Voice Call Handover Mechanisms in Next-Generation 3GPP Systems

Total Page:16

File Type:pdf, Size:1020Kb

Voice Call Handover Mechanisms in Next-Generation 3GPP Systems SALKINTZIS LAYOUT 1/19/09 2:46 PM Page 46 LTE — 3GPP RELEASE 8 Voice Call Handover Mechanisms in Next-Generation 3GPP Systems Apostolis K. Salkintzis, Motorola Mike Hammer, Cisco Itsuma Tanaka, NTT DOCOMO Curt Wong, Nokia Siemens Networks ABSTRACT path, and progressively scale network capacity and service innovation in a economically effi- The evolved 3GPP system is a hybrid mobile cient way. The integrated system is characterized network architecture supporting several radio by a heterogeneous architecture (i.e., supporting access technologies and several mobility mecha- diverse radio access networks) capable of provid- nisms. In this article we briefly review the archi- ing mobile broadband services in strategic geo- tecture and key components of this system, with graphic areas and ensuring the “best connection” particular emphasis on how it can support voice of users at any place, anytime. However, such call mobility in several deployment scenarios. integration requires us to address a vast range of First, we present the so-called single-radio voice interoperability and migration issues that arise call continuity mechanisms that enable mid-call from the need to support seamless mobility handover of VoIP calls from E-UTRAN access across new and legacy radio access technologies, to the legacy UTRAN/GERAN or 1xRTT and migrate the legacy services to new radio access. Then we focus on deployment scenarios accesses. As an example, consider a user that ini- that do not support voice services on E-UTRAN tiates a voice call inside a 4G hotspot. This call and present the so-called fallback mechanisms is carried out over the 4G access network with that enable handover from E-UTRAN to voice over IP (VoIP) technologies; but as the UTRAN/GERAN or 1xRTT at the beginning of user goes out of 4G coverage, the call needs to a voice call. Finally, we address the application- be sustained and seamlessly handed over to the layer voice call handover mechanisms enabled by “umbrella” 2G/3G access network, which typical- the IP multimedia subsystem. Our conclusion is ly provides a much wider radio footprint. that the next generation of 3GPP systems are It may also happen that voice services are not highly sophisticated mobile communication sys- initially supported over 4G access (e.g., in order tems that support extended voice call mobility to eliminate the cost of deploying VoIP-based mechanisms, capable of addressing all commer- services), in which case the user would have to cial deployment needs. be handed over to the overlay 2G/3G access right after the call request is made. In this case INTRODUCTION the 2G/3G access is used as a fallback access that supports the legacy services when they are not As the wireless industry makes its way to the yet available in the 4G access. All these require- next generation of mobile communication sys- ments create the need for voice call handover tems, it is important to engineer solutions that mechanisms from the emerging 4G access tech- enable seamless integration of the emerging nologies to the legacy 2G/3G access technolo- fourth-generation (4G) technologies within the gies. currently deployed 2G/3G infrastructures. This is In this article we focus on such voice call important because, in most cases, the second- handover mechanisms and address in particular and third-generation (2G/3G) systems provide the voice call handover mechanisms in the next- the solid ground on which the next-generation generation Third Generation Partnership Pro- systems will be built, and will continue providing gram (3GPP) networks, which typically take the main revenue stream for operators for sever- place between the evolved 3GPP radio access al years along the migration path to 4G. The network (evolved UMTS terrestrial radio access integration of emerging access and core tech- network [E-UTRAN] [1]) and the legacy nologies within the existing 2G/3G networks 3GPP/3GPP2 radio access networks, (e.g., code-division multiple access [CDMA], UTRAN/GERAN and CDMA2000 1xRTT. In Global System for Mobile Communications this context we present and explain the technical [GSM], General Packet Radio Service [GPRS], details of three different voice call handover and Universal Mobile Telecommunications Sys- mechanisms, which aim at addressing three dif- tem [UMTS]) can enable a smooth evolution ferent deployment scenarios of next-generation 46 0163-6804/09/$25.00 © 2009 IEEE IEEE Communications Magazine • February 2009 Authorized licensed use limited to: National Chung Cheng University. Downloaded on November 29, 2009 at 14:15 from IEEE Xplore. Restrictions apply. SALKINTZIS LAYOUT 1/19/09 2:46 PM Page 47 2G/3G 3GPP core lu-cs MSC E MSC Legacy UTRAN circuit-switched lu-ps services A/lu-cs GERAN Gn SGSN GGSN Gi Gb/lu-ps S3 S4 Packet data network(s) 3GPP EPC MME S11 e.g. IMS, S1-AP Internet, etc. S1-U S5 E-UTRAN S-GW P-GW SGi S6a Gxc Gx User S2b Gxb equipment AAA/ PCRF (UE) S101 Gxa HSS ePDG S103 STa S2a SWn EPC: Evolved packet core S-GW: Serving gateway CDMA2000 P-GW: PDN gateway HRPD MME: Mobility management entity ePDG: Enhanced packet data gateway PCRF: Policy and charging rules function HSS: Home subscriber server AAA: Authentication, authorization, accounting WiMAX WLAN n Figure 1. Simplified architecture of the evolved 3GPP network. 3GPP systems. First we present handover mech- radio accesses. It is also assumed that in such anisms that enable mid-call handover of VoIP deployments there are no transport layer mecha- calls from E-UTRAN access to the legacy nisms (e.g., based on mobile IP and its deriva- UTRAN/GERAN or 1xRTT access (note that tives) that can meet the voice continuity E-UTRAN access is sometimes also referred to requirements. We also provide some background as 4G access). These mechanisms are particular- material in the next section, where we present ly important in deployment scenarios where the key aspects of the next-generation 3GPP sys- voice services are supported on E-UTRAN (as tems, and introduce the fundamental network explained later, E-UTRAN supports only IP- elements and interfaces. Finally, we wrap up our based services) but, due to limited E-UTRAN discussion by providing a number of concluding coverage, handover to UTRAN/GERAN or remarks. 1xRTT is necessary to maintain seamless voice services over wider geographical areas. Second, we focus on deployment scenarios that do not AN OVERVIEW OF NEXT- support voice services on E-UTRAN. This most- ENERATION YSTEMS ly targets initial deployments of evolved 3GPP G 3GPP S systems, in which voice services are not yet To provide some background material for our migrated to E-UTRAN (i.e., not supported yet further discussion, we present here a short over IP). For those scenarios, we present the key overview of the evolved (or next-generation) aspects of a voice call handover mechanism that 3GPP systems. Readers interested in more enables handover from E-UTRAN to UTRAN/ details on the evolved 3GPP systems are referred GERAN or 1xRTT at the beginning of a voice to the 3GPP specifications [1–5] and other arti- call. The handover is triggered by the arrival of cles in this Feature Topic. an originating or terminating voice call, which As part of Release 8 of the 3GPP specifica- can only be served on UTRAN/GERAN or tions, 3GPP has been studying and specifying an 1xRTT access and in the traditional circuit- evolved packet system (EPS) under the System switched (CS) domain [2]. We then address Architecture Evolution (SAE) work item [2]. voice call handover mechanisms enabled by the The EPS is composed of a new radio access net- IP multimedia subsystem (IMS). Such mecha- work, called E-UTRAN [1], and a new all-IP nisms mostly target deployment scenarios in core network, called evolved packet core (EPC) which voice services are supported on E- [3, 4]. The EPC can be considered an evolution UTRAN and non-3GPP-defined radio accesses, of the legacy GPRS architecture with additional such as WLAN and WiMAX, and there is also a features to improve performance, supporting need to support voice continuity across these broadband E-UTRAN access, PMIPv6 mobility, IEEE Communications Magazine • February 2009 47 Authorized licensed use limited to: National Chung Cheng University. Downloaded on November 29, 2009 at 14:15 from IEEE Xplore. Restrictions apply. SALKINTZIS LAYOUT 1/19/09 2:46 PM Page 48 and integration with non-3GPP radio technolo- SINGLE-RADIO In order to provide gies such as wireless LAN (WLAN), CDMA2000, and WiMAX. As shown in Fig. 1, VOICE CALL CONTINUITY seamless continuity the evolved 3GPP network is virtually composed of voice services in of an evolved version of the legacy 2G/3G net- Especially in the first days of E-UTRAN deploy- wide geographical work (with the well-known UTRAN/GERAN ment, coverage will be limited and available only radio accesses) and the EPC, which supports E- in scattered strategic locations, where wireless areas, it is important UTRAN access and integration with a range of broadband services are most needed. Therefore, for the next non-3GPP accesses. Note that for simplicity all in order to provide seamless continuity of voice network interfaces are not shown in Fig. 1. The services in wide geographical areas, it is impor- generation of 3GPP interfaces relevant to the voice call handover tant for the next generation of 3GPP systems to systems to seamlessly mechanisms are presented and discussed in sub- seamlessly hand over voice calls between E- handover voice calls sequent sections. UTRAN [1] and UTRAN/GERAN coverage As shown in Fig. 1, a number of diverse areas. Although this is not a new requirement between E-UTRAN access networks, such as CDMA2000, WLAN, (e.g., similar voice continuity requirements exist and UTRAN/GERAN WiMAX, GERAN, UTRAN, and E-UTRAN, between UTRAN and GERAN, and between are connected to a common core network (the CDMA2000 1xRTT and HRPD), in this case coverage areas.
Recommended publications
  • Voice Over LTE Volte
    Whitepaper Voice Over LTE VoLTE estingTABLE OF CONTENTS FTTx Networks 1. Motivations for Enabling Voice over LTE 2.Featurin Requirements for Voiceg over PONs LTE 3. LTE Voice Options 4. Overview of GSMA PRD IR.92 5. Service Continuity 6.Systems Voice over LTE Verification sdfsdf7. Summary 8. References Motivations for Enabling Voice over LTE The motivation for the deployment of 3GPP Long-term Evolution (LTE) mobile broadband technology is simple: All things considered, LTE delivers to carriers the lowest cost-per-transported bit. That said, the adage that “voice pays the bills” still applies: though in decline, carriers continue to derive the bulk of their revenues from voice and integrated messaging services. In the context of LTE, this presents a dilemma. A fundamental aspect of legacy technologies such as GSM, UMTS, and cdma2000 is that they possess integrated services1: voice, voice supplementary services (e.g., call forwarding), short messaging, etc. In contrast, LTE makes no such provisions: it is subscriber service-agnostic. Further, LTE is a pure packet technology, with no inherent conception of a circuit-switched (CS) bearer, on which legacy voice services depend. Because of the realities of the cellular revenue model – and, indeed, because cellular subscribers expect service continuity – the question arises: How can we best deliver voice and other legacy services via LTE? As with any engineering exercise, this requires articulation of the requirements. Requirements for Voice over LTE The requirements for voice2 over LTE (VoLTE) solutions fall into one – or both – of two categories: the requirements of cellular subscribers, and the requirements of cellular carriers.
    [Show full text]
  • Alcatel-Lucent INTERNET PROTOCOL MULTIMEDIA SUBSYSTEM (IMS) SOLUTION MAINTENANCE RELEASE 07.00.05 and CONTROLLED INTRODUCTION RELEASE 07.01.00
    Alcatel-Lucent INTERNET PROTOCOL MULTIMEDIA SUBSYSTEM (IMS) SOLUTION MAINTENANCE RELEASE 07.00.05 AND CONTROLLED INTRODUCTION RELEASE 07.01.00 EXTERNAL RELEASE NOTES 275 -100 - 004R07.01.00 APRIL 2009 ISSUE 1 Alcatel, Lucent, Alcatel-Lucent and the Alcatel-Lucent logo are trademarks of Alcatel-Lucent. All other trademarks are the property of their respective owners. The information presented is subject to change without notice. Alcatel-Lucent assumes no responsibility for inaccuracies contained herein. Copyright © 2009 Alcatel-Lucent. All Rights Reserved. Contents About this document v Purpose.......................................................................................................................................................v Reason for reissue ......................................................................................................................................v Intended audience.......................................................................................................................................v Supported systems......................................................................................................................................v Conventions used .......................................................................................................................................v Technical support.......................................................................................................................................v How to order ...........................................................................................................................................
    [Show full text]
  • Voice Over LTE: Status and Migration Trends Page 1 of 15
    Voice over LTE: Status and Migration Trends Page 1 of 15 Voice over LTE: Status and Migration Trends Lav Gupta, lavgupta (at) wustl.edu (A paper written under the guidance of Prof. Raj Jain) Download Abstract Rapid increase in data traffic over cellular network is necessitating deployment of Long Term Evolution (LTE) in the cellular operators networks. While LTE provides efficient data traffic handling and high data rates, it lacks native circuit switched voice capability. The GSM association has standardized IP Multimedia Subsystem (IMS) based VoLTE solution along with Single radio SRVCC for handover. Migration to this solution requires operators to have expensive and complex IMS deployments. This has led to operators leveraging the existing 2G/3G networks with VoLTE methods like Circuit Switched Fallback (CSFB) and Voice over LTE via Generic Access (VoLGA). This paper describes both, the interim and the long-term, solutions for the operators and their respective pro and cons. Future directions in VoLTE research have also been briefly described. Keywords VoLTE, Circuit Switched Fall Back, CSFB, Voice over LTE via Generic Access, VoLGA, Single Radio Voice Call Continuity, SRVCC, IMS, IP Multimedia Subsystem, handover, Evolved Packet Core, Evolved UMTS Radio Access Network, MME Table of Contents 1 Introduction to LTE and VoLTE • 1.1 LTE Overview • 1.2 Basics of Voice over LTE 2 VoLTE Architectures and Protocols • 2.1 Circuit Switched Fallback (CSFB) • 2.2 Voice over LTE via Generic Access (VoLGA) • 2.3 GSMA profile for VoLTE • 2.4 OTT Solutions
    [Show full text]
  • ETSI TS 123 216 V9.6.0 (2011-01) Technical Specification
    ETSI TS 123 216 V9.6.0 (2011-01) Technical Specification Digital cellular telecommunications system (Phase 2+); Universal Mobile Telecommunications System (UMTS); LTE; Single Radio Voice Call Continuity (SRVCC); Stage 2 (3GPP TS 23.216 version 9.6.0 Release 9) 3GPP TS 23.216 version 9.6.0 Release 9 1 ETSI TS 123 216 V9.6.0 (2011-01) Reference RTS/TSGS-0223216v960 Keywords GSM, LTE, UMTS ETSI 650 Route des Lucioles F-06921 Sophia Antipolis Cedex - FRANCE Tel.: +33 4 92 94 42 00 Fax: +33 4 93 65 47 16 Siret N° 348 623 562 00017 - NAF 742 C Association à but non lucratif enregistrée à la Sous-Préfecture de Grasse (06) N° 7803/88 Important notice Individual copies of the present document can be downloaded from: http://www.etsi.org The present document may be made available in more than one electronic version or in print. In any case of existing or perceived difference in contents between such versions, the reference version is the Portable Document Format (PDF). In case of dispute, the reference shall be the printing on ETSI printers of the PDF version kept on a specific network drive within ETSI Secretariat. Users of the present document should be aware that the document may be subject to revision or change of status. Information on the current status of this and other ETSI documents is available at http://portal.etsi.org/tb/status/status.asp If you find errors in the present document, please send your comment to one of the following services: http://portal.etsi.org/chaircor/ETSI_support.asp Copyright Notification No part may be reproduced except as authorized by written permission.
    [Show full text]
  • (12) United States Patent (10) Patent No.: US 8,599,838 B2 Buckley (45) Date of Patent: Dec
    US008599838B2 (12) United States Patent (10) Patent No.: US 8,599,838 B2 Buckley (45) Date of Patent: Dec. 3, 2013 (54) SYSTEMAND METHOD FOR 2004/O137918 A1 7/2004 Varonen et al. EFFECTUATING ASIP CALL INA 2004/O184435 A1 9, 2004 Westman 2004/0203680 A1 10/2004 Sylvain NETWORKENVIRONMENT INCLUDING 2004/0235483 A1 1 1/2004 Sylvain MS 2005/0058.125 A1 3/2005 Mutikainen et al. .......... 370,354 2005/O130657 A1 6/2005 Creamer et al. (75) Inventor: Adrian Buckley, Tracy, CA (US) (Continued) (73) Assignee: BlackBerry Limited, Waterloo (CA) FOREIGN PATENT DOCUMENTS (*) Notice: Subject to any disclaimer, the term of this EP 1811 745 A1 7/2007 patent is extended or adjusted under 35 EP 2367335 9, 2011 U.S.C. 154(b) by 554 days. (Continued) (21) Appl. No.: 12/915,125 OTHER PUBLICATIONS (22) Filed: Oct. 29, 2010 CIPO, Office Action, Application No. 2,605,102, Nov. 21, 2012, 3 pg.S. (65) Prior Publication Data (Continued) US 2011 FOO44325 A1 Feb. 24, 2011 Primary Examiner — Simon Sing Related U.S. Application Data Assistant Examiner — Simon King (63) Continuation of application No. 1 1/347,874, filed on (74) Attorney, Agent, or Firm — The Danamraj Law Group, Feb. 6, 2006, now Pat. No. 7,830,868. P.C. (51) Int. Cl. (57) ABSTRACT H04L 2/66 (2006.01) In one embodiment, a scheme is disclosed for effectuating a (52) U.S. Cl. call in a network environment including a circuit-switched USPC ........ 370/353; 370/354; 370/356; 379/88.17; (CS) network and an IP multimedia subsystem (IMS) net 455/403:455/428 work.
    [Show full text]
  • Etsi Ts 123 216 V15.3.0 (2019-10)
    ETSI TS 123 216 V15.3.0 (2019-10) TECHNICAL SPECIFICATION Digital cellular telecommunications system (Phase 2+) (GSM); Universal Mobile Telecommunications System (UMTS); LTE; Single Radio Voice Call Continuity (SRVCC); Stage 2 (3GPP TS 23.216 version 15.3.0 Release 15) 3GPP TS 23.216 version 15.3.0 Release 15 1 ETSI TS 123 216 V15.3.0 (2019-10) Reference RTS/TSGS-0223216vf30 Keywords GSM,LTE,UMTS ETSI 650 Route des Lucioles F-06921 Sophia Antipolis Cedex - FRANCE Tel.: +33 4 92 94 42 00 Fax: +33 4 93 65 47 16 Siret N° 348 623 562 00017 - NAF 742 C Association à but non lucratif enregistrée à la Sous-Préfecture de Grasse (06) N° 7803/88 Important notice The present document can be downloaded from: http://www.etsi.org/standards-search The present document may be made available in electronic versions and/or in print. The content of any electronic and/or print versions of the present document shall not be modified without the prior written authorization of ETSI. In case of any existing or perceived difference in contents between such versions and/or in print, the prevailing version of an ETSI deliverable is the one made publicly available in PDF format at www.etsi.org/deliver. Users of the present document should be aware that the document may be subject to revision or change of status. Information on the current status of this and other ETSI documents is available at https://portal.etsi.org/TB/ETSIDeliverableStatus.aspx If you find errors in the present document, please send your comment to one of the following services: https://portal.etsi.org/People/CommiteeSupportStaff.aspx Copyright Notification No part may be reproduced or utilized in any form or by any means, electronic or mechanical, including photocopying and microfilm except as authorized by written permission of ETSI.
    [Show full text]
  • Road to 5G: Introduction and Migration April 2018
    Road to 5G: Introduction and Migration April 2018 ROAD TO 5G: INTRODUCTION AND MIGRATION About the GSMA Future Networks Programme The GSMA represents the interests of mobile operators The GSMA’s Future Networks is designed to help operators worldwide, uniting nearly 800 operators with almost 300 and the wider mobile industry to deliver All-IP networks so companies in the broader mobile ecosystem, including that everyone benefits regardless of where their starting handset and device makers, software companies, point might be on the journey. equipment providers and internet companies, as well as The programme has three key work-streams focused on: organisations in adjacent industry sectors. The GSMA also The development and deployment of IP services, The produces industry-leading events such as Mobile World evolution of the 4G networks in widespread use today, The Congress, Mobile World Congress Shanghai, Mobile World 5G Journey developing the next generation of mobile Congress Americas and the Mobile 360 Series of technologies and service. conferences. For more information, please visit the Future Networks For more information, please visit the GSMA corporate website at: www.gsma.com/futurenetworks website at www.gsma.com. Follow the GSMA on Twitter: @GSMA. Document Editor Dongwook Kim, 5G Project Manager Michele Zarri, Technical Director – Networks Acknowledgement (5G Introduction Project Members) Applied Communication Sciences MediaTek Inc. ARM Ltd. Nokia AT&T Mobility NTT DOCOMO, Inc. Axiata Group Berhad OranGe China Mobile Limited Qualcomm Incorporated China Telecommunications Corporation SinGTel Mobile SinGapore Pte. Ltd. China Unicom SK Telecom Co., Ltd. Deutsche Telekom AG SoftBank Corp. DISH Network Corporation Sprint Corporation Ericsson Syniverse TechnoloGies, Inc GuanGdonG OPPO Mobile Telecommunications Corp.,Ltd.
    [Show full text]
  • IR.64 - IMS Service Centralization and Continuity Guidelines
    GSM Association Non-confidential Official Document IR.64 - IMS Service Centralization and Continuity Guidelines IMS Service Centralization and Continuity Guidelines Version 12.0 15 September 2015 This is a Non-binding Permanent Reference Document of the GSMA Security Classification: Non-confidential Access to and distribution of this document is restricted to the persons permitted by the security classification. This document is confidential to the Association and is subject to copyright protection. This document is to be used only for the purposes for which it has been supplied and information contained in it must not be disclosed or in any other way made available, in whole or in part, to persons other than those permitted under the security classification without the prior written approval of the Association. Copyright Notice Copyright © 2015 GSM Association Disclaimer The GSM Association (“Association”) makes no representation, warranty or undertaking (express or implied) with respect to and does not accept any responsibility for, and hereby disclaims liability for the accuracy or completeness or timeliness of the information contained in this document. The information contained in this document may be subject to change without prior notice. Antitrust Notice The information contain herein is in full compliance with the GSM Association’s antitrust compliance policy. V12.0 Page 1 of 23 GSM Association Non-confidential Official Document IR.64 - IMS Service Centralization and Continuity Guidelines Table of Contents 1 Introduction 3 1.1
    [Show full text]
  • Voice and SMS in LTE White Paper
    voice and SMS in LTE. LTE. in and SMS voice of support from the resulting requirements measurement and test addresses also paper The white options. different the for implications commercial the and process, information on the standardization background includes It (VoLTE). LTE over voice and SGs, over SMS (CSFB), fallback switched circuit including LTE, in (SMS) service message and short voice supporting for options technology the summarizes paper This white Paper White LTE in SMS and Voice 1MA197 C. Gessner, O. Gerlach May 2011 1e Table of Contents Table of Contents 1 Introduction ............................................................................ 3 2 Overview ................................................................................. 3 3 Circuit switched fallback (CSFB).......................................... 5 3.1 Circuit switched fallback to GERAN or UTRAN ........................................5 3.2 Circuit switched fallback to 1xRTT...........................................................10 4 SMS over SGs....................................................................... 15 5 Support of voice and SMS via IMS ..................................... 18 5.1 Overview of the IMS framework................................................................19 5.2 EPS attach and P-CSCF discovery...........................................................23 5.3 IMS registration, authentication and key agreement..............................24 5.4 Obtaining voice services via IMS..............................................................27
    [Show full text]
  • Single Radio Voice Call Continuity (SRVCC) with LTE By: Shwetha Vittal, Lead Engineer
    White Paper Single Radio Voice Call Continuity (SRVCC) with LTE By: Shwetha Vittal, Lead Engineer Overview CONTENTS Long Term Evolution (LTE) is heralded as the next big thing for mobile Why SRVCC? pg. 2 networks. It brings in promising technologies such as semi-persistent Single Radio Voice Call Continuity scheduling, transmission time interval (TTI) bundling, and high performance From LTE pg. 3 gains on Quality of end user Experience (QoE). In the end, the primary goal of LTE is to deliver ultra-high speed mobile broadband with peak data rates over SRVCC from LTE to 3GPP2 1XCS pg. 4 100 Mbps. However, in practical applications LTE is facing challenges to provide SRVCC from LTE to 3GPP UTRAN/GERAN pg. 7 the same capabilities as a 2G/3G network during the initial stages of trial deployments and operators’ metered investment in broad network build out. Conclusion pg. 9 One of the key issues of LTE is the delivery of voice services. Voice remains the References pg. 10 “killer application” for operators because it still accounts for a large portion of their revenue. Voice will continue to remain the dominant must-have service in the network for years, and despite the technical challenges of providing service over an all-Internet Protocol (IP) radio access network (RAN), voice is seen as a basic service by the consumer; in short, it is expected. However, voice service continuity is not guaranteed when a Voice over IP (VoIP) subscriber roams between the LTE coverage area and other wireless networks—and it is a significant challenge to deliver voice over LTE networks.
    [Show full text]
  • The Untold Secrets of Operational Wi-Fi Calling Services: Vulnerabilities, Attacks, and Countermeasures
    The Untold Secrets of Operational Wi-Fi Calling Services: Vulnerabilities, Attacks, and Countermeasures TIAN XIE, Michigan State University GUAN-HUA TU, Michigan State University BANGJIE YIN, Michigan State University CHI-YU LI, National Chiao Tung University CHUNYI PENG, Purdue University MI ZHANG, Michigan State University HUI LIU, Michigan State University XIAOMING LIU, Michigan State University Since 2016, all of four major U.S. operators have rolled out nationwide Wi-Fi calling services. They are projected to surpass VoLTE (Voice over LTE) and other VoIP services in terms of mobile IP voice usage minutes in 2018. They enable mobile users to place cellular calls over Wi-Fi networks based on the 3GPP IMS (IP Multimedia Subsystem) technology. Compared with conventional cellular voice solutions, the major difference lies in that their traffic traverses untrustful Wi-Fi networks andthe Internet. This exposure to insecure networks may cause the Wi-Fi calling users to suffer from security threats. Its security mechanisms are similar to the VoLTE, because both of them are supported by the IMS. They include SIM-based security, 3GPP AKA (Authentication and Key Agreement), IPSec (Internet Protocol Security), etc. However, are they sufficient to secure Wi-Fi calling services? Unfortunately, our study yields a negative answer. We conduct the first study of exploring security issues of the operational Wi-Fi calling services in three major U.S. operators’ networks using commodity devices. We disclose that current Wi-Fi calling security is not bullet-proof and uncover four vulnerabilities which stem from improper standard designs, device implementation issues and network operation slips. By exploiting the vulnerabilities, together with several state-of-the-art computer visual recognition technologies, we devise two proof-of-concept attacks: user privacy leakage and telephony harassment or denial of voice service (THDoS); both of them can bypass the security defenses deployed on mobile devices and the network infrastructure.
    [Show full text]
  • Vo5g Technical White Paper
    Vo5G Technical White Paper Date July, 2018 HUAWEI TECHNOLOGIES CO., LTD. Copyright © Huawei Technologies Co., Ltd. 2018. All rights reserved. No part of this document may be reproduced or transmitted in any form or by any means without prior written consent of Huawei Technologies Co., Ltd. Trademarks and Permissions and other Huawei trademarks are trademarks of Huawei Technologies Co., Ltd. All other trademarks and trade names mentioned in this document are the property of their respective holders. Notice This document may contain forecasting information, including but not limited to information about future financials, operations, product lines, new technologies, and more. Because there are many uncertainties in practice, the actual results may differ greatly from the forecast information. Therefore, the information in this document is for informational purposes only and does not constitute an offer or promise. Huawei may modify the above information without notice without prior notice. Huawei Technologies Co., Ltd. Address: Huawei Industrial Base, Bantian, Longgang, Shenzhen 518129 People's Republic of China Website: http://www.huawei.com 1 Vo5G Technical White Paper Contents 1 Introduction .............................................................................................................................. 5 2 Vo5G Has Been Standardized Together with 5G ............................................................. 5 2.1 What Is Vo5G? .....................................................................................................................
    [Show full text]