ETSI TS 148 071 V13.0.0 (2016-01)

ETSI TS 1148 071 V13.0.0 (201616-01)






TECHNICAL SPECIFICATIONION
Digital cellular telecocommunications system (Phahase 2+);
Locatcation Services (LCS);
Serving M Mobile Location Centre -
Base Station S System (SMLC-BSS) interfacace;
Layayer 3 specification
(3GPP TS 48.0.071 version 13.0.0 Release 13 13)

R
GLOBAL SYSTTEME FOR
MOBILE COMMUUNNICATIONS

---------------------- Page: 1 ----------------------
3GPP TS 48.071 version 13.0.0 Release 13 1 ETSI TS 148 071 V13.0.0 (2016-01)



Reference
RTS/TSGG-0248071vd00
Keywords
GSM
ETSI
650 Route des Lucioles
F-06921 Sophia Antipolis Cedex - FRANCE

Tel.: +33 4 92 94 42 00  Fax: +33 4 93 65 47 16

Siret N° 348 623 562 00017 - NAF 742 C
Association à but non lucratif enregistrée à la
Sous-Préfecture de Grasse (06) N° 7803/88

Important notice
The present document can be downloaded from:
http://www.etsi.org/standards-search
The present document may be made available in electronic versions and/or in print. The content of any electronic and/or
print versions of the present document shall not be modified without the prior written authorization of ETSI. In case of any
existing or perceived difference in contents between such versions and/or in print, the only prevailing document is the
print of the Portable Document Format (PDF) version kept on a specific network drive within ETSI Secretariat.
Users of the present document should be aware that the document may be subject to revision or change of status.
Information on the current status of this and other ETSI documents is available at
http://portal.etsi.org/tb/status/status.asp
If you find errors in the present document, please send your comment to one of the following services:
https://portal.etsi.org/People/CommiteeSupportStaff.aspx
Copyright Notification
No part may be reproduced or utilized in any form or by any means, electronic or mechanical, including photocopying
and microfilm except as authorized by written permission of ETSI.
The content of the PDF version shall not be modified without the written authorization of ETSI.
The copyright and the foregoing restriction extend to reproduction in all media.

© European Telecommunications Standards Institute 2016.
All rights reserved.

TM TM TM
DECT , PLUGTESTS , UMTS and the ETSI logo are Trade Marks of ETSI registered for the benefit of its Members.
TM
3GPP and LTE™ are Trade Marks of ETSI registered for the benefit of its Members and
of the 3GPP Organizational Partners.
GSM® and the GSM logo are Trade Marks registered and owned by the GSM Association.
ETSI

---------------------- Page: 2 ----------------------
3GPP TS 48.071 version 13.0.0 Release 13 2 ETSI TS 148 071 V13.0.0 (2016-01)
Intellectual Property Rights
IPRs essential or potentially essential to the present document may have been declared to ETSI. The information
pertaining to these essential IPRs, if any, is publicly available for ETSI members and non-members, and can be found
in ETSI SR 000 314: "Intellectual Property Rights (IPRs); Essential, or potentially Essential, IPRs notified to ETSI in
respect of ETSI standards", which is available from the ETSI Secretariat. Latest updates are available on the ETSI Web
server (https://ipr.etsi.org/).
Pursuant to the ETSI IPR Policy, no investigation, including IPR searches, has been carried out by ETSI. No guarantee
can be given as to the existence of other IPRs not referenced in ETSI SR 000 314 (or the updates on the ETSI Web
server) which are, or may be, or may become, essential to the present document.
Foreword
This Technical Specification (TS) has been produced by ETSI 3rd Generation Partnership Project (3GPP).
The present document may refer to technical specifications or reports using their 3GPP identities, UMTS identities or
GSM identities. These should be interpreted as being references to the corresponding ETSI deliverables.
The cross reference between GSM, UMTS, 3GPP and ETSI identities can be found under
http://webapp.etsi.org/key/queryform.asp.
Modal verbs terminology
In the present document "shall", "shall not", "should", "should not", "may", "need not", "will", "will not", "can" and
"cannot" are to be interpreted as described in clause 3.2 of the ETSI Drafting Rules (Verbal forms for the expression of
provisions).
"must" and "must not" are NOT allowed in ETSI deliverables except when used in direct citation.
ETSI

---------------------- Page: 3 ----------------------
3GPP TS 48.071 version 13.0.0 Release 13 3 ETSI TS 148 071 V13.0.0 (2016-01)
Contents
Intellectual Property Rights . 2
Foreword . 2
Modal verbs terminology . 2
Foreword . 5
1 Scope . 6
2 References . 6
3 Definitions and abbreviations . 6
4 Messages functional definitions and contents . 7
4.1 General . 7
4.2 Messages . 7
4.2.1 TA Request . 8
4.2.2 TA Response . 8
4.2.3 (void) . 8
4.2.4 (void) . 8
4.2.5 Reject . 8
4.2.6 Reset . 9
4.2.7 Abort . 9
4.2.8 TA Layer3 . 10
4.2.9 MS Position Command . 10
4.2.10 MS Position Response . 10
4.2.11 U-TDOA Request . 11
4.2.12 U-TDOA Response . 11
5 Information element encodings . 12
5.1 Message Type IE . 14
5.2 Timing Advance IE . 14
5.3 (void) . 14
5.4 Cell Identity IE . 14
5.5 (void) . 15
5.6 (void) . 15
5.7 (void) . 15
5.8 Channel Description IE . 15
5.9 (void) . 15
5.10 (void) . 15
5.11 (void) . 15
5.12 Measurement Report IE . 15
5.13 (void) . 16
5.14 Cause IE . 16
5.15 RRLP Flag IE . 16
5.16 RRLP IE . 17
5.17 Cell Identity List IE . 17
5.18 Enhanced Measurement Report IE . 18
5.19 Location Area Code IE . 18
5.20 Frequency List IE . 19
5.21 MS Power IE . 19
5.22 Delta Timer IE . 19
5.23 Serving Cell Identifier IE . 19
5.24 Encryption Key IE . 20
5.25 Cipher Mode Setting IE . 20
5.26 Channel Mode IE. 20
5.27 MultiRate Configuration IE . 20
5.28 Polling Repetition IE . 20
5.29 Packet Channel Description IE . 21
ETSI

---------------------- Page: 4 ----------------------
3GPP TS 48.071 version 13.0.0 Release 13 4 ETSI TS 148 071 V13.0.0 (2016-01)
5.30 TLLI IE . 21
5.31 TFI IE . 21
5.32 Starting Time IE . 21
5.33 Long Encryption Key IE . 22
5.34 Concurrent Positioning Flag . 22
Annex A (informative): Change History . 23
History . 24

ETSI

---------------------- Page: 5 ----------------------
3GPP TS 48.071 version 13.0.0 Release 13 5 ETSI TS 148 071 V13.0.0 (2016-01)
Foreword
rd
This Technical Specification has been produced by the 3 Generation Partnership Project (3GPP).
The contents of the present document are subject to continuing work within the TSG and may change following formal
TSG approval. Should the TSG modify the contents of the present document, it will be re-released by the TSG with an
identifying change of release date and an increase in version number as follows:
Version x.y.z
where:
x the first digit:
1 presented to TSG for information;
2 presented to TSG for approval;
3 or greater indicates TSG approved document under change control.
y the second digit is incremented for all changes of substance, i.e. technical enhancements, corrections,
updates, etc.
z the third digit is incremented when editorial only changes have been incorporated in the document.
ETSI

---------------------- Page: 6 ----------------------
3GPP TS 48.071 version 13.0.0 Release 13 6 ETSI TS 148 071 V13.0.0 (2016-01)
1 Scope
The present document contains the coding of information necessary for support of location service operation on the
SMLC-BSS interface layer 3.
Clause 2 gives the functional definitions and contents of messages for location service operations. Clause 3 gives the
general format and coding for messages used for location service and the format and coding of information elements
used for location service operations.
2 References
The following documents contain provisions which, through reference in this text, constitute provisions of the present
document.
• References are either specific (identified by date of publication, edition number, version number, etc.) or
non-specific.
• For a specific reference, subsequent revisions do not apply.
• For a non-specific reference, the latest version applies. In the case of a reference to a 3GPP document (including
a GSM document), a non-specific reference implicitly refers to the latest version of that document in the same
Release as the present document.
[1] 3GPP TR 21.905: "Vocabulary for 3GPP Specifications".
[2] 3GPP TS 43.059: "Functional stage 2 description of Location Services (LCS) in GERAN".
[3] 3GPP TS 24.007: "Mobile radio interface signalling layer 3; General aspects".
[4] 3GPP TS 44.018: "Mobile radio interface layer 3 specification; Radio Resource Control Protocol".
[4a] 3GPP TS 24.008: "Mobile radio interface layer 3 specification; Core network protocols; Stage 3".
[5] 3GPP TS 45.008: "Radio subsystem link control".
[6] 3GPP TS 48.008: "Mobile Switching Centre - Base Station System (MSC-BSS) interface; Layer 3
specification".
[7] 3GPP TS 49.031: "Location Services (LCS); Base Station System Application Part LCS Extension
(BSSAP-LE)".
[8] 3GPP TS 44.031: "Location Services (LCS); Mobile Station (MS) - Serving Mobile Location
Centre (SMLC) Radio Resource LCS Protocol (RRLP)".
3 Definitions and abbreviations
For the purposes of the present document, the abbreviations, terms and definitions given in 3GPP TR 21.905 and
3GPP TS 43.059 apply.
ETSI

---------------------- Page: 7 ----------------------
3GPP TS 48.071 version 13.0.0 Release 13 7 ETSI TS 148 071 V13.0.0 (2016-01)
4 Messages functional definitions and contents
4.1 General
This sub-clause defines the structure of the messages of the SMLC-BSS layer 3 protocol defined in 3GPP TS 43.059.
Each definition includes:
a) a brief description of the message;
b) a table listing the information elements in the order of their appearance in the message.
For each IE the table indicates:
1) the name of the IE (which gives an idea of the semantics of the element), which is used in this and other
specifications as a reference to the IE within the message;
2) the name of the type of the IE (which indicates the coding of the value part of the IE), and a reference to a
description of the value part of the IE;
3) the presence requirement indication (M, C or O) for the IE, as defined in 3GPP TS 24.007;
4) the format of the IE (T, V, TV, LV, TLV) as defined in 3GPP TS 24.007;
5) the length of the IE (or permissible range of lengths), in octets, in the message. The value of the length gives
the number of octets in the IE following the length and element identifier. Where the length is encoded using
more than one octet, the high order bit is bit 8 of the first (lowest numbered octet) and the low order bit is bit
1 of the last (highest numbered octet). When a length has a range of M to N octets, the notation "M-N" is
used. The symbol "n" represents the maximum of a range when indefinite.
c) sub-clauses specifying conditions for IEs with presence requirement C or O in the relevant message. Together
with other conditions specified in 3GPP TS 43.059 this defines when the IE shall be included or not, what
non-presence of such IEs means, and (for IEs with presence requirement C) the static conditions for presence
and/or non-presence of the IEs (see 3GPP TS 43.059).
4.2 Messages
The following Location Services related messages are exchanged between the SMLC and the BSS:
- TA Request;
- TA Response;
- Reject;
- Reset;
- Abort;
- TA Layer3;
- MS Position Command;
- MS Position Response;
- U-TDOA Request;
- U-TDOA Response.
On the Lb interface the messages are contained in the BSSLAP APDU IE which is encapsulated in the following
messages as specified in 3GPP TS 49.031:
ETSI

---------------------- Page: 8 ----------------------
3GPP TS 48.071 version 13.0.0 Release 13 8 ETSI TS 148 071 V13.0.0 (2016-01)
- BSSMAP-LE CONNECTION ORIENTED INFORMATION message (for all messages except the TA LAYER
3 message);
- BSSMAP-LE PERFORM LOCATION REQUEST message (for the TA LAYER 3 message)
- BSSMAP-LE PERFORM LOCATION INFORMATION message (for the TA LAYER 3 message).
4.2.1 TA Request
The TA Request is a message from the SMLC to the BSS, requesting BSS to return the timing advance (or access
delay) of the MS.
Table 4.2.1.1: TA Request message content
Information element Type/Reference Presence Format Length
Message Type Message Type IE / 5.1 M V 1

4.2.2 TA Response
The TA Response is a message from the BSS to the SMLC. It is a response to TA Request message and contains the
following information elements.
Table 4.2.2.1: TA Response message content
Information element Type/Reference Presence Format Length
Message Type Message Type IE / 5.1 M V 1
Serving Cell Identity Cell Identity IE / 5.4 M TV 3
Timing Advance Timing Advance IE / 5.2 M TV 2
Measurement Report Measurement Report IE / 5.12 O TLV 18
Enhanced Measurement Enhanced Measurement Report IE / 5.18 O TLV 4-n
Report
Measured Cell Identity Cell Identity List IE / 5.17 O TLV 6-n
List
Concurrent Method Flag Concurrent Positioning Flag IE / 5.34 O (note 1) TV 2
NOTE 1: This IE is only included when the BSC allows a concurrent invocation of a first and second
positioning procedure

4.2.3 (void)
4.2.4 (void)
4.2.5 Reject
The Reject is a message from the BSS to the SMLC. It is a possible response to TA Request, MS Position Command or
U-TDOA Request and contains the following information elements.
Table 4.2.5.1: Reject message content
Information element Type/Reference Presence Format Length
Message Type Message Type IE / 5.1 M V 1
Cause Cause IE / 5.14 M TV 2

The following are the expected cause values for Reject message:
- congestion;
- channel Mode not supported;
- positioning procedure not supported;
ETSI

---------------------- Page: 9 ----------------------
3GPP TS 48.071 version 13.0.0 Release 13 9 ETSI TS 148 071 V13.0.0 (2016-01)
- failure for other radio related events;
- incorrect serving cell identity;
- BSSAP-LE Segmentation error;
-  Concurrent Positioning not enabled.
4.2.6 Reset
The Reset is a message from the BSS to the SMLC. It is sent when the Response message contents for a positioning
request are invalidated (e.g. due to handover) before the positioning procedure was completed.
Table 4.2.6.1: Reset message content
Information element Type/Reference Presence Format Length
Message Type Message Type IE / 5.1 M V 1
Cell ID Cell Identity IE / 5.4 M TV 3
Timing Advance Timing Advance IE / 5.2 M TV 2
Channel description Channel Description IE / 5.8 M TV 4
Cause Cause IE / 5.1 M TV 2
Measurement Report Measurement Report IE / 5.12 O TLV 18
Enhanced Measurement Report Enhanced Measurement Report IE / 5.18 O TLV 4-n
Measured Cell Identity List Cell Identity List IE / 5.17 O TLV 6-n
LAC Location Area Code IE / 5.19 O TV 3
Frequency List Frequency List IE 5.20 C (note 1) TLV 3-n
Channel Mode Channel Mode IE 5.26 C (notes 2 TV 2
& 4)
MultiRate Configuration MultiRate Configuration 5.27 C (notes 3 TLV 4-n
& 4)
Packet Channel Description Packet Channel Description IE 5.29 C (note 5) TV 4
TLLI TLLI IE 5.30 C (note 5) TV 5
TFI TFI 5.31 C (note 5) TV 2
TBF Starting Time Starting Time IE 5.32 C (note 5) TV 3
Encryption Key (Kc) Encryption Key IE 5.24 C (note 6) TV 9
Cipher Mode Setting Cipher Mode Setting IE 5.25 C (note 4) TV 2
Long Encryption Key (Kc128) Long Encryption Key IE 5.33 C(note 7) TV 17
NOTE 1: The Frequency List IE is included only for U-TDOA when frequency hopping is used.
NOTE 2: The Channel Mode IE is included only for U-TDOA using FR or AMR (not included for EFR).
NOTE 3: The MultiRate Configuration IE is included only for U-TDOA using AMR.
NOTE 4: This IE can only be present for CS U-TDOA location method
NOTE 5: This IE can only be present for PS U-TDOA location method
NOTE 6: This IE can only be present for CS U-TDOA location method and if the Ciphering Mode Setting IE
indicates A5/1 or A5/3.
NOTE 7: This IE can only be present for CS U-TDOA location method and if the Ciphering Mode Setting IE
indicates A5/4.

The following are the expected cause values for Reset message:
- intra-BSS handover;
- failure for other radio related events;
- supervision Timer Expired;
- incorrect serving cell identity.
4.2.7 Abort
The Abort is a message from the BSS to the SMLC. Upon receiving this signal, the SMLC shall abort ongoing
positioning procedure.
ETSI

---------------------- Page: 10 ----------------------
3GPP TS 48.071 version 13.0.0 Release 13 10 ETSI TS 148 071 V13.0.0 (2016-01)
Table 4.2.7.1: Abort message content
Information element Type/Reference Presence Format Length
Message Type Message Type IE / 5.1 M V 1
Cause Cause IE / 5.14 M TV 2

The following are the expected cause values for Abort message:
- failure for other radio related events;
- supervision Timer Expired;
- inter BSS handover;
- loss of signalling connection to MS.
4.2.8 TA Layer3
The TA Layer3 is an optional encapsulated message from the BSS to the SMLC that adds the following information in
Complete layer 3 Information as described in 3GPP TS 48.008.
Table 4.2.8.1: TA Layer3 message content
Information element Type/Reference Presence Format Length
Message Type Message Type IE / 5.1 M V 1
Timing Advance Timing Advance IE / 5.2 M TV 2
Measurement Report Measurement Report IE / 5.12 O TLV 18
Enhanced Measurement Report Enhanced Measurement Report IE / 5.18 O TLV 4-n
Measured Cell Identity List Cell Identity List IE / 5.17 O TLV 6-n

4.2.9 MS Position Command
The BSSLAP MS Position Command is a message from the SMLC to BSS that contains the following information
elements.
Table 4.2.9.1: MS Position Command message content
Information element Type/Reference Presence Format Length
Message Type Message Type IE / 5.1 M V 1
flag RRLP flag IE / 5.15 M TV 2
RRLP Info RRLP IE / 5.16 M TLV 3-n

4.2.10 MS Position Response
The BSSLAP MS Position Response is a message from the BSS to the SMLC that contains the following information
elements.
ETSI

---------------------- Page: 11 ----------------------
3GPP TS 48.071 version 13.0.0 Release 13 11 ETSI TS 148 071 V13.0.0 (2016-01)
Table 4.2.10.1: MS Position Response message content
Information element Type/Reference Presence Format Length
Message Type Message Type IE / 5.1 M V 1
flag RRLP flag IE / 5.15 M TV 2
RRLP Info RRLP IE / 5.16 M TLV 3-n
Timing Advance Timing Advance IE / 5.2 O TV 2
Measurement Report Measurement Report IE / 5.12 O TLV 18
Enhanced Measurement Report Enhanced Measurement Report IE / 5.18 O TLV 4-n
Measured Cell Identity List Cell Identity List IE / 5.17 O TLV 6-n
Concurrent Method Flag Concurrent Positioning Flag IE / 5.34 O (note 1) TV 2
NOTE 1: This IE is only included when the BSC allows a concurrent invocation of a first and second positioning
procedure

4.2.11 U-TDOA Request
The U-TDOA Request is a message from the SMLC to the BSS. It contains the following information elements.
Table 4.2.11.1: U-TDOA Request message content
Information element Type/Reference Presence Format Length
Message Type Message Type IE 5.1 M V 1
Delta Timer Delta Timer IE 5.22 O (note 1) TV 2
Polling Repetition Polling Repitition IE 5.28 (note) C (note 2) TV 2
NOTE 1: This IE can only be present for CS U-TDOA location method
NOTE 2: This IE is only present for PS U-TDOA location method

4.2.12 U-TDOA Response
The U-TDOA Response is a message from the BSS to the SMLC. It is a response to the U-TDOA Request message. It
contains the following information elements.
ETSI

---------------------- Page: 12 ----------------------
3GPP TS 48.071 version 13.0.0 Release 13 12 ETSI TS 148 071 V13.0.0 (2016-01)
Table 4.2.12.1: U-TDOA Response message content
Information element Type/Reference Presence Format Length
Message Type Message Type IE 5.1 M V 1
Channel Description Channel Description IE 5.8 M TV 4
Serving Cell Identifier Cell Identifier IE 5.23 M TLV 4-n
Frequency List Frequency List IE 5.20 C (note 3) TLV 3-n
Timing Advance Timing Advance IE 5.2 O TV 2
MS Power MS Power IE 5.21 O TV 2
Measurement Report Measurement Report IE 5.12 O TLV 18
Encryption Key (Kc) Encryption Key IE 5.24 C (note 7) TV 9
Cipher Mode Setting Cipher Mode Setting IE 5.25 C (note 4) TV 2
Channel Mode Channel Mode IE 5.26 C (notes 1 & TV 2
4)
MultiRate Configuration MultiRate Configuration IE 5.27 C (notes 1 & TLV 4-n
4)
Measured Cell Identity List Cell Identity List IE / 5.17 O TLV 6-n
Packet Channel Packet Channel Description IE C (note 5) TV 4
Description 5.29
TLLI TLLI IE 5.30 C (note 5) TV 5
TFI TFI IE 5.31 C (note 5) TV 2
TBF Starting Time Starting Time IE 5.32 C (note 5) TV 3
Power-Up Starting Time Starting Time IE 5.32 O (note 6) TV 3
Long Encryption Key Long Encryption Key IE 5.33 C (note 8) TV 17
(Kc128)
Concurrent Method Flag Concurrent Positioning Flag IE / O (note 9) TV 2
5.34
NOTE 1: The Channel Mode IE is included only for U-TDOA using FR or AMR (not included for EFR).
NOTE 2: The MultiRate Configuration IE is included only for U-TDOA using AMR.
NOTE 3: The Frequency List IE is included only when frequency hopping is used. NOTE 4: This IE can only be
present for CS U-TDOA location method.
NOTE 5: This IE can only be present for PS U-TDOA location method .
NOTE 6: The Power-Up Starting Time IE is included if the Power-Up procedure is supported for U-TDOA location
method. It represents the starting time of the power-up and DTX suspension.
NOTE 7: This IE can only be present for CS U-TDOA location method and if the Ciphering Mode Setting I
...