GSM PDF

GSM Technology
for Engineers
Course Information
: GSM
20 :
1391/07/22 :
1391/10/09 :
17:00 : 19:00
: GSM
:
2
Course Objectives
:
.
GSM
.

.
.
GSM .
GSM .
GSM .
Course Content
:
:
: GSM
: GSM
: MS
: GSM
: GSM
:
:
: +
: GSM
4
Copyright 1996 Northern Telecom
Part 1: Introduction to Radio Cellular Systems
Copyright
1996
Northern
Telecom
Section 1: Introduction to Radio Cellular Systems

:

GSM
Mobile Radio Networks
Cellular

) (Terrestrial :
)(Pager
PSTN
MSC
Paging
Control
Centre
)(Cordless
Cordless
)(Cellular Systems
Paging Area
Paging Area
7

)(BTS
{ . WLL}

{ .
}GSM
Cellular radio Network Characteristics

Cellular
F2
F1
F1
F4
F3
F2
F3
F5
F4
F5
BSC2
PSTN
8
MSC
BSC1

:

.

) (Frequency Re-use
.

(Handover) .
Cellular Generation
Data rate
1st Generation or 1G (for
example - AMPS)
2nd Generation or 2G (for
example - GSM)
2.5G (GPRS)
2.75G (EDGE)
3rd Generation or 3G (for
example UMTS)
4th Generation or 4G (for
example LTE)
1978
1992
2000
2002
time
Progress of data rates with time and generation
1st Generation Cellular Characteristics

Widespread Introduction in early 1980s
Analogue modulation
Frequency Division Multiple Access
Voice traffic only
No inter-network roaming possible
The 1st Generation of Cellular

Technology makes use of analogue
modulation techniques such as FM
Insecure air interface
10
1st Generation Cellular Standards

AMPS (Analogue Advanced Mobile Phone System)
North American Standard in cellular band (800MHz)
TACS (Total Access Communications System)

UK originated Standard based on AMPS in 900MHz
band
NMT (Nordic Mobile Telephony System)
Scandinavian Standard in 450MHz and 900MHz bands
Analogue/AMPS
C-450
Nokia 252
German Standard in 450MHz band
JTACS (Japanese Total Access Communications System)
Japanese Standard in 900MHz band
11
1st Generation Cellular Planning

Macro cellular
High sites for coverage driven planning
Antennas above roof height
F1
Frequency planning required

For networks with more cells than
frequencies these must be planned

Large cell size
Order 30km
Hard handover
Mobile only ever connected to a single
cell
Hexagonal Grid Representation
F2
F5
F4
F3
The above diagram shows

how different frequencies are
used in different cells in a
cellular network
12
The First Generation - Problems

Problems with the analogue systems included:
Limited capacity could not cope with increase in subscribers
Bulky equipment
Poor reliability
Lack of security air interface analogue signals could be intercepted
Incompatibility between systems in different countries - no roaming
To improve on the analogue systems, the European Conference of Posts and
Telecommunications Administrations (CEPT) established Group Special

Mobile (GSM) to set a new standard
The system developed became the Global System for Mobile
Communications (also GSM)
13
2nd Generation Characteristics

Widespread Introduction in 1990s
Uses digital modulation
Variety of multiple access strategies
More efficient use of radio spectrum

Voice and low rate circuit switched data
International roaming capability
Secure air interface
Compatibility with ISDN
14
?What is GSM
GSM :
Initially Group Special Mobile
became Global System for Mobile communication
GSM
.
15
GSM Development
First networks in 1992
European developed standard, but with
worldwide subscriber base
Different frequency bands

GSM450, GSM900, GSM1800,
GSM1900
Largest 2nd Generation subscriber base

Frequency/Time Division Multiple Access
Open/Standardised Interfaces
GSM phones
from 1999/2000
16
CDMA One Characteristics

First networks in 1996
Derived from Qualcomm IS-95 air
interface
Largely American subscriber base
with some Asian networks
Code Division Multiple Access
The closest 2nd generation standard
to many of the 3rd generation
standards
ANSI-41 core network
Chip rate of 1.2288Mcps
CDMA One phones

17
2.5G Characteristics
Available now...
Digital modulation
Voice and intermediate rate
circuit/packet switched data
2G technology roaming
Secure air interface
Based upon existing dominant 2G
standards such as GSM and CDMA One
Enhanced data rates
18
Part 2: GSM Architecture Overview
Copyright
1996
Northern
Telecom
GSM
19
: GSM
Part 2: GSM Architecture Overview

:
MS

GSM:
)(NSS
)(BSS
)(NMS
)(Mobile Station: MS
20
BSC1
BSC2
PSTN
MS
MSC
GSM :
Introduction to Telecommunication Network

.
PSTN: Public Switched Telecommunication Network

PLMN: Public Land Mobile Network (example: MCI network)

PSPDN: Packet Switched Public Data Network

CSPDN: Circuit-Switched Public Data Network

ISDN: Integrated Services Digital Network

21
GSM :
Home PLMN
BSS
Visited PLMN
National PSTN
Introduction to Telecommunication Network
BSS
NSS

PSTN PLMN
.
NSS
22
GSM :
GSM Sub Systems
GSM
: NMS NSS BSS
OSS
Control flow
User data flow
PSTN
PSPDN
NSS
BSS
Mobile Station
PLMN
CSPDN
ISDN
PSTN
PSPDN
PLMN
CSPDN
ISDN
Public Switched Telephone Network

Packet Switched Public Data Network
Public Land Mobile Network
Circuit-Switched Public Data Network
Integrated Services Digital Network
BSS: Base Station Subsystem

NSS: Network and Switching Subsystem
NMS: Network Management Subsystem or
OMC: Operation and Maintenance Center
23
GSM :
Sub Systems in the GSM network
NMS BSS NSS GSM

.
BSS
BSC :
BTS,s :
NSS
NMS
MSC :
OMC Server
SMS-C : WS : Work Station
Data Base
TCSM : :
HLR
VLR
AUC
EIR
Performance
Management
Fault
Management
Configuration
Management
Security
Management
24
GSM :
GSM Network Architecture & Interfaces

Abbreviations
MSC Mobile Switching Centre
BSC Base Station Controller
HLR Home Location Register
BTS Base Transceiver Station
VLR Visitor Location Register
TRX Transceiver
AUC Authentication Centre
MS Mobile Station
EIR Equipment Identity Register
26
GSM :
Sub Systems in the GSM network
GSM
NSS: (Network & Switching Subsystem)
: NSS
(Interworking)
(Switching)
(Routing)
(Database Management)
(Billing)
: NSS Node
MSC: Mobile Switching Center

HLR: Home Location Register
VLR: Visitors Location Register
IWF: Inter Working Function
SMS-SC: Short Message Service - Service Center
27
: GSM
Network and Switching Subsystem
28
MSC: Mobile Switching Center

MSC :
BSS

Handover MSC

) GMSC (Gateway MSC
GMSC PLMN
.
: GSM

HLR
:

)(MSC / VLR Address
)(IMSI
)(MSISDN
( )

Roaming
HLR PLMN
.
29
GSM :

HLR DATA
SUBS
IMSI
MSISDN
Services
Nor
Fax
Data
Supp.
VAS
MSC
&
VLR
add.
Ki
432119876543210
09121335455
KAR
1234
432111234567890
09313425678
Bar
ESF
5678
432115678901234
09818976543
FAR
8976
09818976544
FAR
8976
09818976545
FAR
8976
432115554321679
09123468989
SHZ
7687
SUBS: Subscribers
Supp: Supplementary Services
VAS: Value Added Services
30
: GSM

VLR: Visitor Location Register
VLR HLR.
VLR
HLR .
VLR :
31
)(IMSI
)(MSISDN
( )

Roaming
) (LAC .

VLR MSC Collocated .
GSM :

VLR: Visitor Location Register
VLR DATA
Services
SUBS
IMSI
TMSI
MSISDN
MSRN
43211987
6543210
444
09121335
455
43211123
4567890
333
43211567
8901234
V
A
S
HLR
address
LAC
STATE
Nor
Fax
Data
Su
pp
XXXX
RAH
2214
FREE
09133425
678
YYYY
ESF
3256
BUSY
111
09188976
543
ZZZZ
BEH
2218
DIVERT
111
09188976
544
ZZZZ
BEH
2218
FREE
111
09188976
545
ZZZZ
BEH
2218
BUSY
43211555
4321679
555
09123468
989
AAAA
SHB
2220
FREE
32
GSM :

HLR and VLR Data
Most Important Data in the HLR and VLR
Parameter
Subscriber Specific
HLR/AUC
VLR
IMSI
Ki
TMSI
Service restrictions
Supplementary Services
Value Added Services
MSISDN (Basic)
MSISDN (Other)
33
GSM :

HLR and VLR Data
Parameter
Authentication and Ciphering
A3
HLR/AUC
VLR
AH/x
A8
RAND up to five Triplet
SRES up to five Triplet
Kc up to five Triplet
CKSN
34
GSM :

HLR and VLR Data
Parameter
Subscriber Location/ Call Forwarding
HLR/AUC
HLR Number
VLR
VLR Number
MSC Number
LAI
IMSI Detach
MSRN
LMSI
Handover Number
35
: GSM

AUC: Authentication Center
AUC :
+

EIR: Equipment Identity Register
EIR
) (IMEI :
36
: .
: .
: .GSM
: GSM
BSS: Base Station Subsystem

: BSS
MS MSC.
: (Base Transceiver Station) BTS

BTS
GSM

.
BTS PCM
TDMA .
37
B
T
S
B
T
S
B
T
S
B
T
S
B
T
S
GSM :
BTS: Base Transceiver Station

(Abis Interface)
PDH System : E1 / PCM Frame
Specification :
Bit rate : 2048 kb/s +/- 50 ppm
B
S
C
Code format : HDB3

Impedance : 75 unbalance / 120 balance
Level : TTL
BTS
BTS Hardware
BTS Installation
MS = ME + SIM
ME : IEMI , A5
SIM : IMSI , MSISDN , PUK , Ki , A3 , A8

LAC , CI , TMSI , PIN
BTS Commissioning
Transmission System
0
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
TCH
TCH
TCH
TCH
TCH
TCH
TCH
TCH
TCH
TCH
TCH
TCH
TCH
TCH
TCH
TCH
TCH
TCH
TCH
TCH
TCH
TCH
TCH
TCH
TCH
TCH
TCH
TCH
TCH
TCH
TCH
TCH
TCH
TCH
TCH
TCH
TCH
TCH
TCH
TCH
TCH
TCH
TCH
TCH
TCH
TCH
TCH
TCH
TRX SIG 1
TRX SIG 3
TRX SIG 5
TRX SIG 7
TRX SIG 9
TRX SIG 11
O & M SIG
SYNC
TCH
TCH
TCH
TCH
TCH
TCH
TCH
TCH
TCH
TCH
TCH
TCH
TCH
TCH
TCH
TCH
TCH
TCH
TCH
TCH
TCH
TCH
TCH
TCH
TCH
TCH
TCH
TCH
TCH
TCH
TCH
TCH
TCH
TCH
TCH
TCH
TCH
TCH
TCH
TCH
TCH
TCH
TCH
TCH
TCH
TCH
TCH
TCH
TRX SIG 2
TRX SIG 4
TRX SIG 6
TRX SIG 8
TRX SIG 10
TRX SIG 12
B
S
C
TRX1
TRX2
TRX3
TRX4
TRX12
38
GSM :
BTS Block Diagram

2M PCM link
Abis I/F
B
S
C
2
M
I
N
T
F
BTS
.
Internal Bus
TRX
TRX
TRX
Antenna
Coupling
Antenna
Coupling
TRX
Main processor +
Memory + O&M
Antenna
Coupling
39
: GSM
BTS Unit Function

2M INTF
Abis
.
Internal BUS
BTS , 2MINTF , TRXs
O&M ... .
Antenna Coupling
( Air Intf. )
.
40
: GSM
Combining
BTS Unit Function

Combiner TX
. :
Filter Combiner
Hybrid Combiner
Filter Combiner
) (Narrow band filter :
TX.
Synthesized Hopping .
4db .
Hybrid Combiner
) (Wide band filter :
TX.
Synthesized Hopping .
4db .
41
GSM :
BTS Unit Function
Filter Combiner
3 4
60 61 62
Combining
124
124 Carrier
Hybrid Combiner
1
3 4
60 61 62
124 Carrier
124
42
GSM :
BTS Unit Function

TX1
TX2
TX1
TX2
TX3
TX4
TX5
TX6
Combining
Hybrid
Combiner
Filter
Combiner
43
: GSM
BTS Unit Function
Duplexing
Duplexer TX RX
. Antenna Coupling
) (TMA .
Duplexer
From / to
ANT
44
TX Fil
TX
RX Fil
RX
GSM :
BTS Unit Function
Splitting/ Distribution
RX Splitter
Pre RF RX
. Amplifier
RX1
RX2
RX3
RX4
RX5
RX6
RX
Fil
From ANT
Splitter with AMP
From ANT
RX
Fil
RX1
RX2
RX3
RX4
RX5
RX6
Splitter without AMP

45
GSM :
BTS Unit Function
TRX
Uplink ,
. Downlink
Radio Frequency Part Baseband part TRX
.
: TRX
Channel Coding & De Coding

Interleaving & De Interleaving
Ciphering & De Ciphering
Burst Formatting & De Formatting
Modulation & De Modulation
Up Conversion & Down Conversion
PWR Amplification
46
GSM :
BTS Block Diagram
Base Transceiver Station :BTS

TRX
RFU
TRUA
Transmision
unit
BBM
Baseband
Module
Part
Radio
Frequency
Unit
TX
AFU
Antenna
Coupling
RX
TRU: Transmission Unit
RFU: Radio Frequency Unit
BBM: Base Band Module
AFU: Antenna Filter Unit

47
: GSM
BSC: Base Station Controller

BSC BSS
.
BSC :

PCM

)(Handover

48
GSM :
BSC: Base Station Controller

. BSS BSC
Ater BTS Abis BSC
.
BSC
TCSM
BTS
ET
GSW
TRU
ET
Ater Interface
TCSM: Transecoder and Submultiplexer
MS
Abis Interface
49
GSM :
BSC Switching Function

( Circuit & Packet)
. BSC GSW ( CCS7 & LAPD)
TCH (Circuit Switched)
MSC/TCSM
ET
ET
Signalling (CCS7)
Data (Packet Switched)
SGSN
TCH (Circuit Switched)
BTS
Signalling (LAPD)
Data (Packet Switched)
ET
GSW
Controller
A P
S C
7 U
Signalling unit
50
: GSM
BSC Capacity
BSC
BSC :
2Mbit
BSC
LAPD .
CCS7 .
BTS TRX BSC .
51
: GSM
TC: Transecoder
T.C Transcending ( Rate Adaption
) 64kb/s 16kb/s .
MS DATA FAX
.
T.C Full rate / Half rate
AMR DTX .
52
GSM :
Operating environment of Transecoder

BSC
Ater
Interface
A
Interface
TCH at 16 kb/s
FR
0
E1/T1
or
IP/Ethernet
or
Internal PCM
TCSM 1
Unit 2
TCH at 64 kb/s
...
MSC
TCSM 1
Unit 2
E1/T1
or
STM-1/OC-3
or
IP/Ethernet
TCH at 64 kb/s
3
E1/T1
or
IP/Ethernet
or
Internal PCM
Transecoder
EQUIPMENT
TCSM Unit: Transecoder and Submultiplexer Unit
E1/T1
or
STM-1/OC-3
Or
IP/Ethernet
53
Part 3: GSM Interfaces
Copyright
1996
Northern
Telecom
GSM
54
: GSM
GSM Network Interfaces

GSM Ater Abis Um A Node
:
HLR
AuC
VLR
EIR
E
MSC
NSS
55
Um
MSC
F
MS
TRX
BSC
Abis
MS
BTS
BSS
MS
:1 Ater Interface BSC

.
Um (Air) Interface :2 6
.
GSM :

Mobile Application Part (MAP)
MAP NSS
. CCS7
MAP-B : MSC-VLR
MAP-C : MSC-HLR
MAP-D : HLR-VLR
MAP-E : MSC-MSC
MAP-F : MSC-EIR
MAP-G : VLR-VLR
MAP-H : AuC-HLR
MAP-I : User application protocol and HLR
56
GSM :

Abis Interface
BTS BSC Abis
:
TCH at 16 kb/s for Full rate channel or 8 kb/s for Half rate
channel
TRX Signaling at 16/32/64 kb/s for all Telecom signaling
O&M Signaling at 16/32/64 kb/s for Operation and Maintenance
purpose
57
Sample of
Abis Interface
0
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
GSM :
TCH0
TCH1
TCH2
TCH3
TCH4
TCH5
TCH6
TCH7
TCH0
TCH1
TCH2
TCH3
TCH4
TCH5
TCH6
TCH7
TCH0
TCH1
TCH2
TCH3
TCH4
TCH5
TCH6
TCH7
TCH0
TCH1
TCH2
TCH3
TCH4
TCH5
TCH6
TCH7
TCH0
TCH1
TCH2
TCH3
TCH4
TCH5
TCH6
TCH7
TCH0
TCH1
TCH2
TCH3
TCH4
TCH5
TCH6
TCH7
TCH0
TCH1
TCH2
TCH3
TCH4
TCH5
TCH6
TCH7
TCH0
TCH1
TCH2
TCH3
TCH4
TCH5
TCH6
TCH7
TCH0
TCH1
TCH2
TCH3
TCH4
TCH5
TCH6
TCH7
TCH0
TCH1
TCH2
TCH3
DYNAMIC ABIS POOL

TRX1
OMU1
TRX2
OMU2
TRX3
OMU3
TRX4
OMU4
TRX5
OMU5
TRX6
OMU6
TRX7
OMU7
TRX8
OMU8
TRX9
OMU9
TRX10
OMU10
TRX11
OMU11
TRX12
OMU12
XX
XX
XX
XX
TRX-1
TRX-2
TRX-3
TRX-10
(E)DAP
TRXSIG 1 - 10
OMUSIG
58
GSM :

TS Mapping between Abis and Air (Um) Interface
59
GSM :

Abis Interface
30 PCM E1 Abis
: E1 . 24 PCM T1
Bit rate: 2048 kb/s (2 Mb/s)
TS0 is used for Synchronization or Service word
Channel rate: 64 kb/s
TS16 is used for Signaling
Code format: HDB3

Impedance: 75 unbalance or
120 balance
Number of Time slot/frame: 32
Number of Bit/Time slot: 8

Number of Frame/Sec.: 8000
Periodic time for each frame: 125 sec.
60
GSM :

Ater Interface
BSC Ater
:
TCH at 16 kb/s for Full rate channel or 8 kb/s for Half rate
channel
LAPD Signaling at 16 kb/s for managing of Transecoder
CCS7 Signaling at 64 kb/s for Control communication between
MSC and BSC
61
Bits
Sample of Ater Interface

(Full rate Configuration)
TS
0
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
LAPD
4
8
12
16
20
24
28
4
8
12
16
20
24
28
4
8
12
16
20
24
28
4
8
12
16
20
24
GSM :
3
4
5
6
Synchronization
1
2
5
6
9
10
13
14
17
18
21
22
25
26
29
30
1
2
5
6
9
10
13
14
17
18
21
22
25
26
29
30
1
2
5
6
9
10
13
14
17
18
21
22
25
26
29
30
1
2
5
6
9
10
13
14
17
18
21
22
25
26
8
3
7
11
15
19
23
27
31
3
7
11
15
19
23
27
31
3
7
11
15
19
23
27
31
3
7
11
15
19
23
27
62
GSM :

A Interface
MSC A
:
TCH at 64 kb/s for traffic (Circuit Switch)

CCS7 Signaling at 64 kb/s for Control communication between
MSC and BSC
X.25 at 64 kb/s for controlling BSC by OMC via MSC (Optional)
(Optional: if there is no any direct connection between BSC and OMC)
63
GSM :
TS

Sample of A Interface
0
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
1 2 3 4 5 6 7 8
Synch
TCH
TCH
TCH
TCH
TCH
TCH
TCH
TCH
TCH
TCH
TCH
TCH
TCH
TCH
TCH
SS7
TCH
TCH
TCH
TCH
TCH
TCH
TCH
TCH
TCH
TCH
TCH
TCH
TCH
TCH
TCH
64
GSM :

BSS Network Topologies
Chain: cheap, easy to implement
One link failure isolates several BTSs
BSC
Ring: Redundancy gives some protection if a link
fails
More difficult to roll-out and extend

ring must be closed
Star: most popular configuration for first GSM

systems
Expensive as each BTS has its own link
One link failure always results in loss of BTS
BSC
BSC
65
Part 4: Mobile Station Structure and Operation mode

+ GSM Identification
Copyright
1996
Northern
Telecom
+ MS
GSM
66
+ MS :
Mobile Station Structure

( Handset) ( MS)
:( SIM Card)
Mobile Station (MS)= Mobile phone + SIM Card
Mobile Phone: handset
SIM card: Subscriber Identity Module
(contains identification information)
67
: + MS

)Subscriber Identity Module (SIM
: SIM

.
IMSI MSISDN
LAI TMSI .

.
68
+ MS :

Subscriber Identity Module (SIM)
Most Important Data in the SIM Card
Parameter
Subscriber data
Remark
IMSI
International Mobile Subscriber Identity
MSISDN
Mobile Station ISDN Number
Access Control Class
For control of Network access
Security related data
Remark
Algorithm A3, A8
Required for Authentication and Ciphering
Key Ki
Individual value (Stored on SIM and HLR)
Key Kc
Result of A8, Ki and Rand
CKSN
Ciphering key sequence number

69
+ MS :

Subscriber Identity Module (SIM)
Most Important Data in the SIM Card (Cont.)
Parameter
Administrative data
Remark
PIN/PIN2
Personal Identification Number
PUK/PUK2
PIN Unblocking Key
Last Dialed Number
Redial
Charging Meter
Charges and Time Increment can be set
Roaming data
Remark
TMSI
Temporary Mobile Subscriber Identity
LAI
Location Area Identifier
Value of timer T3212
For Periodic Location Updating

70
: + MS + MS
Mobile Station and Identifications

IMEI: International Mobile Equipment Identity
: IMEI GSM.

. 15 IMEI .
)1 (Decimal digits
SNR
FAC
TAC
TAC: Type Approval Code, determined by a central GSM/PCS body

FAC: Final Assembly Code, identifies the manufacturer
SNR: Serial Number, uniquely identifies all equipment within each TAC and FAC
x: Spare Bit
*#06# IMEI .
71
: + MS

IMSI: International Mobile Subscriber Identity
: IMSI GSM.
GSM 15
. E212 .
)(Decimal digits
<=10
MSIN
MNC
MCC
MCC: Mobile Country Code (3 digits) for Iran : 432

MNC: Mobile Network Code (2 or 3 digits) for MCI : 11 & for
MTN : 35
MSIN: Mobile Subscriber Identification Number
72
: + MS

MSISDN: Mobile Station ISDN Number
: MSISDN PLMN
.
15 . MSISDN
. E164 .
)(Decimal digits
<= 10
23
SN
NDC
13
CC
)CC: Country Code (example: 98 for Iran

NDC: National Destination Code (example: 0912 ~ 0919 for MCI
)& 0935 ~ 0939 for MTN
SN: Subscriber Number
73
+ MS :

MSRN: Mobile Station Roaming Number
: MSRN
HLR . MSC/VLR
: MSRN . GMSC
13
23
<= 10
CC
NDC
SN
(Decimal digits)
CC: Country Code (example: 98 for Iran)

& 0935 ~ 0939 for MTN)
SN: Assigned by current VLR and is unique in the network
74
: + MS

LAI: Location Area Identity
: LAI ) (Location Area GSM
LAC
.
.
)(Decimal digits
<= 5
23
13
LAC
NDC
CC
)CC: Country Code (example: 98 for Iran

)& 0935 ~ 0939 for MTN
)LAC: Location area Code (Operator Dependent Part
75
+ MS :

CGI: Cell Global Identity
GSM : CGI

LAC .
.( CI: Cell Identity)
13
CC
23
<= 5
<=5
NDC
LAC
CI
(Decimal digits)
CC: Country Code - (International Code)

NDC: National Destination Code - (Operator Dependent Part)
LAC: Location area Code - (Operator Dependent Part)
CI: Cell Identity - (Operator Dependent Part)
76
: + MS

BSIC: Base Transceiver Station Identity Code
: BSIC BTS GSM
BTS .
NCC BSS .
BCC BTS BCCH
. 3 .
NCC MS
.
BSIC = NCC + BCC
BCC: Base Station Identity code, Range = 0 - 7
77
NCC: Network Color code , Range = 0 - 7
+ MS :

Overview of addresses and pertinent databases
MSRN
IMSI
TMSI
MSISDN
LAI
MSC
EIR
(SPC)
IMSI
VIR
(SPC)
Cell
(CI, LAI)
Subscriber
(IMSI, MSISDN,
TMSI,MSRN)
HIR
IMSI
MSISDN
MSRN
BTS
(BSIC)
AC
IMSI
RAND
SRES
Ki
kc
(SPC)
78
: + MS
Mobile Station Bock Diagram

MS UL DL .
79
+ MS :
GSM Voice & Channel Coding Sequence

. MS
Speech Coding
8000 Hz
sampling
13-bit
resolution
Quantization
8000x13bits
= 104 kbps
2080-bit (20ms)
blocks
(Note 1)
RPE-LTP
Speech Coder
22.8 kbps
456-bit blocks
Channel
Coding
Interleaving
GMSK
Modulation
Channel Coding
260-bit blocks
13 kbps
Note 1: 160 samples of 13 bits per 20ms
156.25-bit bursts
Encryption
Radio Burst
Multiplexing
Radio Interface
80
+ MS :
Mobile Station Processing Flow

. UL MS
Channel coding
SPEECH
SEGMENTATION
SPEECH
CODING
20 ms
CIPHERING
BLOCK
CODING
13 Kbits/sec
= 260 bits
BURST
FORMATTING
TRX
MODULATION
CONVOLTUTIONAL
CODING
INTERLEAVING
22.8 Kbits
= 456 bits
900/1800 MHz
33.8 Kbits
81
: + MS
87 MS UL
:
Speech Segmentation
20 .
8 13
. :
8 Kb/s 13 bit = 104 Kb/s
Speech Coding
BSS .
Speech coder 20ms 260 .
Full rate 13Kb/s
Half rate 5.6Kb/s.
:
Waveform Coder - Voice Coder - Hybrid Coder
82
: + MS

Channel Coding
.
source coding Noise .
BTS MS
Channel Coding
.
88 GSM :
Block Channel Coding
Convolution Channel Coding
20
22.8 kb/s .
83
456
+ MS :

Class 1B 132
Class 1A 50
Block coder
Class 2 78
4 '0' tail bits
Convolutional coder
1A
1
25
1B CRC 1B
66
66
1A tail
4
25 4
Class 1 bits coded with convolutional coder

2
378
Channel Coder
378 bits
2
456 bits for 20 ms speech

Class 2 bits
78
84
: + MS

Interleaving

. 8 57
)(Burst Noise
.
b8
b16
b7
b15
b6
b14
b5
b13
b4
b12
b3
b11
b2
b10
b1
b9
b24
b23
b22
b21
b20
b19
b18
b17
b448
b447
b446
b445
b444
b443
b442
b441
b456
b455
b454
b453
b452
b451
b450
b449
SB#8
SB#7
SB#6
SB#5
SB#4
SB#3
SB#2
8 sub-blocks (SB#1 .. SB#8) of 57 bits

85
SB#1
+ MS :

Interleaving Effect of Burst Noise

Non Interleaved Channels:

1
Noise burst
1
Channel 1
Channel 2
Channel 3
Interleaved Channels:
1
Noise burst
86
: + MS

Interleaving Second Level
) (Interleaving 12/5

.
Channel Coder
Channel Coder
456 bits
456 bits
)1 2 3 4 5 6 7 8 (8 x 57 bit blocks
1 2 3 4 5 6 7 8
1 11 2 22 3 33 4 44 5 55 6 66 7 77 8 8
87
)Second level interleaving introduces a delay (i.e.40 ms
: + MS

Ciphering
Burst Generation
TDMA
. Burst .
:
:
)(Normal Burst
)(Frequency Correction Burst
)(Synchronization Burst
)(Access Burst
)(Dummy Burst
88
+ MS :

Radio Burst Multiplexing
Burst Generation
456 bits
456 bits
1 2 3 4 5 6 7 8
1 2 3 4 5 6 7 8
(8 x 57 bit blocks)
1 11 2 22 3 33 4 44 5 55 6 66 7 77 8 8
57 data bits
1 26 training bits 1
57 data bits
8.25
1 burst = 156.25 bit periods (0.577mS)
89
+ MS :

Type of Burst
.
. 156.25
Stealing flag bits
Normal Burst
(Traffic and most control channels)
Frequency Correction Burst (FCCH)

Data and tail bits are all 0
Synchronisation Burst (SCH)

Data to synchronise MS with BTS
Dummy Burst
Transmitted on BCCH carrier when there are no
other bursts - allows power level measurements
Access Burst (RACH)

Long guard period to avoid collisions
57 Data Bits
1 57 Data Bits
142 fixed bits

64 Training Bits
Sync Sequence
39 Data
Bits
39 Data
Bits
26 Training Bits
26 Training
Bits
41 Training
Bits
36 Data Bits
Tail bits
8.25
8.25
8.25
8.25
68.25
Guard period
90
: + MS

Modulation

.
GSM (Gaussian Minimum Shift Keying) GMSK 8PSK
.
3.69 s MS 270.833 Kb/s.
Amplification

MS .
MS 4 2W +33dBm
.
91
: + MS

)Modulation Frequency Shift Keying (FSK
FSK } {0,1
.
F2
F1
F2
F1
Modulator
Carrier F1 + F2
92
: + MS

)Modulation Minimum Shift Keying (MSK
MSK
.
93
+ MS :

Modulation Gaussian Minimum Shift Keying (MSK)
GMSK
.
Frequency Response
of MSK Filter
Gaussian Filter Response
0.1
0.2
0.3
0.4
Spatial Frequency
Frequency Response
of GMSK Filter
0.5
0.1
0.2
0.3
0.4
0.5
Spatial Frequency
94
+ MS :
Mobile Station Processing Flow - Summary

Speech
20ms Block
20ms Block
20ms Block
Speech Coder
Speech Coder
260 bits
13kbps
456 bits
RPE-LTP encoding
260 bits
Channel Coder
22.8kbps
(2080 bits per block)
Channel Coder Block and convolution encoding
12345678
456 bits
12345678
8 x 57-bit blocks
Interleaving
111 2 22 3 33 4 44 5 55 6 66 7 77 8 8
3 57 data bits
26 training
bits
1 57 data bits
8.25
1 burst = 156.25
bit periods (0.577mS)
95
: + MS
Mobile Station Operation Mode

MS :
1. Idle Mode Operation

2. Dedicated (Active) Mode Operation
Idle

) (Power on MS
) (Camping on cell
) (HLR, VLR MS
Idle Mode .
96
: + MS

MS Idle
Idle Mode Operation
MS Idle :
.1
) (PLMN Selection
.2 )(Cell Selection
.3 )(Cell Reselection
.4 )(Normal Location Update
.5 )(Periodic Location Update
.6 )(IMSI Attach
.7 )(IMSI Detach
97
: + MS

Active (Dedicated) Mode Operation
)(Dedicated Mode
Idle
( )
Up link
Down link .
MS MS BTS MS BSC MSC .
MS Dedicated Mode .
MS
MS .
MS :
98
: + MS

Active (Dedicated) Mode Operation
MS
MS Dedicate :
.1
.2
.3 BSC
.4 handover Handover
.5 Power Control
.6 Timing Advance
99
+ MS :

Handover & Handover Type
Handover

.( Handover)
: GSM HO
Internal
Channels (time slots) in the same cell
Cells within the same BSS (same BSC)
External
BSC
BSC
Cells in different BSSs (different BSCs)

but under the control of the same MSC
VLR
Cells under the control of different MSCs
MSC
BSC
VLR
MSC
100
: + MS

Handover
Handover Causes
Handover
BSC . HO :
Received signal quality
Received signal strength
Distance of MS from BTS
Drops below power budget margin
Handover
HO .
101
Part 5: Security in GSM Network
Copyright
1996
Northern
Telecom
GSM
102
: GSM
Security in GSM Network

GSM :
.1 )(Authentication

.
.2 )(Ciphering

MS BTS .
103
(TMSI) Temporary Mobile Subscriber Identity .3

IMSI
TMSI . MSC/VLR
.
: GSM

Authentication

Ki RAND A3 .
SRES .
HLR/AUC
MSC/VLR
SRES
RAND & SRES
A3
Ki
RAND
104
A3
Ki
SRES
MS
MSC/VLR

MS
.
: GSM

Ciphering
Ki RAND
A8 A5 .

Kc
Kc

A5
A5
BTS
MS BTS

.
105
HLR/AUC
MSC/VLR
RAND & KC
A8
Ki
RAND
BSC
A5
Kc
A8
Ki
GSM :

Authentication Process
106
GSM :

Encryption Process
107
Part 6: Cellular Structure in GSM Network
Copyright
1996
Northern
Telecom
GSM
108
: GSM
Cellular Structure in GSM Network
GSM

:
.
BTS
.
109
: GSM

: :

.

110
110
: :
-1 .
-2 ( )Overlap .
-3 .
-4 BTS .
: GSM
GSM :

GSM C/I .
Carrier to Interference : C/I

.
: C
: I ( )
C/I>= 18dB
C/I >= 12 dB
C/I >= 9 dB
111111
: GSM
F1
I2

Co Channel Interference
.
F1
F1
I3
F1
I4
I5
F1
112
I1
I6
F1
F1
: GSM

F1
F1 F1
F1 F1
I1
F1 F1
F1
I2
F1 F1
F1
113

Sectorized
.
F1 F1
F1 F1
GSM :

dB
Interferer, f1
Carrier, f1
C
>0 dB
I
C
I
Distance
114
: GSM

Adjacent Channel Interference
TRX
200
Adjacent Channel Interference .
Adjacent, f2
f2 = f1 200 kHz
Carrier, f1
dB
C
<0 dB
A
A
115
Distance
GSM :

Service Area
PLMN Service Area
Cell
MSC/VLR Service Area
Location Area
GSM Service Area

Location Area
Boundary cells

.
:
Cell
Location Area
MSC Service Area
PLMN Service Area
GSM Service Area
.
116
: GSM

:Cell
.
GSM900 35 GSM1800 8 .
LAC Cell ID .
:Location Area
Location Area .
LA LA
Paging Location update.
:Location Area
.1 MS LA
.
.2 ) (Paging BTS LA
.
117
: GSM
( Location Area)
LA MSC/VLR.
LA BSC BSC .
BSC LA.
LA MSC .
118
: GSM
MSC/VLR Service Area:

MSC/VLR Area ) (LA
) (MSC
119
: GSM
( Cluster ):

Cluster
.
K
.
7
2
3
1
6
5
7
4
2
The Cell Structure for K = 7
3
7
7
2
3
120
1
4
2
6
5
1
4
1
4
6
5
6
5
GSM :

Cell Structure for K=3 , K=7
3
2
K=7
4
1
7
K=3
121
GSM :

Cell Structure for K=4
1
2
3
1
4
1
4
3
2
1
4
2
3
2
3
2
3
122
GSM :

Cell Structure for K=12
9
8
9
10
2
7
6
8
7
1
4
5
5
10
2
7
12
12
11
3
1
6
11
3
12
2
7
10
10
11
1
9
1
6
11
3
12
4
5
123
: GSM
( Frequency Reuse ):
GSM Frequency Reuse .
.
The K factor and Frequency Re-Use Distance
( Frequency Reuse Distance ):

7

6
2
K .
1
5
3
j
3K * R
D
=
7
R
2
4
D = 4.58R
6
i
1
D
5
3
4
124
K = i2 + ij + j2
K = 22 + 2*1 + 12
K=4+2+1
K=7
GSM :

Tri-Sector Antenna for a Cell
125
: GSM

Cell Distribution in a Network

:

.
Highway
126
Town
Rural
Suburb
Part 7: Radio Wave and Antenna
Copyright
1996
Northern
Telecom

127
Radio Wave and Antenna

Radio Wave Propagation
128

Radio Wave Propagation
129

Radio Spectrum
130
A
N
T
E
N
N
A
131

:
Antenna Information
:
.
. ):(Sectorized Antenna

.
)(Array Antenna
( )
.
132

Antenna Information
:

.
:
)(Antenna Beam Width
3dB beamwidth
- 3dB
Peak value
)60 (eg
- 3dB
133

Directional Pattern
The directional pattern of single symmetry dipole like ring.

Top view
Side-glance
In order to get the signal what we needed, we have to flat

the ring.
134
Directional Pattern subsidiary petals

Upper subsidiary
Lower subsidiary
135
:
Antenna Tilt
1 :

.
.

2 :
.
136
Mechanical Down
tilt
Electrical Down tilt

Mechanical Up tilt

Antenna Tilt
In order to orient the beam towards ground, antenna needs down tilt.
No down tilt
Electric down tilt
Mechanic down
tilt
137

Antenna Polarization
:

( )HORIZENTAL ) (VERTICAL .
GSM

.
138

Antenna Polarization
The polarization direction of antenna is defined as the direction of electric

field in electromagnetic wave.
Vertical
Horizontal
+ 45 deg
- 45 deg
139
Dual Antenna Polarization
The two antennas integrated into one. And transmit two beams individually.
V/H (Vertical /
Horizontal)
Tilt (+/- 45)

140
Part 8: Air Interface Specifications and Problems
Copyright
1996
Northern
Telecom

141
Air Interface Specifications

Um Interface Introduction
) (Air/Um Interface
GSM
.
Um Interface
142
P-GSM Spectrum (Primary GSM)

890
915
935
Uplink
960
MHz
Downlink
Duplex spacing = 45 MHz

Range of ARFCN:
1 124
Number of Carrier:
125
Fu(n)
1 2 3 4 5
n
Guard Band
100 kHz wide
Guard Band
100 kHz wide
Channel Numbers (n) (ARFCN)
200 kHz spacing
143
E-GSM Spectrum (Extended GSM)

880
915
925
Uplink
960
MHz
Downlink
Range of ARFCN:
1 124
975 1023
Number of Carrier:
174
Fu(n)
1 2 3 4 5
n
Guard Band
100 kHz wide
Guard Band
100 kHz wide
200 kHz spacing
144

DCS-1800 Spectrum
1710
1785
1805
Uplink
1880
MHz
Downlink
Range of ARFCN:
512 885
Number of Carrier:
374
Fu(n)
1 2 3 4 5
n
Guard Band
100 kHz wide
Guard Band
100 kHz wide
200 kHz spacing
145

PCS-1900 Spectrum
1850
1910
1930
Uplink
1990
MHz
Downlink
Range of ARFCN:
512 810
Number of Carrier:
299
Fu(n)
1 2 3 4 5
n
Guard Band
100 kHz wide
Guard Band
100 kHz wide
200 kHz spacing
146

GSM-450 Spectrum
450.4
457.6
460.4
Uplink
467.6
MHz
Downlink
Fu(n)
1 2 3 4 5
n
Guard Band
100 kHz wide
Guard Band
100 kHz wide
200 kHz spacing
147
GSM 900 & GSM 1800 Compare

GSM 900
Access Method :
TDMA/FDMA
900
GSM 1800
TDMA/FDMA
1800
Freq. Band :
No. of Channel :
124 radio carriers
374 radio carriers
Max no. of user channels :
124 * 8 = 992 channels
374 * 8 = 2992 channels
Channel BW :
200 KHz
200 KHz
Uplink Freq. BW (MSBTS) :
890 to 915 MHz
1710 to 1785 MHz
Downlink Freq. BW (BTSMS) : 935 to 960 MHz
1805 to 1880 MHz
Standard Duplex Distance :
45 MHz
95 MHz
No, of channel/carrier :
8 channels/carrier
8 channels/carrier
Modulation : Digital GMSK (Gaussian Minimum Shift Keying that is a type of phase
modulation)
Speech coding bit rate :
FR: 13 kbps , HR: 5.6 kbps
148
Multiple Access Mechanism

:
:
FDMA
TDMA
CDMA
GSM TDMA FDMA .
149
Access Mechanism Frequency Multiplex
:

.
Frequency
Channel
Time
150
FDMA: Frequency Division Multiple Access
Access Mechanism Time Multiplex
:
) (Time slot
.
Frequency
Time Slot
Channel
Time
151
TDMA: Time Division Multiple Access
Access Mechanism Code Multiplex
:

. WCDMA .

MS BTS MS .
152
CDMA: Coded Division Multiple Access
Access Mechanism Various Access Method
153

GSM Frames
BTS

TDMA
.
TDMA
4.615 ms.
BSC
MSC
TCSM
:TDMA
GSM
8
.
Air I/F
)TDMA frame = 8 time slots (4.615ms
MS
154
TS6 TS7 TS0 TS1 TS2 TS3 TS4 TS5 TS6 TS7 TS0 TS1
BTS
GSM TDMA frame and Multi frame
: TDMA Frame
TDMA 8 8
. 4.615ms TDMA
Time
TDMA Frame
0 1
TDMA Frame
2 3 4 5 6 7 0 1
TDMA Frame
2 3 4 5 6 7 0 1
Logical Channel
2 3 4 5 6 7
155

GSM TDMA frame
f1
f1
f1
f1
MS2
MS4
MS3
MS1
156
: Multi Frame
:
a) 26 TDMA frame Multi frame

FACCH , SACCH , TCH .
26 26
120ms .
I
2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25
120 ms
157
b) 51 TDMA frame Multi frame

. SDCCH ,CCCH , BCCH
( 51 51
. 235ms )
None Combined BCCH
F
BCCH
CCCH
CCCH
CCCH
CCCH
CCCH
CCCH
CCCH
CCCH
CCCH
235 ms
Combined BCCH
F
BCCH
CCCH
CCCH
CCCH
SDCCH SDCCH
0
1
235 ms
SDCCH SDCCH
2
3
SACCH SACCH
0
1
158
: Super Frame
2651 5126
.
6/12 .
: Hyper Frame
GSM 2048 .
. TDMA
2715648 3h-28min-53sec-
760msec .
159
Frame Structure in GSM/DCS
1 hyperframe = 2048 superframes = 2'715'648 TDMA frames (3h 28m 53s 760ms)
0
2044
2045 2046
2047
1 super frame = 1326 TDMA frames (6.12s) = 51 (26) multi frames or 26 (51) multi frames
0
46
47
48
49
50
25
1 (51 frame) multi frame = 51 TDMA frames 1 (26 frame) multi frame = 26 TDMA frames
0
2 3
47 48 49 50
2 3
22 23 24 25
TDMA frame = 8 time slots (4.615ms)

0
7
160

GSM Channels
):(Physical Channel
TDMA .
.
):(Logical Channel
BTS MS
.
): (Burst
) (TS TDMA
577s Burst 156.25
.
Number of bit per TDMA frame : 8 156.25 = 1250

161

Logical Channels
:
GSM
.
Traffic
Control
TCH
BCH
DCCH
CCCH
FR: 13 kb/s
TCH/F
FCCH
PCH
SDCCH
HR: 5.6 kb/s
TCH/H
SCH
RACH
SACCH
EFR: 13 kb/s
TCH/E
BCCH
AGCH
FACCH
AMR/F
CBCH
AMR/H
NCH
162

Logical Channels
):(Traffic Channel

Full rate Half rate .
AMR/F EFR AHR/H
.
):(Control Channel
MS
. MS
.
:
BCH: Broadcast Channel
CCCH: Common Control Channel
DCCH: Dedicated Control Channel
163

Logical Channels
):(BCH
( )Idle .
Point to Multi point Downlink .
):(CCCH
MS BTS
. RACH Uplink Downlink
.
): (DCCH
MS BTS
SACCH , SDCCH FACCH .
164

BCH Broadcast Channel
: FCCH
MS ( FCCH )
MS . FCCH BCCH
.
: SCH

TDMA BTS BSIC + NCC + BCC .
: BCCH
) (System Information
:
Cell Identifier , cell parameter , channel configuration , cell
frequencies , Broadcast frequency of neighbor cells
165
:RACH
CCCH Common Control Channel
MS Downlink SDCCH
:
MOC: Mobile Originating Call
Answer to Paging
IMSI Attach/ Detach
Emergency Call
SMS
RACH BCCH . RACH

166

: AGCH
RACH MS
SDCCH .
: PCH

) (SMS
IMSI / TMSI .
MSC BSC . BSC
Paging BTS
.
167
Location area

:( Cell Broadcast Channel ) CBCH
.... .
1395 Downlink
.
CCCH SDCCH .
: NCH
GSM 2 VBS VGCS .
VBS: Voice Broadcast Service
168
VBGS: Voice Broadcast Group Service
DCCH Dedicated Control Channel
: SDCCH
Location update , Call setup SMS
( ) .
: SACCH
( 480 ms ) SACCH
DL UL .
: DL
) (System Info ) (PC )(TA
: UL
) (Measurements
.
169
DCCH Dedicated Control Channel
: FACCH
( ) Stealing
. 20 .
Handover .
MS
FACCH .
:
GSM 2 FACCH Paging
.
170

GSM Bursts
. GSM
:(Normal Burst)
SACCH SDCCH BCCH

. FACCH
.
Stealing Flags
TB
3
Training Seq.
Encrypted
bits
57
26
1
1
Encrypted TB GP
bits
57
3
8.25
156.25 bits per slot duration 577 s
TB: Tail bit

Is used for start &
stop flag bit
GP: Guard Period
Is used for guard
between to burst
171

GSM Bursts
):(Frequency Correction Burst

. 0

MS BCCH
.
.
GP
TB
8.25
Fixed bits
142

172
TB
3

GSM Bursts

:(Synchronization Burst)

.( Long Training sequence)
( Frame Number) TDMA

. ( BSIC) BTS
TB Information Synchronization seq. Information TB GP
3
bits
39
64
bits
39
8.25

173

GSM Bursts
):(Access Burst
MS Uplink
Guard Period
) (Timing Advanced .
Handover Access Handover MS
BSC .
TB Guard Period
68.25
Encrypted
bits
36
Synchronizatio
n seq.
41

174
TB
8

GSM Bursts
):(Dummy Burst
.
BCCH TRX Free

.
.
.
TB GP
8.25
175
Mixed Bits
58
Training Seq
Mixed Bits
26
58
TB
3
:
BTS transmits:
0 1
GSM Delay Uplink TDMA Frame

The start of the uplink
TDMA is delayed of
three time slots
MS transmits:
TDMA frame (4.615 ms)
Downlink TDMA
F1MHz
2 3 4 5 6 7
5 6 7 0 1
2 3 4
R1 R2 R3 R4 R5 R6 R7 R8
T1 T2 T3 T4 T5 T6 T7 T8
Fixed transmit
Delay of three time-slots
Uplink TDMA
Frame
F1 + 45MHz
:(Timing Advanced)
3 MS

. BTS

MS
. Timing Advance
176
Air Interface Problem & Solution

Fading
:

:
-
-
-
-
177
Shadowing
)Slow Fading (Log Normal Fading
)Fast fading (Rayleigh fading
)Inter Symbol Interference (ISI

Shadow Effect
MS BTS MS
BTS Uplink .
.
178

Log Normal Fading
MS BTS Dip
. Dip
) (Rx Sensitivity
.
Fast fading
)(multipath fading
Log-normal fading
)(shadowing
Amplitude
Log-normal
fading
179
Distance
Fast fading
Rx Sensitivity
Dip

Multipath Fading Selective fading

( 1 5) .
) (ISI
) (Time Dispersion .
ISI .
26 ) (Training Sequence
4 .
4/4
.
1
Time
dispersion
Time
180
Tx
Rx
far
reflection
Building
B
T
S

Multipath Fading Flat fading

.
Dip ( . GSM900 17
GSM1800 5/8 )
Dip )(Rx sensitivity
(Call Drop) .
Signal Strength
approx 1 7 cm
RX sensitive
181
Distance
Fading dips

Fading Solutions
:
:
1. Frequency
hopping
2. Channel codingSpeech Coding
3. Interleaving
4.Antenna
Diversity
182

Frequency Hopping
:

.
:
1. Baseband Hopping
2. Synthesized Hopping

.
f2
]E [V/m
f2
183
f1
]D [m
f1

Frequency Hopping
():
.
Cyclic Random .
Frequency
RANDOM
CYCLIC
F3
F2
F1
cycle
Time
184
Part 9: GSM Protocols + Signaling & Call Routing
Copyright
1996
Northern
Telecom
185
: +
GSM Protocols
:GSM
GSM .
:

OSI
GSM
GSM
GSM
GSM
:
.

.
186
+ :
GSM Protocols
ISO 7-Layer OSI Reference Model
APPLICATION
File transfer, access management
PRESENTATION
Syntax and data representation management
SESSION
Application entity dialogue and synchronisation
TRANSPORT
End-to-end message transfer
NETWORK
Network routing, addressing, call management
DATA LINK
Data link control (framing, error control)
PHYSICAL
Mechanical and electrical interfacing

187
+ :
GSM Protocols
GSM Protocol Layers
: GSM
Layer 1: Physical layer
Enables physical transmission (TDMA, FDMA, etc.)

Assessment of channel quality
Definition of physical links (e.g radio, PCM30 ISDN etc)
Error detection (based on line coding)
Layer 2: Data link layer
Multiplexing of one or more layer 2 connections on control/signalling channels

Error detection (based on HDLC)
Flow control
Transmission quality assurance
Routing
Layer 3: Network Layer
Connection management
Management of location data
Subscriber identification
Management of Services
188
+ :
GSM Protocols
GSM Transmission Protocol Stack (TRAU at MSC)
Abis
Um
BTS
BSC
BTS
GSM VOICE
Network
GSM
Voice
Sub-channel
FEC
FEC
Cipher
Cipher
TDMA
TDMA
FDMA
GSM Core
13kbps
FDMA
D-ch
D-ch
16kbps
D-ch
D-ch
16kbps
MSC
TRAU
PSTN
ISDN
Voice
channel
Local
Interface
G.703
64kbps
189
+ :
GSM Protocols
GSM Transmission Protocol Stack (TRAU at BTS)
Abis
Um
BTS
BSC
BTS
GSM VOICE
Network
MSC
PSTN
GSM
ISDN
Voice
TRAU Voice
Sub-channel
channel
FEC
FEC
Cipher
Cipher
TDMA
TDMA
FDMA
GSM Core
13kbps
FDMA
G.703
G.703 G.703
G.703 G.703
64kbps
64kbps
64kbps
190
+ :
GSM Protocols
GSM Signaling Protocol Stack
Abis
Um
BTS
BSC
BTS
GSM Core
Network
MSC
CM
CM
MM
MM
RR
RR
DTAP
BSSMAP
DTAP
BSSMAP
SCCP
SCCP
MTP
MTP
RR
BTSM
BTSM
LAPDm
LAPDm
LAPD
LAPD
TDMA
TDMA
G.703
G.703
MS
BTS
BSC
MSC
PSTN
Layer 3
Layer 2
Layer 1
191
+ :
GSM Protocols
Air Interface Layer Function
Speech and Data
Layer 3
Signalling
CC MM RR
Speech and Data

CC: Call Control
Signalling
MM: Mobility Management
RR: Radio Resources
CC MM RR
Layer 2 Build frames
Reconstruct frames
Send
acknowledgement
Request
acknowledgement
Layer 1 Channel coding
Error protection
Interleaving
Error correction
De - interleaving
Equalization
RF modulation
RF demodulation
Radio waves
192
+ :
GSM Protocols
Um Interface Protocol Stack
Abis
Um
BTS
BSC
BTS
GSM Core
MSC
Network
CM
CM
MM
RR
RR
DTAP
BSSMAP
MM
DTAP
BSSMAP
SCCP
SCCP
MTP
MTP
RR
BTSM
BTSM
LAPDm
LAPDm
LAPD
LAPD
TDMA
TDMA
G.703
G.703
MS
BTS
BSC
MSC
PSTN
Layer 3
Layer 2
Layer 1
193
: +
GSM ProSignaling and Call Routing

:
.
:
Location update
Originating call
Terminating call
Hand-over
194
Signaling and Call Routing
3- CL Ack
DMS-HLR
DMS-MSC
VLR
1- UL
2- ISD
3- ISD Ack
4- UL Ack
DMS-MSC
VLR
When MS first detected by VLR...

Between new visited VLR and HLR:
1- Update Location
2- Insert Subscribers Data
3- Insert Subscribers Data Ack
4- Update Location Ack
Between HLR and previous VLR (if applicable):
2- Cancel Location
3- Cancel Location Ack
195
Location update from the mobile
Mobile looks for BCCH after switching on

RACH send channel request
AGCH receive SDCCH
SDCCH request for location updating
SDCCH authenticate
SDCCH authenticate response
SDCCH switch to cipher mode
SDCCH cipher mode acknowledge
SDCCH allocate TMSI
SDCCH acknowledge new TMSI
SDCCH switch idle update mode
196
DMS-MSC
DMS-HLR
VLR
When MS makes a call...

DMS-GMSC
The HLR does not need to be

consulted as:
- the information about the subscriber
is
stored locally (VLR)
- the MSC can route the call using the
dialed number!
197
Call establishment from a mobile

RACH send channel request
AGCH receive SDCCH
SDCCH send call establishment request
SDCCH do the authentication and TMSI allocation
SDCCH send the setup message and desired number
SDCCH require traffic channel assignment
FACCH switch to traffic channel and send ack (steal bits)
FACCH receive alert signal ringing sound
FACCH receive connect message
FACCH acknowledge connect message and use TCH
TCH conversation continues
198
Terminating
calls
Part 8 Signaling & Call Routing

DMS-HLR
VLR
4- SRI Ack
2- PRN
3- PRN Ack
DMS-MSC
When a call needs to be routed to the MS...

DMS-GMSC
Between MSC and HLR:

1- Send Routing Information
Between HLR and VLR:
2- Provide Roaming Number
3- Provide Roaming Number Ack
Between HLR and MSC
4- Send Routing Information Ack
199
Call establishment to a mobile

Mobile receives paging message on PCH
Generate Channel Request on RACH
Receive signaling channel SDCCH on AGCH
Answer paging message on SDCCH
Receive authentication request on SDCCH
Authenticate on SDCCH
Receive setup message on SDCCH
Receive traffic channel assignment on SDCCH
FACCH switch to traffic channel and send ack (steal bits)
Receive alert signal and generate ringing on FACCH
Receive connect message on FACCH

FACCH acknowledge connect message and switch to TCH
200
Part 8 Signaling & Call Routing
Hand-over
2- Perform Handover
VLR
VLR
5- Hand Over Number

NES
NES
B
S
C
B
S
S
B
S
C
B
S
S
Copyright
1996
Northern
Telecom
201
Registration Message Flow

-- Inter-LA Movement
MSC LAC MS
HLR
Saved Information in
SIM card at LAC1
Ki
3. Send
New TMSI
XXXXXXXXXX
A3 , A8
IMSI
43211XXXXXX
TMSI
YYYYYYY
LAI
LA1
MSC1
VLR1
VLR2
2.Send
Old TMSI
3. Assign CH
& New TMSI
1.CH request.
(Old TMSI)
LA1
LA2
MSC2
SIM card at LAC2
Ki
XXXXXXXXXX
A3 , A8
IMSI
43211XXXXXX
TMSI
XXXXXx
LAI
LA2
202

-- Inter-MSC Movement
VLR MSC LAC MS
HLR
4
LA1
VLR2
2
MSC1
SIM card at LAC2
Ki
XXXXXXXXXX
A3 , A8
IMSI
43211XXXXXX
TMSI
XXXXXX
LAI
LA2
VLR1
Ki
XXXXXXXXXX
A3 , A8
MSC2
1
LA2
SIM card at LAC3
IMSI
43211XXXXXX
TMSI
ZZZZZZ
LAI
LA3
LA3
203

-- Inter-VLR Movement
VLR LAC MS
HLR
LA1
VLR1
MSC1
LA2
XXXXXXXXXX
VLR2
SIM card at LAC4
Ki
XXXXXXXXXX
A3 , A8
1 6
MSC2
SIM card at LAC3
Ki
3
2
LA3
IMSI
43211XXXXXX
TMSI
TTTTTT
LAI
LA4
LA4
A3 , A8
IMSI
43211XXXXXX
TMSI
ZZZZZZ
LAI
LA3
204
sub
MSISDN
09122345678
09173456666
IMSI
43211XXXXXX
43211YYYYYY
VLR add.
FARDASADI
LCT
2-GMSC send
MSISDN to HLR
6- HLR send MSRN to GMSC
HLR
4- HLR Send IMSI

&(Request MSRN)
To target MSC/VLR
5- GMSC Reserved MSRN

3- HLR Find :
for IMSI & send MSRN to HLR
From MSISDN
-->IMSI &
MSC/VLR Service
Area Add.
Call Delivery

MSISDN B= 09122345678
GMSC
1-PSTN send
MSISDN to GMSC
PSTN
7- GMSC back MSRN to MSC/VLR
MSC/VLR
8- MSC/VLR check MSRN

& confirm Routing between GMSC , MSC/VLR
9- MSC send Paging command

To related BSC
BSC
10- BSC send Paging command

To all BTS sites belong to LAC that MS located there
10- Related MS
send Answer to
paging with RACH
BTS
BTS
BTS
205
The Use of MSRN

HLR
MSISDN
PSTN
MSISDN
GMSC
MSRN
MSRN
MSRN
IMSI
MSC
IMSI
VLR
MSRN
206
GMSC check MSRN & find target MSC

10
MSRN
MSC1
MSC2
Analyse MSISDN
3
MSISDN
MSC3
PSTN
42XXX9 52XXX9 62XXX9

MSC1 recived
its MSRN & routing
is complete
Send MSISDN
to related HLR
Send MSRN to HLR
VLR
MSRN
42XXX1
42XXX2
MSRN
52XXX1
52XXX2
52XXX9
42XXX9
MSRN
62XXX1
62XXX2
VLR 62XXX9
MSC1
MSISDN
MSC3
11
MSRN IMSI
GMSC

MSC assign MSRN to IMSI
09121335454
MSC2
Send MSRN
to GMSC
Send IMSI
&
Req. MSRN from MSC1
HLR
VLR
HLR change MSISDN to IMSI

&
Find related MSC
MSISDN IMSI
207
Part 10: GSM Services
Copyright
1996
Northern
Telecom
GSM
208
GSM :
GSM Services
GSM Services Introduction
1. (Bearer Services)
:GSM
: GSM
2. (Teleservices)
3. (Supplementary Services)
GSM
: .
Data Services (CSD, USSD, SMS)
VAS: Value add Service (MMS, CRBT, MCA, OCS)
CSD: Circuit Switch Data
CRBT: Color Ring Back Tone
USSD: Unstructured Supplementary Service Data
MCA: Missed Call Alert
SMS: Short Message Service
OCS: Online Charging System
MMS: Multimedia Message Service
209
GSM :
GSM Services
Teleservices & Bearer Services

Bearer Service Teleservices
.
Teleservices
Bearer Services
PLMN Section
TE
Section outside PLMN
TE
IWF
TE
GSM Network
Transit Network
Terminating Network
210
GSM :
GSM Services
GSM Bearer service
. Bearer Services
end to end Teleservices Bearer Services
. GSM
: Bearer Services
Bearer Services represent layers 1-3 of the OSI Model
Transparently transports application data between TEs
Bearer Services are uniquely numbered (BSxx)
Data transfer bearer services currently defined for GSM include:
Asynchronous circuit-switched data (BS 21-26)

Synchronous circuit-switched data (BS 31-34)
PAD access (BS 41-46)
Packet data (BS 51-53)
Alternate speech and data (BS 61)
Speech followed by Data (BS 81)
211
GSM :
GSM Services
GSM Bearer service Characteristics
: Bearer Service
Service Type (data, PAD, packet etc)

Structure (asynch., synch)
Bit Rate (300-14400 bps)
Mode (transparent, non-transparent)
Transmission (Unrestricted Data Information (UDI) or 3.1kHz)
212
GSM :
GSM Services
GSM Teleservices
end to end Teleservices GSM
.
. Teleservice
:
Speech (TS 11-12)

Short Message Service - SMS (TS 21-23)
Message Handling Systems - MHSs (TS 31)
Videotext (TS 41-43)
Teletext (TS 51)
Fax (TS 61-62)
213
GSM :
GSM Services
Speech Teleservices
: Teleservices GSM
Full rate speech
Emergency (speech) calls
SMS P-P and SMS Cell Broadcast (SMSCB)
Telefax
Voice/Fax mail
: Teleservices GSM
Half-rate speech
Improvements to SMS
Group 3 fax capability
214
GSM :
GSM Services
Supplementary Services
GSM
.
Call forwarding
Call Barring (incoming/outgoing calls)

Call hold - interrupting a call - normal telephony only
Call waiting - notification of new incoming call during another call
Multi-party service - simultaneous conversation between 3 - 6 subscribers
Calling line identification (CLI) - presentation of callers number
Closed user groups - group of users who can only call each other and certain
specified numbers
Advice of charge - estimates of billing data
215
: GSM
GSM Services
)Short Message Service (SMS
) (SMS GSM
160 .
SMS ) (SMS-C
.
SMS .
SMS TCH
SDCCH .
.
SMSC
(STP) Nr. 7 HLR MSC .
216
GSM :
GSM Services
Short Message Service (SMS)
: Teleservices SMS
Categorized under GSM as a Teleservice
Text-based messaging
Uses GSM signaling channels (SDCCH) .
160-character messages
Uses store-and-forward packet switching protocol
Three SMS Teleservice types defined:
TS 21 Mobile terminated point-to-point messaging
TS 22 Mobile originated point-to-point messaging
TS 23 Short Message cell broadcast (SMSCB)
217
GSM :
GSM Services
SMS Architecture
. SMS
SME
HLR
4
SME
SMSC
VLR
SMC
GMSC
SS7
Network
SME
BSS
MSC
SME
SME: Short Messaging Entities

SMSC: Short Message Service Centre
SMC GMSC: SMS Gateway Mobile Switching Centre
218
: GSM
GSM Services
SMS Architecture
:SME .
SME ) (MS .
:SMSC SME
MS .
SMSC

.
:SMS - GMSC MSC SMSC
HLR MSC
MSC .
219
: GSM
GSM Services
)Unstructured Supplementary Service Data (USSD
:USSD ) (Text
GSM
.
SMS ) (SMSC
USSD ) (Session
SMSC .
Mobile User
220
Application
MMI
USSD Handler
USSD Handler
Network Node
Mobile Station
GSM :
GSM Services
Unstructured Supplementary Service Data (USSD)
: USSD
Menu Mobile money service Prepaid call back service WAP browsing
Mobile Mobile account balance checking based in formation service
: chatting
Text-based messaging Service
Uses GSM Signaling channels (SDCCH)
182-character messages
Session-oriented
No Store-and-Forward
Up to seven times faster than SMS
Supported by SIM Toolkit and WAP
221
: GSM
GSM Services
USSD #
.
:
101#
123#
1097234937857623#
USSD
.
222
: GSM
GSM Services
USSD #
.
:
101#
123#
1097234937857623#
USSD
.
Balance Enquiry 3GPP TS 24.090
.
223
Unstructured Supplementary Service Data (USSD)
Mobile-Initiated Balance Enquiry and Top Up Service ( [3GPP TS 24.090])
224
: GSM
GSM Services
)Color Ring Back Tone (CRBT
:CRBT ) (Ring Back tone
) (Subscriber A ) (Subscriber B
.

.
CRBT .

.
HLR

.
5000 CRBT
225
.
GSM :
GSM Services
Color Ring Back Tone (CRBT)
. CRBT
Subscriber B
HLR
2
BSS
MSC B
SS7
Network
BSS
MSC A
3
5
4
5
RBT
Centre
Subscriber A
226
: GSM
GSM Services
)Color Ring Back Tone (CRBT
CRBT :
MSC A - 1 ) (SS HLR CRBT B

.
HLR 2 B RBT
MSC A .
MSC A - 3 ) (IAM RBT .
4 RBT B
MSC A RBT .
MSC A .
MSC A 5 A
B .
6 B B
RBT MSC A RBT
227 .
: GSM
GSM Services
)Missed Call Alert (MCA
:MCA SMS
(
)
.
MCA
.
MCA :
MCA SMS
.
SMS
A B A
B .
228
: GSM
GSM Services
)Multimedia Message Service (MMS
:MMS ) (Multimedia
.
MMS SMS .
Multimedia (Multipurpose Internet Mail Extension) MIME
email .
MMSC .
MMSC MMS
MMS . MMS
. URL
B WAP browser URL
.
MMS GPRS.
229
: GSM
GSM Services
)Online Charging System (OCS
:OCS

Online .
(Intelligent Network) IN .
IN Prepaid .
OCS
Online .
OCS

.
230

GSM PDF

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

GSM PDF

Uploaded by

Copyright:

Available Formats

GSM Technology

Copyright 1996 Northern Telecom

Copyright 1996 Northern Telecom

Part 1: Introduction to Radio Cellular Systems

Copyright 1996 Northern Telecom

Copyright 1996 Northern Telecom

Section 1: Introduction to Radio Cellular Systems

Mobile Radio Networks

Cellular radio Network Characteristics

1st Generation or 1G (for

Progress of data rates with time and generation

1st Generation Cellular Characteristics

The 1st Generation of Cellular

Insecure air interface

1st Generation Cellular Standards

TACS (Total Access Communications System)

1st Generation Cellular Planning

Frequency planning required

frequencies these must be planned

The above diagram shows

The First Generation - Problems

Limited capacity could not cope with increase in subscribers

Lack of security air interface analogue signals could be intercepted

Incompatibility between systems in different countries - no roaming

To improve on the analogue systems, the European Conference of Posts and

Telecommunications Administrations (CEPT) established Group Special

The system developed became the Global System for Mobile

Communications (also GSM)

2nd Generation Characteristics

More efficient use of radio spectrum

worldwide subscriber base

Different frequency bands

Largest 2nd Generation subscriber base

CDMA One Characteristics

CDMA One phones

circuit/packet switched data

standards such as GSM and CDMA One

Enhanced data rates

Copyright 1996 Northern Telecom

Copyright 1996 Northern Telecom

Part 2: GSM Architecture Overview

Copyright 1996 Northern Telecom

Copyright 1996 Northern Telecom

Part 2: GSM Architecture Overview

Introduction to Telecommunication Network

Copyright 1996 Northern Telecom

Copyright 1996 Northern Telecom

Introduction to Telecommunication Network

Copyright 1996 Northern Telecom

Copyright 1996 Northern Telecom

GSM Sub Systems

Public Switched Telephone Network

BSS: Base Station Subsystem

Sub Systems in the GSM network

NMS BSS NSS GSM

GSM Network Architecture & Interfaces

Sub Systems in the GSM network

NSS: (Network & Switching Subsystem)

MSC: Mobile Switching Center

Network and Switching Subsystem

MSC: Mobile Switching Center

Network and Switching Subsystem

Network and Switching Subsystem