burst. A five times repetition code is used for encoding this flag as shown in the table below:
~s W ~s ~~ ~o Received 1 1 1 1 1 Not Received 0 0 0 0 0 Partial Echo The partial echo information is used to identify which MS was correctly received after the initial burst of random access and/or which MS is intended to have access to the reserved slot. The seven LSBs of IS-54B MIN are assigned to PE. The channel coding is described in the Physical Layer description above.

Patent Application Docket #15735/0073 ~8133 ~F Flacs Decoding BRI and R/N
The following table shows how the mobile shall decode received flags according to the Layer 2 state. Note that only the flags relevant to the Layer 2 state are shown.
In the "Start random access" state, the BRI flag is the only relevant flag. During a multiburst message transmission both the BRI and R/N flags are relevant. In the summations in the following table, bi equals the bit value.
Lnr I State B~/Rda~ed/Idk ReadredlNd Reed Busy Reed idle Rxdved N txdved t1i100 001111 000000 t11t1 00000 Start random 4 6 access Idle N/A N/A

~bi < 2 AND
~bi < 2 i=i i=3 Start tesanadReserved NIA NIA
access 1F
< 3 big diffas~e to Reserved flag code value 2 0 Morn units Bury 5 5 IF
< 4 bits ditfereace to Busy flag ~bi 2 ~bi <
code 4 4 value ~

i=i i=t ARa last burstBury 3 3 tF
< 4 big differsoct to Husy flag ~bi 2 ~bi <
code 4 4 vahu i=t i=i Patent Application Docket #15735/0073 Partial Echo The mobile station interprets a received coded partial echo value as having been correctly decoded if it differs by less than 3 bits from the correct coded partial echo (CPE). This is referred to as PE match.
Random Access Procedures Mobile Station Side A mobile station is allowed a maximum of Y+1, where Y=(0..7), transmission attempts before considering the attempt to transfer a message as a failure. The random delay period used in the mobile station after a Not Idle condition or after a transmission attempt is uniformly distributed between 0 and 200 ms with a granularity of 6.667 ms (the length of a time slot). A mobile station is not allowed to make more than Z, where Z=(0..3), consecutive repetitions of an individual burst.
Start Random Access When the mobile station is in the start "random access"
state, it shall look in the first occurrence of a downlink DCC slot, regardless of sub channels (see Physical Layer) of the current DCC. If the mobile station finds the slot to be Idle, it shall send the first unit of the message in the corresponding sub channel uplink RACH. If the slot is found to be either Busy or Reserved, the mobile station shall generate a random delay time. After the random delay time has expired the mobile shall repeat the foregoing procedure. The search Patent Application Docket #15735/0073 for an Idle is to be repeated a maximum of X+1, where X=(0,9), times for each transmission attempt. With the exception of an origination, the MS must still monitor its PCH during random access procedures.
Start Reserved Access When the mobile station is in the "start reserved access" state it shall look continuously in all downlink slots of the current DCC, regardless of sub channels, for a slot that is marked as reserved by the BRI flag and a PE match. The BS can assign reserved slot for a given MS
regardless of which subchannel the MS previously used. If the mobile station finds this slot, the mobile station shall send the first unit of the message in the corresponding uplink RACH subchannel. If the mobile station does not find this slot within a predetermined time-out period (T), the mobile shall enter the "start random access" state.
Check for PE Match After the first burst of a random access has been transmitted, the mobile shall read the partial echo field in the next slot of the corresponding subchannel of the DCC. If a PE match is found, the mobile shall assume that the SCF flag in the downlink has been assigned to it and shall then enter either the after last burst state or the more units state. If the mobile does not find a PE match, it shall generate a random delay time and enter the start random access state.

Patent Application Docket #15735/0073 More Units If the mobile station has more units to send, it shall decode the SCF flags of the corresponding subchannel. If it finds that the R/N flag is set, it shall consider the last transmitted burst to be received; otherwise, it shall consider it to be not received. If it finds that the channel is set to reserved or idle, it shall also consider the burst to be not received. If more than S+1, where S=(0,1), consecutive Not Busy readings are made by the mobile, it shall abort the transmission of the message and start another transmission attempt after a random delay. If the burst is considered to be received, the mobile shall transmit the next burst of the message in the next slot of the subchannel. If the burst is found I5 to be not received, the mobile shall re-transmit the last transmitted burst.
ter Last Burst If the mobile reads the SCF f lags of the currently used subchannel after it has transmitted the last burst and determines from the R/N flag that this burst has been received, the MS side of the SCF protocol shall consider the message to have been correctly transmitted. If it finds the burst to be not received and the channel is set to reserved or idle, it shall also consider the burst to be not received. If more than S+1, where S~(0,1), consecutive combined Not Received and Not Busy readings are made by the mobile station, it shall abort the transmission of the message and start another Patent Application Docket #15735/0073 transmission attempt after a random delay. If the burst is found to be not received, the mobile shall re-transmit the last transmitted burst.
MS and BS Random Access Flow Charts The foregoing random access procedures are illustrated in FIGs. 27A-B. FIG. 27A illustrates the random access procedure for the MS while FIG. 27H illustrates the random access procedure for the BS. Set forth below is an itemized description of the use of the truth table in the flow chart shown in FIG.27A:
1. The truth table is examined at start of a contention based access. If SCF = "reserved" or "busy" the mobile station shall increment the Busy/Idle counter and then compare it to X. If SCF
- "idle" the mobile station shall set Unit ctr to 1 and send the first burst of the access.
2. The truth table is examined after sending a given burst of an access with at least one more burst ZO pending. If SCF = "idle" or "reserved" the mobile station shall increment Stop ctr and PB ctr and then compare Stop ctr to S. If SCF = "busy" and "not received" the mobile station shall increment PB_ctr and then compare it to Z. If SCF = "busy"
and "received" the mobile station shall increment Unit_ctr and set PB_ctr to zero.
3. The truth table is examined after sending last burst of an access. If SCF = "received" then the mobile station shall increment Stop ctr and PB ctr Patent Application Docket #15735/0073 and then compare Stop ctr to S. If SCF =
"reserved" and "not received" the mobile station shall increment Stop_ctr and PB ctr and then compare Stop ctr to S. If SCF = "busy" and "not received" the mobile station shall resend the last burst of the access.
4. The truth table is examined at start of a reservation based access. If SCF = "busy" or "idle" then the mobile station examines the reservation timer. If SCF = "reserved" and the PE
does not match then the mobile station examines the reservation time. If SCF = "reserved" and the PE does match then the mobile station shall set Unit ctr to 1 and send the first burst of the i5 access.
Monitoring of Radio Link Oualitv (MRLO) Measurement Procedure and Processing The mobile shall measure the Word Errors during reading of one slot in each Paging Frame. During each Paging Frame, the MS may read one or more SPACH slots depending on the PCH continuation and the structure of the primary/secondary Superframes. However, only one reading shall update the MRLQ Word Error parameter, i.e., only one update per Paging Frame. During RACH operation, the MS must also read one forward slot per Paging frame for this purpose.
The MS shall initially set the MRLQ counter to ten (10) upon camping on a cell. Each MRLQ updating shall Patent Application Docket #15735/0073 increase the MRLQ counter by one (1) if the CRC check was successful. A non- successful reading shall decrease the MRIrQ counter by one (1). If the MRLQ counter value exceeds ten (10), the MRLQ counter shall be truncated to the value of ten (10), i.e., its value shall never exceed ten (10) .
Radio Link Failure Criteria Whenever the MRLQ counter reaches zero (0), a Radio Link Failure is declared. In such a case, the MS shall examine the Full reselect data parameter. The MS shall continue to perform RSS measurement on the frequencies in the NL until a the Full reselect data parameter equals one.
obile Assisted Channel Allocation fMACA
General When the mobile is in the Idle state, the mobile shall inform the system about the quality of the forward DCC
(this function is referred to herien as Function i). The mobile generated report shall include results from Word Error Rate (WER), Bit Error Rate (BER) and Received Signal Strength (RSS) measurements. During the Idle state, the mobile shall also measure RSS on other frequencies and report to the system (this other function is referred to herein as Function ii).
~~iode of Operation Patent Application Docket #15735/0073 From information received on the BCCH, the system can select the following modes:
1. MACA Disabled (M.~CA_STATUS = 00) 2. Function i (MACA STATUS = xi) 3. Function ii (MACA_STATUS = ix) 4. Enable Functions (i) and (ii) according to the type of access attempts (page response, origination and registration) by the MACA TYPE
parameter (MACA TYPE a Ol, 10 and 11, respectively).
Broadcasted Information The BCCH contains the following information:
1. MACA STATUS: No MACA, Function i, Function ii, or both Function i and ii.
2. MACA LIST: The system sends a list of up to 8 frequencies on the HCCH where the mobile shall measure Signal Strength.
3. MACA TYPE: What type of access shall include Function i or ii information, if any, as part of MACA reports.
MAMA Rep~t Information Contents .
The MACA reports shall contain the following information:
1. What type of MACA report is being made (Functions i and ii) .

Patent Application Docket #15735/0073 2. Whether a MACA report is based on a full measurement interval.
3. The measurement result for the specified MACA
report.
Procedures Measurement Procedure on Serving DCC (Function i) Measurement Units The mobile shall report Channel Quality and Signal Strength measurements. Channel Quality is defined as Word Error Rate (WER) and Bit Error Rate (BER) . Signal Strength is measured in dBm.
Measurement Time Interval The mobile performs a running average over the last 32 Paging Frames of its associated PCH for both Signal Quality and Signal Strength. The first SPACH reading shall update all three variables. Averaging of Signal Strength is done in dBm units. The averaging process may be similar to IS-54B MAHO.
Measurements Procedure on Other Channels (Function ii) Measurement Units The mobile shall report Signal Strength in units of dBm.
Measurement Time Interval The mobile shall measure each frequency at least 4 times. The minimum time between measurements on the same Patent Application Docket #15735/0073 frequency shall be 20 ms. The maximum time between measurements on the same frequency shall be 500 ms.
Averaging of Signal Strength is done in dBm units. The MS may make the measurements continuously or only before an access.
~iACA Regort The mobile informs the system through Mobilethe Complete MACH Interval flag whether a full measurement interval was completed at the time the MACA report is sent.
SPACH ARQ
EMI Side Start ARQ Mode The BMI starts an ARQ Mode transaction by sending an ARQ Mode BEGIN frame containing the Mobile station identity (MSID), Partial Echo (PE) which is set to the 7 least significant bits of the mobile station's IS-548 MIN, Transaction identifier (TID) which uniquely identifies which instance of an ARQ mode transaction is being sent to _the mobile station, L3 length indicator (L3LI) which a mobile station shall use to calculate the number of continuation frames expected to follow the ARQ
Made BEGIN frame, and a portion of the L3 data (L3DATA).
Start ARO Mode Acknowledgment After sending an ARQ Mode BEGIN frame, the HMI may wait for an acknowledgment from the mobile station since this Patent Application Docket #15735/0073 frame contains information critical to the overall success of an ARQ Mode transaction. If the BMI decides not to wait for a mobile station acknowledgment, it shall proceed to send an ARQ Mode CONTINUE frame. Otherwise, the BMI shall proceed as follows: The BMI polls the mobile station by setting the BRI flag to "reserved" and by setting PE to the value corresponding to the target mobile station in the same downlink slot. The BMI then waits for an uplink ARQ Status message on the same access path on which it polled the mobile station. If an ARQ
Status message is not received on the reserved access slot or is received but with an incorrect indication of outstanding frames, the HMI shall resend the Start ARQ
mode message up to a predetermined number of times. If the BMI does not receive a correct ARQ Status message after a certain number of attempts, it~shall terminate the ARQ Mode transaction. If the BMI does receive a correct ARQ Status message after a certain number of attempts, it shall proceed to send an ARQ Mode CONTINUE
frame.
ARO Mode Continuation The BMI sends ARQ Mode CONTINUE frames to complete the initiated ARQ Mode transaction. These frames contain the Partial Echo (PE) which is set to the 7 least significant bits of the mobile station's IS-548 MIN, Transaction identifier (TID) which uniquely identifies which instance of an ARQ mode transaction is being sent to the mobile station, Continuation Frame Number (FRNO) Patent Application Docket #15735/0073 which identifies individual continuation frames, and a portion of the L3 data (L3DATA). An ARQ Mode BEGIN frame has an implicit FRNO value of 0 associated with it whereas ARQ Mode CONTINUE frames have explicit FRNO
values which start at 1. The FRNO value is incremented for each new ARQ Mode CONTINUE frame sent by the BMI in support of a specific ARQ Mode transaction.
The BMI may poll the mobile station after sending any intermediate ARQ Mode CONTINUE frame. If the HMI decides to issue an intermediate poll it shall proceed as follows: The BMI sets the BRI flag to "reserved" and sets PE to the value corresponding to the target mobile station within the same downlink slot. The HMI then waits for an uplink ARQ Status message on the same access path on which it polled the mobile station. If an ARQ
Status message is not received on the reserved access slot the BMI shall resend the Start ARQ mode message up to a predetermined number of times. If the HMI does not receive a correct ARQ Status message after a certain number of attempts, it shall terminate the ARQ Mode transaction. If the HMI receives an ARQ Status message, it shall continue to send ARQ Mode CONTINUE frames beginning with those marked as being received incorrectly. When the BMI sends the last ARQ Mode CONTINUE frame, it shall proceed as indicated in the next section.

Patent Application Docket x'15735/0073 ARQ-Mode Termination The BMI polls the mobile station after sending the last ARQ Mode CONTINUE frame as follows: The BMI sets the BRI
flag to "reserved" and sets PE to the value corresponding to the target mobile station within the same downlink slot. The BMI then waits for an uplink ARQ Status message on the same access path on which it polled the mobile station. If an ARQ Status message is not received on the reserved access slot, the BMI shall resend the Start ARQ mode message up to a predetermined number of times. If the HMI does not receive a correct ARQ Status message after a certain number of attempts, it shall terminate the ARQ Mode transaction. If the BMI receives an ARQ Status message and the FRNO MAP indicates "all correct", the ARQ Mode transaction is considered to be successfully completed. If the BMI receives an ARQ
Status message and the FRNO MAP does not indicate "all correct", it shall resend those ARQ Mode CONTINUE frames marked as being received incorrectly. The BMI shall resend any given ARQ Mode CONTINUE frame up to a predetermined maximum number of times before terminating the ARQ Mode transaction. _ MS Side Start ARO Mode After a mobile station has entered start ARQ Mode and successfully completed transmission of the first burst of an ARCH or SMSCH message (as indicated by the SCF flags), the mobile station shall read the ARCH or SMSCH in up to Patent Application Docket #15735/0073 a predetermined number of SPACH frames beginning 40ms after successfully completing the transmission of this burst. When it receives an ARQ Mode BEGIN frame with a MSID matching its own, the mobile station shall proceed as follows: The TID shall be stored for ARQ Mode transaction identification purposes. The number of pending ARQ Mode CONTINUE frames shall be calculated based on the received L3LI. The FRNO MAP shall be set to RECEIVED for FRNO zero (corresponding to the ARQ Mode BEGIN) and NOT RECEIVED for all pending ARQ Mode CONTINUE
frames. The FRNO MAP supports BMI transmissions up to 32 ARQ Mode frames in length (1 BEGIN and 31 CONTINUE). The portion of the L3 message carried in L3DATA shall be stored. The mobile station shall then proceed as described in the next section.
ARO Mode Continuation The mobile station shall read SPACH frames and respond as follows: If a poll occurs (i.e., a PE match occurs along with an SCF reservation indication), the mobile station shall send an ARQ Status to the BMI with a FRNO
MAP that indicates the current FRNO reception status. If the FRNO MAP indicates that an "all correct" condition exists, the mobile station consider the corresponding ARQ
Mode transaction to be successfully completed. If an ARQ
Mode CONTINUE frame is correctly received for an outstanding ARQ Mode transaction ( i . a . , PE and TID match) the mobile station shall store the L3DATA contained therein and set the corresponding FRNO MAP position to Patent Application Docket #15735/0073 RECEIVED. If no ARQ Mode CONTINUE frame or poll is received for a predetermined period, the mobile station shall transmit an ARQ Status message using a contention based random access. A maximum number of such spontaneous ARQ Status transmissions may be sent before the corresponding ARQ Mode transaction is terminated.
FIGS. 28A-B illustrate operation in SPACH ARQ Mode for the MS (FIG. 28A) and BS (FIG. 28B).
~Yer 3 and Higher Layers ;layer 3 Operation FIG. 29 illustrates the mobile station state diagram which is discussed in more detail below.
Mobile Station State Descriptions Null State fDl) A mobile station shall be in the "Null" state if it is powered down. When a power up occurs, a mobile station shall enter the "Control Channel Scanning and Locking"
state.
Control Channel Scanning and Locking State fD2-) A mobile station shall be in the "Control Channel Scanning and Locking" state when it is in the process of selecting a candidate service provider (ACC or DCC).
While in this state, a mobile station may at any time determine that an analog control channel (ACC) is the preferred service provider in which case ft shall enter the Initialization task (see 2.6.1 of IS-54B).

Patent Application Docket #15735/0073 Otherwise, the mobile station shall attempt to find a digital control channel (DCC) service provider. It may search for a candidate DCC as described below in the section on DCC Scanning and Lacking procedure. If a mobile station finds a candidate DCC, it shall execute the Cell Selection procedure discussed below. If the candidate DCC satisfies the criteria described in the Cell Selection procedure, the mobile station shall enter the "DCC Camping" state discussed below. Otherwise, the mobile station shall search for another candidate DCC.
The DCC Camping State lD3) A mobile station shall be in the "DCC Camping" state as long as it is logically connected to the "best" cell according to the cell selection rules set forth below.
The mobile station will leave this state at cell reselection or when accessing the system for a mobile originating call, a mobile terminating call, a registration, an SSD Update or a Point-to-Point SMS
(mobile station terminated). The mobile station shall not exit the "DCC Camping" state when reading the broadcast information of its current DCC or of a neighbor DCC. While in this state, the mobile station performs different tasks depending on which information is received.
If a BCCH message is received, the mobile station shall update stored HCCH infonaation according to the received message. If a Registration Parameters message is received and the optional information element "REGID

Patent Application Oocket #15735/0073 Parameters" is not part of this message, then the mobile station shall not increment REGID on this DCC. If the optional information elements "REGID Parameters" and "REG
Period" are part of this message, the mobile station shall keep an updated copy of REGID either by continuously monitoring it or by internally incrementing it every REGID PER superframes. The mobile station shall then invoke the Registration procedure described below.
If a BCCH Neighbor Cell message is received, the mobile station shall begin monitoring the neighbor DCCs for cell reselection purposes by invoking the Cell Reselection procedure as necessary.
The mobile station shall respond to the following conditions as indicated:
PER COUNTER Timeout: The Registration procedure shall be invoked.
REREG TI~t Timeout: The Registration procedure shall be invoked.
REGID Increment Event: The Registration procedure shall be invoked.
Power Down Event: The Registration procedure shall be invoked.

Patent Application Docket X15735/0073 FDCC Indication primitive received containing a PCH
message: The Termination procedure shall be invoked.
User Origination: The Origination procedure shall be invoked.
Current DCC Barred: If the current DCC becomes barred the mobile station shall invoke the Cell Reselection procedure in order to select a new service provider from its neighbor list.
egistration Proceeding lD6) A mobile station shall be in the "Registration Proceeding" state after it has sent a Registration I5 message to the base station but has not yet received an answer. The mobile station shall respond to the following conditions as indicated:
REG TI~t Timeout: If the mobile station has resent its registration up to the maximum of 5 times, it shall terminate this procedure and then enter the DCC Camping state. Otherwise, it shall set REREG TM~t timer to a random time uniformly distributed in the interval 10 to 100 seconds, terminate this procedure and then enter the DCC Camping state.
ARCH message received: If a registration Accept message is received, the mobile station shall terminate this procedure and then invoke the Registration Success Patent Application Docket #15735/0073 procedure described below. If a registration Reject message is received the mobile shall terainate this procedure and then invoke the Registration Failure procedure.
PCH message received: Stop REG TMR, ter~ainate this procedure and then invoke the Termination procedure described below.
Origination Proceedinq.(D4) A mobile station shall be in the "Origination Proceeding" state after it has successfully sent an Origination message but has not yet received a response from the BMI. The mobile station shall respond to the following conditions as indicated:
ORIG TMR Timeout: Terminate this procedure and then enter the DCC Camping state.
ARCH message received: If a Digital Traffic Channel Designation message is received the mobile station shall stop ORIG TMR, update the parameters as received in the message, invoke the Registration Update procedure and then enter the Confina Initial Traffic Channel task (see 2.6.5.2 of IS-54H). If a Analog Traffic Channel Designation message is received the mobile station shall stop ORIG TMR, update the parameters as received in the message, invoke the Registration Update procedure and Patent Application Docket #15735/0073 then enter the Confirm Initial Voice Channel task (see 2.6.4.2 of IS-54B).
Waiting for Order (D51 A mobile station shall be in the "Waiting for Order"
state after it has successfully sent a Page Response in response to a Page but has not yet received a response from the HMI. The mobile station shall respond to the following conditions as indicated:
WAFO TMR Timeout: Terminate this procedure and then enter the DCC Camping state.
ARCH message received: If a Digital Traffic Channel Designation message is received the mobile station shall stop WAFO TMR, update the parameters as received in the message, invoke the Registration Update procedure and then enter the Confirm Initial Traff is Channel task (see 2.6.5.2 of IS-54B). If a Analog Traffic Channel Designation message is received the mobile station shall stop WAFO TMR, update the parameters as received in the message, invoke the Registration Update procedure and then enter the Confirm Initial Voice Channel task (see 2.6.4.2 of IS-54B).
SMS Point-to-Point Proceeding (D8) A mobile station enters the "SMS Point-to-Point Proceeding" state after it has successfully sent a SPACH
Confinaation in response to an SMS Notification but has Patent Application Docket #15735/0073 not yet received a response from the BMI. The mobile station shall respond to the following conditions as indicated:
SMS TMR Timeout: Terminate this procedure and then enter the DCC Camping state.
ARCH message received: If an R-DATA message is received and accepted by the mobile station, it shall stop SMS TMR, update the information as received in the message, send an R-DATA ACCEPT message, terminate this procedure and then enter the DCC Camping state. If an R-DATA message is received and rejected by the mobile station, it shall stop SMS TMR, send an R-DATA REJECT
message, terminate this procedure and then enter the DCC
Camping state.
PCH message received: Stop SMS TMR, terminate this procedure and then invoke the Termination procedure described below.
SSD Update Proceeding (D71 A mobile station shall be in the "SSD Update Proceeding" state after it has successfully sent a BMI
Challenge Order in response to an SSD Update Order but has not yet received a response from the BMI. The mobile station shall respond to the following conditions as indicated:

Patent Application Docket #15735/0073 SSDU TIC expires: Terminate this procedure and then enter the DCC Camping state.
ARCH message received: If a BMI Challenge Order Confirmation is received the mobile station shall stop SSDU TI~t, update the parameters as received in the message, send an SSD Update Order Confirmation message, terminate this procedure and then enter the DCC Camping state.
PCH message received: Stop SSDU TMFt, terminate this procedure and then invoke the Termination procedure described below.
Procedures DCC Scanning and Locking Finding DCC
Two techniques may be used to expedite the acquisition of a DCC by the mobile station: DCC probability assignment and DCC locator.
ssicnments To aid the mobile in searching for a DCC, the available frequencies may be grouped into blocks which are assigned different probabilities which reflect the relative likelihood of finding a DCC in each block. In this manner, the time required for service acquisition by the mobile station may be significantly decreased. The lI2 Patent Application Docket #15735/0073 following two tables illustrate how the channels in the A-Band and B-Band, respectively, may be assigned different relative probabilities for supporting DCC
accquisition. This technique is typically used by a mobile station before it has received any DCC locator information (described below) . Once a mobile station has received DCC locator information, it shall use this information in lieu of the channel block probability scheme described herein.
A-Block B-Block Chaanel Relative Cbaaael Relative N,~be~ Propability Numbers Probability 1-~ 1 334-354 I6 g 537-562 8 Patent Application Docket X15735/0073 313-333 16 641-b66 12 667-b91 13 717-741 13 DCC Locator The DCC Locator (DL) is a 7-bit parameter which provides information to assist a mobile station in finding a DCC. The DL identifies for the mobile station the RF channels which carry DCC. DL values 1,2,3,...127 are encoded to form the CDL which is sent on the DTC in bit positions 314 to 324 in a TDMA slot (see physical layer description). DL values 1,2,3...127 are mapped to channel numbers 1-8,9-16,17-24,...1009-1016, respectively. Thus, for example, if a DCC occupies channel number 10, then a DL value of 2 would be sent on the DTCs in the same cell. The DL value of zero does not provide any DCC location information, but instead indicates that no DL information is being provided by the system.
Priority Channel Assignments All channel numbers are valid candidates for DCC
assignment. Considering that the DL does not uniquely Patent Application Docket #15735/0073 identify any particular channel number, it is desirable that a priority scheme be established within each channel block. A mobile station receiving the DL value associated with a particular channel block will not automatically search all channels, but wil instead search for a DCC in this block in accordance with the priority scheme. Thus, for example, for a DL value of 1, a mobile station shall examine channel numbers 8 through 1 starting with channel 8 then 7, etc., in an attempt to find the DCC.
Discrimination Between DCC and DTC
CDVCC and CSFP Field Information Although the IS-54B DTC and DCC downlink slot format have structural commonality, there are certain differences which allow for distinguishing a DCC from a DTC. First, because of the differences in the channel coding of DVCC and SFP, there are always 4 bits out of 12 which are different in every pair of CDVCC and CSFP
codewords regardless of which CDVCC or CSFP codeword is transmitted by a base station (bit errors introduced due to radio channel impairments, however, may change the _ extent to which transmitted codewords differ once they are received by a mobile station). Secondly, the CDVCC
content is fixed from slot to slot on a DTC whereas the content of the CSFP changes in a predictable fashion from slot to slot on a DCC.

Patent Application Docket #15735/0073 DATA Field Information The channel coding and interleaving employed on a DTC
is different from that employed on a DCC regardless of the DTC service (speech or FACCH). This difference may be used to discriminate between the DCC and DTC.
SACCH and RESERVED Field Information The IS-54B SACCH and RESERVED fields have different functionality on a DCC. Hence, these fields may also be used to distinguish between a DCC and a DTC.
Cell Selection The Cell Selection procedure is executed in order to allow a mobile station to determine whether or not a given candidate DCC is acceptable for camping purposes.
The mobile station shall always execute the Path Loss Determination procedure (described below) and may optionally execute the Service Aspects Determination procedure (also described below). The mobile station shall then return to the invoking procedure.
bath Loss Determination The mobile station uses the "path loss criterion" C PL
> 0 to determine whether or not a candidate DCC is suitable for camping purposes:
C PL = RSS - RSS ACC MIN - MAX(MS ACC PW - P, 0) > 0 where:
RSS is the averaged received signal strength. Signal strength measurements may be performed in a manner Patent Application Docket #15735/0073 similar to the Signal Strength Measurement Technique task in IS-54B.
RSS ACC MIN is a parameter broadcasted on BCCH. It is the minimum received signal level required to access the cell.
MS ACC PW is a parameter broadcasted on the HCCH. It is the maximum output power that the mobile station may use when initially accessing the network.
P is the maximum output power of the mobile station as defined by its power class according to IS-54H.
If the candidate DCC does not meet the path loss criteria, it shall be rejected by the~mobile station.
The mobile station shall then return to the invoking procedure.
Service Aspects Determination Mandatory If the candidate DCC is identified as Barred according to the "Cell Barred" parameter broadcast in the Access Parameters message, it shall be rejected by the mobile station. If this procedure was invoked as a result of a Cell Selection, and the ISP flag broadcast in the Cell Selection Parameters is set, the mobile shall not select the cell unless there are no other cells that meet the Z5 path loss criteria C PL. If the candidate DCC is marked Private according to the NETWORK TYPE (see below), and the PSID match criteria is not met, the mobile station shall not attempt to camp or register on the private system.

Patent Application Docket #15735/0073 Qoti~- onal If the candidate cell does not provide a desired service to the mobile station, the mobile is authorized to (re)select a cell among the cells that meet the first set of criteria under Reselection Criteria below (i.e., the mobile station may not need to select the best RF
neighbor) Cell Reselection The Cell Reselection procedure is executed in order to allow a mobile station to determine whether or not a given neighbor DCC constitutes a better service provider than its current DCC. The mobile station shall always execute the Cell Reselection Algorithm and the Reselection Criteria procedure described below, and then return to the invoking procedure.
~cannina Procedure There are two information elements sent on the BCCH
related to the scanning process: SCANFREQ and HL FREQ.
SCANFREQ is sent in the cell selection message on the F
BCCH and informs the mobile about the default minimum required number of Signal Strength (SS) measurement per Superframe. The MS shall perform a total of SCANFREQ SS
measurement per SF regardless of the size of the Neighbor List (NL). However, this default rule may be modified by the HL_FREQ information. The HL-FREQ is sent in the NL.
There is one HL_FREQ associated with each entry (frequency) in the NL. If the HL FREQ is set to HIGH, Patent Application Docket X15735/0073 this particular frequency shall be measured according to the basic rule as defined by the SCANFREQ rule. If the HL_FREQ is set to LOW, this particular frequency may be measured with half the frequency required by the default SCANFREQ rule. For example, if the NL contains 16 entries, some of them having HL FREQ set to HIGH, the rest set to LOW, and the SCANFREQ is set to 12 measurement per SF, then the number of measurement on entries marked as HIGH shall be measured with a minimum rate of 12/i6 per SF, and the number of measurement on entries marked as LOW shall be measured with a minimum rate of 12/16/2 per SF.
Basic Procedure and Requirements The mobile shall determine the number of measurements per entry per Superframe according the information in the NL (frequency & HL FREQ) and the measurement parameter SCANFREQ. This requirement is defined as the Basic Measurement Requirement (BMR). Thus, the BMR may require different measurement frequencies for different entries.
However, a MS may chose to measure all frequencies assuming all entries are treated as having HL FREQ set to HIGH. The MS shall spread the timing of the measurement as even as possible over all frequencies. The default and potential modified Paging Frame class assigned to the MS
shall not influence the MS procedure.

Patent Application Docket #15735/0073 Ogt;onal Enhancements to Basic Procedure To facilitate sleep mode efficiency, the MS is allowed to alter the BMR procedure described in Basic Procedure and Requirements and still conform to the specification.
Only the frequency of measurement requirement may be changed. There are three techniques that may be used by the MS to minimize the battery drain. All three techniques may be applied simultaneously if the prerequisite conditions are satisfied. The three techniques and the relevant conditions are as follows:
1. If the number of cell reselection executed by the MS during an extended period of time (> 5 hours) has been very low (<5) , AND the time expired since the last cell reselection is > 2 hours, then the mobile is allowed to reduce the measurement frequency on all but the serving DCC compared to the BMR by a factor of 2. This reduction is revoked if the MS executes a cell reselection.
2. If the rate of change of the Signal Strength (SS) on the serving DCC is < 5 dH over the last 5 minutes, AND the rate of change of the Signal Strength (SS) on all the entries in the NL is < 5 dB over the last 5 minutes, then the mobile is allowed to reduce the measurement frequency on all but the serving DCC compared the BMR by a factor of 2.

Patent Application Docket X15735/0073 3, If the rate of change of the difference between the SS of the serving DCC and a specific entry in the NL is < 5 dB over the last 5 minutes, then the mobile is allowed to reduce the frequency of measurement on the particular entry of the NL
satisfying the condition above by a factor of 2.
The reductions of the measurement frequency according to 2 and 3 above is revoked if the rate of change of the IO Signal Strength (SS) on the serving DCC is > 5 dB over the last 20 Paging Frames, or if the rate of change of the Signal Strength (SS) on any entry in the NL is >5 dB
over the last 100 Superframes.
$r~cessina of Measured Data Upon camping on a cell the parameter Full reselect data is set to zero. After each entry in the Neighbor List is measured 4 time, the Full reselect data parameter is set to one.
Reselection Criteria A mobile station uses the "cell reselection criterion"
C_RES to determine the best candidate DCC to camp on.
The mobile station shall select a new serving DCC from the list of candidates if it fulfills the following criteria:
( c PLnew > o ) AND
(T > DELAY) AND
(CELLTYPE = PREFERRED AND RSSne,,~ > SS SUFFnew) OR

Patent Application Docket #15735/0073 (CELLTYPE = REGULAR AND C RES > Oj OR

(CELLTYPE = NON PREFERED AND RSSold<SS SUFFald) where:

C RES - C PLnew - C_PLold + RESEL OFFSETnew ' RESEL-OFFSETold C PL is the "path loss criterion".

C PLnew _is C PL for a candidate DCC.

C PLoid is C PL for the current DCC.

T is a timer which starts when C PLnew becomes greater than 0. T is reset when CP Lnew becomes less than or equal to 0.

DELAY is a parameter broadcasted on HCCH (see below).

RESEL OFFSET is a parameter broadcasted on BCCH (see below).

RESEL OFFSETnew is the reselection offset associated with the candidate DCC.

RESEL OFFSETold is an offset associated with the current DCC.

CELLTYPE is a parameter broadcasted on BCCH (see below). It takes the values REGULAR, PREFERRED, or NON PREFERRED.

SS SUFF is a parameter broadcasted on HCCH ( see below) .

SS SUFFnes", is SS SUFF for a candidate DCC.

SS SUFFold _is SS SUFF for the current DCC.

RSSnew is RSS for a candidate DCC.

~Soid is RSS for the current DCC.

Whenever candidate DCCs of more than one CELLTYPE
fulfill the criteria, they shall be selected in priority Patent Application Docket #15735/0073 order of PREFERRED, REGULAR, NON PREFERRED. Whenever more than one candidate DCC of the same CELLTYPE fulfills the criteria, the DCC with the maximum C RES value shall be selected. However, a candidate DCC with a lower C RES
may still be selected if its C RES fulfills the following:
C RES >= MAX [ MAX [ C REST ~ C RES2 ~ . . , , C RESN ] - SERV SS, 0 J
where:
SERV SS is an offset value broadcast on HCCH.
To allow the MS to avoid "ping-pong" cell selection and reselection, the MS is not required to return to the cell on which it was previously camped within 10 seconds after a reselection.
germination When this procedure is invoked the mobile station shall determine which of the following PCH messages has been received and respond as indicated:
a e:
The mobile station shall send a Page Response message, start WAFO TMR, terminate this procedure and then enter the Waiting for Order state.
SSD Update Order:
The mobile station shall send a BMI Challenge Order, start SSDU TMR, terminate this procedure and then enter the SSD Update Proceeding state.

Patent Application Docket X15735/0073 SMS Notification:

The mobile station shall send a SPACH Confirmation, start SMS TMR, terminate this procedure and then enter the SMS Point-to-Point Proceeding state.

Unio~e Challenge Order:

The mobile station shall send a Unique Challenge Order Confirmation according to the Unique Challenge-Response procedure, terminate this procedure and then enter the DCC Camping state.

Message Waiting:

The mobile station shall send a SPACH Confirmation, terminate this procedure and then enter the DCC Camping state.

parameter Update:

The mobile station shall send a SPACH Confirmation, terminate this procedure and then enter the DCC Camping state.

Directed Retrv:

The mobile station shall send a SPACH Confirmation, mark the current DCC as barred for the duration indicated in the Directed Retry message, terminate this procedure and then enter the DCC Camping state.

Go Away:

The mobile station shall send a SPACH Confirmation, mark the current DCC as barred for the duration indicated in the Go Away message, terminate this procedure and then enter the Control Channel Scanning and Locking state.

Patent Application Docket X15735/0073 ~8133 Capability Reauest:

The mobile station shall send a Capability Report, terminate this procedure and then enter the DCC Camping state.

Origination When this procedure is invoked the mobile station shall wait for an F-BCCH Access Parameters message and examine the Overload Control (OLC) information element contained therein. The mobile station shall then proceed as follows: If the mobile station is barred from making accesses according to OLC, or if the mobile station has not yet received a full set of F-HCCIi messages on its current DCC, it shall terminate this procedure and then enter the DCC Camping state.

Otherwise, the mobile station shall formulate an Origination. If the BMI requires serial number information (S bit set to 1 on Access Parameters message), the mobile station shall formulate a Serial Number message. If the HMI requires authentication information (AUTH bit set to 1 on Access Parameters message), the mobile station shall also formulate an Authentication message according to the Authentication of Mobile Station Originations procedure. The mobile station shall then send an Origination along with any other coincidental messages required as described above, start ORIG TMR and then enter the Origination Proceeding state.

Patent Application Docket x'15735/0073 SMS Point to Point The layer 3 SMS point to point operation makes use of 3 bi-directional messages: R-DATA, R-DATA ACCEPT and R-DATA REJECT. The R-DATA message shall be used to carry the SMS application layer messages. Within the context of the following layer 3 short message service procedures, two categories are identified: MS terminated SMS and MS originated SMS.
~S Terminated SMS Procedure Within the context of this layer 3 procedure, the MS
terminated SMS includes delivery of a short message (i.e., SMS DELIVER application message) and SMS feature status report (i.e., SMS FEAT CTRL STATUS application message) to the MS.
SUMS Del ~~verv on DCC
If the MS is in "DCC camping" state, the BMI shall page the MS and wait to receive a page response message from the MS. Once the BMI has received the page response, the BMI sends the R-DATA message, which contains the SMS
DELIVER application message, to the mobile station by using a SPACH frame type indicating SMS point to point and L2 acknowledge mode. The BMI then starts timer X.
Upon reception of the R-DATA message, the mobile station shall provide a layer 3 acknowledgment to the HMI as follows: If the R-DATA message is acceptable to the MS, the MS shall respond by sending a R-DATA ACCEPT message with the same R-Transaction Identifier present in the R-Patent Application Docket #15735/0073 DATA message. If the R-DATA message is not acceptable to the MS, the MS shall respond by sending a R-DATA REJECT
message with the same R-Transaction Identifier present in R-DATA message, and with the mandatory R-Cause information element. If the BMI timer X expires prior to receiving a layer 3 acknowledgment, the BMI may re-transmit R-DATA. The BMI shall not re-transmit R-DATA
more than once.
SMS delivery on DTC
If the MS is already assigned a DTC (e.g., involved in a call), the BMI sends the R-DATA message which contains the SMS DELIVER application message, to the mobile station by using a FACCH or SACCH with the transmission service indicating L2 acknowledge mode. The BMI then starts timer Y. Upon reception of the R-DATA message, the mobile station shall provide a layer 3 acknowledgment to the HMI, as follows: If the R-DATA message is acceptable to the MS, it shall respond by sending a R-DATA ACCEPT
message with the same R-Transaction Identifier present in the R-DATA message. If the R-DATA message is not _ - acceptable to the MS, it shall respond by sending a R
DATA REJECT message with the same R-Transaction Identifier present in R-DATA message, and with the mandatory R-Cause information element. If the BMI timer Y expires prior to receiving a layer 3 acknowledgment, the BMI may re-transmit R-DATA. The BMI shall not re-transmit R-DATA more than once.

Patent Application Docket #15735/0073 MS Originated SMS Procedure Within the context of this layer 3 procedure, the MS
originated SMS includes: MS originated short message (i.e., SMS SUBMIT application message), MS user acknowledgment (i.e., SMS USER ACK application message) and SMS feature control by the MS (i.e., SMS FEAT CTRL
REQU application message).
MS Oricrinated SMS on the DCC
When a MS in "DCC camping" state is required by the MS
SMS application layer to send a short message, the MS
shall first examine the SMS access flag broadcast on the BCCH indicating the maximum SMS message length the MS is authorized to send on the RACH. If the MS R-DATA message length is greater than the maximum SMS message length ( in octets) authorized by the BMI, the MS shall refrain from transmitting the R-DATA message.
If the MS R-DATA message length is less than the maximum SMS message length (in octets) authorized by the HMI, the MS may send the R-DATA message, providing that the registration rules allow the MS to access the system.
The MS initiates transmission of the R-DATA message by sending a RDCC request primitive to layer 2. If the R
DATA message is sent, the MS starts timer X. Upon reception of the R-DATA message, the HMI shall provide a layer 3 acknowledgment to the MS, as follows: If the R-DATA message is acceptable to the HMI, it shall respond by sending a R-DATA ACCEPT message with the same R-Transaction Identifier present in the R-DATA message to Patent Application Docket X15735/0073 acknowledge. If the R-DATA message is not acceptable to the MS, it shall respond by sending a R-DATA REJECT
message with the same R-Transaction Identifier present in the R-DATA message to acknowledge, and with the mandatory R-Cause information element. If the MS timer Y expires prior to receiving a layer 3 acknowledgment, the MS may re-transmit R-DATA. The MS shall not re-transmit R-DATA
more than once.
MS originated on the DTC
If the MS is already assigned a DTC (e.g., involved in a call) , the MS sends the R-DATA message to the BMI by either using a FACCH or SACCH with the transmission service indicating L2 acknowledge mode. The MS then starts timer Z. Upon reception of the R-DATA message, the BMI shall provide a layer 3 acknowledgment to the MS, as follows: If the R-DATA message is acceptable to the BMI, it shall respond by sending a R-DATA ACCEPT message with the same R-Transaction Identifier present in the R-DATA message to acknowledge. If the R-DATA message is not acceptable to the MS, it shall respond by sending a _R-DATA REJECT message with the same R-Transaction Identifier present in the R-DATA message to acknowledge, and with the mandatory R-Cause information element. If the MS timer Z expires prior to receiving a layer 3 acknowledgment, the MS may re-transmit R-DATA. The MS
shall not re-transmit R-DATA more than once.

Patent Application Docket #'15735/0073 ~,eQistration When this procedure is invoked the mobile station shall wait for an F-BCCH Access Parameters message and examine the Overload Control (OLC) information element contained therein. The mobile station shall then proceed as follows: If the mobile station is barred from making accesses according to OLC, it shall terminate this procedure and then enter the DCC Camping state. If the mobile station is in its home SID area and REGH is disabled, it shall terminate this procedure and then enter the DCC Camping state. If the mobile station is not in its home SID area and REGR is disabled, it shall terminate this procedure and then enter the DCC Camping state. Otherwise, the mobile station shall examine the list of conditions below to see if a registration is required. These conditions are in priority order so that if more than one of the conditions are fulfilled only one registration is sent.
If a power-down condition exists (i.e., the mobile station has dust powered-down) and the PDREG flag sent in the Registration Parameters message is enabled, the mobile station shall send a Registration message with a power-down indication and then enter the Null state. If a power-up condition exists (i.e., the mobile station has dust powered-up) and the PUREG flag sent in the Registration Parameters message is enabled, the mobile station shall send a Registration message with a power-up indication, start REG Tl~t, and then enter the Registration Proceeding state.

Patent Application Docket #15735/0073 If the broadcasted SID value does not match the SID
value stored in semi-permanent memory and the SYREG flag sent in the Registration Parameters message is enabled, the mobile station shall send a Registration message with a geographic indication, start REG T1~, and then enter the Registration Proceeding state.
If the broadcasted RNUM value is not part of the RNUM
list stored in semi-permanent memory and the LAREG flag sent in the Registration Parameters message is enabled, the mobile station shall send a Registration message with a geographic indication, start REG TI~t, and then enter the Registration Proceeding state.
If the current DCC was previously identified as a registration neighbour (e.g., the REG field in the neighbour list) the mobile station shall send a Registration message with a geographic indication, start REG Tl~t, and then enter the Registration Proceeding state.
If the FOREG flag sent in the Registration Parameters message is enabled, the mobile station shall send a Registration message with a forced indication, start REG Tl~t, and then enter the Registration Proceeding state.
If the periodic registration timer PER COUNTER has expired, the mobile station shall send a Registration message with a periodic indication, start REG TI~t, and then enter the Registration Proceeding state.
If the REREG_TI~t has expired, the mobile station shall send a Registration message with the same indication as Patent Application Docket #15735/0073 in its previous registration attempt and then enter the Registration Proceeding state.
Otherwise, the mobile station shall invoke the Periodic Registration Determination procedure. If a registration is not necessary the mobile station shall terminate this procedure and return to the invoking procedure.
Registration Update If the mobile station has received a "Periodic Registration" information element but not the "REGID
Parameters" information element, it shall reset its PER COUNTER to REGPER * 94 superframes. If the mobile station has received a "REG Period" and a "REGID
Parameters" information element, it shall set NXTREG =
REGID + REGPER * 94 / REGID PER) and save NXTREG in semi permanent memory. The mobile station shall update its semi-permanent memory with the current broadcasted SID
value. After performing these updates, the mobile station shall terminate this procedure and return to the invoking procedure.
Periodic Registration Determination If the mobile station has received a "REG Period" and a "REGID Parameters" information element, it shall use the following algorithm to review NXTREG to determine if REGID has cycled through zero: If NXTREG is greater than or equal to REGID + (REGPER * 94 / REGID PER) + 5, then NXTREG shall be replaced by the greater of 0 or NXTREG - 22~, otherwise do not change NXTREG. If REGID

Patent Application Docket #15735/0073 is greater than or equal to NXTREG, the mobile station shall send a Registration message with a periodic indication, start REGTI~, and then enter the Registration Proceeding state. Otherwise, the mobile station shall terminate this procedure and return to the invoking procedure.
gecristration Success The mobile station shall stop REG Tl~t, invoke the Registration Update procedure and then proceed as follows: If a list of RNUM values is provided in the Registration Accept message the mobile station shall set its RNUM list in semi-permanent memory according to the received list. The mobile station shall only be required to store the first 50 RNUMs received in any given Registration Accept message.
The mobile station shall then terminate this procedure and return to the DCC Camping state.
Registration Failure If the mobile station has resent its registration up to the maximum of 5 times, it shall terminate this procedure and then enter the DCC Camping state. Otherwise, it shall store the reject cause, set REREG Tilt timer to a random time uniformly distributed in the interval 10 to 100 seconds, terminate this procedure and then enter the DCC Camping state.

Patent Application Docket #15735/0073 authentication Shared Secret Data (SSD) SSD is a 128-bit pattern stored in the mobile station (semi-permanent memory) and readily available to the base station. As depicted in FIG. 30, SSD is partitioned into two distinct subsets . Each subset is used to support a different process. Specifically, SSD-A is used to support the authentication procedures, and SSD-B is used to support voice privacy and message confidentiality.
SSD may be generated according to the procedure specified in Appendix A to IS-54B.
Random Challence Memory (RAND1 RANDB is a 32 bit value held in the mobile station. It is a value received on the BCCH, and is used in conjunction with SSD-A and other parameters, as appropriate, to authenticate mobile station originations, terminations and registrations.
sall History Parameter (COUNTB_p,Z, The Call History Parameter is a modulo-64 count held in the mobile station. COUNTs_p is updated at the mobile upon receipt of a Parameter Update Order Message.
guthentication of Mobile Station Resistrations When the information element RUTH on the BCCH is set to 1, and the mobile station attempts to register, the following authentication-related procedures shall be performed: The mobile station, initializes the Patent Application Docket #15735/0073 authentication algorithm (CAVE) as illustrated in FIG.
31; executes the CAVE procedure; sets AUTHR equal to the 18 bits of CAVE algorithm output; and sends AUTHR
together with RANDC (eight most significant bits of RAND) and COUNTB_p to the base station via the RUTH message.
The base station compares the received values for RANDC, and optionally COUNT, with the internally stored values associated with the received MIN1/ESN; computes AUTHR as described above (except that it uses the internally stored value of SSD-A); and compares the value for AUTHR
computed internally with the value of AUTHR received from the mobile station.
If any of the comparisons by the base station fail, the base station may deem the registration attempt unsuccessful, initiate the Unique Challenge-Response procedure, or commence the process of updating the SSD.
l~~que Challenge-Response Procedure The Unique Challenge-Response Procedure is initiated by the BMI and can be carried out over any combination of control and/or traffic channels. The base station generates a 24-bit, random pattern referred to as RANDU
sends RANDU to the mobile station via the Unique Challenge Order message; initializes CAVE as illustrated in FIG 32; executes the CAVE algorithm; and sets AUTHU
equal to the 18 bits of the CAVE algorithm output. The mobile station computes AUTHU as described above using the received RANDU and its internally stored values for the remaining input parameters, and send AUTHU to the Patent Application Docket X15735/0073 base station via the Unique Challenge Confirmation message. Upon receipt of the Unique Challenge Order Confirmation from the mobile station, the base station compares the received value for AUTHU to that generated/stored internally. If the comparison fails, the base station may deny further access attempts by the mobile station, drop the call in progress, or initiate the process of updating the SSD.
Authentication of Mobile Station Oriainations When the information element AUTH on the BCCH is set to O1, and the mobile station attempts to originate a call, the following authentication-related procedures shall be performed:
In the mobile station, initialize CAVE as illustrated in FIG. 33; execute the CAVE algorithm; set AUTHR equal to the 18 bits of the CAVE algorithm output; and send AUTFUt together with RANDC (eight most significant bits of BAND) and COUNTa_p to the HMI. The base station compares the received values for R.ANDC, and optionally COUNT, with the internally stored values associated with the received MINl/ESN; computes AUTHR as described above (except that it uses the internally stored value of SSD-A); and compares the value for AUTHR computed internally with the value of AUTHR received from the mobile station. If the comparisons at the base station are successful, the appropriate channel assignment procedures are commenced.
Once assigned to a digital traffic channel, the base station may, at the discretion of the system operator, Patent Application Docket #15735/0073 issue a Parameter Update Order message to the mobile station. Mobile stations confirm the receipt of Parameter Update Orders by sending Parameter Update Order Confirmations. If any of the comparisons by the base station fail, the base station may deny service, initiate the Unique Challenge-Response procedure, or commence the process of updating the SSD.
Authentication of Mobile Station Terminations When the information element AUTH in the BCCH is set to , 1, and a "Page Match" occurs, the following authentication-related procedures shall be perfonaed:
The mobile station initializes CAVE as illustrated in FIG. 34; executes the CAVE algorithm; sets AUTHR equal to the 18 bits of the CAVE algorithm output; and sends AUTHR
together with RANDC (eight most significant bits of BAND) and COUNTB_p to the base station via the AUTH message.
The base station, compare the received values for RANDC, and optionally COUNT, with the internally stored values associated with the received MIN1/ESN; computes AUTHR as described above (except that it uses the internally stored value of SSD-A); and compares the value for AUTHR
computed internally with the value of AUTHR received from the mobile station. If the comparisons at the base station are successful, the appropriate channel assignment procedures are commenced. Once assigned to a digital traffic channel, the base station may, at the discretion of the system operator, issue a Parameter Update Order message to the mobile station. Mobile Patent Application Docket #15735/0073 stations confirm the receipt of Parameter Update Orders by sending Parameter Update Order Confirmation. If any of the comparisons by the base station fail, the base station may deny service, initiate the Unique Challenge procedure, or commence the process of updating the SSD.
SSD Update Updating the SSD involves the application of CAVE
initialized with mobile station specific information, random data and the mobile station's A-key. The A-key is 64 bits long; assigned to and must be entered in each mobile station; stored in the mobile station's permanent security and identification memory; and known only to the mobile station and its associated HLR/AC. The latter feature of the A-Key is intended to enhance the security of the mobile station's secret data by eliminating the need to pass the A-key itself from system to system as the subscriber roams. As a consequence, SSD updates are carried out only in the mobile station and its associated HLR/AC, not in the serving system. The serving system obtains a copy of the SSD computed by the HLR/AC via intersystem communication (see EIA/TIA IS-41) with the mobile station's HLR/AC.
Updating the SSD in the mobile station proceeds as shown in FIG. 35: The HMI sends an SSD Update Order, with the RANDSSD field set to the same 56-bit random number used in the IiLR/AC computations, to the mobile station via the SSD Update Order message. Upon receipt of the~SSD Update order, the mobile station initializes Patent Application Docket #15735/0073 CAVE as illustrated in FIG. 36; executes the CAVE
algorithm; sets SSD-ANEW equal to the 64 most significant bits of the CAVE algorithm output and SSD-H_NEW to the 64 least significant bits of the CAVE
algorithm output; selects a 32-bit random number, R.ANDBS, and send it to the BMI in a BMI Challenge Order message;
re-initializes CAVE as illustrated in FIG. 37; executes the CAVE algorithm; and sets AUTHHS equal to the 18 bits of the CAVE algorithm output.
Upon receipt of the BMI Challenge Order, the BMI
initializes CAVE as illustrated in FIG. 37, where RANDBS
is set to the value received in the BMI Challenge Order;
executes the CAVE algorithm; sets AUTHBS equal to the 18 bits of the CAVE algorithm output; and acknowledges receipt of the BMI Challenge Order by including AUTHBS in the BMI Challenge Order Confirmation message. Upon receipt of the BMI Challenge Order Confirmation, the mobile station compares the AUTHBS received to that generated internally; acknowledges receipt of the SSD
Update Order. If the comparison at the mobile station is successful, the mobile station sets SSD-A .and SSD-B to SSD-ANEW and SSD-B NEW, respectively, and sends an SSD
Update Order Confinaation message to the 8MI with the SSD_UPDATE Information Element set to '1' and all other parameters set as appropriate. If the comparison at the mobile station fails, the mobile station discards SSD-A_NEW and SSD-B_NEW, and sends an SSD Update Order Confirmation message to the BMI with the SSD UPDATE
Information Element set to '0' and all other parameters Patent Application Doc3cet #i5735/0073 set as appropriate. If the SSD Update Confirmation received from the mobile station indicates a success, the BMI sets SSD-A and SSD-B to the values received from the HLR/AC (see EIA/TIA IS-41).
j~yer 3 Message Set The section below describes the Layer 3 messages. SMS
higher layer messages are described in the following section. In all messages shown in tabular form below, the information element in the top row of the tables shall be regarded as the first element to be delivered to layer 2.
In the information elements, the most significant bit (the leftmost bit in the tables) is the first bit to be delivered to layer 2. The information elements are described in alphabetical order after the description of the messages below.
F-BCCH Messages The F-BCCH carries broadcast infonaation to enable the mobiles to find the structure of the DCC and other essential system information. The set of layer 3 messages defined for transmission on the F-BCCH is described below:

Patent Application Docket X15735/0073 Mandatory F-BCCH Messactes DCC Structure This message shall always be sent first. The format of the DCC Structure message is as follows:

Information Elcmeat Type (bits) Message Type M 8 Number of F-BCCH M 2 Number of E-BCCH M 3 Number of S-BCCH M 4 Number of Skipped slots M 3 E-BCCH Change Notification M 1 Hyperframe Counter M 4 Primary Superframe Indicator M 1 Number of DCC slots, this frog M 2 Additional DCC frequencies O 23-I14 Total =

M = Mandatory O = Optional Parameter Tune Codes for Optional Information Elements 2 5 Parameter Type Code Additional DCC frequencies 000 t Patent Application Docket #15735/0073 Access Parameters The format of the Access Parameters message is as follows:
Length Information Element Type (bits) Message Type M 8 Access Burst Size M I

Maximum Retries M 3 Maximum Husy Reserved M 1 Maximum Repetitions M 2 Maximum Stop Counter M 1 SMS Message Length M 3 SOC dt BSMC >D Control M I

2 0 Home MS Capability M 1 Roam MS Capability M 1 Cell Barsod M I

Total =

Patent Application Docket #15735/0073 Cell Selection Parameters The format of the Cell Selection Parameters message is as follows:
Length Information Element Type (bits) Message Type M

RSS ACC MIN M S

DVCC M

Call xleciioa control M I

Total =

Registration Parameters The format of the Registration Parameters message is as follows:
L.enBth Information Element Type (bits) 2 0 Message 'Type M

REGH M I

REGR M I

PUREG M I

Patent Application Docket X15735/0073 REG Period O 13 REGID Parameters O 28 Total =18-59 _~_~ ..~ .~,_~~.. i..,. nr,+~inn~l Tnfn~-matinTf Elements r w c.arc .. ci, Parameter Type Coda REG Period ~ 1 REGID Parameters 0010 EMI Identity The format of the BMI Identity message is as follows:
~8~
laformatioa EIemeat Type (bits) Message Type M 8 System ID . M 14 2 0 Country Code M 10 IS-54+ Protocol Version M 4 Total =

Qptional F-BCCH Messages ~i_obile Assisted Channel Allocation fMACAI
This message may also be sent on the E-BCCH. The message is used to order the MS to report radio measurements on certain channels. It contains information regarding the channels the MS must measure Patent Application Docket #15735/0073 and when to report the measurements for mobile assisted channel allocation.
Length Information Element ReferenceType (bits) Message Type M 8 MACA STATUS M Z

MACA List O 18-93 Total ~

12-Parameter Type Codes for Optional Information Elements Parameter Type Code MACA List 0001 E-BCCH Messa The E-BCCH carries broadcast information that is less time critical than F-HCCH for the mobiles. For the optional information a message type and a length indicator is included. The set of messages in the E
BCCH may span over several Superframes before a repetition occurs. However, a particular message may not start and end in different Superframes. Filler information must be used to terminate the last E-HCCH
burst if necessary.

Patent Application Docket #15735/0073 Mandatory E-BCCH Messages ~leiahbor Cell The format of the Neighbor cell message is as follows:
~S~

Information Element Type (bits) Message Type M 8 Neighbor cell list (TDMA) (see O 9 + 48*a Note) Neighbor cell list (Analog) O 9 + 13*m (soe Note) Total = 12 -Note: Up (tots to 24 o instances TDMA
may be and sent analog neighbor cells).

Parameter Type Neighbor cell list (fDMA) ~1 Neighbor cell list (analog) 0010 Qctional E-BCCH Messages Mobile Assisted Channel Allocation IMACA) See Section on F-HCCH messages.
Emeraencv Information Broadcast The format of the Emergency Broadcast Message is as follows:
Length Information Element ( Type I (bits) Patent Application Docket x'15735/0073 Message Type M

Tezt Message Data Unit M N*8 N maz.
= 254 Go Away This message is used to temporarily bar all mobiles from using a DCC. The barring time is indicated in minutes from 0 to 255 minutes. The value 0 indicates that the cell is not barred. This message may also be sent on the SPACH. The format of the Go Away Message is as follows:
Length Information Eiemeat Type (bits) Message Type M

Minutes M

Total =

SOCjHSMC Identification This message is_ used in support of SOC and/or SSMC
specific signaling. The format of this message is as follows:
Length Information Element Type ( bits) Message Type M g Totai =

Patent Application Docket #15735/0073 -HCCH Messages There are two types of S-BCCH messages used for SMS
broadcast, SMS header messages and non-header messages.
S-BCCH SMS Frame Header The header information shall describe the structure of the SMS subchannel and shall only be provided in the first slot of every SMS frame. The format of the SMS
Frame Header is as follows:

Information Elemeat Type (bits) Message Type M

Number of Subchaaaels M 2 Subchaane! Number M 2 Phase Length of Subch. Cycle M 6 Phase Number of Subch. Cycle M

Number of SMS Messages (N) M 6 o SMS Message ID (Notel) M
o L2 Frame Start (Note!) M

2 0 ~ Total = ~
NOTE 1: N instances of these two elements ate sent _ consecutively. -S-BCCH SMS Broadcast Message Content The message content is used to transfer the actual SMS
message to the MS. The format of the SMS Broadcast Message Content is as follows:

Patent Application Docket #15735/0073 Ir8133 Length Information Element Type (bits) Message Type M 8 SMS Message ID M 8 Text Massage Dats Unit M N''8 N mu. =

SPACH Messages Ana~oa Voice Channel Desianat on This message is used to assign the MS to an analog voice channel with corresponding parameters. The format of this message is as follows:
~8~
Information Element Ty'Pe Message Type M 8 M~ M 1 - - Total =

base Station Challenge Order Confirmation This message is a response to the Hase Station Challenge Order and contains the authentication algorithm outputs. The format of this message is as follows:

Patent Application Docket #15735/0073 Leagth lafo~mation Elemeat TYPe protocol Discriminator and MessageM 8 Type Total =

~aoabil~ty Request This message is sent by the HMI in order to query the capabilities of a specific mobile station. The format of this message is as follows:
Lea~th Information Elemeat Type (bits) Message Type M 8 ~~~;ra~ Traffic Channel Designation This message is used to assign the MS to an digital traffic channel with corresponding parameters. The format of this message is as follows:

Patent Application Docket X15735/0073 Length Information Eiemeat TYPe ~'~) Message Typo M

DVCC M

P'yt M l C~ M I1 Total =

~essaae Waiting This message is used to inform the mobile that it has messages waiting. The format of this message is as follows:
Length 2 0 Information Element Type (bits) Message Type M

Number of messages M 6 Total =

Patent Application Docket #15735/0073 Paae This message is used to inform the MS that an attempt to set up a mobile terminated call is underway. The format of this message is as follows:
~g~
Informatioa Element Type (bits) Message Type M 8 Total =

IO
Parameter Ugdate This message is used to inform the mobile to update its internal call history parameter that is used in the authentication process. The format of this message is as follows:
I,eagth Informatioa Elemeat TYPe ~s~) Message Type M 8 Request Number M 8 2 0 Total =

Patent Application Docket #15735/0073 Point-to Point Short Message Service R-DATA
This message is used to carry the SMS application layer messages, for MS terminated SMS. The message content is as follows:
Length Information EIemeat Type (octets) Message Type M 1 R-Traasaction Ideatifier M 1 R-Dats Unit M 2 - 241 Message Ceater Address O (Note 2 - 12 1) NOTE 1: Included in the event that the Message Center originating the short message has included its address in a SMS terminated SMS.
Parameter Type Codes for Optional Information Elements Parameter Type Code 2 0 ~ Message Ceater Addrsss ~ ppp 1 Patent Application Docket #15735/0073 R-DATA ACCEPT
This message is used to acknowledge and accept the R-DATA message. The message content is as follows:
Length Information Element Type (bits) Message Type M 8 R-Transaction Identifier . M 8 Total =

R-DATA REJECT
This message is used tc acknowledge and reject the R-DATA message. The message content is as follows:
Length Information Element Type (bits) Message Type M 8 R-Transaction Identifier M 8 R~suse M 8 Tots~l =

Patent Application Docket #15735/0073 1~8133 RACH Confirmation The format of the RACH Confirmation message is as follows:
Leagth Information Element TYPe (bits) Message Type M 8 Confirmed Message M 8 Total =

$eaistration Accent The format of the Registration Accept message is as follows:
Iaformatioa Element TYPe Message Type M 8 p 10-640 _L __ rr.,.._.. r....ae~ f..,. n"t; nna 1 Tnfnrmatien Elements ~ caa v.aaw. ......v ~ j r ~ - _ 2 0 Parameter Type Patent Application Docket #15735/0073 Rectistration Re 'Zest The fonaat of the Registration Reject message is as follows:
Lragth Information Elemeat Type (bits) Message Type M 8 Cause M 4 Total =

SSD Ur~date Order This message causes the mobile to execute the authentication algorithm. The format of the SSD Update Order message is as follows:
Length Information Eiemeat Type (bits) Massage Type M 8 Total =

Patent Application Docket #15735/0073 SOC~/BSMC Identification This message is used in support of SOC and/or BSMC
specific signaling. It is sent by the HMI in response to a Mobile Station SOC & BSMC ID Request message. The format of the SOC/BSMC Identification message is as follows Length Informatioa Elemeat Type (bits) Message Type M 8 Total =

SOC/HSMC Message Delivery This message is used to carry SOC/BSMC specific signaling information. The format of the SOC/BSMC
Message Delivery message is as follows:
Length Informatioa Eiemeat Type (bits) 2 0 Message Type M 8 Custom Control (Note I) M 8*a Total -8 +(8'a) NOTE 1: protoco llows As many a instances as the may be sent (254).

Patent Application Docket ,15735/0073 Tl~,,igU,e Challenge Order This message causes the mobile station to execute the authentication algorithm. The format of the Unique Challenge Order message is as follows:
Length Information Eiemeat Type (bits) Message Type M 8 Total =

Go Away This message is used to barr a mobile from using a DCC.
The barring time is indicated in minutes from 0 to 255 minutes. The value 0 indicates that the cell is not barred. The format of the Go Away message is as follows:
Length Information Eleaxat Type (bits) Message Type M 8 Minutes M 8 2 0 Total =

Patent Application Docket #15735/0073 ~8133 directed Retrv This message is used to force a mobile to reject this DCC and select a channel from its neighbor list. The format of the Directed Retry message is as follows:

Iaformaiion Element Type (bits) Message Type M 8 Minutes M 8 Total =

Time and Date The format of the Time and Date message is as follows:
Information Element Type (bits) Message Type M 8 Seconds of Day M 17 Total =41 Patent Application Docket #15735/0073 R.ACH Messages The following messages are defined for the RACH. An 8-bit Message Type is used to discriminate between the messages.
Authentication The format of the Authentication message is as follows:
Length Information Element Type (bits) Message Type M 8 Total =

Base Station Challenge Order The format of the Base Station Challenge Order message is as follows:
Length 2 0 Information Element Type (bits) Message Type M 8 Total =

The following messages may be appended to the page response message: Serial Number Message - if S bit is set Patent Application Docket X15735/0073 Capability Resort The format of the Capability Report message content is as follows:
LeagtTz Information Element Type (bits) Message Type M 8 Software Vintage M 6 Firmware Vintage M 6 Model Number M 4 ~N M 32 MACA Report The format of the MACA Report message is as follows:
Imgth Information Element Type (bits) 2 0 Message Type M 8 wEg M 3 gER M 3 ~S O 10 Patent Application Docket #15735/0073 ~rirsination fSetuDl The format of the Origination (Setup) message is as follows:
Length Information Element Type (bits) Message Type M

yp M 1 Call Mode M 3 Dialed Digits M

Total =

The following may be to messages appended the origination message:
Serial Number Message - if S bit is set Authentication Message - if AUTH bit is set Patent Application Docket X15735/0073 Ir$13 3 page Response The format of the Page Response message is as follows:
Length Information Element Type (bits) Message Type M $

Call Mode M 3 Total ~ 14-26 The following d to the page messages may be appende response message:
Serial Number Message - if S bit is set Authentication Message - if RUTH bit is set Point-to Point Short Message Service g-DATA
This message is used to carry the SMS application messages, for MS originated SMS and MS User Acknowledgment. The message content is as follows:

laformatioa Element T3'lx (~) Message Type M 1 R-Transaction Identifier M 1 RData Uait M 2 - 241 Message Center Address ~ O (Note 1) ~ 2 - 12 NOTE 1: Included in the event that the Message Center destination address is different from the one in the MS subscription profile.

Patent Application Docket #15735/0073 R-DATA ACCEPT
This message is used to acknowledge and accept the R-DATA message. The message content is as follows:
Length Information Element Type (bits) Message Type M 8 R-Transaction Ideati6er M 8 ' Total = 16 R-DATA REJECT
This message is used to acknowledge and reject the 1t-DATA message. The message content is as follows:
Information Element Type (bits) Message Type M 8 R-Transaction Identifier M 8 Cause M 8 Total =

Patent Application Docket #15735/0073 Zr8133 Registration The format of the Registration message is as follows:
Iaformation Elemeat ~8~
Type (bits) Message Type M

Regis:zatioa Type M 3 Total =

The following messages may be appended to the page response message:
Serial Number Message - if S bit is set Authentication Message - if AUTH bit is set Capability Report Message - If Registration Type eguals Power-up or Geographic and if the Home/Roam MS Capability flag is enabled in the Access Parameters me ssage of the F-HCCH.

Patent Application Docket #15735/0073 Serial Number The format of the Serial Number message is as follows:
Iafocmatioa Eiemeat (,ag~~i~) Type Message Type M 8 Total =

SOC/BSMC Identification Request This message is used in support of SOC and BSMC
specific signaling. If authorized by the BCCFi SOC/BSMC
Request flag, the mobile station may send the SOC/BSMC
Request message to request the SOC and SSMC
Identification.
Iafotmatioa Elemeat Type (bits) Message Type M g Patent Application Docket #15735/0073 HOC / BSMC Message Delivery This message is used to carry SOC/BSMC specific signaling information. The format of the SOC / BSMC
Message Delivery message is as follows:
Information Eiemeat ~8~
Type (bits) Message Type M 8 Custom Control (Note 1) M 8*a Total =
8+(8*a) NOTE 1: toco a ws As many o may instances as the L2 pro be sent (254).
SPACH Confirmation The format of the SPACH Confirmation message is as follows:
Information Elemeat ~8~
Type (bits) Message Type M 8 Confirmed Message M 8 Total = i6 Patent Application Docket X15735/0073 >r8133 SSD Update Order Confirmation The format of the SSD Update Order Confirmation message is as follows:
Iaformation Element ~g~
Type (bits) Message Type M 8 SSD Update Status M 2 Total =

dime and Date The format of the Time and Date message is as follows:
Information Eiemeat ~8~
Type (bits) Message Type M 8 JuIiaa Date M I6 Seconds of Day M I?

Total =41 ~,gue Challenge Order Confirmation The format of the Unique Challenge Order - Confirmation message is as follows:
laformation Eiemeat ~8~
Type (bits) Message Type M 8 A~ M 18 Total =

Patent Application Docket #15735/0073 The following messages may be appended to the Unique Challenge Order Confirmation message:
Serial Number Message - if S bit is set.
Tnformation Element Description The following coding rules apply to all information element descriptions:
Elements of type "flag" shall have the values of 0 = Disable (off, false) 1 = Enable (on, true) Certain BCCH fields do NOT trigger a transition in the BCCH change flag in the SPACH. Those fields are designated as "NC" (Non-Critical).
Elements of type "transition" are modulo 1 counters to indicate a change in current status.
All specified lengths are in BITS unless otherwise noted.
Channel number shall be coded as in IS-54B unless otherwise noted.
Access Burst Size This field informs the mobile which burst size to use on the RACH according to the following table:
Fsmc:ioa 2 5 0 Use normal Ieagth burs:S on the RACH
1 Use abbreviated Ieagtb bursts oa the RACH

Patent Application Docket #15735/0073 Additional DCC Freauencies This optional field contains information regarding additional DCC frequencies in this cell and their relation to the current DCC.
Field ~8~ (~~~) Parameter type 4 (0001) Number of additional DCC frequencies 3 (Note I) Position of current DCC frequency in 3 list DCC chaanei info (Note 2) IO DCC frequency 11 Number of DCC slots, this freq 2 Number of additional DCC frequencies: The number of additional DCC frequencies provided by this cell.
Position of this DCC in list: The point at' which to insert the current DCC frequency into the DCC Channel Info list for DCC selection.
DCC channel info - This field consists of two sub-fields.
DCC frequency is an additional DCC served by this cell that must be considered when determining the DCC
selection. The "Number of DCC slots, this freq" is described in this section.
NOTES:
1. All additional DCCs provided in this optional informational element list MUST be the same logical set of DCCs in the same order for all of the other DCCs optional informational element list.
2. The number of instances sent equals the value in the Number of additional DCC frequencies field.

Patent Application Docket #15735/0073 This field defines the assigned time slot.
Function 0000 Full rate Digital Traffic Cbsnaei oa time slots 1, 4 0001 Full rate Digital Traffic Cbaanel an time slots 2, 5 0010 Full rate Digital Traffic C:haaael oa time slots 1, 4 1001 Half rate Digital Traffic Chaanel on time slots 1 1010 Half :ate Digital Traffic Cbaaael oa time slots Z

1011 Half rate Digital Traffic Chaaael on time slots 3 1100 Half sate Digital Traffic Chaanel oa time slots 4 1101 Half rate Digital Traffic Chaaaei oa time slots S

1110 Half race Digital Traffic Chsaael on time slots 6 Patent Application Docket #15735/0073 ~,UTH
The authentication flag indicates whether the mobile station sends the authentication message along with a registration, origination, or page response message sent o n RACFi .
~1UTHB S
This information element contains the output from the authentication procedure.
~10 This is the output response of the authentication algorithm for originations, registrations, and terminations.
This is the output response of the authentication algorithm for unique challenge orders.
This is the Base Station Manufacturer Code.
_Call Mode The preferred call mode for the next voice/traffic channel designation according to the following table:
Function 000 Analog voica chaaaei acceptable . 001 Analog voice channel not acceptable 010 Full-rate digital traffic cbsaaei accxptabie 011 Full-rata digital traffic dsaaaei not acxeptsbIe 100 Half sate digital traffic chanced acceptable l0I Half rate digital traffic chanced not acxeptable Patent Application Docket #15735/0073 Cause This field idicates to the mobile the case for a roQistration reject.
~~ Cause Unknown MSID

v ~ i Invalid C-cumber All other codes are rGServed Patent Application Docket #15735/0073 Cell Barred This flag is used to indicate that the current cell is barred.
Cell Selection Control This flag is used to preclude a mobile performing the cell selection (initial selection) from selecting the current cell.
~E"LLTYP E
The preference type of a cell according to the following table:
y~~ Function 00 Cell type of REGULAR

O1 CeII type of PREFERRED

10 Ceil type of NON-PREFERRED

11 Reserved Patent Application Docket #15735/0073 This is the cChannel number as defined in IS-54H.
Confirmed Message The confirmed Message field is a repeat of the Message Type field of the mssage which is being confirmed. The following messages are valid confirmation messages according to the following table:
V~~ Usage Fuaciion RACH Message Waiting RACH Parameter Update RACH Release RACH Dinxted Retry RACH Go Away RACH SMS Notification SPACH

SPACH

Patent Application Docket X15735/0073 COUNT
Se IS-54B for use of this parameter.
_Countrv Code This field indicates the Country Code of the serving system.
Field ~ ~~ ~'~~

Couatry Code (CC) 10 The CC is the equivalent of the Mobile Country Code defined in CCITT recommendation E.212. The CC values are defined in annex A of E.212. The following values are extracted from E.212 and are provided for illustration Patent Application Docket #15735/0073 only. If other CC values are required, refer to annex A
of E.212 for a complete list of CC values.
Code (docimal) Couatry 310 United Statd of America 311 United States of America 312 United States of America 313 United States of America 314 United States of America 315 United States of America 316 United States of America 334 Mezico The 3 decimal digits of the CC are expressed as the corresponding decimal number (0 <= did~dk <= 999) coded in 10 binary bits using a normal decimal to binary conversion ( 0 to 999).

Patent Application Docket #15735/0073 _Custom Control Binary data as specified by the SOC / SSMC protocol currently in use.
Q~LAY
Time in seconds.
QELTA TTIME
This parameter indicates to the mobile the difference in DTC and DCC timing in terms of time slots and symbols.
Feid ~~ ~'~) Parameter type 4 (0001) Number of timGSlots Number of rymbols Patent Application Docket #i5735/0073 D~REG
This flag indicates whether de-registration is enabled or disabled.
ni~led Digits The dialed digits of the MS for an origination.
DVCC
The digital verification color code is used in a manner consistent with IS-54B.
~'-HCCH Chance Notification A transition bit to indicate a change in the E-BCCH
data starting with the current superframe. If a tansition has occured, all mobiles shall read the E-HCCFi of the current superframe and of all subsequent superframes until a complete cycle of E-HCCH is read.
Identifies the Electronic Serial Number of the MS.
firmware Vintage The firmware vintage as defined by the mobile station manufacturer.
~CREG
This flag indicates whether Forced Registration is enabled or disabled.
If HL FREQ is set to high, the MS will perform frequency measurement according to the rules set forth in the SCANFREQ information element. If set to low, this Patent Application Docket #15735/0073 frequency may be measured with half the frequency required by the rules set forth in the SCANFREQ
information element.
Value Fuaction 0 Low 1 High ~Iynerframe Counter A counter used to identify which hyperframe is currently being broadcast. Hyperframes consist of tyro superframes. This counter starts at 0.
Julian Date A sequential date counter starting from January 1st, 1900. Reset to 1 on January 1st, 2000.
~2 Frame Start This variable indicates the numbe of slots from the start of SMS subchannel cycle to the beginning of the SMS
message. This message may not begin in the indicated SMS
slot, but may be contained in an end/begin burst which is used to start delivery of this message.
TwA R,R~r.
The location area based registration flag indicates whether or not the mobile is to geographically register when the registration number of the current cell is not part of the mobile's registration number list.

Patent Application Docket #15735/0073 ~813 3 This field indicates the power level to be used on the assigned digital traff is channel. The ceding is according to IS-54B Table 2.1.2-1 MACA List This optional field indicates the channels the mobile must measure for mobile assisted channel allocation.
Field Leagth (bits) Parameter type 4 (0010) Number of MACH chaaaels (k) Chaanel cumber k*11 ~tAX~SUPPORTED~PFC
The maximum paging frame class that this DCC can support according to the following table:
Fuaction PF I is the maximum support paging fnae class 2 0 O 1 PF2 is the maximum support paging frame class - 10 PF3 is the maximum support paging frame class _ 11 PF4 is the maximum support paging frame class Patent Application Docket #15735/0073 Maximum Busy Reserved The maximum number of times the mobile executes the following steps: generates random delay period, waits until expiration of this period, and reads H/R/I flags which have been set to non-idle.
Funciioa 0 ~ 1 random delay period 1 ~ 10 random delay periods IO

Patent Application Docket #15735/0073 Maximum Repetitions The maximum number of allowable consecutive repetitions of an individual RACH burst before considering the attempt a failure.
Maximum Retries The maximum number of allowable RACH transmission attempts before considering the attempt to transfer a message (any one burst of a single or mufti-burst RACH) as a failure.
Maximum Stoc Counter The maximum number of times the mobile xecutes the following steps: transmits a burst in RACH, examines SCF
which have been set to not busy (R/N = N and B/I/R = R or I), generates a random delay period, waits until the expiration of this period and retransmits the burst on the RACH.
This flag indicates whether the mobile station shall use the message encryption mode on the assigned traffic channel.
Messace Center Address The _purpose of the Message Center address is to identify the Message Center address for the message being sent. The maximum length of this information element is limited to 12 octets.
Bits I ocxx Patent Application Docket #15735/0073 L,eagth of Message Message Center AddressI
Crater Address 0 0 0 conceal (in I
Parameter Code 0 Type of Numbering plan Z
~n,~ a~ identification tad digit Ist digit 3 [(2xI~~]'th digit [(ZzN)-Sj'th digit N
or Filler (for odd) Patent Application Docket X15735/0073 Type of number (octet 2) (see Ncte 1 ) Bits 0 0 1 internaticnal number (see Note 2) 0 1 0 national number (see Notes 2, 4, 5) 0 1 1 network-specific number (see Note 3) 1 1 0 abbreviated number 1 1 1 reserved for exte.~.sion All other values are reserved.

NOTES:

1. For the definition of "international and national see CCITT Recommendation I.330.
number"

, 2. Prefix or escape digits shall not be included.

3. The type of number 'networt-specific number' is used to indicate administration and service number specific to the serving net~rork.

4. For calls bet:~een the United States and other countries within world zone 1 (see CCITT

Recommendation E.163 far assignment of country codes), where the numbering plan identification is "ISDN/telephony numbering plan", "type of number"
is coded to "national number".

5. For numbers that contain ser vice access codes (e. g., 900"), "type of number" is coded as "800"
"700"

, , "national number".

Rumbering Plan Identification (octet 2) Numbering plan (applies for type of number = 001 and 010) Bits Patent Application Docket #15735/0073 Zr813 3 0 0 0 1 ISDN/telephony cumbering plan (CCITT
Rocammeadations E.164 and E.163) 1 0 0 1 private numbering plan 1 1 1 1 reserved for extension All other values are reserved.
Digits (octets 3, etc.) This field is caded THCD as follows:
Binary Value Digit 0000 Filler All other values reserved Patent Application Docket #15735/0073 Messacte Tube This 8-bit information element identifies the function of the message being sent. The message types are coded as follows:
F-BCCH Messages Code (binary-hez) DCC Structure 0010 0001 -Access Parameter 0010 OOIO -BMI Identity 0010 0011 -Cell Selection Parameter OOIO 0100 -Mobile Assisted Channel Allocation (MACH) 0010 0101 -F-BCCH Information Override 0010 1001 29 Registration Parameter 0110 1000 -E-BCCH Messages Code (binary-hez) Neighbor Cell 0001 0000 -Emergency Information Broadcast 0001 0001 -Go Away 0110 0000 60 SPACH Messages ' Code (binary-hex) Digital Traffic Channel Designation O1 I 1 0000 - 70 Analog Voice Channel Designation 0111 0001 - 71 2 5 Registration Accept 1100 0011 - C3 Registration Re3ect l I00 0010 C2 Patent Application Docket ,15735/0073 SSD Update Order 0000 1001 -Hale Station Challenge Order Confirmation 0000 1000 .

Unique Challenge Order 0000 O 111 -Point-to-Poiat Short Message Service R-DATA 0000 0 t 10 Point-to-Point Short Message Service R-DATA 0001 OOIO -Point-to-Point Short Message Service R-DATA Q001 001 I

biessage Waiting 0010 1000 -SOC / BSMC Message Delivery 0001 0100 -RACH Confirmation 0001 0101 -IS

Paramewr Update ' 1010 OOIO -AZ

SOC/BS:viC Identification 0001 0110 -Release 0001 1000 -Directed Retry 0110 0001 -6 i Go Away 0110 0000 -RACH Messages Code (binary-iiez) Page Respoax 0000 0010 -Origination (Setup) 0000 OI00 -Registration 1100 0001 Cl SOCIBSMC Identification Request 0001 0111 -SSD Update Order Confirmation 0000 OIOt -OS

Base Station Challenge Order 0000 0011 -Unique Challenge Order Confirmation 0000 0001 -OI

Point-to-Poiat Short Message Service R-DATA 0000 0110 -Patent Application Docket #15735/0073 Point-to-Point Short Message Service R-DATA 0001 0010 - 12 ACCEPT

Point-to-Point Short Message Service R-DATA 0001 0011 - 13 RFJEC?

SOC / BSMC Message Delivery 0001 1001 - 19 parameter Update Confirmation 0011 0100 - 34 SPACH Confirmation 0010 0000 - 20 MACH Report 0010 0110 - 26 S-BCCH Messages ~ (b~Y-~) Broadcast Information Message 0010 O1 I1 -n Patent Application Docket #15735/0073 Minutes This field indicates a time in minutes.
Model Number This field indicates the model number of the mobile station.
MPCI
The Mobile Protocol Capability Indicator is used to inform the BS of its processing capabilities according to the following table:
Value Function 000 Indicter EIA-553 or IS-54-A mobile station 001 Indicates EIA~'IA IS-54-B dual mode mobile station 010 Indicates IS-7X DCC mobile station 011 Indicates IS-54+ mobile station (DCC and IS-54-C~

100 Reserved 101 Reserved 110 Reserved 111 Reserved Note: IS-54 mobile station is a mobile-station which conforms to the protocols set forth in this specification.

Patent Application Docket #15735/0073 I~iS ACC, PWR
The mobile station access power level dictates the maximum output power that the MS may use when initially accessing the network.
MS ACC PWR

Code Value (ia dBm) OlOI 16 All other values a~ raenred Patent Application Docket #15735/0073 Neighbor Cell List lAnaloQ) This optional information element indicates the analog channels the mobile shall measure for purposes of cell reselection.
Field L.eagth (bits) parameter type 4 (OOIO) Number of analog neigbor cells ( =m) 5 CHAN 11 *m PCI 2*m Total = 9 + 13*m The PCI indicates the protocol capability of ,the analog neighbor cell. It is defined as follows:
PCI

Code Value 00 EiA 553 10 Reserved 11 Reserved ZO

Patent Application Docket #15735/0073 Neiqhbor Cell List ITDMA) This optional information element indicates the TE~iA
channels for purposes of cell reselection.
Field L,eagth (bits) Parameter type 4 (0001) Number of TDMA neighbor (=n) 5 CHAN 11 *a DVCC 8*a RESEL OFFSET 6*a SS SUFF 5*n DELAY 4'a HL FREQ 1*a C ELLTYPE Z*a Network Type 2*a MS ACC PWR 4*a RSS ACC MIN 5*a Total = 9+48'a N ote: The fields not defined within this s ection are defined under the corresponding IE.
DELAY

Code Value 0000 0 second 0001 ZO seconds 2 5 1110 280 seconds Patent Application Docket #i5735/0073 I 1111 I Reserved I
Number of Analog Neighbor Cells The number of neighbor cells that are of analog type.
Number of DCC Slots. This Freg The number of slots dedicated to DCC on this frequency according to the following table:
Value Fuactioa 00 Half rate DCC oa time slot 1 O1 Full rate DCC oa time slots 1, 4 10 Double full rate DCCs oa time slots 1, 4 gad 2, 5 (Note 1) 11 'Triple full rate DCCs oa time slots I, 4; 2, 5; gad 3, 6 (Note 1) NOTE I: Slots 1 and 1, 4 must be a master DCC while slots 2, 5 and 3, 6 must be slave DCCs with a master en the same frequency.

-.
Patent Application Docket #15735/0073 Number of E-BCCH
The number of contiguous dedicated E-HCCH slots per superframe (1 plus the value in this field).
Number of F-BCCH
The number of contiguous dedicated F-HCCH slots per superframe (1 plus the value in this field).
Number of Messaqes i0 This field indicates the number of messages waiting.
Humber of S-BCCH
The number of contiguous dedicated S-HCCH slots per superf rame .
Number of Skipped Slots The number of dedicated Skipped slots per superframe. See PCH Subchannel Selection.
Number of SMS Messages A variable to indicate the number of broadcast SMS
messages in this SMS frame (1 plus the value in this field) .
Number of Subchannels A variable to indicate the number of SMS subchannels being used by this DCC (1 plus the value in this field).

Patent Application Docket #15735/0073 Number of TDMA Neighbor Cells The number of neighbor cells that are of TDMA type.
OLC
The overload class (OLC)determines whether or not a mobile may make an origination on RACH. The mobile station must examine the value of the bit map corresponding to its internally stored access overload class assignment. If the identified OLC bit is enabled, the mobile may continue with an origination access.
Otherwise, the mobile may not make an origination access.
The recommended overload control bit assignments are:
Value Function 0000000000000000 Uniform distribution assigned to nonflaI
subscn'bers 0000000000000010 Uniform distribution assigned to normal subscn'bea 0000000000000100 Uniform distribution assigned to normal subscribers 0000000000001000 Uniform distribution assigned to normal subscn'bers 0000000000010000 Unifor m distribution assignod to normal subscn'bers 0000000000100000 Uniform distribution assigned to normal subscn'bers 2 0 0000000001000000 Uniform distribution assigned to normal subscn'bets 0000000010000000 Unifo rm distribution assigned to normal subscribers 0000000100000000 Uniform distribution assignod to normal subscn'bers 0000001000000000 Uniform distribution assigned to normal subscn'bers 0000010000000000 Test Mobiles OOOOl000U0000000 Emergency taobile 0001000000000000 Reserved Patent Application Docket #15735/0073 00 10000000000000 Reserved 0100000000000000 Reserved 1000000000000000 Reserved For more information, refer to EIA
Telecommunications Systems Bulletin No. I6 (March 1985), "Assignment of Access Overload Classes in the Cellular Telecommunications Services".
g.AG~',~,MODE
This infonaational element specifies the type of channel to be assigned to the mobile according to the following table:
Value Fuactioa Patent Application Docket #i5735/0073 PCH~D I SPLAC~iENT
The maximum number of times an expected page message can be displaced onto another downlink channel.
PDR~G
This flag indicates whether geographic registration is turned on or off. (As per IS-54B.) Periodic Registration This optional field indicates that periodic registration is used and also contains the specified periodicity in minutes.
Field Length (bits) Parameter type 4 (0001) Registiarion Periodicity in minutes 9 Patent Application Docket #15735/0073 Phase Length of Subch Cvcle A variable to indicate the number of SMS frames that make up 1 cycle (1 plus the value in this field).
Phase Number of Subch Cvcle A variable to indicate which SMS frame in the cycle is currently being broadcast.
This flag defines whether the mobile station shall use the privacy mode initially on the assigned digital IO traffic channel.
Primary Superframe Indicator This bit toggles to indicate if the current superframe being broadcast is the primary or secondary superframe within the hyperframe.~

Patent Application Docket (15735/0073 PUREG
This flag indicates whether power up registration is turned on or off. (As per IS-54H.) The random number stored by a mobile for use in selected authentication processes.
RANDBS
A random number generated by the MS that is used in the SSD Update Procedure.
DC
A number used to confirm the last RAND received by the MS.
RANDSSD
A random number generated by the MS that is used in the SSD Update Procedure.
RANDU
A random number generated by the HS that is used in the unique challenge update procedure.
R-Cause This information element (IE) is a 1-octet long, and is mandatory in the R-DATA REJECT message.
The following tables provide the R-Cause IE layout - and the cause values description.
Bits Octet 0 Cause 1 Patent Application Docket #15735/0073 coda Cruse Derc:ipcion DitsrtionDecittuBitury I

UnsaaiEned (unallocated) aumbar B MS 1 0000001 Call boated 8 MS l0 0001010 Shoat ttteaaage tnmfer rejected B -~ MS 21 0010101 Memory capacity ezceeded MS - B 22 0010110 Destination out oC aetvice 8 MS 27 0011011 Uttidentifed atbactsber B MS 28 0011100 Facility rejected B MS Z9 0011101 Unkao.vn aubseabar 8 ~ MS 30 0011110 Network out of order B -~ MS 3E 0100010 Tempotaty bouts B ~ MS 4l 0101001 CottEestioo B MS 42 01010!0 Reaouttea umvailabie, ttttspecified B - MS 47 0101111 Requetaed facility not impletneszud B ~ MS 69 1000101 Gtvalid ahott meaaa;e ttamfer tsfe~ace value B MS EI 1010001 lavalid tneaaaEa, unrpeei6ad B MS 93 1011111 Mandatory iafotmrtioa ele~nt ertot boot 96 I 100000 Meaaa Ee type oon-eor sot implemented 8 -~ M3 97 1100001 Z 0 Meaaase ttd cotnpaubls witb rhott afaaaEa B ~ MS 9E 1100010 trattder scats or meaaaEe type ooo-ezirtent or sot impiemanted tnfottnatioo aletnetrt ooa-existent or na implemetuedboth 99 I 100011 lavalid iafotttution eletrteot eootetus both 100 1100100 MessaEs as eott~aubk mith tds ahott messaEe botti 101 1100101 transfer rtats 2 5 Ftotoed actor, ttt>apxilied bob I I I to I
1 11 t IatacrvottietE, uesapeeitisd B MS 127 1111111 All other Yalues sn tssaYed.

Patent Application Docket X15735/0073 R-Data Unit The R-Data Unit IE contains the Higher Layer Protocol Data Unit. This IE is mandatory in a R-DATA
message. The IE has a variable length, up to 241 octets, the first octet sent being the length indicator.
Bits lactei Length Indicator I
(in octets) Higher Layer 2 Protocol Identifier Higher Layer 3 Protocol Data Uait t Higher Layer a Protocol Data Utut The Higher Layer Protocol Identifier field is coded as follows:
[[paste p.i32 I. jj Patent Application Docket #15735/00?3 This indicates whether a home mobile station shall register.
REG HYST
If a candidate DCC from the neighbor list has been examined and deemed the best choice for cell reselection and this candidate DCC requires registration, the MS
shall move to the new cell only after a signal strength difference of REG HYST dH has been obtained.
Value Funciioa 000 0 dB

001 2 d8 010 4 dB

011 6 dB

100 8 dB

101 10 d8 110 12 d8 111 m dB

Patent Application Docket #15735/0073 REGID Parameters This optional field contains information on the current REGID value and the time between stepping REGID.
The latter value is expressed in superframes.
Field L,eagth (bite) Paismeter type 4 (0010) ~eaistrat~on Type Used to indicate the type of registration the mobile is making according to the following table:
Value Fuaciioa 000 Power down 001 Power up 010 Geographic 011 Forced 100 Periodic 2 0 l0I _ Reserved 110 Reserved 111 Reserved Patent Application Docket X15735/0073 REG Period This optional field indicates that periodic registration is used and also contains the specified periodicity in units of 94 superframes (60.16 seconds).
Field L,eagth (bits) Parameter type 4 (OOOI) REGPER: Registration Periodicity is uaits 9 of 94 superframes REGR
This indicates whether a roaming mobile station shall register.
Request Number See IS-54H.
~ESEh OFFSET
The reselection offset value is used to increase/decrease the preference of a new candidate cell being considered for cell reselection.
RFSELECT OFFSET

Code Value (dB) Patent Application Docket #15735/0073 ~813 3 This 10 bit field contains the registration number that is used to define a particular mobile's virtual mobile location area (VMLA).
Field L,~agtt~ (bits) Parameter type 4 (0001) Number of RNUMs 6 RNUM (Note 1) 10 Note 1: Up to 63 instances may be sent.
RSS ACC MIN
This information element is used for the cell (re)selection process. It is the minimum received signal strength required to access the cell.
RSS ACC MIN

Value (dBm) Patent Application Docket #15735/0073 R-Transaction Identifier The R-Transaction Identifier is used to associate a R-DATA ACCEPT or a R-DATA REJECT message to the R-DATA
message being acknowledged.
The serial number flag indicates whether the mobile station sends the ESN message along with a registration, origination,; page response, unigue challenge order confirmation, or base station challenge order messages on the RACFi.
This flag defines whether the mobile station shall use the shortened burst initially on the assigned digital traffic channel.
SCANFREO
The default minimum required number of signal strength measurements per superframe for candidate DCCs in the neighbor list.
CC
This field defines the SAT color code to be used on the 'assigned analog voice channel.
Bit Pattern SAT Frequeacy 00 5970 Hz O1 6000 Hz 10 6030 Hz 1 I Reserved Patent Application Docket #15735/0073 Ir813 3 The station Class Mark denotes the powerclass, transmission capability and bandwidth of the MS.
Seconds of Day A sequential time-of-day counter in seconds, where 12:00:00 A.M. - Ø
~,SERV~SS
This infonaation element is used in the cell reselection process. It is the signal strength used to determine a threshold over which a neighbor cell qualifies for the service aspects of the cell reselection process.
Code Value (ia d8) Patent Application Docket #I5735/0073 SMS Message ID
A variable used to identify this unique SMS message.
SMS Message Length The maximum allowable length (in octets) of a L3 short message sent on the RACH according to the following table:
Value Function 000 MS initiated SMS aot allowed 001 3t octet tnazimum MS initiated RACH SMS

010 63 octet maximum MS initiated RACH SMS

011 127 octet maximum MS iaitiatod RACH SMS

100 Reserved 101 Reserved 110 Reserved 111 Limited only by L2 format SOC & BSMC ID Control This flag indicates whether or not the MS may request the HS SOC & HSMC ID. , Software Vintage This indicates the software vintage for the mobile.

Patent Application Docket #15735/0073 >r8133 SSD Update Status Used to indicate the success, or reason for failure, of an SSD Update Order according to the following table:
Value Fuactioa 00 SSD Update Suc: essfull OI SSD Update Failed due to AUZ'HBS mis-match SSD Update Failed due to tiaseout 11 Reserved The minimum signal strength deemed sufficient for a new candidate DCC to be considered for cell reselection.
SS SUFI

Value 00000 -113 dBm 00001 -111 dBm 11110 -53 dBm 11111 -51 dBm Patent Application Docket #15735/0073 Subchannel Number A variable to identify which subchannel is currently being broadcast.
SYR>rG
The system based registration flag indicates whether or not the mobile is to geographically register when the mobile enters a new system identification area.
Text Message Data Unit The Text Message Data Unit is a variable length IE
which contains the message to be broadcast. Only one instance of this IE is allowed per message. The following table provides the Text Message Data Unit description.
Bits Octet Length Indicator I
(ia octets) Short Message 2 character I
(IAS) __ f Short Message I+L
character 253 (IAS) _ L rain.
= 0 _ L tttax.
. _ Patent Application Docket #15735/0073 VMAC
This field indicates the power level to be used on the assigned analog voice channel. The coding is according to IS-54B Table 2.1.2-i.
VP MEM
The Voice Privacy, Message Encryption Mode bit is used to request a call mode preference.
SMS Hicther Layer Operation The Higher Layer Protocol Data Unit field in the R-Data Unit is used to carry the SMS application layer messages.
Message Set The SMS application messages are defined in this section. These messages are transported on the air interface via the layer 3 R-DATA message, or more specifically within the R-Data Unit Information Element.
For every SMS application message, 2 tables are provided: the first one provides the Information Element included in each message and the second provides the message layout for the mandatory IE.
The maximum length of a SMS application layer message shall not exceed 239 octets in order to fit within the R-Data Unit IE.
The SMS application layer messages are as follows.

Patent Application Docket #15735/0073 SMS DELIVER
This SMS application layer message is used in support of MS tenainated SMS delivery from the network to the MS.
The following tables provide the message content and the message layout for the mandatory IE.
Information Element Direction Type Length Message Type IndicatorB - MS M 3 bits Reply Option B -~ MS M 1 bits (RO) Urgency Indicator (Un B - MS M 2 bits Privacy Indicator (Pi)B - MS M 2 bits Message Reference B 1 MS M 6 or 13 bits User Data Unit B - MS M 2 * octets User Originating AddressB 1 MS O (Note 2 - *
1) octets User Originating SubaddressB - MS O (Note 2 - *
2) octets Message Center Time B - MS O (Note 8 octets Stamp 3) Note i: May be included 2 0 by the originating user or the Message Center to identify the originating user.
Note 2: Included if the originating user indicated its subaddress.
Note 3: The Message Center may include a time stamp at which the message was received at the Message Center.

Patent Application Docket #15735/0073 Bits Octet spare O/1 Message RO 2 (Note Reference l) (MSB) ext I Message 2a (Note Reference 1) (LSB) ext User 3 Data Unit User etc Data Unit Note I:
If the message reference value exceeds 63, bit of octet is set to 0, and octet Zs is pttseat.
If the message reference value is Iess than 64, octet ?s is not present, and bit of octet is set to I.

Patent Application Docket #15735/0073 SMS SUBMIT
This SMS application layer message is used in support of MS originated SMS.
The following tables provide the message content and the message layout.
Infocmatloa Eleateat Referents Dimtioo 'Type Leagih Message Type MS -~ M 3 biu B

Indicator (MTI) Urgency Indicator B -r MS M 2 bits Privacy Indicator B -~ MS M 2 bits rnn Message Reference MS .-i M 6 or 13 B bits Dtiivery Receipt MS -~ M 1 biu B

(DR) User Destination MS -~ M 2 - octtts Addttss B

User Data MS -~ M 1 - octeu Unit B

User Destination MS -i O (Note 2 - octets B 1 ) Subaddrrss Validity Period MS -~ O (Note 2 or 8 B 2) octas Deferred Delivery MS -~ O (Note 2 or 8 B 3) octets taste Note 1: Included is the event that destination user has a subaddrGSS.

Note 2: Included ao indicue to the Message Cencu the validity of a MS submitted short message.

Note 3: Included to indicate to the Message Center the time when a MS

submitted shoot tn shall be delivered.

Patent Application Docket ,15735/0073 Bits 0 DR UI 0 MTl 1 spare 0~1 Message 0 2 (Note ~ Reference spy 1) ext (MSB) 1 Message 2a (Note ext Reference 1) (LSB) User 3 Dan Unit U~
Data Uait Note 1:
If the message refetstxe value exceeds 63, bit of octet Z
is set to 0, and octet 2a is present.
If the message reference value is less tlsaa 64.
octet 2a is not present, and bit of octet is set to 1.

SER ACKACK
This SMS application message is sent by the MS user in response to a SMS DELIVER message with the Reply Option IE indicating that User Acknowledgment is required.
The following tables provide the message content and the message layout for the mandatory IEs.
formation ~emeat Refa~e Disecdoa T)'Pa Ty~ MS ~ B M 3 bits Response Code MS --~ M 4 bits B

(RC) M~ ~ ~ ~ ~ B M 6 or 13 bits Uses Data MS -i B M 1-' Uait User Dctut~azioa MS -~ H O (Note 2 -' octets Address 1) Uses Drsrinatioa MS --~ O (Note B 2) Subladdsess ded if the l User I Origination 1 address was included in the SMS

u R message nc to be : 'user Note adcaowiedged".
DELIVE

Note 1 May included be if the Uses Origination subaddrest was included is the w ~1I~ r,c t nrsa ....~er m He "user acknowiedsted Patent Application Decket ,15735/0073 ir8133 Bits Octet Response 0 MTI 1 Code ~

sP~

dl Mesuge 0 2 (Note Reference 1) (MSB) ext spare 1 Message ?a (Note Reference 1) (ISB) e:tt User 3 Data Unit User esc Dan Unit Note I:
If the message c~efa~ence value.tatceeds 63, bit of ocsa is set to 0, and octet Za is ptsseat.
If the mGSSage ctfe:znce value is kss than 64, octet 2a is not present, and bit of octet is sa to I.

Patent Application Docket #15735/0073 ~SMS FEAT CTRL REQU
This SMS application layer message is used to allow the MS user to control the SMS application features are controlled. The Feature Parameter IE and the Feature Status IE are associated with the Feature ID IE.
1 ~ ~forllts~0n Element Refereaae Dircc:ion Type Length ' Message Type MS-rB M 3 bits Indicator -' (M'II) N~~' of feadus MS-~B M ~ 3 bits se:

. MS-iB M (Note 2 -' oae:s t) Note 1: The Number of feature su indicate the number of instances of the Featstre sea IE.

gib Ocist g 7 6 5 4 3 2 1 -2 5 Number 0 MTI 1 of 0 Feature spare xt Feature set I.
octet I

~
~
I.
octet Patent Application Docket #15735/0073 SMS FEAT~CTRL~STATUS
This SMS application layer message is used to allow the MS to receive information regarding its SMS
application features status.
Information Element Diroctioa Type Length Message Type Indicator B-MS M 3 bits (MTn Number of feature set B-rMS M 3 bits Feature set B1MS M 2 - octets (Note 1) Note 1: The Number of feature xt indicates the number of iastaacrs of the Feature set IE.

Bits Octet Number of Feature 0 MTI 1 set 0 spare Feature set 1, 2 octet t Feature set 1, 3 octet 2 Patent Application Docket #15735/0073 Information Element Description The following table provides the complete list of IEs defined at the SMS application layer.
Information Element Informationement Identifier El (IEI) MSS B B~ MS
bits bits Message Type Indicator a/a als Deferrod Delivery Tithe 0 0 1 0 a/a Delivery Receipt a/s a/a Feature set n/a a/s Massage Center Time Stamp a/a 0 0 0 1 Message Reference n/s n/a Number of Feature set n/a a/a Privacy Indicator a/s ala Reply Option ~a ~a 1 5 Response Code nla nla Urgency Indicator nla a/a Uxr Data Utut n/a nla User D~iaatioa Address nla n/a User Datiastioa Subaddress 0 0 1 1 a/a 2 0 Uxr Originating Addttss ala 0 1 0 0 User Originating Suhaddres: da 0 1 0 1 Validity Period 0 I 1 0 da All other IEI values are tz~saved.

Patent Application Docket (15735/0073 ~essaae Tme Indicator The Message Type Indicator is a 3-bit field located within bits 1,2 and 3 of the first octet of each SMS
application messac~P Mmr ;~ ~~~o~ as follows:
Biro M~g~
r 3 2 1 B -> MS MS -~ B

0 0 I Rexrvod Rexrved '0 1 0 Reservod SMS USER ACK

0 1 I SMS FEAT_CTRL SMS FEAT_CTRL_REQU
STATUS

All other values are t~sa-smd.

pPfa,-red Delivery Time The Deferred Delivery Time is an optional IE which is included in a SMS SUBMIT to allow the message center to deliver the message at a later time.
The Deferred Delivery Time field is given in either integer or semi-octet representation. In the first case, the Deferred Delivery Time comprises 2 octets, giving the relative delivery time, counted from when the SMS SUBMIT
is received by the Message Center. In the second case, the Deferred Delivery Time comprises 8 octets, giving the absolute time for the submitted short message to be delivered.

Patent Application Docket (15735/0073 BI b 0 FormatDeferred !
0 = Delivery 0 0 Time Reserved 0 !

Lifocmatiop Element Identifier Deferned 2 Delivery Time -relative Patent Application Docket #15735/0073 Deferred Delivery Information Element Content, 8 octet format Hits Octet 0 0 Form DefetTr~d 1 0 a Delivery Reserved 1 Time Information Elesaeat Identifier Deferred 2 Delivery Tithe -absolute Deferred 3 Delivery Time -absolute Deferred 4 Delivery Time -absolutes Deferred 5 Delivery Time -absolute Deferred 6 Delivery Time -absolute Deferred 7 Delivery Time -absolute Deferred 8 Delivery Time -absolute Patent Application Docket X15735/0073 peliverv Receipt The Delivery Receipt is used in a SMS SUBMIT message to request the message center to provide a delivery receipt to the MS upon delivery to the destination user of a MS
originated short message.
Bit value 0 No delivery receipt required 1 Delivery receipt required.
Feature set The Feature set IE is used to control or provide status regarding specific features. At least one instance of feature set is mandatory when SMS FEAT CTRL REQU or SMS
FEAT_CTRL_STATUS message is sent. The Feature Parameter and the Feature Status are associated with the Feature ID.
Feature Set Information Element Content 0 ~m pad 0 2 spare Patent Application Docket #15735/0073 The Feature ID field is used to identify the feature associated with a given instance of Feature Status and Feature Parameter within the SMS FEAT CTRL REQ and SMS
FEAT CTRL STATUS messages. The Feature ZD field is coded as follows:
Bit 4, 3 2 1 All other values are reserved.;
The Feature Parameter ffield is used in a SMS FEAT
CTRL STATUS and SMS FEAT CTRL REQU to identify the feature parameter associated with a given Feature ID. If the Feature ID indicates SMS, the feature parameters are defined as follows:
Hit 0 0 0 Accept All Messages Z0 0 0 1 Store All Messages 0 1 0 Accept Selected Messages All other values are reserved.
The Feature Status is a 2-bit field used to indicate the status (in SMS FEAT CTRL STATUS message) or the requested feature status (in SMS FEAT CTRL):
Bit 0 0 Feature Parameter OFF
0 1 Feature Parameter ON.
All other values are reserved Patent Application Docket #15735/0073 Message Center Time Stamp The Message Center Time Stamp is optionally included in a SMS DELIVER message to indicate the time when the Message Center received the short message.
The Message Center Time Stamp IE is given in semi-octet representation, and represents the time in the following way:
8 tts Octet 0 Massage 1 0 Center 0 Time 0 Stamp Reserved 0 Information Element Identifier Year Year 2 digit digit Month Month 3 digit digit Day Day 4 digit digit Hour Hour S
digit digit Minute ll~finute 6 digit digit Second Second 7 digit digit Time Time 8 zone zone digit digit ~

NOTE: Digit 1 is the most significant digit. E.g., if Year digit I = 9 and Year digit 2 = 3.
then the year is 93.

Patent Application Docket #15735/0073 Mc~c~aQe Reference The Message Reference (MR) IE gives an integer representation of a reference number for the short message.
If the MR value is less than 64, only the 6 bit field is used for the MR. If the MR value is greater than 63, but less than 8192, the 13 bit ffield is used for MR.
In MS terminated SMS, the MR is used to associate a User Acknowledgment message to the previously sent SMS
DELIVER message to be "user acknowledged" . The MR sent in a SMS USER ACK message shall be the same as the one received in the SMS DELIVER message being "user acknowledged".
Number of Feature Set The number of feature set identifies the number of instances of Feature set IE present in a SMS
FEAT CTRL REQU or a SMS FEAT CTRL STATUS message.
Bit 0 0 0 Reserved 0 0 1 1 Feature set 0 1 0 2 Feature set 1 1 0 6 Feature set 1 1 1 7 Feature set Patent Application Docket #15735/0073 _Privacv Indicator The privacy indicator is used in the SMS DELIVER and SMS SUBMIT messages to allow the sending user to set a level of privacy to the message being sent.
A mobile station receiving a SMS DELIVER may process the message differently based on the level of privacy (e.g. added protection by using different passwords to be entered by the mobile user to read the incoming SMS
DELIVER messages).
Bits 0 0 not restricted (privacy level 0) 0 1 restricted (privacy level 1) 1 0 confidential (privacy level 2) 1 0 secret (privacy level 3) Reolv Option The Reply Option IE is a 1-bit ffield mandatory in SMS-DELIVER message to indicate if user acknowledgment is-requested. This bit is located in bit 0 of the second octet of the SMS-DELIVER message.
0 User acknowledgment not required 1 User acknowledgment required Response Code The Response Code is used to carry the MS user response to a previously received short message.
The Response Code is a 4-bit length mandatory IE
used in a SMS USER ACK message. The Response Code values are Message Center specific.

Patent Application Docket #i5735/0073 ~8133 Urcencv Indicator The Urgency Indicator IE is used to allow the sender of a short message to provide levels of urgency to a short message. For example, the MS could use the UI to provide different user notification. The UI is a mandatory 2 bit IE included in SMS DELIVER and SMS SUBMIT
messages. The coding of the UI is as follows:
B its 0 0 bulk 0 1 . normal .
1 0 urgent 1 0 very urgent tlse Data Unit The user data unit IE is used to carry the user text message.
---0 Btb ~ .

2 g 7 6 5 4 3 2 1 Length t Indicator (in octets) 0 Encoding 2 2 5 0 identifier Sue' Usa Data User "
Dasi Patent Application Docket #15735/0073 The User Data represents the user message, and is encoded as specified by the Encoding identifier as follows:
Hits 5 0 0 0 0 1 IAS, as specified by table 11 of CCITT
rec. T.50 0 0 0 1 0 User specific All other values are reserved.
jjser Destination Address The purpose of the User Destination Address information element is to identify the user destination address of a MS originated short message (i.e., SMS SUBMIT message) The maximum length of this information element is network-dependent.

Patent Application Docket #15735/0073 rr~.e,.. rlnctinal~inn TnfnTmatlan Element (TBCD COdlnQ) Bits Octet Length of destination 1 address contents Address coding Type Numbering 2 = 0 of plan number ideadfkatioa 2'ad digit 1'st 3 digit . ~ ' (2n-4)'th digit (2n-5)'th a or Filler (for digit odd) rT~.... "e~+.;.,~~;~" n,;~,-o~c Tnf~rmation Element (IA5 coding) Bits Octet g 7 6 5 4 3 2 1 Length of destination 1 address contents Address coding Type Numbering = 1 of plea number ideatificafton 1'st digit/cbaracter n'tb digit/character n Type of number (octet 2) (see Note 1 Bits Patent Application Docket #15735/0073 0 0 0 unknown 0 0 1 international number (see Note 2) 0 1 0 national number (see Notes 2, 4, 5, 6) 0 1 1 network-specific number (see Note 3) 1 0 0 subscriber number (see Notes 2, 6) 1 1 0 abbreviated number 1 1 1 reserved for extension All other values are reserved.

NOTES:

1. For the definition of "international, national and _ subscriber number", see CCITT Recommendation 1.330.

2. Prefix or escape digits shall not be included.

3. The type of number 'network-specific number' is used to indicate administration and service number specific to the serving network.

4. For short message submission between the United States and other countries within world zone 1 (see CCITT Recommendation E.163 for assignment of country codes), where the numbering plan identification is "ISDN/telephony numbering plan", "type of number"
is coded to "national number".

5. For numbers that contain service access codes (e.
g., "700", "800", 900"), "type of number" is coded as "national number".

6. Service codes in the "N11" format (e.g., "911", "411") are unique and may be sent using either the ' "subscriber number" or "national number" codepoints.

Numbering Plan Identification (octet 2) Patent Application Docket X15735/0073 Numbering plan (applies for type of number = 000,001,010 and 100) Bits 0 0 0 0 unknown 0 0 0 1 ISDN/telephony numbering plan (CCITT
Recommendations E. t64 and E.163) 0 0 1 1 data numbering plan (CCITT Recommendation X.121) 0 1 0 0 telez numbering plan (CCI'IT Recommendation F.69) 1 0 0 1 private numbering plan 1 1 1 1 reserved for extension Alt ocher values us resernd Number digits (octets 3, eta) Patent Application Docket #15735/0073 'Ibis field is coded'IBCD or lAS, ac indinted by the Address Coding field (octet 2, bit 8). It'I~CD is used, the coding is as follows Binary Value Digit pppp Filler All other values are res~red Patent Application Docket X15735/0073 ~8133 iTcar Destination Subaddress The purpose of the user destination subaddress information element is to identify the subaddress of the destination user subaddress of a short message. For the definition of subaddress, see CCITT Recommendations 1.330 and 1.334.
User Destination Subaddress Information ~lement g lue 0 Destination 1 0 user 0 subaddress Reserved 0 .

Information Elemerst Idea~er Length 2 of user destination subaddress contents 0 Type odds 0 3 of 0 subaddress 0 RSYD even Reserved indica Subaddrrwss 4 information etc Patent Application Docket #15735/0073 Type of subaddress (octet 3) Hits NSAP (CCITT Recommendation X.213 or ISO 8348 AD2) user-specified All other values are reserved.
Odd/even jndicator (octet 3) Bit even number of address signals odd number of address signals NOTE: The odd/even indicator is used when the type of subaddress is "user-specified" and the coding is TBCD.
Subaddress information (octet 4, etc.) - The NSAP address shall be encoded using the preferred binary encoding specified in CCITT Recommendation X.213 or ISO 8348 AD2.
When the AFI=50 (encoded in BCD as 01 010000), IA5 characters are encoded as specified in Table 11 of CCITT
Recommendation T.50 or ISO 646 with the eighth bit set to Patent Application Docket #15735/0073 zero. When AFI=51 (encoded in BCD as 0101 0001), ASCII
characters are encoded as specified in ANSI X3.4 with the eighth bit set to zero.
For a user-specified subaddress, the field is encoded according to the user specification, subject to a maximum length of 20 octets. When interworking with CCITT Recommendation X.25 networks, TBCD coding should be applied.
rt~pr Originating Address The purpose of the user originating address element is to identify the originating address of a short message.
The maximum length of this information element is network-dependent.

Patent Application Docket X15735/0073 User Originating Address Information Element coding ) g Octet gi g 7 6 5 4 3 2 1 0 User 1 0 Originating 0 Addms Reserved 0 Information Element Identifier Length 2 of user originating addtsss contents AddressType Numtxring.ptan 3 of codingnumbs ideatification =1 I'st address cttasacrer Hits n n th addras character unknown international number (see Note 2) national number (see Notes 2, 4, 5, 6) network-specific number (see Note 3) subscriber number (see Notes 2, 6) abbreviated number reserved for extension All other values are reserved.

(TBCD

Patent Application Docket #15735/0073 NOTES:
1. For the definition of "international, national and subscriber number", see CCITT Recommendation 1.330.
2. Prefix or escape digits shall not be included.
3. The type of number 'network-specific number' is used to indicate administration and service number specific to the serving network.
4. For SMS transaction between the United States and other countries within world zone 1 (see CCITT
Recommendation E.163 for assignment of country codes), where the numbering plan identification is "ISDN/telephony numbering plan", "type of number" is coded to "national number".
5. For numbers that contain service access codes (e. g., "700", "800", 900"), "type of number" is Coded as "national number".
6. Service codes in the "Nil" format (e.g., "911", "411" ) are unique and may be sent using either the "subscriber number" or "national number" codepoints.
Numbering Plan Identification (octet 3) Numbering plan (applies for type of number = 000, 001, 010 and 100) Bits 0 0 0 0 uakaown 0 0 0 1 ISDN/telephoay numbering play (CCTIT
Recommeadatioas E.164 aad E.163) Patent Application Docket #15735/0073 0 0 1 1 data numbering plea (CCTIT Rxommeadatioa X. l21) 0 1 0 0 teiez numbering plea (CCITT Recommendation F.69) 1 0 0 1 private numbering pica 1 i 1 1 reserved for extension All other values are reserved.
Digits (octets 3, etc.) This field is coded TBCD as follows:
Binary Value Digit 1.0 0000 Filler 1001 - _ All other values reserved Patent Application Docket #15735/0073 User Originating Subaddress The purpose of the user originating subaddress information element is to identify the subaddress of the originating user subaddress of a short message. For the definition of subaddress, see CCITT Recommendations 1.330 and 1.334.
User Originating Subaddress Infonaation Element B ib Octet g ~ 6 5 4 3 2 I

0 User 1 0 originating 0 subaddress Reserved 0 0 Information eiemeat identifier Lengtf~ 2 of user ocigiaatiag subaddress conuatt 0 Type odd/ 0 3 of 0 subaddress 0 RSVD e"~ Reserved . indica Subaddress 4 information etc Patent Application Docket #15735/0073 Type of subaddress (octet 3) Bits 0 0 0 ~p (CCITT Recommendation X.213 or ISO 8348 AD2) user-specified All other values are reserved.
Odd/even indicator (octet 3) Bit o e~,sl number of address signals 1 odd number of address signals NOTE: The odd/even indicator is used when the type of subaddress is "user-specified" and the coding is TBCD.
Subaddress information (octet 4, etc.) The NSAP address shall be encoded using the preferred binary encoding specified in CCITT Recommendation X.213 or ISO 8348 AD2.
When the AFI=50 (encoded in BCD as O1 010000), IA5 characters are encoded as specified in Table il of CCITT
Recommendation T.50 or ISO 646 with the eighth bit set to Patent Application Docket #15735/0073 zero. When AFI=51 (encoded in BCD as 0101 0001) , ASCII
characters are encoded as specified in ANSI X3.4 with the eighth bit set to zero.
For a user-specified subaddress, the field is encoded according to the user specification, subject to a maximum length of 20 octets. When interworking with CCITT Recommendation X.25 networks, TBCD coding should be applied.
Validity Period The Validity Period IE is used in MS originated short message to indicate to the Message Center the time after which the message could be deleted if the message was not delivered to the destination user.
The Validity Period field is given in either integer or semi-octet representation. In the first case, the Validity Period comprises 2 octet, giving the length of the validity period, counted from when the SMS-SUBMIT is received by the Message Center. In the second case, the Validity period comprises 8 octets, giving the absolute time of the validity period termination. The Validity Period Format IE indicates the format used to code the Validity Period.

Patent Application Docket #15735/0073 Validity Period Information Element Content, 2 octet f onaat Bi ts Octet 0 FormatValidity 1 0 Period Reserved = 0 0 l Information Element Identifier _ idity 2 val Period -relative ' Validity Period Infortnatlon Element Content, 8 octet format Bi ts Octst 0 FormatValidity 1 0 = Period 0 ( 0 -Reserved 1 I

Information Dement Identifier Vali dity 2 Period -absolute Validity 3 Period -absolutt Validity 4 Period -absolutt Validity 5 Period -absolute Validity 6 Period -absolute Validity 7 Period -absolute Validity 8 Period -absolute Validity Period - Relative - Field Coding Vp Decimal Value Validity Period Value 0 to 143 (VP + I) x 5 minutes (i.e. 5 minutes intervals up to l2 hours) 2 0 144 to 167 I2 hours + ((VP - 143) a 30 minutes) 168 to 196 (Vp - 166) x 1 day 197 to 255 (VP -192) x 1 woeic The Validity Period absolute is coded as the Message Center Time Stamp IE.

Patent Application Docket #15735/0073 Identification (f Mobile Station Identification (MSID) its mobile stations may be identified using 4 different numbering methods:
1. 34-bit IS-54B MIN
2. 24-bit IS-54B MINI
3 . I~
4 . Z<''SI
34-Hit IS-54B MIN
[[See IS-54B.
24-Hit IS-54H MINI
See IS-54B.
[[
Definition The International Mobile Subscriber Identity (IMSI) is a number with a maximum length of 15 decimal digits, composed as follows (D = a decimal digit) [[paste in fig pg. 159]]
MCC
Mobile Country Code MNC

Patent Application Docket X15735/0073 y obile Network Code MSIN
A~obile Station Identification Number NMSI
National Mobile Station Identity IMSI
International Mobile Station Identity The MCCs are defined in Annex A of E.212. The MCC
identifies uniquely the country of domicile of the MS.
All MCCs are of 3 digits length. The United States and Canada fall within Zone 3 of the Annex. Code 302 is reserved for Canada; Codes 310-316 are reserved for the United States.
The MNC is used to uniquely identify the home Public Land Mobile Network (PLMN) of the MS. A PLMN is characterized as a mobile network served by one HLR. The MCC and MNC is thus the global address of the MS's HLR.
The IMSI is not used as a dialed number; and there is typically only one IMSI per NAM.

Patent Application Docket X15735/0073 Backward Compatibility with MIPt There is a need to be backward compatible with IS-548 type of MIN. For this reason, systems using IS-548 MIN operation can be supported if:
the MCC indicates a subscriber from Word Zone 3 (US
& Canada), and the first two (decimal) digits of the network code are 00, then the remainder of the number can be assumed to be a conventional 10-digit MIN, & the appropriate translations applied for addressing in the network.
IMSI Encoding The IMSI is encoded as a 50-bit fixed length field.
MCC (3D) MNC (2D) MSTr1 (IOD) 3zz NMSI (12D) IMSI ( 15D) The MSIN represents the 10 decimal digits used to derive the 34-bit IS-54B MIN. _ The 15 decimal digits are then divided in 5 groups of 3 digits each. Then, each resulting 5 decimal digit groups is expressed as the corresponding decimal number (0 <= did jdk <= 999, i=j+l, j=k+1, k=1, 4 "7,10,13 ) coded in 10 binary bits using a normal decimal to binary conversion.( 0 to 999).

Patent Application Docket #15735/0073 IMSI
MCC MNC _ MSBY _ dl5 did d13 d12 dll d10 d9 d8 d7 d6 d5 d4 d3 d2 dl biu 10 biu l0 bits 10 biu 10 biu 50 biu The Temporary Mobile Station Identity (TMSI) may be a 20-bit MSID which is assigned dynamically by the network to the mobiles. The TMSI may be used by the network to page or deliver a message to a mobile on the SPACH.
Mobile ESN
As per IS-548.
System Identification Base stations may broadcast values indicating their identities with respect to: country, SID, network type, and, if they are not public, private system ID.
They may optionally broadcast their system operator code and HS manufacturer code. These optional values may be available by specific query or possible broadcast of these values. These optional values will be needed only when special proprietary signaling is requested which the BS may be able to deliver, or for access to local private networks.
The identities structure will support nationwide private system identification as well as local private system identification. Supervision of the numbering systems will be handled differently for local and nationwide identity allocation.

Patent Application Docket #15735/0073 ~8133 A country code may be supported to allow international specification use and international roaming.
Information Element Definition Type Bits SID System Identification M 15 - per FCC

in IS-54 Network Type pub/priv/semi-privldomesticM 2 - set by System Operator Country Code Country Code - same M 10 as E.212 PS ID set Private System IdentificationO 4 +
- per Operatorsll'BD 16*n SOC System Operator's CodeO 12 BSMC Base Station Manufacturer'sO 12 Code Patent Application Docket #15735/0073 The present 15-bit SID structure, as defined in IS-548, may be used.
Network Ty~e_ Two bits may be used to identify the network type.
Examples of network types are: Public, Private, Semiprivate and Domestic.
The private system may only be accessible to specific mobiles.
The semiprivate system may transmit a private identification number (PSID) but may be open for public use. This allows private users to favor the cell while also permitting public use.
A domestic system may be a "home base station,"
e.g., a cordless phone.
Network Type Public Semiprivate 01 prig 10 2 5 DOmGStic 11 Patent Application Docket #15735/0073 Country Code The country codes described in E.212 may be broadcast on the DCC.
Private System ID
The private System ID may be used to keep MSs from camping on a private system for which they do not have access. When the MS detects a private system ID not within its private system ID list, the MS shall not attempt to camp or register in the private system.
If a cell is marked as public, the cell may broadcast the PSID of "0" or no PSID at all.
PSID Match A PSID will be assigned by the system operator to a particular private system. It is the responsibility of the operator to assign the same PSID to the same private network in different SID areas.
A section of the PSID range is reserved for nationwide use. These assignments will only be used in the case that different operators will be handling a particular private system.
If the PSID is in the nationwide range, the mobile may not need to check the SOC combination for a match and can use just the PSID and country code. This would be the case when multiple operators are used to give nationwide coverage for a private system.
The PSID, Country Code, and SOC combination may be used by the mobile to verify its access rights to that BMI.

Patent Application Docket #15735/0073 The HMI may, at its discretion, verify that the particular mobile has access to a particular cell through an extension or enhancement to the existing registration/authentication procedures.
PSID Allocation Coding (hez) Unused Nationwide assignment (Need external0001 - 07FF
Management of codes) Assignments made by Operator 0800 - FFFF

Mobiles may have the capability to store multiple PSID
and SOC combinations.
Multi Personality Base Station A base station serving more than one private system may broadcast the PSID of each private system that it is serving. The number of PSIDs that are being broadcast is identified by the Number of PSID field.
Field Parameter typo 4 (0001) Number of PSID (note t) PSID 16#a (n=1 to 16) 2 5 Note: 'Ibe number of PSID in this set is 1 plus the value of this field.

Patent Application Docket X15735/0073 System Operator Code ISOCI and Base Station Manufacture Code (HSMC1 In order for an MS to acquire the services offered by a specific system operator or a specific vendor's base station, the SOC and the HSMC may be verified by the MS.
The SOC may also be used by a mobile to uniquely identify a local private system.
Example of a SMS Message Delivery (BMI l~ MS) c ne This example is provided for illustration only.
It provides a brief example of a MS terminated SMS
without MS user acknowledgment.
63 Octet Character Message Delivery Consider the following text message to be sent to the MS:
"Votre rendez-vous de cet apres-midi est cancelleil.
2 0 Sa1 a t, Eri c"
This message is 63 character long. The SMS application layer SMS DELIVER message sent by_ the message center will be as follows:

Patent Application Docket X15735/0073 Example of a SMS DELIVER Message Format Information Element Type Length Description Message Type Indicator M 3 bits Part of the mandatory first (Mm octet Reply Option M 1 bit Part of the mandatory first (RO) octet Urgency Indicator M 2 bits Part of the mandatory (Un first octet Message Reference M 1 octet Mandatory octet User Data Uait M 65 octets Tent taessage User Originating Address O 7 octets Assumed to be 7 digit number, coded TBCD

User Originating Subaddress O 0 octet Not present Message Center Time O 0 octet Not prGSeat Stamp total = 74 octets The SMS DELIVER is then encapsulated in a layer 3 message at the message center and sent to the BMI. The BMI
receives the layer 3 message from the message center, and will format a layer 3 R-DATA message to be delivered to the MS. The R-DATA message is:

Patent Application Docket #15735/0073 Example of a R-DATA Message Format Information Element Type Length Description (octets) Message Type M I Mandatory first octet R-Transaction IdentifierM 1 Mandatory second octet R-Data Unit M 76 SMS DELIVER
encapsulated within this IE

Message Center OriginatingO 0 Assumed to be Address not present Total 78 octets Therefore, 77 octet layer 3 message will be transmitted to the MS over the air interface. The initial sender text message was 63 octets, and 7 octets Were added to identify the originator (70 octets total).
therefore 8 octets are present as overhead:
1 octet for R-DATA message type 1 octet for R-Transaction Identifier 2 octet overhead in R-Data Unit (1 for length indicator 1 for higher protocol identifier) 2 octet header in SMS DELIVER message 2 octet header in User Data Unit IE (length indicator and encoding identifier) Assume that the MS has received and accepted the R-DATA message. The MS will then return a layer 3 R-DATA
ACCEPT message to the BMI. This message is 2 octet long Patent Application Docket X15735/0073 ( 1 for layer 3 message type, and 1 for R-Transaction Identifier) .
This layer 3 acknowledgment will be used by the BMI
to provide a SMS terminal acknowledgment to the message center.

OCT 19 '94 01:57PM BDS&M
P.2 The foregoing description has generally referred to, for example, mobile and base station communications without describing such stations per se. Accordingly, the following description is intended to provide an example of such mobile and base stations in general with respect to Figure 38.
Figure 3$ represents a block diagram. of an exemplary cellular mobile radiotelephone system according to one embodiment of the present invention which can be used to implement the foregoing. The system shows an exemplary base station 110 and a mobile 120. The afore-described message signalling between brio and mobile stations Can be performed using these, or other, apparatuses. The base station includes a control and processing unit I~8 which is connedted tc the M.~C 1~0 which in turn is c~orlne~tgd to the public switched t~lephon~ notwark (not shown).
The base station 110 fog a cell in~lud~s a plurality of void channels handled by voice channel transceiver 150 which is controlled by the control and processing unit 130. Also, each base station includes a central channel tran~eiver 160 which may bo capable of handling more than one control channel. The control channel transceiver 160 is controlled by the control and processing unit 130. The control channel transceiver 160 broadcasts control information aver the control channel of the base station or cell to mobiles lockexl to that control channel, Tlie v8i~ eharlflel tiTdtisCelvCr broadc8~ts the traffic 9r voice Channels which can include digital control channel location Information as described previously.
When the mobile 120 first enters the idle mode, It periodically scans the cantrnl channels of base stations like base station l 10 to determine which cell to lock on or camp to.
The mobile i20 receives the al5sblute alld xi~lative information bmadcaat on a centrvl chas~nal at its voice and control channel ti~isdewgl' 1'~0. Then, the procCSSing uilit 180 evaluates the received control channel information which includes the charaetcristics of the candidate cells and determines which cell the mobile should lock to. The received control channel information not only i~oludes absolute information concczning the cell with which it is associated, but else contains relative information concerning other cells proximate to the cell with which the control channel is associated. TheSt aldjaCellt Cells ate periodiC~lly s~~111~d while monitoring the primary control channel to determino if there is a more suitable G~tl~l~~i~=
256 a Patent Application Docket #15735/0073 The foregoing detailed description shows only certain particular embodiments of the present invention.
However, those skilled in the art will recognize that many modifications and variations may be made without departing substantially from the spirit and scope of the present invention as discussed and illustrated herein.
Accordingly, it should be clearly understood that the form of the invention described herein is exemplary only and is not intended to limit, in any way, the scope of l0 the invention as defined in the following claims.

Claims (23)

THE EMBODIMENTS OF THE INVENTION IN WHICH AN EXCLUSIVE
PROPERTY OR PRIVILEGE IS CLAIMED ARE DEFINED AS FOLLOWS:

1. A method for communicating information to a remote station comprising the steps of:
grouping the information into a plurality of time slots;
grouping said time slots into a plurality of superframes;
grouping said superframes into a plurality of paging frames;
assigning said remote station to one of said time slots in each of said paging frames, said assigned slot being used for paging said remote station; and sending to said remote station in said assigned slot an indication of a change in paging frame.

2. A method for registration of a remote station with a communications system comprising the steps of:
sending a registration number from said system to said remote station;
comparing in said remote station the received registration number with a list of registration numbers stored in memory;
sending a registration message from said remote station to said system if said registration number is found in said list;
sending a list of registration numbers from said system to said remote station; and replacing the list of registration numbers stored in said remote station with the list of registration numbers received from said system.

3. A method for acknowledging registration of remote stations, each of which is assigned an identity number, with a communications system comprising the steps of:
receiving a plurality of registration messages sent from said remote stations; and transmitting to at least two of said remote stations an acknowledgement message containing the identity numbers of said at least two remote stations.

4. A method for communicating information to a remote station comprising the steps of:
grouping the information into a plurality of repeating time slots;
grouping said time slots into a plurality of superframes;
assigning said time slots in said superframes to a plurality of logical channels; and varying the repetition rate of messages transmitted in at least one of said logical channels.

5. A method for identifying to a remote station the services available in one of a plurality of communication systems comprising the steps of:
assigning an operator code to each of said systems;
storing in said remote station a list of the services associated with each of said operator codes;

sending from said remote station a request for an operator code; and sending the operator code from one of said systems to said remote station.

6. A method for communicating information to a remote station comprising the steps of:
grouping the information into a plurality of time slots;
grouping said time slots into a plurality of superframes; and sending in each slot in each of said superframes superframe phase information to enable said remote station to identify the start of each superframe.

7. A method for supervising the transmission of messages from a communications system to a remote station comprising the steps of:
segmenting each message into layer two (L2) frames;
sending said frames over a first channel from said system to said remote station;
sending over a second channel from said system to said remote station an indication of the identity of said remote station; and sending over a third channel from said remote station to said system, if said identity indication matches an identity indication stored in said remote station, an indication of whether each of said frames has been received correctly.

8. A method of registration of a remote station with a communications system comprising the steps of:
sending from said system to said station a message containing a list of communication channels in neighboring cells, an indication of whether registration is required in each of the corresponding cells and an indication of signal strength hystersis for each cell;
and using said signal strength hystersis for selecting one of said channels if registration is required in the corresponding cell.

9. A method for registering mobile stations in a cellular communication system comprising the steps of:
broadcasting a different registration number on each of a plurality of digital control channels in said cellular communication system;
comparing one of said different registration numbers which is broadcast on one of said digital control channels used by a mobile station with a list of registration numbers stored in said mobile station; and registering said mobile station with said communication system based upon a result of said step of comparing.

10. The method of claim 9, wherein said step of registering further comprises the step of:
registering said mobile station if said step of comparing indicates no match between said one of said different registration numbers and said list of registration numbers.

11. A mobile station comprising:
a receiver for receiving supervisory messages via a control channel, said supervisory messages including a registration number associated with said control channel;
a memory for storing a list of registration numbers;
and a processor for comparing said registration number associated with said control channel and said list of registration numbers.

12. The mobile station of claim 11, further comprising:
a transmitter for transmitting a registration message based upon a result of said comparison in said processor.

13. A method for identifying a base station type in a radiocommunication system comprising the steps of:
broadcasting, from a base station, a base station manufacturer code; and receiving, at a mobile station, said base station code.

14. A method for identifying a base station type in a radiocommunication system comprising the steps of:
requesting, from a mobile station, a base station identity code; and transmitting, in response to said request, said base station identity code from a base station.

15. A method for identifying a system operator in a radiocommunication system comprising the steps of:
assigning a system operating code which identifies each different system operator;
broadcasting, from a base station, a system operator code associated therewith; and receiving, at a mobile station, said system operator code.

16. A method for identifying a system operator in a radiocommunication system comprising the steps of:
requesting, from a mobile station, a system operator code; and transmitting, in response to said request, said system operator code from a base station.

17. A base station comprising:
means for receiving a request over an air interface for said base station's identity code; and means for transmitting, in response to said request, said base station's identity code.

18. A method for identifying private subsystems in a radiocommunication system comprising the steps of:
assigning an identification code for each private subsystem in said radiocommunication system; and transmitting, from a base station, said identification codes for each private subsystem served by said base station.

19. A method for verifying access privilege in a radiocommunication system comprising the steps of:
assigning an identification code for each private subsystem in said radiocommunication system;
assigning a system operator code which identifies an operator of said system;
assigning a mobile country code which identifies a country associated with said system;
transmitting said identification code, system operator code and said mobile country code from a base station in said system; and using, in a remote station receiving said transmission, said identification code, system operator code and said mobile country code to verify access rights to said base station.

20. A method for allowing directed retry in a radiocommunication system comprising the steps of:
transmitting a neighbor list identifying candidate control channels for reselection from a base station; and including, for each entry in said neighbor list, an attribute indicating if a directed retry can be performed in a cell associated with that entry.

21. A base station comprising:
a transmitter for transmitting a neighbor list identifying candidate control channels for reselection; and a processor for including, for each entry in said neighbor list, an attribute indicating if a directed retry can be performed in a cell associated with that entry.

22. A mobile station comprising:
a receiver for receiving a neighbor list identifying candidate control channels for reselection; and a processor for permitting directed retry for cells associated with said candidate control channels based upon an attribute associated with each candidate control channel found in said neighbor list.

23. A base station comprising:
a processor which identifies private subsystems served by said base station; and a transmitter for transmitting identification codes for at least one of said private subsystems identified by said processor.