HiCellTek HiCellTek
Key Takeaway

This glossary covers 127 technical terms used in mobile network diagnostics, from 2G (GSM) to 5G NR. Each term includes a practical field-oriented definition, operational thresholds where applicable, and a link to an in-depth guide. This is the reference used by RF engineers working with HiCellTek daily.

Reference

Telecom Glossary 2G/3G/4G/5G

Essential technical terms for mobile network diagnostics, from 2G to 5G. Each definition links to an in-depth article when available.

127 terms Β· 8 categories Β· Updated March 2026

KPI Thresholds. Quick Reference

The most commonly used operational thresholds in the field, from 2G to 5G.

KPI Technology Excellent Good Weak
RSRP 4G / 5G > -80 dBm -80 to -100 < -110
SINR 4G / 5G > 20 dB 10 to 20 < 0
RSRQ 4G / 5G > -10 dB -10 to -15 < -15
RSCP 3G > -85 dBm -85 to -105 < -105
Ec/No 3G > -8 dB -8 to -14 < -14
RxLev 2G > -75 dBm -75 to -95 < -95
MOS Voice > 4.0 3.0 to 4.0 < 3.0

These thresholds are indicative values. Exact thresholds vary by operator and context (indoor/outdoor, dense/rural). Complete RSRP/RSRQ/SINR guide β†’

5G NR

24 terms
5QI β€” 5G QoS Identifier

QoS identifier in 5G NR, equivalent to QCI in LTE. Each 5QI defines resource type (GBR/non-GBR), priority, latency budget, and error rate. 5QI 1 = conversational VoNR.

Learn more β†’
AMF β€” Access and Mobility Management Function

5G core function that handles NAS signaling, registration, mobility, and UE security. Equivalent to the MME in LTE.

Learn more β†’
Beam Sweeping β€” Beam Sweeping

5G NR mechanism where the gNB transmits SSBs sequentially in different directions to cover the entire cell. The UE measures SSB-RSRP of each beam to select the best one.

Learn more β†’
Beamforming β€” Beam Formation

Antenna processing technique that concentrates radio energy in a precise direction using an antenna array (massive MIMO). Essential in 5G NR, especially in mmWave.

Learn more β†’
BWP β€” Bandwidth Part

Configurable portion of the total 5G NR carrier bandwidth. Allows dynamic UE bandwidth adaptation to save power or increase capacity.

Learn more β†’
CSI-RS β€” Channel State Information Reference Signal

5G NR reference signal used for channel estimation, CSI reporting (CQI, RI, PMI), and mobility management. More flexible than the LTE CRS.

Learn more β†’
DMRS β€” Demodulation Reference Signal

Reference signal used for coherent demodulation of data and control channels in 5G NR. Transmitted alongside data in the same PRBs.

Learn more β†’
EN-DC β€” E-UTRA NR Dual Connectivity

NSA mode where the UE is simultaneously connected to an eNB (LTE, anchor) and a gNB (NR, secondary). First 5G deployment mode.

Learn more β†’
FR1 β€” Frequency Range 1

5G NR sub-6 GHz bands (410 MHz to 7,125 MHz). Coverage similar to LTE with higher throughput. Dominant deployment in Europe and Africa.

Learn more β†’
FR2 β€” Frequency Range 2

5G NR mmWave bands (24.25 GHz to 52.6 GHz). Very high throughput but limited range. Primarily used in dense indoor environments (stadiums, airports).

Learn more β†’
gNB β€” gNodeB

5G NR base station. Equivalent of eNodeB in LTE. Manages the radio layer and UE RRC connections.

Learn more β†’
mmWave β€” Millimeter Wave

Millimeter waves (24 to 100 GHz) used in 5G NR FR2. Deliver very high throughput (multi-Gbps) but limited propagation, requiring beamforming and dense deployment.

Learn more β†’
MRDC β€” Multi-RAT Dual Connectivity

Simultaneous LTE + NR dual connectivity. The UE uses an LTE PCell (anchor) and an NR PSCell. Foundation of NSA (Non-Standalone) mode.

Learn more β†’
NR-ARFCN β€” NR Absolute Radio Frequency Channel Number

Radio frequency channel number in 5G NR. Identifies the carrier frequency on FR1 (sub-6 GHz) and FR2 (mmWave) bands. Range: 0 to 3,279,165.

NSSAI β€” Network Slice Selection Assistance Information

Set of identifiers (S-NSSAI) sent by the UE to select the appropriate network slice. Each S-NSSAI contains an SST (service type) and an SD (differentiator).

Learn more β†’
PBCH β€” Physical Broadcast Channel

Physical broadcast channel in 5G NR, embedded within the SSB. Carries the MIB (Master Information Block) with essential system parameters for initial cell access.

Learn more β†’
PDU Session β€” Protocol Data Unit Session

Data session between the UE and the 5G network, equivalent to the EPS bearer in LTE. Each PDU session has a type (IPv4, IPv6, Ethernet) and can contain multiple QoS flows.

Learn more β†’
PRACH β€” Physical Random Access Channel

Physical random access channel used by the UE to initiate a connection with the network. In 5G NR, PRACH format is adapted to the band (FR1/FR2) and cell radius.

Learn more β†’
Slice β€” Network Slice

End-to-end logical 5G network instance, isolated and dedicated to a service type (eMBB, URLLC, mMTC). Enables guaranteed QoS levels per use case.

Learn more β†’
SMF β€” Session Management Function

5G core function responsible for PDU session management, IP allocation, and user plane (UPF) control. Separates signaling from data transport.

Learn more β†’
SRS β€” Sounding Reference Signal

Uplink reference signal transmitted by the UE to allow the network to estimate uplink channel quality. Used for uplink scheduling and reciprocal beamforming in TDD.

Learn more β†’
SSB β€” Synchronization Signal Block

5G NR synchronization block containing PSS, SSS, and PBCH. Each SSB corresponds to a beam. Up to 8 SSBs in sub-6 GHz, 64 in mmWave.

Learn more β†’
SSB-RSRP β€” SS-Block Reference Signal Received Power

Reference signal power measured on SSBs in 5G NR. Equivalent of LTE RSRP but measured per beam. Key for multi-beam mobility management.

Learn more β†’
UPF β€” User Plane Function

5G core function that handles the user plane: routing, GTP-U encapsulation, QoS rule enforcement, and packet inspection. Data traffic anchor point.

Learn more β†’

4G LTE

21 terms
A3 Event β€” A3 Measurement Event

LTE/NR measurement event triggered when a neighbor cell's RSRP exceeds the serving cell's by a configured offset. Primary trigger for intra-frequency handover.

Learn more β†’
B1 Event β€” B1 Measurement Event

Inter-RAT measurement event triggered when a cell on another technology (e.g. NR) exceeds an absolute threshold. Used for LTE to NR handovers (EN-DC).

Learn more β†’
BLER β€” Block Error Rate

Block error rate on the transport channel. Target: 10% under normal operation. High BLER triggers HARQ retransmissions and MCS reduction.

Learn more β†’
CA β€” Carrier Aggregation

Carrier aggregation: combining multiple frequency bands to increase throughput. PCell + SCell(s). Up to 5 CCs in LTE, more in NR.

Learn more β†’
CQI β€” Channel Quality Indicator

Channel quality indicator (0 to 15) reported by the UE to the network. Determines the MCS and modulation to apply. A high CQI enables 256QAM modulation and higher throughput.

Learn more β†’
CSFB β€” Circuit Switched Fallback

Fallback procedure to 2G/3G network for circuit-switched voice calls when VoLTE is not available. The UE leaves LTE during the call and returns when it ends.

Learn more β†’
eNB β€” eNodeB

LTE base station. Manages radio resources, scheduling, handover, and bearers for connected UEs.

Learn more β†’
Handover β€” Handover / Inter-cell Transfer

Transfer of a connection from one cell to another without service interruption. Triggered by measurement events (A3, B1). Critical for mobility.

Learn more β†’
HARQ β€” Hybrid Automatic Repeat Request

Hybrid retransmission mechanism combining FEC (forward error correction) and ARQ (retransmission). Up to 8 parallel processes in LTE. HARQ retransmissions increase the effective BLER.

Learn more β†’
MCS β€” Modulation and Coding Scheme

Index defining the modulation (QPSK, 16QAM, 64QAM, 256QAM) and coding rate. Dynamically adapted based on SINR (AMC).

Learn more β†’
PCI β€” Physical Cell Identity

Physical cell identifier (0-503 in LTE, 0-1007 in NR). Used to distinguish cells during measurements and handovers.

Learn more β†’
PMI β€” Precoding Matrix Indicator

Precoding matrix indicator reported by the UE for closed-loop beamforming. Selects the optimal matrix from the codebook to maximize MIMO throughput.

Learn more β†’
QCI β€” QoS Class Identifier

QoS class identifier in LTE (1 to 9+). Each QCI defines a priority profile, maximum latency, and error rate. QCI 1 = VoLTE, QCI 9 = best-effort data.

Learn more β†’
RI β€” Rank Indicator

MIMO rank indicator reported by the UE. Indicates the number of usable spatial layers (1 to 4 in LTE, up to 8 in NR). A high RI means good MIMO propagation conditions.

Learn more β†’
RLF β€” Radio Link Failure

Radio link failure detected when the T310 timer expires without recovery. Triggers an RRC re-establishment procedure or return to idle state. Key network quality indicator.

Learn more β†’
RSRP β€” Reference Signal Received Power

Reference signal power received by the UE, measured in dBm. Primary coverage indicator in LTE and 5G NR. Typical thresholds: > -80 dBm (excellent), -80 to -100 (good), < -110 (weak).

Learn more β†’
RSRQ β€” Reference Signal Received Quality

Reference signal quality, measured in dB. Combines RSRP and interference. Thresholds: > -10 dB (good), -10 to -15 (moderate), < -15 (degraded).

Learn more β†’
RSSI β€” Received Signal Strength Indicator

Total received power across the entire bandwidth, including useful signal + interference + thermal noise.

Learn more β†’
SINR β€” Signal to Interference plus Noise Ratio

Signal-to-interference-plus-noise ratio, in dB. Directly determines MCS and achievable throughput. Thresholds: > 20 dB (excellent), 10-20 (good), < 0 (critical).

Learn more β†’
T310 β€” Timer T310

RRC timer triggered upon radio problem detection (N310 consecutive out-of-sync). If T310 expires before recovery (N311 in-sync), an RLF is declared. Typical value: 1000 to 2000 ms.

Learn more β†’
TTT β€” Time to Trigger

Duration for which the handover condition (A3 event, B1 event, etc.) must remain true before triggering a MeasurementReport. Values: 0 to 5120 ms. A TTT that is too long can cause late handovers.

Learn more β†’

3G UMTS

8 terms
Ec/No β€” Energy per Chip to Noise Ratio

Chip energy to noise ratio in 3G, equivalent to SINR in LTE. Measured in dB. Thresholds: > -8 dB (good), < -14 dB (degraded). Determines achievable throughput.

Learn more β†’
HSPA β€” High Speed Packet Access

3G evolution comprising HSDPA (downlink, up to 42 Mbps) and HSUPA (uplink). Uses advanced modulations (16QAM, 64QAM) and fast scheduling (2ms TTI).

NodeB β€” Node B

3G (UMTS) base station. Manages the WCDMA radio interface. Controlled by an RNC (Radio Network Controller). Evolution: Home NodeB (femtocell).

PSC β€” Primary Scrambling Code

Primary scrambling code in 3G (0-511). Uniquely identifies a WCDMA cell, equivalent to PCI in LTE.

RAB β€” Radio Access Bearer

Radio access bearer in 3G. Defines connection characteristics (throughput, delay, error rate). Types: CS voice, PS data, simultaneous CS+PS.

Learn more β†’
RSCP β€” Received Signal Code Power

Received signal power in 3G (WCDMA), equivalent to RSRP in LTE. Measured in dBm on the CPICH. Thresholds: > -85 dBm (good), < -105 dBm (weak).

Learn more β†’
UMTS β€” Universal Mobile Telecommunications System

3G mobile standard based on WCDMA. Main bands: 2100 MHz (B1), 900 MHz (B8). Supports simultaneous CS voice and PS data.

WCDMA β€” Wideband Code Division Multiple Access

3G radio access technique using spread spectrum over 5 MHz bandwidth. Each user is identified by a unique scrambling code.

2G GSM

8 terms
ARFCN β€” Absolute Radio Frequency Channel Number

Radio frequency channel number in GSM/2G. Identifies the carrier frequency used. Each GSM band (900, 1800, etc.) has its ARFCN range.

BCCH β€” Broadcast Control Channel

2G broadcast control channel. Transmits system information (ARFCN, LAC, CI, BSIC) needed for cell selection and reselection.

BSIC β€” Base Station Identity Code

2G base station identity code, composed of NCC (3 bits) and BCC (3 bits). Used to distinguish cells on the same ARFCN.

BTS β€” Base Transceiver Station

2G (GSM) base station. Manages the radio interface with mobile devices. Controlled by a BSC (Base Station Controller).

GSM β€” Global System for Mobile Communications

2G mobile standard. Uses TDMA on 900/1800 MHz bands (Europe) or 850/1900 MHz (Americas). Foundation for circuit-switched (CS) voice and SMS.

LAC β€” Location Area Code

Location area code in 2G/3G. Identifies a group of cells for mobility management and incoming call paging.

RxLev β€” Received Signal Level

Received signal level in 2G (GSM), equivalent to RSRP in LTE. Measured in dBm, from -110 to -47 dBm. Thresholds: > -75 dBm (good), < -95 dBm (weak).

Learn more β†’
RxQual β€” Received Signal Quality

2G signal quality indicator, from 0 (best) to 7 (worst). Based on bit error rate (BER). RxQual > 5 indicates degraded quality.

QoE / Voice

8 terms
eSRVCC β€” Enhanced SRVCC

Enhanced version of SRVCC with faster transfer and reduced audio interruption during VoLTE to CS handover. Supports midcall transfer to 3G WCDMA in addition to 2G.

Learn more β†’
IMS β€” IP Multimedia Subsystem

Network infrastructure for IP multimedia services (VoLTE, ViLTE, RCS). Uses SIP for signaling and RTP for media.

Learn more β†’
MOS β€” Mean Opinion Score

Objective perceived quality score, from 1 (poor) to 5 (excellent). Used for voice (ViSQOL) and video (ITU-T P.1204.3). A MOS > 4.0 is considered HD quality.

Learn more β†’
QoE β€” Quality of Experience

Quality of experience as perceived by the end user. Objectively measured via voice MOS, video MOS, latency, jitter. Goes beyond radio KPIs.

Learn more β†’
QoS β€” Quality of Service

Network quality of service defined by technical KPIs: throughput, latency, packet loss, availability. QCI/5QI define QoS levels.

Learn more β†’
SRVCC β€” Single Radio Voice Call Continuity

VoLTE to CS (2G/3G) call handover procedure when LTE coverage is insufficient. Essential for call continuity in rural areas.

Learn more β†’
ViSQOL β€” Virtual Speech Quality Objective Listener

Objective voice quality measurement algorithm developed by Google. Produces a MOS score without listener panels. Used by HiCellTek for field VoLTE scoring.

Learn more β†’
VoLTE β€” Voice over LTE

Voice calls carried over the LTE network using the IMS protocol and a dedicated QCI 1 bearer. Codecs: AMR-NB, AMR-WB (HD Voice), EVS.

Learn more β†’

Protocols

7 terms
ASN.1 β€” Abstract Syntax Notation One

Standard notation for defining data structures in telecom protocols. LTE and NR RRC messages are encoded in ASN.1 (PER/UPER).

Learn more β†’
DIAG β€” Qualcomm DIAG Protocol

Proprietary Qualcomm protocol for accessing internal modem chipset logs (L1, L2, L3 layers, radio KPIs). Foundation of network diagnostics on Android smartphones with Qualcomm chipsets.

Learn more β†’
GTP β€” GPRS Tunneling Protocol

Tunneling protocol used in the mobile core network to transport user data (GTP-U) and signaling (GTP-C) between network nodes.

Learn more β†’
Layer 3 β€” Protocol Layer 3

Network signaling layer comprising RRC (radio), NAS (core), and IMS (services). Layer 3 decoding reveals network decisions.

Learn more β†’
NAS β€” Non-Access Stratum

Protocol between the UE and the core network (MME/AMF). Handles authentication, attachment, PDN/PDU session management. Messages: Attach, TAU, PDN Connectivity.

Learn more β†’
RRC β€” Radio Resource Control

Layer 3 protocol between the UE and the radio network (eNB/gNB). Manages connection, handover, measurements, UE capabilities. Key messages: RRCSetup, RRCReconfiguration, MeasurementReport.

Learn more β†’
SIP β€” Session Initiation Protocol

Signaling protocol used by IMS to establish, modify, and terminate multimedia sessions (VoLTE, ViLTE). Messages: INVITE, 200 OK, BYE, REGISTER.

Learn more β†’

IMEI / TAC

4 terms
CEIR β€” Central Equipment Identity Register

GSMA central database that lists blocked IMEIs (stolen/lost). Carriers query the CEIR to block devices reported stolen.

Learn more β†’
IMEI β€” International Mobile Equipment Identity

Unique 15-digit identifier assigned to every mobile device. Composed of the TAC (8 digits, model), SNR (6 digits, serial number), and a Luhn check digit.

Learn more β†’
MEID β€” Mobile Equipment Identifier

14-character hexadecimal identifier used on CDMA networks. Replaced by IMEI in modern LTE/5G networks.

Learn more β†’
TAC β€” Type Allocation Code

The first 8 digits of an IMEI, assigned by the GSMA. Identifies the manufacturer and exact device model. Used for network diagnostics and fleet management.

Learn more β†’

General

10 terms
Benchmark β€” Network Benchmark

Performance comparison of multiple operators on the same route (drive test) or area (walk test). Measures RSRP, throughput, latency, and voice quality under identical conditions.

Learn more β†’
CV β€” Coverage Verification

Post-deployment radio coverage verification process for a site. Performed via indoor walk test with comparison to contractual KPI thresholds (RSRP, SINR, throughput).

Learn more β†’
DAS β€” Distributed Antenna System

Distributed antenna system for indoor building coverage. Types: passive (coaxial cables), active (fiber + remote units), hybrid.

Learn more β†’
Drive Test β€” Mobile Field Test

Network measurements performed in a vehicle with geolocated radio KPI collection. Used to evaluate coverage, throughput, and quality along a route.

Learn more β†’
HLOG β€” HiCellTek Log Format

HiCellTek's encrypted proprietary format (chiffrement authentifiΓ©) for diagnostic sessions. Contains L1/L2/L3, KPIs, GPS position, and QoE data.

Learn more β†’
QCAT β€” Qualcomm eXtensible Diagnostic Monitor

Qualcomm post-processing analysis tool for decoding and visualizing QMDL/ISF files. Reference tool for Qualcomm chipset log decoding.

Learn more β†’
QMDL β€” Qualcomm Mobile Diagnostic Log

Qualcomm DIAG log file format. Compatible with post-processing analysis tools. HiCellTek exports native QMDL.

Learn more β†’
SSV β€” Site Survey Validation

Indoor site coverage validation through walk testing. Verifies that KPI thresholds (RSRP, SINR, throughput) are met.

Learn more β†’
UE β€” User Equipment

The user's mobile terminal (smartphone, modem, IoT). Its capabilities (UE Capabilities) determine which network features can be used.

Learn more β†’
Walk Test β€” Indoor Pedestrian Test

Network measurements performed on foot inside a building, typically on an imported floor plan. Used for indoor acceptance testing (SSV/CV).

Learn more β†’

5GC Architecture

14 terms
AMF β€” Access and Mobility Management Function

Manages UE mobility, registration, and authentication in 5G. Equivalent to the MME in 4G. Entry point for the terminal into the core network.

Learn more β†’
AUSF β€” Authentication Server Function

5G authentication server. Manages the 5G AKA protocol and validates authentication vectors with UDM. Ensures mutual UE-network authentication.

MEC β€” Multi-access Edge Computing

Deploying compute capacity at the network edge, closest to the user. Reduces latency for real-time applications (AR/VR, industrial automation, gaming).

NEF β€” Network Exposure Function

Exposes 5G network capabilities via REST APIs to third-party developers. Enables the telecom API economy: location, on-demand QoS, analytics.

Network Slicing β€” 5G Network Slicing

Partitioning a physical 5G network into logically isolated virtual networks, each with its own SLA (latency, throughput, reliability). Identified by S-NSSAI.

Learn more β†’
NRF β€” Network Repository Function

Central registry of all available 5G network functions. Service discovery for the SBA architecture, analogous to an internal DNS for the 5G core.

NSSF β€” Network Slice Selection Function

Selects the set of network slices (S-NSSAI) the user is entitled to during 5G registration.

NWDAF β€” Network Data Analytics Function

Collects and analyzes network data in real time. Congestion prediction, anomaly detection, automatic optimization. Enhanced with federated learning since R17.

PCF β€” Policy Control Function

Defines QoS, charging, and network access policies. Equivalent to PCRF in 4G. Works with SMF to enforce session rules.

S-NSSAI β€” Single Network Slice Selection Assistance Information

Unique identifier for a 5G network slice, composed of SST (slice type: eMBB=1, URLLC=2, mMTC=3) and SD (optional differentiator).

Learn more β†’
SBA β€” Service-Based Architecture

5G core network architecture where each function (AMF, SMF, UPF...) is an HTTP/2 microservice. Enables cloud-native deployment, Kubernetes scaling, and zero-downtime updates.

Learn more β†’
SMF β€” Session Management Function

Manages PDU data sessions (IP assignment, QoS, UPF routing). Separated from AMF in 5G, allowing independent scaling of mobility and sessions.

UDM β€” Unified Data Management

Stores subscriber data and subscription profiles. Equivalent to HSS in 4G. Contains encryption keys for 5G AKA authentication.

UPF β€” User Plane Function

Forwards user data packets. Can be deployed at the edge (MEC) to reduce latency. Key enabler for edge computing and private 5G networks.

NTN & Satellite

7 terms
D2D β€” Direct-to-Device

Direct communication between a satellite and a standard mobile terminal (smartphone or IoT) without an intermediate ground station. Goal of the U-DESERVE 5G project (CNES, France 2030).

EFC β€” Earth-Fixed Cell

NTN cell fixed on the ground. The satellite dynamically adjusts its beams to cover fixed geographic areas. Cell ID doesn't change for a stationary terminal.

Learn more β†’
EMC β€” Earth-Moving Cell

NTN cell that moves with the satellite at 27,000 km/h. A fixed terminal experiences frequent handovers (every few minutes). Legacy Iridium/Globalstar architecture.

Learn more β†’
LEO β€” Low Earth Orbit

Low orbit (300-1500 km). Radio latency 26 ms one-way (52 ms RTT). Satellites at 27,000 km/h. Constellation of hundreds to thousands of satellites required.

Learn more β†’
NTN β€” Non-Terrestrial Network

5G network using non-terrestrial platforms (LEO/MEO/GEO satellites, HAPS, drones) as 3GPP base stations. Standardized in Release 17 (TR 38.821).

Learn more β†’
Regenerative Payload β€” Regenerative Satellite Payload

NTN R18+ architecture where the satellite embeds gNB functions. Onboard processing, inter-satellite routing possible. Optimal performance but high complexity.

Learn more β†’
Transparent Payload β€” Transparent Satellite Payload

NTN R17 architecture where the satellite acts as a simple RF relay. Amplifies and retransmits without onboard processing. The 5G core stays on the ground.

Learn more β†’

Cellular IoT

6 terms
eDRX β€” Extended Discontinuous Reception

Extended radio sleep cycle (R13). Sleep up to 44 minutes between paging listens. Trade-off between energy savings and reachability time.

eRedCap β€” Enhanced Reduced Capability

R18 evolution with dual bandwidth architecture: 20 MHz RF (control) + 5 MHz data. Throughput capped at 10 Mbps. Replaces LTE Cat-1. Chipset cost reduced by 50%+.

LTE-M β€” LTE Machine Type Communication

3GPP IoT standard (R13). 1.4 MHz band, 1 Mbps throughput, supports voice and mobility. More versatile than NB-IoT for wearables, GPS trackers, alarms.

NB-IoT β€” Narrowband IoT

3GPP LPWAN standard (R13, 2016). Band < 200 kHz, max throughput 250 kbps, very low power consumption. Ideal for meters, sensors, tracking. Battery life 10+ years.

PSM β€” Power Saving Mode

IoT terminal deep sleep mode (R12). Terminal can sleep up to 413 days without disconnecting from the network. Battery life 15+ years for static sensors.

RedCap β€” Reduced Capability

Simplified 5G NR terminal (R17). 20 MHz band, 150 Mbps, replaces LTE Cat-4. Designed for surveillance cameras, service robots, advanced wearables.

Security

4 terms
5G AKA β€” 5G Authentication and Key Agreement

5G mutual authentication protocol. Based on authentication vectors (RAND, AUTN, XRES*, KAUSF). Both terminal and network prove their identity to each other.

ECIES β€” Elliptic Curve Integrated Encryption Scheme

Asymmetric encryption algorithm used to encrypt SUPI into SUCI. Based on elliptic curves. Operator's public key stored in SIM/eSIM.

SUCI β€” Subscription Concealed Identifier

Encrypted version of SUPI via ECIES (Elliptic Curve). Only the operator's UDM can decrypt. Makes 4G IMSI catchers ineffective on 5G SA networks.

Learn more β†’
SUPI β€” Subscription Permanent Identifier

Permanent subscriber identifier in 5G. Replaces IMSI. NEVER transmitted in clear over the air interface. Protects against subscriber tracking.

Learn more β†’

O-RAN

6 terms
O-CU β€” O-RAN Central Unit

Central unit of the gNB in O-RAN architecture. Manages PDCP and RRC protocols. Can be split into O-CU-CP (control plane) and O-CU-UP (user plane).

Learn more β†’
O-DU β€” O-RAN Distributed Unit

Distributed unit of the gNB in O-RAN architecture. Handles RLC, MAC layers and upper physical layer. Open Fronthaul interface to O-RU.

Learn more β†’
O-RAN β€” Open Radio Access Network

Open RAN architecture that disaggregates hardware and software with standardized interfaces. Aims to reduce dependency on proprietary vendors.

Learn more β†’
O-RU β€” O-RAN Radio Unit

Radio unit of the O-RAN gNB. Handles lower physical layer (FFT/iFFT, beamforming) and RF conversion. Connected to O-DU via split 7.2.

Learn more β†’
RIC β€” RAN Intelligent Controller

O-RAN's AI brain. Two types: Non-RT RIC (optimization > 1s, rApps) and Near-RT RIC (10 ms to 1 s, xApps). Open platform for RAN optimization.

Learn more β†’
Split 7.2 β€” Functional Split 7.2

Functional split point between O-DU and O-RU in O-RAN architecture. Separates upper PHY (O-DU) from lower PHY (O-RU). O-RAN Alliance standard.

Learn more β†’

Alphabetical Index

5
A
B
C
D
E
F
G
H
I
L
M
N
O
P
Q
R
S
T
U
V
W

Frequently Asked Questions

What is the difference between RSRP, RSRQ and SINR?

RSRP measures reference signal power (coverage), RSRQ measures quality by combining power and interference, and SINR measures the signal-to-noise ratio that directly determines achievable throughput. All three are essential for a complete network diagnostic. HiCellTek displays these three KPIs in real time in the RF Monitor module.

What is the 2G and 3G equivalent of RSRP?

In 2G (GSM), the equivalent is RxLev (Received Signal Level). In 3G (UMTS/WCDMA), it's RSCP (Received Signal Code Power). All three measure received signal power but on different radio technologies. HiCellTek supports all generations from 2G to 5G.

How to measure VoLTE voice MOS in the field?

VoLTE voice MOS is objectively measured using the ViSQOL algorithm, integrated in HiCellTek's VoLTE QoE module. It analyzes audio quality in real time during calls without requiring listener panels. A MOS > 4.0 corresponds to HD Voice quality.

What is the difference between EN-DC and SA in 5G?

EN-DC (E-UTRA NR Dual Connectivity) is the NSA (Non-Standalone) mode where the UE uses an LTE anchor + a secondary NR link. SA (Standalone) mode uses only the 5G core and gNB, with no LTE dependency. HiCellTek's L3 Decoder module decodes both modes in real time.

What is a TAC and how to check it?

The TAC (Type Allocation Code) is the first 8 digits of an IMEI. It identifies the manufacturer and exact device model. HiCellTek offers a free TAC/IMEI verification tool covering more than 250,000 devices in its database.

Measure these KPIs in real time

HiCellTek measures RSRP, SINR, MOS, decodes Layer 3 and exports to QMDL, directly on Android smartphones.