You are on page 1of 32

Mobile Communication (ET4 153) 22/05/00

Mobile Communications (ET4 153)

3. Wireless Networking
Part 2

Jos Nijhof
Delft University of Technology

Wireless Networking mc_03b # 1

Wireless Systems and Standards (Ch. 10)


1. AMPS and ETACS
2. United States Digital Cellular (IS-54)
3. Global System for Mobile Communications (GSM)
4. CDMA Digital Cellular Standard (IS-95)
5. CT2 Standard for Cordless Telephones
6. Digital Enhanced Cordless Telecommunications (DECT)
7. PACS – Personal Access Communication System
8. Pacific Digital Cellular (PDC)
9. Personal Handyphone System (PHS)
10. U.S. PCS and ISM bands
11. U.S. Wireless Cable Television
12. Summary of Standards Throughout the World

Wireless Networking mc_03b # 2

Wireless Networking 1
Mobile Communication (ET4 153) 22/05/00

Wireless Systems and Standards (ET4 153)


• GSM
– Rappaport 10.3 / http://ccnga.uwaterloo.ca/~jscouria/GSM/index.html
– High Speed Circuit Switched Data (HSCSD)
– General Packet Radio Service (GPRS)
– Enhanced Data rates for GSM Evolution (EDGE)
• DECT
– Rappaport 10.6 /
– http://www.dect.ch
• UMTS / IMT2000
– Rappaport 9.14 /
– http://www.umts-forum.org/
– http://www.itu.int/imt/
• Wireless LANs: IEEE 802.11 / HIPERLAN / Bluetooth
• Wireless Access to the Internet
– Mobile IP
– Wireless Application Protocol (WAP)

Wireless Networking mc_03b # 3

Global System for Mobile Communications

GSM

Wireless Networking mc_03b # 4

Wireless Networking 2
Mobile Communication (ET4 153) 22/05/00

GSM – Overview
• Introduction
• Mobile Services
• System Architecture
• Radio Interface
• Protocols
• Localization and calling
• Handover
• Security
• New data services

Wireless Networking mc_03b # 5

Architecture of the GSM system


• GSM is a PLMN (Public Land Mobile Network)
– components
• MS (mobile station)
• BS (base station)
• MSC (mobile switching center)
• HLR, VLR (location registers)
– subsystems
• RSS (radio subsystem): covers all radio aspects
• NSS (network and switching subsystem): call forwarding,
handover, switching
• OSS (operation subsystem): management of the network

Wireless Networking mc_03b # 6

Wireless Networking 3
Mobile Communication (ET4 153) 22/05/00

Architecture of the GSM system


OMC, EIR,
AUC
HLR GMSC
NSS fixed network
with OSS

VLR MSC MSC


VLR

BSC BSC

RSS
BTS

Wireless Networking mc_03b # 7

GSM: elements and interfaces

BSC VLR
MS
EIR
BTS MSC
BSS
MS HLR
AUC
BSC

BTS VLR
MS
MSC OMC
Um Abis

A O
GMSC
PDN
radio interface ISDN IWF
PSTN

Wireless Networking mc_03b # 8

Wireless Networking 4
Mobile Communication (ET4 153) 22/05/00

GSM System Architecture – Radio subsystem


radio network and • Components
subsystem switching
subsystem – MS (Mobile Station)
– BSS (Base Station Subsystem):
MS MS MS consisting of
• BTS (Base Transceiver Station):
sender and receiver
Um
• BSC (Base Station Controller):
Abis
controlling several transceivers
A
BTS • Interfaces
BSC MSC – Um : radio interface
BTS – Abis : standardized, open interface
BSS with 16 kbit/s user channels
– A: standardized, open interface with
64 kbit/s user channels

Wireless Networking mc_03b # 9

GSM - System architecture: NSS


fixed Components
network and switching partner
subsystem o MSC (Mobile Switching Center):
networks o IWF (Interworking Functions)

ISDN
MSC o ISDN (Integrated Services Digital
PSTN
Network)
o PSTN (Public Switched Telephone
EIR
Network)
o PSPDN (Packet Switched Public Data
Net.)
SS7 HLR
o CSPDN (Circuit Switched Public Data
Net.)

VLR
ISDN Databases
PSTN o HLR (Home Location Register)
MSC
PSPDN o VLR (Visitor Location Register)
IWF
CSPDN o EIR (Equipment Identity Register)

Wireless Networking mc_03b # 10

Wireless Networking 5
Mobile Communication (ET4 153) 22/05/00

GSM channelization scheme


• 50-MHz total allocation
• 200-kHz carrier spacing
• 124 pairs of FDMA super channels
• Each FDMA superchannel has a data rate of 270 kbit/s
• Each FDMA superchannel provides 8 TDMA traffic channels
• Voice uses Residually Excited Linear Predictive (RELP) coding
running at 13 kbit/s
• There is a total of 8 x 124 = 992 full duplex channels

Wireless Networking mc_03b # 11

GSM - Carrier frequencies, duplexing, and TDMA frames


960 MHz
959.8 MHz 124
123 Downlink
25 MHz
⋅⋅⋅
1 2 3 4 5 6 7 8
200 kHz ⋅⋅⋅
2
935.2 MHz 1
935 MHz
Data burst, 156.25 bit periods = 15/26 ms ≈ 576.9 µs
915 MHz
914.8 MHz 124
45 MHz 123 Delay
separation 1 2 3 4 5 6 7 8
⋅⋅⋅
200 kHz ⋅⋅⋅ Uplink
2
890.2 MHz 1
890 MHz

Wireless Networking mc_03b # 12

Wireless Networking 6
Mobile Communication (ET4 153) 22/05/00

GSM frequency / time slots


Downlink
960 MHz 124 channels
Frequency

12

935 MHz 1
Time
Uplink
915 MHz 124 channels
Frequency

12

890 MHz 1
Time

Wireless Networking mc_03b # 13

GSM - Frame hierarchy


Hyperframe = 2048 superframes = 2,715,648 frames = 3h 28m 53s 760ms
0 1 2 2047

Superframe = 26 x 51 = 1326 frames = 2.16s


Logical structure, serves
0 1 2 25 as the basis for of
organization and for setting
0 1 2 50 timers for cycling certain
functions such as slow
frequency hopping and
26 multiframe = 120 ms 51 multiframe = 235 ms setting frame numbering
for security and other
0 1 2 25 or 0 1 2 50 purposes

TDMA frame = 120/26 ms = 4.615 ms


0 1 2 3 4 5 6 7

Wireless Networking mc_03b # 14

Wireless Networking 7
Mobile Communication (ET4 153) 22/05/00

GSM TDMA frame, slots, and bursts


960
935 – 960 MHz
)
Hz
downlink
124 channels (200 kHz)
(M

935
cy

915
en

890 - 915 MHz


qu

uplink
124 channels (200 kHz)
fre

890

time
GSM TDMA frame
1 2 3 4 5 6 7 8
4.165 ms
GSM time-slot (normal burst)
guard user user guard
tail S Training S tail
space data data space
3 57 1 26 1 57 3

546.5 µs
577 µs

Wireless Networking mc_03b # 15

GSM – Logical channels and frame hierarchy

Physical channel: slot, repeated every 4.615 ms

Example:
Logical channel C1: takes up every 4th slot
Logical channel C2: takes up every 2nd slot

C1 and C2 can use the same physical channel:

C1 C2 C2 C1 C2 C2 C1

Wireless Networking mc_03b # 16

Wireless Networking 8
Mobile Communication (ET4 153) 22/05/00

GSM – Frame hierarchy


hyperframe
0 1 2 … 2045 2046 2047 3 h 28 min 53.76 s

superframe
0 1 2
… 48 49 50

0 1
… 24 25
6.12 s

multiframe
0 1 … 24 25 120 ms

0 1 2 … 48 49 50 235.4 ms

frame
0 1 … 6 7 4.615 ms

burst 577 µs

Wireless Networking mc_03b # 17

GSM – Classification of logical Channels


Traffic Channels Signalling Channels
Unidirectional Unidirectional,
Bidirectional Bidirectional
Downlink Down- or Uplink
Traffic Channel Broadcast Channel Common Control Dedicated Control
(TCH) (BCH) Channel (CCCH) Channel (DCCH)
Standalone Dedicated
Broadcast Control Random Access Control Channel
Full-Rate Channel
Channel (BCCH) Channel (RACH) (SDCCH)
TCH/F
22.8 kbit/s
Associated Control
Synchronization Access Grant Channel (ACCH)
Channel (SCH) Channel (AGCH)
Slow Associated Control
Half-Rate Channel Channel (SACCH)
TCH/H
11.4 kbit/s Frequency Correction Paging Channel
Channel (FCH) (PCH) Fast Associated Control
Channel (FACCH)

Wireless Networking mc_03b # 18

Wireless Networking 9
Mobile Communication (ET4 153) 22/05/00

Logical Channels
• Traffic Channel (TCH)
– full-rate TCH (TCH/F) – 22.8 kbit/s
– half-rate TCH (TCH/H) – 11.4 kbit/s
• Control Channels (CCH)
– Broadcast Channel (BCH)
• Broadcast Control Channel (BCCH)
• Frequency Correction Channel (FCCH)
• Synchronization Channel (SCH)
– Common Control Channel (CCCH)
• Random Access Channel (RACH)
• Access Grant Channel (AGCH)
• Paging Channel (PCH)
– Dedicated/Associated Control Channel (DCCH/ACCH)
• Stand-alone Dedicated Control Channel (SDCCH)
• Slow Associated Control Channel (SACCH)
• Fast Associated Control Channel

Wireless Networking mc_03b # 19

GSM – Traffic Channels (TCH)


• Full-Rate TCH (TCH/F) – 1 TS/Frame – 22.8 kbit/s
– Full-Rate Speech Channel (TCH/FS)
– Full-Rate Data Channel for 9.6 kbit/s (TCH/F9.6)
– Full-Rate Data Channel for 4.8 kbit/s (TCH/F4.8)
– Full-Rate Data Channel for 2.4 kbit/s (TCH/F2.4)
– Full-Rate Data Channel for 14.4 kbit/s (TCH/F14.4)
• Half-Rate TCH (TCH/H) 1 TS/2 Frames – 11.4 kbit/s
– Half-Rate Speech Channel (TCH/HS)
– Half-Rate Data Channel for 4.8 kbit/s (TCH/H4.8)
– Half-Rate Data Channel for 2.4 kbit/s (TCH/H2.4)

Wireless Networking mc_03b # 20

Wireless Networking 10
Mobile Communication (ET4 153) 22/05/00

GSM - Signalling
• Two types of signalling channels:
– Signalling associated with a call
– Signalling outside a call

Wireless Networking mc_03b # 21

GSM/DCS signalling
• Signalling associated with a call
– Slow Associated Control Channel (SACCH)
• used for sending radio measurements for handover decisions and for
other nonurgent procedures
– about two messages per second can be sent in each direction

TTTTTTTTTTTTSTTTTTTTTTTTT x
1 12 13 26

– Fast Associated Control Channel (FACCH)


• used for call establishment, authentication of the SIM, handover
commands, and other high urgency messages
• uses the traffic channel itself before the call is set up and after it is
completed
• while the call is in progress, the FACCH “steals” bits from the voice or
data traffic to perform functions such as handover commands.

Wireless Networking mc_03b # 22

Wireless Networking 11
Mobile Communication (ET4 153) 22/05/00

GSM/DCS signalling
• Signalling outside a call
– The base station sends synchronization bursts periodically to the mobiles to
• perform frame synchronization
• fine-tune the frequency
– The base station sends its ID and parameters periodically on a Broadcast
Control Channel (BCCH)
– Authentication and other call setup signals are sent on a Stand-alone
Dedicated Control Channel (SDCCH)
– A request for a channel by a mobile is sent on a Random Access Channel
(RACH)
– An access grant of a channel is sent to a mobile on a Access Grant
Channel
– The system initiates a call to a mobile on a Paging Channel (PCH)

Wireless Networking mc_03b # 23

GSM – Common Control Channel (CCH)


• Random Access Channel (RACH)
– occurs only at the uplink
– allows MS, using S-ALOHA, to request channel capacity from the BS to
establish a connection
• Access Grant Channel (AGCH)
– occurs only at the downlink
– used by the BS to respond to a message received over the RACH
– tells the MS that it can use a TCH or SDCCH for further connection setup
• Paging Channel (PCH)
– occurs only at the downlink
– used for selective addressing of a called MS during a connect request from
the network (incomming call)
– may be used to provide cell broadcast text messages to all subscribers within
a cell

Wireless Networking mc_03b # 24

Wireless Networking 12
Mobile Communication (ET4 153) 22/05/00

GSM – Broadcast channel (BCC)


• Broadcast Control Channel (BCCH)
– used by a BTS to signal information to all MSs within a cell
• cell indentifier
• options available within this cell
• frequencies available in this cell and in neighbouring cells
• Synchrinization Channel (SCH)
– used for transmitting synchronization bursts to a MS to allow it
to time-synchronize
• Frequency Correction Channel (FCCH)
– used for transmitting a frequency correction burst to the MS for
possible correction of the transmitting frequency

Wireless Networking mc_03b # 25

Dedicated/Associated Control Channel (D/ACCH)


• Stand-Alone Dedicated Control Channel (SDCCH)
– used when a traffic channel has not been assigned
– low data rate (782 bit/s)
– authentication, registration, or other data needed for setting up a TCH.
• Slow Associated Dedicated Control Channel (SACCH)
– Always allocated parallel to a TCH or an SDCCH
– data rate: 383 bit/s
– used to transmit system information from the network to a MS, and
measurement data on signal strength and receive quality from the MS to the
network
• Fast Associated Dedicated Control Channel (FACCH)
– uses time slots which are otherwise used by the TCH
– data rate: 4600 or 9200 bit/s
– used for urgent messages (e.g., handover request)

Wireless Networking mc_03b # 26

Wireless Networking 13
Mobile Communication (ET4 153) 22/05/00

How do you
know I am
here?

Wireless Networking mc_03b # 27

GSM - Paging
• One of the core functions of a cellular system is to locate
the mobile station at any point in time. There are three
options:
– Page to a single cell: requires that the mobile stations update
the network every time it changes cells, thereby creating much
updating traffic
– Page to the whole network: eliminates updating traffic, but
creates much paging traffic since the network does not know
where the mobile is and must send the page to the whole
network
– Page to “location areas” (method used by GSM): defines
location areas, for example a group of cells served by a single
Mobile Switching Center (MSC).

Wireless Networking mc_03b # 28

Wireless Networking 14
Mobile Communication (ET4 153) 22/05/00

GSM - Location Areas

Location Area

Wireless Networking mc_03b # 29

GSM - Location Areas

Location Area

Location Update

Wireless Networking mc_03b # 30

Wireless Networking 15
Mobile Communication (ET4 153) 22/05/00

GSM - Location Areas

Signaling Total
traffic

Paging Requests Location Updates

Size Location Area

Wireless Networking mc_03b # 31

GSM - Location Areas and Location Updates

Location Area Code: 26


26 009
26 010 26 008

26 073 Location Area Code: 27


27003

Location Update

Wireless Networking mc_03b # 32

Wireless Networking 16
Mobile Communication (ET4 153) 22/05/00

GSM - Mobile Terminated Call


4
1: calling a GSM subscriber HLR VLR
5
2: forwarding call to GMSC 1 8 9
3 6
3: signal call setup to HLR 14 15
2 7
4, 5: request MSRN from VLR PSTN GMSC MSC

6: forward responsible MSC to 10 10 10


13
GMSC 16
7: forward call to current MSC BSS BSS BSS
8, 9: get current status of MS 11 11 11
10,11: paging of MS
11 12
12,13: MS answers
17
14,15: security checks
MS
16,17: set up connection

Wireless Networking mc_03b # 33

GSM - Mobile Originated Call

1,2: connection request VLR


3,4: security check
3 4
5-8: check resources
6 5
(free circuit) PSTN GMSC MSC
7 8
9,10: set up call
2 9

BSS

1 10

MS

Wireless Networking mc_03b # 34

Wireless Networking 17
Mobile Communication (ET4 153) 22/05/00

GSM – From speech input to speech output


Speech Speech

Digitizing and Source


source coding decoding

Channel Channel
coding decoding

Interleaving De-interleaving

Burst Burst
formatting formatting

Ciphering De-ciphering

Radio channel
Modulation Demodulation

Wireless Networking mc_03b # 35

GSM – Speech coding


• Regular Pulse Excitation – Long-Term Prediction –
Linear Predictive Coder (RPE-LTP)
• Coder provides 260 bits for each 20 ms block of speech
⇒ bit rate: 13 kbit/s
• Voice Activity Detector (VAD)
• Discontinuous Transmission Mode (DTX)
• Comfort Noise Subsystem (CNS)

Wireless Networking mc_03b # 36

Wireless Networking 18
Mobile Communication (ET4 153) 22/05/00

GSM – Speech functions at the transmitter

Speech coder VAD

DTX
Voice, 13 bit Voice
Speech coder Discontinuous
8000 samples/s Frame
Transmission

Comfort Noise SID


Synthesizer Frame

Wireless Networking mc_03b # 37

GSM – Speech functions at the receiver

BFI Speech coder

DTX
Voice Voice Voice, 13 bit
Discontinuous
Frame Decoder 8000 samples/s
Transmission

SID Comfort Noise


Frame Synthesizer

Wireless Networking mc_03b # 38

Wireless Networking 19
Mobile Communication (ET4 153) 22/05/00

GSM – speech functions


• VAD = Voice Activity Detector
• SID = Silence Descriptor
• BFI = Bad Frame Indication
• DTX = Discontinuous Transmission

Wireless Networking mc_03b # 39

GSM - Interleaving: spreading and merging

Interleaving depth = 3

Spreading

Merging

Wireless Networking mc_03b # 40

Wireless Networking 20
Mobile Communication (ET4 153) 22/05/00

Distributing bit errors through deinterleaving

error burst

Interleaving Signal

Despreaded Signal

Wireless Networking mc_03b # 41

GSM - Security in GSM (1)


• Security services
– access control/authentication
• user Õ SIM : secret PIN (personal identification number)
• SIM Õ network: challenge response method
– confidentiality
• voice and signaling encrypted on the wireless link (after
successful authentication)
– anonymity
• temporary identity TMSI
(Temporary Mobile Subscriber Identity)
• newly assigned at each new location update (LUP)
• encrypted transmission

4.32.1
Wireless Networking mc_03b # 42

Wireless Networking 21
Mobile Communication (ET4 153) 22/05/00

GSM - Security in GSM (2)


• 3 algorithms specified in GSM
– A3 for authentication (“secret”, open interface)
– A5 for encryption (standardized)
– A8 for key generation (“secret”, open interface)

Wireless Networking mc_03b # 43

GSM security - the authentication process

Ki: user Random Random Ki: stored


secret number number in HLR
key generator
(in SIM)

A3 ciphering A3 ciphering
algorithm algorithm

Yes/no
Result Match?

Mobile Network

Wireless Networking mc_03b # 44

Wireless Networking 22
Mobile Communication (ET4 153) 22/05/00

GSM security - the encryption process

Ki: Random RAND Ki:


(in SIM) number generator in HLR

A8 ciphering algorithm A8 ciphering algorithm

Kc used for Frame Frame Kc used for


each connection number number each connection

A5 ciphering algorithm A5 ciphering algorithm

Exclusive Exclusive
Data Data
OR OR
Mobile Network

Wireless Networking mc_03b # 45

The evolution path for GSM


IMT2000
GSM Phase 2+
EDGE
EDGE WCDMA
WCDMA

GPRS Existing New or


Functionality

115.2 kbit/s HSCSD spectrum “refarmed”


EFR 57.6 kbit/s spectrum

CAMEL
CTS
(IN)
ASCI n
u titoion
Circuit
Circuitdata ol lu
eevvo
data
9.6
9.6kbit/s
kbit/s MM
SMS
SMS
GGSS

Speech
Speech

2G 2.5G 3G

Wireless Networking mc_03b # 46

Wireless Networking 23
Mobile Communication (ET4 153) 22/05/00

GSM Phase 2+ Service Enhancements


• High Speed Circuit Switched Data (HSCSD): bearer services up to
64 kbit/s using multi-slot transmissions
• Enhanced full rate codec
• Customized Applications for Mobile Enhanced Logic (CAMEL
Intelligent Network facilities), intelligent roaming
• Advanced Speech Call Items (ASCI services): PMR services such
as broadcast calls, group calls with fast call set-up (push-to-talk
button), call priority levels, emergency calls.
• Support for optimal routing

Wireless Networking mc_03b # 47

GSM – High Speed Circuit Switched Data (HSCSD)


• Data transmission standardized with only 9.6 kbit/s
– advanced coding allows 14,4 kbit/s (TCH/F14.4)
– not enough for Internet and multimedia applications
• HSCSD (High-Speed Circuit Switched Data)
– already standardized
– bundling of several time-slots to get higher
AIUR (Air Interface User Rate)
(e.g., 57.6 kbit/s using 4 slots, 14.4 each)
– advantages: ready to use, constant quality, simple, requires
software updates in an MS and MSC only
– disadvantages: channels blocked for voice transmission, still
connection-oriented – inefficient for computer data traffic

Wireless Networking mc_03b # 48

Wireless Networking 24
Mobile Communication (ET4 153) 22/05/00

GSM – High Speed Circuit Switched Data (HSCSD)


Available data rates for HSCSD in GSM

AIUR [ kbit/s ] TCH/F4.8 TCH/F9.6 TCH/F14.4


4.8 1
9.6 2 1
14.4 3 1
19.2 4 2
28.8 3 2
38.4 4
43.2 3
57.6 4

AIUR = Air Interface User Rate


TCH/Fx = Full-rate Traffic Channel with data rate x kbit/s

Wireless Networking mc_03b # 49

GSM - General Packet Radio Service (GPRS)


• Packet-switching technique that uses reduced channel
coding to achieve a net bit-rate of 14.4 kbit/s per timeslot,
leading to a maximum throughput rate of 115 kbit/s (8
timeslots)
• Suited to handle bursty traffic (packet switching)
• GPRS only requires a channel when data is being sent.
Allows channels to be shared between several users
simultaneously.
• standardization 1998, introduction 2000
• advantage: one step towards UMTS, more flexible
• disadvantage: more investment needed
– new network elements: GPRS support nodes (GSN)

Wireless Networking mc_03b # 50

Wireless Networking 25
Mobile Communication (ET4 153) 22/05/00

Enhanced Data Rate for Global Evolution (EDGE)


• Common factor for both IS-136 and GSM
• Work on the standard is still ongoing (TIA, ETSI)
• Uses existing GSM / IS-136 radiobands
• Data rates: 10 – 480 kbit/s
• Supports both circuit- and packet-switched services (real-
time and non-real-time services)

Wireless Networking mc_03b # 51

Mobile Communication (ET4-153)

Next week:
DECT
UMTS
IMT2000

Wireless Networking mc_03b # 52

Wireless Networking 26
Mobile Communication (ET4 153) 22/05/00

GSM - Appendix
• GSM Numbers

Wireless Networking mc_03b # 53

Overview of addresses and pertinent databases


LMSI MSRN IMSI TMSI MSISDN LAI

MSC
(SPC) VLR
IMEI
(SPC)

EIR BTS
8765
6789
1234
(BSIC)
Equipment SIM Cell
(IMEI) (CI, LAI)
Subscriber
IMSI MSISDN MSRN (IMSI,
MSISDN
TMSI, MSRN) IMSI RAND SRES Ki Kc

HLR AUC
(SPC)

Wireless Networking mc_03b # 54

Wireless Networking 27
Mobile Communication (ET4 153) 22/05/00

Abbreviations
• MSISDN Mobile Subscriber ISDN
• SIM Subscriber Identity Module
• IMEI International Mobile Equipment Identity
• IMSI International Mobile Subscriber Identity
• MSRN Mobile Station Roaming Number
• LMSI Local Mobile Station Identity
• TMSI Temporary Mobile Subscriber Identity
• LAI Location Area Identity
• RAND Random Number
• SRES Authenticator
• Ki, Kc Authentication, Transmission Keys
• BSIC Base Station Identity Code
• CI Cell Identity
• SPC Signalling Point Code

Wireless Networking mc_03b # 55

GSM numbers: IMEI


IMEI: International Mobile Station Equipment Identity
• uniquely identifies mobile equipment internationally
• allocated by the equipment manufacturer and registered by the
network operator who stores it in the Equipment Identity Register
(EIR)
• purpose: to recognize obsolete, stolen, or nonfunctional
equipment.
6 6 6 1 (decimal digits)
TAC FAC SNR
Type Final Serial
Approval Assembly Number
Code Code

(Centrally (Assigned
assigned) by
manufacturer)

Wireless Networking mc_03b # 56

Wireless Networking 28
Mobile Communication (ET4 153) 22/05/00

GSM numbers: IMSI


IMSI: International Mobile Subscriber Identity
• received by subscriber when registering for service with a mobile
network operator
• stored in the Subscriber Identity Module (SIM)
• mobile station can only be operated if a valid IMSI is inserted into
equipment with a valid IMEI

3 2 ≤ 10 (decimal digits)
MMC MNC MSIN
Mobile Mobile Mobile
Country Network Subscriber
Code Code Identification
Number

(Internationally National Mobile Subscriber Identity


standardized) (assigned by the operator of the home PLMN)

Wireless Networking mc_03b # 57

GSM numbers: MSISDN


MSISDN: Mobile Subscriber ISDN Number
• the “real telephone number” of a mobile station
• a subscriber (SIM) can hold several MSISDNs for selection of
different services (voice, data, fax, etc.)

1-3 2-3 ≤ 10 (decimal digits)


CC NDC SN
Country National Subscriber
Code Destination Number
Code

(ITU-T E.164) Assigned by the national operator or regulatory


administration

Wireless Networking mc_03b # 58

Wireless Networking 29
Mobile Communication (ET4 153) 22/05/00

GSM numbers: MSRN


MSRN: Mobile Station Roaming Number
• temporary location-dependent ISDN number
• assigned by the locally responsible VLR to each mobile station in its
area
• calls are routed to the MS by using the MSRN
• on request the MSRN is passed from the HLR to the GMSC
1-3 2-3 ≤ 10 (decimal digits)
CC NDC SN
Country National Subscriber
Code Destination Number
Code

determined by the visited assigned by the current VLR,


network and depend on the SN is unique within the mobile
current location network

Wireless Networking mc_03b # 59

GSM numbers: LAI


LAI: Local Area ID
• each Location Area (LA) of a PLMN has its own identifier
• the LAI is structured hierarchically and internationally unique

1-3 2-3 ≤5 (decimal digits)


CC MNC LAC
Country Mobile Location or maximum twice
Code Network Area 8 bits. coded in
Code Code hexadecimal

internationally operator-
standardized dependent
part part

Wireless Networking mc_03b # 60

Wireless Networking 30
Mobile Communication (ET4 153) 22/05/00

GSM numbers: TMSI


TMSI: Temporary Mobile Subscriber Identity
• has only local significance in the area handled by the VLR
• used in place of the IMSI for the definite identification and
addressing of the mobile station (nobody can determine the identity
of the subscriber by listening to the radio channel)
• the MS stores the TMSI on the SIM card
• the TMSI is stored on the network side only in the VLR and is not
passed to the HLR
• format: operator specific, can consist of up to 4 × 8 bits
• together with the current location area, a TMSI allows a subscriber
to be identified uniquely (LAI + TMSI)

Wireless Networking mc_03b # 61

GSM numbers: LMSI


LMSI: Local Mobile Station Identity
• additional searching key to accelerate database access
• assigned when the mobile station registers with the VLR and is also
sent to the HLR
• each time messages are sent to the VLR concerning a mobile
station, the LMSI is added, so the VLR can use the short searching
key for transactions concerning the MS
• format: operator-specific, four octets

Wireless Networking mc_03b # 62

Wireless Networking 31
Mobile Communication (ET4 153) 22/05/00

GSM numbers: CI, BSIC, SPC


CI: Cell Identifier
• to identify individual cells uniquely
• Global Cell Identity (GCI = LAI + CI)

BSIC: Base Transceiver Station Identity Code


• used to distinguish neighboring base stations
• two components:
• Network Color Code (NCC)
• Base Station Color Code (BCC)
• directly adjacent PLMN and BS must have different color codes

Wireless Networking mc_03b # 63

Wireless Networking 32

You might also like