SJB Institute of Technology: Department of Electronics & Communication Engineering

||Jai Sri Gurudev ||
Sri Adichunchanagiri Shikshana Trust®
SJB INSTITUTE OF TECHNOLOGY

Accredited by NBA & NAAC with ‘A’ Grade
No. 67, BGS Health & Education City, Dr. Vishnuvardhan Road
Kengeri, Bangalore – 560 060
Department of Electronics & Communication

Engineering
Wireless and Cellular Communication [18EC81]
MODULE - 2
Notes (as per VTU Syllabus)
VIII SEMESTER – B. E
Academic Year: 2022 – 2023 (EVEN)
Course Coordinator : Jyothi H
Designation : Assistant Professor

Wireless and Cellular communication 18EC81
Syllabus
WIRELESS AND CELLULAR COMMUNICATION
[As per Choice Based Credit System (CBCS) scheme]
(Effective from the academic year 2016 -2017)
SEMESTER – VI
Subject Code: 18EC81 IA Marks: 40
Number of Lecture Hours/Week: 3 Exam Marks: 60
Total Number of Lecture Hours: 40 Exam Hours 03
CREDITS – 03
Course objectives: This course will enable students to

• Understand the concepts of propagation over wireless channels from a physics
standpoint
• Application of Communication theory both Physical and networking to understand
GSM systems that handle mobile telephony.
CDMA systems that handle mobile telephony.
LTE-4G systems
Module – 1 : Mobile Radio Propagation

Large Scale Path Loss - Free Space Propagation Model, Relating Power to Electric Field,
Three Basic Propagation Mechanisms – Reflection (Ground Reflection) , Diffraction,
Scattering, Practical Link Budget
Fading and Multipath – Broadband wireless channel, Delay Spread and Coherence
Bandwidth, Doppler Spread and Coherence Time, Angular spread and Coherence Distance,
Statistical Channel Model of a Broadband Fading Channel.
The Cellular Concept – Cellular Concept , Analysis of Cellular Systems, Sectoring.

8 Hours
Module – 2 :GSM and TDMA Technology
GSM System overview – Introduction, GSM Network and System Architecture, GSM
Channel Concept.
GSM System Operations – GSM Identities, System Operations –Traffic cases, GSM
Infrastructure Communications (Um Interface) 8 Hours
Module – 3 :CDMA Technology
CDMA System Overview – Introduction, CDMA Network and System Architecture

CDMA Basics – CDMA Channel Concepts, CDMA System (Layer 3) operations, 3G
CDMA 8 Hours
Module – 4
Key Enablers for LTE 4G –

Dept. of ECE/SJBIT Page 2
OFDM, SC-FDE, SC-FDMA, Channel Dependant Multiuser Resource Scheduling, Multi-

Antenna Techniques, Flat IP Architecture, LTE Network Architecture.
Multi-Carrier Modulation – Multicarrier concepts, OFDM Basics, OFDM in LTE, Timing

and Frequency Synchronization, Peak to Average Ration, SC-Frequency Domain
Equalization, Computational Complexity Advantage of OFDM and SC-FDE. 8 Hours
Module – 5
OFDMA and SC-FDMA – Multiple Access for OFDM Systems, OFDMA, SCFDMA,
Multiuser Diversity and Opportunistic Scheduling, OFDMA and SC-FDMA in LTE,
OFDMA system Design Considerations.
The LTE Standard – Introduction to LTE and Hierarchical Channel Structure of LTE,
Downlink OFDMA Radio Resources, Uplink SC-FDMA Radio Resources. 8 Hours
Course outcomes:
The students should be able to:

After studying this course, students will be able to:
• Explain concepts of propagation mechanisms like Reflection, Diffraction, Scattering
in wireless channels.
• Develop a scheme for idle mode, call set up, call progress handling and call tear down
in a GSM cellular network.
• Develop a scheme for idle mode, call set up, call progress handling and call tear down
in a CDMA cellular network.
• Understand the Basic operations of Air interface in a LTE 4G system.
Question paper pattern:

The question paper will have TEN questions.
There will be TWO questions from each module.
Each question will have questions covering all the topics under a module. The students will
have to answer FIVE full questions, selecting ONE full question from each module.
Text Books:
1. “Fundamentals of LTE” Arunabha Ghosh, Jan Zhang, Jefferey Andrews, Riaz Mohammed,
Pearson education (Formerly Prentice Hall, Communications Engg and Emerging
Technologies),
ISBN-13: 978-0-13-703311-9.
2. “Introduction to Wireless Telecommunications Systems and Networks”, Gary Mullet, First

Edition, Cengage Learning India Pvt Ltd., 2006, ISBN - 13: 978-81-315-0559-5.
Reference Books:
1. “Wireless Communications: Principles and Practice” Theodore Rappaport, 2nd Edition,
Prentice Hall Communications Engineering and Emerging Technologies Series, 2002, ISBN
0-13-042232-0.
2. LTE for UMTS Evolution to LTE-Advanced’ Harri Holma and Antti Toskala, Second
Edition -2011, John Wiley & Sons, Ltd. Print ISBN: 9780470660003.

INDEX SHEET
SL. PAGE
TOPIC
NO. NO.
VTU Syllabus 2
MODULE – 2
1 ❖ GSM services offered and GSM Radio frequency carriers 4
2 ❖ GSM Network and System Architecture 6
3 ❖ GSM Network Interfaces and protocols and GSM signaling model 11
4 ❖ GSM Channel Concept( logic channels, traffic and control channels) 12
5 ❖ Speech processing in GSM and GSM Hyper frame structure 13
6 ❖ GSM Identities and GSM system Operations 15
7 ❖ GSM Handoff procedures and location updating 15
8 ❖ GSM Infrastructure communication 19
9 Question Bank. 20
Exercise / Additional Questions (Problems) / Assignment Questions /

10 21
University Questions.

MODULE - 2
Contents:
PART-A
GSM System overview
❖ Introduction to GSM
❖ GSM services offered
❖ GSM Radio frequency carriers
❖ GSM Network and System Architecture
❖ GSM Network Interfaces and protocols
❖ GSM signaling model
❖ GSM Channel Concept( logic channels, traffic and control channels)
❖ Speech processing in GSM
❖ GSM Hyper frame structure
PART-B
❖ GSM Identities
❖ GSM system Operations
❖ GSM Infrastructure communication
Text Book:
1. “Introduction to Wireless Telecommunications Systems and Networks”, Gary Mullet, First

Edition, Cengage Learning India Pvt Ltd., 2006, ISBN - 13: 978-81-315-0559-5.

2. 1 Introduction to GSM and TDMA
Global System for Mobile Communications (GSM) services are a standard collection
of applications and features available to mobile phone subscribers all over the world. The
GSM standards are defined by the 3GPP collaboration and implemented in hardware and
software by equipment manufacturers and mobile phone operators. The common standard
makes it possible to use the same phones with different companies' services, or even roam
into different countries. GSM is the world's most dominant mobile phone standard.
The design of the service is moderately complex because it must be able to locate a moving
phone anywhere in the world, and accommodate the relatively small battery capacity, limited
input/output capabilities, and weak radio transmitters on mobile devices.
In order to gain access to GSM services, a user needs three things:
A billing relationship with a mobile phone operator. This is usually either where services are
paid for in advance of them being consumed (prepaid), or where bills are issued and settled
after the service has been consumed (postpaid).
A mobile phone that is GSM compliant and operates at the same frequency as the operator.
Most phone companies sell phones from third-party manufacturers.
A Subscriber Identity Module (SIM) card, which is activated by the operator once the
billing relationship is established. After activation the card is then programmed with the
subscriber's Mobile Subscriber Integrated Services Digital Network Number (MSISDN) (the
telephone number). Personal information such as contact numbers of friends and family can
also be stored on the SIM by the subscriber. After subscribers sign up, information about
their identity (telephone number) and what services they are allowed to access are stored in a
"SIM record" in the Home Location Register (HLR).
Once the SIM card is loaded into the phone and the phone is powered on, it will search for
the nearest mobile phone mast (also called a Base Transceiver Station/BTS) with the
strongest signal in the operator's frequency band. If a mast can be successfully contacted, then
there is said to be coverage in the area. The phone then identifies itself to the network through
the control channel. Once this is successfully completed, the phone is said to be attached to
the network.

The key feature of a mobile phone is the ability to receive and make calls in any area where
coverage is available. This is generally called roaming from a customer perspective, but also
called visiting when describing the underlying technical process. Each geographic area has a
database called the Visitor Location Register (VLR), which contains details of all the mobiles
currently in that area. Whenever a phone attaches, or visits, a new area, the Visitor Location
Register must contact the Home Location Register to obtain the details for that phone. The
current cellular location of the phone (i.e., which BTS it is at) is entered into the VLR record
and will be used during a process called paging when the GSM network wishes to locate the
mobile phone.
Every SIM card contains a secret key, called the Ki, which is used to provide authentication
and encryption services. This is useful to prevent theft of service, and also to prevent "over
the air" snooping of a user's activity. The network does this by utilizing the Authentication
Center and is accomplished without transmitting the key directly.Every GSM phone contains
a unique identifier (different from the phone number), called the International Mobile
Equipment Identity (IMEI). This can be found by dialing *#06#. When a phone contacts the
network, its IMEI may be checked against the Equipment Identity Register to locate stolen
phones and facilitate monitoring.
2.2 GSM Services
The GSM system was developed by Europeans which could allow roaming on an
international basis. In. 1982, the frequency bands of 890-915 MHz and 935-960 MHz were
allocated for Pan- European second generation digital cellular system. The development
continued resulting in deployment of functional system in 1992. GSM system is popular than
cellular wireless system.
The first generation analog cellular system were designed for basic voice services.
❖ The second generation GSM cellular system was designed to be integrated wireless
voice data service network that offered several other services.
❖ The services offered by GSM are classified into two categories
(a) Teleservices
(b) Bearer Services.

Fig 1: Relationship of Teleservices and bearer services to GSM system
Teleservices provides standard voice communication between two end users and additional
communication between user network interfaces.
GSM services are classified into three phases i.e., Phase 1, Phase2 and Phase2+
Phase1: Provided GSM teleservices and Bearer Services.
Phase 2: Provided supplementary services with phase 1.
Phase2+ : this focuses on addition of high speed packet data services.
Table 2.1 Phase 1 GSM Services
Services category Services Additional Details
GSM Teleservices Telephony Emergency calls , Full rate at 13 kbps voice “112”
Short message services is GSM wide emergency number
Videotext access Teletex, Point-to –point (between to
FAX, etc.
users) and cell broadcast types.
GSM Bearer Asynchronous data 300-9600bps (transparent /

Services synchronous data nontransparent) 2400-9600bps
synchronous pocket data transparent
Others
Supplementary Call forwarding All calls, when the subscriber is
Services Call barring not available outgoing calls with
specifications

Table 2.2 Phase 2 GSM services
Service Category Service Additional Details
Half-rate speech coder en-

GSM Teleservices Optional implementation
hanced full rate
Supplementary Calling the Identification Presentation or restriction of

services Connected line identification displaying the caller's ID
Call waiting Presentation or restriction of
Call hold displaying the called ID
Multiply communications Incoming call during current
Closed user group conversation Put current call on
Advice of charge hold to answer another Up to five
Operator determined call baring. ongoing calls can be included in
one conversation
Restriction of certain features
from individual subscribers by
operator
2.3 GSM Radio frequency carriers:
For GSM cellular systems the air interface consist channels that have a frequency separation
of 200 KHz, GSM has three band.
1. GSM 900 band has 124 carriers frequencies.

2. GSM 1800 band has 374 carrier frequencies.
3. GSM 1900 band has 299 carrier frequencies.
Each carriers can be shared by either users.
: The total number of channels for each users.
124 x 8=992 channels for GSM 900
374x 8=2992 channels for GSM 1800
299 x 8=2392 channels for GSM 1900
The channels have absolute radio frequency channel numbers associated with them. The
different GSM bands are classified into seven bands as shown in table.

1. Primary GSM 900 (P-GSM)

2.Extended GSM 900 (E- GSM)
3.Railway GSM 900 (R - GSM)
5.GSM 1800
6.GSM 1900
7. GSM 450
8. GSM 480
Table 2.3 GSM frequency bands and channel numbers
GSM Band Uplink Frequency Downlink Frequency
P-GSM 900 890.915 MHz

935.960 MHz
ARFCN=1…..124 (ARFCN-I) x 0.2 MHz + 890.2
Uplink frequency + 45 MHz
MHz
E-GSM 900 876.890 MHz
921-935 MHz
(ARFCN-1023) x 0.2 MHz +
ARFCN = 975. ... 1023 Uplink frequency + 45 MHz
890 MHz
R-GSM 900 876-890 MHz
921-935 MHz
ARFCN=955…..1023 (ARFCN - 1023) x 0.2 Hz +
Uplink frequency + 45 MHz
890 MHz
GSM 1800 1710.1785 MHz
1805.1880 MHz
(ARFCN-512) x 0.2 MHz +
ARFCN = 512. .... 885 Uplink frequency + 95 MHz
1710.2 MHz
GSM 1900 1850-1910 MHz
1930-1990 MHz
(ARFCN-512) x 0.2 MHz +
ARFCN = 512. .... 810 Uplink frequency + 90 MHz
1850.2 MHz
GSM 450 450.4.457.6 MHz
460.4-467.6 MHz
(ARFCN-259) x 0.2 MHz +
ARFCN = 259. .. 293 Uplink frequency + 10 MHz
450.6 MHz
GSM 480 478.8 - 486 MHz
488.8 - 496 MHz
(ARFCN - 306) x 0.2 MHz +
ARFCN = 306. .. 340 Uplink frequency + 10 MHz
478.8 MHx

2.4 GSM Network and system architecture
The basic system architecture for a GSM wireless cellular network in shown below
Fig 2.2 GSM Network Architecture
The major GSM subsystems are the
(a) Mobile Station (MS)

(b) Network Switching System (NSS)
(c) Base Station System (BSS)
(d) Administrative and Control System
(a) Mobile Station (MS): It is a device that provides the radio link between GSM subscriber
and wireless mobile network. The mobile station provides subscribers the means to
control their access to PSTN and PDN and facilitates the mobility of the subscriber
network is connected.
• The MS constantly monitors messages that is broadcasted from BTS to support setup and
clearing of radio channels.
• The GSM makes use of subscriber identity module SIM card, and which is functional once
inserted in the MS.
• SIM is a smart card that is issued to the subscriber when subscriber signs up for service with
wireless network operator.

• In GSM, the MS consists of mobile equipment which is physical phone itself and the SIM
card.
• The SIM card contains subscribers IMSI number, the mobile MSISDN number, a SIM
(Personal Identification Number) security / authentication parameters and address book,
messages.
(b) Base Station System (BSS): The BSS is the link between the MS and GSM mobile
switching centre (MSC).
The BSS consists of two elements
(i) Base Transceiver System (BTS)

(ii) Base Station Controller (BSC)
The BTS communicates with MS over the air interface using various protocols.
The BSC communicates with MSC through use of standard wire line protocols. The BSC and
BTS communicate with each other using LAPD protocol used on data link layer in ISDN.
BTS or RBS
The BTS is the BSS air interface device that corresponds to the subscribers MS.
The BTS provides the radio link to the MS over air interface. The BTS consists of basic
components like Radio transceiver units, switching and distribution unit, RF power
combining and distribution unit, power system, environmental control unit, processing and
database storage unit. The BJS is located near the antenna for cell site.
BSC: The functional elements of BSC to implement its operation are located in a single
physical unit, The base BSC components are input and output interface multiplexers, a
timeslot interchange group switch, a separate switch, speech coder / decoder, transcoder, rate
adopters, SST signaling points, environmental control units, power supply and power
distribution units, various signal and control processors.
(C) Network Switching System:(NSS): The NSS provides the necessary interface for the
connection of wireless network to other networks.
• The NSS maintains databases that are used to store information about systems subscribers
and facilitates the connection of mobile.

• The basic components of NSS includes MSC, GMSC, VLR, HLR, EIRI AUC, FNR and
IWF to provide system functionality.
• To handle SMS the wireless switching system will have a SMS gateway MSC and SMS
interworking MSC.
• The MSC performs the necessary telephony switching functions required to route incoming
cells to correct cell site and outgoing cells to correct network.
• The V LR holds information about mobile subscribers within coverage area of particular
MS.
• The HLR contains information about subscriber account.
• The AUC and EIR provide GSM network security and facilitates roaming.
• The FNR provides number portability to a subscriber.
• The ILR allows intersystem roaming.
(d) Administrative and control system or (OSS):
This centralized System is used to provided surveillance of complete network. The operation
and maintenance of entire network is provided to the operation. The OSS software provides
system operator the ability to perform configuration, performance evaluation, security
management of each portion of wireless network.
2.5 GSM network interfaces
The network structure is defined within the GSM standards. Additionally each interface
between the different elements of the GSM network is also defined. This facilitates the
information interchanges can take place. It also enables to a large degree that network
elements from different manufacturers can be used. However as many of these interfaces
were not fully defined until after many networks had been deployed, the level of
standardization may not be quite as high as many people might like.
The GSM standard specifies the various interfaces between the GSM elements which is
shown below

Fig 2.3 GSM Network Interface
1. Um interface The "air" or radio interface standard that is used for exchanges
between a mobile (ME) and a base station (BTS / BSC). For signaling, a modified
version of the ISDN LAPD, known as LAPDm is used.
2. Abis interface This is a BSS internal interface linking the BSC and a BTS, and it has
not been totally standardized. The Abis interface allows control of the radio
equipment and radio frequency allocation in the BTS.
3. A interface The A interface is used to provide communication between the BSS and
the MSC. The interface carries information to enable the channels, timeslots and the
like to be allocated to the mobile equipments being serviced by the BSSs. The
messaging required within the network to enable handover etc to be undertaken is
carried over the interface.
4. B interface The B interface exists between the MSC and the VLR . It uses a protocol
known as the MAP/B protocol. As most VLRs are collocated with an MSC, this
makes the interface purely an "internal" interface. The interface is used whenever the
MSC needs access to data regarding a MS located in its area.
5. C interface The C interface is located between the HLR and a GMSC or a SMS-G.
When a call originates from outside the network, i.e. from the PSTN or another
mobile network it ahs to pass through the gateway so that routing information
required to complete the call may be gained. The protocol used for communication is
MAP/C, the letter "C" indicating that the protocol is used for the "C" interface. In
addition to this, the MSC may optionally forward billing information to the HLR after
the call is completed and cleared down.
6. D interface The D interface is situated between the VLR and HLR. It uses the
MAP/D protocol to exchange the data related to the location of the ME and to the
management of the subscriber.

7. E interface The E interface provides communication between two MSCs. The E

interface exchanges data related to handover between the anchor and relay MSCs
using the MAP/E protocol.
8. F interface The F interface is used between an MSC and EIR. It uses the MAP/F
protocol. The communications along this interface are used to confirm the status of
the IMEI of the ME gaining access to the network.
9. G interface The G interface interconnects two VLRs of different MSCs and uses the
MAP/G protocol to transfer subscriber information, during e.g. a location update
procedure.
10. H interface The H interface exists between the MSC the SMS-G. It transfers short
messages and uses the MAP/H protocol.
11. I interface The I interface can be found between the MSC and the ME. Messages
exchanged over the I interface are relayed transparently through the BSS.
Although the interfaces for the GSM cellular system may not be as rigorously defined as
many might like, they do at least provide a large element of the definition required, enabling
the functionality of GSM network entities to be defined sufficiently.
2.6 GSM Protocols and Signaling Model
The below figure 2.4 shows the signaling model of GSM. The MS communicate with MSC
to provide system connection, Mobility, and radio resource management by sending
messages through air interface.
Fig 2.4 GSM Signalling Model

The MSC communicates with various networks that is corrected to PSTN by using protocols
like LAPD, LAPDM.The interfaces that supports signaling are UM, Abis, A and after interface.
Um interface: The Um interface occurs in layer 1, the layer 2 protocol used on Um interface is
LAPDM, which is modified version of LAPD protocol.In LAPDM no error detection is
employed and messages are segmented into shorter messages which is compatible with TDMA
frame length.
Abis interface: The Abis interface exists between BSC and BTS. Here the protocol used in
layer 2 is LAPD. At layer 3, messages will pass through BTS transparently which are managed
by BTS management entities.
A interface: The A interface exists between BSC and MSC. Signaling is done according to base
station signaling application part (BSSAP). Using SS7 layer 3 is subdivided into 3 parts they are
Radio resource Management (RR)s mobility management (MM) and connection management
(CM)
Ater interface: The Ater interface exists only in GSM systems that have separate for transcoder
controller and BSC. Signaling between BSC and TRC is performed BSC/ TRC application part
(BTAP) protocol.
2.7 GSM Channel Concept
A cellular telephone network use various control and traffic channels to carry out the
operation necessary to allow for the setup of a subscriber radio link for the transmission of
either voice or data. A single GSM RF carrier can support up to eight MS subscribers
simultaneously. Each channel occupies the carrier for one eighth of the time. This is a
technique called Time Division Multiple Access. Time is divided into discrete periods called
Time slots. The timeslots are arranged in sequence and are conventionally numbered 0 to 7.
Each repetition of this sequence is called a TDMA frame•. Each MS telephone call occupies
one timeslot within the frame until the call is terminated, or a handover occurs.
The TDMA frames are then built into further frame structures according to the type of
channel. We shall later examine how the information carried by the air interface builds into
frames and multi-frames and discuss the associated timing. For such a system to work
correctly, the timing of the transmissions to and from the mobiles is critical. The MS or Base
Station must transmit the information related to one call at exactly the right moment, or the

timeslot will be missed. The information carried in one timeslot is called a Multiframs.Each
data burst, occupying its allocated timeslot within successive TDMA frames, provides a
single GSM physical channel carrying a varying number of logical channels between the MS
and BTS.
Fig 2.5 GSM TDMA frame
GSM logical channel concept
The cellular telephone networks use various control and traffic channels to carry out the
necessary operation to allow for setup of subscriber radio link for voice and data transmission
for subscribers mobility. The GSM cellular system is based on use of TDMA to provide
additional user capacity over limited amount of radio frequency spectrum. The GSM system
divides the radio link connection time into eight equal and repeating time slots known as
frames fro uplink and downlink. This timeslots are considered as logical channels, Each
timeslot may carry either subscriber traffic, signaling and control information. Repeated frame
structure forms a multi frame.
Logical channels:
This channels will carry either subscriber traffic or signaling and control information.
A. There three types of traffic channels (TCH).
1. Full rate traffic : TCH/F: This carries one conversation by using one time slot. The
transmitted voice signal is encoded at 13 kbps rate, final channel data rate is 22.8kbps.
2. Half rate traffic channel (TCH/H: Here two conversations or a conversation and data
transfer or two data transfers may be transmitted over one channel at same time. Here voice
is encoded at 6.5 kbps and date rate is 4.8 or 2.4 kbps.
3. Enhanced full rate EFR: Here the voice is encoded at 12.2 kbps rate like TCH/F adds
overhead bits to yield a 22.8 kbps channel data rate.The EFR channel may transmit data at
TCH /F rates.

B. The signaling and control channels consists of three channel subcategories and further.
Broadcast channels: The broad cast channel are used in GSM to provide information to the
mobile station about various system parameters and information about location area identify.
The broadcast channels are of 3 types
(a) Broadcast control channel

(b) Frequency control channel
(c) Synchronization channel
(a) Broadcast Control Channel (BCCH): BCCH contains information that is needed by MS
concerning the cell that it is attached to activate the MS. The BCCH included LAI, maximum
output power allowed in the cells and carrier frequencies for neighboring cells.
(b) Frequency Correction Channel (FCCH): The FCCH transmits bursts of zeros to the
MS. This is done for to serve two purpose.
1. MS can use this signal to synchronize itself to correct frequency.
2. MS can verify the BCCH carrier.
(c) Synchronization Channel (SCH): SCH is used to transmit the required information for
MS to synchronize itself with the timing of particular cell. The SCH helps the MS to get frame
number in the cell.
Common Control Channel (CCCH): The common control provide paging messages to MS
by which the mobile can request a signaling channel that it can use to contact the network.
The common control channels are of 3 types:
(a) Paging channel (b) Random Access channel (c) Access Grant channel.
(a) Paging Channel: (PCH) The PCH is used by the system to send paging messages the
mobile attached to the cell. The mobile will be paged whenever the network has an incoming
call, The PCH is transmitted in downlink direction only.
(b) Random Access Channel : (RACH) The rACH is used by mobile to respond to a paging
message. If the mobile receives a page on PCH, it will replay on RACH with a request for signal
channel. The RACH is used by mobile to setup a mobile originated call.

(C) Access Grant Channel : (AGCH) The AGCH is used by network to assign a signaling
channel to MS. When mobile requests a signaling channel over RACH, the network will assign a
channel to the mobile by transmitting over AGCH in downlink direction.
Dedicated Control Channel :DCCH
These DCCH's are used for specific cell set up handover, measurement and short message
delivery functions:
The dedicated control channels are of 4 types,
(a) Stand alone dedicated control channel (SDCCH)
(b) Slow Associated Control Channel (SACCH)
(c) Fast Associated control channel (PACCH)
(d) Cell Broadcast channel (CBCH)
(a) Stand alone dedicated control channels (SDCCH): When a mobile requests for assigning
of control channel through AGCH, the mobile station and BTS switch over to the network by
SDCCH. .The call setup procedure is done by SDCCH which is transmitted in both uplink and
downlink direction.
(b) Slow Associated control Channel (SACCH) : This channels is used to transmit
information about measurement made by MS. In uplink direction the mobile send measurement
of received signal strength from its own BTS. In downlink, MS receives information from BTS
about mobiles output power level.
(c)Fast Associated Control Channel (FACCH): this is used to facilitate the handover
operation in GSM. If handover is necessary handover signaling information transmitted.
(d)Cell Broadcast Channel (CBCH) : The CBCH its used to deliver short message service in
downlink direction.

2.8 Speech processing in GSM
Fig 2.6 GSM Speech Processing
In Mobile, speech is digitized and broken into 20ms segments. It is then coded to reduce the
bit rate and control errors which produces 8000 samples of 13 bits per / sample/sec.The
speech coder yields 260 bits / 20 ms or 13 kbps or 22.8 kbps data rate. Interleaving ciphering,
burst formatting yields 156.25 bits/timeslot, which yield a data transfer rate of 270.8 kbps.At
receiver, signal bursts are received and used to create channel model. The channel model is
created in the equalizer, where bit sequence is calculated for received signals. The bursts are
received and deciphered and reassembled. The sequence is decoded to detect and correct any
errors.
2.9 GSM hyper frame structure:
Time slot and TDMA frames: In GSM system, both traffic and signaling and control
information arc transmitted over same physical frequency channel, so TDM is used.
TDMA frame: In GSM system, eight timeslots constitute a TDMA frame. The system assigns
numbers to the frames sequentially from 0 to 2,715,648 and process repeats. Grouping of
successive TDMA frames is known as hyper frame.
The hierarchy is (a) TDMA frame (b) Multi frame (c) Super frame (d) Hyper frames.
(a) TDMA frame: A single TDMA frame has eight timeslots that takes 4,615 ms to
complete.
(b) Multi frame: Two types of multi frames are available
l. Multi frame consists of 267 DMA frames which takes 120 ms to complete

2. Other type of multi frame is 51 TDMA frames which takes 235 ms to completes.
(c) Super frame: Super frame may take either 26 or 51 TDMA multi frames. So one super
frame has 1326 TDMA frames.
(d) Hyper frame: A hyper frame consists of 208 super frames which takes 3 hours 28
minutes 53 seconds and 760 ms to complete.
Fig 2.7 A GSM Hyper frame Structure
There are several GSM multiframe structures:
• Traffic multiframe: The Traffic Channel frames are organised into multiframes
consisting of 26 bursts and taking 120 ms. In a traffic multiframe, 24 bursts are used
for traffic. These are numbered 0 to 11 and 13 to 24. One of the remaining bursts is
then used to accommodate the SACCH, the remaining frame remaining free. The
actual position used alternates between position 12 and 25.
• Control multiframe: the Control Channel multiframe that comprises 51 bursts and
occupies 235.4 ms. This always occurs on the beacon frequency in time slot zero and

it may also occur within slots 2, 4 and 6 of the beacon frequency as well. This
multiframe is subdivided into logical channels which are time-scheduled.
GSM Superframe
Multiframes are then constructed into superframes taking 6.12 seconds. These consist of 51
traffic multiframes or 26 control multiframes. As the traffic multiframes are 26 bursts long
and the control multiframes are 51 bursts long, the different number of traffic and control
multiframes within the superframe, brings them back into line again taking exactly the same
interval.
GSM Hyperframe
Above this 2048 superframes (i.e. 2 to the power 11) are grouped to form one hyperframe
which repeats every 3 hours 28 minutes 53.76 seconds. It is the largest time interval within
the GSM frame structure.
2.10 GSM identities: Identities are required in network element of identification. The various GSM
identities are (1) Mobile station associated numbers (2) Network numbering plan (3) Mobile
station Roaming number.
1. Mobile station Associated Numbers: The different mobile station associated numbers are
(a) MSISDN (Mobile station ISDN Number)
(b) IMSI (International Mobile Subscriber Identity)
(c) TMSI ( Temporary Mobile Subscriber Identity)
(d) IMEI ( International Mobile Equipment Identity)
(e) IMEISV (IMEI Software version)
(a) MSISDN: The MSISDN will uniquely identify a mobile telephone subscription in PSTN
Numbering plan. It is a database number linked to HLR.
(b) IMSI: The IMSI is a unique identity allocated to each subscriber by wireless service operator
and stored in the SIM.
(c) TMSI: It is a number used by GSM network to protect subscribers privacy over a interface. TMSI
is assigned to MS by wireless network.

(d) The IMEI and IMEISV number are used by GSM network for equipment identification and
uniquely identify a MS.
2. Network Numbering Plans: The GSM system uses both location area identity (LAI) numbers and
cell global identity (CGI) numbers.
LAI is used for MS paging and location updating.
Steps involved in generation of MSRN:
Mobile Station Roaming Number (MSRN): The MSRN is used by GSM system during call setup
operation. Several operations are performed before call setup operation the completed.
Fig 2.1 Formulation of GSM MSRN
Steps involved:
Step 1: The GMSC receives a signaling message, initial address message from PSTN about
incoming call from particular MSISDN number.
Step 2: GMSC sends a signaling message "send routing information" to HLR where MSISDN is
stored.

Step 3: HLR uses MSISDN to find the subscriber data in database.
Step 4: HLR sends a "provided roaming number" message to MSC/VLR using VLR address as
destination.
Step 5: VLR asks MSC to seize an idle MSRN from available numbers.
Step 6: MSC/VLR sends MSRN back to HLR.
Step 7: HLR sends MSRN back to GMSC
Step 8: GMSC uses MSRN to route the cal to correct MSC.
The MSC analyzes the incoming digits and associates then with IMSI and MSRN is released.
2.11 GSM system operations:
For call setup operations, the various states of MS has to be considered.
• The MS can be powered off, or SIM card can be removed from mobile, mobile can be but located
in an area without service, called as detached condition.
• When MS is powered on within GSM, it will enter into attached condition. Mobile can two state
when attached.
1. Idle state: It is a state where MS has no dedicated channel allocated to it.
2. Active state: MS has a dedicated connection to GSM network.
In attached mode, the MS may change from idle to active mode.
GSM call setup:
Call setup in GSM consists of few necessary operations. The operations are
1. Interrogation phase (only for mobile terminating call)

2. Radio resource connection establishment
3. Service request
4. Authentication
5. Ciphering mode setting

6. IMEI number check

7. TMSI allocation
8. Call initiation
9. Assignment of traffic channel
10. User alerting signaling.
11. Call accepted signaling.
1. Interrogation Phase:
The interrogation phase in timeline/flowchart form is shown if fig 2.2. For the interrogation
operation one votes the initial address message (IAM) that comes from outside the GSM network
using ISUP/TUP protocols. The GMSC can send a request to the flexible numbering system node
before being sent to the HLR. For security reasons, the subscriber data can be simultaneously stored
and uploaded in two HLRs. The two GSM system nodes use a non MAP protocol to communicate
with each other.( IAM Message)
Fig 2.2 GSM interrogation phase of call setup
2. Radio Resource connection Establishment:
In this process, the MSC/VLR initiates the call setup process by sending layer 3 paging message to
BSC. This ‘message will contain subscribers IMSI number so that BSC can calculate correct paging
group to use. The BSC sends paging command to BTS which contains IMSI, channel member. The
paging group is determined by the subscribers IMSI. The BTS sends a paging request message to MS.

The message transmitter on random access channel. The BTS activates the channel and send a
channel activation acknowledge message back to BSC.
Fig .2.3 GSM radio resource connection establishment
3. Service Request: Service request phase occurs when MS has turned to new channel assigned to
it by immediate assignment message sent during radio resource connection phase.
Set Asynchronous Balanced Mode(SABM) is sent from MS to BTS sends back to MS, the paging
message response. When paging response arrives at BTS, it is forwarded to BSC in an establish
indication message causes BSC to activate radio connection quality supervision and initiates
power control algorithm.
Fig 2.4 GSM service request operations
4. Authentication: When authentication is activated, an authentication request message is sent to

the MS. The message containing a 128 bit random number and ciphering key sequence number
is sent to MS.
Calculation is done and value of SRES is returned to MSC as transparent authentication
response message. A timer is set in MSC when first authentication request message is sent.
If time expires, request is sent again.

If authentication is unsuccessful, GSM system initiate a procedure to identify MS.
Fig 2.5 GSM Authentication operation
5. Ciphering Mode setting: Once authentication process is successful the call setup the process is
initiated. During ciphering mode setting, the MSC /VLR sends the ciphering mode command to
BSC. The KC value is forwarded to BTS within an encryption command message.
The BTS stores the value of K and sends a non ciphered ciphering mode command message to
MS. The MS inserts K and DTMA frame number into another authentication algorithm. The
creates a ciphering sequence that is added to message.
The ciphering mode complete message is sent to BTS. The BTS sends in to MSC via a data
indication frame from BTS to BSC.
Fig 2.6 GSM ciphering mode setting operations
6. IMEI Check: If IMEI check is to be done, the MSC/VLR will send an identity request message to
the MS. The value of IMEI sent mobile is checked against EIR database.

The EIR can return three status modes for MS back to network. The MS is “White Listed” and
allowed to use the network, the MS can be “block listed” and not allowed to use the network or
MS can be “grey Listed”.
Fig 2.7 GSM IMEI check
7. TMSI Reallocation:
The value of TMSI number to be used for particular traffic case is determined by MSC/VLR
software program. If a TMSI number is to be used, it is sent transparently to the MS from MSC
via TMSI reallocation command.
The mobility management message is transmitted over SDCCH from BTS to MS the SIM card and
TMSI reallocation complete message is sent transparently from MS to MSC/VLR via SDCCH.
Fig 2.8 GSM TMSI reallocation operations
8. Call initiation Procedure:

After TMSI Reallocation, the next step is transmission of setup message transparently from
MSC to MS. The connection management message is sent over downlink SDCCH from BTS to
MS. This message contains a request for GSM bearer services.
The MS will send a call confirmed message on uplink SDCCH if it can handle the requested
service. A timer is started in MSC/VLR once the setup message is sent. It the timer expires
before call confirm message is received, the connections to calling subscriber and mobile
subscriber are released.
Fig 2.9 GSM call initiation operations
9. Assignment of traffic channel:
The traffic channel assignment is initiated by MSC. The MSC sends an assignment request
message to BSC. The message contains information about call priority, status of DTX on
downlink, circuit identity code to indicate transmission path for speech or data traffic between
MSC and DSC.
The BSC will assign MS to the serving cell and obtain timing advance information. The BTS sends
an acknowledgement back via a channel activation acknowledgement message to BSC. The BTS
sets up a path through its group switch for traffic.
The MS tunes to New channel and sends a SABM message over. FACCH to indicate successful
seize of the channel.
The BTS receives the message sends a UA message to MS and establish indication message to
BSC. The MS then sends assignment complete to message to indicate traffic channel is working.
Finally BSC sends a message to BTS that signaling channel is no longer needed in the form of RF
channel release message.

Fig 2.10 GSM Traffic Channel Assignment
10. Call confirmation, Call accepted and call release:
The call confirmation starts when MS sends a transparent alerting message to MSC. The
message indicates that a ringing tone is generating in the mobile and can be used for user to
user signaling.

F ig 2.11 GSM call confirmation and call accepted
Location Updating:
The operation used to support the subscriber mobility within GSM network is known as
location updating. The type of location updating used depends upon the status of MS.
The three schemes of location updating are:

1. Normal Location Updating (Idle Mode)
2. IMSI detach/Attach location updating
3. Periodic Location Updating
Call Handoff or Hand over:
The ability of the FSM cellular wireless system to support a subscribers roaming mobility is made
possible through the operations of location updating and handover.
This operations allow the wireless network the capability to locate the mobile outside of its
home location and to maintain a connection to the mobile even if the subscriber is rapidly
moving about the system.
Hand over occurs when an active mobile station change cells. Based on locating algorithm, the
BSC takes the decision of handover. When calculate results indicate a need to change cells, the
BSC initiates handover.
Three types of handover can be done.

1. Intra BSC handover

2. Inter BSC handover
3. Inter BSC Handover
Intra BSC Handover:

In Intra BSC handover, handover will occur between two cells that are both controlled by same
BSC.
Steps involved:
1. MS sends measurement report about RSS levels to BTS. BTS make measurement of TCH signal
strength and reports to MS.
2. Measurement report is sent to BSC. BSC uses locating function to perform handover of call to
another cell due to poor quality.
3. If handover is necessary, the BSC sends a command to BTS in new cell to activate a TCH.
4. When new BTS acknowledges activation of new TCH, BSC sends message to M1S via old BTS
along with new TCH.
5. Mobile turns to new TCH and sends handover access burst.
6. When BTS detect handover burst, it sends timing advance information to MS over RACCH. The
BSC configures to deliver traffic to new BTS.
7. MS sends handover complete message to BSC.
8. BSC send a message to old BTS to deactivate old TCH.
Fig 2.12 Intra BSC handover

Inter BSC handover:
In inter BSC handover, MSC is not involved with the operation.In inter BSC handover the mobile has
moved to a cell that is different location area and therefore has different BSC.
The below figure shows the step involves during inter-BSC.
Fig 2.13 Inter BSC Handover
In this case BSC1, (old BSC) does not control the better cell which is the target for the
handover. This means that the MSC will be part of the link procedure between BSC1 and
BSC2 (new BSC).
Handover request - BSC1 will use the MSC to send a handover request to BSC2. The
MSC will know which BSC controls that cell.
Activation of new channel - BSC2 will allocate a TCH in the targetcell and then order the BTS
to activate it. The chosen HO ref. no. will be part of the activation message. The BTS will
acknowledge that the activation has been made.
Handover command - After the activation the new BSC commands the MS to change to the
new channel. The message is sent on FACCH via the old channel and will contain a full
description of the new channel and the HO ref. no.
3. Handover bursts - When the MS has changed to the new channel, it will send handover
bursts on the new channel. The information content is the HO ref. no. The bursts are as
short as the access bursts. This is because the MS does not know the new Timing Advance
(TA) value yet. On the detection of the handover bursts, and check of HO ref. no., the new
BTS will send the new TA.

4. Handover complete - Now the MS is ready to continue the traffic and will send a
handover complete message, which will be addressed to the old BSC as a clear command.
5. Release of old channel - When the old BSC receives the clear command from the
MSC, the BSC knows that the handover was successful. The BSC orders the BTS to release
the TCH and the BTS will acknowledge.
Inter- MSC handover:
Inter - MSC handover: When the BSC decides that handover should occur and new cell belongs to
steps another MSC. This type of handover is known as inter MSC. The below figure shows the
involved during inter MSC handover.
• The source BSC analyzes the signal quality measurement reports and initiates a handover.
• The source MSC finds that the call needs to be handed over to a cell controlled by a different
MSC.
• The source MSC and target MSC interact and then command the UT to move to the new cell.
• The target MSC informs the source MSC when the call has been successfully handed over.
• The source MSC releases the radio resources for the call. Note that the call is still routed via
the source MSC

GSM Infrastructure Communications (Um Interface)
A GSM network is a bearer data communication protocol families. Any protocol stack
for data communication, for example TCP/IP, can be implemented to use a bearer. GSM
protocol architecture is - as for ISDN - structured into three independent planes .
User plane ,Control plane,Management plane
The user plane defines protocols to carry connection oriented voice and user data. At the radio
interface Um, user plane data will be carried by the logical traffic channel called TCH. The
control plane defines a set of protocols for controlling these connections with signalling
information, for example signalling for connection setup. Such signalling data is carried over
logical control channels called D-channels (Dm-channels). As the control channels often have
spare capacities, also user data, the packet oriented SMS data, is transported over these channels
(see Figure gsm8). All logical channels, however, will be finally multiplexed onto the physical
channel.
Management plane function are:
• plane management functions related to the system as a whole including plane

coordination
• functions related to resources and parameters residing in the layers of the control
and/or user plane.
Management of network element configuration and network element faults are examples
of management plane functionality
The basic GSM bearer service, Circuit Switched Data (CSD), simply consists of
transmitting and receiving signals representing data instead of voice across the air
interface. Modems are used for the conversion between data bit streams and modulated
radio signals. Data transmission is either transparent or non-transparent.

Question Bank
1. Briefly explain various services offered by GSM.

2. Explain the GSM Radio frequency carriers along with GSM frequency
allocation 1900 MHz PCS bands.
3. With a neat GSM network architecture explain the network switching
system.
4. Explain the GSM hyper frame structure.
5. Write a short note on various frame formats used for GSM traffic.
6. With suitable diagram explain GSM channel concept.
7. Discuss various dedicated control channels of GSM.
8. Explain various signaling and control channels used within GSM TDMA
system.
9. With neat diagram explain GSM signaling model and various protocols
used.
10. Explain the classification of time slot burst in GSM with diagram.
11. With a neat block diagram explain the speech processing in GSM.
12. With block diagram explain the different interfaces used in GSM.
13. Explain briefly the GSM identities.
14. Explain the steps involved in generation of MSRN with diagram.
15. Explain the steps involved for call setup in GSM
16. List the different call setup operation and with flow diagram explain
interrogation phase and IMEI check operation.
17. Explain with a neat flow diagram the authentication and ciphering mode
operation GSM call setup.
18. With a neat sketch explain the detailed steps required for radio resource
connection establishment in GSM.
18. Explain with neat diagrams GSM intra BSC and inter BSC handover.
19. Explain intra BSC handover operation in GSM.
20. Explain Inter- MSC handover.
21. Compare Inter BSC and Intra BSC handover.

SJB Institute of Technology: Department of Electronics & Communication Engineering

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

SJB Institute of Technology: Department of Electronics & Communication Engineering

Uploaded by

Copyright:

Available Formats

||Jai Sri Gurudev ||

Sri Adichunchanagiri Shikshana Trust®

SJB INSTITUTE OF TECHNOLOGY

Department of Electronics & Communication

Academic Year: 2022 – 2023 (EVEN)

Course Coordinator : Jyothi H

Designation : Assistant Professor

Course objectives: This course will enable students to

Module – 1 : Mobile Radio Propagation

The Cellular Concept – Cellular Concept , Analysis of Cellular Systems, Sectoring.

Module – 2 :GSM and TDMA Technology

Module – 3 :CDMA Technology

CDMA System Overview – Introduction, CDMA Network and System Architecture

Key Enablers for LTE 4G –

OFDM, SC-FDE, SC-FDMA, Channel Dependant Multiuser Resource Scheduling, Multi-

Multi-Carrier Modulation – Multicarrier concepts, OFDM Basics, OFDM in LTE, Timing

The students should be able to:

Question paper pattern:

2. “Introduction to Wireless Telecommunications Systems and Networks”, Gary Mullet, First

Dept. of ECE/SJBIT Page 3

1 ❖ GSM services offered and GSM Radio frequency carriers 4

2 ❖ GSM Network and System Architecture 6

3 ❖ GSM Network Interfaces and protocols and GSM signaling model 11

4 ❖ GSM Channel Concept( logic channels, traffic and control channels) 12

5 ❖ Speech processing in GSM and GSM Hyper frame structure 13

6 ❖ GSM Identities and GSM system Operations 15

7 ❖ GSM Handoff procedures and location updating 15

8 ❖ GSM Infrastructure communication 19

Exercise / Additional Questions (Problems) / Assignment Questions /

Dept. of ECE/SJBIT Page 4

GSM System overview

1. “Introduction to Wireless Telecommunications Systems and Networks”, Gary Mullet, First

Dept. of ECE/SJBIT Page 5

2. 1 Introduction to GSM and TDMA

In order to gain access to GSM services, a user needs three things:

Dept. of ECE/SJBIT Page 6

2.2 GSM Services

Dept. of ECE/SJBIT Page 7

Fig 1: Relationship of Teleservices and bearer services to GSM system

Phase1: Provided GSM teleservices and Bearer Services.

Phase 2: Provided supplementary services with phase 1.

Phase2+ : this focuses on addition of high speed packet data services.

Table 2.1 Phase 1 GSM Services

Services category Services Additional Details

GSM Bearer Asynchronous data 300-9600bps (transparent /

Dept. of ECE/SJBIT Page 8

Table 2.2 Phase 2 GSM services

Service Category Service Additional Details

Half-rate speech coder en-

Supplementary Calling the Identification Presentation or restriction of

2.3 GSM Radio frequency carriers:

1. GSM 900 band has 124 carriers frequencies.

Each carriers can be shared by either users.

: The total number of channels for each users.

124 x 8=992 channels for GSM 900

374x 8=2992 channels for GSM 1800

299 x 8=2392 channels for GSM 1900

Dept. of ECE/SJBIT Page 9

1. Primary GSM 900 (P-GSM)

GSM Band Uplink Frequency Downlink Frequency

P-GSM 900 890.915 MHz

Dept. of ECE/SJBIT Page 10

2.4 GSM Network and system architecture