EMI UCP Interface Specification v4.6

Short Message Service Centre 4.
6
EMI - UCP Interface
Specification
Document Version: 4.6

Document Status: APPROVED
Document Release Date: April 2003
Copyright © 2003 by CMG Wireless Data Solutions
All rights reserved. This document may not be copied in whole or in part without the prior written consent of CMG Wireless
Data Solutions (“LogicaCMG”).
The information in this document is provided on an “as is” basis and is subject to change without further notice and cannot be
construed as a commitment by LogicaCMG. Although every precaution has been taken in the preparation of this document
LogicaCMG assumes no responsibility or liability for any errors or omissions whatsoever, that may appear in this document.
Neither is any liability assumed for damages resulting from the use of the information contained herein.
The products mentioned in this document are identified by the names, trademarks, service marks and logos of their respective
companies or organisations and may not be used in any advertising or publicity or in any other way whatsoever without the
prior written consent of those companies or organisations.
Table of Contents
Preface .................................................................................................................... xiii
1 Introduction......................................................................................................... 1
1.1 Position of interface ............................................................................................................... 1
1.2 Interface history ..................................................................................................................... 3
2 Structure of EMI Operations .............................................................................. 5

2.1 Character sets........................................................................................................................ 5
2.2 Examples ............................................................................................................................... 6
3 EMI Operations ................................................................................................... 7

3.1 SMT initiated operations ........................................................................................................ 7
3.2 SMSC initiated operations ..................................................................................................... 7
3.3 Legacy SMT initiated operations ........................................................................................... 9
3.4 Legacy SMSC initiated operations......................................................................................... 9
3.5 Flow control.......................................................................................................................... 10
4 EMI Operations Syntax..................................................................................... 11

4.1 Address syntax .................................................................................................................... 11
5 50-Series of EMI Operations ............................................................................ 12

5.1 Abstract Data Types ............................................................................................................12
5.1.1 How an application should pass an alphanumeric OadC..................................... 17
5.1.2 Description Of XSer Extra Services ..................................................................... 18
5.2 Standard string..................................................................................................................... 26
5.3 Submit Short Message operation -51 .................................................................................. 27
5.3.1 Submit Short Message operation (positive result) ............................................... 29
5.3.2 Submit Short Message operation (negative result) .............................................. 30
5.4 Delivery Short Message operation -52 ................................................................................ 30
5.4.1 Delivery Short Message operation (positive result).............................................. 32
5.4.2 Delivery Short Message operation (negative result) ............................................ 32
5.5 Delivery notification operation -53 ....................................................................................... 32
5.5.1 Delivery Notification operation (positive result) .................................................... 34
5.5.2 Delivery Notification operation (negative result)................................................... 34
5.6 Modify Short Message operation - 54.................................................................................. 35
5.6.1 Modify Short Message operation (positive result) ................................................ 38
© 2003 CMG Wireless Data Solutions — Table of Contents iii

5.6.2 Modify Short Message operation (negative result)............................................... 39
5.7 Inquiry message operation -55 ............................................................................................ 39
5.7.1 Inquiry message operation (positive result).......................................................... 41
5.7.2 Inquiry message operation (negative result) ........................................................ 41
5.8 Response Inquiry message operation -57 ........................................................................... 42
5.8.1 Response inquiry message operation (positive result) ........................................ 43
5.8.2 Response inquiry message operation (negative result) ....................................... 43
5.9 Delete message operation -56............................................................................................. 44
5.9.1 Delete message operation (positive result) .......................................................... 45
5.9.2 Delete message operation (negative result)......................................................... 46
5.10 Response delete message operation -58 ............................................................................ 46
5.10.1 Response delete message operation (positive result) ......................................... 48
5.10.2 Response delete message operation (negative result)........................................ 48
6 60-Series of EMI Operations ............................................................................ 49

6.1 Abstract Data Types ............................................................................................................49
6.2 Standard string..................................................................................................................... 50
6.3 Session management operation -60.................................................................................... 50
6.3.1 Session management operation (positive result) ................................................. 52
6.3.2 Session management operation (negative result)................................................ 52
6.4 Provisioning actions operation -61....................................................................................... 52
6.4.1 Provisioning actions operation (positive result) .................................................... 53
6.4.2 Provisioning actions operation (negative result) .................................................. 54
7 SMT Alert Operation ......................................................................................... 56

7.1 SMT alert operation -31 ....................................................................................................... 56
7.1.1 SMT alert operation (positive result) .................................................................... 56
7.1.2 SMT alert operation (negative result) ................................................................... 57
8 Legacy Operations Syntax............................................................................... 58

8.1 Call input operation -01........................................................................................................ 58
8.1.1 Call input operation (positive result) ..................................................................... 59
8.1.2 Call input operation (negative result).................................................................... 59
8.2 Multiple address call input operation -02 ............................................................................. 60
8.2.1 Multiple address call input operation (positive result) .......................................... 61
8.2.2 Multiple address call input operation (negative result) ......................................... 62
8.3 Call input with supplementary services operation -03 ......................................................... 62
8.3.1 Call input with supplementary services operation (positive result........................ 64
8.3.2 Call input with supplementary services operation (negative result) ..................... 64
8.4 MS message transfer operation -30 .................................................................................... 65
8.4.1 MS message transfer operation (positive result).................................................. 67
8.4.2 MS message transfer operation (negative result) ................................................ 67
9 Error Codes Overview ...................................................................................... 69
iv EMI - UCP Interface Specification — © 2003 CMG Wireless Data Solutions

9.1 Error codes .......................................................................................................................... 69
10 Error Messages and Reason Codes in Notifications ..................................... 73
11 GSM 7-bit alphabet tables ................................................................................ 76
12 GSM 7-bit – Unicode mapping ......................................................................... 79
13 Protocol sequence example ............................................................................ 83
Appendix A. Changes with respect to previous versions.............................. 85
Abbreviations .......................................................................................................... 87
References............................................................................................................... 89
Index......................................................................................................................... 91
© 2003 CMG Wireless Data Solutions — Table of Contents v

List of Figures
Figure 1-1: EMI External View ................................................................................................................. 1
Figure 1-3: Protocol flow example ........................................................................................................... 3
© 2003 CMG Wireless Data Solutions — List of Figures vii

List of Tables
Table P-1: Typographic conventions .....................................................................................................xiv
Table 2-3: Fields Operation Header......................................................................................................... 5
Table 2-4: Character set examples.......................................................................................................... 6
Table 3-1: SMT Initiated Operations ........................................................................................................ 7
Table 3-2: SMSC Initiated Operations ..................................................................................................... 8
Table 3-3: Legacy SMT Initiated Operations ........................................................................................... 9
Table 3-4: Legacy SMSC Initiated Operations......................................................................................... 9
Table 5-1: 50-Series of Operations ........................................................................................................ 12
Table 5-2: Abstract Data Types 50-Series............................................................................................. 12
Table 5-3: Generic ADT for EMI Positive Response ............................................................................. 16
Table 5-4: Generic ADT for EMI Negative Response ............................................................................ 16
Table 5-5: Information Elements............................................................................................................ 20
Table 5-6: Message Type ...................................................................................................................... 20
Table 5-7: Message Reference.............................................................................................................. 21
Table 5-8: Privacy Indicator ................................................................................................................... 21
Table 5-9: Urgency Indicator.................................................................................................................. 22
Table 5-10: Acknowledgement Request ................................................................................................ 22
Table 5-11: Message Updating .............................................................................................................. 22
Table 5-12: Call Back Number ............................................................................................................... 23
Table 5-13: Call Back Number Nested Tag Codes................................................................................ 23
Table 5-14: Provision Bits ...................................................................................................................... 24
Table 5-15: Presentation Bits................................................................................................................. 24
Table 5-16: Response Code .................................................................................................................. 25
Table 5-17: Teleservice Identifier........................................................................................................... 25
Table 5-18: Single Shot Identifier........................................................................................................... 26
Table 5-19: Submit Short Message Operation....................................................................................... 27
Table 5-20: Parameter Positive Result Data Field Submit Short Message Operation .......................... 29
Table 5-21: Short Message Parameter Field Submit Short Message Operation .................................. 29
© 2003 CMG Wireless Data Solutions — List of Tables ix

Table 5-22: Parameter Negative Result Data Field Submit Short Message Operation ........................ 30
Table 5-23: Delivery Short Message Operation..................................................................................... 30
Table 5-24: Parameter Positive Result Data Field Delivery Short Message Operation ........................ 32
Table 5-25: Parameter Negative Result Data Field Delivery Short Message Operation....................... 32
Table 5-26: Delivery Notification Operation ........................................................................................... 33
Table 5-27: Parameter Positive Result Data Field Delivery Notification Operation............................... 34
Table 5-28: Parameter Negative Result Data Field Delivery Notification Operation ............................. 35
Table 5-29: Modify Short Message Operation ....................................................................................... 37
Table 5-30: Parameter Positive Result Data Field Modify Short Message Operation........................... 38
Table 5-31: Short Message Parameter Field Modify Short Message Operation ................................... 39
Table 5-32: Parameter Negative Result Data Field Modify Short Message Operation ......................... 39
Table 5-33: Inquiry Message Operation................................................................................................. 39
Table 5-34: Parameter Positive Result Data Field Inquiry Message Operation .................................... 41
Table 5-35: Parameter Negative Result Data Field Inquiry Message Operation................................... 41
Table 5-36: Response Inquiry Message Operation ............................................................................... 42
Table 5-37: Parameter Positive Result Data Field Response Inquiry Message Operation ................... 43
Table 5-38: Parameter Negative Result Data Field Response Inquiry Operation ................................. 44
Table 5-39: Delete Message Operation ................................................................................................. 44
Table 5-40: Parameter Positive Result Data Field Delete Message Operation..................................... 45
Table 5-41: Parameter Negative Result Data Field Delete Message Operation ................................... 46
Table 5-45: Response Delete Message Operation................................................................................ 46
Table 5-46: Parameter Positive Result Data Field Response Delete Message Operation ................... 48
Table 5-47: Parameter Negative Result Data Field Response Inquiry Operation ................................. 48
Table 6-1: 60-Series of EMI Messages.................................................................................................. 49
Table 6-2: Abstract Data Types 60-Series............................................................................................. 49
Table 6-3: Generic ADT for EMI Positive Response ............................................................................. 50
Table 6-4: Generic ADT for EMI Negative Response ............................................................................ 50
Table 6-5: Session Management Operation .......................................................................................... 50
Table 6-6: Parameter Positive Result Data Field Session Management Operation.............................. 52
Table 6-7: Parameter Negative Result Data Field Session Management Operation ............................ 52
Table 6-8: Provisioning Actions Operation............................................................................................. 52
Table 6-9: Parameter Positive Result Data Field Provisioning Actions Operation ................................ 53
Table 6-10: Parameter Negative Result Data Field Provisioning Actions Operation............................. 54
x EMI - UCP Interface Specification — © 2003 CMG Wireless Data Solutions

Table 7-1: Parameter Operation Data Field SMT Alert Operation......................................................... 56
Table 7-2: Parameter Positive Result Data Field SMT Alert Operation................................................. 56
Table 7-3: Parameter Negative Result Data Field SMT Alert Operation ............................................... 57
Table 8-1: Parameters Operation Data Field Call Input Operation........................................................ 58
Table 8-2: Parameter Positive Result Data Field Call Input Operation ................................................. 59
Table 8-3: Short Message Parameter Field Call Input Operation.......................................................... 59
Table 8-4: Parameter Negative Result Data Field Call Input Operation ................................................ 59
Table 8-5: Parameters Operation Data Field Multiple Address Call Input Operation ............................ 60
Table 8-6: Parameter Positive Result Data Field Multiple Address Call Input Operation...................... 61
Table 8-7: Short Message Parameter Field Multiple Address Call Input Operation .............................. 61
Table 8-8: Parameter Negative Result Data Field Multiple Address Call Input Operation .................... 62
Table 8-9: Parameter Operation Data Field Call Input with Services Operation ................................... 62
Table 8-10: Parameter Positive Result Data Field Call Input with Services Operation ......................... 64
Table 8-11: Short Message Parameter Field Call Input with Services Operation ................................. 64
Table 8-12: Parameter Negative Result Data Field Call Input with Services Operation ....................... 64
Table 8-13: Parameter Operation Data Field MS Message Transfer Operation ................................... 65
Table 8-14: Parameter Positive Result Data Field MS Message Transfer Operation ........................... 67
Table 8-15: Short Message Parameter Field MS Message Transfer .................................................... 67
Table 8-16: Parameter Negative Result Data Field MS Message Transfer Operation.......................... 67
Table 9-1: Error Codes........................................................................................................................... 69
Table 9-2: Special Occurrences of Error Codes .................................................................................... 70
Table B-1: Error Messages and Reason Codes in Notifications............................................................ 73
Table 11-1: 7-bit Default Alphabet Table ............................................................................................... 76
Table 11-2: 7-bit Default Alphabet Extension Table .............................................................................. 77
Table 12-1: Error Codes GSM 7-bit – Unicode mapping ....................................................................... 79
Table 13-1: Protocol sequence example ............................................................................................... 83
© 2003 CMG Wireless Data Solutions — List of Tables xi

Preface
Purpose
This manual specifies the interface used between the SMSC System and other computer
systems and applications. The interface is based on the ERMES UCP (Universal Computer
Protocol) with SMSC-specific extensions.
Throughout this document the interface is called 'EMI': External Machine Interface.
The interface that is described in this document has been implemented in an SMSC API
built by CMG. Hereby, application programmers are able to build applications for
communication with a Short Message Service Centre (SMSC) of CMG in order to send and
receive short messages to/from mobile stations.
Audience
All persons involved in the design and implementation of applications on external computer
systems that have to interact with the SMSC.
Organisation
This document is structured as follows:
• Chapter 1 contains the introduction to the EMI. It describes the position of the EMI
between the SMSC components and the external machines.
• Chapter 2 shows the structure of EMI messages and provides examples of valid
exchanges of operations between the SMSC and the applications.
• Chapter 3 defines the EMI operations, and describes briefly the actions that are expected
from the SMSC and the Application upon reception of the operations
• Chapter 4 shows the syntax of EMI operations.
• Chapter 5 shows the syntax of the 50-series of EMI operations.
• Chapter 6 shows the syntax of the 60-series of EMI operations.
• Chapter 7 shows the syntax of legacy EMI operations.
• Chapter 8 summarises the error codes for the EMI operations.
• Chapter 9 lists the error messages and reason codes for Notifications
• Chapter 10 lists the 2 GSM 7-bit alphabet tables
• Chapter 11 lists the GSM 7-bit alphabet and Unicode character mappings
• Chapter 12 provides a typical protocol sequence example
The External Machine Interface specification specifies the features that can be used in the
EMI operations. However, many features are subject to provisioning by the SMSC operator,
i.e. did the operator grant you the rights to use these features in the EMI operations.
© 2003 CMG Wireless Data Solutions — Preface xiii

Typographic conventions
In this document, the typographic conventions listed in
Table P-1 are used.
Table P-1: Typographic conventions
Typeface or Symbol Meaning/Used for Example
Courier Refers to a keyboard key, system The directory data contains…

command, label, button, filename,
window, or other computer component Click the Close button to…
or output.
<courier> Serves as a placeholder for variable Use the file name <entity>.cfg for...
text that the user will replace as
appropriate to its context.
[] Refers the user to external [3GPP 23.040]

documentation listed in the References
section.
italic Emphasises a new word or term of apply a style to the...

significance.
- Bridges two keystrokes that should be If Ctrl-C does not work, use Ctrl-
pressed simultaneously. Alt-Del.
Denotes a “note”, a piece of text Note that the system is usually...

alongside the normal text requiring
extra attention.
This document contains the general specification of the external machine interface of CMG's
SMSC. Since the available functions depend on the specific SMSC implementation of the
Mobile Telecommunication Operator, please contact your local operator for the available
implemented SMSC functions and features.
xiv EMI - UCP Interface Specification — © 2003 CMG Wireless Data Solutions
1 Introduction
For submission and reception of Short Messages the Short Message Service Centre can
interface with (among others):
• GSM/GPRS/UMTS/TDMA/CDMA Mobile Telephones (PLMN),
• Value Added Services applications,
• Voice Messaging systems,
• Unified Communications systems.
Throughout this document the External Machine will be referred to as 'SMT'. This can of
course be any application system.
In order to allow any service provider to develop dedicated applications an interface was
developed to access SMSC functions. This manual specifies that interface.
1.1 Position of interface

Figure 1-1: EMI External View
When viewed from the SMT side, the EMI provides access to the SMSC functions:
• Submission of Short Messages
• Reception of Short Messages
• Reception of Notifications related to submitted Short Messages
• Operate on submitted Short Messages: query, delete and modify.
The SMSC can be viewed as a black box: Short Messages are directed to the GSM mobile
telephone of the recipient. The SMSC and the PLMN only function as relay mechanisms for
those Messages. The only visible action of the SMSC apart from this is the provision of
Notifications: upon request the SMSC will notify the originator of the SM regarding the status
of the SM.
© 2003 CMG Wireless Data Solutions — Introduction 1

The protocol operations are 7-bit text based, in human readable format. EMI can use the
following lower level reliable and unreliable protocols as a carrier:
• TCP/IP v4
• X.25 (X.121 numbering plan)
• X.29 (X.121 numbering plan)
• ISDN (E.164 numbering plan)
• PSTN (E.164 numbering plan)
The set-up of the connection between the SMSC platform and the SMT depends on the
carrier used. Once the connection is established, the EMI operations can be used. An SMT
may establish multiple connections for failover purposes or increased throughput. The
SMSC operator may apply restrictions to the number of connections. The SMSC operator
may require the SMT to authorize itself by starting with a session management operation
with identification and password. An SMT may submit multiple messages without waiting for
response on each message (windowing). The SMSC operator applies restrictions to the
allowed window size.
Each side can send operations asynchronous, e.g. independent of each other. For example,
the SMSC can deliver a mobile originated message between receiving an operation from the
SMT and sending the result operation to that response.
An SMSC operator may apply an inactivity timeout on the message transfer. The SMSC
releases the connection after the timeout.
2 EMI - UCP Interface Specification — © 2003 CMG Wireless Data Solutions

Figure 1-3: Protocol flow example
SMT SMSC
Network Connection
OT_60_open_session
OT_60_result
OT_51_submit_short_message
OT_51_submit_short_message_result
OT51_submit_short_message
OT_51_sumbit_short_message_result
OT_56_delete_message
OT_56_delete_message_result
OT_58_delete_message_response
OT_58_delete_message_response_result
OT_53_notification
OT_53_notification_result
Network Connection Closed
The SMT can be authenticated by the SMSC in the following ways:
• Based on the network provided address (Calling Line Identification)
• Based on SMT provided address and password registered on the SMSC
In the example, the SMT logs into the SMSC using the operation type 60, subtype Open
Session for authentication.
1.2 Interface history

The SMSC External Machine Interface (EMI) is based on an extended subset of the UCP
protocol defined for the ERMES paging system in ETS 300 133-3. When referring to 'UCP'
in the context of the SMSC, almost always the EMI, the extended subset of the ERMES
UCP, is meant.
In the SMSC the UCP protocol was chosen as the basis for the EMI because:
1. The first operators that used the SMSC required using the UCP protocol to interact with
external machines.
2. It allows service providers to use a single mechanism to interface to both ERMES based
paging systems and the SMSC.
3. No re-invention of 'yet another' protocol had to take place.
© 2003 CMG Wireless Data Solutions — Introduction 3

In order to provide access to the more extensive set of SMS operations, it was necessary to
extend the UCP definition with some additional, SMSC specific operations, such as 'SMS
message transfer operation' and 'SMT alert operation'.
All new applications should only use the SMT alert operation, UCP5x and UCP6x
operations. All other UCP operations are only referenced for existing applications and
compatibility with previous SMSC releases.

2 Structure of EMI Operations
In the ERMES/UCP-based EMI protocol, the operation structure is as follows:

stx <header> / <data> / <checksum> etx
o stx = 02(hex)
o etx = 03(hex)
Note that in the examples “stx”, “etx” and “/” each represent only one character.
As separator between header and data, between data and checksum, as well as between
parameters, a “/” (2F(hex)) is used.
In parameters that contain a list, the items are separated by a “,” (2C(hex)). Numeric
characters (0..F) are encoded as in IRA. Alphanumeric characters are encoded as two
numeric IRA characters, the higher 3 bits (0..7) first, the lower 4 bits (0..F) thereafter.
The <header> consists of the following 4 mandatory fields:
Table 2-3: Fields Operation Header
Parameter Type Description
TRN 2 num. char. Transaction reference number, right justified with

leading zero.
Values 00-99
LEN 5 num. char. Total number of IRA characters contained

between stx and etx, right justified with leading
zeros.
O/R Char “O” or “R” “O” indicates operation, “R” indicates result
OT 2 num. char. Operation Type (see list in Chapter 3).
Errors in the operation <header> are not recognised by the SMSC.
The <data> fields depend on the Operation Type. For each Operation Type they are listed
in the next chapters.
The <checksum> is derived by the addition of all bytes of the header, data field separators
and data fields (i.e. all characters after the stx-character, up to and including the last “/”
before the checksum field). The 8 Least Significant Bits (LSB) of the result is then
represented as two printable characters. The character containing 4 Most Significant Bits
(MSB) (of those 8 LSB) shall be transmitted first. For example, if the checksum is 3A(hex)
the representation shall be the characters “3” (33(hex)) and “A” (41(hex)).
2.1 Character sets

EMI provides text support via 2 character sets: GSM 7-bit alphabet [3GPP 23.038] and
Unicode (16-bit UCS2) [UCS2]. GSM 7-bit alphabet is specific for GSM mobile stations and
© 2003 CMG Wireless Data Solutions — Structure of EMI Operations 5

can be used for western-European languages. The GSM 7-bit alphabet largely overlaps with
US-ASCII [ASCII]. One important difference, although there are more, is the value of the at-
sign @. In US-ASCII, the character value is 40(hex); in GSM 7-bit alphabet it is 00(hex). An
SMSC operator might decide to provide an alternative character set for a specific language.
The Unicode character set allows for text in languages like Chinese, Thai and Hebrew, but
occupies 2 bytes 16-bits) per character.
The GSM 7-bit alphabet tables are listed in 11 GSM 7-bit alphabet tables.
A character mapping of GSM 7-bit and Unicode 16-bit is listed in 12 GSM 7-bit – Unicode
mapping.
Besides text character sets, EMI support the transfer of 8-bit binary data.
2.2 Examples
Below you will find examples of the operations and responses.
Table 2-4: Character set examples
Description UCP string
The SMT sends message to the stx49/00078/O/51/0031612345678/55555//////////////

SMSC with text "hello" in the GSM 7- ///3//68656C6C6F/////////////0Detx
bit alphabet. Note that “hello” in ASCII
has the same encoding.
The SMSC sends a positive stx49/00046/R/51/A//0031612345678:2811020850

acknowledgement to indicate the 30/DFetx
message has been accepted (and
stored). In the acknowledgement, the
'system message' parameter is used
to indicate the recipient address
0031612345678 and timestamp
281102085030.
The next example is the “hello” text in stx99/00098/O/51/0031612345678/55555//1//7//////

Unicode UCS2 together with a ///////4/80/00680065006C006C006F//////////020108//
notification request. /F0etx
Again, the SMSC sends a positive stx99/00046/R/51/A//0031612345678:2811020844

acknowledgement. 20/E6etx
The first delivery attempt is stx00/00095/O/53/55555/0612345678/////////////281

unsuccessful, message is buffered 102084420/1/107/281102084421/3//20/////////////12e
and the SMSC sends a buffered tx
notification to the SMT.
The SMT sends a positive stx00/00038/R/53/A//55555:281102084442/46etx

acknowledgement back.
Other examples are given in the description of the specific EMI operations. Note that the stx
and etx in these examples are skipped.

3 EMI Operations
EMI operations can be initiated either from the SMT, or from the SMSC. Each command will
lead to an action on the other side. The other side will respond with a positive or negative
acknowledgement with the same TRN value. Each side maintains its own TRN values.
3.1 SMT initiated operations

The following SMT initiated operations are available:
Table 3-1: SMT Initiated Operations
Command ID Command Name Purpose
31 SMT alert operation Alert the SMSC to start delivering buffered messages
immediately. This allows you to retrieve messages submitted
to you without waiting for the scheduled next delivery
attempt.
32 (reserved)
33 (reserved)
38 (reserved)
40 (reserved)
41 (reserved)
51 Submit_short_message Submit a new message to someone.
54 Modify_message Modify the message parameters of a buffered message.
55 Inquiry_message Verify if a message is still in the SMSC.
56 Delete_message Delete a buffered message if it is still in the SMSC.
60 Session management Authenticate yourself after making the connection to the

SMSC.
61 List management Manage your own mobile originated and mobile terminated
blacklists or whitelists.
The 'SMT alert operation' can be used by the application to alert the SMSC to send
messages and notifications to the application. It can only be used when the application uses
a connection that supports Calling Line Identification, such as X.25.
3.2 SMSC initiated operations

SMSC initiated operations (used to deliver Notifications or Mobile Originated Short
Messages) are:
© 2003 CMG Wireless Data Solutions — EMI Operations 7

Table 3-2: SMSC Initiated Operations
Command ID Command Name Purpose
34 (reserved)
36 (reserved)
42 (reserved)
43 (reserved)
52 Deliver_short_message The SMSC delivers a message that someone has sent

to you.
53 Deliver_notification Informs you of the delivery status of a message
• Buffered: first delivery attempt failed, message

scheduled for further attempts.
• Delivered: the recipient has received the

message.
• Not delivered: message could not be delivered;

No more attempts are being made.
57 Response_inquiry_message Informs you of the outcome of the inquiry to a buffered

message
58 Response_delete_message Informs you of the outcome of the delete request for a

buffered message

3.3 Legacy SMT initiated operations
All new applications should only use the SMT alert operation, UCP5x and UCP6x
operations. All other UCP operations are only referenced for existing applications and
compatibility with previous SMSC releases.
The following SMT initiated operations are available:
Table 3-3: Legacy SMT Initiated Operations
Command ID Command Name
01 Call input operation
02 Multiple address call input operation
03 Call input with supplementary services operation
30 SMS message transfer operation
The definitions of operations '01', '02' and '03' are identical to the corresponding operations
defined in [ETSI 03.00]
The 'Call input operation' is the normal means of submitting a Short Message. The SMSC
must, when it receives this command, send the message to the recipient address that is
specified in the command.
The 'Multiple address call input operation' is used to address a number of recipients in one
operation. The command contains a list of recipient addresses. The SMSC will send the
same message to all addresses in this list.
The 'Call input with supplementary services operation' is used when a message is to be
scheduled for deferred delivery.
The 'SMS message transfer operation' is used to submit a message when SMSC specific
services are required, such as notification request, deferred delivery, or validity period.
3.4 Legacy SMSC initiated operations

SMSC initiated operations (used to deliver Notifications or Mobile Originated Short
Messages) are:
Table 3-4: Legacy SMSC Initiated Operations
Command ID Command Name
01 Call input operation
The SMSC uses the 'Call input operation' to transfer Notifications and Mobile Originated
Short Messages to the Short Message Terminal (SMT). The initiative to do so lies either with
the SMSC (Notifications on messages submitted in the current session) or with the SMT (the
SMT has to issue an SMT alert command).
© 2003 CMG Wireless Data Solutions — EMI Operations 9

3.5 Flow control
The SMSC can support two types of flow control. The first type of flow control is a ‘stop-and-
wait’ protocol, i.e. during the handling of operations, no other operations shall be sent before
the response is received. A command that is sent before the reception of the response will
be discarded.
The second type of flow control that can be supported by the SMSC is ‘windowing’ for
increased thoughput. In this case a maximum of n operations can be sent before a response
is received. The transaction number of the command (field TRN) will be used to determine if
a command is in the current ‘window’.
The SMSC will discard a command if its transaction number is outside the current window
(message n+1 in a window of n).The SMSC will give transaction numbers to the operations
it sends as much as possible in a cyclic manner.
If the SMSC receives an invalid response on a command, then the transaction number of
that command can only be used again after the delivery operation has been cancelled due
to a delivery time-out.
Windowing is only supported in combination with UCP5x series operations and the
windowing functionality has to be provisioned by the SMSC operator.

4 EMI Operations Syntax
This chapter shows the syntax of the data fields of the EMI operations. For the syntax of the
complete messages, please refer to Chapter 2, Structure of EMI messages. For each
command also the format of the positive and negative responses is given, including the
possible error codes. For convenience, all error codes are summarised in Chapter 9, 9.1,
Error Codes Overview. The order in which the operations are listed is:
1. General operations, used for normal SM transfer.
2. SMSC specific extensions, used to address SMS functions not foreseen in the UCP
definition.
In the column marked 'Presence', “M” indicates that the field is Mandatory, “O” indicates that
it is Optional, “C” indicates Conditional and “-” indicates Not Applicable.
4.1 Address syntax

Most addresses used in the EMI-messages are formatted according to E.164 numbering
plan. The following syntax rules are valid:
• In the case the national prefix is used in the network the following syntax is seen as valid
addresses:
<trunk-prefix><trunk-code><telephone-nr>
<international-prefix><country-code><trunk-code><telephone-nr>
• In case the national prefix is not used in the network, the following syntax is seen as valid
addresses (in these situations, a valid telephone number will be recognised by its
length):
<international-prefix><country-code><telephone-nr>
<telephone-nr>
For TCP/IP addresses every byte expressed in decimal form should be left zero padded so
that they all have a length of 3 characters. The TCP/IP port number shall be concatenated to
the IP address. All dots (“.”) in the address shall be omitted.
Example:
IP address 192.87.25.9 with port number 5000 shall be filled in as 1920870250095000.
© 2003 CMG Wireless Data Solutions — EMI Operations Syntax 11

5 50-Series of EMI Operations
This chapter introduces the 50-series of operations. The following table defines these
operations:
Table 5-1: 50-Series of Operations
EMI Operation Name Initiated by
51 Submit_short_message SMT
52 Deliver_short_message SMSC
53 Deliver_notification SMSC
54 Modify_message SMT
55 Inquiry_message SMT
56 Delete_message SMT
57 Response_inquiry_message SMSC
58 Response_delete_message SMSC
These messages have been introduced in order to provide more facilities to the SMSC
users. If a user has used one of these operations during a session, it is assumed that the
other (output) operations are supported as well. The SMSC initiated operations will always
be those of the 50-series. Only in the cases that are mentioned in section 4.2, the SMSC will
use the UCP01 operation.
5.1 Abstract Data Types

For a higher maintainability a generic Abstract Data Type (ADT) is introduced for all
operations described in this chapter. This means that all 50-series of EMI strings, including
responses, shall contain all fields listed. In exception to this, depending on the value of 'MT',
only one of the fields NMsg, AMsg or NB + TMsg shall be included. Fields not appropriate
shall be left empty.
The following is a description of this generic ADT (where 'Num. string' indicates 'string of
numeric char.'):
Table 5-2: Abstract Data Types 50-Series
Member Length Type Meaning
AdC 16 Num. String Address code recipient for the SM OadC 16 Num.
String Address code originator
22 Char string If the OTOA field indicates alphanumeric OAdC. A 22-

character string corresponds with a max. 11 character
alphanumeric string.

AC 16 Num. string Authentication code originator (min 4 char., max 16

char)
NRq 1 Num. char. Notification Request
0 = NAdC not used
1 = NAdC used
NAdC 16 Num. string Notification Address
NT 1 Num. char. Notification Type1:
Buffered message notification (BN),
Delivery Notification (DN),
Non-delivery notification (ND),
0 default value, 1 = DN, 2 = ND, 3 = DN+ND, 4 = BN,

5 = BN+DN, 6 = BN+ND, 7 = all.
NPID 4 4 num. char. Notification PID value:
0100 Mobile Station
0122 Fax Group 3
0131 X.400
0138 Menu over PSTN
0139 PC appl. over PSTN (E.164)
0339 PC appl. over X.25 (X.121)
0439 PC appl. over ISDN (E.164)
0539 PC appl. over TCP/IP
LRq 1 1 num. char. Last Resort Address request:
0 = LRAd not used
1 = LRAd used
LRAd 16 Num. string Last Resort Address
1
) Compared to the GSM 03.39 specification the following differences can be noted:
EMI implementation : As mentioned above;
GSM Specification: 1=BN, 2=DN, 3=ND, 4=BN+DN, 5=BN+DN, 6=DN+ND, 7=all.
© 2003 CMG Wireless Data Solutions — 50-Series of EMI Operations 13

LPID 4 4 num. char. LRAd PID value:
0100 Mobile Station
0122 Fax Group 3
0131 X.400
0138 Menu over PSTN
0139 PC appl. over PSTN
0339 PC appl. over X.25 (X121)
0439 PC appl. over ISDN (E.164)
DD 1 1 num. char Deferred Delivery requested:
0 = DDT not used
1 = DDT used
DDT 10 10 num. char. Deferred delivery time in DDMMYYHHmm
VP 10 10 num. char. Validity period in DDMMYYHHmm
RPID 4 Num. string Replace PID. Values according to TP-PID of [3GPP

23.040]2: 0000-0255. Special values:
0064 (Type 0, user not alerted)
0065 … 0071 (Replace Type 1-7)
0095 (Return Call Message)
0125 (ME Data download)
0126 (ME De-personalization)
0127 (SIM Data Download)
SCTS 12 Num. string Service Centre Time Stamp in DDMMYYHHmmss.
For a Short Message this is the time stamp of the

Short Message itself. For a Notification this is the time
stamp of the corresponding Short Message.
Dst 1 1 num. char. Delivery status:
0 = delivered
1 = buffered (see Rsn)
2 = not delivered (see Rsn)
Rsn 3 3 num. char. Reason code, value '000'...'255'. Code can be found in
an SMSC configuration file witch can be changed by
the operator. (See appendix A)
DSCTS 12 Num. string Delivery time stamp in DDMMYYHHmmss. Indicates

the actual time of delivery of the Short Message.
2
The SMSC operator may apply limitations.

MT 1 1 num. char. Message Type. Associated parameters depend on the

value of MT.
MT=2: Numeric message.
NMsg 640 Num. string
MT=3:
AMsg 640 Char. string Alphanumeric message encoded into IRA characters.
MT=4:
NB 4 Num. char. No. of bits in Transparent Data (TD) message.
TMsg 1404 Char. string TD message encoded into IRA characters.
MMS 1 1 num. char. More Messages to Send (to the same SME)
PR 1 1 char. Priority Requested
DCs 1 1 num. char. Deprecated. Data Coding scheme:
0 = default alphabet
1 = user defined data ('8 bit')
MCLs 1 1 num. char. Message Class:
0 = message class 0
1 = message class 1
2 = message class 2
3 = message class 3
RPI 1 1 num. char. Reply Path:
1 = request
2 = response
CPg 1 Num. string (reserved for Code Page)
RPLy 1 1 num. char. (reserved for Reply type)
OTOA 4 4 num. char. Originator Type Of Address:
1139 The OadC is set to NPI telephone and TON

international.
5039 The OAdC contains an alphanumeric address

(see OAdC and below).
Leave OTOA empty for a numeric address in the

OAdC.
HPLMN 16 Num. string Home PLMN Address. E.164 number of the

originating MSC.
4
The length is 140 octets when the SMSC is used in a GSM environment and 160 octets when used in a TDMA/CDMA
environment.

XSer 400 Num. string Extra Services
With the XSer field one or more additional services

can be specified. These services consist of IRA
encoded data constructed in the following common
format: TTLLDD…
TT: represents two HEX characters defining the type

of service. For a description of available services
refer to section “Description Of XSer Extra
Services”
LL: represents two HEX characters defining the

number of octets present in the data field DD.
(Note that the number of HEX characters in the
data DD is twice the number of octets)
DD…: represents a stream of HEX characters defining

the service specific data itself.
If more than one additional service is to be specified in

one message, this service information is concatenated
without any separators, i.e.
TT1LL1DD1…DD1TT2LL2DD2..DD2
The above construction is designed such that in the

future additional service types can be added to the
XSer field.
RES4 x Num. string (reserved for future use)
RES5 x Num. string (reserved for future use)
x = not specified yet
A generic ADT for the EMI response is defined as follows:
For a positive response:
Table 5-3: Generic ADT for EMI Positive Response
Member Type
ACK Positive acknowledgement
MVP Modified Validity Period
SM System Message
For a negative response:
Table 5-4: Generic ADT for EMI Negative Response
Member Type
NAcK Negative acknowledgement
EC Error code
SM System Message

5.1.1 How an application should pass an alphanumeric OadC
5.1.1.1 How to encode the alphanumeric OAdC

This paragraph describes how an alphanumeric OAdC should be sent; this will be done
using an example.
Suppose that the alphanumeric address is: ALPHA@NUM
In [3GPP 23.038] chapter “Default alphabet” the 7-bit codes can be derived from the table.
These codes are:

A = 100 0001
L = 100 1100
P = 101 0000
H = 100 1000
A = 100 0001
@ = 000 0000
N = 100 1110
U = 101 0101
M = 100 1101
The application packs the 7-bit characters in octets as defined in [3GPP 23.038] chapter
”SMS Point-to-Point Packing”. The result is:
b7 B6 b5 b4 b3 b2 b1 b0 Result
0 1 0 0 0 0 0 1 41
0 0 1 0 0 1 1 0 26
0 0 0 1 0 1 0 0 14
0 0 0 1 1 0 0 1 19
0 0 0 0 0 1 0 0 04
0 0 1 1 1 0 0 0 38
1 0 1 0 1 0 1 1 AB
0 1 0 0 1 1 0 1 4D
This results in the following hexadecimal values:
0x41 0x26 0x14 0x19 0x04 0x38 0xAB 0x4D
The application should add the number of useful semi-octets within the alphanumeric
address in front of these values, according to [3GPP 23.040]. The length should be added in
a byte (octet). In case of ALPHA@NUM, the number of useful semi-octets in the 7 bit
encoded representation is 16 decimal (0x10 hexadecimal). This results in the following
hexadecimal values:

0x10 0x41 0x26 0x14 0x19 0x04 0x38 0xAB 0x4D
Finally this string should be converted to an ASCII string that can be used in the UCP
message. Each nibble (4 bits) should be stored as ASCII character. The resulting ASCII
string is:
10412614190438AB4D
This is the OAdC as it should be stored in a UCP message. The OTOA should be set to
'5039' in the UCP message
Restrictions of the used IRA characters in an alphanumeric OAdC
There are no restrictions. All characters from the IRA alphabet can be used.
5.1.2 Description Of XSer Extra Services
The XSer field allows the specification of one or more additional services, all in the format
TTLLDD…DD, where TT field specifies the type of service, LL indicates the length of data
and DD indicates zero or more data elements. The following subsections specify the
supported service types.
It is possible to combine various Services in the XSer field. The order of the various
Services in the XSer field is not important. However, each Type of Service should not occur
more than once since each repeated occurrence would overwrite the previously set values.
5.1.2.1 XSer Type of service 00, Not Used

This service type is reserved and should not be used.
5.1.2.2 XSer Type of service 01, GSM UDH information

With this service type GSM User Data Header information can be specified. The data field
DD of this service type contains the octets of the GSM User Data Header as specified in
[3GPP 23.040]. (UDHL, IEIa, IEIDLa, IEDa, IEIb, …, IEIn, IEDLn, IEDn). Every UDH octet is
encoded in two IRA hex characters, as usual in UCP. An example is given below.
The length of the GSM UDH information, related to the length of the Msg field content, is
restricted to the maximum length of the GSM TP-UD field: 140 octets c.q. 160 septets.
Depending on the MT field this is checked as follows:
• If MT = 2 or 3 then: The length of the UDH field (in octets), multiplied by 8/7, rounded up
to the nearest integer value, plus the length of the NMsg/AMsg field (in octets) must not
exceed 160 (septets).
• If MT = 4 then: The length of the UDH field (in octets) plus the length of the TMsg field (in
octets) must not exceed 140 (octets).
There must be only one occurrence of Type of service 01, GSM UDH information in XSer.
Example encoding of XSer Type of service 01, GSM UDH information:
The GSM UDH information field consisting of the following two UDH information elements is
to be encoded:
1. Concatenated short messages, Concatenated short message reference number = 64,
Maximum number of short messages in the concatenated short message = 4, Sequence
number of the current short message = 2
2. Application Port Addressing 8 bit address, destination port = 240, originator port = 250
TTLLDD.. encoding in IRA characters: 010A0900034004020402F0FA

This same TTLLDD... encoding annotated:
01 = TT, specifies XSer Type of service 01, GSM UDH information
0A = LL, specifies that DD part contains 10 octets
09 = DD, UDHL, Length of user data header = 9 octets
00 = DD, IEIa, Information-Element-Identifier a, Concatenated short
messages
03 = DD, IEIDLa, Length of information element a = 3 octets
40 = DD, IEDa, Concatenated short message reference number = 64
04 = DD, IEDa, Max number of short messages in the concatenated
message = 4
02 = DD, IEDa, Sequence number of the current short message = 2
04 = DD, IEIb, Information-Element-Identifier b, Application Port
Addressing 8 bit
02 = DD, IEIDLb, Length of information element b = 2 octets
F0 = DD, IEDb, destination port = 240
FA = DD, IEDb, originator port = 250
5.1.2.3 XSer Type of service 02, GSM DCS information

The type of service always has a total length of 6 numeric characters. So the sequence
TTLLDD is set to:
TT = 02
LL=01
DD=00..FF.
The meaning of the DCS values is explained in [3GPP 23.038].
Use the GSM DCS information field value 08 to send text in the Unicode character set
[UCS2]. The MT field must be set to the value 4.
Use the GSM DCS information field to send 8-bit data coded short messages. The MT field
must be set to the value 4. If the GSM DCS information field is not specified, MT=4 indicates
an 8-bit coded short message and the MCLs (Message Class) must be specified.
Use the GSM DCS information field to send “Message Waiting Indication” updates to the
mobile station.
Use the GSM DCS information field to send “Message Class Meaning”. If the MCLs field is
specified too, the GSM DCS information field overrules the MCLs field.
The use of the GSM DCS information field in the XSER field is limited to the UCP51,
UCP52, UCP53 and UCP54 messages.
Example encoding of XSer Type of service 02, GSM DCS information:
020108, meaning that the DCS value 08 (0000 1000 binary) is used.
According to the [3GPP 23.038] specification, this means Unicode (UCS2).

5.1.2.4 XSer Types of Service 03-0B, CDMA/TDMA information exchange
This section introduces 9 Types of Service that can be defined in the XSer (Extra Services)
field. These services offer support for the information exchange to TDMA and CDMA mobile
stations.
The XSER Types of Services are only applicable for UCP51 and UCP52 operations. Other
operations do not support this extension.
The next table shows which information elements can be accessed or retrieved using the
UCP protocol operations. The first column is the Type of Service in the TTLLDD sequence
(some examples will follow). The second column describes the information element.
Table 5-5: Information Elements
Type of Service (hex) Information Element Mobile Network Technology
03 Message Type CDMA, TDMA
04 Message Reference CDMA, TDMA
05 Privacy Indicator CDMA, TDMA
06 Urgency Indicator CDMA, TDMA
07 Acknowledgement Request CDMA, TDMA
08 Message Updating TDMA
09 Call Back Number CDMA, TDMA
0A Response Code CDMA, TDMA
0B Teleservice ID CDMA, TDMA
This section continues with a detailed description of these Types of Services. This section
ends with an example showing the XSer field when some services are used simultaneously.
Type of Service 03: Message Type
This Service indicates the type of a message. It is only present in a delivery when the
message involves an acknowledgement. It has exactly one data element (octet), which can
have the following values:
Table 5-6: Message Type
Value (hex) Meaning
00 Short Message (Default)
01 Delivery Acknowledgement message type (read

receipt)
02 Manual Acknowledgement message type
03-FF Reserved, do not use

The default value 00 may only be present for messages submitted via UCP. It shall not be
set when delivering a message. If this Type of Service is absent from the XSer field, the
default value indicating a normal short message, is assumed.
An example of the Service 03 in the XSer field is the sequence 030102 (TTLLDD), which
means a Manual Acknowledgement message type.
Type of Service 04: Message Reference
The Message Reference is an identifier for a Short Message. The end user can use it as a
handle to refer to an earlier submitted message. The data element is two octets long and
represents a 16-bit integer number (for TDMA only the lower 13 bits may be used). The first
data element in the sequence contains the most significant bits. If this Service is absent, the
default value 0 is assumed.
Table 5-7: Message Reference
Value (hex) Meaning
0000 - 1FFF Message Reference
2000 - FFFF Reserved, do not use
For example, the sequence 0402020A (TTLLDD) contains 522 as a Short Message
identifier.
Type of Service 05: Privacy indicator
This Type of Service indicates the privacy level of the Short Message. The size of the data
element is one octet, which can have the following values:
Table 5-8: Privacy Indicator
Value (hex) Meaning
00 Not Restricted (Default)
01 Restricted
02 Confidential
03 Secret
If the Privacy Indicator is not specified in the submitted message, the default value Not
Restricted is assumed. The next example shows the XSer sequence (TTLLDD) indicating a
Privacy Level of Secret: 050103.
Type of Service 06: Urgency Indicator
This Type of Service indicates the priority of the Short Message to the end user. The size of
this data element is one octet, which can have the following values:

Table 5-9: Urgency Indicator
Value (hex) Meaning
00 Bulk
01 Normal (Default)
02 Urgent
03 Very Urgent
When the Urgency Indicator has a value of 02 or 03, the SMSC shall attempt to deliver the
message with priority. This can also be realized by setting the UCP field Priority Requested.
However, both ways are independent and do not affect each other.
An example of the Service 06 is the sequence 060102 (TTLLDD), which means: Urgency
Indicator set to Urgent.
Type of Service 07: Acknowledgement Request
This service indicates whether or not the sender of the Short Message requests an
Acknowledgement. This Type of Service is absent in a delivery when no acknowledgement
is requested. The size of the data element is one octet, which can have the following values:
Table 5-10: Acknowledgement Request
Value (hex) Meaning
00 No Acknowledgement requested (Default)
01 Delivery Acknowledgement requested (read receipt)
02 Manual Acknowledgement requested
03 Both delivery and Manual Acknowledgement

requested
An example of a valid XSer entry is 070101 (TTLLDD), which means that the field
Acknowledgement Request is set to request a Delivery Acknowledgement.
Type of Service 08: Message Updating
This Type of Service requests to replace a previously submitted message. It is only present
when an update is requested. By default a message is assumed to be a new message. The
size of the data element is one octet, which can have the following values:
Table 5-11: Message Updating
Value (hex) Meaning
00 New (Default)

01 Replace in SMSC and SME
For example, 080101 (TTLLDD) is a valid XSer entry with the meaning: Message Updating
set, replace the corresponding message in both the SMSC and the SME, if applicable.
Type of Service 09: Call Back Number
This Service associates a Call Back Number information element with the Short Message. A
Call Back Number information element consist of the call back number itself, Type of
Number, Numbering Plan Identification, Presentation Indicator and Alpha Tag. See next
table.
Table 5-12: Call Back Number
Description Abbreviation Mandatory (M) or Comment

Optional (O)
Call Back Number CBN M
Call Back Type Of Number CBN_TON O If not defined, TON is set

to ‘Unknown’ as default.
Call Back Numbering Plan CBN_NPI O If not defined, NPI is set to

Identification ‘ISDN/Telephony
Numbering Plan’ as
default.
Call Back Number CBNPI O If not defined zero is taken

Presentation Indicator as default.
Call Back Number Alpha CBNAT O For future use.

Tag
The Call Back Number Type of Service data part, contains a (TTLLDD..DD) on itself (the
TTLLD’s are nested). The next table presents the nested tag codes, which should be used
within the Call Back Number Type of Service.
Table 5-13: Call Back Number Nested Tag Codes
Abbreviation Nested Tag Code Length
CBN 01 1 to 16 octets.
CBN_TON 02 Optional, when defined always one octet

of length.
CBN_NPI 03 Optional, when defined always one octet

of length.
CBNPI 04 Optional, when defined always one octet

of length.
CBNAT 05 Optional, length between 0 and 64

characters, IRA encoded.

For each of the optional parameters the default is taken when not defined. The Call Back
5
Number Type of Service can be used to associate multiple Call Back Numbers information
elements with the Short Message. To do this, define multiple 09 tags in the XSER field: for
each Call Back Number information element, one tag. See the examples at the end of this
section.
Each of the elements CBN, CBN_TON, CBN_NPI, CBNPI and CBNAT will now be
described in more detail. The CBN consist of 1 to 16 digits IRA encoded. The CBN_TON
and CBN_NPI elements are according the TDMA specifications TIA/EIA-136-123-A.
The Call Back Number Presentation Indicator (CBNPI) controls the presentation and
screening of the Call Back Number at the mobile station. The CBNPI is a bit field with the
size of one octet. The bit field is arranged b7..b0, where b7 means most significant bit. Bits
b7..b4 are reserved and should always be set to zero. Bit 3 and 2 are the Provision bits. Bit
1 and 0 are the Presentation bits. The next tables show the different settings for the
Provision and Presentation bits.
Table 5-14: Provision Bits
Provision bits (b3..b2) Meaning
00 User provided, not screened
01 User provided, verified and passed
10 User provided, verified and failed
11 Network provided
Table 5-15: Presentation Bits
Presentation bits (b1..b0) Meaning
00 Presentation Allowed
01 Presentation Restricted
10 Number not available
11 Reserved, do not use.
When submitting a Short Message, the value of the screening part should be set to 00 in
order to prevent rejection of the message. The default value for the Presentation Indicator is
00, i.e., the presentation is set to Presentation Allowed and the screening is set to User
provided, not screened.
6
The CBNAT is a string with a maximum length of 64 characters.
5
At this moment the SMSC accepts multiple definitions of Call Back Number information elements. However, only the
first definition is really processed, others are ignored.
6
At this moment the CBNAT string is accepted by the SMSC but not associated with the message. Instead an empty string
is associated.

Examples of the use of Type of Service 09 Call Back Number. First example defines call
back number 3456, default CBN_TON and CBN_NPI, CBNPI set to zero and CBNAT set to
“Hello”
0910010433343536040100050B48656C6C6F
Example of multiple Call Back Number definitions. Two definitions are made, first call back
number 3456, default CBN_TON and CBN_NPI, CBNPI set to zero and CBNAT set to “Hello
World”. Second call back number 7777, default CBN_TON and CBN_NPI, CBNPI set to 01
and CBNAT not defined.
0910010433343536040100050B48656C6C6F0909010437373737040101
Type of Service 0A: Response Code
The user may optionally set the Response Code in the Manual Acknowledgement Message.
The meaning of the Response Code is specific for the Message Center. The length of the
data element is one octet.
Table 5-16: Response Code
Value (hex) Description
00 – 0F Response Code
10 – FF Reserved, do not use
An example of a valid XSer entry is 0A010F (TTLLDD), which means: Response Code,
code set to 0F (hex).
Type of Service 0B: Teleservice Identifier
This Type of Service enables the user to select a specific teleservice for the message. The
size of the Teleservice Identifier field is one octet and the value of this field should be
according to the table below:
Table 5-17: Teleservice Identifier
00 Cellular Messaging Teleservice (Default)
01 - FF Reserved, do not use
At present the only valid occurrence of the Teleservice Identifier is the sequence 0B0100.
Example: using multiple Types of Service together in XSer
An example of combining various Services in the XSer field is the following sequence:
0301020601020402020A. This sequence can be decomposed in three parts, namely
030102, 060102 and 0402020A. These three parts are the individual examples shown
before for the Services Message Type (03), Urgency Indicator (06) and Message Reference
(04). The explanations of the three parts can be found in the descriptions of the
corresponding services.

5.1.2.5 XSer Type of service 0C: Billing Identifier
This type of service enables the SMT to send additional billing information to the SMSC. The
Billing Identifier is only allowed in UCP51 and UCP54 messages sent by registered large
accounts. All other UCP messages containing the Billing Identifier will be rejected.
The Billing Identifier data element is an alphanumeric field with a variable length of at least 0
and at most 20 characters. These characters need to be part of the Visible String character
set as defined in ITU-T. Each character takes two hexadecimal positions.
5.1.2.6 XSer Type of service 0D: Single Shot indicator

This type of service indicates wether a short message is treated as Single Shot or not. Only
Single Shot indications in UCP51 and UCP52 messages will be supported. The size of the
data element is one octet, which can have the following values:
Table 5-18: Single Shot Identifier
00 non-Single Shot short message (Default)
01 Single Shot short message
5.1.2.7 XSer Types of service 0E – FF, Reserved

These types are reserved for future use and should not be used.
5.2 Standard string

The advantage of using the generic ADT for all new EMI operations is, that one standard
string can be used for all operations. The string is build according to the specifications in
[ETSI 03.00] as follows:
o stx = 02(hex)
o etx = 03(hex)
The string header is build up in the same way as is done in UCP.
The data field shall always contain ALL fields listed in the 5x series generic ADT. These
fields are separated by “/”. If a member of the ADT is not used in a specific message type,
its place in the data string is empty, but the field separators will be present (“//”).
For example the data block for INQM (OAdC and AdC fields only) will look like:
../55/O/012345/0324///////////......
This format provides a high degree of flexibility as well as upwards compatibility to future
EMI specifications.
This does also apply for the responses. For example, the positive response message
contains the MVP field. This field is only used for the SUBS message positive response; in
all other cases this field is left empty.

In the columns marked 'Presence' of the sections to follow, “M” indicates that the field is
Mandatory, “O” indicates that the parameter is Optional and “-” indicates that the parameter
shall be empty.
5.3 Submit Short Message operation -51

This operation is used to submit a Short Message to the SMSC. The operation can be used
for Short Messages with an alphanumeric or a binary message text field. In the latter case
the MT parameter shall be set to “4”.
Table 5-19: Submit Short Message Operation
Member Presence Meaning
AdC M Address code recipient for the SM
OAdC M Address code originator
AC O Authentication code originator
NRq O Notification Request
NAdC O Notification Address
NT O Notification Type
NPID O Notification PID value
LRq O Last Resort Address request
LRAd M Last Resort Address
LPID M LRAD PID value
DD O Deferred Delivery requested
DDT O Deferred delivery time in DDMMYYHHmm
VP O Validity period in DDMMYYHHmm
RPID O Replace PID value
SCTS - Service Centre Time Stamp in DDMMYYHHmmss.
Dst - Delivery status
Rsn - Reason code
DSCTS - Delivery time stamp in DDMMYYHHmmss.
MT M Message Type.
MT=2:
NB - No. of bits in Transparent Data (TD) message.
NMsg O Numeric message.
MT=3:
AMsg O Alphanumeric message encoded into IRA characters.
MT=4:
NB C No. of bits in Transparent Data (TD) message. This field is M

(Mandatory) if the TMsg field is used.

TMsg O TD message encoded into IRA characters.
MMS O More Messages to Send (to the same SME)
PR O Priority Requested
DCs - Deprecated
MCLs O Message Class. Shall be supplied when MT=4 and Xser

“GSM DCS information” is not supplied.
RPI O Reply Path
CPg - (reserved for Code Page)
RPLy - (reserved for Reply type)
OTOA O Originator Type Of Address
HPLMN - Home PLMN Address. E.164 number of the originating MSC.
XSer O Extra Services
RES4 -
RES5 -
• If the AC field is used, it should contain at least 4 numeric characters in every message,
which are not all equal to zero, otherwise it shall be rejected.
• If the option ‘Long Message’ is not supported on the SMSC, the maximum length of
AMsg represents 160 characters and NMsg is 160 digits.
• If NRq is used, and NAdC and NPID are both used, then this address will be used as
notification address.
• If NRq is used, and NAdC or NPID or both are left empty, then the notification is sent to
the originator in the current session. If in this case :
⋅ the session is ended,
⋅ the originator is not known to the SMSC to have more than one address,
⋅ the originator is not a mobile user submitting messages via a UCP application (option
‘Mobile Subscriber Access via Fixed Network’)
⋅ and the notification has not yet been delivered,
then the notification is deleted by the SMSC.

• If LRq is used, and LRAd and LPID are both used, then this address (user supplied) will
be used as Last Resort address.
• If LRq is used, and LRAd or LPID or both are left empty, then the Last Resort address is
the current session. If in this case:
⋅ and the short message has not yet been delivered,
then the short message is deleted by the SMSC.

• If LRq is empty, the contents of LRAd and LPID are ignored.

• If DD is used, then DDT is mandatory.
• The priority message field PR can only be used if the originator is subscribed to this
service.
• If RPID value 0127 (SIM Data Download) is used, MT must be 4 and either MCLs must
be 2 or Xser “GSM DCS information” must be 0xF6 otherwise the message is rejected.
RPID value 0127 (SIM Data Download) is only supported for registered large accounts.
Last resort addressing and Reply path functionality is not applicable to this type of
message. The contents of LRq and RPl is ignored.
• If the MCLs field is also specified, the GSM DCS information field in the XSER field
overrules the MCLs field.
• If the originator of the UCP51 message is not registered in the SMSC as being a large
account and the Billing Identifier in the XSER field is used, then the UCP51 operation will
be rejected with error code 04 "Operation not allowed".
Examples:
• Alphanumeric message ‘Message 51' with validity period set and with notification request
to a PC application over TCP/IP.
18/00113/O/51/012345/09876//1/1920870340125000/4/0539//////3012961212//////3//4D6573
73616765203531/////////////CD
• TD message with deferred delivery set and notification request within the session for all
types of notification
39/00099/O/51/0657467/078769//1//7//1/0545765/0122/1/0808971800///////4/32/F5AA34DE//
//1/////////65
5.3.1 Submit Short Message operation (positive result)
The following table shows the parameters in the positive result data field:
Table 5-20: Parameter Positive Result Data Field Submit Short Message Operation
Parameter Type Presence Description
ACK Char "A" M Positive acknowledgement
MVP String of char O Modified validity period
SM String of char. O System message
The SM parameter contains the following three fields:
Table 5-21: Short Message Parameter Field Submit Short Message Operation
SM Parameter Type Description
AdC String of num. char. Address code recipient, maximum length is

16 digits.
SEP char “:” Separator
SCTS String of 12 num. char. Service Centre time-stamp

DDMMYYhhmmss

Example:
• 00/00039/R/51/A//012234:090996101010/68
5.3.2 Submit Short Message operation (negative result)
The following table shows the parameters in the negative result data field:
Table 5-22: Parameter Negative Result Data Field Submit Short Message Operation
NACK Char "N" M Negative acknowledgement
EC 2 num. char. M Error code
Example:
• 00/00022/R/51/N/31//07
5.4 Delivery Short Message operation -52

This operation (DELS) is used to deliver a Short Message. The operation is initiated by the
SMSC and answered by the SMT.
Table 5-23: Delivery Short Message Operation
AC - Authentication code originator
NRq - Notification Request
NAdC - Notification Address
NT - Notification Type
NPID - Notification PID value
LRq - Last Resort Address request
LRAd - Last Resort Address
LPID - LRAD PID value
DD - Deferred Delivery requested
DDT - Deferred delivery time in DDMMYYHHmm
VP - Validity period in DDMMYYHHmm
SCTS M Service Centre Time Stamp in DDMMYYHHmmss.

Rsn - Reason code
MT M Message Type.
MT=2:
MT=3:
MT=4:
NB C No. of bits in Transparent Data (TD) message. This field is M

PR - (reserved for Priority Requested)
DCs O Deprecated. Applications must ignore this field and retrieve

message coding information from Xser “GSM DCS
information”.
MCLs O Message Class
RPI O Reply Path
OTOA - Originator Type Of Address
HPLMN O Home PLMN Address. E.164 number of the originating MSC.
XSer O Extra Services.
RES4 -
RES5 -
• If the recipient of the UCP52 operation is registered in the SMSC as being a large
account, the MSC ISDN address of the mobile originator is stored in the HPLMN field
when the option HOMEPLMN_IN_UCP52 is active.
account and the originator of the Short Message has anonymised the message (Hide
CLI), then the OAdC field contains the used SMSC address.
• Recipients of UCP52 operations with a UDH specified in the XSer field must be
registered in the SMSC as large accounts.

• If the MCLs field is also specified, the GSM DCS information field in the XSER overrules
the MCLs field.
• If the Billing Identifier in the XSER field is used in a UCP52 operation, the short message
will be rejected with error code 02 "Syntax error".
Example:
• Alphanumeric message ‘Call you back later.’ received from originator 07686745
00/00120/O/52/076523578/07686745/////////////120396111055////3//43616C6C20796F752062
61636B206C617465722E///0//////////A3
5.4.1 Delivery Short Message operation (positive result)
Table 5-24: Parameter Positive Result Data Field Delivery Short Message Operation
MVP String of char - Modified validity period
Example:
• 00/00039/R/52/A//076567:010196010101/6C
5.4.2 Delivery Short Message operation (negative result)
Table 5-25: Parameter Negative Result Data Field Delivery Short Message Operation
Example:
• 00/00022/R/52/N/01//05
5.5 Delivery notification operation -53

This operation (DELN) is used to indicate the (changed) status of a previously submitted
Short Message to the SMSC. The operation is initiated by the SMSC.

Table 5-26: Delivery Notification Operation
RPID O Replace PID value. Present when the original SM’s delivery
acknowledgement contains a PID value.
SCTS M Service Centre Time Stamp in DDMMYYHHmmss. This is the

time stamp of the corresponding Short Message.
Dst M Delivery status
Rsn M Reason code
DSCTS M Delivery time stamp in DDMMYYHHmmss. Indicates the time

of (non-) delivery of the corresponding Short Message, or the
time of creation of this notification.
MT M Message Type.
MT=2:
NMsg - Numeric message.
MT=3:
NB - No. of bits in Transparent Data (TD) message
MT=4:
NB C No. of bits in Transparent Data (TD) message This field is M

DCs - Deprecated

MCLs - Message Class
RPI - Reply Path
OTOA - Originator Type of Address
RES4 -
RES5 -
account and the originator of the Short Message has anonymised the message (Hide
CLI), then the OAdC field contains the used SMSC address.
Example:
• Notification ‘Message for 3155555, with identification 960109161057 has been buffered’
received
00/00234/O/53/1299998/3155555/////////////090196161057/1/108/090196161105/3//4D65737
361676520666F7220333135353535352C2077697468206964656E74696669636174696F6
E2039363031303931363130353720686173206265656E206275666665726564/////////////1F
5.5.1 Delivery Notification operation (positive result)
Table 5-27: Parameter Positive Result Data Field Delivery Notification Operation
Example:
• 00/00032/R/53/A//020296020202/F2
5.5.2 Delivery Notification operation (negative result)

Table 5-28: Parameter Negative Result Data Field Delivery Notification Operation
Example:
• 00/00022/R/53/N/02//07
5.6 Modify Short Message operation - 54

The operation requires option 014 on the SMSC.
This operation is used to modify a previously submitted Short Message which is still buffered
in the SMSC. The originally submitted has to be a UCP51 operation. The AdC field in
combination with the SCTS field identifies the message to be modified. Extra security is
provided by an optional check on the OAdC and the AC field.
The message that is buffered in the SMSC will be identified by the modify operation as the
message to be modified, in the following cases.
1. Calling Line Identification (CLI) available: AdC, OAdC and SCTS should all match. If the
AC field was used in the original submitted message, this must match as well. If the CLI
address differs from the OAdC field, then the CLI address must match as well.
2. No Calling Line Identification available: AdC, OAdC, AC and SCTS of the original
message and the modify operation should all match and all be filled in.
Furthermore, if the original message was submitted via a port on the SMSC that is
associated with a Virtual SMSC (VSMSC), then the modify operation has to be sent via the
same VSMSC. If the message is not found in the SMSC, a negative acknowledge is
returned.
The above implies that the recipient address, originator address, authentication code and
timestamp of a previously submitted message cannot be changed.
All other fields can be changed. If a field is left empty in the modify operation, it will leave the
related field in the original submitted short message unchanged. Below the effect is
described in more detail.
1. Notifications.
⋅ If Nrq is empty, no changes are made. The contents of NAdC, NPID and NT are
ignored.
⋅ If Nrq is “0”, the notification request is cancelled. The contents of NAdC, NPID and NT
are ignored.
⋅ If Nrq is “1”, then NAdC and NPID must be both left empty or both used, otherwise a
negative acknowledge is returned.
⋅ If Nrq is “1” and NAdC and NPID are left empty, then the notification is sent to the
originator in the current session, if in this case:

⋅ the originator is not a mobile user submitting messages via a UCP application
(option ‘Mobile Subscriber Access via Fixed Network’)
⋅ and the notification has not been delivered
then the notification is deleted by the SMSC.
⋅ NT can only be used if NRq is set to “1”, otherwise the contents of this field is ignored.
2. Last resort
⋅ If LRq is “1”, then a Last Resort Address is requested. LRAd and LPID are mandatory,
otherwise a negative acknowledge is returned.
⋅ If LRq is empty, no changes are made. LRAd and LPID must be empty otherwise a
⋅ If LRq is “0”, the Last Resort Address request is cancelled. The contents of LRAd and
LPID are ignored.
3. Deferred delivery time
⋅ DDT can only be set if the original message to be modified is already scheduled for
deferred delivery, otherwise the contents of this field is ignored.
4. Validity period
⋅ VP should be larger than the current time (time when the UCP54 is received by the
SMSC) and smaller than the maximum validity period of the SMSC, otherwise a
⋅ VP should be larger than the deferred delivery time (if used), otherwise a negative
acknowledge is returned.
5. Replace PID
⋅ If a RPID value (other than 0127 (SIM Data Download)) is used that is already in use
by a buffered message for the same recipient, a negative acknowledge is returned.
⋅ If RPID contains an invalid value, then a negative acknowledge is returned.
⋅ If RPID value 0127 (SIM Data Download) is used : see section ”Submit Short
Message operation -51”.
6. Message type
⋅ If MT is set to “4” (binary message), then the fields NB and TMsg should be filled in.
Either the field MCLs should be supplied or the Xser “GSM DCS information” should
be supplied. Otherwise a negative acknowledge is returned.
7. Reply path
⋅ The field RPl can only be set to “1” (reply path request) or left empty, otherwise a
negative acknowledge is returned. Note that a reply request can not be cancelled.
8. Billing Identifier
⋅ If the Billing Identifier tag is not present in the Xser field, no changes are made to the
Billing Identifier.
⋅ If the Billing Identifier tag is present, but the length of the data part is zero, then the
Billing Identifier is cleared (all bytes put to zero).
⋅ If the Billing Identifier tag is present and the length of the data part is not zero then the
value of the Billing Identifier is changed.

Table 5-29: Modify Short Message Operation
AdC M Address code recipient for the SM to be modified
OadC M Address code originator of the SM to be modified
AC O Authentication code originator of the SM to be modified
NRq O Notification Request
NadC O Notification Address Code
NT O Notification Type
NPID O Notification PID value
LRq O Last Resort request
LRAd O Last Resort Address
LPID O LRAD PID value
DDT O Deferred delivery time in DDMMYYHHmm
VP O validity period in DDMMYYHHmm
SCTS M Service Centre Time Stamp that identifies the message in the
SMSC that is to be modified, in DDMMYYHHmmss.
Rsn - Reason code
MT O Message Type.
MT=2:
MT=3:
MT=4:
NB M No. of bits in Transparent Data (TD) message.
MMS - More Messages to Send (to the same SME)
DCs - Deprecated
MCLs O Message Class. See section “Submit Short Message

operation -51”.
RPI O reply Path

RES4 -
RES5 -
• When the AC field is used, it should contain at least 4 numeric characters in every
message, which are not all equal to zero, otherwise it shall be rejected.
• If a message is to be modified that was conditionally or unconditionally forwarded, a
• A UCP 54 operation that requires modification of the message contents of a buffered
message that contains a UDH is rejected by the SMSC.
• UCS2 as well as GSM Message Waiting Indications can be supplied in the GSM DCS
information field in the UCP XSer field. Hereby, UCS2 messages can also be modified.
• If the GSM DCS information field is specified in the UCP XSer field, the UCP MCls field
is over-ruled and does not have to be supplied.
• If the stored message contains a message content, the UCP54 message must have the
same alphabet and compression or a new message content must be supplied else the
operation is rejected.
• GSM Message Waiting Indications can be modified only if no MT and NMsg, Amsg or
TMsg is supplied and the alphabet and compression is the same as of the stored
message.
• If the originator of the UCP51 message is not registered in the SMSC as being a large
account and the Billing Identifier in the XSER field is used, then the UCP54 operation will
be rejected with error code 04 "Operation not allowed".
Examples:
• Previously submitted message to recipient 012345 with timestamp 010197120501 is
modified with a new (mobile) last resort address 0654321.
00/00087/O/54/012345/0111111//////1/0654321/0100/////010197120501////3///////////////4C
5.6.1 Modify Short Message operation (positive result)
Table 5-30: Parameter Positive Result Data Field Modify Short Message Operation

MVP String of char O Modified validity period
Table 5-31: Short Message Parameter Field Modify Short Message Operation

16 digits.

DDMMYYhhmmss
Example:
• 00/00039/R/54/A//012345:020197120005/65
5.6.2 Modify Short Message operation (negative result)
Table 5-32: Parameter Negative Result Data Field Modify Short Message Operation
Example:
• 00/00022/R/54/N/04//0A
5.7 Inquiry message operation -55

This operation is initiated by the SMT towards the SMSC to inquire about the status of a
buffered message. As a result the SMSC can initiate a Response Inquiry message
operation.
Table 5-33: Inquiry Message Operation

RPID - Replace PID value
Rsn - Reason code
MT - Message Type.
MT=2:
MT=3:
AMsg - Alphanumeric message encoded into IRA characters.
MT=4:
TMsg - TD message encoded into IRA characters.
DCs - Deprecated
RPI - Reply Path

XSer -
RES4 -
RES5 -
message which are not all equal to zero, otherwise it shall be rejected.
Example:
• Inquiry message on recipient 0786483 from originator 0786875676
65/00066/O/55/0786483/0786875676////////////////////////////////7B
5.7.1 Inquiry message operation (positive result)
Table 5-34: Parameter Positive Result Data Field Inquiry Message Operation
Example:
• 00/00032/R/55/A//030395030303/F8
5.7.2 Inquiry message operation (negative result)
Table 5-35: Parameter Negative Result Data Field Inquiry Message Operation
Example:
• 09/00022/R/55/N/02//12

5.8 Response Inquiry message operation -57
This operation is initiated by the SMSC in response to an Inquiry message operation. If
necessary, the SMSC will start a dial-back session.
Table 5-36: Response Inquiry Message Operation
AdC M Address code recipient for this operation
OAdC - Address code originator
Rsn - Reason code
MT M Message Type.
MT=2:
MT=3:

Contains the recipient address and the time stamps (format
YYMMDDhhmmss) of the buffered Short Message(s),
separated by spaces. Format: [TEXT1] <AdC> [TEXT2]
{TIMESTAMP}
MT=4:

DCs - Deprecated
RPI - Reply Path
XSer -
RES4 -
RES5 -
Example:
• There are no messages for 0666666 waiting to be send
17/00098/O/57/55555//////////////////3//44657374696E6174696F6E3A203036363636363620/1/
///////////37
5.8.1 Response inquiry message operation (positive result)
Table 5-37: Parameter Positive Result Data Field Response Inquiry Message
Operation
Example:
• 00/00020/R/57/A///9A
5.8.2 Response inquiry message operation (negative result)

Table 5-38: Parameter Negative Result Data Field Response Inquiry Operation
Example:
• 47/00022/R/57/N/02//16
5.9 Delete message operation -56

This operation is initiated by the SMT to delete one or more buffered Short Messages.
Table 5-39: Delete Message Operation
Rsn - Reason code
MT M Message Type.
MT=2:

MT=3:

Contains the time stamps (format YYMMDDhhmmss) of the
buffered Short Message(s), separated by spaces. Format:
TIMESTAMP {TIMESTAMP}
MT=4:
DCs - Deprecated
RPI - Reply Path
XSer -
RES4 -
RES5 -
message which are not all equal to zero, otherwise it shall be rejected.
Example:
• Delete messages with timestamps ‘960901113944 960808122222' for recipient 0546546
from originator 08456556
12/00115/O/56/0546546/08456556/////////////////3//39363039303131313339343420393630383
038313232323232/////////////2A
5.9.1 Delete message operation (positive result)
Table 5-40: Parameter Positive Result Data Field Delete Message Operation

Example:
• 10/00032/R/56/A//040497161604/07
5.9.2 Delete message operation (negative result)
Table 5-41: Parameter Negative Result Data Field Delete Message Operation
Example:
• 00/00022/R/56/N/01//09
5.10 Response delete message operation -58

This operation is initiated by the SMSC to indicate which Short Messages have been
deleted successfully.
Table 5-45: Response Delete Message Operation
AdC M Address code recipient for this operation
OAdC - Address code originator

Rsn - Reason code
MT M Message Type.
MT=2:
MT=3:

Contains the recipient address and the time stamps (format
YYMMDDhhmmss) of the deleted Short Message(s),
separated by spaces. Format: [TEXT3] <AdC> [TEXT4]
{TIMESTAMP} [TEXT5]
MT=4:
DCs - Deprecated
RPI - Reply Path
XSer -
RES4 -
RES5 -
Example:

• Message for 0666666 with timestamp 960110091043 has been deleted
22/00188/O/58/55555//////////////////3//44657374696E6174696F6E2030363636363636206964
656E74696669636174696F6E3A2039363031313030393130343320686173206265656E20
64656C657465642E/1////////////FF
5.10.1 Response delete message operation (positive result)
Table 5-46: Parameter Positive Result Data Field Response Delete Message Operation
Example:
• 00/00029/R/58/A//064564565/7D
5.10.2 Response delete message operation (negative result)
Table 5-47: Parameter Negative Result Data Field Response Inquiry Operation
Example:
• 00/00027/R/58/N/02/07567/1A

6 60-Series of EMI Operations
This chapter introduces the 60-series of operations. The 60-series are used in combination
with registered SMTs. The following table defines these operations:
Table 6-1: 60-Series of EMI Messages
EMI Operation Name Initiated by
60 Session Management SMT
61 List Management SMT
6.1 Abstract Data Types

For a higher maintainability a generic Abstract Data Type (ADT) is introduced for all
operations described in this chapter. This means that all 60-series of EMI strings, including
responses, shall contain all fields listed, fields not appropriate shall be left empty.
The following table is a description of this generic ADT (where 'Num. string' indicates 'string
of numeric char.'):
Table 6-2: Abstract Data Types 60-Series
OAdC 16 Num. String Address code originator
OTON 1 Num. Char. Originator Type of Number
ONPI 1 Num. Char. Originator Numbering Plan Id
STYP 1 Num. Char. Subtype of operation
PWD 16 Char. String Current password encoded into IRA characters
NPWD 16 Char. String New password encoded into IRA characters
VERS 4 Num. String Version number
LAdC 16 Num. String Address for VSMSC list operation
LTON 1 Char. String Type of Number list address
LNPI 1 Char. String Numbering Plan Id list address
OPID 2 Num. String Originator Protocol Identifier
RES1 x Num. String (reserved for future use)
A generic ADT for the EMI response is defined as follows:
For a positive response:

Table 6-3: Generic ADT for EMI Positive Response
Member Type
ACK Positive acknowledgement
SM System Message
For a negative response:
Table 6-4: Generic ADT for EMI Negative Response
Member Type
NAcK Negative acknowledgement
EC Error code
SM System Message
6.2 Standard string

The advantage of using the generic ADT for all new EMI operations is, that one standard
string can be used for all operations. The string is build according to the specifications in
[ETSI 03.00] as follows:
o stx = 02(hex)
o etx = 03(hex)
The string header is build up in the same way as is done in UCP.
The data field shall always contain ALL fields listed in the 6x series generic ADT. These
fields are separated by “/”. If a member of the ADT is not used in a specific message type,
its place in the data string is empty, but the field separators will be present (“//”).
This format provides a high degree of flexibility as well as upwards compatibility to future
EMI specifications.
In the columns marked 'Presence' of the sections to follow, “M” indicates that the field is
Mandatory, “O” indicates that the parameter is Optional and “-” indicates that the parameter
shall be empty.
6.3 Session management operation -60

This operation provides the facility to open a session and to modify the submit and
provisioning passwords.
Table 6-5: Session Management Operation
OAdC M Any valid X.121, E.164, TCP/IP or abbreviated address, excluding prefixes

OTON O Originator Type of Number:
1 = International number (starts with the country code)
2 = National number (default value if omitted)
6 = Abbreviated number (registered large account identification)
ONPI O Originator Numbering Plan Id:
1 = E.164 address (default value if omitted)
3 = X121 address
5 = SMSC specific: Private (TCP/IP address/abbreviated number)
STYP M Subtype of operation:
1 = open session
2 = reserved
3 = change password
4 = open provisioning session
5 = reserved
6 = change provisioning password
PWD M Current password encoded into IRA characters
NPWD O New password encoded into IRA characters
VERS M Version number ‘0100'
LAdC - Address for VSMSC list operation
LTON - Type of Number list address
LNPI - Numbering Plan Id list address
OPID O Originator Protocol Identifier:
00 = Mobile station
39 = PC application
RES1 -
• If ISDN is used as access method to the SMSC, then the ONPI field should remain
empty.
• In case STYP=4 or STYP=6 (provisioning) then the physical address from which the
connection is set up (CLI-address) is not checked. That is, the connection may be set
up from any address.
• The session setup is refused by the SMSC when:
⋅ the physical address is to be screened and STYP=1 or STYP=3 and the CLI-address
(connect address) is not registered in the SMSC.
⋅ the OAdC contains an address or abbreviated short number that is not a registered
large account.
⋅ the supplied password does not match.
Example:
• 02/00059/O/60/07656765/2/1/1/50617373776F7264//0100//////61

6.3.1 Session management operation (positive result)
Table 6-6: Parameter Positive Result Data Field Session Management Operation
Example:
• 00/00019/R/60/A//6D
6.3.2 Session management operation (negative result)
Table 6-7: Parameter Negative Result Data Field Session Management Operation
Example:
• 00/00022/R/60/N/01//04
6.4 Provisioning actions operation -61

With this operation items can be verified, added or removed from the mobile originated and
mobile terminated lists.
Table 6-8: Provisioning Actions Operation
OAdC M Any valid X.121, E164, TCP/IP or abbreviated address, excluding prefixes
OTON O Originator Type of Number:
6 = Abbreviated number (short number alias)

ONPI O Originator Numbering Plan Id:
3 = X121 address
5 = SMSC specific: Private (TCP/IP address/abbreviated number address)
STYP M Subtype of operation:
1 = add item to mo-list
2 = remove item from mo-list
3 = verify item mo-list
4 = add item to mt-list
5 = remove item from mt-list
6 = verify item mt-list
PWD - Current password encoded into IRA characters
NPWD - New password encoded into IRA characters
VERS M Version number ‘0100'
LAdC M Address to be ‘filled in’, ‘removed from’ or ‘checked in’ a VSMSC list,
containing a valid X.121, E.164 or TCP/IP address excluding prefixes
LTON O Type of Number list address:
LNPI O Numbering Plan Id list address:
3 = X121 address
5 = TCP/IP address
RES1 -
RES2 -
Example:
• 00/00058/O/61/04568768///2///0100/1920870340094000//5///06
6.4.1 Provisioning actions operation (positive result)
Table 6-9: Parameter Positive Result Data Field Provisioning Actions Operation

Example:
• 00/00019/R/61/A//6E
6.4.2 Provisioning actions operation (negative result)
Table 6-10: Parameter Negative Result Data Field Provisioning Actions Operation
Example:
• 00/00022/R/61/N/02//06

7 SMT Alert Operation
7.1 SMT alert operation -31

This operation can be used by a SMT to alert the SC to start delivering pending messages.
The following table shows the parameters in the operation data field:
Table 7-1: Parameter Operation Data Field SMT Alert Operation
AdC String of num. char. M Address code for the SMT, maximum
length is 16 digits.
PID 4 num. char. M SMT PID value:
0100 Mobile Station
0122 Fax Group 3
0131 X.400
0138 Menu over PSTN
0139 PC appl. via PSTN
0339 PC appl. via X.25
0439 PC appl. via ISDN
0539 PC appl. via TCP/IP
0639…..PC appl. via abbreviated number
PID value 0639 can only be used to alert for the own (originator) address and if the
abbreviated number is the OAdC of the corresponding 60 operation ‘open session’.
Example:
• Alert requested on PSTN number 0234765439845
02/00035/O/31/0234765439845/0139/A0
7.1.1 SMT alert operation (positive result)
Table 7-2: Parameter Positive Result Data Field SMT Alert Operation

If used, the positive SMT alert operation result text SM parameter will contain the number of
messages waiting in the SC destined for the subscriber the alert was generated for. The
number consists of four digits and contains leading zeros. When the number of messages
waiting in the SC is more than 9,999, then 9999 will be returned as the number of messages
waiting. In case the alert address is a Multiple Address large account, the number of
messages waiting is always returned as ‘0000’, independent of the actual number of waiting
messages.
Example:
• 04/00024/R/31/A/0003/5D
7.1.2 SMT alert operation (negative result)
Table 7-3: Parameter Negative Result Data Field SMT Alert Operation
The following error codes can be returned in the operation negative result:
01 Checksum error
02 Syntax error
04 Operation not allowed (at this point in time)
05 Call barring active
06 AdC invalid
07 Authentication failure
08 Legitimisation code for all calls, failure
24 Message too long
26 Message type not valid for the pager type
Example:
7 00/00022/R/31/N/06//07
© 2003 CMG Wireless Data Solutions — SMT Alert Operation 57

8 Legacy Operations Syntax
8.1 Call input operation -01

This operation can be used by the SMT to submit a message to the SMSC. This operation is
also used by the SMSC to deliver Short Messages and Notifications to a SMT user in the
following cases:
• The SMSC operator provides the UCP behaviour of previous SMSC releases, i.e. the
UCP01 operation is used to deliver a Mobile Originated Short Message (MO-SM) when
the MO-SM functionality does not require the UCP50 series operations or the UCP01 is
used to deliver a notification to the SMT as a result of a SMT initiated UCP30 operation.
• The SMSC operator provides the default UCP behaviour of the current SMSC release.
I.e. a UCP01 is used for a MO-SM or notification for a UCP30 operation, when a UCP50
series operation is negatively acknowledged by the application with Error Code 03
(Operation not supported on system) and the functionality of the UCP01 operation is
sufficient to do the requested operation.
Table 8-1: Parameters Operation Data Field Call Input Operation
AdC String of num. char. M Address code recipient, maximum length

is 16 digits.
OAdC String of num. char O Address code originator, maximum length

is 16 digits.
AC String of char. O Authentication code originator.
MT 1 num. char. M Message type. Associated parameters

depend on the value of the message type.
MT=2:
NMsg
String of num. char. O Numeric message, maximum length is
160 digits.
MT=3:
AMsg
String of char. O Alphanumeric message encoded into IRA
characters, maximum length is
representing 640 characters.
• The AC parameter is discarded if present.

• If the option ‘Long Message’ is not enabled on the SMSC, the maximum length of AMsg
represents 160 characters.
Examples:
• Alphanumeric message ‘Short Message’

00/00070/O/01/01234567890/09876543210//3/53686F7274204D657373616765/D9
• Numeric message ‘716436383334'
00/00041/O/01/0888444///2/716436383334/C5
8.1.1 Call input operation (positive result)
Table 8-2: Parameter Positive Result Data Field Call Input Operation
Table 8-3: Short Message Parameter Field Call Input Operation

16 digits.

DDMMYYhhmmss
When the SMSC initiates this operation, the contents of the SM parameter will be discarded.
Example:
• 06/00043/R/01/A/01234567890:090196103258/4E
8.1.2 Call input operation (negative result)
Table 8-4: Parameter Negative Result Data Field Call Input Operation
01 Checksum error
02 Syntax error
03 Operation not supported by system
© 2003 CMG Wireless Data Solutions — Legacy Operations Syntax 59

06 AdC invalid
24 Message too long
23 Message type not supported by system
Example:
• 12/00022/R/01/N/02//03
8.2 Multiple address call input operation -02

This message can be used by the SMT to submit a message to the SMSC. With this
operation a list of recipients of the message may be specified thus reducing the traffic
between the SMSC and the SMT.
Table 8-5: Parameters Operation Data Field Multiple Address Call Input Operation
NPL String of num. char M Number of parameters in the following

RAd:s list
RAd:s String of num. char. M List of parameters: Each parameter

consists of AdC Address code recipient,
maximum length is 16 digits with optional
legitimisation code for all calls.
OAdC String of num. char. O Address code originator, maximum length

is 16 digits.
AC String of char O Authentication code originator.
MT 1 numeric char. M Message type. Associated parameters

MT=2:
NMsg String of num. char. O Numeric message, maximum length is

160 digits.
MT=3:
AMsg String of char. O Alphanumeric message encoded into IRA

• The SMSC does currently not support the Multiple call input operation for large accounts
in combination with throughput regulation.
• The SMSC does not support the Multiple call input operation for Multiple Address large
accounts.
• The NPL parameter must range from 1 to 20 thus limiting the length of the RAd:s list to
20. An IW also contains the DEST_MAX parameter. The NPL must also have a value
less than or equal to this parameter.

• The RAd:s is a list of NPL RAd fields. A RAd field contains an address and optionally a
legitimisation code. If the legitimisation code is present it is separated from the address
by a comma ",". If the legitimisation code is not present the comma may be omitted. If
present the legitimisation code is discarded by the IW.
Examples:
• Alphanumeric message ‘SMSC’ to 3 subscribers
05/00059/O/02/3/01111/02222/03333/0123456789//3/534D5343/52
• Numeric message ‘563444' to 5 subscribers
17/00069/O/02/5/01111/02222/03333/04444/05555/0123456789//2/563444/44
8.2.1 Multiple address call input operation (positive result)
Table 8-6: Parameter Positive Result Data Field Multiple Address Call Input Operation
The SM field contains the following three fields:
Table 8-7: Short Message Parameter Field Multiple Address Call Input Operation

16 digits.

DDMMYYhhmmss
Since the operation allows for a maximum of 20 addresses to be provided the positive result
may also contain a maximum of 20 address:time-stamp combinations.
If some of the addresses are invalid, and some are valid, the invalid addresses can be
recognised by the absence of the timestamp field. If all addresses are invalid, a negative
result is returned.
Example
• 82/00059/R/02/A/0654321:090196113940,065432:090196113940/86

8.2.2 Multiple address call input operation (negative result)
Table 8-8: Parameter Negative Result Data Field Multiple Address Call Input Operation
01 Checksum error
02 Syntax error
06 AdC invalid
24 Message too long
Example:
• 47/00022/R/02/N/01//0B
8.3 Call input with supplementary services operation -03

This operation can be used by the SMT to submit a short message to the SMSC. The
following table shows the parameters in the operation data field:
Table 8-9: Parameter Operation Data Field Call Input with Services Operation
RAd String of num. char. M AdC Address code recipient, maximum

length is 16 digits, combined with optional
legitimisation code for all calls.

is 16 digits.
NPL String of num. char. M Number of parameters in the following

GA:s list. Must be “0”.
GA:s String of char. O List of additional GA:s requested by the

calling party. Not present because NPL =
0.
RP Char “1” O Repetition requested. Must be left empty.

PR Char “1” or char “3” O Priority request 1 or 3. Must be left empty.
LPR String of num. char. O Legitimisation code for priority requested.

Must be left empty.
UR Char “1” O Urgent message indicator request. Must

be left empty.
LUR String of num. char. O Legitimisation code for urgent message.

Must be left empty.
RC Char “1” O Reverse charging request. Must be left

empty.
LRC String of num. char. O Legitimisation code for reverse charging.

Must be left empty.
DD Char “1” O Deferred delivery request.
DDT 10 num. char. O Deferred delivery time DDMMYYHHmm.
MT 1 numeric char. M Message type. Associated parameters

MT=2:
NMsg String of num. char. O Numeric message, maximum length is

160 digits.
MT=3:

• The RAd field contains an address and optionally a legitimisation code. If the
legitimisation code is present it is separated from the address by a comma ",". If the
legitimisation code is not present the comma may be omitted. If present the legitimisation
code is discarded by the IW.
• The NPL must be equal to zero. If the NPL contains anything else than zero a negative
response with "GA not valid" (09) must be sent to the message sender. Since NPL must
be equal to zero the GA:s list may not be used.
• The RP parameter may not be set. If the RP parameter is set a negative response with
"Repetition not allowed" (10) must be sent to the message sender.
• The PR parameter may not be set. If the PR parameter is set a negative response with
"Priority call not allowed" (12) must be sent to the message sender.
• The LPR parameter may not be set. If the LPR parameter is set a negative response with
"Priority call not allowed" (12) must be sent to the message sender.
• The UR parameter may not be set. If the UR parameter is set a negative response with
"Urgent message not allowed" (14) must be sent to the message sender.
• The LUR parameter may not be set. If the LUR parameter is set a negative response
with "Urgent message not allowed" (14) must be sent to the message sender.
• The RC parameter may not be set. If the RC parameter is set a negative response with
"Reverse charging not allowed" (16) must be sent to the message sender.
• The LRC parameter may not be set. If the LRC parameter is set a negative response
with "Reverse charging not allowed" (16) must be sent to the message sender.

Examples:
• Alphanumeric message ‘CMG’
15/00058/O/03/01234568/0756663/2435/0//////////3/434D47/1B
• Numeric message ‘89123334' with deferred delivery
22/00067/O/03/01234568/0756663//0////////1/0602961500/2/89123334/CF
8.3.1 Call input with supplementary services operation (positive result
Table 8-10: Parameter Positive Result Data Field Call Input with Services Operation
Table 8-11: Short Message Parameter Field Call Input with Services Operation

16 digits.

DDMMYYhhmmss
Example:
• 01/00038/R/03/A/066666:090296103355/4F
8.3.2 Call input with supplementary services operation (negative result)
Table 8-12: Parameter Negative Result Data Field Call Input with Services Operation

01 Checksum error
02 Syntax error
06 AdC invalid
09 GA not valid
10 Repetition not allowed
11 Legitimisation code for repetition, failure
12 Priority call not allowed
13 Legitimisation code for priority call, failure
14 Urgent message not allowed
15 Legitimisation code for urgent message, failure
16 Reverse charging not allowed
17 Legitimisation code for reverse charging, failure
18 Deferred delivery not allowed
21 Standard text not valid
22 Time period not valid
24 Message too long
Example:
01/00022/R/03/N/22//05
8.4 MS message transfer operation -30

This operation can be used by the SMT to submit a message to the SMSC. With this
operation Short Message specific services can be requested. The following table shows the
parameters in the operation data field:
Table 8-13: Parameter Operation Data Field MS Message Transfer Operation
AdC String of num. char. M Address code recipient, maximum length

is 16 digits.

is 16 digits.

NRq Char “1” O Notification requested.
NAd String of num. char. O Notification address.
NPID 4 num. char. O Notification PID value:
0100 Mobile Station
0122 Fax Group 3
0131 X.400
0138 Menu over PSTN
0139 PC appl. over PSTN
0339 PC appl. over X.25
0439 PC appl. over ISDN
DD Char “1” O Deferred delivery request.
DDT 10 num. char. O Deferred delivery time DDMMYYHHmm.
VP 10 num. char. O Validity period DDMMYYHHmm.

characters, maximum length representing
640 characters.

• If NRq is used, then NAd and NPID must be both empty or both used.
• If NRq is used and NAdC and NPID are left empty, then the notification is sent to the
originator in the current session. If, in this case :
⋅ and the originator is not known to the SMSC to have more than one address,
⋅ and the notification has not yet been delivered then the notification is deleted by the
SMSC.
AMsg represents 160 characters.
Examples:
• Alphanumeric message ‘EMI specification’ with notification requested to a PC application
over PSTN
56/00089/O/30/0123456/0568243//1/0296877842/0139////454D49207370656369666963617
4696F6E/D4
• Alphanumeric message ‘Message OK’ with deferred delivery and validity period set
44/00077/O/30/0673845336//////1/1003961344/1203961200/4D657373616765204F4B/27

8.4.1 MS message transfer operation (positive result)
Table 8-14: Parameter Positive Result Data Field MS Message Transfer Operation
MVP 10 num. char. O Modified validity period
Table 8-15: Short Message Parameter Field MS Message Transfer

16 digits.

DDMMYYhhmmss
Example:
• 10/00039/R/30/A//067345:070295121212/6F
8.4.2 MS message transfer operation (negative result)
Table 8-16: Parameter Negative Result Data Field MS Message Transfer Operation
01 Checksum error
02 Syntax error
06 AdC invalid

24 Message too long
Example:
• 11/00022/R/30/N/24//08

9 Error Codes Overview
Error codes, which can be returned in the operations negative result, are listed in [ETSI
03.00] paragraph 9.2.6. For all operations defined in the ERMES recommendation, which
are not implemented in the SMSC, EMI returns with error code 03 ("Operation not supported
by system").
9.1 Error codes

Table 9-1: Error Codes
Error Code Message
01 Checksum error
02 Syntax error
04 Operation not allowed
06 AdC invalid
09 GA not valid
10 Repetition not allowed
11 Legitimisation code for repetition, failure
12 Priority call not allowed
13 Legitimisation code for priority call, failure
14 Urgent message not allowed
15 Legitimisation code for urgent message, failure
16 Reverse charging not allowed
17 Legitimisation code for rev. charging, failure
18 Deferred delivery not allowed
19 New AC not valid
20 New legitimisation code not valid
21 Standard text not valid
© 2003 CMG Wireless Data Solutions — Error Codes Overview 69

Error Code Message
24 Message too long
25 Requested standard text not valid
27 Message not found in smsc
30 Subscriber hang-up
31 Fax group not supported
32 Fax message type not supported
33 Address already in list (60 series)
34 Address not in list (60 series)
35 List full, cannot add address to list (60 series)
36 RPID already in use
37 Delivery in progress
38 Message forwarded
The following table summarises some special occurrences of error codes:
Table 9-2: Special Occurrences of Error Codes
Error Code Meaning
02 Error in the NPID parameter (SMS Message transfer) or in the PID

parameter (SMT Alert).
04 Any internal error (e.g. no resources), often of temporary nature. If the RAd:s
(number of addresses) parameter contained more addresses than the
specified maximum, the System Message parameter will contain "too many
addresses".
05 One of the addresses is on the blacklist.
07 Authentication failure (PWD parameter in 60-series)
19 New AC not valid (NPWD parameter in 60-series)

© 2003 CMG Wireless Data Solutions — 71
10 Error Messages and Reason Codes in
Notifications
Table B-1: Error Messages and Reason Codes in Notifications
Reason Code Meaning
000 Unknown subscriber
001 Service temporary not available
009 Illegal error code
010 Network time-out
100 Facility not supported
101 Unknown subscriber
102 Facility not provided
103 Call barred
104 Operation barred
105 SC congestion
106 Facility not supported
107 Absent subscriber
108 Delivery fail
109 Sc congestion
110 Protocol error
111 MS not equipped
112 Unknown SC
113 SC congestion
114 Illegal MS
115 MS not a subscriber

Reason Code Meaning
116 Error in MS
117 SMS lower layer not provisioned
118 System fail
119 PLMN system failure
120 HLR system failure
121 VLR system failure
122 Previous VLR system failure
123 Controlling MSC system failure
124 VMSC system failure
125 EIR system failure
126 System failure
127 Unexpected data value
200 Error in address service centre
201 Invalid absolute Validity Period
202 Short message exceeds maximum
203 Unable to Unpack GSM message
204 Unable to convert to IRA ALPHABET
205 Invalid validity period format
206 Invalid destination address
207 Duplicate message submit
208 Invalid message type indicator

11 GSM 7-bit alphabet tables
The GSM 7-bit alphabet consists of 2 tables listed below: a default table and an extended
table.
Table 11-1: 7-bit Default Alphabet Table
b7 0 0 0 0 1 1 1 1
b6 0 0 1 1 0 0 1 1
b5 0 1 0 1 0 1 0 1
B4 b3 b2 B1 0 1 2 3 4 5 6 7
0 0 0 0 0 @ SP 0 ¡ P ¿ p
0 0 0 1 1 £ DC1 ! 1 A Q a q
0 0 1 0 2 $ “ 2 B R b r
0 0 1 1 3 ¥ # 3 C S c s
0 1 0 0 4 è ¤ 4 D T d t
0 1 0 1 5 é % 5 E U e u
0 1 1 0 6 ù & 6 F V f v
0 1 1 1 7 ì ‘ 7 G W g w
1 0 0 0 8 ò ( 8 H X h x
1 0 0 1 9 Ç θ ) 9 I Y i y
1 0 1 0 10 LF * : J Z j z
1 0 1 1 11 Ø 1) + ; K Ä k ä
1 1 0 0 12 ø Æ , < L Ö l ö
1 1 0 1 13 CR Æ - = M Ñ m ñ
1 1 1 0 14 Å ß . > N Ü n ü
1 1 1 1 15 å É / ? O § o à
1) This code is an escape to an extension of the 7 bit default alphabet table. A receiving
entity, which does not understand the meaning of this escape mechanism, shall display
it as a space character.

Table 11-2: 7-bit Default Alphabet Extension Table
b7 0 0 0 0 1 1 1 1
b6 0 0 1 1 0 0 1 1
b5 0 1 0 1 0 1 0 1
B4 b3 b2 B1 0 1 2 3 4 5 6 7
0 0 0 0 0 |
0 0 0 1 1
0 0 1 0 2
0 0 1 1 3
0 1 0 0 4 ^
0 1 0 1 5 2)
0 1 1 0 6
0 1 1 1 7
1 0 0 0 8 {
1 0 0 1 9 }
1 0 1 0 10 3)
1 0 1 1 11 1)
1 1 0 0 12 [
1 1 0 1 13 ~
1 1 1 0 14 ]
1 1 1 1 15 \
In the event that an MS receives a code where a symbol is not represented in the above
table then the MS shall display the character shown in the main default 7 bit alphabet table.
1) This code value is reserved for the extension to another extension table. On receipt of
this code, a receiving entity shall display a space until another extension table is
defined.
2) This code represents the EURO currency symbol. The code value is that used for the
character “e”. Therefore a receiving entity which is incapable of displaying the EURO
currency symbol will display the character “e” instead.
3) This code is defined as a Page Break character. Any mobile which does not understand
the 7 bit default alphabet table extension mechanism will treat this character as Line
Feed.

12 GSM 7-bit – Unicode mapping
Table 12-1: Error Codes GSM 7-bit – Unicode mapping
GSM 7-bit Unicode Character name

alphabet 16-bit
character character
code code
(sequence)
0x00 0x0040 COMMERCIAL AT
0x01 0x00A3 POUND SIGN
0x02 0x0024 DOLLAR SIGN
0x03 0x00A5 YEN SIGN
0x04 0x00E8 LATIN SMALL LETTER E WITH GRAVE
0x05 0x00E9 LATIN SMALL LETTER E WITH ACUTE
0x06 0x00F9 LATIN SMALL LETTER U WITH GRAVE
0x07 0x00EC LATIN SMALL LETTER I WITH GRAVE
0x08 0x00F2 LATIN SMALL LETTER O WITH GRAVE
0x09 0x00E7 LATIN SMALL LETTER C WITH CEDILLA
0x0A 0x000A LINE FEED
0x0B 0x00D8 LATIN CAPITAL LETTER O WITH STROKE
0x0C 0x00F8 LATIN SMALL LETTER O WITH STROKE
0x0D 0x000D CARRIAGE RETURN
0x0E 0x00C5 LATIN CAPITAL LETTER A WITH RING ABOVE
0x0F 0x00E5 LATIN SMALL LETTER A WITH RING ABOVE
0x10 0x0394 GREEK CAPITAL LETTER DELTA
0x11 0x005F LOW LINE
0x12 0x03A6 GREEK CAPITAL LETTER PHI
0x13 0x0393 GREEK CAPITAL LETTER GAMMA
0x14 0x039B GREEK CAPITAL LETTER LAMDA
0x15 0x03A9 GREEK CAPITAL LETTER OMEGA
0x16 0x03A0 GREEK CAPITAL LETTER PI
0x17 0x03A8 GREEK CAPITAL LETTER PSI
0x18 0x03A3 GREEK CAPITAL LETTER SIGMA
0x19 0x0398 GREEK CAPITAL LETTER THETA
0x1A 0x039E GREEK CAPITAL LETTER XI
0x1B 0x00A0 ESCAPE TO EXTENSION TABLE or displayed as non
breaking space
0x1B0A 0x000C FORM FEED
0x1B14 0x005E CIRCUMFLEX ACCENT
0x1B28 0x007B LEFT CURLY BRACKET
0x1B29 0x007D RIGHT CURLY BRACKET
0x1B2F 0x005C REVERSE SOLIDUS
0x1B3C 0x005B LEFT SQUARE BRACKET
0x1B3D 0x007E TILDE
0x1B3E 0x005D RIGHT SQUARE BRACKET
0x1B40 0x007C VERTICAL LINE
0x1B65 0x20AC EURO SIGN
0x1C 0x00C6 LATIN CAPITAL LETTER AE
0x1D 0x00E6 LATIN SMALL LETTER AE
0x1E 0x00DF LATIN SMALL LETTER SHARP S
0x1F 0x00C9 LATIN CAPITAL LETTER E WITH ACUTE
0x20 0x0020 SPACE
0x21 0x0021 EXCLAMATION MARK

alphabet 16-bit
character character
code code
(sequence)
0x22 0x0022 QUOTATION MARK
0x23 0x0023 NUMBER SIGN
0x24 0x00A4 CURRENCY SIGN
0x25 0x0025 PERCENT SIGN
0x26 0x0026 AMPERSAND
0x27 0x0027 APOSTROPHE
0x28 0x0028 LEFT PARENTHESIS
0x29 0x0029 RIGHT PARENTHESIS
0x2A 0x002A ASTERISK
0x2B 0x002B PLUS SIGN
0x2C 0x002C COMMA
0x2D 0x002D HYPHEN-MINUS
0x2E 0x002E FULL STOP
0x2F 0x002F SOLIDUS
0x30 0x0030 DIGIT ZERO
0x31 0x0031 DIGIT ONE
0x32 0x0032 DIGIT TWO
0x33 0x0033 DIGIT THREE
0x34 0x0034 DIGIT FOUR
0x35 0x0035 DIGIT FIVE
0x36 0x0036 DIGIT SIX
0x37 0x0037 DIGIT SEVEN
0x38 0x0038 DIGIT EIGHT
0x39 0x0039 DIGIT NINE
0x3A 0x003A COLON
0x3B 0x003B SEMICOLON
0x3C 0x003C LESS-THAN SIGN
0x3D 0x003D EQUALS SIGN
0x3E 0x003E GREATER-THAN SIGN
0x3F 0x003F QUESTION MARK
0x40 0x00A1 INVERTED EXCLAMATION MARK
0x41 0x0041 LATIN CAPITAL LETTER A
0x42 0x0042 LATIN CAPITAL LETTER B
0x43 0x0043 LATIN CAPITAL LETTER C
0x44 0x0044 LATIN CAPITAL LETTER D
0x45 0x0045 LATIN CAPITAL LETTER E
0x46 0x0046 LATIN CAPITAL LETTER F
0x47 0x0047 LATIN CAPITAL LETTER G
0x48 0x0048 LATIN CAPITAL LETTER H
0x49 0x0049 LATIN CAPITAL LETTER I
0x4A 0x004A LATIN CAPITAL LETTER J
0x4B 0x004B LATIN CAPITAL LETTER K
0x4C 0x004C LATIN CAPITAL LETTER L
0x4D 0x004D LATIN CAPITAL LETTER M
0x4E 0x004E LATIN CAPITAL LETTER N
0x4F 0x004F LATIN CAPITAL LETTER O
0x50 0x0050 LATIN CAPITAL LETTER P
0x51 0x0051 LATIN CAPITAL LETTER Q
0x52 0x0052 LATIN CAPITAL LETTER R
0x53 0x0053 LATIN CAPITAL LETTER S
0x54 0x0054 LATIN CAPITAL LETTER T
0x55 0x0055 LATIN CAPITAL LETTER U
0x56 0x0056 LATIN CAPITAL LETTER V
0x57 0x0057 LATIN CAPITAL LETTER W
0x58 0x0058 LATIN CAPITAL LETTER X
0x59 0x0059 LATIN CAPITAL LETTER Y
0x5A 0x005A LATIN CAPITAL LETTER Z
0x5B 0x00C4 LATIN CAPITAL LETTER A WITH DIAERESIS
0x5C 0x00D6 LATIN CAPITAL LETTER O WITH DIAERESIS
0x5D 0x00D1 LATIN CAPITAL LETTER N WITH TILDE

alphabet 16-bit
character character
code code
(sequence)
0x5E 0x00DC LATIN CAPITAL LETTER U WITH DIAERESIS
0x5F 0x00A7 SECTION SIGN
0x60 0x00BF INVERTED QUESTION MARK
0x61 0x0061 LATIN SMALL LETTER A
0x62 0x0062 LATIN SMALL LETTER B
0x63 0x0063 LATIN SMALL LETTER C
0x64 0x0064 LATIN SMALL LETTER D
0x65 0x0065 LATIN SMALL LETTER E
0x66 0x0066 LATIN SMALL LETTER F
0x67 0x0067 LATIN SMALL LETTER G
0x68 0x0068 LATIN SMALL LETTER H
0x69 0x0069 LATIN SMALL LETTER I
0x6A 0x006A LATIN SMALL LETTER J
0x6B 0x006B LATIN SMALL LETTER K
0x6C 0x006C LATIN SMALL LETTER L
0x6D 0x006D LATIN SMALL LETTER M
0x6E 0x006E LATIN SMALL LETTER N
0x6F 0x006F LATIN SMALL LETTER O
0x70 0x0070 LATIN SMALL LETTER P
0x71 0x0071 LATIN SMALL LETTER Q
0x72 0x0072 LATIN SMALL LETTER R
0x73 0x0073 LATIN SMALL LETTER S
0x74 0x0074 LATIN SMALL LETTER T
0x75 0x0075 LATIN SMALL LETTER U
0x76 0x0076 LATIN SMALL LETTER V
0x77 0x0077 LATIN SMALL LETTER W
0x78 0x0078 LATIN SMALL LETTER X
0x79 0x0079 LATIN SMALL LETTER Y
0x7A 0x007A LATIN SMALL LETTER Z
0x7B 0x00E4 LATIN SMALL LETTER A WITH DIAERESIS
0x7C 0x00F6 LATIN SMALL LETTER O WITH DIAERESIS
0x7D 0x00F1 LATIN SMALL LETTER N WITH TILDE
0x7E 0x00FC LATIN SMALL LETTER U WITH DIAERESIS
0x7F 0x00E0 LATIN SMALL LETTER A WITH GRAVE

13 Protocol sequence example
Here is an example of a protocol sequence with various operation types:
1. SMT opens session with the SMSC
2. SMT sends message to mobile station which is turned off
3. SMT inquires the SMSC for buffered message
4. SMT deletes the buffered message
5. SMT attempts to delete the deleted message again
In the example, the SMT uses “55555” as the originator address and the international
number “0031612345678” for the mobile station address.
Table 13-1: Protocol sequence example
Description UCP string
SMT opens session with address 55555 and 00/00056/O/60/55555/6/5/1/7069657465723132//0100//////A

password pieter12
SMSC accepts session 00/00019/R/60/A//6D
SMT submits SMS with originator address 00/00077/O/51/0031612345678/55555////4/////////////3//74657374

55555 to mobile station 0031612345678 /////////////97
SMSC sends positive acknowledgement with 00/00046/R/51/A//0031612345678:271102171649/DD

message identification:
0031612345678:271102171649
SMT sends inquire operation with originator 00/00067/O/55/0031612345678/55555////////////////////////////////88

address 55555 for recipient 0031612345678
SMSC sends positive acknowledgement 00/00020/R/55/A///98
SMSC sends inquire response to SMT with text: 00/00159/O/57/55555//////////////////3//44657374696E6174696F6

Destination: 0612345678 identification: E3A2030363132333435363738206964656E746966696361746
021127171649 96F6E3A20303231313237313731363439/////////////E3
SMT sends positive acknowledgement to SMSC 00/00038/R/57/A//55555:271102171738/4E
SMT send delete operation with originator 00/00092/O/56/0031612345678/55555/////////////////3//303231313

address 55555 for recipient 0031612345678 237313731363439/////////////87
with in the text the timestamp 021127171649.
SMSC sends positive acknowledgement to SMT 00/00020/R/56/A///99
SMSC send delete response to SMT with text: 01/00193/O/58/55555//////////////////3//44657374696E6174696F6

E2030363132333435363738206964656E74696669636174696
Destination 0612345678 identification: F6E3A2030323131323731373136343920686173206265656E2
021127171649 has been deleted. 064656C657465642E/////////////FD
SMT sends positive response to SMSC 01/00038/R/58/A//55555:271102171824/4C

SMT sends again the delete operation with 00/00092/O/56/0031612345678/55555/////////////////3//303231313
originator address 55555 for recipient 237313731363439/////////////8
0031612345678 with in the text the timestamp
021127140558.
SMSC sends positive acknowledgement to SMT 00/00020/R/56/A///99
SMSC sends delete response to SMT with text: 02/00167/O/58/55555//////////////////3//44657374696E6174696F6

E2030363132333435363738206964656E74696669636174696
Destination 0612345678 identification: has been F6E3A20686173206265656E2064656C657465642E/////////////D
deleted. 0
The omission of the timestamp indicates that the

message is not stored in the SMSC.
SMT sends positive response to SMSC 02/00044/R/58/A//55555:271102171857/71

Appendix A. Changes with respect to previous
versions
Changes with respect to EMI specification 2.4

• New UCP 54 (Modify short message) operation.
• The field PR in the UCP51 is no longer reserved. In the UCP51 the field is optional and
can be used to request priority.
• Multiple Address large account support: sliding window and session management
operations.
• In the UCP60 (Session management) the field RES1 has been renamed to OPID. This is
an optional field in the UCP60. The OPID is used for GSM subscriber via fixed access.
• A (Multiple Address) large account can now use its short number in a UCP60 to login.
The short number should be passed in the OAdC, OTON should be set to 6
(abbreviated) and ONPI to 5 (SC specific: Private).
• The remark “AC parameter is discarded if present” in the description of UCP51 has been
removed.
• The UCP02 (Multiple address call input) is currently not supported for large accounts in
combination with throughput regulation. A remark has been added in the description of
UCP02.
• When the AC field (Authentication code originator) is used, the AC shall contain at least
4 numeric characters in every message which are not equal to all zero’s, otherwise it will
be rejected. A remark has been added in the description of the following UCP operations:
30, 51, 55 and 56.
• In the description of UCP56 (Delete message) the field MMS was listed as an optional
parameter. However this field has no meaning in the UCP56 operation. Therefor the
description now states that this field should be left empty.
• In paragraph ‘4.1 Address syntax’ the following line has been removed:
• <+><country-code><telephone_nr> (This format may only be used on Mobile Stations.)
Changes with respect to EMI specification 3.1.0

• The RES3 (reserved field) is now used for extra services (XSer field) in UCP 51 and 52
operations. This patch allows the UCP application to specify a User Data Header. The
functionality is an add-on (patch) to the SMSC 3.1 Release.

• Clarification on the format of the XSer field and the format of the XSer service type “GSM
UDH information”.

• The XSer service type “GSM DCS information” is introduced. Its intention is to give more
control to the user applications to send and receive GSM DCS values. It provides
support for “7-bit alphabet”, “8-bit data”, “UCS2 alphabet”, “Message Waiting Indications”
and “Message Class Meaning”.
• The UCP 50 series field “DCs” has been deprecated.
• Applications are advised to use the XSer service type “GSM DCS information” as a
replacement for the UCP 50 series field MCLs.
• The 50 series RPID field range has been corrected to include 0000…0071.
• Added an example of encoding an alphanumeric address.
• The TMsg field in the UCP51 and UCP52 messages is changed from M (Mandatory) to
O (Optional).
• Statement that the address fields are encoded according to E.164.

• The XSer service types 03 - 0B have been introduced in order to support functionality for
TDMA within the UCP51 and UCP52 messages.
• The length of the TMsg field in the UCP51 and UCP52 messages for MT=4 has been
extended from 140 to 160 octets to support 160 byte binary data for TDMA.
• The number-of-messages-waiting field in the response of a SMT alert message (UCP31)
has been specified as always being ‘0000’ for a Multiple Address large account.
• The “GSM DCS information” field can be specified in the modified message (UCP54)
XSer field.

• The XSer service type 0C has been introduced to support the Billing Identifier in UCP51
and UCP54 messages.
• The XSer service type 0D has been introduced to support Single Shot indication.
• Support for the EURO sign / GSM default alphabet extension table.

• The MT=4, Tmsg, RPID and Xser fields has been added in the UCP53 message to
support transfer of data returned by the mobile station.
• The Oadc field has been removed from the UCP57 operation. This correction aligns the
operation with UCP58.
• Valid values of RPID field have been extended to align with [3GPP 23.040] and operator
configurable permissions and restrictions.

Abbreviations
CDMA Code Division Multiple Access

CLI Calling Line Identifier
DCS Data Coding Scheme
EMI External Machine Interface
ERMES European Radio Messaging System
ETS European Technical Standard
FAX Facsimile
GPRS General Packet Radio Service
GSM Global System for Mobile communication
IA5 International Alphabet 5
IRA International Reference Alphabet [ITU T.50] (formerly IA5)
LA Large account. An SMT registered on the SMSC.
MS Mobile Station
O&M Operations and Maintenance
PC Personal Computer
PLMN Public Land Mobile Network
PSTN Public Switched Telephone Network
SM Short Message
SME Short Message Entity
SMS Short Message Service
SMSC Short Message Service Centre
SMT Short Message Terminal
TDMA Time Division Multiple Access
UCP Universal Computer Protocol
UDH User Data Header
UMTS Universal Mobile Telecommunications System
VMS Voice Mail System
© 2003 CMG Wireless Data Solutions — Abbreviations 87

References
[ETSI 03.00] ETSI ETS 300 133-3 Paging Systems (PS); European Radio
Messaging System (ERMES) Part 3: Network aspects; Section 9: I5
interface.
[3GPP 23.038] 3GPP TS 23.038 Alphabets and language-specific information;
Release 5.
[3GPP 23.040] 3GPP TS 23.040 Technical realisation of the Short Message Service
(SMS); Release 5
[ITU-T] ITU-T Recommendation X.208, Open Systems Interconnection Model
and Notation, Specification of Abstract Syntax Notation One (ASN.1).
[TIA/EIA-136-710a] TIA/EIA-136-710a, Short Message Service - Cellular Messaging
Teleservice, 20 November 1998.
[TIA/EIA-637-A] TIA/EIA-637-A, Short Message Service for Spread Spectrum Systems
© 2003 CMG Wireless Data Solutions — References 89

Index
—5— —I—
50-Series of EMI Messages 15 Inquiry message operation -55 42
Interface history 3
—6—
—M—
60-Series of EMI Messages 53
Modify Short Message operation - 54 38
13, 69
—A— 13, 60
Abbreviations 91 9, 11, 13, 64, 65, 66
Abstract Data Types 15, 53
Address syntax 13, 75, 89 —P—
alphanumeric OadC 20
Provisioning actions operation -61 56
—C—
—R—
9, 10, 11, 13, 62, 63
Reason Codes 77
References xiv, 93
—D— Response delete message operation -58 49
Delete message operation -56 47 Response Inquiry message operation -57 45, 49
Delivery notification operation -53 36
Delivery Short Message operation -52 33 —S—
document
audience xiii Session management operation -60 54
organisation xiii SMSC xiii
purpose xiii SMSC initiated commands 9, 11
SMT initiated commands 9, 11
—E— Standard string 29, 54
Structure of EMI Messages 5
EMI Commands 9, 13 Submit Short Message operation -51 30
EMI External View 1 9, 11, 13, 66, 68
Error Codes 13, 73, 74
Error Codes Overview 13
—T—
—F— typographic conventions xiv
Flow control 12
—X—
XSer Extra Services 21
© 2003 CMG Wireless Data Solutions — Index 91

EMI UCP Interface Specification v4.6

Uploaded by

Copyright:

Available Formats

EMI UCP Interface Specification v4.6

Uploaded by

Document Information

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

EMI UCP Interface Specification v4.6

Uploaded by

Copyright:

Available Formats

Short Message Service Centre 4.

Document Version: 4.6

Preface .................................................................................................................... xiii

2 Structure of EMI Operations .............................................................................. 5

3 EMI Operations ................................................................................................... 7

4 EMI Operations Syntax..................................................................................... 11

5 50-Series of EMI Operations ............................................................................ 12

© 2003 CMG Wireless Data Solutions — Table of Contents iii

6 60-Series of EMI Operations ............................................................................ 49

7 SMT Alert Operation ......................................................................................... 56

8 Legacy Operations Syntax............................................................................... 58

9 Error Codes Overview ...................................................................................... 69

iv EMI - UCP Interface Specification — © 2003 CMG Wireless Data Solutions

10 Error Messages and Reason Codes in Notifications ..................................... 73

11 GSM 7-bit alphabet tables ................................................................................ 76

12 GSM 7-bit – Unicode mapping ......................................................................... 79

13 Protocol sequence example ............................................................................ 83

Appendix A. Changes with respect to previous versions.............................. 85

© 2003 CMG Wireless Data Solutions — Table of Contents v

Figure 1-1: EMI External View ................................................................................................................. 1

Figure 1-3: Protocol flow example ........................................................................................................... 3

© 2003 CMG Wireless Data Solutions — List of Figures vii

Table P-1: Typographic conventions .....................................................................................................xiv

Table 2-3: Fields Operation Header......................................................................................................... 5

Table 2-4: Character set examples.......................................................................................................... 6

Table 3-1: SMT Initiated Operations ........................................................................................................ 7

Table 3-2: SMSC Initiated Operations ..................................................................................................... 8

Table 3-3: Legacy SMT Initiated Operations ........................................................................................... 9

Table 3-4: Legacy SMSC Initiated Operations......................................................................................... 9

Table 5-1: 50-Series of Operations ........................................................................................................ 12

Table 5-2: Abstract Data Types 50-Series............................................................................................. 12

Table 5-3: Generic ADT for EMI Positive Response ............................................................................. 16

Table 5-4: Generic ADT for EMI Negative Response ............................................................................ 16

Table 5-5: Information Elements............................................................................................................ 20

Table 5-6: Message Type ...................................................................................................................... 20

Table 5-7: Message Reference.............................................................................................................. 21

Table 5-8: Privacy Indicator ................................................................................................................... 21

Table 5-9: Urgency Indicator.................................................................................................................. 22

Table 5-10: Acknowledgement Request ................................................................................................ 22

Table 5-11: Message Updating .............................................................................................................. 22

Table 5-12: Call Back Number ............................................................................................................... 23

Table 5-13: Call Back Number Nested Tag Codes................................................................................ 23

Table 5-14: Provision Bits ...................................................................................................................... 24

Table 5-15: Presentation Bits................................................................................................................. 24

Table 5-16: Response Code .................................................................................................................. 25

Table 5-17: Teleservice Identifier........................................................................................................... 25

Table 5-18: Single Shot Identifier........................................................................................................... 26

Table 5-19: Submit Short Message Operation....................................................................................... 27

© 2003 CMG Wireless Data Solutions — List of Tables ix

Table 5-23: Delivery Short Message Operation..................................................................................... 30

Table 5-26: Delivery Notification Operation ........................................................................................... 33

Table 5-29: Modify Short Message Operation ....................................................................................... 37

Table 5-33: Inquiry Message Operation................................................................................................. 39

Table 5-36: Response Inquiry Message Operation ............................................................................... 42

Table 5-39: Delete Message Operation ................................................................................................. 44

Table 5-45: Response Delete Message Operation................................................................................ 46

Table 6-1: 60-Series of EMI Messages.................................................................................................. 49

Table 6-2: Abstract Data Types 60-Series............................................................................................. 49

Table 6-3: Generic ADT for EMI Positive Response ............................................................................. 50

Table 6-4: Generic ADT for EMI Negative Response ............................................................................ 50

Denotes a “note”, a piece of text Note that the system is usually...