Anda di halaman 1dari 152

The Global System for

Mobile communication (GSM)

TE474-Asst Prof Aamir Masood

slide-1

Analog Cellular Systems Around the World

1981 NMT
The Nordic Solution
Now 18 Millions Subscribers

450 MHz and 900 MHz

NORWAY, DENMARK
FINLAND, SWEDEN,
FRANCE (450 MHz)

TE474-Asst Prof Aamir Masood

1979 AMPS
800 MHz
Now 25 Millions
Subscribers

1985 TACS in UK
800 and 900 MHz

Dedicated developments

1985
1986
RADIOCOM 2000
C.450
FRANCE
GERMANY
400 MHz
450 MHz
900 MHz

Japan
NTT cellular (1979)
JTACS (1988)
slide-2

The Application of the Radio Spectrum


AM
0.3

0.4

0.5

0.6

0.7

0.8

0.9 1.0

Marine
1.2

1.4

1.6

1.8

2.0

2.4

Short Wave - International Broadcast - Amateur


3

40

12

50

60

70

80

90 100

14

16

VHF

FM

VHF LOW Band


30

10

CB

120

140 160

0.4

0.5

0.6

0.7

0.8

0.9 1.0

TE474-Asst Prof Aamir Masood

28 30 MHz

180 200

240

300 MHz

GPS

0.3

Land-Mobile

26

GSM1800, GSM1900

UHF TV 14-69

Broadcasting

24

VHF TV 7-13

Cellular
UHF

18 20

10

1.2

12

Aeronautical
Mobile telephony

1.4

14

1.6

16

1.8

2.0

18 20

2.4

3.0 GHz

24

30 GHz

Terrestrial Microwave
Satellite
slide-3

GSM Family Radio Band Spectrum

Uplink

915
915

876 880

890

915

1710

1785

1850

1910

P-GSM
E-GSM

GSM 1900

GSM 1800

R-GSM
921 925

935

960
960

1805

1880

1930

1990

MHz

960

Downlink

TE474-Asst Prof Aamir Masood

slide-4

GSM Specifications

12 SERIES
OPERATION AND
MAINTENANCE

01 SERIES
GENERAL

02 SERIES
SERVICE ASPECTS

11 SERIES
EQUIPMENT AND TYPE
APPROVAL SPECIFICATIONS

03 SERIES
NETWORK ASPECTS

10 SERIES
SERVICE INTERWORKING

04 SERIES
MS-BSS INTERFACE AND
PROTOCOLS

09 SERIES
NETWORK
INTERWORKING

05 SERIES
PHYSICAL LAYER ON THE
RADIO PATH.

08 SERIES
BSS TO MSC INTERFACES

TE474-Asst Prof Aamir Masood

07 SERIES
TERMINAL ADAPTERS
FOR MOBILE STATIONS

06 SERIES
SPEECH CODING
SPECIFICATIONS

slide-5

Basic Network Overview

TE474-Asst Prof Aamir Masood

slide-6

SIM-Card and GSM Mobile Equipment

SIM-Card

Global GSM Mobility


Card
The Smart Card to use

Calling line
0609225831

GSM
Contains:
- IMSI

Subscriber knows
- Called party number = MS-ISDN
- PIN

Handset
TE474-Asst Prof Aamir Masood

slide-7

The SIM-Card Functions


Credit Card Size

SIM-Card

Global GSM Mobility


Card
15 mm

The Smart Card to use

25 mm

Permanent data:
- Unique mobile subscriber identity
through IMSI number,
- Authentication parameter Ki,
- Authentication algorithm A3,
- Generating encryption key Kc
algorithm A8.

TE474-Asst Prof Aamir Masood

GSM
Microchip with stored
user information

Removable data:
- Temporary Mobile Subscriber Number,
- Location Area Identification.
slide-8

Subscriber Identification
IMSI
Nature

International Mobile Subscriber Identity

Mobile Station Integrated Services Digital Network Nb

Conformity with E212

Similar to ISDN,
Conformity with E164/E213

Identify a PLMN
worldwide

MCC

MNC

Meaning

Mobile
Country
Code

Mobile
Network
Code

Nb. digits

Format

MS - ISDN

Identify the subscriber


of a PLMN

H1 H2

MSIN

x x x ......... x x x

Mobile Subscriber
Ident. Nb
H1 H2 = Identity of HLR
within the home PLMN

max 10

National Significant Mobile Number

CC

NDC

M1 M2

SN

xx xx xx xx

Country
National
Mobile Subscriber
Code
(national definition)
(where Destination
Code
*
M1
M2
= nbr of logical HLR
subscription
has been made)

1 to 3

2 to 4

total max 15

* This code does not identify a geographical area


but an operator
TE474-Asst Prof Aamir Masood

slide-9

Mobile Identification

PE VED
Y
T O
PR
P
A

TAC
Type Approval
Code

TE474-Asst Prof Aamir Masood

FAC

SNR

SP

Serial number

(SPare)

Final Assembly
Code

slide-10

Network Overview
BTS

NSS

BSS
BSC

PSTN

MSC

MS

OMC-R
TE474-Asst Prof Aamir Masood

OSS

OMC-S
slide-11

Teleservices
1 - Telephony

Hello
Speaking

Originated
call

Speaking
Hello

Terminated
call

TE474-Asst Prof Aamir Masood

slide-12

Teleservices
2 - Emergency Call

Global GSM Mobility


Card
The Smart Card to use

Emergency
112

GSM

Do not require a SIM-Card


while "112" is invoked
TE474-Asst Prof Aamir Masood

slide-13

Teleservices
3 - Short Message Cell Broadcast

me
ss
me

ssa

ge

sa
mes
m

age

sag
mes

eA

Information
Provider A

ge A

ag
ess

g
sa
s
e
m

eB

mess

ge
a
s
es
m

age B

Information
Provider B

GSM Network
TE474-Asst Prof Aamir Masood

slide-14

Teleservices
4 - Short Message Service

Radio
PLMN

SMS-MO/ PP

SMS-SC
Radio
PLMN

SMS-MT/ PP

TE474-Asst Prof Aamir Masood

Copyright1996NorthernTelecom

slide-15

Teleservices
5 - Fax
Alternate Speech and Fax:

Automatic fax:

TE474-Asst Prof Aamir Masood

slide-16

Teleservices
6 - User's Data Call Features

Teleservices
voice

Embodied
bearer
treatments for
radio transmission

Teleservices
Fax G3, SMS

Cable that
bears data

Data / Fax
kit adaptation

TE474-Asst Prof Aamir Masood

slide-17

Teleservices
7 - Voice Messaging

Please leave
a message
after the tone

Busy

Forward
to voice
mail box

Voice mail
box

GSM
network
You have
3 voices
messages...

Retrieving the voice


messages

Voice
message
server

Warming up...
TE474-Asst Prof Aamir Masood

slide-18

Supplementary Services
Calling Party
CoLP
CLIR

Cnted line
0609173957

1 - Line Identification
Calling Line Identification
presentation

(CLIP)

restriction

(CLIR)

Connected Line Identification


presentation

(CoLP)

restriction

(CoLR)

Called Party
CLIP
CoLR

Calling line
0609225831

Calling Name Presentation


(CNAP)
TE474-Asst Prof Aamir Masood

slide-19

Supplementary Services
2 - Call Transfer and Call Forwarding

unconditional

(CFU)

on busy

(CFB)

on no reply

(CFNRy)

on not reachable (CFNRc)

TE474-Asst Prof Aamir Masood

slide-20

Supplementary Services
3 - Waiting / Hold and Multi Party
WAIT
1

HOLD

Waiting / Hold:

Multi Party:

Max = 5
persons
2

TE474-Asst Prof Aamir Masood

slide-21

Supplementary Services
4 - Call Barring

Outgoing (BAOC)
Outgoing international (BOIC)
Outgoing international
except home PLMN country (BOIC-exHC)

Incoming (BAIC)
Incoming when roaming outside
(BIC-Roam)

TE474-Asst Prof Aamir Masood

slide-22

Supplementary Services
5 - Call Completion (CCBS)

NEW!
BUSY
...

Unable to place
a call.

Speaking

Speaking

This call in state

Reinitiate
the call

Ring !

Ring !

Idle

SPEAKING

Call is
established

HELLO
1

TE474-Asst Prof Aamir Masood

slide-23

Supplementary Services
6 - Advice of Charge

Advice of Charge Information (AoCI)


information on progress
of the cost of the call

Advice of Charge Charging (AoCC)

Insert a
SIM credit Card
Completion of call
need charging

TE474-Asst Prof Aamir Masood

slide-24

Intelligent Network Services


IN and CAMEL

Main IN Services:

Personal Number
Virtual Private Network (VPN)
Sponsored Cell & Call
Prepaid Calling
Location Inquiry
Geo Zone

The aim of the CAMEL (Customized Application for Mobile network Enhanced
Logic) is to provide GSM network operators with the ability to create specific
services in their home network, and export these services to their subscribers
when roaming outside the home network.
CAMEL introduces the ability to provide location dependent IN type of services
to mobiles subscribers.
TE474-Asst Prof Aamir Masood

slide-25

IN Services: Virtual Private Network


Closed User Group

Location & Time


dependant screening

1
4
7

2
5
8
o+

3
6
9

4197

** 0 #
7PRS8TUV9 WXY
4GHI 5JKL 6MNO

Copyright1996NorthernTelecom

4446
25 c/min

4197

Corporate Numbering Plan


Lower rate for on-net calls

c
1
4
7

London

Bristol

2
5
8
o+

3
6
9

Copyright1996NorthernTelecom

Location & Time


dependant routing

5696

Copyright1996NorthernTelecom

Copyright1996NorthernTelecom

25 c/min

5696

2ABC3DEF

Wireline Access

25 c/min
4446
Speed Dialing

50 c/min

924 63256

Copyright 1996 Northern Telecom

TE474-Asst Prof Aamir Masood

Copyright1996NorthernTelecom

Copyright1996NorthernTelecom

slide-26

IN Services: Prepaid Calling


Las
cos t call
Newts $ 0.
is $ balan50
24.5 ce
0

5542 1139 1464 228 99494


6/91

6/99

Copyright1996NorthernTelecom

SCOOBY DOO

Your account
balance
is $ 24.50

Copyright1996NorthernTelecom

Multiple recharging options

Account status
enquiry and
notification

Copyright1996NorthernTelecom

RANK1ONE
VALID DATES

Multiple Tariff Plans


Tariffs using fixed charge, CC, NC, distance, time & day, roaming
charges...
Possible language selection by subscriber
Flexible features for easy
Bulk account loading for easy provisioning service packaging
TE474-Asst Prof Aamir Masood

slide-27

IN Services: Sponsored Cell & Call

TE474-Asst Prof Aamir Masood

Sponsors can also change their


announcements on the phone

Copyright1996NorthernTelecom

Your next two minute calling is


brought to you free today by
The leather Shop located on
first level of the Central
Shopping Centre.
Come and visit us
Today, up to 50 % off on
handbags !

Today, up to 50 % off
on handbags !

Copyright1996NorthernTelecom

Copyright1996NorthernTelecom

...made from
specified
locations
at predefined
times of day

Sponsors can
target specific
customers
by sponsoring
some of their
calls...

Copyright1996NorthernTelecom

Calls from this


location are
sponsored.
Today buy one
dinner at Bellinis on
Keith Street, near the
cinemas, and get one
free!

Service can be offered via access


code or through subscription
slide-28

IN Services: Location Inquiry


The closest restaurants are:
The Wind Jammer
on 132 Flinton Street
Sea food
Phone 55 1968
press 1 to connect
Copyright1996NorthernTelecom

The Palace
on 11 Bourke Street
Chinese food
Phone 55 0407
press 2 to connect

Promotional
Informations:
call #15

Cell dependent information


Direct connection to advertisers
TE474-Asst Prof Aamir Masood

Todays special at
The Anchor is Maine
lobster soup
Be the first ten caller and
get a free cocktail !

Copyright1996NorthernTelecom

The Anchor
St Catherine Dock
Phonce 56 2548
Press 2 to connect

Copyright1996NorthernTelecom

The closest restaurants are:


The Tower, Tower Hill,
Phone 56 4589,
Press 1 to connect

Possible customization of announcement


directly by the advertiser
slide-29

IN Services: Geo Zone


1 - Outgoing Calls

This call is being


made outside of your
home zone.
Wait to complete it or
hang-up now.

Copyright1996NorthernTelecom
Copyright
1996
N orthern
Telecom

Copyright1996NorthernTelecom

Office Zone

Wide Area
Cellular

Home Zone

15 c/min

50 c/min

10 c/min

Specific rates applied to calls made from Home/Office zone


Multiple zones can be defined

Notification of current
zone before call set-up:
when in home/office zone
and/or
when out of zones

Different rates applied to calls made from specific locations


TE474-Asst Prof Aamir Masood

slide-30

IN Services: Geo Zone


2 - Incoming Calls

Calling the fixed number


When you are at home,
you are called directly

You are going to be


charged 5 c/min for
this call.

When you are away from home,


you decide if the call is routed to:

Wait to accept it or
hang-up now.
Copyright1996NorthernTelecom

Copyright1996NorthernTelecom

Voice mail

OR
With Notification

Your Caller pays


fixed line rate
You pay nothing

Your Caller pays


fixed line rate
You pay nothing

Copyright1996NorthernTelecom

Your Caller pays


fixed line rate
You pay the
forwarding leg

Notification of current
zone before incoming
call is connected:
when in home/office zone
and/or
when out of zones

Fixed network service with built-in mobility


TE474-Asst Prof Aamir Masood

slide-31

Coverage or Traffic Limitations


TRAFFIC
LIMITED
AREA
(10000
subscriber
per km2)

COVERAGE
LIMITED
AREA
(-75 dBm
at cell edge)

COVERAGE
LIMITED
AREA
(-70 dBm
at cell edge)
TE474-Asst Prof Aamir Masood

slide-32

Topology of Different Areas

20

20

20

20

40

60

100

60

60

20
100

100

60

100

20

100

Town
Suburb
Highway

20

20

20

Rural

TE474-Asst Prof Aamir Masood

slide-33

Cell Sectorization

TRI

OMNI
BI

TE474-Asst Prof Aamir Masood

slide-34

Omnidirectional Site Antennas

TE474-Asst Prof Aamir Masood

slide-35

Bi and Trisectorial Site Antennas

TE474-Asst Prof Aamir Masood

slide-36

Three Dimensions Antenna Pattern

TE474-Asst Prof Aamir Masood

slide-37

Calculated Coverage (Trisectorial Site)


1 Cell

1 site

TE474-Asst Prof Aamir Masood

slide-38

Link Budget Presentation


Parameters

Antenna Gain (65)


18 dBi

Frequency
1800 MHz
Base Height 40.0 m
Mobile Height 1,5 m
Environment Urban

Jumper Loss
0.5 dB
Feeder Loss
3 dB

Penetration Factor 15 dB

Sensitivity
-110 dBm
Coupling system
Tx loss
4.5 dB

RXm

Body Loss 3 dB

Outdoor Minimum Field


95%: -80 dBm
Coverage Range
95%: 810 m

Cable Loss
0 dB

Antenna Gain
-2 dB

TX

RX

Output Power
30 dBm

RXd

Sensitivity
Max TX Output Power
44.8 dBm

-100 dBm

Options
Rx Diversity Gain: 5 dB

Base Station
TE474-Asst Prof Aamir Masood

Mobile

Overlapping Margin: 0 dB
slide-39

Cochannel Interference
Power

Power

Wanted signal

Interfering signal

f1

Frequency

f1

Frequency

Power
combined
signal
The two signals are
superimposed

f1
TE474-Asst Prof Aamir Masood

Frequency
slide-40

The Frequency Reuse Distance


Reuse distance D

Frequency
Group A1

Other
frequencies

Other
frequencies

Frequency
Group A1

Wanted signal
Interfering signal

TE474-Asst Prof Aamir Masood

slide-41

Frequency Reuse Pattern


A4

Trisectorial
Site

C3

A2

Distance of
frequency reuse

C1

B2

A4

B1

A3

C3

B4

A2

A2

TE474-Asst Prof Aamir Masood

C2

B2

A4

C3

C2

4*3 Reuse
Pattern
of 12 cells

B4

A2

B1

A3

C1

B2

C4

A1

C1

B4

C2

B3

C3

C3

A2

B1

A3

B4

A4

C4

A1

B2

C4

B3

C1

A4

B1

A3

B4

C2

A1

C3

A2

B3

C1

B2

C4

A1

B4

A4

B3

C1

B2

slide-42

Frequency Reuse Pattern


Exercise

A1

C1

A1

B1

A3

C3

A2

C2

B3

C1

B2

A4

C4

B1

A3

C3

A2

C2

B2

B3

B4

TE474-Asst Prof Aamir Masood

slide-43

BSS Architecture

MSC
A Interface

Radio
Interface

TCU
S2000H&L
BTS

NSS

Ater Interface

Public Telephone Network

BSC

OMC-R

Abis Interface

MS

S8000
Outdoor
BTS
Radio
Interface

OMN Interface

Sun
StorEdge A5000

BSS
TE474-Asst Prof Aamir Masood

S8000
Indoor
BTS

MS
slide-44

Signaling in the BSS


OMC-R

Abis
BTS

X.25

Ater
BSC

LAPD
OML

A
TCU

MSC

LAPD
OML

LAPD
RSL
CCS7

TE474-Asst Prof Aamir Masood

slide-45

BSC General Architecture and Functions


BSC

- Radio Resource management


for its BTSs
- Intercell hand-over

Processing
Unit

- Allocation of channels for


communication
- Reallocation of frequencies
among BTSs

X.25
controller

O&M

Switching
matrix

- Time and frequency


synchronization to BTSs
- Controls frequency hopping
PCM
controller

BTS

TE474-Asst Prof Aamir Masood

Abis interface

PCM
controller

A interface

To Network
SubSystem

slide-46

Generic Architecture of the BSC


BSC

Central Processing Unit


X.25
Controller

Hard
Disk

To OMC-R

X.25

=
Processors

Control
MSC
TCU
BTS
bus
Signaling Signaling Signaling

To BTSs

PCM
Controller

Traffic
TS

TE474-Asst Prof Aamir Masood

TCU
Signaling
TS

BTS
Signaling
TS

MSC
Signaling
TS

Switching
Matrix

PCM
Controller

To TCU
and MSC

Traffic
TS

slide-47

BSC OMC-R Connection Options


X.25
Modem
X.25
Modem

OMC-R
Server

X.25 Switch
DPN 100

X.25 Network
OMN
Interface

X.25
Modem

X.25
Modem

MSC

BSC

A Interface

TCU

Or
Ater Interface

TE474-Asst Prof Aamir Masood

TCU

slide-48

TCU Functions

Converts the GSM speech frames into


PSTN / ISDN A-Law or -Law speech.

Adapts the users data frames from BSS


to V110 ISDN 64 kbps ISDN format.

BSS
MSC

TCU

BSC
BTS

A
Interface

Ater
Interface
TCU is the Nortel name for the Transcoder Rate Adapter Unit
TE474-Asst Prof Aamir Masood

slide-49

BTS General Architecture and Functions


BTS
Transmission coupler
COUPLING SYSTEM

- Encodes, encrypts, modulates,


feeds the RF signal to the antenna
- Decrypts and equalizes the signal
then demodulates
- Mobile call detection

Reception coupler

Antenna
Duplexer

- Interface between Antennas


and TRXs of each cell

TRX
(Transceiver-Receiver)

- Uplink channel measurements


- Timing advance
- Frequency hopping

BCF
(Base Common Functions)
Abis
interface

BSC

TE474-Asst Prof Aamir Masood

- Multiplexes speech and user's data channels to BSC.


- Multiplexes signaling channels to BSC.
slide-50

TRAU Architecture and Functions


Converts the 13 kbps GSM speech frame either
into a 64 kbps T1 PCM -law or into an E1 PCM A-law

Routes the users' data stream


to suitable Inter-working function

TRAU
Transcoder
Controller

T1 trunk
up to 92 user's
and
control channels

Ater
BSC

interface
E1 trunk
up to 120 user's
channels
TE474-Asst Prof Aamir Masood

Transcoder

T1 trunk = up to
24 user's channels

A
External PCM
Interface

MSC

interface

E1 trunk = up to
31 user's channels
slide-51

Benefit Having Remote TCUs


MSC

BTS
TCU
TS 1

TS 2

TS 3

TS 4

Four PCM time-slots between BTS and MSC when TCU is close to the BTSs.

MSC

BTS
TCU
TS 1

One PCM time-slot between BTSs and MSC when TCU is close to the MSC.

= Save three PCM time-slots !


TE474-Asst Prof Aamir Masood

slide-52

Speech on the BTS-TCU Interface


TCU

Speech handler
and DTX

BTS
Frame
Processor

BSC

GSM speech
decoder

13 bit linear
to
8 bit A or Law

Speech
handler

To MSC
Speech blocks
(260 bits/20 ms)
TE474-Asst Prof Aamir Masood

slide-53

OSI Reference Model


Layer

Description

Application

Selects necessary services

Presentation

Data conversion function

Session

Transport

End-to-end reliability

Network

End-to-end routing

Data Link

Point-to-point transfer

Physical

Cables and interfaces

TE474-Asst Prof Aamir Masood

Administration

slide-54

Protocol Model

NSS

MS
CM

CM

MM

BTS

RR

O&M
RR

L
A
P
D
m

RADIO

O&M

RSM

L
A
P
D
m

RADIO

MM

BSC

L
A
P
D

TE474-Asst Prof Aamir Masood

L
A
P
D

PCM

Um
Interface

R
R
S

Abis
Interface

BSSAP

BSSAP
D
B
S
T
S
A
M
A
P
P
SCCP

RR D
B
S
T
S
A
M
A
P
P
SCCP

M
A
P

T
C
A
P

I
S
U
P
/
T
U
P

SCCP

MTP3

MTP3

MTP3

MTP2

MTP2

MTP2

PCM

PCM E1/T1

MTP1

A-Interface
slide-55

Radio Interface
Protocols Involved
Level 3

Connection
ConnectionManagement
Management
Mobility
MobilityManagement
Management
Radio
RadioResource
ResourceManagement
Management

Level 2 = LAPDm
Logical Channels

Multiplexing

RACH

BCCH

Level 1
Physical Channels

TC0

PCH
AGCH

SDCCH

TC11 SACCH TC13

FACCH

TC24

SACCH

IDLE

(example)

TE474-Asst Prof Aamir Masood

slide-56

Abis Interface
1 - Presentation

Data

300, 1200, 1200/75, 2400,


4800, 9600, 14400 bit/s
LAPD

TE474-Asst Prof Aamir Masood

PCM

PCM

Speech 1 TS = 4 channels

Radio
O&M

slide-57

Abis Interface
2 - Protocols
BTS side
TRX

BSC side

BCF

RSM O&M

RSL

O&M

OML

Level 3
layer

LAPD
Level 2
layer

RSM = Radio Subsystem


Management

RSM O&M

O&M = Operation and


Maintenance

RSL = Radio Signaling


Link

RSL

OML

OML = Operation and


Maintenance
Link

Level 1 layer

TE474-Asst Prof Aamir Masood

slide-58

Ater Interface
1 - Presentation

Speech 1 TS = 4 channels
Data 300, 1200, 1200/75, 2400,
4800, 9600, 14400 bit/s
LAPD

O&M
SS7
X.25

TE474-Asst Prof Aamir Masood

slide-59

Ater Interface
2 - Traffic Channel and Signaling Links

Ater interface

A interface
TCU

LAPD TS 1

O&M

SS7 TS

BSC

Speech TS

Data TS

SS7 TS

Transcoding

Rate
Adaptation

MSC

Speech TS

Data TS

OMC
X.25 TS 2 *

X.25 TS 2 *

PCM link

PCM link

* if used
TE474-Asst Prof Aamir Masood

slide-60

A Interface
1 - Presentation

BSS

NSS

Speech/Data 1 TS = 1 channel
SS7

X.25

TE474-Asst Prof Aamir Masood

slide-61

GSM CCS7 Protocol Model


Layer
Mobile
Application
Part
(MAP)

Base Station
Subsystem
Application
Part
(BSSAP)

Transaction
Capabilities
Application
Part (TCAP)

BSSMAP

ISDN
User
Part
(ISUP)
DTAP

Signaling Connection
Control Part (SCCP)

Network

Link

Physical

TE474-Asst Prof Aamir Masood

Message
Transfer
Part
(MTP)

slide-62

A Interface
2 - Protocols
BSS

NSS

A-interface

To other
processes
within the BSS
To air
interface
transmission
equipment

DTAP

BSS
MAP

DTAP

Distribution
function

BSS
MAP

Other applications,
(eg call control)

Distribution
function

SCCP

SCCP

MTP

MTP

To other users
of the SCCP
and MTP

Physical layer

DTAP: Direct Transfer Application Part


BSSMAP: BSS Management Application Part
TE474-Asst Prof Aamir Masood

SCCP: Signaling Connection Control Part


MTP: Message Transfer Part

BSS: Base Station Subsystem


MSC: Mobile services Switching Centre
slide-63

PSTN/ISDN/PSDN Interface

GMSC

TUP

ISUP

Toll offices

DUP

Application layer

TUP

ISUP

DUP

Message transfer
MTP

MTP

Physical layer

TE474-Asst Prof Aamir Masood

slide-64

GSM Uses Paired Radio Channels


Case of GSM 900

Uplink
890 MHz

Frequency

channel #

Downlink
915 MHz 935 MHz

124

BTS

Frequency

960 MHz

channel #

124

Example:
Channel 48

Duplex spacing = 45 MHz


Frequency band spectrum = 2 x 25 MHz
Channel spacing = 200 kHz
TE474-Asst Prof Aamir Masood

slide-65

GSM Band Allocations (MHz)


GSM systems

Uplink

Downlink

Band

Duplex
Spacing

Duplex
channels

P-GSM 900
E-GSM 900
R-GSM 900
GSM 1800
GSM 1900

890-915
880-915
876-915
1710-1785
1850-1910

935-960
925-960
921-960
1805-1880
1930-1990

2x25
2x35
2x39
2x75
2x60

45
45
45
95
80

124
174
194
374
299

Frequencies are in MHz

ARFCN = n
P-GSM 900

Fl(n) = 890 + 0.2*n

1 n 124

Fu(n) = Fl(n) + 45

E-GSM 900

Fl(n) = 890 + 0.2*n


Fl(n) = 890 + 0.2*(n-1024)

0 n 124
975 n 1023

Fu(n) = Fl(n) + 45

R-GSM 900

Fl(n) = 890 + 0.2*n


Fl(n) = 890 + 0.2*(n-1024)

0 n 124
955 n 1023

Fu(n) = Fl(n) + 45

GSM 1800

Fl(n) = 1710.2 + 0.2*(n-512)

512 n 885

Fu(n) = Fl(n) + 95

TE474-Asst Prof Aamir Masood

slide-66

GSM Time Division Multiple Access (TDMA)


Frame and Physical Channels
Time-slot

TDMA frame

TDMA frame

TS TS TS TS TS TS TS TS TS TS TS TS TS TS TS TS
0

(frames repeat continuously)

Time
0

4.615 ms

9.23 ms

Physical channel # 2 = recurrence of time-slot # 2

TE474-Asst Prof Aamir Masood

slide-67

Physical Channel

BTS

time

n+1

TDMAs
n TS

n-1

MS1
MS3
MS2

FDMA

TE474-Asst Prof Aamir Masood

//

123

ARFCN
slide-68

GSM Delays Uplink TDMA Frames


BTS side

The start of the uplink TDMA


is delayed of three time-slots

TDMA Frame (4.615 ms)

6
R

7
R

Downlink TDMA
BTS

T
Down
link

MSs side
MS1

Up
link
T

MS2
Fixed transmit
delay of three
time-slots
TE474-Asst Prof Aamir Masood

slide-69

Propagation Delays

MS2

d1>>d2

d2

BTS Frame reference

TS0

Propagation Delay p

TS1

TS2

TS3

TS4

MS1

TS5

TS6

TS7

Bits Overlapping

MSs transmit

TE474-Asst Prof Aamir Masood

slide-70

Propagation Delay
TX BTS
RX BTS

CAN

GSM

CAN

RX MS2
TX MS2

+3TS

yes

WHEN
the

WHAT
ms-isdn

yes

WHAT

GSM

the

ms-isdn

RX MS4
TX MS4
RX MS5
TX MS5

HOW

TA

RX MS1
TX MS1

RX MS3
TX MS3

WHAT

HOW

PROPAGATION DELAY

RX MS6
TX MS6

WHEN

WHAT

RX MS7
TX MS7
RX MS8
TX MS8

TE474-Asst Prof Aamir Masood

slide-71

Timing Advance
TX BTS
RX BTS

CAN

RX MS1
TX MS1

CAN

RX MS2
TX MS2
RX MS3
TX MS3

WHAT

GSM

+3TS - TA

WHEN
the

WHAT
ms-isdn

yes

WHAT

the

GSM

ms-isdn

RX MS4
TX MS4
RX MS5
TX MS5

HOW
yes

HOW

PROPAGATION DELAY

WHEN

RX MS6
TX MS6

WHAT

RX MS7
TX MS7
RX MS8
TX MS8

TIMING ADVANCE = 2 * PROPAGATION DELAY


TE474-Asst Prof Aamir Masood

slide-72

Logical Channels
Traffic and Control Channels
TDMA frame

TDMA frame

TS TS TS TS TS TS TS TS TS TS TS TS TS TS TS TS
0

...

(frames repeat continuously)

...

Voice transmitted over the physical channel #2


defines a logical traffic channel

Information (e.g. to set up a call) transmitted over


the physical channel #1 defines a logical control channel

TE474-Asst Prof Aamir Masood

slide-73

From Physical Channel to Logical Channels


Time Slot

TDMA Frame
= 4.615 ms

LOGICAL
CHANNELS

Logical
channels
multiplexing

0 12 345 67 01 234 56 701 23 45 67

TS = 577 s

MESSAGE TYPE

Physical Channel
Logical Channel
Logical Channel
TE474-Asst Prof Aamir Masood

TCH
FCCH
SCH
FACCH
SACCH
SDCCH
CBCH
AGCH
PCH
BCCH
RACH

different
message
types
=
different
logical
channels

slide-74

Traffic Channels (TCHs)

BSS
sp
ee

BSC
MSC

BTS

TC
H

ch
or
da
ta

sp
ee
ch
or
da
ta

TC
H

Full rate TCH carries:


speech (13 kbps)
users data (300 bps up to14.4 kbps)
Half rate TCH carries:
users data (300 bps up to 4.8 kbps)

TE474-Asst Prof Aamir Masood

slide-75

Control Channels
GSM Channels
Traffic Channels
(TCHs)

Control Channels

Broadcast
Channels
(BCHs)

Full
rate

Half
rate

TCH /F

Common Control
Channels
(CCCHs)

Dedicated Control
Channels
(DCCHs)
(down uplink)

Downlink

TCH /H FCCH

Downlink

Uplink
Fast

SCH

Traffic Multiframing
TE474-Asst Prof Aamir Masood

BCCH PCH

AGCH

CBCH

Signaling Multiframing

RACH SDCCH

Slow

FACCH

SACCH

Traffic Multiframing
slide-76

The Logical Channels on Radio Interface


TS

01234567

BTS
Frequency correction
Synchronization
Broadcast control
Access request
Subscriber paging
Answer to Access request

MS
FCCH

TCH

SCH

FACCH

Traffic (speech-data)
Associated Signaling

BCCH
RACH
PCH

SACCH
SDCCH

CBCH

AGCH

Radio Measurement + SMS


Dedicated Signaling
Broadcast info

FCCH
Broadcast info
Dedicated Signaling
Sys InFo 5, 6 + SMS
Traffic (speech data)

CBCH
SDCCH
SACCH

SCH
BCCH
RACH
PCH

TCH

Associated Signaling
FACCH

TE474-Asst Prof Aamir Masood

M.S. Pre-synchronization

AGCH

Access request
Subscriber paging
Answer to Access request
slide-77

Logical Channel Description (1/2)


SDCCH MESSAGES

TCH MESSAGES

Request for a SDCCH assignment

Full rate speech at 13 kbit/s

Request for the end of channel

Half rate speech at 6.5 kbit/s

assignment
Order of commutation from SDCCH to

TCH

Full rate data at 9.6, 4.8, or 2.4 kbit/s


Half rate data at 4.8 or 2.4 kbit/s
Handover Access message (uplink)

FACCH MESSAGES
Connection establishment from

SDCCH to TCH
End validation of a SDCCH-TCH

commutation
Characteristics of the future used BS

after handover
Connection establishment to BS after

handover
Validation of an handover
TE474-Asst Prof Aamir Masood

SACCH MESSAGES
System Information 5, 5bis, 5ter and 6

(connected mode)
Measures:

power level of the communication


quality level of the communication
level on the beacon frequency of
the neighboring cells
Timing Advance
Power Control

slide-78

Logical Channel Description (2/2)


FCCH MESSAGES
no message is sent (all bits 0)

SCH MESSAGES
Frame Number
Base Station Identity Code (BSIC)

BCCH MESSAGES
System Information type 1, 2, 2 bis,

2ter, 3, 4, 7, 8
(idle mode)

CBCH MESSAGES
Specific information

For example:
weather
road information
TE474-Asst Prof Aamir Masood

AGCH MESSAGES
For dedicated channel assignment:

frequency number
slot number
frequency hopping description
Timing Advance (1st estimation)
MS identification

RACH MESSAGES
Service request:

emergency call
answer to an incoming call
outgoing call
short message
call re-establishment
inscription

PCH MESSAGES
messages containing a mobile

identity for a call, a short message


or an authentication
slide-79

Traffic and Control Multi-Framing


Control channel

Traffic channel
Frame
4.615 ms
TS TS TS TS TS TS TS TS TS TS TS TS TS TS TS TS TS TS TS TS TS TS TS TS
0
1 2 3 4 5 6 7 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7

TS TS TS TS TS TS TS TS
0 1 2 3 4 5 6 7

26 traffic frames = 120 ms


0

1326
frames

1
0

21 22 23 24 25

51 control frame = 235.38 ms

51 x 26 traffic frames = 6.12 s

TS TS TS TS TS TS TS TS
0 1 2 3 4 5 6 7

26 x 51 control frames = 6.12 s

46 47 48 49 50

46
22

47
23

48
24

49

50
25

2042 2043 2044 2045 2046 2047

1 Hyperframe = 2,715,648 frames= 3h 28 min. 53 s 760 ms


TE474-Asst Prof Aamir Masood

slide-80

Traffic Channels Combination


Logical Channel Mapping (1/5)
Full Rate - Downlink & Uplink
26 frames = 120 ms

T T T T T T T T T T T T A T T T T T T T T T T T T

time

Half Rate - Downlink & Uplink


26 frames = 120 ms

T0 T1 T0 T1 T0 T1 T0 T1 T0 T1 T0 T1 A0 T1 T0 T1 T0 T1 T0 T1 T0 T1 T0 T1 T0 A1

T : TCH

Ti : TCH

sub-channel n i

TE474-Asst Prof Aamir Masood

A : SACCH

Ai : SACCH

sub-channel n i

time

: IDLE
slide-81

Dedicated Signaling Channels Combination


Logical Channel Mapping (2/5)
Downlink
51 frames = 235 ms

D0

D1

D2

D3

D4

D5

D6

D7

A0

A1

A2

A3

D0

D1

D2

D3

D4

D5

D6

D7

A4

A5

A6

A7
time

Uplink
51 frames = 235 ms

A5

A6

A7

D0

D1

D2

D3

D4

D5

D6

D7

A0

A1

A2

A3

D0

D1

D2

D3

D4

D5

D6

D7

A4
time

A : SACCH
TE474-Asst Prof Aamir Masood

D : SDCCH

: IDLE
slide-82

Physical Channel and Logical Channels


Common Channels Combination
Multiframe m
Multiframe
m-1

Multiframe
m+1

51 frames = 235.38 ms

FS

FS C

FS

FS C

FS C

Frames repeat continuously

FS

time

PCH/AGCH

BTS

Physical Channel
ARFCN (n)

Logical Channels

F : FCCH

TE474-Asst Prof Aamir Masood

TS (s)

S : SCH

SCH
BCCH
FCCH

B : BCCH

C : PCH/AGCH

MS

: IDLE
slide-83

Common Channels Combination


Logical Channel Mapping (3/5)
Downlink
51 frames = 235 ms

FS

FS

FS

FS

FS

C
time

Uplink
51 frames = 235 ms
RRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRR RRRRRRRRRRRRRRRRRR
time

F : FCCH

S : SCH

TE474-Asst Prof Aamir Masood

B : BCCH

: AGCH

C /PCH

R : RACH

: IDLE
slide-84

BCCH Combined
Logical Channel Mapping (4/5)
Downlink
51 frames = 235 ms

FS

FS

FS

D0

D1

FS

D2

D3

FS

A0

A1

FS

FS

FS

D0

D1

FS

D2

D3

FS

A2

A3
time

Uplink
51 frames = 235 ms

D3

RR

A2

A3

RRRRRRRRRRRRRRRRRRRRRRR

D0

D1

RR

D2

D3

RR

A0

A1

RRRRRRRRRRRRRRRRRRRRRRR

D0

D1

RR

D2
time

: AGCH

F : FCCH S : SCH B : BCCH C /PCH


TE474-Asst Prof Aamir Masood

R : RACH

A : SACCH

D : SDCCH

: IDLE
slide-85

Why 26 and 51 Frames per Multiframe?


0 1

10

FS

FS

20

30

FS

TTTTT TTTTTTTATTTTTTTTTTTT
01

12

40

FS

FS

50 0 1

FS

TTTTTTTTTTTTATTTTTTTTTTTT
25 0 1

12

25

Downlink message

Uplink message

Mobile activity

Rx

Tx

Rx Rx
(n)

Tx

Rx
(n)

Rx

Tx

Neighboring BTS
(downlink)
Measurement Window
TE474-Asst Prof Aamir Masood

slide-86

From Speech to Radio Transmission


Speech

Speech

Step 1

Digitizing and
source coding

Source
decoding

Step 2

Channel
coding

Channel
decoding

Interleaving

De-interleaving

Step 3
Burst formatting

Step 4

Ciphering

Step 5

Modulation

Step 6

Transmission

TE474-Asst Prof Aamir Masood

Burst deformatting

Deciphering

Demodulation
equalization

Diversity

slide-87

Speech Quality - Source Coding

Quality
Excellent
Good
Fair
Poor
Bad

Codec Type

Mean Opinion Score


(MOS)

Rate (kb/s)

PCM A law
GSM EFR
CDMA 13
D-AMPS
GSM FR
CDMA 8

4.25
4.2
4.2
4
3.8
3.4

64
12.2
13
8
13
8

MOS
5
4
3
2
1

TE474-Asst Prof Aamir Masood

Listening Effort Required


Complete relaxation possible, no effort.
Attention necessary, no appreciable effort.
Moderate effort.
Considerable effort.
No meaning understood with feasible effort.

slide-88

Channel Processing
Overview
20 ms

Speech blocks

20 ms

20 ms

260 bits

260 bits

260 bits

Source coding
Channel coding

456 bits

A A A A
5 6 7 8

Normal
burst

A5
B1

A6
B2

A7
B3

A8
B4

B5
C1

B6
C2

456 bits

8 Sub blocks
of 57 bits

B B B B B B B B
1 2 3 4 5 6 7 8

Interleaving

8 Bursts

456 bits

B7
C3

C C C C
1 2 3 4

B8
C4

57 bits

26 bits

57 bits

Tail

Information

CRL

Training

CRL

Information

Tail

TE474-Asst Prof Aamir Masood

slide-89

Interleaving: TCH Full Rate


0 1 2 3 4 5 6 7 8 ...

...

452 453 454 455

456
coded bits

0
8

1
9

2
10

3
11

4
12

5
13

6
14

7
15

448

449

450

451

452

453

454

455

57 Rows

Divide 456 bits in 8 sub-blocks

reordering
&
partitioning
out

3
diagonal
interleaving
bit
interleaving
burst

b0 b1

TE474-Asst Prof Aamir Masood

b56

b0 b1

b56

slide-90

Burst Formatting
Normal Burst
1 frame:
4.615 ms
0

Training

DATA
3

S sequence S
57

26

Burst
148 bits

Guard
Band

DATA
57

8.25

Guard

156.25 bits
0.577 ms

TE474-Asst Prof Aamir Masood

slide-91

Burst Formats
Frequency Correction Burst
(FCCH)
Tail

Data

3 bits

Tail

142 fixed bits (0)

3 bits

Guard
Period
8.25 bits

156.25 bits (0.577 ms)

Synchronization Burst
(SCH)
Tail

Data

Extended Training Sequence

Data

64 synchronization bits

39 bits

3 bits 39 encrypted bits

Tail

Guard
Period

3 bits 8.25 bits

156.25 bits (0.577 ms)

TE474-Asst Prof Aamir Masood

slide-92

Burst Formats
Normal Burst
Tail

Data

Training Sequence

3 bits 57 encrypted bits

26 bits

Data
1

Tail

57 encrypted bits

Guard
Period

3 bits 8.25 bits

156.25 bits (0.577 ms)

Dummy Burst
Tail Dummy Sequence

Training Sequence

3 bits 58 mixed bits

28 midamble bits

Dummy Sequence Tail


58 mixed bits

Guard
Period

3 bits 8.25 bits

156.25 bits (0.577 ms)

Tail

Training
Sequence

8 bits

41 synch bits

Access Burst
Data

Tail

36 encrypted bits 3 bits

Guard Period
68.25 bits

156.25 bits (0.577 ms)


TE474-Asst Prof Aamir Masood

slide-93

Ciphering
Burst to be
transmitted

Plain data:
Ciphering sequence:
XOR:
Ciphered data (transmitted):
Ciphered sequence:
XOR:
Recovered data:

Data

Data

0 1 1 1 0 0 1 0.....
0 0 0 1 1 0 1 0.....
0 1 1 0 1 0 0 0.....
0 0 0 1 1 0 1 0.....
0 1 1 1 0 0 1 0.....

Received
burst
TE474-Asst Prof Aamir Masood

Data

Training
S
sequence

Data

slide-94

Modulation
GMSK Modulation
Bit 0
Bit 1

phase shift + 90
phase shift - 90

I = sin (t + )

Q
GMSK
Modulator

Q = cos (t + )

GMSK
Signal

'1'

- 90 + 90

'0'

I
Carrier
Frequency

TE474-Asst Prof Aamir Masood

slide-95

Discontinuous Transmission Features

speech
decoder

Hearpiece
Digital to
Analog
Converter

Microphone

TE474-Asst Prof Aamir Masood

Comfort
noise
function

speech
encoder
Analog to
Digital
Converter

From receiver

To transmitter

Voice Activity
Detection

slide-96

The Network Sub System

TE474-Asst Prof Aamir Masood

slide-97

NSS Architecture
EIR

AuC

PSTN

BSC

MSC
BSC

VLR

HLR

MSC

TE474-Asst Prof Aamir Masood

slide-98

NSS Architecture
Site 1

Site 2
AUC

HLR

BSS

VLR

BSS

VLR
G-interface

B-interface
A-interface

B-interface

C-interface

MSC

GMSC

Other GSM,
PSTN, ISDN

Other GSM,
PSTN, ISDN

E-interface

F
E

IWF

Billing
Server

TE474-Asst Prof Aamir Masood

A-interface

F
EIR

SMS-SC

IWF

Billing
Server

slide-99

Home Location Register


HLR
Subscriber
Management
Center

Permanent records
- MSISDN
- IMSI
- Subscriber's service provision

Temporary records
- VLR address
- Ciphering items
(Kc, Sres, Rand)

TE474-Asst Prof Aamir Masood

slide-100

Authentication Center

AUC
Ki

Ciphering Triplets
RAND

HLR Request

Security
A3, A8 algorithms

SRES, Kc, RAND

IMSI

AUC provides

TE474-Asst Prof Aamir Masood

slide-101

Visitor Location Register

VLR
LA1

Permanent records
- IMSI
- Subscribers service provision

LA3
LA2

Temporary records
- Ciphering items
(Kc, Sres, Rand)
- LAI - TMSI

LA4

TE474-Asst Prof Aamir Masood

slide-102

Equipment Identity Register

EIR

IMEI

Black list
(barred ME)

White list
(valid ME)

Mobile
Equipment

TE474-Asst Prof Aamir Masood

Gray list
(faulty ME)

slide-103

Mobile Switching Center Interfaces


BSS
BSC

To PSTN
A
C

GMSC

BTS

VLR
B

HLR

E
EIR
G
F

BSS
BSC

BTS

TE474-Asst Prof Aamir Masood

MSC
B

AUC

VLR
Nortel HLR/AuC is
housed in the DMSHLR
Nortel VLR is housed
in the DMS-MSC
slide-104

Gateway MSC Functions


- Processes translations.
- Routes calls to appropriate VMSC.
Handles the calls from the PSTN

GMSC

Retrieves roamer routing information

HLR

VMSC

TE474-Asst Prof Aamir Masood

AUC

slide-105

Visitor MSC Functions


- Requests BSSs for paging.
- Processes update location.
- Processes translations.
- Requests for roamer and MS availability.

BSS

VMSC

- Sets up and tears down the calls to PSTN.


- Receives calls from the gateway MSCs.
- Handles echo-canceler and IWF.

Provides ticketing.

BSC
BTS

VLR
Handles inter-MSC
handovers.

- Informs VLR of
new location.
- Gets roamer
access grant for
services.

BSS
BSC
BTS

TE474-Asst Prof Aamir Masood

MSC

EIR

Check
MS
available

slide-106

MSC Architecture and Functions


MSC

Timing
generator

X.25
couplers

Switch

CCS7
couplers

E1/T1
trunks

BSS

E1/T1
trunks

Common bus

Command Unit

Inter-Working
modules

Echo
Canceler

- Coordinates of call set up.


- Location registration.
- Hand-over management.
- Ticketing and billing.
- Interworking functions.
- Synchronizes with the BSS.
- Gateway to SMS-SC.
- Handles operation on
echo-cancelers.

Computer
and
peripherals
module

To other MSC
To PSTN / ISDN
TE474-Asst Prof Aamir Masood

slide-107

InterWorking Function

BSS

Mobile
Switching
Center

PSTN

Modem

MS

Data +
DTE signals
Rate
adaptation
DTE
signaling

Modem

IWF

Land-DTE

DTE
TE474-Asst Prof Aamir Masood

slide-108

InterWorking Function

BSS

Mobile
Switching
Center

PSTN

Modem

MS

Data +
DTE signals
Rate
adaptation
DTE
signaling

Modem

IWF

Land-DTE

DTE
TE474-Asst Prof Aamir Masood

slide-109

Echo Canceler
4 wire
circuit
(PCM)

GSM network
4 wire circuit

Mobile
Switching
Center

Echo
Canceler

Talker Echo

Switch

Talker Echo

Base
Station
SubSystem

PSTN

4 wire
circuit
4w to 2w
transformer

Two wire circuit


Local
loop
Land telephone
TE474-Asst Prof Aamir Masood

slide-110

Short Message Service Center


Send Routing Information
Alert-SC
Set MW Data

HLR

Note MS
Present

PSTN

SS7 MAP

Voice trunks:
R2, ETSI ISUP...

Voice Mail alerts

SMPP
(X.25 or TCP/IP)

SS7 MAP

Voice trunks:
R2, ETSI ISUP...

VMS

MSC

MF
T
D

X.25

SS7 MAP

SME

SME

SMSC
SS7 DTAP

BSC

TE474-Asst Prof Aamir Masood

SME
Forward Short Message
Delivery Report
Various applications
submitting
Short Messages

slide-111

Voice Mail System

MS

TX Mail
User 1

User Mail

RX Mail
User 2
Virtual FAX

SMS-SC

Voice Mail
System

PLMN

Call answering
Numeric messaging
TE474-Asst Prof Aamir Masood

TUES 11:46
Urgent Messages: 1
Normal Messages: 3
Played Messages: 2
Call 123# to retrieve

Notification/automatic
delivery of messages
slide-112

Intelligent Network Platform

Service
Control
Point

SDF
Service Data

SCF
Service Control

Service
Management
System

SRF
Specialized
Resource

HLR
SSF
Service Switching
CCF
Call Control

TE474-Asst Prof Aamir Masood

Service
Creation
Environment

Intelligent
Peripheral

GMSC
Service
Switching
Point

slide-113

Procedures

TE474-Asst Prof Aamir Masood

slide-114

Descriptors Stored in SIM-Card


Global GSM Mobility
Card

MNC
=
01 (FTM)
10 (SFR)
20 (Bytel)

MCC
=
208 (France)
234 (G-B)

The Smart Card to use

GSM
IMSI = 15 digits max

Mobile
Country
Code

Mobile
Network
Code

3 digits

2/3 digits

Mobile Subscriber Identification Number (MSIN)


8 digits: H1 H2 X X X X X X

LAI
Mobile
Country
Code

Mobile
Network
Code

3 digits

2/3 digits

Location Area Code


LAC

TE474-Asst Prof Aamir Masood

NMSI
Temporary Mobile
Subscriber Identity
4 octets
slide-115

Descriptors Stored in the Network


MS-ISDN

Country
Code
CC

National
Destination
Code

Subscriber Number (SN)


M1 M2 X X X X X X X X X X X X X

Must be dialed to
make a call to
mobile subscriber

MSRN

Country
Code
CC

Country
Code
CC

National
Destination
Code

Roaming Number (RN)

National
Destination
Code

CC = 33 (France)

NDC = 607, 608, 604 (FTM)


= 609, 603 (SFR)
= 660, 661, 618 (Bytel)

TE474-Asst Prof Aamir Masood

HO-number

Is a PSTN-like
number used to
reach a roaming
MS
Is a PSTN-like
number to track
the MS which
hands over to
another MSC during
call-in-state

slide-116

Descriptor Embodied in the MS

IMEI enables the operator to check


the Mobile Equipment Identity
at call setup and make sure
that no stolen or unauthorized MS
is used in the GSM network

PE VED
Y
T O
PR
P
A

TAC
Type Approval
Code

TE474-Asst Prof Aamir Masood

FAC

SNR

SP

Serial NumbeR

(SPare)

Final Assembly
Code

slide-117

GSM s Actors
NSS
BSS

Public
Switched
Telephone
Network

MSC
BSC

BTS

VLR

HLR

AUC
Mobile subscriber
TE474-Asst Prof Aamir Masood

Fixed subscriber

slide-118

Cell Selection
Purpose: get synchronization
with the GSM network
prior establishing any communication.

1
BTS-5

BTS-4

H
FCC

1
5

BTS-3

SCH
CH
BC

BTS-2

TE474-Asst Prof Aamir Masood

2
3
4

BTS-1

This cell

slide-119

Immediate Assignment
BTS

MS
1

CHANNEL REQUEST

RACH

CHANNEL REQUIRED
CHANNEL ACTIVATION

IMMEDIATE ASSIGNMENT

AGCH

OR
6

MSC

BSC

CHANNEL ACTIVATION
ACK.
IMMEDIATE ASSIGNMENT
COMMAND

Immediate
Assignment

CM SERVICE REQUEST

SDCCH or TCH
LOCATION UPDAT. REQU.

SDCCH or TCH

TE474-Asst Prof Aamir Masood

slide-120

Registration: the Very First Location Update


1

1
2

BSS

IMSI
3
TMSI
Release

3
TMSI

BSC
5

MSC
5
6

BTS

TMSI
5

LAI

IMSI
VLR id

TE474-Asst Prof Aamir Masood

VLR

HLR
4

IMSI
TMSI
LAI

slide-121

Intra-VLR Location Update

1
2

BSS

TMSI + old LAI


new TMSI

2
BSC
3
4

BTS

MSC
3
4
2
New TMSI

TMSI

3
New LAI

VLR
IMSI
TMSI
LAI

IMSI not Required

TE474-Asst Prof Aamir Masood

slide-122

Inter-VLR Location Update


BSS

1
2

TMSI + old LAI


newTMSI

1
BSC

MSC

5
7

BTS

2
TMSI New TMSI
5

New LAI

New VLR

Old VLR
IMSI, TMSI
Old LAI

RAND, SRES, 4
Kc

IMSI,TMSI
LAI
RAND, SRES,
Kc

IMSI not Required

HLR
6
new
VLR id

TE474-Asst Prof Aamir Masood

subscriber
data

slide-123

IMSI Attach

CHANNEL
REQUEST
IMMEDIATE
ASSIGNMENT

BSS
2

3 LOCATION UPDATING

REQUEST (IMSI Attach)


Authentication
4
Procedure

LOCATION UPDATING
5
ACCEPT (LAC, TMSI)

BSC
BTS

3
4

MSC

5
4

VLR
6

TE474-Asst Prof Aamir Masood

slide-124

IMSI Detach

CHANNEL
REQUEST
IMMEDIATE
ASSIGNMENT

BSS
2
BSC

IMSI DETach
INDication
CHANNEL
RELEASE

BTS

IMSI DETach
INDication

MSC

VLR

TE474-Asst Prof Aamir Masood

slide-125

Authentication
1 - Principle
MS

Global GSM Mobility


Card

Radio
Interface

The Smart Card to use

GSM

AUC
(A3 and A8)

Ki (128 bits)

Ki (128 bits)

A3

RAND

A3

A8

=?

SRESm
(32 bits)

SRES
A8

A8

OK

CIPHER
MODE
RAND = RANDom number
SRES = Signed RESponse
Kc = Ciphering Key
Ki = Identification Key

Ki

A3

A3

SRESm
A8

(RAND, SRES, Kc)

RAND (128 bits)

SIM card

Ki

NSS

BSS

Kc

Kc

TE474-Asst Prof Aamir Masood

slide-126

Authentication
2 - Procedure

SRESm
CIPHER
MODE

RAND
BSC

SRESm

Ciphering
Command

BTS

Purpose:
Avoid logging of lost,
stolen or
forgery SIM-Cards.

MSC
7
6

HLR
1

Ki
5

RAND

Triplets

RAND

BSS

SRESm

RAND

VLR
SRESm = SRES ?

1
A3

SRESm

3
(RAND, SRES, Kc)
2 AUC
(A3 and A8)

TE474-Asst Prof Aamir Masood

slide-127

Ciphering
1 - Principle
BTS

MS
Frame Number
(22 bits)

Radio
interface

Frame Number
(22 bits)

A5

A5

Kc (64 bits)

Kc (64 bits)

Block
(114 bits)

Data to transmit
Received data

Block
(114 bits)

+
+

Block
(114 bits)

Ciphered
data

Block
(114 bits)

Received data

+
+

Data to transmit

: exclusive-or

TE474-Asst Prof Aamir Masood

slide-128

Ciphering
2 - Procedure
BSS

CIPHER MODE COMMAND

Kc
BSC

CIPHER MODE COMPLETE

Kc
BTS

CIPHER MODE
COMPLETE

Ciphered
data

A5

Purpose: avoid communication to be tapped.

TDMA#

Kc

MSC

SET CIPHER MODE


(Kc)

(Rand, SRES, Kc)


Ki

Rand

VLR

A8
Kc
TE474-Asst Prof Aamir Masood

slide-129

Outgoing call
GREAT BRETAIN

FRANCE

GERMANY

Telephone
network

BSS
BSC
BTS

Terminating
MSC

VLR

Gateway
MSC

HLR

FT
TE474-Asst Prof Aamir Masood

slide-130

Mobile Originating Call


BSS

MS
CHANNEL REQUEST

Dialing

VLR

IMMEDIATE ASSIGNMENT

CM SERVICE REQUEST

3
3

Sending
Number

PSTN

MSC

Authentication procedure
Ciphering procedure

SETUP (basic) or
EMERGENCY
CALL PROCEEDING
7

CM SERVICE REQUEST

SETUP

CALL PROCEEDING

ALERTING
CONNECT

Path
Established
11
TE474-Asst Prof Aamir Masood

Ring
Ringing

Assignment procedure

Ringing

IAM

ACM
9

ANM
11

CONNECT ACKnowledge

8
10

ACM = Address Complete Message


ANM = ANswer Message
IAM = Initial Address Message
slide-131

Incoming Call
GREAT BRETAIN

FRANCE

GERMANY

Telephone
network

BSS
BSC
BTS

Terminating
MSC

VLR

Gateway
MSC

HLR

FT
TE474-Asst Prof Aamir Masood

slide-132

Mobile Terminating Call


1 - Paging Principle
LA1
6

BSC1

BTS11

5
BTS12

MSC/
VLR

GMSC

PSTN

BSC2

BTS21

2
BTS22

LA2

HLR
BSC3

BTS23

BTS31

TE474-Asst Prof Aamir Masood

slide-133

Mobile Terminating Call


2 - Detailed Paging Procedure
Visitor PLMN

Home PLMN

International
SS7

VLR

Provide Roaming Number


(IMSI)

HLR
4

Roaming Number
(MSRN)

9
PAGING
REQUEST
(TMSI)

Send info
to I/C
(MSRN)

PAGE
(TMSI + LA)

BSS

Routing
Information
(MSRN)

11
PAGING
REQUEST 10
(TMSI + LA)

VMSC

Send
Routing
Information
(MSISDN)

1
MSISDN

3
IAM (MSRN)

IAM

7 GMSC (MSISDN) 2

ISDN

PN
IAM
MSISDN
MSRN

: Initial Address Message


: Mobile Station Integrated Services Digital network Number
: Mobile Station Roaming Number
TE474-Asst Prof Aamir Masood

IMSI
GMSC
VMSC
TMSI

:
:
:
:

International Mobile Subscriber Identity


Gateway MSC
Visitor MSC
Temporary Mobile Subscriber Identity
slide-134

Mobile Terminating Call


3 - End to End Procedure
VMSC

BSS

MS

PAGING REQUEST

PAGING REQUEST
(TMSI or IMSI, LA)

IAM
(MSRN)

PSTN

GMSC
2

IAM
(MSISDN)

Dialing

CHANNEL REQUEST
(LAC, Cell ID)

IMMEDIATE ASSIGNMENT 6
(SDCCH or TCH)
CM SERVICE REQUEST
(Paging Response)

8
9

Ringing
10
12

PAGING RESPONSE
(TMSI or IMSI, LA)

Authentication procedure
Ciphering procedure
Setup, Assignment, Alerting
CONNECT

TE474-Asst Prof Aamir Masood

11
12

Address Complete Message


ANswer Message

Path
Established
slide-135

Tromboning effect
FRANCE

GERMANY
Telephone
network

Gateway
MSC

BSS
BSC

Terminating
MSC

BTS

HLR
VLR

TE474-Asst Prof Aamir Masood

FT

slide-136

Call Release
1 - Mobile Initiated
MSC

BSS

MS

Call in progress

DISCONNECT

RELEASE
4

DISCONNECT
RELEASE

RELEASE COMPLETE

CHANNEL RELEASE 6
7

PSTN

Release

RELEASE INDICATION
RF Channel Release
procedure
8
9

TE474-Asst Prof Aamir Masood

Release
tone

slide-137

Call Release
2 - PSTN Initiated

3
BSC

4
5

BSS

BTS

4
5

MSC

REL
6

RLC

PSTN

Purpose:
informs the mobile
then releases radio
and network resources.
On hook

TE474-Asst Prof Aamir Masood

slide-138

Reasons for Handover


Rescue

Prevention

Signal strength

Distance

Quality

Maintenance

Lack of resources:
Directed Retry

Power budget
Micro cellular
environment

TE474-Asst Prof Aamir Masood

slide-139

Mobility and Handover


Draw
Draw the
thefive
fivetypes
typesof
of handover.
handover.
MSC-B

MSC-A

BSC-C

BSC-A

BTS
C1

BSC-B

BTS
B1
BTS
A1
BTS
A2

TE474-Asst Prof Aamir Masood

slide-140

Mobility and Handover


The Five Types of Handover
MSC-B

MSC-A

BSC-C
BTS
C1

BSC-B

BSC-A

BTS
B1

BTS
A2

1
BTS
A1

TE474-Asst Prof Aamir Masood

4
3

1- Intra-Cell HO
2- Intra-BTS HO
3- Intra-BSC HO
4- Inter-BSC HO
5- Inter-MSC HO
slide-141

Handover Preparation

MSC

BSC

BTS-1

Me
as
u
re rem
su
lts ent

er
h
ot els
s
n ann
a
sc ch
S
M c on
a
be

BTS-2

Cell 1
Cell 2
TE474-Asst Prof Aamir Masood

slide-142

Radio Resource Management


Handover

OMC-R

k
lin
n
nt
w
Do reme
Uplink
u
as ort
Measurement
Me rep

Parameters
(criteria threshold)

BSS 1
Handover

BSS 2

MSC
External

External

Handover
Required

Handover
Request

Handover
Command

ACK

Algorithm

Handover decision
TE474-Asst Prof Aamir Masood

Handover execution
slide-143

Handover Decision
Decision criteria:
- bad quality,
- weak signal strength,
- cell boundaries,
- etc.

MSC

BSC

e
bl r
ti a ove
su nd 6)
f
a
to rh m=
s
Li s fo mu
ll xi
ce (ma

BTS-1
BTS-2

Cell 1
Cell 2
TE474-Asst Prof Aamir Masood

slide-144

Handover Execution

MSC

BSC

HO
ds
an S
mm e M
Co to th

d
an
m
m MS
o
C he
O
H to t

BTS-1
BTS-2

Cell 1
Cell 2
TE474-Asst Prof Aamir Masood

slide-145

Intra-BSC Handover
BTS1

MS

BTS2
HO INDICATION

HO
Initiation

CHANNEL ACTIVATE
3

HO COMMAND

HO COMMAND

5
7

PHYSICAL INFO **

HandOver COMPLETE
11

HO
Acknowledg.

HO DETECTION

HO
Execution
10

CHANNEL ACTIVATE ACK

HO ACCESS *

ESTABLISH INDICATION

HO COMPLETE

RF CHANNEL RELEASE
14

MSC

BSC

12

HO COMPLETE

13

RF CHANNEL RELEASE ACK

* this message may be repeated up to 4 times


** only if Handover asynchronous
TE474-Asst Prof Aamir Masood

slide-146

Inter-BSC Handover
MS

HO
Initiation
HO COMMAND

HO INDICATION

HO COMMAND

MSC

BSC1

BTS1

HO REQUIRED

BSC2
HO REQUEST

HO REQUEST ACK

HO COMMAND

BTS2

CHANNEL ACTIVATE

CHANNEL ACTIVATE ACK

HO ACCESS *

10

HO DETECTION

HO
Execution

HO DETECTION
PHYSICAL INFO

11

12
13

ESTABLISH INDICATION 14
HandOver COMPLETE

15

HO
Acknowledg.

RF CHANNEL RELEASE

CLEAR COMMAND

19

RF CHANNEL RELEASE ACK

20

21

HO COMPLETE

18

HO COMPLETE

17

16

CLEAR COMPLETE

* this message may be repeated up to 4 times


TE474-Asst Prof Aamir Masood

slide-147

Inter-MSC Handover

BSC 1
BTS

MSC 1

1a
1

1b

BTS

Terrestrial link

BSC 2
2a

BTS

2b

PSTN
3

BTS
BTS

3a
3b

TE474-Asst Prof Aamir Masood

BSC 3

MSC 2
3

slide-148

Inter-MSC Handover
7

3
MSC-A

PSTN

MSC-B

c
MSC-C

2
4
1

BSC-A

BSC-C

BSC-B

b
a

BTS

BTS

5
b

a
BTS

TE474-Asst Prof Aamir Masood

slide-149

Explosive Growth in Wireless Data

1998
Data 4%

Data 70%

Voice 30%
Voice 96%

2005

TE474-Asst Prof Aamir Masood

slide-150

Increasing GSM Data Rates


UMTS
E/GPRS

ISDN

photo

web

e-mail

PSTN

video
clip

report

photo

report

photo

web

web

e-mail

e-mail

GSM

10 sec

video
clip

report

video
clip

photo

web

report

video
clip

photo

1 min

report

10 min

video
clip

1 hour

Transmission Time
TE474-Asst Prof Aamir Masood

slide-151

Mobile Data Technology Evolution


2M

in t r a n e t

30 min delay

throughput kbps

1M

et
k
c
a

Mobile
Mobile Data
Data Rate
Rate
Explosion
in
Next
Explosion in Next 44 Years
Years

alternative: A2
100 k

64 k

c ir

uit

10 k

9.6
1k

SMS

HSCSD
14.4
GPRS

1998

1999

EDGE

2000

2001

UMTS

2002

timeframe

FTSE
-1
index 00

GPRS = General Packet Radio Service


HSCSD = High Speed Circuit Switched Data
EDGE = Enhanced Data rate for Gsm Evolution
UMTS = Universal Mobile Telecomunication System
TE474-Asst Prof Aamir Masood

slide-152

Anda mungkin juga menyukai