PROJECT REPORT ON SIX-WEEKS INDUSTRIAL TRAINING PERFORMED AT AIRCEL PVT. LTD.

,SRINAGAR (J&K)

TOPIC: GSM

SUBMITTED BY: AHMAD IQBAL SHAH REG. NO. 11001930

DECLARATION
I hereby declare that the project report on GSM (at AIRCEL pvt.ltd.) is written and submitted by me to LOVELY PROFESSIONAL UNIVERSITY towards the fulfillment for the study of B.TECH. This project is based on my knowledge and database gained from the company. The report written is original work of me. The contents provided are true to the best of my knowledge and belief. I further declare that, this project report is not been copied and submitted to any other university for any other degree, or requirement course.

AHMAD IQBAL SHAH (11001930)

ACKNOWLEDGEMENT This project has been a great learning experience for me and I would like to express my gratitude to those who guided throughout and without their help and co-operation project would not be possible. At the very outset I would like to express my sincere gratitude to Mr. Sajad (HR head Aircel Srinagar), who was kind enough for providing me this opportunity to undertake my summer training in this organization. Again I want to express my sincere gratitude to Mr.Yasir Chesti (RF Quality Lead at Aircel Srinagar, Jammu & Kashmir) whose sincere help, cooperative and guidance has enlightened the way to accomplish this project. His profound knowledge with professional experience accelerated my venture. Getting his advice and valuable time during my project summer internship overwhelms me.

OBJECTIVES: Learn about the key terms in mobile communications, describe the basic architecture of GSM Network and its elements. Understand subscriber data and the role of sumplementary services which store in temporary (VLR) or permanent (HLR) node. Describe the process of subscribers call management in GSM network.

ABOUT GSM Global System for Mobile Communications (GSM), originally Groupe Spcial Mobile, is a standard set developed by the European Telecommunications Standards Institute (ETSI) to describe technologies for second generation (2G) digital cellular networks. Developed as a replacement for first generation (1G) analog cellular networks, the GSM standard originally described a digital, circuit switched network optimized for full duplex voice telephony. The standard was expanded over time to include first circuit switched data transport, then packet data transport via GPRS (General Packet Radio Services). Packet data transmission speeds were later increased via EDGE (Enhanced Data rates for GSM Evolution) referred as EGPRS. The GSM standard is more improved after the development of third generation (3G). GSM is a cellular network, which means that cell phones connect to it by searching for cells in the immediate vicinity. There are five different cell sizes in a GSM networkmacro, micro, pico, femto and umbrella cells. The coverage area of each cell varies according to the implementation environment. Macro cells can be regarded as cells where the base station antenna is installed on a mast or a building above average roof top level. Micro cells are cells whose antenna height is under average roof top level; they are typically used in urban areas. Pico cells are small cells whose coverage diameter is a few dozen meters; they are mainly used indoors. Femto cells are cells designed for use in residential or small business environments and connect to the service providers network via a broadband internet connection. Umbrella cells are used to cover shadowed regions of smaller cells and fill in gaps in coverage between those cells. Cell horizontal radius varies depending on antenna height, antenna gain and propagation conditions from a couple of hundred meters to several tens of kilometers. The longest distance the GSM specification supports in practical use is 35 kilometers (22 mi). There are also several implementations of the concept of an extended cell, where the cell radius could be double or even more, depending on the antenna system, the type of terrain and the timing advance. Indoor coverage is also supported by GSM and may be achieved by using an indoor pico cell base station, or an indoor repeater with distributed indoor antennas fed

through power splitters, to deliver the radio signals from an antenna outdoors to the separate indoor distributed antenna system. These are typically deployed when a lot of call capacity is needed indoors; for example, in shopping centers or airports. However, this is not a prerequisite, since indoor coverage is also provided by in-building penetration of the radio signals from any nearby cell. The modulation used in GSM is Gaussian minimum-shift keying (GMSK), a kind of continuous-phase frequency shift keying. In GMSK, the signal to be modulated onto the carrier is first smoothed with a Gaussian low-pass filter prior to being fed to a frequency modulator, which greatly reduces the interference to neighboring channels (adjacent-channel interference). GSM ADVANTAGES: It is a wireless system. So mobile equipment (cell phone) can be on move. High secrecy in the system. So information cannot be tapped easily. Easy to carry MS. And consumes less power. GSM provides more voice channels in limited bandwidth. Cellular is based on concept of trunking. This allows large number of channels. There are different types in GSM. 1) GSM 900 2) DCS 1800 3) PCS 1900 GSM 900: GSM 900 operates at 900MHz frequency. Up link operates on 890MHz to 915MHz Band. Down link operates on 935MHz to 960MHz Band. Uplink /Downlink separation: 45 MHz. GSM takes advantages of both FDMA & TDMA. In 25MHz BW, 124 carriers are generated with channel spacing of 200KHz(FDMA) Each carrier is divided into 8 time slots (TDMA) At any specific time 992 speech channels are made available in GSM 900.

DCS 1800: DCS 1800 operates at 1800 Mhz frequency Up link operates on 1715MHz to 1785MHz Band. Down link operates on 1805MHz to 1880MHz Band. Uplink /Downlink separation: 95 MHz. Channel spacing : 200khz Each carrier is divided into 8 time slots (TDMA) No. of carrier : 374 PCS 1900: PCS 1900 operates at 1900 MHz frequency Up link operates on 1850 MHz to 1910MHz Band. Down link operates on 1930MHz to 1990MHz Band. Uplink /Downlink separation: 80 MHz.

Carrier frequencies of GSM GSM networks operate in a number of different carrier frequency ranges (separated into GSM frequency ranges for 2G and UMTS frequency bands for 3G), with most 2G GSM networks operating in the 900 MHz or 1800 MHz bands. Where these bands were already allocated, the 850 MHz and 1900 MHz bands were used instead. In rare cases the 400 and 450 MHz frequency bands are assigned in some countries because they were previously used for first-generation systems. Most 3G networks in Europe operate in the 2100 MHz frequency band. Regardless of the frequency selected by an operator, it is divided into timeslots for individual phones to use. This allows eight full-rate or sixteen half-rate speech channels per radio frequency. These eight radio timeslots (or eight burst periods) are grouped into a TDMA frame. Half rate channels use alternate frames in the same timeslot. The channel data rate for all 8 channels is 270.833 kbit/s, and the frame duration is 4.615 ms. The transmission power in the handset is limited to a maximum of 2 watts in GSM850/900 and 1 watt in GSM1800/1900.

Aircel (Jammu & Kashmir) has been assigned the frequency 4.4 MHz by the government .

NETWORK AT AIRCEL: The network at Aircel contains three main parts BTS Base Transceiver Station BSC Base Station Controller MSC Mobile Switching Center

BTS Base Transceiver Station A Base Trans Receiver is the root of the network. A group of Base Trans Receivers are connected to a Base Station Controller. A group of Base Station Controllers are connected to a Mobile Switching Center. Every circle of Aircel has got its unique Mobile Switching Center. Base transceiver station (BTS) A base transceiver station (BTS) is a piece of equipment that facilitates wireless communication between user equipment (UE) and a network. UEs are devices like mobile phones (handsets), WLL phones, computers with wireless internet connectivity, Wi-Fi and Wi-MAX devices and others. The network can be that of any of the wireless communication technologies like GSM, CDMA, Wireless local loop, WAN, WiFi, WiMAX, etc. BTS is also referred to as the radio base station (RBS), node B (in 3G Networks) or, simply, the base station (BS). For discussion of the LTE standard the abbreviation eNB for evolved node B is widely used. Though the term BTS can be applicable to any of the wireless communication standards, it is generally associated with mobile communication technologies like GSM and CDMA. In this regard, a BTS forms part of the base station subsystem (BSS) developments for system management. It may also have equipment for encrypting and decrypting communications, spectrum filtering tools (band pass filters), etc. Antennas may also be considered as components of BTS in general sense as they facilitate the functioning of BTS. Typically a BTS will have several transceivers (TRXs) which allow it to serve several different frequencies and different sectors of the cell (in the case of sectaries base stations). A BTS is controlled by a parent base station controller via the base station control function (BCF). The BCF is implemented as a discrete unit or even incorporated in a TRX in compact base stations. The BCF provides an operations and maintenance (O&M) connection to the network management system (NMS), and manages operational states of each TRX, as well as software handling and alarm collection. The basic structure and functions of the BTS remains the same regardless of the wireless technologies.

Architecture of BTS A BTS in general has the following parts: Transceiver (TRX): Quite widely referred to as the driver receiver (DRX), DRX are either in the form of single (sTRU), double (dTRU) or a composite double radio unit (DRU). It basically does transmission and reception of signals. It also does sending and reception of signals to and from higher network entities. Power amplifier (PA): Amplifies the signal from DRX for transmission through antenna; may be integrated with DRX. Combiner: Combines feeds from several DRXs so that they could be sent out through a single antenna. Allows for a reduction in the number of antenna used. Duplexer: For separating sending and receiving signals to/from antenna. Does sending and receiving signals through the same antenna ports (cables to antenna). Antenna: This is the structure that lies underneath the BTS; it can be installed as it is or disguised in some way (Concealed cell sites). Alarm extension system: Collects working status alarms of various units in the BTS and extends them to operations and maintenance (O&M) monitoring stations. Control function: Controls and manages the various units of BTS, including any software. On-thespot configurations, status changes, software upgrades, etc. are done through the control function. Baseband receiver unit (BBxx): Frequency hopping, etc.

BSC Base Station Controller The base station controller (BSC) provides, classically, the intelligence behind the BTSs. Typically a BSC has tens or even hundreds of BTSs under its control. The BSC handles allocation of radio channels, receives measurements from the mobile phones, and controls handovers from BTS to BTS (except in the case of an interBSC handover in which case control is in part the responsibility of the anchor MSC). A key function of the BSC is to act as a concentrator where many different low capacity connections to BTSs (with relatively low utilization) become reduced to a smaller number of connections towards the mobile switching center (MSC) (with a high level of utilization). Overall, this means that networks are often structured to have many BSCs distributed into regions near their BTSs which are then connected to large centralized MSC sites. The BSC is undoubtedly the most robust element in the BSS as it is not only a BTS controller but, for some vendors, a full switching center, as well as an SS7 node with connections to the MSC and serving GPRS support node (SGSN) (when using GPRS). It also provides all the required data to the operation support subsystem (OSS) as well as to the performance measuring centers. A BSC is often based on a distributed computing architecture, with redundancy applied to critical functional units to ensure availability in the event of fault conditions. Redundancy often extends beyond the BSC equipment itself and is commonly used in the power supplies and in the transmission equipment providing the A-ter interface to PCU. The databases for all the sites, including information such as carrier frequencies, frequency hopping lists, power reduction levels, receiving levels for cell border calculation, are stored in the BSC. This data is obtained directly from radio planning engineering which involves modeling of the signal propagation as well as traffic projections.

MSC Mobile Switching Center The mobile switching center (MSC) is the primary service delivery node for GSM/CDMA, responsible for routing voice calls and SMS as well as other services (such as conference calls, FAX and circuit switched data). The MSC sets up and releases the end-to-end connection, handles mobility and hand-over requirements during the call and takes care of charging and real time pre-paid account monitoring. In the GSM mobile phone system, in contrast with earlier analogue services, fax and data information is sent directly digitally encoded to the MSC. Only at the MSC is this re-coded into an "analogue" signal (although actually this will almost certainly mean sound encoded digitally as PCM signal in a 64-kbit/s timeslot, known as a DS0 in America). There are various different names for MSCs in different contexts which reflect their complex role in the network; all of these terms though could refer to the same MSC, but doing different things at different times. The Gateway MSC (G-MSC) is the MSC that determines which visited MSC the subscriber who is being called is currently located at. It also interfaces with the PSTN. All mobile to mobile calls and PSTN to mobile calls are routed through a GMSC. The term is only valid in the context of one call since any MSC may provide both the gateway function and the Visited MSC function, however, some manufacturers design dedicated high capacity MSCs which do not have any BSSs connected to them. These MSCs will then be the Gateway MSC for many of the calls they handle. The visited MSC (V-MSC) is the MSC where a customer is currently located. The VLR associated with this MSC will have the subscriber's data in it. The anchor MSC is the MSC from which a handover has been initiated. The target MSC is the MSC toward which a Handover should take place. A mobile switching centre server is a part of the redesigned MSC concept starting from 3GPP Release 4.

VLR - Visitor Location Register The visitor location is a database of the subscribers who have roamed into the jurisdiction of the MSC (Mobile Switching Center) which it serves. Each base station in the network is served by exactly one VLR, hence a subscriber cannot be present in more than one VLR at a time. The data stored in the VLR has either been received from the HLR, or collected from the MS (Mobile station). In practice, for performance reasons, most vendors integrate the VLR directly to the V-MSC and, where this is not done, the VLR is very tightly linked with the MSC via a proprietary interface. Whenever an MSC detects a new MS in its network, in addition to creating a new record in the VLR, it also updates the HLR of the mobile subscriber, appraising it of the new location of that MS. If VLR data is corrupted it can lead to serious issues with text messaging and call services. Data stored include: IMSI (the subscriber's identity number). Authentication data. MSISDN (the subscriber's phone number). GSM services that the subscriber is allowed to access. Access point (GPRS) subscribed. The HLR address of the subscriber.

Mobile Subscriber Administration:

SUBSCRIBER IDENTITY MODULE (SIM): In order for the ME to operate in a GSM network for services other than the emergency services, a valid IMSI stored on if, must present. With the insertion of the SIM card the ME will become a fully functional Mobile Station. Certain subscriber parameter together with personal data used by the subscriber, e.g. frequently called number will be stored on the SIM. There are three types of subscriber related information that is stored on the SIM. Subscriber data IMSI, authentication key (Ki) and access control class. Network data - TMSI, LAI, Kc, forbidden PLMNs Service related data language preference, advice of charge. GSM IDENTITIES: Mobile Station ISDN Number (MSISDN) The MSISDN is a number, which uniquely identifies a mobile Telephone subscription in the PSTN numbering plan. In GSM 900/1800,the MSISDN consists of a following: MSISDN = CC + NDC + SN

International Mobile subscriber Identity (IMSI) The IMSI is a unique identity allocated to each subscriber. It is used for correct identification over the radio path and through GSM PLMN network. All networkrelated subscriber information is connected to the IMSI. The IMSI is stored in the SIM, in the HLR and VLR. The IMSI consists of three parts: IMSI = MCC+MNC+MSIN

Where, MCC=Mobile Country Code MNC=Mobile Network Code MISN=Mobile Station Identification Code

Temporary Mobile Subscriber Identity (TMSI) The TMSI is used to protect the subscribers privacy on the air interface. The TMSI has only local signification (that is, within the MSC/VLR area) and hence its structure can be determined by each operator. The TMSI should not consist of more than four octets.

International Mobile Equipment Identity (IMEI) The IMEI is used for equipment identification and uniquely identities a MS as a separate piece or assembly of equipment. The IMEI consists of the following: IMEI = TAC + FAC+ SNR + SVN Where, TAC = Type Approval Code FAC = Final Assembly Code SNR = Serial Number SVN = Software Version Number

 Location Area Identity (LAI) The LAI is used for paging and it tells MSC in which location area the MS is located. LAI = MCC + MNC+ LAC Where, MCC = Mobile Country Code MNC = Mobile Network Code LAC = Location Area Code

Cell Global identity (CGI): This is used for cell identification, within the location area. This is done by adding a cell identity. CGI = MCC + MNC + LAC + CI Where CI = cell Identity (16 Digits Maximum).