- Dynamic Policy Control Introduction
- Dynamic Policy Control Function
- Dynamic Policy Control Overview
- Negotiation of Rx Interface Version and Supported Features
- Session Binding
- Classification of Dynamic Services
- Authorization of Dynamic Services
- Qualification of Dynamic Services
- Generation of Dynamic PCC Rules
- IP-CAN Session Reauthorization
- Notification of Bearer Events to the AF
- IMS Related PCC Procedures over Rx
- Handling of Race Conditions Related to Multiple AF Requests
- Delay PCC Rules Installation for AF Sessions with Preliminary Service Information
- Extended bandwidth support for EPC supporting Dual Connectivity (E-UTRAN and 5G NR)
- Dynamic Policy Control Network Deployments
- Dynamic Policy Control Traffic Cases
- AF Session Lifetime
- Reauthorization of Dynamic Services
- Notification of Bearer Events
- Service Data Flow Deactivation
- Successful Resources Allocation
- Network Location Information (NetLoc)
- AF Session Creation or Modification to Add a Media Component
- AF Session Modification to Remove a Media Component or Media Subcomponent
- AF Session Termination
- IP-CAN Session Termination
- IP-CAN Bearer Release
- Failure Handling of AF Session Creation or Modification
- Failure Handling of AF Session Termination
- Network Location Information (NetLoc) in Untrusted WLAN Access
- IP-CAN Type Change Notification
- Notification of Signalling Path Status
- IMS Related Procedures
- Dynamic Policy Control Triggered by Application Service Detection
- Handling of Race Conditions Related to Multiple AF Requests
- Delay PCC Rules Installation for AF Sessions with Preliminary Service Information
- Dynamic Policy Control Error Handling
- Reference List
1 Dynamic Policy Control Introduction
This document describes the Dynamic Policy Control function of the SAPC.
This function provides Policy and Charging Control (PCC) differentiated per subscriber for services that are dynamically negotiated taking into account information received from the Application Function (AF) over the Rx interface.
2 Dynamic Policy Control Function
2.1 Dynamic Policy Control Overview
The SAPC Dynamic Policy Control functionality adheres to the architecture of the standardized PCRF function of the 3GPP PCC architecture, its defined policy control interfaces (Gx, Rx), and logical network elements (PCEF, AF). The AF provides session and service information to the SAPC. The SAPC makes authorization and policy decisions, and sends the appropriate PCC rules to the PCEF, by using the PCRF initiated IP-CAN session modification procedure. This provides a mechanism for the AF to adapt dynamically the service delivery in the transport plane to the required conditions.
When a subscriber wants to establish a session with an AF, such as the P-CSCF or a streaming server, application level signalling is started. Examples of application level signalling include using the Session Initiation Protocol (SIP) in the case of the P-CSCF or the Real Time Session Protocol (RTSP) in the case of a streaming server. The AF notifies the activation of a session using the Rx protocol, and includes dynamic session information. The SAPC then generates policy control and charging information, and installs the applicable PCC rules in the PCEF with the corresponding QoS parameters.
Depending on the capabilities of the network and the UE, the default bearer can be used to transport the service or a dedicated bearer can be established. If a dedicated bearer cannot be established, the default bearer is shared among all the services running on the IP-CAN session.
Dynamic Policy Control comprises the following functions:
There are different network scenarios where Dynamic Policy Control is applied, and some of the previous functions are only performed in particular network scenarios. The service information provided by the AF can include information such as the set of IP flows required to deliver the service, the type of media (for example, audio, video), the application identifier, the requested bandwidth. This information is used by the SAPC to identify, authorize, and control one or more dynamic services, according to the configured policies and conditions. However, dynamic PCC rules are only generated when the AF provides information about the IP flows required to deliver the service.
Figure 1 shows a high-level flow of the establishment of a dynamic service that makes use of the IP Multimedia Subsystem. In this case, the service delivery (for example, multimedia telephony) requires the establishment of dedicated bearers. During IMS session negotiation, the AF (P-CSCF) derives the service information and performs a resource allocation request towards the SAPC for the media being setup. The SAPC associates the received service data flows with an existing IP-CAN session and creates a set of policy rules for the media negotiated, which triggers the PGW to create a new dedicated bearer for the media type negotiated.
In other network scenarios, the AF merely provides an application identifier over the Rx interface, and no specific information on the characteristics of the media session being established (session media data). This identifier is used by the SAPC to trigger the activation of a dynamic service, and to reevaluate the policy information associated with the services that are running on the IP-CAN session. As the IP flows required to deliver the service are not provided, the SAPC cannot generate dynamic PCC rules. Policy control is then performed by Service Access and Charging Control, and IP-CAN Bearer QoS Control. In this case, the SAPC updates the QoS for the default bearer or sends preconfigured PCC rules to indicate to the PCEF that a dedicated bearer must be established.
The following examples describe scenarios where the AF only provides partial service information to the SAPC:
Figure 2 shows a high-level flow of the establishment of a dynamic service from a DPI node acting as AF. The DPI node performs packet inspection on the data flow and detects when the user contacts a third-party content provider to start a video streaming service. The DPI node informs the SAPC about the activation of the streaming service, and the SAPC adapts the QoS of the default bearer to guarantee the service delivery.
2.2 Negotiation of Rx Interface Version and Supported Features
During session establishment, the AF indicates the set of supported features required for the AF session. The SAPC indicates, in the first answer message, the set of supported features that it has in common with the AF and that the SAPC supports during the lifetime of the session. The set of supported features includes the Rx interface version and the set of optional features required for the AF session.
The AF provides the required Rx interface version in the initial AA-Request (AAR) command within the Supported-Features AVP. The SAPC ignores the value of Supported-Features AVP during AF session modification, if present in the AAR command.
The SAPC provides the negotiated Rx interface version
in the initial AA-Answer (AAA) command within the Supported-Features AVP, only when the AF session establishment
is successfully completed. If the AF is unable to interoperate using
Rx Release 9 onwards, the SAPC rejects the AF session establishment
with an error code according to the following:
2.3 Session Binding
Session binding is the association of the AF session information with an IP-CAN session.
The SAPC performs session binding only during AF session establishment. As a result from the session binding function, the SAPC identifies what IP-CAN session the current AF session is related to, and associates the described service IP flows in the AF session information with that IP-CAN session. Policy control decisions derived from AF session interactions are enforced in the associated IP-CAN session.
The SAPC must receive enough information in AA-Request message to bind the AF session to a single existing IP-CAN session.
If the SAPC is not capable of executing the session binding
or finds several candidate IP-CAN sessions to bind to, the SAPC sends
an AA-Answer command to the AF with the Experimental-Result-Code AVP set to IP-CAN_SESSION_NOT_AVAILABLE (5065).
The SAPC associates the AF session to the single IP-CAN session in function to the AVPs received over Rx interface according to the following order:
The administrative subscriber identifier is used to correlate the Subscription-Id AVPs received through the Rx interface
with the information received through the Gx interface. The SAPC obtains
the administrative subscriber identifier that is used for session
binding, as follows.
It is possible to have several Rx sessions (from either the same or different AF nodes) that bind to the same IP-CAN session. Moreover, dual stack IPv6v4 IP-CAN sessions may have associated several IPv4 Rx sessions and several IPv6 Rx sessions at the same time.
To perform session binding in those networks handling IP address
overlapping with the same PCEF (refer to
Access and Charging Control (Gx)), the SAPC must
receive Called-Station-Id information at AF session
creation. For the case of IP address overlapping among different PCEFs,
the SAPC must receive IP-Domain-Id or Subscription-Id AVP.
2.4 Classification of Dynamic Services
This function determines the services that are dynamically activated
in the SAPC from information provided by the AF through
the Rx interface. The AF provides session and service information
(session media data) to the SAPC in the AA-Request command. The session media data (when provided)
is structured into media components in the AA-Request command, which represent different data flows from the point of
view of the AF. The SAPC makes use of this information
to trigger the activation of one or more dynamic services, according
to the configured conditions in the policies for dynamic service classification.
The association between dynamic services and media components is fully
flexible, so that a dynamic service in SAPC may comprise
one or several AF media flows.
Dynamic service classification is performed at:
Dynamic service classification is a global policy in SAPC, meaning that it is applied to all active subscribers and subscriber groups. When a dynamic service is activated for a subscriber, it remains active until the AF terminates the session or removes the media stream that corresponds to the service. Modification of the AF session to update the characteristics of the media streams (session media data such as the IP flows, the requested bandwidth) does not trigger a re-evaluation of the policies for dynamic service classification.
The following information received from the AF can be evaluated to classify dynamic services:
The SAPC evaluates the policies for Dynamic Service Classification, and the result of the service classification is the service identifier. The conditions (policy rules) to classify dynamic services can be configured in SAPC to match a wide range of media patterns received from the AF, in particular it is possible to classify:
Figure 3 shows examples of service classification patterns and the associated dynamic service identifier.
The output service identifier of the classification process is used as a reference to perform subsequent service authorization and qualification.
If there are no policies defined in the SAPC to match
the information received in the AA-Request command
and classify the relevant dynamic services, then the SAPC responds
to the AF with an AA-Answer command including the Experimental-Result-Code AVP set to the value REQUESTED_SERVICE_NOT_AUTHORIZED
(5063), and creates a log.
2.5 Authorization of Dynamic Services
This function determines whether dynamic services are authorized for a given subscriber or subscriber group, under certain conditions (policies). By default, dynamic services are authorized.
Dynamic service authorization is performed in the following conditions:
There are two ways to manage the authorization of dynamic services, by configuring a list of restricted services (a blacklist), or by service authorization policies.
First, the SAPC evaluates if the dynamic service is blacklisted according to the corresponding subscriber or subscriber group profile. If the dynamic service is blacklisted, the service is not authorized.
In addition, the SAPC can use information received from the access network as input for the service authorization decision, such as the Radio Access Technology and the Subscriber Location Information. To make the service authorization decision, the SAPC evaluates the policies for service authorization with the service identifier obtained during the classification process as resource.
| Note: |
Time of day (ToD) policies are not supported in dynamic service
authorization. |
The actions taken by the SAPC when a dynamic service is classified but not authorized are different from the actions taken when a dynamic service currently running in the IP-CAN session becomes not authorized as a result of a change in the dynamic conditions that are evaluated.
Authorization of New Dynamic Services
If the result of the authorization of a newly classified dynamic
service is positive, the SAPC completes the AF session
establishment and returns a successful AA-Answer command. If the dynamic service is not authorized, the SAPC responds
to the AF with an AA-Answer command including the Experimental-Result-Code AVP set to the value REQUESTED_SERVICE_NOT_AUTHORIZED
(5063), and the service is not established in the IP-CAN session.
Reauthorization of Existing Dynamic Services in the IP-CAN session
During IP-CAN session reauthorization, the SAPC evaluates again the policies to decide whether a dynamic service that is running in the IP-CAN session continues to be authorized. This enables SAPC to detect if the service blacklist or the information received from the access network has changed.
If the result of the authorization of an existing dynamic service is negative, the SAPC removes the corresponding PCC rule(s) from the IP-CAN session. In addition, the SAPC informs the AF (only if the AF has previously requested the subscription to INDICATION_OF_RELEASE_OF_BEARER or INDICATION_OF_FAILED_RESOURCES_ALLOCATION events) that the service has been deactivated.
When all the services in the AF session are no longer authorized,
the SAPC informs the AF by sending an Abort-Session-Request (ASR) command. However, when there are still authorized services in the AF session,
the SAPC informs the AF by sending a Re-Auth-Request (RAR) command including the list of service data flows that have been
deactivated.
2.6 Qualification of Dynamic Services
After dynamic services are successfully classified and authorized, the SAPC determines the associated QoS information and the Charging parameters. If the dynamic service comprises AF media flows, this process results in the QoS information and the charging parameters associated with the dynamic PCC rules generated for the service. However, if the dynamic service has no media components associated, no dynamic PCC rules are generated with QoS and Charging information, and this functionality does not apply.
Dynamic service qualification is performed at:
The output of the qualification of a dynamic service is a QoS profile
and Charging profile that contain the authorized QoS and Charging
information for the dynamic PCC rules generated for the service. For
newly established dynamic services, this process, together with the
generation of dynamic PCC rules, results in new PCC rules sent to
the PCEF in a Re-Auth-Request command. For existing
dynamic services, the SAPC evaluates again the policies for
qualification of dynamic service to detect changes. If the QoS or
Charging information differs from what has been provisioned to the PCEF,
the SAPC updates the existing PCC rules by sending a Re-Auth-Request command to the PCEF.
The SAPC determines the QoS and Charging information associated with a dynamic service evaluating service QoS policies and service Charging policies, respectively, according to the following precedence allocation:
In case there are conflicts among the rules within a policy, the result for the policy depends on the Rule combining algorithm configured. Refer to "Solving Policies Conflicts" section in Subscription and Policy Management.
However, if there are not applicable policies, or the policies are not fulfilled, the SAPC obtains the QoS and Charging profile statically assigned to the dynamic service.
| Note: |
Time of day (ToD) policies are not supported in dynamic service
qualification. |
2.6.1 Allocation of QoS Information to Dynamic Services
The QoS information includes the QoS class identifier (authorized QoS class for the service data flow), the Allocation and Retention Priority (ARP) and authorized bit rates for uplink and downlink
To get the QoS Information associated with the dynamic service, the SAPC evaluates the QoS policies that apply to the service identifier that is obtained from the Dynamic Service Classification procedure. These policies can take into account subscriber information, access network information provided by the PCEF and media session information provided by the AF.
The QoS information is assigned per media component. For dynamic services that comprise several AF media flows, it is possible to allocate different QoS profiles to the different AF media components by including conditions such as the media type in the policy rules.
If the AF media component contains two subflows to deliver the
service (two media subcomponents), the SAPC assigns the QoS
information to each of the AF media subcomponents according to the
usage indicated for this particular IP flow in the Flow-Usage AVP.
If the QoS profiles obtained after the policy evaluation do not provide values for the QCI, MBR, or GBR, the SAPC applies the procedure defined in 3GPP to calculate the value of those QoS parameters.
This procedure is defined in Policy and Charging
Control signalling flows and QoS parameter mapping, TS 29.213, chapter QoS parameter mapping Functions at PCRF.
If there are not applicable policies, or the policies are not fulfilled, the SAPC obtains the QoS profile provisioned to the dynamic service (static qualification).
2.6.2 Allocation of Charging Parameters to Dynamic Services
The charging parameters define the Service Identifier, Rating Group, Reporting Level, Metering Method, and whether the online and offline charging interfaces are used.
To obtain the charging profile associated with a dynamic service, the SAPC evaluates the charging policies that apply to the service identifier that has been obtained in the Dynamic Service Classification procedure. These policies can take into account subscriber information, access network information provided by the PCEF and media session information provided by the AF. If there are not applicable policies, or the policies are not fulfilled, the SAPC obtains the Charging profile provisioned to the dynamic service (static qualification).
The charging information is assigned per media component associated with the dynamic service. Therefore, all dynamic PCC rules created for the same media component contain the same charging information.
For dynamic services that comprise several AF media flows, it is possible to allocate different Charging profiles to the different AF media components by including conditions such as the media type in the policy rules.
If the Charging profile obtained after the policy evaluation do not provide any of the optional charging parameters, this information is omitted from the dynamic PCC rule. Finally, if the procedure cannot obtain a charging profile, no charging information is included in the dynamic PCC rule
2.7 Generation of Dynamic PCC Rules
The SAPC receives information about the session that the user has negotiated with the AF through the Rx interface. This triggers the establishment of one or more dynamic services, by following the process of Dynamic Service Classification and Authorization. If the AF provides information about the IP flows required to deliver the service (media component information), the SAPC generates the policy control and charging information in the form of PCC rules. These dynamic PCC rules are installed in the PCEF through of the Gx protocol.
The SAPC generates one dynamic PCC rule for every media sub-component received from the AF. New dynamic PCC rules are generated when new dynamic services are established (that is, AF session establishment or modification of an existing AF session to add new media). Modification of the characteristics of existing dynamic services (that is, AF session modification) triggers a modification of the PCC rules that have been previously provisioned to the PCEF.
Figure 4 shows the relation between the AF service information received through the Rx interface and the PCC rule information that is generated by the SAPC and installed in the PCEF using the Gx interface.
The information received from the AF consists of the following (refer to Rx Interface Description for a complete list of supported AVPs):
The SAPC generates the dynamic PCC rules using the information described previously in the Dynamic Services Classification and Service Authorization policies. The SAPC generates the corresponding dynamic PCC rules for each media component, and installs the corresponding PCC rules. There is one PCC rule for each media subcomponent, which implies that there is one PCC rule for each RTP flow and one PCC rule for each RTCP flow. If the SAPC does not receive any media components, no PCC rules are created.
The SAPC generates each PCC rule containing the following information:
2.8 IP-CAN Session Reauthorization
Establishment, modification and termination of dynamic services also triggers in the SAPC a re-evaluation of all previous policy decisions taken for the IP-CAN session. Examples of the application of session reauthorization owing to dynamic service establishment include the ability to apply Bearer QoS Control, Access and Charging Control and BW Management to other services running on the IP-CAN session.
Session reauthorization owing to dynamic service establishment is useful in the following example scenarios:
The SAPC performs reauthorization of the IP-CAN session at AF session establishment, AF session modification and AF session termination, regardless of the generation of dynamic PCC rules. The SAPC evaluates the applicable policies for the IP-CAN session, to perform the following functionality (refer to Service Access and Charging Control and IP-CAN Bearer QoS Control).
The conditions (policy rules) for those functions are extended to be able to apply policy decisions based on the establishment of a dynamic service, as follows.
In addition, to calculate the QoS for the default bearer, the SAPC uses the Bearer QoS Control function extended with the following operations that can be used to take policy decisions.
2.9 Notification of Bearer Events to the AF
The AF may request the SAPC to be notified about certain
events on the user plane, such as when a bearer is released, by using
the Specific-Action AVP in an initial AA-Request command. This enables the AF to react to traffic
plane events by application level signalling.
The SAPC supports notification of the following traffic plane events:
The SAPC sends to the AF one notification message per
traffic event, even in situations where several traffic plane events
are reported simultaneously by the PCEF. For example, if the PCEF reports
in the same CC-Request command that one dynamic
PCC rule has been successfully installed and another dynamic PCC rule
has been deactivated, the SAPC sends two separate Re-Auth-Request commands to the AF.
2.9.1 IP-CAN Session Termination
When an IP-CAN session is terminated, the SAPC informs the AF about
the IP-CAN session termination by sending an Abort-Session-Request command to the AF on each active Rx Diameter session. As a result,
the AF indicates the termination of the Rx session by sending a Session-Termination-Request command to the SAPC.
2.9.2 Service Data Flow Deactivation
When a dynamic PCC rule cannot be installed/activated or enforced at the PCEF, the SAPC deactivates the corresponding dynamic service and informs the AF that one or more service data flows have been deactivated. This function enables the AF to react to events in the user plane by sending an AAR command to the SAPC to update the session information or an STR command to terminate the AF session.
The SAPC gets the knowledge that one or more service data
flows have been deactivated, on reception of a Charging-Rule-Report AVP in a CC-Request command that includes the PCC-Rule-Status AVP set to the value INACTIVE, the list
of failed PCC rules, and the failed reason code. Then the SAPC removes
the PCC rule(s) from the IP-CAN session, performs IP-CAN session reauthorization,
and notifies the AF if the AF has previously requested subscription
to INDICATION_OF_RELEASE_OF_BEARER or INDICATION_OF_FAILED_RESOURCES_ALLOCATION
events.
The notification from the SAPC details the affected IP flows, and includes a failure code that indicates the reason of the failure.
The Abort-Cause AVP is set to the value BEARER_RELEASED
in all cases except when the Rule-Failure-Code AVP
received from the PCEF is set to PS_TO_CS_HANDOVER (refer to SRVCC for more details).
2.9.3 Successful Resources Allocation
The AF may request the SAPC to provide a notification when the resources associated to the corresponding service information have been allocated. In this case, the SAPC requests the PCEF to confirm that the resources associated to the corresponding dynamic PCC rules are successfully allocated, and on reception of the confirmation from the PCEF, the SAPC notifies the AF. This function applies to applications for which the successful resource allocation notification is required for their operation. The drawback is that subscription to this notification impacts the resource allocation signalling overhead towards the PCEF.
The procedure to provide indication of successful resources allocation is detailed in Successful Resources Allocation.
2.9.4 Network Location Information
Network Location Information (NetLoc) is an optional function, and the SAPC negotiates its support during Gx and AF session establishment. It enables the SAPC to report one time report network location information during the AF session establishment, modification, or termination.
During the AF session establishment or modification, when the SAPC receives a request to report the access network information (user location or MS timezone, or both) from the AF, the SAPC sets the access network information report parameters in the corresponding PCC rules according to the information required by the AF, and provisions them to the PCEF together with the ACCESS_NETWORK_INFO_REPORT event trigger (refer to Access and Charging Control (Gx) for more information about event triggers).
When the SAPC receives the requested access network information, together with the ACCESS_NETWORK_INFO_REPORT event trigger, from the PCEF:
the SAPC provides it to the AF.
During the AF session termination, IP-CAN session termination, or IP-CAN bearer release (if all the service data flows within the AF session are affected), when the SAPC receives the NetLoc request from the AF in the session termination request, the SAPC answers with the corresponding access network information received from the PCEF. During the IP-CAN bearer release, if not all the service data flows within the AF session are affected, the SAPC provides the corresponding access network information in the Rx reauthorization request to the AF.
The SAPC automatically subscribes to the ACCESS_NETWORK_INFO_REPORT event trigger when at least one of the AFs associated to the IP-CAN session requests to report the access network information and this event trigger has not been previously subscribed for the IP-CAN session (therefore it is not required to statically or dynamically associate this event trigger to the subscriber).
2.9.4.1 Network Location Information in Untrusted WLAN access
The SAPC can also provide Netloc information when EPC-based untrusted WLAN access is used (if this function is successfully negotiated at Gx and Rx session establishment).
The difference with previous case is that in this case the SAPC can receive the following WLAN access network information from the PCEF, together with the ACCESS_NETWORK_INFO_REPORT event trigger:
At reception of the WLAN access network information from the PCEF, the SAPC sends it to the AF (if the AF supports Netloc in Untrusted WLAN function).
2.9.5 IP-CAN Type Change Notification
The IP-CAN Type Change Notification is a mechanism to report the UE's IP-CAN type and Radio Access Technology (RAT) type changes by access network to the AF.
When the SAPC receives the IP-CAN type change information from the PCEF, it sends a reauthorization request to the bound AF session only if the AF has previously subscribed to IP-CAN type change notification at AF session establishment.
During the AF session establishment and modification, the SAPC is able to provide IP-CAN type and RAT type information to the AF. The precondition is that the SAPC already subscribes to the IP-CAN_CHANGE event trigger and knows the information provided by the PCEF, even though the AF does not subscribe to IP-CAN type change notification.
The SAPC automatically subscribes to the IP-CAN_CHANGE and RAT_CHANGE event triggers when at least one of AFs associated to the same IP-CAN session requests subscription to IP-CAN type change notification and these two event triggers are not configured yet. The SAPC is also able to automatically unsubscribe to either one or both of the IP-CAN_CHANGE and RAT_CHANGE event triggers that are added due to AF's subscription to IP-CAN type change notification when the following preconditions are fulfilled:
2.9.6 Notification of Signalling Path Status
The Notification of Signalling Path Status function enables the SAPC to report the release of signalling transmission path from the PCEF to the AF. The precondition is that the AF subscribes to the notification of signalling path status at AF session establishment.
When receiving the following information from the AF, the SAPC identifies that the AF is requesting subscription to notification of signalling path status:
The SAPC searches the AF signalling path profile to identify the static or preconfigured service provisioned for the AF signalling, and identifies the corresponding PCC rule. The SAPC sends the PCC rule to the PCEF if the PCC rule has not been previously sent or is changed. When receiving from the PCEF the resource allocation failure for the PCC rule related to the AF signalling path, the SAPC notifies the AF of the release of signalling path by sending a reauthorization request.
If the AF subscribes to the notification of signalling path status but no AF signalling path profile is provisioned, the SAPC still accepts the AF's subscription. In this case, the SAPC can only notify the AF by an abort session request at IP-CAN session termination as introduced in IP-CAN Session Termination.
For one IP-CAN session, only one service can be related to an AF signalling path in the SAPC. For multiple AF sessions bound to the same IP-CAN session, only one AF session can successfully subscribe to the notification of signalling path status. It is possible to specify a different AF signalling path per APN and a default one. If the SAPC cannot find the configured service corresponding to the received APN, the SAPC uses the default one.
2.10 IMS Related PCC Procedures over Rx
2.10.1 Gating Control
This function controls the flow of IP packets through the PCEF according
to the information received from the AF. The SAPC receives
the Flow-Status AVP from the AF and applies this
information to the PCC rules installed on the PCEF. The Flow-Status
can be received from the AF for the whole media component or for a
media subcomponent. The Flow Status information provided for a media
component applies to all IP flows within the media component, for
which no corresponding information is being provided within Media-Sub-Component
AVPs.
The following values can be used to perform gating:
If a Media-Sub-Component AVP under a Media-Component-Description AVP contains a Flow-Usage AVP with the value RTCP, then the corresponding RTCP IP flows in both directions are enabled, even if the Flow-Status AVP under the Media-Sub-Component AVP is set to ENABLED-UPLINK, ENABLED-DOWNLINK, or DISABLED.
2.10.2 Support for SIP Forking
SIP forking is the ability to send SIP request messages to multiple destinations, that correspond to multiple registered contact addresses in the IMS network. This allows the IMS network to attempt simultaneously the establishment of the application session in multiple destinations where the subscriber may be reached. The provisional response from each possible destination is called an early dialog. Upon the reception of the first final response, the IMS releases the remaining early dialogs and completes application session establishment.
During SIP forking, the AF (P-CSCF) receives provisional responses from more than one terminating end point, and requests authorization and resources to the SAPC to accommodate for the most demanding early dialog. Each provisional response may have different service requirements (different IP flows, requested bandwidth, and so on), and it is not known which terminating endpoint will finally accept the application session until the final response is received. This implies that when the P-CSCF receives the first final response, only the media flows negotiated for this particular early dialog are authorized for the IMS session.
The procedure to support SIP forking is depicted in Figure 5.
After the first AF session is established, for each subsequent
provisional response establishing an extra early dialog, the P-CSCF sends
an AA-Request command within the existing Diameter
session containing the SIP-Forking-Indication AVP
with the value SEVERAL_DIALOGUES, and includes the service information
derived from the latest provisional response.
Upon reception of service information for provisional responses, the SAPC authorizes any additional media components and any increased QoS requirements for the previously authorized media components. The SAPC authorizes the maximum bandwidth required by any of the dialogues, but not the sum of the bandwidths required by all dialogues. Thus, the SAPC updates the installed dynamic PCC rules and adds additional service data flow filters for each of the early dialogs, so that the QoS authorized for a media component is equal to the highest QoS requested for that media component by any of the forked responses.
The SAPC opens or closes the gates for service flows according to the Flow Status information received from the AF. However, if a media flow has been enabled within previous service information, it shall remain enabled even if the SAPC receives service information that disables this flow ID within an AAR containing the SIP-Forking-Indication AVP with value SEVERAL_DIALOGUES.
When receiving the first final SIP response, the P-CSCF sends an AA-Request command without the SIP-Forking-Indication AVP,
and includes the full service information (applicable IP flows, requested
bandwidth, and so on) derived from the dialogue of the final response.
When the SAPC receives an AA-Request command with no SIP-Forking-Indication AVP or
with a SIP-Forking-Indication AVP with value SINGLE_DIALOGUE,
the SAPC updates the installed PCC rules information and
QoS information to match only the requirements of the service information
within this AA-Request. The SAPC also
removes the PCC rules or individual service data flow filters not
matching IP flows provided in the final response, and performs gating
control according to the flow status information received in the final
response.
2.10.3 Single Radio Voice Call Continuity (SRVCC)
Single Radio Voice Call Continuity (SRVCC) refers to the transfer of an IMS Multimedia Telephony call from the PS domain to the CS domain, when the UE can transmit and receive on only one of those access networks at a given time.
During the SRVCC procedure, the SAPC receives an indication from the PCEF that one or more PCC rules cannot be maintained because of PS to CS handover. The SAPC then informs the AF (only if the AF has previously requested the subscription to INDICATION_OF_RELEASE_OF_BEARER or INDICATION_OF_FAILED_RESOURCES_ALLOCATION events) that the bearer has been deactivated owing to PS to CS handover.
The procedure to support SRVCC is depicted in Figure 6.
When the IMS session is transferred from the PC domain to the CS
domain, the PCEF sends a CC-Request command with
a Charging-Rule-Report AVP that identifies the
PCC rules that can no longer be maintained, and includes the PCC-Rule-Status AVP set to the value INACTIVE and the Rule-Failure-Code AVP set to the value PS_TO_CS_HANDOVER.
Then, the SAPC notifies the AF by using either a Re-Auth-Request command or an Abort-Session-Request command, including the Abort-Cause AVP set to
the value PS_TO_CS_HANDOVER.
2.10.4 Provisioning of AF Signalling Flow Information
Provisioning of AF Signalling Flow Information is a supported feature, part of the IMS Restoration Procedures specified in 3GPP TS 23.380, to handle a P-CSCF service interruption scenario with minimum impact to the service to the end user.
After UE registration to IMS, AF (P-CSCF) sends to the SAPC information about the AF signalling flows between the UE and the AF. The SAPC installs the corresponding dynamic PCC rules (if not installed before) by triggering an RAR message in order to convey the AF address the UE is using to the PCEF. The PCEF monitors all P-CSCF nodes being used by the UEs and if a P-CSCF becomes unresponsive, the PCEF requests all UEs using this P-CSCF to do a new registration against another P-CSCF.
The procedure to support Provisioning of AF Signalling Flow Information IMS Restoration Procedure is depicted in Figure 7.
2.11 Handling of Race Conditions Related to Multiple AF Requests
Network scenarios where multiple AF sessions are bound to the same IP-CAN session may lead to race conditions, due to traffic events that happen concurrently or within a short time frame. This situation may result in a state mismatch, where the wrong information is being maintained by the PCEF, the SAPC and/or the AF for the session.
Diameter race conditions may happen in the following situations:
The SAPC is able to handle diameter race conditions, not only triggered by AF interactions but also due to other internal or external events that overlap in time. Refer to Access and Charging Control (Gx) for a complete functional description.
The procedure to handle race conditions due to multiple AF requests is as follows:
2.12 Delay PCC Rules Installation for AF Sessions with Preliminary Service Information
Mobility events can disrupt the call setup phase for VoLTE calls, causing them to release. This is caused because the network and the devices are not fully ready to support SRVCC during pre-alerting and alerting phases.
In order to mitigate these effects, the SAPC can delay the installation of PCC rules for AF sessions with preliminary service information that needs to be further negotiated between the two ends, , and can allocate the network resources (i.e. the dedicated bearers) only when the service has been fully negotiated between the two ends and the service information provided is the result of that negotiation..
This is a non-standard procedure that is configured by a flag set by Ericsson personnel. By default, the SAPC installs dynamic PCC rules for preliminary and final AF sessions. When toggled, the SAPC:
2.13 Extended bandwidth support for EPC supporting Dual Connectivity (E-UTRAN and 5G NR)
The extended bitrates over Rx is an optional function to support extended bandwidth AVPs representing bitrates in kbps instead of the bandwidth AVPs representing bitrates in bps. The extended AVPs Extended-Max-Requested-BW-DL/UL are used instead of the non-extended Max-Requested-Bandwidth-DL/UL AVPs when the bitrates are higher than 232 -1 bps. The SAPC negotiates its support during the AF session establishment.
3 Dynamic Policy Control Network Deployments
The SAPC can provide Dynamic Policy Control in the following network elements:
4 Dynamic Policy Control Traffic Cases
This chapter explains the interfaces involved in Dynamic Policy Control.
This chapter explains the traffic interactions between the network nodes involved in Dynamic Policy Control. For detailed description of each of the interfaces supported, the corresponding interface description should be consulted.
The precondition to all traffic cases is that a diameter connection is already established between the SAPC and the PCEF and between the SAPC and the AF. In addition, all the required policy controls are enabled for the PCEF, and support for dynamic PCC rules is enabled for the GGSN/PDN GW.
The Session-Id is a mandatory AVP for all the
messages in the Rx protocol, to identify an AF session uniquely.
The precondition to all traffic cases is as follows:
4.1 AF Session Lifetime
This chapter shows the most common traffic cases that may happen during the life cycle of the AF session (establishment, modification, and termination), in network scenarios where the AF provides information about the IP flows required to deliver the service (media component information). The precondition for all traffic cases is that the UE has established an IP-CAN session.
4.1.1 AF Session Establishment
The following figure shows the signalling flow that takes place during AF session establishment and the main actions taken by the SAPC to perform dynamic policy control. This traffic case includes the scenario where network initiated bearers are supported (Bearer Control Mode is set to UE_NW), and also the scenario where network initiated bearers are not supported (Bearer Control Mode is set to UE_ONLY).
4.1.2 AF Session Modification
The following figure shows the signalling flow that takes place during AF session modification and the main actions taken by the SAPC to perform dynamic policy control. The AF session modification may only update the service information for existing media components, but may also add new media components and remove media components. Gating control is another scenario of AF session modification, where the AF signals the SAPC if the IP flow(s) are to be enabled or disabled to pass through the IP-CAN. This traffic case includes the scenario where network initiated bearers are supported (Bearer Control Mode is set to UE_NW), and also the scenario where network initiated bearers are not supported (Bearer Control Mode is set to UE_ONLY).
4.1.3 AF Session Termination
4.2 Reauthorization of Dynamic Services
The following figure shows the signalling flow that takes place during IP-CAN session modification triggered by the PCEF, and the main actions taken by the SAPC to perform dynamic policy control. An example of use case is when the operator has established a policy to authorize only a particular dynamic service (for example video media from the AF) for specific access networks or subscriber location.
4.3 Notification of Bearer Events
4.3.2 Successful Resources Allocation
The following figure shows the signalling flow that takes place for the notification of successful installation of dynamic PCC rules to the AF, and the main actions taken by the SAPC to perform dynamic policy control. A precondition for this use case is that the event-trigger SUCCESSFUL_RESOURCE_ALLOCATION is included in the list of events that the SAPC is configured to subscribe to.
4.3.3 Network Location Information (NetLoc)
The Network Location Information (NetLoc) is an optional function.
4.3.3.1 AF Session Creation or Modification to Add a Media Component
Figure 14 Network Location Information during AF Session Creation
or Modification to Add a Media ComponentAF Session Creation
AF Session Modification to Add a Media Component or for Gating
| Note: |
The NetLoc request applies to all the new and updated PCC
rules. If it is an AF session modification for gating, NetLoc is
requested for the modified PCC rules. |
4.3.3.3 AF Session Termination
4.3.3.4 IP-CAN Session Termination
4.3.3.5 IP-CAN Bearer Release
4.3.3.6 Failure Handling of AF Session Creation or Modification
4.3.3.7 Failure Handling of AF Session Termination
4.3.3.7.1 Failure Handling when the PCEF does not Support NetLoc
This use case is similar to the AF Session Creation in Failure Handling when the PCEF does not Support NetLoc, but with the following difference:
During AF session termination, the SAPC answers with an STA command to the AF including the NetLoc-Access-Support AVP with value 0 (NETLOC_ACCESS_NOT_SUPPORTED) as failure reason. For the AF session termination procedure, see AF Session Termination.
4.3.4 Network Location Information (NetLoc) in Untrusted WLAN Access
The Network Location Information (NetLoc) in Untrusted WLAN Access is an optional function.
4.3.4.2 AF Session Modification to Remove a Media Component or Media Subcomponent
Figure 23 Network Location Information in Untrusted WLAN Access during AF Session
Modification to Remove a Media Component or Media SubcomponentThe precondition is that the NetLoc and NetLocUntrusted-WLAN features are negotiated during IP-CAN session establishment and AF session establishment.
Steps are explained in AF Session Modification to Remove a Media Component or Media Subcomponent but steps 8-13 are same as steps 15-20 of AF Session Creation or Modification to Add a Media Component.
4.3.4.3 AF Session Termination
The preconditions are that the UE has established an AF session and the NetLoc and NetLocUntrusted-WLAN features are negotiated during the Gx and Rx session establishment.
Steps are explained in AF Session Termination but with the following differences:
4.3.4.4 IP-CAN Session Termination
The preconditions are that the UE has established an AF session, the NetLoc and NetLocUntrusted-WLAN features are negotiated during the AF session establishment and event trigger ACCESS_NETWORK_INFO_REPORT was previously sent during IP-CAN session lifetime.
Steps are explained in IP-CAN Session Termination but with the following differences:
4.3.4.5 IP-CAN Bearer Release
Steps are explained in IP-CAN Bearer Release but with the following differences:
4.3.4.6 Failure Handling when the AF Session does not support NetLoc in Untrusted WLAN Access
See sequence diagram of AF Session Creation or Modification to Add a Media Component, differences are explained below:
If this failure scenario happens during AF session termination, the SAPC answers with an STA command to the AF including the NetLoc-Access-Support AVP with value 0 (NETLOC_ACCESS_NOT_SUPPORTED) as failure reason.
| Note: |
If 3GPP-SGSN-MCC-MNC AVP or 3GPP-MS-Timezone AVP is received
in CCR Update, this step is not performed, instead step 14 of AF Session Termination is performed, that is,
this information is sent towards the AF if at least Netloc feature
is negotiated at AF session establishment. |
4.3.5 IP-CAN Type Change Notification
The AF subscribes to IP-CAN type changes as a part of the IMS SIP registration or during the IMS SIP call negotiation. In the first case, the AF does not include any media component in the Rx request.
This following traffic case shows an example of subscription, notification and subscription cancellation of the IP-CAN type changes when IP-CAN_CHANGE and RAT_CHANGE event triggers are not statically or dynamically provisioned. In the example, the IP-CAN type information changes from "Non-3GPP-EPS" and "WLAN" to "3GPP-EPS" and "EUTRAN".
IP-CAN and AF Sessions Establishment
IP-CAN Session Modification
AF Session Modification
Steps 24-25 are applicable only when the AF sends the media information in an AAR-I message and the SAPC performs dynamic policy control at the AF session establishment.
AF Session Termination
4.3.6 Notification of Signalling Path Status
The following traffic cases show the signalling flow that takes place for notification of signalling path status. In general, the AF subscribes to notification of signalling path status in a dedicated Rx diameter session, which is different from the Rx diameter sessions for dynamic services activation or deactivation.
4.3.6.1 Notification of Release of AF Signalling Path
The precondition of the traffic case is that an AF signalling service is provisioned. That is, a static or preconfigured service, for example, AfSignalService is provisioned for the subscriber and added in the AF signalling path profile.
AF Session Establishment for Subscription to Notification of Signalling Path Status
Notification of Release of AF Signalling Path
4.3.6.3 Cancellation of Subscription to Signalling Path Notification
When the AF wants to cancel the subscription to notification of signalling path status, the AF shall send an STR to the SAPC to terminate the AF session. The SAPC takes the following actions:
If the STR message is lost and the AF sends a new AAR-I with subscription to AF signalling path, the SAPC accepts the new subscription and removes the previous subscription.
4.4 IMS Related Procedures
4.4.1 SIP Forking
The following figure shows the signalling flow that takes place when the IMS network performs SIP forking and the AF (P-CSCF) receives provisional responses form more than one possible contact destination. In this particular traffic case, the UE initiates a voice-over-LTE call setup towards a remote UE that has two contact addresses registered in the IMS network. Each terminating end point initiates an early dialog and request authorization and resource reservation to the SAPC. Finally the remote party answers the call.
4.4.2 Single Radio Voice Call Continuity
The following figure shows the signalling flow that takes place when dynamic PCC rules cannot be installed/activated or enforced at the PCEF, and the main actions taken by the SAPC to perform dynamic policy control.
This traffic case is similar to the one explained in section Service Data Flow Deactivation. The main differences are highlighted below.
4.4.3 Provisioning of AF Signalling Flow Information
The following figure shows the signalling flow that takes place when the IMS network triggers Provisioning of AF Signalling Flow Information PCC procedure over Rx refence point.
When the P-CSCF has successfully concluded the initial registration of an attached UE, i.e., when the P-CSCF has sent to the UE a SIP 200 (OK) response to the SIP REGISTER request, the P-CSCF may provision information about the SIP signalling flows between the UE and itself using following procedure.
Steps are similar to the ones explained in section AF Session Establishment. Next, the main differences are highlighted.
4.5 Dynamic Policy Control Triggered by Application Service Detection
This chapter shows the most common traffic cases that may happen in network scenarios where the AF does not provide specific information about the IP flows required to deliver the service (the media component information is not present), but merely provides an application identifier that triggers the activation of a dynamic service in the SAPC.
A typical example is when a DPI node (acting as AF) detects the start of an application service and reports this event to the SAPC over the Rx interface. Then the SAPC does not generate dynamic PCC rules, but reevaluates the applicable policies for the IP-CAN session based on the received information about the service detection. As a result, the SAPC may, for example, upgrade the QoS of the default bearer to accommodate the application service, terminate the IP-CAN session (for example in the case of tethering) or reduce the assigned QoS for that service (for example, P2P service throttling).
4.5.1 Dynamic QoS Control based on Detected Service
4.6 Handling of Race Conditions Related to Multiple AF Requests
The following signalling flow shows how the SAPC handles diameter race condition errors related to multiple AF requests for the same in an IP-CAN session.
In this particular traffic case, the UE (a first responder such as Police, Fire Fighter or Medical Emergency) access the Public Safety LTE network, and is granted a dedicated communication control channel to the Public Safety Agency (PSA). When an incident occurs, the PSA (AF) elevates the priority of the control channel to the UE, and also establishes additional dedicated bearers for data transmission. Moreover, the PSA (AF) requires the SAPC to notify the successful outcome of the resource allocation procedure related to the public safety services.
This results in the AF performing multiple Rx session creation and modification requests in short succession for the same subscriber and IP-CAN session that may overlap in time with CCR-U messages from the PCEF.
Diameter Race Condition
4.7 Delay PCC Rules Installation for AF Sessions with Preliminary Service Information
The following signalling flows show how the SAPC handles dynamic PCC rules generated for preliminary and final AF sessions when delaying the installation of PCC rules for preliminary AF sessions.
4.7.1 Delay installation of PCC rules for a Preliminary AF Session
This traffic case shows an example of delaying the installation of PCC rules for preliminary AF sessions, i.e. AF sessions with preliminary service information that needs to be further negotiated between the two ends, and installing them when the AF session becomes final, i.e. AF sessions for which the service has been fully negotiated between the two ends and the service information provided is the result of that negotiation.
Steps 1–7 are similar to the ones explained in section AF Session Establishment. Next, the main differences are highlighted.
Steps 19–24 are similar to the ones explained in section AF Session Establishment, including NetLoc information if requested at this point or while the AF session was preliminary, as explained in section AF Session Creation or Modification to Add a Media Component.
| Note: |
The SAPC requests the Network Provided Location
Information when the first preliminary AF session becomes final.
For scenarios with multiple AF sessions bound to the IP-CAN session,
this means that the PCEF may send the Network Provided Location Information
to the SAPC when some AF sessions are still preliminary.
If that is the case, the SAPC forwards the location information
to all the AF sessions that were waiting for it, regardless if they
are preliminary or final. |
4.7.2 Reception of a Gx Event for a Preliminary AF Session
4.8 Dynamic Policy Control Error Handling
This section describes how the SAPC handles protocol errors and session failures.
|
Error Condition |
Action |
Code |
|---|---|---|
|
The SAPC receives an AAR and the corresponding IP-CAN session is not found, or more than one matching IP-CAN session is found. |
The SAPC rejects the AF session establishment and returns an AAA indicating an error |
|
|
The SAPC receives an AAR that cannot be complied owing to an internal error (for example, at reception of AAR-I and the associated IP-CAN session is being removed or doesn’t exist after a PCEF request for CCR Termination). |
The SAPC rejects the transaction and returns an AAA indicating an error |
|
|
The SAPC receives an AAR with a mandatory parameter missed (for example the UE IP address in the AF session establishment) |
The SAPC rejects the transaction and returns an AAA indicating an error |
|
|
The SAPC receives an AAR-I with AF's subscription to notification of signalling path status, including the Media-Component-Description AVP (Media-Component-Number = 0, Media-Sub-Component (Flow-Number=0, Flow-Usage=AF_SIGNALLING)), but not including any Specific-Action AVP |
The SAPC rejects the subscription and returns an AAA indicating an error |
|
|
The SAPC receives an AF session establishment request with Rx interface Release 7 standard |
The SAPC rejects the AF session establishment and returns an AAA indicating an error |
|
|
The SAPC receives an AF session establishment request with Rx interface Release 8 standard |
The SAPC rejects the AF session establishment and returns an AAA indicating an error |
|
|
The SAPC receives an AAR-I with AF's subscription to notification of signalling path status, including the Media-Component-Description AVP (Media-Component-Number = 0, Media-Sub-Component (Flow-Number=0, Flow-Usage=AF_SIGNALLING)) and the Specific-Action AVP, but the Specific-Action AVP not including value INDICATION_OF_RELEASE_OF_BEARER |
The SAPC rejects the subscription and returns an AAA indicating an error |
|
|
The SAPC receives an AAR with the |
The SAPC rejects the transaction and returns an AAA indicating an error |
|
|
The SAPC receives an AAR with the |
The SAPC rejects the transaction and returns an AAA indicating an error |
|
|
The SAPC receives an STR and the AF session is not found (although the IP-CAN session exists) |
|
|
|
The SAPC receives an AAR and the corresponding service is not authorized |
The SAPC rejects the transaction and returns an AAA indicating an error |
|
|
The SAPC receives an AAR with new media information and no dynamic service is successfully classified |
The SAPC rejects the AF session establishment or modification and returns an AAA indicating an error |
|
|
The SAPC receives an AAR-I requesting subscription to notification of signalling path status and the AF signalling profile is provisioned, but there are several services defined for the APN of the bound Gx session |
The SAPC rejects the subscription and returns an AAA indicating an error |
|
|
The SAPC receives an AAR-I requesting subscription to notification of signalling path status and the AF signalling profile is provisioned, but no service is found for the received APN and no default service is configured in the AF signalling path profile |
The SAPC rejects the subscription and returns an AAA indicating an error |
|
|
The SAPC receives an AAR-I requesting subscription to notification of signalling path status and the AF signalling profile is provisioned, but the selected service (based on APN or the default service) is not provisioned in the SAPC |
The SAPC rejects the subscription and returns an AAA indicating an error |
|
|
The SAPC receives an AAR to remove a media component and the AF session is not found. |
The SAPC rejects the AF session establishment and returns an AAA indicating an error |
|
|
The SAPC receives a DIAMETER_UNKNOWN_SESSION_ID error result in the Rx RAA message from the AF |
The SAPC deletes the AF session and sends a Gx RAR message towards PCEF to remove the corresponding PCC rules |
|
|
The SAPC receives any error result in the ASA message from the AF |
||
|
The SAPC receives a DIAMETER_UNKNOWN_SESSION_ID error result in the Gx RAA message from the PCEF |
The SAPC deletes the IP-CAN session, and terminates the related AF sessions by sending an ASR command. |
DIAMETER_AUTHORIZATION_REJECTED = 5003 |
5 Reference List
-
Policy and Charging Control signalling flows and QoS parameter mapping, 3GPP TS 29.213.
-
IP Multimedia Subsystem (IMS) emergency sessions, 3GPP TS 23.167.
-
IMS Restoration Procedures, 3GPP TS 23.380.

Contents