GSM System Architecture

A Public Land Mobile Network (PLMN), includes the following system entities:
· Mobile-services Switching Center (MSC)
· Home Location Register (HLR)
· Visitor Location Register (VLR)
· Equipment Identity Register (EIR)
· Authentication Center (AUC)
· Base Station System (BSS)
- Base Transceiver Station (BTS)
- Base Station Controller (BSC)
· Mobile Station (MS)
· Operation and Maintenance Center (OMC)
· Other Network Elements

Mobile-services Switching Center:

Mobile-services Switching Center (MSC) performs the switching functions for all
mobile stations located in the geographic area covered by its assigned BSSs.
Functions performed include interfacing with the Public Switched Telephone
Network (PSTN) as well as with the other MSCs and other system entities, such
as the HLR, in the PLMN.
Functions of the MSC include:
· Call handling that copes with mobile nature of subscribers (e.g., paging)
· Management of required logical radio-link channel during calls
· Management of MSC-BSS signaling protocol
· Handling location registration and ensuring interworking between Mobile Station and VLR
· Control of inter-BSS and inter-MSC handovers
· Acting as a gateway MSC to interrogate the HLR
· Exchange of signaling information with other system entities
· Standard functions of a local exchange switch in the fixed network (example: charging)
Home Location Register:
The Home Location Register (HLR) contains the identities of mobile subscribers
(called International Mobile Subscriber Identities or IMSIs), their service
parameters, and their location information.
In summary, the HLR contains:
· Identity of mobile subscriber
· ISDN directory number of mobile station
· Subscription information on teleservices and bearer services
· Service restrictions (if any)
· Supplementary services
· Location information for call routing
Visitor Location Register:
The Visitor Location Register (VLR) contains the subscriber parameters and
location information for all mobile subscribers currently located in the
geographical area (i.e., cells) controlled by that VLR.
In summary, the VLR contains:
· Identity of mobile subscriber
· Any temporary mobile subscriber identity
· ISDN directory number of mobile
· A directory number to route calls to a roaming station
· Location area where the mobile station is registered
· Copy of (part of) the subscriber data from the HLR

Equipment Identity Register:

The Equipment Identity Register (EIR) is accessed during the equipment
validation procedure when a mobile station accesses the system. It contains the
identity of mobile station equipment (called International Mobile Station
Equipment Identity or IMEI) which may be valid, suspect, or known to be
fraudulent.

This contains:
· White or Valid list - List of valid MS equipment identities
· Grey or Monitored list - List of suspected mobiles under observation
· Black or prohibited list - List of mobiles for which service is barred

Authentication Center:
The Authentication Center (AUC):
· Contains subscriber authentication data called Authentication Keys (Ki)
· Generates security related parameters needed to authorize service using Ki
· Generates unique data pattern called a CipherKey (Kc) needed for encrypting user speech
and data

Operations and Maintenance Center:

The Operations and Maintenance Center (OMC) is the centralized maintenance
and diagnostic heart of the Base Station System (BSS). It allows the network
provider to operate, administer, and monitor the functioning of the BSS.

Characteristics of the Base Station System (BSS) are:

· The BSS is responsible for communicating with mobile stations in cell areas
· One BSC controls one or more BTSs and can perform inter-BTS and intra-BTS handovers
· The BTS serves one or more cells in the cellular network and contains one or more TRXs
(Transceivers or radio units).
· The TRX serves full duplex communications to the MS.
· In the GSM network implementation of Lucent Technologies the BSC includes the TRAU
(Transcoder/Rate Adapter Unit). The TRAU adapts the transmission bit rate of the A-
interface (64 kbit/s) to the Abis-interface (16 kbit/s).
Note that in the GSM network implementation of Lucent Technologies, the interface between
the BSC and the TRAU is known as the M-interface (which is a proprietary interface).
BSS types are differentiated by the following characteristics:
· The BSS can be an integrated (Intg) BSS or a distributed (Dist) BSS.
An integrated BSS is a BSS, which has the BSC, and BTS functionality located in the same
physical unit. In a distributed BSS, the BTS and BSC are physically separated.
· The BSS can have internally (Int) or externally (Ext) located speech transcoding.
Speech transcoding to 64 kbit/s takes place either in the BSC for BSS types 1, 4 and 5, or
external to the BSS (i.e. the transcoder is co-located with the MSC) for BSS types 2, 6 and 7.
For BSS type 3 transcoding takes place in the BTSs.
· The Abis interface uses multiplexing (Mult) or rate adaptation (RA) on its links.
The first option means that four 16 kbit/s links are multiplexed into one 64 kbit/s channel.
The latter option means that no multiplexing of the 16 kbit/s channels takes place.

Description of Mobile Station:

The Mobile Station (MS) represents the terminal equipment used by the wireless subscriber
supported by the GSM Wireless system. The MS consists of two entities, each with its own
identity:
· Subscriber Identity Module (SIM)
· Mobile equipment
The SIM may be a removable module. A subscriber with an appropriate SIM can access the
system using various mobile equipments. The equipment identity is not linked to a particular
subscriber. Validity checks made on the MS equipment are performed independently of the
authentication checks made on the MS subscriber information.

Functions of a SIM:
The functions of the Subscriber Identity Module (SIM) are:
· Authentication of the validity of the MS when accessing the network
· User authentication
· Storage of subscriber-related information, which can be: data fixed during administrative
phase (e.g., subscriber identification), and temporary network data (e.g., cell location
identity).
Functions of a Mobile Station:
The Mobile Station (MS) performs the following:
· Radio transmission termination
· Radio channel management
· Speech encoding/decoding
· Radio link error protection
· Flow control of data
· Rate adaptation of user data to the radio link
· Mobility management
· Performance measurements of radio link

Types of Mobile Stations:

Mobile stations can come in different power classes, which define the maximum
RF power level that the unit can transmit. For GSM-900 there is five powers classes, for
GSM-1800 there are three power classes. The mobile station maximum output power is
specified in GSM.

Other network elements:

Other optional network elements that the MSC can interface include:
· Billing Center: Each MSC writes call accounting records to local disk memory. The Billing
Center periodically polls the disk records of each MSC to collect the billing data for the
PLMN.
· Service Center: The Service Center interfaces with the MSCs to provide special services,
such as the Short Message Service (SMS), to mobile subscribers in the PLMN.
The Billing Center and Service Center are not a basic part of the GSM system.
Overview of the GSM Interfaces

The GSM uses various interfaces for communication among its network elements.

Mobile wireless communication occurs over the interfaces between the network elements in a
sequential manner. In fig above MS transmits to the BTS, the BTS to the BSC, and the BSC
to the MSC. Communications also occur over the interfaces to the management databases
(HLR, VLR, AuC, and EIR). Communications might traverse multiple MSCs but ultimately
must reach the gateway MSC (GMSC). The GMSC provides the gateway to the public
switched telephone network (PSTN). A separate interface exists between each pair of
elements, and each interface requires its own set of protocols.

In the BSS block, mobile communication occurs over the air interface to the BTS using the
ISDN Link Access Procedure-D mobile (LAP-Dm). This traffic channel carries speech and
data. In this example, voice operates at full-rate 13 kbps (supported by LAP-Dm), and data
operates at full-rate 9.6 kbps.The BTS communicates to the BSC over the Abis interface
using the ISDN LAP-D signaling protocol. The BSC communicates to the GMSC via the
transcoder rate adapter unit (TRAU), which translates between 16 kbps on the BTS side to 64
kbps on the GMSC side. This interface uses the signaling system 7 (SS7) protocol, which
defines call set-up and call services across the interface.

At the NSS, the GMSC is the central node. Link-level traffic and signaling control occurs
over the interface between the GMSC and MSC and the interface to the external network
(PSTN, ISDN or PDN). Different signaling protocols are used on the interfaces. Some NSS
interfaces involve only control signaling protocols with no traffic. For example, no traffic is
generated on the interfaces between the GMSC, HLR, and VLR. Instead, these interfaces
carry only signaling using the Mobile Application Part (MAP) of the SS7 protocol. The MAP
is specified in IS-41 and defines the application layer, signaling protocols, and procedures for
registering mobile users and handling handoffs between cellular systems. The GMSC
establishes call traffic (at 64 kbps) onto the PSTN via the ISDN user part (ISUP), which is an
SS7-based protocol. The GMSC and MSC exchange traffic (over LAP-D at 64 kbps) and use
SS7 (MAP and ISUP) control.

For the connection of the different nodes in the GSM network, different interfaces are defined
in the GSM specifications.
· Air interface or Um-interface
The Air Interface is the interface between the BTS (Base Transceiver
Station) and the MS (Mobile Station). The air interface is required for
supporting:
- Universal use of any compatible mobile station in a GSM network
- A maximum spectral efficiency
· Abis-interface
The Abis-interface is the interface between the BSC (Base Station
Controller) and the BTS. The interface comprises traffic and control
channels. Functions implemented at the Abis-interface are:
- Voice-data traffic exchange
- Signaling exchange between the BSC and the BTS
- Transporting synchronization information from the BSC to the BTS
· A-interface
The A-interface is the interface between the BSC and the MSC.
· Proprietary M-interface
In the GSM network implementation of Lucent Technologies, the BSC
includes the TRAU (Transcoder/Rate Adapter Unit). The TRAU adapts the
transmission bit rate of the A-interface (64 kbit/s) to the Abis-interface (16
kbit/s). The interface between the physical BSC and the TRAU is known as
the M-interface.

GSM Call flows

1. Call from Mobile Station to land line:

1. MS after dialing a number and press send key uses RACH to ask for a signaling channel.
2. The BSC allocates a signaling channel, using AGCH.
3. The MS sends a call setup request through SDCCH, to the MSC/VLR. Over SDCCH, all
signaling takes place. This includes:
Marking the MS status as active in the VLR (if the MS status is not updated earlier).

The Authentication Procedure

Ciphering
Equipment Identification
Sending the called Subscriber number to the network
Checking if the subscriber has service barring of outgoing calls activated.
4. The MSC/VLR instructs the BSC to allocate an idle TCH. The BTS and MS are told to
tune to the TCH.
5.The MSC/VLR forwards the called number to an exchange in the PSTN, which establishes
a connection to the subscriber.
6. If the called subscriber answers, the connection is established.

2. Call from PSTN to MS:

The main difference between a call to an MS and a call from

an MS is that, the exact location of MS is unknown in the
call to MS case. Hence, the MS must be located using paging
before a connection can be established.

1. The PSTN subscriber dials the MS?s telephone number (MSISDN), the MSISDN is
analyzed in the PSTN, which identifies that this is a call to a mobile network
subscriber. A connection is established to the MS?s home GMSC.
2. The GMSC analyzes the MSISDN to find out which HLR, the MS is registered in, and
queries the HLR for information about how to route the call to the serving MSC/VLR.
3. The HLR translates MSISDN into IMSI, and determines which MSC/VLR is currently
serving the MA. The HLR also checks if the service, ?call forwarding to C-number? is
activated, if so, the call is rerouted by the GMSC to that number.
4. The HLR requests an MSRN from the serving MSC/VLR.
5. The MSC/VLR returns an MSRN via HLR to the GMSC.
6. The GMSC analyses the MSRN and routes the call to the
MSC/VLR.
7. The MSC/VLR knows which LA the Ms is located in. A paging message is sent to the
BSC?s controlling the LA.
8. When the MS detects the paging message to the BTS?s in the desired LA. The BTS?s
transmit the message over the air interface using PCH. To page the MS, the network uses an
IMSI or TMSI valid only in the current MSC/VLR service area.
9. When the MS detects the paging message, it sends a request on RACH for a SDCCH.
10. The BSC provides a SDCCH, using AGCH.
11. SDCCH is used for the call set-up procedures. Over SDCCH all signaling preceding a call
takes place. This includes:
Marking the MS as active in the VLR
The authentication procedure
Start ciphering
Equipment identification
12. The MSC/VLR instructs the BSC/TRC to allocate an idle TCH. The BTS and MS are told
to tune to the TCH. The mobile phone rings. If the subscriber answers, the connection is
established.

3. Call from Mobile to mobile

1.MS after dialing a number and press send key uses RACH to
ask for a signaling channel.
2.The BSC allocates a signaling channel, using AGCH.
3.The MS sends a call setup request through SDCCH, to the MSC/VLR. Over SDCCH, all
signaling takes place. This includes:
Marking the MS status as active in the VLR (if the MS status isnot updated earlier).
The Authentication Procedure
Ciphering
Equipment Identification
Sending the called Subscriber number to the network
Checking if the subscriber has service barring of outgoing
calls activated.

4. The MSC/VLR instructs the BSC to allocate an idle TCH. The BTS and MS are told to
tune to the TCH.
5. The MSISDN is analyzed in the GMSC, which identifies that this is a call to a mobile
network subscriber. A connection is established to the MSs home GMSC.
6. The GMSC analyzes the MSISDN to find out which HLR, the MS is registered in, and
queries the HLR for information about how to route the call to the serving MSC/VLR.
7.The HLR translates MSISDN into IMSI, and determines whichMSC/VLR is currently
serving the MA. The HLR also checks ifthe service, ?call forwarding to C-number? is
activated, ifso, the call is rerouted by the GMSC to that number.
8.The HLR requests an MSRN from the serving MSC/VLR.
9.The MSC/VLR returns an MSRN via HLR to the GMSC.
10.The GMSC analyses the MSRN and routes the call to the
MSC/VLR.
11.The MSC/VLR knows which LA the Ms is located in. Apaging message is sent to the
BSC?s controlling the LA.
12. When the MS detects the paging message to the BTS?s in the desired LA. The BTS?s
transmit the message over the air interface using PCH. To page the MS, the network uses an
IMSI or TMSI valid only in the current MSC/VLR service area.
13. When the MS detects the paging message, it sends a request on RACH for a SDCCH.
14. The BSC provides a SDCCH, using AGCH.
15. SDCCH is used for the call set-up procedures. Over SDCCH all signaling preceding a call
takes place.

http://www.tutorialspoint.com/gsm/gsm_protocol_stack.htm

GSM Protocol Architecture

The layered model of the GSM architecture integrates and links the peer-to-peer
communications between two different systems. The underlying layers satisfy the services of
the upper-layer protocols. Notifications are passed from layer to layer to ensure that the
information has been properly formatted, transmitted, and received.

The GMS protocol stacks diagram is shown below:

MS Protocols:
The signaling protocol in GSM is structured into three general layers, depending on the
interface.
 • Layer 1:
The physical layer, which uses the channel structures over the air interface.
• Layer 2: The data-link layer. Across the Um interface, the data-link layer is a
modified version of the Link access protocol for the D channel (LAP-D) protocol
used in ISDN, called Link access protocol on the Dm channel (LAP-Dm). Across the
A interface, the Message Transfer Part (MTP), Layer 2 of SS7 is used.
• Layer 3: The third layer of the GSM signaling protocol is divided into three
sublayers:
o Radio Resource management (RR)
o Mobility Management (MM) and
o Connection Management (CM).

The MS to BTS Protocols:

The RR layer oversees the establishment of a link, both radio and fixed, between the MS and
the MSC. The main functional components involved are the MS, the BSS, and the MSC. The
RR layer is concerned with the management of an RR-session, which is the time that a
mobile is in dedicated mode, as well as the configuration of radio channels, including the
allocation of dedicated channels.

The MM layer is built on top of the RR layer and handles the functions that arise from the
mobility of the subscriber, as well as the authentication and security aspects. Location
management is concerned with the procedures that enable the system to know the current
location of a powered-on MS so that incoming call routing can be completed.
The CM layer is responsible for CC, supplementary service management, and Short Message
Service (SMS) management. Each of these may be considered as a separate sublayer within
the CM layer. Other functions of the CC sublayer include call establishment, selection of the
type of service (including alternating between services during a call), and call release.

BSC Protocols:
After the information is passed from the BTS to the BSC, a different set of interfaces is used.
The Abis interface is used between the BTS and BSC. At this level, the radio resources at the
lower portion of Layer 3 are changed from the RR to the Base Transceiver Station
Management (BTSM). The BTS management layer is a relay function at the BTS to the BSC.
The RR protocols are responsible for the allocation and reallocation of traffic channels
between the MS and the BTS. These services include controlling the initial access to the
system, paging for MT calls, the handover of calls between cell sites, power control, and call
termination. The RR protocols provide the procedures for the use, allocation, reallocation,
and release of the GSM channels. The BSC still has some radio resource management in
place for the frequency coordination, frequency allocation, and the management of the overall
network layer for the Layer 2 interfaces.
From the BSC, the relay is using SS7 protocols so the MTP 1-3 is used as the underlying
architecture, and the BSS mobile application part or the direct application part is used to
communicate from the BSC to the MSC.

MSC Protocols:
At the MSC, the information is mapped across the A interface to the MTP Layers 1 through 3
from the BSC. Here the equivalent set of radio resources is called the BSS MAP. The BSS
MAP/DTAP and the MM and CM are at the upper layers of Layer 3 protocols. This
completes the relay process. Through the control-signaling network, the MSCs interact to
locate and connect to users throughout the network. Location registers are included in the
MSC databases to assist in the role of determining how and whether connections are to be
made to roaming users.

Each user of a GSM MS is assigned a HLR that is used to contain the user's location and
subscribed services. A separate register, the VLR, is used to track the location of a user. As
the users roam out of the area covered by the HLR, the MS notifies a new VLR of its
whereabouts. The VLR in turn uses the control network (which happens to be based on SS7)
to signal the HLR of the MS's new location. Through this information, MT calls can be
routed to the user by the location information contained in the user's HLR.

Class 4 and 5 Switching

Tandem or Class 4 switch is used for long distance communications in the PSTN, verses
Class 5 switches which is primarily used to terminate local calls. Tandem is a telephony term
meaning "to connect in series." Thus, a tandem switch connects one trunk to another. A
tandem switch is an intermediate switch or connection between an originating telephone call
or location and the final destination of the call.

VoIP-Enabling a Class 4/5 Switch Network

Before VoIP, wholesale carriers installed Class 4/5 Points Of Presence (POPs) to service a
particular market or application. These switches are traditionally connected via expensive,
dedicated long-haul TDM interconnections.
TDM capacity is fixed and provisioning additional circuits can take upwards of 4-6 months.
The Class 4/5 switches use dedicated TDM interconnections to hand-off traffic between the
various POPs. With carrier rates changing daily, this architecture makes it difficult to quickly
engineer network capacity and manage costs. As VoIP technology matures, it makes sense to
move toward IP interconnection.
To enable these networks with VoIP, wholesale carriers originally deployed either a
Softswitch or discrete PRI to VoIP gateways.

One challenge of using a softswitch for Class 4/5 deployments is that the new packet-based
voice networks use a wide variety of protocols to communicate with various devices. For
example, a softswitch or other device would use SS7 to interface with the PSTN for call
termination on a standard telephone. But the same softswitch-based network would need a
different protocol, like media gateway control protocol (MGCP) or SIP to communicate to a
server or endpoint within the network. Meanwhile, on the PSTN, all communications
between endpoints and network equipment like servers or switches; or between endpoints and
network-based devices simply would be via SS7.

Short Message Service (SMS)

1. Introduction
Short Message Service (SMS) is the technology that enables user to send and receive text
messages via mobile phones. It supports alphanumeric message up to 160 characters, by
packing the 7-bit ASCII characters into 8-bit octets. Message can be typed directly using
cellular phones or via other interfaces such as computers.
2. SMS Service Types
There are two basic types of SMS:
• Point-to-point communication
Point-to-point communication service is the service that supports messages between two
subscribers of the SMS services. This is the service type that is used by normal individual
subscribers.
• SMS cell broadcast service (SMSCB)
SMS cell broadcast service is the type of service whereby the same message is broadcast to
multiple SMS subscribers. Such service is only available to the network operators, and is
normally used for messages like weather alerts and news reports.

3. SMS Network Architecture

SMS network architecture is based on the architecture of Global System for Mobile
Communications (GSM).
SMS is a store and forward data services. This means that messages are not sent to the
destination directly. Instead, messages are routed and stored in SMS Message Centre
(SMSMC), and then forwarded to the destination.
An SMSMC provides a number of services, including the regulation and transfer of text
messages between mobile phones. When a subscriber sends a text message to a recipient, the
mobile phone actually sends the message to the SMSMC. The SMSMC stores the message
and then delivers it to the designated recipient when they are available. The SMSMC usually
has a configurable validity period that determine how long it will store the message, and the
user can usually specify a shorter validity period if they want.
In addition to regulation of messages, the SMSMC also handles any charging that needs to
take place. In general, there is at least one SMSMC per network.

To understand how the SMS travels from the mobile phone to the SMSC please take a look at
Figure. On this figure you can see which protocols are used and which GSM network entities
take place in the communication process. As you can see, the mobile phone (Mobile station)
transmits the SMS message to the GSM base station (BTS) through a wireless link. After this
the message goes though the backbone network of the service provider. The Mobile
Switching Center (MSC), the Home Location Register (HLR) and optionally the Visitor
Location Register (VLR) is used to find out the appropriate Short Message Service Center
(SMSC) that will store and forward the message when the receiving party becomes available.
 SMS transportation

4. Conclusion
This article aims to provide an introductory guide to the Short Message Service (SMS) which
is part of the GSM specification. The limit in size of SMS is 160 characters if purely Latin
alphabets are used. If non Latin alphabets such as Chinese characters are used, the limit will
be 70 characters.

MOBILE TERMINATING SMS FLOW

 1.The Short message is transferred from SC to SMS-GMSC
2.SMS-GMSC queries the HLR(SRI) and receives the routing information for the mobile
subscriber (SRI-ACK).
3. The SMS-GMSC sends the short message to the MSC using the forwardShortMessage
operation(FSM).
4. The MSC retrieves the subscriber information from the VLR. This operation may include
an authentication procedure.
5. The MSC transfers the short message to the mobile station.`
6. The MSC returns the outcome of the forwardShortMessage operation to the SMS-
GMSC(FSM-ACK).
7. If requested by the SMC, the SMSC returns a status report indicating delivery of the short
message.

MOBILE ORGINATING SMS FLOW

1.
T
h
e

mobile station transfers the short message to the MSC.

2. The MSC queries the VLR to verify that the message transfer does not violate the
supplementary services invoked or the restrictions imposed on the subscriber.

3. The MSC sends the short message to the SMSC using the forwardShortMessage
operation.

4. The SMSC delivers the short message to the SMC.

5. The SMSC acknowledges the successful outcome of the forwardShortMessage

operation to the MSC.
6. The MSC returns the outcome of the short message operation to the mobile station.

GPRS Architecture

GPRS is a data network that overlays a second-generation GSM network. This data overlay
network provides packet data transport at rates from 9.6 to 171 kbps. Additionally, multiple
users can share the same air-interface resources simultaneously.
Following is the GPRS Architecture diagram:

GPRS attempts to reuse the existing GSM network elements as much as possible, but to
effectively build a packet-based mobile cellular network, some new network elements,
interfaces, and protocols for handling packet traffic are required.
Therefore, GPRS requires modifications to numerous GSM network elements as summarized
below:
GSM Network Element Modification or Upgrade Required for GPRS.
New Mobile Station is required to access GPRS services.
Mobile Station (MS) These new terminals will be backward compatible with
GSM for voice calls.
A software upgrade is required in the existing base
BTS
transceiver site.
The base station controller (BSC) requires a software
upgrade and the installation of new hardware called the
BSC packet control unit (PCU). The PCU directs the data traffic
to the GPRS network and can be a separate hardware
element associated with the BSC.
The deployment of GPRS requires the installation of new
GPRS Support Nodes (GSNs) core network elements called the serving GPRS support
node (SGSN) and gateway GPRS support node (GGSN).
 All the databases involved in the network will require
Databases (HLR, VLR, etc.) software upgrades to handle the new call models and
functions introduced by GPRS.

GPRS Mobile Stations:

New Mobile Station are required to use GPRS services because existing GSM phones do not
handle the enhanced air interface or packet data. A variety of MS can exist, including a high-
speed version of current phones to support high-speed data access, a new PDA device with an
embedded GSM phone, and PC cards for laptop computers. These mobile stations are
backward compatible for making voice calls using GSM.
GPRS Base Station Subsystem:
Each BSC requires the installation of one or more Packet Control Units (PCUs) and a
software upgrade. The PCU provides a physical and logical data interface to the base station
subsystem (BSS) for packet data traffic. The BTS can also require a software upgrade but
typically does not require hardware enhancements.
When either voice or data traffic is originated at the subscriber mobile, it is transported over
the air interface to the BTS, and from the BTS to the BSC in the same way as a standard
GSM call. However, at the output of the BSC, the traffic is separated; voice is sent to the
mobile switching center (MSC) per standard GSM, and data is sent to a new device called the
SGSN via the PCU over a Frame Relay interface.

The GPRS is an enhancement over the GSM and adds some nodes in the network to provide
the packet switched services. These network nodes are called GSNs (GPRS Support Nodes)
and are responsible for the routing and delivery of the data packets to and form the MS and
external packet data networks (PDN).
The most important network nodes added to the existing GSM networks are:
• SGSN (Serving GPRS Support Node).
• GGSN (Gateway GPRS Support Node).
The serving GPRS support node (SGSN) is responsible for routing the packet switched data
to and from the mobile stations (MS) within its area of responsibility. The main functions of
SGSN are packet routing and transfer, mobile attach and detach procedure (Mobility
Management (MM)), location management, assigning channels and time slots (Logical Link
Management (LLM)), authentication and charging for calls. It stores the location information
of the user (like the current location, current VLR) and user profile (like IMSI addresses used
in packet data networks) of registered users in its location register.
The gateway GPRS support node (GGSN) acts as interface between the GPRS backbone and
the external packet data network (PDN). It converts the GPRS packet coming from the SGSN
into proper packet data protocol (PDP) format (i.e. X.25 or IP) before sending to the outside
data network. Similarly it converts the external PDP addresses to the GSM address of the
destination user. It sends these packets to proper SGSN. For this purpose the GGSN stores
the current SGSN address of the user and his profile in its location register.The GGSN also
performs the authentication and charging functions. In general there may be a many to many
relationship between the SGSN and GGSN. However a service provider may have only one
GGSN and few SGSNs due to cost constraints. A GGSN proved the interface to several
SGSNs to the external PDN.

GPRS Support Nodes:

Following two new components, called GPRS support nodes (GSNs), are added:
Gateway GPRS support node (GGSN):
The Gateway GPRS Support Node acts as an interface and a router to external networks. The
GGSN contains routing information for GPRS mobiles, which is used to tunnel packets
through the IP based internal backbone to the correct Serving GPRS Support Node. The
GGSN also collects charging information connected to the use of the external data networks
and can act as a packet filter for incoming traffic.
Serving GPRS support node (SGSN):
The Serving GPRS Support Node is responsible for authentication of GPRS mobiles,
registration of mobiles in the network, mobility management, and collecting information for
charging for the use of the air interface.
Internal Backbone:
The internal backbone is an IP based network used to carry packets between different GSNs.
Tunneling is used between SGSNs and GGSNs, so the internal backbone does not need any
information about domains outside the GPRS network. Signaling from a GSN to a MSC,
HLR or EIR is done using SS7.
Routing Area:
GPRS introduces the concept of a routing area. This is much the same as a Location Area in
GSM, except that it will generally contain fewer cells. Because routing areas are smaller than
Location Areas, less radio resources are used when a paging message is broadcast.

Media Gateway Codec

MGCP (Media Gateway Control Protocol) Line Signaling Support

Media gateways (MGWs) provide bearer paths between voice and packet networks. MGWs
also provide connection control, endpoint control, auditing, and status functions. These
gateways are equipped with voice coders that convert voice into packets, and voice decoders
that convert packets into voice. Connections are grouped in calls, which means that a call can
have one or more connections. One or more Call Agents (CAs) sets up the connections and
calls.
The Cisco BTS 10200 Softswitch connects to a variety of MGWs using Media Gateway
Control Protocol (MGCP), and provides voice over IP (VoIP) bearer path control. This
implementation is based upon the evolving industry standards for MGCP, including the
following MGCP variants:

• MGCP (IETF Version 0.1, Draft 5, February 1999)

• MGCP (IETF RFC 2705, Version 1.0, October 1999)

General Functions of MGCP Interface

The MGCP interface performs the following functions:
• Handles MGW initialization
• Provides endpoint auditing
• Provides MGW fault management
• Provides maintenance and administration of each termination, MGW operational states,
and so forth
• Carries call-control signaling
• Carries media-path control signaling
Special Functions of MGCP Interface
The Cisco BTS 10200 Softswitch supports several special-purpose MGCP-based functions:
• Codec selection service—The process a CA uses to find a common codec (coder/decoder)
type between an originating and terminating call leg so a call can go through. The preferred
codec type for originating and terminating calls is provisioned by the service provider using
the QoS table in the Cisco BTS 10200 Softswitch database. The QoS can be configured for a
subscriber or trunk group (TG). The CA makes a decision on actual codec type based on a
combination of the following conditions:
– Codec types available on the MGW—The MGW dynamic profile (list of supported
codecs reported by MGW) or MGW static codec list (list of supported codecs configured in
the Cisco BTS 10200 Softswitch).
– The codec type provisioned in the QoS table—If a certain codec type is provisioned in
the QoS table but not available in the MGW dynamic profile or TG profile, that type cannot
be used. When no matching code is found, default pulse code modulation mu-law (PCMU)
codec is used.

The following codec types are supported:

– G.711 mu-law (PCMU)—Default value for codec type
– G.711 A-law (PCMA)
– G.723.1 High rate
– G.723.1 Annex A High rate
– G.723.1 Low rate
– G.723.1 Annex A Low rate
– G.729
– G.729 Annex B
– G.726 32K rate
– G.726 24K rate
– G.726 16K rate
– G.728

• Resource Reservation Protocol (RSVP)—An Internet Engineering Task Force (IETF)

protocol for providing integrated services and reserving resources on the IP network. The
service provider provisions the preferred reservation profile (guaranteed, controlled load, or
best effort) in the QoS table. When a reservation is needed on a connection, the Cisco BTS
10200 Softswitch specifies the preferred reservation profile to the gateway. Whether or not
RSVP will be done depends on the configuration of the gateway as well as the preferred
reservation profile specified by the Cisco BTS 10200 Softswitch. If the best effort RSVP
profile is specified, RSVP is not performed.
• Announcement server—A media server that stores network-based announcements and
plays them to a caller upon request from the Cisco BTS 10200 Softswitch. The
announcement server interfaces with the Cisco BTS 10200 Softswitch using MGCP. Every
Cisco BTS 10200 Softswitch in the network requires its own announcement server.
• Dual tone multifrequency (DTMF) signaling—Signaling that is transported across the IP
network under MGCP control.
• Channel-associated signaling (CAS)—Signaling that is used with the MGCP
interworking function.
• Voice over ATM (VoATM) support—Configurable parameters that support ATM
extensions (AAL1, AAL2, and AAL5) on MGCP.
GSM call billing

In the United States and Canada, callers pay the cost of connecting to the Gateway MSC of
the subscriber's phone company, regardless of the actual location of the phone. As mobile
numbers are given standard geographic numbers according to the North American
Numbering Plan, callers pay the same to reach fixed phones and mobile phones in a given
geographic area. Mobile subscribers pay for the connection time (typically using in-plan or
prepaid minutes) for both incoming and outgoing calls. For outgoing calls, any long distance
charges are billed as if they originate at the GMSC, even though it is the Visiting MSC which
completes the connection to the PSTN. Plans that include nationwide long distance and/or
nationwide roaming at no additional charge over "local" outgoing calls are popular.
Mobile networks in Europe, Asia, Australia & Argentina only charge their subscribers for
outgoing calls. Incoming calls are free to the mobile subscriber; however, callers typically
pay a higher rate when calling mobile phones. Special prefixes are used to designate mobile
numbers so that callers are aware they are calling a mobile phone and therefore will be
charged a higher rate.
From the caller's point of view, it does not matter where the mobile subscriber is, as the
technical process of connecting the call is the same. If a subscriber is roaming on a different
company's network, the subscriber, instead of the caller, may pay a surcharge for the
connection time. International roaming calls are often quite expensive, and as a result some
companies require subscribers to grant explicit permission to receive calls while roaming to
certain countries.
When a subscriber is roaming internationally and a call is forwarded to his or her voice mail,
such as when his or her phone is off, busy, or not answered, he or she may actually be
charged for two simultaneous international phone calls—the first to get from the GMSC to
the VMSC and the second to get from the VMSC to the Call Forward Busy or Call Forward
No Reply number (typically the voice mailbox) in the subscriber's country. However, some
networks' GMSCs connect unanswered calls directly, keeping the voice signal entirely within
the home country and thus avoiding the double charge.

Call Handover

In telecommunications there may be different reasons why a handoff (handover) might be

conducted:
• when the phone is moving away from the area covered by one cell and entering
the area covered by another cell the call is transferred to the second cell in order
to avoid call termination when the phone gets outside the range of the first cell;
• when the capacity for connecting new calls of a given cell is used up and an
existing or new call from a phone, which is located in an area overlapped by
another cell, is transferred to that cell in order to free-up some capacity in the first
cell for other users, who can only be connected to that cell;
• in non-CDMA networks when the channel used by the phone becomes interfered
by another phone using the same channel in a different cell, the call is transferred
to a different channel in the same cell or to a different channel in another cell in
order to avoid the interference;
• again in non-CDMA networks when the user behaviour changes, e.g. when a
fast-travelling user, connected to a large, umbrella-type of cell, stops then the call
may be transferred to a smaller macro cell or even to a micro cell in order to free
 capacity on the umbrella cell for other fast-travelling users and to reduce the
potential interference to other cells or users (this works in reverse too, when a
user is detected to be moving faster than a certain threshold, the call can be
transferred to a larger umbrella-type of cell in order to minimise the frequency of
the handoffs due to this movement);
• in CDMA networks a soft handoff (see further down) may be induced in order to
reduce the interference to a smaller neighbouring cell due to the "near-far" effect
even when the phone still has an excellent connection to its current cell;

1 – Intra Cell
2 – Intra BSC/Inter Cell
3- Inter BSC/ Intra MSC
4- Inter MSC

The most basic form of handoff (handover) is when a phone call in progress is redirected
from its current cell (called source) and its used channel in that cell to a new cell (called
target) and a new channel. In terrestrial networks the source and the target cells may be
served from two different cell sites or from one and the same cell site (in the latter case the
two cells are usually referred to as two sectors on that cell site). Such a handoff, in which the
source and the target are different cells (even if they are on the same cell site) is called inter-
cell handoff. The purpose of inter-cell handoff is to maintain the call as the subscriber is
moving out of the area covered by the source cell and entering the area of the target cell.

Types of Handoff

In addition to the above classification of inter-cell and intra-cell classification of handoffs,

they also can be divided into hard and soft handoffs:

• A hard handoff is one in which the channel in the source cell is released and only
then the channel in the target cell is engaged. Thus the connection to the source is
broken before the connection to the target is made -- for this reason such handoffs are
 also known as break-before-make. Hard handoffs are intended to be instantaneous in
order to minimize the disruption to the call. A hard handoff is perceived by network
engineers as an event during the call.
• A soft handoff is one in which the channel in the source cell is retained and used for a
while in parallel with the channel in the target cell. In this case the connection to the
target is established before the connection to the source is broken, hence this handoff
is called make-before-break. The interval, during which the two connections are used
in parallel, may be brief or substantial. For this reason the soft handoff is perceived by
network engineers as a state of the call, rather than a brief event. A soft handoff may
involve using connections to more than two cells, e.g. connections to three, four or
more cells can be maintained by one phone at the same time. When a call is in a state
of soft handoff the signal of the best of all used channels can be utilised for the call at
a given moment or all the signals can be combined to produce a clearer copy of the
signal. The latter is more advantageous, and when such combining is performed both
in the downlink(forward link) and the uplink (reverse link) the handoff is termed as
softer. Softer handoffs are possible when the cells involved in the handoff have a
single cell site.