You are on page 1of 102

The 2G Mobile Communications Technology

Fundamentals
Version 2.95

ZTE CORPORATION
ZTE Plaza, Keji Road South,
Hi-Tech Industrial Park,
Nanshan District, Shenzhen,
P. R. China
518057
Tel: (86) 755 26771900 800-9830-9830
Fax: (86) 755 26772236
URL: http://support.zte.com.cn
E-mail: doc@zte.com.cn

LEGAL INFORMATION
Copyright 2005 ZTE CORPORATION.
The contents of this document are protected by copyright laws and international treaties. Any reproduction or distribution of
this document or any portion of this document, in any form by any means, without the prior written consent of ZTE
CORPORATION is prohibited. Additionally, the contents of this document are protected by contractual confidentiality
obligations.
All company, brand and product names are trade or service marks, or registered trade or service marks, of ZTE
CORPORATION or of their respective owners.
This document is provided as is, and all express, implied, or statutory warranties, representations or conditions are
disclaimed, including without limitation any implied warranty of merchantability, fitness for a particular purpose, title or noninfringement. ZTE CORPORATION and its licensors shall not be liable for damages resulting from the use of or reliance on
the information contained herein.
ZTE CORPORATION or its licensors may have current or pending intellectual property rights or applications covering the
subject matter of this document. Except as expressly provided in any written license between ZTE CORPORATION and its
licensee, the user of this document shall not acquire any license to the subject matter herein.
The contents of this document and all policies of ZTE CORPORATION, including without limitation policies related to support
or training are subject to change without notice.

Revision History
Date

Revision No.

Serial No.

Description

30/06/2006

R1.0

sjzl20060769

English For customers

ZTE CORPORATION
Values Your Comments & Suggestions!
Your opinion is of great value and will help us improve the quality of our
product documentation and offer better services to our customers.
Please fax to: (86) 755-26772236; or mail to Publications R&D
Department, ZTE CORPORATION, ZTE Plaza, A Wing, Keji Road South,
Hi-Tech Industrial Park, Shenzhen, P. R. China 518057.
Thank you for your cooperation!
Document
Name

The 2G Mobile Communications Technology Fundamentals

Product
Version

V2.95

Document
Revision Number

R1.0

Equipment Installation Date


Presentation:
(Introductions, Procedures, Illustrations, Completeness, Level of Detail, Organization,
Appearance)
Good
Your evaluation
of this
documentation

Fair

Average

Poor

Bad

N/A

Accessibility:
(Contents, Index, Headings, Numbering, Glossary)
Good

Fair

Average

Poor

Bad

N/A

Intelligibility:
(Language, Vocabulary, Readability & Clarity, Technical Accuracy, Content)
Good

Fair

Average

Poor

Bad

N/A

Please check the suggestions which you feel can improve this documentation:

Your
suggestions for
improvement
of this
documentation

Improve the overview/introduction

Make it more concise/brief

Improve the Contents

Add more step-by-step procedures/tutorials

Improve the organization

Add more troubleshooting information

Include more figures

Make it less technical Add more examples

Add more/better quick reference aids Add more detail

Improve the index

Other suggestions
___________________________________________________________________________
___________________________________________________________________________
___________________________________________________________________________
___________________________________________________________________________
___________________________________________________________________________
# Please feel free to write any comments on an attached sheet.

If you wish to be contacted regarding your comments, please complete the following:
Name

Company

Postcode

Address

Telephone

E-mail

This page is intentionally blank.

Contents
About this Manual .....................................................................................ix
Purpose of this Manual ............................................................................................ x
What is in this Manual ............................................................................................. x
Typographical Conventions..................................................................................... xi
Mouse Operation Conventions.................................................................................xii
Safety Signs.........................................................................................................xiii
How to Get in Touch .............................................................................................xiv
Customer Support................................................................................................................ xiv
Documentation Support........................................................................................................ xiv

Chapter 1........................................................................................ 1
Overview.....................................................................................................1
2G Mobile Communication Technology Evolution .......................................................1
Mobile Communication Technology Development Trend .............................................3

Chapter 2........................................................................................ 5
GSM System................................................................................................5
GSM History...........................................................................................................5
GSM Features.........................................................................................................6
GSM Standard Specifications ...................................................................................7
GSM Network Structure...........................................................................................8
Base Station Controller ............................................................................................................9
Operation and Maintenance Subsystem..................................................................................10
Mobile Station .......................................................................................................................10
Network Service Area ............................................................................................................10

GSM Protocol Platform .......................................................................................... 11


GSM Interfaces .....................................................................................................................11
GSM Protocol Structure..........................................................................................................13

Frame Structure and Radio Channels...................................................................... 14


Radio Frame Structure...........................................................................................................14
Physical Channel ...................................................................................................................15
Channel Combination ............................................................................................................17
Mapping Between Logical Channels and Physical Channels ......................................................19

Key Technologies.................................................................................................. 23
Channel Allocation and Frequency Reuse................................................................................23
Interleaving and Deinterleaving..............................................................................................28
Encryption and Decryption.....................................................................................................32
Frequency Hopping Technology..............................................................................................32
Diversity Reception................................................................................................................34
Power Control .......................................................................................................................35
Location Update Procedure of MS...........................................................................................38
IMSI Detach Procedure..........................................................................................................40
Mobile-Originated Call and Called Party On-hook Procedure.....................................................40
Mobile-Terminated Call and Calling Party On-hook Procedure ..................................................43
Intra-cell Handover Procedure................................................................................................45
Inter-cell Handover Procedure................................................................................................45
Power Control Signaling Procedure.........................................................................................46

Chapter 3...................................................................................... 49
GPRS Technology .................................................................................... 49
GPRS Definition .................................................................................................... 49
GPRS Features ..................................................................................................... 49
GPRS Standard Specifications ................................................................................ 50
GPRS Network Structure ....................................................................................... 52
GPRS Protocol Platform ......................................................................................... 53
GPRS Transmission Protocol Platform .....................................................................................53
GPRS Signaling Protocol Platform ...........................................................................................55

Frame Structure and Radio Channels...................................................................... 59


Radio Frame Structure...........................................................................................................59
Physical Channel ...................................................................................................................60
Logical Channel .....................................................................................................................60
Channel Combination ............................................................................................................61
Mapping Between Logical Channels and Physical Channels ......................................................62

GPRS Key Technologies......................................................................................... 66


Qos Implementation..............................................................................................................66
Media Access Control (MAC) Layer .........................................................................................66
Radio Block Structure ............................................................................................................67
Channel Coding.....................................................................................................................69
Flow Control..........................................................................................................................72
Cell Selection and Reselection ................................................................................................72
Power Control .......................................................................................................................75

Appendix A ................................................................................... 79
Abbreviation ............................................................................................ 79

Appendix B ................................................................................... 83

Figures ..................................................................................................... 83

Appendix C ................................................................................... 85
Tables....................................................................................................... 85

Appendix D ................................................................................... 87
Index........................................................................................................ 87

This page is intentionally blank.

About this Manual


ZXG10 is a GSM mobile communication system independently developed
by ZTE CORPORATION (hereinafter referred to as ZTE). ZXG10 consists of
ZXG10-Mobile Switching Sub System and ZXG10-Base Station Sub System.
ZXG10-BSS provides and manages GSM radio transmission. ZXG10-BSS
consists of ZXG10-Base Station Controller, ZXG10-Base Transceiver
Station
ZXG10-BSC (V2.95) is the second-generation Base Station Controller
developed by ZTE, featuring high capacity, high reliability, perfect
functions and powerful service support capability.
ZXG10- Base Station Sub system (V2.95) consists of ZXG10-BSC and
ZXG10-BTS. The ZXG10-BTS is a general designation of a series of base
transceiver stations developed by ZTE.
ZXG10-OMCR (V2.95) is the Operation & Maintenance Platform of
ZXG10- (V2.95) Base Station Sub system (V2.95).
2G Mobile Communications Technology Fundamentals describes the Global
System for Mobile Communication (GSM) and some basic concepts of
General Packet Radio Service (GPRS) evolved from GSM. It serves as
supplementary material for the ZXG10-BSC (V2.95) Base Station
Controller Technical Manual.
Whole set of documentation also contains the following manuals:

ZXG10-BSC (V2.95) Base Station Controller Guide to Documentation

2G Mobile Communications Technology Fundamentals

ZXG10-BSC (V2.95) Base Station Controller Technical Manual

ZXG10-BSC (V2.95) Base Station Controller Hardware Manual

ZXG10-BSC (V2.95) Base Station Controller


Hardware

Installation Manual

ZXG10-BSC (V2.95) Base Station Controller


Software

Installation Manual

ZXG10-BSC (V2.95) Base Station Controller


System Debugging

Installation Manual

ZXG10-BSS (V2.95) Base Station Sub System Network Management


Technical Manual

ZXG10-BSS (V2.95) Bate Station Sub System Operation Manual


Configuration Management

Confidential and Proprietary Information of ZTE CORPORATION

ix

The 2G Mobile Communications Technology Fundamentals

ZXG10-BSS (V2.95) Bate Station Sub System Operation Manual


Wireless Parameters

ZXG10-BSS (V2.95) Bate Station Sub System Operation ManualFault


Management

ZXG10-BSS (V2.95) Bate Station Sub System Operation Manual


Performance Measurement Counter

ZXG10-BSS (V2.95) Bate Station Sub System Operation Manual


Security Management and System Tools

ZXG10-BSS (V2.95) Base Station Sub System Command Manual

ZXG10-BSC (V2.95) Base Station Controller


Troubleshooting

Maintenance Manual

ZXG10-BSC (V2.95) Base Station Controller


Routine Maintenance

Maintenance Manual

ZXG10-BSC (V2.95) Base Station Controller Maintenance Manual


Emergency Maintenance

Purpose of this Manual


The 2G Mobile Communications Technology Fundamentals manual serves
as a supplementary material for ZXG10-BSC (V2.95) Technical Manual.
This Manual describes the GSM and some GPRS basic concepts evolved
from GSM.

What is in this Manual


This manual contains the following sections:

Section

Summary

Chapter 1,Overview

Describes the evolution process of mobile communication


technology from 2G to 3G and the development of mobile
communication technology in the future.

Chapter 2, GSM System

Describes
the
features,
related
standards
specifications, and key technologies of GSM system

and

Chapter 3, GPRS Technology

Describes
the
features,
related
standards
specifications, and key technologies of GPRS.

and

Confidential and Proprietary Information of ZTE CORPORATION

About this Manual

Typographical Conventions
ZTE documents employ the following typographical conventions.

TABLE 1 TYPOGRAPHICAL CONVENTIONS

Typeface

Meaning

Italics

References to other guides and documents.

Quotes

Links on screens.

Bold

Menus, menu options, input fields, radio button names, check


boxes, drop-down lists, dialog box names, window names

Bold,

with
first
letter capitalized

Keys on the keyboard and buttons on screens

Constant width

Text that you type, program code, files and directory names,
and function names

[]

Optional parameters

{}

Mandatory parameters

Select one of the parameters that are delimited by it


Note: Provides additional information about a certain topic.
Checkpoint: Indicates that a particular step needs to be checked
before proceeding further.
Tip: Indicates a suggestion or hint to make things easier or
more productive for the reader.

Confidential and Proprietary Information of ZTE CORPORATION

xi

The 2G Mobile Communications Technology Fundamentals

Mouse Operation Conventions


TABLE 2 MOUSE OPERATION CONVENTIONS

xii

Typeface

Meaning

Click

Refers to clicking the primary mouse button (usually the left


mouse button) once.

Double-click

Refers to quickly clicking the primary mouse button (usually the


left mouse button) twice.

Right-click

Refers to clicking the secondary mouse button (usually the right


mouse button) once.

Drag

Refers to pressing and holding a mouse button and moving the


mouse.

Confidential and Proprietary Information of ZTE CORPORATION

About this Manual

Safety Signs
TABLE 3 S AFETY SIGNS

Safety Signs

Meaning
Danger: Indicates an imminently hazardous situation, which if
not avoided, will result in death or serious injury. This signal
word should be limited to only extreme situations.
Warning: Indicates a potentially hazardous situation, which if
not avoided, could result in death or serious injury.
Caution: Indicates a potentially hazardous situation, which if not
avoided, could result in minor or moderate injury. It may also
be used to alert against unsafe practices.
Note: Indicates a potentially hazardous situation, which if not
avoided, could result in injuries, equipment damage or
interruption of services.

Erosion: Beware of erosion.

Electric shock: There is a risk of electric shock.


Electrostatic: The device may be sensitive to static electricity.

Microwave: Beware of strong electromagnetic field.


Laser: Beware of strong laser beam.

No flammables: No flammables can be stored.

No touching: Do not touch.

No smoking: Smoking is forbidden.

Confidential and Proprietary Information of ZTE CORPORATION

xiii

The 2G Mobile Communications Technology Fundamentals

How to Get in Touch


The following sections provide information on how to obtain support for
the documentation and the software.

Customer Support
If you have problems, questions, comments, or suggestions regarding
your product, contact us by e-mail at support@zte.com.cn. You can also
call our customer support center at (86) 755 26771900 and (86) 8009830-9830.

Documentation Support
ZTE welcomes your comments and suggestions on the quality and
usefulness of this document. For further questions, comments, or
suggestions on the documentation, you can contact us by e-mail at
doc@zte.com.cn; or you can fax your comments and suggestions to (86)
755
26772236.
You
can
also
explore
our
website
at
http://support.zte.com.cn, which contains various interesting subjects like
documentation, knowledge base, forum and service request.

xiv

Confidential and Proprietary Information of ZTE CORPORATION

Chapter

Overview
This chapter contains the evolution process of 2G mobile communication
technology, 3G mobile communication technology, and mobile
communication development trend in future.

2G Mobile Communication Technology Evolution

Mobile Communication Technology Development Trend

2G Mobile Communication
Technology Evolution
Mobile communication was first used in military and some special fields in
1920. In, 1940s mobile communication was put in use for civil purpose.
Mobile communication started booming in recent decade. Mobile
communication development phases are as fallows:

First generation (1G) mobile communication system.

Second generation (2G) mobile communication system.

Third generation (3G) mobile communication system.

Since 1980's, 1G analog mobile communication system adopts cellular


networking technology.
First generation major standards include:

Advanced Mobile Phone System (AMPS) in North America.

Nordic Mobile Telephone System-450/900 (NMT-450/900) in north


Europe.

Total Access Communication System (TACS) in the U.K.

However, 1G mobile communication system has following disadvantages:

There is no common interface between systems

Confidential and Proprietary Information of ZTE CORPORATION

The 2G Mobile Communications Technology Fundamentals

1G cannot keep up with the fast digitizing of fixed network and provide
digital bearer services.

1G cannot meet the demand for large capacity due to low frequency
utilization.

1G features poor security. Information exchanged on radio path can be


easily eavesdropped, and subscriber account can be easily misuse.

In 1990s Digital mobile communication system characterized by digital


transmission, Time Division Multiple Access (TDMA), and narrowband Code
Division Multiple Access (CDMA) were developed. That is so-called 2G
digital mobile communication system.
Second generation major standards include:

GSM

CDMA IS95

Personal Digital Cellular (PDC)

Compared with 1G mobile communication system,


communication system has the following advantages:

2G

mobile

Provides high spectrum utilization and large system capacity.

Provides diversified services (voice services and low-rate circuitswitched data services).

Enables automatic roaming.

Provides better voice quality.

Provides good security.

Can be interconnected with ISDN and PSTN.

2G mobile communication system has the following disadvantages:

Provides low-rate data services only and cannot support multi-media


service. For example, Internet data access speed of GSM MS can reach
9.6 kbps theoretically.

Different 2G mobile communication systems in the world use different


frequencies therefore, it is difficult to implement global roaming.

Internet, E-business, and multi-media communication is developing


very rapidly. Failing to provide strong support to data communication
has already constrained the development of 2G system. Demand for
higher data rate and more diversified services leads to the evolution
from 2G to 3G.

Confidential and Proprietary Information of ZTE CORPORATION

Chapter 1 - Overview

Figure 1 shows the evolution process.

FIGURE 1 - EVOLUTION FROM 2G TO 3G

IS-95
CDMA

IS-2000
MC WCDMA

IS-95-B

ARIB
WCDMA

PDC

GSM

HSCSD
GPRS

IS-136

IS-136+
IS-136HS

2G

2.5G

IMT-2000
EDGE
UWC-136

UTRA
WCDMA

2.75G

3G

GSM system (2.5G) put forward Phase2 and Phase2+, adopting high-rate
adaptive coding solution. GPRS provides the data rate up to 171 kbps. Two
high-rate data service models are:

High Speed Circuit Switched Data (HSCSD) based on high-speed data


bit rate and circuit switching

General Packet Radio Service (GPRS) based on packet switched data

Enhanced Data Rates for GSM Evolution (EDGE) developed by the


European Telecommunications Standards Institute (ETSI) adopts 8-PSK
(Phase Shift Keying) modulation. It supports data rate up to 384 kbps
theoretically. EDGE is more advanced than GPRS. However, EDGS cannot
provide rate up to 2 Mbps as 3G system does. Therefore, EDGE is 2.75G
technology.

Mobile Communication
Technology Development Trend
3G Development, research and establishment begins in mid 1980s.
International Mobile Telecommunication 2000 (IMT-2000) released by
International Telecommunications Union (ITU) defines and describes 3G.
IMT-2000 enables the mobile data service and some fixed high-speed data
services to use one or several radio channels and fixed network platform
to provide:

Confidential and Proprietary Information of ZTE CORPORATION

The 2G Mobile Communications Technology Fundamentals

A global standard

IMT-2000 services, which are compatible with other fixed network


services

High quality

Use of common band in the world

Small terminals used in the world

Global roaming

Multi-media services and terminals

Higher frequency utilization

Flexibility for development to the next generation

High-speed hierarchical data rate

Rate up to 2 Mbps in fixed environment

Rate up to 384 kbps in pedestrian environment

Rate up to 144 kbps for vehicle mounted stations

Currently, instead of driven by pure technology, communication


technology is developing into the mode featuring the combination of
services and technology. Communication technology is estimated that the
largest and most profound change in future. It is strategic transition from
voice services to data services from the aspect of market application and
service demand. This change will deeply influence the development trend
of communication technology.
Some researchers and telecom operators describe fourth-generation (4G)
mobile communication system as a new world better than 3G, which can
provide many unimaginable applications. 4G systems can provide over
100 Mbps data transmission rate, which is 10,000 times of current MSs
and 50 times of 3G MSs. 4G MSs can provide high-performance multimedia contents. Through ID application, 4G MS can serve as a personal
identification device. It can also receive high-resolution movies and TV
programs, acting as bridge of combined broadcast and new
telecommunication infrastructure. In addition, some services, such as 4G
wireless instant connections, are cheaper than 3G services.

Confidential and Proprietary Information of ZTE CORPORATION

Chapter

GSM System
This chapter contains:

GSM History

GSM Features

GSM Standard Specifications

GSM Network Structure

GSM Protocol Platform

Frame Structure and Radio Channels

Key Technologies

Basic Signaling Procedure

GSM History
Global System for Mobile Communication (GSM) emerged as a 2G digital
cellular communication system to operate in 900 MHz band within
European countries. Because analog communication system has limited
capability in expansion, GSM has developed on demand for capacity
expansion and has achieved global success. GSM has become wireless
communication standard widely accepted in the world.
GSM Development process is as follows:

1982: Conference of European Posts and Telegraphs (CEPT) formed a


study group called the Group Special Mobile (GSM) to study and
develop 2G mobile communication system.

1986: Eight proposals put forward by European countries after massive


research and experiments were accepted in Paris, and on-site
experiments were performed.

1987: After on-site test, demonstration, and comparison, GSM


member countries have reached an agreement that digital system
adopts narrowband Time Division Multiple Access (TDMA), Regular
Pulse Excitation-Long Term Prediction (RPE-LTP), voice coding, and
Gaussian Minimum Shift Keying (GMSK) modulation.

Confidential and Proprietary Information of ZTE CORPORATION

The 2G Mobile Communications Technology Fundamentals

1998: Eighteen European countries reached GSM Memorandum of


Understanding (MOU).

1989: GSM took effect.

1991: First GSM network was deployed in Europe.

1992: GSM standard was frozen.

1993: Major part of GSM phase II standard was completed.

1994:A new research phase (Phase 2+) was added to further


improvement of GSM as a platform of mobile data services.

GSM Features
GSM system has the following features:

High Spectrum efficiency


GSM system features high spectrum efficiency due to the high-efficient
modulator, channel coding, interleaving, balancing, and voice coding
technologies adopted.

Large capacity
Volumetric efficiency (number of channels/cell/MHz) of GSM system is
three to five times higher than that of Total Access Communication
System (TACS).

High voice quality


Digital transmission technologies and GSM specifications, voice quality
is irrelevant with radio transmission quality.

Open interfaces epic


GSM standard provides open air interface, also open interfaces
between networks and those between network entities, such as
A interface and Abis interface.

High security
MS identification code encryption makes eavesdropper unable to
determine the MS number, ensuring subscribers location security.
Voice encryption, signaling data, and identification codes make the
eavesdropper unable to receive the communication contents.

Interconnection with Integrated Services Digital Network (ISDN) and


PSTN.
GSM can interconnect with other networks through current standard
interfaces, such as Integrated Service User Part (ISUP) or Telephone
User Part (TUP).

Roaming function
GSM supports roaming by introducing Subscriber Identity Module (SIM)
card that separates subscriber from the terminal equipment.

Confidential and Proprietary Information of ZTE CORPORATION

Chapter 2 - GSM System

Diversified services
GSM provides diversified services, tele-services, bearer services, and
supplementary services.

Inter-cell handover
During conversation, MS continues to report the detailed radio
environment of local cell and neighboring cells to serving base station.
If inter-cell handover is required, MS sends a handover request to
serving base station.

GSM Standard Specifications


European Telecommunications Standards Institute (ETSI) initiated and
made GSM standard.
ETSI divided GSM into several phases and set up more Special Mobile
Groups (SMG) to make the related GSM standard.
GSM detailed specifications conform on functions and interfaces only, not
on hardware. Purpose is to reduce the restriction on designers, enabling
the operators to purchase equipment from different manufacturers.
GSM technical specifications consist of 12 chapters:

Chapter 1, General

Chapter 2,Services

Chapter 3, Network Functions

Chapter 4, MS-BS Interfaces and Protocols

Chapter 5, Physical Layer on Radio Path

Chapter 6, Speech Coding

Chapter 7, MS Terminal Adaptor

Chapter 8, BS-MSC Interface

Chapter 9, Network Inter-working

Chapter 10, Service Inter-working

Chapter 11 ,Equipment and Model Acceptance Specification

Chapter 12, Operation and Maintenance

Confidential and Proprietary Information of ZTE CORPORATION

The 2G Mobile Communications Technology Fundamentals

GSM Network Structure


Figure 2 shows the basic GSM network structure.

FIGURE 2 - GSM NETWORK STRUCTURE

AUC
SMC
PSTN
ISDN
PDN

HLR
GMSC

BTS
M
S
BTS

BSC

TRAU

MSC/VLR

IWF
MS

EIR

Signaling

GSM digital mobile communication system consists of:

Network Subsystem (NSS)

Base Station Subsystem (BSS)

Operation and Maintenance Subsystem (OMS)

Mobile Station (MS)

Network Switching Subsystem


NSS is a GSMs core network switching element which interfaces to
subscriber services for voice and data.
NSS Main components are:

Mobile Switching Centre (MSC)

Home Location Register (HLR)

Visitor Location Register (VLR)

Equipment Identification Register (EIR)

Authentication Centre (AUC)

Short Message Centre (SMC)

Confidential and Proprietary Information of ZTE CORPORATION

Chapter 2 - GSM System

Mobile Switching Centre


MSC is a GSMs Core. MSC performs switching function, that is,
communication connection between PLMN subscribers and subscribers in
other networks. MSC implements the functions such as the paging access
of PLMN subscribers, channel assignment, call connection, traffic control,
billing, and base station management. It provides interfaces to other
functional entities, interfaces with other networks, and interfaces for
connecting with other MSC.

Home Location Register


HLR is a central database of a system. HLR stores all the information
related to subscribers, including the roaming authority, basic services,
supplementary services, and current location information. It provides
routing information for MSC for call setup. HLR may cover several MSC
service areas or even the whole PLMN.

Visitor Location Register


VLR stores all subscriber information in its coverage area and provides call
setup conditions for the registered mobile subscribers. As a dynamic
database, VLR must exchange large volume of data with HLR to ensure
data validity. When an MS leaves the controlling area of a VLR, it registers
in another VLR. The original VLR deletes the temporary records of that
subscriber. VLR integrated within MSC.

Authentication Centre
AUC is a strictly protected database that stores subscriber authentication
information and encryption parameters. AUC integrated with HLR physically.

Equipment Identification Register


EIR stores the parameters related to MS. It can identify, monitor, and
block the MS. ERI preventing unauthorized MS from accessing the network.

Base Station Controller


BSS serves as a bridge between NSS and MS. It performs radio channel
management and wireless reception and transmission. Base Station
Controller (BSC) and Base Transceiver Station (BTS) are main components
of BSS.

Base Station Controller


Located between MSC and BTS, it controls and manages more than one
BTS. It performs radio channel assignments. BTS and MS transmit power
control, and inter-cell handover. BSC is also small a switch that converge
and connects local network with the MSC through A interface. Abis
interface connects BTS to BSC.

Confidential and Proprietary Information of ZTE CORPORATION

The 2G Mobile Communications Technology Fundamentals

Base Transceiver Station


BTS is wireless transceiving equipment controlled by the BSC in BSS. BTS
carries radio transmission. It performs wired-related wireless conversion,
radio diversity, radio channel encryption, and hopping. Um interface
connects BTS to MS.

Transcoding and Rate Adaptation Unit


TRAU Located between BSC and MSC, TRAU transcodes between 16 kbps
RPE-LTP codes and 64 kbps A law PCM codes.

Operation and Maintenance Subsystem


OMS is operation & maintenance part of GSM. Functional units in GSM are
connected to OMS internal networks. OMS monitors various functional
units in GSM network, submits status report, and performs fault diagnosis.
OMS consists of two parts: OMC System (OMC-S) and OMC-Radio (OMCR). The OMC-S performs operation and NSS maintenance, while OMC-R
performs operation and BSS maintenance.

Mobile Station
MS is subscriber equipment in GSM, it can be vehicle installed or hand
portable. MS consists of mobile equipment and SIM.

Mobile equipment processes voice signals, receives and transmits radio


signals.

SIM stores all information required for identifying a subscriber and


security information, preventing unauthorized subscribers. Mobile
equipment cannot access GSM network without a SIM card.

Network Service Area


GSM service area refers to the total area covered by networks of all GSM
operators. Network consists of several MSC service areas, each of which
consists of several cells. Logically, several cells form a location area (LA).

MSC Service Area


A Public Land Mobile Network (PLMN) includes multiple MSC service
areas. MSC service area refers to the MSC coverage area, that is, the
total area covered by BTS under control of BSC connected to MSC. All
MSs in the service area table register in local VLR. Therefore, in actual
network, MSC is always integrated with VLR as a node.

Location Area
Each MSC/VLR service area includes multiple of LAs. MS can move
freely without performing location update in LA. Hence, LA is the
paging area of a broadcast paging message. An LA belongs to one
MSC/VLR only, that is, LA cannot cross MSC/VLR. The system can
identify different LA via LA Identity (LAI).

10

Confidential and Proprietary Information of ZTE CORPORATION

Chapter 2 - GSM System

Cell
An LA contains several cells. Each cell has a unique Cell Global
Identification (CGI), which indicates a basic radio coverage area in a
network.
Figure 3 shows the relationship between different coverage areas in a
GSM network.

FIGURE 3 - RELATIONSHIP BETWEEN COVERAGE ARE AS IN A GSM NETWORK


GSM service area
The total network coverage provided by all GSM operators
PLMN service area
The network coverage provided by a GSM operator
MSC service area
The area controlled by an MSC
Location area
An area for location update and paging
Cell
A service area provided by a
specific BTS

GSM Protocol Platform


GSM technical specifications make clear and normative definition of
interfaces and protocols between subsystems and various functional
entities. Interface refers to the point where two adjacent entities are
connected. Protocol defines the rules for information exchange at the
connection point.

GSM Interfaces
Figure 4 shows the interfaces in the GSM.

FIGURE 4 - GSM INTERFACES


G
VLR
Sm

Um

Abis

VLR

D
MS

BTS

BSC

MSC
E

HLR
F

MSC

Confidential and Proprietary Information of ZTE CORPORATION

EIR

11

The 2G Mobile Communications Technology Fundamentals

12

Sm: Man-machine interface implemented in MS. It is an interface


between subscribers and PLMN. MS consists of keyboard, LCD, and SIM
card.

Um: Radio interface between MS and BTS. It is an important interface


in PLMN. Digital mobile communication network has different radio
interface with analogue mobile communication network.

A interface: It is an interface between BSC and MSC. A interface


connects two important parts (BSC and MSC) in GSM. Base station
management
information,
call
processing
interface,
mobility
management information, and specific communication information are
transferred through A interface.

Abis interface: It is an interface between BSC and BTS. Supports all


services provided to subscribers. Also supports the control of BTS radio
equipment and management of radio resources assigned.

B interface: It is an interface between MSC and VLR. VLR is a database


locating and managing MS when MS roams in the related MSC control
area. MSC can query the current location of MS from VLR and update
MS location. When subscriber uses a special supplementary service or
changes a relevant service, MSC notifies the VLR. Sometime VLR also
updates information in HLR.

C interface: It is an interface between MSC and HLR. C interface


transfers management and route selection information. When a call
finishes, MSC sends the billing information to HLR. When PSTN cannot
get location information of a mobile subscriber, the related GMSC
queries HLR of the subscriber to obtain the roaming number of the
called MS, and then transfers it to the PSTN.

D interface: It is an interface between HLR and VLR. Exchanges MS


location information and subscriber management information.
To
enable a mobile subscribe to originate or receive calls in the whole
service area, data must be exchanged between HLR and VLR. VLR
notifies HLR of the current location of MS belonging to HLR, and then
provides MSs roaming number. HLR sends VLR all the data required to
support the services of the MS. When an MS roams to the service area
of another VLR, HLR notifies the original VLR to delete the relevant MS
information. When MS uses supplementary services, or some
parameters are changed, D interface is also used to exchange the
related information.

E interface: It is an Interface between MSCs. It exchanges the


handover information between two MSCs. When MS in a conversation
moves from one MSC service area to another MSC service area,
inter-cell handover occurs to maintain the conversation. At that time,
related MSCs exchange the handover information through E interface.

F interface: It is an interface between MSC and EIR. It exchanges the


MS management information, such as IMEI, between MSC and EIR.

G interface: It is an interface between VLRs. When MS uses a


Temporary Mobile Subscriber Identity (TMSI) to register in a new VLR,
the relevant information is exchanged between VLRs through
G interface. This interface also searches IMSI of the subscriber from
VLR that registers TMSI.

Confidential and Proprietary Information of ZTE CORPORATION

Chapter 2 - GSM System

GSM Protocol Structure


2G cellular mobile network GSM adopts Open System Interconnection (OSI)
mode to define its protocol model. Figure 5 shows GSM interface protocol
model, which defines the interfaces and protocols between MS and MSC.

FIGURE 5 - GSM INTERFACE PROTOCOL STRUCTURE


Um interface

Abis interface

A interface

CM

CM

MM

MM

RRM

RRM

RRM

LAPD m

LAPD m

LAPD

LAPD

Radio

Radio

64
kbit/s

64
kbit/s

MS

BTS

BSC

RRM
SCCP

SCCP

MTP

MTP

64
kbit/s

64
kbit/s
MSC

OSI reference model is a hierarchical structure. According to the hierarchy


concept, communication processing process can be divided into several
logical layers from lowest to highest layer. In different systems, the
entities in the same layer that exchange information for the same purpose
are called peer entities. Entities in adjacent layers interact with each other
through the common layer. The lower layers provide services to higher
layers. The services provided by layer N is a combination of the services
and functions provided by the layers below it.

First layer of Um interface protocol is physical layer, which is marked as


L1 and it is a lowest layer, L1 provides basic radio channels for the
information transmission of higher layers.
Second layer L2 is data link layer, which is marked as LAPDm. It covers
various data transmission structures and controls data transmission.
Application layer is the third highest layer L3. It covers various
messages and programs, and controls services. L3 includes Radio
Resource Management (RRM), Mobility Management (MM) and Call
connection Management (CM).

Abis interface protocol is slightly different from Um interface protocol.


Its physical layer is 64 kbps land line, and link layer is LAPD.

First layer of A interface protocol is 64 kbps land line, and second layer
is the Message Transfer Part (MTP), which is part of Common Channel
Signalling7 (CCS7) network. MTP consists of many network protocols
and centralizes all link layer protocols. Signaling connection control
part (SCCP) and MTP together represents as a network layer protocols
on A interface. In BSC both MM and CM transparently transmitted.

Confidential and Proprietary Information of ZTE CORPORATION

13

The 2G Mobile Communications Technology Fundamentals

Frame Structure
Channels

and

Radio

GSM air interface uses TDMA based frame structure. Communication


services obtained from transmission of information using logical channels
on physical channels. Mapping between the logical channel and physical
channel is the process that arranges the information to be sent to the
suitable TDMA frames and timeslots.

Radio Frame Structure


Five levels of GSM radio frame structures are timeslot, TDMA frame,
multiframe, superframe and hyperframe.

Timeslot is the basic unit of a physical channel.

TDMA frame is consists of eight timeslots. It is a basic unit occupying


carrier bandwidth, which is each carrier, has eight timeslots.

There are two types of multiframes:

Multiframe consists of 26 TDMA frames. This type of multiframe is


used in TCH, SACCH, and FACCH.

Multiframe consists of 51 TDMA frames. This type of multiframe is


used in BCCH, CCCH, and SDCCH.

The superframe is a consecutive 51 x 26 TDMA frame. It consists of 51


26-multiframes or 26 51-multiframes.

The hyperframe consists of 2,048 superframes.

Figure 6 shows the frame structure in GSM.

FIGURE 6 -GSM HIERARCHICAL FRAME STRUCTURE


1 hyperframe = 2048 superframes = 2715648 TDMA frames
0

2042 2043 204420452046 2047

1 superframe = 1326 TDMA frames (6.12s)


= 51 26-multiframe or 26 51-multiframes
0 1 2 3
47 48 49 50
0
1
24
25
1 26-multiframe = 26 TDMA frames (120 ms)
0 1 2 3 4

1 51-multiframe = 51 TDMA frames (3036/13 ms)

22 23 2425

0 1 2 3 4

47 48 49 50

0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7
0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7
0

14

1
0
TDMA frame

2
0

Confidential and Proprietary Information of ZTE CORPORATION

Chapter 2 - GSM System

Physical Channel
GSM adopts mixed technology of Frequency Division Multiple Access
(FDMA) and Time Division Multiple Access (TDMA). GSM features high
frequency utilization.
FDMA enables 124 carrier frequencies (carriers for short) to be assigned to
the uplink (from the MS to the BTS) 890 MHz 915 MHz or downlink (from
the BTS to the MS) 935 MHz 960 MHz in GSM900 band. Interval
between carriers is 200 kHz. Carriers in the uplink and downlink are in
pairs, which is the so-called duplex communication mode.45 MHz Interval
between duplex receiving and transmitting carrier pair.
TDMA enables each carrier of GSM900 band to be divided into eight time
segments. Each time segment is called a timeslot. Refer Figure 7. This
type of timeslot is called a channel or a physical channel. Eight
consecutive timeslots on a carrier constitute a TDMA frame, that is, a
carrier of GSM provides eight physical channels.

FIGURE 7 - TIME-FREQUENCY STRUCTURE OF PHYSICAL CHANNEL

Frequency

200 kHz

Time
16/25 ms

Timeslot

Eight timeslots in TDMA frame are called as physical channels. Each


physical channel is time multiplexed with different logical channels. Logical
channels carry various signaling or traffic information based on user and
network requirements. To provide signaling traffic Control logical channels
map on physical channels.
Logical channels classified into common channels and dedicated channels.
Figure 8 shows GSM defined logical channels.

Confidential and Proprietary Information of ZTE CORPORATION

15

The 2G Mobile Communications Technology Fundamentals

FIGURE 8 - GSM LOGICAL CHANNELS


Logical
channels

Dedicated
channels

Common
channels

Common control
channel (CCCH)

Broadcast
channel (BCH)

Frequency
correction
channel
(FCCH)

Synchronizati
on channel
(SCH)

Broadcast
control channel
(BCCH)

Paging channel
(PCH)

Stand-alone
Dedicated Control
Channel (SDCCH)

Random access
channel (RACH)

Traffic channel
(TCH)

Dedicated control
channel (ECCH)

Slow associated
control channel
(SACCH)

Access grant
channel (AGCH)

Fast associated
control channel
(FACCH)

Full rate
channel

Half-rate
channel

Enhanced
full rate
channel

Common Channel
Common channels are:

Broadcast channel (BCH): Transmits broadcast messages from base


station to MS.

Common control channel (CCCH): Transmits the bi-directional signals


required to set up the connection between MSC and MS.

Broadcast channels :
BCHs are unidirectional channels from base station to MS.
BCH includes:

Frequency correction channel (FCCH): Transmits the information used


to correct the MS frequency. MS receives frequency correction
information through FCCH and corrects its time base frequency.

Synchronization channel (SCH): Transmits frame synchronization


(TDMA frame number) information and Base Station Identity Code
(BSIC) to MSs.

Broadcast control channel (BCCH): Broadcasts general information to


BTSs. For example, broadcast the local cell and neighboring cell
information, and synchronization (time and frequency) information on
this channel. MSs listen to BCCH periodically to obtain the information
transmitted on it, such as the Local Area Identity, List of Neighboring
Cell, frequency table used in local cell, cell identity, power control
indication, intermittent transmission permission, access control, and
CBCH description. BCCH carrier is transmitted by the base station at
the fixed power, and its signal strength is measured by all MSs.

Common control channels :


CCCHs are point-to-multipoint bi-directional channels between base
station and MS.
CCCHs include:

16

Confidential and Proprietary Information of ZTE CORPORATION

Chapter 2 - GSM System

Paging channel (PCH): Broadcasts paging messages from base station


to MS. It is a downlink channel.

Random access channel (RACH): MS sends information to base station


through this channel when accessing the network at random. The
information sent includes response to the paging message of base
station and access of mobile-originated call. MS also applies for a
stand-alone dedicated control channel (SDCCH) from base station
through this channel. RACH is a uplink channel.

Access grant channel: The base station sends the assigned SDCCH to
the MS that accesses the network successfully through this channel.
The AGCH is a downlink channel.

Dedicated Channel
Dedicated channels are traffic channels that transmit voices and data.
Some dedicated channels used for the control purpose.
Dedicated control channel (DCCH):
DCCHs are point-to-point bi-directional channels between base station and
MS.
DCCHs include:

Stand-alone dedicated control channel (SDCCH): Transmits signaling


and channel information between base station and MS, such as the
authentication and registration signaling messages. During the
establishment of a call, SDCCH supports bi-directional data
transmission and short messages transfer.

Slow associated control channel (SACCH): Through this channel, base


station sends power control message and frame adjustment message
to MS, and receives signal strength report and link quality report from
MS.

Fast associated control channel (FACCH): Transmits inter-cell handover


signalling messages between base station and MS.

Traffic channel (TCH):


TCHs transmit voice and data services. According to switching mode, TCHs
can be divided into circuit-switched channels and data-switched channels.
According to the transmit rate, TCHs can be divided into full-rate channels
and half-rate channels. Rate of the GSM full-rate channels is 13 kbps, and
that of the GSM half-rate channels is 6.5 kbps. In addition, the enhanced
full-rate channel has same rate as the full-rate channels, which is 13 kbps.
However, it has better compressed coding scheme than full-rate channels.
That is why enhanced full-rate channel provides better voice quality.

Channel Combination
In actual application, Different types of logical channels are mapped to the
same physical channel. This is called channel combination.

Confidential and Proprietary Information of ZTE CORPORATION

17

The 2G Mobile Communications Technology Fundamentals

Following are nine GSM channel combinations:

Full-rate traffic channel (TCHFull): TCH/F + FACCH/F + SACCH/TF

Half-rate traffic channel (TCHHalf): TCH/H (0, 1) + FACCH/H(0, 1) +


SACCH/TH (0, 1)

Half-rate1 traffic channel (TCHHalf2): TCH/H (0, 0) + FACCH/H (0, 1)


+SACCH/TH (0, 1) + TCH/H (1, 1)

SDCCH: SDCCH/8 (0,, 7) + SACCH/C8 (0,, 7)

Main broadcast control channel (MainBCCH): FCCH + SCH + BCCH +


CCCH

Combined broadcast control channel (BCCHCombined): FCCH + SCH +


BCCH + CCCH + SDCCH/4 (0,,3) + SACCH/C4 (0,, 3)

Broadcast channel (BCH): FCCH + SCH + BCCH

Cell broadcast channel (BCCHwithCBCH): FCCH + SCH + BCCH +


CCCH + SDCCH/4 (0,, 3) + SACCH/C4 (0,, 3) + CBCH

Slow dedicated control channel (SDCCHwithCBCH): SDCCH + SACCH +


CBCH

Among the above channel combinations, CCCH = PCH + RACH + AGCH.


As downlink channels only, CBCHs carry cell broadcast information and
share the physical channel with SDCCH.
Each cell broadcasts FCCH and SCH. The basic combination in the downlink
direction includes FCCH, SCH, BCCH and CCCH (PCH + AGCH). It is
allocated to TN0 of BCCH carrier configured for a cell, as shown in Figure 9

FIGURE 9 - 51-FRAME CHANNEL STRUCTURE


51 frames
BCCH+CCCH
F S
Downlink

F S

F S

F S

F S

BCCH+CCCH
RRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRR
Uplink
(a) FCCH+SCH+BCCH+CCCH
8 SDCCH/8
Downlink
8 SDCCH/8
Uplink

D0

D1

D2

D3

D4

D5

D6

D7

A0

A1

A2

A3

I I I

D0

D1

D2

D3

D4

D5

D6

D7

A4

A5

A6

A7

I I I

A1

A2

A3

I I I

D0

D1

D2

D3

D4

D5

D6

D7

A0

A5

A6

A7

I I I

D0

D1

D2

D3

D4

D5

D6

D7

A4

(b) SDCCH/8(0,...,7)+SACCH/C8(0,...,7)
BCCH+CCCH
+4SDCCH/4 F S
Downlink
F S
BCCH+CCCH
+4SDCCH/4
Uplink

F S

F S

F S

F S

D3

RR

A2

D3

R R A0

D
0
D
0

D
1
D
1

F S
F S

D
2
D
2

A3

RRRRRRRRRRRRRRRRRRRRRRR

A1

RRRRRRRRRRRRRRRRRRRRRRR

D
3
D
3

A
0
A
2

F S
F S
D
0
D
0

D
1
D
1

(c) FCCH+SCH+CCCH+SDCCH/4(0,...,3)+SACCH/C4(0,...,3)
F: FCCH
B: BCCH
R: RACH
A: SACCH/C

18

S: SCH
C: CCCH (CCCH=PCH+AGCH+RACH)
D: SDCCH
I: Idle

Confidential and Proprietary Information of ZTE CORPORATION

A
1
A
3
F S
F S

I
I
D
2
D
2

Chapter 2 - GSM System

For the half-rate voice channel combination, each timeslot has two
half-rate sub-channels and corresponding SACCH, with 26TDMA frames as
the multiframe. Figure 10 shows the frame structure.

FIGURE 10 - HALF-RATE VOICE CHANNEL STRUCTURE


26 frames
H
0

H
1

H
0

H
1

H
0

H
1

H
0

H
1

H
0

H
1

H
0

H
1

S
0

H
0

H
1

H
0

H
1

H
0

H
1

H
0

H
1

H
0

H
1

H
0

H
1

S
1

Mapping Between Logical Channels and


Physical Channels
Obviously, the logical channels in GSM are much more than the eight
physical channels that a GSM carrier can provide. If each logical channel is
configured with a physical channel, the eight physical channels provided
by a carrier are not enough. In such case, extra carriers must be added.
However, the communication in this way is not highly effective. The way to
solve this problem is to multiplex the CCCH, that is, multiplex the CCCH on
one or two physical channels.
Mapping between physical channels and logical channels in GSM is as
follows:
Base station has N carriers, and each carrier has eight timeslots. Define
the carriers as f0, f1, f2, Downlink starts from timeslot 0 (TS0) of f0.
TS0 is used to map with control channel only. f0 is also called broadcast
control channel (BCCH). Figure 11 shows BCCH and CCCH on TS0
multiplexing.

FIGURE 11 - MULTIPLEXING OF BCCH AND CCCH ON TSO

TDMA
frame 012

BCCH+CCCH
FS
Downlink

7 012

FS

701

FS

FS

FS

F (FCCH): MS synchronizes its frequency through it.


S (SYCH): MS reads TDMA frame number and Base Station Identity Code (BSIC)
through it.
B (BCCH): MS reads the general inforamtion of the cell through it.
I (IDLE): Idle frame, containing no information. It serves as the end flag of the
multi-frame.

BCCH and CCCH occupy 51 TS0s in total. Although only the TS0 of each
frame is occupied, the total length is 51 TDMA frames in terms of time.

Confidential and Proprietary Information of ZTE CORPORATION

19

The 2G Mobile Communications Technology Fundamentals

Each time when an idle frame appears, the multiframe ends. After that, a
new multiframe starts from F and S. Repeat like this, and TDMA
multiframe is constructed.
When there is no paging or call connected, the base station always
transmits on f0. This enables MS to detect the signal strength of the base
station to determine the cell to be used.
For the uplink, the TS0 on f0 does not include the above channels. It is
used for the MS access only; that is, it is used as the RACH. Figure 42
shows the TS0 of 51 consecutive TDMA frames.

FIGURE 12 - MULTIPLEXING OF RACH ON TSO

TDMA
frame 012

RACH
Uplink

7012

701

RRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRR

BCCH, FCCH, SCH, PCH, AGCH, and RACH are all mapped to TS0. RACH is
mapped to uplink, and the rest are mapped to downlink.
TS1 on downlink f0 is used to map DCCH to physical channel. Figure 13
shows the mapping relationship.

FIGURE 13 - MULTIPLEXING OF SDCCH AND S ACCH ON TS1 (DOWNLINK)

TDMA
frame 0 1 2

7012

701

D0

D1

D2

D3

D4

D5

D6

D7

A0

A1

A2

A3

III

D0

D1

D2

D3

D4

D5

D6

D7

A4

A5

A6

A7

III

SD CCH+ SA CCCH
Downlink

Since the bit rate in call setup and registration is quite low, eight dedicated
control channels can be placed on one timeslot to improve the multiplexing
ratio of the timeslot.

20

Confidential and Proprietary Information of ZTE CORPORATION

Chapter 2 - GSM System

SDCCH and SACCH have 102 timeslots in total, that is, 102 time division
multiplexing (TDM) frames.
DX (D0, D1 ) of SDCCH is used in the early time when a call is set up.
When the MS transfers to the TCH, and the subscriber starts the
conversation or the release is triggered after registration, the DX is used
by other MSs.
AX (A0, A1, ) of the SACCH transfers unimportant control information,
such as radio measurement data, that is TS0 of 51 consecutive TDMA
frames.

TS1 on the uplink f0 has the same structure with the TS1 on the downlink
f0. They have an offset in time, which means bi-directional connection can
be performed at the same time for an MS. Figure 14 shows the
multiplexing of the SDCCH and SACCH on TS1 of the uplink f0.

FIGURE 14 - MULTIPLEXING OF SDCCH AND S ACCH ON TS1 (UPLINK)

TDMA
frame

012

A5

A1

7012

701

A6

A7 I I I

D0

D1

D2

D3

A2

A3

D0

D1

D2

D3

SDCCH+ SACCCH
Uplink

III

DX: same as uplink

D4

D4

D5

D6

D7

A0

D5

D6

D7

A4

AX: Same as downlink

Uplink and downlink TS0 and TS1 on f0 are used by the logical control
channel, while other six physical channels (TS2 to TS7) are used by TCH.
Figure 15 shows the mapping from TCH to physical channel.

Confidential and Proprietary Information of ZTE CORPORATION

21

The 2G Mobile Communications Technology Fundamentals

FIGURE 15 - TCH MULTIPLEXING

Where:
T=TCH
A=SACCH
I=Idle
Figure 15 shows TS2 time division multiplexing. TCH transmits voice or
data. SACCH transfers control commands such as the command to change
the output power. Idle I does not contain any information but is used in
measurement. TDM is implemented on TS2 with 26 timeslots as a cycle.
The idle timeslot I serves as the beginning or end of the repeated
sequence.
Uplink TCH is of the same structure with the downlink TCH. They only
have a time offset, which is three timeslots. That is, the TS2 of the uplink
and that of the downlink do not appear simultaneously, which means that
the MS need not send or receive data at the same time. Figure 16 shows
the offset between the uplink and downlink of the TCH.

FIGURE 16 - OFFSET BETWEEN THE UPLINK AND DOWNLINK OF TCH

0
Downlink C0

TDMA frame number


0
1

0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7

45MHz (GSM900)
95MHz (DCS1800)
Uplink

From BTS to MS
From MS to BTS

0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7

C0
Offset

1
0

TDMA frame number

In conclusion, on carrier f0:

TS0: a logical control channel, with repeat cycle of 51 timeslots.

TS1: a logical control channel, with repeat cycle of 102 timeslots.

TS2: a logical traffic channel, with repeat cycle of 26 timeslots.

TS3 to TS7: logical traffic channels, with repeat cycle of 26 timeslots.


The TS0 to TS7 of other f0 fN are all traffic channels.

22

Confidential and Proprietary Information of ZTE CORPORATION

Chapter 2 - GSM System

Key Technologies
Channel Allocation and Frequency Reuse
Channel Allocation

Working band
GSM can adopt 900 MHz band, extended 900 MHz band, and 1800 MHz
band. Some countries use 1900 MHz band.

900 MHz band


Uplink (MS to base station) frequency range: 890 MHz 915 MHz
Downlink (base station to MS) frequency range: 935 MHz 960
MHz

Extended 900MHz band


Uplink frequency range: 880 MHz 915 MHz
Downlink frequency range: 925 MHz 960 MHz

850 MHz band


Uplink frequency range: 824 MHz 849 MHz
Downlink frequency range: 869 MHz 894 MHz

1800 MHz band


Uplink frequency range: 1710 MHz 1785 MHz
Downlink frequency range: 1805 MHz 1880 MHz

1900 MHz band


Uplink frequency range: 1850 MHz 1910 MHz
Downlink frequency range: 1930 MHz 1990 MHz

Channel interval
Interval between any two adjacent channels is 200 kHz

Channel configuration
All channels are configured with the same interval.

900 MHz band


Channel number: 1 124. There are 124 frequency points in total.
The relation between the channel number and the frequency point
nominal central frequency is:
Fu (n) = 890 + 0.2 x n (MHz), uplink
Fd (n) = Fu (n) + 45 (MHz), downlink
Here, n (1 n 124) is the channel number or the Absolute Radio
Frequency Channel Number (ARFCN).

Confidential and Proprietary Information of ZTE CORPORATION

23

The 2G Mobile Communications Technology Fundamentals

Extended 900MHz band


Channel number: 0 124 and 975 1023. There are 174
frequency points in total.
Relation between channel number and frequency point nominal
central frequency is:
Fu (n) = 890 + 0.2 x n (MHz), 0 n 124
Fu (n) = 890 + 0.2 x (n - 1024) (MHz), 975 n 1023
Fd (n) = Fu (n) +45 (MHz)

850 MHz band


Channel number: 128 251. There are 124 frequency points in
total.
Relation between channel number and frequency point nominal
central frequency is:
Fu (n) = 824.2 + 0.2 x (n - 128) (MHz)
Fd (n) = 869.2 + 0.2 x (n 128) (MHz)
128 n 251

1800 MHz band


Channel number: 512 885. There are 374 frequency points in
total.
Relation between channel number and frequency point nominal
central frequency is:
Fu (n) = 1710.2 + 0.2 x (n - 512) (MHz)
Fd (n) = Fu (n) + 95 (MHz)
512 n 885

1900 MHz band


Channel numbers: 512 811. There are 300 frequency points in
total.
Relation between channel number and frequency point nominal
central frequency is:
Fu (n) = 1850.2 + 0.2 x (n - 512) (MHz)
Fd (n) = Fu (n) + 80 (MHz)
512 n 811

Interval between transmitting and receiving

900 MHz band


Duplex transceiving frequency interval is 45MHz.

Extended 900MHz band


Duplex transceiving frequency interval is 45MHz.

850 MHz band


Duplex transceiving frequency interval is 45MHz.

24

Confidential and Proprietary Information of ZTE CORPORATION

Chapter 2 - GSM System

1800 MHz band


Duplex transceiving frequency interval is 45MHz.

1900 MHz band


Duplex transceiving frequency interval is 45MHz.

Frequency Reuse
GSM adopts cellular system to provide the coverage. Whole GSM network
service area is divided into several cells. Each cell is equipped with a base
station, which controls the mobile communication within the cell.
Meanwhile, under MSC control, base stations implement the mobile
subscribers communication in local cell with other cells and with PSTN
subscribers.
In cellular system, the system capacity is expanded through frequency
reuse. That is, as long as the distance between cells is far enough
(Interference signal does not impact the receiving of useful signals), same
frequency can be used. Common way is to divide the N channels available
into F groups, and then allocate the F groups of channels to adjacent cells.

Refer Figure 17 Number of channels in each cell is about N/F. If Omni


antennas are used, a base station is installed in center of each cell BS,
called O-type site. If directional sector antennas are used, a base station is
installed in the cross point of three cells, called S-type site. S-type site
covers three adjacent cells.

FIGURE 17 - FREQUENCY REUSE IN THE CELLULAR SYSTEM

B
C

A
D

F
E O

ZXG10 system adopts 4/12 and 3/9 frequency reuse.


In 4/12 frequency reuse, frequencies are divided into 12 groups and
assigned in turn to four sites (A, B, C and D). Each site can use three
frequency groups. Figure 18 shows the cells in 4/12 frequency reuse.

Confidential and Proprietary Information of ZTE CORPORATION

25

The 2G Mobile Communications Technology Fundamentals

FIGURE 18 - CELL IN 4/12 FREQUENCY REUSE

D3

A1

C2

C3

B1

D2

C1

A2
C3

A3
B1

D1
D2

B2
D3

C1

B3
A1

C3

C2

A1

B2

B3

C1

A2

D1

A3

D2

A1

C3

C2

B1

D2
A1

D3

In 3/9 frequency reuse, limited frequencies are divided into 9 groups and
allocated to three sites (A, B, and C) in turn. Each site can use three
frequency groups. Refer Figure 19.

FIGURE 19 - CELL IN 3/9 FREQUENCY REUSE

B3

A1

B2

B3

A1

B2

C1

A2
C3

A3
B1

C1
C2

A2
C3

C1

A3
B1

C3

C2

A1

B2
A3

B3
C1

A1
A2

B2
A3

A1

B3
C1

A2
A1

A3

Frequency utilization and the number of subscribers increase as the


frequency reuse density increases (Number of frequency groups
decreases). However, with the distance of frequency reuse shortened,
inter-cell interference is caused, for example, carrier-to-interference ratio
(C/I) and C/A decreases. C/I refer to interference of other cells to the
service area when different cells use same frequency. C/A refers to
interference of adjacent channels to the channels of the service area in
frequency reuse mode.
C/I and C/A are the two major parameters in frequency reuse. In GSM, C/I
should be more than or equal to 9dB (C/I 9dB) and C/A be more than or
equal to 9dB (C/A -9dB).
After the frequency reuse relation is determined, the frequency groups N
is determined. In the case of 4/12 frequency reuse, N is12. In the case of
3/9 frequency reuse, N is 9.

26

Confidential and Proprietary Information of ZTE CORPORATION

Chapter 2 - GSM System

Discontinuous Transmission (DTX)


Voices are transmitted in two modes:

Voices are continuously coded (a speech frame every 20 ms) no matter


whether the subscribers speaks or not.

DTX: In speech activation period, 16 kbps coding is performed. In speech


deactivation period, 500 bps coding is performed. A comfort noise frame
(20 ms per frame) is transmitted each 480 ms. Refer Figure 20.

FIGURE 20 - DISCONTINUOUS TRANSMISSION

TRAU

BTS

BTS

MS

480 ms
Comform noise
frame
Speech frame

DTX can reduce the total interference level in air and save the power of
transmitters. However, DTX may slightly lower the transmission quality.
Therefore, DTX mode and common mode are optional.

GMSK Modulation
Gaussian Minimum Shift Keying (GMSK) is a special digital FM modulation
mode. Modulation rate is 270.833 kilobauds. Frequency Shift Keying (FSK)
modulation with bit rate four times of frequency offset is called Minimum
Shift-frequency Keying (MSK). In GSM, Gaussian demodulation filter is
used to further reduce the modulation spectrum. It can cut the frequency
conversion speed.
GMSK can be expressed by an I/Q diagram. If there is no Gaussian filter,
when a series of constant 1s are sent, MSK signal will be kept in state that
is higher than the center frequency 67.708 kHz of the carrier. If the center
frequency of carrier serves as fixed phase reference, signal 67.708 kHz will
cause steady increment of phase. Phase rotates 360 at 67,708 times per
second. In a bit period (1/270.833 kHz), phase moves 1/4 a circle in I/G
diagram, that is, 90. Data 1 can be looked as 90 plus phase. Two 1s
makes a phase increment by 180, three 1s makes an increment by 270,
and so on. Data 0 indicates the same phase change in the reverse
direction.

Confidential and Proprietary Information of ZTE CORPORATION

27

The 2G Mobile Communications Technology Fundamentals

Actual phase track is strictly controlled. In GSM, digital filter and 1/Q or
digital FM modulator are used to generate correct phase track accurately.
Root Mean Square (RMS) between the actual track and ideal track allowed
by GSM specifications cannot exceed 5, and peak deviation cannot exceed
20.

Channel Coding
Channel coding is used to improve transmission quality and overcome the
adverse impact of interferences on signals.
Using specialized redundancy technology, channel coding inserts
redundancy bits in a certain pattern at transmitting end for coding.
Decoding process at the receiving end uses these redundancy bits to
detect error codes and correct errors, and recover the original information
transmitted.
In GSM, two coding modes are available convolution code and block code.
They are used in combination, in actual application.

Convolutional code: compiles k information bits into n bits. Both k and


n are very small, and suitable for serial transmission. In addition, the
delay is very shot. After coded, the n elements are not only related to
k information elements of this group, but also to information elements
of the preceding (N-1) group. Here, N is called constraint length. The
convolution code can be expressed as (n, k, N). The error-correction
capability of the convolution encoding is improved with the rise of N,
while the error rate decreases exponentially as N rises. The
convolution code is used to correct errors. It can bring very effective
result when the decoder works in the maximum likelihood estimate
mode.

Block code: It is a kind of shortened loop code, which gets the


redundancy bits by increasing the exclusive-or algorithm of information
bits and maps k input information bits to n output binary code
elements (n>k) through exclusive-or algorithm. The block code is used
to detect and correct errors in groups. It is always used along with the
convolution code.

Interleaving and Deinterleaving


Burst error codes occurred in wireless communications are usually caused
by long fading dips. It is not possible to detect and correct errors using
channel coding mentioned above. To solve this kind of problem,
interleaving technology is adopted.
Interleaving in fact is to separate the consecutive bits of a message block
and transmit them non-consecutively. In other words, the original
consecutive block becomes non-consecutive during the transmission, and
a group of interleaved message block is sent. At the receiving end, the
interleaved message blocks are restored (deinterleaved) to original
message blocks. Refer Figure 21.

28

Confidential and Proprietary Information of ZTE CORPORATION

Chapter 2 - GSM System

FIGURE 21 - INTERLEAVING TECHNOLOGY


Message
block

3 1 4

2 1 2

3 1 4

Interleave
Message block
after interleaving

Error

With the interleaving technology, if a message block is lost in transmission,


data restored at the receiving end only has a part of each message block
lost. Coding technology can recover the data lost easily.
In GSM, different coding and interleaving modes are used in different
types of channels. Refer Table 4 for details.

TABLE 4 - CIRCUIT LOGICAL CHANNELS CODING AND INTERWEAVING

Channel
Type

Ia
TCH
/FS

TCH
/HS:

Input
Rate
(kbps)

Input
Code
Block
(bits)

13

50

On four 1/2
bursts

1/2

Parity
check
,3

1/3

240

1/2, one bit


is
removed
every 15 bits.

456

Combine on
22
unequal
bursts

120

32

1/3

456

Combine on
22
unequal
bursts

78

Ia

5.6

22

Ib

5.6

73

II

5.6

17

228

13

TCH/F4.8

On eight 1/2
bursts

Parity
check
,3

II

456

Convolutional
Code Rate

132

TCH/H4.8

Interleaving
Depth

Tail
Bit

13

12

Output
Code
Block
(bits)

Check
Bit

Ib

TCH/F9.6

Code

Confidential and Proprietary Information of ZTE CORPORATION

29

The 2G Mobile Communications Technology Fundamentals

Channel
Type

Input
Rate
(kbps)

Input
Code
Block
(bits)

TCH/F2.4

3.6

TCH/H2.4

3.6

Code
Tail
Bit

Convolutional
Code Rate

Output
Code
Block
(bits)

72

1/6

456

On eight 1/2
bursts

144

1/3

456

Combine on
22
unequal
bursts

Check
Bit

Interleaving
Depth

SCH

25

Parity
check
, 10

1/2

78

Combine on
one SB burst

RACH

Parity
check
,6

1/2

36

Combine on
one AB burst

FACCH

184

Block
code,
40

1/2

456

On eight 1/2
bursts

184

Block
code,
40

1/2

456

On four whole
bursts

SACCH
BCCH
SDCCH
AGCH
PCH

Note: Voice input rate on TCH/FS is 13 kbps, that is, each speech frame lasts
20 ms and contains 260 bits. According to the interference of different bits on
voice, the 260 bits are divided into I category (182 bits in total) and II category
(78 bits in total). I category is further divided into Ia and Ib. Ia bits are very
important bits. If any of them is incorrect, subscriber will hear a loud noise in 20
ms voice interval. There are 50 Ia bits and 132 Ib bits. That is, 260 bits in a
speech frame (20 ms) is { d (0), d (1),, d (181), d (182), , d (259)}. Part with
a single line is I category, and that with a double-line is II category. It is similar to
TCH/HS.

Table 4 gives the coding and interleaving adopted in different types of


transmission. First column lists the channels and the related transmission
mode. Input Code Block column gives the size of the data block (bits)
before channel coding. Output Code Block column gives the size of data
block (bits) after channel coding. In Code, the parameters are listed in the
same sequence as in coding sequence. Tail bit is "0". Decoding is in
reverse order.
Following example gives clear idea about process of channel coding and
interleaving in speech communication
In GSM, voice input rate on TCH/FS is 13kbps, that is, 260 bits are
transmitted every 20ms. 260 bits are protected by means of segmented
coding. 182 bits of 260 bits adopts 1/2 convolutional coding, and the
remaining 78 least sensitive bits are not protected. 50 bits of 182 bits are

30

Confidential and Proprietary Information of ZTE CORPORATION

Chapter 2 - GSM System

performed with parity check and then with 1/2 convolutional coding. Three
information bits are added. Those 50 bits are called Ia bits. Other 132 bits
not parity checked, called Ib bits, are performed with 1/2 convolutional
coding directly.
Figure 22 shows interleaving algorithm of voice signals on TCH/F. After
channel coding, 456 bits are carried in every 20ms. Those bits are divided
into eight groups, with the 57 bits in each group carried in different burst
pulses (eight BPs in total). To maximize irrelevancy between the bit
sequences, the bits should be arranged as described in Table 5.

FIGURE 22 - CODE ELEMENTS INTERLEAVING

456 bits

456 bits

0 1 2 3 4 5 6
8 9 10 11 12 13 14
. . .
. .
.
. . .
.. .
.
. . .
. . .
.
.

7 0 1 2 3
15 8 9 10 11
. . .
.
. . .
.
. . .
.

5 6 7 8

4
12
.
..
. .
.

456 bits

5
13
.
.
.

4 5

6
14
.
.
.

7 0 1 2 3 4 5
15 8 9 10 11 12 13
.
. . .
. .
.
. . .
.. .
.
. . .
. . .
.

6 7 8

4 5

Block A
57

1
1

57

57

11
bit
6

1 57
1
11
bit
6

57

456 bits

1 57
1
11
bit
6

57
Odd bit

6 7 0 1 2 3 4 5 6
14 15 8 9 10 11 12 13 14
. .
. . .
. .
.
. .
. . .
.. .
.
. .
. . .
. . .
.
.

7 8

7
15
.
.
.

6 7 8

Block
B
1
1

57

Even bit

TABLE 5 - FULL RATE SPEECH INTERLEAVING ALGORITHM

No.

Item

Description

0, 8, , 448

Even bits (Block B) of BP (N)

1, 9, , 449

Even bits (Block B) of BP (N + 1)

2, 10, , 450

Even bits (Block B) of BP (N + 2)

3, 11, , 451

Even bits (Block B) of BP (N + 3)

4, 12, , 52

Odd bits (Block A) of BP (N + 4)

5, 13, , 453

Odd bits (Block A) of BP (N + 5)

6, 14, , 454

Odd bits (Block A) of BP (N + 6)

7, 15, , 455

Odd bits (Block A) of BP (N + 7)

456 bits are divided into eight groups (rows). Each group has 57 bits
(columns), occupying Block A or Block B of BP (N) to BP (N+7). After

Confidential and Proprietary Information of ZTE CORPORATION

31

The 2G Mobile Communications Technology Fundamentals

interleaving, a BP carries 114 bits of information plus 2 bits of stolen


frame (116 bits in total). The 114 bits contain 57 bits (odd bits) of
information block A and 57 bits (even bits) of information block B. The
remaining two bits indicate respectively whether the first half BP (odd bit)
and the last half BP (even bit) are subscriber data or fast channel
associated signaling.

Encryption and Decryption


GSM provides encryption of voice, data, and signaling. Irrelevant with
data type, this type of encryption can be used in normal bursts only.
Encryption is implemented through exclusive or operation of an encryption
sequence (produced by A5 encryption algorithm using Kc and frame
number) and 114 information bits on a normal burst.
At the receiving end, exclusive-or operation is performed on the
encryption sequence using the same sequence to obtain the original data.

Frequency Hopping Technology


In digital mobile communication system, spread spectrum technology,
direct sequence spread spectrum and frequency hopping, is used to
improve the anti-interference capability of the system. GSM adopts
frequency hopping technology.
There are two reasons for introducing frequency hopping. First, based on
the principle of frequency diversity, frequency hopping is used to
counteract Rayleigh fading. In mobile radio transmission, when the signals
transmitted encounter any obstacle, a short-term change of signal
amplitude occurs inevitably. That change is Rayleigh fading. Different
frequencies suffer fading of different degrees. In addition, the fading
becomes more independent with the increase of frequency difference. With
frequency hopping, burst pulses will not be damaged by Rayleigh fading in
the same way. Second reason is based on the features of interference
source. Area in which traffic is heavy, cellular system is liable to be
restricted by interference from frequency reuse, and the C/I may change a
lot during call. Frequency hopping can break up interference from the calls
that may affect the cell.
Frequency hopping refers to hopping of the carrier frequency in a certain
sequence within a wide frequency band. That is, control and information
data are modulated into baseband signals and sent into carrier for
modulation. Then, carrier frequency changes it frequency under the
control of pseudo-random codes. Pseudo random sequence is frequency
hopping sequence. Finally, signals are sent via the RF filter to antenna for
transmission. Receiver determines the receiving frequency according to
the frequency hopping synchronization signals and frequency hopping
sequence, receives corresponding signals, and demodulates them.
Figure 23 shows the basic structure of frequency hopping.

32

Confidential and Proprietary Information of ZTE CORPORATION

Chapter 2 - GSM System

FIGURE 23 - BASIC STRUCTURE OF FREQUENCY HOPPING

Frequency hopping technology has following features:

Frequency hopping can increase system work band, improving the


anti-interference and anti-fading capabilities of communication
system.

Frequency hopping can improve pulse of the valid information part


and protect it against influence from Rayleigh fading in
communication environment. After frequency hopping, original data
is restored via channel decoding.

Increase of number of frequency hopping can increase hopping gain,


improving the anti-interference and anti-fading capability of the
system.

Frequency hopping is to protect signals from external interference.


Since signals cannot follow frequency change, co-frequency
interference and frequency selective fading can be avoided or
obviously decreased. Reason to increase number of hoppings is that the
gain of frequency hopping system is equal to the ratio of frequency
hopping system bandwidth to N minimum frequency hopping intervals.
Usually, the number of frequency hoppings should be higher than three. If
frequency diversity is also available for the FH system, and a message is
transmitted by several groups of frequency hopping simultaneously and
then judged by the law of large numbers, more subscribers can use
services at the same time with least mutual interference.
Types of Frequency hopping are baseband hopping and RF hopping.

Baseband hopping enables transmit and receive frequencies of each


carrier unit to remain unchanged. At different frame number (FN)
moment, frame unit sends data to different carrier units.

RF hopping controls the frequency synthesizer of each transceiver,


making it hop according to different schemes in different timeslot.

Confidential and Proprietary Information of ZTE CORPORATION

33

The 2G Mobile Communications Technology Fundamentals

Diversity Reception
To eliminate system performance deterioration caused by multi-path
facing, GSM adopts diversity reception technology at the radio interface of
BTS.
Diversity technology enables branch signals to be combined according to a
certain method. It separates multi-path signals received into mutually
irrelevant multi-channel signals, and then combines the energy of these
signals so as to improve reception quality.
Types of Diversity technology are time
frequency diversity, and polarity diversity.

diversity,

space

diversity,

Space diversity
Two receiving antennas are installed in a place to receive the same
signal independently. Upon receiving signals, two antennas combine
them and output signal combined. By this way, degree of fading is
greatly reduced. This is the so-called space diversity. Space diversity is
based on fact that field strength varies randomly with space. Longer
the distance, more variant multi-path transmission will be, and less
relevant receiving filed strength will be. Relevancy refers to similarity
between signals. Therefore, necessary distance must be determined.
Based on related test and statistics, CCIR recommends that distance
between two antennas be longer than 0.6 (d > 0.6). Antennas should
be installed near the place that is odd multiple of /4. Even if the
distance between antennas is shortened to be /4, good diversity
effect can be achieved.

Time diversity
Time diversity enables the same message to be sent within certain
delay or a part of message to be sent in different time within the delay
range allowed by the system. In GSM, interleaving technology is
adopted to implement time diversity.

Frequency diversity
Frequency diversity enables a signal to be transmitted by more than
two frequencies. At the receiving end, the signals of different
frequencies are combined. By use of the different paths of radio
carriers in different frequencies, the impact of fading is reduced or
eliminated. The frequency diversity is effective and requires one set of
antenna only. In the GSM, the frequency hopping technology is used to
implement frequency diversity.

Polarization diversity
Polarization diversity is of two linear polarized antennas mounted
orthogonally to receive signals. It can achieve good diversity effect.
Two sets of polarized antennae in polarity diversity can be integrated
in one set of antenna. Thus, only one receiving antenna and one
transmitter antenna are required in a cell. If duplexer is adopted, only
one transceiving antenna is required. It saves antennas greatly.

34

Confidential and Proprietary Information of ZTE CORPORATION

Chapter 2 - GSM System

Power Control
Power control implements the control of actual transmit power (keep it as
low as possible) of MS or base station in radio propagation to reduce the
power consumption of MS/BS and interference of the entire GSM network.
Power control is a must to ensure good communication quality of the
ongoing calls. Figure 24shows power control process.

FIGURE 24 - POWER CONTROL

As shown in Figure 24, MS is at point A far from BS antenna. Because


propagation loss of electric wave in air is in direct proportion to n power of
distance, MS at A needs higher transmit power to ensure good
communication quality. Point B is closer to BS antenna than point A, hence
transmission loss is less. To obtain similar communication quality, MS at
point B requires lower transmit power. When an MS in communication is
moving from A towards B, power control can reduce its transmit power
gradually. On contrary, if it is moving from B towards A, the power control
can increase its transmit power gradually.
Power control is classified as uplink power control and downlink power
control, which are implemented separately. Uplink power control controls
transmit power of MS. Downlink power control controls the transmit power
of the base station. Uplink or downlink interference is suppressed as the
transmit power is reduced. Meanwhile power consumption of MS or base
station is reduced. Most obvious benefits are average conversation quality
of whole GSM network is greatly increased, and MS standby time is
extended.

Power Control Process


Original information used for decision making of power control is
measurement data of MS and base station. Through processing and
analyzing original data, MS or base station makes power control decision.
Similar to handover control process, whole power control process is shown
in Figure 25.

Confidential and Proprietary Information of ZTE CORPORATION

35

The 2G Mobile Communications Technology Fundamentals

FIGURE 25 - POWER CONTROL PROCESS

Save measurement
data
Average measurement
data
Make power control
decision
Send power control
command
Rectify measurement
data

Saving measurement data


Measurement data related to power control includes uplink signal level,
uplink signal quality, downlink signal level, and downlink signal quality.

Averaging measurement data


To reduce the influence of complicated radio transmission on
measurement values, forward averaging method is usually adopted to
process measurement data smoothly. That is, average value of several
measurement values is used for decision making of power control.
Setup of parameters in averaging calculation may vary with the type of
measurement data, that is, the number of measurement parameters to
be used may be different.

Making power control decision


In decision making of power control, there are three parameters:
threshold value, N value, and P value. Among the latest N average
values, if there are P parameters exceed threshold, signal level is too
high or signal quality is good; if there are P parameters are lower than
the threshold, the signal level is too low or the signal quality is poor.
According to signal level or signal quality, MS or BS can judge how to
control transmit power. Power to be increased or decreased is
determined by the value configured in advance.

Sending power control command


According to power control decision, corresponding control command is
sent to base station. Base station executes command or transfers
command to MS.

Updating measurement data


After power control, original measurement data and average values are
useless. If useless information is still kept, it may cause incorrect
power control decision. Therefore, it is necessary to discard the
outdated data or update it for later use.

36

Confidential and Proprietary Information of ZTE CORPORATION

Chapter 2 - GSM System

Fastest power control can be performed once every 480 ms, which is
highest speed that the measurement data is reported. In other words, an
entire power control process is executed once in at least 480ms.

Fast Power Control


European Telecommunications Standards Institute (ETSI) recommends
fixed span of control, which is 2dB or 4dB. However, in actual application,
fixed power control limit cannot achieve optimal effect. The following gives
an example.
When MS initiates a call in a place close to base station antenna, initial
transmit power is maximum transmit power of MS in system message
broadcast on BCCH of the cell (MS_TXPWR_MAX_CCH). At that time, as
MS is quite close to MS antenna, power control process is supposed to
decrease its transmit power as fast as possible. However, it can hardly be
achieved by the power control process recommended by the ETSI
specifications, because only 2dB or 4dB is decreased each time. In
addition, there is an interval between every two power control processes
(because enough new measurement data need be collected). Therefore, it
takes a long time to reduce the transmit power of MS to a proper value. It
is the same in downlink direction. It is disadvantageous in suppressing the
interference of whole GSM network. To solve this problem, more transmit
power should be decreased each time. That is the core idea of the fast
power control.
Fast power control can determine the power control span according to
actual signal strength and quality, breaking through the limitation of fixed
extent. It can easily solve the power control problem occurred during the
initial access of MS. Fast power control can be applied in other
circumstances, such as fast moving MSs and sudden interference or
obstacles. As long as power control in wide range is required, fast power
control is ideal solution.

Timing Advance
In GSM, TDMA is adopts air interface, MS must employ TSs allocated to it
only, and remain inactive in other time. Otherwise, it may affect MSs using
other TSs on same carrier.
In GSM, MS requires three intervals between timeslots when receiving or
transmitting signals. Refer Figure 26

Confidential and Proprietary Information of ZTE CORPORATION

37

The 2G Mobile Communications Technology Fundamentals

FIGURE 26 - OFFSET BETWEEN UPLINK AND DOWNLINK OF TCH

0
Downlink

TDMA frame
number

0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7

0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7

Uplink
Offset

1
TDMA frame
number

BTS
transmits

MS transmits

Suppose an MS occupies TS2 and moves away from base station,


messages sent from the base station will be delayed further and further in
reaching MS. Meanwhile, the response returned by MS will also be delayed
further and further in reaching base station. If nothing is done to solve the
problem, message sent by MS from TS2 will eventually overlap with
another calling message received by the base station in TS3. Therefore, it
is important to monitor the time when a call reaches base station. As
distance between MS and base station changes, system issues instructions
to MS, notifying it of time advanced. This process is called adjustment of
timing advance.
After a specific connection is established, BTS measures time offset
between pulse TSs and received MS TSs. Based on the value measured,
BTS calculates timing advance and notifies MS through SACCH at a certain
frequency.Basic Signaling Procedure

Location Update Procedure of MS


Figure 27 shows MSs location update procedure

38

Confidential and Proprietary Information of ZTE CORPORATION

Chapter 2 - GSM System

FIGURE 27 - LOCATION UPDATE PROCEDURE OF MS


BTS

MS
CH REQ

BSC

MSC

CH RQD
CH ACT
CH ACT ACK
IMM ASS CMD

IMM ASS
SABM

EST IND

UA

CR LOC UPD REQ


CC

CIPH MODE CMD


CIPH MODE COM

ENCRY CMD

DI CIPH MODECOM

DT1 CIPH MODE CMD

DT1 CIPH MODE COM

DTAP LOC UPD ACCEPT

DT1Clear CMD
CH REL
DISC
UA

DR CH REL
DEACT SACCH
REL IND

DT1Clear COM
RLSD
RLC

RF CH REL
RF CH REL ACK

MS sends a CH REQ (Channel Request) message through RACH to BTS.


Upon receiving CH REQ message, the BTS processes it and then sends it to
BSC.
After receiving CH REQ message, BSC sends a CH ACT message to the
BTS to activate SDCCH. After activating the channel, BTS returns a CH
ACT ACK message.
BSC sends IMM ASS CMD to BTS. Upon receiving the message, BTS sends
IMM ASS through AGCH to MS. When receiving message, MS sends SABM
to BTS. BTS sends UA to MS.
At the same time, BTS sends a channel establishment indication (EST IND)
to BSC, containing location update request of MS. BSC forwards the
location update request (LOC UPD REQ) to MSC in CR. As receiving
message, MSC returns a CC message to BSC.
SDCCH is established between MS and BTS, and location update message
is sent to MSC through SDCCH. MSC selects the encryption mode and
sends a location update acceptance message (LOC UPD ACCEPT) to MS.

Confidential and Proprietary Information of ZTE CORPORATION

39

The 2G Mobile Communications Technology Fundamentals

MSC sends a Clear CMD message to BSC. BSC returns a Clear COM
message to MSC. Meanwhile, BSC sends to BTS a CH REL message to
release SDCCH and a DEACT SACCH message to deactivate SACCH.
BTS sends a CH REL message to MS. MS requests BTS to release radio link
(DISC).BTS returns UA and reports the channel release indication to the
BSC.
BSC sends a RF CHL REL message to BTS. BTS returns a RF CHL REL ACK
message. Radio channel is released.

IMSI Detach Procedure


Figure 28 shows the IMSI detach procedure.

FIGURE 28 - IMSI DETACH PROCEDURE


BTS

MS
CH REQ

BSC

MSC

CH RQD
CH ACT
CH ACT ACK

IMM ASS
SABM
UA

CH REL
DISC
UA

IMM ASS CMD

EST IND

DR CH REL

CR IMSI DETACH
CREF

DEACT SACCH
REL IND
RF CH REL
RF CH REL ACK

SDCCH is established first. Then, an IMSI DETACH message is sent


through SDCCH to MSC. After receiving the message, MSC releases
SDCCH.

Mobile-Originated Call and Called Party


On-hook Procedure
Figure 29 shows the mobile-originated call and the called party on-hook
procedure.
When a mobile subscriber originates a call, the SDCCH is established first,
and then a request for the TCH is sent through the SDCCH to the MSC.

40

Confidential and Proprietary Information of ZTE CORPORATION

Chapter 2 - GSM System

The MSC sends an Assignment Request message to the BSC. After


receiving the message, the BSC sends an IMM ASS CMD message to the
MS. The MS establishes a TCH with the BTS. The BTS sends a channel
establishment indication, completes immediate assignment, and release
the SDCCH.
The MSC sends a ring-back tone to the MS over the established TCH. After
the Connect and connect ACK messages are exchanged, the call is set up.
When the called party hooks on, the MSC sends a Disconnect message to
the MS. The MS releases TCH and MSC replies with a Release Complete
message and releases TCH.

Confidential and Proprietary Information of ZTE CORPORATION

41

The 2G Mobile Communications Technology Fundamentals

FIGURE 29 - MOBILE-ORIGINATED CALL AND CALLED PARTY ON-HOOK PROCEDURE


MS

BTS

BSC

CH REQ

MSC

CH RQD
CH ACT
CH ACT ACK
IMM ASS CMD

IMM ASS
SABM

EST IND

UA

CR CM SERV REQ
CC

CIPH MODE

ENCRY CMD

CMD

CIPH MODE COM

DT1 CIPH MODE CMD

DI CIPH MODE

COM

DTAP: CM SERV AC

DT1 CIPH MODE COM

CP

DTAP:SETUP
DTAP:CALL PROC

PHY CONT REQ

DT1:ASS REQ

PHY CONT CONF


CH ACT
CH ACT ACK
ASS
CMD
SABM
UA
ASS COM

DR

ASS CMD
EST IND

DI ASS COM
RF CH REL

DT1

ASS COM

RF CH REL ACK
DTAP A lerting
DTAP Connect
DTAP Connect ACK
Data flow
DTAP D isconnect
DTAP Release
DTAP Release COM

CH REL
DISC
UA

DR CH REL
DEACT SACCH
REL IND
RF CH REL
RF CH REL ACK

42

Confidential and Proprietary Information of ZTE CORPORATION

DT1 C lear CMD


DT1 Clear COM
RLSD
RLC

Chapter 2 - GSM System

Mobile-Terminated Call and Calling Party


On-hook Procedure
Figure 30 shows mobile-terminated call and calling party on-hook
procedure.
When MS is called, MSC sends the paging message to MS. After receiving
paging message, MS establish a SDCCH. Then, MSC establishes a TCH and
releases SDCCH. TCH is used to complete the call connection.
After the conversation is over, TCH is released.

Confidential and Proprietary Information of ZTE CORPORATION

43

The 2G Mobile Communications Technology Fundamentals

FIGURE 30 - MOBILE-TERMINATED C ALL AND CALLING P ARTY ON-HOOK PROCEDURE


MS

BTS

BSC
UDT

PAG CMD

PAG REQ
CH REQ

MSC
PAG

CH RQD
CH ACT
CH ACT ACK
IMM ASS CMD

IMM ASS
SABM

EST IND

UA

CR PAG RES
CC

CIPH MODE

CIPH MODE COM

DT1 CIPH MODE CMD

ENCRY CMD

CMD

DI CIPH MODE C

OM

DT1 CIPH MODE COM

DTAP:SETUP
DTAP:CALL CONF

PHY CONT REQ

DT1:ASS REQ

PHY CONT CONF


CH ACT
CH ACT ACK
DR ASS CMD

ASS CMD
SABM

EST IND

UA
ASS COM

DI AS S COM

DT1 ASS COM

RF CH REL
RF CH REL ACK
DTAP
DTAP
DTAP

lertin
A
g
Connect

Connect ACK

Data flow
isconnec
D
t
Releas
DTAP
e

DTAP

DTAP

CH REL
DISC
UA

Release COM
DR CH REL
DEACT SACCH
REL IND
RF CH REL
RF CH REL ACK

44

Confidential and Proprietary Information of ZTE CORPORATION

DT1 C lear CMD


DT1 Clear COM
RLSD
RLC

Chapter 2 - GSM System

Intra-cell Handover Procedure


Figure 31 shows the intra-cell handover procedure.

FIGURE 31 - INTRA-CELL HANDOVER PROCEDURE

BTS

MS
MEAS REP

BSC

MSC

MEAS RES
PHY CONT REQ
PHY CONT CON
CH ACT
CH ACT ACK

ASS CMD
SABM
UA
ASS COM

DR : ASS CMD
EST IND
DI : ASS COM
RF CH REL

DT1 : HO PERF

RF CH REL ACK

Based on the measurement reports submitted by MS continuously, BSC


judges whether to perform handover.
If intra-cell handover is going to happen, BSC activates another TCH in the
same cell and assigns that TCH to MS immediately.
After MS completes the immediate assignment, BSC notifies MSC of intracell handover occurred to MS and releases the original TCH.

Inter-cell Handover Procedure


Figure 32shows inter-cell handover procedure.
Based on the measurement reports sent by MS continuously, BSC judges
whether to perform handover.
If an inter-cell handover is necessary, BSC activates a TCH in the target
BTS and sends a HO CMD message to MS. MS sets up a connection with
TCH of the target BTS and performs the handover.
BSC informs MSC of inter-cell handover occurred to MS and releases TCH
in original cell.

Confidential and Proprietary Information of ZTE CORPORATION

45

The 2G Mobile Communications Technology Fundamentals

FIGURE 32 - INTER-CELL HANDOVER PROCEDURE

MS

BTS1

BTS2

MEAS REP

BSC

MSC

MEAS RES
CH ACT
CH ACT ACK
DRHO CMD

HO CMD
HO ACCESS

HO DET

PHY INFO
SABM

EST IND

UA
HO COM

DIHO COM

DT1HO PERF

RF CH REL
RF CH REL ACK

Power Control Signaling Procedure


When an MS is in dedicated mode, it is assigned with an SACCH besides a
TCH. SACCH transmits measurement report, power control, timing
advance control, and link monitoring information under mobile
environment. Figure 33 and Figure 34 shows the measurement report and
transmit power control procedures respectively.

FIGURE 33- MEASUREMENT REPORT PROCEDURE

MS

BTS

BSC

MEAS REP
MEAS REP

46

Confidential and Proprietary Information of ZTE CORPORATION

Chapter 2 - GSM System

FIGURE 34 - TRANSMIT POWER CONTROL PROCEDURE

MS

BTS

BSC
MS POWER CTRL

MS POWER CTRL
BS POWER CTRL

MS reports the measurement data through SACCH. BSC makes the power
control decision and sends to BTS related control commands. BTS
executes power control commands or forwards the commands to MS.

Confidential and Proprietary Information of ZTE CORPORATION

47

This page is intentionally blank

48

Confidential and Proprietary Information of ZTE CORPORATION

Chapter

GPRS Technology
This chapter contains the GPRS
specifications, and key technologies.

features,

GPRS Definition

GPRS Features

GPRS Standard Specifications

GPRS Network Structures

GPRS Protocol Platform

Frame Structure and Radio Channels

Key Technologies of GPRS

related

standards

and

GPRS Definition
GPRS is a packet data service introduced in GSM Phase2+. GPRS provides
subscribers the end-to-end mobile data services based on packet switching
and transmission technology. GPRS can effectively utilize the radio
resources and network terrestrial resources and is suitable for long-time
small-volume burst data services.

GPRS Features
GPRS has following features:

Seamless connection with IP network


Internet Protocol (IP) technology is adopted in GPRS core network, and
many transmission technologies are employed in GPRS bottom layer.
Thus, it is easy to implement the seamless connection with the highly
developed IP network.

High rate
With help of multi-slot binding and high-speed coding scheme, GPRS
phase I adopts CS1 and CS2 coding schemes, and provides the access

Confidential and Proprietary Information of ZTE CORPORATION

49

The 2G Mobile Communications Technology Fundamentals

rate up to 115 kbps. GPRS phase II adopts CS3 and CS4 coding
schemes, and provides rate up to 171 kbps.

Always online and flow charging


GPRS provides the availability for connection availability and always
online performance, offering new means for mobile subscribers to
access Internet and Intranet rapidly. Once GPRS terminal is powered
on and connected with GPRS network, it can maintain the online status
all the way. Subscriber can receive and send information at any time
without dial-up process required in circuit switching. As long as GPRS
terminal does not transmit data, it will not occupy network and radio
resources. Thus, the mobile subscribers can benefit from flow charging.
That is, mobile subscribers can stay online as long as possible without
bothering the prohibitive bill.

Mature technology
GPRS provides solutions to implement data services in GSM
technologies and current networks. GPRS can save investment and
makes quick returns.

GPRS Standard Specifications


It was suggested in 1993 in Europe that GPRS to be deployed in GSM
network. In 1997, great progress was made in GPRS standardization. In
October 1997, ETSI issued GPRS Phase1 service description. GPRS phase
2 was completed at the end of 1999. GPRS standard goes through three
phases. In order to implement GPRS, 18 new standards are made and
many standards are modified three phases.
Table 6 lists the three phases of GPRS.

50

Confidential and Proprietary Information of ZTE CORPORATION

Chapter 3 - GPRS Technology

T A B L E 6 - T H R E E P H A S E S O F G P R S S TA N D A R D S

Phase 1

Phase 2

Phase 3

02.60
Service
Description

03.60 System Description and


Network Structure

04.60 RLC/MAC Protocol

03.64
Radio
Description

04.61 PTM-M Service

Interface

03.61 Point to Multipoint Broadcast Service

04.62 PTM-G Service

03.62 Point to Multipoint-Group


Call

04.64 LLC 04.65 SNDCP


07.60 Subscriber Interworking
08.14 Gb Layer1
08.16 Gb Layer Network Services
08.18 BSSGP and Gb Interface
09.16 Gb Layer2
09.18 Gb Layer3
09.60 Gn & Gp Interface
09.61 Interworking
Networks

of

External

According to ETSI assumption, GPRS must implement:

PTP service

PTP TCP/IP subscriber interworking

X.28 protocol from MS to GGSN and X.25 protocol from


external PDN

Gn, Gb, Gr, Gp, Gs, and Gi interfaces

PTP and roaming security guarantee

Charging

Operator-determined Call barring and call termination, and operator


call filtering

PTM radio interface preparation

Anonymous access

SMS-MO and SMS-MT support through GPRS

GGSN to

Confidential and Proprietary Information of ZTE CORPORATION

51

The 2G Mobile Communications Technology Fundamentals

GPRS Network Structure


Figure 35 shows GPRS network structure.

FIGURE 35 - GPRS NETWORK STRUCTURE

BSC

MSC/VLR

Gs interface

PCU

HLR

SMC

Gd interface

Gc interface

Gr interface
Gb interface
Gn interface

Gn interface
SGSN

Ga
interface
SGSN

GGSN

Charging
gateway
function (CGF)

Gi interface

Ga interface
Packet data
network

Billing system

Signaling and GPRS subscriber data


Signaling

GSM introduces two new equipments to support GPRS: Serving GPRS


Support Node (SGSN) and Gateway GPRS Support Node (GGSN). BSC is
added with Packet Control Units (PCUs), and related BSS software is
upgraded.
SGSN provides similar functions as MSC. It performs GPRS channel
assignment, mobility management, encryption, and charging.
GGSN provides various interfaces. It supports interconnection with
external Public Data Networks (PDNs) like Internet and X.25, and other
PLMNs.

Using SGSN and GGSN, operators can construct a GPRS backbone network
on the basis of current transmission network. By reconstructing the
current GSM network, operators can easily provide both circuit and packet
services, and fully utilize radio resources and network terrestrial resources.
GPRS MSs divided into three categories:

52

Confidential and Proprietary Information of ZTE CORPORATION

Chapter 3 - GPRS Technology

Type-A GPRS MSs


Type-A GPRS MS can be used in both GSM and GPRS environments.
Type-A GPRS enables the subscribers to receive speech calls and
communicate with called party without interrupting data transmission.

Type-B GPRS MSs


Type-B GPRS MS can be connected with GSM and GPRS system at the
same time, and provide GPRS and GSM circuit-switched services.
However, it cannot provide either GPRS or GSM services at a time.
When a circuit-switched call is originated to the type-B MS in GPRS,
the MSC/VLR sends a Suspend message to the SGSN. Upon receiving
the message, the SGSN disconnects the GPRS connection temporarily.
After the circuit-switched call is complemented, the MSC/VLR sends a
Restore message to the SGSN. The SGSN resumes the GPRS
connection after receiving the message. Thus, the MS need not
establish GPRS connection repeatedly. Most of the GPRS MSs in the
current market are type-B MSs.

Type-C GPRS MSs


Type-C MS enables subscribers to use GSM services and GPRS
alternatively. Manual service changeover is required.

GPRS Protocol Platform


GPRS Transmission Protocol Platform
Hierarchical protocol structure, as shown in Figure 36, GPRS transmission
platform provide subscriber information transmission and related process
control (for example, flow control, error detection, error correction, and
error recovery). Transmission platform is connected with NSS through
radio interface in the bottom layer. This kind of independence is
implemented through Gb interface reserved.

Confidential and Proprietary Information of ZTE CORPORATION

53

The 2G Mobile Communications Technology Fundamentals

FIGURE 36 - GRPS TRANSMISSION PROTOCOL PLATFORM


Gb
interfac
e

Um
interface
App

Gi
interface

Gn
interface

IP/X.25

IP / X.25
R elay

SNDCP
LLC

SNDCP

GTP

GTP

LLC

UDP /

UDP /

TCP

TCP

Relay

RLC

RLC

BSSGP

BSSGP

IP

IP

MAC

MAC

NS

NS

L2

L2

L1 bis

L1

L1

GSM RF

GSM RF L1 bis

MS

BSS

SGSN

GGSN

GPRS Tunnel Protocol (GTP)


Through GTP, Subscriber data and signaling between GPRS Support
Nodes (GSN) are transmitted in GPRS backbone network. All point-topoint Pocket Data Protocols (PDP) and protocol data units (PDU) are
encapsulated using GTP. As the protocol for the interconnection
between GSN nodes in GPRS network, GTP defines Gn interface.
GSM09.60 makes the GTP specifications.

Transmission Control Protocol (TCP)


TCP is used as transmission protocol when
example, X.25) is required to transmit GTP
network. If a reliable data link is not required
used to deliver GTP PDUs. TCP provides flow
loss or destruction of GTP PDUs. UDP can
being destructed.

a reliable data link (for


PDUs in GPRS backbone
(for example, IP), UDP is
control and prevents the
prevent GTP PDUs from

Internet Protocol (IP)


Ip is a GPRS backbone network protocol. IP is used for the route
selection of subscriber data and control signaling. GPRS backbone
network was first built on IPv4 basis. With IPv6 popularity GPRS will
adopt IPv6 in near future.

SubNetwork Dependent Convergence Protocol (SNDCP)


SNDCP enables the network-level features to be mapped to the
network features in the bottom layer. It divides and assembles the
data to be transmitted, and determines the TCP/IP address and
encryption mode. In SNDC layer, the data transmitted between MS and
SGSN is divided into one or several SNDC data packet units. SNDC
data packet units generated is placed in LLC frame. GSM04.65 provides
SNDCP description.

54

Confidential and Proprietary Information of ZTE CORPORATION

Chapter 3 - GPRS Technology

Logical Link Control (LLC)


LLC is a radio link protocol based on High-level Data Link Control
(HDLC). It can provide high reliable encrypted logical links. LLC layer
enables LLC address and frame field to be generated from SNDC data
units of SNDC layer, helping a complete LLC frame be generated.
LLC can implement point to multipoint address and retransmission
control of data frames. LLC is independent from radio interface
protocol of bottom layer, which enables NSS minimum reconstruction
when other GPRS wireless solutions are introduced. GSM04.64
provides LLC specifications.

Relay
In BSS, relay transfers LLC PDUs between Um interface and Gb
interface. In SGSN, relay transfers PDP PDUs between Gb interface and
Gn interface.

BSS GPRS Protocol (BSSGP)


This layer transfers the information related to routing service quality
between BSS and SGSN. BSSGP does not provide error correction
function. GSM08.18 provides BSSGP specifications.

Network Service (NS)


This layer transfers BSSGP PDUs. NS is based on the frame relay
connection between BSS and SGSN. It provides multi-hop function and
transverses the network having frame relay switching nodes.
GSM08.16 provides NS specifications.

Radio Link Control (RLC)/Media Access Control (MAC)


This layer provides two functions:

Radio link control: RLC provides a reliable link which is independent


from wireless solution.

Media access control: MAC defines and allocates GPRS logical


channels for air interface, enabling these channels to be shared by
different MSs. Besides controlling radio channels used for signaling
transfer,
MAC maps LLC frames to GSM physical channels.
GSM04.60 provides LLC specifications.

GSM RF
Physical layer of Um interface is RF interface part. Logical link layer
provides various logical channels for air interfaces. The carrier
bandwidth of GSM air interface is 200 kHz. A carrier is divided into
eight physical channels. If all the eight physical channels are
assigned to transmit GPRS data, original data rate can reach 200
kbps. With the overhead of forward error correction codes
considered, the final data rate can reach 164 kbps.

GPRS Signaling Protocol Platform


Signaling platform describes the signaling transmission hierarchical
structure. GPRS signaling protocol platform divided into protocols
controlling and supporting the transmission platform. Signaling platforms
are seven kinds according to its application.

Confidential and Proprietary Information of ZTE CORPORATION

55

The 2G Mobile Communications Technology Fundamentals

MS-SGSN
Figure 37 shows MS-SGSN signaling platform. GMM/SM refers to GPRS
mobility management and session management. MS-SGSN supports
mobility management, such as GPRS service connection/disconnection,
security, routing area update, location update, PDP environment
activation, and PDP environment deactivation.

FIGURE 37 - MS-SGSN
GMM/
SM

GMM/
SM
LLC
RLC

RLC

BSSGP

BSSGP

MAC

MAC

NS

NS

RF

L1bis

RF
MS

LLC

Relay

Um

BSS

L1bis

Gb

SGSN

SGSN-HLR
Figure 38 shows SGSN-HLR signaling platform. Here, MAP refers to
Mobile Application Part. SGSN-HLR protocol supports the signaling
exchange with HLR.

FIGURE 38 - SGSN-HLR

MAP

MAP

TCAP

TCAP

SCCP

SCCP

MTP3

MTP3

MTP2

MTP2

L1
SGSN

Gr

L1
HLR

SGSN-MSC/VLR

Figure 39 shows SGSN-MSC/VLR signaling platform. BSSAP+ refers to


Base Station System Application+, which is a subset of BSSAP and
supports the signaling exchange between SGSN and MSC/VLR.

56

Confidential and Proprietary Information of ZTE CORPORATION

Chapter 3 - GPRS Technology

FIGURE 39 - SGSN-MSC/VLR

BSSAP+

BSSAP+

SCCP

SCCP

MTP3

MTP3

MTP2

MTP2

L1
SGSN

L1

Gs

MSC/VLR

SGSN-EIR
Figure 40 shows SGSN-EIR signaling platform. MAP supports the
signaling exchange between SGSN and EIR.

FIGURE 40 - SGSN-EIR

MAP

MAP

TCAP

TCAP

SCCP
MTP3

SCCP
MTP3

MTP2

MTP2

L1
SGSN

L1
EI R

Gf

SGSN-SMS-GMSC or SMS-IWMSC
Signaling platform as shown in Figure 41 indicates MAP supports the
signaling exchange between SGSN and SMS-GMSC or SMS-IWMSC.

FIGURE 41 - SGSN-SMS-GMSC OR SMS-IWMSC

MAP

MAP

TCAP

TCAP

SCCP
MTP3

SCCP
MTP3

MTP2

MTP2

L1
SGSN

Gd

L1
SMS-GMSC

GSN-GSN

GTP (GPRS Tunnel Protocol) tunnel is used to transfer subscriber data and
signaling information between SGSN and GGSN or between two SGSN in
GPRS backbone. UDP is used to transfer the signaling information between
two GSNs as shown in Figure 42.

Confidential and Proprietary Information of ZTE CORPORATION

57

The 2G Mobile Communications Technology Fundamentals

FIGURE 42 - GSN-GSN

GTP

GTP

UDP

UDP

IP

IP

L2

L2

L1
GSN

Gn

L1
GSN

GGSN-HLR
When signaling path is optional, a GGSN is allowed to exchange
signaling information with HLR. Normally, there are two types of
signaling paths:

GGSN-HLR signaling based on MAP


MAP can be used between GGSN and HLR if GGSN has SS7
interface. Figure 43 shows MAP supports HLR signaling exchange.

F I G U R E 4 3 - G G S N - H L R B A S E D O N M AP

MAP

MAP

TCAP

TCAP

SCCP
MTP3

SCCP
MTP3

MTP2

MTP2

L1
GGSN

Gc

L1
HLR

GGSN-HLR signaling based on GTP and MAP


Any GSN with SS7 interface in same PLMN can serve as a GTP-MAP
protocol translator if GGSN has no SS7 interface. Thus, in GPRS
backbone network, signaling information can be transferred between
GGSN and GSN with protocol translation function through tunnel.
Interworking in Figure 44 provides the interworking between GTP and
MAP, enabling the signaling exchange between GGSN and HLR.

58

Confidential and Proprietary Information of ZTE CORPORATION

Chapter 3 - GPRS Technology

F I G U R E 4 4 - G G S N - H L R B A S E D O N G T P A N D M AP
Interworking

GTP
UDP
IP
L2
L1

UDP
L2
L2
L1

Gn

GGSN

MAP

MAP
TCAP
SCCP
MTP2
MTP2
L1

GTP

TCAP
SCCP
MTP3
MTP2
L1

Gc

GSN

HLR

Frame Structure and Radio


Channels
Radio Frame Structure
GPRS introduces 52 TDMA multiframe structures. Logical channels on
packet data channels (PDCHs) mapping is based on 52 TDMA multiframe
structure. Figure 45 shows 52 TDMA multiframe structures.

FIGURE 45 - 52-MULTIFRAME STRUCTURE


52-multiframe

B
0

B
1

B
2

B0-B11:BLOCK

B
3

B
4

B
5

B
6

B
7

T: Frame used for PTCCH

B8 T

B9

B10 B11

I: Idle frame

PDCH multiframe contains 12 blocks (each block is consists of 4


consecutive TDMA frames), 2 idle frames, and 2 TDMA frames used for
Packet Timing advanced Control Channel (PTCCH). There are 52 TDMA
frames all together.
In GPRS, except packet random access channel (PRACH) and PTCCH/U,
basic unit of other packet logical channels is block.
In a 52-multiframe, sequence of 12 blocks is B0, B6, B3, B9, B1, B7, B4,
B10, B2, B8, B5, B11.

Confidential and Proprietary Information of ZTE CORPORATION

59

The 2G Mobile Communications Technology Fundamentals

Physical Channel
GPRS inherits GSMs frequency band use mode and wireless transmission
mode. Frequency band refers to TDMA under FDMA, and Wireless
transmission refers to basic transmission unit on radio path. Which is the
burst pulse lasting for 15/26 ms (equivalent to about 156.25 modulation
bits).
GPRS system divides a carrier into eight timeslots as in GSM, which
constitute eight basic time division channels. Therefore, a physical channel
can be uniquely determined by a TDMA frame sequence, a timeslot No.
(module 8), and a definite hopping sequence. Because GPRS is designed
to coexist with GSM voice transmission, some physical channels in a GSM
cell supporting GPRS may transfer voice, and other physical channels may
transfer GPRS packet data. In addition, some GPRS signaling flows, such
as packet system message broadcasting, packet access and resource
allocation, are conducted on CS channels.

Logical Channel
All packet logical channels are mapped to a dedicated packet data channel
(PDCH). Packet logical channels can be divided into the following
categories: Refer Table 6

TABLE 6 - P ACKET LOGICAL CHANNELS

Packet random access channel (PRACH, uplink)


Packet common control channel
(PCCCH)

Packet paging channel (PPCH, downlink)


Packet access grant channel (PAGCH, downlink)
Packet notice channel (PNCH, downlink)

Packet
broadcast
control
channel (PBCCH, downlink)
Packet data transport channel (PDTCH: PDTCH/U and
PDTCH/D)

Packet transport channel

Packet associated control channel (PACCH)


Packet
channel

dedicated

control

Packet timing
(PTCCH/U)
Packet timing
(PTCCH/D)

60

advanced
advanced

control
control

uplink

channel

downlink

channel

Packet common control channels (PCCCHs)

PRACH delivers packet access burst pulse and extended access


burst pulse. MS sends data or paging response to BSS through
PRACH.

PPCH can send paging messages for CS services and GPRS services.
CS paging services is applicable to type-A and type-B MSs. PPCH
also uses paging group and can support DRX.

Confidential and Proprietary Information of ZTE CORPORATION

Chapter 3 - GPRS Technology

Before MS sends packets, PAGCH allocates one or several PDTCHs


to MS for packet transmission. If MS is transmitting packets, the
resources allocated can be transferred in PACCH.

PNCH notifies MS of PTM-M call. DRX mode must be configured to


monitor PNCH.

Packet broadcast control channel (PBCCH)


PBCCH broadcasts packet data system messages. Parameters carried
in these messages determine channels mapping on multiframes. If no
PBCCH is allocated, BCCH can transfer these messages. BCCH will give
definite indication, showing whether the cell supports packet data
service. If cell supports packet data service, and PBCCH is assigned,
the PBCCH combination configuration information will be given.

Packet transport channel


PDTCH bears subscriber data in packet switching mode. It is allocated
temporarily to a specific MS or a group of MSs (under the PTM-M
mode). Under multi-slot mode, MS can use several PDTCHs
concurrently. Because different logical channels can be multiplexed on
a physical channel, a PDTCH can bear 0 to 21.4 kbps pure data rate
(including RLC header). Different from CS service, all PDTCHs are
unidirectional. MS uses PDTCH/U to send packet data to the network
and uses PDTCH/D to receive packet data from network.

Packet dedicated control channels

PACCH transmits signaling information, such as acknowledge


message and power control message. In addition, it also carries
resources allocation and re-allocation information, which is used for
allocating PDTCH capacity or adding PACCH in future. MS
transmitting packets can enter circuit switching mode through
PACCH paging. ACCH is dynamically allocated to physical channel
with PDTCH. It is a bi-directional channel.

PTCCH/U transmits random access burst and estimates time


advance of MS in packet transmission mode.

PTCCH/D amends the time advance


corresponds to several PTCCH/Us.

of

several

MSs.

PTCCH/D

Channel Combination
Three new logical channel combinations in GPRS are:
PBCCH + PCCCH + PDTCH + PACCH + PTCCH
PCCCH + PDTCH + PACCH + PTCCH
PDTCH + PACCH + PTCCH
Here, PCCCH = PPCH + PRACH + PAGCH + PNCH.

Confidential and Proprietary Information of ZTE CORPORATION

61

The 2G Mobile Communications Technology Fundamentals

Different logical channels may appear on the same PDCH. PDCH is shared
by block. In other words, type of logical channel, to which each block
belongs, on a PDCH may change one by one. Message type ID contained
in the head of each block identifies channel type (except for the PRACH).

Mapping Between Logical Channels and


Physical Channels
Uplink Channel Mapping

PDTCH/U and PACCH/U mapping


For each PDCH allocated to MS, MS will be allocated with an Uplink
State Flag (USF). Network uses USF to control the different MSs
radio block multiplexing in uplink PDCH. US controls the timeslot
usage. It is used in dynamic and extended dynamic medium access
modes. Three-bit USF is located in header of each downlink radio block,
and can form eight states for uplink transmission multiplexing. In
PCCCH, one USF value marks the PRACH (USF = idle), and other
values are reserved for seven different MSs (USF = R1/R2 R7).
When a PDCH is not the PCCCH, the eight USF values are all used to
reserve uplinks for eight different MSs. When an MS without USF is
using the uplink, a USF value can prevent conflict of uplink channels. e
USF is directed to the next uplink radio block.
When an MS finds its own USF in header of a BX (Bx = B0B11)
downlink block of a PDCH, MS can use BX+1 (X!= 11) or B0 (when
X=11) uplink blocks on this PDCH. If the network permits, MS can also
use three consecutive blocks (four blocks in total).
PACCH/U corresponding to PDTCH/D can be determined by the
network in the polling mode.

PTCCH/U mapping
When an MS is allocated a PDTCH from a PDCH, PTCCH/U must also be
allocated from that PDCH. The cycle of PTCCH/U is eight
52-multiframes, including 16 PTCCH/Us (0 to 15). PTCCH/U subchannel No. of each MS is determined by the time advance index (TAI)
obtained by the MS in resource allocation. Refer Figure 46

62

Confidential and Proprietary Information of ZTE CORPORATION

Chapter 3 - GPRS Technology

FIGURE 46 - M APPING OF PTCCH ON PHYSICAL CH ANNEL


52-multiframe number n:

TAI=0
TAI=1

uplink
B0

B1

B2

B3

B4

B2

B3

B4

B2

B3

B4

B2

12

B3

B4

B2

16

B3

B4

B1

B2

20

B3

B4

B2

24

B3

B4

B1

B2

28

B7

B9

B10

B11

B8

10

B9

B10

B11

11

B10

B11

15

B10

B11 19

B10

B11

B10

B11 27

B10

B11

TA-message

B6

B7

B8

14

B9

TA-message

B5

17

B6

B7

B8

18

B9

TA-message

B5

21

B6

B7

B8

22

B9

23

TA-message

B5

25

B6

B7

B8

26

B9

TA-message

4
TAI=14
TAI=15

uplink

downlink

B8

TAI=12
TAI=13

52-multiframe number n+7:

B0

B6

13

TA-message 4

downlink

TA-message

uplink
B1

B5

TA-message 3

52-multiframe number n+6:

B0

B11

TAI=10
TAI=11

uplink

downlink

B7

52-multiframe number n+5:

B0

TA-message 3

downlink

B10

TAI=8
TAI=9

uplink
B1

B6

52-multiframe number n+4:

B0

B5

TA-message 2

downlink

B9

TAI=6
TAI=7

uplink
B1

TA-message

52-multiframe number n+3:

B0

TA-message 2

downlink

B8

TAI=4
TAI=5

uplink
B1

B7

52-multiframe number n+2:

B0

B5

TA-message 1

downlink

B6

TAI=2
TAI=3

uplink
B1

1
1

52-multiframe number n+1:

B0

B5

TA-message 1

downlink

B3

B4

B5

29

TA-message 4

B6

B7

B8

30

B9

31

TA-message

B0~B11=Radio blocks
Idle frames are numbered from 1 to 31 [odd numbers]
PTCCH frames are numbered from 0 to 30 [even numbers]

Uplink PCCCH: PRACH mapping


As described above, on PDCH with PCCCH, if USF is idle, corresponding
downlink block is PRACH. PRACH can be mapped in a fixed manner.
Number of PRACH blocks fixedly allocated on a PCCCH is determined
by the system broadcast parameter BS_PRACH_BLKS. Its relationship
with specific blocks is determined by the block sequence described
above.

Confidential and Proprietary Information of ZTE CORPORATION

63

The 2G Mobile Communications Technology Fundamentals

Downlink Channel Mapping

PDTCH/D and PACCH/D mapping


MS interprets every downlink block on the allocated PDCH and
determines whether the block is its PDTCH/D and PACCH/D according
to TFI.
TBF is a physical connection used by two RR entities to transmit LLC
PDU in a unidirectional manner on packet data radio channel. This
parameter is used in LLC frame transmission sequence of the same
timeslot in same cell to replace MS identification in RLC/MAC layer. It
is radio resource assigned to one or multiple PDCHs. It transmits
RLC/MAC blocks carrying one or multiple LLC PDUs. The TBF is
temporary and only kept in data transmission (the TBF is kept until
there is no RLC/MAC block to transmit, or all the RLC/MAC blocks are
received successfully by the receiver under the RLC acknowledgement
mode).
For each TBF, network allocates a TFI. For concurrent TBFs in each
direction, TFI allocated is unique. It is used to replace MS identifier in
RLC/MAC layer. The same TFI can be used in different directions. TFI
is assigned in the resource allocation message before transmission of
LLC frame.
RLC/MAC block related to a specific TBF must contain a TFI. For a RLC
data block, the TBF is jointly identified by the TFI and the transmission
direction of the data block. For a RLC/MAC control message, there are
transmission direction and message type in addition to the TFI. If the
header of a downlink control block contains a TFI, the TFI identifies to
which MS the control message is sent; otherwise, all MSs will receive
this message. If the TFI in the header is inconsistent with that in the
message, the MS accepts the TFI in the header.

PBCCH mapping and packet system message transmission


In a cell, PBCCH is mapped to one PDCH only. Specific location is
broadcast by BCCH. In a 52-multiframe, PBCCH is mapped to
BS_PBCCH_BLKS (whereBS_PBCCH_BLKS<4) blocks. Specific
blocks are determined by the block sequence described above.
In packet idle mode, MS listens to system messages on BCCH and
learns whether the cell supports GPRS and whether PBCCH is
configured from SI3, SI4, SI7 and SI8. If there is a PBCCH, MS leaves
BCCH to listen system messages PSIs 1 3 or other PSI on PBCCH.
BSC determines time and type of messages to be sent.
System parameter PSI1_REPEAT_PERIOD determines the position
where PSI1 is sent. In addition, except PSI 1, other PSIs are divided
into two groups. One group is sent at a high repetition rate, while the
other is sent at a low repetition rate. Parameter PSI_COUNT_HR
indicates the number of PSIs sent at a high repetition rate, and
PSI_COUNT_LR indicates the number of PSIs sent at a low repetition
rate.
System sends PSIs according to the following rules:

64

Confidential and Proprietary Information of ZTE CORPORATION

Chapter 3 - GPRS Technology

PSI 1 is sent on BLOCK B0 when TC is 0. (TC = (FN DIV 52) mod


PSI1_REPEAT_PERIOD)

When BS_PBCCH_BLKS is higher than 1, PSI 1 is also sent on


BLOCK B6 with TC of 0.

PSIs in the group sent at a high frequency are sent in sequence


determined by network. The sequence starts when TC is 0; that is,
sending cycle of PSIs in this group is PSI1_REPEAT_PERIOD*52
frame. When PSIs in this group are sent, PBCCH BLOCKs, which
are not occupied by PSIs specified by rules (1) and (2), will be
used.

PSIs sent in the group sent at a low frequency are sent in the
sequence determined by the network, and sent repeatedly. When
the PSIs in this group are sent, the PBCCH BLOCKs, which are not
occupied by PSIs specified by rules (1), (2) and (3), will be used.

Downlink PCCCH mapping


Downlink PCCCH mapping on a PDCH can be described by the following
four rules:
i.

BS_PBCCH_BLKS blocks are used in the PBCCH if PDCH has a


PBCCH

ii. BS_PAG_BLKS_RES blocks cannot be used in the PPCH in the


remaining blocks. They can be used in the PAGCH, PNCH, PDTCH
and PACCH only.
iii. The remaining blocks can be used in the PPCH, PAGCH, PNCH,
PDTCH and PACCH.
iv. When PBCCH is on timeslot k, the PCCCH can be located on
timeslot n only, and n must be greater than k-4 and smaller than
or equal to 7 (k-4 < n 7).
For example, for a PDCH with both PBCCH and PCCCH, when
BS_PBCCH_BLKS is 2 and BS_PAG_BLKS_RES is 5, the following
can be known according to the block sequence (B0, B6, B3, B9, B1,
B7, B4, B10, B2, B8, B5, and B11):
PBCCHs are located on B0 and B6.
PPCH can be located on B10, B2, B8, B5, and B11 only.
PAGCH, PNCH, PDTCH, and PACCH can be located on B3, B9, B1, B7, B4,
B10, B2, B8, B5, and B11.

Confidential and Proprietary Information of ZTE CORPORATION

65

The 2G Mobile Communications Technology Fundamentals

GPRS Key Technologies


Qos Implementation
GPRS provides subscribers five negotiable QoS attributes:

Peak throughput class

Mean throughput class

Reliability class

Delay class

Precedence class

Each attribute consists of multiple level options, and combination of


attributes of different levels constitutes the support of various applications
requiring different QoS. GPRS standard defines many QoS combinations.
GPRS only supports some QoS configuration currently.
GPRS QoS profile is based on each Packet Data Protocol (PDP) context.
Treats as a single parameter QoS profile features multiple data transfer
attributes.
During the negotiation of QoS profile, MS can apply a value for each QoS
attribute, including the default value of the subscriber profile saved in HLR.
Network also negotiates a level for each attribute to match the valid GPRS
resources, thus, proper resources can be provided to support QoS profile
negotiated.

Media Access Control (MAC) Layer


MAC layer enable several MSs to share the same transmission media and
connect with physical layer directly.
On the uplink (for example, an MS starts to access network), when several
MSs apply for access at the same time, limited physical resource need be
managed properly. Reservation protocol of the contention mechanism
between different MSs is based on time division ALOHA protocol. In
addition, because radio channel resources for an MS are also limited, some
services are competitive. Coordination function provided by MAC layer can
solve the problems caused by competition.
On the downlink (for example, the MS), MAC layer has the access requests
queue and makes an access time table. For downlink, contention
mechanism is unnecessary because there is only one transmit end in
downlink direction.

66

Confidential and Proprietary Information of ZTE CORPORATION

Chapter 3 - GPRS Technology

MAC layer assigns data to be sent with different priority and transmits
data according to priority. Signaling data has higher priority than
subscriber data. After combined, signaling and subscriber data are sent
through transmission media. MAC layer enables several MSs to share
same transmission medium. Transmission medium can be a physical
channel or several physical channels. In TDMA, physical channels are
TDMA timeslots.
When several physical channels serve as transmission media, MS sends
data concurrently. It can increase the data transmission capacity between
MSs and network. See the example as shown in Figure 47. Two mobile
subscribers are transmitting data. Timeslots 5 and 6 are used as common
transmission media. MAC layer at network side makes transmission time
table for MSs. Thus, subscriber A can send data on a TDMA frame, and
subscriber B can send data on the next TDMA frame. This standard
enables the network to arrange eight MSs to share a transmission medium
at the same time.

FIGURE 47 - M AC LAYER TRANSMISSION

Frame

Physical
channel

Time

MS A

Transmission
medium

MS B

Radio Block Structure


GPRS radio block is consists of MAC header and RLC data block or RLC
control block. GPRS assigns different types of RLC/MAC block structures to
transfer data and control information, as shown in Figure 48.

Confidential and Proprietary Information of ZTE CORPORATION

67

The 2G Mobile Communications Technology Fundamentals

FIGURE 48 - RADIO BLOCK STRUCTURE

PL PDU

MAC header

RLC header

RLC data unit

Idle

RLC data block

MAC header

RLC/MAC control message


RLC/MAC control block

RLC/MAC block that transfers data contains MAC header and RLC data
block.
RLC data block contains a RLC header, a RLC data unit, and a reserved
part (in current technical specifications, that part is set to 0 at the
transmit end and neglected at the receive end). RLC data unit contains
one or several LLC PDUs. RLC/MAC block containing RLC data block can be
coded using channel coding schemes CS1, CS2, CS3, and CS4. When CS1
is adopted, RLC/MAC block does not contain the reserved part.
RLC/MAC control block is composed of the control message content field
and control header, which is optional in downlink. RLC/MAC control
message is transferred in RLC/MAC control block. RLC/MAC control block
must use CS1.

Reduced Block Serial Number (RBSN)


Made up of one bit, RBSN carries downlink RLC/MAC control block
serial number.

Radio Transaction Identifier (RTI) domaine


Made up of five bits, RTI groups and downlink RLC/MAC control blocks.
The value range is 0 to 31. These control blocks form a complete
RLC/MAC control message.

Final Segment (FS)


Made up of one bit, FS indicates whether the downlink RLC/MAC
control block contains a final segment of a RLC/MAC control message.
If FS is 0, the downlink RLC/MAC does not contain final segment of a
RLC/MAC control message. If it is 1, downlink RLC/MAC contains the
final segment.

Address Control (AC)


Made up of one bit, AC indicates whether the header of the downlink
RLC/MAC control block contains optional TFI/D field. "0" indicates
TFI/D field is contained, and "1" not.

68

Confidential and Proprietary Information of ZTE CORPORATION

Chapter 3 - GPRS Technology

Direction (D) bit


Made up of one bit, D bit indicates TBF direction. TBF is identified by
TFI field in downlink RLC/MAC control header. If D bit is 0, TBF
identified by TFI is uplink. If it is 1, TBF is downlink.

Channel Coding
GPRS defines four coding modes on PDTCH: CS-1 to CS-4. Except for
PRACH and PTCCH/U, other packet control channels adopt CS-1. For
packet access pulse on PRACH and PTCCH/U, there are 8-bit and 11-bit
coding modes. Figure 49 and Figure 50 shows coding procedure of four
different coding modes.

FIGURE 49 - CS-1 TO CS-3 CODING PROCEDURE

Radio block
USF

BCS
rate 1/2 convolutional
coding

puncturing

456bits

FIGURE 50 CS-4 CODING PROCEDURE

Radio block
USF
block
code

BCS
no coding

456bits

Confidential and Proprietary Information of ZTE CORPORATION

69

The 2G Mobile Communications Technology Fundamentals

Coding procedure is as follows:


1. Add a Block Check Sequence (BCS) to the end of the radio block for
error detection.
2. Perform pre-coding of USF (for CS-1, CS-2, and CS-3 only), add four
tail bits, and perform half-rate convolutional coding for error correction.
3. Punch to obtain desired coding rate.
Error-correction coding is not performed in CS-4.
Table 7 describes the specific coding process of the four channel coding
modes.

TABLE 7 PDTCH CHANNEL CODING PROCESS

Type
Procedure
Length
of
data source

CS1

CS2

CS3

CS4

184 bits

271 bits

315 bits

413 bits

(1) Fire coding.


The
multinomial
generated is:

(1)
Packet
coding.
The
multinomial
generated is:

(1)
Packet
coding.
The
multinomial
generated is:

(1) Packet coding.


The
multinomial
generated is:

23

Packet
coding

Convolutiona
l coding

17

(D +1)(D +D
+1). The BCS
added is 40
bits.
(2) Add four tail
bits. The coding
data length is
228 bits.

16

12

+D +D +1.
D
The added BCS
is 16 bits.
(2)
USF
preprocessing.
See Table 8.

16

12

D +D +D +
1.
(2) The USF
preprocessing
is the same as
CS2.

(3) Add four tail


bits. The coding
data length is
294 bits.

(3) Add tail


bits.
The
coding
data
length is 338
bits.

(1)
Convolutional
coding with a
1/2 code rate.
The
multinomial
generated is:

(1) Convolutional
coding with a 1/2
code rate. The
multinomial
generated is:

G0=1+D3+D4,G
1=1+D+D3+D4

(2) Reduce 132


bits by punching.
The position of
punching:

(1)
Convolutional
coding with a
1/2 code rate.
The
multinomial
generated is:
G0=1+D3+D4,
G1=1+D+D3+
D4

(2)
punching.

No

G0=1+D3+D4,G1
=1+D+D3+D4

C
(3+4xk),
k=3, , 146 and
k9, 21, 33, 45,
57, 69, 81, 93,
105, 117, 129,
141

D16+D12+D5+1.
(2)
USF
preprocessing. See
Table 9.
(3) Add tail bits.
The coding data
length is 456 bits.

None

(2) Position of
punching:
C(3+6
and

k)

C
(5+6xk)
k=2, 3, ,
111

Table 8 shows the difference between the four coding modes.

70

Confidential and Proprietary Information of ZTE CORPORATION

Chapter 3 - GPRS Technology

TABLE 8 - GPRS CHANNEL CODING

Coding
scheme

Code
Rate

Size of RLC/MAC Data


Block (bytes)

Maximum Throughput of
RLC/MAC (kbps)

CS-1

1/2

20

CS-2

2/3

30

12

CS-3

3/4

36

14.4

CS-4

50

20

CS1 has powerful error correction capability and tolerates a certain bit
error ratio. Therefore, it has low requirements for wireless environment.
However, its throughput is smallest. Higher level of a coding scheme (CS4
is of highest level), error correction capability and higher throughput will
be.
Table 9 describes coding and various packet logical channels interleaving
procedure.

TABLE 9 P ACKET LOGICAL CHANNELS CODING AND INTERLEAVING

Input
Channel Rate
Type
(kbit/
s)

Input Code
Code
Tail Convolutional
Block Check USF
Bit
(bits)
Precoding Bit Code Rate

Output
Interleaving
Code
Block
Depth
(bits)

184

Packet
coding,
40

1/2

456

On four NB
bursts

271

Packet
Adding
coding,
three bits
16

1/2

456

On four NB
bursts

Parity 6

1/2

36

Combine on
one AB burst

11

Parity 6

1/2, perforate
reduction code 36
6 bits

Combine on
one AB burst

PTCCH/U

184

Packet,
40

1/2

456

On
four
inconsecutive
bursts

PPCH,
PAGCH,
PNCH,
PBCCH,
PACCH

184

Packet
coding,
40

1/2

456

On
four
consecutive
bursts

PDTCH
(CS1)
PDTCH
(CS2)

PARCH
PTCCH/D

Confidential and Proprietary Information of ZTE CORPORATION

71

The 2G Mobile Communications Technology Fundamentals

Flow Control
Flow control controls the QoS delay queue load between SGSN and BSS to
optimize the use of buffer area.
BSSGP layer PCU manages two buffers: MSs buffer, and BSSGP
Connection (BVC) buffer. When PCU receives a LLC packet, its
protocol layer identifies it according to TLLI and places it into MS
Then, BSSGP protocol layer uses BVCI as identifier and places all
information into the buffer for that BVC. Refer Figure 51.

Virtual
BSSGP
buffer.
related

FIGURE 51 - BSSGP LAYER BUFFER


LLC
Subscriber data
TLLI
BSSGP

TLLI

BVCI

MS buffer

NSEI
BVC buffer
BVCI =1

BVCI=2
NSEI 1

BVCI=1
NSEI 2

SGSN can perform flow control on specific MS and cell. PCU sends SGSN a
Flow Control BVC/MS message containing flow control parameter. Thus,
SGSN knows how to control throughput to PCU and adjusts BSSGP
UNITDATA PDU flow cached from SGSN to PCU. In addition, to optimize
BSSGP UNITDATA PDU cached at PCU, if the life period of the BSSGP
UNITADATA PDU at the PCU expires, and the BSSGP UNITADATA PDU is
not sent out through the radio interface, the PCU will delete it locally and
send a PDU (LLC-DISCARDED PDU) message to the SGSN.

Cell Selection and Reselection


GPRS Cell selection and reselection are independent from GSM. GPRS
system has no handover concept. GPRS MSs perform cell reselection no
matter whether they are under packet transmission mode or packet idle
mode.
If MS service area has no PBCCH, MS will listen to system message
broadcast by BCCH and performs cell reselection according to C1 and C2
rules under the idle mode of circuit switching.

72

Confidential and Proprietary Information of ZTE CORPORATION

Chapter 3 - GPRS Technology

Cell Selection
When an MS is powered on or moves from dead zone to coverage, it
searches all frequencies permitted by PLMN and selects the best cell to
stay. This process is called cell selection.
GPRS cell selection algorithm is same as that of GSM. Before GPRS
dedicated channel is assigned, GPRS MS uses GSM signaling resources.
In cell selection process, MS searches 124 RF channels (Dual-band MS
will search 374 GSM1800 RF channels), reads strength of signal
received on each RF channel, and calculates average level. Whole
measurement process lasts three to five seconds. During this period, at
least five measurement samples are extracted from different RF
channels.
Then, MS tunes to carrier with maximum incoming level and judges
whether that harmonic wave is a BCCH carrier (by searching FCCH
burst pulse). If yes, MS tries to decode SCH to synchronize with that
carrier and read system message broadcast on BCCH. If MS decodes
BCCH data correctly, and verifies that cell belongs to PLMN selected,
parameter C1 is greater than 0, and cell is not prohibited from
accessing, MS can select that cell. Otherwise, MS tunes to next most
signification carrier till it finds the cell available.
If MS finds a cell available, it will listen to system messages type 1 to
type 4 and SI13 (in case of GPRS cell) on BCCH of that cell, and
decodes all information. After that, MS stays in that cell.

Cell reselection
GPRS network or MS control Cell reselection process. In network
controlled cell reselection process utilizes cell load, status, level and
other information in optimized manner.
Network-controlled cell reselection module consists of two layers: BRP
decides to perform cell-reselection according to certain criteria. BRP
informs Pn of decision parameters related to service cell & each
candidate cell in cell reselection request message. On receiving cell
reselection request, Pn selects target cell & notifies BRP considering
resource and service load status of each adjacent cell. Finally, BRP
sends cell reselection command to MS to complete entire cell
reselection process.

Other modules such as Power control module on power control failure can
request cell reselection using network-controlled cell reselection module.

Confidential and Proprietary Information of ZTE CORPORATION

73

The 2G Mobile Communications Technology Fundamentals

Figure 52 shows network-controlled cell reselection process.

FIGURE 52 - NETWORK-CONTROLLED CELL RESELECTION PROCESS

Save measurement report

Perform weighted average of


measurement report

Make predecision of cell


reselection

Make cell reselection decision

Send cell reselection


command

Save measurement report


Find the instance according to TLLI carried in the packet
measurement report, and respectively store the level value of the
service cell and adjacent cell in the instance data area. The
measurement reports of at most eight adjacent cells are stored in
the instance.

Perform weighted average of measurement report


To avoid frequent cell reselection, the cell re-reselection module
makes cell re-selection pre-decision after performing weighted
average of the measurement reports submitted recently. Since the
submitting period of the packet measurement report is relatively
long and unstable, different weighted values are employed for the
measurement reports submitted in different time. The level
weighted average values of the service cell and adjacent cell are
calculated respectively.

Make pre-decision of cell reselection


The network-controlled cell reselection pre-decision algorithm uses
three parameters: path loss parameter C1, hierarchical cell
structure signal level threshold criteria parameter C31, and cell
sequencing criteria parameter C32. The cell reselection is triggered
when C1 is smaller than 0. Pn of C31 and C32 of these adjacent
cells in the cell reselection request message.

74

Confidential and Proprietary Information of ZTE CORPORATION

Chapter 3 - GPRS Technology

Pre-decision algorithm is as follows:

Service cell C1<0.

If the estimated value of a non-service cell is better than the


service cell, it is the optimal cell. The optimal cell is the cell with
the highest C32 in the following cells:
C31 0, the highest LSA
PRIORITY_CLASS is the highest;

priority

is

available,

and

If no cell can satisfy C31 0, the optimal cell is that with the
highest C32 value among all cells.
These two algorithms are optional.

Make cell reselection decision.


After receiving the cell reselection request message from the BRP,
the Pn makes the cell reselection decision and selects the target
cell. The Pn queries the resource and service load statuses of the
strongest adjacent cells, respectively takes different weighted
values together with the level values, selects the best cell, and
sends the cell reselection indication to the BRP. Meanwhile, it
sends the cell reselection indication to the BRP where the target
cell is located. Thus, after the cell reselection of the MS, the new
cell can perform cell reselection control over it rapidly.

Send cell reselection command.


After receiving the cell reselection indication, the BRP sends the
cell reselection command to the MS. Under the packet idle status,
if PCCCH is configured, the cell reselection command is sent to
the MS on PCCCH. If there is no PCCCH, a downlink block is
assigned on CCCH via the immediate assignment message. The
cell reselection command is sent in the downlink block assigned.
Under the packet transmission status, the cell reselection
command is sent to the MS on PACCH. C31 and C32 are used to
select the optimal cell, and the last selection is not made here in
the pre-decision. When it is necessary to perform cell reselection
according to the cell reselection pre-decision algorithm, the BRP
informs the

Power Control
Power control in packet connection is complicated than that in circuit
connection. There is no continuous end to end connection in GPRS system.
Power control of circuit-switched service is channel-oriented, while that of
packet-switched service is radio-block-oriented. Four bursts in this radio
block must be sent with the same power.
Power control Classified into uplink power control and downlink power
control. Uplink power control controls the transmit power of MS. Downlink
power control controls the transmit power of BTS.

Uplink power control

Confidential and Proprietary Information of ZTE CORPORATION

75

The 2G Mobile Communications Technology Fundamentals

BSS performs power control over MS by assigning relevant parameters


to MS during uplink power control.
Uplink power control further classified into open loop power control and
closed loop power control.

Uplink open loop power control


MS determines output power based on power of downlink signal
received, and assumes that uplink and downlink have the same
path loss.
In packet idle mode, BTS measures interference signal level of
candidate PDCHs, calculates the carrier-to-interference ratio,
obtains power control parameter, and sends it to MS when MS
enters packet transmission mode.
In packet transmission mode, BTS measures power of each RLC
block on PDCH being used, and performs even filtering of
obtained power values to obtain new uplink power control
parameter. When necessary, for example, interference level
changes, BTS notifies MS to adjust the transmit power.

Uplink closed loop power control


BTS measures received signals. Network, based on measured
value, controls MS output power. MS transmits according to
transmit power specified by network.
To ensure transmission quality, in initial resource assignment, MS
can send uplink block at maximum power. Then, BTS measures
uplink signal level or quality, and adjusts uplink transmit power of
MS on a real time basis according to signal level or quality, or
carrier-to-interference ratio.
BTS, power control is performed according to carrier-tointerference ratio. That is, BTS measures power for each uplink
data block on PDCH in use. According to idle blocks or usable
blocks, it respectively counts interference power and carrier
power in the filter calculation, and obtains the carrier-tointerference ratio. Based on the carrier-to-interference ratio
calculated, the BTS calculates the current power adjustment
amount and obtains the latest transmit power according to the
"fast rise and slow decrease" principle and the previous uplink
transmit power. BTS sends the latest transmit power calculated
to MS, and MS updates its output power.
For the MS with multi-timeslot capability, the BTS calculates the
receiving powers and interference powers of different timeslots
respectively. After comparing them, the MS selects the channel
with the lowest carrier-to-interference ratio as the basis to adjust
power.

Downlink power control


Downlink power control controls BTS transmit power.
PDCH containing PBCCH and PCCCH, constant transmit power must be
adopted.
Based on Channel quality downlink power control divided into two
modes power control mode A and power control mode B. Power control

76

Confidential and Proprietary Information of ZTE CORPORATION

Chapter 3 - GPRS Technology

mode A is applicable to the various resource allocation modes. Power


control mode B is only applicable to the fixed allocation mode. This
system adopts power control mode A.
Power control mode A calculates the power change amplitude of radio
block on each downlink PDTCH, converts the power change amplitude
into power control level according to the relation between them, and
sends it to BTS. BTS performs the actual power control. At the same
time, set the relevant field in the downlink data block header according
to power change value.
Same as the uplink closed loop power control, downlink power control is
performed according to the carrier-to-interference. If downlink power
control is adopted, MS will periodically submit Channel Quality Report
(containing the signal level and interference level) in downlink response.
BSS calculates the downlink carrier-to-interference ratio based on it.
Based on previous downlink transmit power and "fast rise and slow
decrease principle" BSS calculates the current power adjustment amount,
obtains the new BTS transmit power, and sends it to BTS. BTS performs
power control according to value received.

Confidential and Proprietary Information of ZTE CORPORATION

77

This page is intentionally blank

78

Confidential and Proprietary Information of ZTE CORPORATION

Appendix A

Abbreviation
Abbreviation

Full Name

A
AC

Address Control

AMPS

Advanced Mobile Phone System

AGCH

Access Grant Channel

AUC

Authentication Center

B
BCH

Broadcast Channel

BCCH

Broadcast Control Channel

BSC

Base Station Controller

BSIC

Base Station Identity Code

BSS

Base Station Subsystem

BSSGP

BSS GPRS Protocol

BTS

Base Transceiver Station

BVC

BSSGP Virtual Connection

BVCI

BSSGP Virtual Connection Identifier

C
CBCH

Cell Broadcast Channel

CCCH

Common Control Channel

CEPT

Conference of European Posts and Telecommunications

CGF

Charging Gateway Function

C/I

Carrier-To-Interference Ratio

CM

Connection Management

CS-i

Coding Scheme (GPRS)

D
DCCH

Dedicated control channel

E
ECSD

Enhanced Circuit Switched Data

Confidential and Proprietary Information of ZTE CORPORATION

79

The 2G Mobile Communications Technology Fundamentals

Abbreviation

Full Name

EDGE

Enhanced Data Rates For GSM Evolution

EGPRS

Enhanced GPRS

EIR

Equipment Identity Register

ETSI

European Telecommunications Standards Institute

F
FACCH

Fast Associated Control Channel

FCCH

Frequency Correction Channel

FDMA

Frequency Division Multiple Access

FS

Fianl Slot

G
GGSN

Gateway GPRS Support Node

GMSC

Gateway MSC

GMSK

Gaussian Minimum Shift Keying

GPRS

General Packet Radio Service

GSM

Global System for Mobile Communication

GTP

GPRS Tunnel Protocol

H
HLR

HOME Location Register

HSCSD

High-Speed Circuit Switched Data

I
IMSI

International Mobile Subscriber Identity

IP

Internet Protocol

IR

Incremental Redundancy

ISDN

Integrated Services Digital Network

ISUP
IWF

Interworking Function

L
LA

Link Adaptation

LLC

Logic Link Control

LQC

Link Quality Control

80

MAC

Medium Access Control

MAP

Mobile Application Protocol

MCS

Modulation and Coding Scheme (EDGE)

MGW

Media GateWay

MM

Mobile Management

Confidential and Proprietary Information of ZTE CORPORATION

Appendix A - Abbreviation

Abbreviation

Full Name

MS

Mobile Station

MSC

Mobile Switching Center

MTP

Message Transfer Part

N
NSEI

Network Service Entity Identifier

NSS

Network Switching Subsystem

O
OMS

Operation and Maintenance Subsystem

OSI

Open System Interconnect

P
PACCH

Packet Associated Control CHannel

PAGCH

Packet Access Grant CHannel

PBCCH

Packet Broadcast Control CHannel

PCCCH

Packet Common Control CHannel

PCH

Paging Channel

PCU

Packet Control Units

PDN

Public Data Networks

PDP

Packet Data Protocol

PDTCH

Packet Data Traffic Channel

PLMN

Public Land Mobile Network

PNCH

Packet Notification Channel

PPCH

Packet Paging Channel

PRACH

Packet Random Access Channel

PSTN

Public Switched Telephone Network

PTCCH

Packet Timing advance Control Channel

Q
QoS

Quality of Service

R
RACH

Random Access Channel

RAN

Radio Access Network

RLC

Radio Link Control

RPE-LTP

Regular Pulse Excitation-Long Term Prediction

RRM

Radio Resources Management

S
SACCH

Slow Associated Control Channel

SCCP

Signaling Connection Control Part

Confidential and Proprietary Information of ZTE CORPORATION

81

The 2G Mobile Communications Technology Fundamentals

Abbreviation

Full Name

SDCCH

Standalone Dedicated Control Channel

SGSN

Serving GPRS Support Node

SIM

Subscriber Identity Module

SMC

Short Message Center

SNDCP

Subnetwork Dependent Convergence Protocol

STP

Signaling Transfer Point

SCH

Synchronization Channel

T
TACS

Total Access Communication System

TAI

Timing Advance Index

TBF

Temporary Block Flow

TCH

Traffic Channel

TDMA

Time Division Multiple Access

TLLI

Temporary Logical Link Identity

TMSI

Temporary Mobile Subscriber Identity

TRAU

Transcoding and Rate Adaptation Unit

U
USF

Uplink State Flag

82

VLR

Visitor Location Register

VPN

Virtual Private Network

8-PSK

8 Phase Shift Keying

Confidential and Proprietary Information of ZTE CORPORATION

Appendix

Figures

Figure
Figure
Figure
Figure
Figure
Figure
Figure
Figure
Figure
Figure
Figure
Figure
Figure
Figure
Figure
Figure
Figure
Figure
Figure
Figure
Figure
Figure
Figure
Figure
Figure
Figure
Figure
Figure
Figure
Figure
Figure
Figure
Figure
Figure
Figure
Figure
Figure
Figure
Figure
Figure
Figure
Figure

1 - Evolution from 2G to 3G ................................................................ 3


2 - GSM Network Structure ................................................................. 8
3 - Relationship Between Coverage Areas in a GSM Network ...................11
4 - GSM Interfaces ...........................................................................11
5 - GSM Interface Protocol Structure ...................................................13
6 -GSM Hierarchical Frame Structure...................................................14
7 - Time-Frequency Structure of physical channel .................................15
8 - GSM Logical Channels ..................................................................16
9 - 51-Frame Channel Structure .........................................................18
10 - Half-Rate Voice Channel Structure................................................19
11 - Multiplexing of BCCH and CCCH on TSO ........................................19
12 - Multiplexing of RACH on TSO .......................................................20
13 - Multiplexing of SDCCH and SACCH on TS1 (Downlink) .....................20
14 - Multiplexing of SDCCH and SACCH on TS1 (Uplink) .........................21
15 - TCH Multiplexing........................................................................22
16 - Offset Between the Uplink and Downlink of TCH .............................22
17 - Frequency Reuse in the Cellular System ........................................25
18 - Cell in 4/12 Frequency Reuse.......................................................26
19 - Cell in 3/9 Frequency Reuse ........................................................26
20 - Discontinuous Transmission.........................................................27
21 - Interleaving Technology..............................................................29
22 - Code Elements Interleaving ........................................................31
23 - Basic Structure of Frequency Hopping ...........................................33
24 - Power Control............................................................................35
25 - Power Control Process ................................................................36
26 - Offset Between Uplink and Downlink of TCH...................................38
27 - Location Update Procedure of MS .................................................39
28 - IMSI Detach Procedure ...............................................................40
29 - Mobile-Originated Call and Called Party On-hook Procedure..............42
30 - Mobile-Terminated Call and Calling Party On-Hook Procedure ...........44
31 - Intra-Cell handover Procedure .....................................................45
32 - Inter-cell Handover Procedure .....................................................46
33- Measurement Report Procedure ....................................................46
34 - Transmit Power Control Procedure ................................................47
35 - GPRS Network Structure .............................................................52
36 - GRPS Transmission Protocol Platform ............................................54
37 - MS-SGSN .................................................................................56
38 - SGSN-HLR ................................................................................56
39 - SGSN-MSC/VLR .........................................................................57
40 - SGSN-EIR .................................................................................57
41 - SGSN-SMS-GMSC or SMS-IWMSC ................................................57
42 - GSN-GSN .................................................................................58

Confidential and Proprietary Information of ZTE CORPORATION

83

The 2G Mobile Communications Technology Fundamentals

Figure
Figure
Figure
Figure
Figure
Figure
Figure
Figure
Figure
Figure

84

43
44
45
46
47
48
49
50
51
52

- GGSN-HLR Based on MAP............................................................58


- GGSN-HLR Based on GTP and MAP ...............................................59
- 52-Multiframe Structure..............................................................59
- Mapping of PTCCH on Physical Channel .........................................63
- MAC Layer Transmission .............................................................67
- Radio Block Structure .................................................................68
- CS-1 to CS-3 Coding Procedure....................................................69
CS-4 Coding Procedure ..............................................................69
- BSSGP Layer Buffer....................................................................72
- Network-Controlled Cell Reselection Process ..................................74

Confidential and Proprietary Information of ZTE CORPORATION

Appendix

Tables

Table
Table
Table
Table
Table
Table
Table
Table
Table

1
2
3
4
5
6
7
8
9

Typographical Conventions ................................................................xi


Mouse Operation Conventions ........................................................... xii
Safety Signs.................................................................................. xiii
- Circuit Logical Channels Coding and Interweaving .............................29
- Full Rate Speech Interleaving Algorithm ...........................................31
- Packet Logical Channels.................................................................60
PDTCH Channel Coding Process ......................................................70
- GPRS Channel Coding....................................................................71
Packet Logical Channels Coding and Interleaving..............................71

Confidential and Proprietary Information of ZTE CORPORATION

85

This page is intentionally blank.

86

Confidential and Proprietary Information of ZTE CORPORATION

Appendix

Index
1G ............................................. 1
2G ..........................................1, 2
A interface .................................12
A Public Land Mobile Network .......10
Abis interface .............................12
Access grant channel ...................17
Address Control ..........................68
Authentication Centre ................8, 9
B interface .................................12
Base Station Controller ................. 9
Base Transceiver Station..............10
Baseband hopping.......................33
Block code .................................28
Broadcast channel.......................16
Broadcast channels .....................16
Broadcast control channel ............16
BSS GPRS Protocol ......................55
C interface .................................12
Cell ...........................................11
Cell reselection ...........................73
Cell Selection .............................73
Channel Allocation.......................23
Common control channel..............16
Common control channels ............16
Convolutional code ......................28
D interface .................................12
Dedicated control channel ............17
E interface .................................12
Equipment Identification Register 8, 9
European Telecommunications
Standards Institute.............. 7, 37
F interface .................................12
Fast associated control channel .....17
Fast Power Control ......................37
Frequency correction channel........16
Frequency diversity .....................34
Frequency Reuse ........................25
G interface .................................12
GGSN........................................52
GGSN-HLR .................................58
GPRS Tunnel Protocol ..................54
GSM RF .....................................55
GSN-GSN...................................57

Home Location Register .............8, 9


IMT-2000.................................... 3
Internet Protocol .........................54
Location Area .............................10
Logical Link Control .....................55
Media access control....................55
Mobile Switching Centre .............8, 9
MS-SGSN...................................56
Network Service..........................55
Packet broadcast control channel...61
Packet common control channels...60
Packet dedicated control channels .61
Packet transport channel..............61
Paging channel ...........................17
Polarization diversity ...................34
Power Control Process .................35
Radio link control ........................55
Radio Transaction Identifier ..........68
Random access channel ...............17
Rayleigh fading ...........................32
Reduced Block Serial Number .......68
Relay ........................................55
RF hopping.................................33
SGSN ........................................52
SGSN-EIR ..................................57
SGSN-HLR .................................56
SGSN-MSC/VLR ..........................56
SGSN-SMS-GMSC .......................57
Short Message Centre................... 8
Slow associated control channel ....17
Sm ...........................................12
SMS-IWMSC...............................57
Space diversity ...........................34
Stand-alone dedicated control
channel..................................17
SubNetwork Dependent Convergence
Protocol .................................54
Synchronization channel ..............16
Time diversity.............................34
Traffic channel ............................17
Transcoding and Rate Adaptation
Unit.......................................10
Transmission Control Protocol .......54

Confidential and Proprietary Information of ZTE CORPORATION

87

Type-B GPRS MSs .......................53


Type-C GPRS MSs .......................53
Um ...........................................12

88

Confidential and Proprietary Information of ZTE CORPORATION

Uplink Channel Mapping ...............62


Visitor Location Register.............8, 9
Working band .............................23

You might also like