slide-1
1981 NMT
The Nordic Solution
Now 18 Millions Subscribers
NORWAY, DENMARK
FINLAND, SWEDEN,
FRANCE (450 MHz)
1979 AMPS
800 MHz
Now 25 Millions
Subscribers
1985 TACS in UK
800 and 900 MHz
Dedicated developments
1985
1986
RADIOCOM 2000
C.450
FRANCE
GERMANY
400 MHz
450 MHz
900 MHz
Japan
NTT cellular (1979)
JTACS (1988)
slide-2
0.4
0.5
0.6
0.7
0.8
0.9 1.0
Marine
1.2
1.4
1.6
1.8
2.0
2.4
40
12
50
60
70
80
90 100
14
16
VHF
FM
10
CB
120
140 160
0.4
0.5
0.6
0.7
0.8
0.9 1.0
28 30 MHz
180 200
240
300 MHz
GPS
0.3
Land-Mobile
26
GSM1800, GSM1900
UHF TV 14-69
Broadcasting
24
VHF TV 7-13
Cellular
UHF
18 20
10
1.2
12
Aeronautical
Mobile telephony
1.4
14
1.6
16
1.8
2.0
18 20
2.4
3.0 GHz
24
30 GHz
Terrestrial Microwave
Satellite
slide-3
Uplink
915
915
876 880
890
915
1710
1785
1850
1910
P-GSM
E-GSM
GSM 1900
GSM 1800
R-GSM
921 925
935
960
960
1805
1880
1930
1990
MHz
960
Downlink
slide-4
GSM Specifications
12 SERIES
OPERATION AND
MAINTENANCE
01 SERIES
GENERAL
02 SERIES
SERVICE ASPECTS
11 SERIES
EQUIPMENT AND TYPE
APPROVAL SPECIFICATIONS
03 SERIES
NETWORK ASPECTS
10 SERIES
SERVICE INTERWORKING
04 SERIES
MS-BSS INTERFACE AND
PROTOCOLS
09 SERIES
NETWORK
INTERWORKING
05 SERIES
PHYSICAL LAYER ON THE
RADIO PATH.
08 SERIES
BSS TO MSC INTERFACES
07 SERIES
TERMINAL ADAPTERS
FOR MOBILE STATIONS
06 SERIES
SPEECH CODING
SPECIFICATIONS
slide-5
slide-6
SIM-Card
Calling line
0609225831
GSM
Contains:
- IMSI
Subscriber knows
- Called party number = MS-ISDN
- PIN
Handset
TE474-Asst Prof Aamir Masood
slide-7
SIM-Card
25 mm
Permanent data:
- Unique mobile subscriber identity
through IMSI number,
- Authentication parameter Ki,
- Authentication algorithm A3,
- Generating encryption key Kc
algorithm A8.
GSM
Microchip with stored
user information
Removable data:
- Temporary Mobile Subscriber Number,
- Location Area Identification.
slide-8
Subscriber Identification
IMSI
Nature
Similar to ISDN,
Conformity with E164/E213
Identify a PLMN
worldwide
MCC
MNC
Meaning
Mobile
Country
Code
Mobile
Network
Code
Nb. digits
Format
MS - ISDN
H1 H2
MSIN
x x x ......... x x x
Mobile Subscriber
Ident. Nb
H1 H2 = Identity of HLR
within the home PLMN
max 10
CC
NDC
M1 M2
SN
xx xx xx xx
Country
National
Mobile Subscriber
Code
(national definition)
(where Destination
Code
*
M1
M2
= nbr of logical HLR
subscription
has been made)
1 to 3
2 to 4
total max 15
slide-9
Mobile Identification
PE VED
Y
T O
PR
P
A
TAC
Type Approval
Code
FAC
SNR
SP
Serial number
(SPare)
Final Assembly
Code
slide-10
Network Overview
BTS
NSS
BSS
BSC
PSTN
MSC
MS
OMC-R
TE474-Asst Prof Aamir Masood
OSS
OMC-S
slide-11
Teleservices
1 - Telephony
Hello
Speaking
Originated
call
Speaking
Hello
Terminated
call
slide-12
Teleservices
2 - Emergency Call
Emergency
112
GSM
slide-13
Teleservices
3 - Short Message Cell Broadcast
me
ss
me
ssa
ge
sa
mes
m
age
sag
mes
eA
Information
Provider A
ge A
ag
ess
g
sa
s
e
m
eB
mess
ge
a
s
es
m
age B
Information
Provider B
GSM Network
TE474-Asst Prof Aamir Masood
slide-14
Teleservices
4 - Short Message Service
Radio
PLMN
SMS-MO/ PP
SMS-SC
Radio
PLMN
SMS-MT/ PP
Copyright1996NorthernTelecom
slide-15
Teleservices
5 - Fax
Alternate Speech and Fax:
Automatic fax:
slide-16
Teleservices
6 - User's Data Call Features
Teleservices
voice
Embodied
bearer
treatments for
radio transmission
Teleservices
Fax G3, SMS
Cable that
bears data
Data / Fax
kit adaptation
slide-17
Teleservices
7 - Voice Messaging
Please leave
a message
after the tone
Busy
Forward
to voice
mail box
Voice mail
box
GSM
network
You have
3 voices
messages...
Voice
message
server
Warming up...
TE474-Asst Prof Aamir Masood
slide-18
Supplementary Services
Calling Party
CoLP
CLIR
Cnted line
0609173957
1 - Line Identification
Calling Line Identification
presentation
(CLIP)
restriction
(CLIR)
(CoLP)
restriction
(CoLR)
Called Party
CLIP
CoLR
Calling line
0609225831
slide-19
Supplementary Services
2 - Call Transfer and Call Forwarding
unconditional
(CFU)
on busy
(CFB)
on no reply
(CFNRy)
slide-20
Supplementary Services
3 - Waiting / Hold and Multi Party
WAIT
1
HOLD
Waiting / Hold:
Multi Party:
Max = 5
persons
2
slide-21
Supplementary Services
4 - Call Barring
Outgoing (BAOC)
Outgoing international (BOIC)
Outgoing international
except home PLMN country (BOIC-exHC)
Incoming (BAIC)
Incoming when roaming outside
(BIC-Roam)
slide-22
Supplementary Services
5 - Call Completion (CCBS)
NEW!
BUSY
...
Unable to place
a call.
Speaking
Speaking
Reinitiate
the call
Ring !
Ring !
Idle
SPEAKING
Call is
established
HELLO
1
slide-23
Supplementary Services
6 - Advice of Charge
Insert a
SIM credit Card
Completion of call
need charging
slide-24
Main IN Services:
Personal Number
Virtual Private Network (VPN)
Sponsored Cell & Call
Prepaid Calling
Location Inquiry
Geo Zone
The aim of the CAMEL (Customized Application for Mobile network Enhanced
Logic) is to provide GSM network operators with the ability to create specific
services in their home network, and export these services to their subscribers
when roaming outside the home network.
CAMEL introduces the ability to provide location dependent IN type of services
to mobiles subscribers.
TE474-Asst Prof Aamir Masood
slide-25
1
4
7
2
5
8
o+
3
6
9
4197
** 0 #
7PRS8TUV9 WXY
4GHI 5JKL 6MNO
Copyright1996NorthernTelecom
4446
25 c/min
4197
c
1
4
7
London
Bristol
2
5
8
o+
3
6
9
Copyright1996NorthernTelecom
5696
Copyright1996NorthernTelecom
Copyright1996NorthernTelecom
25 c/min
5696
2ABC3DEF
Wireline Access
25 c/min
4446
Speed Dialing
50 c/min
924 63256
Copyright1996NorthernTelecom
Copyright1996NorthernTelecom
slide-26
6/99
Copyright1996NorthernTelecom
SCOOBY DOO
Your account
balance
is $ 24.50
Copyright1996NorthernTelecom
Account status
enquiry and
notification
Copyright1996NorthernTelecom
RANK1ONE
VALID DATES
slide-27
Copyright1996NorthernTelecom
Today, up to 50 % off
on handbags !
Copyright1996NorthernTelecom
Copyright1996NorthernTelecom
...made from
specified
locations
at predefined
times of day
Sponsors can
target specific
customers
by sponsoring
some of their
calls...
Copyright1996NorthernTelecom
The Palace
on 11 Bourke Street
Chinese food
Phone 55 0407
press 2 to connect
Promotional
Informations:
call #15
Todays special at
The Anchor is Maine
lobster soup
Be the first ten caller and
get a free cocktail !
Copyright1996NorthernTelecom
The Anchor
St Catherine Dock
Phonce 56 2548
Press 2 to connect
Copyright1996NorthernTelecom
Copyright1996NorthernTelecom
Copyright
1996
N orthern
Telecom
Copyright1996NorthernTelecom
Office Zone
Wide Area
Cellular
Home Zone
15 c/min
50 c/min
10 c/min
Notification of current
zone before call set-up:
when in home/office zone
and/or
when out of zones
slide-30
Wait to accept it or
hang-up now.
Copyright1996NorthernTelecom
Copyright1996NorthernTelecom
Voice mail
OR
With Notification
Copyright1996NorthernTelecom
Notification of current
zone before incoming
call is connected:
when in home/office zone
and/or
when out of zones
slide-31
COVERAGE
LIMITED
AREA
(-75 dBm
at cell edge)
COVERAGE
LIMITED
AREA
(-70 dBm
at cell edge)
TE474-Asst Prof Aamir Masood
slide-32
20
20
20
20
40
60
100
60
60
20
100
100
60
100
20
100
Town
Suburb
Highway
20
20
20
Rural
slide-33
Cell Sectorization
TRI
OMNI
BI
slide-34
slide-35
slide-36
slide-37
1 site
slide-38
Frequency
1800 MHz
Base Height 40.0 m
Mobile Height 1,5 m
Environment Urban
Jumper Loss
0.5 dB
Feeder Loss
3 dB
Penetration Factor 15 dB
Sensitivity
-110 dBm
Coupling system
Tx loss
4.5 dB
RXm
Body Loss 3 dB
Cable Loss
0 dB
Antenna Gain
-2 dB
TX
RX
Output Power
30 dBm
RXd
Sensitivity
Max TX Output Power
44.8 dBm
-100 dBm
Options
Rx Diversity Gain: 5 dB
Base Station
TE474-Asst Prof Aamir Masood
Mobile
Overlapping Margin: 0 dB
slide-39
Cochannel Interference
Power
Power
Wanted signal
Interfering signal
f1
Frequency
f1
Frequency
Power
combined
signal
The two signals are
superimposed
f1
TE474-Asst Prof Aamir Masood
Frequency
slide-40
Frequency
Group A1
Other
frequencies
Other
frequencies
Frequency
Group A1
Wanted signal
Interfering signal
slide-41
Trisectorial
Site
C3
A2
Distance of
frequency reuse
C1
B2
A4
B1
A3
C3
B4
A2
A2
C2
B2
A4
C3
C2
4*3 Reuse
Pattern
of 12 cells
B4
A2
B1
A3
C1
B2
C4
A1
C1
B4
C2
B3
C3
C3
A2
B1
A3
B4
A4
C4
A1
B2
C4
B3
C1
A4
B1
A3
B4
C2
A1
C3
A2
B3
C1
B2
C4
A1
B4
A4
B3
C1
B2
slide-42
A1
C1
A1
B1
A3
C3
A2
C2
B3
C1
B2
A4
C4
B1
A3
C3
A2
C2
B2
B3
B4
slide-43
BSS Architecture
MSC
A Interface
Radio
Interface
TCU
S2000H&L
BTS
NSS
Ater Interface
BSC
OMC-R
Abis Interface
MS
S8000
Outdoor
BTS
Radio
Interface
OMN Interface
Sun
StorEdge A5000
BSS
TE474-Asst Prof Aamir Masood
S8000
Indoor
BTS
MS
slide-44
Abis
BTS
X.25
Ater
BSC
LAPD
OML
A
TCU
MSC
LAPD
OML
LAPD
RSL
CCS7
slide-45
Processing
Unit
X.25
controller
O&M
Switching
matrix
BTS
Abis interface
PCM
controller
A interface
To Network
SubSystem
slide-46
Hard
Disk
To OMC-R
X.25
=
Processors
Control
MSC
TCU
BTS
bus
Signaling Signaling Signaling
To BTSs
PCM
Controller
Traffic
TS
TCU
Signaling
TS
BTS
Signaling
TS
MSC
Signaling
TS
Switching
Matrix
PCM
Controller
To TCU
and MSC
Traffic
TS
slide-47
OMC-R
Server
X.25 Switch
DPN 100
X.25 Network
OMN
Interface
X.25
Modem
X.25
Modem
MSC
BSC
A Interface
TCU
Or
Ater Interface
TCU
slide-48
TCU Functions
BSS
MSC
TCU
BSC
BTS
A
Interface
Ater
Interface
TCU is the Nortel name for the Transcoder Rate Adapter Unit
TE474-Asst Prof Aamir Masood
slide-49
Reception coupler
Antenna
Duplexer
TRX
(Transceiver-Receiver)
BCF
(Base Common Functions)
Abis
interface
BSC
TRAU
Transcoder
Controller
T1 trunk
up to 92 user's
and
control channels
Ater
BSC
interface
E1 trunk
up to 120 user's
channels
TE474-Asst Prof Aamir Masood
Transcoder
T1 trunk = up to
24 user's channels
A
External PCM
Interface
MSC
interface
E1 trunk = up to
31 user's channels
slide-51
BTS
TCU
TS 1
TS 2
TS 3
TS 4
Four PCM time-slots between BTS and MSC when TCU is close to the BTSs.
MSC
BTS
TCU
TS 1
One PCM time-slot between BTSs and MSC when TCU is close to the MSC.
slide-52
Speech handler
and DTX
BTS
Frame
Processor
BSC
GSM speech
decoder
13 bit linear
to
8 bit A or Law
Speech
handler
To MSC
Speech blocks
(260 bits/20 ms)
TE474-Asst Prof Aamir Masood
slide-53
Description
Application
Presentation
Session
Transport
End-to-end reliability
Network
End-to-end routing
Data Link
Point-to-point transfer
Physical
Administration
slide-54
Protocol Model
NSS
MS
CM
CM
MM
BTS
RR
O&M
RR
L
A
P
D
m
RADIO
O&M
RSM
L
A
P
D
m
RADIO
MM
BSC
L
A
P
D
L
A
P
D
PCM
Um
Interface
R
R
S
Abis
Interface
BSSAP
BSSAP
D
B
S
T
S
A
M
A
P
P
SCCP
RR D
B
S
T
S
A
M
A
P
P
SCCP
M
A
P
T
C
A
P
I
S
U
P
/
T
U
P
SCCP
MTP3
MTP3
MTP3
MTP2
MTP2
MTP2
PCM
PCM E1/T1
MTP1
A-Interface
slide-55
Radio Interface
Protocols Involved
Level 3
Connection
ConnectionManagement
Management
Mobility
MobilityManagement
Management
Radio
RadioResource
ResourceManagement
Management
Level 2 = LAPDm
Logical Channels
Multiplexing
RACH
BCCH
Level 1
Physical Channels
TC0
PCH
AGCH
SDCCH
FACCH
TC24
SACCH
IDLE
(example)
slide-56
Abis Interface
1 - Presentation
Data
PCM
PCM
Speech 1 TS = 4 channels
Radio
O&M
slide-57
Abis Interface
2 - Protocols
BTS side
TRX
BSC side
BCF
RSM O&M
RSL
O&M
OML
Level 3
layer
LAPD
Level 2
layer
RSM O&M
RSL
OML
Level 1 layer
slide-58
Ater Interface
1 - Presentation
Speech 1 TS = 4 channels
Data 300, 1200, 1200/75, 2400,
4800, 9600, 14400 bit/s
LAPD
O&M
SS7
X.25
slide-59
Ater Interface
2 - Traffic Channel and Signaling Links
Ater interface
A interface
TCU
LAPD TS 1
O&M
SS7 TS
BSC
Speech TS
Data TS
SS7 TS
Transcoding
Rate
Adaptation
MSC
Speech TS
Data TS
OMC
X.25 TS 2 *
X.25 TS 2 *
PCM link
PCM link
* if used
TE474-Asst Prof Aamir Masood
slide-60
A Interface
1 - Presentation
BSS
NSS
Speech/Data 1 TS = 1 channel
SS7
X.25
slide-61
Base Station
Subsystem
Application
Part
(BSSAP)
Transaction
Capabilities
Application
Part (TCAP)
BSSMAP
ISDN
User
Part
(ISUP)
DTAP
Signaling Connection
Control Part (SCCP)
Network
Link
Physical
Message
Transfer
Part
(MTP)
slide-62
A Interface
2 - Protocols
BSS
NSS
A-interface
To other
processes
within the BSS
To air
interface
transmission
equipment
DTAP
BSS
MAP
DTAP
Distribution
function
BSS
MAP
Other applications,
(eg call control)
Distribution
function
SCCP
SCCP
MTP
MTP
To other users
of the SCCP
and MTP
Physical layer
PSTN/ISDN/PSDN Interface
GMSC
TUP
ISUP
Toll offices
DUP
Application layer
TUP
ISUP
DUP
Message transfer
MTP
MTP
Physical layer
slide-64
Uplink
890 MHz
Frequency
channel #
Downlink
915 MHz 935 MHz
124
BTS
Frequency
960 MHz
channel #
124
Example:
Channel 48
slide-65
Uplink
Downlink
Band
Duplex
Spacing
Duplex
channels
P-GSM 900
E-GSM 900
R-GSM 900
GSM 1800
GSM 1900
890-915
880-915
876-915
1710-1785
1850-1910
935-960
925-960
921-960
1805-1880
1930-1990
2x25
2x35
2x39
2x75
2x60
45
45
45
95
80
124
174
194
374
299
ARFCN = n
P-GSM 900
1 n 124
Fu(n) = Fl(n) + 45
E-GSM 900
0 n 124
975 n 1023
Fu(n) = Fl(n) + 45
R-GSM 900
0 n 124
955 n 1023
Fu(n) = Fl(n) + 45
GSM 1800
512 n 885
Fu(n) = Fl(n) + 95
slide-66
TDMA frame
TDMA frame
TS TS TS TS TS TS TS TS TS TS TS TS TS TS TS TS
0
Time
0
4.615 ms
9.23 ms
slide-67
Physical Channel
BTS
time
n+1
TDMAs
n TS
n-1
MS1
MS3
MS2
FDMA
//
123
ARFCN
slide-68
6
R
7
R
Downlink TDMA
BTS
T
Down
link
MSs side
MS1
Up
link
T
MS2
Fixed transmit
delay of three
time-slots
TE474-Asst Prof Aamir Masood
slide-69
Propagation Delays
MS2
d1>>d2
d2
TS0
Propagation Delay p
TS1
TS2
TS3
TS4
MS1
TS5
TS6
TS7
Bits Overlapping
MSs transmit
slide-70
Propagation Delay
TX BTS
RX BTS
CAN
GSM
CAN
RX MS2
TX MS2
+3TS
yes
WHEN
the
WHAT
ms-isdn
yes
WHAT
GSM
the
ms-isdn
RX MS4
TX MS4
RX MS5
TX MS5
HOW
TA
RX MS1
TX MS1
RX MS3
TX MS3
WHAT
HOW
PROPAGATION DELAY
RX MS6
TX MS6
WHEN
WHAT
RX MS7
TX MS7
RX MS8
TX MS8
slide-71
Timing Advance
TX BTS
RX BTS
CAN
RX MS1
TX MS1
CAN
RX MS2
TX MS2
RX MS3
TX MS3
WHAT
GSM
+3TS - TA
WHEN
the
WHAT
ms-isdn
yes
WHAT
the
GSM
ms-isdn
RX MS4
TX MS4
RX MS5
TX MS5
HOW
yes
HOW
PROPAGATION DELAY
WHEN
RX MS6
TX MS6
WHAT
RX MS7
TX MS7
RX MS8
TX MS8
slide-72
Logical Channels
Traffic and Control Channels
TDMA frame
TDMA frame
TS TS TS TS TS TS TS TS TS TS TS TS TS TS TS TS
0
...
...
slide-73
TDMA Frame
= 4.615 ms
LOGICAL
CHANNELS
Logical
channels
multiplexing
TS = 577 s
MESSAGE TYPE
Physical Channel
Logical Channel
Logical Channel
TE474-Asst Prof Aamir Masood
TCH
FCCH
SCH
FACCH
SACCH
SDCCH
CBCH
AGCH
PCH
BCCH
RACH
different
message
types
=
different
logical
channels
slide-74
BSS
sp
ee
BSC
MSC
BTS
TC
H
ch
or
da
ta
sp
ee
ch
or
da
ta
TC
H
slide-75
Control Channels
GSM Channels
Traffic Channels
(TCHs)
Control Channels
Broadcast
Channels
(BCHs)
Full
rate
Half
rate
TCH /F
Common Control
Channels
(CCCHs)
Dedicated Control
Channels
(DCCHs)
(down uplink)
Downlink
TCH /H FCCH
Downlink
Uplink
Fast
SCH
Traffic Multiframing
TE474-Asst Prof Aamir Masood
BCCH PCH
AGCH
CBCH
Signaling Multiframing
RACH SDCCH
Slow
FACCH
SACCH
Traffic Multiframing
slide-76
01234567
BTS
Frequency correction
Synchronization
Broadcast control
Access request
Subscriber paging
Answer to Access request
MS
FCCH
TCH
SCH
FACCH
Traffic (speech-data)
Associated Signaling
BCCH
RACH
PCH
SACCH
SDCCH
CBCH
AGCH
FCCH
Broadcast info
Dedicated Signaling
Sys InFo 5, 6 + SMS
Traffic (speech data)
CBCH
SDCCH
SACCH
SCH
BCCH
RACH
PCH
TCH
Associated Signaling
FACCH
M.S. Pre-synchronization
AGCH
Access request
Subscriber paging
Answer to Access request
slide-77
TCH MESSAGES
assignment
Order of commutation from SDCCH to
TCH
FACCH MESSAGES
Connection establishment from
SDCCH to TCH
End validation of a SDCCH-TCH
commutation
Characteristics of the future used BS
after handover
Connection establishment to BS after
handover
Validation of an handover
TE474-Asst Prof Aamir Masood
SACCH MESSAGES
System Information 5, 5bis, 5ter and 6
(connected mode)
Measures:
slide-78
SCH MESSAGES
Frame Number
Base Station Identity Code (BSIC)
BCCH MESSAGES
System Information type 1, 2, 2 bis,
2ter, 3, 4, 7, 8
(idle mode)
CBCH MESSAGES
Specific information
For example:
weather
road information
TE474-Asst Prof Aamir Masood
AGCH MESSAGES
For dedicated channel assignment:
frequency number
slot number
frequency hopping description
Timing Advance (1st estimation)
MS identification
RACH MESSAGES
Service request:
emergency call
answer to an incoming call
outgoing call
short message
call re-establishment
inscription
PCH MESSAGES
messages containing a mobile
Traffic channel
Frame
4.615 ms
TS TS TS TS TS TS TS TS TS TS TS TS TS TS TS TS TS TS TS TS TS TS TS TS
0
1 2 3 4 5 6 7 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7
TS TS TS TS TS TS TS TS
0 1 2 3 4 5 6 7
1326
frames
1
0
21 22 23 24 25
TS TS TS TS TS TS TS TS
0 1 2 3 4 5 6 7
46 47 48 49 50
46
22
47
23
48
24
49
50
25
slide-80
T T T T T T T T T T T T A T T T T T T T T T T T T
time
T0 T1 T0 T1 T0 T1 T0 T1 T0 T1 T0 T1 A0 T1 T0 T1 T0 T1 T0 T1 T0 T1 T0 T1 T0 A1
T : TCH
Ti : TCH
sub-channel n i
A : SACCH
Ai : SACCH
sub-channel n i
time
: IDLE
slide-81
D0
D1
D2
D3
D4
D5
D6
D7
A0
A1
A2
A3
D0
D1
D2
D3
D4
D5
D6
D7
A4
A5
A6
A7
time
Uplink
51 frames = 235 ms
A5
A6
A7
D0
D1
D2
D3
D4
D5
D6
D7
A0
A1
A2
A3
D0
D1
D2
D3
D4
D5
D6
D7
A4
time
A : SACCH
TE474-Asst Prof Aamir Masood
D : SDCCH
: IDLE
slide-82
Multiframe
m+1
51 frames = 235.38 ms
FS
FS C
FS
FS C
FS C
FS
time
PCH/AGCH
BTS
Physical Channel
ARFCN (n)
Logical Channels
F : FCCH
TS (s)
S : SCH
SCH
BCCH
FCCH
B : BCCH
C : PCH/AGCH
MS
: IDLE
slide-83
FS
FS
FS
FS
FS
C
time
Uplink
51 frames = 235 ms
RRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRR RRRRRRRRRRRRRRRRRR
time
F : FCCH
S : SCH
B : BCCH
: AGCH
C /PCH
R : RACH
: IDLE
slide-84
BCCH Combined
Logical Channel Mapping (4/5)
Downlink
51 frames = 235 ms
FS
FS
FS
D0
D1
FS
D2
D3
FS
A0
A1
FS
FS
FS
D0
D1
FS
D2
D3
FS
A2
A3
time
Uplink
51 frames = 235 ms
D3
RR
A2
A3
RRRRRRRRRRRRRRRRRRRRRRR
D0
D1
RR
D2
D3
RR
A0
A1
RRRRRRRRRRRRRRRRRRRRRRR
D0
D1
RR
D2
time
: AGCH
R : RACH
A : SACCH
D : SDCCH
: IDLE
slide-85
10
FS
FS
20
30
FS
TTTTT TTTTTTTATTTTTTTTTTTT
01
12
40
FS
FS
50 0 1
FS
TTTTTTTTTTTTATTTTTTTTTTTT
25 0 1
12
25
Downlink message
Uplink message
Mobile activity
Rx
Tx
Rx Rx
(n)
Tx
Rx
(n)
Rx
Tx
Neighboring BTS
(downlink)
Measurement Window
TE474-Asst Prof Aamir Masood
slide-86
Speech
Step 1
Digitizing and
source coding
Source
decoding
Step 2
Channel
coding
Channel
decoding
Interleaving
De-interleaving
Step 3
Burst formatting
Step 4
Ciphering
Step 5
Modulation
Step 6
Transmission
Burst deformatting
Deciphering
Demodulation
equalization
Diversity
slide-87
Quality
Excellent
Good
Fair
Poor
Bad
Codec Type
Rate (kb/s)
PCM A law
GSM EFR
CDMA 13
D-AMPS
GSM FR
CDMA 8
4.25
4.2
4.2
4
3.8
3.4
64
12.2
13
8
13
8
MOS
5
4
3
2
1
slide-88
Channel Processing
Overview
20 ms
Speech blocks
20 ms
20 ms
260 bits
260 bits
260 bits
Source coding
Channel coding
456 bits
A A A A
5 6 7 8
Normal
burst
A5
B1
A6
B2
A7
B3
A8
B4
B5
C1
B6
C2
456 bits
8 Sub blocks
of 57 bits
B B B B B B B B
1 2 3 4 5 6 7 8
Interleaving
8 Bursts
456 bits
B7
C3
C C C C
1 2 3 4
B8
C4
57 bits
26 bits
57 bits
Tail
Information
CRL
Training
CRL
Information
Tail
slide-89
...
456
coded bits
0
8
1
9
2
10
3
11
4
12
5
13
6
14
7
15
448
449
450
451
452
453
454
455
57 Rows
reordering
&
partitioning
out
3
diagonal
interleaving
bit
interleaving
burst
b0 b1
b56
b0 b1
b56
slide-90
Burst Formatting
Normal Burst
1 frame:
4.615 ms
0
Training
DATA
3
S sequence S
57
26
Burst
148 bits
Guard
Band
DATA
57
8.25
Guard
156.25 bits
0.577 ms
slide-91
Burst Formats
Frequency Correction Burst
(FCCH)
Tail
Data
3 bits
Tail
3 bits
Guard
Period
8.25 bits
Synchronization Burst
(SCH)
Tail
Data
Data
64 synchronization bits
39 bits
Tail
Guard
Period
slide-92
Burst Formats
Normal Burst
Tail
Data
Training Sequence
26 bits
Data
1
Tail
57 encrypted bits
Guard
Period
Dummy Burst
Tail Dummy Sequence
Training Sequence
28 midamble bits
Guard
Period
Tail
Training
Sequence
8 bits
41 synch bits
Access Burst
Data
Tail
Guard Period
68.25 bits
slide-93
Ciphering
Burst to be
transmitted
Plain data:
Ciphering sequence:
XOR:
Ciphered data (transmitted):
Ciphered sequence:
XOR:
Recovered data:
Data
Data
0 1 1 1 0 0 1 0.....
0 0 0 1 1 0 1 0.....
0 1 1 0 1 0 0 0.....
0 0 0 1 1 0 1 0.....
0 1 1 1 0 0 1 0.....
Received
burst
TE474-Asst Prof Aamir Masood
Data
Training
S
sequence
Data
slide-94
Modulation
GMSK Modulation
Bit 0
Bit 1
phase shift + 90
phase shift - 90
I = sin (t + )
Q
GMSK
Modulator
Q = cos (t + )
GMSK
Signal
'1'
- 90 + 90
'0'
I
Carrier
Frequency
slide-95
speech
decoder
Hearpiece
Digital to
Analog
Converter
Microphone
Comfort
noise
function
speech
encoder
Analog to
Digital
Converter
From receiver
To transmitter
Voice Activity
Detection
slide-96
slide-97
NSS Architecture
EIR
AuC
PSTN
BSC
MSC
BSC
VLR
HLR
MSC
slide-98
NSS Architecture
Site 1
Site 2
AUC
HLR
BSS
VLR
BSS
VLR
G-interface
B-interface
A-interface
B-interface
C-interface
MSC
GMSC
Other GSM,
PSTN, ISDN
Other GSM,
PSTN, ISDN
E-interface
F
E
IWF
Billing
Server
A-interface
F
EIR
SMS-SC
IWF
Billing
Server
slide-99
Permanent records
- MSISDN
- IMSI
- Subscriber's service provision
Temporary records
- VLR address
- Ciphering items
(Kc, Sres, Rand)
slide-100
Authentication Center
AUC
Ki
Ciphering Triplets
RAND
HLR Request
Security
A3, A8 algorithms
IMSI
AUC provides
slide-101
VLR
LA1
Permanent records
- IMSI
- Subscribers service provision
LA3
LA2
Temporary records
- Ciphering items
(Kc, Sres, Rand)
- LAI - TMSI
LA4
slide-102
EIR
IMEI
Black list
(barred ME)
White list
(valid ME)
Mobile
Equipment
Gray list
(faulty ME)
slide-103
To PSTN
A
C
GMSC
BTS
VLR
B
HLR
E
EIR
G
F
BSS
BSC
BTS
MSC
B
AUC
VLR
Nortel HLR/AuC is
housed in the DMSHLR
Nortel VLR is housed
in the DMS-MSC
slide-104
GMSC
HLR
VMSC
AUC
slide-105
BSS
VMSC
Provides ticketing.
BSC
BTS
VLR
Handles inter-MSC
handovers.
- Informs VLR of
new location.
- Gets roamer
access grant for
services.
BSS
BSC
BTS
MSC
EIR
Check
MS
available
slide-106
Timing
generator
X.25
couplers
Switch
CCS7
couplers
E1/T1
trunks
BSS
E1/T1
trunks
Common bus
Command Unit
Inter-Working
modules
Echo
Canceler
Computer
and
peripherals
module
To other MSC
To PSTN / ISDN
TE474-Asst Prof Aamir Masood
slide-107
InterWorking Function
BSS
Mobile
Switching
Center
PSTN
Modem
MS
Data +
DTE signals
Rate
adaptation
DTE
signaling
Modem
IWF
Land-DTE
DTE
TE474-Asst Prof Aamir Masood
slide-108
InterWorking Function
BSS
Mobile
Switching
Center
PSTN
Modem
MS
Data +
DTE signals
Rate
adaptation
DTE
signaling
Modem
IWF
Land-DTE
DTE
TE474-Asst Prof Aamir Masood
slide-109
Echo Canceler
4 wire
circuit
(PCM)
GSM network
4 wire circuit
Mobile
Switching
Center
Echo
Canceler
Talker Echo
Switch
Talker Echo
Base
Station
SubSystem
PSTN
4 wire
circuit
4w to 2w
transformer
slide-110
HLR
Note MS
Present
PSTN
SS7 MAP
Voice trunks:
R2, ETSI ISUP...
SMPP
(X.25 or TCP/IP)
SS7 MAP
Voice trunks:
R2, ETSI ISUP...
VMS
MSC
MF
T
D
X.25
SS7 MAP
SME
SME
SMSC
SS7 DTAP
BSC
SME
Forward Short Message
Delivery Report
Various applications
submitting
Short Messages
slide-111
MS
TX Mail
User 1
User Mail
RX Mail
User 2
Virtual FAX
SMS-SC
Voice Mail
System
PLMN
Call answering
Numeric messaging
TE474-Asst Prof Aamir Masood
TUES 11:46
Urgent Messages: 1
Normal Messages: 3
Played Messages: 2
Call 123# to retrieve
Notification/automatic
delivery of messages
slide-112
Service
Control
Point
SDF
Service Data
SCF
Service Control
Service
Management
System
SRF
Specialized
Resource
HLR
SSF
Service Switching
CCF
Call Control
Service
Creation
Environment
Intelligent
Peripheral
GMSC
Service
Switching
Point
slide-113
Procedures
slide-114
MNC
=
01 (FTM)
10 (SFR)
20 (Bytel)
MCC
=
208 (France)
234 (G-B)
GSM
IMSI = 15 digits max
Mobile
Country
Code
Mobile
Network
Code
3 digits
2/3 digits
LAI
Mobile
Country
Code
Mobile
Network
Code
3 digits
2/3 digits
NMSI
Temporary Mobile
Subscriber Identity
4 octets
slide-115
Country
Code
CC
National
Destination
Code
Must be dialed to
make a call to
mobile subscriber
MSRN
Country
Code
CC
Country
Code
CC
National
Destination
Code
National
Destination
Code
CC = 33 (France)
HO-number
Is a PSTN-like
number used to
reach a roaming
MS
Is a PSTN-like
number to track
the MS which
hands over to
another MSC during
call-in-state
slide-116
PE VED
Y
T O
PR
P
A
TAC
Type Approval
Code
FAC
SNR
SP
Serial NumbeR
(SPare)
Final Assembly
Code
slide-117
GSM s Actors
NSS
BSS
Public
Switched
Telephone
Network
MSC
BSC
BTS
VLR
HLR
AUC
Mobile subscriber
TE474-Asst Prof Aamir Masood
Fixed subscriber
slide-118
Cell Selection
Purpose: get synchronization
with the GSM network
prior establishing any communication.
1
BTS-5
BTS-4
H
FCC
1
5
BTS-3
SCH
CH
BC
BTS-2
2
3
4
BTS-1
This cell
slide-119
Immediate Assignment
BTS
MS
1
CHANNEL REQUEST
RACH
CHANNEL REQUIRED
CHANNEL ACTIVATION
IMMEDIATE ASSIGNMENT
AGCH
OR
6
MSC
BSC
CHANNEL ACTIVATION
ACK.
IMMEDIATE ASSIGNMENT
COMMAND
Immediate
Assignment
CM SERVICE REQUEST
SDCCH or TCH
LOCATION UPDAT. REQU.
SDCCH or TCH
slide-120
1
2
BSS
IMSI
3
TMSI
Release
3
TMSI
BSC
5
MSC
5
6
BTS
TMSI
5
LAI
IMSI
VLR id
VLR
HLR
4
IMSI
TMSI
LAI
slide-121
1
2
BSS
2
BSC
3
4
BTS
MSC
3
4
2
New TMSI
TMSI
3
New LAI
VLR
IMSI
TMSI
LAI
slide-122
1
2
1
BSC
MSC
5
7
BTS
2
TMSI New TMSI
5
New LAI
New VLR
Old VLR
IMSI, TMSI
Old LAI
RAND, SRES, 4
Kc
IMSI,TMSI
LAI
RAND, SRES,
Kc
HLR
6
new
VLR id
subscriber
data
slide-123
IMSI Attach
CHANNEL
REQUEST
IMMEDIATE
ASSIGNMENT
BSS
2
3 LOCATION UPDATING
LOCATION UPDATING
5
ACCEPT (LAC, TMSI)
BSC
BTS
3
4
MSC
5
4
VLR
6
slide-124
IMSI Detach
CHANNEL
REQUEST
IMMEDIATE
ASSIGNMENT
BSS
2
BSC
IMSI DETach
INDication
CHANNEL
RELEASE
BTS
IMSI DETach
INDication
MSC
VLR
slide-125
Authentication
1 - Principle
MS
Radio
Interface
GSM
AUC
(A3 and A8)
Ki (128 bits)
Ki (128 bits)
A3
RAND
A3
A8
=?
SRESm
(32 bits)
SRES
A8
A8
OK
CIPHER
MODE
RAND = RANDom number
SRES = Signed RESponse
Kc = Ciphering Key
Ki = Identification Key
Ki
A3
A3
SRESm
A8
SIM card
Ki
NSS
BSS
Kc
Kc
slide-126
Authentication
2 - Procedure
SRESm
CIPHER
MODE
RAND
BSC
SRESm
Ciphering
Command
BTS
Purpose:
Avoid logging of lost,
stolen or
forgery SIM-Cards.
MSC
7
6
HLR
1
Ki
5
RAND
Triplets
RAND
BSS
SRESm
RAND
VLR
SRESm = SRES ?
1
A3
SRESm
3
(RAND, SRES, Kc)
2 AUC
(A3 and A8)
slide-127
Ciphering
1 - Principle
BTS
MS
Frame Number
(22 bits)
Radio
interface
Frame Number
(22 bits)
A5
A5
Kc (64 bits)
Kc (64 bits)
Block
(114 bits)
Data to transmit
Received data
Block
(114 bits)
+
+
Block
(114 bits)
Ciphered
data
Block
(114 bits)
Received data
+
+
Data to transmit
: exclusive-or
slide-128
Ciphering
2 - Procedure
BSS
Kc
BSC
Kc
BTS
CIPHER MODE
COMPLETE
Ciphered
data
A5
TDMA#
Kc
MSC
Rand
VLR
A8
Kc
TE474-Asst Prof Aamir Masood
slide-129
Outgoing call
GREAT BRETAIN
FRANCE
GERMANY
Telephone
network
BSS
BSC
BTS
Terminating
MSC
VLR
Gateway
MSC
HLR
FT
TE474-Asst Prof Aamir Masood
slide-130
MS
CHANNEL REQUEST
Dialing
VLR
IMMEDIATE ASSIGNMENT
CM SERVICE REQUEST
3
3
Sending
Number
PSTN
MSC
Authentication procedure
Ciphering procedure
SETUP (basic) or
EMERGENCY
CALL PROCEEDING
7
CM SERVICE REQUEST
SETUP
CALL PROCEEDING
ALERTING
CONNECT
Path
Established
11
TE474-Asst Prof Aamir Masood
Ring
Ringing
Assignment procedure
Ringing
IAM
ACM
9
ANM
11
CONNECT ACKnowledge
8
10
Incoming Call
GREAT BRETAIN
FRANCE
GERMANY
Telephone
network
BSS
BSC
BTS
Terminating
MSC
VLR
Gateway
MSC
HLR
FT
TE474-Asst Prof Aamir Masood
slide-132
BSC1
BTS11
5
BTS12
MSC/
VLR
GMSC
PSTN
BSC2
BTS21
2
BTS22
LA2
HLR
BSC3
BTS23
BTS31
slide-133
Home PLMN
International
SS7
VLR
HLR
4
Roaming Number
(MSRN)
9
PAGING
REQUEST
(TMSI)
Send info
to I/C
(MSRN)
PAGE
(TMSI + LA)
BSS
Routing
Information
(MSRN)
11
PAGING
REQUEST 10
(TMSI + LA)
VMSC
Send
Routing
Information
(MSISDN)
1
MSISDN
3
IAM (MSRN)
IAM
7 GMSC (MSISDN) 2
ISDN
PN
IAM
MSISDN
MSRN
IMSI
GMSC
VMSC
TMSI
:
:
:
:
BSS
MS
PAGING REQUEST
PAGING REQUEST
(TMSI or IMSI, LA)
IAM
(MSRN)
PSTN
GMSC
2
IAM
(MSISDN)
Dialing
CHANNEL REQUEST
(LAC, Cell ID)
IMMEDIATE ASSIGNMENT 6
(SDCCH or TCH)
CM SERVICE REQUEST
(Paging Response)
8
9
Ringing
10
12
PAGING RESPONSE
(TMSI or IMSI, LA)
Authentication procedure
Ciphering procedure
Setup, Assignment, Alerting
CONNECT
11
12
Path
Established
slide-135
Tromboning effect
FRANCE
GERMANY
Telephone
network
Gateway
MSC
BSS
BSC
Terminating
MSC
BTS
HLR
VLR
FT
slide-136
Call Release
1 - Mobile Initiated
MSC
BSS
MS
Call in progress
DISCONNECT
RELEASE
4
DISCONNECT
RELEASE
RELEASE COMPLETE
CHANNEL RELEASE 6
7
PSTN
Release
RELEASE INDICATION
RF Channel Release
procedure
8
9
Release
tone
slide-137
Call Release
2 - PSTN Initiated
3
BSC
4
5
BSS
BTS
4
5
MSC
REL
6
RLC
PSTN
Purpose:
informs the mobile
then releases radio
and network resources.
On hook
slide-138
Prevention
Signal strength
Distance
Quality
Maintenance
Lack of resources:
Directed Retry
Power budget
Micro cellular
environment
slide-139
MSC-A
BSC-C
BSC-A
BTS
C1
BSC-B
BTS
B1
BTS
A1
BTS
A2
slide-140
MSC-A
BSC-C
BTS
C1
BSC-B
BSC-A
BTS
B1
BTS
A2
1
BTS
A1
4
3
1- Intra-Cell HO
2- Intra-BTS HO
3- Intra-BSC HO
4- Inter-BSC HO
5- Inter-MSC HO
slide-141
Handover Preparation
MSC
BSC
BTS-1
Me
as
u
re rem
su
lts ent
er
h
ot els
s
n ann
a
sc ch
S
M c on
a
be
BTS-2
Cell 1
Cell 2
TE474-Asst Prof Aamir Masood
slide-142
OMC-R
k
lin
n
nt
w
Do reme
Uplink
u
as ort
Measurement
Me rep
Parameters
(criteria threshold)
BSS 1
Handover
BSS 2
MSC
External
External
Handover
Required
Handover
Request
Handover
Command
ACK
Algorithm
Handover decision
TE474-Asst Prof Aamir Masood
Handover execution
slide-143
Handover Decision
Decision criteria:
- bad quality,
- weak signal strength,
- cell boundaries,
- etc.
MSC
BSC
e
bl r
ti a ove
su nd 6)
f
a
to rh m=
s
Li s fo mu
ll xi
ce (ma
BTS-1
BTS-2
Cell 1
Cell 2
TE474-Asst Prof Aamir Masood
slide-144
Handover Execution
MSC
BSC
HO
ds
an S
mm e M
Co to th
d
an
m
m MS
o
C he
O
H to t
BTS-1
BTS-2
Cell 1
Cell 2
TE474-Asst Prof Aamir Masood
slide-145
Intra-BSC Handover
BTS1
MS
BTS2
HO INDICATION
HO
Initiation
CHANNEL ACTIVATE
3
HO COMMAND
HO COMMAND
5
7
PHYSICAL INFO **
HandOver COMPLETE
11
HO
Acknowledg.
HO DETECTION
HO
Execution
10
HO ACCESS *
ESTABLISH INDICATION
HO COMPLETE
RF CHANNEL RELEASE
14
MSC
BSC
12
HO COMPLETE
13
slide-146
Inter-BSC Handover
MS
HO
Initiation
HO COMMAND
HO INDICATION
HO COMMAND
MSC
BSC1
BTS1
HO REQUIRED
BSC2
HO REQUEST
HO REQUEST ACK
HO COMMAND
BTS2
CHANNEL ACTIVATE
HO ACCESS *
10
HO DETECTION
HO
Execution
HO DETECTION
PHYSICAL INFO
11
12
13
ESTABLISH INDICATION 14
HandOver COMPLETE
15
HO
Acknowledg.
RF CHANNEL RELEASE
CLEAR COMMAND
19
20
21
HO COMPLETE
18
HO COMPLETE
17
16
CLEAR COMPLETE
slide-147
Inter-MSC Handover
BSC 1
BTS
MSC 1
1a
1
1b
BTS
Terrestrial link
BSC 2
2a
BTS
2b
PSTN
3
BTS
BTS
3a
3b
BSC 3
MSC 2
3
slide-148
Inter-MSC Handover
7
3
MSC-A
PSTN
MSC-B
c
MSC-C
2
4
1
BSC-A
BSC-C
BSC-B
b
a
BTS
BTS
5
b
a
BTS
slide-149
1998
Data 4%
Data 70%
Voice 30%
Voice 96%
2005
slide-150
ISDN
photo
web
PSTN
video
clip
report
photo
report
photo
web
web
GSM
10 sec
video
clip
report
video
clip
photo
web
report
video
clip
photo
1 min
report
10 min
video
clip
1 hour
Transmission Time
TE474-Asst Prof Aamir Masood
slide-151
in t r a n e t
30 min delay
throughput kbps
1M
et
k
c
a
Mobile
Mobile Data
Data Rate
Rate
Explosion
in
Next
Explosion in Next 44 Years
Years
alternative: A2
100 k
64 k
c ir
uit
10 k
9.6
1k
SMS
HSCSD
14.4
GPRS
1998
1999
EDGE
2000
2001
UMTS
2002
timeframe
FTSE
-1
index 00
slide-152