04 - Air Interface

GSM Air Interface
GSM Complete Model

SS AUC
PLMN
SMSC-GMSC SC
ISDN HLR SMS-IWMSC
GWMSC
PSTN MIN
EIR
MSC/VLR BGW
BSS
BSC
OSS
BTS
Confidentiality level on slide master
Version number on slide master
Idle mode behaviour
What is idle mode?
The MS is said to be in Idle mode when it is powered on but not allocated any dedicated
channel.
Idle mode activities :

• PLMN selection
• CELL selection & reselection
Tune to the control channel of the cell, to listen to the system information messages
transmitted in that cell (Camping on the cell)
4- It must also be able to register its current location to the network (Location Updating)
3 Presentation title in footer Confidentiality level on slide master

14 August 2023 Version number on slide master
Idle Mode: PLMN Selection
PLMN selection (Automatic/Manual mode)

• Automatic mode
1- Last registered PLMN
2- Home PLMN
3- According to PLMN list stored on SIM
4- PLMNs with SS > -85 dBm in random order
5- All other PLMNs in order of decreasing SS
• Manual mode
1- Last registered PLMN
2- Home PLMN
3- The MS will indicate the user all available PLMNs

Idle mode: Cell Selection
Why MS must camp on a cell?
• The MS can receive system information

• The MS can initiate a call
• The system can reach the MS
Types of cell selection:

Normal cell selection
• The MS will search all RF channels in its supported frequency band (124 channels in
GSM 900)
Stored list cell selection
• The MS will perform the measurements for only the last BA list BCCH carriers stored on
SIM before it was powered off.

Idle mode: Cell Selection
Scan 124 channels and measure signal strength
Tune to the RF channel with the highest

received average signal strength
Tune to the RF-channel with the

Determine if it is a BCCH frequency carrier by
highest signal strength not already
searching for frequency correction bursts
tried
No
Is it a BCCH carrier
Yes
The MS shall attempt to synchronize to this

carrier and read BCCH info
No
Is it the wanted PLMN ?
Yes
Yes
Is the cell barred for access ?
No
No
Is C1>0 ?
Yes
Camp on this cell

Idle mode: Cell reselection
Cell reselection:
The MS detects that it is more suitable to camp on another cell.
Why?
The MS at all times try to camp on the cell which has the highest probability of
successful communication on both up and downlinks when accessing the system
When?
MS performs cell reselection if:
• The serving cell becomes barred

• Downlink signaling failure
• C1<0 for serving cell more than 5sec
• C2(neighbor)>C2(serving) (+CRH) more than 5sec

Idle mode: Cell reselection
Cell reselection procedures:
• MS monitors Neighbor’s BCCH carriers as well as the serving one.
• MS measure server BCCH at least once every 30s
• MS measures neighbors BCCH carrier at least once every 5min.
• MS attempts to decode the BSIC parameter at least once every 30s (for each of
• the six strongest surrounding cells)

1- The Cell
The smallest unit of a cellular

system
Each cell is assigned unique
number call CGI

2- The location Area (LA)
Group of cells
Has identity called location
area identity (LAI)
May be control by one or
more BSC but one MSC
BTS BTS BTS
BTS
BTS
BTS BTS
BTS
BTS BTS
BTS
BTS BTS

3- The MSC Service Area
Group of LAs controlled by

one MSC
The subscriber’s MSC service
VLR
area is stored in its HLR
MSC

3- The PLMN Service
Group of MSC areas controlled by

one network operator.
VL
MSC R
VL
MSC R
VL
MSC
R

5- The GSM Service Area
More operator sign contracts

agreeing to work together for
international roaming One per operator
Location Area
MSC Service Area
PLMN Service Area

GSM Service Area

Cell Identity (CGI)
LAI
MCC MNC LAC CI

(3 digits) (2 digits) (4 digits) (4 digits)
MCC: Mobile Country Code

MNC: Mobile Network Code
LAC: Location Area Code
CI: Cell Identity

Idle mode: location updating
Location Updating:
The location updating is initiated by the MS to keep the network updated by it’s location.
Types of Location updating :

1- Normal:
• MS listens to the broadcasted system information.
• It compares the broadcasted LAI with the stored one on the SIM.
• If it is different , a location updating type normal will be initiated.
2- Periodic registration:
• Reduces unnecessary paging of MSs which lost coverage or run out of battery.
• T3212 parameter (1 – 255) determines how often MS should perform periodic location
update.

Idle mode: IMSI attach/detach
• When a MS is powered on, an IMSI attach message is sent to the MSC/VLR
• When a MS is powered off, an IMSI detach message is sent to the MSC/VLR
• Implicit detach?

Dedicated Mode: Handover
Handover :
• Handover is essential to keep continuity of the call when MS roams BSC
along the network and moving from one cell to another between
different nodes in the network.
• During a call, the MS is continuously measuring the signal levels of
neighboring cells in addition to server’s and reports this results to the
BSC through the BTS.
• The BSC, being responsible on supervising the cells, is responsible of
handover initiation.
• Good neighbor relations between cells is an important factor in keeping
the network performance in the accepted level.
Types of handover :
• Intra Cell
• Intra BSC Handover
• Inter BSC / Intra MSC Handover
• Inter MSC Handover
Basic definitions
Basic definitions:
• Time Slot : TS is the basic radio resource during which the carrier serves one logic channel
MS receives TS by TS and also sends TS by TS.
• Burst : the contents of each time slot is called a burst.
• Physical channel : the recurrence of the same physical TS in successive frames.
• Logical channel : the recurrence of the same TS contents in successive frames.

Basic definitions
Physical Channels
GSM band is divided into 124 RF channels, and each channel is divided into 8 time
slots using TDMA. These time slots are called “physical channels”.
CH 124 0 1 2 3 4 5 6 7 0 1
CH 3 0 1 2 3 4 5 6 7 0 1
CH 2 0 1 2 3 4 5 6 7 0 1
CH 1 0 1 2 3 4 5 6 7 0 1 Time
• TDMA frame

• TDMA frame structure
-Bit rate of the radio carrier is 270.833 Kbps
-Bit duration =1/270.833=3.69 µsec
-One time slot =148 bits+8.25 guard bits=156.25 bits
-Time slot duration =156.25x3.69 µsec= 0.577 msec
-Frame duration=0.577x8= 4.615 msec

• Guard band is used for :
- time dispersion on the propagation path
- Time required for smooth switch on-off in transmitter
• The numbering scheme of the time slots is staggered

by 3 time slots to remove necessity for MS to send
and receive in the same time
0 1 2 3 4 5 6
0 1 2 3 4 5 6

Logical Channels
Logical Channels
Traffic Channels Control Channels
Half Rate Full Rate

Common Broadcast
Paging Channel Frequency Correction Control Channel Dedicated

Access Grant Channel Synchronization Channel Fast Associated Control Ch
Random Access Channel Broadcast Control Channel Cell Broadcast Control Ch
Slow Associated Control Ch
Standalone Dedicated Control Ch

• Types of Traffic channels
22.8 Kbps
1. Full rate
- 13 Kbps data rate 13 Kbps 9.8 Kbps
2. Enhanced full rate

12.2 Kbps 10.6 Kbps
- 12.2 Kbps data rate
3. Half rate
5.6 Kbps 5.8 Kbps
- increase network capacity
11.4 Kbps
Data

Redundancy
Traffic Channels
• TCH is allocated to the MS when it is in dedicated mode.
• TCH is intended to carry two types of bi-directional user information : Encoded speech and
data .
• Two types of traffic channels are defined
• TCH/F: Full rate uses one physical channel
• TCH/H: Half rate shares one physical channel with another TCH/H
• Channel rate:
Full Rate (22,8 kbps gross bit rate on air interface)

Half Rate (11,4 kbps gross bit rate)
• Speech versions
FR SPV 1 = “normal Full Rate” (FR) 13 Kbps (speech coding rate FR
SPV 2 = “enhanced Full Rate” (EFR) 12.2 Kbps (speech coding rate) FR SPV 3 =
“AMR Full Rate” (AMR-FR) ACS (Active Codec Set)
HR SPV 1 = “normal Half Rate” (HR) 5.6 Kbps (speech coding r
HR SPV 3 = “AMR Half Rate” (AMR-HR) ACS (Active Codec Set)

Broadcast Channels
Frequency Correction Channel (FCCH):
• The 1st Burst that MS looks for just after switching on
• It is the repetition of frequency correction bursts
• Bursts containing only zeros are transmitted
• Make sure that this is the BCCH carrier
• Allow the MS to synchronize to the frequency
• Only transmitted DL , TS0

Broadcast Channels
Synchronization Channel (SCH):
• Used to provide synchronization information between MS & BTS in the time domain.
• Repetition of synchronization bursts
• Transmitted DL only.
• Base Station Identity Code (BSIC)
• TDMA Frame Number (RFN)

Broadcast Channels
Broadcast Control Channel (BCCH):
• When a mobile is turned on, it scans the GSM spectrum to find an available BTS.
• It is a permanent channel to be scanned, providing network information (called system
information)
• Contains; cell description, cell identity, location area identity, network identity, BCCH of
neighboring cells….

Common Control Channels
Paging Channel (PCH) :
• When the network wants to initiate a communication with the MS, it looks for the mobile
by sending a paging request.
• Incoming call or incoming short message.
• Mobile Identity parameter (IMSI) or (TMSI).
Access Grant Channel (AGCH) :
• Inform about the SDCCH or TCH allocated.
• Channel description, Timing advance….

Common Control Channels
Random Access Channel (RACH) :
• When the MS requests allocation of signaling channel by sending a Channel Request
• Answering to paging, network contact
• Only transmitted UL

Dedicated Control Channels
Slow Associated Control Channel (SACCH) :
• When an SDCCH or a TCH is allocated, an associated channel is used by MS & Network in
Order to exchange general information
• Transmitted both UL and DL
• Up-Link: Measurement report
• Down-Link: System information, MS power level, timing advance
Fast Associated Control Channel (FACCH) :

• During a hand over, both MS and Network need to send a fast message to the other
• Works in stealing mode

Dedicated Control Channels
Standalone Dedicated Control Channel (SDCCH) :
• MS and network need to exchange information before initializing communication.
• Used in authentication, ciphering, setup and assignment procedures
• Transmission of SMS in idle mode.
Cell Broadcast Control Channel (CBCCH)

• It displays general information (weather, addresses, traffic…..) .
• It uses one of the SDCCH channels
• MS must be configured to receive this channel

Normal Burst Structure
TDMA Frame
0 1 2 3 4 5 6 7
Tail Tail Guard

Encrypted Bits Training Sequence Encrypted Bits
Bits Bits Period
3 57 1 26 1 57 3 8.25
156.25 bits in 577 Sec
Theguard
The training sequence
period of 8.25is bits
inserted in the
length, whichmiddle of the burst
is equivalent to help
to about 30the
s, is
Viterbi
The theequalizer to create the channel model
left
One .attail
It carries
bit bits
endhelp
subscriber
“stealing the
ofspeech
each
flag”equalizer
burst,
or data
will be toencrypted
to added
is determine
prevent the start
tooverlapping
eachinto 57
block bitand
between
to stop
blocks.
indicate
information of all logical channels except RACH, SCH and FCCH
points of
consecutive
Each
whether
the
bursts
bursttransmitted
will
andiscontain
burst bits.
tostolen forThey
facilitate
two burstare
57 bits
the threesignaling
bits
fromattwo
synchronization
FACCH blocks the beginning
ordifferent and at the
used as aspeech
normal end of
traffic
the burst and they are always zeros
segments.
channel
1 Hyper frame = 2048 Super frames = 2,715,648 TDMA Frames = 3hrs 28 min and 53.76 s
Hyper Frame
1 22 e.g. BCCH 2048
1 22 e.g. TCH 51 1 Super frame = 51 TCH Multi frames
11 e.g. BCCH 26 1 Super frame = 26 BCCH Multi frames
1 TCH Multi frame = 26 TDMA Frames 1 BCCH Multi frame = 51 TDMA Frames
1 22 e.g. TCH 26 11 2 e.g. BCCH 51
0 1 2 3 4 5 6 7
3 57 1 26 1 57 3 8.25
Normal burst
156.25 bits in 577 m Sec
Mapping of logical channels (DL)
Frame 1 Frame 2 Frame 3 Frame 4 Frame 5 Frame 6 Frame 7
0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7
F S B B B B C
F S B C F S C C F S C C F S C C F S C C I

Mapping of logical channels (UL)
Frame 1 Frame 2 Frame 3 Frame 4 Frame 5 Frame 6 Frame 7

0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7
R R R R R R R
R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R

Downlink Uplink
Frame F D T R A T
S D T R A T
B D T R A T
B D T R A T
B D T R A T
B D T R A T
C D T R A T
C D T R A T
C D T R A T
C D T R A T
51 TDMA Frames = 1 BCCH Multi-frame

F D T R A T
S D T R A T
Frame C D A I A I A I R I A I A I A I
C D T R I T
C D T R I T
C D T R D T
C D T R D T
C D T R D T
C D T R D T
C D T R D T
F D T R D T
S D T R D T
C D T R D T
C D T R D T
C D T R D T
Frame C D I A I A I A R D I A I A I A
C D T R D T
C D T R D T
C D T R D T
C D T R D T
F D T R D T
S D T R D T
C A T R D T
C A T R D T
C A T R D T
C A T R D T
C A T R D T
C A T R D T
Frame C A A I A I A I R D A I A I A I
C A T R D T
F A T R D T
S A T R D T
C A T R D T
C A T R D T
C A T R D T
C A T R D T
C A T R D T
C A T R A T
39 Presentation title in footer C I T
Confidentiality R A
level on slide master T
C I T R A T
Frame I I T R A T
Normal Location update within same MSC/VLR service area
1. The Mobile sends an SDCCH allocation

MSC / VLR request message on the RACCH to the BTS
3 4 2. The BTS responds with the SDCCH allocation

message on the AGCH
BSC 3. The mobile sends a location update request
message with its IMSI on the allocated
3 4 SDCCH channel to the MSC/VLR
4. The MSC/VLR updates the location
1 information and sends a Location Update
3 confirmation message on the SDCCH
channel to the mobile then the SDCCH
2 channel is released
40 Presentation title in footer
14 August 2023
4 Confidentiality level on slide master
Version number on slide master
Normal Location update between 2 MSC/VLR service areas
1. The mobile requests a location update just like the first case
2. The new MSC/VLR receives the IMSI and conclude the MGT
HLR
3. The MSC/VLR sends a subscriber
6 5 2 information request with the IMSI
IMSI MGT
to the HLR
3
Old MSC New MSC 4. The HLR stores the address of
the new MSC/VLR
1 7
5. The HLR sends the data to the
Old BSC New BSC new MSC/VLR and it is kept ther
1 7 6. The HLR sends a location
cancellation message to the old
MSC/VLR to remove the data
1
7. The new MSC/VLR sends a location
updating confirmation message to
41 Presentation title in footer the mobile
Confidentiality level on slide master
7
Post installation cycle
• Site integration
• Site testing
• Site optimization

Drive-test Sample

Questions
Thanks

04 - Air Interface

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

04 - Air Interface

Uploaded by

Copyright:

Available Formats

GSM Air Interface

GSM Complete Model

Idle mode activities :

3 Presentation title in footer Confidentiality level on slide master

PLMN selection (Automatic/Manual mode)

4 Presentation title in footer Confidentiality level on slide master

• The MS can receive system information

Types of cell selection:

5 Presentation title in footer Confidentiality level on slide master

Tune to the RF channel with the highest

Tune to the RF-channel with the

The MS shall attempt to synchronize to this

Camp on this cell

6 Presentation title in footer Confidentiality level on slide master

MS performs cell reselection if:

• The serving cell becomes barred

7 Presentation title in footer Confidentiality level on slide master

• MS monitors Neighbor’s BCCH carriers as well as the serving one.

• MS measure server BCCH at least once every 30s

• MS measures neighbors BCCH carrier at least once every 5min.

• the six strongest surrounding cells)

8 Presentation title in footer Confidentiality level on slide master

The smallest unit of a cellular

9 Presentation title in footer Confidentiality level on slide master

10 Presentation title in footer Confidentiality level on slide master

Group of LAs controlled by

11 Presentation title in footer Confidentiality level on slide master

Group of MSC areas controlled by

12 Presentation title in footer Confidentiality level on slide master

More operator sign contracts

PLMN Service Area

13 Presentation title in footer Confidentiality level on slide master

MCC MNC LAC CI

MCC: Mobile Country Code

14 Presentation title in footer Confidentiality level on slide master

Types of Location updating :

15 Presentation title in footer Confidentiality level on slide master

• When a MS is powered on, an IMSI attach message is sent to the MSC/VLR

• When a MS is powered off, an IMSI detach message is sent to the MSC/VLR

16 Presentation title in footer Confidentiality level on slide master

18 Presentation title in footer Confidentiality level on slide master

20 Presentation title in footer Confidentiality level on slide master

22 Presentation title in footer Confidentiality level on slide master

• The numbering scheme of the time slots is staggered

23 Presentation title in footer Confidentiality level on slide master

Traffic Channels Control Channels

Half Rate Full Rate

Paging Channel Frequency Correction Control Channel Dedicated

Random Access Channel Broadcast Control Channel Cell Broadcast Control Ch

Slow Associated Control Ch

Standalone Dedicated Control Ch

24 Presentation title in footer Confidentiality level on slide master

2. Enhanced full rate

25 Presentation title in footer Confidentiality level on slide master

Full Rate (22,8 kbps gross bit rate on air interface)

26 Presentation title in footer Confidentiality level on slide master

• The 1st Burst that MS looks for just after switching on

• It is the repetition of frequency correction bursts

• Bursts containing only zeros are transmitted

• Make sure that this is the BCCH carrier

• Allow the MS to synchronize to the frequency

• Only transmitted DL , TS0

27 Presentation title in footer Confidentiality level on slide master