c


c
 

 {

  

I express my sincere gratitude and thanks to all those who have

directly or indirectly helped me in the completion of this project.

Of all the persons who have helped me, I would first of all like to
thank Mr. Ashok Prasad under whose able guidance I have
completed my project and who helped me at each and every stage
for completion of this project.

I would also like to thank Ms. Neerja Sareen, HR Department who

monitored my progress and arranged various facilities required for
successful completion of the project. I choose this moment to
acknowledge her contribution gratefully.

RAGHAV SEHGAL

c
 

’


INTRODUCTION ................................ ................................ ................................ ................................ . 4
HISTORY ................................ ................................ ................................ ................................ ............ 6
3G Standards ................................ ................................ ................................ ................................ ..... 9
The Role of the 3GPP Organization ................................ ................................ ................................ 9
3G Standards ................................ ................................ ................................ ................................ . 9
UMTS/W-CDMA: ................................ ................................ ................................ .......................... 10
3GPP - 5 UMTS standardisation areas ................................ ................................ .............................. 11
3GPP Radio Access group................................ ................................ ................................ ............. 11
3GPP Core Network group ................................ ................................ ................................ ........... 11
3GPP Terminal group ................................ ................................ ................................ ................... 11
3GPP Services and System Aspects group................................ ................................ ..................... 12
UMTS Architecture ................................ ................................ ................................ .......................... 13
UMTS Architecture ................................ ................................ ................................ ...................... 14
Core Network ................................ ................................ ................................ .............................. 15
NODE DESCRIPTION ................................ ................................ ................................ ..................... 15
NODE OVERVIEW ................................ ................................ ................................ ......................... 16
Mobile switching center (MSC) ................................ ................................ ................................ .... 16
Mobile switching centre server (MSCS) ................................ ................................ ........................ 17
Home location register (HLR) ................................ ................................ ................................ ....... 19
Authentication centre (AUC) ................................ ................................ ................................ ........ 20
Visitor location register (VLR) ................................ ................................ ................................ ....... 22
Other GSM core network elements connected to the VLR................................ ........................ 22
Equipment identity register (EIR) ................................ ................................ ................................ . 23
Billing centre (BC) ................................ ................................ ................................ ........................ 23
Short message service centre (SMSC)................................ ................................ ........................... 24
Multimedia messaging service centre (MMSC)................................ ................................ ............. 24
Voicemail system (VMS)................................ ................................ ................................ ............... 24
3G Networking Protocols ................................ ................................ ................................ ................. 27
UTRAN ................................ ................................ ................................ ................................ ......... 27
Evolution from 2G - 2.5G - 3G ................................ ................................ ................................ .......... 29
3G FREQUENCY RANGE ................................ ................................ ................................ .................... 30
APPLICATIONS OF 3G ................................ ................................ ................................ ....................... 31
CONCLUSION ................................ ................................ ................................ ................................ ... 32

c
 


’
 

3G or Third Generation technology is a convergence of various Second Generation

telecommunication systems. The technology is intended for SMARTPHONES - multimedia
cell phones. Video broadcasting and other e-commerce services such as, stock transactions
and e-learning will now be made possible much faster. It offers 3 Mbps speed for
downloading, which is very high as compared to that of the 2G technology. 3G technology
provides infrastructure for internet surfing, downloading, e -mail attachment downloading,
audio-video conferencing, fax services and many other broadband applications.

3G standard is also known as IMT-2000, the International Tele communications

Union (ITU) has endorsed five different modes of RF interface, and three major types of
terrestrial infrastructure (also known as the "Radio Access Network", or "RAN"). Multi-mode
phones will be technically and economically feasible, hence enabling true global roaming .
The three major types of RAN are based on 2nd generation systems. Terminology is still
evolving, and varies somewhat between countries, but they are generally referred to as
UMTS W-CDMA and IS-2000 (previously cdma2000).

UMTS W-CDMA is based on an evolution of the GSM (MAP) RAN, and is the most
common system deployed globally, supported by the largest number of NEMs and SPs. The
body known as 3G Partnership Project (3GPP) has been chartered by the ITU to develop the
UMTS W-CDMA specifications. UMTS W-CDMA uses Asynchronous Transfer Mode (ATM) to
connect the network components in the RAN, and ATM Adaptation. Layer Type 2 (AAL-2) to
transport the voice and data.

c
 

 *

 
    
     

c
 

Œ

The first pre-commercial 3G network was launched by NTT DoCoMo in Japan
branded FOMA, in May 2001 on a pre -release of W-CDMA technology. The first commercial
launch of 3G was also by NTT DoCoMo in Japan on 1 October 2001, although it was init ially
somewhat limited in scope, broader availability was delayed by apparent concerns over
reliability. The second network to go commercially live was by SK Telecom in South Korea on
the 1xEV-DO technology in January 2002. By May 2002 the second South Korean 3G
network was by KT on EV-DO and thus the Koreans were the first to see competition among
3G operators.

The first European pre-commercial network was at the Isle of Man by Manx
Telecom, the operator then owned by British Telecom, and the first commercial network i n
Europe was opened for business by Telenor in December 2001 with no commercial handsets
and thus no paying customers. These were both on the W -CDMA technology.

The first commercial United States 3G network was by Monet Mobile Networks, on
CDMA2000 1x EV-DO technology, but this network provider later shut down operations. The
second 3G network operator in the USA was Verizon Wireless in October 2003 also on
CDMA2000 1x EV-DO. AT&T Mobility is also a true 3G network, having completed its
upgrade of the 3G network to HSUPA.

The first pre-commercial demonstration network in the southern hemisphere was

built in Adelaide, South Australia by m.Net Corporation in February 2002 using UMTS on
2100 MHz. This was a demonstration network for the 2002 IT World Congress. The first
commercial 3G network was launched by Hutchison Telecommunications branded as Three
in March 2003.

In Europe, mass market commercial 3G services were introduced starting in March

2003 by 3 (Part of Hutchison Whampoa) in the UK and Italy. The Eur opean Union Council
suggested that the 3G operators should cover 80% of the European national populations by
the end of 2005.

Roll-out of 3G networks was delayed in some countries by the enormous costs of

additional spectrum licensing fees. In many countri es, 3G networks do not use the same
radio frequencies as 2G, so mobile operators must build entirely new networks and license

c
 
 
entirely new frequencies; an exception is the United States where carriers operate 3G
service in the same frequencies as other services. The license fees in some European
countries were particularly high, bolstered by government auctions of a limited number of
licenses and sealed bid auctions, and initial excitement over 3G's potential. Other delays
were due to the expenses of upgrading equipment for the new systems.

By June 2007 the 200 millionth 3G subscriber had been connected. Out of 3 billion
mobile phone subscriptions worldwide this is only 6.7%. In the countries where 3G was
launched first ʹ Japan and South Korea ʹ 3G penetration is over 70%. In Europe the leading
country is Italy with a third of its subscribers migrated to 3G. Other leading countries by 3G
migration include UK, Austria, Australia and Singapore at the 20% migration level. A
confusing statistic is counting CDMA20 00 1x RTT customers as if they were 3G customers. If
using this definition, then the total 3G subscriber base would be 475 million at June 2007
and 15.8% of all subscribers worldwide.

In Canada, Rogers Wireless was the first to implement 3G technology, wit h HSDPA
services in eastern Canada in late 2006. Their subsidiary Fido Solutions offers 3G as well.
Because they were the only incumbent carrier (out of 3) with UMTS/HSDPA capability.
Realizing they would miss out on roaming revenue from the 2010 Winter Ol ympics, Bell and
Telus formed a joint venture and rolled out a shared HSDPA network using Nokia Siemens
technology. Bell launched their 3G wireless lineup on 4 November 2009, and Telus followed
suit a day later on 5 November 2009.

Mobitel Iraq is the first mobile 3G operator in Iraq. It was launched commercially on
February 2007.

China announced in May 2008, that the telecoms sector was re -organized and three
3G networks would be allocated so that the largest mobile operator, China Mobile, would
retain its GSM customer base. China Unicom would retain its GSM customer base but
relinquish its CDMA2000 customer base, and launch 3G on the globally leading WCDMA
(UMTS) standard. The CDMA2000 customers of China Unicom would go to China Telecom,
which would then la unch 3G on the CDMA2000 1x EV -DO standard. Finally in January 2009,
Ministry of industry and Information Technology of China has awarded licenses of all three
standards, TD-SCDMA to China Mobile, WCDMA to China Unicom and CDMA2000 to China

c
 


Telecom. The launch of 3G occurred on 1st October 2009, to coincide with the 60 th
Anniversary of the Founding of the People's Republic of China.

In November 2008, Turkey has auctioned four IMT 2000/UMTS standard 3G licenses
with 45, 40, 35 and 25 MHz top frequencies. Turk cell has won the 45 MHz band with its
Φ358 million offer followed by Vodafone and Avea leasing the 40 and 35 MHz frequencies
respectively for 20 years. The 25 MHz top frequency license remains to be auctioned.

The first African use of 3G technology was a 3G video call made in Johannesburg on
the Vodacom network in November 2004. The first commercial launch of 3G in Africa was by
EMTEL in Mauritius on the W-CDMA standard. North African Morocco operator Wana
launched 3G service in late March 2006.

In 2008, India entered into 3G Mobile arena with the launch of 3G enabled Mobile
and Data services by Bharat Sanchar Nigam Ltd (BSNL) in Bihar (Patna). BSNL is the first
Mobile operator in India to launch 3G services. After that (MTNL) launched 3G in Mumbai &
Delhi. Government owned Bharat Sanchar Nigam Ltd (BSNL) has already been provided with
a 3G license and has been operating its services in 380 cities by the end of March 2010.
Nation wide auction of 3G wireless spectrum in April 2010 has been announced, and 3G
services by private service providers are expected by the September 2010.

c
 

c 


The Role of the 3GPP Organization

IS 2000 UMTS / W-CDMA

We will review some aspects of UMTS/W-CDMA standards and technology and

examine the unique challenges in testing at each of the five stages we have identified.

3G Standards

The International Telecommunications Union (ITU) manages the 3G umbrella

standard known as IMT-2000. This standard endorses five different modes of RF interface,
and two major types of terrestrial infrastructure (known as the Radio Access Network, or
RAN). The intention is for any of the RF modes to work with any of the RAN types.

The two major types of RAN are UMTS/ W-CDMA (predominantly for Europe and
Japan) and IS-2000 (previously cdma2000, predominantly for North America). Scarcity of RF
spectrum is a more serious issue in Japan and Europe.

c
 

 This is driving the more rapid development of UMTS W -CDMA, which is expected to
account for 70% of 3G cellular subscribers worldwide.

UMTS W-CDMA standards proposals are submitted to the ITU by an organization

called 3GPP (Third Generation Partnership Project). 3GPP co -ordinates submissions from a
number of regional standards bodies, such as ARIB, CWTS, ETSI, NTT DoCoMo, T1, TTA, and
TTC.

ñ TS/W-CD


£AN Network Elements (3GPP)

UMTS/W-CDMA: £AN Network Elements

The main components of the UMTS W-CDMA RAN are shown above. The network
elements referred to in the 3GPP specifications are User Equipment, Node B, Radio Network
controller, and Core Network In terface.

Ô User Equipment (also called Mobile Station or Handset): includes mobile cellular
telephones, handheld Personal Digital Assistants (PDA), and cellular modems connected
to PCs.
Ô Node B (also called the Base Station Controller or £adio Base Station): provides the
gateway interface between the handset/RF interface, and the Radio Network Controller
via the Iub interface. It is involved in handover decisions, which are based on RF signal
quality measurements.
Ô £adio Network Controller (£NC): connects to and co-ordinates as many as 150 base
stations. It is involved in managing activities such as hand -over of active calls between
base stations.
Ô Core Network Interface (also called Mobile Switching Center or Mobile Multimedia
Switch): refers to other terrestrial core network infrastructure connected to the RAN
through the Iu interface; for example, the Internet and PSTN.

c
 
 
c

 



  

x £adio Access Network

x Core Network
x Terminals

x Services and System Aspects

x GE£AN

3GPP Radio
ess group

Ô Radio Layer 1, 2 and 3 RR specification

Ô Iub, Iur and Iu Interfaces
Ô UTRAN Operation and Maintenance requirements
Ô BTS radio performance specification
Ô Conformance test specification for testing of radio aspects of base stations
Ô Specifications for radio performance aspects from the system point of view

3GPP Core Network group

Ô Mobility management, call connection control signalling between the user equipment
and the core network.
Ô Core network signalling between the core network nodes.
Ô Definition of inter working functions between the core network and external networks.
Ô Packet related issues.
Ô Core network aspects of the lu interface and Operatio n and Maintenance requirements

3GPP Terminal group

Ô Service capability protocols

Ô Messaging
Ô Services end-to-end inter working
Ô USIM to Mobile Terminal interface
Ô Model/framework for terminal interfaces and services (application) execution
Ô Conformance test specifications of term inals, including radio aspects

c
 

3GPP Servies and System
spets group

Ô Definition of services and feature requirements.

Ô Development of service capabilities and service architecture for cellular, fixed and
cordless applications.
Ô Charging and Accounting
Ô Network Management and Security Aspects
Ô Definition, evolution, and maintenance of overall architecture.

c 

 
  

 
 

 +,,

+,,
  


î
î


  






 
 -
-

 !" #


  
  

 
 
 
&'()**

&'()**
$ %

 

 
Caller

c
 


  
To understand the threats to a network, one must understand the network
infrastructure. UMTS is considered the most important 3G proposal. It is being developed as
an evolution of GSM and therefore bas ed on the GPRS network which is a 2.5G technology
and the UTRA radio interface.

3G network has two main parts

Ô The Radio Access Network (RAN)

Ô The Core Network (CN)

The RAN consists of the existing GPRS/GSM RAN system which is connected to the
Packet Switched Network (PS-CN) and also to the circuit switched network (CS-CN). The PS-
CN will eventually connect to the UTRAN system as part of the full transition to 3G. The
UTRAN consists of subsystems, with each subsystem consisting of one Radio Network

c
 

Controller (RNC) which is connected to several Base Transceiver Stations (BTN). The GRPS
RAN has a similar architecture.

The Core Network consists of the PS-CN and the CS-CN. The PS-CN consists of several
information servers, the SGSN and the GGSN. Each SGSN connects one or more RSC and BSC
with the PS-CN. Its functionality includes access control, mobility manageme nt, paging and
route management. The GGSN is the logical gateway to the Internet. The BG interface can
be used to connect to another PS -CN or to another carrier. The information servers provide
several functions. The Home Location Register (HLR) maintains subscriber information and
the Authentication Center (AuC) maintains authentication information. There are also IP
based servers such as DNS, DHCP and RADIUS servers which interact with the SGSN/GGSN
and provide control and management functions.

ñ TS
rhiteture

A UMTS network consist of three interacting domains; Core Network (CN), UMTS
Terrestrial Radio Access Network (UTRAN) and User Equipment (UE). The main function of
the core network is to provide switching, routing and transit for user traffic. Cor e network
also contains the databases and network management functions. The basic Core Network
architecture for UMTS is based on GSM network with GPRS. All equipment has to be
modified for UMTS operation and services. The UTRAN provides the air interface access
method for User Equipment. Base Station is referred as Node -B and control equipment for
Node-B's is called Radio Network Controller (RNC). UMTS system page has an example, how
UMTS network could be build. It is necessary for a network to know the approximate
location in order to be able to page user equipment. Here is the list of system areas from
largest to smallest.

Ô UMTS systems (including satellite)

Ô Public Land Mobile Network (PLMN)
Ô MSC/VLR or SGSN
Ô Location Area
Ô Routing Area (PS domain)
Ô UTRAN Registration Area (PS domain)
Ô Cell

c
 

Ô Sub cell

Core Network

The Core Network is divided in circuit switched and packet switched domains. Some
of the circuit switched elements are Mobile services Switching Centre (MSC), Visitor location
register (VLR) and Gateway MSC. Packet switched elements are Serving GPRS Support Node
(SGSN) and Gateway GPRS Support Node (GGSN). Some network elements, like EIR, HLR,
VLR and AUC are shared by both domains.

The architecture of the Core Network may change when new services and features
are introduced. Number Portability DataBase (NPDB) will be used to enable user to change
the network while keeping their old phone number. Gateway Location Register (GLR) may
be used to optimise the subscriber handling between network boundaries. MSC, VLR and
SGSN can merge to become a UMTS MSC

NODE DESCRIPTION

Ô User Equipment: Sometimes called a Mobile Station. A more general name for a handset.
This could be one of many conceivable devices, e.g. a mobile cellular telephone, a
handheld Personal Digital Assistant (PDA), or a cellular modem connected to a PC.

c
 

Ô Node B: This is the name given by the 3GPP specifications, to the entity which in real -life
is usually called the Base Station Controller or Radio Base Station. This device provides
the gateway between the RF interface to the handset, and RAN.
Ô £adio Network Controller : The RNC connects to and co -ordinates as many as 150 base
stations. It is involved in making decisions and implementing Diversity Hand Over (DHO),
which is a process where decisions are made on which base stations will be used to
communicate to and from the user equipment.
Ô Core Network Interface : ͞Core Network" is the name given by 3GPP to the rest of the
terrestrial core network infrastructure connected to the RAN through the Iu interface.
The gateway device is usually called a Mobile Switching Centre, or Mobi le Multimedia
Switch, and is the gateway into the various terrestrial core networks such as ATM, IP -
Over-SDH, and the PSTN.

NODE OVERVIEW

Network switching subsystem (NSS) (or GSM core network) is the component of a
GSM system that carries out call switching and mobility management functions for mobile
phones roaming on the network of base stations. It is owned and deployed by mobile phone
operators and allows mobile devices to communicate with each other and telephones in the
wider Public Switched Telephone Network or (PSTN). The architecture contains specific
features and functions which are needed because the phones are not fixed in one location.

The NSS originally consisted of the circuit-switched core network, used for traditional
GSM services such as voice calls, SMS, and circuit switched data calls. It was extended with
an overlay architecture to provide packet-switched data services known as the GPRS core
network. This allows mobile phones to have access to services such as WAP, MMS, and
Internet access.

All mobile phones manufactured today have both circuit and packet based ser vices,
so most operators have a GPRS network in addition to the standard GSM core network.

obile swithing enter ( SC)

c
 
 
 The mobile switching center (MSC) is the primary service delivery node for GSM,
responsible for routing voice calls and SMS as well as other services (such as conference
calls, FAX and circuit switched data).

The MSC sets up and releases the end-to-end connection, handles mobility and
hand-over requirements during the call and takes care of charging and real time pre-paid
account monitoring.

In the GSM mobile phone system, in contrast with earlier analogue services, fax and
data information is sent directly digitally encoded to the MSC. Only at the MSC is this re-
coded into an "analogue" signal (although actually this will almost certainly mean sound
encoded digitally as PCM signal in a 64-kbit/s timeslot, known as a DS0 in America).

There are various different names for MSCs in different contexts which reflects their
complex role in the network, all of these terms though could refer to the same MSC, but
doing different things at different times.

The gateway MSC (G-MSC) is the MSC that determines which visited MSC the
subscriber who is being called is currently located. It also interfaces with the PSTN. All
mobile to mobile calls and PSTN to mobile calls are routed through a G-MSC. The term is
only valid in the context of one call since any MSC may provide both the gateway function
and the Visited MSC function, however, some manufacturers design dedicated high capacity
MSCs which do not have any BSSs connected to them. These MSCs will then be the Gateway
MSC for many of the calls they handle.

The visited MSC (V-MSC) is the MSC where a customer is currently located. The VLR
associated with this MSC will have the subscriber's data in it.

The anchor MSC is the MSC from which a handover has been initiated. The target
MSC is the MSC toward which a Handover should take place. A mobile switching centre
server is a part of the redesigned MSC concept starting from 3GPP Release 4.

obile swithing entre server ( SCS)

The mobile switching centre server is a soft-switch variant of the mobile switching
centre, which provides circuit-switched calling, mobility management, and GSM services to

c
 


the mobile phones roaming within the area that it serves. MSS functionality enables split
between control (signalling) and user plane (bearer in network element called as media
gateway/MG), which guarantees more optimal placement of network elements within the
network.

MSS and MGW media gateway makes it possible to cross-connect circuit switched
calls switched by using IP, ATM AAL2 as well as TDM. More information is available in 3GPP
TS 23.205.

Ãther GSM core network elements connected to the MSC

The MSC connects to the following elements:

Ô The home location register (HLR) for obtaining data about the SIM and mobile services

ISDN number (MSISDN; i.e., the telephone number).

Ô The base station subsystem which handles the radio communication with 2G and 2.5G

mobile phones.
Ô The UMTS terrestrial radio access network (UTRAN) which handles the radio

communication with 3G mobile phones.

Ô The visitor location register (VLR) for determining where other mobile subscribers are

located.
Ô Other MSCs for procedures such as handover.

Procedures implemented

Tasks of the MSC include:

Ô Delivering calls to subscribers as they arrive based on information from the VLR.

Ô Connecting outgoing calls to other mobile subscribers or the PSTN.

Ô Delivering SMSs from subscribers to the short message service centre (SMSC) and vice

versa.
Ô Arranging handovers from BSC to BSC.

Ô Carrying out handovers from this MSC to another.

Ô Supporting supplementary services such as conference calls or call hold.

Ô Generating billing information.

c
 

Œome loation register (Œ R)

The home location register (HLR) is a central database that contains details of each
mobile phone subscriber that is authorized to use the GSM core network. There can be
several logical, and physical, HLRs per public land mobile network (PLMN), though one
international mobile subscriber identity (IMSI)/MSISDN pair can be associated with only one
logical HLR (which can span several physical nodes) at a time.

The HLRs store details of every SIM card issued by the mobile phone operator. Each
SIM has a unique identifier ca lled an IMSI which is the primary key to each HLR record.

The next important items of data associated with the SIM are the MSISDNs, which
are the telephone numbers used by mobile phones to make and receive calls. The primary
MSISDN is the number used for making and receiving voice calls and SMS, but it is possible
for a SIM to have other secondary MSISDNs associated with it for fax and data calls. Each
MSISDN is also a primary key to the HLR record. The HLR data is stored for as long as a
subscriber remains with the mobile phone operator.

Examples of other data stored in the HLR against an IMSI record is:

Ô GSM services that the subscriber has requested or been given.

Ô GPRS settings to allow the subscriber to access packet services.

Ô Current location of subscriber (VLR and serving GPRS support node/SGSN).

Ô Calls divert settings applicable for each associated MSI SDN.

The HLR is a system which directly receives and processes MAP transactions and
messages from elements in the GSM network, for example, the location update messages
received as mobile phones roam around.

Ãther GSM core network elements connected to the HL£

The HLR connects to the following elements:

Ô The G-MSC for handling incoming calls

Ô The VLR for handling requests from mobile phones to attach to the network

Ô The SMSC for handling incoming SMS

c
 

Ô The voice mail system for delivering notifications to the mobile phone that a message is

waiting
Ô The AUC for authentication and ciphering and exchange of data (triplets)

Procedures implemented

The main function of the HLR is to manage the fact that SIMs and phones move
around a lot. The following procedures are implemented to deal with this:

Ô Manage the mobility of subscribers by means of updating their position in administrative

areas called 'location areas', which are identified with a LAC. The action of a user of
moving from one LA to another is followed by the HLR with a Locatio n area update
procedure.
Ô Send the subscriber data to a VLR or SGSN when a subscriber first roams there.

Ô Broker between the G-MSC or SMSC and the subscriber's current VLR in order to allow

incoming calls or text messages to be delivered.

Ô Remove subscriber data from the previous VLR when a subscriber has roamed away from it.

uthentiation entre (
ñC)

The authentication centre (AUC) is a function to authenticate each SIM card that
attempts to connect to the GSM core network (typically when the phone is powered on).
Once the authentication is successful, the HLR is allowed to manage the SIM and services
described above. An encryption key is also generated that is subsequently used to encrypt
all wireless communications (voice, SMS, etc.) between the mobile phone and the GSM core
network.

If the authentication fails, then no services are possible from that particular
combination of SIM card and mobile phone operator attempted. There is an additional form
of identification check performed on the serial number of the mobile phone described in the
EIR section below, but this is not relevant to the AUC processing.

Proper implementation of security in and around the AUC is a key part of an

operator's strategy to avoid SIM cloning.

c
 
 
 The AUC does not engage directly in the authentication process, but inste ad
generates data known as triplets for the MSC to use during the procedure. The security of
the process depends upon a shared secret between the AUC and the SIM called the Ki. The
Ki is securely burned into the SIM during manufacture and is also securely replicated onto
the AUC. This Ki is never transmitted between the AUC and SIM, but is combined with the
IMSI to produce a challenge/response for identification purposes and an encr yption key
called Kc for use in over the air communications.

Ãther GSM core network elements connected to the AUC

The AUC connects to the following elements:

Ô the MSC which requests a new batch of triplet data for an IMSI after the previous data

have been used. This ensures that same keys and challenge responses are not used
twice for a particular mobile.

The AUC stores the following data for each IMSI:

Ô the

Ô Algorithm id. (the standard algorithms are called A3 or A8, but an operator may choose
a proprietary one).

When the MSC asks the AUC for a new set of triplets for a particular IMSI, the AUC
first generates a random number known as RAND. This RAND is then combined with the Ki
to produce two numbers as follows:

Ô The
 and {  are fed into the A3 algorithm and the signed response (SRES) is
calculated.
Ô The
 and {  are fed into the A8 algorithm and a session key called
 is calculated.

The numbers (RAND, SRES, Kc) form the triplet sent back to the MSC. When a
particular IMSI requests access to the GSM core network, the MSC sends the RAND part of
the triplet to the SIM. The SIM then feeds this number and the Ki (which is burned onto the
SIM) into the A3 algorithm as appropriate and an SRES is calculated and sent back to the
MSC. If this SRES matches with the SRES in the triplet (which it should if it is a valid SIM),
then the mobile is allowed to attach and proceed with GSM services.

c
 

 After successful authentication, the MSC sends the encryption key Kc to the base
station controller (BSC) so that all communications can be encrypted and decrypted. Of
course, the mobile phone can generate the Kc itself by feeding the same RAND supplied
during authentication and the Ki into the A8 algorithm.

The AUC is usually collocated with the HLR, although this is not necessary. Whilst the
procedure is secure for most everyday use, it is by no means crack proof. Therefore a new
set of security methods was designed for 3G phones.

Visitor loation register (V R)

The visitor location register is a temporary database of the subscribers who have
roamed into the particular area which it serves. Each base station in the network is served
by exactly one VLR, hence a subscriber cannot be present in more than one VLR a t a time.

The data stored in the VLR has either been received from the HLR, or collected from
the MS. In practice, for performance reasons, most vendors integrate the VLR directly to the
V-MSC and, where this is not done, the VLR is very tightly linked with the MSC via a
proprietary interface.

Data stored include:

Ô IMSI (the subscriber's identity number).

Ô Authentication data.

Ô MSISDN (the subscriber's phone number).

Ô GSM services that the subscriber is allowed to access.

Ô Access point (GPRS) subscribed.

Ô The HLR address of the subscriber.

  
 


   

The VLR connects to the following elements:

Ô The V-MSC to pass needed data for its procedures; e.g., authentication or call setup.

Ô The HLR to request data for mobile phones attached to its serving area.

Ô Other VLRs to transfer temporary data concerning the mobile when they roam into new

VLR areas. For example, the temporal mobile subscriber identity (TMSI).

c
 

Procedures implemented

The primary functions of the VLR are:

Ô To inform the HLR that a subscriber has arrived in the particular area covered by the

VLR.
Ô To track where the subscriber is within the VLR area (location area) wh en no call is

ongoing.
Ô To allow or disallow which services the subscriber may use.

Ô To allocate roaming numbers during the processing of incoming calls.

Ô To purge the subscriber record if a subscriber becomes inactive whilst in the area of a

VLR. The VLR deletes the subscriber's data after a fixed time period of inactivity and
informs the HLR (e.g., when the phone has been switched off and left off or when the
subscriber has moved to an area with no coverage for a long time).
Ô To delete the subscriber record when a subscriber explicitly moves to another, as

instructed by the HLR.

Equipment identity register (EIR)

The equipment identity register is often integrated to the HLR. The EIR keeps a list of
mobile phones (identified by their IMEI) which are to be banned from the network or
monitored. This is designed to allow tracking of stolen mobile phones. In theory all data
about all stolen mobile phones should be distributed to all EIRs in the world through a
Central EIR. It is clear, however, that there are some countries where this is not in
operation. The EIR data does not have to change in real time, which means that this
function can be less distributed than the function of the HLR. The EIR is a database that
contains information about the identity of the mobile equipment that prevents calls from
stolen, unauthorized or defective mobile stations. Some EIR also have the capability to log
Handset attempts and store it in a log file.

Billing entre (BC)

The billing centre is responsible for processing the toll tickets generated by the VLRs
and HLRs and generating a bill for each subscriber. It is also responsible for generating billing
data of roaming subscriber.

c
 

Short message servie entre (S SC)

The short message service centre supports the sending and reception of text
messages.

ultimedia messaging servie entre ( SC)

The multimedia messaging service centre supports the sending of multimedia

messages (e.g., images, audio, video and their combinations) to (or from) MMS-enabled
Handsets.

Voiemail system (V S)

The voicemail system records and stores voicemails.

Ô £adio Access

Wide band CDMA technology was selected to for UTRAN air interface. UMTS WCDMA is
a Direct Sequence CDMA system where user data is multiplied with quasi -random bits
derived from WCDMA spreading codes. In UMTS, in addition to channelisation, Codes are
used for synchronisation and s crambling. WCDMA has two basic modes of operation:
Frequency Division Duplex (FDD) and Time Division Duplex (TDD). UTRAN interfaces are
shown on UMTS Network page
The functions of Node-B are:

Ô Air interface Transmission / Reception

Ô Modulation / Demodulation
Ô CDMA Physical Channel coding
Ô Micro Diversity
Ô Error Handing
Ô Closed loop power control

The functions of RNC are:

Ô Radio Resource Control

Ô Admission Control
Ô Channel Allocation
Ô Power Control Settings

c
 

Ô Handover Control
Ô Macro Diversity
Ô Ciphering
Ô Segmentation / Reassembly
Ô Broadcast Signalling
Ô Open Loop Power Control

User Equipment

The UMTS standard does not restrict the functionality of the User Equipment in any
way. Terminals work as an air interface counter part for Node-B and have many different
types of identities. Most of these UMTS identity types are taken directly from GSM
specifications.

Ô International Mobile Subscriber Identity (IMSI)

Ô Temporary Mobile Subscriber Identity (TMSI)
Ô Packet Temporary Mobile Subscriber Identity (P -TMSI)
Ô Temporary Logical Link Identity (TLLI)
Ô Mobile station ISDN (MSISDN)
Ô International Mobile Station Equipment Ide ntity (IMEI)
Ô International Mobile Station Equipment Identity and Software Number (IMEISV)

UMTS mobile station can operate in one of three modes of operation:

Ô PS/CS mode of operation: The MS is attached to both the PS domain and CS domain,
and the MS is capable of simultaneously operating PS services and CS services.
Ô PS mode of operation: The MS is attached to the PS domain only and may only operate
services of the PS domain. However, this does not prevent CS -like services to be offered
over the PS domain (like VoIP).
Ô CS mode of operation: The MS is attached to the CS domain only and may only ope rate
services of the CS domain.

UMTS IC card has same physical characteristics as GSM SIM card. It has several
functions:

c
 

Ô Support of one User Service Identity Module (USIM) application (optionally more that
one)
Ô Support of one or more user profile on the USIM
Ô Update USIM specific information over the air
Ô Security functions
Ô User authentication
Ô Optional inclusion of payment methods
Ô Optional secure downloading of n ew applications

c
 
 
c   

  

ñTR
N

Terrestrial Radio Access Network (UTRAN).

The UTRAN provides the connection between the mobile user equipment and the
Internet or Public Switched Telephone Network (PSTN) via an ATM -based transport
infrastructure. 3G networking protocols are involved in processes such as connection
establishment, base station handover, and network timing synchronization. These functions
are required to provide high quality, uninterrupted mobile voice and data services,
independent of the position and movement of the user equipment or RF fade conditions.

Ô 3G Network Infrastructure

Because of its potential to provide high -speed data services, 3G is likely to emerge as
an alternative to existing broadband access technologies such as ADSL and cable. From a
user perspective, 3G is purely an RF technology. However, from a service provider
viewpoint, there is a significant amount of wireline (also called terrestrial) network
infrastructure to install and operate.

The wireline components of the 3G system are referred to collectively as the Radio
Access Network (RAN). The 3G RAN is designed to handle broadband wireless access and
mobility functions, independent of the core network technology. It is responsible for session
engagement and connectivity to the public switched telephone network (PSTN) and
Internet. The 3G infrastructure must also inter-work with existing 2G (for example, GSM,
CDMA) and 2.5G (for example, GPRS) mobile systems.

3G services operate over an ATM infrastructure that is designed to inter-work with

existing circuit-switched and packet-switched public networks. This is achieved by overlaying
3G-specific protocols on an ATM-based transport infrastructure. Functions such as
data/voice multiplexing, QoS management, and connection establishment are based on
existing ATM capabilities, such as the AAL-2 and AAL-5 adaptation layers, and UNI and NNI
signaling protocols.

Additional 3G-specific protocols are required to handle the connection -setup

procedure between the RF (wireless) and terrestrial (wireline) parts of the network. These

c
 


protocols also support mobile-specific features such as diversity handover. This is a complex
procedure that requires co-ordination between signal quality measurements on the RF side,
and multi-connection establishment through the wireline infrastructure.

In this paper, we will focus on development and deployment challenges of the 3G

RAN.

Ô 3GPP Protocols: Multiple Protocol Stacks to Support

The 3GPP specifications define a set of protocols for communication within and
between UMTS W-CDMA radio access network elements. These protocols manage control-
plane functions (for example, signalling required for base station handover) and user-plane
functions (for example, ATM-based multiplexing of voice and data streams from multiple
sources).

The 3GPP protocols sit above the ATM adaptation layers (AAL-2 and AAL-5) and
operate across the Iub, Iu, and Iur interfaces.

Ô The Iub is a physical communication interface between the base station (Node B) and
the Radio Network Controller (RNC). Connection establishment (discussed later) is a 3-
stage process that results in a Radio Access Bearer (RAB) between the RNC and user
equipment (UE). The RAB provides voice and data connectivity to the UE. A different
protocol stack is needed for each stage of operation, either Node B - RNC, or UE - RNC.
Ô The Iu is the communication interface between the RNC and the Core Network
Interface. It supports different protocol stacks for interfacing with either circuit-switched
(for example, PSTN) or packet-switched (for example. Internet) networks.
Ô The Iur is the communication interface between adjacent RNC. It is beyond the scope of
this paper to examine these protocols in detail. However, one message is clear: 3GPP
protocols are very complex system works flawlessly in a functional sense, it will not be
useful commercially if it can only support a small number of users. 3G network elements
and the entire under extreme load conditions.

c
 

Ê 
   
 c 

Common Core Network (CN) Entities:

x AuC = Authentication Centre

x EIR = Equipment Identity Register
x HLR = Home Location Register
x VLR = Visitor Location Register
Note: MSC & SGSN may be integrated to form a single device called the UMSC

3G is an evolution, rather than a revolution, in terms of the principles of mobile

network architecture. The 2G network provides separation between the RFspecific
functions, known as the Base Station Subsystem (BSS), and the Core Network (CN). This
makes the CN relatively unaffected by changes in the RF equipment, such as RF band, or
encoding techniques. This approach is continued in 2.5G and 3G systems.

The 2G core network provides the connection to the circuit -switched Public Switched
Telephone Network (PSTN). The control functions required to achieve this are generally
based on SS7 signalling, commonly used in the PSTN. The basic elements of the 2G system
include the mobile equipment (handset), base station, mobile-services switching centre
(MSC) and gateway into the PSTN (GMSC).

The 2.5G (GPRS) core network adds packet-oriented switching functions that enable
relatively low bit-rate packet data connections to the Internet (typical rates typically in the
range 9.6 kbps, up to a theoretical maximum of 182.4 kbps). The General Packet Radio
Service (GPRS) is a ͞connectionless͟ service, meaning that the Internet connection is
available continuously. It tends to be seen as a migration step to 3G.

The 3G RAN adds an ATM-based transport infrastructure that enables connection

setup capabilities with guaranteed QoS levels. The 3G RAN is designed to interwork with
both circuit-switched and packet-switched core networks. Benefits include more flexible
voice services, higher bit rate data services, and higher service quality levels

c
 

c Ê
Ê ’ Ê

When you read about radio spectrum this means a range of radio frequencies. The
bandwidth of a radio signal is defined as being the difference between the upper and lower
frequencies of the signal. For example, in the case of a voice signal having a minimum
frequency of 300 hertz (Hz) and a maximum frequency of 3,300 Hz, the bandwidth is 3,000
Hz (3 KHz).The amount of bandwidth needed for 3G services could be as much as 15-20
MHz.Over 130 licenses have already been awarded to operators worldwide (as of December
2004), specifying W-CDMA radio access technology that builds on GSM. In Europe, the
license process occurred at the tail end of the technology bubble, a nd the auction
mechanisms for allocation set up in some countries resulted in some extremely high prices
being paid for the original 2100 MHz licenses, notably in the UK and Germany Over the last
few years some operators have written off some or all of the license costs. More recently, a
carrier in Finland has begun using 900 MHz UMTS in a shared arrangement with its
surrounding 2G GSM base stations, a trend that is expected to expand over Europe in the
next 1ʹ3 years.

The 2100 MHz UMTS spectrum allocated in Europe is already used in North America.
The 1900 MHz range is used for 2G (PCS) services, and 2100 MHz range is used for satellite
communications. Regulators have, however, freed up some of the 2100 MHz range for 3G
services, together with the 1700 MHz for the uplink. UMTS operators in North America who
want to implement a European style 2100/1900 MHz system will have to share spectrum
with existing 2G services in the 1900 MHz band.

In India BSNL has started its 3G services since October 2009 beginning with the larger
cities and then expanding over to smaller cities. The 850 MHz and 900 MHz bands provide
greater coverage compared to equivalent 1700/1900/2100 MHz networks, and are best
suited to regional areas where greater distances separate subscriber and base station.

c
 
 


’
 c 

Ô ¬ideo calling With 3G you can now actually see the person on the other side! As long as

both people have a 3G phone you no longer have to imagine what they look like and you
can see them face-to-face via your cell phone͛s screen.

Ô Ãbtaining information and news With 3G technology it is possible to access any site on

the Internet by using your phone as a modem with your laptop. You can use your
favourite search engines to find information on the weather , the daily news, stocks and
shares, or practically any other information you require to ensure that you are
continually on top of things.

Ô E-mail Should you have left your office and forgotten to send an important e -mail, you

are now able to quickly and efficiently perform this function directly by using your cell
phone. Alternatively, you can use your cell phone as a modem to be connected to your
laptop or PDA (Personal Digital Assistant).

Ô Games Since the invention of cell phones, games have always formed a part of mobile

devices. As technology has developed, the games we are able to engage in have become
far more interactive, exciting and entertaining. For those who play games over their
mobile devices for recreation purposes or for those who simply play to pass the time, 3G
now makes it possible to download these games at anytime and from almost anywhere.

Ô *ilm The speed and quality of 3G really contributes to enhancing the quality of film over

mobile devices. One is now able to view film trailers, reviews, and interviews, download
ring tones, wall papers and enter competitions all by means of your cell phone.

Ô Sport With the incredible sound and video quality of your 3G phone you can view

highlights from your favourite matches and you͛ll always have access to the latest
scores.

Ô Music It's now possible for you to download songs, music videos and interviews. You can

even compose your own ring tone through your cell phone if you wish

c
 

’ ’ 
3G wireless technology provides an exciting new development in the way people
communicate with each other. It enables us to use a much more comprehensive range of
communication than previous forms. Because of the greater bandwidth the new technology
offers, there are tremendous benefits to be gained by business and private users. Features
such as high-speed internet connections and the transmission of pictures and sound give
users access to high-quality information wherever they are.3G services will add invaluable
dimension for the integral part of the modern world. Flexible working practices can be
incorporated in organizations where employees need access to a wide range of information
and services via their corporate intranets, whether they are at their own desk or anywhere
else.

In the near future, mobility will not be considered as an add-on: it will become a
fundamental aspect. As the penetration for using Mobile phones continues to rise the
handset manufacturers divert their attention towards manufacturing new and wide variety
of styles and sizes of handsets to meet the individual needs of users.
Development of 3G networks will continue and pick up pace in the near future, the 2nd
generation networks will keep evolving in terms of continuous enhancements and towards
convergence of existing 2G standards. People will be getting same quality of service from a
next-generation phone as they would get from their PCs today.

c