Description
Over The Air (OTA) in 3GPP refers to the mechanisms and procedures for the remote, wireless management of User Equipment (UE). This encompasses a broad range of functions, including firmware updates (FOTA), software updates (SOTA), application management, device configuration, and the provisioning of authentication credentials (e.g., for eSIM). The process is managed by network-based OTA platforms that communicate with the UE using standardized protocols over the cellular radio interface.
Architecturally, an OTA system involves several key components. The OTA server, operated by the mobile network operator (MNO), device manufacturer, or a service provider, hosts the update packages and manages the delivery campaigns. The UE contains an OTA client agent responsible for receiving notifications, downloading packages, verifying their integrity and authenticity (often using digital signatures), and executing the update process. Communication typically occurs via IP-based protocols (e.g., HTTPS) carried over the cellular data bearers. For critical updates like firmware, the process is carefully staged: the UE downloads the package, stores it in a secure partition, validates it, and then reboots into a secure mode to apply the update, ensuring robustness against power failure.
How it works involves a push or pull model. The server can initiate a session by sending a notification message to the UE (e.g., via SMS or a dedicated NAS transport). The UE then establishes a data connection to a specified URL to download the package. 3GPP specifications define security frameworks to protect OTA transactions, ensuring packages are not tampered with and only authorized servers can initiate updates. For RF performance testing, 'OTA' also refers to Over-the-Air radiated testing, where a device's total radiated power (TRP) and total isotropic sensitivity (TIS) are measured in an anechoic chamber. The provided definition, 'REFSENS RoAoA', is a specific OTA testing metric for determining a receiver's sensitivity contour relative to a reference direction, crucial for characterizing antenna performance in devices.
Purpose & Motivation
OTA technology was created to solve the massive logistical and cost problem of physically handling millions of devices for updates. Before OTA, fixing a software bug, patching a security vulnerability, or enabling a new network feature required users to bring devices to service centers or manually connect them to a computer, leading to poor update penetration and prolonged security risks.
3GPP standardized OTA procedures to enable efficient, scalable, and secure remote device management. This addresses critical operational needs: maintaining network compatibility as standards evolve (e.g., from 4G to 5G), rolling out critical security patches to protect the network and user data, and enabling new service features without hardware replacement. The motivation was to enhance the user experience, reduce support costs for operators and manufacturers, and ensure the long-term security and functionality of the massive ecosystem of cellular-connected devices. OTA is fundamental for the lifecycle management of everything from smartphones to IoT sensors.
What changed in its specifications
The latest release-to-release comparison of specifications that define OTA. Each summary describes the whole specification, not only this term.
Added free-space TRP and TRS minimum performance requirements for laptop mounted and embedded devices in data transfer position, covering FDD, GSM, and UTRA LCR TDD.
Full comparison in TS 25.144 →Rel-18 added new error responses to the Nspaf_SecuredPacket API and updated its version.
Full comparison in TS 29.544 →Release Timeline
Detected Changes Across Releases
from 3GPP Change RequestsSpecific changes extracted from the „Change history“ tables of 3GPP specifications (60 CRs across 5 releases). Complements the general historical overview above with the evidence-based evolution of this function.
- CR to TS 37.145-2 Correction on OTA test requirements TS 37.145CR0035
- CR to TS 37.145-2: Corrections on OTA Transmit ON/OFF power TS 37.145CR0042
- CR to TS 37.145-2: correction of the "EIRP accuracy directions set" into "OTA peak directions set" TS 37.145CR0047
- CR to TS 37.145-2: OTA Adjacent Channel Leakage Ratio (6.7.3) and OTA Operating band unwanted emissions (6.7.5) - corrections to text and tables TS 37.145CR0055
- Cleanup to OTA requirements text TS 37.145CR0065
- CR to TS 37.145-2 - polarisation wording improvements for OTA reference sensitivity TS 37.145CR0068
+ 3 more changes
- Number of Slots for NR MIMO OTA testing TS 38.827CR0004
- Uplink Power Control for NR MIMO OTA test TS 38.827CR0008
- Adding clarification of number of slots for FR1 MIMO OTA test TS 38.827CR0015
- CR to TS 37.145-2: Clarification on application of OTA receiver requirements for BS supporting polarization TS 37.145CR0150
- CR to 37.145-2: OTA ACLR R16 (6.7.3) TS 37.145CR0200
- CR to TS 37.145-2: internal TR references corrections (wrt. TR 37.941 for OTA BS testing), Rel-16 TS 37.145CR0228
+ 3 more changes
- Big CR to 38.151: Introduction MIMO OTA performance requirements (Rel-17, CAT B) TS 38.151CR0003
- CR on introduction of applicability rules for MIMO OTA requirements TS 38.151CR0022
- CR to TS 38.151 on FR1 MIMO OTA spatial correlation validation pass/fail limits TS 38.151CR0024
- CR to 38.151 on FR1 MIMO OTA MU TS 38.151CR0025
- (NR_MIMO_OTA-Core) Correction on the example inter-band band combination tables TS 38.151CR0029
- CR to TS 38.176-2 with bracket removal for measurement uncertainties for OTA timing error between IAB-DU and IAB-MT TS 38.176CR0017
+ 2 more changes
- CR to 38.151 on FR2 MIMO OTA FoM TS 38.151CR0032
- CR to 38.151 on MIMO OTA performance requirements TS 38.151CR0033
- CR to TS 38.151 on introduction of FR2 PC1 MIMO OTA performance metric TS 38.151CR0035
- Formal CR 38151 Clarification of UE positioning for FR1 MIMO OTA TS 38.151CR0040
- On FR2 MIMO OTA requirements TS 38.551CR0024
- Device Positioning for FR2 MIMO OTA Testing TS 38.551CR0031
+ 12 more changes
- CR to TS 37.145-2 OTA test reduction for out-of-band blocking requirement TS 37.145CR0411
- CR to TS 38.141-2 OTA test reduction for out-of-band blocking requirement TS 38.141CR0682
- CR to TS 38.141-2 OTA test case reduction for TX IM requirement TS 38.141CR0700
- CR to 38.151 on FR1 MIMO OTA performance requirements TS 38.151CR0056
- CR to TS 38.161 on NTN OTA TS 38.161CR0028
- CR to TS 38.176-2 OTA test case reduction for TX IM requirement and OOBB requirement TS 38.176CR0099
+ 10 more changes
Defining Specifications
3GPP specifications that define or reference OTA, with the latest known release. Sourced from the 3GPP document catalog — see methodology.
| Specification | Title | Release |
|---|---|---|
| TS 22.811 v720 | Network Selection Mechanism Analysis | Rel-7 read |
| TS 23.875 v510 | Push Services Architecture Feasibility Study | Rel-5 read |
| TR 23.981 vj00 | IPv4 IMS Interworking and Migration Study | Rel-19 read |
| TS 25.144 vb20 | UE OTA Antenna Performance Requirements | Rel-11 read |
| TS 26.851 vb20 | Enhancements to Multimedia (EMM) for PSS, MMS, MBMS | Rel-11 read |
| TS 29.544 vk00 | Nspaf Service Based Interface for 5G System | Rel-20 read |
| TS 31.131 vj00 | C Language Binding for (U)SIM API | Rel-19 read |
| TS 33.303 vj00 | ProSe Security Specification for EPS | Rel-19 read |
| TS 33.401 vj20 | EPS Security Architecture | Rel-19 read |
| TR 33.834 vg10 | Long Term Key Update Procedures Study | Rel-16 read |
| TR 33.841 vg10 | Security aspects; Study on 256-bit algorithms for 5G | Rel-16 read |
| TS 34.114 vc20 | Radiated Performance Test Procedure for UE/MS | Rel-12 read |
| TS 37.105 vj40 | AAS Base Station Radio Requirements | Rel-19 read |
| TS 37.144 vj00 | UE OTA Antenna Performance Requirements | Rel-19 read |
| TS 37.145 vj40 | AAS Base Station Radiated Requirements | Rel-19 read |
| TS 37.544 vg70 | UE Radiated Performance Test Procedures | Rel-16 read |
| TS 37.571 vj00 | UE Conformance for Positioning | Rel-19 read |
| TS 38.101 vj40 | UE Radio Transmission and Reception; Satellite Access | Rel-19 read |
| TS 38.104 vk10 | NR Base Station RF Requirements | Rel-20 read |
| TS 38.141 vj40 | BS Conformance Testing (TR 38.141) | Rel-19 read |
| TS 38.151 vj10 | MIMO OTA Performance Requirements for NR UEs | Rel-19 read |
| TS 38.161 vj30 | UE TRP and TRS Requirements | Rel-19 read |
| TS 38.174 vk00 | NR Integrated Access and Backhaul Requirements | Rel-20 read |
| TS 38.176 vj40 | IAB Conformance Testing | Rel-19 read |
| TS 38.521 vj10 | UE Conformance Spec for NR Satellite Access | Rel-19 read |
| TS 38.551 vj10 | NR MIMO OTA Performance Requirements | Rel-19 read |
| TS 38.561 vj20 | NR FR1 OTA TRP/TRS Conformance Testing | Rel-19 read |
| TS 38.755 vj10 | NR FR1 DL Fragmented Carriers Study | Rel-19 read |
| TS 38.761 vj00 | MIMO OTA Performance Measurements for UE | Rel-19 read |
| TS 38.762 vj10 | NR FR1 MIMO OTA Dynamic Test Methodology | Rel-19 read |
| TS 38.771 vj00 | FR2-1 OTA Testing for STxMP UEs | Rel-19 read |
| TS 38.793 vj00 | Simultaneous Rx/Tx Band Combinations TR | Rel-19 read |
| TS 38.803 ve50 | NR RF and Coexistence Study | Rel-14 read |
| TS 38.809 vg60 | IAB Radio Transmission & Reception Background | Rel-16 read |
| TR 38.810 vg70 | NR OTA Test Methods Study | Rel-16 read |
| TR 38.815 vf10 | NR Frequency Range 24.25-29.5 GHz Study | Rel-15 read |
| TR 38.820 vg10 | NR; 7-24 GHz Frequency Range Study | Rel-16 read |
| TS 38.827 vg80 | NR MIMO OTA Radiated Metrics & Test Methodology | Rel-16 read |
| TR 38.834 vh20 | NR FR1 TRP/TRS Test Methodology | Rel-17 read |
| TR 38.839 vh00 | Simultaneous Rx/Tx band combinations | Rel-17 read |
| TR 38.847 vh20 | NR 47.2-48.2 GHz Frequency Range | Rel-17 read |
| TR 38.849 vi50 | Technical Report | Rel-18 read |
| TS 38.870 vj50 | Enhanced OTA Test Methods for NR TRP and TRS | Rel-19 read |
| TR 38.871 vi20 | Technical Report | Rel-18 read |
| TR 38.881 vi00 | Technical Report on Lower MSD for Inter-band CA/EN-DC/DC | Rel-18 read |
| TR 38.884 vi20 | Technical Report | Rel-18 read |
| TS 38.887 vg00 | NR Band n259 Specification (39.5-43.5 GHz) | Rel-16 read |
| TR 38.894 vi00 | Technical Report | Rel-18 read |
| TR 38.903 vj40 | NR UE Test Tolerances and Uncertainties | Rel-19 read |
| TR 38.912 vj00 | Study on New Radio Access Technology | Rel-19 read |
| TR 38.921 vj00 | IMT Parameters Study for 6.4-7.1 & 10-10.5 GHz | Rel-19 read |
| TR 38.922 vj30 | IMT parameters study for NR in higher frequency ranges | Rel-19 read |