TO

PRESENTATION
BY
MRINMOY MISTRI
 Flow of Presentation
• Introduction (Evolution, Why GSM?, Specification)
• Cellular Concepts ( Frequency Re-use)
• GSM Network Architecture
• GSM Interfaces & Protocol
• Physical Layer at Air Interface
- Channels & Burst at Air Interface
- Mobile in Idle Mode, Timing Advance
- Coding & Interleaving at Air Interface
• Physical Layer at Abis Interface
• Radio Resource management (Handover)
• Mobility Management (LA, Authentication,Ciphering)
• Connection Management (Registration, MOC & MTC)
INTRODUCTION
 EVOLUTION MOBILE COMMUNICATION

AMPS D-AMPS TD-SCDMA

TACS IS-95 CDMA 2000

GPRS
2.5G UMTS/
NMT GSM
W-CDMA

ANALOG DIGITAL IMT-2000

1G 2G 3G
 ANALOG MOBILE COMMUNICATION

AMPS – Advanced Mobile Phone Service

US based, 800 MHz band
TACS – Total Access Communication
System UK based, AMPS in
900 MHz band
NMT
– Nordic Mobile Telephone
ANALOG System Scandinavian, Both in
SYSTEM 450 MHz and 900 MHz band
1G
 DIGITAL MOBILE COMMUNICATION

– Dual mode AMPS

D-AMPS US, Analog signaling and Digital voice coding

– IS-95
IS-95 US, CDMA based

– GLOBAL SYSTEMS FOR MOBILE

GSM
COMMUNICATIONS
DIGITAL European standard, Both in 900
SYSTEM MHz & 1800 MHz band
2G
 Why GSM?
 GSM gives mobility without any loss in Audio
quality
 Encryption techniques used gives high security

 Bit Interleaving for high efficiency in

Transmission.
 Variable Power (Power budgeting- extend battery
life)
 Minimum Interference.(Eq DTX )
5. Dual personal and
 Support International Roaming
business numbers
 Features-1.Telephony
6. Data and Fax
– 2. SMS (Short Message Services)
7.CLI , Call barring , Call
– 3. Emergency Calls forwarding, charging and
– 4. CELL Broadcast multiparty
What are the types in GSM
Network?

 GSM-900 (Channels 125, spacing 45Mhz)

 GSM -1800 (Channels 374, spacing 95Mhz)

 PCS – 1900 (Channels 299 , spacing 60Mhz)

 GSM 900 -System
specifications
Frequency band
25 MHz
Uplink 890 MHz-915 MHz
Downlink 935 MHz-960MHz
Duplex distance 45MHz
Carrier separation 200KHz
Modulation GMSK
Access method FDMA/TDMA
 CELL TYPES

MAX - 60 - 70 KM

200 m +

Large cells Small cells

Remote Areas Urban Areas

Coastal Regions Low transmission power

required
Areas with few Subscribers
High Number os MSs
CELLULAR CONCEPT
Wireless Communication

U
z

PL
MH

IN
DO
z
MH

K
.2

W
0

NL
89

5 .2

IN
93

K
•A pair of RF channels require per
active call
•Up link & down link frequency
difference 45 MHz
 Access Techniques
 Uplink 890 MHz to 915 MHz
 Down Link 935 MHz to 960 MHz

 25 MHz divided into 125 channels of

200 KHz bandwidth ( 25 / 0.2 = 125)
 5 MHz BW allocated to each Cellular
Service Provider( Maximum 5
operator )
UP 890.0 890.2 890.4 914.8 915.0

DOWN 935.0 935.2 935.4 959.8 960.0

 What is ARFCN ?
 ARFCN--> Absolute Radio Frequency Channel
Number used to express one pair of RF channels
 ARFCN = (fUP -890) / 0.2 or (fdown -935) / 0.2

ARFCN 1 2 124 125

UP 890.0 890.2 890.4 914.8 915.0

DOWN 935.0 935.2 935.4 959.8 960.0

 Access Techniques
 Time Division Multiple Access
– Each carrier frequency subdivided in
time domain into 8 time slots
– Each mobile transmits data in a
frequency, in its particular time slot -
Burst period = 0.577 milli secs.
– 8 time slots called a TDMA frame.
Period is .577 * 8 = 4.616 milli secs
0.577 ms

0 1 2 3 4 5 6 7

4.616 ms
 TDMA FRAME AT AIR INTERFACE

ARFCN 1 TDMA FRAME PER ARFCN

ARFCN 2
890.2 T0 T1 T2 T3 T4 T5 T6 T7
ARFCN 3

5 ARFCN 4
MHz 935.2 T0 T1 T2 T3 T4 T5 T6 T7
……….
ARFCN24

ARFCN25

• UPLINK & DOWNLINK USE SAME ARFCN

FOR A
•UPLINK & DOWNLINK USE SAME TIME SLOT NUMBER
PARTICULAR
MS • UPLINK LAGS DOWNLINK BY 3 TIME SLOT PERIOD
 UPLINK LAGS DOWNLINK

890.2 T0 T1 T2 T3 T4 T5 T6 T7

935.2 T0 T1 T2 T3 T4 T5 T6 T7 T1 T2 T3

DOWNLINK UPLINK DOWNLINK

What is the problem with one cell?

• One BTS is covering whole city

• All 25 ARFCN are used

•Problem with High power Transmission

----Talk time supported by battery will be less
----Human body Hazards
•Limited Capacity of the Network due
to limited spectrum

High Transmission
Power
 Maximum Capacity with one cell
ARFCN 1 TDMA FRAME PER ARFCN
ARFCN 2
T0 T1 T1 T3 T4 T5 T6 T7
ARFCN 3

5 ARFCN 4
MHz
……….
ARFCN24

ARFCN25

• 5 MHz / 0.2 MHz = 25 CHANNEL

• 8 MOBILES CAN SHARE ONE CHANNEL BY TDMA
• MAXIMUM ACTIVE CALL AT A TIME = 25 * 8=200
 GSM Concepts - Cellular
Structure
 Cellular
Frequency reuse – Networking technology
that breaks geographic
area into cells shaped
2 like honey comb
2 7  Cell
7 3 1 – Area of coverage
provided by one or
1 6 more Radio
4 2 terminals(TRX)
6 5
5 2 7 – TRX => TX + RX
7 3 1
1 6
4
6 5
5
 GSM Concepts - Cellular
Structure
To Overcome Network Congestion problem, We can
add more channel in that particular cell 2

2 7
10
7 3 1

1 6
15
8 4
6 5

5
To Overcome Coverage problem, We have to install
new BTS in that nearby location
GSM NETWORK
ARCHITECTURE
 GSM - Network Structure
MS PVLR
Um G

BTS VLR HLR

BSC D
Abis MSC
A B C
MS AuC
BTS GMSC

Abis E F
EIR
A
MSC I

BSC PSTN
Um B
BTS
VLR
OMC Server
 GSM Network
SS
Switching
AUC System
External
PSTN & VLR HLR EIR
PDN N/W OMC
MS Mobile Station MSC
BTS Base transceiver System
BSC Base Station Controller
MSC Mobile Switching Center
HLR Home Location Register BSS XDR Base Station
VLR Visitor Location Register BSC
BTS
System
EIR Equipment Identity Register
AUC Authentication Center
OMC Operation And Maintenance Center MS
 Mobile Station (MS)
Mobile Mobile
Handset + SIM => Station

IMEI IMSI •MSISDN(PSTN)

•IMSI (PLMN)
•Hand portable unit
•Frequency and Time Synchronization
•Voice encoding and transmission
•Voice encryption/decryption functions
•Power measurements of adjacent cells
•Display of short messages
GSM Identifiers-Subscriber Identities
-MSISDN
 Human Identity to call a MS
 MSISDN uniquely identifies a mobile
subscriber in PSTN
 Calls will be routed from the PSTN and
other networks based on MSISDN
number.
 MSISDN= CC + NDC + SN

CC= Country Code (98)

NDC= National Destination Code(440)
SN= Subscriber Number (12345)
 International Mobile Subscriber
Identity [IMSI]
A subscriber is always identified within the
GSM network by the IMSI
-Used for all signaling in the PLMN.
- Stored in the SIM, HLR & VLR.
-The IMSI
consists of three different parts.
 IMSI= MCC + MNC + MSIN
(Maximum of 15 digits) = (3 digits)+(1-2 digits)+(maximum 11
digits)
MCC = Mobile Country Code (404)
MNC = Mobile Network Code (Example 44 for SPICE )
MSIN = Mobile Station Identification Number
 International Mobile Equmt. Identity
[IMEI]
 The IMEI is used for equipment identification.
An IMEI uniquely identifies a mobile
station as a piece or assembly of equipment.
 IMEI = TAC + FAC + SNR + sp

 TAC= Type Approval Code (6 digits),determined

by GSM body
 FAC= Final Assembly Code (2 digits), identifies
the manufacturer
 SNR= Serial Number (6 digits), uniquely
identifying all equipment within each TAC & FAC
 sp = Spare for future use (1 digit)
 Subscriber Identity Module
(SIM)
•Portable Smart Card with memory
(ROM- 6 to 16KB, RAM- 128 to 256KB, EEPROM- 3 to8KB
A3/A8 algorithm) SIM
•Dynamic Information
–Temporary Mobile Subscriber Identity(TMSI)
–Location Area Identity (LAI)
–Phone memories, billing information
–Ability to store Short Messages received
•Static Information
–International Mobile Subscriber Identity(IMSI)
(MCC + MNC+MSIN)
–Personal Identification Number (PIN)
–Authentication Key (Ki)
 Base Transceiver Station (BTS)

•Consists of one or more radio terminals (TRX) for

transmission and reception
•Each TRX represents an RF Channel(ARFCN)
•TRX and MS communicates over Um interface
•BTS Hardware : TRX, CBF, Duplexer,DLNB and
digital boards etc..,
•BTS Type: Omnidirectional, Bi-directional(2 Sector)
& Sectorised (3 Sector)
 Sectorised BTS Configuration
BTS
CONFIGURATION
1+1+1 TRX 1 TRX 4
SECTOR 1
ARFCN 1 ARFCN 10
BTS
CONFIGURATION
2+2+2
TRX 2 TRX 5
SECTOR 2
ARFCN 4 ARFCN 13

Maximum 12 TRX
(4+4+4)

TRX 3 TRX 6 SECTOR 3

ARFCN 7 ARFCN 16
 Base Station Controller (BSC)

•External Interfaces
–‘Abis’ interface towards the BTS
–‘A’ interface towards the MSC
•Monitors and controls several BTSs
•Management of channels on the radio interface
•Performs inter-cell Handover
•Interface to OMC for BSS Management
Gateway Mobile Switching
Center (GMSC)

•Interface of the cellular network to PSTN

•Routes calls between PLMN and PSTN
•Inter-BSC Handover
•Performs call switching
•Billing
Home Location Register (HLR)

•Stores user data of all Subscribers related to the GMSC

–International Mobile Subscriber Identity(IMSI)
–Users telephone number (MS ISDN)
–Subscription information and services
•Referred when call comes from public land network
 Visitor Location Register (VLR)

•Copy of subscriber data from HLR

•Generates and allocates TMSI for Subscriber
confidentiality
•Location Area Code
•Provides necessary data when mobile originates
call
 Authentication Center (AuC)
•Stores Subscriber authentication data called Ki, a
copy of which is also stored in in the SIM card
•Generates security related parameters to authorize a
subscriber (SRES)
•Generates unique data pattern called Cipher key
(Kc) for user data encryption
•Provides triplets - RAND, SRES & Kc, to the HLR
on request.
 EIR (Equipment Identity
Register)
 EIR is a database of all valid Subscriber’s
Handset Identity (IMEI).
EIR has three databases.,
White list - For all known,good IMEI’s
Black list - For all bad or stolen handsets
Grey list - For handsets/IMEI’s that are
uncertain
- Implementation depends on Service Provider
GSM Interfaces &
Protocol
 Interfaces and Protocols
B G
VLR
VLR
Um /
AIR/ MAP
Abis A D
Radio
C
HLR
BTS BSC MSC
MAP
LAPDm LAPD BSSAP E
MSC
MAP

A PROTOCOL IS AN
AGREEMENT ON HOW TO F
EIR
COMMUNICATE MAP
 GSM PROTOCOL MATRIX
MS BTS BSC MSC
CM CM I
MAP S
MM MM U
P
RR BSSAP BSSAP TCAP
RR
RR BTSM BTSM SCCP SCCP
MTP MTP
LAPDm LAPDm LAPD LAPD LEVEL2&3
LEVEL 2 & 3
MTP
Radio Radio G.703 G.703 LEVEL 1 MTP LEVEL 1

AIR Abis A
 Air interface protocol
Signaling Layer 3
Connection Management

Mobility Management

Radio Resource Management

Signaling Layer 2

BCCH PCH AGCH RACH SDCCH SACCH FACCH TCH

Signaling Layer 1
Physical Layer at Air Interface
Signaling Layer 3 Air
Connection Management Interface
Protocol
Mobility Management

Radio Resource Management

Signaling Layer 2

BCCH PCH AGCH RACH SDCCH SACCH FACCH TCH

Signaling Layer 1 (Physical)

Physical Layer at Air Interface

•Transfer the bit stream over the Physical Channel

on the radio medium.
•Mapping of Logical Channel to Physical Channel
•Channel coding for error correction
•Cell Selection in Idle mode
•Scaling of Timing Advance.
GSM Channels & Burst
at
Air Interface
 Channel concept

Physical channel:
One timeslot of a TDMA-frame on one ARFCN
is referred to as a physical channel.
There are 8 physical channels per carrier in
GSM,channel 0-7(timeslot 0-7)
Logical channel:
Depending on the kind of information transmitted, we
refer to different logical channels.
These logical channels are mapped on physical channel.
 Logical channels
Logical channels

Control channels Traffic channels

Half Full
BCH CCCH DCCH rate rate

FCCH SCH BCCH PCH AGCH RACH SDCCH SACCH FACCH

 Control channels

Broadcast channels BCH

1)Frequency correction channel-FCCH
To allow the MS to synchronize to the frequency.

2)Synchronization Channel-SCH
•This is used by the MS to synchronize to the
TDMA frame structure within the particular cell.
•Listening to the SCH the MS receives the TDMA
frame number and also the BSIC.
 Control channels

Broadcast channels BCH

3)Broadcast Control Channel-BCCH
The last information the MS must receive in
order to receive calls or make calls is some
information concerning the cell. This is BCCH.

This include the information of Max power

allowed in the cell,BCCH carriers for the
neighboring cells,Location Area Identity etc.
This is transmitted Downlink point to multipoint.
 Control channels

Common Control
Channels,CCCH
1) Paging Channel-PCH
The information on this channel is a paging message including
the MS’s identity(IMSI).This is transmitted on Downlink.

2) Random access channel-RACH: C

When the mobile realizes it is paged it answers by requesting a
signaling channel on RACH. RACH is also used by the MS if
it wants to originate a call.It is transmitted in Uplink point
to point.
 Control channels

Common Control Channels,CCCH

3) Access Grant Channel-AGCH
On request for a signaling channel by MS the network
assigns a signaling channel(SDCCH) on AGCH. AGCH is
transmitted on the downlink point to point.
 Control channels

Dedicated Control Channels-

DCCH
1) Stand alone dedicated control channel(SDCCH)

•AGCH assigns SDCCH on request by MS.

•Used during Call setup
•Steppingstone between BCH & TCH
•MS is informed about frequency & timeslot to use
•Up and Downlink, point-point.
 Control channels

Dedicated Control Channels-

DCCH
2) Slow associated control channel-SACCH
UPLINK - RX-QUAL, RX Level, Adjacent Power report
DOWNLINK- TX Power Command
MS Timing Advance
Cell’s Channel Configuration

3) Fast associated control channel-FACCH

•Used for handover.
•Interrupts TCH in UP & DOWN Link
•Rapid Message Exchange for HANDOVER
•Indicated by Stealing Flag TCH(0) & FACCH (1)
 Traffic Channels-TCH

Full rate traffic channel occupies one physical

channel(one TS on a carrier)

Two half rate TCHs can share one physical

channel.
 Logical to Physical Channel
Mapping

TDMA Frames

0 1 2 3 4 5 6 7 0 1 2 3 ……..

TS 0 - FCCH +SCH+ BCCH + PCH+AGCH

RACH
TS 1 - SDCCH + SACCH
TS 2-7 - TCH / FACCH
 Concept of Frames
FRAME
T0 T1 T1 T3 T4 T5 T6 T7 NO 1
4.616 ms

FRAME
T0 T1 T1 T3 T4 T5 T6 T7
NO 2

FRAME
T0 T1 T1 T3 T4 T5 T6 T7
NO 3

•1 TS = 577us
•1 TDMA FRAME = 8 TS=4.616 ms
•1 TCH MULTIFRAME = 26 TDMA FRAME= 120ms
•1 CCH MULTIFRAME =51 TDMA FRAME = 234.6ms
 Burst

The information format transmitted during

one timeslot in the TDMA frame is called
a burst.
Different Types of Bursts
 Normal Burst
 Random Access Burst
 Frequency Correction Burst
 Synchronization Burst
 Normal Burst

156.25 bits OR 576.92 us

T Coded Data S T. Seq. S Coded Data T GP
3 57 1 26 1 57 3 8.25

Tail Bit(T) :Used as Guard Time

Coded Data :It is the Data part associated with the burst
Stealing Flag :This indicates whether the burst is
carrying
Signaling data.
Training Seq. :This is a fixed bit sequence known both to
the BTS & the MS.This takes care of the
signal deterioration.
 Burst
T Training Sequence Coded Data T GP
8 41 36 3 68.25

Random Access Burst

T Fixed Bit Sequence T GP
3 142 3 8.25

Freq. Correc. Burst

T Coded Data Training Sequence Coded T GP

3 39 64 Data 39 3 8.25

Synchronization Burst
Mobile Station in IDLE mode
What does a Mobile do in idle
mode?
Reads BCCH
(System Information
Messages)
Listen To Paging

Monitors Neighbor for cell

selection 
Mobile Station in IDLE mode
System Information Messages
System Information messages contains all the
relevant data required by the mobile to access
the network
6 Types System Information messages are
used 1- 4 sent on BCCH & 5-6 on
SACCH
 Information of Max power ,allowed in the
cell, BCCH carriers for the neighboring cells,
Location Area Identity etc.
Mobile Station in IDLE mode
Listen To Paging
Paging is the process by which Mobile receives
incoming cell
 Mobile has to monitor the paging channel to
receive the paging messages.
 Mobile will not monitor all paging channels, it will
monitor the channel specific to it’s Paging Group.
 Mobile belonging to Paging group P0 will remain
Idle during P1, P2, P3.


Mobile Station in IDLE mode
Monitor Neighbors for Reselection
 Mobile reads the System Information Messages
every 30sec
 Measures signal strengths of 6 neighbors cells

 Measurement is done when it listens to it’s Paging

Group
 Decodes the BCCH data(Reselection data only) for
neighbors at least every 5 minutes
 If neighbor becomes strongest, then does a “Cell
Selection”

 Timing Advance

•TDMA approach requires signals to

arrive at BTS at the correct time.
•They must not overlap.
 Timing Advance
RACH BURST

T T
Synch sequence Encrypted bits Guard
B B
Period
41bits 68.25 bits
63 bits
Timing Advance
•BSS calculates access delay from RACH in terms of bits.
•Informs Mobile to delay it’s timing in terms of bits.
•Maximum Timing advance of 63 bits
 Timing Advance
MOBLE MAXIMUM RANGE FROM BASE
STATION (Theoretically)
Timing Advance X Bit Period X Velocity
RANGE=
. 2
( 63 ) X ( 3.693 X 10e-6) X (3X10e5)
RANGE= = 34.9KM
. 2

Timing advance = Delay of bits(0-63)

Bit Period = 577micro sec/ 156.25 = 3.693 micro sec
Velocity = 3 x 10e5
CODING & INTERLEAVING
AT
AIR INTERFACE
 Inside A GSM Cellphone

Transeiver Speaker Battery

Signal Processing LCD

ARM
Processor Chipset Display

SIM card/ Micro

phone Keypad
Controller
 MOBILE STATION

TX PART RX PART
TX MODULATOR RX DEMODULATOR

BURST FORMATING VITERBI EQULISER

CIPHERING DE-CIPHERING
INTERLEAVING DE-INTERLEAVING
22.8 KBPS
CHANNEL CODING DECODING
13 KBPS
SPPECH CODING SPPECH DECODING
SEGMENTATION

A/D CONVERSION D/A CONVERSION

Microphone Receiver
 Speech & Channel Coding
Microphone
Sampling at 8 KHz &
A/D CONVERSION Coding using 13bits
=104 Kbps
20 ms block SEGMENTATION = 2080 bits/20ms
2080 bits / 20ms
SPEECH CODER
260 bits / 20ms
BITS ORDERED
Very Important
50 bits Important Other
132 bits 78 bits
BLOCK CODER

CONVOLUTION CODER

456 bits => 8 Block of 57 bits

 Diagonal Interleaving
456 bits from 20ms Speech 456 bits from 20ms Speech

57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57
bits bits bits bits bits bits bits bits bits bits bits bits bits bits bits bits

T Coded Data S T. Seq. S Coded Data T GP

3 57 1 26 1 57 3 8.25
Probablity of Data Loss = 25% ( 2 block out of 8 block)
Probablity of Data Loss = 12.5%
 TRAU Frame
456 bits/20ms => 22.8Kbps
Data rate at Air = 22.8
BTS( Decoding) Kbps
260 bits/20ms => 13 Kbps
TRANSCODER
HANDLER
(Add 60 bits)
320 bits/20ms => 16 Kbps
GSM Speech rate = 13 Kbps
Mapped on Abis

60 bits = 35 (Synchronization between Transcoder & TRX)

+ 4 (Time Alignment)
+ 21 (Control-> Information about Frame like
Frame is Speech, Data , Idle, O&M, )
PHYSICAL LAYER(G.703)
AT
Abis INTERFACE
 G.703 in Abis
MS BTS BSC MSC
CM CM I
MAP S
MM MM U
P
RR BSSAP BSSAP TCAP
RR
RR BTSM BTSM SCCP SCCP
MTP MTP
LAPDm LAPDm LAPD LAPD LEVEL2&3
LEVEL 2 & 3
MTP
Radio Radio G.703 LEVEL 1
MTP LEVEL 1

AIR Abis A
2 Mbps PCM Sharing by 1 BTS (Total 1 TRX)
2Mbps =32 X 64KbpsT00 Synchronization
T01 TRX_1 TRX_1 TRX_1 TRX_1
T02 TRX_1 TRX_1 TRX_1 TRX_1
TRX T03 TRX_2 TRX_2 TRX_2 TRX_2
TRAFFIC TRX_2 TRX_2 TRX_2
T04 TRX_2
8X16Kbps/TRX
…..
TRX TRX1_S OMU1_S
T25
SIGNALLING
T26 TRX2_S OMU2_S
16Kbps/TRX
T27
OMU T28
SIGNALLING T29
16Kbps/BTS
T30
T31 Signaling
 2 Mbps PCM Sharing by 1 BTS (Total 2 TRX)
2Mbps =32 X 64KbpsT00 Synchronization
T01 TRX_1 TRX_1 TRX_1 TRX_1
T02 TRX_1 TRX_1 TRX_1 TRX_1
TRX T03 TRX_2 TRX_2 TRX_2 TRX_2
TRAFFIC TRX_2 TRX_2 TRX_2
T04 TRX_2
8X16Kbps/TRX
…..
TRX TRX1_S OMU1_S
T25
SIGNALLING
T26 TRX2_S OMU2_S
16Kbps/TRX
T27
OMU T28
SIGNALLING T29
16Kbps/BTS
T30
T31 Signaling
2 Mbps PCM Sharing by 2 BTS (Total 2 TRX)

2Mbps =32 X 64KbpsT00 Synchronization

T01 TRX_1 TRX_1 TRX_1 TRX_1
T02 TRX_1 TRX_1 TRX_1 TRX_1
TRX T03 TRX_2 TRX_2 TRX_2 TRX_2
TRAFFIC TRX_2 TRX_2 TRX_2
T04 TRX_2
8X16Kbps/TRX
…..
TRX TRX1_S OMU1_S
T25
SIGNALLING
T26 TRX2_S OMU2_S
16Kbps/TRX
T27
OMU T28
SIGNALLING T29
16Kbps/BTS
T30
T31 Signaling
 2 Mbps PCM Sharing by 1 BTS (Total 12
TRX)
2Mbps =32 X 64KbpsT00 Synchronization
T01 TRX_1 TRX_1 TRX_1 TRX_1
T02 TRX_1 TRX_1 TRX_1 TRX_1
TRX …...
TRAFFIC TRX_12
T23 TRX_12 TRX_12 TRX_12
8X16Kbps/TRX
T24 TRX_12 TRX_12 TRX_12 TRX_12
TRX TRX1_S OMU1_S TRX7_S OMU7_S
T25
SIGNALLING
T26 TRX2_S OMU2_S TRX8_S OMU8_S
16Kbps/TRX
T27 TRX3_S OMU3_S TRX9_S OMU9_S
OMU T28 TRX4_S OMU4_S TRX10_S OMU10_S
SIGNALLING T29 TRX5_S OMU5_S TRX11_S OMU11_S
16Kbps/BTS
T30 TRX6_S OMU6_S TRX12_S OMU12_S
T31 Signaling
 2 Mbps PCM Sharing by 12 BTS (Total 12
TRX)

2Mbps =32 X 64KbpsT00 Synchronization

T01 TRX_1 TRX_1 TRX_1 TRX_1
T02 TRX_1 TRX_1 TRX_1 TRX_1
TRX …...
TRAFFIC TRX_12
T23 TRX_12 TRX_12 TRX_12
8X16Kbps/TRX
T24 TRX_12 TRX_12 TRX_12 TRX_12
TRX TRX1_S OMU1_S TRX7_S OMU7_S
T25
SIGNALLING
T26 TRX2_S OMU2_S TRX8_S OMU8_S
16Kbps/TRX
T27 TRX3_S OMU3_S TRX9_S OMU9_S
OMU T28 TRX4_S OMU4_S TRX10_S OMU10_S
SIGNALLING T29 TRX5_S OMU5_S TRX11_S OMU11_S
16Kbps/BTS
T30 TRX6_S OMU6_S TRX12_S OMU12_S
T31 Signaling
Radio Resource Management
Signaling Layer 3 Air
Connection Management Interface
Protocol
Mobility Management

Radio Resource Management

Signaling Layer 2

BCCH PCH AGCH RACH SDCCH SACCH FACCH TCH

Signaling Layer 1
 Radio Resource Management
Radio Resource Management (RR)
 Establish and Release stable connections
between MS and MSC
 Manage Limited Radio and Terrestrial resources

 Functions of RR layer are performed by MS and

BSC and partly by MSC
 Handover process is the sole responsibility of
the RR Layer
 Handover
 Means to continue a call even a mobile
crosses the border of one cell to another
 Procedure which made the mobile station
really roam within same Network
 Handover causes

– RxLev (Signal strength , uplink or downlink)

– RxQual (BER on data)
– Timing Advance
– Traffic or Load balancing
 Handover Types

– Internal Handover (Intra-BSS)

Within same base station - intra cell
Between different base stations - inter
cell

– External Handover (Inter-BSS)

Within same MSC -intra MSC
Between different MSCs - inter-MSC
 GSM - Network Structure
MS
Um

BTS VLR HLR

BSC
Abis MSC
A
MS AuC
BTS GMSC

Abis
EIR
A
MSC

BSC PSTN
Um
BTS
VLR
OMC Server
 Handover process
CELL 1

BSC

Handover Complete

LUP Req
Reply
LUP
Meas
MeasAcc
LUP Rep
Req
Rep+ Cell
Handover
Cell 1
2
1
2 to CELL 1

CELL 2
 Mobility Management
Signaling Layer 3 Air
Connection Management Interface
Protocol
Mobility Management

Radio Resource Management

Signaling Layer 2

BCCH PCH AGCH RACH SDCCH SACCH FACCH TCH

Signaling Layer 1
 Mobility Management
Mobility Management (MM)
 Location updating

 Security Management

– Preventing unauthorized users

– Maintaining Privacy of users
 MMfunctionality mainly handled by
MS, HLR, MSC/VLR.
 Location Update
 Importance of LA- Reduce Paging Load
 Why Location Update? - MSC Should know
the location of MS for Paging
 LAI identifies a location area which is a group
of cells
 LAI = MCC + MNC + LAC

 Types -IMSI Attach ( Power On in Same LAI)

– Periodic Updating
– Normal Update (Change in LAI due to Mobility)
 Location Update
(1)Location
IMSI MGT (2) update request
IMSI
MSC/VLR
BSC BTS
(ID=2)
(6)Location
(3)Subscriber Update
Information (4)Subscriber acknowledge
Request Information
LAI=2
IMSI MSC/VLR
HLR (ID=1) LAI=1
(ID=2)

(5)Location
Cancellation
MSC/VLR VLR
BSC BTS
(ID=1)
 Security - Authentication
PURPOSE : TO VERIFY SUBSCRIBER
IDENTITY (IMSI & SIM)
 Authentication process is always initiated &
controlled by the NETWORK.
 Provide a new ciphering key to MS

# OPERATIONAL REQUIREMENTS:-
 At each Registration

 At every call attempt (MOC & MTC) -(Left to

operators)
 Required for Location Updating for Roaming

 Before Performing some supplementary services


 Security - Authentication
Ki RAND RAND Ki
(128) (128)

A3 A3

MS NETWORK
SRES
SRES =
(32bits)
 Security - Authentication
MS
Ki RAND
– Authentication center
provides RAND to Mobile
A3 – AuC generates SRES using
Ki of subscriber and RAND
SRES
– Mobile generates SRES
using Ki and RAND
MS BTS AuC
– Mobile transmits SRES to
BTS
– BTS compares received
RAND
SRES with one generated by
SRES
AuC
SRES

Auth Result
 Security - Ciphering
PURPOSE :
# PRIVACY OF SPEECH & DATA
# PRIVACY OF SIGNALLING INFORMATION

 A5 and A8 algorithms used to cipher

data
 Ciphering Key is never transmitted in Air
 Ciphering should be done before confidential
signaling information is passed.
 Example - IMSI , IMEI & TMSI

 Called Number, Calling number are also confidential.


 Security - Ciphering
Ki (128) RAND (128)

A8 Ki RAND
Data
Kc
A5
v
A8
Kc
Ciphered Data
A5
v

Data
Connection Management (CM)

Signaling Layer 3 Air

Connection Management Interface
Protocol
Mobility Management

Radio Resource Management

Signaling Layer 2

BCCH PCH AGCH RACH SDCCH SACCH FACCH TCH

Signaling Layer 1
 Connection Management
(CM)

 Setup of calls between users on

request
 Routing function i.e. Choice of
transmission segments linking users
 Point to Point Short message
services
 MS registration in network

 MS scans complete GSM frequency band for

highest power
 Tunes to highest powered frequency and
looks for FCCH. Synchronizes in frequency
domain
 Get training sequence from SCH which
follows FCCH. Synchronizes in time domain.
 Accesses BCCH for network id, location area
and frequencies of the neighboring cells
 MS registration in network
MS BTS BSC (G)MSC VLR HLR
Action
Channel Request (RACH)
Channel Assignment (AGCH)

Location Update Request (SDCCH)

Authentication Request (SDCCH)

Authentication Response (SDCCH)

Comparison of Authentication params

Accept LUP and allocTMSI (SDCCH)

Ack of LUP and TMSI (SDCCH)

Entry of new area and identity into

VLR and HLR

Channel Release (SDCCH)

 MS
Mobile Originated Call
BTS HLR

BSC VLR

MS AuC
BTS GMSC
Authentication response
(SDCCH) Call release
Call
Connected
Setup
Exchange of
Communication EIR
Assignment
Alerting
Connected
of TCH
(SDCCH) (TCH) Call
Alerting
Connected
Setup
release
MSC Exchange of
Call
Assignment
Alerting
Connected
release
Alloc
Req
Call ofofdedicated
TCH
Authentication
Ciphering
establishment
for dedicated
command
response
response
request
channel
channel
request BSC Communication
Exchange
(SDCCH)
(TCH)(AGCH)of communication
for communication (RACH)
(SDCCH) PSTN
(TCH)
BTS
 MS
Mobile Terminated Call
Paging HLR
BTS
Paging BSC VLR

Query for
VLR info
MS AuC
BTS Query VLR GMSC Reply
for LAC and
Paging TMSI
the area
EIR
Route
to MSC
MSC
BSC
PSTN
BTS

Land to
Mobile call

DIAL 9844012345