GSM - GPRS CP - 02 GSM and GPRS System Description

2.
GSM and GPRS

system description
Table of Contents
Topic Page
2.1. The geographical structure of the GSM network .......................................... 13
2.1.1. Cell ........................................................................................................... 13
2.1.2. Location Area ........................................................................................... 13
2.1.3. MSC service area ...................................................................................... 14
2.1.4. PLMN service area ................................................................................... 14
2.1.5. GSM service area...................................................................................... 15
2.2. GSM system architecture ................................................................................. 15
2.2.1. Switching System (SS) ............................................................................. 16
2.2.2. Base Station System (BSS) ...................................................................... 20
2.2.3. Mobile Station (MS) ................................................................................. 20
2.3. GPRS system architecture................................................................................ 21
2.3.1. GPRS Support Nodes ............................................................................... 21
2.3.2. Serving GPRS Support Node (SGSN) ..................................................... 22
2.3.3. Gateway GPRS Support Node (GGSN) ................................................... 22
2.3.4. MSC and SGSN co-operation .................................................................. 23
2.3.5. GPRS Mobile Station ............................................................................... 24
2.4. Radio access methods........................................................................................ 24
2.4.1. Duplex ...................................................................................................... 24
2.4.2. Multiple access ......................................................................................... 25
2.5. GSM air interface.............................................................................................. 26
2.5.1. Frequency bands ....................................................................................... 26
2.5.2. Channel concept ....................................................................................... 28
2.5.3. GSM logical channels............................................................................... 29
2.5.4. GSM channel configurations .................................................................... 33
2.5.5. Frames structure ....................................................................................... 37
2.5.6. Burst formats ............................................................................................ 38
11
GSM/GPRS Cell Planning
2.6. GPRS air interface ............................................................................................ 40

2.6.1. GPRS logical channels ............................................................................. 40
2.6.2. GPRS radio resources ............................................................................... 42
2.6.3. Temporary Block Flow (TBF) .................................................................. 44
2.6.4. GPRS MS modes ...................................................................................... 44
12
1. GSM and GPRS system description
2.1. The geographical structure of the GSM

network
2.1.1. Cell
A cell is a smallest geographical unit in the GSM network where the radio coverage
is provided. A cell is an area served by one Base Transceiver Station (BTS). The real
shape and size of the cell depends on many factors, like for example:
• BTS and Mobile Station (MS) transmitting power.
• Site location.
• Radio wave propagation conditions.
• Antenna configuration.
• Antenna radiation pattern
• Traffic situation.
For theoretical consideration an ideal hexagonal shape is usually taken into account.
The maximum cell radius is 35 km (for normal range cell, but in some sparsely
populated areas it can be extended up to 112 km, if two timeslots are used for one
connection. Each cell is uniquely recognized in the system by its Cell Global Identity
(CGI) number. The concept of a cell is presented in Figure 2.1.
Cell 1
Cell 3 Cell 2
Cell
Figure 2.1. The concept of a cell.
2.1.2. Location Area

A group of cells where a mobile station can move freely and at the same time having
constant access to the system without updating its position is called Location Area
(LA). When the MS changes its position in the cellular system moving to a cell,
which belongs to another LA, it has to report it to the system. This procedure is
13
called location updating. All cells belonging to the same Location Area are
recognized by the MS as they have the same unique Location Area Identity (LAI)
number, which is transmitted by each cell.
For each MA its current LA, where the MS is located, is stored by the system in a
relevant database called Visitor Location Register (VLR), as well as in the MS SIM
card and Home Location Register (HLR).
As long as the MS stays within a LA its position remains unchanged and no location
update is necessary. Only when crossing the boundary between two cells belonging
to two different LAs the MS must update its new position to the system, i.e. to
perform location updating.
Figure 2.2 presents the concept of the Location Area structure. Theoretically
minimum size of a LA is a single cell and the maximum size is the MSC service area
(see next section). A practical size of the LA is several hundred cells. The size of the
LA is determined by Location Area dimensioning process, which is not discussed in
the book.
LA 1
VLR
MSC
LA 3
LA 2
Figure 2.2. The concept of Location Area.
2.1.3. MSC service area

A main exchange in the GSM network is called Mobile services Switching Centre
(MSC). Cells belonging to one MSC compose the MSC service area. Usually a
single MSC controls a number of Location Areas (LAs). Each LA may belong to
only one MSC service area. This implies that cells controlled by different MSCs
must belong to different LAs.
2.1.4. PLMN service area

A Public Land Mobile Network (PLMN) service area consists of the entire set of
cells in which an operator provides GSM radio coverage. Usually a PLMN service
area covers the territory of one country. However there are usually more than one
PLMN service areas in one country, since more operators may have a GSM licence.
14
2.1.5. GSM service area

The largest graphical structure in the worldwide GSM network is GSM service area.
This area is spread over all operating PLMN service areas all over the world. Thanks
to the standard and system compatibility, a GSM subscriber can be served anywhere
in the GSM service area based on the international roaming agreements signed
between operators.
The above mentioned geographical structure in the GSM system is depicted in Figure
2.3.
GSM Service Area
PLMN Service Area

(one per operator)
MSC Service Area
Location Area
Cell
Figure 2.3. The geographical structure of the GSM system
2.2. GSM system architecture

The GSM network integrates radio technology with network intelligence to provide
advanced wireless services to a broad subscriber base.
A wireless network is composed of mobile radios, radio towers (base stations), a
mobile switching centre, a message centre, voice mail systems, customer databases,
and interconnections to other networks.
In the GSM network, the radio interface connects the customer to the cell site. The
base station converts the radio signal and transports the information to the mobile-
service switching centre (MSC) via communication links. The MSC validates the
mobile radio’s identification information in the various types of network databases
prior to authorizing service. The MSC connects the call to other mobile phones or to
15
other networks. Figure 2.4 illustrates the basic configuration of a Public Land Mobile
Network (PLMN) and its interconnection to the PSTN/ISDN and other PLMN
networks.
The basic parts of the GSM system include the radio network part (called the Base
Station System), switching part (called the Switching System) and the Operation and
Maintenance Systems (called also Operation and Support System). Each subsystem
may contain different kinds of nodes:
• Base Station System (BSS) consisting of Base Station Controllers (BSCs) and
Base Transceiver Stations (BTSs) performing radio transmission related
functions.
• Switching System (SS) consisting of Mobile services Switching Centre
(MSC), Visitor Location Register (VLR), Home Location Register (HLR),
Authentication Centre (AuC), Gateway MSC (GMSC), Short Message Service
– Gateway MSC (SMS-GMSC) and Short Message Service – Interworking
MSC (SMS-IWMSC) performing switching, routing and authentication
functions.
• Operation and Maintenance System (OMS) providing cellular network
administration and network operation and support.
MS BSS SS External
networks
PLMN
VLR
ME BTS BSC MSC PSTN
GMSC ISDN
SIM SMS-GMSC SMS

EIR AuC HLR SMS-IWMSC -SC
Signalling
Traffic
Figure 2.4. GSM system architecture.
2.2.1. Switching System (SS)

The network switching system contains the call processing parts and databases of a
GSM network. The call processing operations are performed by the MSC. The GSM
standard calls for several databases that are used for identification and authentication
of the subscribers and to support roaming services. The internal structure and
operation of these databases are left to the company, which implements the standard.
But the messages which pass between the MSC and these databases are covered by
the GSM standards, and are part of a signalling protocol called the Mobile
Application Part (MAP), which uses the common channel number 7 Signalling
System (SS7). These databases are:
16
• Home Location Register (HLR).

• Visitor Location Register (VLR).
• Authentication Centre (AuC).
• Equipment Identity Register (EIR).
Mobile service Switching Centre (MSC)

MSC is the heart of the GSM network. It performs most of switching and call routing
functions for mobile stations located in a geographical area designated as the MSC
area, i.e. it is responsible for the call set-up, supervision of the established
connections and their release. The provisioning of supplementary services and
charging are other very important functions. It also interfaces other networks, such as
PSTN, ISDN, PDN and other PLMNs, and provides for communication with other
nodes (HLR, VLR, EIR, GMSC and other MSCs). The main difference between an
MSC and an exchange in a fixed network is that the MSC has to take into account the
impact of the allocation of radio resources and the mobile nature of the subscribers,
and has to perform in addition at least the following procedures:
• Procedures required for the location registration.
• Procedures required for handover.
Visitor Location Register (VLR)

A mobile station (MS) roaming in an MSC area is served by the VLR in charge of
this area. When an MS enters a new location area it starts a registration procedure.
The MSC in charge of that area notices this registration and transfers to the Visitor
Location Register the identity of the location area where the MS is situated. If this
MS is not yet registered, the VLR and the HLR exchange information to allow the
proper handling of calls involving the MS.
The Visitor Location Register is a database storing the temporary information about
the subscribers for the use of an MSC in a geographical region, a VLR Service Area.
It includes a copy of subscription information and more precise location of the
subscriber, i.e. Location Area. The VLR was introduced in order to reduce the flow
of the signalling information through the network, especially during the call set-up
procedure.
The VLR contains also the information needed to handle the calls set-up or received
by the MSs registered in its database (for some supplementary services the VLR may
have to obtain additional information from the HLR). The following elements are
included:
• The International Mobile Subscriber Identity (IMSI).
• The Mobile Station International ISDN number (MS-ISDN).
• The Mobile Station Roaming Number (MSRN).
• The Temporary Mobile Station Identity (TMSI), if applicable.
• The location area where the mobile station has been registered.
• The identity of the SGSN where the MS has been registered. Only applicable
to PLMNs supporting GPRS and which have a Gs interface between
MSC/VLR and SGSN.
17
The VLR also contains supplementary service parameters attached to the mobile
subscriber and received from the HLR.
The VLR and the MSC are very often in one-to-one relation and are implemented in
one physical node. This solution is considerably reducing the level of signalling
transmission between these nodes, thus making it possible to reduce the quantity of
necessary links and signalling devices. There is also a possibility that a single VLR
may serve several MSC areas.
Home Location Register (HLR)

The HLR is a centralized network database that stores and manages all mobile
subscriptions belonging to a specific operator. It acts as a permanent store for a
person’s subscription information until that subscription is cancelled. The
information stored includes:
• The subscription information.
• Some location information enabling the charging and routing of calls towards
the MSC where the MS is registered (e.g. the VLR Number, the MSC Number,
the Local MS Identity).
and, if GPRS is supported, also GPRS:
• Location information enabling the charging and routing of messages in the
SGSN where the MS is currently registered (e.g. the SGSN Number).
There is always at least one identity, apart from the IMSI, attached to each mobile
subscription and stored in the HLR.
The IMSI or, the MS-ISDN may be used as a key to access the information in the
database for a mobile subscription.
The database contains other information such as:
• Teleservices and bearer services subscription information.
• Service restrictions (e.g. roaming limitation).
• A list of all the group IDs a service subscriber is entitled to use to establish
voice group or broadcast calls.
• Supplementary services; the HLR contains the parameters attached to these
services.
and, if GPRS is supported, also:
• Information about if a GGSN is allowed to dynamically allocate PDP
addresses for a subscriber.
Supplementary services parameters need not all be stored in the HLR. However, it
seems safer to store all subscription parameters in the HLR even when some are
stored in a subscriber card.
Subscribers are sometimes allowed to change some of their feature preferences in
HLR (such as call forwarding) by using their mobile phone. The MSC uses the HLR
information to authorize system access and process individual call billing. The HLR
can be part of the MSC or a separate processing platform dedicated to this critical
database task. A PLMN may contain one or several HLRs: it depends on the number
18
of mobile subscribers, on the capacity of the equipment and on the organisation of

the network.
Gateway MSC (GMSC)

The Gateway MSC is used during every Mobile Terminating Call. If a network,
delivering a call to the PLMN cannot interrogate the HLR, the call is routed to an
MSC. This MSC will interrogate the appropriate HLR and then route the call to the
MSC where the mobile station is located. The MSC, which performs the routing
function to the actual location of the MS, is called the GMSC. The acceptance of an
interrogation to an HLR is the decision of the operator. The whole procedure is due
to the need of spotting the subscriber. There is no location information in the dialled
number. The B-number points out only to the home network of the B-subscriber,
while the subscriber himself can be located anywhere in the GSM system – e.g.
roaming in another network.
The GMSC interrogates the HLR about the routing information. After getting this
information the GMSC can route the call to the appropriate MSC.
The choice of which MSCs can act as Gateway MSCs is for the operator to decide
(i.e. all MSCs or some designated MSCs).
Authentication Centre (AuC)

The Authentication Centre is a database, which stores security information for each
subscriber belonging to the PLMN.
The Authentication Centre is associated with an HLR and stores an identity key for
each mobile subscriber registered with the associated HLR. Moreover the AuC
communicates only with its associated HLR. This key is used to generate:
• Data which are used to authenticate the International Mobile Subscriber
Identity (IMSI).
• A key used to cipher communication over the radio path between the mobile
station and the network.
Upon the request from HLR, AuC provides those so called triplets for the
authentication and ciphering procedures.
Equipment Identity Register (EIR)

The Equipment Identity Register is a database, which stores the information about
the equipment used by the subscribers. It allows to check if a mobile terminal, which
accesses the GSM network is allowed to, e.g. stolen MS can be barred from
accessing the network. Due to the separation of subscriber data (SIM) from mobile
equipment this verification is performed independently from the user authentication.
The International Mobile Equipment Identity (IMEI) number uniquely identifies the
mobile terminal. The stored IMEI numbers are divided into three groups:
• The white list including all number series of equipments allowed to access
GSM networks.
• The black list containing identities of mobiles which have been barred.
• The grey list containing identities of suspicious equipment (faulty or non-
approved).
19
An IMEI may also be unknown to the EIR. An EIR shall as a minimum contain a
"white list" (equipment classified as "white-listed").
The use of this node is recommended but not mandatory.
SMS Gateway MSC (SMS-GMSC)

The SMS Gateway MSC (SMS-GMSC) acts as an interface between a Short
Message Service Center the PLMN, to allow short messages to be delivered to
mobile stations from the Service Center (SC).
SMS Interworking MSC (SMS-IWMSC)

The SMS Interworking MSC acts as an interface between the PLMN and a Short
Message Service Center (SC) to allow short messages to be submitted from MS the
SC.
2.2.2. Base Station System (BSS)

The Base Station System, BSS is the system of base station equipments, i.e.
transceivers and controllers, which is viewed by the MSC through a single A-
interface as being the entity responsible for communicating with MSs in a certain
area. Similarly, in PLMNs supporting GPRS, the BSS also has an interface to an
SGSN. The radio equipment of a BSS may support one or more cells. A BSS may
consist of one or more base stations where an Abis-interface is implemented. The
BSS consists of one Base Station Controller, BSC and one or more BTS. A Base
Station Controller is a network component in the PLMN with the functions for
control of one or more BTS.
Base Transceiver Station (BTS)

The Base Transceiver Station is responsible for maintaining radio connection with all
the MSs in a cell. It comprises radio transmission and reception devices and assures
that the coverage for a particular cell is provided, and appropriate frequencies are
allocated. For transmission to and from an MS, the BTS performs several functions
as channel coding, interleaving, and modulation on the allocated by the BSC carrier
frequency. It also performs ciphering and provides functions, such as adaptive
equalization and diversity, for handling of the errors, which may occur on the air
interface.
Base Station Controller (BSC)

The Base Station Controller controls and manages radio resources delivered by the
transmission equipment, the BTSs. The BSC allocates the channels during the call
set-up procedure, controls the handover procedure, provides the dynamic power
regulation in MSC and BSC (power of emitted signal), it is responsible for the
frequency hopping.
2.2.3. Mobile Station (MS)

The Mobile Station consists of the physical equipment used by a PLMN subscriber
that comprises the Mobile Equipment (ME) and the Subscriber Identity Module
20
(SIM). The ME comprises the Mobile Terminal (MT) which, depending on the
application and services. It may support various combinations of Terminal Adapter
(TA) and Terminal Equipment (TE) functional groups.
2.3. GPRS system architecture

The purpose of the General Packet Radio Services (GPRS) network is to provide an
efficient system designed for data transfer for mobile users. It acts as the access
network towards computer networks, such as Internet or Intranet.
The existing GSM system is largely reused and thus new hardware needs to be
integrated in the existing network. Moreover GPRS can be based on GSM 900 and
GSM 1800/1900. GPRS requires new type of MS. Parts of the GPRS system that
carry out the switching of the packet data are called Serving GPRS Support Node
(SGSN) and Gateway GPRS Support Node (GGSN). The SGSN is responsible for
packet data routing to/from the geographical SGSN service area. The GGSN makes
up the interfaces towards the external Internet Protocol (IP) packet networks. The
SGSN and GGSN are physically separated from the GSM circuit switched network.
The other parts of the GPRS system utilize the existing GSM network. In the basic
configuration of the GPRS system presented in Figure 2.5, all the functions are
considered implemented in different logical nodes. If two logical nodes are
implemented in the same physical equipment, the relevant interfaces may become
internal to that equipment.
MS BSS SS External
networks
VLR
MSC
PLMN
ME GMSC
SMS-GMSC PSTN
BTS BSC EIR AUC HLR SMS-IWMSC
SIM ISDN
SGSN GGSN PDN
Signalling
Signalling and data transfer interface
Figure 2.5. Configuration of a PLMN supporting GPRS.
2.3.1. GPRS Support Nodes

A GPRS Support Node, GSN contains functionality required to support GPRS. In
one PLMN, there may be more than one GSN. There are two kinds of GSNs:
21
• Serving GPRS Support Node (SGSN).

• Gateway GPRS Support Node (GGSN).
2.3.2. Serving GPRS Support Node (SGSN)

The Serving GPRS Support Node (SGSN) is a primary component in the GSM
network using GPRS and it is a new component in GSM. It forwards incoming and
outgoing IP packets addressed to or from an MS that is attached within the SGSN
area. The SGSN is the node that is serving the MS (i.e., the Gb interface is supported
by the SGSN). At GPRS attach, the SGSN establishes a mobility management
context containing information pertaining to e.g., mobility and security for the MS.
At PDP Context Activation, the SGSN establishes a PDP context, to be used for
routing purposes, with the GGSN that the GPRS subscriber will be using.
The SGSN provides:
• Packet routing to and from the SGSN area.
• Ciphering and authentication.
• Session management.
• Logical link management towards the MS.
• Connection to HLR, MSC, BSC, SMS-GMSC, SMS-IWMSC, GGSN.
• Output of charging data. The SGSN collects charging information foe each MS
related to the radio network usage. Both the SGSN and GGSN collect charging
information on usage of the GPRS network resources.
The location register function in the SGSN stores two types of subscriber data
needed to handle originating and terminating packet data transfer:
• Subscription information.
• IMSI.
• One or more temporary identities.
• Zero or more Packet Data Protocol (PDP) addresses.
• Location information.
• Depending on the operating mode of the MS, the cell or the routing area where
the MS is registered.
• The VLR number of the associated VLR (if the Gs interface is implemented).
• The GGSN address of each GGSN for which an active PDP context exists.
2.3.3. Gateway GPRS Support Node (GGSN)

The GGSN is the first point of Packet Data Network (PDN) interconnected with a
GSM PLMN supporting GPRS (i.e., the Gi reference point is supported by the
GGSN). GGSN is accessed by the packet data network due to evaluation of the PDP
address. It contains routing information for attached GPRS users. The routing
information is used to tunnel Packet Data Units (PDUs) to the MS's current point of
attachment, i.e., the Serving GPRS Support Node. The GGSN may request location
22
information from the HLR via the optional Gc interface. Gateway GPRS Support
Node provides:
• The interface towards the external IP packet networks. It contains access
functionality that interfaces external Internet Service Provider (ISP) functions
which are used for security purposes. From external IP network’s point of
view, the GGSN acts as a router for IP addresses of all subscribers served by
the GPRS network. The GGSN thus exchanges routing information with the
external networks.
• GPRS session management, communication set up towards external networks.
• Functionality for associating the subscriber to the right SGSN.
• Output of charging data. The GGSN collects charging information for each
MS, related to the external data network usage.
The location register function in the GGSN stores subscriber data received from the
HLR and the SGSN. There are two types of subscriber data needed to handle
originating and terminating packet data transfer:
• Subscription information.
• IMSI.
• Zero or more PDP addresses.
• Location information.
• The SGSN address for the SGSN where the MS is registered.
2.3.4. MSC and SGSN co-operation

The MSC/VLR is connected to the SGSN using the Gs interface. In order to support
that interface the MSC/VLR needs a software upgrade.
The Gs interface is used for dealing efficiently with terminals that are attached to
both GPRS (Packet Switched) and to GSM (Circuit-switched) traffic. There are two
main actions taking place over the Gs interface:
• Combined Location Area/Routing Area update.
• Circuit-switched paging over GPRS.
Combined Location Area/Routing Area update

When the MS is both IMSI and GPRS-attached, the LA and RA updating is done in a
co-ordinated way to save radio resources if supported by the network operation
mode.
When the MS enters a new RA in network operation Mode I, then the MS sends a
Routing Area Update Request message to the SGSN. The LA update is included in
the RA update. The SGSN then forwards the LA update to the MSC/VLR. The
MSC/VLR optionally returns a new VLR TMSI, which is sent to the MS via the
SGSN. The SGSN and the MSC/VLR separately report the new location of the MS
to the HLR.
This concerns only idle mode (see GSM 03.22), as no combined RA/LA updates are
performed during a CS connection.
23
Circuit-switched paging over GPRS

When an MS is both IMSI and GPRS-attached in a network that operates in Network
Operation Mode I (which is one out of three ways to handle CS paging), then the
MSC/VLR executes paging for circuit-switched services via the SGSN. In Mode I –
unlike Mode II and III – the GPRS and CS paging is co-ordinated. Paging co-
ordination means that the network sends paging messages for circuit-switched
services on the same channel as used for packet-switched services, i.e., on the GPRS
paging channel or on the GPRS traffic channel, and the MS needs only to monitor
that channel.
The MSC/VLR also supports sending SMS over GPRS. The MSC/VLR can order the
SGSN to get information about the next radio contact with the GPRS mobile. This
can be used to trigger the delivery of an SMS. If the sending of an SMS via GSM
circuit-switched network is unsuccessful, the MSC/VLR can retransmit the SMS
when the SGSN informs the MSC/VLR about radio contact with the mobile
subscriber.
2.3.5. GPRS Mobile Station

The MS is a combination of Terminal Equipment and Mobile Terminal. The MT and
TE components may actually be in the same piece of equipment.
Terminal Equipment (TE)

TE is the computer terminal on which the end-user works. This is the component
used for GPRS system to transmit/receive end-user packet data. The GPRS system
provides IP connectivity between the TE and the Internet
Service Provider or Corporate Local Area Network (LAN) connected to the GPRS
system. From the TE point of view the Mobile Terminal can be compared to a
modem that connects the TE to the GPRS system.
Mobile Terminal (MT)

The MT communicates with a TE and over the air interface with a BTS. The ME
must be equipped with appropriate software for GPRS use. The MT is associated
with a subscriber in the GSM system. MT establishes a link to an SGSN. The IP
connectivity is static from the TE point of view. It means that the TE is not aware it
is a mobile station and retains its assigned IP address until the MT detaches.
2.4. Radio access methods
2.4.1. Duplex
In a two way communication, there are two directions of transmission that must be
separated from each other to avoid collisions. This separation process is called
duplex. Transmission from the mobile station to the base station is referred to as
Uplink (UL), while the transmission from the base station to the mobile station is
referred to as Downlink (DL). The directions of transmission can be separated in
24
frequency or time domain. Frequency Division Duplex (FDD) system uses different
frequency bands for uplink and downlink, separated by the duplex distance, see
Figure 2.6, while the Time Division Duplex (TDD) system uses the same frequency
band for both uplink and downlink which is time shared as presented in Figure 2.6.
In case of FDD, the uplink is placed on the lower frequency band because the
transmission of lower frequency radio wave requires less energy comparing to the
higher frequency band, on which the downlink is placed. In FDD solution the
transmission and reception may take place continuously or discontinuously. An
examples of the FDD system is GSM.
Frequency Division Duplex (FDD) Time Division Duplex (TDD)
Frequency Frequency
DL
Duplex
distance DL UL DL UL DL UL
UL
TDD frame
Time Time
Figure 2.6. FDD and TDD concept.
TDD requires only one frequency, that may be an advantage in case when the
availability of radio resources is a limiting factor. On the other hand, to avoid any
collisions, TDD system requires a time structure (synchronization) to separate the
uplink and downlink transmission, which is always discontinuous. An examples of
the TDD system is cordless telephony system.
2.4.2. Multiple access

Another problem apart of duplex transmission separation, that must be solved, is the
way of accessing the radio resources. Therefore an harmonized access of multiple
mobile stations to the shared radio resources must exist. In uplink direction a number
of mobile stations transmit to the base station. Thus the multiple access technology is
required, which allows the base station to separate transmissions from different MSs.
In downlink direction a single base station has to keep a connection with multiple
users. For that reason a multiplexing method is applied, which allows the signals
dedicated to different users to be multiplexed in order to be correctly detected at the
receiving side.
FDMA
Frequency Division Multiple Access (FDMA) was the first multiple access
technology applied. The available radio resources were divided in frequency domain.
For each connection a separate frequency band of equal width was allocated. The
25
transmission was continuous and no synchronisation in time was required. An

example of FDMA system is Advanced Mobile Phone Systems (AMPS) – the first
generation cellular system developed in North America.
TDMA
Another solution of a multiple access technology is Time Division Multiple Access
(TDMA). The available radio resources are divided in time domain into timeslots
(TS). .A certain number of timeslots create so called TDMA frame. This number is
system specific. For example in GSM system, which is an example of TDMA
system, eight TSs make up a TDMA frame. A single mobile station has a cyclic
access to the common radio resources during the allocated timeslot. Thus the
transmission is discontinuous and the synchronisation is needed in order to avoid
overlapping of bursts, that is the information content, sent in adjacent timeslots
In fact GSM system uses a combination of FDMA and TDMA technology. For
example in GSM 900 system 124 frequency band is divided into TDMA frames,
each containing eight timeslots. The same combination of radio access technology is
used in other second generation cellular systems, like Digital Advanced Mobile
Phone Systems (D-AMPS) developed in United States or Personal Digital Cellular
(PDC) used in Japan.
CDMA
Code Division Multiple Access (CDMA) allows for simultaneous transmission of
multiple users in the same wide frequency band. Separation of different connections
is achieved by use of different codes with a specific properties, which are further
discussed in this chapter. The main characteristic of the Wideband CDMA
(WCDMA) system is wideband transmission that allows to lower the power density
and average power itself. For example in FDMA systems narrow channels are used
and a certain amount of power must be allocated. The spectral power density, that is
the average power per bandwidth is relatively high.
2.5. GSM air interface
2.5.1. Frequency bands

There are the following frequency bands defined for mobile telephony system (note
that the term GSM 900 is used for any GSM system which operates in any 900 MHz
band), which is also illustrated in Figure 2.7:
26
R-GSM R-GSM
900 900
UL DL
E-GSM E-GSM
900 900
UL DL
P- P-
GSM GSM
900 900
UL DL
850 900 950 1000

Frequency [Mhz]
GSM 1900 GSM 1900

UL DL
GSM 1800 GSM 1800
UL DL
1700 1750 1800 1850 1900 1950 2000

Frequency [Mhz]
Figure 2.7. Frequency bands for different GSM based systems.
• Standard or Primary GSM 900 (P-GSM) band.

For Standard GSM 900 band, the system is required to operate in the following
frequency band:
○ 890-915 MHz: uplink (mobile transmit, base receive).
○ 935-960 MHz: downlink (base transmit, mobile receive).
• Extended GSM 900 (E-GSM) band.
It includes Standard GSM 900 band. For Extended GSM 900 band, the system
is required to operate in the following frequency band:
○ 880-915 MHz: uplink.
○ 925-960 MHz: downlink.
• Railways GSM 900 (R-GSM) band.
It includes Standard and Extended GSM 900 band. For Railways GSM 900
band, the system is required to operate in the following frequency band:
○ 876-915 MHz: uplink.
• GSM 1800 band.
For GSM 1800, the system is required to operate in the following band:
○ 1710-1785 MHz: uplink.
• GSM 1900 band.
For GSM 1900, the system is required to operate in the following band:
○ 1850-1910 MHz: uplink.
27
Operators may implement networks which operate on a combination of the frequency

bands above to support multi band mobile terminals which are defined in GSM
02.06.
2.5.2. Channel concept

The carrier spacing in all frequency bands is 200 kHz. This yields 124 carriers in P-
GSM 900 band, 374 carriers in GSM 1800 band and 299 carriers in GSM 1900 band.
The carrier frequency is designated by the Absolute Radio Frequency Channel
Number (ARFCN). Let us denote by F UL (n) the frequency value of the carrier
ARFCN n in the lower band (uplink), and by F DL (n) the corresponding frequency
value in the upper band (downlink). Then, the allocated carriers to the frequency
bands are presented in Table 2.1.
Because GSM system is based by TDMA, every carrier can be shared in time domain
by eight MSs. This yields 992 Basic Physical Channels (BPCs) in P-GSM 900, 2992
in GSM 1800 and 2392 in GSM 1900, see Figure 2.8.
Frequency band Uplink ARFCN Downlink
P-GSM 900 F UL (n ) = 890 + 0.2·n 1 ≤ n ≤ 124 F DL (n ) = F UL (n ) + 45

F UL (n ) = 890 + 0.2·n 0 ≤ n ≤ 124
E-GSM 900 F DL (n ) = F UL (n ) + 45
F UL (n ) = 890 + 0.2·(n − 1024) 975 ≤ n ≤ 1023
F UL (n ) = 890 + 0.2·n 0 ≤ n ≤ 124
R-GSM 900 F DL (n ) = F UL (n ) + 45
F UL (n ) = 890 + 0.2·(n − 1024) 955 ≤ n ≤ 1023
GSM 1800 F UL (n ) = 1710.2 + 0.2·(n − 512) 512 ≤ n ≤ 885 F DL (n ) = F UL (n ) + 95
GSM 1900 F UL (n ) = 1850.2 + 0.2·(n − 512) 512 ≤ n ≤ 810 F DL (n ) = F UL (n ) + 80
Table 2.1. Frequency bands with allocated carriers. Frequencies are in MHz.
BPC represents a specific radio resources in frequency and time domain, which can
be used to exchanged information between BTS and MS. Different logical
information can be sent on the BPC. A number of logical channels are mapped on
each BPC. Each logical channel is used for specific purpose, for example paging, call
set-up signalling or speech.
Basic Physical Channel

Frequency
3 4 5 6 7 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7
200 kHz 6 7 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7 0 1 2
4 5 6 7 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7 0
Time
0.577 ms
Figure 2.8. Basic Physical Channel.
28
2.5.3. GSM logical channels

GSM logical channels are divided into two main groups:
• Traffic channels – providing capacity for circuit switched transmission of user-
generated traffic (such as voice calls, fax and data connections),
• Control channels – providing capacity for network signalling (control
information), as well as user signalling (SMS).
The various logical channels have been shown in Figure 2.9 and Figure 2.10.
Traffic Channels (TCH)

Traffic channels are intended to carry either speech or data in circuit switched mode.
Two general forms of TCH are defined:
• Full rate traffic channel (TCH/F). This channel carries information at a gross
rate 1 of 22.8 kbit/s.
• Half rate traffic channel (TCH/H). This channel carries information at a
gross rate of 11.4 kbit/s.
Unidirectional downlink full rate channels (TCH/FD) are defined as the downlink
part of the corresponding TCH/F.
Multiple full rate channels can be allocated to the same MS. This is referred to as
multislot configurations.
The specific traffic channels available in the categories of speech and user data are
defined below:
• The following traffic channels are defined to carry speech:
○ Full rate traffic channel for speech (TCH/FS).
○ Half rate traffic channel for speech (TCH/HS).
○ Enhanced full rate traffic channel for speech (TCH/EFS).
○ Adaptive full rate traffic channel for speech (TCH/AFS).
○ Adaptive half rate traffic channel for speech (TCH/AHS).
• The following traffic channels are defined to carry user data:
○ Full rate traffic channel for 9.6 kbit/s user data (TCH/F9.6).
○ Half rate traffic channel for 4.8 kbit/s user data (TCH/H4.8).
○ Half rate traffic channel for ≤ 2.4 kbit/s user data (TCH/H2.4).
○ Full rate traffic channel for ≤ 2.4 kbit/s user data (TCH/F2.4).
1
The term “gross rate” indicates in this context the maximum bit rate of the user information after all
stages of signal processing.
29
Traffic Channels
Full Rate Traffic Channel, Bm1 Half Rate Traffic Channel, Lm2
TCH/F TCH/H
Speech 13 kbit/s Speech 5.6 kbit/s
Data max. 9.6 kbit/s (14.4 kbit/s) Data max. 4.8 kbit/s
1
Bm - Modified Bearer Channel
2
Lm - Limited Modified Bearer Channel
Figure 2.9. GSM traffic channels.
Broadcast Channels (BCH)

A BCH is a point-to-multipoint uni-directional control channel, from the fixed sub-
system to the Mobile Stations (downlink). There are the following Broadcast
Channels:
• The Frequency Correction Channel (FCCH) for frequency correction of the
MS. This channel transmits the unmodulated carrier signal 2. The purpose of
transmitting this information is twofold:
○ To assure the MS that it is listening to the BCCH carrier (C 0 frequency).
○ To allow the MS to fine tune its frequency to the BCCH carrier.
• The Synchronization Channel (SCH) carries information about TDMA
frame number and the Base Station Identity Code (BSIC) of the BTS. This
information is needed in the MS to allow its synchronisation to the TDMA
frame structure, as well as to distinguish between different BTSs re-using the
same frequency in the network.
• The Broadcast Control Channel (BCCH) broadcasts cell specific
information to the MSs. This information is frequently updated and enables the
MS to properly access the network. Examples of parameters broadcast on
BCCH are: Location Area Identity, maximum output power allowed in the cell
for the MS or the list of neighbouring BCCH carriers.
2
With a specific constant offset.
30
Control channels
Broadcast Channels Common Control Channels Dedicated Control Channels

BCH CCCH DCCH
Idle MS Initial communication Active MS
Frequency Correction Channel Paging Channel Stand alone Dedicated Control Ch.
FCCH PCH SDCCH
Figure 2.10. GSM control channels.

Call set-up, Location Updating,
C0 carrier frequency IMSI, TMSI
TCH Assignment, SMS (idle)
Synchronization Channel Random Access Channel Cell Broadcast Channel

SCH RACH CBCH
TDMA frame number and BSIC Request for a dedicated channel SMS CB
Broadcast Control Channel Access Grant Channel Slow Associated Control Channel
BCCH AGCH SACCH
System information types 1-4 & 7-8 Immediate Assignment System info. type 5 & 6, MS power,
(LAI, BA list, cell options,...) i.e. SDCCH or TCH allocation TA, Meas. report, SMS (active)
Notification Channel Fast Associated Control Channel

NCH FACCH
Voice group and/or voice broadcast Handover, DTMF, call: waiting, hold;
calls notification messages call release
31
Common Control Channel (CCCH)

A Common Control Channel (CCCH) is a point-to-multipoint bi-directional control
channel. CCCH is primarily intended to carry signalling information necessary for
access management functions (e.g. allocation of dedicated channels). The CCCH can
be used for other signalling purposes. There are the following CCCH:
• The Paging Channel (PCH) is the remaining part of the downlink part of the
CCCH used to page the MS.
• The Random Access Channel (RACH) is the uplink (MS to network) part of
the CCCH used by the MS to request allocation of a signalling channel,
normally a Stand-alone Dedicated Control Channel (SDCCH), either as a page
response or an access at any MS-initiated system procedure (e.g. MS
originating call, SMS or Location Updating).
• The Access Grant Channel (AGCH) is the part of the downlink (network to
MS) part of the CCCH reserved for assignment messages.
• The Notification Channel (NCH) is the downlink part of the CCCH reserved
for voice group and/or voice broadcast calls notification messages.
Dedicated Control Channel (DCCH)

• The Stand alone Dedicated Control Channel (SDCCH) is a point-to-point
bi-directional or uni-directional control channel. SDCCHs exist with a variety
of bit rates.
• The Fast Associated Common Control Channel (FACCH) is a bi-
directional control channel obtained by pre-emptive dynamic multiplexing on
respectively a TCH/F or a TCH/H channel. The allocation of a FACCH is
obviously linked to the allocation of a TCH.
• The Slow Associated Control Channel (SACCH) is either a bi-directional or
uni-directional control channel. An independent SACCH is always allocated
together with a TCH or a SDCCH. The co-allocated TCH and SACCH shall be
either both bi-directional or both uni-directional. A Multislot Configuration is
an example of a case where uni-directional SACCHs may be used.
32
2.5.4. GSM channel configurations

The following are the permitted ways in which logical channels can be combined
onto Basic Physical Channels (BPCs) (numbers appearing in parenthesis after
channel designations indicate sub-channel numbers; channels and sub-channels need
not necessarily be assigned):
(i) TCH/F + FACCH/F + SACCH/TF
(ii) TCH/H(0,1) + FACCH/H(0,1) + SACCH/TH(0,1)
(iii) TCH/H(0,0) + FACCH/H(0,1) + SACCH/TH(0,1) + TCH/H(1,1)
(iv) FCCH + SCH + BCCH + CCCH
(v) FCCH + SCH + BCCH + CCCH + SDCCH/4(0..3) + SACCH/C4(0..3)
(vi) BCCH + CCCH
(vii) SDCCH/8(0..7) + SACCH/C8(0..7)
(viii) TCH/F + FACCH/F + SACCH/M
(ix) TCH/F + SACCH/M
(x) TCH/FD + SACCH/MD
where
CCCH = PCH + RACH + AGCH + NCH.
When the Short Message Cell Broadcast (MSCB) is supported, the CBCH replaces
SDCCH number 2 in cases (v) and (vii) above.
A combined CCCH/SDCCH allocation (case (v)) may only be used when no other
CCCH channel is allocated.
Combinations (viii), (ix) and (x) are used in multislot configurations.
Figure 2.11 illustrates mapping of channel combinations (iv) and (v) on the downlink
on TS 0 of the C 0 carrier.
Figure 2.12 and Figure 2.13 illustrate mapping of channel combinations (i), (iv) and
(vii) on the downlink and uplink of the C 0 carrier.
33
Channel configuration (iv): Channel configuration (v):

FCCH + SCH + BCCH + CCCH FCCH + SCH + BCCH + CCCH + SDCCH/4 + SACCH/C4
FCCH FCCH FCCH

SCH SCH SCH
BCCH BCCH BCCH
BCCH BCCH BCCH
BCCH BCCH BCCH
BCCH BCCH BCCH
CCCH CCCH CCCH
CCCH CCCH CCCH
B0 CCCH
B0 CCCH CCCH
CCCH CCCH CCCH
FCCH FCCH FCCH
SCH SCH SCH
CCCH CCCH CCCH
CCCH CCCH CCCH
B1 B1
CCCH CCCH CCCH
CCCH CCCH CCCH
CCCH CCCH CCCH
CCCH CCCH CCCH
B2 B2
CCCH CCCH CCCH
CCCH CCCH CCCH
FCCH FCCH FCCH
SCH SCH SCH
Block number
CCCH SDCCH(0) SDCCH(0)

B3
B4
FCCH FCCH FCCH
SCH SCH SCH
B5
B6
FCCH FCCH FCCH
SCH SCH SCH
CCCH SACCH(0) SACCH(2)
B7
B8
IDLE IDLE IDLE
Figure 2.11. Mapping of channel combinations (iv) and (v).
34
Downlink
0 1 2 3 4 5 6 7
Frame 0 FCCH TCH SDCCH(0) TCH TCH TCH TCH TCH
SCH TCH SDCCH(0) TCH TCH TCH TCH TCH
BCCH TCH SDCCH(0) TCH TCH TCH TCH TCH
CCCH TCH SDCCH(1) TCH TCH TCH TCH TCH
CCCH IDLE SDCCH(3) IDLE SACCH IDLE SACCH IDLE
CCCH SACCH SDCCH(6) SACCH IDLE SACCH IDLE SACCH
CCCH TCH SACCH(0) TCH TCH TCH TCH TCH
CCCH IDLE SACCH(1) IDLE SACCH IDLE SACCH IDLE
Frame 40 FCCH TCH SACCH(2) TCH TCH TCH TCH TCH
SCH TCH SACCH(2) TCH TCH TCH TCH TCH
CCCH TCH IDLE TCH TCH TCH TCH TCH
CCCH TCH IDLE TCH TCH TCH TCH TCH
Frame 50 IDLE TCH IDLE TCH TCH TCH TCH TCH
Figure 2.12. Example of channel mapping on C 0 downlink – combinations (i), (iv) and (vii).
35
Uplink
0 1 2 3 4 5 6 7
Frame 0 RACH TCH SACCH(5) TCH TCH TCH TCH TCH
RACH TCH SACCH(5) TCH TCH TCH TCH TCH
RACH IDLE IDLE IDLE SACCH IDLE SACCH IDLE
RACH TCH IDLE TCH TCH TCH TCH TCH
RACH TCH IDLE TCH TCH TCH TCH TCH
RACH TCH SDCCH(0) TCH TCH TCH TCH TCH
Frame 20 RACH TCH SDCCH(1) TCH TCH TCH TCH TCH
RACH SACCH SDCCH(2) SACCH IDLE SACCH IDLE SACCH
RACH IDLE SDCCH(5) IDLE SACCH IDLE SACCH IDLE
Figure 2.13. Example of channel mapping on C 0 uplink – combinations (i), (iv) and (vii).
36
2.5.5. Frames structure

A timeslot has a duration of 3/5200 seconds (≈ 0.577 ms). Eight timeslots form a
TDMA frame (≈ 4.62 ms in duration). At the BTS the TDMA frames on all of the
radio frequency channels in the downlink are aligned. The same shall apply to the
uplink. At the BTS the start of a TDMA frame on the uplink is delayed by the fixed
period of 3 timeslots from the start of the TDMA frame on the downlink (see Figure
2.14). At the MS this delay is variable to allow adjustment for signal propagation
delay. The process of adjusting this advance is known as adaptive frame alignment.
The staggering of TDMA frames used in the downlink and uplink is in order to allow
the same timeslot number to be used in the downlink and uplink whilst avoiding the
requirement for the mobile station to transmit and receive simultaneously. The period
includes time for adaptive frame alignment, transceiver tuning and receive/transmit
switching.
3 timeslots
Downlink BTS TX 0 1 2 3 4 5 6 7
MS RX 0 1 2 3 4 5 6 7
Uplink MS TX 0 1 2 3 4 5 6 7
BTS RX 0 1 2 3 4 5 6 7
Time
1 timeslot
(~0.577 ms)
Figure 2.14. Downlink and uplink TDMA frame.
Timeslot number
The timeslots within a TDMA frame are numbered from 0 to 7 and a particular
timeslot shall be referred to by its Timeslot Number (TN).
TDMA frame number

TDMA frames are numbered by a Frame Number (FN). The frame number us cyclic
and have a range of 0 to FN_MAX, where FN_MAX = (26×51×2048) − 1 = 2715647.
The Frame Number shall be incremented at the end of each TDMA frame.
The complete cycle of TDMA frame numbers from 0 to FN_MAX is defined as a
hyperframe. A hyperframe consists of 2048 superframes where a superframe is
defined as 26×51 TDMA frames. A 26-multiframe, comprising 26 TDMA frames, is
used to support traffic and associated control channels. A 51-multiframe, comprising
37
51 TDMA frames, is used to support BCH, CCCH and SDCCH (and their associated
control). Hence a superframe may be considered as 51 traffic/associated control
multiframes or 26 broadcast/common control multiframes. A 52-multiframe,
comprising two 26-multiframes, is used to support PDTCH and control channels.
The need for a hyperframe of a substantially longer period than a superframe arises
from the requirements of the encryption process which uses FN as an input
parameter. The frames structure is presented in Figure 2.15.
Hyperframe = 2,048 superframes = 2,715,448 TDMA frames

(3 hours 28 minutes 53 seconds 760 microseconds)
0 1 2 3 4 5 6 7 8 9 10 11 2044 2045 2046 2047
Superframe = 51 25-multiframes = 26 51-multiframes = 1,326 TDMA frames

(6.12 seconds)
0 1 2 3 4 5 6 7 8 9 10 11 47 48 49 50
0 1 2 3 4 5 24 25
26-multiframe = 26 TDMA frames 51-multiframe = 51 TDMA frames

(120 ms) (235.4 ms)
0 1 2 3 4 5 24 25 0 1 2 3 4 5 6 7 8 9 10 11 47 48 49 50
TDMA frame = 8 timeslots

(120/26 ms ~ 4.615 ms)
0 1 2 3 4 5 6 7
Figure 2.15. Frames structure.
2.5.6. Burst formats

A timeslot is divided into 156.25 bit periods. A particular bit period within a timeslot
is referenced by a Bit Number (BN), with the first bit period being numbered 0, and
the last (1/4) bit period being numbered 156. The bit with the lowest bit number is
transmitted first.
A burst is a period of radio frequency carrier which is modulated by a data stream. A
burst therefore represents the physical content of a timeslot.
Different types of burst exist in the system. One characteristic of a burst is its useful
duration. Below four full bursts of 147 bits useful duration, and one short burst of
88 bits useful duration are defined, see also Figure 2.16.
• Normal Burst (NB). This burst is used to carry information on traffic and
control channels. For the TCH it contains 114 encrypted bits and includes a
guard time of 8.25 bit duration. The stealing flag is relevant only for the TCH.
38
TDMA frame = 8 timeslots

(120/26 ms ~ 4.615 ms)
0 1 2 3 4 5 6 7
Normal Burst (flag is relevant for TCH only)

Tail Encrypted bits Flag Training sequence Flag Encrypted bits Tail GP
3 57 1 26 1 57 3 8.25
Frequency correction Burst

Tail Fixed bits Tail GP
3 142 3 8.25
Synchronization Burst
Tail Encrypted bits Training sequence Encrypted bits Tail GP
3 39 64 39 3 8.25
Access Burst and Handover Access burst

Tail Synchronization Encrypted bits Tail GP
8 sequence 41 36 3 68.25
Dummy Burst
Tail Encrypted bits Training sequence Encrypted bits Tail GP
3 58 26 58 3 8.25
Timeslot = 156.25 bits (~ 0.577 ms)
GP = Guard Period
Figure 2.16. Bursts structure.
• Frequency correction Burst (FB). This burst is used for frequency

synchronization of the MS. It consists of zeros only. The repetition of FBs is
FCCH.
• Synchronization Burt (SB). This burst is used for time synchronization of the
MS. It contains a long training sequence and carries the information of the
TDMA Frame Number, FN and Base Station Identity Code (BSIC). The
repetition of SBs is called SCH.
• Access Burst (AB). This burst is used for random access and handover access.
It is characterized by a long guard period (68.25 bit duration) to cater for burst
transmission from an MS that does not know the timing advanced at the first
access or handover. This allows for a cell radius of 35 km. The access burst is
used on the RACH and on the FACCH at handover.
• Dummy Burst (DB). This burst is transmitted on the radio frequency C 0 when
no other type of burst is to be sent. This burst is used to maintain the
transmission on the frequency carrying the system information, thus making it
possible for the MSs to perform power measurements on carrier C 0 for cell
selection and reselection purposes. The CCCH is also replaced by the dummy
39
burst, so called dummy page, when there is no paging message to transmit.

This dummy page is a page to non-existing MS.
Guard Period
The period between bursts appearing in successive timeslots is termed the Guard
Period (GP).
The guard period is provided because it is required for the MSs that transmission be
attenuated for the period between bursts with the necessary ramp up and down
occurring during the guard periods. A base transceiver station is not required to have
a capability to ramp down and up between adjacent bursts, but is required to have a
capability to ramp down and up for non-used timeslots. In any case where the
amplitude of transmission is ramped up and down, then by applying an appropriate
modulation bit stream interference to other RF channels can be minimized.
2.6. GPRS air interface
2.6.1. GPRS logical channels

Figure 2.17 lists the GPRS logical channels and their functions. A detailed
description of each channel is presented below.
Packet Broadcast Control Channel (PBCCH)

The Packet Broadcast Control Channel (PBCCH) transmits system information to
all GPRS terminals in a cell.
Packet Common Control Channel (PCCCH)

• The Packet Paging Channel (PPCH) is used to page an MS prior to downlink
packet transfer.
• The Packet Random Access Channel (PRACH) is used by MS to initiate
packet transfer or to respond to paging messages. On this channel MS
transmits access burst with long guard period. On receiving access burst, the
BSS assigns a Timing Advance (TA) to each terminal.
• The Packet Access Grant Channel (PAGCH) is used in the packet transfer
establishment phase to send resource assignment to an MS prior to the packet
transfer.
• The Packet Notification Channel (PNCH) is used to send a Point to
Multipoint-Multicast (PTM-M) notification to a group of MSs prior to PTM-M
packet transfer. The notification has the form of a resource assignment for the
packet transfer.
• The Packet Timing advance Control Channel (PTCCH) is a bi-directional
control channel carrying synchronization data for a group of up to 16 MSs in
packet transfer state. On uplink Packet Timing Advanced Control Channel all
MSs with established Temporary Block Flows (TBFs) are sending short access
bursts. The network calculates the delay between the beginning of the TS and
the beginning of the burst. On downlink PTCCH the network sends the timing
40
advance values that specify how many bit time durations earlier each of the
MS should start its transmission. The PTCCH is organised into separate sub-
channels that are assigned to the MSs during TBF establishment, so the
collision is not possible.
Synchronization
PTCCH
Packet Traffic Channel
PTCH
Associated
PACCH
Control
GPRS logical channels
PDTCH
Data
Random Access
Access Grant
Multicast
PRACH
PAGCH
Paging
PNCH
PPCH
PCCCH
Packet control channels
Broadcast
PBCCH
Figure 2.17. GPRS logical channels.
41
Packet Traffic Channel (PTCH)

• The Packet Data Traffic Channel (PDTCH) corresponds to the resource
allocated to a single MS on one Basic Physical Channel (BPC) for user data
transmission. Due to the dynamic multiplexing onto the same BPC of different
logical channels a PDTCH carries information at an instantaneous bit rate
ranging from 0 to 22.8 kbit/s.
Multiple PDTCHs can be allocated to the same MS. This is referred to as
multislot packet configurations.
All PDTCHs are uni-directional, either uplink, PDTCH/U, for a mobile
originated packet transfer or downlink, PDTCH/D for a mobile terminated
packet transfer.
• The Packet Associated Control Channel (PACCH) is used to convey
signalling information related to a given MS such as acknowledgement and
power control information. It also carries resource assignment and re-
assignment messages, either for the allocation of a PDTCH or for further
occurrence of a PACCH that are concurrently assigned to one MS.
2.6.2. GPRS radio resources
Packet Data Channel (PDCH)

GPRS utilizes the same radio resources as GSM. For GPRS usage, a certain group of
basic physical channels (BPCs) in the cell is reserved. Those channels reserved for
GPRS are called Packet Data Channels (PDCHs). The PDCHs can take any position
in the cell except Co frequency TS0, which is always reserved for BCH and CCCH.
The network can allocate the same PDCH for a number of MSs, which allows to
dynamically share radio resources. It can also allocate radio resources for a certain
user on more then one PDCH, which allows higher transmission bit rates.
52-multiframe
For transmission of PDCH a new 52 TDMA multiframe is used, which is shown in
Figure 2.18. The radio blocks B0-B11 are built of four consecutive TDMA frames on
a certain timeslot. The mapping of the GPRS logical channels onto BPCs in the
multiframes is much more flexible than in GSM, as the majority of GPRS logical
channels do not have a constant position reserved. The TDMA frames denoted by
“x” carry Packet Timing advanced Control Channel (PTCCH) and frames denoted by
“I” are idle.
52-multframe = 52 TDMA frames

(240 ms)
B0 B1 B2 x B3 B4 B5 I B6 B7 B8 x B9 B10 B11 I
B0 − B11 = radio blocks

x = PTCCH
I = idle frame
Figure 2.18. PDCH multiframe structure.
42
Radio block
The radio block contains user data bits (RLC data block), see Figure 2.19, The ata
user bits may be encoded using any of the available channel coding schemes CS-1,
CS-2, CS-3, or CS-4 (see GSM 05.03). The size of the RLC data block for each of
the channel coding schemes is shown in Table 2.2. Table 2.2 presents also the
maximum data rate (throughput) per timeslot. The current throughput depends on the
interference level experienced by the user, see Figure 2.20
RLC data block

RLC/MAC block
MAC header RLC header RLC data unit spare
RLC/MAC control block

RLC/MAC block
MAC header Control header RLC/MAC signalling
52-multframe = 52 TDMA frames

(240 ms)
B0 B1 B2 x B3 B4 B5 I B6 B7 B8 x B9 B10 B11 I
Figure 2.19. RLC/MAC block structure. RLC = Radio Link Control protocol. MAC = Medium Access Control
protocol.
RLC data block Maximum

Channel
RLC data block Number size without RLC data unit RLC data
Coding
size of spare bits spare bits size unit bit rate
Scheme
(octets) (bits) (octets) (octets) (kbps)
CS-1 22 0 22 20 8
CS-2 32 7/8 7 32 30 12
CS-3 38 3/8 3 38 36 14.4
CS-4 52 7/8 7 52 50 20
Table 2.2. RLC data block size.
43
25
CS-1
CS-2
Throuhgput per channel [kbps]

20
CS-3
CS-4
15
10
0
0 5 10 15 20 25 30
C/I [dB]
Figure 2.20. GPRS coding schemes throughput (TU 50, ideal FH).
2.6.3. Temporary Block Flow (TBF)

The transmission of RLC/MAC blocks in downlink or uplink direction is called
Temporary Block Flow (TBF). The TBF is allocated radio resource on one or more
PDCHs. A TBF is temporary and is maintained only for the duration of the data
transfer (i.e. until there are no more RLC/MAC blocks to be transmitted and, in RLC
acknowledged mode, all of the transmitted RLC/MAC blocks have been successfully
acknowledged by the receiving entity).
MS can have uplink TBF, downlink TBF or two separate TBFs in both directions.
TBF is assigned to the MS by the network during the procedure of TBF
establishment, which can be initiated by the MS or the network.
2.6.4. GPRS MS modes

Two modes of a GPRS mobile station are distinguished depending on if there is
ongoing or does not currently exists a TBF to/form the mobile station.
Packet idle mode

In packet idle mode no TBF exists. The mobile station monitors the relevant paging
subchannels on PCCCH, if such is present in the cell. If a PCCCH is not present in
the cell, the mobile station monitors the relevant paging subchannels on CCCH.
In packet idle mode, when a need for transfer of RLC/MAC block appears a TBF is
established and the transition to packet transfer mode.
44
Packet transfer mode

In packet transfer mode, the mobile station is allocated radio resource providing a
TBF for a physical point-to-point connection on one or more packet data physical
channel. Concurrent TBFs may be established in opposite directions.
When a transfer of RLC/MAC blocks terminates, in either downlink or uplink
direction, the corresponding TBF is released. When all TBFs have been released, in
downlink and uplink direction, the mobile station returns to packet idle mode.
45
This page is intentionally left blank
46

GSM - GPRS CP - 02 GSM and GPRS System Description

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

GSM - GPRS CP - 02 GSM and GPRS System Description

Uploaded by

Copyright:

Available Formats

2.

GSM and GPRS

2.6. GPRS air interface ............................................................................................ 40

2.1. The geographical structure of the GSM

Figure 2.1. The concept of a cell.

2.1.2. Location Area

Figure 2.2. The concept of Location Area.

2.1.3. MSC service area

2.1.4. PLMN service area

2.1.5. GSM service area

GSM Service Area

PLMN Service Area

Figure 2.3. The geographical structure of the GSM system

2.2. GSM system architecture

SIM SMS-GMSC SMS

Figure 2.4. GSM system architecture.

2.2.1. Switching System (SS)

• Home Location Register (HLR).

Mobile service Switching Centre (MSC)

Visitor Location Register (VLR)

Home Location Register (HLR)

of mobile subscribers, on the capacity of the equipment and on the organisation of

Gateway MSC (GMSC)

Authentication Centre (AuC)

Equipment Identity Register (EIR)

SMS Gateway MSC (SMS-GMSC)

SMS Interworking MSC (SMS-IWMSC)

2.2.2. Base Station System (BSS)

Base Transceiver Station (BTS)

Base Station Controller (BSC)

2.2.3. Mobile Station (MS)

2.3. GPRS system architecture

SGSN GGSN PDN

Figure 2.5. Configuration of a PLMN supporting GPRS.

2.3.1. GPRS Support Nodes

• Serving GPRS Support Node (SGSN).

2.3.2. Serving GPRS Support Node (SGSN)

2.3.3. Gateway GPRS Support Node (GGSN)

2.3.4. MSC and SGSN co-operation

Combined Location Area/Routing Area update

Circuit-switched paging over GPRS

2.3.5. GPRS Mobile Station

Terminal Equipment (TE)

Mobile Terminal (MT)

2.4. Radio access methods

Frequency Division Duplex (FDD) Time Division Duplex (TDD)

2.4.2. Multiple access

transmission was continuous and no synchronisation in time was required. An

2.5. GSM air interface

2.5.1. Frequency bands

850 900 950 1000

GSM 1900 GSM 1900

1700 1750 1800 1850 1900 1950 2000

Figure 2.7. Frequency bands for different GSM based systems.

• Standard or Primary GSM 900 (P-GSM) band.

Operators may implement networks which operate on a combination of the frequency

2.5.2. Channel concept

Frequency band Uplink ARFCN Downlink

P-GSM 900 F UL (n ) = 890 + 0.2·n 1 ≤ n ≤ 124 F DL (n ) = F UL (n ) + 45

Basic Physical Channel

Figure 2.8. Basic Physical Channel.

2.5.3. GSM logical channels

Traffic Channels (TCH)