CONTENTS

GSM ARCHITECTURE GSM INTERFACES BSS ARCHITECTURE BTS FUNCTIONS BTS ARCHITECTURE BSC FUNCTIONS BSC ARCHITECTURE TRAU FUNCTIONS TRAU ARCHITECTURE NSS ARCHITECTURE HLR, VLR, AUC, IEC and IWF

GSM ARCHITECTURE
A GSM system is basically designed as a combination of three major subsystems:
Network and Switching Subsystem [NSS] Base Station Subsystem [BSS] Operation Support Subsystem [OSS]

The Network and Switching Subsystem includes the equipment and functions related to end-to-end calls, management of subscribers, mobility and interfaces with the fixed network [PSTN].NSS consists of:
Mobile Switching Center [MSC] Home Location Center [HLR] Visitor Location Center [VLR] Equipment Identity Register [EIR]

The Base Station Subsystem includes the equipment and functions related to the management of connection on the radio path. BSS Consists of:

GSM ARCHITECTURE
Base Station Controller [BSC] Base Transceiver Station [BTS] Trans Coder Unit [TCU]

The Operation Support Subsystem is connected to all equipment in the switching system and to the BSC. OSS consists of:
Operation and Maintenance Center for NSS [OMC-S] Operation and Maintenance Center for BSS [OMC-R]

GSM ARCHITECTURE
Public Switched Telephone Network (PSTN) ISDN, PSDN Signaling System No.7 SS7
MSC VLR

Network and Switching Sub-system Base Station Sub-system

Um (radio) interface
Cell 3 Cell 1 BTS Cell 2

GMSC VLR

HLR-AUC

A-interface OMN interface (X.25)

TRAU

Ater Interface
BSC

Abis Interface

Operation SubSystem

OMC-R

OMC-S

BTS

MS

GSM INTERFACES
Different GSM Interfaces are divided in two broad categories:
Standard Interfaces
Abis Interface between BTS and BSC Ater Interface between BSC and TCU

Common Interfaces
Um/Air/Radio Interface between MS and BTS A-Interface between TCU and MSC

BSS ARCHITECTURE
The Base Station Subsystem [BSS] is a set of equipment [Aerials, Transceiver and a Controller] that is viewed by the Mobile Switching Center [MSC] through a single A-Interface as being the entity responsible for communicating with Mobile Stations [MSs] in a certain area. BSS contains one or more Base Transceiver Station [BTS] and Base Station Controller [BSC]. The BTS is in contact with Mobile Station through Radio Interface. Interface between BTS and BSC is called Abis Interface. BSC is in contact with MSC through TCU on Ater & A-Interface.

BSS ARCHITECTURE
MSC
A Interface

TCU

Radio Interface S2000H&L BTS

NSS
Public Telephone Network Ater Interface Abis Interface

MS

OMC-R
BSC
OMN Interface

S8000 Outdoor BTS S8000 Indoor BTS

BSS
Sun
StorEdge A5000

Radio Interface

BTS FUNCTIONS
The primary responsibility of the BTS is to transmit and receive radio signals from a mobile unit over the Air Interface Um. The signals are encoded, encrypted, multiplexed, modulated, and then fed to antenna system at the cell site. In order to keep the mobile synchronized, BTS transmits frequency and time synchronization signal over a devoted channel called a Frequency Correction Channel [FCCH]. BTS performs following functions:
Encodes, Encrypts, Multiplexes, Modulates and feds the RF signals to the antenna. Time and Frequency synchronization signals transmitted from BTS Voice communication through a full rate or half rate channel The received signal from the MS is equalized, decoded and decrypted before demodulation Timing Advance computation

BTS FUNCTIONS
Uplink Radio Channel measurements Mobile Random Access Detection Frequency Hoping management

BTS ARCHITECTURE
BTS is divided into three parts:

Coupling System
To connect Antenna system with TRX and separate Transmission and Reception path.

TRX
Processes Radio Signals

CBCF [Compact Base Common Function]

Performs controlling functions, multiplexes speech and user data and signaling channels to BSC.

BTS ARCHITECTURE
BTS
Duplexer

- Interface between Antennas and TRXs of each cell

Transmission coupler COUPLING SYSTEM Reception coupler

Antenna

TRX (Transceiver-Receiver)

BSC

Abis interface

BCF (Base Common Functions)

BSC FUNCTIONS
Functions performed by BSC are:
Radio Resource [RR] management of the cells under its control, it assigns and releases frequencies for all MSs in its own area. Supervision of inter cell handovers for MSs moving between BTSs in its control Control of Power for information transfer between MS and BTS. Time and frequency synchronization signal broadcast for each BTS. LAPD signaling transmission for BTS and TCU. CCS7 signaling for MSC X.25 signaling for connection with OMCR Traffic Handling PCM switching

BSC ARCHITECTURE
BSC is divided in three parts:
Processing Unit Switching Matrix Trunk Controller Units [PCM and X.25]

Through the processing unit and X.25 controller BSC downloads new software releases from OMCR. BSC is connected to MSC on one side via TCU and to BTS on the other side.

BSC ARCHITECTURE
BSC
Processing Unit X.25 controller

O&M

Switching matrix

PCM controller

PCM controller

BTS Abis interface

To Network SubSystem
A interface

TRAU FUNCTIONS
TRAU is functionally a part of Base Station Subsystem. TRAU is a device that takes 13kbps speech or data channels and convert them into standard 64kbps data. TRAU converts the 13kbps speech into 64kbps T1 -law or E1 A-law PCM timeslots. Four traffic channels are multiplexed on a 64kbps PCM circuit at the Ater Interface. One T1 trunk carries up to 92 traffic and control channels. One E1 trunk carries up to 120 traffic and control channels.

TRAU ARCHITECTURE
TRAU is divided in three parts:
TRAU Controller Signal Processing Unit for 13kbps to 64kbps conversion PCM Controller for PCM switching on Ater and A-Interface

This conversion from 13kbps to 64kbps is necessary as MSC [exchange] understands only 64kbps.

TRAU ARCHITECTURE
TRAU
T1 trunk up to 92 user's and control channels
Transcoder Controller

T1 trunk = up to 24 user's channels

Transcoder

Ater
BSC

A
External PCM Interface

MSC

interface E1 trunk up to 120 user's channels

interface E1 trunk = up to 31 user's channels

NSS ARCHITECTURE
The distributed architecture of Network and Switching Subsystem [NSS] is organized with MSCs, Servers and databases linked by interfaces normalized B to G. There are two types of MSCs:
MSC, used to establish traffic channels and to switch signaling messages between PLMN entities and other GSM networks or fixed networks. Gateway MSC [GMSC], is a specialized MSC managing the central database HLR, containing the permanent and dynamic subscriber data.

All the information requested by the different functions is stored in four types of databases connected to the MSC:
Home Location Register [HLR] Permanent data specific to each subscriber, including service profile, location and billing functions. Visitor Location Register [VLR] In order to minimize access to HLR, MSC uses this database which contains working data for subscribers moving within its coverage area (LAs).

NSS ARCHITECTURE
Authentication Center [AUC] ensures that only authorize users have access to the network. Equipment Identity Register [EIR] maintains the list of stolen, faulty and valid equipment identities. Inter Working Function [IWF] provides the different bearer services offered by the Network. Short Message Services-Service Center [SMS-SC] used to store and forward point to point short messages Billing Server

NSS ARCHITECTURE
Site 1
BSS
D

Site 2
HLR
H D AUC

VLR
G-interface B-interface

VLR

BSS

B-interface C-interface

A-interface

MSC

GMSC

A-interface Other GSM, PSTN, ISDN

Other GSM, PSTN, ISDN F

E-interface

E IWF Billing Server

EIR

E Billing Server IWF

SMS-SC

HLR
Home Location Register [HLR] handles permanent subscriber data. Identification IMSI, MS-ISDN. Subscription Information: Teleservices, Bearer Services, Supplementary Services. Service Limitation: Roaming Limitation. Handling of temporary subscribers data. Current VLR address where the subscriber roams Provide VLR with five ciphering items Dialogue with AUC.

HLR
Permanent records
- MSISDN - IMSI - Subscriber's service provision

Temporary records
- VLR address - Ciphering items (Kc, Sres, Rand)

VLR
When a mobile station enters the LA borders, it signals its arrival to the MSC that stores its identity in the Visitor Location Register [VLR]. The information necessary to manage the MS is contained in the HLR and is transferred to the VLR so that it can be easily retrieved. Works with HLR & AUC on authentication. Controls allocation of new TMSI numbers that can be periodically changed to secure a subscribers identity. Supports Paging. Tracks the state of all mobile in its area.

VLR
Permanent records
- IMSI - Subscribers service provision

Temporary records
- Ciphering items (Kc, Sres, Rand) - LAI - TMSI

AUC
The AUthentication Center [AUC] is a database that contains the secret authentication key Ki of each subscriber and generates security related parameters to protect the network operator and subscribers against fraud. The same Ki is to be found in the subscribers SIM-Card and is used to generate these Ciphering Items:
A RANDom Number RAND A Signature RESponse SRES using A3 algorithm A Ciphering Key Kc using A8 algorithm and computed each time authentication is performed Software Keys SRES and Kc are never passed over the air interface The two algorithms A3 and A8 are operator dependent. For Security reason AUC has often an internal interface with the HLR.

AUC
AUC
Ciphering Triplets RAND
HLR Request

Security A3, A8 algorithms

SRES, Kc, RAND

IMSI
AUC provides

EIR
Equipment Identity Function [EIR] is a database that performs a screening function within the Network. It keeps track of all valid and invalid Mobile Equipment by storing their International Mobile Equipment Identities [IMEI]. Manufacturers provide complete list of IMEI of Mobile Stations that they produce. EIR actually maintains three lists of International Mobile Equipment Identities [IMEI]. The Black List contains a list of Mobile Equipment that are barred from using the Network. The While List contains a list of IMEI that have been allocated in Global System for Mobile Communication. The Gray List contains a list of faulty Mobile Equipment. This equipment will be logged but not barred.

EIR
EIR
Black list Black list (barred ME) (barred ME)

IMEI

White list (valid ME)

Mobile Equipment

Gray list (faulty ME)

IWF
The aim of the Inter Working Function [IWF] is to provide the interfacing capability with the various public and private data networks currently available because GSM providing wide range of data services to its subscribers. Networks include:
PSTN ISDN Circuit Switched Public Data Networks [CSPDN] Packet Switched Public Data Networks [PSPDN]

It provides the subscriber with access to data rate and protocol conversion facilities so that data can be transmitted between GSM Data Terminal Equipment [DTE] and a land line DTE. IWF is a part of Mobile Switching Center [MSC].

IWF
BSS Mobile Switching Center PSTN

Modem

Data + DTE signals

MS
Rate adaptation DTE signaling Modem

IWF
Land-DTE

DTE

THANK YOU!