- Application Detection and Control Based on ADC Rules Introduction
- Application Detection and Control over Sd Function
- TDF Overview
- ADC over Sd Overview
- Service Access Control in Sd
- Application Detection Reporting
- Dynamic Policy Control over Sd
- IP-CAN Session Reauthorization
- ADC Network Deployments over Sd
- ADC Traffic Cases over the Sd Interface
2 Application Detection and Control over Sd Function
2.1 TDF Overview
The TDF is a functional entity that performs application detection and enables the operator to have real-time and coordinated control over the services of the users. It is also responsible for the reporting of detected applications and describing their service data flow to the PCRF. The TDF detects the start and end of the respective service and notify the PCRF about it accordingly.
The TDF can be deployed in the network in the following ways:
2.1.1 TDF Selection
A TDF selected to establish a new Sd session associated with the IP-CAN session can be received in the CCR-Initial message with the TDF-Information AVP. If the TDF-Information AVP is not provided, the SAPC selects the TDF based on the internal configuration.
Two different types of TDF selection can be provided:
2.1.1.1 Select TDF Conditionally
2.1.1.2 Select TDF Unconditionally
2.2 ADC over Sd Overview
The SAPC that supports the ADC function over the Sd interface instructs the TDF to detect and report application start and stop events. Based on this report, the SAPC makes policy decisions and sends enforcement actions to the PCEF or the TDF, or both.
This function enables the operator to have real-time control over the services of the users. The operator can take the following immediate actions based on the application status:
QoS modification can be achieved by modifying the default or dedicated bearer QoS, or allocating dedicated resources.
The SAPC supports the activation of ADC rules in the TDF by using static ADC rules. These ADC rules can be used both for detection and enforcement. The type of the supported enforcement depends on the ADC rules defined in the TDF. The SAPC only activates or deactivates the ADC rules.
Figure 3 illustrates a high-level flow of the default bearer QoS upgrade based on notifications from the TDF. The TDF performs packet inspection on the data flow and detects when the user contacts a third-party content provider to start a video streaming service. The TDF informs the SAPC about the activation of the streaming service, and the SAPC adapts the QoS of the default bearer to guarantee the service delivery.
First, the default bearer is established with the negotiated QoS, then:
2.3 Service Access Control in Sd
The SAPC authorizes services as described in Access and Charging Control (Gx).
The procedure to determine the authorized services in Sd includes service selection, service authorization, and service qualification.
When the authorized service contains ADC configuration, the SAPC authorizes ADC rules to be activated in the TDF for a particular Sd session.
Service Access Control in Sd contains a few restrictions in comparison with Gx. For more information, see the following sections:
2.3.1 Service Selection
2.3.2 Service Authorization
Regardless ADC rule configuration, there is no restriction on service authorization.
2.3.3 Service Qualification
For those services that contain ADC rule configuration, only static service qualification applies, as described in Access and Charging Control (Gx).
2.4 Application Detection Reporting
The TDF performs application reporting if an Sd session is established for that purpose. The conditions for the SAPC to establish an Sd session for ADC towards the TDF associated with the PCEF that initiates the IP-CAN session are verified during the IP-CAN session establishment. These conditions are the following:
If all these conditions apply, an Sd session is established. This Sd session includes the ADC rules which are used in the TDF that is associated with the PCEF for the purpose of application detection.
Once the Sd session is established, the TDF performs application reporting.
| Note: |
The SAPC is subscribed to application start and stop event
triggers. |
The TDF reports the application status at application level or service data flow level, by sending the application start and stop events and application detection information to the SAPC.
If the reporting is at application level, the application detection information includes:
If the reporting is at service data flow level, the application detection information includes:
During the lifetime of an ADC rule, the SAPC expects that the application start and stop events are reported at the same level, that is either at application or service data flow level. The SAPC uses the TDF application identifier and TDF application instance identifiers received in the start and stop notifications reported by the TDF to keep track of the application traffic status.
| Note: |
The TDF reports application status to the SAPC, even if the
application traffic is discarded in the TDF. |
2.5 Dynamic Policy Control over Sd
2.5.1 Dynamic Policy Control over Sd Overview
This section describes the Dynamic Policy Control over Sd function of the SAPC.
Additionally to the Dynamic Policy Control based on the Rx interface already supported in the SAPC, Dynamic Policy Control over the Sd interface provides PCC differentiated per subscriber for services that are dynamically activated. These services take into account the information received from the TDF over the Sd interface.
When a subscriber initiates an application and a TDF is in the data path from the subscriber to the data network, the TDF notifies the activation of the application using the Sd protocol to the SAPC. The SAPC makes classification and policy decisions. As a result, the SAPC generates policy control and charging information and sends the appropriate PCC rules to the PCEF, by using the PCRF-initiated IP-CAN session modification procedure.
This provides a mechanism for the TDF to adapt the service delivery in the transport plane to the required conditions dynamically, by installing the applicable PCC rules in the PCEF with the corresponding QoS and charging parameters.
Depending on network and UE capabilities, the default bearer can be used to transport the service, or a dedicated bearer can be established. If a dedicated bearer cannot be established, the default bearer is shared among all the services running on the IP-CAN session as shown in Figure 3.
Dynamic Policy Control over Sd comprises the following functions:
The application information provided by the TDF includes the application identifier. Optionally, it can also include additional information, such as the set of IP flows required to deliver the service, and the application instance identifier. This information is used by the SAPC to identify and qualify the dynamic services according to the configured policies and conditions. Dynamic PCC rules are only generated when the TDF provides information about the IP flows required to deliver the service.
Figure 4 shows a high-level flow of the establishment of a dynamic service. In this case, the service delivery, for example Skype, requires the establishment of a dedicated bearer. During ADC, the TDF notifies the SAPC about the start of an application. The SAPC associates the received service data flows with an existing IP-CAN session and creates a policy rule for the service, which triggers the PGW to create a new dedicated bearer.
If a dedicated bearer cannot be established, the default bearer is shared among all the services running on the IP-CAN session.
2.5.2 Classification of Dynamic Services over Sd
This function determines the services that are dynamically activated in the PCEF based on information provided by the TDF through the Sd interface.
The TDF provides service information (application detection information) to the SAPC in the Credit Control Request-Update (CCR-U). The service data flows, when provided within the application detection information, are structured into a Flow-Information AVP in the CCR-U message. The SAPC uses this information to trigger the activation of one or more dynamic services, according to the configured conditions in the policies for dynamic service classification in Sd.
Dynamic service classification in Sd is performed at Sd session application reporting notification, including a START event, only if the TDF-Application-Instance-Identifier and Flow-Information AVPs are included in the Application-Detection-Information AVP.
Dynamic service classification is a global policy in the SAPC. It means that the policy is applied to all active subscribers and subscriber groups.
When a dynamic service is activated for an IP-CAN session based on information that is received over the Sd interface, it remains active until the SAPC receives a STOP notification, affecting the same IP-CAN session, for the corresponding TDF-Application-Id and TDF-Application-Instance-Identifier AVPs.
The following information received from the TDF can be evaluated to classify dynamic services in Sd:
The SAPC evaluates the policies for Dynamic Service Classification. The result of the service classification is the service identifier. The conditions (policy rules) to classify dynamic services are configured in the SAPC to match the application detection information received from the TDF. It is possible to classify one dynamic service per TDF-Application-Instance-Identifier AVP notified within the Application-Detection-Information AVP that is included in the CCR-U in the Sd session.
Figure 5 shows examples of service classification in Sd patterns and the associated dynamic service identifier.
The output service identifier of the classification process is used as a reference to perform the subsequent service qualification.
If no policies are defined in the SAPC to match the information received in the CCR-U command and classify the relevant dynamic services, or some policies are defined but no result is obtained, the SAPC does not execute the subsequent service qualification and dynamic PCC rule generation.
The SAPC answers to the TDF successfully, regardless the result of the service classification.
2.5.3 Qualification of Dynamic Services over Sd
When the dynamic services are successfully classified, the SAPC determines the QoS information and the charging parameters associated with the dynamic PCC rules generated for the service.
Dynamic service qualification over the Sd interface is performed:
The output of the qualification of a dynamic service is a QoS profile and a charging profile that contain the authorized QoS and charging information for the dynamic PCC rule generated for the service.
For newly established dynamic services, this process, together with the dynamic PCC rule generation, results in new PCC rules sent to the PCEF in a Re-Authorization-Request (RAR) command.
For existing dynamic services, the SAPC re-evaluates the dynamic service qualification policies to detect changes. If the QoS or charging information differs from what was provisioned to the PCEF, the SAPC updates the existing PCC rules by sending a RAR command to the PCEF.
Dynamic services can be qualified with QoS or charging data, or both, either statically, using the contentQosProfileId and contentChargingProfileId attributes, or using policy conditions. The SAPC first evaluates the service qualification policies according to the following precedence allocation:
If there are conflicts among the rules within a policy, the result for the policy depends on the rule combining algorithm configured. For more information, see Subscription and Policy Management.
If there are no applicable policies, or the policies are not fulfilled, the SAPC obtains the QoS and charging profile statically assigned to the dynamic service.
2.5.3.1 Allocation of QoS Information to Dynamic Services
The QoS information includes the following pieces of information:
To get the QoS information associated with the dynamic service, the SAPC evaluates the QoS policies that apply to the service identifier that is obtained from the Dynamic Service Classification procedure. These policies can consider subscriber information, access network information provided by the PCEF, and application detection information provided by the TDF.
The QoS information is assigned per service identifier.
If the QoS profiles obtained after the policy evaluation do not provide values for the QCI, MBR, or GBR, the SAPC omits these values in the dynamic PCC rule for this IP flow.
If there are no applicable policies, or the policies are not fulfilled, the SAPC obtains the QoS profile provisioned to the dynamic service (static qualification).
2.5.3.2 Allocation of Charging Parameters to Dynamic Services
The charging parameters define the following:
To get the charging profile associated with a dynamic service, the SAPC evaluates the charging policies that apply to the service identifier obtained in the Dynamic Service Classification procedure. These policies can consider subscriber information, access network information provided by the PCEF, and application detection information provided by the TDF.
If the charging profile obtained after the policy evaluation does not provide any of the optional charging parameters, this information is omitted from the dynamic PCC rule.
If there are no applicable policies, or the policies are not fulfilled, the SAPC obtains the charging profile provisioned to the dynamic service (static qualification).
Finally, if the procedure cannot obtain a charging profile, no charging information is included in the dynamic PCC rule.
2.5.4 Dynamic PCC Rule Generation Based on Service Data Flow Received over Sd
The SAPC receives information about the initiated application through the Sd interface. If the flow information and application instance identifier are received, the SAPC generates the PCC information in the form of PCC rules. These dynamic PCC rules are installed in the PCEF through the Gx protocol.
The SAPC can generate one dynamic PCC rule per application instance identifier received from the TDF. New dynamic PCC rules are generated when new dynamic services are established, that is when the TDF sends an application start notification.
Figure 6 shows the relation between the TDF service information received through the Sd interface and the PCC rule information that is generated by the SAPC and installed in the PCEF using the Gx interface.
The information received from the TDF contains the following AVPs:
The SAPC generates the corresponding dynamic PCC rule for each TDF-Application-Instance-Identifier AVP, and installs the corresponding PCC rule. The SAPC can generate one PCC rule per TDF-Application-Instance-Identifier AVP.
The SAPC generates each PCC rule containing the following information:
2.6 IP-CAN Session Reauthorization
In the SAPC, the establishment and termination of dynamic services over the Sd interface also trigger a re-evaluation of all previous policy decisions taken for the IP-CAN session. Examples of the application of session reauthorization owing to dynamic service establishment include the ability to apply Bearer QoS Control, Access and Charging Control, and Bandwidth Management to other services running in the IP-CAN session.
Session reauthorization owing to dynamic service establishment is useful, for example, in the following scenarios:
The SAPC reauthorizes the IP-CAN session at TDF session notification, regardless the generation of dynamic PCC rules. The SAPC uses the TDF application identifier and TDF application instance identifiers received in the start and stop notifications reported by the TDF to keep track of application traffic status and uses this information to evaluate the applicable policies for the IP-CAN session to perform the following functions:
For more information, see the following documents:
The conditions (policy rules) for the functions mentioned above are extended to apply policy decisions based on the establishment of a dynamic service over Sd as follows:
3 ADC Network Deployments over Sd
The SAPC can provide Application and Detection Control in the following network deployments:
4 ADC Traffic Cases over the Sd Interface
This section explains the Sd interface which is involved in the ADC function based on TDF network deployment, and the traffic interactions between the network functions involved. For a detailed description of the Sd interface, see Sd Interface Description.
The precondition to all traffic cases is that a diameter connection is already established between the SAPC and the PCEF, and between the SAPC and the TDF. In addition, support for dynamic PCC rules in the PCEF for the GGSN (PGW) and the following policy controls must be enabled in the PCEF:
The Session-Id is a mandatory AVP for all the messages in the Sd protocol, to identify a TDF session uniquely.
Precondition to all traffic cases:
4.1 Sd Session Life Cycle
These traffic cases show the Sd session life cycle: establishment, modification, and termination.
4.1.1 Sd Session Establishment
Sd session establishment can be initiated at:
Figure 7 shows an example of Sd session establishment at IP-CAN session establishment.
Figure 8 shows an example of Sd session establishment at IP-CAN session reauthorization due to a Gx CCR-U message.
During the IP-CAN session reauthorization, the SAPC may decide that an Sd session should be established with the TDF per corresponding IP-CAN session. No Sd session is established yet, because the SAPC did not send an Sd TSR message since there were no authorized ADC rules to be activated in the TDF. It can also happen that the SAPC did not receive the Sd TSA message or received it with an error.
Figure 9 shows an example of Sd session establishment at IP-CAN session reauthorization due to subscriber change or SAPC events (ToD, Rx, or Sy).
Figure 9 Sd Session Establishment at IP-CAN Session Reauthorization
due to Subscriber Change or SAPC Events (ToD, Rx, Sy)During the IP-CAN session establishment, the SAPC may decide that an Sd session should be established with the TDF per corresponding IP-CAN session.
No Sd session is established yet: the SAPC did not send an Sd TSR message since there were no authorized ADC rules to be activated in the TDF. It can also happen that the SAPC did not receive the Sd TSA message or received it with an error.
4.1.2 Sd Session Modification
4.1.3 Sd Session Termination
Session termination is initiated at the request of the PCRF. It happens when the corresponding IP-CAN session is terminated due to the regular IP-CAN session termination, basic clean-up, or massive clean-up when the PCEF is restarted.
Figure 12 shows an example of the Sd session termination traffic case.
| Note: |
The IP-CAN session termination acknowledgement can be sent
before initiating Sd session termination. |
4.2 QoS Control Based on Application Traffic Detection Upgrading Default Bearer
Based on the notifications received over the Sd interface, the SAPC determines the QoS information to provide for the default bearer, in scenarios where the network or the UE does not support dedicated bearers.
Figure 13 shows an example of default bearer QoS control based on Sd application detection notification.
4.2.1 Session Establishment
4.3 QoS Control Based on Application Traffic Detection Allocating Dedicated Bearer
If the TDF sends a CCR-U start notification, including the Flow-Information and TDF-Application-Instance-Identifier AVPs, the SAPC classifies, qualifies, and generates a new dynamic PCC rule from that information. The new dynamic PCC rule is installed in the PCEF through the Gx protocol.
Once dedicated bearers are established in the PCEF based on start notifications received over the Sd interface, the SAPC may request the PCEF to update or terminate these dedicated bearers based on the information received over the Gx interface. Such information can be the location information, for example.
Upon receiving a Gx CCR-U message, the services associated with the subscriber are reauthorized. These services include dynamic services as well. As a result, qualification policies can update the QoS or charging profile.
If an APPLICATION_STOP notification is received, the corresponding PCC rule that was previously installed in the PCEF has to be removed.
Figure 14 shows an example of dedicated bearer QoS control based on Sd application detection notification.
4.3.1 Session Establishment
4.4 ADC over Sd Error Handling
4.4.1 Error Handling at Sd Session Establishment
Table 1 shows the potential error codes of Sd session establishment.
|
Error Condition |
Action |
Code |
|---|---|---|
|
The SAPC does not receive a TSA message after sending a TSR. |
The Sd session will not be created and the SAPC logs the error (Timeout receiving a TSA). |
- |
|
The SAPC receives a TSA with one of the following error codes:
|
The Sd session will not be created and the SAPC logs the error (Unsuccessful TSA received). |
- |
|
The SAPC receives a TSA with the DIAMETER_TOO_BUSY error code. |
The Sd session will not be created and the SAPC does not log the error either. |
- |
| Note: |
Regardless the error circumstance over the Sd interface,
the SAPC answers with a Gx CCA message according to the Gx processing
result. |
4.4.2 Error Handling at Sd Session Modification
Table 2 shows the potential error codes of Sd session modification.
|
Error Condition |
Action |
Code |
|---|---|---|
|
After sending the RAR message, the SAPC does not receive an RAA. |
- |
|
|
The SAPC receives an RAA message with one of the following error codes:
|
- |
|
|
The SAPC receives an RAA message with either of the following error codes:
|
The Sd session will be deleted, the corresponding dynamic PCC rules will be removed and the SAPC logs the error (Unsuccessful RAA received). |
- |
|
The SAPC receives an RAA message with the DIAMETER_TOO_BUSY error code. |
The SAPC does not log the error. |
- |
|
The SAPC receives an RAA message with the DIAMETER_UNABLE_TO_COMPLY error code. |
- |
4.4.3 Error Handling at Sd Session Termination
Table 3 shows the potential error codes of Sd session termination.
|
Error Condition |
Action |
Code |
|---|---|---|
|
After sending a Re-Authorization-Request-Terminate (RAR-T) message, the SAPC does not receive a Re-Authorization Answer-Terminate (RAA-T) message. |
- |
|
|
The SAPC receives an RAA-T message with one of the following error codes:
|
- |
|
|
The SAPC receives an RAA-T message with either of the following error codes:
|
The Sd session will be deleted and the SAPC logs the error (Unsuccessful RAA received). |
- |
|
The SAPC receives an RAA-T message with the DIAMETER_TOO_BUSY error code. |
The SAPC logs the error. |
- |
|
The SAPC receives an RAA-T message with the DIAMETER_UNABLE_TO_COMPLY error code. |
- |
|
|
The SAPC receives a CCR-T message, but the SAPC does not have an existing Sd session. |
The SAPC rejects the transaction and returns a CCA message indicating an error. |
The Result-Code AVP is set to DIAMETER_UNKNOWN_SESSION_ID (5002). |
|
The SAPC receives a DIAMETER_UNKNOWN_SESSION_ID error code from the PCEF in the Gx RAA message. |
The SAPC deletes the IP-CAN session, and terminates the related Sd session by sending a RAR-T command. |
- |
4.4.4 Error Handling at Application Reporting
Table 4 shows how the SAPC handles the errors when receiving an Sd CCR-U, missing certain AVPs.
|
Error Condition |
Action |
Code |
|---|---|---|
|
The SAPC receives a CCR-U message for an obsolete session (the SAPC already initiated the Sd session termination procedure). |
The SAPC returns a CCA message indicating an error and logs the error (Internal Error) |
The Result-Code AVP is set to DIAMETER_UNABLE_TO_COMPLY (5012). |
|
The SAPC receives a CCR-U message for an application start or stop event, but the Application-Detection-Information AVP is not included in it. |
The Result-Code AVP is set to DIAMETER_MISSING_AVP (5005). |
|
|
The SAPC receives a CCR-U message, including one or more Application-Detection-Information AVP, but the start or stop event triggers are not included in it. |
The Result-Code AVP is set to DIAMETER_MISSING_AVP (5005). |
|
|
The SAPC receives a CCR-U message for an application start or stop event trigger, but the TDF-Application-Identifier AVP is not included in one or more Application-Detection-Information AVP. |
The Result-Code AVP is set to DIAMETER_MISSING_AVP (5005). |
|
|
The SAPC receives a CCR-U message for an application start event trigger with the Application-Detection-Information AVP, including the TDF-Application-Instance-Identifier AVP, but not including the corresponding Flow-Information AVP. |
The Result-Code AVP is set to DIAMETER_MISSING_AVP (5005). |
|
|
The SAPC receives a CCR-U message for an application start event trigger with the Application-Detection-Information AVP, including the Flow-Information AVP, but not including the corresponding TDF-Application-Instance-Identifier AVP. |
The Result-Code AVP is set to DIAMETER_MISSING_AVP (5005). |
|
|
The SAPC receives a CCR-U message for an application start event with the TDF-Application-Instance-Identifier AVP, but the CCR-U message for the corresponding stop event does not have it.(1) |
The Result-Code AVP is set to DIAMETER_MISSING_AVP (5005). |
|
|
The SAPC receives a CCR-U message for an application start event with the TDF-Application-Instance-Identifier AVP, and another CCR-U with the application start is received without the TDF-Application-Instance-Identifier AVP.(2) |
The Result-Code AVP is set to DIAMETER_MISSING_AVP (5005). |
|
|
The SAPC receives a CCR-U but the SAPC does not have an existing Sd session |
The SAPC rejects the transaction and returns a CCA message indicating an error. |
The Result-Code AVP is set to DIAMETER_UNKNOWN_SESSION_ID (5002). |
4.4.5 Error Handling at Dedicated Bearer Reported as Inactive by PCEF
Upon receiving a Gx CCR-U message notifying about the termination of a dedicated bearer, the SAPC removes the dynamic service from the Gx IP-CAN session and performs policy evaluation ignoring the affected PCC rules.
The SAPC can reauthorize the Sd by installing or removing ADC rules, if this depends on the services running on the IP-CAN session. This is especially important in those scenarios where the TDF is performing charging for a detected application. If a dedicated bearer is created for the service data flow of this application, or the application receives a QoS treatment, based on the default bearer characteristics, the charging can be different.

Contents