ELE 52PMC

Department of Electronic Engineering

Personal Mobile Communication

GSM Public Land Mobile Network

(PLMN)

Michael Feramez
M.Feramez@latrobe.edu.au
Lecture 4
www.ee.latrobe.edu.au/~mf
 Introduction
 The European Telecommunication Standards Institute
(ETSI) standardised the Global System for Mobile
communications (GSM).
 ETSI originally defined GSM as a European digital
cellular telephony standard.
 The GSM interfaces defined by ETSI lay the ground-
work for a multivendor network approach to digital
mobile communication.
 GSM offers users good voice quality, call privacy, and
network security.
2
 GSM Statistics
 Number of Countries/Areas with GSM System is 205
(Feb 2004)
 GSM Total Subscribers - 1024.3 million (end Feb
2004)
 SMS messages sent per month - 45.6 Billion
 SMS forecast for 2004 - 547.5 Billion
 GSM accounts for 72.5% of the World's digital market
and 72.0% of the World's wireless market

Ref.: [5] GSM Association

3
GSM Subscribers Growth

Blue bars = in-year net gains

2001 is an estimate
4
GSM Subscribers by Region

5
 GSM/PSTN/ISDN

BSC MSC

M
SM SS#7
S BTS

M
SM
BTS S PSTN
M
BTS SM
S
ISDN

Others ….
6
OSI Protocol Reference Model

AP “X” AP Data AP “Y”

Application AH AP Data Application

Presentation PH AP Data Presentation

Session SH Data Unit Session

Transport TH Data Unit Transport

Network NH Data Unit Network

Data Link F A C Data Unit ( I Field ) FCS F Data Link

Physical Bits Physical

Communication Path

7
 OSI of GSM

Operator User
5. Operation Administration
& Maintenance OAM

4. Communication Management CM

3. Mobility Management MM

2. Radio Resource Management RR

1. Radio transmission (Physical) Transmission

8
 System Elements
 MS (Mobile Station)
– MT (Mobile Terminal)
– TE (Terminal Equipment)
 BS (Base Station)
– BTS (Base Transceiver Station)
– BSC (Base Station Controller)
 MSC (Mobile Switching Centre)

9
Maximum RF Power for MS

Class Max. RF Power (W)

I 20
II 8
III 5
IV 2
V 0.8

10
 Functional Architecture

A Interface
Base Station Subsystem
HLR (BSS)
BTS MS
MAP

MSC BSC
MAP
Um
Air Interface
VLR OAM
A-bis
Interface

11
 Internal Environment

OSS

MS BSS NSS

OSS Operation Subsystem

Control flow
BSS Base Station Subsystem
User data flow
MS Mobile Station
NSS Network & Switching Subsystem

12
 External Environment
Control flow
User data flow
OSS

BSS NSS PSTN

OSS Operation Subsystem BSS

BSS Base Station Subsystem
PSTN Public Switch Telephone Network
NSS Network & Switching Subsystem
13
 Um
TE MT BTS A-bis NMC ADC
MS
BTS BSC OMC OMC
TE MT
MS BTS BSS

A MSC MSC

TE MT BTS
MS
BTS BSC HLR VLR
TE MT
MS BTS BSS AUC EIR

A: Interface between BSC and MSC AUC: Authentication Centre

A-bis: Interface between BTS and BSC EIR: Equipment Identity Register
Um: Air Interface between MS and BTS HLR: Home Location Register
VLR: Visitor Location Register 14
 Functions of MSC
 Gateway to other networks (PSTN, ISDN, etc.),
 Paging of MS,
 MS location updating, and
 MS mobility management assisted by:
– Home Location Register (HLR), and
– Visitor Location Register (VLR).

15
Gateway MSC (GMSC) Key Role

HLR

Directory Routing
Number Number

MSC
User GMSC
Directory Routing VLR
Number Number

GMSC handling of a domestic call

16
 System Description
Analogue 13 bit
RPE-LTP RPE-LTP
I/P to 13 bit uniform to 8
encoder decoder
uniform bit A-Law

Radio Subsystem
13 kbps
104 kbps PSTN

MSC
/
ISDN

13 bit 8 bit A-Law

RPE-LTP RPE-LTP
O/P uniform to to 13 bit
decoder encoder
Analogue uniform

8000 samples/s
Analogue 8000 8000 samples/s 8-bit A-Law
speech samples/s 13-bit uniform ITU-T G.711, G.712,
13-bit uniform code G.713, G.714
code
17
 Radio Subsystem

Encoded speech Encoded speech

456 bits/frame 456 bits/frame

Forward Radio Access Radio Access

De- Error
Error Interleaving & Mod & Demod
Interleaving Correction
Coding GMSK GMSK

Dup Dup

Radio Access Radio Access Forward

Error De-
& Demod & Mod Interleaving Error
Correction Interleaving
GMSK GMSK Coding

18
Digital Radio Link Process
Speech Speech
Coding Decoding
Channel Channel
Coding Decoding
Bit Bit
Interleaving Deinterleaving

Encryption Decryption

Burst Forming
Demultiplexing
& Multiplexing
Delay
Equalisation

Modulation Demodulation

19
 Transmission
 Speech Coding
– Regular Pulse Excitation (RPE)
– Linear Prediction Coding (LPC)
 Data Service
 Modulation - GMSK
 GSM channels
– Physical channels
– Logical channels
 Multiple-access scheme (TDMA/FDMA, FH)

20
 Speech Coding
 A 4-kHz analogue signal is first converted to 64 kbps
and then to 13 kbps using RPE-LPC (Regular Pulse
Excitation - Linear Prediction Coding).
 RPE generates the impulse noise to simulate the nature
of speech.
 LPC compresses the speech waveform by using a filter
with 8 transmitted coefficient.
 There are two modes of voice transmission in GSM;
continuous (normal) and discontinuous.

21
 GSM Speech Processing - BS

13 kbps
MSC MS
side side
8-bit A-Law RPE-LTP
to 13-bit 13 x 8,000 = 104 kbps
uniform Speech
Converter Encoder
Digital To Channel
Speech Signal Encoder
(64 kbps)

RPE-LPC: Regular Pulse Excitation - Linear Prediction Coding

RPE-LTP: Regular Pulse Excitation - Long-Term Predictor
22
 GSM Speech Processing - MS

13 kbps
13 x 8,000 = 104 kbps

MS RPE-LTP
BS
Low-Pass A/D
Filter Converter Speech
Encoder

Analogue To Channel
Speech Signal Encoder
(4 kHz BW)

RPE-LPC: Regular Pulse Excitation - Linear Prediction Coding

RPE-LTP: Regular Pulse Excitation - Long-Term Predictor
23
 160 Samples (2,080 bits) 160 Samples (2,080 bits)
Speech (13 kbps) 20 ms 20 ms
Speech coder
20 ms at 13 kbps 260 260
Channel encoder
456 bit 456 bit

D D D D D D D D D D D D D D D D
57 bits each 1 2 3 4 5 6 7 8 1 2 3 4 5 6 7 8

TDMA frame (4.615 ms) 0 1 2 3 4 5 6 7

Normal Burst (NB)

Tail Bits 57 bit data Training Sequence 57 bit data Tail Bits Guard Period
1 1
3 (first 20 ms) 26 (second 20 ms) 3 8.25

24
 Data Services
 The highest data rate is 9600 bps and has two different
modes.
 Transparent mode (T) employs FEC:
– 2400 bps (intermediate rate is 3.6 kbps)
– 4800 bps (intermediate rate is 6 kbps)
– 9600 bps (intermediate rate is 12 kbps)
 Non-Transparent mode (NT) employs ARQ.

25
 Modulation
 Gaussian Minimum-Shift Keying (GMSK) with BT =
0.3 normalised bandwidth Gaussian filter.
 Transmission rate: (1/T) = 270 kbps
 Baseband: B = 270 x 0.3 = 81 kHz
 The GSM RF channel is 200 kHz which means the
bandwidth efficiency is 270 kbps / 200kHz = 1.35
b/s/Hz

26
 GMSK Modulation
cos t
cos [(t, n)]
cos [t + (t, n)]

(t, n) cos

cos
Gaussian
Gaussian
dt
dt Filter
Filter

Phase pulse shaping sin

sin

sin [(t, n)] -sin t

27
 GSM Channels
 Physical channels
– Full rate
– Half rate
– One-eighth rate
 Logical channels
– Downlink common channels
– Uplink common channel
– Signalling channels

28
 Physical Channels
 Physical channel in a TDMA system is defined as a
timeslot with a timeslot number TN in a sequence of
TDMA frames.
 GSM employs TDMA combined with FH and hence the
physical channel is partitioned in both time and
frequency.
 FH is known to be very efficient in combating channel
fading.

29
 TCH (Traffic Channels)
 TCH/F 22.8 kbps (Full Rate)
– TCH/F9.6
– TCH/F4.8
– TECH/F2.4
 TCH/H 11.4 kbps (Half Rate)
– TCH/H4.8
– TCH/H2.4
 TCH/8 (One-eighth Rate)

30
 Downlink Common Channels
 FCCH - Frequency Correction Channel
 SCH - Synchronisation Channel
 BCCH - Broadcast CCH
 PAGCH - Paging and Access Grant Channel
 CBCH - Call Broadcast Channel

31
 1 TDMA Frame = 8 Timeslots
0 1 2 3 4 5 6 7

1 Timeslot = 156.25 Bit Duration

Normal Burst (NB)

Tail Bits Encrypted Bits Training Sequence Encrypted Bits Tail Bits Guard Period
3 58 26 58 3 8.25

Frequency Correction Burst (FCB)

Tail Bits Fixed Bits Tail Bits Guard Period
3 142 3 8.25

Synchronisation Burst (SB)

Tail Bits Encrypted Sync Bits Extended Training Encrypted Sync Bits Tail Bits Guard Period
3 39 Sequence 64 39 3 8.25

Access Burst (AB)

Tail Bits Synchronisation Encrypted Bits Tail Bits Guard Period
8 Sequence 41 36 3 68.25

32
 Uplink Common Channel
 RACH - Random Access Channel is used by MS to
access a call.
 RACH/F - Full rate, one timeslot every 8 BP.
 RACH/H - Half rate, using 23 timeslots in the 51 x 8
BP cycle.
 The frame is 8 BP (Burst Periods) of 4.615 ms duration.

33
 Signalling Channels
 CCCH - Common Control Channel
 ACCH - Associated CCH
 SACCH - Slow Associated CCH
 FACCH - Fast Associated CCH
 SDCCH - Stand-alone Dedicated CCH

34
 Multiple-Access Scheme
 A combination of FDMA and TDMA
 A total of 124 FDMA channels of 200 kHz bandwidth
each.
 The Uplink frequency band 935 - 960 MHz (25 MHz)
and Downlink 890 - 915 MHz (25 MHz).
 The duplex separation is 40 MHz.
 TDMA employs 8 timeslots forming a frame of 4.16
ms, 0.577 ms per timeslot.

35
 TDMA/FDMA

Amplitude

45 MHz

F1 F2 F’1 F’2
F0
Cell Rx Cell Tx
Frequency
36
 GSM FDMA/TDMA
Time Domain

TS0 TS1 TS2 TS3 TS4 TS5 TS6 TS7

Frequency 1 ch #1 ch #2 ch #3 ch #4 ch #5 ch #6 ch #7 ch #8

Frequency Domain
Frequency 2 ch #1 ch #2 ch #3 ch #4 ch #5 ch #6 ch #7 ch #8

Frequency 124 ch #1 ch #2 ch #3 ch #4 ch #5 ch #6 ch #7 ch #8

37
 Frequency Hopping
 GSM employs a slow frequency hopping rate defined in
bits per hop.
 The regular rate is 217 hops/s, with 270 kbps
transmission rate, the result is 1200 bits/hop.
 It is worth mentioning that FH improves the
propagation performance when considering the effect of
frequency selective fading.

38
 Radio Resource Management
 Radio channels (resources) are allocated for call setup,
handover, and release on a call basis.
 Management involves three functions: location,
handover, and roaming.
 Three link protocols are used for RR functions:
– Radio Link Protocol (LAPDm)
– Link Access protocol (LAPD)
– Message Transfer Protocol (MTP)

39
 Mobile-Originating Call

Mobile Station Base Station

Random Access

Immediate Assignment
Exchange of Call Setup Information

Traffic Channel Assignment

Data Flow

40
 Mobile-Assisted Handoff (MAHO)
 MAHO algorithm is carried out within the MS.
 MS scans for another RF carrier under direction from a
BS.
 BS requests MS to measure the signal strength of a
specific RF carrier.
 Upon request, MS forwards the result to BS.
 BS initiates handover on the basis of:
– Signal strength at MS from the candidate BTS
– Signal strength at the candidate BTS from MS

41
 Mobility Management
 Location updates, handovers, and roaming
 Cell selection
 Authentication:
– PIN checked locally by SIM
– GSM network RAND and SRES
 Encryption
 User identity protection - Security management, SIM
(MS side) and AUC (network side).

42
 Cell Selection
MS chooses the best cell depending on:
1. The level of the signal received by MS,
2. The maximum transmission power of MS
3. Two parameters p1 and p2 specified by the cell

C1 = A - max(B, 0)
A = received level average - p1
B = p2 - maximum RF power of the MS
p1 = a value between -110 and -48 dBm
p2 = a value between 13 and 43 dBm
MS maximum power = 29 to 43 dBm

Both values of p1 and p2 are broadcast from the cell.

43
 Authentication
 Authentication protects the network against
unauthorised access.
 Phase One - PIN is checked locally by the SIM.
 Phase Two - A 128-bit RAND is sent from the network
to MS.
– RAND mixes with MS’ secret parameter Ki in A3 process
algorithm producing a 32-bit SRES.
– SRES (signed result) is sent from MS to network for
verification.

44
Authentication Computation
RAND
Ki RAND

Ki RAND

A3 A3

SRES
SRES
Equal?

MS Network

45
 User Identity Protection
 SIM (MS side) and AUC (network side) are the
repositories of the subscriber’s key Ki.
 The key Ki never transmits over the air.
 Both sides perform A3 and A8 computations.

46
 Communication Management
 CM layer provides telecommunication services (speech,
fax, and data) via RR and MM layers.
 The management functions of CM layer are:
– Call Control
– Service Management
– Short Message Service

47
 1 hyperframe = 2048 superframes=2,715,648 TDMA frames (3 hours, 28 minutes, ..)

0 1 2 3 2046 2047

1 superframe = 1326 TDMA frames (6.12 s)

e.g. TCH/FS 0 1 2 49 50

e.g. BCCH 0 1 24 25

1 multiframe = 26 TDMA frames (120 ms) 1 multiframe = 51 TDMA frames (235 ms)

0 1 11 SACCH 12 13 24 Idle/SACCH 0 1 2 49 50

1 TDMA frame = 8 timeslots (4.615 ms)

0 1 2 7

1 timeslot = (156.25 bits duration ~ 0.577 ms

TB TB GP
3 58 Encrypted bits 56 bits Training Seq. 58 Encrypted bits 3 8.25

48
 Objectives of GSM PLMN
 To provide the subscriber with a wide range of services
and facilities, both voice and nonvoice, that are
compatible with those offered by existing networks
(e.g. PSTN, ISDN)
 To introduce a mobile RS that is compatible with ISDN
 To provide certain services and facilities exclusive to
mobile situations
 To give compatibility of access to the GSM network for
a mobile subscriber in a country that operates the GSM
system
49
 Objectives of GSM PLMN - cont.
 To provide facilities for automatic roaming, locating,
and updating of mobile subscribers
 To provide services to a wide range of mobile stations,
including vehicle mounted stations, portable stations,
and handheld stations
 To provide for the efficient use of the frequency
spectrum
 To allow for low-cost infrastructure, terminal, and
service cost

50
 GSM PLMN Services
 A telecommunication service supported by the GSM
PLMN is defined as a group of communication
capabilities that the service provider offers to the
subscribers
 GSM PLMN offers 3 basic telecommunication services:
– bearer services
– teleservices, and
– supplementary services
 Please refer to Reference [1] for a list of services

51
 Bearer Services Support

Service GSM ISDN

Data services x x
Alternate speech/data x x
Speech followed by data x x
Clear 3.1 kHz audio x x
Unrestricted digital information (UDI) x x
Packet Assembler/Disassembler (PAD) x
3.1 kHz external to PLMN x
Others x

52
 Teleservices Support
Service GSM ISDN
Circuit speech (telephony) x x
Emergency call x x
Short message point-to-point x x
Short message cell broadcast x x
Alternate speech/facsimile group 3 x x
Automatic facsimile group 3 x
Voice-band modem (3.1 kHz audio) x x
Messaging teleservices x
Paging teleservices x
Others x
53
 GSM Specification

Access method TDMA/FDMA

Frequency band (MS to BS) 890 - 915 MHz
Frequency band (BS to MS) 935 - 960 MHz
Channel bandwidth 200 kHz
Modulation GMSK
Bit rate 270.833 kbps
Filter BT = 0.3 (Gaussian)
Voice channel coding RPE-LPC Convolutional 13 kbps
Frequency Hopping Slow hopping (217 hops/s)

54
 Cont.

Frame Interval 8 timeslots = 4.615 ms

Timeslot 0.577 ms
Interleaving 40 ms
Associated control channel Extra frame
Handoff method MAHO
Adaptive equalisation yes (up to 16 s time dispersion)
Users per channel 8
MS power level 0.8, 2, 5, 8, 20 Watts
Number of channels 124

55
MS Mobile Station
TE Terminal Equipment
MT Mobile Terminal
BS Base Station
BTS Base Transceiver Station
BSC Base Station Controller
MSC Mobile Switching Centre
HLR Home Location Register
VLR Visitor Location Register
NMC Network Management Centre
OMC Operation and maintenance Centre
ADC Administration Centre
AUC Authentication Centre
EIR Equipment Identifier Register

56
MAHO Mobile Assisted Handoff
GMSC Gateway MSC
RPE Regular Pulse Excitation
LPC Linear Prediction Coding
BP Burst Period
RS Radio Service

57
 References
[1] Garg, Vijay K and Wilkes Joseph E, “Wireless and Personal
Communication Systems”. Prentice Hall PTR
[2] Parsons J D and Gardiner J G, Mobile Communication
Systems, Blackie USA Halsted Press
[3] Lee, William C. Y., Mobile Cellular Telecommunications
Systems, McGraw-Hill, Inc.
[4] Gibson, D. Jerry, The Communications Handbook, 1997 CRC
Press, Inc.
[5] GSM World from GSM Association: www.gsmworld.com

58