Hubbry Logo
Preferred Roaming ListPreferred Roaming ListMain
Open search
Preferred Roaming List
Community hub
Preferred Roaming List
logo
7 pages, 0 posts
0 subscribers
Be the first to start a discussion here.
Be the first to start a discussion here.
Preferred Roaming List
Preferred Roaming List
Preferred Roaming List
View on Wikipedia
from Wikipedia

The Preferred Roaming List (PRL) is a database residing in a wireless (primarily CDMA) device, such as a cellphone, that contains information used during the system selection and acquisition process. In the case of R-UIM-based CDMA devices, the PRL resides on the R-UIM. The PRL indicates which bands, sub bands, and service provider identifiers will be scanned and in what priority order.[1][2] Without a PRL, the device may not be able to roam, i.e. obtain service outside of the home area. There may be cases where missing or corrupt PRLs can lead to a customer not having service at all.

On many networks, regularly updating the PRL is advised if the subscriber uses the device outside the home area frequently, particularly if they do so in multiple different areas.[3] This allows the phone to choose the best roaming carriers, particularly "roaming partners" with whom the home carrier has a cost-saving roaming agreement, rather than using non-affiliated carriers. PRL files can also be used to identify home networks along with roaming partners, thus making the PRL an actual list that determines the total coverage of the subscriber, both home and roaming coverage.

The PRL is built by an operator and is normally not accessible to the user. Many operators provide the ability for the user to download the latest PRL to their device by dialing an Over-the-air (OTA) feature code. In the United States, for Verizon / MetroPCS / US Cellular, this feature code is *228 (*ACT). For Sprint, it is ##873283# (it is also possible to use code ##72786# on Android or ##25327# on iOS to completely clear out the service programming and redo OTA activation, which includes updating the PRL).[4] In Canada, for Telus Mobility, the PRL update feature code is *22803 (*ACT03).

PRL structure

[edit]

The PRL consists of two tables (along with some header and overhead information):

  • Acquisition Table – An indexed list of frequencies on which the device may search for particular systems. The idea behind the acquisition table is to optimize the acquisition time by identifying only the frequencies that should be searched, rather than searching the entire frequency spectrum. The information contained in each acquisition table entry includes an index, the network type, and associated channel blocks.
  • System Table – A prioritized list of systems that the device is permitted to access (Preferred Systems) and those that it is explicitly forbidden to access (Negative Systems). Note that it is also possible to indicate forbidden systems using a separate SID/NID Lockout List in the handset; however, this is not a recommended approach as it creates control over system selection outside of the PRL.
Each system table entry belongs to a geographic area known as a GEO. These GEOs are listed in priority order. Each IS-95/1xRTT system is identified by either SID/NID or, in the case of enhanced PRL, SID/NID or MCC/MNC. To support 1xEV-DO systems, the PRL must be IS-683-C or later. Each 1xEV-DO system is identified by a Subnet ID. For hybrid mode operation (i.e. IS-95/1xRTT and 1xEV-DO), association tags are used link an IS-95/1xRTT system with one or more 1xEV-DO systems. Hybrid systems always attempt to select an IS-95/1xRTT system first, then use the association tag to attempt to select an associated 1xEV-DO system.
Each entry also provides an acquisition table index where the frequencies associated with that system are identified and a roaming indicator that dictates what type of indication should be displayed to the user when they are receiving service from that system.

PRL modes of operation

[edit]

The PRL may operate in one of two modes, dictated by a Preferred Only indicator:

  • Permissive Mode (a.k.a. Open PRL, Not Preferred Mode) – The device will attempt to acquire preferred systems; however, if no preferred systems can be located, then the device may select systems that are not listed in the PRL system table. It still will not select negative systems; but, if no preferred systems can be found and an unknown system is available, then it will select the unknown system. While this mode of operation is easier to maintain, because new partners can be chosen even if they are not explicitly listed in the PRL, it carries with it the danger of allowing the mobile device to become camped onto a system that will not provide it with service.
  • Restrictive Mode (a.k.a. Closed PRL, Preferred Only Mode) – The device will only acquire systems identified as preferred in the PRL system table. While this mode of operation gives operators the most control over the system selection process, it requires that PRLs be kept up-to-date to ensure that newly added roaming partners can be selected. Note that even if a PRL is restrictive according to the preferred only indicator, the use of wildcard SID/NID or MCC/MNC values as preferred systems would essentially make the PRL permissive, because wildcards match any system that is located.

References

[edit]
[edit]
Revisions and contributorsEdit on WikipediaRead on Wikipedia

Preferred Roaming List

View on Grokipedia
from Grokipedia
The Preferred Roaming List (PRL) is a database residing in CDMA devices, such as cellphones, that contains prioritized information on radio frequencies, channels, system identifiers (SID), network identifiers (NID), and mobile country codes (MCC) with optional mobile network codes (MNC) to guide the device in selecting and acquiring service from the or approved roaming partners during system selection. Defined in the IS-683 standard family for over-the-air service provisioning in systems, the PRL enables efficient by directing the device to attempt connections in a specific order, prioritizing in-network towers for optimal coverage and while avoiding unauthorized networks. In CDMA networks, particularly 3G implementations like those used by carriers such as Verizon and Sprint, the PRL functions as a critical component for multimode system selection, tagging systems with geographic and operator-specific parameters to ensure the device scans and connects to preferred bands and technologies, such as 1X or data-only (DO) systems. This prioritization helps minimize roaming costs by favoring partner networks with favorable agreements and improves connectivity in areas lacking direct home coverage, as the list includes both acquisition records for initial attachment and negative lists to exclude undesirable providers. The PRL is typically stored in the device's non-volatile memory or on a removable user identity module (R-UIM) or card SIM (CSIM) in the UICC, with a transparent file structure (e.g., identifier '6F30') that supports updates to reflect evolving network topologies. Carriers maintain and provision the PRL to align with their roaming partnerships and spectrum allocations, often delivering updates over-the-air (OTA) via protocols defined in IS-683 to enhance performance as networks expand or change. For instance, prior to the 2022 shutdown of its network, Verizon users could trigger PRL updates using codes like *228 to ensure the device connects to the latest in-network towers and supports seamlessly. While primarily associated with legacy CDMA technologies, the PRL's design principles have influenced system selection in hybrid multimode environments. However, following the shutdown of major CDMA networks between 2022 and 2024, the use of PRL has become largely historical, though its principles inform system selection in modern hybrid networks.

Introduction

Definition and Purpose

The Preferred Roaming List (PRL) is a prioritized database stored in devices, primarily those operating on CDMA-based systems, that contains information guiding network selection and service acquisition when the device is outside its coverage area. It functions as an operator-defined index of preferred systems, including identifiers for carriers, frequencies, and geographic regions, enabling the device to systematically evaluate and connect to compatible networks during . As specified in 3GPP2 standard C.S0016-D, the PRL is a semi-permanent retained in the device's , distinct from temporary configuration parameters, and is essential for multimode devices supporting technologies like , HRPD, and LTE. The core purpose of the PRL is to facilitate efficient by directing the to the most suitable preferred or authorized networks, thereby optimizing , reducing acquisition time, and minimizing operational costs for users and operators. It achieves this by categorizing systems into priority levels—such as , preferred, or any—while indicating prohibited or negative systems to avoid unauthorized connections that could result in billing issues or incompatibility. In CDMA environments, the PRL ensures the device scans and selects carriers aligned with the subscriber's service plan, enhancing coverage reliability and preventing attachment to low-priority or foreign networks. This role is particularly vital in international or inter-carrier scenarios, where it controls indicators displayed to the user and supports seamless transitions across geographic areas. Key to its operation in CDMA technology, the PRL incorporates service provider identifiers like System ID (SID) and Network ID (NID), along with radio bands and sub-bands, to streamline the selection process without exhaustive scanning. Originating from standards for IS-95 and systems, it is provisioned over-the-air via mechanisms like OTASP or OTAPA, ensuring updates reflect current carrier agreements. Unlike non-roaming scenarios, where the device exclusively uses parameters for attachment, the PRL provides a comprehensive framework for out-of-area exploration, prioritizing operator-partnered networks to maintain service continuity and compliance.

Historical Development

The Preferred Roaming List (PRL) originated in the mid-1990s as part of the development of CDMA technology, spearheaded by and the CDMA Development Group (CDG) to facilitate seamless in early digital cellular networks based on the IS-95 standard. This innovation addressed the need for mobile devices to efficiently select preferred carriers during , particularly in the fragmented U.S. market where CDMA was emerging as an alternative to analog systems. The PRL was integral to the cdmaOne family of services, enabling across IS-95-based systems for voice and basic data. Standardization efforts formalized the PRL through the (TIA), with the initial specification published as TIA/EIA/IS-683 in 1996, defining its structure for over-the-air provisioning in systems. This standard evolved under 3GPP2 auspices for , incorporating the PRL into broader interoperability frameworks to support enhanced agreements among operators. By the early 2000s, widespread adoption occurred among major U.S. CDMA carriers, including Verizon Wireless and Sprint, which integrated PRLs into their devices to manage national on IS-95 and early networks. A notable event in 2002 involved Verizon Wireless objecting to the public disclosure of its PRL, highlighting concerns over in roaming partnerships, as the list revealed detailed partner carrier preferences. The PRL played a crucial role in enabling early CDMA roaming agreements, allowing devices to prioritize home networks and affiliates while minimizing costs and connection times. As CDMA evolved, the PRL was adapted for EV-DO data services in the mid-2000s through specification updates like IS-683-A, extending support for high-speed packet data . In the late and , CDMA carriers began incorporating initial LTE support into PRLs via multimode system selection enhancements, bridging legacy CDMA with transitions. However, the global shift toward / and pure LTE reduced PRL's prominence outside , though it persisted in U.S. legacy networks amid carrier consolidations. Following the 2020 Sprint- merger, maintained CDMA compatibility, including PRL functionality, until the network's sunset in March 2022 to support existing subscribers. PRL version numbers, embedded as identifiers from 0 to 65,535, have tracked these updates, ensuring devices receive the latest configurations.

Technical Structure

Components of PRL

The Preferred Roaming List (PRL) consists of core components that form its binary structure, enabling mobile devices to acquire and select efficiently in CDMA environments. The Acquisition Table serves as the foundational element, containing prioritized records of RF channels and frequencies for initial scanning. Each record specifies the network type—such as CDMA, AMPS, or TDMA—and details the channels to tune to, for instance, numbers 1 through 799 for the 800 MHz Cellular A/B band or 1 through 1199 for the PCS band. This table ensures the device scans in a defined order, starting with the highest-priority entries to minimize acquisition time. The System Table represents the prioritized core of the PRL, listing Service Identifiers () and Network Identifiers (NIDs) for carrier systems. SIDs are 15-bit codes uniquely identifying a carrier's overall system, while NIDs—optional 16-bit values—distinguish subsystems or specific networks within an SID, with often used as a wildcard. Organized into geographic areas (GEOs), the table groups these identifiers by regions, such as quadrants, to support location-aware selection and facilitate decisions on which networks to prefer in specific areas. indicators within these tables flag preferred partners, such as through preference levels or display behaviors (e.g., roam icon on/off), guiding user interface responses and system priority. Additional elements include geo-lists for fine-grained location-based and metadata fields like version numbers and timestamps, which track PRL revisions per standards such as IS-683 (from versions A to E). The PRL employs a binary format defined in IS-683, supporting multiple frequency bands including Cellular A/B (800 MHz) and PCS (1900 MHz), with file sizes typically compact at 1-10 KB to fit device constraints. Its unique "list of lists" hierarchy structures outer lists by regions (GEOs) for broad , while inner lists dictate scan sequences and system details, optimizing across diverse environments.

Data Organization

The Preferred Roaming List (PRL) employs a binary-encoded to efficiently store and process on mobile devices. This structure begins with a header section that includes essential metadata, such as the PR_LIST_SIZE (16 bits) indicating the total size of the PRL, PR_LIST_ID (16 bits) for unique identification, and PR_LIST_CRC (16 bits) for integrity verification using a polynomial. Additional header fields encompass the PRL version (e.g., CUR_SSPR_P_REV, 8 bits) to denote revisions like the Extended PRL format, along with counts for subsequent , such as NUM_ACQ_RECS (9 bits) for acquisition and NUM_SYS_RECS (14 bits) for . This binary organization ensures compact storage, typically fitting within device , and supports over-the-air updates via segmented blocks with offsets and sizes for partial transmissions. The PRL is divided into distinct record types that organize system and acquisition information hierarchically. Key records include the Acquisition Record (AR), which specifies parameters for initial system searches, such as band classes, channel lists (e.g., CHAN fields), and acquisition types like Cellular Analog, CDMA Standard, PCS CDMA, or Generic for IS-2000/IS-95 systems; the System ID Record (SIR), which identifies networks using System ID (SID, 15 bits) and optional Network ID (NID, 16 bits), along with flags for preferences and roaming indicators; and the Extended System Record (ESR), which extends SIR functionality with additional fields like SYS_RECORD_LENGTH (5 bits) and type-specific details for enhanced multimode support. These records are linked through indices, such as ACQ_INDEX (9 bits) in SIRs referencing ARs, enabling structured navigation without exhaustive linear searches. The format conforms to the 3GPP2 C.S0016 standard, which defines this record-based assembly for interoperability across CDMA-based networks. Prioritization within the PRL relies on a numeric scheme and geographic constraints to guide device selection efficiently. Each or ESR includes a PRI field (1 bit), where 0 indicates higher priority relative to 1, allowing carriers to rank preferred systems ahead of others during . Geographic zoning is implemented via geo-records, such as User Zone entries, which define boundaries using coordinates (e.g., fields in 1-degree increments), with a GEO (1 bit) indicating regional applicability relative to prior records. Fallback chains are supported by sequencing records in descending priority order, ensuring the device attempts higher-priority systems first and cascades to lower ones or alternate modes (e.g., from CDMA to AMPS) upon acquisition failure. This logic is extensible, accommodating new frequency bands like AWS ( MHz) through updated AR band class definitions without altering the core structure. Device processing of the PRL follows a sequential, indexed logic to minimize acquisition time, particularly during power-on or handoff events. Upon activation, the mobile station parses the PRL header to validate the CRC and load records into memory, then scans acquisition channels in the order specified by AR priorities, comparing detected SID/NID from broadcast overhead messages (e.g., via IS-2000 system parameters) against SIR/ESR entries. Matches trigger selection based on PRI values and geo-boundaries, with multimode fallback enabled—for instance, attempting CDMA channels before reverting to analog AMPS if no match occurs. Indexed access, facilitated by fields like ACQ_INDEX and SEGMENT_OFFSET, allows rapid lookups to skip irrelevant sections, reducing overall scan duration. Error handling is integral, with CRC mismatches prompting rejection of invalid records and fallback to default behaviors, as outlined in the 3GPP2 C.S0016 specification.
Record TypeKey FieldsPurposeSize (bits, variable)
Acquisition Record (AR)ACQ_TYPE, CHAN lists, band classDefines scan parameters for bands/channelsVariable (e.g., NUM_ACQ_RECS-linked)
System ID Record ()SID (15), NID (16 optional), PRI (1), ACQ_INDEX (9)Matches and prioritizes specific networksVariable (NUM_SYS_RECS-linked)
Extended System Record (ESR)SYS_RECORD_TYPE (4), type-specific (e.g., subnet info)Enhances for advanced featuresVariable (NUM_EXT_SYS_RECS-linked)

Operational Modes

Permissive Mode

Permissive Mode, also known as Open PRL or Not Preferred Mode, represents a flexible operational configuration of the Preferred Roaming List (PRL) in CDMA-based mobile devices, activated when the "Preferred Only" (PREF_ONLY) indicator within the PRL is set to '0' in the device's semi-permanent configuration parameters. This setting is provisioned over-the-air via Over-the-Air Service Provisioning (OTASP) procedures, allowing the PRL to function without enforcing strict restrictions on network selection. Defined in the 3GPP2 C.S0016 standard (formerly TIA/EIA/IS-683), this mode prioritizes accessibility over adherence to carrier-specific preferences, enabling the device to operate beyond the constraints of the PRL's system table. In Permissive Mode, the conducts a comprehensive scan of all detectable systems using the acquisition table (ACQ_TABLE) in the PRL, which includes parameters for various frequency bands and channel types such as PCS CDMA and Cellular CDMA. The device attempts registration on preferred (PREF_NEG=1) or unspecified networks, while avoiding negative systems (PREF_NEG=0) except for services, and still attempting to prioritize the home network or higher-priority entries when available. This behavior effectively overrides the PRL's hierarchical priorities—based on system ID (SID), network ID (NID), geographic indicators (GEO), and indicators (ROAM_IND)—treating the list as advisory guidance rather than a mandatory restriction during system acquisition and scenarios. As a result, the mode supports fallback to unspecified or non-preferred systems, such as those with wildcard SIDs (e.g., SID = 000000000000000), to maintain service continuity. This mode is particularly suited for use cases involving emergency connectivity, such as access to 911 services, where overriding network restrictions ensures availability even in areas lacking preferred coverage. It is also commonly applied in regions with sparse preferred network presence or during device testing to verify broad compatibility, and it finds frequent adoption in unlocked or international devices to maximize global roaming flexibility without carrier-specific limitations. The IS-683 specification incorporates Permissive Mode to offer carriers and users configurable options for balancing coverage against operational constraints, with the PREF_ONLY bit serving as the key toggle for this advisory treatment of the PRL.

Preferred Mode

The Preferred Mode, also known as Closed PRL, is an operational configuration of the Preferred Roaming List (PRL) in CDMA-based mobile devices where the Preferred Only flag (PREF_ONLY) is set to 1, restricting the to acquire and register only with systems explicitly listed as preferred in the PRL's system table. This mode limits all system selection actions to the PRL entries, preventing opportunistic connections outside the defined list. When activated, typically during device provisioning or via over-the-air updates, it overrides broader scanning behaviors to enforce carrier-defined network preferences. In Preferred Mode, the device performs targeted scans solely on the frequencies and channels specified in the PRL's acquisition tables, proceeding in the priority order outlined by the system table's geographic regions and system records. Non-listed networks are rejected, regardless of signal strength, ensuring the device does not attempt registration with unauthorized providers. A key aspect involves strict matching of the broadcast System ID (SID) and Network ID (NID) from potential base stations against the PRL entries; only matches with preferred systems (marked by PREF_NEG = 1) allow progression to registration, while mismatches or negative entries (PREF_NEG = 0) result in denial. The acquisition tables facilitate this by providing precise search parameters, such as band classes and channel numbers, for efficient, prioritized acquisition without exhaustive full-band scans. This mode supports standard carrier-locked device operations, where it enforces roaming agreements by directing connections exclusively to the and approved partner carriers, thereby preventing access to non-partner networks that could incur unexpected charges. It is commonly required for subsidized devices to maintain compliance with carrier subsidies and service terms. Preferred Mode enhances efficiency by minimizing unnecessary scans, as the device focuses only on predefined systems, which conserves battery life and reduces acquisition time compared to open scanning approaches. However, in geographic areas lacking coverage from listed preferred systems, the device may display "no service" since it will not fall back to available non-preferred alternatives. The PRL incorporates negative lists through entries with PREF_NEG = 0, explicitly blocking specific or NIDs (e.g., certain carrier identifiers) to further control access, allowing only emergency services like 911 on such systems if needed.

Implementation in Networks

In CDMA Systems

In CDMA systems, the Preferred Roaming List (PRL) is integrated into mobile devices during initial provisioning, where an initial or default PRL is loaded to enable immediate network acquisition and capabilities. This is subsequently updated over-the-air using Over-The-Air Service Provisioning (OTASP) procedures defined in the IS-683 standard series, allowing carriers to dynamically adjust preferences without physical device access. PRL plays a critical role in Idle Handoff and System Reselection processes as outlined in the IS-2000 () standards, guiding the to automatically select and switch between preferred systems based on signal quality and priority during idle mode to ensure seamless service continuity. Specific to CDMA architectures, including cdmaOne (IS-95) and EV-DO, the PRL facilitates system matching by specifying acquisition records that include RF channels, (SID), and Network Identification (NID) entries, which the device uses to search for pilot signals identified by Pseudo-Noise (PN) offsets and Walsh codes for synchronization with base stations. It supports dual-mode operation by prioritizing voice (1x) over data (EV-DO) services through record types that tag systems with (MCC) and technology indicators, ensuring voice calls take precedence in hybrid environments. Additionally, PRL handles various band classes, such as Band Class 0 (BC0) for the 800 MHz cellular band, enabling efficient frequency selection across different spectrum allocations like 800 MHz and 1900 MHz PCS. Challenges in CDMA PRL implementation include legacy support for Analog Mobile Phone System (AMPS) fallback, incorporated via dedicated Cellular Analog Acquisition Records to allow devices to revert to analog service in areas lacking digital coverage, a feature prevalent in early deployments. Interference avoidance is addressed through negative acquisition indices in the PRL, which mark prohibited or low-priority systems to prevent scanning or camping on channels prone to or non-preferred partners. These negative entries optimize acquisition time by excluding problematic areas from the search sequence. Prior to widespread adoption, PRL was ubiquitous among U.S. CDMA carriers such as Verizon, Sprint, and U.S. Cellular, forming the backbone of their networks for reliable service. It was essential for inter-carrier agreements, as the prioritized list ensured devices preferred home networks or approved partners, minimizing costs and enhancing coverage through coordinated system tables. A key operational aspect is PRL-driven acquisition at power-up, where the device scans only the listed channels in the acquisition table—typically starting with home systems— to rapidly synchronize with base stations and avoid exhaustive full-band searches, thereby reducing battery drain and acquisition latency.

In LTE and Beyond

In the transition to LTE networks, the Preferred Roaming List (PRL) was retained in CDMA-LTE hybrid devices, such as those used by Verizon and Sprint after 2015, to support fallback operations during voice calls or when LTE coverage was unavailable. This integration allowed devices to perform band scans while referencing PRL entries for seamless to CDMA systems, ensuring continuity in multimode environments. For example, Verizon's 4G LTE devices automatically updated PRL via mechanisms, eliminating the need for manual dialing codes like *228 that were common in earlier CDMA-only setups. Modern adaptations of the PRL incorporated LTE Public Land Mobile Network (PLMN) identifiers, enabling multimode devices to prioritize networks across CDMA and LTE technologies. These updates extended the traditional PRL structure—defined in IS-683-E—to include (MCC) and Mobile Network Code (MNC) tags in system records, facilitating integration with mechanisms like the Operator PLMN List (OPLMN). In hybrid devices, the PRL operates alongside OPLMN to guide system selection, where PRL handles CDMA-specific priorities and OPLMN manages preferred networks. However, in pure Standalone (SA) deployments, the PRL's role has diminished, persisting primarily for legacy roaming support in devices requiring fallback to or . A unique aspect of these adaptations involves hybrid PRL entries that map CDMA (SID) values to LTE Equivalent PLMN (E-PLMN) IDs, allowing devices to resolve priorities for seamless handovers between radio access technologies. For instance, a PRL geographic entry with SID 100 might tag MCC 123 for matching against the Multimode Location-based Preferred List (MLPL), prioritizing LTE where available while falling back to CDMA. This mapping ensures efficient scanning in non-LTE regions without unnecessary delays. Compatibility challenges arise in 5G New Radio (NR) environments, where no direct PRL equivalent exists, and devices instead rely on the Universal Subscriber Identity Module (USIM) Elementary File for OPLMN (EF_OPLMN) to store up to 15 preferred operator PLMNs for roaming selection. This shift requires multimode UEs to coordinate PRL-derived priorities with USIM-based lists, potentially leading to scan inefficiencies if mappings are incomplete. The 2020 Sprint-T-Mobile merger led to PRL revisions to support integrated roaming during the transition period. Following shutdowns of CDMA networks by Verizon (December 2022) and /Sprint (March 2022), PRL functionality is now legacy, with system selection in modern LTE/ devices relying primarily on mechanisms.

Management and Updates

Updating Procedures

Updating the Preferred Roaming List (PRL) in CDMA devices primarily occurs through over-the-air (OTA) methods using the Over-the-Air Service Provisioning (OTASP) and Over-the-Air Parameter Administration (OTAPA) protocols, which enable secure transmission of the PRL file from the carrier's provisioning system to the . OTASP is typically user-initiated via dial codes such as *228 followed by option 2, establishing a session over the CDMA channel to download the PRL, while OTAPA is network-initiated, often using service messages like OTAPA Request with START_STOP set to '1' to push updates without user intervention. These protocols encapsulate the PRL in OTASP Data Messages, segmented into transport messages with sequence numbers, offsets, and sizes for reliable delivery, ensuring the can reassemble and validate the file before committing it. The update process begins with the carrier identifying a new PRL version, typically numeric such as 60607, and pushing it to the device, where the mobile station checks the version against its current one (e.g., via PR_LIST_ID and protocol revision fields like '00000001' for standard PRL); if newer, it replaces the old file after successful authentication. Authentication relies on the 64-bit Authentication Key (A-key), derived from Diffie-Hellman key exchange and used to generate Shared Secret Data (SSD) for encrypting the PRL payload with keys like SMCK_s in secure mode, preventing unauthorized tampering by verifying the device's identity through challenges and responses. Upon completion, the device acknowledges the update via Commit Request messages, with failures—such as incomplete segmentation or authentication errors—resulting in "PRL Update Failed" notifications and retention of the prior version. Manual updates are possible using diagnostic tools like Qualcomm's QPST (Qualcomm Product Support Tool) or QXDM (Qualcomm eXtended Diagnostic Monitor), which connect via USB in diagnostic mode (enabled by dial codes like ##3424#) and require the device's Master Subsidy Lock (MSL) code for security access to service programming functions. In QPST, the user loads the PRL file into the Service Programming tab, enters the MSL to unlock parameters, and uploads it, bypassing OTA for scenarios like custom PRL loading or troubleshooting. These tools adhere to the same validation protocols as OTA, ensuring compatibility with the device's PRL structure of acquisition records, system IDs, and user zones. PRL updates occur periodically, often every few months or immediately following network expansions or roaming agreement changes, to optimize coverage without user action in most cases. The process is constrained by file size limits, such as a maximum of 64 KB for downloads, with typical OTA sessions completing a 1.5 KB PRL in under 4 minutes over the air interface. For Verizon devices, alternative triggers like ##PROG# access programming menus that can initiate updates, though *228 remains standard for 3G CDMA.

Carrier-Specific Practices

Verizon Wireless emphasizes nationwide coverage through its Preferred Roaming List (PRL), incorporating extended partners such as US Cellular for enhanced rural access prior to the latter's 2025 acquisition by T-Mobile. The carrier enforces strict preferred mode operation, prioritizing its native network and select partners to optimize connectivity and minimize reliance on lower-priority roamers. Frequent over-the-air (OTA) updates are facilitated via dial code *228 option 2, which refreshes the PRL to reflect current tower locations and roaming agreements without full device reprogramming. For 4G LTE and 5G devices, PRL maintenance occurs automatically through SIM card provisioning or device restarts, ensuring seamless transitions in extended coverage areas. Sprint, prior to its 2020 merger with T-Mobile, and the post-merger entity maintain PRLs tailored for mobile virtual network operator (MVNO) support, including brands like Boost Mobile, to enable broad compatibility across legacy CDMA and LTE networks. These PRLs incorporate high-priority fallbacks to LTE during coverage gaps, reflecting custom roaming agreements that prioritize T-Mobile's spectrum assets for MVNO users. Updates are performed using dial code ##873283# (##UPDATE#), which prompts the device to search for and install the latest PRL version, often resolving connectivity issues in transitional areas. As of 2025, with the completion of CDMA network shutdowns, PRL updates are no longer necessary or supported on major US carriers' active networks, though the procedures remain relevant for historical or niche legacy systems. Across major carriers, PRL priorities are shaped by bespoke roaming agreements that dictate network sequencing, with post-2020 transitions accelerating the phase-out of CDMA infrastructure—Verizon completing its CDMA shutdown in December 2022 and finalizing Sprint's in 2022—yet with no ongoing maintenance for legacy support in 2025, as coverage relies on LTE/. Outdated PRLs can lead to failed attempts in legacy contexts, but carriers no longer recommend periodic updates via dial codes, as service requires modern VoLTE-capable devices. Security considerations include OTA patches addressing known vulnerabilities, ensuring PRL integrity against exploits in transitional networks.

References

  1. https://www.qualcomm.com/media/documents/files/multimode-system-selection-basic-provisioning.pdf
  2. https://www.3gpp2.org/Public_html/Specs/C.S0065-0%2520v1.0_060630.pdf
  3. https://akamailogging.verizon.com/support/preferred-roaming-list-update-faqs/
  4. https://www.phonescoop.com/glossary/term.php?gid=11
  5. https://www.tec.gov.in/pdf/GRMT/TEC-GR-WS-UIM-001-01-OCT-05.pdf
  6. https://www.verizon.com/about/news/verizon-completes-3g-network-shutdown
  7. https://www.fcc.gov/consumers/guides/plan-ahead-phase-out-3g-cellular-networks-and-service
  8. https://www.3gpp2.org/Public_html/Specs/C.S0016-D%20v1.0_OTASP.pdf
  9. https://www.3gpp.org/ftp/tsg_sa/tsg_sa/tsgs_22/docs/pdf/sp-030766.pdf
  10. https://ethw.org/Milestones:Development_of_CDMA_for_Cellular_Communications%2C_1989
  11. https://www.cdg.org/resources/cdma_history.html
  12. https://globalccf.org/cdma_resources/history.html
  13. https://www.qualcomm.com/media/documents/files/download-the-evolution-of-mobile-technologies-1g-to-2g-to-3g-to-4g-lte-qualcomm.pdf
  14. https://ptacts.uspto.gov/ptacts/public-informations/petitions/1461342/download-documents?artifactId=9aGWu2tDBIykAqYg5moMxrBJodZ2Pu_sL13AbDMJUNYeXx5qpRI4MKc
  15. https://www.cnet.com/tech/mobile/roaming-data-stirs-up-controversy/
  16. https://s4gru.com/entry/338-what-is-a-prl/
  17. https://www.t-mobile.com/news/business/update-on-our-cdma-network-transition-plans
  18. https://www.scribd.com/document/75616732/CDG-130-PRL-Design-and-Maintenance
  19. http://ifast.org/prl-software/PRLToolMenu/PRL%20WORKSHOP_tutorial.pdf
  20. http://www.ifast.org/files/IFAST24_011_How_to_build_a_PRL.pdf
  21. https://patents.google.com/patent/US7702329B1/en
  22. http://www.3gpp2.org/Public_html/Specs/C.S0016-C_v2.0_081031.pdf
  23. https://www.3gpp2.org/Public_html/Specs/C.S0016-C_v2.0_081031.pdf
  24. https://multitech.com/wp-content/uploads/s000294.pdf
  25. https://ifast.org/prl-software/PRLToolMenu/PRL%20WORKSHOP_tutorial.pdf
  26. https://www.qualcomm.com/content/dam/qcomm-martech/dm-assets/documents/80-W3637-1_Rev_B_-_Multimode_System_Selection_Basic_Provisioning.pdf
  27. https://www.etsi.org/deliver/etsi_tr/122900_122999/122936/12.00.00_60/tr_122936v120000p.pdf
  28. https://www.verizon.com/prepaid/cdma-network-update/
  29. https://www.t-mobile.com/support/coverage/t-mobile-network-evolution
  30. https://www.etsi.org/deliver/etsi_ts/131100_131199/131102/18.05.00_60/ts_131102v180500p.pdf
  31. https://www.cisco.com/c/en/us/td/docs/routers/access/1800/1861/software/guide/3g_sol_dg/3Gchapter3.html
  32. https://www.tec.gov.in/public/pdf/GRMT/TEC-GR-WS-OTA-001-01-JAN-05.pdf
  33. https://community.verizon.com/t5/DROID-Archive/228-to-update-PRL-on-Charge/td-p/284247
  34. https://www.verizon.com/support/pound-star-codes/
  35. https://s4gru.com/forums/topic/6741-us-cellular-roaming-and-technical-thoughts/
  36. https://www.t-mobile.com/news/business/t-mobile-closes-uscellular-acquisition
  37. https://community.verizon.com/t5/Other-Network-Discussions/Just-to-dispel-myths-about-OTA-228-programming/td-p/4997
  38. https://community.verizon.com/t5/Other-Network-Discussions/PRL-no-access/td-p/1215887
  39. https://go.business.t-mobile.com/PRL_Updateable_Device
Add your contribution
Related Hubs
User Avatar
No comments yet.