Beruflich Dokumente
Kultur Dokumente
A REPORT OF
SUMMER TRAINING
IN
MAHANAGAR TELEPHONE NIGAM
LIMITED
AT
KAROL BAGH, NEW DELHI
IN
GSM SERVICES (DOLPHIN
MOBILE)
Sub
mitted by:
Prad
eep Chauhan
VII
semester
Elec
tronics and Comm. Branch
1
2
Instit
ute of Engg. & Tech.
Al
war
INDEX
1. Introduction
2
2. GSM Building blocks
4
3. Radio frequency allocation
5
4. TDMA timeslots
6
5. Cells and cell sizes
9
6. Mobile Station (MS)
11
7. Subscriber’s Identity Module (SIM)
14
8. Base Station Sub-system (BSS)
18
• Base Transreceiver Station (BTS)
19
• Base Station Controller (BSC)
22
• TRAU
23
9. BTS to BSC connection
25
10. Handovers
27
11. Cell selection
28
12. Network Switching Subsystem (NSS)
30
• MSC
• HLR etc.
2
3
Introduction
In order to overcome the difficulties that an analogue system
imposed the European Conference of Postal and
Telecommunications Administration (CEPT) looked at the problems
associated with analogue systems and in 1982 set up the “Groupo
Specialo Mobile” (GSM) committee to specify one common
European mobile telephone system. Later on “Groupo Speciale
Mobile” became known as Global System for Mobile
Communication.
3
4
3%
three decisions were made:
• In 1982 two frequency bands, 890 Mhz to 915 Mhz and 935
Mhz to 960 Mhz ,were reserved primary for use by cellular
systems .
• In 1985 the decision was made3 to implement a digital
system. The next step was to choose between narrowband and
wideband solutions.
3 % (IN D IA)
• In 1987, it was concluded that digital technology working in
the TDMA would provide the optimum solution for the future
system.
• The narrowband TDMA solutions was chosen (less than 10
channels per carrier frequency is generally regarded as
narrowband TDMA system ) with the following advantages :
4%
Offers a possibility of channel splitting and advanced speech
coding in the future, resulting in improved spectral efficiency.
• Offers much greater variety services than analogue.
4
5
GSM milestones
2. Base Station System (BSS) - the radio base stations and their
controllers.
3. Switching System (SS) – the switch, location register and
network security features.
4. Operations Sub-system (OSS)- the operations and
maintenance of the network elements ,including the NMC.
7
8
TDMA timeslots:
Books sho0w how 32 timeslots each of 64 Khz could be used by
sharing the time available for a frame which produced a
“bandwidth” of 2.048 Mbits/sec.
This bandwidth would be far too wide to transmit over the air
interface of the GSM network where it is limited to just 200Khz .Only
eight timeslots are therefore transmitted and the bandwidth of each
individual one reduced to just 33Khza instead of the 64 Khz
terrestrial system mentioned in books.
Vocoder:
To conserve this bandwidth a more efficient method of turning the
speech waveform into a digital code was needed .GSM therefore
uses a more up to date process called vocoding.This method does
not take samples as in the PCM method but instead uses eight
filters plus an excitation signal to mimic the human voice .It records
such things as the pitch,frequency ,tone etc to produce a realistic
8
9
Timeslot offset
The mobile equipment would not transmit and receive at different
times, but would have to share electronic resources such as
oscillator time and antenna. As the mobile equipment has to
transmit and receive at different times more than 2 out of the eight
timeslots are used, 1 for transmission and 1 for reception and some
timeslots to retune. To overcome this difficulty a three timeslot
offset between reception and transmission paths is used.
BTS transmit 0 1 MS 3 4 MS 6 7
(TX) 1 2
9
10
power
timeslots timeslots
T
r
a
n
s
m
i
t
t
e
d
p GSM 1800
o MHz
w GSM 900
e
MHz
r
Distance
11
12
The GSM networks are split into many radio cells or just cells.
Each cell is capable of supporting between 1 and 10 radio
frequency channels at the same time. The size or coverage of
the cell will depend upon many things:
• Number of subscribers in the cell – its capacity .
• Power outputs of the transmitters – higher power means
further distance.
• Geographical environment – hilly areas provide natural
obstructions to the radio path.
• Frequency of operations – lower frequencies travel
further
• Available infrastructure cost.
• Timing advance.
Small cells:
• High coverage achieved by using many small cells.
• Up to around 8Km radius.
• High capacity.
• Higher infrastructure costs.
12
13
The mobile station represents the user end of the mobile telephone
network and is usually the only equipment that the user ever sees
of the “network”. The mobile station (MS) comprises all user
13
14
14
15
Block diagram of MS
Component Purpose
Microphone Captures your voice for conversion from analogue to digital mode
Speaker Allows monitoring of remote phone
LCD Display Shows Call, Phone, Signal & Network Info
Keypad Allows access to specific remote phones
Battery + While battery housings on cellphones are standard input deigns, some
Meter cellphones also have some "battery processing" intelligence built in. For
example, they will check the charge level to start or stop the charge when the
phone is connected to a desktop, car or quick charger and even automatically
discharge the battery for you when necessary. This is usually linked to the LCD
display and to an audible beep to warn you of the battery charge status.
LED Lights Status Information, usually Green, white & Red.
Digital Signal The DSP chipset is a critical component. It co-ordinates the voice, SMS and
Processor data/fax features of a cellphone. It processes speech, handles voice activity
detection, as well as discontinuous GSM transmission and reception. Another
section amplifies the input signal received from the microphone, while another
converts this microphone voice signal from "analogue" to "digital". The digital
conversion is necessary because the GSM cellular standard is a completely
digital system.
CODEC This DSP's voice processing is done in tandem with highly sophisticated
compression technique mediated by the "CODEC" (compressor/decompressor)
portion of the cellphone. T
RF Unit The CODEC chipset instantly transfers this "compressed" information to the
cellphone’s Radio Frequency (RF) unit. This RF unit, which is essentially the
transmit and receive section of the cellphone, then sends out the voice or data
information via the cellphone antenna, over the air and on to the nearest
15
16
The incoming voice also travels much the same route, although it is first
uncompressed from it’s incoming digital form into an audible analogue form
which is then piped out as sound through the cellphone’s speaker. This
analogue-to-digital and digital-to-analogue voice conversion via the CODEC is
done at very high speeds, so that you never really experience any delay
between talking and the other person hearing you (and visa versa).
SIM Card When you switch on your phone with a "live" SIM card inside, the subscriber
Reader information on the chip inside the SIM card is read by the SIM card reader and
then transmitted digitally to the network via the RF unit. The same route is
followed when you hit the Call button (and it’s variants) on the cellphone: the
number you’ve inputted is instantly and digitally transferred to the network for
processing.
External At the bottom of most cellphones there is an external connector system. You
Connectors can usually plug in a data/fax adapter, or a battery charger, or a personal
hands free device, or a car-kit with external antenna connections. You’ll also
find many with separate "speaker" and LED lights that are activated when the
phone rings and/or when the battery is low. Many phones also have tiny LED
lights under the keypad that light up when you press a key and/or when the
phone rings.
On-Board Many cellphones also have a certain amount of on-board memory chip capacity
Memory available for storing outgoing telephone numbers, your own telephone number,
as well as incoming and outgoing SMS messages. Some allow copying between
the (limited) memory on the SIM card and the phone’s own internal memory.
Antenna Cellphone manufacturers are implementing many weird and wonderful
System permutations of antenna system designs. While some are stubby, fixed types,
the most predominant designs though are those with thin, pull-out steel rods all
of whom usually fit snugly into a special antenna shaft. These antenna designs,
be they the stubby or pull-out types, all conform to the same circa 900 MHz
frequency transmit and receive range required by the GSM specification.
16
17
17
18
18
19
Authentication process
1. When the Mobile Equipment starts up, it obtains the IMSI from
the SIM card, and passes this to the mobile operator requesting
access and authentication. The Mobile Equipment may have to
pass a PIN to the SIM card before the SIM card will reveal this
information.
2. The operator network searches its database for the incoming IMSI
and its associated Ki.
3. The operator network then generates a Random Number (RAND)
and signs it with the Ki associated with the IMSI (and stored on
the SIM card), computing another number known as Signed
Response (SRES_1).
4. The operator network then sends the RAND to the Mobile
Equipment, which passes it to the SIM card. The SIM card signs it
with its Ki, producing SRES_2 which it gives to the Mobile
Equipment along with encryption key Kc. The Mobile Equipment
passes SRES_2 on to the operator network.
5. The operator network then compares its computed SRES_1 with
the computed SRES_2 that the Mobile Equipment returned. If the
two numbers match the SIM is authenticated and the Mobile
19
20
21
22
Base Station
Controller
M
MS (BSC)
SS
BT Transcoder and
S rate adaptation
unit (TRAU)
22
23
24
25
Sector
A
MAS
Sector T
C
Sector
B
the voice channel coding between the GSM (Regular Pulse Excited-
Long Term Prediction, also known as RPE-LPC) coder and the CCITT
standard PCM (G.711 A-law or u-law). Since the PCM coding is 64
kbit/s and the GSM coding is 13 kbit/s, this also involves a buffering
function so that PCM 8-bit words can be recoded to construct GSM
20 ms traffic blocks, to compress voice channels from the 64 kbit/s
PCM standard to the 13 kbit/s rate used on the air interface. Some
networks use 32 kbit/s ADPCM on the terrestrial side of the network
instead of 64 kbit/s PCM and the TRAU converts accordingly. When
the traffic is not voice but data such as fax or email, the TRAU
enables its Rate Adaptation Unit function to give compatibility
between the BSS data rates and the MSC capability. Since the
transcoder packs the 13Kbit/s data into 16 kbit/s by adding 3 kbit/s
of control information which allows up to four to be accommodated
in a single 64 kbit/s PCM data channel. Thus a single PCM 2 Mbit/s
link can be made carry up to 120 GSM calls at 16 kbit/s instead of
the normal 30 channels at 64kbit/s.
The radio interface does not provide sufficient bandwidth to
transmit speech at 64 Kbit/s ,so GSM needs to transcode the A-law
PCM voice channel from the PSTN into a suitable form for GSM. The
MSC was designed very close to the design of an ISDN switch in
particular only 64 kbit/s circuits are switched. The transcoding could
be carried out between BSC and BTS but this would mean BSC’s
switching at 64 kbit/s and would also require 2 Mbit/s links. In
between the MSC and BSC is the other option so if the transcoder is
located at the MSC site the number of leased lines used is reduced.
If the transcoder is located remotely from the BSC it is known as a
remote transcoder.
So what does the transcoder actually do? The quick not too
technical answer is to say that the input is 8000 * 8 bit samples
27
28
8 8 8 8
bits bits bits bits
AAAAAA BBBBBB DDDDDD
CCCCCC
AA BB CC DD
TRANSCODING
012311172028293031
2.048
Mbit/sec 2 bits for A
ABBCCD D
16
Kbits
/sec
28
29
BTS site goes down, no other BTSs are affected, however due to the
extra links required between individual BTS’s it is a more expensive
method than daisy
BT
BT
S
S
BS
C
BT BT
S S
BT
S
Star configuration
29
30
BT
S
BS
C
BT BT
S S
BT BT
S S
Cell monitoring:
During a call, the BSC may make a decision that a handover is
required based on received signal level and quality measurements
taken from uplink. Downlink measurements of the link from the
serving cell are performed by the mobile, and also of the signal
strength of the BCCHs of the neighbor cells. Twice per second, a
measurement report containing all the results is sent uplink to the
BSC which is responsible for deciding when a handover to another
cell is required.
Thus every mobile continuously monitors its current serving cell
and up to 32 neighbors cells and report back to the BTS, the RF
levels of the top six strongest signals. It has time to do this as,
unlike the BTS, as it transmits and receives only one burst per
TDMA frame.
Location area:
Each MSC in the network has an associated visitor location register
(VLR) which contains a copy of some of the subscriber details that
are stored in HLR. The VLR is perhaps best described as the MSC’s
active database and as such the subscriber details copies it
contains exist only till the subscriber is active in the area covered
by its MSC. The copy of records in the VLRs are therefore dynamic
and are created, updated and deleted as the subscribers moves
from one place to another place.
For each subscriber, the VLR also records the location area identity
(LAI). Each VLR therefore control several LAIs and as subscribers
30
31
move between them, their VLR records receive a LAI update. When
any mobile moves between MSCs (VLR) the subscribers home
location register is also updated with the address detai8ls of the
new VLR. The LAI enables the network to know the whereabouts of
each active subscriber so that paging messages can be directed
only to the correct location.
Handovers:
There are basically three types of GSM handover:
1. Intra BSC
2. Inter BSC
3. Inter MSC
Intra BSC:
The MS remains under the control of same BSC but changes BTSs.
Inter BSC:
The mobile station changes BSC as well as BTS and also changes
LAI as one BSC controls one LA. The VLR is also updated with the
new LAI and informs the HLR.
MS
C
BS
BS
C
C MS
LA LA
LA
1 2
1
Inter BSC handover
Inter MSC:
31
32
The mobile not only changes BTSs and BSCs but changes MSCs as
well. As new BSA is used a new location area is assigned and stored
in the VLR and the HLR updated. The VLR records are erased.
MS MS
C C
MS BS
BS
C
C
LA LA
1 2
Cell selection:
There are four purposes for handovers which are:
1. Maintenance of high signal quality.
2. Recovering co-channel interference from another cell.
3. Traffic balancing among cells.
4. Recovering the failure of a control channel.
The mobile does C1 calculations on all cells it can hear and camps
onto the highest C1 cell. It then again calculates C1 for all top 6
cells given to it by the network.
C1 formula
C1 = A – Max (B,0) dB
Where:
A =DLss - RXLEV_ACESS_MIN
B = MS_TXPOWER_MAX_CCH - P
Example:
GSM 1800 cell
GSM class 1 mobile power output 1 watt i.e P= 30 dB
RXLEV_ACESS_MIN = 100 dB
MS_TXPOWER_MAX_CCH = 30 dB
DLss = - 80 dB
A = (-80) – (-100) = 20 dB
B = 30 -30 = 0 dB
C1 = 20- 0 = 20 dB i.e. the cells C1 is positive and is a suitable
candidate for handover.
33
34
Measurements of the top other live cells then takes place and if the
C1 parameters are above those of the serving cell for at least five
seconds the mobile is handed over.
The HLR data is stored for as long as a subscriber remains with the
mobile phone operator.
At first glance, the HLR seems to be just a database which is merely
accessed by other network elements which do the actual processing
for mobile phone services. In fact the HLR is a system which directly
receives and processes MAP transactions and messages. If the HLR
fails, then the mobile network is effectively disabled as it is the HLR
which manages the Location Updates as mobile phones roam
around.
A subscriber network details are only stored once in the network.
Initially there was only one HLR per network but this was found to
be slow at retrieving the details. Each HLR has the ability to stor the
details of 300000 subscribers.
HLR is accessed when:-
• Phone turned off.
• Phone turned on.
• Authentication.
37
38
• Changing MSC.
• Call diverts settings altered.
39
40
41
42
Air
Authentication
interfa
centre ce SIM
HL
R
RAN
RAN D
KI KI
D
A3 & A8
algorithms A3 & A8
algorithms
SRE
Are they S
equal to
VLR each other
YE YE
S S
Not allowe
allowe
allowed d
AUTHENTICATION PROCESS
Operations sub-system(OSS):
The operations subsystem (OSS) provides a means for an operator
to closely monitor the network and make changes if necessary. The
OSS can be split into regions with a higher authority monitoring.
The regional OSS functions are performed at Operations and
Maintenance Centre (OMC) and higher level functions by Network
Management Centre (NMC).
The functions of the OSS are based upon the concept of
telecommunications management network (TMN) where all NMC
and OMC machines are linked with NSS
and BSS. This linkage follows a layered approach with NMC at the
top and BSS at the bottom.
In summary network management for the any network consists of
the following:
•Network management centre for the global technical
management of the network with administrative and
commercial control of functions.
•Operations and management centre is a device based
regionally for the operation of individual network
components within the network.
43
44
The NMC is responsible for the control of the entire network and the
overseeing of all the service effecting maintenance undertaken 24
hours a day. The NMC resides at the top of the management
hierarchy chain.
The NMC gathers information from the network via the operations
and maintenance centers and filters it using the network
management software, NMS 5000 system (in orange, London).
The functions of the Network management software are to provide
control of the following areas:
Subscriber management: customers provisioning, the registering
and de-registering of a customer’s SIM onto the network. The
system provides a data entry point for positioning customer’s
details. It also performs the billing functions.
Performance management: they are responsible for monitoring
the quality of service, failed call attempts, signal quality
measurements and number of location update requests.
Configuration management: The configuration of the network is
held in database at the OMC. When an equipment provider supplies
an updated software version to the operator, when it is released on
to the network is overviewed and controlled from within the NMC.
The OMC provides a means to control release of software at a
suitable to time. Other configuration parameters are master copy of
BSC configuration database, which enables software changes to be
made to all network elements these two can be accessed via the
NMC.
Security management: with millions of rupees of equipment and
services accessible via software it would be disastrous for a network
operator if illegal entry were made to the system by someone or
group who were intent on causing disruption to the network. The
system provides security functions to stop “hackers” by ensuring
passwords are authenticated to access the OMC.
Maintenance, alarm and fault management: monitoring
events, promoting events to alarm conditions and realizing the
effect of the alarm are some examples of what by maintenance. If
44
45
Figure shows the GSM interfaces; they are briefly explained below.
• Um The air interface is used for exchanges between a MS
and a BSS. LAPDm, a modified version of the ISDN LAPD,
is used for signaling.
• Abis This is a BSS internal interface linking the BSC and a
BTS, and it has not been standardized. The Abis
interface allows control of the radio equipment and radio
frequency allocation in the BTS.
• A The A interface is between the BSS and the MSC. The A
interface manages the allocation of suitable radio
resources to the MSs and mobility management.
• B The B interface between the MSC and the VLR uses the
MAP/B protocol. Most MSCs are associated with a VLR,
making the B interface "internal". Whenever the MSC
needs access to data regarding a MS located in its area,
it interrogates the VLR using the MAP/B protocol over
the B interface.
• C The C interface is between the HLR and a GMSC or a
45
46
Standard interfaces:
The standard interfaces utilized within the GSM network are as
follows:
• 2.048Mbit/s trunks – 32 x 64 kbit/s timeslots.
• C7 signaling system.
• X.25 packet switch system.
• Link access protocol data (LAPD)- used on the Abis.
46
47
47
48
Call routing:
it is of two types:
• Outgoing calls (calls originating from MS).
• Incoming calls (calls terminating at MS).
The user dials the telephone number, presses the send or talk key,
and the mobile phone sends a call setup request message to the
mobile phone network via the mobile phone mast (BTS) it is in
contact with.
The element in the mobile phone network that handles the call
request is the Visited Mobile Switching Center (Visited MSC). The
MSC will check against the subscriber's temporary record held in
48
49
Incoming calls:
PSTN to Mobile:
,--------------------------------------------------------------------------,
| Fixed PSTN/ISDN Gateway Home Location PSTN/ISDN Mobile |
| Subscriber exchange MSC Register exchange MSC/VLR Station |
| | | | | | | | |
| |--------->| MSISDN | | | | | |
| | MSISDN |-------->| MSISDN | | | | |
| | | |- - - - ->| | | | |
| | | | MSRN | | | | |
| | | |<- - - - -| | | | |
| | | | MSRN | | | | |
| | | |-------------------->| MSRN | | |
| | | | | |--------->| TMSI | |
| | | | | | |--------->| |
| | ,---, ,---, | ,---, ,---, | |
| | | S | | S | | | S | | S | | |
| `---' `---' `---' `---' |
| ,---, |
| | S | indicates a switching node. |
| `---' |
`--------------------------------------------------------------------------'
FIGURE 4
Introduction:
Call routing to a roaming mobile is easily performed. The most
general case is shown in Figure 4, where a call from a fixed network
(Public Switched Telecommunications Network or Integrated
Services Digital Network) is placed to a mobile subscriber. Using
the Mobile Subscriber's telephone number (MSISDN, the ISDN
numbering plan specified in the ITUT E.164 recommendation), the
49
50
call is routed through the fixed land network to a gateway MSC for
the GSM network (an MSC that interfaces with the fixed land
network, thus requiring an echo canceller). The gateway MSC uses
the MSISDN to query the Home Location Register, which returns the
current roaming number (MSRN). The MSRN is used by the
gateway MSC to route the call to the current MSC (which is usually
coupled with the VLR). The VLR then converts the roaming number
to the mobile's TMSI, and a paging call is broadcast by the cells
under the control of the current BSC to inform the mobile.
How incoming calls are made to a mobile
Step One: Contact the Gateway MSC
When someone places a call to a mobile phone, they dial the
telephone number (also called a MSISDN) associated with the phone
user and the call is routed to the mobile phone operator's Gateway
Mobile Switching Centre. The Gateway MSC, as the name suggests,
acts as the "entrance" from exterior portions of the Public Switched
Telephone Network onto the provider's network.
As noted above, the phone is free to roam anywhere in the
operator's network or on the networks of roaming partners,
including in other countries. So the first job of the Gateway MSC is
to determine the current location of the mobile phone in order to
connect the call. It does this by consulting the Home Location
Register (HLR), which, as described above, knows which Visitor
Location Register (VLR) the phone is associated with, if any.
Step Two: Determine how to route the call
When the HLR receives this query message, it determines whether
the call should be routed to another number (called a divert), or if it
is to be routed directly to the mobile.
If the owner of the phone has previously requested that all
incoming calls be diverted to another number, known as the Call
Forward Unconditional (CFU) Number, then this number is stored in
the Home Location Register. If that is the case, then the CFU
number is returned to the Gateway MSC for immediate routing to
that destination.
If the mobile phone is not currently associated with a Visited
Location Register (because the phone has been turned off or is not
in range) then the Home Location Register returns a number known
as the Call Forward Not Reachable (CFNRc) number to the Gateway
MSC, and the call is forwarded there. Many operators may set this
50
51
Incoming calls
Data transmission:
The Public Switched Telephone Network (PSTN) is essentially a
collection of interconnected systems for taking an audio signal from
one place and delivering it to another. Older analogue phone
networks simply converted sound waves into electrical pulses and
back again. The modern phone system digitally encodes audio
signals so that they can be combined and transmitted long
distances over fiber optic cables and other means, without losing
signal quality in the process. When someone uses a computer with
a traditional modem, they are encoding a (relatively slow) data
stream into a series of audio chirps, which are then relayed by the
PSTN in the same way as regular voice calls. This means that
computer data is being encoded as phone audio, which is then
being re-encoded as phone system data, and then back to phone
quality audio, which is finally converted back to computer data at
the destination.
GSM voice calls are essentially an extension of the PSTN, dealing
only with audio signals. Behind the scenes, we know these audio
channels happen to be transmitted as digital radio signals.
The GSM standard also provides separate facilities for transmitting
digital data directly, without any of the inefficient conversions back
and forth to audio form. This allows a mobile "phone" to act like any
other computer on the Internet, sending and receiving data via the
Internet Protocol or X.25.
52
53
GSM services:
54
55
Supplementary Services:
GSM supports a comprehensive set of supplementary services that
complement and support the telephony and data services described
above. They are all defined in GSM standards.A partial listing of
supplementary services follows.
Call forwarding: This service gives the subscriber the ability to
forward incoming calls to another number if the called mobile unit is
not reachable, if it is busy, if there is no reply, or if call forwarding is
allowed unconditionally.
Barring of Outgoing Calls: This service makes it possible for a
mobile subscriber to prevent all outgoing calls.
Barring of Incoming Calls: This function allows the subscriber to
prevent incoming calls. The following two conditions for incoming
call barring exist: baring of all incoming calls and barring of
incoming calls when roaming outside the home PLMN.
55
56
Future:
4G technology :
4G can be used simply because unlike other technologies, the
cellular technologies today are classified based upon transmission
rates. As we discussed earlier, difference between 1G and 2G was
56
57
References:
• www.wikipedia.com
• www.google.com
58
59
59