Chapter 5.
Signaling System
Er. Kobid Karkee
IOE, Thapathali Campus
1
Introduction
Channel Associated Signaling
Still widely deployed today
Considered as old telephony
Common Channel Signaling
Separation of signaling and call paths
Signaling System 7 (SS7)
To enable a wide range of services to be
provided to the end-user
Caller ID, toll-free calling, call screening, number
portability, etc.
SS7 is the foundation for Intelligent Network (IN)
services.
1/14/2025 2
Channel-Associated Signalling (CAS)
CAS means in-band signalling over the same physical channels as the circuit-switched
user traffic (e.g. voice).
Signalling is possible
Exchange
Exchange Exchange
Signalling is not possible
before previous circuit-
Circuit switched connection switched link is established
CAS has two serious draw-backs:
• Setting up a circuit switched connection is very slow.
• Signalling to/from databases is not feasible in practice (setting up a
circuit switched connection to the database and then releasing it would
be extremely inconvenient).
1/14/2025
3
Common channel signalling (CCS)
In practice, CCS = SS7.
Signalling is possible anywhere anytime
Exchange Exchange Database
The packet-switched signalling network is totally separated from
the circuit-switched connections. Consequently:
• Signalling to/from databases is possible anytime.
• End-to-end signalling is possible before call setup and also
during the conversation phase of a call.
There is one drawback: It is difficult to check if the circuit-switched
connections are really working (= continuity check).
1/14/2025
4
SS7 – A Brief Overview
❑ Defined by ITU-T in its Q.700-series, ANSI, and ETSI
❑ Out-of-band signaling system
❑ Designed for call control, remote network management, and
maintenance
❑ Combines circuit-switched and packet-switched networks
❑ Suitable for use on point-to-point terrestrial and satellite links
❑ SS7 networks are flexible, reliable, with capacity up to 64Kbps
1/14/2025
5
Applications
⚫ Allows telecommunications networks to offer wide ranges of services such as
telephony, fax
transmission, data transfer
⚫ Setting up and tearing down circuit-switched connections
⚫ Support for Intelligent Network (IN) services such as toll-free (800) calling, SMS,
EMS
⚫ Mobility management in cellular networks
⚫ Local Number Portability (LNP) to allow subscribers to change their service,
service provider, and location without needing to change their telephone number
⚫ Support for ISDN.
1/14/2025
6
SS7 Network Architecture
1/14/2025
7
Signaling Points
• SS7 constitutes three different types of Signaling Points (SP) –
➢ Signaling Transfer Point
➢ Service Switching Point
➢ Service Control Point
Signaling Transfer Points Service Switching Points Service Control Points
Transfers SS7 messages between Capable of controlling voice circuits Acts as an interface between
other via a telecommunications
SS7 nodes voice switch databases and the SS7
network
Acts as a router for SS7 messages Converts signaling from voice Provide the core functionality
switch into SS7 format of cellular networks
Does not originate SS7 messages Can originate and terminate Provides access to database
messages, but
cannot transfer them
1/14/2025
8
Signaling Links
Access (A) Link Bridge (B) Link
⚫ Access Links connects SCP or SSP to an STP. Only messages originating from
or destined to the signaling end point are transmitted on an "A" link.
⚫ Bridge Links connect mated pairs of STPs to each other at the same
hierarchical level.
1/14/2025
9
Signaling Links
Cross (C) Link Diagonal (D) Link
⚫ Cross Links connect STP to its mate STP. Not used for routing.
⚫ Diagonal Links connect mated STP pairs from one hierarchical level to another
mated STP pair at a higher level.
1/14/2025
10
Signaling Links
Extended (E) Link Fully Associated (F) Link
⚫ Extended Links connect SSPs and SCPs to remote STP pairs.
⚫ Fully Associated Links route large amount of traffic between two SSPs.
Connect network SSPs and/or SCPs directly to each other without using
STPs.
1/14/2025
11
SS7 Protocol Stack
▪ SS7 is developed in a layered architecture like
OSI model
▪ OSI protocol stack implementation
➢ Physical Layer (Level 1)- MTP Level 1
➢ Data link Layer (Level 2)- MTP Level 2
➢ Network Layer (Level 3)- MTP Level 3 +
SCCP
➢ User Part (Level 4)- INAP, MAP, IS-41, TCAP,
CAP, ISUP
1/14/2025
12
SS7 Protocol Stack
SS7 Layers
Message Transfer Part (MTP) – divided into three levels
➢ MTP Level 1 – defines the physical interfaces
➢ MTP Level 2 – ensures reliable transfer of signaling messages
➢ MTP Level 3 – provides message routing between signaling points in the SS7 network
Signaling Connection Control Protocol (SCCP) –
➢ Combination of MTP and SCCP forms the SS7 Network Services Part (NSP). Enhances the message
carrying facilities of MTP
➢ Provides some network layer protocol functions
ISDN User Part (ISUP) and Telephone User Part (TUP) –
➢ Defines the protocol used to set-up, manage, and release trunk circuits
Transaction Capabilities Application Part (TCAP) –
➢ Allow new applications to use SS7
1/14/2025
13
Application to Application Communication
1/14/2025
14
Signaling Link Level (MTP Level 2) & Signaling Units
⚫ Basic Frame Structure
⚫ Frame with Error Correction (4 fields at the end and beginning of frame – BSN, BB, FSN, FB) and Length
Indicator (contains info about bytes in information part, & message type)
⚫ SS7 uses three types of signal units –
◦ Message Signal Units (MSU) -
◦ Link Status Signal Unit (LSSU)
◦ Fill-In Signal Unit (FISU) –
1/14/2025
15
Signaling Units…
Message Signaling Unit
• Carries SS7 information
• Consists of MTP protocol fields and two additional
fields
➢ Service indicator octet (SIO) - indicates type of
protocol at level 4, e.g. TUP, ISUP, and type of
standard, e.g. national, international.
➢ Service information field (SIF) - used to carry control
information as well as level 3 routing label. SIF can
be up to 272 octets and is used by all level 4
protocols
1/14/2025
16
Signaling Units
Link Status Signaling Unit
• Carries link status information
• Used by level 3 at one node to transmit link status information to its adjacent node
• Used only on single point-to-point links, and never through the network
• Carries no information traffic on a link when LSSU are sent
1/14/2025
17
Signaling Units
Fill-In Signaling Unit
• Used when no information needs be sent and the network is idle
• Used to monitor error rates on links. This allows SS7 to be highly reliable as it can detect
link quality even when idle
• Constantly monitors the link status
1/14/2025
18
Signalling in SS7 Network
4. STP X forwards
IAM SSP B
3. STP W forwards
IAM to STP X
2. SSP A formulates W
Initial Address
Message (IAM),
forwards to STP W
Y X
1. Caller goes offhook,
dials callee. SSP A
decides to route call
via SSP B. Assigns
idle trunk A-B
1/14/2025
19
Signaling in SS7 Network
5. SSP B determines it serves callee,
creates address completion message
(ACM[A,B,trunk]), rings callee phone,
sends ringing sound on trunk to A
6. ACM routed to Z to Y to A
7. SSP A receives
ACM, connects
subscriber line to
allocated A-B
trunk (caller
hears ringing)
1/14/2025
20
Signaling in SS7 Network
8. Callee goes off hook, SSP B
sends answer message to A
(ANM[A,B,trunk])
9. ANM routed to A
10. SSP A receives ANM,
checks caller is
connected in both
directions to trunk.
Call is Connected!
1/14/2025
21
Signalling in SS7 Network
14. STP X forwards
REL to SSP B
13. STP W receives the
message and forwards it
to switch B.
Y X
11. If the calling
subscriber goes on
hook, SSP A will
generate a release
(REL) message to
switch B.
1/14/2025
22
Signaling in SS7 Network
14. Switch B receives the REL message,
disconnects trunks, returns the trunk
15 RLC routed to to idle state, and generates a release
Z to Y to A complete (RLC) message addressed
to A. RLC identifies the trunk used
for the call.
16 On receiving the
RLC, SSP A
makes the
identified trunk
idle.
1/14/2025
23
Signaling a 800 Call
800 number: logical phone number
• Translation to physical phone number needed, e.g., 1-800-CALL_ATT translates to 162- 962-1943
3. SCP M performs lookup,
sends reply to A
M
W
2. STP W forwards request to
SCP M
Y
1. Caller dials 800
number, SSP A
recognizes 800
number, formulates
translation query,
send to STP W
1/14/2025
24
Signaling a 800 Call
W Z
⚫ SSP A begins
signaling to set up
call to number
associated with
800 number Y X
1/14/2025
25
User Parts Functionality in SS7 Network
The User parts in SS7 protocol stack offers its services to user designed applications
⚫ The Transaction Capabilities Application Parts (TCAPs) are employed when the
application deals with Database query and response.
◦ Exchange of non-circuit related data
◦ Queries and responses sent between SSPs and SCPs
◦ Sends and receives database information
⚫ The Integrated Services Digital Network User Parts (ISUPs) are meant for handling
of telephone call related
messaging which is sent from switch to switch.
◦ Sends and receives database information
◦ Messages are sent from a switch, to the switch where the next circuit connection
is required
◦ Call circuits are identified using circuit identification code (CIC)
1/14/2025
26
User Parts Functionality in SS7 Network
ISUP Messages
• Initial address message (IAM): Contains all necessary information for a
switch to establish a connection
• Address complete message (ACM): Acknowledge to IAM and
reserve the required circuit
• Answer message (ANM): Occurs when the called party picks up
the phone and actual connection is established
• Release (REL): Sent by the switch to clear the call
• Release complete (RLC): Acknowledges to the receipt of REL by each
exchange that receives REL
1/14/2025
27
User Parts Functionality in SS7 Network
ISUP Normal Call Flow Scenario
1/14/2025
28