ETSI TS V8.3.0 ( ) Technical Specification

Transcription

1 TS V8.3.0 ( ) Technical Specification Universal Mobile Telecommunications System (UMTS); LTE; Non-Access-Stratum (NAS) protocol for Evolved Packet System (EPS); Stage 3 (3GPP TS version Release 8)

2 1 TS V8.3.0 ( ) Reference RTS/TSGC v830 Keywords LTE, UMTS 650 Route des Lucioles F Sophia Antipolis Cedex - FRANCE Tel.: Fax: Siret N NAF 742 C Association à but non lucratif enregistrée à la Sous-Préfecture de Grasse (06) N 7803/88 Important notice Individual copies of the present document can be downloaded from: The present document may be made available in more than one electronic version or in print. In any case of existing or perceived difference in contents between such versions, the reference version is the Portable Document Format (PDF). In case of dispute, the reference shall be the printing on printers of the PDF version kept on a specific network drive within Secretariat. Users of the present document should be aware that the document may be subject to revision or change of status. Information on the current status of this and other documents is available at If you find errors in the present document, please send your comment to one of the following services: Copyright Notification No part may be reproduced except as authorized by written permission. The copyright and the foregoing restriction extend to reproduction in all media. European Telecommunications Standards Institute All rights reserved. DECT TM, PLUGTESTS TM, UMTS TM, TIPHON TM, the TIPHON logo and the logo are Trade Marks of registered for the benefit of its Members. 3GPP TM is a Trade Mark of registered for the benefit of its Members and of the 3GPP Organizational Partners. LTE is a Trade Mark of currently being registered for the benefit of its Members and of the 3GPP Organizational Partners. GSM and the GSM logo are Trade Marks registered and owned by the GSM Association.

3 2 TS V8.3.0 ( ) Intellectual Property Rights IPRs essential or potentially essential to the present document may have been declared to. The information pertaining to these essential IPRs, if any, is publicly available for members and non-members, and can be found in SR : "Intellectual Property Rights (IPRs); Essential, or potentially Essential, IPRs notified to in respect of standards", which is available from the Secretariat. Latest updates are available on the Web server ( Pursuant to the IPR Policy, no investigation, including IPR searches, has been carried out by. No guarantee can be given as to the existence of other IPRs not referenced in SR (or the updates on the Web server) which are, or may be, or may become, essential to the present document. Foreword This Technical Specification (TS) has been produced by 3rd Generation Partnership Project (3GPP). The present document may refer to technical specifications or reports using their 3GPP identities, UMTS identities or GSM identities. These should be interpreted as being references to the corresponding deliverables. The cross reference between GSM, UMTS, 3GPP and identities can be found under

4 3 TS V8.3.0 ( ) Contents Intellectual Property Rights... 2 Foreword... 2 Foreword Scope References Definitions and abbreviations Definitions Abbreviations General Overview Linkage between the protocols for EPS mobility management and EPS session management UE mode of operation General Change of UE mode of operation General Change of UE's usage setting Change of voice domain preference Change of IMS registration status NAS security General Handling of EPS security contexts General Establishment of a mapped EPS security context during intersystem handover Establishment of secure exchange of NAS messages Change of security keys Handling of NAS COUNT and NAS sequence number General Replay protection Integrity protection and verification Ciphering and deciphering NAS COUNT wrap around Integrity protection of NAS signalling messages General Integrity checking of NAS signalling messages in the UE Integrity checking of NAS signalling messages in the MME Ciphering of NAS signalling messages Disabling and re-enabling of UE's E-UTRA capability Elementary procedures for EPS mobility management Overview General Types of EMM procedures EMM sublayer states General EMM sublayer states in the UE General Main states EMM-NULL EMM-DEREGISTERED EMM-REGISTERED-INITIATED EMM-REGISTERED EMM-DEREGISTERED-INITIATED EMM-TRACKING-AREA-UPDATING-INITIATED EMM-SERVICE-REQUEST-INITIATED... 34

5 4 TS V8.3.0 ( ) Substates of state EMM-DEREGISTERED General EMM-DEREGISTERED.NORMAL-SERVICE EMM-DEREGISTERED.LIMITED-SERVICE EMM-DEREGISTERED.ATTEMPTING-TO-ATTACH EMM-DEREGISTERED.PLMN-SEARCH EMM-DEREGISTERED.NO-IMSI EMM-DEREGISTERED.ATTACH-NEEDED EMM-DEREGISTERED.NO-CELL-AVAILABLE Substates of state EMM-REGISTERED General EMM-REGISTERED.NORMAL-SERVICE EMM-REGISTERED.ATTEMPTING-TO-UPDATE EMM-REGISTERED.LIMITED-SERVICE EMM-REGISTERED.PLMN-SEARCH EMM-REGISTERED.UPDATE-NEEDED EMM-REGISTERED.NO-CELL-AVAILABLE EMM-REGISTERED.ATTEMPTING-TO-UPDATE-MM EMM-REGISTERED.IMSI-DETACH-INITIATED EPS update status EMM sublayer states in the MME EMM-DEREGISTERED EMM-COMMON-PROCEDURE-INITIATED EMM-REGISTERED EMM-DEREGISTERED-INITIATED Coordination between EMM and GMM Coordination between EMM and MM Behaviour of the UE in state EMM-DEREGISTERED and state EMM-REGISTERED General UE behaviour in state EMM-DEREGISTERED General Primary substate selection Selection of the substate after power on Detailed description of UE behaviour in state EMM-DEREGISTERED NORMAL-SERVICE LIMITED-SERVICE ATTEMPTING-TO-ATTACH PLMN-SEARCH NO-IMSI ATTACH-NEEDED NO-CELL-AVAILABLE Substate when back to state EMM-DEREGISTERED from another EMM state UE behaviour in state EMM-REGISTERED General Detailed description of UE behaviour in state EMM-REGISTERED NORMAL-SERVICE ATTEMPTING-TO-UPDATE LIMITED-SERVICE PLMN-SEARCH UPDATE-NEEDED NO-CELL-AVAILABLE ATTEMPTING-TO-UPDATE-MM General on elementary EMM procedures EMM modes and NAS signalling connection Establishment of the NAS signalling connection Release of the NAS signalling connection Lists of forbidden tracking areas List of forbidden PLMNs for attach in S101 mode Equivalent PLMNs list Handling of the periodic tracking area update timer and mobile reachable timer (S1 mode only) Handling of timer T Handling of the Local Emergency Numbers List... 45

6 5 TS V8.3.0 ( ) Abnormal cases in the UE EMM common procedures GUTI reallocation procedure General GUTI reallocation initiation by the network GUTI reallocation completion by the UE GUTI reallocation completion by the network Abnormal cases in the UE Abnormal cases on the network side Authentication procedure General Authentication initiation by the network Authentication response by the UE Authentication completion by the network Authentication not accepted by the network Authentication not accepted by the UE Abnormal cases Security mode control procedure General NAS security mode control initiation by the network NAS security mode command accepted by the UE NAS security mode control completion by the network NAS security mode command not accepted by the UE Abnormal cases in the UE Abnormal cases on the network side Identification procedure General Identification initiation by the network Identification response by the UE Identification completion by the network Abnormal cases in the UE Abnormal cases on the network side EMM information procedure General EMM information procedure initiation by the network EMM information procedure in the UE Abnormal cases on the network side EMM specific procedures Attach procedure General Attach procedure for EPS services General Attach procedure initiation EMM common procedure initiation Attach accepted by the network Attach not accepted by the network Abnormal cases in the UE Abnormal cases on the network side Combined attach procedure for EPS services and non-eps services (S1 mode only) General Combined attach procedure initiation EMM common procedure initiation Combined attach accepted by the network General Combined attach successful Combined attach successful for EPS services only Combined attach not accepted by the network Abnormal cases in the UE Abnormal cases on the network side Detach procedure General UE initiated detach procedure... 74

7 6 TS V8.3.0 ( ) UE initiated detach procedure initiation UE initiated detach procedure completion for EPS services only UE initiated combined detach procedure completion Abnormal cases in the UE Abnormal cases on the network side Network initiated detach procedure Network initiated detach procedure initiation Network initiated detach procedure completion by the UE Network initiated detach procedure completion by the network Abnormal cases in the UE Abnormal cases on the network side Tracking area updating procedure (S1 mode only) General Normal and periodic tracking area updating procedure General Normal and periodic tracking area updating procedure initiation EMM common procedure initiation Normal and periodic tracking area updating procedure accepted by the network Normal and periodic tracking area updating procedure not accepted by the network Abnormal cases in the UE Abnormal cases on the network side Combined tracking area updating procedure General Combined tracking area updating procedure initiation EMM common procedure initiation Combined tracking area updating procedure accepted by the network General Combined tracking area updating successful Combined tracking area updating successful for EPS services only Combined tracking area updating procedure not accepted by the network Abnormal cases in the UE Abnormal cases on the network side EMM connection management procedures (S1 mode only) Service request procedure General Service request procedure initiation EMM common procedure initiation Service request procedure accepted by the network Service request procedure not accepted by the network Abnormal cases in the UE Abnormal cases on the network side Paging procedure General Paging for EPS services Paging for EPS services through E-UTRAN using S-TMSI Paging for EPS services through E-UTRAN using IMSI Paging for CS fallback to A/Gb or Iu mode Paging for SMS Transport of NAS messages procedure General UE initiated transport of NAS messages Network initiated transport of NAS messages Reception of an EMM STATUS message by an EMM entity Elementary procedures for EPS session management Overview General Types of ESM procedures ESM sublayer states General ESM sublayer states in the UE BEARER CONTEXT INACTIVE

8 7 TS V8.3.0 ( ) BEARER CONTEXT ACTIVE PROCEDURE TRANSACTION INACTIVE PROCEDURE TRANSACTION PENDING ESM sublayer states in the MME BEARER CONTEXT INACTIVE BEARER CONTEXT ACTIVE PENDING BEARER CONTEXT ACTIVE BEARER CONTEXT INACTIVE PENDING BEARER CONTEXT MODIFY PENDING PROCEDURE TRANSACTION INACTIVE PROCEDURE TRANSACTION PENDING Coordination between ESM and SM Coordination between ESM and EMM for supporting ISR IP address allocation General IP address allocation via NAS signalling General on elementary ESM procedures Services provided by lower layers Principles of address handling for ESM procedures Abnormal cases in the UE Abnormal cases in the network Network initiated ESM procedures Default EPS bearer context activation procedure General Default EPS bearer context activation initiated by the network Default EPS bearer context activation accepted by the UE Default EPS bearer context activation not accepted by the UE Abnormal cases in the UE Abnormal cases on the network side Dedicated EPS bearer context activation procedure General Dedicated EPS bearer context activation initiated by the network Dedicated EPS bearer context activation accepted by the UE Dedicated EPS bearer context activation not accepted by the UE Abnormal cases in the UE Abnormal cases on the network side EPS bearer context modification procedure General EPS bearer context modification initiated by the network EPS bearer context modification accepted by the UE EPS bearer context modification not accepted by the UE Abnormal cases in the UE Abnormal cases on the network side EPS bearer context deactivation procedure General EPS bearer context deactivation initiated by the network EPS bearer context deactivation accepted by the UE Abnormal cases in the UE Abnormal cases on the network side Local EPS bearer context deactivation without ESM signalling UE requested ESM procedures UE requested PDN connectivity procedure General UE requested PDN connectivity procedure initiation UE requested PDN connectivity procedure accepted by the network UE requested PDN connectivity procedure not accepted by the network Abnormal cases in the UE Abnormal cases on the network side UE requested PDN disconnect procedure General UE requested PDN disconnection procedure initiation UE requested PDN disconnection procedure accepted by the network

9 8 TS V8.3.0 ( ) UE requested PDN disconnection procedure not accepted by the network Abnormal cases in the UE Abnormal cases on the network side UE requested bearer resource allocation procedure General UE requested bearer resource allocation procedure initiation UE requested bearer resource allocation procedure accepted by the network UE requested bearer resource allocation procedure not accepted by the network Abnormal cases in the UE Abnormal cases on the network side UE requested bearer resource modification procedure General UE requested bearer resource modification procedure initiation UE requested bearer resource modification procedure accepted by the network UE requested bearer resource modification procedure not accepted by the network Abnormal cases in the UE Abnormal cases on the network side Miscellaneous procedures Exchange of protocol configuration options General ESM information request procedure General ESM information request initiated by the network ESM information request completion by the UE ESM information request completion by the network Abnormal cases in the UE Abnormal cases on the network side Exchange of protocol configuration options in other messages Reception of an ESM STATUS message by an ESM entity Handling of unknown, unforeseen, and erroneous protocol data General Message too short Unknown or unforeseen procedure transaction identity or EPS bearer identity Procedure transaction identity EPS bearer identity Unknown or unforeseen message type Non-semantical mandatory information element errors Common procedures EPS mobility management EPS session management Unknown and unforeseen IEs in the non-imperative message part IEIs unknown in the message Out of sequence IEs Repeated IEs Non-imperative message part errors Syntactically incorrect optional IEs Conditional IE errors Messages with semantically incorrect contents Message functional definitions and contents Overview EPS mobility management messages Attach accept Message definition GUTI Location area identification MS identity EMM cause T3402 value T3423 value Equivalent PLMNs

10 9 TS V8.3.0 ( ) Emergency number list EPS network feature support Attach complete Attach reject Message definition ESM message container Attach request Message definition Old P-TMSI signature Additional GUTI Last visited registered TAI DRX parameter MS network capability Old location area identification TMSI status Mobile station classmark Mobile station classmark Supported Codecs Authentication failure Message definition Authentication failure parameter Authentication reject Authentication request Authentication response CS service notification Message definition CLI SS Code LCS indicator LCS client identity Detach accept Detach accept (UE originating detach) Detach accept (UE terminated detach) Detach request Detach request (UE originating detach) Detach request (UE terminated detach) Message definition EMM cause Downlink NAS Transport EMM information Message definition Full name for network Short name for network Local time zone Universal time and local time zone Network daylight saving time EMM status Extended service request Message definition CSFB response GUTI reallocation command Message definition TAI list GUTI reallocation complete Identity request Identity response Security mode command Message definition IMEISV request Replayed nonce UE Nonce MME Security mode complete

11 10 TS V8.3.0 ( ) Message definition IMEISV Security mode reject Security protected NAS message Service reject Message definition T3442 value Service request Tracking area update accept Message definition T3412 value GUTI TAI list EPS bearer context status Location area identification MS identity EMM cause T3402 value T3423 value Equivalent PLMNs Emergency number list EPS network feature support Tracking area update complete Tracking area update reject Tracking area update request Message definition Non-current native NAS key set identifier GPRS ciphering key sequence number Old P-TMSI signature Additional GUTI Nonce UE UE network capability Last visited registered TAI DRX parameter UE radio capability information update needed EPS bearer context status MS network capability Old location area identification TMSI status Mobile station classmark Mobile station classmark Supported Codecs Uplink NAS Transport EPS session management messages Activate dedicated EPS bearer context accept Message definition Protocol configuration options Activate dedicated EPS bearer context reject Message definition Protocol configuration options Activate dedicated EPS bearer context request Message definition Transaction identifier Negotiated QoS Negotiated LLC SAPI Radio priority Packet flow identifier Protocol configuration options Activate default EPS bearer context accept Message definition Protocol configuration options Activate default EPS bearer context reject

12 11 TS V8.3.0 ( ) Message definition Protocol configuration options Activate default EPS bearer context request Message definition Transaction identifier Negotiated QoS Negotiated LLC SAPI Radio priority Packet flow identifier APN-AMBR ESM cause Protocol configuration options Bearer resource allocation reject Message definition Protocol configuration options Bearer resource allocation request Message definition Protocol configuration options Bearer resource modification reject Message definition Protocol configuration options Bearer resource modification request Message definition Required traffic flow QoS ESM cause Protocol configuration options Deactivate EPS bearer context accept Message definition Protocol configuration options Deactivate EPS bearer context request Message definition Protocol configuration options ESM information request ESM information response Message definition Access point name Protocol configuration options ESM status Modify EPS bearer context accept Message definition Protocol configuration options Modify EPS bearer context reject Message definition Protocol configuration options Modify EPS bearer context request Message definition New EPS QoS TFT New QoS Negotiated LLC SAPI Radio priority Packet flow identifier APN-AMBR Protocol configuration options PDN connectivity reject Message definition Protocol configuration options PDN connectivity request Message definition ESM information transfer flag Access point name Protocol configuration options

13 12 TS V8.3.0 ( ) PDN disconnect reject Message definition Protocol configuration options PDN disconnect request Message definition Protocol configuration options General message format and information elements coding Overview Protocol discriminator Security header type and EPS bearer identity Security header type EPS bearer identity Procedure transaction identity Message authentication code Sequence number NAS message Message type Other information elements General Common information elements EPS bearer context status Location area identification Mobile identity Mobile station classmark Mobile station classmark NAS security parameters from E-UTRA NAS security parameters to E-UTRA PLMN list Spare half octet Supported codec list EPS Mobility Management (EMM) information elements Authentication failure parameter Authentication parameter AUTN Authentication parameter RAND Authentication response parameter A Ciphering key sequence number CSFB response Daylight saving time Detach type DRX parameter EMM cause EPS attach result EPS attach type EPS mobile identity A EPS network feature support EPS update result EPS update type ESM message container GPRS timer Identity type IMEISV request KSI and sequence number MS network capability NAS key set identifier NAS message container NAS security algorithms Network name Nonce A Paging identity P-TMSI signature Service type

14 13 TS V8.3.0 ( ) Short MAC Time zone Time zone and time TMSI status Tracking area identity Tracking area identity list UE network capability UE radio capability information update needed UE security capability Emergency Number List CLI SS Code LCS indicator LCS client identity EPS Session Management (ESM) information elements Access point name APN aggregate maximum bit rate EPS quality of service ESM cause ESM information transfer flag Linked EPS bearer identity LLC service access point identifier Packet flow identifier PDN address PDN type Protocol configuration options Quality of service Radio priority Request type Traffic flow aggregate description Traffic flow template Transaction identifier List of system parameters General Timers of EPS mobility management Timers of EPS session management Annex A (informative): Cause values for EPS mobility management A.1 Causes related to UE identification A.2 Cause related to subscription options A.3 Causes related to PLMN specific network failures and congestion/authentication failures A.4 Causes related to nature of request A.5 Causes related to invalid messages Annex B (informative): Cause values for EPS session management B.1 Causes related to nature of request B.2 Protocol errors (e.g., unknown message) class Annex C (normative): Annex D (normative): Storage of EMM information Establishment cause (S1 mode only) D.1 Mapping of NAS procedure to RRC establishment cause (S1 mode only) Annex E (informative): Change history History

15 14 TS V8.3.0 ( ) Foreword This Technical Specification has been produced by the 3 rd Generation Partnership Project (3GPP). The contents of the present document are subject to continuing work within the TSG and may change following formal TSG approval. Should the TSG modify the contents of the present document, it will be re-released by the TSG with an identifying change of release date and an increase in version number as follows: Version x.y.z where: x the first digit: 1 presented to TSG for information; 2 presented to TSG for approval; 3 or greater indicates TSG approved document under change control. y the second digit is incremented for all changes of substance, i.e. technical enhancements, corrections, updates, etc. z the third digit is incremented when editorial only changes have been incorporated in the document.

16 15 TS V8.3.0 ( ) 1 Scope The present document specifies the procedures used by the protocols for mobility management and session management between User Equipment (UE) and Mobility Management Entity (MME) in the Evolved Packet System (EPS). These protocols belong to the non-access stratum (NAS). The EPS Mobility Management (EMM) protocol defined in the present document provides procedures for the control of mobility when the User Equipment (UE) is using the Evolved UMTS Terrestrial Radio Access Network (E-UTRAN). The EMM protocol also provides control of security for the NAS protocols. The EPS Session Management (ESM) protocol defined in the present document provides procedures for the handling of EPS bearer contexts. Together with the bearer control provided by the access stratum, this protocol is used for the control of user plane bearers. For both NAS protocols the present document specifies procedures for the support of inter-system mobility between E-UTRAN and other 3GPP or non-3gpp access networks: - For inter-system mobility between E-UTRAN and GERAN or UTRAN, this includes rules for a mapping between parameters and procedures used by the NAS protocols defined in the present document and the NAS protocols specified in 3GPP TS [13]. - For inter-system mobility between E-UTRAN and generic non-3gpp access networks, this includes specific NAS procedures to maintain IP connectivity to the PDN Gateway and to provide parameters needed by the UE when using mobility management based on Dual-Stack Mobile IPv6 (see 3GPP TS [14]) or MIPv4 (see 3GPP TS [15]). The present document is applicable to the UE and to the Mobility Management Entity (MME) in the EPS. 2 References The following documents contain provisions which, through reference in this text, constitute provisions of the present document. References are either specific (identified by date of publication, edition number, version number, etc.) or non-specific. For a specific reference, subsequent revisions do not apply. For a non-specific reference, the latest version applies. In the case of a reference to a 3GPP document (including a GSM document), a non-specific reference implicitly refers to the latest version of that document in the same Release as the present document. [1] 3GPP TR : "Vocabulary for 3GPP Specifications". [1A] [1B] 3GPP TS : "Service accessibility". 3GPP TS : "Service requirements for the Evolved Packet System (EPS)". [2] 3GPP TS : "Numbering, addressing and identification". [3] 3GPP TS : "Alphabets and language-specific information". [4] 3GPP TS : "General Packet Radio Service (GPRS); Service Description; Stage 2". [5] 3GPP TS : "Quality of Service (QoS) concept and architecture". [6] 3GPP TS : "Non-Access-Stratum functions related to Mobile Station (MS) in idle mode". [7] 3GPP TS : "Policy and charging control architecture". [8] 3GPP TS : "Single Radio Voice Call Continuity (SRVCC); Stage 2".

17 16 TS V8.3.0 ( ) [8A] [8B] 3GPP TS : "Architectural requirements". 3GPP TS : "Network Sharing; Architecture and Functional Description". [9] 3GPP TS : "Circuit Switched Fallback in Evolved Packet System; Stage 2". [10] 3GPP TS : "GPRS enhancements for E-UTRAN access". [11] 3GPP TS : "GPRS architecture enhancements for non-3gpp accesses". [12] 3GPP TS : "Mobile radio interface signalling layer 3; General aspects". [13] 3GPP TS : "Mobile Radio Interface Layer 3 specification; Core Network Protocols; Stage 3". [13A] 3GPP TS : "Point-to-Point Short Message Service (SMS) support on mobile radio interface". [13B] 3GPP TS : "3GPP IMS Management Object (MO); Stage 3". [14] 3GPP TS : "Mobility Management based on DSMIPv6; User Equipment (UE) to network protocols; Stage 3". [15] 3GPP TS : "Mobility management based on Mobile IPv4; User Equipment (UE) - foreign agent interface; Stage 3". [15A] [15B] 3GPP TS : "User Equipment (UE) procedures in idle mode and procedures for cell reselection in connected mode". 3GPP TS : "Mobile Application Part (MAP) specification". [16] 3GPP TS : "Interworking between the Public Land Mobile Network (PLMN) supporting packet based services and Packet Data Networks (PDN)". [17] 3GPP TS : "Characteristics of the Universal Subscriber Identity Module (USIM) application". [18] 3GPP TS : "3G security; Security architecture". [19] 3GPP TS : "3GPP System Architecture Evolution; Security architecture". [20] 3GPP TS : "Evolved Universal Terrestrial Radio Access (E-UTRA) and Evolved Universal Terrestrial Radio Access Network (E-UTRAN); Overall description". [21] 3GPP TS : "Evolved Universal Terrestrial Radio Access (E-UTRA); User Equipment (UE) procedures in idle mode". [22] 3GPP TS : "Evolved Universal Terrestrial Radio Access (E-UTRA); Radio Resource Control (RRC) protocol specification". [23] 3GPP TS : "Evolved Universal Terrestrial Access Network (E-UTRAN); S1 Application Protocol (S1AP)". [23A] 3GPP TS : "Radio Access Network; Radio subsystem link control". [24] IETF RFC 2131 (March 1997): "Dynamic Host Configuration Protocol". [25] IETF RFC 3736 (April 2004): "Stateless Dynamic Host Configuration Protocol (DHCP) Service for IPv6". [26] IETF RFC 4039 (March 2005): "Rapid Commit Option for the Dynamic Host Configuration Protocol version 4 (DHCPv4)". [27] IETF RFC 4861 (September 2007): "IPv6 Neighbor Discovery for IP version 6 (IPv6)". [28] IETF RFC 4862 (September 2007): "IPv6 Stateless Address Autoconfiguration".

18 17 TS V8.3.0 ( ) [29] ISO/IEC 10646: "Information technology Universal Multiple-Octet Coded Character Set (UCS)". [30] ITU-T Recommendation E.212: "The international identification plan for mobile terminals and mobile users". 3 Definitions and abbreviations 3.1 Definitions For the purposes of the present document, the terms and definitions given in 3GPP TR [1] and the following apply. A term defined in the present document takes precedence over the definition of the same term, if any, in 3GPP TR [1]. 1x CS fallback capable UE: A UE that uses a CS infrastructure for a voice call and other CS-domain services by falling back to cdma2000 1x access network if the UE is served by E-UTRAN when a CS service is requested. Aggregate maximum bit rate: The maximum bit rate that limits the aggregate bit rate of a set of non-gbr bearers of a UE. Definition derived from 3GPP TS [10]. Allowed CSG list: A list of CSG IDs stored in the UE. A UE is able to access only those CSG cells that have a CSG ID in this list. CS fallback capable UE: A UE that uses a CS infrastructure for a voice call and other CS-domain services by falling back to A/Gb or Iu mode if the UE is served by E-UTRAN when a CS service is requested. CSG ID: A CSG ID is a unique identifier within the scope of one PLMN defined in 3GPP TS [2] which identifies a Closed Subscriber Group (CSG) in the PLMN associated with a cell or group of cells to which access is restricted to members of the CSG. CSG selection: A UE supporting CSG selection selects CSG cell either automatically based on the list of allowed CSG identities or manually based on user selection of CSG on indication of list of available CSGs. Definition derived from 3GPP TS [6]. EMM context: An EMM context is established in the UE and the MME when an attach procedure is successfully completed. EMM-CONNECTED mode: A UE is in EMM-CONNECTED mode when a NAS signalling connection between UE and network is established. The term EMM-CONNECTED mode used in the present document corresponds to the term ECM-CONNECTED state used in 3GPP TS [10]. EMM-IDLE mode: A UE is in EMM-IDLE mode when no NAS signalling connection between UE and network exists. The term EMM-IDLE mode used in the present document corresponds to the term ECM-IDLE state used in 3GPP TS [10]. EPS security context: In the present specification, EPS security context is used as a synonym for EPS NAS security context specified in 3GPP TS [19]. EPS services: Within the context of this specification, EPS services is used as a synonym for GPRS services in 3GPP TS [13]. Evolved packet core network: the successor to the 3GPP Release 7 packet-switched core network, developed by 3GPP within the framework of the 3GPP System Architecture Evolution (SAE). Evolved packet system: The evolved packet system (EPS) or evolved 3GPP packet-switched domain consists of the evolved packet core network and the evolved universal terrestrial radio access network. Definition derived from 3GPP TS [10]. Dedicated bearer: An EPS bearer that is associated with uplink packet filters in the UE and downlink packet filters in the PDN GW where the filters only match certain packets. Definition derived from 3GPP TS [10].

19 18 TS V8.3.0 ( ) Default bearer: An EPS bearer that gets established with every new PDN connection. Its context remains established throughout the lifetime of that PDN connection. A default EPS bearer is a non-gbr bearer. Definition derived from 3GPP TS [10]. GBR bearer: An EPS bearer that uses dedicated network resources related to a guaranteed bit rate (GBR) value, which are permanently allocated at EPS bearer establishment/modification. Definition derived from 3GPP TS [10]. Initial NAS message: A NAS message is considered as an initial NAS message, if this NAS message can trigger the establishment of a NAS signalling connection. For instance, the ATTACH REQUEST message is an initial NAS message. IPv4v6 capability: capability of the IP stack associated with a UE to support a dual stack configuration with both an IPv4 address and an IPv6 address allocated. Kilobit: 1000 bits. Last Visited Registered TAI: A TAI which is contained in the TAI list that the UE registered to the network and which identifies the tracking area last visited by the UE. Linked Bearer Identity: This identity indicates to which default bearer the additional bearer resource is linked. Mapped EPS security context: a mapped security context to be used in EPS. Definition derived from 3GPP TS [19]. Megabit: 1,000,000 bits. Message header: a standard L3 message header as defined in 3GPP TS [12]. MME area: An area containing tracking areas served by an MME. NAS signalling connection recovery: is a mechanism initiated by the NAS to restore the NAS signalling connection on indication of "RRC connection failure" by the lower layers. NAS signalling connection: is a peer to peer S1 mode connection between UE and MME. A NAS signalling connection consists of the concatenation of an RRC connection via the "LTE-Uu" interface and an S1AP connection via the S1 interface. Additionally, for the purpose of optimized handover or idle mode mobility from cdma2000 HRPD access to E-UTRAN (see 3GPP TS [11]), the NAS signalling connection can consist of a concatenation of an S101-AP connection and a signalling tunnel over a cdma2000 HRPD access network. NOTE: cdma2000 is a registered trademark of the Telecommunications Industry Association (TIA-USA). Non-access stratum protocols: The protocols between UE and MSC or SGSN that are not terminated in the UTRAN, and the protocols between UE and MME that are not terminated in the E-UTRAN. Definition derived from 3GPP TS [1]. Non-EPS services: services provided by CS domain. Within the context of this specification, non-eps services is used as a synonym for non-gprs services in 3GPP TS [13]. A UE which camps on E-UTRAN can attach to both EPS services and non-eps services. Non-GBR bearer: An EPS bearer that uses network resources that are not related to a guaranteed bit rate (GBR) value. Definition derived from 3GPP TS [10]. PDN address: an IP address assigned to the UE by the Packet Data Network Gateway (PDN GW). Plain NAS message: a NAS message with a header including neither a message authentication code nor a sequence number. Procedure Transaction Identity: An identity which is dynamically allocated by the UE for the UE requested ESM procedures. The procedure transaction identity is released when the procedure is completed. RAT-related TMSI: When the UE is camping on an E-UTRAN cell, the RAT-related TMSI is the GUTI; when it is camping on a GERAN or UTRAN cell, the RAT-related TMSI is the P-TMSI. Registered PLMN: The PLMN on which the UE is registered. The identity of the registered PLMN is provided to the UE within the GUTI.

20 19 TS V8.3.0 ( ) The label (S1 mode only) indicates that this subclause or paragraph applies only to a system which operates in S1 mode, i.e. with a functional division that is in accordance with the use of an S1 interface between the radio access network and the core network. In a multi-access system this case is determined by the current serving radio access network. S101 mode: applies to a system that operates with a functional division that is in accordance with the use of an S101 interface. For the definition of the S101 reference point, see 3GPP TS [11]. TAI list: A list of TAIs that identify the tracking areas that the UE can enter without performing a tracking area updating procedure. The TAIs in a TAI list assigned by an MME to a UE pertain to the same MME area. Additionally, the TAIs in a TAI list assigned by an MME to a CS fallback capable UE pertain to the same location area. In this case, the defining of the relationship between the tracking area(s) and the location area(s) is operator specific. Traffic flow aggregate: A temporary aggregate of packet filters that are included in a UE requested bearer resource allocation procedure or a UE requested bearer resource modification procedure and that is inserted into a traffic flow template (TFT) for an EPS bearer context by the network once the UE requested bearer resource allocation procedure or UE requested bearer resource modification procedure is completed. UE's usage setting: This is a UE setting that indicates whether the UE has preference for voice services over data services or vice-versa. If a UE has preference for voice services, then the UE's usage setting is "voice centric". If a UE has preference for data services, then the UE's usage setting is "data centric". A UE whose setting is "data centric" may still require access to voice services. A UE whose setting is "voice centric" may still require access to data services. This definition is derived from 3GPP TS [8A]. UE's usage setting applies only in the context of voice access domain selection for CS voice capable UEs. For the purposes of the present document, the following terms and definitions given in 3GPP TS [10] apply: MME pool area For the purposes of the present document, the following terms and definitions given in 3GPP TS [13] apply: A/Gb mode Access domain selection Iu mode TFT For the purposes of the present document, the following terms and definitions given in 3GPP TS [18] apply: UMTS security context For the purposes of the present document, the following terms and definitions given in 3GPP TS [19] apply: Current EPS security context K ASME K' ASME Mapped security context Native EPS security context Non-current EPS security context 3.2 Abbreviations For the purposes of the present document, the abbreviations given in 3GPP TR [1] and the following apply. An abbreviation defined in the present document takes precedence over the definition of the same abbreviation, if any, in 3GPP TR [1]. AKA AMBR APN APN-AMBR ARP CSG E-UTRA E-UTRAN ECM Authentication and Key Agreement Aggregate Maximum Bit Rate Access Point Name APN Aggregate Maximum Bit Rate Allocation Retention Priority Closed Subscriber Group Evolved Universal Terrestrial Radio Access Evolved Universal Terrestrial Radio Access Network EPS Connection Management

21 20 TS V8.3.0 ( ) eksi EMM EPC EPS ESM GBR GUMMEI GUTI HRPD ISR kbps KSI M-TMSI Mbps MBR MME MMEC PCO PD PDN GW PTI QCI QoS RRC S-TMSI S101-AP S1AP SAE TAC TAI TFT TI TIN Key Set Identifier for E-UTRAN EPS Mobility Management Evolved Packet Core Network Evolved Packet System EPS Session Management Guaranteed Bit Rate Globally Unique MME Identifier Globally Unique Temporary Identifier High Rate Packet Data Idle mode Signalling Reduction Kilobits per second Key Set Identifier M-Temporary Mobile Subscriber Identity Megabits per second Maximum Bit Rate Mobility Management Entity MME Code Protocol Configuration Options Protocol Discriminator Packet Data Network Gateway Procedure Transaction Identity QoS Class Identifier Quality of Service Radio Resource Control S-Temporary Mobile Subscriber Identity S101 Application Protocol S1 Application Protocol System Architecture Evolution Tracking Area Code Tracking Area Identity Traffic Flow Template Transaction Identifier Temporary Identity used in Next update 4 General 4.1 Overview The non-access stratum (NAS) described in the present document forms the highest stratum of the control plane between UE and MME at the radio interface (reference point "LTE-Uu"; see 3GPP TS [10]). Main functions of the protocols that are part of the NAS are: - the support of mobility of the user equipment (UE); and - the support of session management procedures to establish and maintain IP connectivity between the UE and a packet data network gateway (PDN GW). NAS security is an additional function of the NAS providing services to the NAS protocols, e.g. integrity protection and ciphering of NAS signalling messages. For the support of the above functions, the following procedures are supplied within this specification: - elementary procedures for EPS mobility management in clause 5; and - elementary procedures for EPS session management in clause 6. Complete NAS transactions consist of specific sequences of elementary procedures. Examples of such specific sequences can be found in 3GPP TS [10].