Professional Documents
Culture Documents
3. Wireless Networking
Part 2
Jos Nijhof
Delft University of Technology
Wireless Networking 1
Mobile Communication (ET4 153) 22/05/00
GSM
Wireless Networking 2
Mobile Communication (ET4 153) 22/05/00
GSM – Overview
• Introduction
• Mobile Services
• System Architecture
• Radio Interface
• Protocols
• Localization and calling
• Handover
• Security
• New data services
Wireless Networking 3
Mobile Communication (ET4 153) 22/05/00
BSC BSC
RSS
BTS
BSC VLR
MS
EIR
BTS MSC
BSS
MS HLR
AUC
BSC
BTS VLR
MS
MSC OMC
Um Abis
A O
GMSC
PDN
radio interface ISDN IWF
PSTN
Wireless Networking 4
Mobile Communication (ET4 153) 22/05/00
ISDN
MSC o ISDN (Integrated Services Digital
PSTN
Network)
o PSTN (Public Switched Telephone
EIR
Network)
o PSPDN (Packet Switched Public Data
Net.)
SS7 HLR
o CSPDN (Circuit Switched Public Data
Net.)
VLR
ISDN Databases
PSTN o HLR (Home Location Register)
MSC
PSPDN o VLR (Visitor Location Register)
IWF
CSPDN o EIR (Equipment Identity Register)
Wireless Networking 5
Mobile Communication (ET4 153) 22/05/00
Wireless Networking 6
Mobile Communication (ET4 153) 22/05/00
12
935 MHz 1
Time
Uplink
915 MHz 124 channels
Frequency
12
890 MHz 1
Time
Wireless Networking 7
Mobile Communication (ET4 153) 22/05/00
935
cy
915
en
uplink
124 channels (200 kHz)
fre
890
time
GSM TDMA frame
1 2 3 4 5 6 7 8
4.165 ms
GSM time-slot (normal burst)
guard user user guard
tail S Training S tail
space data data space
3 57 1 26 1 57 3
546.5 µs
577 µs
Example:
Logical channel C1: takes up every 4th slot
Logical channel C2: takes up every 2nd slot
C1 C2 C2 C1 C2 C2 C1
Wireless Networking 8
Mobile Communication (ET4 153) 22/05/00
superframe
0 1 2
… 48 49 50
0 1
… 24 25
6.12 s
multiframe
0 1 … 24 25 120 ms
0 1 2 … 48 49 50 235.4 ms
frame
0 1 … 6 7 4.615 ms
burst 577 µs
Wireless Networking 9
Mobile Communication (ET4 153) 22/05/00
Logical Channels
• Traffic Channel (TCH)
– full-rate TCH (TCH/F) – 22.8 kbit/s
– half-rate TCH (TCH/H) – 11.4 kbit/s
• Control Channels (CCH)
– Broadcast Channel (BCH)
• Broadcast Control Channel (BCCH)
• Frequency Correction Channel (FCCH)
• Synchronization Channel (SCH)
– Common Control Channel (CCCH)
• Random Access Channel (RACH)
• Access Grant Channel (AGCH)
• Paging Channel (PCH)
– Dedicated/Associated Control Channel (DCCH/ACCH)
• Stand-alone Dedicated Control Channel (SDCCH)
• Slow Associated Control Channel (SACCH)
• Fast Associated Control Channel
Wireless Networking 10
Mobile Communication (ET4 153) 22/05/00
GSM - Signalling
• Two types of signalling channels:
– Signalling associated with a call
– Signalling outside a call
GSM/DCS signalling
• Signalling associated with a call
– Slow Associated Control Channel (SACCH)
• used for sending radio measurements for handover decisions and for
other nonurgent procedures
– about two messages per second can be sent in each direction
TTTTTTTTTTTTSTTTTTTTTTTTT x
1 12 13 26
Wireless Networking 11
Mobile Communication (ET4 153) 22/05/00
GSM/DCS signalling
• Signalling outside a call
– The base station sends synchronization bursts periodically to the mobiles to
• perform frame synchronization
• fine-tune the frequency
– The base station sends its ID and parameters periodically on a Broadcast
Control Channel (BCCH)
– Authentication and other call setup signals are sent on a Stand-alone
Dedicated Control Channel (SDCCH)
– A request for a channel by a mobile is sent on a Random Access Channel
(RACH)
– An access grant of a channel is sent to a mobile on a Access Grant
Channel
– The system initiates a call to a mobile on a Paging Channel (PCH)
Wireless Networking 12
Mobile Communication (ET4 153) 22/05/00
Wireless Networking 13
Mobile Communication (ET4 153) 22/05/00
How do you
know I am
here?
GSM - Paging
• One of the core functions of a cellular system is to locate
the mobile station at any point in time. There are three
options:
– Page to a single cell: requires that the mobile stations update
the network every time it changes cells, thereby creating much
updating traffic
– Page to the whole network: eliminates updating traffic, but
creates much paging traffic since the network does not know
where the mobile is and must send the page to the whole
network
– Page to “location areas” (method used by GSM): defines
location areas, for example a group of cells served by a single
Mobile Switching Center (MSC).
Wireless Networking 14
Mobile Communication (ET4 153) 22/05/00
Location Area
Location Area
Location Update
Wireless Networking 15
Mobile Communication (ET4 153) 22/05/00
Signaling Total
traffic
Location Update
Wireless Networking 16
Mobile Communication (ET4 153) 22/05/00
BSS
1 10
MS
Wireless Networking 17
Mobile Communication (ET4 153) 22/05/00
Channel Channel
coding decoding
Interleaving De-interleaving
Burst Burst
formatting formatting
Ciphering De-ciphering
Radio channel
Modulation Demodulation
Wireless Networking 18
Mobile Communication (ET4 153) 22/05/00
DTX
Voice, 13 bit Voice
Speech coder Discontinuous
8000 samples/s Frame
Transmission
DTX
Voice Voice Voice, 13 bit
Discontinuous
Frame Decoder 8000 samples/s
Transmission
Wireless Networking 19
Mobile Communication (ET4 153) 22/05/00
Interleaving depth = 3
Spreading
Merging
Wireless Networking 20
Mobile Communication (ET4 153) 22/05/00
error burst
Interleaving Signal
Despreaded Signal
4.32.1
Wireless Networking mc_03b # 42
Wireless Networking 21
Mobile Communication (ET4 153) 22/05/00
A3 ciphering A3 ciphering
algorithm algorithm
Yes/no
Result Match?
Mobile Network
Wireless Networking 22
Mobile Communication (ET4 153) 22/05/00
Exclusive Exclusive
Data Data
OR OR
Mobile Network
CAMEL
CTS
(IN)
ASCI n
u titoion
Circuit
Circuitdata ol lu
eevvo
data
9.6
9.6kbit/s
kbit/s MM
SMS
SMS
GGSS
Speech
Speech
2G 2.5G 3G
Wireless Networking 23
Mobile Communication (ET4 153) 22/05/00
Wireless Networking 24
Mobile Communication (ET4 153) 22/05/00
Wireless Networking 25
Mobile Communication (ET4 153) 22/05/00
Next week:
DECT
UMTS
IMT2000
Wireless Networking 26
Mobile Communication (ET4 153) 22/05/00
GSM - Appendix
• GSM Numbers
MSC
(SPC) VLR
IMEI
(SPC)
EIR BTS
8765
6789
1234
(BSIC)
Equipment SIM Cell
(IMEI) (CI, LAI)
Subscriber
IMSI MSISDN MSRN (IMSI,
MSISDN
TMSI, MSRN) IMSI RAND SRES Ki Kc
HLR AUC
(SPC)
Wireless Networking 27
Mobile Communication (ET4 153) 22/05/00
Abbreviations
• MSISDN Mobile Subscriber ISDN
• SIM Subscriber Identity Module
• IMEI International Mobile Equipment Identity
• IMSI International Mobile Subscriber Identity
• MSRN Mobile Station Roaming Number
• LMSI Local Mobile Station Identity
• TMSI Temporary Mobile Subscriber Identity
• LAI Location Area Identity
• RAND Random Number
• SRES Authenticator
• Ki, Kc Authentication, Transmission Keys
• BSIC Base Station Identity Code
• CI Cell Identity
• SPC Signalling Point Code
(Centrally (Assigned
assigned) by
manufacturer)
Wireless Networking 28
Mobile Communication (ET4 153) 22/05/00
3 2 ≤ 10 (decimal digits)
MMC MNC MSIN
Mobile Mobile Mobile
Country Network Subscriber
Code Code Identification
Number
Wireless Networking 29
Mobile Communication (ET4 153) 22/05/00
internationally operator-
standardized dependent
part part
Wireless Networking 30
Mobile Communication (ET4 153) 22/05/00
Wireless Networking 31
Mobile Communication (ET4 153) 22/05/00
Wireless Networking 32