Emergency — emergency calls (emergency calls in the 5GC)¶
Learning objectives¶
After reading this chapter, you will be able to:
- Explain what an emergency call (Emergency) is different about compared with an ordinary voice call (VoNR).
- Explain the mechanism by which a UE that cannot receive ordinary services (no SIM / cannot authenticate / restricted in the serving area) can nonetheless have its emergency call accepted.
- Explain why a dedicated registration type called Emergency Registration exists.
- Explain, without asserting, that skipping authentication (NIA0/NEA0) may be permitted in a "regulatory- and operator-policy-dependent" manner.
- Diagram the flow by which an emergency call is established on top of an emergency PDU Session and priority assurance (ARP, etc.).
Prerequisites¶
- VoNR (Voice over NR) — an emergency call is a special case of a voice call. It shares the foundation of IMS + QoS Flow.
- Registration (initial registration) — on top of understanding ordinary registration, this layers on a separate type called "emergency registration."
- Authentication — the biggest difference is that authentication may be skipped for an emergency call.
- Security — the context for NIA0/NEA0 (Null algorithms).
- Supplementary: AMF / SMF / PCF / AUSF
What you'll learn in this chapter¶
- Why — why only emergency calls get special treatment.
- Basic Concept — the idea that "even when the gate for ordinary service is closed, only the emergency window is kept open."
- The three differences unique to emergency calls — acceptance of unregistered UEs, skipping authentication, and priority.
- Architecture — the actors of the 5GC, IMS, and PSAP involved in an emergency call.
- Procedure — Call Flow — emergency registration → emergency PDU Session → emergency call establishment.
- The positioning of NIA0/NEA0 — permitting Null algorithms for UEs that cannot be authenticated (regulatory/implementation-dependent).
- Comparison with VoNR / Release differences / Trouble Shooting / FAQ / Practice
Why — why only emergency calls get special treatment¶
Normally, the 5GC provides service only to "UEs that have registered correctly and passed authentication." A UE with no SIM, that fails authentication, or that is restricted in its serving area — such a UE is denied ordinary service.
However, emergency calls (110/119/911, etc.) are the exception. Because lives are at stake, the regulations of many countries require operators to "establish emergency calls as far as possible, even for UEs that cannot receive ordinary service." Here lies the fundamental reason for treating emergency calls separately from ordinary calls.
The main ways an emergency call differs from an ordinary call are the following three points.
- Acceptance of unregistered UEs — even a UE that would normally be rejected may be allowed a special registration purely for the emergency call (Emergency Registration).
- Possibility of skipping authentication — for a UE that cannot be authenticated, an emergency call may be permitted with no encryption or integrity protection (NIA0/NEA0 = Null algorithms).
- Priority — an emergency call is top priority. Resources are secured preferentially even under congestion (ARP, etc.).
An important premise of this chapter: regulatory- and operator-policy-dependent
"Whether an unregistered UE's emergency call is accepted," "whether authentication can be skipped," and "whether NIA0/NEA0 is permitted" depend heavily on the country's regulations, the operator's policy, and the implementation. In some regions there are configurations that do not allow unauthenticated emergency calls at all. This chapter explains the framework that 3GPP makes possible, but whether it is actually in effect cannot be asserted. From here on, these are repeatedly marked as "regulatory/implementation-dependent."
Overview¶
An emergency call, too, is built on the same foundation as an ordinary VoNR: IMS (call control) + the 5GC's QoS Flow (the guaranteed lane). What differs is "how far the entrance gate is opened" and "priority."
- The registration entrance — even when a UE cannot register normally, it can obtain minimal acceptance via a separate type called Emergency Registration (regulatory/implementation-dependent).
- The authentication gate — for a UE that cannot be authenticated, there can be a configuration that lets it through with no encryption (NIA0/NEA0) (regulatory/implementation-dependent).
- The emergency path — it sets up a PDU Session (emergency DNN) dedicated to the emergency call, selects the emergency P-CSCF to reach IMS, and ultimately connects to the PSAP (the emergency call answering authority).
- Priority — the emergency call's QoS Flow is secured with priority via ARP (Allocation and Retention Priority), etc., and is protected even under congestion.
Basic Concept — a beginner-friendly explanation¶
An emergency call can be likened to "the emergency side door of a building closed for the night."
- The ordinary front entrance (ordinary registration and authentication) cannot be entered without ID (SIM/authentication).
- However, only the emergency side door is opened for the sake of human life even when ID cannot be verified (whether it is opened depends on the policy of the building = operator/regulation).
- Once inside, you are guided to the emergency contact (PSAP) with top priority. You are let through ahead of other visitors (priority).
In short, an emergency call is "a limited, top-priority alternate route for UEs that cannot pass the ordinary gate." What differs decisively from ordinary VoNR, however, is that whether the side door is opened at all is itself a regulatory and operator decision.
Column: IMS emergency call and the PSAP (minimal)
An emergency call also uses IMS, just like VoNR, but the UE selects not the ordinary P-CSCF but the emergency P-CSCF (Emergency P-CSCF). IMS detects the emergency call and routes it to the PSAP (Public Safety Answering Point = the emergency call answering authority; equivalent to the 110/119 answering desks in Japan). The details of the IMS emergency call are specified in 3GPP TS 23.167 (IMS Emergency Sessions) (this chapter gives only an overview; to be checked). The focus on the 5GC side is the touchpoint of "setting up an emergency PDU Session/DNN and guiding to the emergency P-CSCF."
The three differences unique to emergency calls (differences from VoNR)¶
The ordinary VoNR voice-call establishment flow (IMS PDU Session → SIP registration → voice QoS Flow) is left to the VoNR chapter; here we concentrate on the differences unique to emergency calls.
| Aspect | Ordinary VoNR | Emergency call (Emergency) | Regulatory/implementation-dependent |
|---|---|---|---|
| Registration | Ordinary Registration (authentication mandatory) | Emergency Registration (emergency registration type). Unregistered UEs may also be accepted | ○ (whether accepted depends on policy) |
| Authentication | Mandatory (AKA) | May be permitted with NIA0/NEA0 for a UE that cannot be authenticated | ○ (whether permitted depends on policy) |
| PDU Session | DNN=ims (ordinary IMS) | A dedicated session on the emergency DNN (for Emergency) | Partly (the DNN value is implementation-dependent) |
| P-CSCF | Ordinary P-CSCF | Selects the emergency P-CSCF | — |
| Priority | Ordinary 5QI priority | Secured with top priority via ARP, etc. | Partly |
| Destination | A general party (phone number) | PSAP (the emergency call answering authority) | — |
Architecture¶
graph LR
UE["UE
(even unregistered)"] -- "N1(NAS: Emergency Registration)" --> AMF["AMF"]
UE -- "Emergency call(SIP/RTP)" --> IMS["IMS
(emergency P-CSCF=AF)"]
AMF -- "N11" --> SMF["SMF"]
SMF -- "N4" --> UPF["UPF"]
IMS -- "N5" --> PCF["PCF"]
PCF -- "N7" --> SMF
SMF -- "N2(via AMF)" --> RAN["NG-RAN"]
UPF -- "N6(emergency DNN)" --> IMS
IMS -- "Emergency call routing" --> PSAP["PSAP
(emergency call answering authority)"]
How to read the diagram: the skeleton is the same as ordinary VoNR, but the entrance differs. The UE requests Emergency Registration on the AMF over N1 (NAS) (even a UE that cannot register normally may be accepted). Authentication may be skipped (NIA0/NEA0, regulatory/implementation-dependent). Thereafter it sets up a PDU Session on the emergency DNN (UE⇔UPF⇔N6⇔IMS), the emergency P-CSCF requests priority-tagged QoS from the PCF over N5 as an AF, and the emergency call is ultimately routed to the PSAP.
Network Function¶
| NF | Role | Special handling for emergency calls | Related Interfaces | Impact on failure |
|---|---|---|---|---|
| AMF | Registration / NAS control | Accepts Emergency Registration. Decides on skipping authentication (NIA0/NEA0) (regulatory/implementation-dependent) | N1, N2, N11 | Emergency registration impossible |
| SMF | Emergency PDU Session establishment | Establishes the session on the emergency DNN, reflects priority | N11, N7, N4 | Emergency session establishment impossible |
| PCF | Determines QoS/priority policy | Generates a policy including the priority (ARP, etc.) for the emergency call | N5, N7 | Priority assurance for the emergency call impossible |
| AUSF | Authentication | May be bypassed for a UE that cannot be authenticated (regulatory/implementation-dependent) | — | (Impact is limited when authentication is skipped) |
| IMS (emergency P-CSCF) | The entrance of emergency call control. Behaves as an AF | Detects the emergency call and routes it to the PSAP | N5 | Emergency call establishment impossible |
Interface¶
| Interface | Endpoints | Transport | Protocol | Port | Procedure used |
|---|---|---|---|---|---|
| N1 | UE ⇔ AMF | (NAS over N2) | NAS(5GMM/5GSM) | — | Emergency Registration Request |
| N11 | AMF ⇔ SMF | TCP | SBI(HTTP/2/TLS) | implementation-dependent | Emergency PDU Session establishment (Nsmf_PDUSession) |
| N7 | SMF ⇔ PCF | TCP | SBI(HTTP/2/TLS) | implementation-dependent | Priority-tagged session policy (Npcf_SMPolicyControl) |
| N5 | AF(emergency P-CSCF) ⇔ PCF | TCP | SBI(HTTP/2/TLS) | implementation-dependent | QoS authorization for the emergency call (Npcf_PolicyAuthorization) |
Procedure — Call Flow¶
Understand an emergency call in three stages: (A) Emergency Registration → (B) emergency PDU Session establishment → (C) IMS emergency call establishment (to the PSAP). Pay attention to the differences from VoNR (acceptance of unregistered UEs, skipping authentication, and priority).
sequenceDiagram
participant UE
participant AMF
participant AUSF
participant SMF
participant PCF
participant IMS as IMS(emergency P-CSCF=AF)
participant PSAP
Note over UE,AMF: (A) Emergency Registration (unregistered UEs may also be accepted)
UE->>AMF: Registration Request (5GS registration type = Emergency)
alt When authentication is possible
AMF->>AUSF: Authentication
AUSF-->>AMF: Authentication success
else When authentication is not possible (regulatory/implementation-dependent)
Note over AMF,AUSF: Skip authentication → may continue with NIA0/NEA0 (Null)
end
AMF-->>UE: Registration Accept (Emergency Registered)
Note over UE,SMF: (B) Emergency PDU Session establishment (emergency DNN)
UE->>SMF: PDU Session Establishment Request (for Emergency)
SMF->>PCF: N7 SM Policy (priority: ARP, etc.)
SMF-->>UE: Emergency PDU Session established
Note over UE,PSAP: (C) IMS emergency call establishment
UE->>IMS: SIP INVITE (emergency call, emergency P-CSCF)
IMS->>PCF: N5 Npcf_PolicyAuthorization (priority QoS request)
PCF->>SMF: N7 SM Policy update (5QI=1 GBR + priority ARP)
IMS->>PSAP: Emergency call routing
UE->>PSAP: Call established (RTP voice)
Explanation of the procedure:
- (A) Emergency Registration — the UE sends a Registration Request with the registration type set to "Emergency." Even a UE that cannot register normally (no SIM / cannot authenticate / restricted in the serving area) may have this emergency registration accepted (regulatory/implementation-dependent). When authentication is possible it authenticates as usual, but when authentication is not possible there can be a configuration that skips authentication and continues with NIA0/NEA0 (Null algorithms) (regulatory/implementation-dependent).
- (B) Emergency PDU Session establishment — the UE establishes a dedicated PDU Session on the emergency DNN. At this time the PCF passes a policy including the priority (ARP, etc.), and the SMF secures it with priority.
- (C) IMS emergency call establishment — the UE sends a SIP INVITE to the emergency P-CSCF, and the P-CSCF requests priority QoS (5QI=1, GBR + priority ARP) from the PCF over N5 as an AF. IMS detects the emergency call, routes it to the PSAP, and the voice (RTP) is established. The establishment mechanism of the voice QoS Flow itself is the same as (C) in VoNR.
Callback (a call-back from the PSAP)
For an emergency call, it may be required that the PSAP can originate a call back to the UE (callback) after disconnection. For this reason, care is taken to maintain the emergency registration state for a certain period, etc. (the details and the retention time are regulatory/implementation-dependent; to be confirmed).
Signal Flow¶
| Signal | Purpose | Source | Destination | Key IEs | Result |
|---|---|---|---|---|---|
| Registration Request (Emergency) | Request emergency registration | UE | AMF | 5GS registration type=Emergency | Emergency registration accepted (regulatory/implementation-dependent) |
| (When authentication is skipped) — | Bypass authentication | AMF | — | NIA0/NEA0 selection | Continue with Null algorithms (regulatory/implementation-dependent) |
| PDU Session Establishment Request | Create the emergency path | UE | SMF | Emergency DNN, S-NSSAI | Emergency PDU Session established |
| SM Policy(N7, priority) | Reflect priority | PCF | SMF | ARP, etc. | QoS Flow with priority assurance |
| SIP INVITE (emergency call) | Emergency origination | UE | IMS(emergency P-CSCF) | Emergency call URN, etc. | The starting point of routing to the PSAP |
| Npcf_PolicyAuthorization | Request authorization of priority QoS | AF(emergency P-CSCF) | PCF | Requested QoS (priority) | The PCF generates a priority PCC rule |
The positioning of NIA0/NEA0 (Null algorithms)¶
When accepting a UE that cannot be authenticated for an emergency call, Null algorithms that apply no encryption or integrity protection may be used.
| Abbreviation | Full name | Role | Normal case | Emergency call (when authentication is impossible) |
|---|---|---|---|---|
| NIA0 | Null Integrity Algorithm | No integrity protection | Not used | May be permitted for an emergency call that cannot be authenticated |
| NEA0 | Null Ciphering Algorithm | No encryption | Not used | May be permitted for an emergency call that cannot be authenticated |
NIA0/NEA0 is a regulatory- and implementation-dependent exception
NIA0/NEA0 (Null algorithms) are specified in the TS 33.501 series and are exceptions that may be permitted only in the limited situation of an emergency call by a UE that cannot be authenticated. Using them for an ordinary call would be a serious security risk. Whether they are actually permitted, and under which conditions, depends on the country's regulations, the operator's policy, and the implementation (this chapter does not assert; the detailed conditions and section numbers are to be confirmed against TS 33.501). For a general explanation of security algorithms, see the Security chapter.
Comparison with VoNR¶
- Commonalities: both are established on IMS (call control) + the 5GC's QoS Flow (the guaranteed lane). The establishment mechanism of the voice QoS Flow (the P-CSCF requests QoS from the PCF over N5 as an AF → PCF→N7→SMF→N4/N2) is the same, using 5QI=1 (conversational voice, GBR) / 5QI=5 (IMS signaling, Non-GBR) (the standardized 5QIs of TS 23.501 §5.7.4).
- Differences: an emergency call differs in that it (1) may accept an unregistered UE (Emergency Registration) / (2) may skip authentication (NIA0/NEA0) / (3) is secured with top priority (ARP, etc.) / (4) connects to the PSAP via the emergency P-CSCF. Items (1) and (2) depend heavily on regulatory and operator policy.
Release differences¶
- Rel-15: the framework of IMS emergency calls and emergency registration in 5GS was specified. However, in early deployments there were many areas where VoNR/emergency calls were not provided, and there were operations in which emergency calls fell back to 4G (EPS) (in the context of EPS Fallback).
- Rel-16 and later: enhancements related to emergency calls and emergency services. The detailed feature additions and section numbers are to be confirmed against each TS (this chapter does not assert).
Trouble Shooting¶
| Symptom | Presumed cause | What to check | Related logs/Packets | Direction of remedy |
|---|---|---|---|---|
| An unregistered UE's emergency call is rejected | Emergency registration is disabled | The AMF's emergency service configuration (regulatory/implementation-dependent) | AMF logs, N1 NAS | Check the policy; to be confirmed |
| An emergency call fails for a UE that cannot be authenticated | NIA0/NEA0 is not permitted | The security policy configuration | AMF/authentication logs | Check the regulatory/operator policy; to be confirmed |
| An emergency call cannot be established | The emergency DNN/P-CSCF is not configured | The emergency DNN / emergency P-CSCF configuration | SMF logs, SIP trace | Check the emergency configuration |
| An emergency call is not secured under congestion | The priority (ARP, etc.) is not configured | The ARP configuration for the emergency call | N7 PCC rule, N2 | Check the PCF's priority policy |
| Cannot connect to the PSAP | A deficiency in the emergency call routing on the IMS side | The PSAP routing configuration | SIP trace | The IMS/PSAP configuration; to be confirmed |
3GPP Specification¶
- 3GPP TS 23.501 — 5G system architecture. General provisions for emergency services (section number to be confirmed)
- 3GPP TS 23.502 — Procedures. The procedures for emergency registration and emergency PDU Session establishment (section number to be confirmed)
- 3GPP TS 24.501 — NAS (5GMM/5GSM). The emergency registration type (registration type=Emergency), etc. (section number to be confirmed)
- 3GPP TS 33.501 — Security. The conditions for permitting emergency calls by UEs that cannot be authenticated and NIA0/NEA0 (Null algorithms) (section number to be confirmed)
- 3GPP TS 23.167 — IMS Emergency Sessions (IMS emergency calls and PSAP routing; this chapter gives only an overview; to be checked)
- 3GPP TS 23.501 §5.7.4 — the standardized 5QI table (5QI=1 conversational voice/GBR, 5QI=5 IMS signaling/Non-GBR; even an emergency call uses these for voice)
FAQ¶
Q. Can I make an emergency call even with a smartphone that has no SIM? A. It depends on the regulations, the operator's policy, and the implementation. In the 3GPP framework, there is a mechanism to accept an emergency call via Emergency Registration even for a UE that cannot register normally, but whether it is actually in effect depends on the country's regulations and the operator's configuration, and cannot be asserted.
Q. How does an emergency call by a UE that cannot be authenticated communicate? A. There can be a configuration in which it continues with no encryption or integrity protection by means of NIA0/NEA0 (Null algorithms) (the TS 33.501 series, regulatory/implementation-dependent). This is an exception for the limited situation of an emergency call and is not used for ordinary calls.
Q. Does an emergency call use the same IMS as an ordinary call? A. It uses IMS in the same way, but the UE selects the emergency P-CSCF, and IMS detects the emergency call and routes it to the PSAP (the emergency call answering authority). The establishment mechanism of the voice QoS Flow itself is common with VoNR.
Q. Do emergency calls get through even under congestion? A. Because an emergency call is secured with top priority via ARP (Allocation and Retention Priority), etc., it is prioritized over ordinary calls even under congestion (the degree of priority is in part implementation-dependent).
Summary¶
- An emergency call (Emergency) is a special case of a voice call (VoNR); the foundation (IMS + QoS Flow) is common, but "the entrance gate" and "priority" differ.
- The differences unique to emergency calls are the four points: (1) acceptance of unregistered UEs (Emergency Registration) / (2) skipping authentication (NIA0/NEA0) / (3) top-priority assurance (ARP, etc.) / (4) reaching the PSAP via the emergency P-CSCF.
- (1) acceptance of unregistered UEs, (2) skipping authentication, and permitting NIA0/NEA0 depend heavily on the country's regulations, the operator's policy, and the implementation, and cannot be asserted.
- The procedure is in the order (A) Emergency Registration → (B) emergency PDU Session (emergency DNN) → (C) IMS emergency call (to the PSAP).
- The voice itself uses the same 5QI=1 (conversational voice, GBR) as ordinary VoNR (TS 23.501 §5.7.4).
Practice — comprehension check and exercises¶
Comprehension check¶
Q1. Name three main ways an emergency call differs from ordinary VoNR.
(1) Acceptance of unregistered UEs (Emergency Registration may accept even a UE that cannot register normally), (2) the possibility of skipping authentication (Null algorithms NIA0/NEA0 may be permitted for a UE that cannot be authenticated), and (3) priority (secured with top priority via ARP, etc.). Note that both (1) and (2) depend heavily on regulatory and operator policy.
Q2. What are NIA0/NEA0, and when may they be used?
NIA0 is the Null Integrity Algorithm (no integrity protection), and NEA0 is the Null Ciphering Algorithm (no encryption). They may be permitted only in the limited situation of an emergency call by a UE that cannot be authenticated (the TS 33.501 series, regulatory/implementation-dependent). They are not used for ordinary calls.
Q3. Is the establishment mechanism of the voice QoS Flow different between an emergency call and ordinary VoNR?
The mechanism itself is common. The emergency P-CSCF requests QoS from the PCF over N5 as an AF, and PCF→N7→SMF→(N4 UPF/N2 NG-RAN) lays down a 5QI=1 (conversational voice, GBR) QoS Flow. For an emergency call, the priority (ARP, etc.) and the emergency P-CSCF/DNN and PSAP routing additionally differ.
Exercises¶
- Try to draw a diagram of where the Call Flow is the same and where it differs between ordinary Registration and Emergency Registration (hint: focus on the handling of the authentication step).
- Try to organize the conditions under which "an emergency call from a SIM-less smartphone" is established, from the perspectives of regulation, operator policy, and NIA0/NEA0 (the trick is to avoid assertions and express it in terms of dependencies).
Next Step¶
- VoNR (Voice over NR) — return to the ordinary voice call that is the foundation of the emergency call and deepen it.
- Authentication — confirm the original form of the authentication that may be skipped for an emergency call.
- Security — the overall picture of security algorithms, including NIA0/NEA0.
- QoS (5G QoS model) — the details of priority assurance such as ARP, 5QI, and GBR.