Case 6:14-cv-00982-KNM Document 147-7 Filed 11/09/15 Page 1 of 10 PageID #: 1346
`Case 6:14-cv-00982-KNM Document 147-7 Filed 11/09/15 Page 1of10PagelD#: 1346
`
`
`
`
`
`EXHIBIT 7
`EXHIBIT 7
`
`
`
`

`

`
`
`
`
`Case 6:14-cv-00982-KNM Document 147-7 Filed 11/09/15 Page 2 of 10 PageID #: 1347
`
`3GPP TS 23.003 V7.1.0 (2006-09)
`
`Technical Specification
`
`3rd Generation Partnership Project;
`Technical Specification Group Core Network and Terminals;
`Numbering, addressing and identification
`(Release 7)
`
`GLOBAL SYSTEM FOR
`MOBILE COMMUNICATIONS
`
`R
`
`
`
`The present document has been developed within the 3rd Generation Partnership Project (3GPP TM) and may be further elaborated for the purposes of 3GPP.
`
`
`The present document has not been subject to any approval process by the 3GPP Organizational Partners and shall not be implemented.
`
`This Specification is provided for future development work within 3GPP only. The Organizational Partners accept no liability for any use of this Specification.
`Specifications and reports for implementation of the 3GPP TM system should be obtained via the 3GPP Organizational Partners' Publications Offices.
`
`

`

`Case 6:14-cv-00982-KNM Document 147-7 Filed 11/09/15 Page 3 of 10 PageID #: 1348
`
`
`Release 7
`
`2
`
`3GPP TS 23.003 V7.1.0 (2006-09)
`
`
`
`
`
`
`
`Keywords
`GSM, UMTS, addressing
`
`3GPP
`
`Postal address
`
`
`3GPP support office address
`650 Route des Lucioles - Sophia Antipolis
`Valbonne - FRANCE
`Tel.: +33 4 92 94 42 00 Fax: +33 4 93 65 47 16
`
`Internet
`http://www.3gpp.org
`
`Copyright Notification
`
`No part may be reproduced except as authorized by written permission.
`The copyright and the foregoing restriction extend to reproduction in all media.
`
`© 2006, 3GPP Organizational Partners (ARIB, ATIS, CCSA, ETSI, TTA, TTC).
`All rights reserved
`
`3GPP
`
`

`

`Case 6:14-cv-00982-KNM Document 147-7 Filed 11/09/15 Page 4 of 10 PageID #: 1349
`
`
`Release 7
`
`3
`
`3GPP TS 23.003 V7.1.0 (2006-09)
`
`Contents
`
`Foreword ............................................................................................................................................................6
`1
`Scope........................................................................................................................................................7
`1.1
`References.......................................................................................................................................................... 7
`1.1.1
`Normative references ................................................................................................................................... 7
`1.1.2
`Informative references.................................................................................................................................. 9
`1.2
`Abbreviations..................................................................................................................................................... 9
`1.3
`General comments to references...................................................................................................................... 10
`1.4
`Conventions on bit ordering............................................................................................................................. 10
`2
`Identification of mobile subscribers.......................................................................................................10
`2.1
`General............................................................................................................................................................. 10
`2.2
`Composition of IMSI....................................................................................................................................... 10
`2.3
`Allocation principles........................................................................................................................................ 11
`2.4
`Structure of TMSI............................................................................................................................................ 11
`2.5
`Structure of LMSI............................................................................................................................................ 12
`2.6
`Structure of TLLI............................................................................................................................................. 12
`2.7
`Structure of P-TMSI Signature ........................................................................................................................ 13
`3
`Numbering plan for mobile stations.......................................................................................................13
`3.1
`General............................................................................................................................................................. 13
`3.2
`Numbering plan requirements.......................................................................................................................... 13
`3.3
`Structure of MS international PSTN/ISDN number (MSISDN)...................................................................... 14
`3.4
`Mobile Station Roaming Number (MSRN) for PSTN/ISDN routeing ............................................................ 14
`3.5
`Structure of Mobile Station International Data Number.................................................................................. 15
`3.6
`Handover Number............................................................................................................................................ 15
`3.7
`Structure of an IP v4 address ........................................................................................................................... 15
`3.8
`Structure of an IP v6 address ........................................................................................................................... 15
`4
`Identification of location areas and base stations...................................................................................15
`4.1
`Composition of the Location Area Identification (LAI) .................................................................................. 15
`4.2
`Composition of the Routing Area Identification (RAI) ................................................................................... 16
`4.3
`Base station identification................................................................................................................................ 16
`4.3.1
`Cell Identity (CI) and Cell Global Identification (CGI)............................................................................. 16
`4.3.2
`Base Station Identify Code (BSIC) ............................................................................................................ 17
`4.4
`Regional Subscription Zone Identity (RSZI) ................................................................................................... 17
`4.5
`Location Number ............................................................................................................................................. 18
`4.6
`Composition of the Service Area Identification (SAI)..................................................................................... 18
`5
`Identification of MSCs, GSNs and location registers ............................................................................18
`5.1
`Identification for routeing purposes................................................................................................................. 18
`5.2
`Identification of HLR for HLR restoration application ................................................................................... 19
`6
`International Mobile Station Equipment Identity and Software Version Number.................................19
`6.1
`General............................................................................................................................................................. 19
`6.2
`Composition of IMEI and IMEISV ................................................................................................................. 19
`6.2.1
`Composition of IMEI ................................................................................................................................. 19
`6.2.2
`Composition of IMEISV ............................................................................................................................ 20
`6.3
`Allocation principles........................................................................................................................................ 20
`7
`Identification of Voice Group Call and Voice Broadcast Call Entities..................................................20
`7.1
`Group Identities ............................................................................................................................................... 20
`7.2
`Group Call Area Identification ........................................................................................................................ 21
`7.3
`Voice Group Call and Voice Broadcast Call References................................................................................. 21
`8
`SCCP subsystem numbers......................................................................................................................22
`8.1
`Globally standardized subsystem numbers used for GSM/UMTS .................................................................. 22
`8.2
`National network subsystem numbers used for GSM/UMTS.......................................................................... 22
`
`3GPP
`
`

`

`Case 6:14-cv-00982-KNM Document 147-7 Filed 11/09/15 Page 5 of 10 PageID #: 1350
`
`
`Release 7
`
`4
`
`3GPP TS 23.003 V7.1.0 (2006-09)
`
`Definition of Access Point Name...........................................................................................................23
`9
`Structure of APN ............................................................................................................................................. 23
`9.1
`Format of APN Network Identifier ............................................................................................................ 23
`9.1.1
`Format of APN Operator Identifier............................................................................................................ 23
`9.1.2
`Definition of the Wild Card APN .................................................................................................................... 24
`9.2
`Coding of the Wild Card APN ................................................................................................................... 24
`9.2.1
`Identification of the Cordless Telephony System entities......................................................................24
`10
`General description of CTS-MS and CTS-FP Identities.................................................................................. 24
`10.1
`CTS Mobile Subscriber Identities.................................................................................................................... 24
`10.2
`General....................................................................................................................................................... 24
`10.2.1
`Composition of the CTSMSI ............................................................................................................................................ 25
`10.2.3
`Allocation principles .................................................................................................................................. 25
`10.2.4
`CTSMSI hexadecimal representation......................................................................................................... 25
`10.3
`Fixed Part Beacon Identity .............................................................................................................................. 25
`10.3.1
`General....................................................................................................................................................... 25
`10.3.2
`Composition of the FPBI............................................................................................................................ 26
`10.3.2.1
`FPBI general structure.......................................................................................................................... 26
`10.3.2.2
`FPBI class A......................................................................................................................................... 26
`10.3.2.3
`FPBI class B ......................................................................................................................................... 26
`10.3.3
`Allocation principles .................................................................................................................................. 27
`10.4
`International Fixed Part Equipment Identity.................................................................................................... 27
`10.4.1
`General....................................................................................................................................................... 27
`10.4.2
`Composition of the IFPEI .......................................................................................................................... 27
`10.4.3
`Allocation principles .................................................................................................................................. 28
`10.5
`International Fixed Part Subscription Identity ................................................................................................. 28
`10.5.1
`General....................................................................................................................................................... 28
`10.5.2
`Composition of the IFPSI........................................................................................................................... 28
`10.5.3
`Allocation principles .................................................................................................................................. 28
`11
`Identification of Localised Service Area................................................................................................29
`12
`Identification of PLMN, RNC, Service Area, CN domain and Shared Network Area..........................29
`12.1
`PLMN Identifier .............................................................................................................................................. 29
`12.2
`CN Domain Identifier ...................................................................................................................................... 29
`12.3
`CN Identifier.................................................................................................................................................... 30
`12.4
`RNC Identifier ................................................................................................................................................. 30
`12.5
`Service Area Identifier..................................................................................................................................... 30
`12.6
`Shared Network Area Identifier....................................................................................................................... 30
`13 Numbering, addressing and identification within the IP multimedia core network subsystem .............31
`13.1
`Introduction...................................................................................................................................................... 31
`13.2
`Home network domain name ........................................................................................................................... 31
`13.3
`Private user identity ......................................................................................................................................... 31
`13.4
`Public User Identity ......................................................................................................................................... 32
`13.5
`Public service identity (PSI) ............................................................................................................................ 32
`13.6
`Anonymous User Identity................................................................................................................................ 32
`14 Numbering, addressing and identification for 3GPP System to WLAN Interworking..........................33
`14.1
`Introduction...................................................................................................................................................... 33
`14.2 Home network realm ................................................................................................................................................ 33
`14.3
`Root NAI ......................................................................................................................................................... 33
`14.4
`Decorated NAI................................................................................................................................................. 34
`14.4A
`Fast Re-authentication NAI ............................................................................................................................. 34
`14.5 Temporary identities................................................................................................................................................. 35
`14.6 Alternative NAI ........................................................................................................................................................ 35
`14.7
`W-APN ............................................................................................................................................................ 35
`14.7.1
`Format of W-APN Network Identifier ....................................................................................................... 35
`14.7.2
`Format of W-APN Operator Identifier....................................................................................................... 36
`14.7.3
`Alternative Format of W-APN Operator Identifier .................................................................................... 36
`15
`Identification of Multimedia Broadcast/Multicast Service ....................................................................37
`15.1
`Introduction...................................................................................................................................................... 37
`15.2
`Structure of TMGI ........................................................................................................................................... 37
`
`3GPP
`
`

`

`Case 6:14-cv-00982-KNM Document 147-7 Filed 11/09/15 Page 6 of 10 PageID #: 1351
`
`
`Release 7
`
`5
`
`3GPP TS 23.003 V7.1.0 (2006-09)
`
`Structure of MBMS SAI .................................................................................................................................. 37
`15.3
`16 Numbering, addressing and identification within the GAA subsystem .................................................37
`16.1
`Introduction...................................................................................................................................................... 37
`16.2
`BSF address ..................................................................................................................................................... 38
`17 Numbering, addressing and identification within the Generic Access Network....................................38
`17.1
`Introduction...................................................................................................................................................... 38
`17.2
`Network Access Identifiers.............................................................................................................................. 38
`17.2.1
`Home network realm.................................................................................................................................. 38
`17.2.2
`Full Authentication NAI............................................................................................................................. 39
`17.2.3
`Fast Re-authentication NAI........................................................................................................................ 39
`17.3
`Node Identifiers ............................................................................................................................................... 39
`17.3.1
`Home network domain name ..................................................................................................................... 39
`17.3.2
`Provisioning GANC-SEGW identifier....................................................................................................... 40
`17.3.3
`Provisioning GANC identifier ................................................................................................................... 40
`Colour Codes..................................................................................................42
`Annex A (informative):
`A.1 Utilization of the BSIC...........................................................................................................................42
`A.2 Guidance for planning............................................................................................................................42
`A.3 Example of PLMN Colour Codes (NCCs) for the European region......................................................43
`IMEI Check Digit computation....................................................................44
`Annex B (normative):
`B.1 Representation of IMEI..........................................................................................................................44
`B.2 Computation of CD for an IMEI ............................................................................................................44
`B.3 Example of computation ........................................................................................................................44
`Naming convention ........................................................................................46
`Annex C (normative):
`C.1 Routing Area Identities ..........................................................................................................................46
`C.2 GPRS Support Nodes.............................................................................................................................47
`C.3 Target ID ................................................................................................................................................47
`Applicability and use of the ".3gppnetwork.org" domain name...............48
`Annex D (informative):
`Procedure for sub-domain allocation...........................................................49
`Annex E (normative):
`Change history ...............................................................................................50
`Annex F (informative):
`
`
`3GPP
`
`

`

`Case 6:14-cv-00982-KNM Document 147-7 Filed 11/09/15 Page 7 of 10 PageID #: 1352
`
`
`Release 7
`
`6
`
`3GPP TS 23.003 V7.1.0 (2006-09)
`
`Foreword
`This Technical Specification (TS) has been produced by the 3rd Generation Partnership Project (3GPP).
`
`The present document defines the principal purpose and use of International Mobile station Equipment Identities (IMEI)
`within the digital cellular telecommunications system and the 3GPP system.
`
`The contents of the present document are subject to continuing work within the TSG and may change following formal
`TSG approval. Should the TSG modify the contents of the present document, it will be re-released by the TSG with an
`identifying change of release date and an increase in version number as follows:
`
`Version x.y.z
`
`where:
`
`x
`
`the first digit:
`
`1 presented to TSG for information;
`
`2 presented to TSG for approval;
`
`3 or greater indicates TSG approved document under change control.
`
`y the second digit is incremented for all changes of substance, i.e. technical enhancements, corrections, updates,
`etc.
`
`z
`
`the third digit is incremented when editorial only changes have been incorporated in the document.
`
`3GPP
`
`

`

`Case 6:14-cv-00982-KNM Document 147-7 Filed 11/09/15 Page 8 of 10 PageID #: 1353
`
`
`Release 7
`
`10
`
`3GPP TS 23.003 V7.1.0 (2006-09)
`
`General comments to references
`1.3
`The identification plan for mobile subscribers defined below is that defined in ITU-T Recommendation E.212.
`
`The ISDN numbering plan for MSs and the allocation of mobile station roaming numbers is that defined in ITU-T
`Recommendation E.213. Only one of the principles for allocating ISDN numbers is proposed for PLMNs. Only the
`method for allocating MS roaming numbers contained in the main text of ITU-T Recommendation E.213 is
`recommended for use in PLMNs. If there is any difference between the present document and the ITU-T
`Recommendations, the former shall prevail.
`
`For terminology, see also ITU-T Recommendations E.164 and X.121.
`
`Conventions on bit ordering
`1.4
`The following conventions hold for the coding of the different identities appearing in the present document and in other
`GSM Technical Specifications if not indicated otherwise:
`
`-
`
`-
`
`the different parts of an identity are shown in the figures in order of significance;
`
`the most significant part of an identity is on the left part of the figure and the least significant on the right.
`
`When an identity appears in other Technical Specifications, the following conventions hold if not indicated otherwise:
`
`- digits are numbered by order of significance, with digit 1 being the most significant;
`
`- bits are numbered by order of significance, with the lowest bit number corresponding to the least significant bit.
`
`2
`
`Identification of mobile subscribers
`
`General
`2.1
`A unique International Mobile Subscriber Identity (IMSI) shall be allocated to each mobile subscriber in the
`GSM/UMTS system.
`
`NOTE: This IMSI is the concept referred to by ITU-T as "International Mobile Station Identity".
`
`In order to support the subscriber identity confidentiality service the VLRs and SGSNs may allocate Temporary Mobile
`Subscriber Identities (TMSI) to visiting mobile subscribers. The VLR and SGSNs must be capable of correlating an
`allocated TMSI with the IMSI of the MS to which it is allocated.
`
`An MS may be allocated two TMSIs, one for services provided through the MSC, and the other for services provided
`through the SGSN (P-TMSI for short).
`
`For addressing on resources used for GPRS, a Temporary Logical Link Identity (TLLI) is used. The TLLI to use is built
`by the MS either on the basis of the P-TMSI (local or foreign TLLI), or directly (random TLLI).
`
`In order to speed up the search for subscriber data in the VLR a supplementary Local Mobile Station Identity (LMSI) is
`defined.
`
`The LMSI may be allocated by the VLR at location updating and is sent to the HLR together with the IMSI. The HLR
`makes no use of it but includes it together with the IMSI in all messages sent to the VLR concerning that MS.
`
`Composition of IMSI
`2.2
`IMSI is composed as shown in figure 1.
`
`3GPP
`
`

`

`Case 6:14-cv-00982-KNM Document 147-7 Filed 11/09/15 Page 9 of 10 PageID #: 1354
`
`
`Release 7
`
`11
`
`3GPP TS 23.003 V7.1.0 (2006-09)
`
`3 digits
`
`MCC
`
`Not more than 15 digits
`
`2 or 3
`
`MNC
`
`IMSI
`
`MSIN
`
`NMSI
`
`Figure 1: Structure of IMSI
`
`
`
`IMSI is composed of three parts:
`
`1) Mobile Country Code (MCC) consisting of three digits. The MCC identifies uniquely the country of domicile of
`the mobile subscriber;
`
`2) Mobile Network Code (MNC) consisting of two or three digits for GSM/UMTS applications. The MNC
`identifies the home PLMN of the mobile subscriber. The length of the MNC (two or three digits) depends on the
`value of the MCC. A mixture of two and three digit MNC codes within a single MCC area is not recommended
`and is outside the scope of this specification.
`
`3) Mobile Subscriber Identification Number (MSIN) identifying the mobile subscriber within a PLMN.
`
`The National Mobile Subscriber Identity (NMSI) consists of the Mobile Network Code and the Mobile Subscriber
`Identification Number.
`
`Allocation principles
`2.3
`IMSI shall consist of decimal digits (0 through 9) only.
`
`The number of digits in IMSI shall not exceed 15.
`
`The allocation of Mobile Country Codes (MCCs) is administered by the ITU-T. The current allocation is given in the
`COMPLEMENT TO ITU-T RECOMMENDATION E.212 [44].
`
`The allocation of National Mobile Subscriber Identity (NMSI) is the responsibility of each administration.
`
`If more than one PLMN exists in a country, the same Mobile Network Code should not be assigned to more than one
`PLMN.
`
`The allocation of IMSIs should be such that not more than the digits MCC + MNC of the IMSI have to be analysed in a
`foreign PLMN for information transfer.
`
`Structure of TMSI
`2.4
`Since the TMSI has only local significance (i.e. within a VLR and the area controlled by a VLR, or within an SGSN and
`the area controlled by an SGSN), the structure and coding of it can be chosen by agreement between operator and
`manufacturer in order to meet local needs.
`
`The TMSI consists of 4 octets. It can be coded using a full hexadecimal representation.
`
`In order to avoid double allocation of TMSIs after a restart of an allocating node, some part of the TMSI may be related
`to the time when it was allocated or contain a bit field which is changed when the allocating node has recovered from
`the restart.
`
`In areas where both MSC-based services and SGSN-based services are provided, some discrimination is needed
`between the allocation of TMSIs for MSC-based services and the allocation of TMSIs for SGSN-based services. The
`discrimination shall be done on the 2 most significant bits, with values 00, 01, and 10 being used by the VLR, and 11
`being used by the SGSN.
`
`3GPP
`
`

`

`Case 6:14-cv-00982-KNM Document 147-7 Filed 11/09/15 Page 10 of 10 PageID #: 1355
`
`
`Release 7
`
`12
`
`3GPP TS 23.003 V7.1.0 (2006-09)
`
`If intra domain connection of RAN nodes to multiple CN nodes as described in 3GPP TS 23.236 [23] is applied in the
`MSC/VLR or SGSN, then the NRI shall be part of the TMSI. The NRI has a configurable length of 0 to 10 bits. A
`configurable length of 0 bits indicates that the NRI is not used and this feature is not applied in the MSC/VLR or SGSN.
`The NRI shall be coded in bits 23 to 14. An NRI shorter than 10 bits shall be encoded with the most significant bit of
`the NRI field in bit 23.
`
`The TMSI shall be allocated only in ciphered form. See also 3GPP TS 43.020 [7] and 3GPP TS 33.102 [42].
`
`The network shall not allocate a TMSI with all 32 bits equal to 1 (this is because the TMSI must be stored in the SIM,
`and the SIM uses 4 octets with all bits equal to 1 to indicate that no valid TMSI is available).
`
`To allow for eventual modifications of the management of the TMSI code space management, MSs shall not check if an
`allocated TMSI belongs to the range allocated to the allocating node. MSs shall use an allocated TMSI according to the
`specifications, whatever its value.
`
`Structure of LMSI
`2.5
`The LMSI consists of 4 octets and may be allocated by the VLR. The VLR shall not allocate the value zero. The value
`zero is reserved to indicate that an LMSI parameter sent from the HLR to the VLR shall not be interpreted.
`
`Structure of TLLI
`2.6
`A TLLI is built by the MS or by the SGSN either on the basis of the P-TMSI (local or foreign TLLI), or directly
`(random or auxiliary TLLI), according to the following rules.
`
`The TLLI consists of 32 bits, numbered from 0 to 31 by order of significance, with bit 0 being the LSB.
`
`A local TLLI is built by an MS which has a valid P-TMSI as follows:
`
`
`
`
`
`bits 31 down to 30 are set to 1; and
`
`bits 29 down to 0 are set equal to bits 29 to 0 of the P-TMSI.
`
`A foreign TLLI is built by an MS which has a valid P-TMSI as follows:
`
`
`
`
`
`bit 31 is set to 1 and bit 30 is set to 0; and
`
`bits 29 down to 0 are set equal to bits 29 to 0 of the P-TMSI.
`
`A random TLLI is built by an MS as follows:
`
`
`
`
`
`
`
`bit 31 is set to 0;
`
`bits 30 down to 27 are set to 1