GSM is a PLMN (Public Land Mobile Network) Several providers can setup mobile networks following the GSM standard within each country Major components MS (mobile station) BTS (base transceiver station) or BS or cell site BSC (base station controller) MSC (mobile switching centre) LR (location registers): VLR, HLR AUC (Authentication database), EIR (Equipment Identity Register)
GSM Architecture
Subsystems RSS (radio subsystem): covers all radio aspects NSS (network and switching subsystem): call forwarding, handoff, switching, location tracking, etc. OSS (operation support subsystem): management of the network Standardized interfaces Allows provider to mix and match vendor equipment
Mobile Station
An MS consists of the physical equipment used by a user to access a PLMN A mobile station (MS) comprises several functional groups MT (Mobile Terminal)
End-point of the radio interface (Um)
TA (Terminal Adaptor)
Terminal adaptation, hides radio specific characteristics
TE (Terminal Equipment)
Peripheral device of the MS, offers services to a user
RSS Interfaces
Interfaces Um : radio interface (From MS to BTS) Abis : standardized, open interface with 16 kbit/s user channels (from BTS to BSC) A: standardized, open interface with 64 kbit/s user channels as in wired telephone network (from BSC to MSC)
NSS
NSS includes the main switching function of GSM Databases for users Mobility management Most important role is to manage the communication between GSM and other network users Components Mobile Switching Center (MSC)
Performs the necessary switching functions Monitors the mobility of its users Manages Handoff functions Involved in inter-working functions to communicate with other networks such as PSTN and ISDN etc. The inter-working functions depends on the types of networks and the types of services to be performed
10
NSS Components
Home Locator Register (HLR)
Functional unit for management of mobile subscriber HLR stores two types of information: Subscriber information and part of mobile information (to allow incoming calls to be routed to the MSC for a particular MS)
HLR contains
Subscriber ID (IMSI and MSISDN) Current Subscriber VLR (Current Location) Supplementary Services Authentication KEY and AUC functionality MSRN
11
NSS Components
Visitor Locator Register (VLR)
The VLR is linked to one or more MSCs Functional unit which dynamically stores subscriber information when the subscriber is located in the area covered by the VLR
12
VLR
When a roaming MS enters an MSC area, the MSC informs the associated VLR about the MS The MS goes through a registration process which includes
The VLR recognizes that the MS is from another PLMN If roaming is allowed, the VLR finds the MSs HLR in home PLMN VLR constructs a Global Title (GT) from the IMSI to allow signalling form the VLR to the MSs HLR via PSTN/ISDN networks VLR generates a Mobile Subscriber Roaming Number (MSRN) that is used to route incoming calls to the MS The MSRN is sent to the MSs HLR The information in the VLR includes MSRN, IMSI, TMSI, HLR address or GT, the location area where the MS has registered, local MS identity
13
Subscriber Identities
IMSI:
This number identifies the MS subscriber. It is only transmitted over the air during initialization.
TMSI:
VLR controls the allocation of Temporary Mobile Subscriber Identity TMSI is updated frequently Makes it very difficult for the call to be traced and therefore provides a high degree of security for the subscriber.
Operation Subsystem
OSS (Operation Subsystem) enables centralized operation, management, and maintenance Components
Operation Subsystem
Equipment Identity Register (EIR)
Contains a centralized database for validating the IMEI The database is concerned solely with MS equipment and not with the IMSI. The EIR database consists of lists of IMEIs organized as follows
White List Contains those IMEIs which are known to have been assigned to valid MS equipment. Black List Contains IMEIs of MS which have been reported stolen or which are to be denied service for some other reason. Grey List
Contains IMEIs of MS which have problems (for example, faulty software). These are not, however, sufficiently significant to warrant a black listing.
16
EIR
Call Processing Functions
17
Operation Subsystem
Operation and Maintenance Center (OMC)
The Operations and Maintenance Centre (OMC) is a centralized facility that supports the day to day management of a cellular network as well as providing a database for long term network engineering and planning tools. An OMC manages a certain area of the PLMN thus giving regionalized network management.
18
GSM Interfaces
The Um Radio Interface (MS to BTS)
Uses Physical FDMA/TDMA/FDD physical In 900 MHz band: 890-915 MHz Uplink band, 935-960 MHz Downlink Radio carrier is a 200kHz channel => 125 pairs of radio channels Called Absolute Radio Frequency Channel Number (ARFCN) ARFCN numbers given by f(n) = 890 +.2n MHz for Uplink band n = 0,124 Corresponding downlink is f(n) + 45 MHz Channels and ARFCN slightly different in other frequency bands A TDMA frame is defined on the radio carrier (8 users per carrier) Channel rate is 270.833 kbps Two types of logical channels map onto physical channels Control Channels (call setup, power adjustment, etc..) Traffic Channels (voice or data) = 22.8kbps = 1 slot in a TDMA frame
19
Year Introduced
Access method
1990
TDMA 200 kHz 125 8 13 kbps 12 kbps 4.6 ms
1 2 3 4 5 6 7 8
Channel Bandwidth Number of duplex channels Users per channel Speech coding bit rate Data coding bit rate Frame size
20
21
22
2. Mobility Management
Registration, authentication, and location tracking
Link Layer
Uses variation of ISDN Link Access Protocol on D channel protocol termed LAPDm
24
GSM Channels
Physical Channel
125 radio carriers, 8 slots per carrier =>
Traffic Channels
Full rate (TCH/F) at 22.8 kb/s or half rate (TCH/H) at 11.4 kb/s Physical channel = full rate traffic channel (1 timeslot) or 2 half rate traffic channels (1 timeslot in alternating frames) Full rate channel may carry 13 kb/s speech or data at 12, 6, or 3.6 kb/s Half rate channel may carry 6.5 kb/s speech or data at 6 or 3.6 kb/s
Control Channels
1. BCH (broadcast channels): point-to-multipoint downlink only 2. CCCH (common control channel): for paging and access 3. DCCH (dedicated control channel): bi-directional point-to-point signalling
25
Control Channels
Broadcast Channels (BCH): Point-to-multipoint unidirectional channels
Frequency Correction Channel (FCCH): correcting mobile frequency in downlink.
This channel is required for the correct operation of the radio subsystem and allow an MS accurately turn to a BS
Dedicated Control Channel (DCCH): Used for signalling and control after call establishment
Stand Alone dedicated control channel (SDCCH):
Used for authentication of MS, location updates, assignments to TCH
27
28
GSM Channels
29
30
END
31