01 GSM Gprs Edge

1
Mazara del Vallo, Nov 20 2006 Satyr project

Marco MASI
Marco Masi
Mobile Networks and Services
GSM, GPRS, EDGE Networks
2
Marco MASI
CONTENTS
GSM, GPRS, EDGE Networks
Cellular coverage and frequency re-use
Radio interface: traffic and signalling channels
Functional components and network architecture
Main procedures: handover, location updating, authentication, call
scenarios
3
Marco MASI
GSM
Global System for
Mobile Communications
4
Marco MASI
GSM Fundamentals
GSM and ETSI
GSM was adopted as a European standard by the European
Telecommunications Standards Institute (ETSI)
GSM Frequency Regions
900 MHz, 1800 MHz and 1900 MHz
GSM Success
It has seen widespread adoption not only accross Europe but also
throughout the Asia-Pacific region and Americas
It has over 70% global market share of second generation cellular
systems
5
Marco MASI
GSM Cellular Coverage and Frequency Re-use
FDMA (Frequency Division Multiple Access)
The major characteristics
1 2 3 4 5 6 6 7 8 n
25 KHz
Channel Number
Time
Time
R
1
T
1
R
2
T
2
R
3
T
3
R
4
T
4
R
5
T
5
R
6
T
6
R
7
T
7
R
8
T
8
R
n
T
n
(1 Transmission and 1 Reception for voice channel)
6
Marco MASI
TDMA (Time Division Multiple Access)
2
1
8
7
6
4
3
2
200 KHz
Channel Number
Time
Frequency
1
R
n
T
n
(1 Transmission and 1 Reception for 8 voice channels)
7
Marco MASI
TDMA (Time Division Multiple Access
Each mobile transmit on the assigned radio channel with a speed
obtained multiplaying the mobile emision speed (voice coded and
service informations) by the number of timeslots configured on the
same frequency
i.e. GSM uses 8 timeslot per carrier and the emission speed is 33,8
Kbps
The burst speed is 33,8 x 8 = ~ 270 Kbps
8
Marco MASI
TDMA (Time Division Multiple Access
The major charactetristics
The transmission is obtained in discontinuous mode, since a burst is
transmitted only when the assiged timeslot happens
The carrier frequency is centered on a bandwidth greather if compared
with that used by FDMA because is used by more users; in GSM System
where the speed transmission is ~270 Kbps, the bandwidth related to a
carrier is 200 KHz
The mobile station is more advanced since includes complex circuits for
signal processing
9
Marco MASI
FDMA/TDMA Multiple Access
(1 Transmission and 1 Reception for 8 voice channels)
2
1
8
7
6
4
3
2
200 KHz
1
2
1
8
7
6
4
3
2
200 KHz
Channel Number
Time
Frequency
1
R
1
T
1
R
2
T
2
8
1 Time Slot
00010110 .
BURST
10
Marco MASI
The Goals
Area coverage
Serving as many subscribers as possible using the necessary radio
channels
Limited radio channels and radio channels reuse
Covering strategy
Bandwidth of a radio channel choice
Total bandwidth is divided by bandwidth of a radio channel: N
number of channels used
N channels is divided by G groups, each of these use N/G channels
Shape of elementary area choice, i.e. hexagon
11
Marco MASI
Covering strategy
The territory is covered by hexagonal cells with R radius
Its choosed a group of radio channels per cell and assigned to radio
base station. The simplest configuration use a omnidirectional
antenna in the centre of cell.
Its defined the Cluster as the whole G adjacent cells where all N
radio channels are used
Cluster
Cell with omnidirectional
antenna in the center
D
R
12
Marco MASI
Covering strategy
Withe frequency re-use we have a co-channel interference between
the transmitters that use the same frequency
C/I (Carrier-to-Interference ratio) is the parameter used to evaluate
the interference
C/I is related to the D distance of the antenna that use the same
frequency
Cluster
D
R
13
Marco MASI
Covering strategy
The emitted power must be sufficient to receive a good signal quality
in the cell then the other important parameter is R cell radius
D/R and C/I are the foundamental parameter used for cell planning
Cluster
D
R
14
Marco MASI
Covering strategy
i.e. with 6 transmitters causing co-channel interference and
supposing the power change as D-4, then
C/I = R-4/6D-4 = (D/R)4/6
D/R =
Cluster
D
R
G 3
15
Marco MASI
Covering strategy
G must be only the following values: 1, 3, 4, 7, 9, 12, 13, 16, 19, 21,
etc
Cell Planning Strategies

Choosing C/I, we determine D/R and G
Choosing G and D/R, is known C/I
16
Marco MASI
GSM Architecture
ME
SIM
Mobile
Station
BTS
BSC
Abis
BSS
TRAU
MSC/VLR GMSC
NSS
A
PSTN
AuC EIR HLR
Home-PLMN
17
Marco MASI
GSM Architecture
Mobile Station (MS)
ME (Mobile Equipment): the actual device
SIM (Subscriber Identity Module): a smart card
SIM
Contains
globally unique identifier, the International Mobile Subscriber Identity
(IMSI), used throughout the network as the identifier of the
subscriber
Secret key used for authentication and other security procedures
Any calls made will appear on a single user bill irrespective of
changes in the mobile device
IMEI
Uniquely mobile equipment identifier, International Mobile
Equipment Identifier
18
Marco MASI
GSM Architecture
IMSI and IMEI
Are independent and separating the concept of subscriber from
access device
15-digit longs
Emergency Call
A MS not equipped with a SIM must also still be able to make
emergency calls
Confidentiality
To protect the call from undesiderable snooping or listening in
The IMSI will not always be transmitted over the cell to identify the
subscriber
A temporary IMSI (T-IMSI) is used and changed at regular intervals
19
Marco MASI
GSM Architecture
Base Station Subsystem (BSS)
Base Transceiver Station (BTS)
Base Station Controller (BSC)
Transcoding and Rate Adaptation Unit (TRAU)
Base Transceiver Station (BTS)
Houses the radio transceivers (TRXs) that define a cell
Handle the radio link with the mobile station
It is responsible for encrypting the radio link to the MS based on
the security informations received from the Core Network (CN)
20
Marco MASI
GSM Architecture
TRX
Can handle up tu 8 full-rate users simultaneously
If more than 8 full-rate users request resources within the TRX
then they will receive a busy tone, or a network busy message
may be displayed on the MS
It is possible to increase the number of simultaneous users in a
cell by increasing the number of TRXs, hance the number of
frequencies used
21
Marco MASI
GSM Architecture
TRX
When a MS moves from one cell to another the BTS may change
A MS is connected to only one BTS at a given time
The first TRX in a cell can actually only handle a maximum of 7
(possibly less) simultaneous users since one channel on the
downlinkis is used for broadcasting general system information
through the Broadcast and Control Channel (BCCH)
22
Marco MASI
GSM Architecture
Base Station Controller (BSC)
Manage the radio resources for one or more BTSs
Handle the radio channel setup, frequency hopping and handover
procedures when a user moves from one cell to anhoter
When an handover occurs, the BSC may change and it is a design
consideration that this will not change with the same regularity as
a BTS change
23
Marco MASI
GSM Architecture
Base Station Connectivity
BTS
BSC
BTS
BTS
BTS
B
T
S
B
S
C
B
T
S
B
T
S
B
T
S
24
Marco MASI
GSM Architecture
GSM Central Role
Transfer speech calls
GSM Design
Optimized for voice traffic
GSM Encoding Method
Linear Predictive Coding with Regular Pulse Exitation (LPC-RPE) is
not as efficient as some of the more recently developed coding
systems
25
Marco MASI
GSM Architecture
TRAU Interconnection
Logically part of the BSS, but usually resides close to the MSC since
this has significant impact on reducing the transmission costs
TRAU Speech Conversion
Voice data is sent in a 16 kbps channel from MS to TRAU via the BTS
and BSC
TRAU convert the speech to the standard 64 kbps for transfer over
the PSTN or ISDN network
26
Marco MASI
GSM Architecture
ME
SIM
Mobile
Station
BTS BSC
Abis
BSS
TRAU
MSC/VLR GMSC
NSS
A
PSTN
9,6, 13,
14,4 kbps
16 kbps
16 kbps
64
kbps
64 kbps
64
kbps
27
Marco MASI
GSM Architecture
Network Switching Subsystem (NSS)
Mobile Switching Centre (MSC)
Dual role: switching and management
MS is switched on
MS request a connection to a mobile network
Principally the MSC process this request
BSS merely provide the access to facilitate the request
Successful Request
MSC registers the MS within its associated VLR
VLR will update the HLR with the location of this mobile device
HLR may be in the same network , or a different network in the case of a
roaming user
28
Marco MASI
GSM Architecture
Mobile Switching Centre (MSC)
Deal with
Registration
Authentication
MSC requests information from the Authentication Centre (AUC) but
it is the MSC which actually does the authentication
Mobile device location updating
Routing of calls to and from a mobile user
GMSC (Gateway MSC)
Provides the connectivity from the mobile network to the fixed
network
29
Marco MASI
GSM Architecture
Home Location Register (HLR)
Service Level Agreement (SLA)
A subscriber that register with an operator
Home Network or Home Land Mobile Network H-PLMN
The operators mobile network
Huge Database
Located within home network HLR stores administrative information
about the mobile user as
IMSI
Service subscription information
Service restrictions
Supplementary services
30
Marco MASI
GSM Architecture
Home Location Register (HLR)
Actually knows their location only to the VLR with which the mobile
device is registered
Only knows the location of a mobile device which is switched on and
has registered with some mobile operators network, even in the
case if the mobile is in a different country connected to another
mobile operators network, as long as a roaming agreement exists
between the two mobile operators
Roaming Agreement
Required so that both operators can settle billing issues arising from calls
made by visiting mobile subscribers
31
Marco MASI
GSM Architecture
Visited Location Register (VLR)
Only holds temporary information on subscribers currently registered
within its vicinity
This vicinity covers the subscribers in the serving area of its
associated MSC
MS enters a new area
Wish to connect to this network and informs the MSC of its arrival
Once the MSC checks are complete, the MSC will update the VLR
A message is sent to the HLR informing it of the VLR which contains the
location of the mobile
32
Marco MASI
GSM Architecture
Visited Location Register (VLR)
MS is making a call
The VLR know the location of the MS down to a single cell
MS is attached to a mobile network, but is not making a call
The VLR know the location area (LA), i.e. a group of cells and not a
single cell
Visited PLMN (V-PLMN)
The MS is attached to a mobile network where a roaming agreement
is in force
33
Marco MASI
GSM Architecture
Equipment Identity Register (EIR)
Records the different state of the mobile devices on the network
Dark List
Registers the stolen MS
Gray List
Registers the equipmente types not approved and not allowed to operate
in the network
White List
Valid mobile devices on the network
34
Marco MASI
GSM Architecture
Authentication Centre (AuC)
Contain a copy of the secret key present in each of the users SIM
card
Used to enable authentication and encryption over the radio link
Uses a challange-response mechanism
AuC send a random number to the MS
MS encrypts this number and return it
AuC now decrypt the received number and if it is successfully decrypted
to the number originally sent, then the MS is authenticated and admitted
to the network
35
Marco MASI
Mobility Management
The goal
Mechanism that the network uses for keeping a dynamic record of
the location of all of the mobile devices currently active in the
network
Location information
The cell and not the geographical area where the MS is currently
located
Paging the user
Extremely inefficient if a user needed to be paged accross an entire
network, and almost impossible to support roaming to other
networks
36
Marco MASI
Mobility Management
The signal strength
As a subscriber moves from one location to another, the strength
of the signal it receives from the BTS to which it is currently
listening will fluctuate, and, conversely, the signal received by the
BTS from the mobile device will also vary
The signal monitor
Both the network and the MS must constantly monitor the
strength of the signal, with the MS periodically reporting the
information it has measured to the network
MS also monitor the strength of other cells in the vicinity
37
Marco MASI
Mobility Management
Handover or handoff
When the signal strength gets too weak from a particular BTS, a
handover to a BTS in another cell may take place
The network must guarantee that in the event of a handover
The user call is not dropped
There is a smooth transition from cell to cell, even the user is
moving quite rapidly, as in the case for a motorist
38
Marco MASI
Mobility Management
Connected Mode and Idle Mode
MSC/VLR
IMSI: known
LA: known
Cell: known
HLR
IMSI: known
VLR: known
Dedicated Mode
MSC/VLR
IMSI: known
LA: known
Cell: ???
HLR
IMSI: known
VLR: known
Idle Mode
39
Marco MASI
Mobility Management
Location Area Update
LA1
BS
BS
BSC
BSC
BS
LA2
BS
BS
BSC
MSC/VLR
MSC/VLR
BS
LA2
BS
BS
BSC
GMSC
User 1
User 3
User 2
40
Marco MASI
Mobility Management
User 1 Handover in a dedicated mode (call in progress)
User 1 change from a cell to another
Cell update is required
Low signalling is required
User 2 change cell
Cell update and BSC update are required
More signalling is required, with MSC controlling the change in BSC
User 3 change cell
Cell update, BSC update and MSC update are required
Greater amount of signalling is required
41
Marco MASI
Mobility Management
User in idle mode (registerd but without a call in progress)
Only send periodic updates indicating that the mobile is still active,
thus reducing the signalling load on the network
If wishes to make a call, the MS will transparently update the
network as to its position and move to a dedicated mode
The MS monitors a certain area spanning a number of cells, known
as Location Area (LA) and sends location update information to
the network (Location Area Updating)
42
Marco MASI
Mobility Management
Location Area Updating (LAU) when
The MS crosses a boundary between Las
A certain period of time has elapsed
Even when the MS is stationary, after a long period of inactivity it will
send an update to allow the network to refresh its stored information
regarding the subscribers location
MS which do not send this update will be assumed to have left the
coverage area and their data may be removed from the network
This interval of time is network configurable and coul be, for
example, one hour
43
Marco MASI
Mobility Management
Location Area
A group of neighbouring cells that are controlled by a single MSC
A MSC may control a number of LAs
Dedicated Mode (user connected)
The location of the MS is known down to the cell level
Idle Mode (user not connected)
The location is only known down to the LA level
MS can still listen to the cell broadcasts and monitor for paging, so
that it can listen for incoming (i.e. mobile terminated) calls
44
Marco MASI
Mobility Management
Small and large LA tradeoff
Small LA
There are many LAU as MS moves from LA to LA, that may cause
signalling congestion
There is also of the power used by the MS to transmit these updates,
which may eventually cause the battery to go flat
Larger LA
When is required to locate a mobile device a page over all the cells in
the LA is required
This increase the downlink paging signalling, even in those cells
within the LA where the MS is not located
45
Marco MASI
GSM Air Interface
National and international regulatory bodies
The long process of the standardization has delayed the
agreement on the limited spectrum frequencies available
Actual agreement
900, 1800, and 1900 MHz bands
GSM MS Transmits
(Uplink)
890 MHz 915 MHz
GSM MS Transmits
(Downlink)
935 MHz 960 MHz
20 MHz
25 MHz 25 MHz
46
Marco MASI
GSM Air Interface
MS transmission
On the lower frequency electromagnetic waves there will generally be less
attenuation
The BTS is not reliant on a small battery and can therefore radiate grater
power
GSM Multiple Access Scheme
Combination of Frequency Division Multiplexing (FDM) and Time Division
Multiplexing (TDM)
GSM Contention Method
Slotted-Alhoa similar in operation to Ethernet
It is possible for two MSs to make a request a Transmit Channel TCH
required for a callat exactly the same time
In case that a collision will occour, properly mechanism are implemented to
deal with this
47
Marco MASI
GSM Air Interface
GSM Channel Bandwidth
200 KHz and therefore there are 25 MHz/200 KHz=125 channels
available in each directions
Guard Band
One channles is not used for data transfer, leaving 124 channels
available for communication
Matching Pair
One channel uplink and one corresponding channel downlink, is
controlled by a device called Transceiver (TRX)
48
Marco MASI
GSM Air Interface
Time Slots
TDM splits each of these frequency channels into 8 separate time
slots
Each TS may be allocated to a user or used for control purposes
From Slot 0 to Slot 7 form a TDM Frame
Each TS is named Burst (not error burst!!!)
49
Marco MASI
GSM Air Interface
One TRX
If a cell is allocated a single frequency (one TRX) then TS 0 is
reserved as a control channel
More TRX
If more frequencies are employed within the cell it may require
additional control channels to increase the overall efficiency
Broadcast and Control Channel (BCCH)
TS 0 always include BCCH, which is bradcast from the BTS in the
downlink to provide information to the MSs registered in the cell
Cell identifier
Network operator
Etc.
50
Marco MASI
GSM Air Interface
First TRX in a Cell
Maximum number of users are 7
More TRX in a Cell
If more than one frequency is used whitin the cell these additional
frequency can share the contro channel on the first TRX, and
therefore have 8 TS available for subscriber traffic channels
Control and Signalling
[TS0, TRX0] may not possess a high enough bit rate , giving rise
to congestion on the control channel
i.e when a cell contains a large number of Short Message Service
(SMS) or in an airport where many users may try to access the
network at the same time
51
Marco MASI
GSM Air Interface
Congestion
The operator may set aside another TS to alleviate the congestion
This configuration is specific for each cell
TDM Channels in GSM
The transmission by the BTS is actually retarded by the duration of
three TSs so that the TRXs do not have to listen while transmitting
The bursts are still paired, e.g. if the MS transmits on TS1 then it
will receive on TS1 because the whole frame has been retarded by
three TSs
52
Marco MASI
GSM Air Interface
TDM Channels in GSM
1 2 3 4 5 6 7 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7 0
TDM frame
890,2 MHz
6 7 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7 0 1 2 3 4 5
TDM frame
935,2 MHz
Mobile Station Transmission
Base Station Transmission
Burst Paired
1
53
Marco MASI
GSM Air Interface
Frequency Selection
The network selects
which band to use
which time slot to use
Frequency Change
The frequency change when a subscriber roams from one cell into
another since adjacent cells cannot use the same frequency
Whitin a cell, most GSM systems implement frequency hopping,
where the BTS and MS transmit consecutive frames on different
carrier frequencies accross the radio channels
Frequency hopping is used to alleviate some of the inherent
problems with radio links such a multipath fading avoiding
prolongued use of one frequency
54
Marco MASI
GSM Air Interface
Frequency Hopping
Frequency hopping is used to alleviate some of the inherent
problems with radio links such a multipath fading avoiding
prolongued use of one frequency
BCCH channel is not part of the frequency-hopping scheme since it
needs to be located by MS wishing to connect to the cell
Each individual TS can hop indipendently to the TDMA frame
55
Marco MASI
GSM Air Interface
Frequency Hopping
B
C
C
H
B
C
C
H
B
C
C
H
T
R
X
1
T
R
X
2
T
R
X
3
f
r
e
q
u
e
n
c
y
time
TDMA
block 1
TDMA
block 2
TDMA
block 3
Subscriber
timeslots
B
C
C
H

r
e
m
a
i
n
s
o
n

t
/
s
l
o
t

0
56
Marco MASI
GSM Air Interface
Traffic Channel Multiframe
Consists of 26 frames
Only 24 frames are used for TCH user data such as voice
The frame is also used to carry two logical control channels
SACCH (Slow Associated Control Channel)
FACCH (Fast Associated Control Channel)
TS 12 e TS 25 are the TS useble for SACCH/FACCH
Only one TS per frame is used for SACCH/FACCH, alternating
between TS 12 and TS 25
57
Marco MASI
GSM Air Interface
Measurement Report and Power Control
During the frame that the MS is not transmitting or receiving on its dedicated TCH, it
is constantly monitoring the strength of the received signals from the cell it is
attached to as well as other adjacent cells (6 cells)
The SACCH is used for sending these measurement results to the network
A SACCH message is 456 bits long (4 bursts x 114 bits/burst) and has a time interval
of 480 ms (4 x 120 ms)
This information can be used to increase or decrease the transmitted power levels
every 480 ms
The MS use this information it recives but actually alters its power in steps every 60
ms
Both the MS and BTS send measurement reports to the BSC, which makes the
decision to increase or decrease the power
58
Marco MASI
GSM Air Interface
Measurement Report and Power Control
MS
BTS
BSC
Power Control and
measurement reporting
Power Control
Decision
Power Control and measurement reporting
Power Control Decision
SACCH every 480ms
Abis
Base Station Subsystem
59
Marco MASI
GSM Air Interface
Short Message Service (SMS)
SACCH is used to send and receive SMS messages to and from the MS while a call is
in progress
Fast Associated Control Channel (FACCH)
User data frames 0-11 and 13-24 also carry this control information when necessary
FACCH is sent instead of TCH
1.250 bits in 4,615 ms
1112131415 1 2 3 4 5 6 7 0 9 10 8 17181920212223 16 2425
Multi-frame 32.500 bits in 120 ms
1 2 3 4 5 6 7 0
TDM frame
Control
Frame
Control
Frame
60
Marco MASI
GSM Air Interface
GSM Data Burst
0 1 2 3 4 5 6 7
8,25 bits guard band
000 Information F1 Training F1 Information 000
3 bits 57 bits 1 bit 26 bits 1 bit 57 bit 3 bits
148 bit data frame sent in 547 sec (bit time 3,69 sec)
61
Marco MASI
GSM Air Interface
GSM Data Burst
Framing bits
3 start and 3 tail bits, always zero
Stealing Bit
F1 indicate if whether the burst contains user data or control
information
Handover
While a call is in progress, the faster way for the network to indicate
to the MS that a handover should take place is via its dedicated
traffic channel (TCH)
When the TCH is used for this purpose, it is referred as FCCH and
the stealing bits indicate to the subscriber that this burst is a control
message
62
Marco MASI
GSM Air Interface
GSM Data Burst
FACCH in uplink
It is used from the subscriber as control information sent to the
network
Training Field
Is used to
Synchronize the transmitter and receiver
Train the receiver to the particular characteristics of the channel being
used
The receiver knows exactly what the transmitter has sent in this field
since this is negotiated beforehand
By using this knowledge it can check for any distortion between the
transmitted and received training field signal
This information can then be used to equalize the information fields
that are received, reducing the possibility of errors
63
Marco MASI
GSM Air Interface
Control Channel Multiframe
51 frame-multiframe employed on the
Control channels
Signalling channels
Broadcast Channel (BCCH)
It is a continous stream of data from the base station containing its
identity and channel status
All MSs can monitor the strength of this signal to ensure that they
are still within the cell
64
Marco MASI
GSM Air Interface
TCH CCCH SDCCH FACH BCH SACCH
PCH AGCH BCCH SCH FCCH
Signalling Channels
SDCCH SACCH CCCH FACCH TCH
RACH
Signalling Channels
Down Link
Up Link
65
Marco MASI
GSM Air Interface
Frequency Correction Channel (FCCH)
It is used to ensure that the MS adjusts its frequency reference to
match that of the BTS so that the MS does not drift off frequency,
reducing the voice quality of te call
The BTS emits a sine wave on this channel for the duration of a Time
Slot (TS)
Synchronization Channel (SCH)
It is to frame synchronize the MS
The Base Station Identity (BSIC) is broadcast on the SCH so that the
MS can tell if the BTS it tries to connect to is part of the correct
network
66
Marco MASI
GSM Air Interface
Common Control Channel (CCCH)
It is split into 3 sub-channels, 1 in uplink and 2 in downlink
Uplink
the Random Access Channel (RACH), allows a MS to request a TS
on the dedicated control channel, for example, to assign a traffic
channel for a voice call
RACH channel utilizes the Slotted-Aloha method
Downlink
Paging Channel (PCH) is used to alert the MS of an incoming call
Access Grant Channel (AGCH) is used by the BTS to announce the
assigned TS
67
Marco MASI
GSM Air Interface
Standalone Dedicated Control Channel (SDCCH)
Used by MS in idle mode for
Call setup
Location updating
SMS messages to and from MSs
When an initial request for a connection is made by the MS on the
RACH, the network responds on the AGCH by issuing the mobile
device an SDCCH channel rather than an TCH taffic channel
Since initial call setup does not require the relatively high bandwidth
that a TCH supports, the overall efficiency of the GSM system can be
increased
By utilizing SDCCH, the TCH is not tied up and is available for all
users
68
Marco MASI
GSM Air Interface
Slow Associated Control Channel (SACCH)
Bidirectional channel used to transfer measurement reports to and
from the network
Used for transfer of SMS data if a traffic channel is allocated to the
particular MS
Fast Associated Control Channel (FACCH)
In-band signalling channel which interrupts user data to transfer
system information in both the uplink and downlink
Used when informations needs to be transferred quickly, e.g.
handover
69
Marco MASI
GSM Air Interface
Single frequency TS 0 control channel of 51 frames
It actually repeates every 102 frames
The other 7 TS on this particular frequency are used by
subscribers for calls
F
C
C
H
S
C
H
B
C
C
H
B
C
C
H
B
C
C
H
B
C
C
H
C
C
C
H
C
C
C
H
C
C
C
H
C
C
C
H
F
C
C
H
S
C
H
C
C
C
H
C
C
C
H
C
C
C
H
C
C
C
H
C
C
C
H
C
C
C
H
C
C
C
H
C
C
C
H
F
C
C
H
S
C
H
S
D
C
C
H
/
4

(
0
)
S
D
C
C
H
/
4

(
0
)
S
D
C
C
H
/
4

(
0
)
S
D
C
C
H
/
4

(
0
)
S
D
C
C
H
/
4

(
1
)
S
D
C
C
H
/
4

(
1
)
S
D
C
C
H
/
4

(
1
)
S
D
C
C
H
/
4

(
1
)
F
C
C
H
S
C
H
S
D
C
C
H
/
4

(
2
)
S
D
C
C
H
/
4

(
2
)
S
D
C
C
H
/
4

(
2
)
S
D
C
C
H
/
4

(
2
)
S
D
C
C
H
/
4

(
3
)
S
D
C
C
H
/
4

(
3
)
S
D
C
C
H
/
4

(
3
)
S
D
C
C
H
/
4

(
3
)
F
C
C
H
S
C
H
S
D
C
C
H
/
4

(
0
)
S
D
C
C
H
/
4

(
0
)
S
D
C
C
H
/
4

(
0
)
S
D
C
C
H
/
4

(
0
)
S
D
C
C
H
/
4

(
1
)
S
D
C
C
H
/
4

(
1
)
S
D
C
C
H
/
4

(
1
)
S
D
C
C
H
/
4

(
1
)
F
C
C
H
S
C
H
B
C
C
H
B
C
C
H
B
C
C
H
B
C
C
H
C
C
C
H
C
C
C
H
C
C
C
H
C
C
C
H
F
C
C
H
S
C
H
C
C
C
H
C
C
C
H
C
C
C
H
C
C
C
H
C
C
C
H
C
C
C
H
C
C
C
H
C
C
C
H
F
C
C
H
S
C
H
S
D
C
C
H
/
4

(
0
)
S
D
C
C
H
/
4

(
0
)
S
D
C
C
H
/
4

(
0
)
S
D
C
C
H
/
4

(
0
)
S
D
C
C
H
/
4

(
1
)
S
D
C
C
H
/
4

(
1
)
S
D
C
C
H
/
4

(
1
)
S
D
C
C
H
/
4

(
1
)
F
C
C
H
S
C
H
S
D
C
C
H
/
4

(
2
)
S
D
C
C
H
/
4

(
2
)
S
D
C
C
H
/
4

(
2
)
S
D
C
C
H
/
4

(
2
)
S
D
C
C
H
/
4

(
3
)
S
D
C
C
H
/
4

(
3
)
S
D
C
C
H
/
4

(
3
)
S
D
C
C
H
/
4

(
3
)
F
C
C
H
S
C
H
S
D
C
C
H
/
4

(
2
)
S
D
C
C
H
/
4

(
2
)
S
D
C
C
H
/
4

(
2
)
S
D
C
C
H
/
4

(
2
)
S
D
C
C
H
/
4

(
3
)
S
D
C
C
H
/
4

(
3
)
S
D
C
C
H
/
4

(
3
)
S
D
C
C
H
/
4

(
3
)
Single Timeslot: Timeslot 0 repeated twice
I
D
L
E
I
D
L
E
70
Marco MASI
GSM Air Interface
There is more than one frequency being used in the cell since only
6 TS on this particular frequency will be available for subscriber
calls
Timeslot 0
F
C
C
H
S
C
H
B
C
C
H
B
C
C
H
B
C
C
H
B
C
C
H
C
C
C
H
C
C
C
H
C
C
C
H
C
C
C
H
F
C
C
H
S
C
H
C
C
C
H
C
C
C
H
C
C
C
H
C
C
C
H
C
C
C
H
C
C
C
H
C
C
C
H
C
C
C
H
F
C
C
H
S
C
H
C
C
C
H
C
C
C
H
C
C
C
H
C
C
C
H
C
C
C
H
C
C
C
H
C
C
C
H
C
C
C
H
F
C
C
H
S
C
H
C
C
C
H
C
C
C
H
C
C
C
H
C
C
C
H
C
C
C
H
C
C
C
H
C
C
C
H
C
C
C
H
F
C
C
H
S
C
H
C
C
C
H
C
C
C
H
C
C
C
H
C
C
C
H
C
C
C
H
C
C
C
H
C
C
C
H
C
C
C
H
I
D
L
E
S
D
C
C
H
/
4

(
0
)
S
D
C
C
H
/
4

(
0
)
S
D
C
C
H
/
4

(
0
)
S
D
C
C
H
/
4

(
0
)
S
D
C
C
H
/
4

(
1
)
S
D
C
C
H
/
4

(
1
)
S
D
C
C
H
/
4

(
1
)
S
D
C
C
H
/
4

(
1
)
S
D
C
C
H
/
4

(
2
)
S
D
C
C
H
/
4

(
2
)
S
D
C
C
H
/
4

(
2
)
S
D
C
C
H
/
4

(
2
)
S
D
C
C
H
/
4

(
3
)
S
D
C
C
H
/
4

(
3
)
S
D
C
C
H
/
4

(
3
)
S
D
C
C
H
/
4

(
3
)
S
D
C
C
H
/
4

(
4
)
S
D
C
C
H
/
4

(
4
)
S
D
C
C
H
/
4

(
4
)
S
D
C
C
H
/
4

(
4
)
S
D
C
C
H
/
4

(
5
)
S
D
C
C
H
/
4

(
5
)
S
D
C
C
H
/
4

(
5
)
S
D
C
C
H
/
4

(
5
)
S
D
C
C
H
/
4

(
6
)
S
D
C
C
H
/
4

(
6
)
S
D
C
C
H
/
4

(
6
)
S
D
C
C
H
/
4

(
6
)
S
D
C
C
H
/
4

(
7
)
S
D
C
C
H
/
4

(
7
)
S
D
C
C
H
/
4

(
7
)
S
D
C
C
H
/
4

(
7
)
S
D
C
C
H
/
4

(
0
)
S
D
C
C
H
/
4

(
0
)
S
D
C
C
H
/
4

(
0
)
S
D
C
C
H
/
4

(
0
)
S
D
C
C
H
/
4

(
1
)
S
D
C
C
H
/
4

(
1
)
S
D
C
C
H
/
4

(
1
)
S
D
C
C
H
/
4

(
1
)
S
D
C
C
H
/
4

(
2
)
S
D
C
C
H
/
4

(
2
)
S
D
C
C
H
/
4

(
2
)
S
D
C
C
H
/
4

(
2
)
S
D
C
C
H
/
4

(
3
)
S
D
C
C
H
/
4

(
3
)
S
D
C
C
H
/
4

(
3
)
S
D
C
C
H
/
4

(
3
)
I
D
L
E
I
D
L
E
I
D
L
E
S
D
C
C
H
/
4

(
0
)
S
D
C
C
H
/
4

(
0
)
S
D
C
C
H
/
4

(
0
)
S
D
C
C
H
/
4

(
0
)
S
D
C
C
H
/
4

(
1
)
S
D
C
C
H
/
4

(
1
)
S
D
C
C
H
/
4

(
1
)
S
D
C
C
H
/
4

(
1
)
S
D
C
C
H
/
4

(
2
)
S
D
C
C
H
/
4

(
2
)
S
D
C
C
H
/
4

(
2
)
S
D
C
C
H
/
4

(
2
)
S
D
C
C
H
/
4

(
3
)
S
D
C
C
H
/
4

(
3
)
S
D
C
C
H
/
4

(
3
)
S
D
C
C
H
/
4

(
3
)
S
D
C
C
H
/
4

(
4
)
S
D
C
C
H
/
4

(
4
)
S
D
C
C
H
/
4

(
4
)
S
D
C
C
H
/
4

(
4
)
S
D
C
C
H
/
4

(
5
)
S
D
C
C
H
/
4

(
5
)
S
D
C
C
H
/
4

(
5
)
S
D
C
C
H
/
4

(
5
)
S
D
C
C
H
/
4

(
6
)
S
D
C
C
H
/
4

(
6
)
S
D
C
C
H
/
4

(
6
)
S
D
C
C
H
/
4

(
6
)
S
D
C
C
H
/
4

(
7
)
S
D
C
C
H
/
4

(
7
)
S
D
C
C
H
/
4

(
7
)
S
D
C
C
H
/
4

(
7
)
S
D
C
C
H
/
4

(
4
)
S
D
C
C
H
/
4

(
4
)
S
D
C
C
H
/
4

(
4
)
S
D
C
C
H
/
4

(
4
)
S
D
C
C
H
/
4

(
5
)
S
D
C
C
H
/
4

(
5
)
S
D
C
C
H
/
4

(
5
)
S
D
C
C
H
/
4

(
5
)
S
D
C
C
H
/
4

(
6
)
S
D
C
C
H
/
4

(
6
)
S
D
C
C
H
/
4

(
6
)
S
D
C
C
H
/
4

(
6
)
S
D
C
C
H
/
4

(
7
)
S
D
C
C
H
/
4

(
7
)
S
D
C
C
H
/
4

(
7
)
S
D
C
C
H
/
4

(
7
)
I
D
L
E
I
D
L
E
I
D
L
E
Timeslot 1
71
Marco MASI
GSM Air Interface
Frames, Multiframes, Superframes and Hyperframes
Frame Number
Each frame is numbered, and this number is used as an input parameter for
the encryption process
Hyperframe
It is defined to ensure that the number is quite large
Frame
8 TDMA time slots (a total duration of 4,615 ms)
Multiframe
Block of 26 of these time slots, primarily for data (although some control
information is actually transferred) and 51 for control purposes
Superframe
26 x 51 TDMA frames with a duration of approximately 6,12 s
Since 26 is not a factor of 51, these frames slide accross each other so that
at the end of the 26 x 51 period each of the 26 frames has aligned once with
every one of the 51 control frames
The sliding process is required to allow the mobile device to monitor the
quality of the surrounding cells BCCH for handover purposes
Hyperframe
2048 x 26 x 51 TDMA frames lasting approximately 3 h 28 min and 54 s
72
Marco MASI
Time Advance
Timing
MS and BTS have to transmit in specific TSs or bursts
If they transmit too early or too late then they will cause interference to
the previous or following call
MS-BTS Distance
MSs are at different distances from BTS and each MS is free to move closer
or further away
Due to propagation delay over the air interface, MSs which are further
away actually start to trasmit before their allocated TS: Timing Advance
Initial Timing Advance Measurement
Estimated by monitoring the received signal from a MS when initially sends
a burst on the RACH
Timing Advance Adjustment
As the MS moves away or towards the BTS, the network informs it of its
new timing advance value on the SACCH
73
Marco MASI
Initial Connection Procedure
When the MS is switched on, it tries to register with a mobile
network
The subscribers home network will be stored in the SIM module
and this will be checked first
Available
MS will request a connection
Not available
MS will try to attach to the last network to which it was connected
prior to being switched off
Network Searching
If neither of the above networks is available, the MS begins
searching through all of the frequencies in the band to try to find a
suitable network
74
Marco MASI
BCCH Searching
Through the various frequencies, the mobile device is looking for a
strong BCCH signal
BCCH
Includes FCCH and SCH
FCCH emits a sine wave carrier to enable the MS to synchronize its
frequency reference with the BTS
SCH contains the BTS identity code and a frame number
Gives the MS information about the network
Where it is
Which LA it falls under
Who the operator is
On selecting a strong BCCH, the MS will try to attach to this
network
75
Marco MASI
MS send an initial request on the RACH channel
BTS listens contineously for MSs wishing to register themeselves
RACH is a shared channel which works on the slotted-Aloha
protocol
In case of access conflict the MSs requests will cause interference
to each other
The network receives the requests in error and discard them
MS wait for a random amount of time before trying to register
again
76
Marco MASI
MS
BTS
Paging Request (PCH)
Channel Request (RACH)
Immediate Assign (AGCH)
Paging Response (SDCCH)
Authentication and Ciphering (SDCCH)
T
i
m
e
1
2
3
4
5
77
Marco MASI
The mobile device has been paged by the network as is the case for a
Mobile Terminated (MT) call
The MS continuously monitors the paging channel for such requests and
replies on the RACH for a dedicated channel
Once a request is received by the network a response is sent on the AGCH
channel
This response will indicate a dedicated signalling channel which the MS
should now use to continue its negotiations with the network
A SDCCH is used for this purpose
The MS can now continue with the attach request
It will send its IMSI to the MSC where it is processed
1
2
3
4
5
78
Marco MASI
GSM Authentication Procedure
MS
BSC
HLR/AuC/EIR
MSC/VLR
TRAU
BTS
Abis
BSS
NSS
I
M
S
I
R
A
N
D
,

K
c

a
n
d

S
R
E
S
Home-PLMN
RAND
SRES
Encrypted using Kc
1
2
3
4
79
Marco MASI
The MSC will connect the HLR/AuC of the MS Homes Network to authenticate the SIM module
Authentication triplets will be sent back to MSC
These include:
RAND: Random Number
Kc: Ciphering key
SRES: result
RAND is passed to the MS
MS use its authentication system to also produce a result SRES
SRES is passed back to the MSC, which will compare it with SRES
If the results are the same then the SIM is authenticated
Kc is then used to encrypt the data between MS and BTS
1
2
3
4
80
Marco MASI
Once the SIM is authenticated, the MSC may now request the IMEI
Once received from the MS this may be checked against the EIR, to see wheter or not the MS is
on a stolen list, not type approved, etc
If it is on a such list then it may not allowed to register with the network
Once the IMSI and IMEI have been successfully checked, the MSC requests information about the
subscriber from the HLR, which will include services available and other details
The MSC will now register the MS in the VLR, which will in turn inform the HLR to the current
location of this MS
81
Marco MASI
TMSI
The MSC will also provide the MS with a temporary identifier (TMSI) whici is used in any future transactions
with the MS
Using TMSI increases overall security since the IMSI of the user is not sent frequently over the air
SDCCH and TCH
The initial signalling procedure is now complete
The MS is now assigned an SDCCH or a TCH and its call proceeds.
82
Marco MASI
RR Layer
Used to establish, maintain and release RR connections which allow a point-to-point
dialogue between the mobile device and the network
The connection is used for data and user signalling
The procedures include
cell selection and reselection
Handover procedures
Reception of BCCH and CCCH when no RR connection is established
83
Marco MASI
Protocols and Signalling
INTER SYSTEM TO UTRAN HANDOVER
PAGING RESPONSE PAGING REQUEST (1-3)
Paging and notification
HANDOVER COMPLETE HANDOVER COMMAND
ASSIGNEMENT COMPLETE ASSIGNEMENT COMMAND
Handover
CIPHERING MODE COMPLETE CHIPERING MODE COMMAND Ciphering
PACKET ASSIGNEMENT
IMMEDIATE ASSIGNEMENT
RR INITIALIZATION REQUEST
Channel establishment
Messages Type
Example of RRM Messages
84
Marco MASI
MM Layer
Required to support the mobility of the MS
Includes informing the network of its present location and
providing user authentication
Also provides CM services to the CM layer
85
Marco MASI
CM RE-ESTABLISHMENT REQUEST
CM SERVICE ACCEPT CM SERVICE REQUEST
Connection
management
IDENTITY RESPONSE IDENTITY REQUEST
AUTHENTICATION RESPONSE AUTHENTICATION REQUEST
Security
LOCATION UPDATING ACCEPT LOCATION UPDATING REQUEST
IMSI DETACH REQUEST
Registration
Messages Type
Example of MM Messages
86
Marco MASI
CM Layer
Functionally splitted in
CC (Call Control)
Modelled on ITU-T ISDN Q.931
The elementary procedures are grouped into the
following classes
Call establishment procedures
Call clearing procedures
Call information phase procedures
Miscellaneous procedures
87
Marco MASI
CM Layer
SS (Supplementary Services support)
Call forwarding
Line identification
Call waiting
Call barring
Multiparty calls
Closed user groups
SMS (Short Message Service support)
LCS (Location Services support)
88
Marco MASI
Example of CM Messages
RETRIEVE ACKNOWLEDGE RETRIEVE
HOLD ACKNOWLEDGE HOLD
Supplementary service control
DISCONNECT
RELEASE COMPLETE RELEASE
Call clearing
CONNECT ACKNOWLEDGE CONNECT
AUTHENTICATION RESPONSE AUTHENTICATION REQUEST
PROGRESS
SETUP
ALERTING
Call establishment
Messages Type
89
Marco MASI
GSM System Procedures
90
Marco MASI
Mobile Station Power On
MS scans the radio carriers and chooses the stright BCCH carrier (C
0
) sent from a BTS
BTS 1
BTS 2 BTS 1
F S B B B B
LAI, CGI, etc.
Temporary Synch.
BSIC
Frequency Synch.
BCCH Carrier (C
0
)
BCCH Carrier (C
0
)
MS
91
Marco MASI
MS BTS
BSC
MSC/VLR
HLR IMSI+Loc. Up. Request
Loc. Up. Acc. + TMSI
Loc. Up. Request
IMSI
TMSI
LAC
ATTACHED
IMSI
TMSI
LAC
L
o
c
.
U
p
.

R
e
q
u
e
s
t
L
o
c
.
U
p
.

A
c
c
.
92
Marco MASI
MS must update the MSC/VLR of its presence in this Location Area (LA)
First Registration
MS dont have any LAI (Location Area Identity) recorded into the SIM (Subscriber Identity
Module) or the LAI recorded is different of the LAI received from BCCH
MS sends to the VLR a Location Updating (LU) containing its IMSI
VLR stores these information and send an update request to the HLR
HLR updates the visited VLR and sends to it subscriber data to the VLR
93
Marco MASI
MS must update the MSC/VLR of its presence in this Location Area (LA)
IMSI Attach
MS has a LAI stored into SIM and is the same LAI received from BCCH
The MS was switched off and later switched on in the same LA
MS sends to the VLR a Location Updating (LU) containing its IMSI
VLR chage the MS Status to Attached and dont inform the HLR
94
Marco MASI
Roaming and Location Updating
Roaming
An idle MS may be free to move itself on the GSM covered area and use the
subscribed services, i.e. send and receive the calls
Roaming Types
Intra LA (LU not required)
Inter LA and intra MSC/VLR service area (LU required)
Inter LA and inter MSC/VLR service area (LU required)
95
Marco MASI
Location Updating Types
First Registration, when MS is switched on
Periodic Registration
LA change, following MS movement and, then, roaming
Periodic Location Updating
MS must execute the LU procedure after a specific timer elapsed from the last LU, i.e.
30 minutes, independently of the actual MS location
If the MS dont execute the LU when the timer expires, the network reteins the MS not
reachable, classify the MS as Detached and dont send the Paging messages to the MS
96
Marco MASI
Inter LA and Intra MSC/VLR Roaming
MS BTS
BSC
MSC/VLR
TMSI+LAI+Loc. Up. Request
Loc. Up. Request
IMSI
TMSI
LAC
New TMSI
New LAC
97
Marco MASI
Inter LA and Intra MSC/VLR Roaming
Access request
Access accepted
Authentication
Channel req.
Immediate Ass.
Loc. Upd. req.
Auth. Req.
Ciph. Mode Com.
Ciph. Mode Cmd.
Ciphering
Loc. Upd. Acc.
+ new TMSI
(RACH)
(AGCH)
(SDCCH)
(SDCCH)
Auth. Res.
TMSI Reall. Com.
Chan. Rel.
Location Updating Request
(SDCCH)
(SDCCH)
(SDCCH)
(SDCCH)
(SDCCH)
(SDCCH)
Messages Channels
Location Updating Accepted
TMSI Reallocation Complete
Channel Release
98
Marco MASI
Inter LA and Inter MSC/VLR Roaming
IMSI
TMSI
LAC
MS BTS
BSC
MSC/VLR
TMSI+LAI+Loc. Up. Request
Loc. Up. Acc.+new TMSI
Loc. Up. Request
Loc. Up. Acc.+new TMSI
New
TMSI
IMSI
TMSI
LAC
New
LAC
MSC/VLR
HLR
IMSI
IMSI
TMSI IMSI
VLR n.2
L
o
c
.
U
p
.

A
c
c
.
L
o
c
.
U
p
.

R
e
q
.
C
a
n
c
e
l
L
o
c
.
C
a
n
c
e
l
L
o
c
.
A
c
c
.
5
1
2
3
4
6
99
Marco MASI
MS Originated Call (1)
Access request
Access accepted
Service request
Authentication
Channel req.
Immediate Ass.
CM-Service req.
(LAPDm)
ACK
(LAPDm)
Ciph. Mode Com.
BSSMAP
Ciph. Mode Cmd.
Ciphering
ACK
BSSMAP
CM-Serv. Req.
(BSSMAP)
Ciph. Mode Com.
BSSMAP
Ciph. Mode Cmd
(BSSMAP)
Events List
Message
(Protocol)
2
3
4
Authentication req.
(DTAP)
5
Authentication res.
(DTAP)
6
MSC/VLR
BTS+BSC MS
ME
SIM
Mobile
Station
BTS BSC
Abis
BSS
TRAU
MSC/VLR GMSC
NSS
A
PSTN
9,6, 13,
14,4 kbps
16 kbps
16 kbps
64
kbps
64 kbps
64
kbps
100
Marco MASI
MSC/VLR
MS
BTS
BSC
PSTN/
ISDN
BSSMAP
LAPD TUP/ISUP
(CCSS7)
LAPDm
DTAP
PLMN GSM
Assign Req.
(BSSMAP)
TMSI
Reallocation
TMSI Realloc. Cmd
(DTAP)
TMSI Realloc. Com.
(DTAP)
Start Setup
Connection
Setup (with numbers)
(DTAP)
Call Proceeding
(DTAP)
Assign Cmd
Assign Com
Assign Com.
(BSSMAP)
TCH
Assignement
Events List
Message (Protocol)
MSC/VLR
BTS+BSC MS
7
8
101
Marco MASI
MSC/VLR
MS
BTS
BSC
PSTN/
ISDN
BSSMAP
LAPD TUP/ISUP
(CCSS7)
LAPDm
DTAP
PLMN GSM
Events List
Message (Protocol)
Alert
(DTAP)
Connect
(DTAP)
Answer
Connect ACK
(DTAP)
Dialogue
IAM (Numbers)
(TUP/ISUP)
ACK
Ringing
Informations
PSTN/ISDN
MSC/VLR
BTS+BSC MS
9
10
11
102
Marco MASI
Routing of a Call to a Mobile Subscriber (1)
MS
IAM
SRI
HLR GMSC
Home PLMN
GSM BSS
VLR
MSC
Visited PLMN
PRN
PRN Ack
SRI Ack
IAM
SIFIC
Page Mobile
Page
Page
Channel Request
Immediate Assignement
Page Response
Connection
Established
Process
Request
Security Procedures Authentication etc
IAM
PRN
SIFIC
SRI
Initial Address Message
Provide Roamung Number
Send Information for Incoming Call
Send Routing Information
1
2
3
4
5
6
7
7
7
4
8
9
103
Marco MASI
Routing of a Call to a Mobile Subscriber (2)
MS
HLR GMSC
Home PLMN
GSM BSS
VLR
MSC/VLR
Visited PLMN
Security Procedures Authentication etc
Call Arrived
Call Complete
Setup
Call Confirm
Allocate
Channel
Assignement Command
Assignement Complete
Allocation
Complete
Alerting
Address Complete Message (ACM)
Connect
Answering Message (ANM)
Connect Acknowledge
Call
Complete Ack
104
Marco MASI
Routing of an SMS Message to a MS
MS
HLR GMSC
PLMN
VLR
MSC
Home or Visited PLMN
Service Centre
Message Transfer
MAP: Send Routing
Info for SMS
Forward Short Message
Send Info for
MT SMS
Page
Message
Transfer
Delivery Report
SM Delivery Report Delivery Report
1
2
3
4
5
6 6
7
8 8
105
Marco MASI
Conversation and Handover
During the conversation the MS and the network can able to send signalling
information
Two signalling channels
SACCH (Slow Associated Control Channel)
used to send control information regularly: system informations, measurement reports, etc.
FACCH (Fast Associated Control Channel)
used to send control informations immediately when necessary
Its necessary when the MS, during the conversation, change cell or when the
TCH has low quality
106
Marco MASI
Handover
The procedure used by the network to force the MS TCH change during conversation
Always started by the network and based on traffic measurements sent from MS and
BTS
MS and BTS Traffic Measurements
At regular intervals, the traffic measurements are sent to BSC that analyses them and
decides handover
The MS is able to makes these measurements since the instants used to receive and
send speech are 3 timeslots delayed: in the meantime traffic measuremets are
executed
107
Marco MASI
MS Traffic Measurements
MS
BTS6
[BSIC6]
BTS1
[BSIC1]
BTS0
[BSIC0]
B
C
C
H
6
B
C
C
H
1
T
C
H
RXLEVNCELL(1)
[BSIC1]
RXLEVNCELL(6)
[BSIC6]
on BCCH
RXLEV
RXQUAL
108
Marco MASI
BTS Traffic Measurements
BTS MS
TCH
D
RXLEV
RXQUAL
D(TIME ADV.)
INTERF. LEV.
on TCH
on free channels
109
Marco MASI
Reports to BSC
Traffic Measurement Analysis
Handover Decision
MS
BTS0
BSC
MS Measurements
SACCH
MS Measurements
BTS Measurements
BTS6
BTS2
(Rank List)
RXLEV/RXQUAL
under threshold
Handover
Decision
Candidated
BTS
BSC Handover
Decision BTS6
110
Marco MASI
Handover Procedure Reasons
Lower transmission quality since RXLEV/RXQUAL are decreased under the acceptable
threshold
Distance from BTS greater the maximum accepted and evaluated using the Timing
Advance
Traffic reasons, i.e. excessive cell load
O&M reasons
Handover Types
Intra-cell handover
Inter BTS and intra BSC handover
Inter BTS, inter BSC and intra MSC/VLR handover
Inter BTS, inter BSC and inter MSC/VLR handover
Handover must be executed in short time, i.e. 100ms
111
Marco MASI
Intra-cell Handover
MS change the traffic channel do to low quality, RXQUAL, while the strength of the
signal, RXLEV, is sufficient
Doesn exist other better BTS than the actual
Inter BTS-intra BSC Handover
The handover is controlled exclusively by BSC
The MSC/VLR is only informed when the handover is completed
112
Marco MASI
Inter BTS-intra BSC Handover
MSC/VLR
BSC
MS
BTS1
TCH1
Handover
[FACCH]
MS
BTS2
TCH2
TCH1 TCH2
Handover!!!
BTS1 BTS2
6
1
2
3
2
4
4
5
4
5
Handover
completed
113
Marco MASI
Inter BTS-inter BSC and intra MSC/VLR Handover
MSC/VLR
BSC1
MS
BTS1
TCH1
Handover
[FACCH]
MS
BTS2
TCH2
TCH1 TCH2
6
Handover!!!
BTS1 BTS2
1
2
3
3
4
3
5
4
5
BSC2
5
4
6
H
.
O
.
C
m
d
H
.
O
.
R
e
q
.
H.O. Cmd
114
Marco MASI
Inter BTS-inter BSC and inter MSC/VLR Handover
MSC/VLR1
BSC1
MS
BTS1
TCH1
Handover
[FACCH]
MS
BTS2
TCH2
TCH1 TCH2
Handover!!!
BTS1 BTS2
1
2
3
5
5
5
8
5
7
BSC2
7
6
8
H.O. Cmd
H.O. Req.
H.O. Cmd
MSC/VLR2
7
Transit
Networks
H.O.
5
4 H.O. Number
115
Marco MASI
MS Power Off and Detach Procedure
MSC/VLR
MS
[IMSI]
BTS
BSC
IMSI
TMSI
Detached
(Inactive)
[IMSI DETACH]
POWER OFF!!! 1
2
3
116
Marco MASI
GPRS
General Packet Radio Service
117
Marco MASI
GPRS Introduction
Introduction
User Perspective
there is now a growing demand for value-added non-voice services, which existing
GSM infrastructure is not well suited to deliver effectively due to its circuit switched
nature
Operators Perspective
With such high mobile penetration in the most developed countries, they are seeing a
plateau in revenue streams, and must turn to non-voice services to create additional
revenue
118
Marco MASI
GPRS Introduction
Introduction
GPRS is a data service allowing traffic in the form of packets (usually IPv4 or
IPv6 packets) to be sent accross a mobile network
PPP
The Point-to-Point protocol (PPP) has recently been introduced, allowing a transparent
transportation of protocols such as AppleTalk and IPX
GPRS is designed to supplement the circuit switched telephone system and and
the short message service (SMS) system, as well as enable new services
GPRS is often referred to as 2.5G
119
Marco MASI
GPRS Introduction
Introduction
Always Connected
Since after the initial connection delay subsequent connections are almost
instantaneous
Standardization Process
Originally specified by the European Telecommunications Standards Institute (ETSI),
in summer 2000 the standardization of GPRS was moved to the Third Generation
Partnership Project (3GPP)
Two Backbones
GPRS works by introducing the services of a packet switched network to the user over
the existing GSM network
120
Marco MASI
GPRS Introduction
Network Infrastructure
BSS
Circuit Switched
Backbone (GSM)
Packet Switched
Backbone (GPRS)
Operator
Mobile
Network
ISDN/PSTN
Internet
121
Marco MASI
GPRS Introduction
Packet Control Unit (PCU)
GPRS traffic will be redirected, usually within the BSC via this new unit and be
passed on to the packet switched GPRS network
The Registers (HLR, Auc, EIR)
GPRS still uses much of the GSM functionalities, including the Registers functions
QoS Classes
The network is designed to support a number of different quality of service
(QoS) classes in order to enable the efficient simultaneous transfer of both real-
time and non-real-time traffic
122
Marco MASI
GPRS Introduction
Air Interface
It is allocated in a flexible manner with 1 to 8 of time division multiplexing
channels (TDM) being allocated to GPRS traffic
The active users share the time slots and these are allocated independently in
the uplink and downlink
These radio resources are shared dynamically between speech and data users,
the exact method used being dependent on operator preference and service load
of the network
Enhanced GPRS (EGPRS) is an enhancement to the system, which allows higher
bit rates through the use of different modulation techniques and coding schemes
123
Marco MASI
GPRS Introduction
GPRS Cell Reselection Procedure
The same concept of GSM handover and is normally performed by the mobile
device
The handover timing for GPRS is not so critical when compared to GSM since the
traffic is not real time, and can thus be buffered
The mobile device makes measurement reports, as with GSM, but the mobile
station is more involved in the decision process, and can initiate the procedure
for handover
It is, nevertheless, still the responsability of the network the serving GPRS
support node (SGSN) to allow the handover to occur
124
Marco MASI
GPRS Introduction
GPRS Security Functions
These are essentially quite similar to those of GSM services
The SGSN is responsible for authenticating the subscriber as well as
encrypting/decripting of data towards the mobile device (regular GSM encryption
is only between the mobile device and the base station)
Data Compression
The SGSN and MS can also compress data to make more efficient use of the Gb
and air interface
SIM Card
A MS containing a standard GSM SIM can connect to the GPRS network and use
the services
125
Marco MASI
GPRS General Architecture
AuC
EIR
HLR
MS
BTS
BSC
BSS
NSS
GMSC
switch
SGSN
MSC/VLR
CG LIG DNS
GPRS IP
Backbone
GGSN
ISDN/PSTN
External
Network e.g.
Internet
126
Marco MASI
GPRS Network Elements
Serving GPRS Support Node (SGSN)
Serves the MS within its BSS/RAN
Provides authentication and mobility management
Its the connection point between BSS/RAN and the CN
SGSN provides a similar role for the packet switched network as the MSC/VLR
provides to the circuit switched network
When a MS is packet switched attached, the SGSN is said to provide a mobility
management context and it then keeps track of the MS to a Routin Area (RA) or
specific cell
127
Marco MASI
Serving GPRS Support Node (SGSN)
When a MS is furnished with a session management context a connection is
established between the SGSN and corresponding GGSN so that the MS may
transfer data to and from an external network
An SGSN is not restricted to communicate with one single GGSN and will
communicate with many GGSNs, wich may not even be within the same PLMN as
the SGSN
The SGSN has a dynamic database which stores information about the current
MSs it is serving as the location of the device to an RA or specific cell, security
information, such as the ciphering key, charging information, current
connections and the QoS being used, etc
128
Marco MASI
Gateway GPRS Support Node (GGSN)
Provides the interface between the MS and external packet switched network
Packets are routed accross the GPRS IP-based packet network between the
SGSN and GGSN using the GPRS tunnelling protocol (GTP)
The GGSN stores information about MSs that have established a session with the
SGSN
The database will store the IMSI of the MS, QoS negotiated, charging
information, as well as the address of the SGSN serving a particular MS
129
Marco MASI
Gateway GPRS Support Node (GGSN)
When packets arrive for the MS from an external network it is the GGSN which
will receive them and route them to the correct SGSN for the final delivery to the
MS
The GGSN does not need to know the location of the MS, only the address of the
SGSN which is serving the MS
The SGSN and GGSN are collectively referred to as GPRS support nodes (GSNs)
130
Marco MASI
Charging Gateway (CG)
It is not required in the specifications but it is generally implemented since it
takes processing load off the SGSN and GGSN
It also introduces a single logical link to the operators billing system and reduces
the number of physical links and connections required to be supported by the
billing system, which would otherwise require a separate connection to each of
the individual GSNs
It can be used to buffer and consolidate information before passing it on to the
billing system
131
Marco MASI
Lawful Interception Gateway (LIG)
It is a requirement in many countries for the law enforcement agencies (LEA) to
be able to monitor traffic
As user traffic traverses the GPRS backbone it is possible to capture their data
and forward it to the LEA
However, this interception of user data does normally require a court order
132
Marco MASI
Domain Name System (DNS)
When a subscriber wishes to make a connection via GPRS to an external
network, they will select an Access Point Name (APN) from a list in the MS
A DNS is required so that the SGSN can make a query to resolve the APN to an
IP Address of the correct GGSN
A common scenario would be to define two general access points: net and wap
net would indicate a connection directly to the Internet, and wap a connection to
a wireless access protocol (WAP) gateway
An operator can bill differently based on the access point, therefore many
operators have different tariffs for WAP access and Internet access
133
Marco MASI
Border Gateway (BG)
It is used as the gateway to a backbone connecting different network operators
together
This backbone is referred to as an inter-PLMN backbone, or global roaming
exchange (GRX)
The operation and configuration of this connection is according to a roaming
agreement between operators
The BG is essentially an IP router and is generally implemented as the same
hardware platform as the GGSN
134
Marco MASI
GPRS Network Interfaces
BSS
BSC
BG
IP Network
GRX
MSC/VLR
SGSN
EIR SMS-GW
HLR/AuC CGW
GGSN
Gp
Gb
Gs
Gr Ga
Gc
Ga Gi
Gf
Gd
Gn
Gn
135
Marco MASI
GPRS Air Interface
GSM and GPRS Resourse Sharing
Bandwidth
TDM frame, but cannot share a single burst concurrently
Network Redimension
Introducing GPRS may cause higher blocking for GSM calls
The operator may have to redimension the network to counter this problem
Modulation technique is the same (GMSK)
GSM structure multiframes consisting of 26 traffic frames or 51 control
frames
136
Marco MASI
GPRS Air Interface
GPRS Multiframe
Consisting of 52 frame format
New multiframe consists of 12 blocks of 4 consecutive frames, which are
referred as radio blocks
Two Idle frames and two T frames, which are used for the packet timing
advance control channel (PTCCH) are components of this multiframe
The time devoted to the idle frames and PTCCH can be used by the MS for signal
measurement
137
Marco MASI
GPRS Air Interface
GPRS Multiframe
Block
0
Block
1
Block
2
Block
3
Block
4
Block
5
Block
6
Block
7
Block
8
Block
9
Block
10
Block
11
T I T I
52 TDMA Multi-frame
0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7
1250 bits in 4,615 ms
TDM frame
3 57 26 1 57 8,25 1 3 57 26 1 57 8,25 1 3 57 26 1 57 8,25 1 3 57 26 1 57 8,25 1
138
Marco MASI
GPRS Air Interface
GPRS Multiframe
In GSM a time slot is dedicated for one user at a time (unless half-rate mode is
used)
The GPRS system is different, since each of the radio blocks consisting of 456
bits (57x2x4) can actually be used by separate users, where the users would
essentially share the resources of the time slot
A MS is assigned these blocks when it is required to transfer data
This assignement is referred to as a temporary block flow (TBF)
139
Marco MASI
GPRS Air Interface
Resource Sharing
The air interface is shared between the GSM and GPRS users
It can be considered that GPRS users are utilizing bandwidth that is left over by
GSM voice users
For GPRS, the remaining time slots should be viewed as a pool of available
resources that the data users can share
The performance experienced by a GPRS user is based on
The number of GSM users in the current cell, which indicates the available time slots for GPRS data
traffic
The number of GPRS data users that must share these time slots
The number of time slots that the MS can work with
140
Marco MASI
GPRS Air Interface
Resource Sharing
a) shows a standard TDM frame with time slot 0 allocated to the BCCH and other
control channels.
The seven time slots remaining are available to GSM and GPRS users.
Suppose that there are five GSM users and two GPRS users, which fill the TDM frame.
If an additional GSM user wishes to make a call, the two GPRS users will be moved
into a single time slot as in b).
If three of the GSM users now finish their calls, the two GPRS users will be able to use
the vacant time slots, increasing their overall bit rate, as in c).
BCCH GSM 1 GSM 2 GSM 3 GSM 4 GSM 5 GPRS 1 GPRS 2
BCCH GSM 1 GSM 2 GSM 3 GSM 4 GSM 5 GSM 6
GPRS 1
GPRS 2
BCCH GSM 1 GSM 2 GSM 3 GPRS 1 GPRS 2 GPRS 1 GPRS 2
TDM frame
a)
b)
c)
141
Marco MASI
GPRS Air Interface
Resource Sharing
To dimension air interface within GSM, Erlang tables are used
Since GPRS also shares the GSM air interface then this can be taken into account
when dimensioning for GPRS
Example
If there are 520 calls an hour and the average call duration is 100 sec how many
traffic channels are required?
No. of Erlangs = Calls per hour x Average call time/(60minx60s) = 520x100/3600= ~
15 Erlangs
In a GSM cell it is not expected that all calls connect satisfactorily Grade of Service
(GoS)
Commonly GoS may be 2%, which means that on average two out of every hundred
calls will be blocked and get the network busy tone
142
Marco MASI
GPRS Air Interface
Resource Sharing
Example
By consulting the Erlang tables, it can be seen that to dimension a cell for the above
number of GSM calls, 22 TCHs are required
18,1 16,7 15,8 23
17,1 15,8 14,9 22
16,2 14,9 14,0 21
15,2 14,0 13,2 20
5% 3% 2%
Grade of Service
No. Of
channels
Example of Erlang Table
143
Marco MASI
GPRS Air Interface
Resource Sharing
Example
Adding one TCH for BCCH and one TCH for the SDCCH/8 means three TRX units (one
TRX = 8 channels) are required
To prevent a high level of call blocking at the busy hour we needed 22 traffic channels
to supply an average of 15 calls at any one time
This leaves (22-15)=7 channels vacant
They cannot be used for GSM because of the call blocking
144
Marco MASI
GPRS Air Interface
Resource Sharing
Example
They can be used for GPRS since the network can notice thet there is a free slot and
allocate extra temporary block flows (TBFs) to GPRS subscribers
Using CS-2 (13,4 kbps) this provides over 90 kbps of bandwidth without increasing the
number of channels
20 21,4 CS-4
14,4 15,6 CS-3
12 13,4 CS-2
8 9,05 CS-1
Raw bit rate (kbps) Bit rate (kbps) Coding scheme
GPRS Data Rate
145
Marco MASI
GPRS Air Interface
Resource Sharing
20
15
10
5
T
h
r
o
u
g
h
p
u
t
(
k
b
p
s
)
C/I Ratio
Average Cell
Noise Range
CS-1
CS-2
CS-3
CS-4
noisy cell
more retransmission
good quality cell
146
Marco MASI
GPRS Air Interface
MS Classes of Categories
Type A
Can connect to both the GSM and GPRS cores simultaneously
Type B
Can connect to both the GSM and GPRS cores, but the connection can only use one
side of the network at any given time
Type C
Typically will be a data card for a PC allowing it to send and receive data across the
GPRS network
This type of device cannot register with both the GSM and GPRS core networks at the
same time
147
Marco MASI
GPRS Air Interface
MS Classes of Devices
Defines the maximum data rate at which a GPRS device can send or receive
Unlimited 8 8 29
.. ..
4 2 3 6
4 2 2 5
4 1 3 4
3 2 2 3
3 1 2 2
1 1 1 1
Max slots Uplink Downlink Class
GPRS Device Classes
148
Marco MASI
GPRS Air Interface
Advantage of GPRS over the Air
In a GSM phone call, the charging is based on the call duration
Many studies have demostrated that the average user will only talk for
approximately 30-40% of the call duration and, in effect, phone subscribers pay
for silence
For a GSM connection for data traffic, this problem becomes considerably more
pronounced
i.e. on web page access the download may take of the order of 3-4 seconds and
the user is idle on the network for a much longer period, while reading
149
Marco MASI
GPRS Air Interface
Bursts of data transfer are interspersed among long period of inactivity
The packet switched network approach alleviates this problem by allowing
resources to be shared among users, and records kept of how many packet were
transferred rather than how long they took charging on traffic volume
Unlike GSM, a GPRS user can be always connected to the network, where the
user has a logical connection in the form of an IP address allocation, referred to
as a packet data protocol, or PDP context
150
Marco MASI
GPRS Air Interface
Only when the user sends or receives data will they actually use any resources,
and consequently be subject to charging
GPRS separates the connection from the actual resource usage
151
Marco MASI
GPRS Air Interface
Physical and Logical Channels
Information about a cells ability to deal with GPRS subscribers is broadcast on
the GSM BCCH
GPRS intoduces a number of additional control channels to the air interface:
some of these are mandatory and some are optional
When the new channels were introduced, the naming scheme was to put a P in
front of the old channel name, if such a channel existed
Each of these channels is transferred via a packet data channel, PDCH, that
equates to a physical channel taken from the total pool of GSM and GPRS
resources
152
Marco MASI
GPRS Air Interface
Broadcast and Control Chanel (BCCH)
If GPRS is supported and the optional PBCCH is configured, the position of this
chnnel is also indicated on the BCCH
The informations transmitted on the BCCH is also reproduced so that MSs
connected in packet switched mode can listen to a single PBCCH for all general
cell information
If GPRS is supported but the PBCCH is not, then information for GPRS devices is
broadcast on the BCCH
153
Marco MASI
GPRS Air Interface
Common Control Channel (CCCH)
Can be used for GPRS if PCCCH does not exist
Includes the following
Paging Channel (PCH)
A downlink channel to page MSs
Random Access Channel (RACH)
An uplink channel used to request a SDCCH channel
Access Grant Channel (AGCH)
A downlink channel used to allocate the requested SDCCH
Notification Channel (NCH)
Used to notify MSs of voice group or voice broadcast calls
154
Marco MASI
GPRS Air Interface
Packet Control Channel (PCCCH)
Is a optional channel that is transported on a PDCH
If is not allocated then the information required for packet switch operation is
transmitted on the CCCH
The PCCCH may be implemented if the demand for packet data transfer
warrants this or if there is enough spare capacity within the cell since this will
increase the QoS for packet data access
155
Marco MASI
GPRS Air Interface
Packet Control Channel (PCCCH)
It incudes the following
Packet Paging Channel (PPCH)
A downlink channel used to page MSs prior to packet transfer
This paging can be used for both circuit switched and packet switched paging
Packet Random Access Channel (PRACH)
An uplink channel used to request one or more packet data traffic channels (PDTCH)
Packet Access Grant Channel (PAGCH)
A downlink channel used to assign the requested PDTCH channels
Packet Notification Channel (PNCH)
A downlink channel used to notify a group of mobile devices of a point-to-multipoint packet transfer
156
Marco MASI
GPRS Air Interface
Packet Data Traffic Channel (PDTCH)
The actual GPRS traffic is transferred over PDTCH
This corresponds to the actual resources that have been made available for this
transfer
It may be a single time slot, part of a time slot or number of time slots up to the
maximum of eight, all of which must be on a single frequency
157
Marco MASI
GPRS Air Interface
Packet Associated Control Channel (PACCH)
Is a signalling channel which is dedicated to a praticular MS
It is required in both the uplink and downlink
The information on this channel may consists of resource assignement
information, power control, or acknowledgements
158
Marco MASI
GPRS Air Interface
Downlink and Uplink Channels
PNCH PPCH PAGCH
PACCH PCCCH PDTCH PBCCH
PDCH
PRACH
PACCH PCCCH PDTCH
PDCH
Downlink and uplink channels
Downlink
Upwnlink
159
Marco MASI
GPRS Air Interface
GPRS Radio Protocol
Since the air interface is particularly unreliable, extra error checking and
correction bits are added to the data
Since this plus the data needs to fit into a transfer size of 456 bits, the amount
of coding reduces the space remaining for data, and hence the throughput
21,4 0 456 - 16 428 12 3 1 CS-4
15,6 220 676 4 16 312 6 3 ~3/4 CS-3
13,4 132 588 4 16 268 6 3 ~2/3 CS-2
9,05 0 456 4 40 181 3 3 CS-1
Data
rate
(kbps)
Punctured
bits
Coded bits Tail BCS
Radio Block
(DATA)
Pre-code
USF
US
F
Code
Rate
Coding
Scheme
Coding Scheme bit details
160
Marco MASI
GPRS Air Interface
GPRS Radio Protocol
For CS-2, CS-3 and CS-4 the USF (3 bits) is modified to give better protection
CS-1, CS-2 and CS-3 also have four tail bits added
456 16+9+0 = 456 431 CS-4
676 16+3+4 = 338 315 CS-3
588 16+3+4 = 294 271 CS-2
456 40+0+4 = 228 184 CS-1
Convolutional code Block coding Information
Layer
Coding
Scheme
Physical layer interaction with coding schemes
161
Marco MASI
GPRS Air Interface
Connection Management
The initial connection for GPRS is essentially the same as for GSM
The main difference between the two is that for GPRS registration the MS will be
dealt with by the SGSN rather than MSC
If a MS has both GSM and GPRS capabilities will make a connection for both
GSM and GPRS
162
Marco MASI
GPRS Air Interface
Mobility Management
For packet switched network, GPRS introduces routing area (RA)
Any LA or RA updates from the MS are passed transparently over the BSS to the
CN to be stored in the correct device, MSC or SGSN
Routing Area
Is a subset of an LA, and is defined within the SGSN
Can be the same size as an LA but it cannot be larger
RA cannot overlap separate LAs
Routing Area Identifier (RAI) = Mobile country code (MCC) + Mobile network code
(MNC) + Location area code (LAC) + Routing area code (RAC)
163
Marco MASI
GPRS Air Interface
Mobility Management
MSC 1
BTS BTS
RA
BTS BTS
RA
LA1
BTS BTS
RA
BTS BTS
RA
LA2
MSC 2
SGSN
164
Marco MASI
GPRS Air Interface
Mobility Management States
IDLE
Mode
READY
Mode
STANDBY
Mode
GPRS
Attach
Ready
Timer
Expires
Packet
Transmit/
Receive
GPRS
Dettach
Standby
Timer
Expires
HLR
MSC/VLR
SGSN
IMSI:?
LA:?
SGSN:?
IMSI:known
VLR:?
SGSN:?
IMSI:?
RA:?
Cell:?
IDLE
Mode
HLR
MSC/VLR
SGSN
IMSI:known
LA:known
SGSN:known
IMSI:known
VLR:known
SGSN:known
IMSI:known
RA:known
Cell:known
READY
Mode
HLR
MSC/VLR
SGSN
IMSI:known
LA:known
SGSN:known
IMSI:known
VLR:known
SGSN:known
IMSI:known
RA:known
Cell:?
STANDBY
Mode
165
Marco MASI
GPRS Air Interface
Combined GPRS/IMSI Attach Procedure
HLR/Auc/EIR
MSC/VLR
SGSN
MS
BSS GGSN
Attach Request
Security Functions Security Functions
Update Location
Insert Subscriber Data
Insert Subscriber Data Ack
Update Location Ack
Location Update Request
Update Location
Location Update Accept
Attach Accept
Attach Complete
1
2 2
3
4
5
6
7
8
9
10
Update Location Ack
11
12
13
14
166
Marco MASI
GPRS Air Interface
Location Updating
In GSM dedicated (connected) mode and GPRS ready state, cell updates are
performed
In GSM idle or GPRS standby states LA and RA are performed
An RA update can take place because a subscriber moves into a new RA and the
MS detects the new RA identifier, or the RA timer has expired periodic RA
update
MSC/VLR
SGSN
MS
BTS
BSS
Location Area Update
Routing Area Update
GPRStandby state
MSC/VLR
SGSN
MS
BTS
BSS
Cell Update
Cell Update
GPRS Ready state
167
Marco MASI
GPRS Air Interface
Location Updating
HLR/Auc/EIR New SGSN
MS
BSS
RA Update Request
Security Functions
SGSN Context Request
SGSN Context Response
Security Functions
SGSN Context Ack
Forward Packets
Update PDP Context Request
Update PDP Context Response
Update Location
Cancel Location
RA Update Accept
RA Update Ack
1
2 2
3
4
5
6
7
8
9
10
Cancel Location Ack
11
12 13
14
Old SGSN GGSN
Update Location Ack
4
15 16
T1
168
Marco MASI
GPRS Air Interface
Session Management
Once the MS has registered with the mobile network, it cannot start to send and
receive data over the packet core until it has established a session, which is
known as having a packet data protocol context (PDP context)
A MS has to be in the ready mode to activate a PDP context
The PDP will context continue to be present if the MS moves to the standby
state
This is to allow a subscriber to retain the same IP address, even if they have not
generated or received any traffic for some time
169
Marco MASI
GPRS Air Interface
Session Management
The PDP context ensures that a GPRS Tunnel is set up between the SGSN and
GGSN for the sole use of this user
Once a PDP context has been activated, the user can then use the services
provided by the particular access point
GGSN SGSN
MS
External
Network
Corp 1
HLR
External
Network
Corp 2
External
Network
Corp 3
DNS
N
a
m
e
L
o
o
k
u
p
BSC
BTS
BSS
S
u
b
s
c
r
i
p
t
i
o
n
I
n
f
o
r
m
a
t
i
o
n
GPRS Backbone
10.1.1.40 Corp 3
10.1.1.40 Corp 2
10.1.1.40 Corp 1
GGSN IP Address Access Point
DNS Lookup Table
PDP Context Activation
170
Marco MASI
GPRS Air Interface
Session Management
MS
Intranet 1
BSC
BTS
BSS
GGSN SGSN
GPRS Backbone Operator 1
GGSN SGSN
GPRS Backbone Operator 2
GMSC MSC
GSM Backbone
PSTN
Intranet 2
Intranet 3
Internet
Home
Intranet
G
T
P

T
u
n
n
e
l
GRX
GTP Tunnel
GTP Tunnel
171
Marco MASI
GPRS Air Interface
Session Management
IP transport across GPRS infrastructure
MS
Intranet
BSC
BTS
BSS
GGSN SGSN
GPRS Backbone
LLC HDR IP Get Pg LLC HDR Get Reply
GTP HDR IP Get Page Reply IP Get Pg Reply
172
Marco MASI
GPRS Air Interface
Session Management
SGSN
MS
BSS
Activate PDP Context Request
Security Functions
BSS Packet Flow
Context Procedures
Activate PDP Context Response
1
2
3
4
5
6
GGSN
Create PDP Context Request
Create PDP Context Response
5
UE-originated PDP context activation
173
Marco MASI
GPRS Air Interface
Session Management
GGSN-originated PDP context activation
SGSN
MS
Request PDP Context
Activation
1
2
3
4
GGSN
Send Routing info for GPRS
Send Routing info for GPRS Ack
5
HLR
PDP PDU
PDP Notification Request
PDP Notification Response
174
Marco MASI
GPRS Air Interface
Session Management
PDP context deactivation
SGSN
MS
BSS
Deactivate PDP Context Request
Security Functions
Deactivate PDP Context Accept
1
2
3
4
GGSN
Delete PDP Context Request
Delate PDP Context Response
5
2
175
Marco MASI
EDGE
Enhanced Data Rates for
Global Evolution
176
Marco MASI
EDGE
Enhanced Data Rates for Global Evolution
Was originally seen as an evolutionary step for GSM and the acronym stood for
Enhanced Data for GSM Evolution
The TDMA community embraced EDGE as a 3G solution and now stands for
Enhanced Data for Global Evolution
Like GPRS, EDGE uses much of the underlying GSM system, including the
existing frequency band that an operator has been allocated
177
Marco MASI
EDGE
EDGE, with its higher transfer rates, can be used to efficiently free up time slots,
which can then be reallocated to other GSM users
Voice Voice Voice Voice Voice GPRS 1 GPRS 2 GPRS 3
GSM and GPRS
Voice Voice Voice Voice Voice FREE FREE EDGE
EDGE
178
Marco MASI
EDGE
Introduces nine new modulation and coding schemes over the air interface
59,2 8PSK MCS-9
54,4 8PSK MCS-8
44,8 8PSK MCS-7
29,6 8PSK MCS-6
22,4 8PSK MCS-5
17,6 GMSK MCS-4
14,8 GMSK MCS-3
11,2 GMSK MCS-2
8,8 GMSK MCS-1
Data rate (kbps) Modulation Type Coding Scheme
EDGE modulation schemes
179
Marco MASI
EDGE
Four of these coding schemes use the standard GSM GMSK modulation
technique and the other five use 8PSK
The introduction of the new modulation technique enables data rate up to three
times that possible with standard GMSK
It can theorically support 384 kbps using 8 time slots
To take advantage of this system the BSS has to be upgraded: generally this
requires new transcoders in the BTS and software upgrades to both the BTS and
the BSC
180
Marco MASI
EDGE
The MS also have to be capable of operating with the EDGE air interface and
signalling
0 1 2 3 4 5 6 7
000 Information Training Information 000 8,25
58 bits 3 bits 26 bits 58 bits 3 bits 8,25 bits
156, 25 symbols sent in 0,477 ms

01 GSM Gprs Edge

Hochgeladen von

Dokumentinformationen

Originalbeschreibung:

Originaltitel

Copyright

Verfügbare Formate

Dieses Dokument teilen

Dokument teilen oder einbetten

Freigabeoptionen

Stufen Sie dieses Dokument als nützlich ein?

Sind diese Inhalte unangemessen?

Copyright:

Verfügbare Formate

01 GSM Gprs Edge

Hochgeladen von

Copyright:

Verfügbare Formate

1

Mazara del Vallo, Nov 20 2006 Satyr project

Cell Planning Strategies

Das könnte Ihnen auch gefallen