Description
Limited Service Mode (LSM) is a defined state for a User Equipment (UE) in 3GPP networks, governed primarily by security specification 33.401. In this mode, the UE's access to network services is severely restricted. The core capability retained is the ability to initiate emergency calls (e.g., 112, 911). Additionally, depending on regional regulations and network configuration, the UE may also be permitted to receive specific non-commercial services such as Public Warning System (PWS) messages, which include Earthquake and Tsunami Warning System (ETWS) and Commercial Mobile Alert System (CMAS) alerts. The UE is explicitly barred from accessing any other normal commercial telecommunication services like voice calls, SMS, or data sessions.
The UE enters LSM as a result of specific mobility management procedures. The most common trigger is a failed registration or location update attempt where the network rejects the UE's request with a cause value that indicates a "limited service" condition. This can occur if the UE is in a forbidden location area or tracking area, if it has an invalid or missing subscription (e.g., no SIM, or an unknown IMSI), or if it is attempting to register on a network that has no roaming agreement with its home operator. Upon receiving such a reject, the UE's Mobility Management (MM) or Connection Management (CM) entity transitions to LSM. In this state, the UE will typically stop attempting normal periodic registration updates but will continue to scan for suitable cells to camp on for the purpose of emergency access.
While in LSM, the UE performs cell selection and reselection to camp on an acceptable cell, but the criteria are relaxed compared to normal service mode. The UE must camp on a cell that belongs to a Public Land Mobile Network (PLMN) that is considered acceptable for emergency calls—this is often the highest priority PLMN from the list of available networks. The UE maintains this camped state to monitor the paging channel for potential ETWS/CMAS notifications and to be ready to initiate an emergency call establishment procedure. The radio resource control (RRC) layer may be in idle mode or initiate a connection specifically for the emergency service. The LSM state ensures regulatory compliance for emergency access and public safety, providing a critical lifeline function regardless of the user's subscription status or location.
Purpose & Motivation
Limited Service Mode was created to fulfill critical regulatory and safety requirements mandated by law in most countries: guaranteeing access to emergency services for any person with a capable mobile device, irrespective of their relationship with a mobile network operator. Without LSM, a UE with an invalid SIM, an out-of-coverage subscription, or in a forbidden roaming area would be rendered completely useless, unable to even dial emergency numbers. This poses a significant public safety risk.
Prior to the formalization of such modes, implementations were ad-hoc and not interoperable. LSM standardizes the UE behavior, ensuring consistent and reliable emergency access across all 3GPP-compliant networks and devices. It solves the problem of how a UE should behave when it is effectively 'out of service' for normal commercial purposes but must still fulfill its role as a potential lifeline. The mode carefully balances this access with network security and integrity by strictly limiting the services available, preventing unauthorized use of network resources for non-emergency purposes.
Furthermore, LSM incorporates the delivery of government-mandated public warning messages (ETWS/CMAS). This expansion of its purpose recognizes that in disaster scenarios, individuals may not have a valid subscription, but receiving life-saving alerts is equally as important as placing an emergency call. Thus, LSM evolved from a simple 'emergency calls only' concept to a standardized state supporting a minimal set of legally required services, ensuring universal accessibility for public safety functions within the 3GPP ecosystem.
Key Features
- Restricts UE to emergency calls and legally mandated services like ETWS/CMAS alerts.
- Triggered by network registration rejections with specific 'limited service' cause values.
- UE performs cell selection/camping on PLMNs acceptable for emergency service access.
- Suspends normal periodic registration updates while in the mode.
- Ensures regulatory compliance for universal emergency access.
- Defined behavior prevents misuse of network resources for non-emergency communication.
Evolution Across Releases
Limited Service Mode was formally specified in 3GPP TS 33.401 as part of the SA3 security architecture. It defined the fundamental principles, triggers, and permitted services (emergency calls) for this state, establishing a baseline for interoperable UE behavior during access failures.
Defining Specifications
| Specification | Title |
|---|---|
| TS 33.401 | 3GPP TR 33.401 |