# Model Aspects of Open Access to Multimedia Broadcast Services in the Evolved Packet System

Authors: Ivaylo Atanasov; Evelina Pencheva
Journal: International Journal of Digital Multimedia Broadcasting
 (2016)

---

## Abstract

Multimedia broadcast is the most efficient method to distribute identical content to multiple users in the Evolved Packet System (EPS). EPS enables efficient usage of network resources and provisioning of quality of service for every user. Third-party control allows applications in an enterprise domain to invoke network functions like multimedia broadcast. In this paper, an approach to modeling the behavior of Service Capability Server (SCS) for multimedia broadcast in EPS is presented. Third-party applications can access multimedia broadcasting capabilities by using Parlay X Web Service interfaces. The SCS for multimedia broadcast exposes Parlay X interfaces toward 3rd-party applications and control protocols toward the network. The SCS functional behavior has to be synchronized with the application view on message broadcast and the state of the network resources intended for the broadcast session. Models of multicast session, IP connectivity session, and bearers’ and charging session are proposed and formally described using the notation of Label Transition Systems. The concept of weak bisimilarity is used to prove that models expose equivalent behavior; that is, they are synchronized.


---

## Body

## 1. Introduction

The Evolved Packet System (EPS) is standardized to provide ubiquitous access to multimedia services from any end user device. It encompasses both access network and core network. The multimedia packet core network plays an important role in providing superior user experience from services and applications. It is in charge of provisioning quality of service (QoS) for multimedia bearer services and charging mechanisms.Multimedia broadcast/multicast service (MBMS) allows data to be transmitted to multiple endpoints. It allows optimizing network resources using a distribution mechanism. The broadcast mode is a unidirectional point-to-multipoint transmission of multimedia data (e.g., text, audio, picture, and video) from a single source entity to all users in a broadcast service area. A broadcast service received by the end user device involves one or more successive broadcast sessions. A broadcast service might, for example, consist of a single ongoing session (e.g., a media stream) or may involve several intermittent sessions over an extended period of time [1, 2]. Examples of content appropriate to a distribution scheme are broadcasting TV channels and distribution of area-based multimedia messaging service including commonly interested traffic, weather, or emergency information. The content provider (broadcast/multicast source) may provide discrete and continuous media, as well as service descriptions and control data. The multimedia content may be provided by a 3rd-party content provider.The broadcast mode is intended to efficiently use EPS resources. Current research on MBMS covers different aspects related to optimisation of radio technology used for data transmission. Relatively low attention is paid on MBMS third-party control, which allows third-party providers from an IT domain to create applications that use network connections, streaming, messaging, and multimedia.In this paper, we discuss some model aspects of deployment open access on multimedia message broadcast service in EPS. The open service access allows third-party applications to use broadcast function in the network. The Parlay X Web Services (WS) model provides a high level of abstraction of communication network functions and it facilitates the development of value added applications.The paper is organized as follows. In Section2, the related work is presented and the novelty of the proposed approach is highlighted. In Section 3, the broadcast service architecture in EPS is discussed where the Broadcast Multicast Service Centre (BMSC) mediates between third-party applications and the network infrastructure. Next, the Parlay X Message Broadcast WS functionality is analyzed in Section 4. The behavior of BMSC is modeled by formal descriptions of MBMS session state and message broadcast status in Section 5. In Section 6, it is proved that models considering QoS and charging aspects of MBMS are synchronized. The conclusion summarizes the contribution.


## 2. Related Work

Research community has studied different architectural aspects of MBMS deployment in next generation networks. In [3], the authors propose service architecture for efficient content delivery based on enhanced MBMS in LTE (Long-Term Evolution), which reduces backhaul traffic. A context-aware architecture for social networking multimedia distribution, which enhances the evolved MBMS systems by adding users’ situation knowledge on their assessments and allows personalized services delivery over optimized networks, is proposed in [4]. In [5], the authors describe the design and implementation of an open-source virtualized platform that supports both LTE broadcast services and video streaming services and analyze service performance.The performance of enhanced MBMS in LTE has been thoroughly examined in previous research works. A comparison of multicast/broadcast services support in LTE-advanced and WiMAX IEEE 802.16m is provided in [6]. Challenges in supporting multicast services over LTE with particular attention to resource management, considered as key aspects for efficient provisioning of MBMS services over cellular networks, are analyzed in [7]. In [8], the authors discuss the relationship between LTE evolved MBMS and next generation broadcast television and propose some recommendations aimed at improving efficiency of the respective systems. In [9], the authors present a compact, convenient model for broadcasting in LTE, as well as a set of efficient algorithms to define broadcasting areas and to actually perform content scheduling. A joint multicast/unicast scheduling strategy for MBMS delivery, which improves QoS performance, is proposed in [10]. In [11], the authors propose a method for forming broadcasting area and assignment of content to them so that radio resources are efficiently exploited and user requests satisfied. In [12], a distributed resource allocation scheme is proposed, which includes device-to-device communication broadcasting groups and minimizes interference relationships. In [13], MBMS with inherently low requirement for network resources as a candidate solution for using such resources in a more efficient manner is proposed. High level considerations related to implementation of a session controller, supporting application programming interfaces for message broadcasting/multicasting, can be found in [14].The proposed solutions have to be implemented by the telecom network operator. We study another multimedia broadcasting issue that has been scarcely addressed so far, namely, third-party control which allows external applications outside the network to control service provisioning. Our research is focused on two standardized technologies whose synergy has not been studied to date. The Parlay X WS is technology aimed at providing a horizontal service architecture which may be shared by different applications. It defines highly abstracted technology neutral application programming interfaces (APIs). Integration of MBMS and Parlay X requires translation of high level interfaces into telecommunication control protocols. The innovative approach to efficient MBMS provisioning requires considering also other advanced network functions such as policy-based quality of service control and flexible charging. We examine how three different functions in EPS, related to multimedia broadcasting, policy and charging control, and third-party control can collaborate and take the advantage of network convergence in provisioning of value added services.


## 3. Broadcast Service Architecture in EPS

Different broadcast business cases may be considered and the relevance of each used case is up to network operators and their relationship with the content owners, agencies, and broadcasters. Used case examples include mobile TV, digital radio, video on demand, electronic magazines and newspapers, and configuration and management of intelligent objects with internet connectivity.As to 3GPP TS 23.246, the components of the 3GPP solution of MBMS are MBMS bearer service and MBMS user service. The MBMS bearer service enables efficient distribution of content to multiple users while MBMS user service is used by user devices when specific end user applications are activated. The architecture of MBMS for EPS with the proposed third-party control is depicted in Figure1.Figure 1
Reference architecture of MBMS for EPS.The multimedia content that has to be broadcasted is provided by an Application Sever (AS). The MBMS AS may be deployed by network operator or third-party application provider. The Broadcast Multicast Service Centre (BMSC) stores multimedia content to be transmitted, controls the multimedia broadcast service, and interacts with media sources and the end users’ devices via Packet Data Network Gateway (PDN GW). It provides interfaces for both signaling and data transfer to the MBMS GW. The MBMS Gateway (GW) distributes the data received from the BMSC to the relevant base stations in the access network. The Mobility Management Entity (MME) communicates with the access network in the concerned area, relaying session control information received by MBMS GW [15].The end users discover the available MBMS services by service announcement, which provides information about services. Service announcement is used to distribute to users information about MBMS, service activation parameters like IP multicast address, and service start time. Service announcement mechanisms may include short message broadcasting, MBMS broadcasting or multicasting mode, and a push mechanism. Service announcement details may be found in [16].An MBMS service may contain multiple distinct multimedia streams and it is provided by session setup and termination. Each session is bundled with bearer establishment and release. Signaling procedures related to MBMS session initiation, update, and termination are specified in [15].In EPS, the network controls QoS parameters for session broadcast MBMS bearer services. QoS Class Identifier, Allocation and Retention Priority, Maximum Bit Rate (MBR), and Guaranteed Bit Rate (GBR) are applicable to MBMS bearer service, where the MBR is set to be equal to the GBR. The QoS management in EPS is provided by means of policy and charging control (PCC) which allows network operator to authorize and control the usage of resources intended for multimedia traffic [17]. PCC ensures that multimedia services are provided with appropriate transport and charging. The Policy and Charging Rule Function (PCRF) encompasses policy control decision and flow based charging control functions. It receives MBMS session information from BMSC as well as information from the access network and makes policy-based decisions about bearer service session, which are then provided to the MBMS GW. The PCC decisions determine the QoS treatment of the bearer traffic.Both MBMS content provider and MBMS user may be charged for multimedia broadcasting sessions. EPS provides offline and online charging mechanisms [18]. The BMSC contains triggers that generate events for online and offline charging. The Online Charging System (OCS) performs real-time credit control and its functionality includes transaction handlings, online correlation, and management of user account balances. The Charging Data Function (CDF) receives offline charging information from BMSC and creates call detail records.


## 4. Parlay X Message Broadcast Web Service

The Parlay X Message Broadcast WS (MBWS) allows third-party applications to send messages to end user devices in a specific geographical area [19]. It provides APIs for sending a broadcast message to the network, for monitoring the delivery status of a sent broadcast message, and for notifications about the message delivery status.ThesendBroadcastMessage operation is used to send a broadcast message into the designated area(s).ThegetBroadcastStatus operation is used by the 3rd-party application to retrieve the status of sent broadcast message. The broadcast status values are as follows:(i)
MessageWaiting. The message is still queued and not delivered to the network yet.
(ii)
Broadcasting. The message is being broadcasted as many as requested in the send operation.
(iii)
Broadcasted. The message is successfully delivered to network as many as requested.
(iv)
BroadcastImpossible. This indicates a final state that delivery of broadcast message is impossible due to specific reasons.
(v)
BroadcastUnknown. The message delivery state is unknown.Figure 2 illustrates the MBMS time line and the message status as seen by 3rd-party application. ThecancelBroadcastMessage operation may be used by the third-party application to cancel message broadcasting. The operation affects the subsequent broadcast message delivery.Figure 2
Multimedia broadcast service time line and the parameters ofsendBroadcastMessage operation.ThenotifyBroadcastDeliveryReceipt operation is used to notify the third-party application about the delivery status of the message. In order to receive notification the third-party application needs to start notifications usingstartDeliveryReceiptNotification operation. The application may end the receipt of notifications using thestopDeliveryReceiptNotification operation.We propose a modified model compared to that presented in [19], which is shown in Figure 3. InNull state, there is no message to be broadcasted. As far as theBroadcastUnknown state is of temporary kind it is absorbed by theBroadcastImpossible andBroadcasting states.Figure 3
Message broadcast state model.


## 5. Model Aspects of Broadcast Multicast Service Centre

### 5.1. Modeling Views on Message Broadcast

BMSC needs to communicate with the third-party application using the Parlay X MBWS. Toward the network, BMSC has to communicate with MBMS GW to maintain the MBMS session; PCRF to provide information about the MBMS session and to receive notifications about bearers authorized for the session; and CDF to send charging data. Therefore, the BMSC behavior has to be synchronized with the behavior of MBMS GW, PCRF, and CDF, and its view on the MBMS session has to be synchronized with the application view on the state of message broadcast. MBMS GW is in charge of establishment of IP-CAN resources for the MBMS session where IP-CAN stands for Internet Protocol Connectivity Access Network. PCRF controls the QoS that has to be assured for the MBMS session and CDF gathers charging data.Figure4 shows the respective state models that have to be synchronized with the BMSC behavior. The BMSC has to transform the MBWS operations and to control the MBMS session appropriately. In practice, the state models of BMSC, MBMS GW, PCRF, and CDF should expose direct correspondence between the transitions and the information they provide; that is, they have to expose equivalent behavior.Figure 4
Synchronization of MBMS state models in the network and the 3rd-party application view on the message broadcast state.The MBMS session state model describes the states of the MBMS session and it is maintained by MBMS GW. The MBMS QoS provisioning requires an MBMS QoS state model reflecting the state of bearer resources allocated by PCRF for the broadcast session. The control protocol used for PCC is Diameter. Similar considerations are applied to the MBMS charging model which holds the states of the MBMS charging session. The control protocol used for charging is also Diameter.Typical information flows related to multimedia message broadcasting with MBMS session establishment, QoS resource authorization, notification about message broadcast status, and reporting offline charging data are shown in Figure5.Figure 5
Typical message flow illustrating 3rd-party control of MBMS in the network.The MB WS can be used for remote management of intelligent devices like smart meters, which are uniquely identified, gather information from their environment, and communicate that information with network applications. Remote entity management provides means for managing device life cycle including software and firmware upgrade and configuration management. With the increasing number of connected devices, the device management becomes cumbersome and costly for the device operator. So, an EPS operator can sell the MBMS to the device operator to keep the fleet updated. The MBMS can deliver all the software and firmware updates as well as configurations needed to manage the devices up to date.It is a general assumption that IP connectivity is provided to all devices, which means that for each device there is an established default bearer. Let us assume that the device operator makes use of a message broadcast application. By using the application, the device operator sets the target area, where the devices are deployed, and writes a message with configuration data. Then the message broadcast application invokes the MB WS which in turn sends a message delivery operation to the BMSC. Subsequently EPS functional entities supporting MBMS deliver the configuration data to all devices in the target area.When the message broadcast application invokessendBroadcastMessage operation the BMSC opens a Diameter session with the PCRF for the multimedia broadcast session and provides the required session information. The BMSC can subscribe to QoS events related to MBMS bearer resources. The BMSC performs the MBMS session start procedure. The MBMS GW in turn indicates to the PCRF that an IP-CAN session modification is required and waits for PCC rules. Based on session information, the PCRF performs session authorization and sends an acknowledgement with the PCC decisions to the MBMS Gateway. The MBMS starts resources reservation in the access network. When the IP-CAN session modification is completed the MBMS GW sends acknowledgement to the PCRF. The BMSC waits for resource authorization and reservation during the initial protection period and the message broadcast status isMessageWaiting. Before starting the MBMS data transfer, the BMSC contacts with the CDF in order to provide charging information. The MBMS content is sent by the BMSC to the MBMS gateway, and then to the respective part of access network. During the MBMS data transfer the message broadcast status isBroadcasting. The broadcasted content is received and decoded by the devices (user equipment) that are authorized to join the MBMS service. Using the message broadcast application and the interfaces of the MBWS, the device operator can subscribe for notifications about message delivery (startDeliveryReceiptNotification operation) and be notified of a broadcast delivery status of a specific area. Once the MBMS data (configuration data) are broadcasted, the BMSC starts the procedure for session termination, which is followed by release of bearer resources authorized for the MBMS session. The BMSC contacts with the CDF to write the charging data. The message broadcast status becomesBroadcasted. ThestopDeliveryReceiptNotification operation is used to end delivery receipt notification. The content provider is charged for the broadcasted content. The PCRF enables also QoS-based charging. The PCC mechanism supports traffic plane event reporting (e.g., bearer lost) which may reflect in charging. In case of active subscription, the PCRF may notify the BMSC about any QoS events occurring during message broadcasting.In the course of service provisioning, the BMSC needs to maintain in a synchronized manner three state machines describing the MBMS session, QoS resources authorized for the session, and charging session. These state machines have to be synchronized with the application view on the states of the message broadcast.On receiving an indication about IP-CAN session modification, the PCRF may reject the requested modification (due to overloading in the respective access network or spending credit limits of the content provider in case of online charging). In this case, the PCRF rejects the IP-CAN session modification requested by the MBMS GW and notifies the BMSC about the event during the initial protection period. The message broadcast status becomesBroadcastImpossible. During message waiting or broadcasting, the device operator may decide to cancel message broadcast. In this case, the third-party application invokes thecancelBroadcastMessage operation to request cancelation of the previoussendBroadcastMessage. The BMSC in turn initiates session termination toward the MBMS GW and PCRF, which results in IP-CAN session termination and release of QoS resources.In the next subsection, we provide formal description of the models representing the view on message broadcast of third-party application, BMSC, MBMS GW, PCRF, and CDF, respectively. This will be used to prove formally that the models are synchronized.


### 5.2. Formal Description of Models Representing Message Broadcast Status

Let us present the state machines as labeled transition systems (LTS).Definition 1.
Alabeled transition system (LTS) is a quadruple (S
,
A
c
t
,
→
,
s
0), where S is countable set of states, A
c
t is a countable set of elementary actions, →
⊆
S
×
A
c
t
×
S is a set of transitions, and s
0
∈
S is the set of initial states.


#### 5.2.1. Application View on Message Broadcast Status

The message broadcast status from application point of view may beNull, MessageWaiting, Broadcasting, orBroadcasted. The status isNull when there is no message to be broadcasted. The status isMessageWaiting if the message is waiting to be delivered to the network. The status isBroadcasting orBroadcasted if the MBMS data transfer is ongoing or terminated, respectively.ByT
A
p
p
=
(
S
A
p
p
,
A
c
t
A
p
p
,
→
A
p
p
,
s
0
A
p
p
) an LTS representing the 3rd-party view on the message broadcast status is denoted where(i)
S
A
p
p
=
{Null, MessageWaiting, Broadcasting, Broadcasted, BroadcastImpossible};
(ii)
A
c
t
A
p
p
=
{sendMessage, getBroadcastStatus, notifyBroadcastDeliveryReceipt, cancelMessage, successfulDelivery, unsuccessfulDelivery, stopAnnouncement, unableToDeliver, successfulMessageCompletion};
(iii)
→
A
p
p
=
{Null sendMessage MessageWaiting, MessageWaiting getBroadcastStatus MessageWaiting, MessageWaiting unsuccessfulDelivery Null, MessageWaiting successfulDelivery Broadcasting, MessageWaiting cancelMessage Null, MessageWaiting unableToDeliver BroadcastImpossible, Broadcasting successfulMessageCompletion Broadcasted, Broadcasting cancelMessage Null, Broadcasting getBroadcastStatus Broadcasting, Broadcasted stopAnnouncement Null, Broadcasted getBroadcastStatus Broadcasted, Broadcasted notifyBroadcastDeliveryReceipt Broadcasted, BroadcastImpossible getBroadcastStatus BroadcastImpossible, BroadcastImpossible notifyBroadcastDeliveryReceipt BroadcastImpossible, BroadcastImpossible stopAnnouncement Null};
(iv)
s
0
A
p
p
=
{Null}.ThegetBroadcastStatus andnotifyBroadcastDeliveryReceipt operations do not change the session state or message broadcast status.


#### 5.2.2. BMSC Model of MBMS Session

The simplified BMSC view on the MBMS session states includes the following states. InMBMSIdle state, there is no MBMS session. When the application invokes thesendBroadcastMessage operation, the BMSC sends session information to the PCRF, a session start request to the MBMS GW, and it moves toInitialWaiting state. While being inInitialWaiting state, the BMSC waits for resource authorization and QoS resource reservation. The time delay between a session start indication and actual data should be long enough for the required network actions. When the network is ready to send MBMS data, the BMSC sends charging data and moves toDataTransfer state. InDataTransfer state, MBMS data are transferred to any user equipment which is present. When the MBMS user service determines that there are no more data to send, the BMSC initiates session termination, sends charging data, and moves toMBMSIdle state. InInitialWaiting orDataTransfer state, the BMSC may be notified about any problems related to MBMS bearers and the MBMS session is terminated. It is also possible for third-party application to invoke thecancelBroadcastMessage operation while the BMSC is inInitialWaiting orDataTransfer state, which cancels the MBMS session.ByT
B
M
S
C
=
(
S
B
M
S
C
,
A
c
t
B
M
S
C
,
→
B
M
S
C
,
s
0
B
M
S
C
) an LTS representing the BMSC view on the message broadcast status is denoted where(i)
S
B
M
S
C
=
{MBMSIdle, InitialWaiting, DataTransfer};
(ii)
A
c
t
B
M
S
C
=
{sendBroadcastMessage, initialPeriod, dataTransferStop, resourceFailed, resourceLost, cancelBroadcastMessage};
(iii)
→
B
M
S
C
=
{MBMSIdle sendBroadcastMessage InitialWaiting, InitialWaiting initialPeriod DataTransfer, InitialWaiting resourceFailed MBMSIdle, InitialWaiting cancelBroadcastMessage MBMSIdle, DataTransfer dataTransferStop MBMSIdle, DataTransfer resourceLost MBMSIdle}; DataTransfer cancelBroadcastMessage MBMSIdle};
(iv)
s
0
B
M
S
C
=
{MBMSIdle}.Figure 6 illustrates the MBMS session state machine.Figure 6
MBMS session state machine.


#### 5.2.3. MBMS GW Model of IP-CAN Session

The MBMS GW view on the IP-CAN session states for the MBMS user service includes the following states. InIPCANIdle state, there is no dedicated IP-CAN session. On receiving session start instructions, the MBMS GW indicates an IP-CAN session modification to the PCRF and moves toWaitForPCCRules state. InWaitForPCCRules state, the MBMS waits for authorization of IP-CAN session modification. Upon receiving the PCC rules, the MBMS GW initiates IP-CAN session establishment in the access network and moves toResourceReservation state. The MBMS GW moves toSessionActive state after it receives an acknowledgement that the resources in the access network are reserved. The transition toResourceRelease state occurs when a session stop request is received by the BMSC. InResourceRelease state, the MBMS waits for the release of IP-CAN bearers. InWaitForTermAck state, the MBMS GW waits for acknowledgement for session termination from PCRF and then moves to the initialIPCANIdle state. InResourceReservation orSessionActive state, network, the MBMS GW may receive indications from the PCRF that the bearer modification fails or that the bearers are lost. These cause the transition toIPCANIdle state.ByT
M
B
M
S
=
(
S
M
B
M
S
,
A
c
t
M
B
M
S
,
→
M
B
M
S
,
s
0
M
B
M
S
) an LTS representing the MBMS GW view on the MBMS IP-CAN session state is denoted where(i)
S
M
B
M
S
=
{IPCANIdle, WaitForPCCRules, ResourceReservation, SessionActive, ResourceRelease, WaitForTermAck};
(ii)
A
c
t
M
B
M
S
=
{sessionStart, pccRules, ipCanBearerEstablishment, sessionStop, sessionCancel, ipCanBearerRelease, ipCanSessionTermAck, ipCanBearerFailed, ipCanBearerLost};
(iii)
→
M
B
M
S
=
{IPCANIdle sessionStart WaitForPCCRules, WaitForPCCRules pccRules ResourceReservation, WaitForPCCRules sessionCancel IPCANIdle, ResourceReservation ipCanBearerEstablishment SessionActive, ResourceReservation sessionCancel IPCANIdle, ResourceReservation ipCanBearerFailed IPCANIdle, SessionActive sessionCancel ResourceRelease, SessionActive sessionStop ResourceRelease, SessionActive ipCanBearerLost IPCANIdle, ResourceRelease ipCanBearerRelease WaitForTermAck, WaitForTermAck ipCanSessionTermAck IPCANIdle};
(iv)
s
0
M
B
M
S
=
{IPCANIdle}.The IP-CAN session state machine is depicted in Figure 7.Figure 7
IP-CAN session state machine.


#### 5.2.4. PCRF Model of MBMS QoS Resources

The PCRF view on the state of QoS resource intended for MBMS session is as follows. InResourceNull state, no QoS resources are authorized for the MBMS session. When the BMSC sends session information, the PCRF performs session binding which takes into account the IP-CAN parameters and moves toIPCanSession state storing this information. InIPCanSession state, the PCRF may receive an indication about IP-CAN session modification and correlates appropriate service information with IP-CAN session. InResourceAuthorizing state, the PCRF makes policy decisions and sends them as PCC rules to the MBMS GW. On receiving provision acknowledgement the PCRF moves toResourceAuthorized state. The QoS resources for the MBMS session are authorized and reserved, and the MBMS data transfer can start. When the MBMS GW detects that the IP-CAN session termination is required, it sends an indication to the PCRF. In case of subscription, the PCRF may find the PCC rules that require the BMSC to be notified and sends a notification. The QoS resources authorized for the MBMS session are released which causes the transition toResourceNull state. InResourceAuthorizing state, the PCRF may decide to reject the IP-CAN session modification. Also, during MBMS data transfer any QoS problems may be reported by the MBMS GW to the PCRF, thus affecting the online charging. In case the MBMS GW reports that all bearer resources authorized for the MBMS session are lost, the PCRF moves toResourceNull state.ByT
P
C
R
F
=
(
S
P
C
R
F
,
A
c
t
P
C
R
F
,
→
P
C
R
F
,
s
0
P
C
R
F
) an LTS representing the PCRF GW view on the QoS resource state is denoted where(i)
S
P
C
R
F
=
{ResourceNull, IPCanSession, ResourceAuthorizing, ResourceAuthorized};
(ii)
A
c
t
P
C
R
F
=
{sessionInfo, ipCanSessionModification, provisionAck, provisionNonAck, ipCanSessionTermination, ipCanBearerRemoved, ipCanSessionCancel};
(iii)
→
P
C
R
F
=
{ResourceNull sessionInfo IPCanSession, IPCanSession ipCanSessionModification ResourceAuthorizing, IPCanSession ipCanSessionTermination ResourceNull, ResourceAuthorizing provisionAck ResourceAuthorized, ResourceAuthorizing ipCanSessionCancel ResourceNull, ResourceAuthorizing provisionNonAck ResourceNull, ResourceAuthorized ipCanSessionCancel ResourceNull, ResourceAuthorized ipCanBearerRemoved ResourceNull};
(iv)
s
0
P
C
R
F
=
{ResourceNull}.Figure 8 illustrates the QoS resource state machine.Figure 8
QoS resource state machine.


#### 5.2.5. MBMS Charging Session Model

Both offline and online charging are possible. By applying policy and charging control on MBMS sessions, online charging can reflect the QoS experience during message broadcasting. The BMSC collects charging data such as identification of the content source, type of user service, type of bearer resources used to deliver the content broadcast, and identification of users receiving the service. The BMSC collects also charging data such as session duration, data transfer time, and data volume for mobile users receiving the service through MBMS and/or content providers delivery of the MBMS content. The triggers for charging data are bearer service initiation and termination. InChargingIdle state, no charging data are gathered. Charging data are provided by the BMSC upon MBMS session initiation, IP-CAN bearer resource establishment/failure, and MBMS session termination. The charging data are sent to the CDF (in case of offline charging) or to the Online Charging System. On receiving charging data related to session start, the charging session moves to A
c
t
i
v
e
i
n
i
t
i
a
l state. In A
c
t
i
v
e
i
n
i
t
i
a
l state, when charging data for IP-CAN session establishment are received, the charging session moves to A
c
t
i
v
e
t
r
a
n
s
f
e
r state. The charging data stop instructions may be received due to normal completion of message broadcast, due to some problems in the network, or due to message broadcast cancelation by the third-party application. On receiving charging data stop instructions the charging session moves toChargingIdle state.ByT
C
S
=
(
S
C
S
,
A
c
t
C
S
,
→
C
S
,
s
0
C
S
) an LTS representing the charging session states is denoted where(i)
S
C
S
=
{ChargingIdle, Active
i
n
i
t
i
a
l, Active
t
r
a
n
s
f
e
r
};
(ii)
A
c
t
C
S
=
{chargingDataStart
i
n
i
t, chargingDataStart
i
n
t
e
r
i
m, chargingDataStop
n
o
r
m
a
l, chargingDataStop
c
a
n
c
e
l
e
d, chargingDataStop
f
a
i
l
e
d
};
(iii)
→
C
S
=
{ChargingIdle chargingDataStart
i
n
i
t Active
i
n
i
t
i
a
l, Active
i
n
i
t
i
a
l chargingDataStart
i
n
t
e
r
i
m Active
t
r
a
n
s
f
e
r, Active
t
r
a
n
s
f
e
r chargingDataStop
n
o
r
m
a
l ChargingIdle, Active
i
n
i
t
i
a
l chargingDataStop
f
a
i
l
e
d ChargingIdle, Active
i
n
i
t
i
a
l chargingDataStop
c
a
n
c
e
l
e
d ChargingIdle, Active
t
r
a
n
s
f
e
r chargingDataStop
c
a
n
c
e
l
e
d ChargingIdle Active
t
r
a
n
s
f
e
r chargingDataStop
f
a
i
l
e
d ChargingIdle};
(iv)
s
0
C
S
=
{ChargingIdle}.The charging session state machine is depicted in Figure 9.Figure 9
Charging session state machine.Having formal description of the models representing message broadcast status as seen by both the third-party application and the network, we can prove that these models are synchronized; that is, they expose equivalent behavior.


## 5.1. Modeling Views on Message Broadcast

BMSC needs to communicate with the third-party application using the Parlay X MBWS. Toward the network, BMSC has to communicate with MBMS GW to maintain the MBMS session; PCRF to provide information about the MBMS session and to receive notifications about bearers authorized for the session; and CDF to send charging data. Therefore, the BMSC behavior has to be synchronized with the behavior of MBMS GW, PCRF, and CDF, and its view on the MBMS session has to be synchronized with the application view on the state of message broadcast. MBMS GW is in charge of establishment of IP-CAN resources for the MBMS session where IP-CAN stands for Internet Protocol Connectivity Access Network. PCRF controls the QoS that has to be assured for the MBMS session and CDF gathers charging data.Figure4 shows the respective state models that have to be synchronized with the BMSC behavior. The BMSC has to transform the MBWS operations and to control the MBMS session appropriately. In practice, the state models of BMSC, MBMS GW, PCRF, and CDF should expose direct correspondence between the transitions and the information they provide; that is, they have to expose equivalent behavior.Figure 4
Synchronization of MBMS state models in the network and the 3rd-party application view on the message broadcast state.The MBMS session state model describes the states of the MBMS session and it is maintained by MBMS GW. The MBMS QoS provisioning requires an MBMS QoS state model reflecting the state of bearer resources allocated by PCRF for the broadcast session. The control protocol used for PCC is Diameter. Similar considerations are applied to the MBMS charging model which holds the states of the MBMS charging session. The control protocol used for charging is also Diameter.Typical information flows related to multimedia message broadcasting with MBMS session establishment, QoS resource authorization, notification about message broadcast status, and reporting offline charging data are shown in Figure5.Figure 5
Typical message flow illustrating 3rd-party control of MBMS in the network.The MB WS can be used for remote management of intelligent devices like smart meters, which are uniquely identified, gather information from their environment, and communicate that information with network applications. Remote entity management provides means for managing device life cycle including software and firmware upgrade and configuration management. With the increasing number of connected devices, the device management becomes cumbersome and costly for the device operator. So, an EPS operator can sell the MBMS to the device operator to keep the fleet updated. The MBMS can deliver all the software and firmware updates as well as configurations needed to manage the devices up to date.It is a general assumption that IP connectivity is provided to all devices, which means that for each device there is an established default bearer. Let us assume that the device operator makes use of a message broadcast application. By using the application, the device operator sets the target area, where the devices are deployed, and writes a message with configuration data. Then the message broadcast application invokes the MB WS which in turn sends a message delivery operation to the BMSC. Subsequently EPS functional entities supporting MBMS deliver the configuration data to all devices in the target area.When the message broadcast application invokessendBroadcastMessage operation the BMSC opens a Diameter session with the PCRF for the multimedia broadcast session and provides the required session information. The BMSC can subscribe to QoS events related to MBMS bearer resources. The BMSC performs the MBMS session start procedure. The MBMS GW in turn indicates to the PCRF that an IP-CAN session modification is required and waits for PCC rules. Based on session information, the PCRF performs session authorization and sends an acknowledgement with the PCC decisions to the MBMS Gateway. The MBMS starts resources reservation in the access network. When the IP-CAN session modification is completed the MBMS GW sends acknowledgement to the PCRF. The BMSC waits for resource authorization and reservation during the initial protection period and the message broadcast status isMessageWaiting. Before starting the MBMS data transfer, the BMSC contacts with the CDF in order to provide charging information. The MBMS content is sent by the BMSC to the MBMS gateway, and then to the respective part of access network. During the MBMS data transfer the message broadcast status isBroadcasting. The broadcasted content is received and decoded by the devices (user equipment) that are authorized to join the MBMS service. Using the message broadcast application and the interfaces of the MBWS, the device operator can subscribe for notifications about message delivery (startDeliveryReceiptNotification operation) and be notified of a broadcast delivery status of a specific area. Once the MBMS data (configuration data) are broadcasted, the BMSC starts the procedure for session termination, which is followed by release of bearer resources authorized for the MBMS session. The BMSC contacts with the CDF to write the charging data. The message broadcast status becomesBroadcasted. ThestopDeliveryReceiptNotification operation is used to end delivery receipt notification. The content provider is charged for the broadcasted content. The PCRF enables also QoS-based charging. The PCC mechanism supports traffic plane event reporting (e.g., bearer lost) which may reflect in charging. In case of active subscription, the PCRF may notify the BMSC about any QoS events occurring during message broadcasting.In the course of service provisioning, the BMSC needs to maintain in a synchronized manner three state machines describing the MBMS session, QoS resources authorized for the session, and charging session. These state machines have to be synchronized with the application view on the states of the message broadcast.On receiving an indication about IP-CAN session modification, the PCRF may reject the requested modification (due to overloading in the respective access network or spending credit limits of the content provider in case of online charging). In this case, the PCRF rejects the IP-CAN session modification requested by the MBMS GW and notifies the BMSC about the event during the initial protection period. The message broadcast status becomesBroadcastImpossible. During message waiting or broadcasting, the device operator may decide to cancel message broadcast. In this case, the third-party application invokes thecancelBroadcastMessage operation to request cancelation of the previoussendBroadcastMessage. The BMSC in turn initiates session termination toward the MBMS GW and PCRF, which results in IP-CAN session termination and release of QoS resources.In the next subsection, we provide formal description of the models representing the view on message broadcast of third-party application, BMSC, MBMS GW, PCRF, and CDF, respectively. This will be used to prove formally that the models are synchronized.


## 5.2. Formal Description of Models Representing Message Broadcast Status

Let us present the state machines as labeled transition systems (LTS).Definition 1.
Alabeled transition system (LTS) is a quadruple (S
,
A
c
t
,
→
,
s
0), where S is countable set of states, A
c
t is a countable set of elementary actions, →
⊆
S
×
A
c
t
×
S is a set of transitions, and s
0
∈
S is the set of initial states.


### 5.2.1. Application View on Message Broadcast Status

The message broadcast status from application point of view may beNull, MessageWaiting, Broadcasting, orBroadcasted. The status isNull when there is no message to be broadcasted. The status isMessageWaiting if the message is waiting to be delivered to the network. The status isBroadcasting orBroadcasted if the MBMS data transfer is ongoing or terminated, respectively.ByT
A
p
p
=
(
S
A
p
p
,
A
c
t
A
p
p
,
→
A
p
p
,
s
0
A
p
p
) an LTS representing the 3rd-party view on the message broadcast status is denoted where(i)
S
A
p
p
=
{Null, MessageWaiting, Broadcasting, Broadcasted, BroadcastImpossible};
(ii)
A
c
t
A
p
p
=
{sendMessage, getBroadcastStatus, notifyBroadcastDeliveryReceipt, cancelMessage, successfulDelivery, unsuccessfulDelivery, stopAnnouncement, unableToDeliver, successfulMessageCompletion};
(iii)
→
A
p
p
=
{Null sendMessage MessageWaiting, MessageWaiting getBroadcastStatus MessageWaiting, MessageWaiting unsuccessfulDelivery Null, MessageWaiting successfulDelivery Broadcasting, MessageWaiting cancelMessage Null, MessageWaiting unableToDeliver BroadcastImpossible, Broadcasting successfulMessageCompletion Broadcasted, Broadcasting cancelMessage Null, Broadcasting getBroadcastStatus Broadcasting, Broadcasted stopAnnouncement Null, Broadcasted getBroadcastStatus Broadcasted, Broadcasted notifyBroadcastDeliveryReceipt Broadcasted, BroadcastImpossible getBroadcastStatus BroadcastImpossible, BroadcastImpossible notifyBroadcastDeliveryReceipt BroadcastImpossible, BroadcastImpossible stopAnnouncement Null};
(iv)
s
0
A
p
p
=
{Null}.ThegetBroadcastStatus andnotifyBroadcastDeliveryReceipt operations do not change the session state or message broadcast status.


### 5.2.2. BMSC Model of MBMS Session

The simplified BMSC view on the MBMS session states includes the following states. InMBMSIdle state, there is no MBMS session. When the application invokes thesendBroadcastMessage operation, the BMSC sends session information to the PCRF, a session start request to the MBMS GW, and it moves toInitialWaiting state. While being inInitialWaiting state, the BMSC waits for resource authorization and QoS resource reservation. The time delay between a session start indication and actual data should be long enough for the required network actions. When the network is ready to send MBMS data, the BMSC sends charging data and moves toDataTransfer state. InDataTransfer state, MBMS data are transferred to any user equipment which is present. When the MBMS user service determines that there are no more data to send, the BMSC initiates session termination, sends charging data, and moves toMBMSIdle state. InInitialWaiting orDataTransfer state, the BMSC may be notified about any problems related to MBMS bearers and the MBMS session is terminated. It is also possible for third-party application to invoke thecancelBroadcastMessage operation while the BMSC is inInitialWaiting orDataTransfer state, which cancels the MBMS session.ByT
B
M
S
C
=
(
S
B
M
S
C
,
A
c
t
B
M
S
C
,
→
B
M
S
C
,
s
0
B
M
S
C
) an LTS representing the BMSC view on the message broadcast status is denoted where(i)
S
B
M
S
C
=
{MBMSIdle, InitialWaiting, DataTransfer};
(ii)
A
c
t
B
M
S
C
=
{sendBroadcastMessage, initialPeriod, dataTransferStop, resourceFailed, resourceLost, cancelBroadcastMessage};
(iii)
→
B
M
S
C
=
{MBMSIdle sendBroadcastMessage InitialWaiting, InitialWaiting initialPeriod DataTransfer, InitialWaiting resourceFailed MBMSIdle, InitialWaiting cancelBroadcastMessage MBMSIdle, DataTransfer dataTransferStop MBMSIdle, DataTransfer resourceLost MBMSIdle}; DataTransfer cancelBroadcastMessage MBMSIdle};
(iv)
s
0
B
M
S
C
=
{MBMSIdle}.Figure 6 illustrates the MBMS session state machine.Figure 6
MBMS session state machine.


### 5.2.3. MBMS GW Model of IP-CAN Session

The MBMS GW view on the IP-CAN session states for the MBMS user service includes the following states. InIPCANIdle state, there is no dedicated IP-CAN session. On receiving session start instructions, the MBMS GW indicates an IP-CAN session modification to the PCRF and moves toWaitForPCCRules state. InWaitForPCCRules state, the MBMS waits for authorization of IP-CAN session modification. Upon receiving the PCC rules, the MBMS GW initiates IP-CAN session establishment in the access network and moves toResourceReservation state. The MBMS GW moves toSessionActive state after it receives an acknowledgement that the resources in the access network are reserved. The transition toResourceRelease state occurs when a session stop request is received by the BMSC. InResourceRelease state, the MBMS waits for the release of IP-CAN bearers. InWaitForTermAck state, the MBMS GW waits for acknowledgement for session termination from PCRF and then moves to the initialIPCANIdle state. InResourceReservation orSessionActive state, network, the MBMS GW may receive indications from the PCRF that the bearer modification fails or that the bearers are lost. These cause the transition toIPCANIdle state.ByT
M
B
M
S
=
(
S
M
B
M
S
,
A
c
t
M
B
M
S
,
→
M
B
M
S
,
s
0
M
B
M
S
) an LTS representing the MBMS GW view on the MBMS IP-CAN session state is denoted where(i)
S
M
B
M
S
=
{IPCANIdle, WaitForPCCRules, ResourceReservation, SessionActive, ResourceRelease, WaitForTermAck};
(ii)
A
c
t
M
B
M
S
=
{sessionStart, pccRules, ipCanBearerEstablishment, sessionStop, sessionCancel, ipCanBearerRelease, ipCanSessionTermAck, ipCanBearerFailed, ipCanBearerLost};
(iii)
→
M
B
M
S
=
{IPCANIdle sessionStart WaitForPCCRules, WaitForPCCRules pccRules ResourceReservation, WaitForPCCRules sessionCancel IPCANIdle, ResourceReservation ipCanBearerEstablishment SessionActive, ResourceReservation sessionCancel IPCANIdle, ResourceReservation ipCanBearerFailed IPCANIdle, SessionActive sessionCancel ResourceRelease, SessionActive sessionStop ResourceRelease, SessionActive ipCanBearerLost IPCANIdle, ResourceRelease ipCanBearerRelease WaitForTermAck, WaitForTermAck ipCanSessionTermAck IPCANIdle};
(iv)
s
0
M
B
M
S
=
{IPCANIdle}.The IP-CAN session state machine is depicted in Figure 7.Figure 7
IP-CAN session state machine.


### 5.2.4. PCRF Model of MBMS QoS Resources

The PCRF view on the state of QoS resource intended for MBMS session is as follows. InResourceNull state, no QoS resources are authorized for the MBMS session. When the BMSC sends session information, the PCRF performs session binding which takes into account the IP-CAN parameters and moves toIPCanSession state storing this information. InIPCanSession state, the PCRF may receive an indication about IP-CAN session modification and correlates appropriate service information with IP-CAN session. InResourceAuthorizing state, the PCRF makes policy decisions and sends them as PCC rules to the MBMS GW. On receiving provision acknowledgement the PCRF moves toResourceAuthorized state. The QoS resources for the MBMS session are authorized and reserved, and the MBMS data transfer can start. When the MBMS GW detects that the IP-CAN session termination is required, it sends an indication to the PCRF. In case of subscription, the PCRF may find the PCC rules that require the BMSC to be notified and sends a notification. The QoS resources authorized for the MBMS session are released which causes the transition toResourceNull state. InResourceAuthorizing state, the PCRF may decide to reject the IP-CAN session modification. Also, during MBMS data transfer any QoS problems may be reported by the MBMS GW to the PCRF, thus affecting the online charging. In case the MBMS GW reports that all bearer resources authorized for the MBMS session are lost, the PCRF moves toResourceNull state.ByT
P
C
R
F
=
(
S
P
C
R
F
,
A
c
t
P
C
R
F
,
→
P
C
R
F
,
s
0
P
C
R
F
) an LTS representing the PCRF GW view on the QoS resource state is denoted where(i)
S
P
C
R
F
=
{ResourceNull, IPCanSession, ResourceAuthorizing, ResourceAuthorized};
(ii)
A
c
t
P
C
R
F
=
{sessionInfo, ipCanSessionModification, provisionAck, provisionNonAck, ipCanSessionTermination, ipCanBearerRemoved, ipCanSessionCancel};
(iii)
→
P
C
R
F
=
{ResourceNull sessionInfo IPCanSession, IPCanSession ipCanSessionModification ResourceAuthorizing, IPCanSession ipCanSessionTermination ResourceNull, ResourceAuthorizing provisionAck ResourceAuthorized, ResourceAuthorizing ipCanSessionCancel ResourceNull, ResourceAuthorizing provisionNonAck ResourceNull, ResourceAuthorized ipCanSessionCancel ResourceNull, ResourceAuthorized ipCanBearerRemoved ResourceNull};
(iv)
s
0
P
C
R
F
=
{ResourceNull}.Figure 8 illustrates the QoS resource state machine.Figure 8
QoS resource state machine.


### 5.2.5. MBMS Charging Session Model

Both offline and online charging are possible. By applying policy and charging control on MBMS sessions, online charging can reflect the QoS experience during message broadcasting. The BMSC collects charging data such as identification of the content source, type of user service, type of bearer resources used to deliver the content broadcast, and identification of users receiving the service. The BMSC collects also charging data such as session duration, data transfer time, and data volume for mobile users receiving the service through MBMS and/or content providers delivery of the MBMS content. The triggers for charging data are bearer service initiation and termination. InChargingIdle state, no charging data are gathered. Charging data are provided by the BMSC upon MBMS session initiation, IP-CAN bearer resource establishment/failure, and MBMS session termination. The charging data are sent to the CDF (in case of offline charging) or to the Online Charging System. On receiving charging data related to session start, the charging session moves to A
c
t
i
v
e
i
n
i
t
i
a
l state. In A
c
t
i
v
e
i
n
i
t
i
a
l state, when charging data for IP-CAN session establishment are received, the charging session moves to A
c
t
i
v
e
t
r
a
n
s
f
e
r state. The charging data stop instructions may be received due to normal completion of message broadcast, due to some problems in the network, or due to message broadcast cancelation by the third-party application. On receiving charging data stop instructions the charging session moves toChargingIdle state.ByT
C
S
=
(
S
C
S
,
A
c
t
C
S
,
→
C
S
,
s
0
C
S
) an LTS representing the charging session states is denoted where(i)
S
C
S
=
{ChargingIdle, Active
i
n
i
t
i
a
l, Active
t
r
a
n
s
f
e
r
};
(ii)
A
c
t
C
S
=
{chargingDataStart
i
n
i
t, chargingDataStart
i
n
t
e
r
i
m, chargingDataStop
n
o
r
m
a
l, chargingDataStop
c
a
n
c
e
l
e
d, chargingDataStop
f
a
i
l
e
d
};
(iii)
→
C
S
=
{ChargingIdle chargingDataStart
i
n
i
t Active
i
n
i
t
i
a
l, Active
i
n
i
t
i
a
l chargingDataStart
i
n
t
e
r
i
m Active
t
r
a
n
s
f
e
r, Active
t
r
a
n
s
f
e
r chargingDataStop
n
o
r
m
a
l ChargingIdle, Active
i
n
i
t
i
a
l chargingDataStop
f
a
i
l
e
d ChargingIdle, Active
i
n
i
t
i
a
l chargingDataStop
c
a
n
c
e
l
e
d ChargingIdle, Active
t
r
a
n
s
f
e
r chargingDataStop
c
a
n
c
e
l
e
d ChargingIdle Active
t
r
a
n
s
f
e
r chargingDataStop
f
a
i
l
e
d ChargingIdle};
(iv)
s
0
C
S
=
{ChargingIdle}.The charging session state machine is depicted in Figure 9.Figure 9
Charging session state machine.Having formal description of the models representing message broadcast status as seen by both the third-party application and the network, we can prove that these models are synchronized; that is, they expose equivalent behavior.


## 5.2.1. Application View on Message Broadcast Status

The message broadcast status from application point of view may beNull, MessageWaiting, Broadcasting, orBroadcasted. The status isNull when there is no message to be broadcasted. The status isMessageWaiting if the message is waiting to be delivered to the network. The status isBroadcasting orBroadcasted if the MBMS data transfer is ongoing or terminated, respectively.ByT
A
p
p
=
(
S
A
p
p
,
A
c
t
A
p
p
,
→
A
p
p
,
s
0
A
p
p
) an LTS representing the 3rd-party view on the message broadcast status is denoted where(i)
S
A
p
p
=
{Null, MessageWaiting, Broadcasting, Broadcasted, BroadcastImpossible};
(ii)
A
c
t
A
p
p
=
{sendMessage, getBroadcastStatus, notifyBroadcastDeliveryReceipt, cancelMessage, successfulDelivery, unsuccessfulDelivery, stopAnnouncement, unableToDeliver, successfulMessageCompletion};
(iii)
→
A
p
p
=
{Null sendMessage MessageWaiting, MessageWaiting getBroadcastStatus MessageWaiting, MessageWaiting unsuccessfulDelivery Null, MessageWaiting successfulDelivery Broadcasting, MessageWaiting cancelMessage Null, MessageWaiting unableToDeliver BroadcastImpossible, Broadcasting successfulMessageCompletion Broadcasted, Broadcasting cancelMessage Null, Broadcasting getBroadcastStatus Broadcasting, Broadcasted stopAnnouncement Null, Broadcasted getBroadcastStatus Broadcasted, Broadcasted notifyBroadcastDeliveryReceipt Broadcasted, BroadcastImpossible getBroadcastStatus BroadcastImpossible, BroadcastImpossible notifyBroadcastDeliveryReceipt BroadcastImpossible, BroadcastImpossible stopAnnouncement Null};
(iv)
s
0
A
p
p
=
{Null}.ThegetBroadcastStatus andnotifyBroadcastDeliveryReceipt operations do not change the session state or message broadcast status.


## 5.2.2. BMSC Model of MBMS Session

The simplified BMSC view on the MBMS session states includes the following states. InMBMSIdle state, there is no MBMS session. When the application invokes thesendBroadcastMessage operation, the BMSC sends session information to the PCRF, a session start request to the MBMS GW, and it moves toInitialWaiting state. While being inInitialWaiting state, the BMSC waits for resource authorization and QoS resource reservation. The time delay between a session start indication and actual data should be long enough for the required network actions. When the network is ready to send MBMS data, the BMSC sends charging data and moves toDataTransfer state. InDataTransfer state, MBMS data are transferred to any user equipment which is present. When the MBMS user service determines that there are no more data to send, the BMSC initiates session termination, sends charging data, and moves toMBMSIdle state. InInitialWaiting orDataTransfer state, the BMSC may be notified about any problems related to MBMS bearers and the MBMS session is terminated. It is also possible for third-party application to invoke thecancelBroadcastMessage operation while the BMSC is inInitialWaiting orDataTransfer state, which cancels the MBMS session.ByT
B
M
S
C
=
(
S
B
M
S
C
,
A
c
t
B
M
S
C
,
→
B
M
S
C
,
s
0
B
M
S
C
) an LTS representing the BMSC view on the message broadcast status is denoted where(i)
S
B
M
S
C
=
{MBMSIdle, InitialWaiting, DataTransfer};
(ii)
A
c
t
B
M
S
C
=
{sendBroadcastMessage, initialPeriod, dataTransferStop, resourceFailed, resourceLost, cancelBroadcastMessage};
(iii)
→
B
M
S
C
=
{MBMSIdle sendBroadcastMessage InitialWaiting, InitialWaiting initialPeriod DataTransfer, InitialWaiting resourceFailed MBMSIdle, InitialWaiting cancelBroadcastMessage MBMSIdle, DataTransfer dataTransferStop MBMSIdle, DataTransfer resourceLost MBMSIdle}; DataTransfer cancelBroadcastMessage MBMSIdle};
(iv)
s
0
B
M
S
C
=
{MBMSIdle}.Figure 6 illustrates the MBMS session state machine.Figure 6
MBMS session state machine.


## 5.2.3. MBMS GW Model of IP-CAN Session

The MBMS GW view on the IP-CAN session states for the MBMS user service includes the following states. InIPCANIdle state, there is no dedicated IP-CAN session. On receiving session start instructions, the MBMS GW indicates an IP-CAN session modification to the PCRF and moves toWaitForPCCRules state. InWaitForPCCRules state, the MBMS waits for authorization of IP-CAN session modification. Upon receiving the PCC rules, the MBMS GW initiates IP-CAN session establishment in the access network and moves toResourceReservation state. The MBMS GW moves toSessionActive state after it receives an acknowledgement that the resources in the access network are reserved. The transition toResourceRelease state occurs when a session stop request is received by the BMSC. InResourceRelease state, the MBMS waits for the release of IP-CAN bearers. InWaitForTermAck state, the MBMS GW waits for acknowledgement for session termination from PCRF and then moves to the initialIPCANIdle state. InResourceReservation orSessionActive state, network, the MBMS GW may receive indications from the PCRF that the bearer modification fails or that the bearers are lost. These cause the transition toIPCANIdle state.ByT
M
B
M
S
=
(
S
M
B
M
S
,
A
c
t
M
B
M
S
,
→
M
B
M
S
,
s
0
M
B
M
S
) an LTS representing the MBMS GW view on the MBMS IP-CAN session state is denoted where(i)
S
M
B
M
S
=
{IPCANIdle, WaitForPCCRules, ResourceReservation, SessionActive, ResourceRelease, WaitForTermAck};
(ii)
A
c
t
M
B
M
S
=
{sessionStart, pccRules, ipCanBearerEstablishment, sessionStop, sessionCancel, ipCanBearerRelease, ipCanSessionTermAck, ipCanBearerFailed, ipCanBearerLost};
(iii)
→
M
B
M
S
=
{IPCANIdle sessionStart WaitForPCCRules, WaitForPCCRules pccRules ResourceReservation, WaitForPCCRules sessionCancel IPCANIdle, ResourceReservation ipCanBearerEstablishment SessionActive, ResourceReservation sessionCancel IPCANIdle, ResourceReservation ipCanBearerFailed IPCANIdle, SessionActive sessionCancel ResourceRelease, SessionActive sessionStop ResourceRelease, SessionActive ipCanBearerLost IPCANIdle, ResourceRelease ipCanBearerRelease WaitForTermAck, WaitForTermAck ipCanSessionTermAck IPCANIdle};
(iv)
s
0
M
B
M
S
=
{IPCANIdle}.The IP-CAN session state machine is depicted in Figure 7.Figure 7
IP-CAN session state machine.


## 5.2.4. PCRF Model of MBMS QoS Resources

The PCRF view on the state of QoS resource intended for MBMS session is as follows. InResourceNull state, no QoS resources are authorized for the MBMS session. When the BMSC sends session information, the PCRF performs session binding which takes into account the IP-CAN parameters and moves toIPCanSession state storing this information. InIPCanSession state, the PCRF may receive an indication about IP-CAN session modification and correlates appropriate service information with IP-CAN session. InResourceAuthorizing state, the PCRF makes policy decisions and sends them as PCC rules to the MBMS GW. On receiving provision acknowledgement the PCRF moves toResourceAuthorized state. The QoS resources for the MBMS session are authorized and reserved, and the MBMS data transfer can start. When the MBMS GW detects that the IP-CAN session termination is required, it sends an indication to the PCRF. In case of subscription, the PCRF may find the PCC rules that require the BMSC to be notified and sends a notification. The QoS resources authorized for the MBMS session are released which causes the transition toResourceNull state. InResourceAuthorizing state, the PCRF may decide to reject the IP-CAN session modification. Also, during MBMS data transfer any QoS problems may be reported by the MBMS GW to the PCRF, thus affecting the online charging. In case the MBMS GW reports that all bearer resources authorized for the MBMS session are lost, the PCRF moves toResourceNull state.ByT
P
C
R
F
=
(
S
P
C
R
F
,
A
c
t
P
C
R
F
,
→
P
C
R
F
,
s
0
P
C
R
F
) an LTS representing the PCRF GW view on the QoS resource state is denoted where(i)
S
P
C
R
F
=
{ResourceNull, IPCanSession, ResourceAuthorizing, ResourceAuthorized};
(ii)
A
c
t
P
C
R
F
=
{sessionInfo, ipCanSessionModification, provisionAck, provisionNonAck, ipCanSessionTermination, ipCanBearerRemoved, ipCanSessionCancel};
(iii)
→
P
C
R
F
=
{ResourceNull sessionInfo IPCanSession, IPCanSession ipCanSessionModification ResourceAuthorizing, IPCanSession ipCanSessionTermination ResourceNull, ResourceAuthorizing provisionAck ResourceAuthorized, ResourceAuthorizing ipCanSessionCancel ResourceNull, ResourceAuthorizing provisionNonAck ResourceNull, ResourceAuthorized ipCanSessionCancel ResourceNull, ResourceAuthorized ipCanBearerRemoved ResourceNull};
(iv)
s
0
P
C
R
F
=
{ResourceNull}.Figure 8 illustrates the QoS resource state machine.Figure 8
QoS resource state machine.


## 5.2.5. MBMS Charging Session Model

Both offline and online charging are possible. By applying policy and charging control on MBMS sessions, online charging can reflect the QoS experience during message broadcasting. The BMSC collects charging data such as identification of the content source, type of user service, type of bearer resources used to deliver the content broadcast, and identification of users receiving the service. The BMSC collects also charging data such as session duration, data transfer time, and data volume for mobile users receiving the service through MBMS and/or content providers delivery of the MBMS content. The triggers for charging data are bearer service initiation and termination. InChargingIdle state, no charging data are gathered. Charging data are provided by the BMSC upon MBMS session initiation, IP-CAN bearer resource establishment/failure, and MBMS session termination. The charging data are sent to the CDF (in case of offline charging) or to the Online Charging System. On receiving charging data related to session start, the charging session moves to A
c
t
i
v
e
i
n
i
t
i
a
l state. In A
c
t
i
v
e
i
n
i
t
i
a
l state, when charging data for IP-CAN session establishment are received, the charging session moves to A
c
t
i
v
e
t
r
a
n
s
f
e
r state. The charging data stop instructions may be received due to normal completion of message broadcast, due to some problems in the network, or due to message broadcast cancelation by the third-party application. On receiving charging data stop instructions the charging session moves toChargingIdle state.ByT
C
S
=
(
S
C
S
,
A
c
t
C
S
,
→
C
S
,
s
0
C
S
) an LTS representing the charging session states is denoted where(i)
S
C
S
=
{ChargingIdle, Active
i
n
i
t
i
a
l, Active
t
r
a
n
s
f
e
r
};
(ii)
A
c
t
C
S
=
{chargingDataStart
i
n
i
t, chargingDataStart
i
n
t
e
r
i
m, chargingDataStop
n
o
r
m
a
l, chargingDataStop
c
a
n
c
e
l
e
d, chargingDataStop
f
a
i
l
e
d
};
(iii)
→
C
S
=
{ChargingIdle chargingDataStart
i
n
i
t Active
i
n
i
t
i
a
l, Active
i
n
i
t
i
a
l chargingDataStart
i
n
t
e
r
i
m Active
t
r
a
n
s
f
e
r, Active
t
r
a
n
s
f
e
r chargingDataStop
n
o
r
m
a
l ChargingIdle, Active
i
n
i
t
i
a
l chargingDataStop
f
a
i
l
e
d ChargingIdle, Active
i
n
i
t
i
a
l chargingDataStop
c
a
n
c
e
l
e
d ChargingIdle, Active
t
r
a
n
s
f
e
r chargingDataStop
c
a
n
c
e
l
e
d ChargingIdle Active
t
r
a
n
s
f
e
r chargingDataStop
f
a
i
l
e
d ChargingIdle};
(iv)
s
0
C
S
=
{ChargingIdle}.The charging session state machine is depicted in Figure 9.Figure 9
Charging session state machine.Having formal description of the models representing message broadcast status as seen by both the third-party application and the network, we can prove that these models are synchronized; that is, they expose equivalent behavior.


## 6. Formal Verification of Models

### 6.1. Bisimilarity Concept

Intuitively, in terms of observed behavior, two state machines are equivalent if one state machine displays a final result and the other state machine displays the same result. The idea of equivalence is formalized by the concept of bisimilarity [20]. Strong bisimilarity requires existence of homomorphism between transitions in both state machines. In practice, strong bisimilarity puts strong conditions for equivalence which are not always necessary. For example, internal transitions can present actions, which are intrinsic to the system (i.e., not observable). In weak bisimilarity, internal transitions can be ignored.The concept of weak bisimilarity is used to study some model aspects of BMSC.We will use the following notations:(i)
s
→
a
s
′ stands for the transition (
s
,
a
,
s
′
);
(ii)
s
→
a means that ∃
s
′
:
s
→
a
s
′;
(iii)
s
⇒
μ
s
n, where μ
=
a
1
,
a
2
,
…
,
a
n
:
∃
s
1
,
s
2
,
…
,
s
n, such that s
→
a
1
s
1
⋯
→
a
n
s
n;
(iv)
s
⇒
μ means that ∃
s
′, such as s
⇒
μ
s
′;
(v)
⇒
μ
^ means ⇒ if μ
≡
τ or ⇒
μ, otherwise,where τ is one or more internal (invisible) actions.Definition 2.
Two labeled transition systemsT
=
(
S
,
A
,
→
,
s
0
) and T
′
=
(
S
′
,
A
,
→
′
,
s
0
′
) areweakly bisimilar (T
~
T
′
) if there is a binary relation U
⊆
S
×
S
′ such that if s
1
U
t
1
:
s
1
⊆
S and t
1
⊆
S
′, then ∀
a
∈
A
c
t:(i)
s
1
⇒
a
s
2 implies ∃
t
2
:
t
1
⇒
′
a
^
t
2 and s
2
U
t
2;
(ii)
t
1
⇒
′
a
t
2 implies ∃
s
2
:
s
1
⇒
a
s
2 and s
2
U
t
2.So in order to prove that considered LTS expose equivalent behavior, it is necessary to identify a relation between their states that satisfies the above conditions.


### 6.2. Equivalence of Models Representing Message Broadcast Status

#### 6.2.1. Behavioral Equivalence between Models of IP-CAN Session and QoS Resources

It can be shown that the MBMS GW model of MBMS session and PCRF model of MBMS QoS resources provide the lower level of abstraction, so we will start with considering the synchronization aspects of these models.Proposition 3.
The labeled transition systemsT
M
B
M
S and T
P
C
R
F are weakly bisimilar.Proof.
To prove the bisimilarity between two labeled transition systems, it has to be proved that there exists a bisimilar relation between their states. ByU
M
P a relation between the states of T
M
B
M
S and T
P
C
R
F is denoted where U
M
P
=
{(IpCANIdle, ResourceNull), (WaitForPCCRules, IpCanSession), (ResourceReservation, ResourceAuthorizing), (SessionActive, ResourceAuthorized)}.The following homomorphism based on functional mapping may be defined between transitions of T
M
B
M
S and T
P
C
R
F:h
M
P
(sessionStart)
=
h
M
P
(sessionInfo);
h
M
P
(pccRule)
=
h
M
P
(ipCanSessionModification);
h
M
P
(ipCanBearerEstablishment)
=
h
M
P
(provisionAck);
h
M
P
(sessionStop)
=
h
M
P
(ipCanSessionTermination);
h
M
P
(sessionCancel)
=
h
M
P
(ipCanSessionCancel);
h
M
P
(ipCanBearerFailed)
=
h
M
P
(provisionNonAck);
h
M
P
(ipCanBearerLost)
=
h
M
P
(ipCanBearerRemoved).The homomorphism between the T
M
B
M
S and T
P
C
R
F messages shows the action’s similarity.
Table1 represents the functional mapping between the transitions in the IP-CAN session state machine and transitions in the QoS resources state machine.
Based on the established relation between the states ofT
M
B
M
S and T
P
C
R
F, and on the homomorphism h
M
P between their transitions, it is proved that T
M
B
M
S
~
T
P
C
R
F; that is, they are weakly bisimilar and expose equivalent behavior.Table 1
Functional mapping between transitions ofT
M
B
M
S and T
P
C
R
F.
Transitions inT
M
B
M
S
Transitions inT
P
C
R
F
Event
IPCANIdle sessionStart WaitForPCCRules
ResourceNull sessionInfo IPCanSession
MBMS session initiation
WaitForPCCRules pccRules ResourceReservation
IPCanSession ipCanSessionModification ResourceAuthorizing
IP-CAN session modification request
ResourceReservation ipCanBearerEstablishment SessionActive
ResourceAuthorizing provisionAck ResourceAuthorized
IP-CAN session modification authorization
SessionActive sessionStop ResourceRelease,ResourceRelease ipCanBearerRelease WaitForTermAck,WaitForTermAck ipCanSessionTermAck IPCANIdle
ResourceAuthorized ipCanSessionTermination ResourceNull
MBMS session stop
ResourceReservation ipCanBearerFailed IPCANIdle
ResourceAuthorizing provisionNonAck ResourceNull
IP-CAN session modification authorization fails
SessionActive ipCanBearerLost IPCANIdle
ResourceAuthorized ipCanBearerRemoved ResourceNull
All bearers are lost during data transfer
ResourceReservation sessionCancel IPCANIdle
ResourceAuthorized ipCanSessionCancel ResourceNull
The application cancels the MBMS user service during resource reservation
WaitForPCCRules sessionCancel IPCANIdle
IPCANSession ipCanSessionCancel ResourceNull
The application cancels the MBMS user service during resource authorization
SessionActive sessionCancel ResourceRelease,ResourceRelease ipCanBearerRelease WaitForTermAck,WaitForTermAck ipCanSessionTermAck IPCANIdle
ResourceAuthorized ipCanSessionCancel ResourceNull
The application cancels the MBMS user service during data transfer


#### 6.2.2. Equivalence of Models of MBMS Session, IP-CAN Session, and QoS Resources

A higher level of abstraction on the network resource state for MBMS is provided by the state of MBMS session.Proposition 4.
The labeled transition systemsT
B
M
S
C, T
M
B
M
S, and T
P
C
R
F are weakly bisimilar.Proof.
The weak bisimilarity has the property transitivity; that is, as a relation it is transitive. Then, having proved thatT
M
B
M
S
~
T
P
C
R
F, it has to be proved that T
B
M
S
C
~
T
M
B
M
S.
ByU
B
M
P a relation between the states of T
B
M
S
C, T
M
B
M
S, and T
P
C
R
F is denoted where U
B
M
P
=
{(MBMSIdle, IpCANIdle), (InitialWaiting, WaitForPCCRules), (DataTransfer, SessionActive)}.The following homomorphism based on functional mapping may be defined between transitions of T
B
M
S
C, T
M
B
M
S, and T
P
C
R
F:h
B
M
P
(sendBroadcastMessage)
=
h
B
M
P(sessionStart)
=
h
B
M
P
(sessionInfo);
h
B
M
P
(initialPeriod)
=
h
B
M
P
(pccRule)
=
h
B
M
P
(ipCanSessionModification);
h
B
M
P
(dataTransferStop)
=
h
B
M
P
(sessionStop)
=
h
B
M
P
(ipCanSessionTermination);
h
B
M
P
(cancel)
=
h
B
M
P
(sessionCancel)
=
h
B
M
P
(ipCanSessionCancel);
h
B
M
P
(resourcesFailed)
=
h
B
M
P(ipCanBearerFailed)
=
h
B
M
P
(provisionNonAck);
h
B
M
P
(resourcesLost)
=
h
B
M
P
(ipCanBearerLost)
=
h
B
M
P
(ipCanBearerRemoved).The functional mapping between the transitions in the MBMS session and IP-CAN state machines represented in Table 2 shows that U
B
M
P is a bisimilar relation.
From the homomorphismh
B
M
P and bisimilar property of U
B
M
P it follows that T
B
M
S
C
~
T
M
B
M
S.
From the bisimulation transitivity it follows thatT
B
M
S
C
~
T
M
B
M
S
~
T
P
C
R
F.
This means that MBMS session state machine, IP-CAN state machine, and the QoS resources state machine are weakly bisimilar.Table 2
Functional mapping between transitions ofT
B
M
S
C and T
M
B
M
S.
Transitions inT
B
M
S
C
Transitions inT
M
B
M
S
Event
MBMSIdlesendBroadcastMessage InitialWaiting
IPCANIdle sessionStartWaitForPCCRules
MBMS session initiation
InitialWaiting initialPeriodDataTransfer
WaitForPCCRulespccRules ResourceReservation, ResourceReservation ipCanBearerEstablishment SessionActive
IP-CAN session modification requestIP-CAN session modification authorization
DataTransferdataTransferStop MBMSIdle
SessionActive sessionStopResourceRelease,ResourceRelease ipCanBearerRelease WaitForTermAck,WaitForTermAck ipCanSessionTermAck IPCANIdle
MBMS session stop
InitialWaiting resourceFailedMBMSIdle
ResourceReservationipCanBearerFailedIPCANIdle
IP-CAN session modification authorization fails
DataTransfer resourceLostMBMSIdle
SessionActiveipCanBearerLost IPCANIdle
All bearers are lost during data transfer
InitialWaitingcancelBroadcastMessage MBMSIdle
WaitForPCCRules sessionCancel IPCANIdleResourceReservation sessionCancel IPCANIdle
The application cancels the MBMS user service during resource reservation
DataTransfercancelBroadcastMessage MBMSIdle
SessionActive sessionCancel ResourceRelease,ResourceRelease ipCanBearerRelease WaitForTermAck,WaitForTermAck ipCanSessionTermAck IPCANIdle
The application cancels the MBMS user service during resource authorization


#### 6.2.3. Equivalence of Application and Network Models

The highest level of abstraction on message broadcast status is provided by 3rd-party application. Its view has to be synchronized also with the network resource state and charging session state.Proposition 5.
The labeled transition systemsT
A
p
p, T
B
M
S
C, T
M
B
M
S, T
P
C
R
F, and T
C
S are weakly bisimilar.Proof.
ByU
A
B
M
P
C a relation between the states of T
A
p
p, T
B
M
S
C, T
M
B
M
S, T
P
C
R
F, and T
C
S is denoted where U
A
B
M
P
C
=
{(Null, MBMSIdle, IpCANIdle, ResourceNull, ChargingIdle), (MessageWaiting, InitialWaiting, WaitForPCCRules, IpCanSession, Active
i
n
i
t
i
a
l), (Broadcasting, DataTransfer, SessionActive, ResourceAuthorized, Active
t
r
a
n
s
f
e
r)}.The following homomorphism based on functional mapping may be defined between transitions of T
A
p
p, T
B
M
S
C, T
M
B
M
S, T
P
C
R
F, and T
C
S:h
A
B
M
P
C
(sendMessage)
=
h
A
B
M
P
C
(sendBroadcastMessage)
=
h
A
B
M
P
C
(sessionStart)
=
h
A
B
M
P
C
(sessionInfo)
=
h
A
B
M
P
C
(sendBroadcastMessage)
=
h
A
B
M
P
C
(chargingDataStart
i
n
i
t);
h
A
B
M
P
C
(successfulDelivery)
=
h
A
B
M
P
C
C
(initialPeriod)
=
h
A
B
M
P
C
(pccRule)
=
h
A
B
M
P
C
(ipCanSessionModification)
=
h
A
B
M
P
C
C
(chargingDataStart
i
n
t
e
r
i
m
);
h
A
B
M
P
C
(successfulMessageCompletion)
=
h
A
B
M
P
C
(dataTransferStop)
=
h
A
B
M
P
C
(sessionStop)
=
h
A
B
M
P
C
(ipCanSessionTermination)
=
h
A
B
M
P
C
(chargingDataStop
n
o
r
m
a
l);
h
A
B
M
P
C
(cancelMessage)
=
h
A
B
M
P
C
(cancel)
=
h
A
B
M
P
C
(sessionCancel)
=
h
A
B
M
P
C
(ipCanSessionCancel)
=
h
A
B
M
P
C
(chargingDataStop
c
a
n
c
e
l
e
d);
h
A
B
M
P
C
(unsuccessfulDelivery)
=
h
A
B
M
P
C
(resourcesFailed)
=
h
A
B
M
P
C
(ipCanBearerFailed)
=
h
A
B
M
P
C
(provisionNonAck)
=
h
A
B
M
P
C
(chargingDataStop
f
a
i
l
e
d
).In order to define a weak bisimilar relation between the states of T
A
p
p, T
B
M
S
C, T
M
B
M
S, T
P
C
R
F, and T
C
S we establish the valid sequences of ordered transitions from - →
A
p
p, - →
B
M
S
C, - →
M
B
M
S, - →
P
C
R
F, and - →
C
S that correspond to U
A
B
M
P
C.
Letτ
i
A
p
p
⊂
→
A
p
p, where i
∈
{
1
,
…
,
6
}, be the following transition sequences:τ
1
A
p
p
=
(Null sendMessage MessageWaiting);
τ
2
A
p
p
=
(MessageWaiting getBroadcastStatus MessageWaiting, MessageWaiting successfulDelivery Broadcasting);
τ
3
A
p
p
=
(Broadcasting getBroadcastStatus Broadcasting, Broadcasting successfulMessageCompletion Broadcasted, Broadcasted getBroadcastStatus Broadcasted, Broadcasted notifyBroadcastDeliveryReceipt Broadcasted, Broadcasted stopAnnouncement Null);
τ
4
A
p
p
=
(MessageWaiting unableToDeliver BroadcastImpossible, BroadcastImpossible getBroadcastStatus BroadcastImpossible, BroadcastImpossible notifyBroadcastDeliveryReceipt BroadcastImpossible, BroadcastImpossible stopAnnouncement Null);
τ
5
A
p
p
=
(MessageWaiting cancelMessage Null);
τ
6
A
p
p
=
(Broadcasting cancelMessage Null).Let τ
i
B
M
S
C
⊂
→
B
M
S
C, where i
∈
{
1
,
…
,
6
}, be following transition sequences:τ
1
B
M
S
C
=
(MBMSIdle sendBroadcastMessage InitialWaiting);
τ
2
B
M
S
C
=
(InitialWaiting initialPeriod DataTransfer);
τ
3
B
M
S
C
=
(DataTransfer dataTransferStop MBMSIdle);
τ
4
B
M
S
C
=
(InitialWaiting resourceFailed MBMSIdle);
τ
5
B
M
S
C
=
(InitialWaiting cancelBroadcastMessage MBMSIdle);
τ
6
B
M
S
C
=
(DataTransfer resourceLost MBMSIdle).Let τ
i
M
B
M
S
⊂
→
M
B
M
S, where i
∈
{
1
,
…
,
6
}, be the following:τ
1
M
B
M
S
=
(IPCANIdle sessionStart WaitForPCCRules);
τ
2
M
B
M
S
=
(WaitForPCCRules pccRules ResourceReservation, ResourceReservation ipCanBearerEstablishment SessionActive);
τ
3
M
B
M
S
=
(SessionActive sessionStop ResourceRelease, ResourceRelease ipCanBearerRelease WaitForTermAck, WaitForTermAck ipCanSessionTermAck IPCANIdle);
τ
4
M
B
M
S
=
(ResourceReservation ipCanBearerFailed IPCANIdle);
τ
5
M
B
M
C
=
(WaitForPCCRules sessionCancel IPCANIdle, ResourceReservation sessionCancel IPCANIdle);
τ
6
M
B
M
S
=
(SessionActive ipCanBearerLost IPCANIdle).Let τ
i
P
C
R
F
⊂
→
P
C
R
F, where i
∈
{
1
,
…
,
6
}, be the following:τ
1
P
C
R
F
=
(ResourceNull sessionInfo IPCanSession);
τ
2
P
C
R
F
=
(IPCANSession ipCanSessionModification ResourceAuthorizing, ResourceAuthorizing provisionAck ResourceAuthorized);
τ
3
P
C
R
F
=
(ResourceAuthorized ipCanSessionTermination ResourceNull);
τ
4
P
C
R
F
=
(ResourceAuthorizing provisionNonAck ResourceNull);
τ
5
P
C
R
F
=
(IPCANSession ipCanSessionCancel ResourceNull, ResourceAuthorized ipCanSessionCancel ResourceNull);
τ
6
P
C
R
F
=
(ResourceAuthorized ipCanBearerRemoved ResourceNull).Let τ
i
C
S
⊂
→
C
S, where i
∈
{
1
,
…
,
6
}, be following transition sequences:τ
1
C
S
=
(ChargingIdle chargingDataStart
i
n
i
t Active
i
n
i
t
i
a
l);
τ
2
C
S
=
(Active
i
n
i
t
i
a
l chargingDataStart
i
n
t
e
r
i
m Active
t
r
a
n
s
f
e
r);
τ
3
C
S
=
(Active
t
r
a
n
s
f
e
r chargingDataStop
n
o
r
m
a
l ChargingIdle);
τ
4
C
S
=
(Active
i
n
i
t
i
a
l chargingDataStop
f
a
i
l
e
d ChargingIdle);
τ
5
C
S
=
(Active
i
n
i
t
i
a
l chargingDataStop
c
a
n
c
e
l
e
d ChargingIdle);
τ
6
C
S
=
(Active
t
r
a
n
s
f
e
r chargingDataStop
c
a
n
c
e
l
e
d ChargingIdle).Then, based on the defined homomorphism h
A
B
M
P
C between the actions of T
A
p
p, T
B
M
S
C, T
M
B
M
S, T
P
C
R
F, and T
C
S, it follows that for U
A
B
M
P
C the sequences (
τ
i
A
p
p
,
τ
i
B
M
S
C
,
τ
i
M
B
M
S
,
τ
i
P
C
R
F
,
τ
i
C
S
) for i
∈
{
1
,
…
,
6
} agree with Definition 2 for weak bisimilarity.
Hence, the state machines that represent the 3rd-party application view on message broadcast, MBMS session, IP-CAN session, QoS resources, and charging session are bisimilar; that is, these state machines expose equivalent behavior.


## 6.1. Bisimilarity Concept

Intuitively, in terms of observed behavior, two state machines are equivalent if one state machine displays a final result and the other state machine displays the same result. The idea of equivalence is formalized by the concept of bisimilarity [20]. Strong bisimilarity requires existence of homomorphism between transitions in both state machines. In practice, strong bisimilarity puts strong conditions for equivalence which are not always necessary. For example, internal transitions can present actions, which are intrinsic to the system (i.e., not observable). In weak bisimilarity, internal transitions can be ignored.The concept of weak bisimilarity is used to study some model aspects of BMSC.We will use the following notations:(i)
s
→
a
s
′ stands for the transition (
s
,
a
,
s
′
);
(ii)
s
→
a means that ∃
s
′
:
s
→
a
s
′;
(iii)
s
⇒
μ
s
n, where μ
=
a
1
,
a
2
,
…
,
a
n
:
∃
s
1
,
s
2
,
…
,
s
n, such that s
→
a
1
s
1
⋯
→
a
n
s
n;
(iv)
s
⇒
μ means that ∃
s
′, such as s
⇒
μ
s
′;
(v)
⇒
μ
^ means ⇒ if μ
≡
τ or ⇒
μ, otherwise,where τ is one or more internal (invisible) actions.Definition 2.
Two labeled transition systemsT
=
(
S
,
A
,
→
,
s
0
) and T
′
=
(
S
′
,
A
,
→
′
,
s
0
′
) areweakly bisimilar (T
~
T
′
) if there is a binary relation U
⊆
S
×
S
′ such that if s
1
U
t
1
:
s
1
⊆
S and t
1
⊆
S
′, then ∀
a
∈
A
c
t:(i)
s
1
⇒
a
s
2 implies ∃
t
2
:
t
1
⇒
′
a
^
t
2 and s
2
U
t
2;
(ii)
t
1
⇒
′
a
t
2 implies ∃
s
2
:
s
1
⇒
a
s
2 and s
2
U
t
2.So in order to prove that considered LTS expose equivalent behavior, it is necessary to identify a relation between their states that satisfies the above conditions.


## 6.2. Equivalence of Models Representing Message Broadcast Status

### 6.2.1. Behavioral Equivalence between Models of IP-CAN Session and QoS Resources

It can be shown that the MBMS GW model of MBMS session and PCRF model of MBMS QoS resources provide the lower level of abstraction, so we will start with considering the synchronization aspects of these models.Proposition 3.
The labeled transition systemsT
M
B
M
S and T
P
C
R
F are weakly bisimilar.Proof.
To prove the bisimilarity between two labeled transition systems, it has to be proved that there exists a bisimilar relation between their states. ByU
M
P a relation between the states of T
M
B
M
S and T
P
C
R
F is denoted where U
M
P
=
{(IpCANIdle, ResourceNull), (WaitForPCCRules, IpCanSession), (ResourceReservation, ResourceAuthorizing), (SessionActive, ResourceAuthorized)}.The following homomorphism based on functional mapping may be defined between transitions of T
M
B
M
S and T
P
C
R
F:h
M
P
(sessionStart)
=
h
M
P
(sessionInfo);
h
M
P
(pccRule)
=
h
M
P
(ipCanSessionModification);
h
M
P
(ipCanBearerEstablishment)
=
h
M
P
(provisionAck);
h
M
P
(sessionStop)
=
h
M
P
(ipCanSessionTermination);
h
M
P
(sessionCancel)
=
h
M
P
(ipCanSessionCancel);
h
M
P
(ipCanBearerFailed)
=
h
M
P
(provisionNonAck);
h
M
P
(ipCanBearerLost)
=
h
M
P
(ipCanBearerRemoved).The homomorphism between the T
M
B
M
S and T
P
C
R
F messages shows the action’s similarity.
Table1 represents the functional mapping between the transitions in the IP-CAN session state machine and transitions in the QoS resources state machine.
Based on the established relation between the states ofT
M
B
M
S and T
P
C
R
F, and on the homomorphism h
M
P between their transitions, it is proved that T
M
B
M
S
~
T
P
C
R
F; that is, they are weakly bisimilar and expose equivalent behavior.Table 1
Functional mapping between transitions ofT
M
B
M
S and T
P
C
R
F.
Transitions inT
M
B
M
S
Transitions inT
P
C
R
F
Event
IPCANIdle sessionStart WaitForPCCRules
ResourceNull sessionInfo IPCanSession
MBMS session initiation
WaitForPCCRules pccRules ResourceReservation
IPCanSession ipCanSessionModification ResourceAuthorizing
IP-CAN session modification request
ResourceReservation ipCanBearerEstablishment SessionActive
ResourceAuthorizing provisionAck ResourceAuthorized
IP-CAN session modification authorization
SessionActive sessionStop ResourceRelease,ResourceRelease ipCanBearerRelease WaitForTermAck,WaitForTermAck ipCanSessionTermAck IPCANIdle
ResourceAuthorized ipCanSessionTermination ResourceNull
MBMS session stop
ResourceReservation ipCanBearerFailed IPCANIdle
ResourceAuthorizing provisionNonAck ResourceNull
IP-CAN session modification authorization fails
SessionActive ipCanBearerLost IPCANIdle
ResourceAuthorized ipCanBearerRemoved ResourceNull
All bearers are lost during data transfer
ResourceReservation sessionCancel IPCANIdle
ResourceAuthorized ipCanSessionCancel ResourceNull
The application cancels the MBMS user service during resource reservation
WaitForPCCRules sessionCancel IPCANIdle
IPCANSession ipCanSessionCancel ResourceNull
The application cancels the MBMS user service during resource authorization
SessionActive sessionCancel ResourceRelease,ResourceRelease ipCanBearerRelease WaitForTermAck,WaitForTermAck ipCanSessionTermAck IPCANIdle
ResourceAuthorized ipCanSessionCancel ResourceNull
The application cancels the MBMS user service during data transfer


### 6.2.2. Equivalence of Models of MBMS Session, IP-CAN Session, and QoS Resources

A higher level of abstraction on the network resource state for MBMS is provided by the state of MBMS session.Proposition 4.
The labeled transition systemsT
B
M
S
C, T
M
B
M
S, and T
P
C
R
F are weakly bisimilar.Proof.
The weak bisimilarity has the property transitivity; that is, as a relation it is transitive. Then, having proved thatT
M
B
M
S
~
T
P
C
R
F, it has to be proved that T
B
M
S
C
~
T
M
B
M
S.
ByU
B
M
P a relation between the states of T
B
M
S
C, T
M
B
M
S, and T
P
C
R
F is denoted where U
B
M
P
=
{(MBMSIdle, IpCANIdle), (InitialWaiting, WaitForPCCRules), (DataTransfer, SessionActive)}.The following homomorphism based on functional mapping may be defined between transitions of T
B
M
S
C, T
M
B
M
S, and T
P
C
R
F:h
B
M
P
(sendBroadcastMessage)
=
h
B
M
P(sessionStart)
=
h
B
M
P
(sessionInfo);
h
B
M
P
(initialPeriod)
=
h
B
M
P
(pccRule)
=
h
B
M
P
(ipCanSessionModification);
h
B
M
P
(dataTransferStop)
=
h
B
M
P
(sessionStop)
=
h
B
M
P
(ipCanSessionTermination);
h
B
M
P
(cancel)
=
h
B
M
P
(sessionCancel)
=
h
B
M
P
(ipCanSessionCancel);
h
B
M
P
(resourcesFailed)
=
h
B
M
P(ipCanBearerFailed)
=
h
B
M
P
(provisionNonAck);
h
B
M
P
(resourcesLost)
=
h
B
M
P
(ipCanBearerLost)
=
h
B
M
P
(ipCanBearerRemoved).The functional mapping between the transitions in the MBMS session and IP-CAN state machines represented in Table 2 shows that U
B
M
P is a bisimilar relation.
From the homomorphismh
B
M
P and bisimilar property of U
B
M
P it follows that T
B
M
S
C
~
T
M
B
M
S.
From the bisimulation transitivity it follows thatT
B
M
S
C
~
T
M
B
M
S
~
T
P
C
R
F.
This means that MBMS session state machine, IP-CAN state machine, and the QoS resources state machine are weakly bisimilar.Table 2
Functional mapping between transitions ofT
B
M
S
C and T
M
B
M
S.
Transitions inT
B
M
S
C
Transitions inT
M
B
M
S
Event
MBMSIdlesendBroadcastMessage InitialWaiting
IPCANIdle sessionStartWaitForPCCRules
MBMS session initiation
InitialWaiting initialPeriodDataTransfer
WaitForPCCRulespccRules ResourceReservation, ResourceReservation ipCanBearerEstablishment SessionActive
IP-CAN session modification requestIP-CAN session modification authorization
DataTransferdataTransferStop MBMSIdle
SessionActive sessionStopResourceRelease,ResourceRelease ipCanBearerRelease WaitForTermAck,WaitForTermAck ipCanSessionTermAck IPCANIdle
MBMS session stop
InitialWaiting resourceFailedMBMSIdle
ResourceReservationipCanBearerFailedIPCANIdle
IP-CAN session modification authorization fails
DataTransfer resourceLostMBMSIdle
SessionActiveipCanBearerLost IPCANIdle
All bearers are lost during data transfer
InitialWaitingcancelBroadcastMessage MBMSIdle
WaitForPCCRules sessionCancel IPCANIdleResourceReservation sessionCancel IPCANIdle
The application cancels the MBMS user service during resource reservation
DataTransfercancelBroadcastMessage MBMSIdle
SessionActive sessionCancel ResourceRelease,ResourceRelease ipCanBearerRelease WaitForTermAck,WaitForTermAck ipCanSessionTermAck IPCANIdle
The application cancels the MBMS user service during resource authorization


### 6.2.3. Equivalence of Application and Network Models

The highest level of abstraction on message broadcast status is provided by 3rd-party application. Its view has to be synchronized also with the network resource state and charging session state.Proposition 5.
The labeled transition systemsT
A
p
p, T
B
M
S
C, T
M
B
M
S, T
P
C
R
F, and T
C
S are weakly bisimilar.Proof.
ByU
A
B
M
P
C a relation between the states of T
A
p
p, T
B
M
S
C, T
M
B
M
S, T
P
C
R
F, and T
C
S is denoted where U
A
B
M
P
C
=
{(Null, MBMSIdle, IpCANIdle, ResourceNull, ChargingIdle), (MessageWaiting, InitialWaiting, WaitForPCCRules, IpCanSession, Active
i
n
i
t
i
a
l), (Broadcasting, DataTransfer, SessionActive, ResourceAuthorized, Active
t
r
a
n
s
f
e
r)}.The following homomorphism based on functional mapping may be defined between transitions of T
A
p
p, T
B
M
S
C, T
M
B
M
S, T
P
C
R
F, and T
C
S:h
A
B
M
P
C
(sendMessage)
=
h
A
B
M
P
C
(sendBroadcastMessage)
=
h
A
B
M
P
C
(sessionStart)
=
h
A
B
M
P
C
(sessionInfo)
=
h
A
B
M
P
C
(sendBroadcastMessage)
=
h
A
B
M
P
C
(chargingDataStart
i
n
i
t);
h
A
B
M
P
C
(successfulDelivery)
=
h
A
B
M
P
C
C
(initialPeriod)
=
h
A
B
M
P
C
(pccRule)
=
h
A
B
M
P
C
(ipCanSessionModification)
=
h
A
B
M
P
C
C
(chargingDataStart
i
n
t
e
r
i
m
);
h
A
B
M
P
C
(successfulMessageCompletion)
=
h
A
B
M
P
C
(dataTransferStop)
=
h
A
B
M
P
C
(sessionStop)
=
h
A
B
M
P
C
(ipCanSessionTermination)
=
h
A
B
M
P
C
(chargingDataStop
n
o
r
m
a
l);
h
A
B
M
P
C
(cancelMessage)
=
h
A
B
M
P
C
(cancel)
=
h
A
B
M
P
C
(sessionCancel)
=
h
A
B
M
P
C
(ipCanSessionCancel)
=
h
A
B
M
P
C
(chargingDataStop
c
a
n
c
e
l
e
d);
h
A
B
M
P
C
(unsuccessfulDelivery)
=
h
A
B
M
P
C
(resourcesFailed)
=
h
A
B
M
P
C
(ipCanBearerFailed)
=
h
A
B
M
P
C
(provisionNonAck)
=
h
A
B
M
P
C
(chargingDataStop
f
a
i
l
e
d
).In order to define a weak bisimilar relation between the states of T
A
p
p, T
B
M
S
C, T
M
B
M
S, T
P
C
R
F, and T
C
S we establish the valid sequences of ordered transitions from - →
A
p
p, - →
B
M
S
C, - →
M
B
M
S, - →
P
C
R
F, and - →
C
S that correspond to U
A
B
M
P
C.
Letτ
i
A
p
p
⊂
→
A
p
p, where i
∈
{
1
,
…
,
6
}, be the following transition sequences:τ
1
A
p
p
=
(Null sendMessage MessageWaiting);
τ
2
A
p
p
=
(MessageWaiting getBroadcastStatus MessageWaiting, MessageWaiting successfulDelivery Broadcasting);
τ
3
A
p
p
=
(Broadcasting getBroadcastStatus Broadcasting, Broadcasting successfulMessageCompletion Broadcasted, Broadcasted getBroadcastStatus Broadcasted, Broadcasted notifyBroadcastDeliveryReceipt Broadcasted, Broadcasted stopAnnouncement Null);
τ
4
A
p
p
=
(MessageWaiting unableToDeliver BroadcastImpossible, BroadcastImpossible getBroadcastStatus BroadcastImpossible, BroadcastImpossible notifyBroadcastDeliveryReceipt BroadcastImpossible, BroadcastImpossible stopAnnouncement Null);
τ
5
A
p
p
=
(MessageWaiting cancelMessage Null);
τ
6
A
p
p
=
(Broadcasting cancelMessage Null).Let τ
i
B
M
S
C
⊂
→
B
M
S
C, where i
∈
{
1
,
…
,
6
}, be following transition sequences:τ
1
B
M
S
C
=
(MBMSIdle sendBroadcastMessage InitialWaiting);
τ
2
B
M
S
C
=
(InitialWaiting initialPeriod DataTransfer);
τ
3
B
M
S
C
=
(DataTransfer dataTransferStop MBMSIdle);
τ
4
B
M
S
C
=
(InitialWaiting resourceFailed MBMSIdle);
τ
5
B
M
S
C
=
(InitialWaiting cancelBroadcastMessage MBMSIdle);
τ
6
B
M
S
C
=
(DataTransfer resourceLost MBMSIdle).Let τ
i
M
B
M
S
⊂
→
M
B
M
S, where i
∈
{
1
,
…
,
6
}, be the following:τ
1
M
B
M
S
=
(IPCANIdle sessionStart WaitForPCCRules);
τ
2
M
B
M
S
=
(WaitForPCCRules pccRules ResourceReservation, ResourceReservation ipCanBearerEstablishment SessionActive);
τ
3
M
B
M
S
=
(SessionActive sessionStop ResourceRelease, ResourceRelease ipCanBearerRelease WaitForTermAck, WaitForTermAck ipCanSessionTermAck IPCANIdle);
τ
4
M
B
M
S
=
(ResourceReservation ipCanBearerFailed IPCANIdle);
τ
5
M
B
M
C
=
(WaitForPCCRules sessionCancel IPCANIdle, ResourceReservation sessionCancel IPCANIdle);
τ
6
M
B
M
S
=
(SessionActive ipCanBearerLost IPCANIdle).Let τ
i
P
C
R
F
⊂
→
P
C
R
F, where i
∈
{
1
,
…
,
6
}, be the following:τ
1
P
C
R
F
=
(ResourceNull sessionInfo IPCanSession);
τ
2
P
C
R
F
=
(IPCANSession ipCanSessionModification ResourceAuthorizing, ResourceAuthorizing provisionAck ResourceAuthorized);
τ
3
P
C
R
F
=
(ResourceAuthorized ipCanSessionTermination ResourceNull);
τ
4
P
C
R
F
=
(ResourceAuthorizing provisionNonAck ResourceNull);
τ
5
P
C
R
F
=
(IPCANSession ipCanSessionCancel ResourceNull, ResourceAuthorized ipCanSessionCancel ResourceNull);
τ
6
P
C
R
F
=
(ResourceAuthorized ipCanBearerRemoved ResourceNull).Let τ
i
C
S
⊂
→
C
S, where i
∈
{
1
,
…
,
6
}, be following transition sequences:τ
1
C
S
=
(ChargingIdle chargingDataStart
i
n
i
t Active
i
n
i
t
i
a
l);
τ
2
C
S
=
(Active
i
n
i
t
i
a
l chargingDataStart
i
n
t
e
r
i
m Active
t
r
a
n
s
f
e
r);
τ
3
C
S
=
(Active
t
r
a
n
s
f
e
r chargingDataStop
n
o
r
m
a
l ChargingIdle);
τ
4
C
S
=
(Active
i
n
i
t
i
a
l chargingDataStop
f
a
i
l
e
d ChargingIdle);
τ
5
C
S
=
(Active
i
n
i
t
i
a
l chargingDataStop
c
a
n
c
e
l
e
d ChargingIdle);
τ
6
C
S
=
(Active
t
r
a
n
s
f
e
r chargingDataStop
c
a
n
c
e
l
e
d ChargingIdle).Then, based on the defined homomorphism h
A
B
M
P
C between the actions of T
A
p
p, T
B
M
S
C, T
M
B
M
S, T
P
C
R
F, and T
C
S, it follows that for U
A
B
M
P
C the sequences (
τ
i
A
p
p
,
τ
i
B
M
S
C
,
τ
i
M
B
M
S
,
τ
i
P
C
R
F
,
τ
i
C
S
) for i
∈
{
1
,
…
,
6
} agree with Definition 2 for weak bisimilarity.
Hence, the state machines that represent the 3rd-party application view on message broadcast, MBMS session, IP-CAN session, QoS resources, and charging session are bisimilar; that is, these state machines expose equivalent behavior.


## 6.2.1. Behavioral Equivalence between Models of IP-CAN Session and QoS Resources

It can be shown that the MBMS GW model of MBMS session and PCRF model of MBMS QoS resources provide the lower level of abstraction, so we will start with considering the synchronization aspects of these models.Proposition 3.
The labeled transition systemsT
M
B
M
S and T
P
C
R
F are weakly bisimilar.Proof.
To prove the bisimilarity between two labeled transition systems, it has to be proved that there exists a bisimilar relation between their states. ByU
M
P a relation between the states of T
M
B
M
S and T
P
C
R
F is denoted where U
M
P
=
{(IpCANIdle, ResourceNull), (WaitForPCCRules, IpCanSession), (ResourceReservation, ResourceAuthorizing), (SessionActive, ResourceAuthorized)}.The following homomorphism based on functional mapping may be defined between transitions of T
M
B
M
S and T
P
C
R
F:h
M
P
(sessionStart)
=
h
M
P
(sessionInfo);
h
M
P
(pccRule)
=
h
M
P
(ipCanSessionModification);
h
M
P
(ipCanBearerEstablishment)
=
h
M
P
(provisionAck);
h
M
P
(sessionStop)
=
h
M
P
(ipCanSessionTermination);
h
M
P
(sessionCancel)
=
h
M
P
(ipCanSessionCancel);
h
M
P
(ipCanBearerFailed)
=
h
M
P
(provisionNonAck);
h
M
P
(ipCanBearerLost)
=
h
M
P
(ipCanBearerRemoved).The homomorphism between the T
M
B
M
S and T
P
C
R
F messages shows the action’s similarity.
Table1 represents the functional mapping between the transitions in the IP-CAN session state machine and transitions in the QoS resources state machine.
Based on the established relation between the states ofT
M
B
M
S and T
P
C
R
F, and on the homomorphism h
M
P between their transitions, it is proved that T
M
B
M
S
~
T
P
C
R
F; that is, they are weakly bisimilar and expose equivalent behavior.Table 1
Functional mapping between transitions ofT
M
B
M
S and T
P
C
R
F.
Transitions inT
M
B
M
S
Transitions inT
P
C
R
F
Event
IPCANIdle sessionStart WaitForPCCRules
ResourceNull sessionInfo IPCanSession
MBMS session initiation
WaitForPCCRules pccRules ResourceReservation
IPCanSession ipCanSessionModification ResourceAuthorizing
IP-CAN session modification request
ResourceReservation ipCanBearerEstablishment SessionActive
ResourceAuthorizing provisionAck ResourceAuthorized
IP-CAN session modification authorization
SessionActive sessionStop ResourceRelease,ResourceRelease ipCanBearerRelease WaitForTermAck,WaitForTermAck ipCanSessionTermAck IPCANIdle
ResourceAuthorized ipCanSessionTermination ResourceNull
MBMS session stop
ResourceReservation ipCanBearerFailed IPCANIdle
ResourceAuthorizing provisionNonAck ResourceNull
IP-CAN session modification authorization fails
SessionActive ipCanBearerLost IPCANIdle
ResourceAuthorized ipCanBearerRemoved ResourceNull
All bearers are lost during data transfer
ResourceReservation sessionCancel IPCANIdle
ResourceAuthorized ipCanSessionCancel ResourceNull
The application cancels the MBMS user service during resource reservation
WaitForPCCRules sessionCancel IPCANIdle
IPCANSession ipCanSessionCancel ResourceNull
The application cancels the MBMS user service during resource authorization
SessionActive sessionCancel ResourceRelease,ResourceRelease ipCanBearerRelease WaitForTermAck,WaitForTermAck ipCanSessionTermAck IPCANIdle
ResourceAuthorized ipCanSessionCancel ResourceNull
The application cancels the MBMS user service during data transfer


## 6.2.2. Equivalence of Models of MBMS Session, IP-CAN Session, and QoS Resources

A higher level of abstraction on the network resource state for MBMS is provided by the state of MBMS session.Proposition 4.
The labeled transition systemsT
B
M
S
C, T
M
B
M
S, and T
P
C
R
F are weakly bisimilar.Proof.
The weak bisimilarity has the property transitivity; that is, as a relation it is transitive. Then, having proved thatT
M
B
M
S
~
T
P
C
R
F, it has to be proved that T
B
M
S
C
~
T
M
B
M
S.
ByU
B
M
P a relation between the states of T
B
M
S
C, T
M
B
M
S, and T
P
C
R
F is denoted where U
B
M
P
=
{(MBMSIdle, IpCANIdle), (InitialWaiting, WaitForPCCRules), (DataTransfer, SessionActive)}.The following homomorphism based on functional mapping may be defined between transitions of T
B
M
S
C, T
M
B
M
S, and T
P
C
R
F:h
B
M
P
(sendBroadcastMessage)
=
h
B
M
P(sessionStart)
=
h
B
M
P
(sessionInfo);
h
B
M
P
(initialPeriod)
=
h
B
M
P
(pccRule)
=
h
B
M
P
(ipCanSessionModification);
h
B
M
P
(dataTransferStop)
=
h
B
M
P
(sessionStop)
=
h
B
M
P
(ipCanSessionTermination);
h
B
M
P
(cancel)
=
h
B
M
P
(sessionCancel)
=
h
B
M
P
(ipCanSessionCancel);
h
B
M
P
(resourcesFailed)
=
h
B
M
P(ipCanBearerFailed)
=
h
B
M
P
(provisionNonAck);
h
B
M
P
(resourcesLost)
=
h
B
M
P
(ipCanBearerLost)
=
h
B
M
P
(ipCanBearerRemoved).The functional mapping between the transitions in the MBMS session and IP-CAN state machines represented in Table 2 shows that U
B
M
P is a bisimilar relation.
From the homomorphismh
B
M
P and bisimilar property of U
B
M
P it follows that T
B
M
S
C
~
T
M
B
M
S.
From the bisimulation transitivity it follows thatT
B
M
S
C
~
T
M
B
M
S
~
T
P
C
R
F.
This means that MBMS session state machine, IP-CAN state machine, and the QoS resources state machine are weakly bisimilar.Table 2
Functional mapping between transitions ofT
B
M
S
C and T
M
B
M
S.
Transitions inT
B
M
S
C
Transitions inT
M
B
M
S
Event
MBMSIdlesendBroadcastMessage InitialWaiting
IPCANIdle sessionStartWaitForPCCRules
MBMS session initiation
InitialWaiting initialPeriodDataTransfer
WaitForPCCRulespccRules ResourceReservation, ResourceReservation ipCanBearerEstablishment SessionActive
IP-CAN session modification requestIP-CAN session modification authorization
DataTransferdataTransferStop MBMSIdle
SessionActive sessionStopResourceRelease,ResourceRelease ipCanBearerRelease WaitForTermAck,WaitForTermAck ipCanSessionTermAck IPCANIdle
MBMS session stop
InitialWaiting resourceFailedMBMSIdle
ResourceReservationipCanBearerFailedIPCANIdle
IP-CAN session modification authorization fails
DataTransfer resourceLostMBMSIdle
SessionActiveipCanBearerLost IPCANIdle
All bearers are lost during data transfer
InitialWaitingcancelBroadcastMessage MBMSIdle
WaitForPCCRules sessionCancel IPCANIdleResourceReservation sessionCancel IPCANIdle
The application cancels the MBMS user service during resource reservation
DataTransfercancelBroadcastMessage MBMSIdle
SessionActive sessionCancel ResourceRelease,ResourceRelease ipCanBearerRelease WaitForTermAck,WaitForTermAck ipCanSessionTermAck IPCANIdle
The application cancels the MBMS user service during resource authorization


## 6.2.3. Equivalence of Application and Network Models

The highest level of abstraction on message broadcast status is provided by 3rd-party application. Its view has to be synchronized also with the network resource state and charging session state.Proposition 5.
The labeled transition systemsT
A
p
p, T
B
M
S
C, T
M
B
M
S, T
P
C
R
F, and T
C
S are weakly bisimilar.Proof.
ByU
A
B
M
P
C a relation between the states of T
A
p
p, T
B
M
S
C, T
M
B
M
S, T
P
C
R
F, and T
C
S is denoted where U
A
B
M
P
C
=
{(Null, MBMSIdle, IpCANIdle, ResourceNull, ChargingIdle), (MessageWaiting, InitialWaiting, WaitForPCCRules, IpCanSession, Active
i
n
i
t
i
a
l), (Broadcasting, DataTransfer, SessionActive, ResourceAuthorized, Active
t
r
a
n
s
f
e
r)}.The following homomorphism based on functional mapping may be defined between transitions of T
A
p
p, T
B
M
S
C, T
M
B
M
S, T
P
C
R
F, and T
C
S:h
A
B
M
P
C
(sendMessage)
=
h
A
B
M
P
C
(sendBroadcastMessage)
=
h
A
B
M
P
C
(sessionStart)
=
h
A
B
M
P
C
(sessionInfo)
=
h
A
B
M
P
C
(sendBroadcastMessage)
=
h
A
B
M
P
C
(chargingDataStart
i
n
i
t);
h
A
B
M
P
C
(successfulDelivery)
=
h
A
B
M
P
C
C
(initialPeriod)
=
h
A
B
M
P
C
(pccRule)
=
h
A
B
M
P
C
(ipCanSessionModification)
=
h
A
B
M
P
C
C
(chargingDataStart
i
n
t
e
r
i
m
);
h
A
B
M
P
C
(successfulMessageCompletion)
=
h
A
B
M
P
C
(dataTransferStop)
=
h
A
B
M
P
C
(sessionStop)
=
h
A
B
M
P
C
(ipCanSessionTermination)
=
h
A
B
M
P
C
(chargingDataStop
n
o
r
m
a
l);
h
A
B
M
P
C
(cancelMessage)
=
h
A
B
M
P
C
(cancel)
=
h
A
B
M
P
C
(sessionCancel)
=
h
A
B
M
P
C
(ipCanSessionCancel)
=
h
A
B
M
P
C
(chargingDataStop
c
a
n
c
e
l
e
d);
h
A
B
M
P
C
(unsuccessfulDelivery)
=
h
A
B
M
P
C
(resourcesFailed)
=
h
A
B
M
P
C
(ipCanBearerFailed)
=
h
A
B
M
P
C
(provisionNonAck)
=
h
A
B
M
P
C
(chargingDataStop
f
a
i
l
e
d
).In order to define a weak bisimilar relation between the states of T
A
p
p, T
B
M
S
C, T
M
B
M
S, T
P
C
R
F, and T
C
S we establish the valid sequences of ordered transitions from - →
A
p
p, - →
B
M
S
C, - →
M
B
M
S, - →
P
C
R
F, and - →
C
S that correspond to U
A
B
M
P
C.
Letτ
i
A
p
p
⊂
→
A
p
p, where i
∈
{
1
,
…
,
6
}, be the following transition sequences:τ
1
A
p
p
=
(Null sendMessage MessageWaiting);
τ
2
A
p
p
=
(MessageWaiting getBroadcastStatus MessageWaiting, MessageWaiting successfulDelivery Broadcasting);
τ
3
A
p
p
=
(Broadcasting getBroadcastStatus Broadcasting, Broadcasting successfulMessageCompletion Broadcasted, Broadcasted getBroadcastStatus Broadcasted, Broadcasted notifyBroadcastDeliveryReceipt Broadcasted, Broadcasted stopAnnouncement Null);
τ
4
A
p
p
=
(MessageWaiting unableToDeliver BroadcastImpossible, BroadcastImpossible getBroadcastStatus BroadcastImpossible, BroadcastImpossible notifyBroadcastDeliveryReceipt BroadcastImpossible, BroadcastImpossible stopAnnouncement Null);
τ
5
A
p
p
=
(MessageWaiting cancelMessage Null);
τ
6
A
p
p
=
(Broadcasting cancelMessage Null).Let τ
i
B
M
S
C
⊂
→
B
M
S
C, where i
∈
{
1
,
…
,
6
}, be following transition sequences:τ
1
B
M
S
C
=
(MBMSIdle sendBroadcastMessage InitialWaiting);
τ
2
B
M
S
C
=
(InitialWaiting initialPeriod DataTransfer);
τ
3
B
M
S
C
=
(DataTransfer dataTransferStop MBMSIdle);
τ
4
B
M
S
C
=
(InitialWaiting resourceFailed MBMSIdle);
τ
5
B
M
S
C
=
(InitialWaiting cancelBroadcastMessage MBMSIdle);
τ
6
B
M
S
C
=
(DataTransfer resourceLost MBMSIdle).Let τ
i
M
B
M
S
⊂
→
M
B
M
S, where i
∈
{
1
,
…
,
6
}, be the following:τ
1
M
B
M
S
=
(IPCANIdle sessionStart WaitForPCCRules);
τ
2
M
B
M
S
=
(WaitForPCCRules pccRules ResourceReservation, ResourceReservation ipCanBearerEstablishment SessionActive);
τ
3
M
B
M
S
=
(SessionActive sessionStop ResourceRelease, ResourceRelease ipCanBearerRelease WaitForTermAck, WaitForTermAck ipCanSessionTermAck IPCANIdle);
τ
4
M
B
M
S
=
(ResourceReservation ipCanBearerFailed IPCANIdle);
τ
5
M
B
M
C
=
(WaitForPCCRules sessionCancel IPCANIdle, ResourceReservation sessionCancel IPCANIdle);
τ
6
M
B
M
S
=
(SessionActive ipCanBearerLost IPCANIdle).Let τ
i
P
C
R
F
⊂
→
P
C
R
F, where i
∈
{
1
,
…
,
6
}, be the following:τ
1
P
C
R
F
=
(ResourceNull sessionInfo IPCanSession);
τ
2
P
C
R
F
=
(IPCANSession ipCanSessionModification ResourceAuthorizing, ResourceAuthorizing provisionAck ResourceAuthorized);
τ
3
P
C
R
F
=
(ResourceAuthorized ipCanSessionTermination ResourceNull);
τ
4
P
C
R
F
=
(ResourceAuthorizing provisionNonAck ResourceNull);
τ
5
P
C
R
F
=
(IPCANSession ipCanSessionCancel ResourceNull, ResourceAuthorized ipCanSessionCancel ResourceNull);
τ
6
P
C
R
F
=
(ResourceAuthorized ipCanBearerRemoved ResourceNull).Let τ
i
C
S
⊂
→
C
S, where i
∈
{
1
,
…
,
6
}, be following transition sequences:τ
1
C
S
=
(ChargingIdle chargingDataStart
i
n
i
t Active
i
n
i
t
i
a
l);
τ
2
C
S
=
(Active
i
n
i
t
i
a
l chargingDataStart
i
n
t
e
r
i
m Active
t
r
a
n
s
f
e
r);
τ
3
C
S
=
(Active
t
r
a
n
s
f
e
r chargingDataStop
n
o
r
m
a
l ChargingIdle);
τ
4
C
S
=
(Active
i
n
i
t
i
a
l chargingDataStop
f
a
i
l
e
d ChargingIdle);
τ
5
C
S
=
(Active
i
n
i
t
i
a
l chargingDataStop
c
a
n
c
e
l
e
d ChargingIdle);
τ
6
C
S
=
(Active
t
r
a
n
s
f
e
r chargingDataStop
c
a
n
c
e
l
e
d ChargingIdle).Then, based on the defined homomorphism h
A
B
M
P
C between the actions of T
A
p
p, T
B
M
S
C, T
M
B
M
S, T
P
C
R
F, and T
C
S, it follows that for U
A
B
M
P
C the sequences (
τ
i
A
p
p
,
τ
i
B
M
S
C
,
τ
i
M
B
M
S
,
τ
i
P
C
R
F
,
τ
i
C
S
) for i
∈
{
1
,
…
,
6
} agree with Definition 2 for weak bisimilarity.
Hence, the state machines that represent the 3rd-party application view on message broadcast, MBMS session, IP-CAN session, QoS resources, and charging session are bisimilar; that is, these state machines expose equivalent behavior.


## 7. Conclusion

In EPS there are specific features, nodes, and interfaces defined to support broadcasting of content to multiple users simultaneously. Parlay X Message Broadcast WS allows third-party applications to send messages to all mobile terminals in a specific geographical area. The deployment of 3rd-party control on multimedia broadcasting implies more research on synergy between WS APIs and respective communication control protocols.The paper presents a study on modeling aspects of a network node that mediates between 3rd-party application servers and the evolved packet core of a mobile network. It explores the way the network agnostic WS interfaces collaborate with specific control functionality in order to provide value added multimedia broadcasting services.The results regard model aspects of the behavior of a Service Capability Server, namely, BMSC, which exposes Parlay X WS interfaces toward applications and “talks” network protocols toward the network. The focus is on collaboration of different functionalities, namely, service control, session management, QoS control, and charging control. In the context of message broadcast, we modeled the states of MBMS session, IP-CAN session, QoS resources, and charging session and showed that these models are synchronized with the 3rd-party application view on message broadcast. The proof is based on functional mapping between the transitions in state machines and the identification of a homomorphism between actions. The concept of weak bisimilarity is used to prove that the state machines expose equivalent behavior. Thus, the novelty of contribution might be summarized as model definitions and proof for bisimilarity.The utilization of standardized Message Broadcast APIs provides a unified approach for 3rd-party application management and provisioning. It allows development of converged multimedia broadcast applications in a way which is independent of the underlying access technologies.



---

*Source: 3154801-2016-03-02.xml*