INTRODUCTION TO GSM

GSM FREQUENCIES
GSM systems use radio frequencies between 890-915 MHz for
receive and between 935-960 MHz for transmit.
RF carriers are spaced every 200 kHz, allowing a total of 124
carriers for use.
An RF carrier is a pair of radio frequencies, one used in each
direction.
Transmit and receive frequencies are always separated by 45
MHz.
UPLINK FREQUENCIES

890

DOWNLINK FREQUENCIES

915

935

UPLINK AND DOWNLINK FREQUENCY SEPARATED BY 45MHZ

960


GSM1800

900Domain

From
713
832
63
80
87
111

To
718
844
78
82
88
124

excluding

65,72

114,121

GSM

SPECIFICATIONS

1. Standard - ETSI.
2. Access Method - FDMA-TDMA.
3. Voice channels -8 chnls/carrier.
4.RF channel spacing 200 KHz.
5. Voice Coding Algorithm RPE-LTP.
6.Voice Coding Rate 13 Kbps.
7. Channel bitrate 270.833 Kbps.
8. Modulation Method- GMSK.

OSS

HLR

B
T
S

PSTN
ISDN
B
T
S

BSC
BSC

MSCVLR

A Interface
B
T
S

Airinterface

Data
Networks

A-bis
interface
MSCVLR
7

INTERFACE NAMES
Each interface specified in GSM has a name associated
with it.
NAME

INTERFACE

Um

MS ----- BTS

Abis

BTS ----- BSC

MSC ------ BSC

MSC ------ VLR

MSC ------ HLR

VLR ----- HLR

MSC ------ MSC

MSC ------ EIR

VLR ------ VLR

HLR ------ AUC

BSS CONNECTIONS

MSC

MTL
(C7 )

XCDR

OMC
OML (X.25)

BSC

CBC

CBL
RSL
( LAPD)

BTS

BTS

BTS

Cell Global Identity ( CGI ) :

LAI
MCC

MNC

LAC

CI

CGI
MCC
=
MNC
=
LAC=
CI =

Mobile Country Code (404)

Mobile Network Code (72 )
Location Area Identity (eg:3201)
Cell Identity (eg:32451)

CHANNEL CONCEPT
CHANNELS

Downlink

Uplink

Physical channel - Each timeslot on a carrier is referred to as a

physical channel. Per carrier there are 8 physical channels.
Logical channel - Variety of information is transmitted between
the MS and BTS. There are different logical channels depending
on the information sent. The logical channels are of two types
Traffic channel
Control channel

CHANNEL CONCEPT
GSM Traffic Channels

Traffic Channels

TCH/F
Full rate 22.8kbits/s

TCH/H
Half rate 11.4 kbits/s

CHANNEL CONCEPT
GSM Control Channels
Control Channels

BCH ( Broadcast channels )

Downlink only

CCCH(Common Control Chan)

Downlink & Uplink

DCCH(Dedicated Channels)
Downlink & Uplink

BCCH

RACH

SDCCH

Broadcast
control channel

Synch.
Channels

Random
Access Channel

CBCH

Cell Broadcast
Channel

SCH
Synchronisation
channel

FCCH

Frequency
Correction channel

PCH/
AGCH

Paging/Access grant

Standalone
dedicated
control channel

FACCH

Fast Associated
Control Channel

ACCH

Associated
Control Channels

SACCH

Slow associated
Control Channel

CHANNEL CONCEPT
BCH Channels
BCCH( Broadcast Control Channel )
Downlink only
Broadcasts general information of the serving cell called
System Information
BCCH is transmitted on timeslot zero of BCCH carrier
Read only by idle mobile at least once every 30 secs.
SCH( Synchronisation Channel )
Downlink only
Carries information for frame synchronisation. Contains
TDMA frame number and BSIC.
FCCH( Frequency Correction Channel )
Downlink only.
Enables MS to synchronise to the frequency.
Also helps mobiles of the ncells to locate TS 0 of BCCH
carrier.

CHANNEL CONCEPT
CCCH Channels
RACH( Random Access Channel )
Uplink only
Used by the MS to access the Network.

AGCH( Access Grant Channel )

Downlink only
Used by the network to assign a signalling channel
upon successfull decoding of access bursts.

PCH( Paging Channel )

Downlink only.
Used by the Network to contact the MS.

CHANNEL CONCEPT
DCCH Channels
SDCCH( Standalone Dedicated Control Channel )
Uplink and Downlink
Used for call setup, location update and SMS.
SACCH( Slow Associated Control Channel )
Used on Uplink and Downlink only in dedicated mode.
Uplink SACCH messages - Measurement reports.
Downlink SACCH messages - control info.
FACCH( Fast Associated Control Channel )
Uplink and Downlink.
Associated with TCH only.
Is used to send fast messages like handover messages.
Works by stealing traffic bursts.

CHANNEL CONCEPT
NORMAL BURST
FRAME1(4.615ms)

FRAME2

0.577ms
0.546ms
3
Guard Tail
Period Bits

57 bits
Data

26 bits
Flag Training
Bit sequence

57 bits
Flag
Bit

Data

3
Tail Guard
Bits Period

Carries traffic channel and control channels BCCH, PCH, AGCH, SDCCH,
SACCH and FACCH.

CHANNEL CONCEPT
NORMAL BURST
Data - Two blocks of 57 bits each. Carries speech, data or control
info.
Tail bits - Used to indicate the start and end of each burst. Three
bits always 000.
Guard period - 8.25 bits long. The receiver can only receive and
decode if the burst is received within the timeslot designated for
it.Since the MS are moving. Exact synchronization of burst is not
possible practically. Hence 8.25bits corresponding to about 30us is
available as guard period for a small margin of error.
Flag bits - This bit is used to indicate if the 57 bits data block is
used as FACCH.
Training Sequence - This is a set sequence of bits known by both
the transmitter and the receiver( BCC of BSIC). When a burst of
information is received the equaliser searches for the training
sequence code. The receiver measures and then mimics the
distortion which the signal has been subjected to. The receiver

CHANNEL CONCEPT
FREQUENCY CORRECTION BURST
FRAME1(4.615ms)

FRAME2

0.577ms
0.546ms
3
Guard Tail
Period Bits

142 bits
Fixed Data

3
Tail Guard
Bits Period

Carries FCCH channel.

Made up of 142 consecutive zeros.
Enables MS to correct its local oscillator locking it to that of the
BTS.

CHANNEL CONCEPT
SYNCHRONISATION BURST
FRAME1(4.615ms)

FRAME2

0.577ms
0.546ms
3

39 bits

Guard Tail Encrypted

Bits
Period Bits

64 bits
Synchronisation
Sequence

39 bits
Encrypted
Bits

Carries SCH channel.

Enables MS to synchronise its timings with the BTS.
Contains BSIC and TDMA Frame number.

3
Tail Guard
Bits Period

CHANNEL CONCEPT
26 FRAME MULTIFRAME STRUCTURE
4.615 msec

00 11 22 33 44 55 66 77 00 11 22 33 44 55 66 77 00 11 22 33 44 55 66 77

T T T T T T T T T T T T S T T T T T T T T T T T T I
0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25
120 msec

MS on dedicated mode on a TCH uses a 26-frame multiframe

structure.
Frame 0-11 and 13-24 used to carry traffic.
Frame 12 used as SACCH to carry control information from and to
MS to BTS.
Frame 25 is idle and is used by mobile to decode the BSIC of
neighbor cells.

CHANNEL CONCEPT
NEED FOR TIMESLOT OFFSET

BSS Downlink

MS Uplink

0 1

If Uplink and Downlink are aligned exactly, then MS will have to

transmit and receive at the same time. To overcome this
problem a offset of 3 timeslots is provided between downlink
and uplink

CHANNEL CONCEPT
NEED FOR TIMESLOT OFFSET
BSS Downlink

MS Uplink

5 6

3 timeslot
offset

As seen the MS does not have to transmit and receive at the

same time. This simplifies the MS design which can now
use only one synthesizer.

CHANNEL CONCEPT
26 FRAME MULTIFRAME STRUCTURE
4.615 msec

00 11 22 33 44 55 66 77 00 11 22 33 44 55 66 77 00 11 22 33 44 55 66 77

T T T T T T T T T T T T S T T T T T T T T T T T T I
0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25
120 msec

MS on dedicated mode on a TCH uses a 26-frame multiframe

structure.
Frame 0-11 and 13-24 used to carry traffic.
Frame 12 used as SACCH to carry control information from and to
MS to BTS.
Frame 25 is idle and is used by mobile to decode the BSIC of
neighbor cells.

GSM-- TDMA STRUCTURE

TDMA

8 Time Slots / RF Channel

Time slot duration

0.577m sec or 15 / 26 m sec

Frame

8 Burst Periods ( Time Slots)

=

Multi Frame

Traffic
Control

Super Frame

8 15/26 = 4.615 m sec

26 4.615 = 120 msec

51 4.615 = 235.365 m sec

51 Traffic Multi frames
26 Control Multi frames

Hyper Frame

2048 Super Frames = 3

28
hr

52.76
min

sec

CHANNEL CONCEPT
HYPERFRAME AND SUPERFRAME STRUCTURE
3h 28min 53s 760ms
00

11
6.12s

11
00

1 Hyperframe = 2048 superframes = 2,715,648 TDMA frames

22

2045
2045

33

47

11

11

2047
2047

1 Superframe = 1326 TDMAframes = 51(26 fr) 0r 26(51 fr) multiframes

22

48

49

24
24

120ms
00

2046
2046

50
25
25

235.38ms
23
23

24
24

25
25

00

11

Traffic 26 - Frame Multiframe

22

48
48

49
49

50
50

Control 51 - Frame Multiframe

4.615ms
00 11 22 33 44 55 66 77

TDMA Frame

BCCH/CCCH NON-COMBINED MULTIFRAME

50

Downlink
CCCH

BCCH
CCCH

40

IDLE
CCCH BLOCK
BCCH BLOCK
SCH BLOCK
FCCH BLOCK
RACH BLOCK

50

Uplink

40

CCCH

BCCH
CCCH

30

30
CCCH

BCCH
CCCH

20

20
CCCH

CCCH

10

10
CCCH

BCCH

BCCH/CCCH COMBINED MULTIFRAME

Uplink

Downlink
50

101
SACCH
CCCH

SACCH
CCCH

SACCH
BCCH

SACCH
BCCH

SDCCH
CCCH

SDCCH
CCCH

SDCCH

SDCCH

SDCCH
CCCH

SDCCH
CCCH

SDCCH
BCCH
CCCH

SDCCH
BCCH
CCCH

CCCH

CCCH

CCCH

CCCH

40

30

50

40

SDCCH
CCCH

101

SDCCH
CCCH

SDCCH
CCCH

SDCCH
CCCH

SDCCH
CCCH

SDCCH
CCCH

SACCH
CCCH

SACCH
CCCH

SACCH
CCCH

SACCH
CCCH

SDCCH
CCCH
BCCH

SDCCH
CCCH
BCCH

30

20

20

10

10

IDLE
CCCH BLOCK
BCCH BLOCK
SCH BLOCK
FCCH BLOCK
RACH BLOCK
SDCCH/4
SACCH/4

CCCH

CCCH

BCCH

BCCH

51

51

CODING, INTERLEAVING CIPHERING

SPEECH
CODING

SPEECH
DECODING

CHANNEL
CODING

CHANNEL
DECODING

INTERLEAVING

DEINTERLEAVING

BURST
ASSEMBLING

BURST
DISASSEMBLING

CIPHERING

DECIPHERING

MODULATION

Transmission

DEMODULATION

CODING
SPEECH CODING
The transmission of speech is one of the most important service
of a mobile cellular system.
The GSM speech codec, which will transform the analog
signal(voice) into a digital representation, has to meet the
following criterias
A good speech quality, at least as good as the one obtained
with previous cellular systems.
To reduce the redundancy in the sounds of the voice. This
reduction is essential due to the limited capacity of
transmission of a radio channel.
The speech codec must not be very complex because
complexity is equivalent to high costs.
The final choice for the GSM speech codec is a codec named RPELTP (Regular Pulse Excitation Long-Term Prediction).

CODING
SPEECH CODING
This codec uses the information from previous samples (this
information does not change very quickly) in order to predict
the current sample.
The speech signal is divided into blocks of 20 ms. These blocks
are then passed to the speech codec, which has a rate of 13
kbps, in order to obtain blocks of 260 bits.

CODING
Speech Channel Coding
260 bits

Parity
check

Class 1a
50 bits

Class 1b
132 bits

Class 1a 3
50 bits

Class 1b
132 bits

Convolution coding

378 bits
456 bits

Tail
bits

4
Class 2
78 bits

INTERLEAVING
GSM SPEECH CHANNEL INTERLEAVING ( Diagram )
Full rate encoded speech blocks
from a single conversation

456 bits

456 bits

456 bits

Bursts

TDMA
Frames
0

Frame 1
2

Frame 3

Frame 2
6

Frame 4
6

INTERLEAVING
GSM SPEECH CHANNEL INTERLEAVING
A burst in GSM transmits two blocks of 57 data bits each.
Therefore the 456 bits corresponding to the output of the channel
coder fit into 8 57 data bits (8 * 57 = 456). The 456 bits are
divided into eight blocks of 57 bits.
The first block of 57 bits contains the bit numbers (0, 8,
16, .....448), the second one the bit numbers (1, 9, 17, .....449),
etc.
The last block of 57 bits will then contain the bit numbers (7,
15, .....455).
The first four blocks of 57 bits are placed in the even-numbered
bits of four consecutive bursts.
The other four blocks of 57 bits are placed in the odd-numbered
bits of the next four bursts.
The interleaving depth of the GSM interleaving for speech
channels is eight.
A new data block also starts every four bursts. The interleaver for

MODULATION
CIPHERING
Ciphering is used to protect signaling and user data.

A8

A ciphering key is computed using the algorithm

stored
on the SIM card,
A 114 bit sequence is produced using the ciphering key, an
algorithm called A5 and the burst numbers.
This bit sequence is then XORed with the two 57 bit blocks of
data included in a normal burst.
In order to decipher correctly, the receiver has to use the same
algorithm A5 for the deciphering procedure.
MODULATION
Modulation is done using GMSK

INTRODUCTION TO FREQUENCY HOPPING

f1
f4
Modulated
RF signal

f3
f2

Voice

Information is
transmitted
by different
frequencies at
different timeslot

f1

63250/0/0/
1

MobileOriginatedCall
MS
HLR

BTS
BSC

VLR

AuC

MS
BTS

GMSC
Authentication response
(SDCCH) Call release
Connected
Call Setup
Exchange of
Communication
Assignment
Connected
Alerting
of TCH
(SDCCH)(TCH)
(TCH)
MSC

Assignment
Call
Connected
Alerting
release
ofresponse
TCH
Call
Alloc
Req
Authentication
Authentication
Ciphering
establishment
for
of dedicated
dedicated
command
response
request
channel
request
channel
BSC
Exchange
of
communication
(SDCCH)
(TCH)
(TCH)
(SDCCH)
(AGCH)
for
(SDCCH)
(SDCCH)
(SDCCH)
communication (RACH)
(TCH)
BTS

EIR
Call
Connected
Call
Alerting
release
Setup
Exchange of
Communication
PSTN

MobileTerminatedCall
MS
Paging

HLR

BTS
Paging

BSC

VLR
Query for
VLR info

MS

Query VLR
for LAC and
TMSI

BTS
Paging
the area

MSC
BSC

GMSC

AuC

Reply

EIR

Route
to
MSC
PSTN

BTS
Land to
Mobile call

DIAL 9844012345

Introduction to Frequency Hopping

Fading
Causes quality deterioration
Is frequency dependent
FH diversifies the impact of fading and improves quality.
The immunity to fading increases by exploiting its frequency
selectivity, because using different frequencies the
probability of being continuously affected by fading is
reduced, so the transmission link quality is improved.
This improvement is much more noticeable for slow moving
mobiles.

TYPES OF HOPPING
Base Band Hopping (BBH)
The radio units transmit always the same frequency
Number of frequencies for hopping = Number of carriers
The radio units are always transmitting a fixed frequency and
frequency hopping is performed by moving the information for
every call among the available radio units in a cell on a per
burst basis.
In reception the call is always processed by the same radio unit
(the one where the call started).
The number of frequencies to hop over is limited by the number
of radio units equipped in the cell.
The BCCH carrier can hop in timeslots 1 to 7 (without power
control/DTX).

TYPES OF HOPPING
Synthesiser Frequency Hopping (SFH)
The radio units change (retune) the frequency every burst.
The call always stays in the same radio unit.
Number of frequencies for hopping > Number of carriers.
The radio units can hop over a range of different frequencies( 64
in case of Motorola).
Hybrid combiners are required in the base station (Cavity
Combiners can not be used with SFH).
The BCCH carrier can never hop.

Hopping Parameters
For frequency hopping operability, GSM defines the following set
of parameters:
Mobile Allocation (MA): Set of frequencies the mobile is allowed to
hop over. MA is a subset of all the frequencies allocated by the
system operator to the cell (cell allocation) although it can be
the same. Eg:- If the operator has frequencies from 1 -32, then
he can use 1-15 for BCCH and 17-32 for hopping ( MA).
Hopping Sequence Number (HSN): Determines the hopping order
used in the cell. 64 different HSNs can be assigned, where HSN
= 0 provides a cyclic hopping sequence and HSN = 1 to 63
provide various pseudorandom hopping sequences.
Mobile Allocation Index Offset (MAIO): Determines inside the
hopping sequence which frequency the mobile starts to
transmit on.
Frequency Hopping Indicator (FHI): Defines a hopping system
made up by an associated set of frequencies (MA) to hop over
and a hopping sequence (HSN).

BASIC DEFINITIONS
dBm
dBm = 10 log (P) (1000 mW/watt)
where dBm = Power in dB referenced to 1 milliwatt
P = Power in watts
If power level is 1 milliwatt:
Power(dBm) = 10 log (0.001 watt) (1000 mW/watt)
= 10 log (1)
= 10 (0)
=0
Thus a power level of 1 milliwatt is 0 dBm.
If the power level is 1 watt
1 watt Power in dBm = 10 log (1 watt) (1000 mW/watt)
= 10 (3)
= 30

BASIC DEFINITIONS
dBm
dBm = 10 log (P) (1000 mW/watt)
The dBm can also be negative value.
If power level is 1 microwatt
Power in dBm = 10 log (1 x 10E-6 watt) (1000 mW/watt)
= -30 dBm
Since the dBm has a defined reference it can be converted back to
watts if desired.
Since it is in logarithmic form it may also be conveniently
combined with other dB terms.

FREE SPACE PROPAGATION

Friis Formula
Pr = Pt GtGr2
(4d)2

Pt

Pr

Propagation Loss
Gt
Gr
2
Lp = 10log [4d / ]
The square term is the propagation exponent. It is greater
than 2 when obstructions exist.
Propagation Loss in dB:
L p = 32.44 + 20Log(d) +20Log(f)
f = MHz
d = km

Diversity Antenna
Systems

NEED OF DIVERSITY

Building

Building
Building

Diversity Antenna
Systems
Multipath Propagation
Multipath propagation causes large and rapid fluctuations in a
signal
These fluctuations are not the same as the propagation path
loss.
Multipath causes three major things
Rapid changes in signal strength over a short distance or time.
Random frequency modulation due to Doppler Shifts on different
multipath signals.
Time dispersion caused by multipath delays
These are called fading effects
Multipath propagation results in small-scale fading.

Diversity Antenna
Systems

DIVERSITY TECHNIQUE
Diversity techniques have been recognised as an effective
means which enhances the immunity of the communication
system to the multipath fading. GSM therefore
extensively adopts diversity techniques that include
Diversity techniques

Interleaving
In time domain
Frequency Hopping
In Frequency domain
Spatial diversity
In spatial domain
Polarisation diversity
In polarisation domain

Diversity Antenna
Systems

TYPICAL SPATIAL ANTENNA DIVERSITY CONFIGURATIONS

Horizontal Separation

Vertical Separation

Diversity Antenna
Systems
TWO ANTENNA SPATIAL CONFIGURATION
10 Separation

Tx Rx Duplexer

Transmit
1

Receive

Receive 2

Diversity Antenna
Systems

DUAL POLARISED ANTENNAS

A dual-polarisation antenna consists of two sets of radiating
elements which radiate or, in reciprocal, receive two
orthogonal polarised fields.
The antenna has two input connectors which separately
connects to each set of the elements.
The antenna has therefore the ability to simultaneously
transmit and receive two orthogonally polarised fields.

H/V

Slant 45

Diversity Antenna
Systems

ADVANTAGES OF DUAL POLARISED ANTENNAS

The best advantage of using the dual polarisation antenna is the
reduction in the number of antennas per sector.
Reduced size of the headframe of the supporting structure
Reduced windload and weight.
Reduced difficulty in site acquisition and installation.
Cost saving
Requiring slim tower
Requiring less installation time.
Cost of one dual polarisation antenna is generally lower
than that of two single polarised antennas

TYPESOFINTERFERENCE

There are two types of system generated interference

Co-channel interference
Adjacent channel interference
Co-Channel Interference
This type of interference is the due to frequency reuse , i.e.
several cells use the same set of frequency.
These cells are called co-channel cells.
Co-channel interference cannot be combated by increasing the
power of the transmitter. This is because an increase in carrier
transmit power increases the interference to neighboring cochannel cells.
To reduce co-channel interference, co-channel cells must be
physically separated by a minimum distance to provide
sufficient isolation due to propagation or reduce the footprint
of the cell.

Co-Channel Interference
Some factors other then reuse distance that influence co-channel
interference are antenna type, directionality, height, site
position etc,
GSM specifies C/I > 9dB.
Carrier f1
dB

Interferer f1

C
I
Distance

Adjacent-Channel Interference
Interference resulting from signals which are adjacent in
frequency to the desired signal is called adjacent channel
interference.
Adjacent channel interference results from imperfect receiver
filters which allow nearby frequencies to leak into the
passband.
Adjacent channel interference can be minimized through careful
filtering and channel assignments.
By keeping the frequency separation between each channel in a
given cell as large as possible , the adjacent interference may
be reduced considerably.

Adjacent-Channel Interference

Carrier f1
dB

Interferer f2

A
C

GSM specifies C/I > -9dB.

Distanc
e

TIMING ADVANCE:- 0 to 63 =TA bit set in the SACCH header.0

means no timing advance.
63 means timing advance maximam =35km. or 233
microsecnds.0 to 233 micro seconds= timing
advance.parameter=MS_RANGE_MAX.(0 TO 63)
The BTS calculates the first TA when receiving a RACH and
reports the value to the BSC. TA can take any value between
0and 63, which relates to a distance between 0 km and 35 km.
The steps are about 550 m (35 km/63 550 m). With respect to
time, the different valuesof TA refer to the interval 0 ms
through 232 ms, in steps of 48/13 ms. It is important to note

GPRS Network Overview

SMS-GMSC
SMS-IWMSC

Gd
(MAP)

BTS

Abis

BSC

(MAP)

MSC/VLR
Gb

Gs

HLR
Gr (MAP)

Gi (IP)

SGSN

GGSN
Gn

Gb
Gb - -Interface
Interface between
betweenSGSN
SGSNand
andBSC
BSC
(Frame
(FrameRelay)
Relay)
Gi
Gi - - Reference
Referencepoint
pointbetween
betweenGPRS
GPRS
and
external
packet
data
network
and external packet data network
Gs
Gs - - Interface
Interface between
betweenSGSN
SGSNand
and
MSC
MSC
Gr
Gr - - Interface
Interfacebetween
betweenSGSN
SGSNand
andHLR
HLR
Gd
Interface
between
SGSN
and
SMSC
Gd - Interface between SGSN and SMSC
Gn
Gn - - Interface
Interfacebetween
betweentwo
twoGSN
GSN
within
within
the
thesame
samePLMN
PLMN
Gp
Gp - - Interface
Interfacebetween
betweentwo
twoGSN
GSNin
in
different
PLMN
different
3/10/16 PLMN

IP
IP
Network
Network

Gn

Backbone
Backbone
Network
Network

Other
Other
PLMN
PLMN
Gp (IP)

System Architecture

PSTN
Abis
BTS

Ater / A
BSC

E
MSC/VLR

GMSC
Signaling

Abis
EIR

VOICE CALLS !

AUC

HLR

Um
BTS
contains a Software
Upgrade called
CHANNEL CODEC
UNIT
(CCU)
CCU caters to the 4
GPRS Coding
Schemes
(CS 1-4).

Gs
Abis

Gr

DATA SESSIONS !
SGSN
BSC

Gc

GGSN

PDN

PCUSN
Agprs

PACKET CONTROL UNIT

SN
handles all Radio
Resource (RR) functions
sub-MUXes different
logical channels to same
physical chan
supports data transfer
management (Sliding
window)

Signaling +
Data transfer

Gb

Gn

SERVING GPRS SUPPORT NODE

Maintains logical connection
with
MS (LLC)
Mobility Management
Authentication & Ciphering
Paging functions for GPRS
Supports GTP/IP for
communication with GGSN

GATEWAY GPRS
SUPPORT NODE
Gateway between GPRS
n/w and external Packet
Data N/w
Routing info detailing
SGSN Area for each MS
Mapping between PDP
Address -- IMSI

Network architecture New interfaces

Note: Gc & Gs interfaces are optional
VLR
TCU
BTS

PSTN/
ISDN

MSC
A
SMSC

Ater

EIR

Gs
Gf

Gd
BSC

Gr

Ga
PCUSN

Gc
Gi

Gn

Gb

Agprs

HLR

SGSN
CGF

PSPDN

Ga
GGSN Gp
SGSN of other PLMN

 The GPRS backbone network permits point-to-point GPRS calls,

interworking with the BSS, HLR, MSC, SMSC, and the Internet.
These services are supported via the following interfaces:
Ga

Between SGSN or GGSN and a CGF.

Gb

between PCUSN and SGSN, using Frame Relay.

Gr

between SGSN and HLR, extension of MAP.

Gn

between SGSN and GGSN using GTP protocol (tunnel).

Gi

between GGSN and PDNs (IP and X.25).

Gs

between SGSN and MSC/VLR, for some simultaneous GPRS and GSM operation
(same as BSSMAP but optional).

Gd

between SGSN and SMS-C to deliver SMS messages via GPRS (same as MAP).

Gc

between GGSN and HLR (same as MAP but optional)

SGSN functions

HLR

DNS
SGSN

Gr

Ga
Gb
Frame
relay

GT
P

CGF

Gn
Tu
n

ne
lin
g

GGSN
PCUSN

SGSN Functionality

DNS

Routing
Resolution

Ciphering &
Compression

Mobility
SGSN

Frame

Management

HLR

GTP Tunneling

Relay

PCUSN

GGSN

GGSN Functionality

DHCP

IP Address

Billing

Management

Records

GGSN

Charging Gateway

VPN Tunneling

GTP Tunneling

INTERNET
SGSN

ChargingGatewayFunction
CGF

S-CDR and M-CDR

Collector

SGSN

Core
network

Billing Files
Transfer

Billing
Center

GTP
GTP

GGSN

Aggregator
&
Distributor
Get / Push billing files

G-CDR

Billing Records:
PDP session duration
GPRS QoS Negotiated
Input Octets
Output Octets
Hot Billing

Nortel Networks
implementation
(1/2)
Nortel Networks
implementation
(1/2)
MSC-VLR
PSTN/
ISDN

VLR
TCU

HLR

BTS

Gr

Gs

Gd

Ater

Internet

DHCP
& DNS

SS7/IP
gateway

SIG

BSCs

SMSC

Gi

Agprs

ATM

Gb
OMC-R

PCUSN

Gn

SGSN
OMC-D

Intranet A

Ethernet
Gn

PP 7K

Gi

GGSN
Charging
Gateway

Gi

Intranet B

MS
SWITCH ON
CELL IDENTIFICATION
PLMN SELECTION
CELL SELECTION

Attach Procedure

REGISTRATION
DATA TRANSFER
DETACH

PDP Context activation.

GPRS Traffic
Procedures that handle mobility of
user are called GPRS
MobilityManagement(GMM).

Procedures that handle user

connection to external networks are
called Session Management(SM).

GSM MM States v/s GMM States

GSM MM States

DETACHED

GMM (GPRS) States

IDLE

IMSI ATTACH

IDLE

STANDBY
Possession of
dedicated resources

ACTIVE

READY

GPRS Traffic
There are two phases in connecting a
GPRS terminal to the network:
- Connection to the GPRS(SGSN)
network:
GPRS attach
- Connection to the external network:
PDP context activation

GPRS MobilityManagement
GPRS attach procedure is one
example.
When GPRS terminal is powered on ,
it sends an attach message to the
network.
SGSN authenticates before attaching
to GPRS network.
Once sub. has attached to network,
logical connection is established b/n
MS,SGSN and HLR.

GPRS Attach
MS

PCUSN

SGSN

HLR

IMSIor(P_TMSI+oldRAI)
Attachtype
MultiSlotcapability
requestedREADYtimervalue
DRXparameters

GPRS Attach Request

SecurityFunctions

Update Location
Insert Sub Data
Insert Sub data Ack
Update Location Ack

GPRS Attach Accept

MS=READY

P_TMSI
Negotiatedreadytimervalue
PeriodicRAtimer

Session Management
Procedure to establish a connection
to an external data network is called
PDP context activation.
So, a connection is established
between the MS and GGSN via the
SGSN.

PDP Context activation scenario

2

SGSN
PDP context activation

DNS query

3
GGSN To be Used

DNS

DHCP

Access Mode and IP address allocation

Create
PDP
context
1
Create PDP context accept
6
5
PDP context activation.
8
9

Intranet

MS

GGSN

Start Billing records

7

LAP TOP

CGF

GPRS PDP Context Activation

(MS Originated)
DNS

MS

DHCP

Radius

SGSN
BSS

GGSN

Tunnel
Activate PDP Context Request
(NSAPI, PDP type, PDP address, QoS Requested,APN)
SecurityFunctions
Create PDP Context Request
(NSAPI, PDPtype, PDP@, QoS, APN)
Create PDP Context Response
Activate PDP Context Accept
(PDP type, PDP address, QoS Negotiated)

(PDP address, QoS negociated)

PDP context activation

After a successful GPRS attach , MS

has to exchange data packets with
external PDNs.
It must get an IP address to be able
to connect to external PDNs.
This is PDP context activation.
It is an IP allocation to MS.

PDP context activation

It contains:
PDP types(IPv4)
PDP address assigned to MS
Requested QoS
Address of a GGSN that serves as
access point to PDN.
This context is stored in MS, SGSN
and GGSN.

Mobility Management
states
A GPRS MS has one of three mobility
management states:
The Idle state is used when MS is
passive(not GPRS attached)
Performing a GPRS attach, MS gets into
Ready state.
Standby state is entered when sub. has
ended an active phase but is still attached
to network.

Mobility Management State

GPRS
Attach/Detach

Idle

STANDBY
TimerExpiry

READY
TimerExpiry
Standby

Ready

Packet
TX/RX

MSlocationknownto
MSlocationknownto
celllevel.
MSlocation
SGSNlevel.
MSistransmittingorhas
notknown.
MSiscapableofreceiving justbeentransmitting.
Subscriberisnot Point-to-Multipointdata MSiscapableofreceiving
reachablebythe andbeingpagedfor
Point-to-Pointdataand
GPRSNW.
Point-to-Pointdata
Point-to-Multipointdata.

Mobility Management State

Model
IDLE

GPRS
Attach
Standbytimer
expiry

GPRS
Detach

CellUpdates
=>Noneedforpaging

READY

Readytimer
expiry

Data(PDU)
transmission

STANDBY

OnlyRAUpdates
=>Pagingisrequired

BSC & Packet Control Unit - PCU

and Gb interface

BSC/PCU

Gb

MSC/VLR
Gs

MAP

HLR

Gr (MAP)
Gi (IP)

SGSN

GGSN
Gn

Gn

Gb interface - Frame Relay

based interface towards SGSNBackbone
Network
Allocation of PDCH in cells
IP
Handling of GPRS Paging
Broadcast GPRS information

IP
Network

ServingGPRSSupportNodeSGSN

Ciphering,authentication
Mobilitymanagement
Sessionmanagement
LogicallinkmanagementtowardstheMS
Chargingdata
Packetrouting&transfer
Connection-HLR,MSC,BSCandSMS-MSC
IP
Network
Gi (IP)

SGSN

MS

Gn

GGSN

GatewayGPRSSupportNodeGGSN

Externalinterfaces(MobileIPapplications,Internet/Intranets)

Accessfunctionality

Traditionalgatewayfunctionality

Subscriberaddressespublish

Routing

Chargingdata

IP
Network
Gi (IP)

GGSN

MS

Authentication
Network Switching Subsystem (AUC)
TheAUCorAuthenticationCenterinsidetheHLRisresponsibleformaking
surethattheSIMcardinthemobilephoneisnotafakeorcopy.

HLR/AUC
Ki

A3

SGSN
RAND & SRES SRES
RAND

Copyright1996NorthernTelecom

RAND

Ki

Match?

A3

TheAUCgeneratesaSignedResponse(SRES)bymixingarandom
number(RAND),anidentitykey(Ki),andanalgorithm(A3).
TheMobilemakesthesamecalculationandtheSGSNcomparestheanswer.

Authentication
MS

SGSN

HLR

BSS

Send Authentication Info

(IMSI)
RAND
A3
Send Authentication Info Ack

Authentication Request

Ki

(SRES, RAND, Kc)

(RAND)
SRES

A3
Authentication Response

(SRES)

no

yes
Authenticated Subscriber

Forbidden
Subscriber

Ki

GGSN

GPRSMobileStationCapabilities

ClassA

ClassB

Simultaneous execution of circuit switched and GPRS operation is

possible

Simultaneous execution of signaling for both circuit switched and

GPRS operation is possible
GPRS traffic will be suspended during a pending or an established
circuit switched connection

ClassC

Alternate use of circuit switched and GPRS operation

Multiple Access Operation

GSM Single Radio-TS Operation

* For either uplink or downlink

6 7

GPRS Multislot Operation

Non-BCCH
TDMA

Hence, 1 MS :: 1-8 TS

* Subject to QoS profiles

GPRSMobileStationCapabilities
ThenumberoftimeslotsaGPRSmobilecanusewhensending(uplink)orreceiving
(downlink)iscommunicatedtothenetworkintheformofaMultislotclass.

Classesexistallthewayto8+8(Class29)buttheserequirethehandsetstosendand
receiveatthesametime.Currentlytherearenomobilesthatcandothis.

Herearesomecurrentlyusedmultislotclasses.
Multislot Class

Downlink Slots

Uplink Slots

Active Slots

10

11

12

Multiple Access Operation

Multiple MSs on a single Radio-TS

1st RLC
Block

70

2nd RLC
Block

70

70

3rd RLC
Block

Hence, 1 TS :: 1-8 MS

4th RLC
Block

Channel Coding
4 Coding

Schemes:

protection
+
headers+B
CS

data
CS1 8

kbits/s
CS2 12 kbits/s

CS3
CS4

14.4
kbits/s
20 kbits/s
22.8 kbits/s

LLC frames

RLC/MAC block
data
RLC/MAC
header
(USF, TFI)
1 Packet=4 bursts

GPRS 52-Multiframes

Cycle of 52 TDMA frames divided

in:

12 radio blocks B0-B11 (of 4

consecutive frames)
4 idle frames (X)
TDMA FrameGPRS Time Slot
= 4.615 ms

Idle frames

0 12 345 67 01 234 56 701 23 45 67

Multi Frame 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51
Block

B0

B1

B2 1

B3

B4

B5 2

Radio Blocks

B6

B7

B8 3

B9

B 10 B 114