Citizens Broadband Radio Service (CBRS) opens up 150 MHz of spectrum in the 3.5 GHz band (3550-3700) for commercial use in the United States. This is spectrum traditionally used by the military and commercial satellite operators. In order to take advantage of CBRS, the network must employ a Spectrum Access System (SAS) with access to an Environmental Sensing Capability (ESC) network to dynamically manage the spectrum use.
The following terms will be discussed and defined in this section:
-
Spectrum Access System (SAS)
-
Priority Access License (PAL) and General Authorized Access (GAA)
-
Environmental Sensing Capability (ESC)
-
Citizens Broadband Radio Service Device (CBSD)
-
Domain Proxy (DP)
The Spectrum Access System (SAS) is a cloud-based automated frequency coordinator that grants, authorizes, and manages spectrum sharing among CBRS devices (CBSDs). Devices register with the SAS for spectrum assignment and moderation of their power transmit levels on a dynamic, as-needed basis across three tiers of access.
Note
Tarana Wireless supports both Google and Federated Wireless SASs.
-
Tier 1 includes incumbent users such as the federal government and fixed satellite users.
-
Tier 2 includes Priority Access License (PAL) users. These are licensed wireless users who acquire spectrum through an auction. The SAS will ensure PAL users do not cause harmful interference to Tier 1 users and will protect PAL users from interference by General Authorized Access (GAA) users.
-
Tier 3 includes GAA users who will deploy “lightly-licensed” devices. The SAS will ensure GAA users do not cause harmful interference to Tier 1 incumbents and Tier 2 PAL users.
If spectrum is not being used by one tier it can be used by other tiers with a grant from the SAS.
PAL is licensed and is afforded interference protection from GAA. PAL licenses are purchased at auction. There is up to 70 MHz of PAL spectrum available in any area, which can be chosen in 10 MHz increments from the first 100 MHz of the CBRS band (3550–3650 MHz). The remainder of the spectrum (3650 – 3700) is reserved for GAA use, which is considered “licensed by rule”.
Although 7 PALs may be awarded in a given census tract, a maximum of 4 may be held by any given licensee.
The Environmental Sensing Capability (ESC) is a network of sensors located across the United States, primarily along the coastline, and used by the SAS to enforce FCC rules, manage spectrum allocation, and prevent radio interference in the 3550–3700 MHz band where U.S. Navy radar systems can operate.
The ESC informs the SAS of radar operation and the SAS reacts to ensure there is no interference between CBSDs and radar operations, specifically for Navy ships located off the coast.

Figure 1: Dynamic Protection Areas (DPAs) in the continental US
When the ESC detects an incoming transmission on the incumbent tier, it automatically creates a protection zone in that area to prevent interference from any other sources. The SAS uses a pre-calculated “move list” of CBSDs and will move them off the protected channel until the 95th percentile of allowable aggregate interference into the radar receiver antenna (-144 dBm/10 MHz) is met.
Rather than blocking all communication in that zone, the SAS can dynamically reroute PAL and GAA users to other bands of the spectrum (if available).
The NTIA, in conjunction with the FCC and DoD, publishes KML files that contain information on all DPAs, exclusion zones, and their protection requirements.
The Citizens Broadband Radio Service Device (CBSD) is a radio device that communicates in the CBRS band. A CBSD must receive a spectrum grant and authorization from a SAS before it can begin transmitting data.
There are two CBSD categories:
-
Category A: Maximum EIRP 30 dBm/10MHz
-
Category B: Maximum EIRP 47 dBm/10MHz (Tarana BN/RN are in this category.)
A CBSD obtains grants from the SAS through the SAS-CBSD interface.
According to WInnForum, a Domain Proxy (DP) is “an entity engaging in communications with the SAS on behalf of multiple individual CBSDs or networks of CBSDs. The domain proxy can also provide a translational capability to interface legacy radio equipment in the 3550-3700 MHz band with a SAS to ensure compliance with Part 96 rules.” The DP presents a consistent and secure interface to the SAS that can convey all messages pertaining to the SAS-CBSD interface on behalf of client CBSDs.
Note
In the Tarana implementation of CBRS, the DP is implemented in Tarana Cloud Suite (TCS).
Coordinated Periodic Activities among SAS’s (CPAS) is a daily activity in which all SAS operators:
-
Synchronize data with each other
-
Retrieve the latest data from the FCC and WInnForum databases
-
Reallocate resources among CBSDs
-
Recalculate DPA move lists
CPAS occurs between 7 am UTC - 10 am UTC each day. During CPAS, the SAS cannot issue new grants, therefore it’s recommended to do maintenance before CPAS. Once CPAS is complete, the SAS notifies CBSDs of any required changes.
CBSDs can communicate with a SAS either directly or by using a DP. In a Tarana Wireless network, the DP is a function of TCS and the CBSDs are G1 Base Nodes (BNs) and Remote Nodes (RNs).

Figure 2: Overall CBRS Architecture
Devices using CBRS must be authenticated by the SAS prior to broadcasting. The SAS has no way to proactively reach out to a CBSD, so the CBSD must initiate all communications. CBSDs can communicate with a SAS either directly or by using a DP, such as TCS. The Wireless Innovation Forum (WInnForum) establishes protocols for communication between CBSDs and the SAS. These protocols have been implemented in the SAS-CBSD API.
There are currently six different interactions a CBSD can have when communicating with a SAS:
-
Registration: The CBSD shares device information with the SAS. In exchange, the SAS provides that device with a unique identifier and access.
-
Spectrum Inquiry: The CBSD sends the SAS a spectrum inquiry request to learn which parts of the spectrum are currently available. The SAS provides the best options available.
-
Grant Request: The device will send a request to operate on a particular frequency to the SAS. The SAS will deny the request if that communication may interfere with incumbents. If approved, the SAS will grant the device a grant ID. At that point, the reservation has been made but the CBSD is not yet authorized to transmit using the grant.
-
Heartbeat Request: The CBSD will send out multiple heartbeat requests to the SAS for each of their approved grants in order to receive authorization to transmit. Devices must be issued a grant ID prior to getting permission to transmit. If approved, the device can transmit until the transmit expiration time, which is typically 240 seconds after the last heartbeat.
-
Relinquish Grant: When the CBSD no longer needs the grant to operate, it relinquishes the grant.
-
Deregistration: If the device is being moved or decommissioned, it will deregister itself from the SAS.

Figure 3: CBSD Registration State
The assignment of a grant is solely at the discretion of the SAS. The following diagram shows the process of a device requesting a grant, receiving the grant, and receiving authorization. A device must successfully complete each step before it can transmit data.

Figure 4: CBSD Grant State
The following section discusses the CBSD to SAS procedures:
-
SAS Discovery Procedure: The CBSD contacts the SAS URL.
-
Authentication Procedure: Mutual TLS with WInnForum approved certificates
-
CBSD Registration Procedure
-
CBSD Spectrum Inquiry Procedure
-
CBSD Grant Procedure
-
CBSD Heartbeat Procedure
-
CBSD Grant Relinquishment Procedure
-
CBSD Deregistration Procedure
The CBSD initiates the Registration procedure by sending a RegistrationRequest object to the SAS.
-
The fccId, callSign, cbsdSerialNumber, and userId parameters identify the CBSD to the SAS.
-
The cbsdCategory, cbsdInfo, airInterface, and installationParam parameters provide specific information on the CBSD equipment capabilities.
-
The measCapability parameter identifies the measurement reporting capabilities of the CBSD.
-
The optional GroupingParam object requests the SAS to enroll the CBSD as a member of one or more Groups.
The SAS responds to the CBSD with a RegistrationResponse object.
-
The CBSD uses the cbsdId parameter value for all subsequent procedures with the SAS.
-
If the measReportConfig parameter is included in the RegistrationResponse object, the CBSD shall send the requested measurement report to the SAS.

Figure 5: CBSD Registration Procedure
The CBSD initiates the Spectrum Inquiry procedure by sending a SpectrumInquiryRequest object to the SAS.
-
The cbsdId parameter identifies the CBSD to the SAS.
-
The inquiredSpectrum parameter is an array of FrequencyRange objects indicating the frequency range(s) for which the CBSD seeks information.
The SAS returns a SpectrumInquiryResponse object response to the CBSD with the results of the potential channel availability for the inquired spectrum.
-
If a particular channel is not available, the corresponding response returned is the NULL string.
-
Available channels have a response code with the channel type (“PAL” or “GAA”) and the regulatory rule that the SAS used to determine availability.

Figure 6: CBSD Spectrum Inquiry Procedure
The CBSD initiates a grant request by sending a GrantRequest object to the SAS.
-
The cbsdId parameter identifies the CBSD to the SAS.
-
The operationParam parameter contains the details of the Grant request including the CBSD maximum EIRP and the desired frequency range for use.
-
The SAS may determine the eligibility of the CBSD to use PAL reserved channels by ascertaining if the CBSD (cbsdId) is a member of the set of CBSDs defining the PPA (Pal Protection Area) and the requested channel(s) corresponds to the PAL reserved channel(s) for that area.

Figure 7: CBSD Grant Procedure (Request)
The SAS responds to the CBSD with a GrantResponse object response.
-
The SAS includes the grantId parameter, the grantExpireTime parameter, and the heartbeatInterval parameter.
-
The CBSD uses the value of the grantExpireTime parameter to determine when the associated Grant expires.
-
If the heartbeatInterval parameter is included, the CBSD uses the value as the maximum time interval between two consecutive HeartbeatRequest.
-
channelType: PAL, GAA
Since the CBSD cannot transition to the authorized state until the successful completion of the heartbeat procedure, the CBSD should execute the first heartbeat procedure following the GrantResponse object as soon as possible after the GrantResponse is received.

Figure 8: CBSD Grant Procedure (Response)
The CBSD initiates the heartbeat procedure by sending a HeartbeatRequest object to the SAS.
-
The grantId parameter identifies the intended grant for the heartbeat.
-
The grantRenew parameter is an optional parameter (TRUE if the CBSD wants to renew the grant).
The HeartbeatRequest object informs the SAS that the CBSD needs access to the allocated spectrum.
-
It also allows the SAS to suspend or terminate the grant.
-
If the transmit expiration timer expires prior to reception of a HeartbeatResponse object, the CBSD shall discontinue transmission for the grant within 60 seconds after the value of the transmitExpireTime.

Figure 9: CBSD Heartbeat Procedure (Request)
The SAS responds to the CBSD with a HeartbeatResponse object response. The response parameter indicates whether the request succeeded or failed.
-
If the response is SUCCESS (Following initial heartbeat or suspension), then the CBSD is allowed to transmit.
-
The CBSD shall update the heartbeatInterval and grantExpireTime (based on what was requested).
-
If the response is SUSPENDED_GRANT, the SAS shall include the transmitExpireTime parameter in the HeartbeatResponse object. The CBSD shall terminate radio operation by turning off its radio transmission associated with this grant within 60 seconds after the value of the transmitExpireTime parameter expires. CBSD continues sending heartbeats.
-
If the response is TERMINATED_GRANT, the CBSD shall terminate radio operation associated with this grant by turning off its radio transmission within 60 seconds after the time specified in the transmitExpireTime. The grant is considered terminated by the SAS.

Figure 10: CBSD Heartbeat Procedure (Response)

Figure 11: CBSD Grant Relinquishment and Deregistration Procedures
Both the BN and RN are CBSDs (BN: BTS-CBSD, RN: CPE-CBSD). The DP is implemented in TCS. Tarana Wireless supports Google and Federated Wireless SASs.

Figure 12: Tarana-specific Implementation
In order to operate a CBRS network, the following steps must be performed within TCS:
-
Create a user account for the CPI
-
Upload the CPI certificate
-
-
Select a SAS
If it doesn’t already exist, a user account must be created in TCS for each CPI. For CBRS installations, the CPI should edit their user profile in TCS to include their CPI-ID and upload their CPI certificate and CPI certificate password. The CPI certificate is a .p12 file.

Figure 13: Editing a TCS user profile

Figure 14: Configure a TCS user as a CPI
Note
Take care that you enter the CPI-ID number in the CPI-ID field and not the CPI certificate number. For example, note the similarities between a Google .p12 file name and the related CPI-ID:
GOOG-000365_2295819
(name of .p12 file)
GOOG-000365
(CPI-ID)
Important
When installing a CPI certificate in TCS under a CPI user, the first and last name associated with the user account must match the name the certificate is assigned to. Only then can the same CPI user and certificate can be re-used under a different operator using the same credentials. At no time can the same CPI ID and certificate be associated with different user names for different operators.
Selection of a SAS is mandatory for CBRS operation. Tarana Wireless supports both Google and Federated Wireless SASs. The FCC OR-ID is issued by the SAS to the operator and uniquely identifies the operator and its equipment within that SAS. Changing SAS will require the operator to get a new ID.
The FCC OR-ID and SAS fields must be configured for CBRS installations within TCS before BN or RN installation. These parameters are part of the operator profile under Network Configuration. Edit the Operator page with the correct ID and SAS.

Figure 15: Configure Operator Parameters for CBRS
Note
The FCC OR-ID is assigned to customers by the Spectrum Access System provider.
Certified Professional Installer (CPI) requirement
Tarana CBRS Base Node (BN) and Remote Node (RN) models are Category B and must be installed by a Certified Professional Installer (CPI). Passing CPI certification entitles the engineer to use an ID and public key certificate to authenticate themselves as the engineer of record approving an installation. A CPI must either physically install the CBSD themself or take responsibility for the accuracy of data entered by another installer.
The CPI must carefully review and sign the BN and RN installation parameters before the devices will register with a SAS.
CBRS BN Installation (Web UI)
The following steps enumerate CBRS-specific instructions for a BN installation:
-
Log into the BN’s local interface (web UI)
-
Configure the TCS registration URL
-
Enter BN-specific configuration parameters
-
Enter CPI ID
-
Verify BN operation in TCS
For complete and the most up to date BN installation manual, including CBRS-specific instructions, see https://www.taranawireless.com/bn_manual.
Log into the BN
During the initial configuration, access the BN’s web UI from the out of band management port using the default IP address and login information:
-
192.168.10.2
-
admin/admin123
Configure the TCS Registration URL
Step 1. When a BN is first configured, the BN must have the correct URL for TCS in order to contact it. The correct TCS URL for CBRS units is: registration.trial.cloud.taranawireless.com/443.
Under Setup, change the Cloud URL from: registration.cloud.taranawireless.com:443
to: registration.trial.cloud.taranawireless.com:443

Figure 16: TCS registration URL in the BN web UI
BN-specific Parameter Configuration
Step 2. Click on Installation Parameters.

Figure 17: Installation Parameters button
Step 3. Verify the latitude, longitude, and tilt (received from the GPS unit on the BN) and the height and azimuth. The height should be measured above ground level (AGL) in meters.

Figure 18: BN-specific installation parameters
Enter CPI ID
Step 4. Enter your CPI-ID and click Confirm.
Note
Check that the number entered is your CPI-ID and not your CPI certificate number.

Figure 23: CPI ID installation parameter
Note
For CBRS units, the GPS coordinates, tilt, height (AGL), and azimuth must be configured and verified by a CPI upon installation. Until this is done, the RN will be connected to the BN in restricted mode and will not pass data or be visible in TCS.
BN Verification in TCS
From the BN’s Device page in TCS, click on the CBRS button in the green device summary card.

Figure 20: BN device page summary card with CBRS button
This will open a CBRS summary page. Here, you can verify that the BN has been assigned spectrum. In the example below, the dark green indicates that the spectrum has been granted and authorized by the SAS and the time until the grant expires is noted. Light green would indicate that the spectrum had been granted but not authorized.
Note
Once configured, a BN will not become fully operational until it has been issued a grant from the SAS and received authorization. The radios will be muted until authorization from the SAS occurs, even if the grant has been issued. If the grant never changes to authorized, contact your SAS for more information about why the grant has not been authorized.

Figure 21: CBRS summary page showing an authorized spectrum grant
Note
Assigned frequencies, channel widths, and maximum EIRP are determined by the SAS. For more information about why certain values are assigned, contact your SAS.
CBRS RN Installation (Web UI)
The following steps enumerate CBRS-specific instructions for an RN installation:
-
Log into the RN’s local interface (web UI)
-
Enter RN-specific configuration parameters
-
Enter CPI ID
-
Verify RN operation in TCS
For complete and the most up to date RN installation manual, including CBRS-specific instructions, see https://www.taranawireless.com/rn_manual.
Log into the RN
After physically installing the RN on site, access the RN’s web UI using the default IP address and login information:
-
192.168.10.2
-
admin/admin123
RN-specific Parameters Configuration
-
Under Setup, carefully verify and enter the geography and orientation parameters described below.
Latitude: Geographical latitude of the RN in decimal degrees notation.
Longitude: Geographical longitude of the RN in decimal degrees notation.
Tilt: Vertical (elevation) angle of device installation as measured from the horizon (0 degrees).
Height: Installed height above ground level (AGL).
Azimuth: Horizontal angle of device installation as measured clockwise from north.
For CBRS RNs, all five parameters are required.
Note
The latitude, longitude, and azimuth can manually be entered here or from the RN’s Device page in TCS, but the tilt and height can only be configured from the RN’s web UI.
Troubleshooting Note
It is especially important to make sure the latitude and longitude parameters are entered correctly. Incorrect coordinates can prevent an RN from coming up. When the device registers with the Spectrum Access System (SAS) it must provide its location which the SAS uses to verify the RN is located in a place that supports CBRS operation.
For example, in the graphic on this page, the longitude listed is -98.56300354. This will place the RN in Downs, Kansas, which is a valid location for CBRS operation. However, if the longitude is entered as a positive integer (missing the minus sign in front), you are asserting this RN is in the Gansu province in China somewhere near the Gobi Desert. This is obviously not a valid location for a CBRS device from the SAS point of view and will result in the RN continuously sending a registration request to the SAS and the SAS continuously rejecting the RN’s request. This will prevent normal operation of the RN.

Figure 22: RN web UI with installation parameters
Enter CPI ID
After Submit Changes is clicked an Installation Parameters pop-up will appear. Verify the installation parameters are correct, then enter your CPI ID and click Confirm.
Note
Check that the number entered is your CPI-ID and not your CPI certificate number.

Figure 23: CPI ID installation parameter
Note
For CBRS units, the GPS coordinates, tilt, height (AGL), and azimuth must be configured and verified by a CPI upon installation. Until this is done, the RN will be connected to the BN in restricted mode and will not pass data or be visible in TCS.
RN Verification in TCS
From the RN’s Device page in TCS, click on the CBRS button in the green device summary card.

Figure 24: RN device summary card with CBRS button
This will open a CBRS summary page. Here, you can verify that the BN has been assigned spectrum. In the example below, the dark green indicates that the spectrum has been granted and authorized by the SAS and the time until the grant expires is noted. Light green would indicate that the spectrum had been granted but not authorized.
Note
Once configured, a BN will not become fully operational until it has been issued a grant from the SAS and received authorization. The radios will be muted until authorization from the SAS occurs, even if the grant has been issued. If the grant never changes to authorized, contact your SAS for more information about why the grant has not been authorized.

Figure 25: CBRS summary page showing an authorized spectrum grant
Note
Assigned frequencies, channel width, and maximum EIRP are determined by the SAS. For more information about why certain values are assigned, contact your SAS.
Unit does not receive grant
-
Verify the latitude and longitude of the RN is correct and a location where CBRS operation is supported.
-
Check and make sure the FCC OR-ID value matches what was provided by your SAS.
-
Ensure the device is not in an active DPA
If these values are correct, contact your SAS to verify spectrum grants are available for your area. Depending on timing, it is possible a grant must wait until after CPAS has occurred, i.e., 10 am UTC.
Grant is suspended
A grant may be suspended pending evaluation by a SAS. For example, while the SAS calculates if the new grant will impact incumbents. New grant authorizations are given after CPAS has occurred.
Comments
Article is closed for comments.