GSM-900 (Channels 125 operating band 900Mhz carrier spacing 200khz spacing 45Mhz) GSM -1800 (Channels 374 spacing 95Mhz)
2 2 7 1 6 4 3 6 5 7 1
Cellular Networking technology that breaks geographic area into cells shaped like honey comb Cell Area of coverage provided by one or more Radio terminals
Transmission Direction
Uplink Transmission Transmission from Mobile to Radio Terminal Down Link Transmission Transmission from Radio Terminal to Mobile Uplink and Downlink channels separated by 45 MHz
Access Techniques
Uplink 890 MHz to 915 MHz Down Link 935 MHz to 960 MHz 25 MHz divided into 125 channels of 200 KHz bandwidth
UP
890.0
890.2
890.4
914.8
915.0
DOWN 935.0
935.2
935.4
959.8
960.0
Access Techniques
Time Division Multiple Access Each carrier frequency subdivided in time domain into 8 time slots Each mobile transmits data in a frequency, in its particular time slot - Burst period = 0.577 milli secs. 8 time slots called a TDMA frame. Period is .577 * 8 = 4.616 milli secs
0.577 ms 0 1 2 3 4.616 ms 4 5 6 7
3 0
4 1
5 2
6 3
7 4
0 5
1 6
2 7
3 0
4 1
5 2
6 3
7 4 5 6 7
Uplink
MS > BTS
Offset
Power Control
BTS commands MS at different distances to use different power levels so that the power arriving at the BTSs Rx is approximately the same for each TS - Reduce interference - Longer battery life
BSC
Um
BTS VLR OMC Server
GSM Network
Switching System
OMC
MS Mobile Station BTS Base transceiver System BSC Base Station Controller BSS BSC MSC Mobile Switching Center HLR Home Location Register BTS VLR Visitor Location Register EIR Equipment Identity Register MS AUC Authentication Center OMC Operation And Maintenance Center
Static Information
International Mobile Subscriber Identity(IMSI) (MCC + MNC+MSIN Personal Identification Number (PIN)* Authentication Key (Ki)
Dynamic Information
Temporary Mobile Subscriber Identity(TMSI) Location Area Identity (LAI)
Each Radio terminal represents an RF Channel TRX and MS communicates over Um interface Voice encryption/decryption
Monitors and controls several BTSs Management of channels on the radio interface
Billing
International Mobile Subscriber Identity(IMSI) Users telephone number (MS ISDN) Subscription information and services
VLR address
Reference to Authentication center for key (Ki)
Security - Authentication
MS
Ki RAND
A3
SRES
MS BTS AuC
Authentication center provides RAND to Mobile AuC generates SRES using Ki of subscriber and RAND Mobile generates SRES using Ki and RAND Mobile transmits SRES to BTS BTS compares received SRES with one generated by AuC
Security - Ciphering
MS
Ki RAND
A8
Kc MS Kc
Data
A5
Data
A5
Data sent on air interface ciphered for security A5 and A8 algorithms used to cipher data Ciphering Key is never transmitted on air
OMC
Fault and Alarm Management
In case of fault, the operator can execute tests and diagnostics and change the states of the network element. The operator can initiate traffic control.
Performance Management
The operator can schedule the collection of data from a certain network element.
Security Management
BTS
From 22.8 decode to 13 kbps 13 kbps speech data 3 kbps TRAU
2.048 mbps
BSC
0 1 2 3 4 31
64Kbps
1 2 3 4
31
TRAU
1 2 3 4
31
MSC
Channel concept
Physical channel:
One timeslot of a TDMA-frame on one carrier is referred to as a physical channel. There are 8 physical channels per carrier in GSM, channel 0 to 7(timeslot 0-7)
Logical channel:
A great variety of information must be transmitted between BTS and the MS,for e.g.user data and control signaling.Depending on the kind of information transmitted we refer to different logical channels.These logical channels are mapped on physical channel.
Control channels
BCH
CCCH
DCCH
Half rate
on the BCH.
Synchronization Channel-SCH
This is used by the MS to synchronize to the TDMA frame structure
within the particular cell. Listening to the SCH the MS receives the TDMA frame number and also the BSIC ( in the coded part- 39 bits). Repeats once in every 10 frames.
calls or make calls is some information concerning the cell. This is BCCH. This include the information of Max power allowed in the cell. List of channels in use in the cell. BCCH carriers for the neighboring cells,Location Area Identity etc. BCCH occupies 4 frames (normal bursts) on BCH and repeats once every Multiframe. This is transmitted Downlink point to multipoint.
The information on this channel is a paging message including the MSs identity(IMSI/TMSI).This is transmitted on Downlink, point-to-multipoint.
When the mobile realizes it is paged it answers by requesting a signaling channel (SDCCH) on RACH. RACH is also used by the MS if it wants to originate a call. Initially MS doesnt know the path delay (timing advance), hence uses a short burst (with a large guard period = 68.25 bits).
MS sends normal burst only after getting the timing advance info on the SDCCH.
It is transmitted in Uplink point to point.
Traffic Channels-TCH
TCH carries the voice data.
Two blocks of 57 bits contain voice data in the normal burst.
Burst
Normal Burst
156.25 bits 0.577 ms
T Coded Data 3 57
S T. Seq. 1 26
Tail Bit(T) :Used as Guard Time Coded Data :It is the Data part associated with the burst Stealing Flag :This indicates whether the burst is carrying Signaling data (FACCH) or user info (TCH). Training Seq. :This is a fixed bit sequence known both to the BTS & the MS.This takes care of the signal deterioration.
T 3
Training Sequence 41
Coded Data 36
T 3
GP 68.25
T 3
T 3
GP 8.25
T GP 3 8.25
Handover
Means to continue a call even a mobile crosses the
border of one cell to another
Procedure which made the mobile station really roam Handover causes
RxLev (Signal strength , uplink or downlink)
RxQual
O & M intervention Timing Advance
Handover Types
Internal Handover (Intra-BSS)
Within same base station - intra cell Between different base stations - inter cell
Handover Types
MSC BSC GMSC
BSC
C-3
BSC MSC
C-4
C-1
C-2
BSC
HO performed
BSC
Acknowledges and alloctes TCH (facch) if 1. Check for HO passed 2. Channel avail in new BTS
BTS 2
MS tunes into new frequency and TS and sends HO message to new BTS (facch)
Receives new BTS data(FACCH)
Release TCH
Cell 2
Periodic Measurement Reports (SACCH)
BTS 1
Cell 1
MSISDN = CC + NDC + SN
CC= Country Code (91) NDC= National Destination Code(98370) SN= Subscriber Number (12345)
sp
MS registration in network
MS scans complete GSM frequency band for highest
power
Action
Location Update Request (SDCCH) Authentication Request (SDCCH) Authentication Response (SDCCH)
MS
MS BTS
Authentication response (SDCCH)
AuC GMSC
EIR
Authentication request (SDCCH)
MSC PSTN
Ring alert Speech path enabled Called Sub answers
Req for dedicated channel BSC Authentication response Allocates SDCCH using the AGCH (SDCCH) for signaling (RACH) BTS
SDCCH released TCH assigned Ring Sends callFACCH requestGive SDCCH tone over set-up including Call set-up forwarded Ring tone ceases over FACCH Release SDCCH Activate TCH dialled digits on SDCCH to BSC
Connect Assigns TCH Req Assn complete message Call set-up forwarded to MSC
VLR
Query for VLR info Reply (MSRN) EIR
MS
* MS Allocate tunes Page RESP on SDCCH Ch. REQ SDCCH * Phone overRACH rings ( AGCH overTMSI + LAI) BTS
Connect traffic Ch.to trunk GMSC frees SDCCH Query VLR Page RES Page for LAC and Paging Assign. REQ TMSI the area (+TMSI) Route to MSC Network Alerting MSC
BSC
AuC
PSTN