Beruflich Dokumente
Kultur Dokumente
3. GSM network
1
4.3.2 The Common Control Channel (CCCH)
4.3.3 The Dedicated Control Channel (DCCH)
5. MSC-based interfaces
5.1 MSC protocols
5.2Data Transmission
5.3Voice Coding
5.3.1Channel Coding
5.3.2Interleaving
5.3.3Encryption
5.3.4Modulation and Demodulation
5.3.5Timing advance
7. System features
Roaming
Multipath equalization
Frequency hopping
Short Message Service (SMS)
Call Waiting (CW)
Call Hold (CH)
Call Forwarding (CF)
Calling Line ID
Mobility Management (MM)
Authentication
9. GSM glossary
2
INTRODUCTION
The GSM standard (Global System for Mobile Communications) for
mobile telephony was introduced in the mid-1980s. Today, GSM is the
most popular mobile radio standard in the world.
These analog networks did not comply with any uniform standard.
There was no way to use a single mobile phone from one country to
another.
3
The benefits of GSM
Support for international roaming
Telephony
4
1. GSM Frequency Band
Allocation
GSM cellular system can be divided into GSM 900M, GSM 1800M &
GSM 1900 according to frequency band, with carrier frequency interval
of 200 KHz and up and down frequencies as follows:
Carrier
Frequency BW Frequenc freq.
Band(MHz) (MHz) y number numbe
r (pair)
GSM Up 890–915
25 1–124 124
900 Down 935–960
GSM Up 1710–1785
75 512–885 374
1800 Down 1805–1880
Carrier
Frequency BW Frequency freq.
band(MHz) (MHz) Number number
(pair)
Up 880–915 0–124
EGSM 35 174
Down 925–960 975–1023
5
Up 876–915 0–124
RGSM 40 199
Down 921–960 955–1023
2.1 FDMA
FDMA divides the whole frequency band into many single radio
channels (transmitting and receiving carrier frequency pairs).
2.2 TDMA
TDMA divides a broadband radio carrier into several time division
channels according to time (or timeslot). Each subscriber takes one
6
timeslot and sends or receives signals only in the specified timeslot.
TDMA is applied in digital cellular system and GSM.
3. GSM network
A GSM network can be divided into three groups.
7
8
9
Site Sectorization
10
4 site/3 cell
11
12
They are characterized as follows:
The MS, i.e. the GSM handset, is logically built up from the following
components:
13
3.1.1 Identifiers in the GSM Network
14
• Mobile Subscriber Identification Number (MSIN) – The
MSIN is
the subscriber identifier within a PLMN.
15
3.2 The base station
subsystem (BSS)
The base station subsystem (BSS) is made up of the base station
Controller (BSC) and the base transceiver station (BTS).
(BTS):
The BTS may contain one or more transceivers to provide the required
call handling capacity.
Today's new and intelligent BTSs have taken over many tasks that
were previously handled by the BSCs.
If the MSC also has a gateway function for communicating with other
networks, it is called Gateway MSC (GMSC).
17
The main information stored there concerns the location of each
mobile station in order to be able to route calls to the mobile
subscribers managed by each HLR.
The HLR also maintains the services associated with each MS. One HLR
can serve several MSCs.
The EIR is a database that contains a list of all valid mobile station
equipment within the network, where each mobile station is identified
by its international mobile equipment identity (IMEI).
18
3.3.6 Operation and Maintenance
Center (OMC):
The OMC is responsible for controlling and maintaining the MSC, BSC
and BTS. It can be in charge of an entire public land mobile network
(PLMN) or just some parts of the PLMN.
Providing voice or data transmission quality over the radio link is only
part of the function of a cellular mobile network.
GSM900:
Uplink: 890-915 MHz (MS to BS)
Downlink: 935-960 MHz (BS to MS).
GSM1800:
Uplink: 1710-1785 MHz (MS to BS)
Downlink: 1805-1880 MHz (BS to MS).
GSM1900 :
Uplink: 1850-1910 MHz (MS to BS)
19
Downlink: 1930-1990 MHz (BS to MS).
The interval between two slots is called timeslot. Its duration is used
as time unit, called burst period (BP).
20
Burst represents different meaning in different situation. Sometimes it
concerns time – frequency “rectangle” unit, and sometimes not.
Similarly, timeslot sometimes concerns time value, and sometimes
means using one of every eight slots periodically.
Frequency
200kHz
BP Tim e
15/26m s Slot
Physical channel combines FDMA and TDMA together. It consists of
timeslot flow that connects base station (BS) and mobile station
(MS).The position of these timeslots in TDMA frame is fixed.
The best way to create a manageable communications system is to
divide it into various subgroups that are interconnected using
standardized interfaces.
21
The fundamental unit of time in this TDMA scheme is called a burst
period and it lasts approx. 0.577 ms. Eight burst periods are grouped
into a TDMA frame (approx. 4.615 ms), which forms the basic unit for
the definition of logical channels. One physical channel is one burst
period per TDMA frame.
In real networking, each cell has several carrier frequencies and each
frequency has eight timeslots, proving eight basic physical channels.
Several logical channels are mapped onto the physical channels. The
organization of logical channels depends on the application and the
direction of information flow (uplink/downlink or bidirectional).
22
4.2 Traffic channels on the air interface
A traffic channel (TCH) is used to carry speech and data traffic. Traffic
channels are defined using a 26-frame multiframe, or group of 26
TDMA frames. The length of a 26-frame Multiframe is 120 ms, which is
how the length of a burst period is defined (120 ms divided by 26
frames divided by 8 burst periods per frame).
Out of the 26 frames, 24 are used for traffic, 1 is used for the slow
associated control channel (SACCH) and 1 is currently unused.
23
TCHs for the uplink and downlink are separated in time by 3 burst
periods, so that the MS does not have to transmit and receive
simultaneously, thereby simplifying the electronic circuitry. This
method permits complex antenna & duplex filters to be avoided and
thus helps to cut power consumption.
The signaling channels on the air interface are used for call
establishment, paging, call maintenance, synchronization, etc.
General information, cell specific; e.g. local area code (LAC), network
operator, access parameters, list of neighboring cells, etc.
The MS receives signals via the BCCH from many BTSs within the same
network and/or different networks.
24
Downlink only; correction of MS frequencies; transmission of frequency
standard to MS;
A group of uplink and downlink channels between the MS card and the
BTS. These channels are used to convey information from the network
to MSs and provide access to the network.
Downlink only; the MS is informed by the BTS for incoming calls via the
PCH.
Downlink only; BTS allocates a TCH or SDCCH to the MS, thus allowing
the MS access to the network.
The PCH and AGCH are transmitted in one channel called the paging
and access grant channel (PAGCH). They are separated by time.
25
4.3.3 The Dedicated Control Channels
(DCCH):
E.g. for radio measurement data, power control (downlink only), timing
advance, etc.; always used in parallel to a TCH or SDCCH.
Almost all of the signaling channels use the “normal burst” format
(Burst formats), except for the RACH (Random Access Burst), FCCH
(Frequency Correction Burst) and SCH (Synchronization Burst)
channels.
A timeslot is a 576 ms time interval, i.e. 156.25 bits duration, and its
physical contents are known as a burst. Five different types of bursts
exist in the system. They are distinguished by different TDMA frame
divisions.
5. MSC-based interfaces
27
All of the interfaces around the MSC use SS7-based protocols. The B, C,
D, F and G interfaces are referred to as MAP interfaces. These connect
either the MSC to registers or registers to other registers.
The E interface supports the MAP protocol and calls setup protocols
(ISUP/ TUP). This interface connects one MSC to another MSC within the
same network or to another network's MSC.
29
data to the information carried by radio wave and then to subscriber
data or signaling data.
These transformations include channel coding and decoding,
interleaving and de-interleaving, burst formatting, encryption and
decryption, modulation and demodulation. See
30
Voice encoder divides voice into several 20 ms voice blocks and
samples each block with 8 kHz, so each block has 160 samples.
In GSM, each logical channel has its own coding and interleaving
mode, but the principle is trying to form a unified coding structure.
All these operations are based on block. The block size depends on
channel type. After channel coding, all channels (except RACH and
SCH) are made of 464-bit block, that is, 456 coded information bits
plus 8-bit header (header is used to distinguish TCH and FACCH).
The first four sub blocks are transmitted by even bits of the four
timeslots borrowed from the continuous frames of TCH, and the rest
four sub blocks borrows odd bits of the four timeslots from the four
continuous frames delayed for two or four frames after the first frame.
31
5.3.2 Interleaving
That is to say, after coding, speech signal turns into sequential frames,
while in transmission, error bits usually occur suddenly, which will
affect the accuracy of continuous frames.
Channel coding only works for detection and correction of signal error
or short error string. Therefore, it is hoped to find a way to separate
the continuous bits in a message, that is, to transmit the continuous
bits in a discontinuous mode so as to change the error channel into
discrete channel.
Channel coding will correct the error bit under such circumstances.
This method is called interleaving technology.
After channel coding, The 456 bits are divided into eight groups; each
group contains 57 bits. This is the first interleaving, also called
internal interleaving.
After first interleaving, the continuity of information in a group is
broken. As one burst contains two groups of 57-bit voice information, if
the two-group 57 bits of a 20 ms voice block after first interleaving are
inserted to the same burst, the loss of this burst will lead to 25% loss
of bits for this 20 ms voice block. Channel coding cannot restore so
much loss.
32
Therefore, a secondary interleaving, also called inter-block
interleaving, is required between two voice blocks. The entire
interleaving process is shown in Fig.
Interleaving process
After internal interleaving, the 456 bits of a voice block B are divided
into eight groups. Interleave the first four groups of voice block B (B0,
B1, B2, and B3) with the last four groups of voice block A (A4, A5, A6,
and A6), and then (BO, A4), (B1, A5), (B2, A6), and (B3, A7) form four
bursts.
33
Interleaving is an effective way to avoid interference, but it has a long
delay. In the transmission of a 20 ms voice block, the delay period is
(9*8)-7=65 bursts (SACCH occupying one burst), which is 37.5 ms.
Therefore, MS and trunk circuit have echo cancellers added to remove
the echo due to delay.
5.3.3 Encryption
Therefore, the report header carries the delay value measured by MS.
BTS monitors the arrive time of call and send command to MS with the
frequency of 480 ms, prompting MS the timing advance (TA) value. The
range of this value is 0–63(0–233 us), and the maximum coverage area
is 35km. The calculation is as follows:
1/2×3.7us/bit×63bit*c=35km
34
3.7us/bit is the duration per bit (156/577); 63bit is the maximum bit for
time coordination; c is light velocity (transmission rate of signal); 1/2 is
related to the round-trip of signal.
36
Handover:
In a cellular network, the radio and fixed voice connections are not
permanently allocated for the duration of a call. Handover or
handoff as it is called in North America, means switching an
ongoing call to a different channel or cell. The execution and
measurements required for handover are a basic function of the RR
protocol layer.
The first two types of handover involve only one base station
controller (BSC). To save signaling bandwidth, they are managed by
37
the BSC without involving the MSC, except to notify it upon
completion of the handover.
The last two types of handover are handled by the MSCs involved.
An important aspect of GSM is that the original MSC, the anchor
MSC, remains responsible for most call-related functions, with the
exception of subsequent inter-BSC handovers under the control of
the new MSC, called the relay MSC.
Transmission Overview
During communication, only 40% time is used for conversation; no
useful information is transmitted during the rest 60% time.
38
means this noise will not annoy the listeners nor affect the
conversation. This kind of noise is called comfort noise.
Power control:
39
In GSM, power control can be used in uplink and downlink
respectively. The power control range for uplink MS is 20 dB–30dB.
Based on the power class of MS (most MSs belongs to class 4, which
means the maximum transmission power is 33 dbm), each step can
change 2 dB. The downlink power control range is decided by
equipment manufacturer. Although whether to adopt uplink or
downlink power control function is decided by network operators, all
MSs and BTS equipments must support this function. BSS manages
the power control in the two directions.
The mobile station and BTS continually measure the signal strength
or signal quality (based on the bit error ratio), and pass the
information to the base station controller, which ultimately decides
if and when the power level should be changed.
40
7. System features
This section provides a brief description of the GSM network
features.
Roaming:
The roaming feature allows a user to make and receive calls in any
GSM network and to use the same user-specific services
worldwide1.
Multipath equalization:
At the 900 MHz range, radio waves bounce off everything buildings,
hills, cars, airplanes, etc. Many reflected signals, each with a
different phase, can reach an antenna (also known as “multipath
propagation”).
Frequency hopping:
41
The mobile station has to be frequency-agile, meaning it can move
between different frequencies in order to transmit and receive data,
etc.
If the GSM telephone is not turned on, the message is held for later
delivery. Each time a message is delivered to an MS; the network
expects to receive an acknowledgement from this MS that the
message was correctly received. Without a positive
acknowledgement the network will re-send the message or store it
for later delivery.
42
If the incoming call is rejected, the caller will receive a busy signal.
Once the call is accepted, the original call is put on hold to allow a
connection to the new incoming call.
Calling Line ID
The network keeps track of the last known location of the MS in the
VLR and HLR. Radio sites connected to the MSC are divided into
groups called “location areas”. When a call is designated for an
MS, the network looks for the MS in the last known location area.
Authentication
43
Authentication normally takes place when the MS is turned on with
each incoming call and outgoing call. A verification that the »Ki«
(security code) stored in the AuC matches the »Ki« stored in SIM
card of the MS completes this process. The user must key in a PIN
code on the handset in order to activate the hardware before this
automatic procedure can start.
44
9. GSM glossary
45
46
47
The GSM network consists mainly of the following functional
parts:
MSC
The MSC is connected to the radio access network (RAN); the RAN is
formed by the BSCs and BTSs within the Public Land Mobile Network
(PLMN).
Users of the GSM network are registered with an MSC; all calls to
and from the user are controlled by the MSC.
VLR
GMSC
HLR
48
The home location register (HLR) is the database that contains a
subscription record for each subscriber of the network.
CN
The core network (CN) consists of, amongst other things, MSC(s),
GMSC(s) and HLR(s). These entities are the main components for
call handling and subscriber management. Other main entities in
the CN are the equipment identification register (EIR) and
authentication centre (AUC).
BSS
MS
49