Automatic cell discovery of a source radio access network (RAN) cell by a neighboring, target ran by initiating a fake handover of a user equipment (UE) from the source RAN cell to the target RAN
Automatic cell discovery of a source radio access network (RAN) cell by a neighboring, target RAN by initiating a fake handover of a user equipment (UE) from a source RAN cell to a target RAN. A source RAN cell initiates a handover request using handover signaling to the target RAN(s). The handover request is a fake handover request without actual intention of handing over UE to the target RAN. The source RAN cell includes information in initiated handover request that can be used by target RAN to discover source RAN cell. The handover request will fail, because the handover request is not for any actual UE moving from the source RAN cell to the target RAN. However, the target RAN becomes aware of the source RAN cell as a result of this process and can add the source RAN cell (e.g., its EARFCN) to a list of its neighboring cells.
1. A method of a target radio access network (RAN) discovering a source RAN cell, comprising:
receiving a first signaling message for handing over a user equipment (UE) to the target RAN comprising a UE indicia identifying a UE not communicating with the source RAN cell and a source RAN cell indicia;
discovering the source RAN cell based on the source RAN cell indicia;
determining if the first signaling message is an actual handover initiation signaling message for a UE communicating with the source RAN cell based on at least one of the source RAN cell indicia and the UE indicia; and
in response to determining that the first signaling message is not an actual handover initiation signaling message, sending a second signaling message destined for the source RAN cell indicating that target RAN is not proceeding with the initiated handover.
2. The method of claim 1 , wherein the first signaling message comprises Third Generation Partnership Project (3GPP) handover signaling.
3. The method of claim 1 , wherein discovering the source RAN cell based on the source RAN cell indicia comprises determining an Evolved Universal Terrestrial Radio Access (E-UTRA) Absolute Radio Frequency Channel Number (EARFCN) for the source RAN cell based on the source RAN cell indicia.
4. The method of claim 1 , wherein the source RAN cell indicia comprises a public land mobile network (PLMN).
5. The method of claim 1 , wherein the source RAN cell indicia comprises a radio access systems band-identification (band ID).
6. The method of claim 1 , further comprising sending a second signaling message destined for the source RAN cell in response to receiving the first signaling message.
7. The method of claim 1 , further comprising:
receiving a third signaling message from the source RAN cell; and
canceling the initiated handover based on the first signaling message in response to receiving the third signaling message.
8. The method of claim 1 , further comprising, in response to determining if the first signaling message is an actual handover initiation signaling message, sending a third signaling message destined for the source RAN cell to initiate handover of a UE from the source RAN cell to the target RAN.
9. The method of claim 1 , wherein determining if the first signaling message is an actual handover initiation signaling message comprises determining if the first signaling message is an actual handover initiation signaling message for the UE communicating with the source RAN cell based on the source RAN cell indicia comprising pseudo UE identification identifying a UE identification for a UE that cannot communicate with the source RAN cell.