Beruflich Dokumente
Kultur Dokumente
GSM
Overvie
w
Contents
Chapter 1 :
Introduction
Chapter 2 :
Chapter 3 :
Chapter 4 :
Radio Coverage
Radio Transmission Problems
Chapter 5 :
Air interface
Chapter 6 :
Traffic Cases
Chapter 7 :
GSM Services
Chapter 1 :
Introduction
Introduction
GSM Overview
Place
Chicago
US
US
Activity
2 MHz Vehicular Mobile Radio system for Police Applications
Invention of Amplitude Modulation. Half Duplex transmission
Invention of Frequency Modulation. Improved Audio Quality
1946
St. Louis
1969
Europe
1973
Europe
1979
Chicago
1991
Europe
Introduction
GSM Overview
History of GSM
Date
1982
1986
1987
1988
Activity
Nordic Telecom and Netherlands PTT send a proposal to the Confrence
Europenne des Postes et Tlcommunications (CEPT) to specify a common
European mobile telecommunication service.
The European Commission (EC) issues a directive, which requires member states to
reserve frequencies in the 900 MHz band for GSM.
Field tests were held in Paris and a GSM permanent nucleus was created and
comparative tests of 8 prototypes were performed.
The choice was Time Division Multiple Access (TDMA) or Frequency Division Multiple
Access (FDMA).
A Combination of TDMA and FDMA selected as the transmission tech. for GSM.
September 13, operators and administrators from 12 areas in the CEPT GSM
advisory group sign the charter GSM (Groupe Spciale Mobile) MoU "Club"
agreement, with a launch date of 1 July 1991.
The original French name was later changed to Global System for Mobile
Communications, but the original GSM acronym stuck.
GSM spec drafted. (Digital Transmission, Time Multiplexing of order 8 and slow
Hopping)
CEPT began producing GSM specifications for phased implementation.
Another five countries signed the MoU
Introduction
GSM Overview
History of GSM
Date
1989
1990
1991
1992
1993
Activity
The European Telecommunications Standards Institute (ETSI) defined GSM as the
internationally accepted digital cellular telephony standard and took over responsibility
of GSM specifications.
Phase 1 specifications were frozen to allow manufacturers to develop network
requirements and the first GSM prototype was brought to service.
The GSM 1800 standard was released.
An addendum was added to the MoU allowing countries outside CEPT to sign.
Phase 1 specifications were completed.
January - First commercial phase 1 GSM network operator is Oy Radiolinja Ab in
Finland
December 1992 - 13 networks on air in 7 areas
First International roaming agreement was signed between Telecom Finland and
Vodafone in UK.
Australia became the first non-European country to sign the MoU. The MoU now had
a total of 70 signatories.
GSM demonstrated for the first time in Africa at Telkom '93 in Cape Town
GSM networks were launched in Norway, Austria, Ireland, Hong Kong and Australia.
Introduction
GSM Overview
History of GSM
Date
1996
1997
At the beginning of 1998 the MoU has a total of 253 members in over 100 countries
and there are over 70 million GSM subscribers worldwide. GSM subscribers account
for 31% of the worlds mobile market
Vodacom Introduces Free Voice Mail
GSM SIM Cracked in USA
21 May 1998. Egypt privatizes its GSM operator.
Iridium Live 11/98
125m GSM 900/1800/1900 users worldwide (12/98)
1998
Activity
GSM MoU is formally registered as an Association registered in Switzerland
December 1996 120 networks on air in 84 areas
8K SIM launched
Pre-Paid GSM SIM Cards launched
Option International launches world's first GSM/Fixed-line modem
Nov 1996 - Sole Governmental operator in Egypt goes online.
Introduction
GSM
Overview
History of GSM
Single Cell Systems
Introduction
GSM
Overview
History of GSM
Cellular Systems
Introduction
GSM
Overview
History of GSM
st
1 &2
nd
Generations
Introduction
GSM
Overview
Introduction
GSM
Overview
History of GSM
GSM Derivatives
Introduction
GSM
Overview
Introduction
GSM
Overview
GSM Phases
Introduction
GSM
Overview
Introduction
AUC
PLMN
ISDN
PSTN
AUC: Authentication Center
BGW: Billing GateWay
BSC: Base Station Controller
BSS: Base Station Subsystem
BTS: Base Transceiver Station
DTI: Data Transmission Interworking
EIR: Equipment Identity Register
GMSC: Gateway MSC
HLR: Home Location Register
ISDN: Integrated Services Digital Network
MS: Mobile Station
MSC: Mobile services Switching Center
PLMN: Public Land Mobile Network
PSTN: Public Switched Telephony Network
SMSC: Short Message Service Center
SS: Switching Subsystem
TRC: Transcoder Resources Controller
VLR: Visitor Location Register
HLR
SMSC
BGW
GWMSCGMSC
DTI
EIR
MSC/VLR
BSSS
BSC/TRC
Air I/f
BTS
MS
Supervises the transport network resources and the operation & maintenance of
each BTS
Consists of the radio transmitters, receivers and the antenna system required to
provide the coverage area for one cell.
Converts the GSM radio signals into a format that can be recognized by the BSC.
Records and passes to the BSC the periodic power measurement reports.
GSM Identities
Mobile Station ISDN Number (MSISDN)
20
10
1100477
44
385
196099
CC
NDC
SN
CC
NDC
SN
CC
NDC
SN
: Country Code
: Network Destination Code
: Subscriber Number
VodaFone UK MSISDN
GSM Identities
International Mobile Subscriber Identity
(IMSI)
234
15
1234567890
602
02
1234567890
MCC
MNC
MSIN
MCC
MNC
MSIN
Vodafone UK IMSI
MCC
MNC
MSIN
GSM Identities
International Mobile Equipment Identity
(IMEI)
6 Digits 2 Digits
TAC
FAC
6 Digits
SN
IMEI
01,02
07,40
10,20
30
40,41,44
47
50
51
51
51
60
70
75
80
85
AEG
Motorola
Nokia
Ericsson
Siemens
Optional International
Bosch
Sony
Siemens
Ericsson
Alcatel
Sagem
Dancall
Philips
Panasonic
GSM Identities
Temporary Mobile Subscriber Identity Number
(TMSI)
GSM Identities
Mobile Station Roaming Number
(MSRN)
When a mobile terminating call is to be set-up, the HLR of the called subscriber
requests the MSC/VLR to allocate an MSRN to the called subscriber.
Security Features
Ciphering: to protect subscriber data sent over the radio path against
eavesdropping.
SRES
Kc
Triplet
Home Location Register
RAND
SRES
Kc
Triplet
Visitor Location Register
RAND
SRES
Kc
RAND
RANDom
Number
Received
IMSI
Ki
RAND
Ki
Ciphering
SRES
Algorithm
A8
Kc
Kc
SRES AUC
SRES AUC
Kc
SRES MS
Access
Barred
Kc
SIM
Rand
A3
SRES MS
Ki
A8
Kc
Card
Kc
EncryptedDATA
TDMA
Frame Number
Encryption
Algorithm
Air Interface
Mobile Station
Kc
TDMA
Frame Number
DATA
Encryption
Algorithm
EncryptedDATA
Decryption
Algorithm
Decryption
Algorithm
DATA
Questions ?
GSM
Overview
Chapter 3 : Radio
Coverage
Radio Coverage
GSM
Overview
Cell Geometry
Dead Spots
Radio Coverage
GSM Overview
Tradeoffs
The number of cells required to cover a given area.
The cell transceiver power.
Radio Coverage
GSM
Overview
Transceiver Antenna
Sectorial Antenna
Omni-Directional Antenna
Radio Coverage
GSM Overview
Sectorial Antenna
Sectorial Antenna
Radio Coverage
GSM Overview
Cell Classification
Macrocell
Overlaid &
Normal Cell
Underlaid Cells
Normal Cell
Picocell
In building
coverage
Microcell
Slow moving subscribers
Radio Coverage
GSM
Overview
Advantages
The
usage
of
the
radio
resources would be limited.
Radio Coverage
GSM
Overview
Radio Coverage
GSM
Overview
Radio Coverage
GSM
Overview
Radio Coverage
GSM
Overview
Radio Coverage
GSM
Overview
935.2 935.6
935
890.4
890
Uplink
915 F (MHz)
Downlink
121 122 123 124
3 4
935.4
960 F (MHz)
Radio Coverage
GSM
Overview
Uplink
371 372 373 374
1710 1710.4
1785 F (MHz)
1805.21805.6
1 2
Downlink
1805 1805.4
1880 F (MHz)
Radio Coverage
GSM Overview
Comparison
890
1710
Uplink
1785
Uplink
935
Downlink
25 MHz
960
95 MHz
GSM 900
With 124 ARFCN
45 MHz
915
GSM 1800
With 374 ARFCN
1805
Downlink
75 MHz
1880
Radio Coverage
GSM Overview
Frequency Reuse
Why do we need frequency reuse?
Total no of channels (frequencies) = 124
Every channel can be shared between a maximum of 8
subscribers. Maximum no of simultaneous calls = 8 X 124 = 992 !!
The frequency reuse is performed by dividing the whole available frequencies
between a group of neighboring cells which is called frequency reuse pattern or
a Cluster, and then repeat this cluster over the whole network on 2 conditions:
The group of frequencies allocated to a given cell must not be used in the
adjacent cells.
Enough distance between the cells where the same group of frequencies are
reused.
Radio Coverage
A3
A2
3/9 Cluster
A1
A3
B3
A2
A1
A3
B3
A2
A1
B2
B1
C3
C2
C1
A3
B3
A2
A1
B1
C3
C3
C1
A3
C2
C1
A2
A1
B1
C3
B1
B2
C1
C2
A3
C3
C2
C1
B3
B2
C3
B1
B2
C2
A1
A2
B3
A2
B3
A1
B1
A3
C1
C2
C1
C2
A3
B2
C3
B1
B2
B3
B2
C3
B1
B2
B3
A1
A2
A2
A1
A2
B3
A1
C2
A3
C1
A3
C1
C2
A3
B1
B2
C3
B2
C3
B1
GSM
Overview
B3
A2
B3
B2
A1
C3
B1
C2
C1
C1
C2
Radio Coverage
GSM
Overview
A3
B3
A2
A1
A3
B2
B1
C3
A1
C2
A3
B3
A2
A1
A1
C2
C1
B3
A2
A1
A3
A2
D3
B2
C3
D3
D2
D1
B2
B1
C3
D2
D1
D1
A2
D3
D2
B3
A1
C2
C1
C1
B2
C3
C2
A3
B1
D3
C3
D1
A2
B2
B1
D2
B3
A1
C2
C1
C1
D1
A2
D3
D2
B3
A1
C2
A3
B1
D2
D1
D1
C1
B2
C3
D3
C2
A3
B1
D2
B3
A1
C2
C1
C1
D1
B1
D3
C3
D1
A2
B2
B1
D2
B3
A1
C2
D2
B2
C3
B1
A1
C2
A3
B3
A2
D3
C1
B2
C3
B1
D2
B3
A3
B2
C3
D1
A2
D3
A1
C2
A3
B3
A2
D3
C1
B2
C3
B2
C3
D1
A3
B1
D2
B1
A3
A2
D3
C1
B3
D3
C2
C1
D2
D1
4/12 cluster in
which the available
4 / 12
Cluster
Radio Coverage
A3
E3
A2
A1
B3
E2
E1
D3
B2
B1
F3
D2
D1
C3
F2
F1
G3
C2
C1
A3
A2
A1
B3
G2
E3
E2
E1
D3
B2
F3
D2
A3
F2
B1
G1
A3
E3
A2
A1
B3
E2
E1
D3
B2
B1
G
F3
D2
D1
C3
A
F1
G3
C2
C1
G2
D
F
G1
D
F
C
G
E3
A2
E2
E1
D3
F3
D2
D1
F2
F1
G3
C2
G2
G1
7 / 21
Cluster
Radio Coverage
GSM Overview
3/9
Number of frequencies
per site
High
High
Low
4/12
Medium
Medium
Medium
7/21
Low
Low
High
C/I Ratio
Questions ?
GSM
Overview
Fading Problems
1. Shadowing (Normal fading):
The reason for shadowing is the presence of obstacles like large hills
or buildings in the path between the site and the mobile.
The signal strength received fluctuates around a mean value while
changing the mobile position resulting in undesirable beats in the speech
signal.
Fading Problems
2. Rayleigh Fading (Multi-path Fading)
The received signal is coming from different paths due to a series
of reflection on many obstacles. The difference in paths leads to a
difference in paths of the received components.
Fading Problems
F
f3
f2
f1
0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7
equals 3 x 10 Km/sec
Then, when bit 2 is
transmitted, bit one will
cut a distance
= 3.7 x 10
-6
x 3 x 10 = 1.1 km
Bits
T*
Data
VITERBI
Correlator
Probable
received
bit pattern
xxx
xxx
Channel
Model
A/D Conversion
Segmentation
Speech Coding
Channel Coding
Interleaving
Ciphering/Encryption
Burst Formatting
Modulation and
Transmission
A/D Conversion
Segmentation
Speech Coding
Channel Coding
Interleaving
Ciphering/Encryption
Burst Formatting
Modulation and
Transmission
1. Sampling
A/D Conversion
Segmentation
Speech Coding
Channel Coding
Interleaving
Ciphering/Encryption
Burst Formatting
Modulation and
Transmission
A/D Conversion
Segmentation
Speech Coding
3. Coding
Coding involves converting the quantized values into binary.
Every value is represented by a binary code of 13 bits (2
13
= 8192).
Channel Coding
Interleaving
Ciphering/Encryption
Burst Formatting
Modulation and
Transmission
1 2
5 6
9 10 11 12 13
5 6
10
Segmentation
A/D Conversion
Segmentation
Speech Coding
Channel Coding
Interleaving
Ciphering/Encryption
Burst Formatting
Modulation and
Transmission
1 2 3 4 5 6 7 8 9 10 11 12 13 0
1 2 3 4 5 6 7 8 9 10
160
A/D Conversion
c
o
m
p
l
e
x
i
t
y
.
Segmentation
Speech Coding
Channel Coding
Interleaving
Ciphering/Encryption
Burst Formatting
Modulation and
Transmission
Channel Coding
A/D Conversion
GSM
Overview
Segmentation
Speech Coding
Channel Coding
Interleaving
Ciphering/Encryption
Burst Formatting
Modulation and
Transmission
Interleaving
A/D Conversion
Segmentation
Speech Coding
Channel Coding
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
Interleaving
Ciphering/Encryption
Burst Formatting
26
27
28
..
..
..
..
..
..
..
..
..
..
..
..
..
..
..
..
..
..
..
..
..
..
..
..
..
..
..
..
..
..
..
..
..
..
..
..
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
8 Groups
Modulation and
Transmission
57 Bit
s
25
Interleaving
A/D Conversion
Speech Coding
Channel Coding
20 ms Block A
1
2
3
4
5
6
7
8
20 ms Block B
1
2
3
4
5
6
7
8
20 ms Block c
1
2
3
4
5
6
7
8
20 ms Block D
1
2
3
4
5
6
7
8
Segmentation
1A
5D
2A
6D
3A
7D
4A
8D
1B
5A
2B
6A
3B
7A
4B
8A
1C
5B
2C
6B
3C
7B
4C
8B
1D
5C
2D
6C
3D
7C
4D
8C
Interleaving
Ciphering/Encryption
Burst Formatting
Modulation and
Transmission
A/D Conversion
Segmentation
Speech Coding
Channel Coding
Interleaving
Ciphering/Encryption
Burst Formatting
Modulation and
Transmission
Burst Formatting
A/D Conversion
Segmentation
Speech Coding
Channel Coding
Interleaving
Ciphering/Encryption
In GSM, the input to burst formatting is the 456 bits received from
ciphering. Burst formatting adds a total of 136 bits per block of 20
ms, bringing the overall total to 592.
Now, the 592 bits will be sent on 4 bursts, each containing 2 x 57
bits + 136 / 4 = 148 bits.
However, each time slot on a TDMA frame is 0.577 ms long.
This provides enough time for 156.25 bits to be transmitted (each
bit takes 3.7 us),
The rest of the space, 8.25 bit times, is empty and is called the Guard
Period (GP). This time is used to enable the MS/BTS ramp up and
ramp down.
Burst Formatting
Modulation and
Transmission
Burst Formatting
Segmentation
A/D Conversion
Speech Coding
Channel Coding
Interleaving
Ciphering/Encryption
Tail
Bits
Encrypted Bits
57
Training
Sequence
1
26
Encrypted Bits
1
57
Tail Guard
Bits Period
3
8.25
Burst Formatting
Modulation and
Transmission
A/D Conversion
Segmentation
Speech Coding
Channel Coding
Interleaving
Ciphering/Encryption
Burst Formatting
Modulation and
Transmission
Chapter 6 : Air
Interface
Air Interface
GSM Overview
Physical Channels
GSM band is divided into 124 RF channels, and each channel is divided into
8 time slots using TDMA. These time slots are called physical channels.
CH 124
CH 3
CH 2
CH 1
0
0
1
1
2
2
3
3
4
4
5
5
6
6
7
7
0
0
1
1
2
2
3
3
4
4
5
5
6
6
7
7
Time
Air Interface
GSM Overview
Logical Channels
A physical channel may be occupied by a traffic channel or a control
channel, both of them are classified as logical channels.
Logical Channels
Traffic Channels
Half Rate
Full Rate
Control Channels
Common
Broadcast
Dedicated
RACH
BCCH
SDCCH
ACGCH
SCH
FACCH
PCH
FCCH
SACCH
CBCCH
Air Interface
GSM
Overview
Traffic Channels
Carries either encoded speech or user data up and down link between a
single mobile and a single BTS.
Enhanced Full Rate = 15.1 Kbit/S
Full Rate = 13 Kbit/S
Half Rate = 6.5 Kbit/S
Air Interface
GSM Overview
Air Interface
GSM Overview
Broadcast Channels
From Single BTS to all the mobiles in the area
Frequency Correction Control CHannel (FCCH)
Carries information for frequency correction of the mobile
Synchronization CHannel (SCH)
Carries 2 important pieces of information
TDMA frame number (max = 2715684 )
Base station identity Code (BSIC)
Broadcast Control CHannel (BCCH)
Carries Cell specific data
Air Interface
GSM Overview
Air Interface
GSM Overview
Tail
Bits
3
Encrypted
Bits
57
Training
Sequence
1
26
Encrypted
Bits
1
57
Tail
Bits
3
Guard
Period
8.25
It carries information of all logical channels except RACH, SCH and FCCH
Air Interface
GSM
Overview
Tail
Bits
3
Fixed Bits
142
Tail
Guard
Bits
3
Period
8.25
This is the one used by the channel (FCH) for frequency correction of the
mobile. It consists of a long sequence of bits called the fixed bits which
are all equal to zeros, leading to a constant frequency output from the
GMSK modulator
Air Interface
GSM Overview
Tail
Encrypted
Synchronization
Encrypted
Tail
Bits
Bits
Sequence
Bits
Bits
Guard
Period
64
39
8.25
39
The SCH burst consists of a long synchronization sequence along with the important
information being encrypted and divided into two blocks. The TDMA frame number is
sent on the SCH channel, which carries also the Base station Identity code (BSIC). The
TDMA frame number is used by the mobile to determine which control channels will be
transmitted on that frame. It is used also as one of the input parameters to the algorithm
that calculates the ciphering key Kc, which is in turn used for encryption of subscriber
information transmitted on the air interface
Air Interface
GSM
Overview
Tail
Synchronization
Encrypted
Tail
Bits
Sequence
Bits
Bits
41
36
Guard Period
68.25
The Access Burst is used by the RACH channel. The mobile sends this
burst when it does not know the distance to its serving BTS, which is the
case when the mobile is switched on or after it makes a handover to a new
cell. So this burst must be shorter in order to prevent it from overlapping
with the burst on the next time slot
Air Interface
GSM Overview
Tail
Bits
3
Encrypted Bits
58
Training
Sequence
Encrypted Bits
26
58
Tail
Guard
Bits
Period
8.25
The dummy burst is sent from the BTS when there is nothing else to be sent.
It carries no information and it has the same structure of a normal burst with
the encrypted bits replaced by a known bit pattern to the mobile
Air Interface
GSM Overview
Frame 2
Frame 3
Frame 4
Frame 5
Frame 6
Frame 7
0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7 0 1 2 3 4 5 67
F S
F S
F S
10 12
11
13
14
15
C
16
17
18
19
F S
20
21
22
23
24
25
F S
C
26
27
28
29
C
30
31
32
33
34
35
C
36
37
38
39
C
40
42
41
43
44
45
C
46
47
48
49
50
51
Air Interface
GSM
Overview
Frame 2
Frame 3
Frame 4
Frame 5
Frame 6
Frame 7
0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7 0 1 2 3 4 5 67
RRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRR
Time slot 0 in the uplink direction is reserved for the RACH channel which
is used by the mobiles to make random access request to the system
Air Interface
GSM Overview
Frame 2
Frame 3
Frame 4
Frame 5
Frame 6
Frame 7
0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 70 1 2 3 4 56
D0
D0
D0
2
1
D0
D0
D1
3
D1
D2
7
10
D2
D3
11
12
13
D0
D4
D5
D1
D6
D7
D1
A0
A1
D1
A2
A3
I I I
14 16 18 20 22 24 26 28 30 32 34 36 38 40 42 44 46
48 50
15 17 19 21 23 25 27 29 31 33 35 37 39 41 43 45 47 49 51
D3
D4
D5
D6
D7
A4
A5
A6
A7
I I I
52
102
Air Interface
GSM Overview
Frame 2
Frame 3
Frame 4
Frame 5
Frame 6
Frame 7
0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7 0 1 2 3 4 5 67
A5
A5
A5
A6
2
1
4
3
A7
6
5
A5
8
7
I I I
10
9
12
11
1
4
13
A5
D0
16
1 1
5 7
D1
18
20
19
A6
D2
22
21
24
23
25
D3
26 28
27
A6
D4
30 32
29
31
33
D5
34
36
35
A6
D6
38 40
37
39
41
D7
42
44
43
45
A0
46
48
47
50
49
51
A1
52
A2
A3
I I I
D0
D1
D2
D3
D4
D5
D6
D7
A4
102
Air Interface
GSM Overview
Frame 2
Frame 3
Frame 4
Frame 5
Frame 6
Frame 7
0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7 0 1 2 3 4 5 67
TTTTTTTTTTTTATTTTTTTTTTTT
10 12 14 16 18 20 22 24 26
9
11 13 15 17 19 21 23 25
26 TDMA Frames
=
1 Traffic Multi-frame
A (SACCH)
This contains the control signaling, an example of this is in order to change output power.
Air Interface
Downlink
Frame
Frame
Frame
Frame
Frame
F
S
B
B
B
B
C
C
C
C
F
S
C
C
C
C
C
C
C
C
F
S
C
C
C
C
C
C
C
C
F
S
C
C
C
C
C
C
C
C
F
S
C
C
C
C
C
C
C
C
I
D
D
D
D
D
D
D
D
D
D
D
D
D
D
D
D
D
D
D
D
D
D
D
D
D
D
D
D
D
D
D
D
A
A
A
A
A
A
A
A
A
A
A
A
A
A
A
A
I
I
I
T
T
T
T
T
T
T
T
T
T
T
T
A
T
T
T
T
T
T
T
T
T
T
T
T
I
T
T
T
T
T
T
T
T
T
T
T
T
A
T
T
T
T
T
T
T
T
T
T
T
T
Uplink
R
R
R
R
R
R
R
R
R
R
R
R
R
R
R
R
R
R
R
R
R
R
R
R
R
R
R
R
R
R
R
R
R
R
R
R
R
R
R
R
R
R
R
R
R
R
R
R
R
R
R
A
A
A
A
A
A
A
A
A
A
A
A
I
I
I
D
D
D
D
D
D
D
D
D
D
D
D
D
D
D
D
D
D
D
D
D
D
D
D
D
D
D
D
D
D
D
D
A
A
A
A
T
T
T
T
T
T
T
T
T
T
T
T
A
T
T
T
T
T
T
T
T
T
T
T
T
I
T
T
T
T
T
T
T
T
T
T
T
T
A
T
T
T
T
T
T
T
T
T
T
T
T
GSM
Overview
Air Interface
GSM Overview
B
3
C
6
F S
10
9 11
12
13
14
15
C
16
17
18
19
F S
20
21
22
23
C
24
25
C
26
27
28
F S
30
29 31
32
C
33
34
35
C
36
37
38
39
F S
40
41
42
43
44
45
C
46
47
48
49
I
50
51
T T T T T T T T TT T T A T T T T T T T T T T T T I T T T T T T T T T T T T A T T T T T T T T T T T T
I T T T T T T T TT T T T A T T T T T T T T T T T T I T T T T T T T T T T T T A T T T T T T T T T T T
T I T T T T T T TT T T T T A T T T T T T T T T T T T I T T T T T T T T T T T T A T T T T T T T T T T
T T I T T T T T TT T T T T T A T T T T T T T T T T T T I T T T T T T T T T T T T A T T T T T T T T T
T T T I T T T T TT T T T T T T A T T T T T T T T T T T T I T T T T T T T T T T T T A T T T T T T T T
T T T T I T T T TT T T T T T T T A T T T T T T T T T T T T I T T T T T T T T T T T T A T T T T T T T
T T T T T I T T TT T T T T T T T T A T T T T T T T T T T T T I T T T T T T T T T T T T A T T T T T T
T T T T T T I T TT T T T T T T T T T A T T T T T T T T T T T T I T T T T T T T T T T T T A T T T T T
Air Interface
GSM Overview
Frame 1
Frame 2
Frame 3
Frame 4
Frame 5
Frame 6
01 2 3 4 5 6 7 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 70 1 2 3 4 5 6 70 1 2 3 4 5 6 7
Offset
0 12 3 4 5 6 7 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7
Frame 1
Frame 2
Frame 3
Frame 4
Frame 5
Frame 6
Air Interface
1 Hyper frame = 2048 Super frames = 2,715,648 TDMA Frames = 3hrs 28 min and 53.76 s
GSM Overview
Hyper Frame
1
e.g. BCCH
e.g. TCH
e.g. TCH
57
26
26
51
e.g. BCCH
2048
26
Normal burst
57
e.g. BCCH
51
8.25
Structur
e
of TDMA
156.25 bits in 577 m Sec
Frames
Air Interface
Measureme
nt in idle
mode
Is it
a BCCH
carrier?
No
Yes
The MS shall attempt to synchronize to
this carrier and read BCCH info
Does the
carrier belong to the
wanted PLMN
No
Yes
Is the cell
Barred for
access ?
Yes
Is C1>=0?
Yes
Camp on this cell
Yes
No
Air Interface
GSM Overview
Frame 24
Frame 25
Frame 26
Frame 27
Frame 28
01 2 3 4 5 6 7 0 1 2 3 4 5 6 70 1 2 3 4 5 6 70 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7
Offset
0 12 3 4 5 6 7 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7 0 1 2 3 4 5 67
Frame 23
Frame 24
Frame 25
Frame 26
Frame 27
Frame 28
The mobile is informed on the SACCH channel which BCCH frequencies to be measured.
The mobile will try to measure the signal strength of these carriers one by one during the time
between transmission and reception of the allocated traffic channel: the mobile transmits,
measures and then receives, and so on.
To make sure that the measured carriers do not belong to co-channel cells, the mobile will have to
check the identity of the adjacent cells by reading the BSIC value sent on the SCH of each cell.
This will take place during the idle frame number 26.
The signal strength of the serving cell is measured during reception of the allocated traffic
channel. Then the mobile will make a list of the strongest six carriers and their BSIC values
along with the signal strength of its cell, and reports this list to the BSC via the uplink SACCH
channel which is repeated once every 26 frames.
Questions ?
Chapter 7 : Traffic
Cases
Communicate
Anywhere
Traffic Cases
GSM Overview
Location Update
Why do we need to update our location data ?
Actually, the location update process is invited in aim to exactly identify your
location within the network so that any incoming call goes directly to the
called subscriber.
To fulfill this aim, one can say that we may update the system with the cell
ID each time the subscriber changes his serving cell.
The MSC/VLR will now know the exact cell you are roaming in.
This will result in a huge amount of location update messages.
Traffic Cases
GSM Overview
Location Area
Location area is a part of the MSC/VLR coverage area. Each group of adjacent cells
is assigned a universal unique location area identity.
The mobile subscriber is only required to update the network with its new location
every time it changes its Location Area.
Introducing the concept of Location area enables us to make an approximate estimation
of your location.
Traffic Cases
GSM
Overview
Traffic Cases
GSM Overview
02
1607
MCC
MNC
LAC
MCC
MNC
LAC
Traffic Cases
GSM Overview
02
1607
781
MCC
MNC
LAC
CID
MCC
MNC
LAC
CID
Traffic Cases
GSM Overview
3. IMSI attach/detach
4. Periodic Location Update
Traffic Cases
GSM
Overview
4
MSC/VLR
Updates
LA Record
BSC
with
the
Traffic Cases
VLR Address
NewOld MSC
Old MSC/VLR
1. The
mobil
e
sends
a
locati
on
updat
e
reque
st to
the
MSC.
Old BSC
GSM Overview
HLR
IMSI to MGT
translation
New MSC/VLR
LA 2
LA 1
Traffic Cases
GSM Overview
IMSI Attach
IMSI attach is a complement to the IMSI detach procedure. It is used
by the mobile subscriber to inform the network that it has re-entered an
active state and is still in the same location area. If the MS changes
location area while being switched off, a normal location update takes
place.
1. The MS requests a signaling channel.
2. The MSC/VLR receives the IMSI attach message from the MS.
3. The MSC/VLR sets the IMSI attach in the VLR. The mobile is
now ready for normal call handling.
4. The VLR returns an acknowledgment to the MS.
1
BSC
2
MSC/VLR
3
Traffic Cases
GSM Overview
IMSI Detach
1. At power off, the MS asks for a signaling channel.
2. The MS uses this signaling channel to send the IMSI detach message to
the MSC/VLR.
3. In the VLR, an IMSI detach flag is set for the subscriber. This is used to
reject incoming calls to the MS.
Traffic Cases
GSM
Overview
Traffic Cases
GSM
Overview
Handover
Handover is to keep continuity of the call when the subscriber is roaming
along the network moving from one cell to another and moving between
different nodes in the network.
During call, the MS is continuously measuring transmission quality of
neighboring cells and reports this results to the BSC through the BTS.
The BSC, being responsible on supervising the cells, is responsible of
handover initiation.
Good neighbor relations between cells is an important factor in keeping the network
performance in the accepted level.
Traffic Cases
GSM Overview
Types of Handover
1. Intra BSC Handover:
When the cell to which the call will be handed over belongs to the
same BSC of the serving cell.
2. Inter BSC / Intra MSC Handover:
When the cell to which the call will be handed over belongs to the different
BSCs but to the same serving MSC.
3. Inter MSC
When the cell to which the call will be handed over belongs to the different BSC and different MSC.
Traffic Cases
GSM Overview
Mobile Originated
Call
PSTN
MSC
BSC
Traffic Cases
GSM Overview
HLR
PSTN
2
6
GMSC
4
7
MSC
BSC
Traffic Cases
GSM
Overview
calls allowed ?
MSC/VLR
60202..
Attached
Detached
VLR ADD=
StockEgypt. Airport
HLR
Allo
wed
Traffic Cases
GSM Overview
MSC/VLR
Originating Leg
Terminating Leg
Attached
VLR ADD=
GWMSC
HLR
xyz
Traffic Cases
GSM Overview
Roaming Call
Forwarding Leg
Originating Leg
Attached
VLR ADD=
Stock. Airport
MSISDN
GWMSC
HLR
Traffic Cases
GSM
Overview
MSC/VLR
A
MSC/VLR
B
Roaming Call
Forwarding Leg
Originating Leg
Attached
VLR ADD=
Stock. B
HLR
GWMSC
Traffic Cases
GSM Overview
MSC/VLR
A
MSC/VLR
B
Originating Leg
STCK.
HLR
STCK.
GWMSC
HLR
GWMSC
Terminating Leg
Questions ?
GSM
Overview
Chapter 8 : GSM
Services
GSM Services
GSM Overview
Introduction
Examples of GSM non-Speech services
Fax calls
Data calls
GSM Services
GSM Overview
PSTN
ISDN
GSM
GSM Services
GSM Overview
Information sent at call setup from ISDN or GSM on how the service will be
performed, is called Bearer Capabilities (BC).
PSTN can not provide this type of information during call setup, so it can not
distinguish between a telephony call and a fax or data call.
GSM Services
GSM Overview
rate adaptation.
Protocol conversion.
Providing modems.
such that Fax , Data calls are to be established to/from mobile subscribers.
Standard Bit Rate in GSM = 9.6 KB/S
This rate can be increased into 14.4 KB/S
The High Speed Circuit Switched Data (HSCSD) uses 4 time slots
to perform a data call thus increasing the rate into 57.6 KB/S
GSM Services
GSM Overview
IMSI
AMSISDN
BC
AMSISDN
HLR
AMSISDN
PSTN
GWMSC
MSC/VLR
DTI
GSM Services
GSM Overview
PSTN
MSC
DTI
GSM Services
GSM
Overview
Further Enhancements
GPRS
EDGE
UMTS
GSM Services
GSM
Overview
GSM Evolution
UMTS
Functionality
capable systems
& capabilities
WCDMA
2 Mbps
EDGE/IS-136
384 kbps
GPRS
115 kbps
Circuit data
<9.6 kbps
Speech
Time
1997
1998
1999
2000
2001
2002
GSM Services
GSM Overview
GSM Services
GSM
Overview
SMS-GMSC
Forwards the short message to a mobile subscriber via its serving MSC.
SMS-IWMSC
Receives the mobile originated short message from any MSC in the
network.
GSM Services
GSM Overview
SMS - IWMSC
SMS - GMSC
MSC1
MSC2
HLR
MO
MT
GSM Services
GSM Overview
SMS - IWMSC
SMS - GMSC
Pending
Message
MSC1
Flag
MSC2
HLR
Waiting
Message
Data
MO
MT
GSM Services
GSM
Overview
SMS - IWMSC
present
SMS - GMSC
Alert:
The MS is
present
MSC1
MSC3
Alert:
The MS is
present
HLR
Attach
Alert :
The MS
is present
MO
MT
Questions ?
GSM
Overview
Thank You