Professional Documents
Culture Documents
GSM
3.1
Cellular Concept
Base stations (BS): implement space division multiplex
Each BS covers a certain transmission area (cell) Each BS is allocated a portion of the total number of channels available Cluster: group of nearby BSs that together use all available channels
Mobile stations communicate only via the base station, using FDMA, TDMA, CDMA
Prof. Anirudha Sahoo 3.2
3.3
3.5
Assigns and releases frequencies and time slots for all the MSs in its area Reallocation of frequencies among cells Hand off protocol is executed here
Time and frequency synchronization signals to BTSs Time Delay Measurement and notification of an MS to BTS Power Management Anirudha Sahoo MS Prof. of BTS and 3.6
Mobility of subscribers
Location registration of subscriber
3.7
Usually one per PLMN Request routing information from the HLR and routes the connection to the local MSC
3.8
HLR/VLR
HLR - Home Location Register
Contains semi-permanent subscriber information For all users registered with the network, HLR keeps user profile MSCs exchange information with HLR When MS registers with a new GMSC, the HLR sends the user profile to the new MSC
AuC/EIR/OSS
AuC: Authentication Center
is accessed by HLR to authenticate a user for service Contains authentication and encryption keys for subscribers
GSM identifiers
International mobile subscriber identity (IMSI):
unique 15 digits assigned by service provider = home country code + home GSM network code + mobile subscriber ID + national mobile subscriber ID
LAI
Location Area Identifier of an LA of a PLMN Based on international ISDN numering plan
Country Code (CC): 3 decimal digits Mobile Network Code (MNC): 2 decimal digits Location Area Code (LAC) : maximum 5 decimal digits
3.13
TDMA
Modulation used
Gaussian Minimum Shift Keying (GMSK)
Prof. Anirudha Sahoo 3.14
No. of carriers = 25 MHz / 200 kHz = 125 Max no. of user channels = 125 * 8 = 1000
Considering guard bands = 124 * 8 = 992 channels
Prof. Anirudha Sahoo 3.15
3.16
GSM Channels
3.17
Signalling Channel
Broadcast Channel (BCH) (unidirectional) Common Control Channel (CCH) (unidirectional) Dedicated/Associated Control Channel (DCCH/ACCH) (bidirectional)
Prof. Anirudha Sahoo 3.18
BCCH
Broadcast Control Channel (BCCH)
BTS to MS
send cell identities, organization info about common control channels, cell service available, etc
Synchronizing information
Registration Identifiers
send a frequency correction data burst containing all zeros to effect a constant frequency shift of RF carrier
Mobile station knows which frequency to use
Synchronization Channel
send TDMA frame number and base station identity code to synchronize MSs
MS knows which timeslot to use
DCCH
DCCH (dedicated control channel):
bidirectional point-to-point -- main signaling channels SDCCH (stand-alone dedicated control channel): for service request, subscriber authentication, equipment validation, assignment to a traffic channel SACCH (slow associated control channel): for out-of-band signaling associated with a traffic channel, eg, signal strength measurements FACCH (fast associated control channel): for preemptive signaling on a traffic channel, eg, for handoff messages
Uses timeslots which are otherwise used by the TCH
Prof. Anirudha Sahoo 3.23
Power On
Select the channel with highest RF level among the control channels
Scan the channel for the FCCH Select the channel with next highest Rf level from the control list. NO Is FCCH detected? YES Scan channel for SCH NO
Is SCH detected?
YES
Read data from BCCH and determine is it BCCH? From the channel data update the control channel list NO Is the current BCCH channel included?
YES
FCCH Freq correction channel Camp SCH synchronization channel Anirudha Sahoo on BCCH and Prof.
start decoding
3.24
6 bit number used; hence 63 steps 63 bit period = 233 micro seconds (148 bits occupy 546.5 micro second)
(round trip time)
35 Kms (taking speed of light)
Prof. Anirudha Sahoo 3.25
Bursts
Building unit of physical channel Types of bursts
Normal: for transmitting messages in traffic and control channels Frequency Correction: sent by base station for frequency correction at mobile station Synchronization: sent by base station for synchronization Access: for call setup Dummy: to fill an empty timeslot in the absence of data
Prof. Anirudha Sahoo 3.27
Normal Burst
Normal Burst
2*(3 head bit + 57 data bits + 1 signaling bit) + 26 training sequence bit + 8.25 guard bit
Used for all except RACH, FSCH & SCH
3.28
Traffic Multiframe
Prof. Anirudha Sahoo 3.29
Traffic Channel
Transfer either encoded speech or user data Bidirectional Full Rate TCH
Rate 22.4kbps
Channel Encoding
Codes 260 bits into (8 x 57 bit blocks) 456 bits
Interleaving
2 blocks of different set interleaved on a normal burst (save damages by error bursts)
Prof. Anirudha Sahoo 3.31
Analog speech
Low-pass filter
104 kbps 13 kbps RPE-LTP Channel A/D speech encoder encoder 8000 samples/s, 13 bits/sample
3.32
1 TB
2 Data
5 Data
7 H TB
8 G
3.33
H Training
Prof. Anirudha Sahoo
Speech
20 ms
Speech Coder 260
Interleaving
26
57
8.25
3.34
T T
9T 10 11 12 13 14 15 16 17 T T T T S T T T T
26 I
T = Traffic S = Signal( contains information about the signal strength in neighboring cells)
3.35
Slots 1
26 S
3.36
BTS
Handover
Uses timeslots which are otherwise used by TCH (Pre-emptive
Physical Channel
Time Slot Number; TDMA frame; RF Channel Sequence
Mapping in frequency
124 channels, 200KHz spacing
Mapping in time
TDMA Frame, Multi Frame, Super Frame, Channel
Prof. Anirudha Sahoo 3.38
3.39
GSM
Sub-Systems
Radio Sub System (RSS)
RSS = MS + BSS BSS = BTS+ BSC
GSM: Identification
Identification of Mobile Subscriber
International Mobile Subscriber Identity (IMSI) Temporary IMSI (TMSI) Mobile Subscriber ISDN number (MSISDN)
IMSI
International Mobile Subscriber Identity Stored in SIM, not more than 15 digits
3 digits for Mobile Country Code (MCC) 3 digits for Mobile Network Code (MNC) It uniquely identifies the home GSM PLMN of the mobile subscriber. Not more than 10 digits for National Mobile Station Identity (MSIN) The first 3 digits identify the logical HLR-ID of the mobile subscriber
MSISDN
real telephone number of a MS It is stored centrally in the HLR MS can have several MSISDNs depending on SIM It follows international ISDN numbering plan
Country Code (CC): upto 3 decimal places National Destination Code (NDC): 2-3 decimal places Subscriber Number (SN) : maximal 10 decimal places
MSISDN = CC + NDC + SN
Prof. Anirudha Sahoo 3.46
GSM roaming
VLR registers users roaming in its area
Recognizes mobile station is from another PLMN If roaming is allowed, VLR finds the mobiles HLR in its home PLMN VLR constructs a global title from IMSI to allow signaling from VLR to mobiles HLR via public telephone network VLR generates a mobile subscriber roaming number (MSRN) used to route incoming calls to mobile station MSRN is sent to mobiles HLR
3.47
GSM roaming
VLR contains
MSRN TMSI Location area where mobile station has registered Info for supplementary services (if any) IMSI HLR or global title Local identity for mobile station (if any)
Prof. Anirudha Sahoo 3.48
GSM handoffs
Intra-BSS: if old and new BTSs are attached to same base station
MSC is not involved
Intra-MSC: if old and new BTSs are attached to different base stations but within same MSC
Inter-MSC: if MSCs are changed
Prof. Anirudha Sahoo 3.49
GSM Security
Access Control and Authentication
User should not be able to use the GSM resources without being authenticated
Confidentiality
Messages containing user related information should not be accessible to others
Anonymity
User identifier is not used over the air
Prof. Anirudha Sahoo 3.54
GSM Security
Access Control and authentication
GSM handsets must be presented with a subscriber identity module (SIM) SIM must be validated with personal identification number (PIN) SIM also stores subscriber authentication key, authentication algorithm, cipher key generation algorithm, encryption algorithm
Prof. Anirudha Sahoo 3.55
GSM Security
During registration (when roaming), mobile station receives challenge and uses authentication key and authentication algorithm to generate challenge response to verify users identity
GSM Security
Anonymity of users
Supported by temporary mobile subscriber ID (TMSI) When registered, mobile station sends globally-unique international mobile subscriber ID (IMSI) to network Network assigns TMSI for use during call - IMSI is not sent over radio link Only network and mobile station know true identity New TMSI is assigned when roam into new area
3.57
GSM Summary
Uplink frequencies Downlink frequencies Total GSM bandwidth 890-915 MHz 935-960 MHz 25 MHz up + 25 MHz down
Channel bandwidth
Number of RF carriers Multiple access Users/carrier Number of simul. users Speech coding rate FEC coded speech rate
200 kHz
124 TDMA 8 992 13 kb/s 22.8 kb/s
3.58
4 sec
3.59
3.60