4 GSM 2011

Readings
Recommended
Mobile Communications (2nd Edition) by Jochen Schiller Chapter 4: Telecommunications Systems
Global System for Mobile Communication (GSM)
Reference
GSM Switching, Services, and Protocols by Jrg Eberspcher, Hans-Jrg Vgel, Christian Bettstetter. New York : Wiley, c2001.
Dr K.Sandrasegaran
Special Acknowledgements to Jochen Schiller
Acknowledgements to Schiller, Nokia, Ericsson, Alcatel, ETSI, 3GPP, IEEE, Copyright 2011 Prof K.Sandrasegaran. Please report unauthorized usage to kumbes@ieee.org
What are the trends with mobile phone subscribers worldwide? (Schiller)
1200
1000 GSM total TDMA total CDMA total 600 PDC total Analogue total 400 Total wireless Prediction (1998)
GSM Markets & Evolution
Distinguish between 1G, 2G, 2.5G, 3G and 4G mobile technologies. Tabulate the differences between GSM 900, 1800 and 1900. What was the primary goal during the setting up of GSM standards?
Subscribers [million]
800
200
0 1996 1997 1998 1999 2000 2001 2002
year
Development of mobile telecommunication systems

FDMA CT0/1 AMPS NMT
GSM: Overview
GSM
formerly: Groupe Spciale Mobile (founded 1982) now: Global System for Mobile Communication Pan-European standard (ETSI, European Telecommunications Standardisation Institute) simultaneous introduction of essential services in three phases (1991, 1994, 1996) by the European telecommunication administrations (Germany: D1 and D2) seamless roaming within Europe possible today many providers all over the world use GSM (more than 184 countries in Asia, Africa, Europe, Australia, America) more than 747 million subscribers more than 70% of all digital mobile phones use GSM over 10 billion SMS per month in Germany, > 360 billion/year worldwide
CT2 IS-136 TDMA D-AMPS GSM PDC
IMT-FT DECT EDGE GPRS IMT-SC IS-136HS UWC-136 IMT-DS UTRA FDD / W-CDMA IMT-TC UTRA TDD / TD-CDMA IMT-TC TD-SCDMA
CDMA
TDMA
IS-95 cdmaOne 1G 2G
cdma2000 1X 2.5G
IMT-MC cdma2000 1X EV-DO 1X EV-DV (3X) 3G
What are performance characteristics of GSM (wrt. analog sys.)? Communication

mobile, wireless communication; support for voice and data services
Total mobility
international access, chip-card enables use of access points of different providers
GSM Introduction
Worldwide connectivity
one number, the network handles localization
High capacity if needed

better frequency efficiency, smaller cells, more customers per cell
High transmission quality

high audio quality and reliability for wireless, uninterrupted phone calls at higher speeds (e.g., from cars, trains)
Security functions
access control, authentication via chip-card and PIN
What are some of disadvantages of GSM?

There is no perfect system!! no end-to-end encryption of user data no full ISDN bandwidth of 64 kbit/s to the user, no transparent Bchannel reduced concentration while driving electromagnetic radiation abuse of private data possible roaming profiles accessible high complexity of the system several incompatibilities within the GSM standards
GSM Services
GSM Services: What type of services does GSM offer?

GSM offers
several types of connections: voice connections, data connections, SMS multi-service options (combination of basic services)
Services
Services
Telematic Services Mobile telephony Emergency number Multinumbering group 3 fax voice mailbox electronic mail Short Message Service (SMS)
Three service domains

Bearer Services (i.e. pipes) refers to transport data between access points
eg voice, data bearers.
Basic Services Supplementary Services
Bearer Services transport data between access points Different data rates for voice and data (original standard) data service (circuit switched)
synchronous: 2.4, 4.8 or 9.6 kbit/s asynchronous: 300 - 1200 bit/s data service (packet switched) synchronous: 2.4, 4.8 or 9.6 kbit/s asynchronous: 300 - 9600 bit/s
Telematic Services: enable communication via mobile phones

eg telephony, emergency number, multinumbering, group 3 fax, voice mailbox, email, SMS
Teleservices Bearer Services
Supplementary Services: Services in addition to the basic services, which cannot be offered stand-alone
eg CLI Caller Line Identifcation, suppression of number forwarding, automatic call-back, conferencing, locking mobile terminal (incoming or outgoing calls), ...
bearer services MS TE R, S MT Um GSM-PLMN transit network (PSTN, ISDN) tele services

Supplementary services may include: Voice mail
bearer services MS TE R, S MT Um GSM-PLMN transit network (PSTN, ISDN) source/ destination TE network (U, S, R)
source/ destination TE network (U, S, R)
Acknowledgements to Schiller, Nokia, Ericsson, Alcatel, ETSI, 3GPP, IEEE, tele services Copyright 2011 Prof K.Sandrasegaran. Please report unauthorized usage to kumbes@ieee.org
What is a bearer service? What type of bearer services does GSM offer? Telecommunication services to transfer data between access points Specification of services up to the terminal interface (OSI layers 1-3) Different data rates for voice and data (original standard)
data service (circuit switched)
synchronous: 2.4, 4.8 or 9.6 kbit/s asynchronous: 300 - 1200 bit/s
What are Tele Services? Types?

Telecommunication services that enable voice communication via mobile phones All these basic services have to obey cellular functions, security measurements etc. Offered services
mobile telephony primary goal of GSM was to enable mobile telephony offering the traditional bandwidth of 3.1 kHz Emergency number common number throughout Europe (112); mandatory for all service providers; free of charge; connection with the highest priority (preemption of other connections possible) Multinumbering several ISDN phone numbers per user possible
data service (packet switched)

synchronous: 2.4, 4.8 or 9.6 kbit/s asynchronous: 300 - 9600 bit/s
Today: data rates of approx. 50 kbit/s possible will be covered later!

Q. Distinguish the terms transparent vs. non-transparent, and synchronous vs. asynchronous.
Tele Services II
Additional services Non-Voice-Teleservices
group 3 fax voice mailbox (implemented in the fixed network supporting the mobile terminals) electronic mail (MHS, Message Handling System, implemented in the fixed network) ... Short Message Service (SMS) alphanumeric data transmission to/from the mobile terminal using the signaling channel, thus allowing simultaneous use of basic services and SMS
What are supplementary services?

Services in addition to the basic services, which cannot be offered stand-alone May differ between different service providers, countries and protocol versions Some examples of services
identification: forwarding of caller number suppression of number forwarding automatic call-back conferencing with up to 7 participants locking of the mobile terminal (incoming or outgoing calls) ...
Architecture of the GSM system

GSM is a PLMN (Public Land Mobile Network)
several providers setup mobile networks following the GSM standard within each country Encourages competition which lowers prices and speeds up development of new services Open interfaces (eg Um, A, Abis) encourages vendor competition
GSM Architecture
Distinguish between the following GSM subsystems: RSS, BSS, NSS and OSS. Using an A3 page, draw and name the main elements of the GSM system architecture (BTS, BSC, MSC, VLR, HLR, AuC, EIR, GMSC, SMSC (SMS), IWF, etc. What are the functions of network elements? Draw the external entities to which GSM connect to including MS, PSTN, PSPDN. Etc. On the same diagram, sketch all the interfaces A, Abis, B, C, D, E, F, G, Um, R and S. Draw the protocol stack that is used on each interface above. What are the advantages of specifying all internal interfaces of the GSM system? How and where is user-related data represented/stored in the GSM system? Distinguish between the HLR and VLR.
What are the subsystems of GSM?

RSS (radio subsystem): covers all radio aspects NSS (network and switching subsystem): call forwarding, handover, switching OSS (operation subsystem): management of the network
Um A
RSS Radio Subsystem Radio and mobility
NSS Network and Switching Subsystem Location and call handling
OSS Operation Subsystem Network Management
GSM: system architecture

radio subsystem MS MS ISDN PSTN Um BTS BTS SS7 Abis BSC TC EIR MSC network and switching subsystem fixed partner networks
Network Elements
OSS Operation Subsystem Network Management Um BSS Base Station Subsystem

Abis Ater EIR BSC TC MSC HLR VLR BSC MSC AUC IWF BTS BTS BTS
NSS Network and Switching Subsystem
Fixed Partner Networks
HLR
Mobile Terminals
BTS BTS BSS BSC
TC A MSC IWF
VLR ISDN PSTN PSPDN CSPDN
BTS
ISDN PSTN PSPDN CSPDN
GSM: overview
OMC, EIR, AUC HLR NSS with OSS VLR MSC GMSC fixed network
What is RSS? Components? Functions?

The Radio Subsystem (RSS) consists of one or more BSS. Components of Base Station Subsystem BSS = BSC + sum(BTS) + TC +interconnection 1. Base Transceiver Station (BTS):
radio components including sender, receiver, antenna Signal and protocol processing limited to error protection, encryption, link level signalling
radio subsystem MS MS
network and switching subsystem
Um BTS BTS Abis BSC MSC
VLR
MSC
BSC BSC RSS
2. Base Station Controller (BSC):

Controlling and switching between BTSs, Manages radio channels handover, paging, radio slot reservation and assignment mapping of radio channels (Um) onto terrestrial channels (A interface)
BTS BTS BSS BSC A MSC
Interfaces Um : radio interface Abis : standardized, open interface with 16 kbit/s user channels A: standardized, open interface with 64 kbit/s user channels Acknowledgements to Schiller, Nokia, Ericsson, Alcatel, ETSI, 3GPP, IEEE,
3. Transcoder (TC) :
translates GSM speech channels (13kbit/s) to PCM speech channels (64kbit/s), handles comfort noise generation, discontinuous transmission
Copyright 2011 Prof K.Sandrasegaran. Please report unauthorized usage to kumbes@ieee.org
Distinguish between the tasks of the BTS and BSC Tasks of a BSS are distributed over BSC and BTS BTS comprises radio specific functions BSC is the switching center for radio channels
Functions Management of radio channels Frequency hopping (FH) Management of terrestrial channels Mapping of terrestrial onto radio channels Channel coding and decoding Rate adaptation Encryption and decryption Paging Uplink signal measurements Traffic measurement Authentication Location registry, location update Handover management BTS X BSC X X X X
Mobile station (MS), Mobile Terminal and SIM
Terminal for the use of GSM services A mobile station (MS) comprises several functional groups
MT (Mobile Terminal):
offers common functions used by all services the MS offers corresponds to the network termination (NT) of an ISDN access end-point of the radio interface (Um)
SIM (Subscriber Identity Module):

personalization of the mobile station, stores user parameters Provides separation of personal and terminal mobility. Contains keys and algorithms needed for security.
X X X X X
X X X X X X
TA (Terminal Adapter): e.g. Modem. Provides terminal adaptation, hides radio specific characteristics. TE (Terminal Equipment): e.g. Laptop
peripheral device of the MS, offers services to a user does not contain GSM specific functions
TE R
TA S
MT
Um
Describe the functions of the MT and SIM. Why does GSM separate the MT and SIM? Explain the difference between MT, TE, TA, SIM, MS? Acknowledgements to Schiller, Nokia, Ericsson, Alcatel, ETSI, 3GPP, IEEE, Copyright 2011 Prof K.Sandrasegaran. Please report unauthorized usage to kumbes@ieee.org Acknowledgements to Schiller, Nokia, Ericsson, Alcatel, ETSI, 3GPP, IEEE, Copyright 2011 Prof K.Sandrasegaran. Please report unauthorized usage to kumbes@ieee.org
Network and switching subsystem (NSS)

What are the function of NSS?
main component of the GSM PLMN. Performs switching, mobility management, interconnection to other networks, system control, charging
1.
network subsystem
fixed partner networks
What are functions of an Mobile Services Switching Center?

The MSC (mobile switching center) plays a central role in GSM
switching functions Mobility management management of network resources interworking functions via Gateway MSC (GMSC) integration of several databases specific functions for paging and call forwarding termination of SS7 (signaling system no. 7) mobility specific signaling location registration and forwarding of location information provision of new services (fax, data calls) support of short message service (SMS) generation and forwarding of accounting and billing information
ISDN PSTN MSC
controls all connections via a separated network to/from a mobile terminal within the domain of the MSC - several BSC can belong to a MSC
SS7
What are the components of the NSS? Mobile Services Switching Center (MSC)
EIR
HLR
2. Databases (scalability, high capacity, low delay)
Home Location Register (HLR): central master database containing user data, permanent and ISDN semi-permanent data of all subscribers assigned to MSC PSTN IWF the HLR (one provider can have several HLRs) PSPDN Visitor Location Register (VLR) : local database for CSPDN a subset of user data, including data about all user MSC (Mobile Services Switching Center): IWF (Interworking Functions) currently in the domain of the VLR. Usually ISDN (Integrated Services Digital Network) combined with MSC. PSTN (Public Switched Telephone Network) PSPDN (Packet Switched Public Data Net.) EIR (part of OSS) CSPDN (Circuit Switched Public Data Net.) AuC (part of OSS) HLR (Home Location Register)
Acknowledgements to Schiller, Nokia, Ericsson, Alcatel, ETSI, 3GPP, IEEE,
VLR (Visitor Location Register) EIR (Equipment Identity Register)
VLR
OSS Operation Subsystem

radio cell
The OSS (Operation Subsystem) enables centralized operation, management, and maintenance of all GSM subsystems Components 1. Authentication Center (AUC)
generates user specific authentication parameters on request of a VLR authentication parameters used for authentication of mobile terminals and encryption of user data on the air interface within the GSM system
2.
BSS MS Um RSS BTS MS radio cell MS
BTS Abis BSC A MSC NSS MSC signaling GMSC IWF O OSS EIR AUC OMC ISDN, PSTN PDN BSC
GSM Numbering
State the full name, composition, location(s) where it is kept, and purpose of the following identifiers used in GSM: MSISDN, CC, NDC, SN, IMSI, MCC, MNC, MSIN, TMSI, MSRN, VCC, VNDC, LAI, CGI (Cell Global Identity), BSIC, IMEI? Distinguish between user related and system related identifiers.
Equipment Identity Register (EIR)

registers GSM mobile stations stolen or malfunctioning mobile stations can be locked and sometimes even localized
VLR HLR
VLR
3.
Operation and Maintenance Center (OMC)

different control capabilities for the radio subsystem and the network subsystem
Identifiers Used in GSM

SIM (Subscriber Identity Module)
personalization of the mobile terminal, stores user parameters
Numbering in Germany
IMSI (international mobile subscriber identification)

IMSI identifies a subscriber worldwide. Mobile country code + mobile network node + ms identification nr E.g 240 + 23415 + 123456
TMSI (temporary mobile subscriber identification):

TMSI identifies a subscriber. Used over the air only to hide identity of the user. Used by VLR is only valid for a certain period
MSISDN (mobile station ISDN number)

MSISDN is a dialable number assigned to a given subscriber. +61 4 2456 1842
IMEI (international mobile station equipment identity)

IMEI identifies a particular handset. This is also called mobile identity number (MIN).
Acknowledgements to Schiller, Nokia, Ericsson, Alcatel, ETSI, 3GPP, IEEE, Copyright 2011 Prof K.Sandrasegaran. Please report unauthorized usage to kumbes@ieee.org Acknowledgements to Schiller, Nokia, Ericsson, Alcatel, ETSI, 3GPP, IEEE, Copyright 2011 Prof K.Sandrasegaran. Please report unauthorized usage to kumbes@ieee.org
IMSI vs MSISDN
IMSI International Mobile Subscriber Identity Uniquely identifies a subscriber Used internally within the network Stored in the HLR, SIM, AUC IMSI = MCC + MNC + MSIN (Mobile Country Code + Mobile Network Code + Mobile Subscriber Number)
MCC 3 digits MNC 2 digits MSIN 10 digits
Network name: Telstra Corporation Ltd. MCC / MNC: 505 / 01, / 11, / 71, / 72 Network name: Optus Mobile Pty. Ltd. MCC / MNC: 505 / 02, /90 Network name: Vodafone Network Pty. Ltd. MCC / MNC: 505 / 03, / 07
GSM Air Interface

Explain how GSM implements SDMA, FDMA, TDMA, FDD on its air interface. Using a table, distinguish between the following in terms of composition, duration, types, and effective data rate: Burst, Time Slot, Frame, Multiframe, Superframe, Hyperframe. Why is there a need to standardize the framing structure? Explain the purpose of the various fields of the GSM burst? Guard, tail, S, training, etc. Explain the purpose of normal, synchronization, access, dummy, and frequency correction bursts. Why is there a need to separate uplink and downlink channels by 3TS? How is slow hopping implemented in GSM? Distinguish between the terms physical channel and logical channel. Explain how different logical channels can use the same physical channel. Distinguish between TCH/F and TCH/H. What data rates are possible in each? What is the difference between TCH and CCH? Explain the purpose of BCCH, FCCH, SCH, CCCH, PCH, RACH, AGCH, DCCH, SDCCH, SACCH, FACCH. Prove that the TCH/F data rate is 22.8 kbits/sec. Why is the user data rate much less than 22.8 kbits/sec? Acknowledgements to Schiller, Nokia, Ericsson, Alcatel, ETSI, 3GPP, IEEE, Copyright 2011 Prof K.Sandrasegaran. Please report unauthorized usage to kumbes@ieee.org
MSISDN Mobile Subscriber Identity Number Uniquely identifies a subscriber Stored in the HLR and SIM MSISDN = CC + NDC + SN (Country Code + National Destination Code + Subscriber Number) Publicly known subscriber number
CC max 3 digits NDC max 3 digits SN 10 digits
GSM SDMA/TDMA/FDMA/FDD/TDD
935-960 MHz 124 channels (200 kHz) downlink
Basic Structure of Air Interface

1. Geographic region divided into areas called cells or sectors 3. Transmission in each cell is divided into 8 timeslots (TSL) TDMA frame
890-915 MHz 124 channels (200 kHz) uplink
f1 f5
time
f9 f18 f10 f22 f2 f2 f2 f24 f19 f7 f6
T6
T7
T0
T1
T2
T3
T4
T5
T6
T7
T0
T1
higher GSM frame structures
Entire network is synchronised

T6 T7 T0 T1 T2 T3 T4 T5 T6 T7 T0 T1
f12 f4
4.615 ms
GSM TDMA frame 1 2 3 4 5 6 7 8
f15 f3
GSM time-slot (normal burst)

guard space tail user data S Training S user data tail guard space
5. To increase capacity, several frequencies can be used in a cell, or sector, and only 1 TSL is needed for broadcasting
3 bits
57 bits
26 bits
57 bits
546.5 s 577 s
148 bits + 8.25 bp =156.25bp (*3.69us) = 577us per RTSL
2. Each cell is assigned a frequency FDMA. Consecutive frequency numbers should be separated by distance so as to reduce interference
4. T0, the first TSL in each sector is reserved for broadcast signalling Once the mobile has identified the timing of the network it will tune in to this timeslot anywhere in the network find out more info
These timeslots are known as PHYSICAL channels
GSM hierarchy of frames (Schiller)

Timeslot content LOGICAL CHANNELS
T6 T7 T0 T1 T2 T3 T4 T5 T6 T7 T0 T1
hyperframe 0 1 2 ... superframe 0 0 1 1 multiframe

4 5 ... 11 12 13 ... 25 TCH
2045 2046 2047 3 h 28 min 53.76 s
What is transmitted in a timeslot is categorised and scheduled in a predictable manner Each successive transmission of a timeslot contains a Logical Channel in a given order, as shown T0 always contains the Control Channels so that all mobiles can orient themselves within any network The control channels (CCH) are for signalling only, whereas the Traffic Channels (TCH) carry user voice and data traffic CCH are grouped in a sequence of 51 frames, called a multiframe and TCH are grouped in a 26 frame multiframe
0 1 2 3 4 5 6 7 8 9
FCCH SCH BCCH BCCH BCCH BCCH CCCH CCCH CCCH CCCH FCCH SCH
0 1 2 3
TCH TCH TCH TCH
... ...
48
49 24
50 25 6.12 s
0
TCH TCH TCH SACCH
1 0 1
... 2 frame
24 ...
25 48 49 50
120 ms 235.4 ms
26 Frame
TCH TCH idle
1 slot burst
...
4.615 ms 577 s
51 Frame
10 11
GSM Logical Channels CCH Common Channels BCH

Broadcast Channels
Broadcast network information DL Only
DCH Dedicated Channels CCCH DCCH

Dedicated Control Channels
Used to set up a point to point connection
TCH
Traffic Channels
Common Control Channels

FCCH
Frequency Correction Channel
Broadcasts carrier frequency
PCH
Paging Channel
Broadcasts pages DL only
TCH/F SDCCH
Slow Dedicated Control Channel
Stand alone signalling channel used to set up connections
Full rate
User data rate of 13 kbit/s
GSM Operation
4.1.4. Protocols State the full names of the protocols shown in Figure 4.6. At which layer and interface are these protocols used on. Explain the following functions of the physical layer (Layer 1) of the GSM Air interface: burst formatting, multiplexing, synchronization (including timing advance), idle channel detection, measurements, modulation, encryption, channel coding, error coding, interleaving. What multiplexing schemes are used in GSM for what purposes? How is synchronisation achieved in GSM? Who is responsible for synchronisation and why is synchronisation very important? (Timing Advance) How is error coding different in GSM and ISO/OSI model? What are the important characteristics of channel coding in GSM? Explain the role of voice activity detection (VAD) and comfort noise in GSM. Why is a delay introduced due to interleaving in GSM? What are the differences between LAPDm and LAPD? Explain the function of RR, MM and CM in GSM? Why is there a need to provide DTMF functionality in GSM?
SCH
Synchronisation Channel
Contains BSIC and TDMA frame no.
RACH
Random Access Channel
Used by MS to gain DCCH UL only
TCH/H
Half rate
User data rate of 67 kbit/s
SACCH
Slow Associated Control Channel
Used to control a point to point connection
BCCH
Broadcast Control Channels
Broadcast network information: Used frequencies, Frequency hopping sequence, Channel combination, Paging groups, surrounding cell information
TCH/EFR
Enhanced Full Rate
User data rate of 13 kbit/s Provides better speech quality
AGCH
Access Grant Channel
Network assigns DCCH to Ms DL only
FACCH
Fast Associated Control Channel
Steals 20ms TCH channel to exchange quick control communication eg for handovers
GSM protocol layers for signaling
Um MS
CM MM RR RR LAPDm radio LAPDm radio BTSM LAPD PCM
Abis BTS BSC
A MSC
CM
MM
BSSAP
BSSAP SS7
PCM
GSM Session Management

4.1.5 Localization and Calling How is localization performed in GSM? How does the HLR and VLR interact? What is roaming? What are typical roaming scenarios? Describe the steps involved in a Mobile Terminated Call (MTC)? Figure 4.4 & 4.9 Describe the steps involved in a Mobile Originated Call (MOC)? Figure 4.8 & 4.9
RR BTSM LAPD PCM
SS7
PCM
16/64 kbit/s
64 kbit/s / 2.048 Mbit/s
10
Mobile Originated Call

VLR
Mobile Terminated Call

3 4 6
PSTN GMSC
HLR
4 5 7
VLR
3 6
8 9 14 15
MSC
1, 2: connection request 3, 4: security check 5-8: check resources (free circuit) 9-10: set up call
MS
5
MSC
7
BTS
8 2 9
MS
MOC
channel request immediate assignment service request authentication request authentication response ciphering command ciphering complete setup call confirmed
assignment command
1 10
BSS
assignment complete alerting connect connect acknowledge data/speech exchange
1: calling a GSM subscriber 2: forwarding call to GMSC 3: signal call setup to HLR 4, 5: request MSRN from VLR 6: forward responsible MSC to GMSC 7: forward call to current MSC 8, 9: get current status of MS 10, 11: paging of MS 12, 13: MS answers 14, 15: security checks 16, 17: set up connection
calling station 1
PSTN
GMSC
10
BSS
MS channel request immediate assignment paging response authentication request authentication response ciphering command ciphering complete call confirmed assignment command assignment complete alerting connect connect acknowledge
10 13 16
BSS
10
BSS
MTC
10 . paging request
11
BTS
11 11 12 17
MS
11
4 types of handover
1 MS
2 MS
3 MS
4 MS
GSM Mobility Management

BTS BTS BSC BTS BSC MSC BTS BSC MSC
4.1.6 Handovers in GSM Give reasons for a handover in GSM and the problems associated with it. What are the typical steps for handover? (Figure 4.10) What types of handover can occur in GSM? What measurements have to be done during handover? Who takes the measurements? How are the measurements processed? (Figure 4.11) Why is there a need for a handover margin? What are the implications of setting it too high or low? Explain Figure 4.12. What are the important conclusions you can make from it?
11
Handover decision
Handover procedure
MS BTSold BSCold measurement measurement report result HO decision HO required MSC BSCnew BTSnew
receive level BTSold
receive level BTSold
HO request resource allocation ch. activation
HO command
HO command
HO command
HO request ack ch. activation ack
HO_MARGIN MS BTSold MS BTSnew
HO access
Link establishment clear command clear command clear complete clear complete HO complete HO complete
Security in GSM
Security services
access control/authentication
user SIM (Subscriber Identity Module): secret PIN (personal identification number) SIM network: challenge response method
confidentiality
GSM Security
4.1.7 Security in GSM What are the security services offered by GSM? State the names, location and purpose of all the keys (PIN, PUK, Ki, Kc) and algorithms (A3, A5, A8) used for GSM security? Describe the steps involved in the authentication of a GSM user? (Figure 4.13) Describe the steps involved in the encryption of user data? (Figure 4.14) How is system security maintained?
voice and signaling encrypted on the wireless link (after successful authentication)
anonymity
temporary identity TMSI (Temporary Mobile Subscriber Identity) newly assigned at each new location update (LUP) encrypted transmission
secret: A3 and A8 available via the Internet network providers can use stronger mechanisms
3 algorithms specified in GSM

A3 for authentication (secret, open interface) A5 for encryption (standardized) A8 for key generation (secret, open interface)
12
GSM - authentication
GSM - key generation and encryption
mobile network Ki AC 128 bit A3 SRES* 32 bit RAND 128 bit RAND
SIM RAND 128 bit A3 SIM SRES 32 bit cipher key Ki 128 bit AC
mobile network (BTS) Ki 128 bit A8 Kc 64 bit data A5 encrypted data RAND 128 bit RAND
MS with SIM RAND 128 bit A8 Ki 128 bit SIM
MSC
SRES* =? SRES
SRES 32 bit
Kc 64 bit SRES data MS A5
SRES
BSS
Ki: individual subscriber authentication key
SRES: signed response Acknowledgements to Schiller, Nokia, Ericsson, Alcatel, ETSI, 3GPP, IEEE, Copyright 2011 Prof K.Sandrasegaran. Please report unauthorized usage to kumbes@ieee.org
Data services in GSM I

Data transmission standardized with only 9.6 kbit/s
advanced coding allows 14,4 kbit/s not enough for Internet and multimedia applications
HSCSD (High-Speed Circuit Switched Data)
HSCSD
4.1.8 New Data Services (HSCSD only) What are the limitations of data services offered by GSM networks? How can the data rates associated with GSM be increased? Explain the important characteristics of HSCSD? What is the maximum data rate that can be achieved with HSCSD? Which resources need to be allocated during handover for data transmission using HSCSD? What are the limitations of HSCSD?
mainly software update bundling of several time-slots to get higher AIUR (Air Interface User Rate) (e.g., 57.6 kbit/s using 4 slots, 14.4 each) advantage: ready to use, constant quality, simple disadvantage: channels blocked for voice transmission
AIUR [kbit/s] 4.8 9.6 14.4 19.2 28.8 38.4 43.2 57.6 TCH/F4.8 1 2 3 4 TCH/F9.6 1 1 2 3 4 2 3 4 TCH/F14.4
13
Future mobile telecommunication networks

terminal mobility
fast
MBS (Mobile Broadband System) UMTS
mobile
GSM DECT
slow
SAMBA
portable
WAND ISDN
10 kbit/s 2 Mbit/s 20 Mbit/s
MEDIAN B-ISDN
30 Mbit/s 150 Mbit/s
fixed
14

4 GSM 2011

Hochgeladen von

Dokumentinformationen

Originalbeschreibung:

Originaltitel

Copyright

Verfügbare Formate

Dieses Dokument teilen

Dokument teilen oder einbetten

Freigabeoptionen

Stufen Sie dieses Dokument als nützlich ein?

Sind diese Inhalte unangemessen?

Copyright:

Verfügbare Formate

4 GSM 2011

Hochgeladen von

Copyright:

Verfügbare Formate

Readings

Global System for Mobile Communication (GSM)

Special Acknowledgements to Jochen Schiller

GSM Markets & Evolution

0 1996 1997 1998 1999 2000 2001 2002

Development of mobile telecommunication systems

CT2 IS-136 TDMA D-AMPS GSM PDC

IMT-MC cdma2000 1X EV-DO 1X EV-DV (3X) 3G

What are performance characteristics of GSM (wrt. analog sys.)? Communication

High capacity if needed

High transmission quality

What are some of disadvantages of GSM?

GSM Services: What type of services does GSM offer?

Three service domains

Telematic Services: enable communication via mobile phones

bearer services MS TE R, S MT Um GSM-PLMN transit network (PSTN, ISDN) tele services

source/ destination TE network (U, S, R)

What are Tele Services? Types?

data service (packet switched)

Today: data rates of approx. 50 kbit/s possible will be covered later!

What are supplementary services?

Architecture of the GSM system

What are the subsystems of GSM?

RSS Radio Subsystem Radio and mobility

NSS Network and Switching Subsystem Location and call handling

OSS Operation Subsystem Network Management

GSM: system architecture

OSS Operation Subsystem Network Management Um BSS Base Station Subsystem

NSS Network and Switching Subsystem

Fixed Partner Networks

BTS BTS BSS BSC

VLR ISDN PSTN PSPDN CSPDN

ISDN PSTN PSPDN CSPDN

What is RSS? Components? Functions?

network and switching subsystem

Um BTS BTS Abis BSC MSC

BSC BSC RSS

2. Base Station Controller (BSC):

Copyright 2011 Prof K.Sandrasegaran. Please report unauthorized usage to kumbes@ieee.org

Mobile station (MS), Mobile Terminal and SIM

SIM (Subscriber Identity Module):

Network and switching subsystem (NSS)

fixed partner networks

What are functions of an Mobile Services Switching Center?

ISDN PSTN MSC

2. Databases (scalability, high capacity, low delay)

Copyright 2011 Prof K.Sandrasegaran. Please report unauthorized usage to kumbes@ieee.org

OSS Operation Subsystem

BSS MS Um RSS BTS MS radio cell MS

Equipment Identity Register (EIR)

Operation and Maintenance Center (OMC)

Identifiers Used in GSM

IMSI (international mobile subscriber identification)

TMSI (temporary mobile subscriber identification):

MSISDN (mobile station ISDN number)

IMEI (international mobile station equipment identity)

GSM Air Interface

Basic Structure of Air Interface

890-915 MHz 124 channels (200 kHz) uplink

f9 f18 f10 f22 f2 f2 f2 f24 f19 f7 f6

higher GSM frame structures

Entire network is synchronised