Chapter 1: Introduction

1.1 Introducing GSM

GSM (Global System for Mobile Communication) is amazingly complex, but it obviously works very well, considering that this type of network is the basis for 80% of the cell phones in the world. The general public is primarily aware of their cell phone and perhaps the need to be reasonably close to a cell tower for that phone to work properly. This chapter will address some of the basic communications between the cell phone and the tower. This communication is called the Air Link (or the Um Link).

1.2 Basic Features

1.2.1 Cellular Systems The term cellular is derived from the cells that divide an area into pieces. This is illustrated in Figure 1-1 below. A cell tower (with antennas) is located at the center of each cell in addition to a BTS (Base Transceiver Station). The distance between BTSs is usually about 10 miles, but they can be much closer in urban areas.

Figure 1-1. Cellular Division

Copyright Keely Communications 2006. All rights reserved.

Page 1 of 12

Chapter 1: Introduction
1.2.2 Frequency Reuse This is the process of using the same carrier frequency (channel) in different cells that are geographically separated. The frequency spectrum is valuable because it is needed for a wide variety of commercial, government, and military services. When the distance from one BTS is another sufficiently large the frequency can be reused, thereby increasing the capacity of the network to service more mobile customers. Determining the optimum use of the assigned frequency channels is called frequency planning.

1.2.3

Interference

When the distance between one BTS and another BTS using the same frequency is NOT sufficiently large, a type of interference called co-channel occurs. This is one of many types of interference. Whenever a mobile customer is close enough to a BTS to receive a strong signal and yet has poor signal quality the most likely cause of the problem is some type of interference. A protocol analyzer is a very effective tool for identifying geographic areas having interference problems, a topic that will be covered in Chapter 6. 1.2.4 Shared Frequency Channels

In GSM eight mobile customers share the same frequency (200 KHz bandwidth) channel. Each customer is assigned a different time slot. This process is called TDMA (Time Division Multiple Access). The general process of sharing, by various means is called multiplexing. For comparison with GSM analog systems use a 30 KHz bandwidth channel that is not shared. Each user is assigned a different frequency and this process is called FDMA (Frequency Division Multiple Access). The main competition for GSM networks in the United States is CDMA (Code Division Multiple Access), which uses 1200MHz bandwidth, with users separated by codes rather than time or frequency.

Copyright Keely Communications 2006. All rights reserved.

Page 2 of 12

Chapter 1: Introduction
1.2.5 Assigned Frequencies, Cellular and PCS The only difference between cellular and PCS service is the assigned frequencies. These are the following: 1. Cellular Uplink (mobile to BTS): 824 to 846 MHz 2. Cellular Downlink (BTS to mobile): 870 to 891 MHz 3. PCS Uplink : 1850 to 1910 MHz 4. PCS Downlink: 1930 to 1990 MHz

1.3 Comparison Between GSM and CDMA

1.3.1 CDMA Control Signals. Figure 1.2 shows the signals used in CDMA. The horizontal scale is Walsh Code and the vertical scale is power. Walsh codes are 64 bit binary numbers that are mathematically generated to be orthogonal to each other. This means that they will not interfere with each other. Each mobile customer is assigned a different Walsh code.

Code #0. Pilot Code #32. Synchronization

Code #1 Paging

Other codes used for Traffic

Figure 1-2. Display Photo from Tektronix YBT250, showing Walsh Codes.

Copyright Keely Communications 2006. All rights reserved.

Page 3 of 12

Chapter 1: Introduction
Three of the Walsh Codes are set aside to be control channels. They are: 1. Walsh Code #0 is called the Pilot signal. It is like a lighthouse that constantly sends out a signal, looking for mobile customers. 2. Walsh Code #1 is called the Paging signal. When someone calls a mobile customer or the mobile customer initiates a call, the Paging signal sets up the call. 3. Walsh Code #32 is called the Synchronization signal. It refines the timing sequences.

1.3.2

GSM Control Signals.

GSM uses 10 control signals. Six of them are downlink (BTS to mobile). 1. FCCH - Frequency Control Channel. Like a lighthouse for the base station. Its function is similar to CDMAs Walsh code #0. 2. SCH - Synchronization. Its function is similar to CDMAs Walsh code #32. 3. BCCH - Broadcast Common Control Channel 4. AGCH - Access Grant Channel 5. PCH - Paging Channel. Its function is similar to CDMAs Walsh code #1. 6. CBCH - Cell Broadcast Channel.

Three other control channels that are used for both uplink and downlink. These are: 1. SDCCH (Standalone Dedicated Control Channel), 2. SACCH (Slow Associated Control Channel) 3. FACCH (Fast Associated Control Channel).

One other control channel, called the RACH (Random Access Channel) is used only for the uplink. Its function is to get the attention of the BTS.

Copyright Keely Communications 2006. All rights reserved.

Page 4 of 12

Chapter 1: Introduction
1.3.3 Testing the Air Link.

Figure 1-2 is the display taken from a Tektronix YBT250 Base Station Tester. This instrument measures how well the BTS is communicating with the mobile subscriber (MS) and is testing the Um link. A Protocol Analyzer measures signals between the BTS and the rest of the GSM (or CDMA) network. Section 1.5.2 identifies some of these other links. Many different protocols are used in each link, so using a protocol analyzer to find the needles in these haystacks is an excellent way to learn about protocols.

1.4 Network Topology GSM and CDMA

Network Elements other than the BTS are illustrated in Figure 1.3. 1. In GSM the BSC (Base Station Controller) is the brains of the system because it makes many decisions, that include assigning the following for a mobile customer: BTS, frequency, and time slot. One BSC will manage between 100 and 200 BTSs. A BTS can handle about 60 mobile customers at the same time. 2. There is no BSC in CDMA networks. Some of its functions, such as the assignment of Walsh codes are handled by the BTS. Other BSC functions are handled by the MSC (Mobile Switching Center). CDMA could be said to use decentralized intelligence compared to the centralized intelligence used by GSM. 3. Both GSM and CDMA use an MSC. Typically one MSC will handle all of the calls within a state (such as Washington) for an individual wireless service provider (such as Cingular). The MSC may use more than one BSC. These BSCs are usually placed at the same location as the MSC. Another term commonly used for the MSC is the switch. This is basically a large computer.

Copyright Keely Communications 2006. All rights reserved.

Page 5 of 12

Chapter 1: Introduction
4. The main function of the MSC is to send and receive calls from the PSTN (Public Switched Telephone Network. All wireless and wireline networks in a country (such as the United States) share the PSTN. Wireline service providers also use switches.

Figure 1-3 The GSM and CDMA Networks.

1. MSC stands for Mobile Switching Center 2. BTS stands for Base Transceiver Station. 3. BSC stands for Base Station Controller

Copyright Keely Communications 2006. All rights reserved.

Page 6 of 12

Chapter 1: Introduction
1.5 GSM Network Links
1.5.1 New Network Elements Figure 1-4 identifies some additional network elements not shown in Figure 1-3. The new elements are: 1. STP (Signaling Transfer Point). The term signaling will be covered in Chapter 2. In simple terms signaling messages are control messages used by telephone networks. A Signaling Transfer Point contains all of the intelligence for the entire network used by a network service provider. Each provider has at least two STPs and they located far apart geographically in case of a natural disaster (earthquake, etc). The STPs transfer information between MSCs and the PSTN. 2. CIC (Circuit Identification Code). This identifies a trunk that is used to carry many phone calls. Each phone call is allocated 64 Kbps. The signaling that sets up the phone call follows an entirely different path. This will be covered in Chapter 2. 3. HLR (Home Location Register). This is a database that stores details about individual subscribers of the mobile phone service. 4. ABS (Alternate Billing Service). This is another database used by those who send out and collect bills. 5. SCP (Service Control Point). This database provides a variety of information including 800 number translations. When a customer places an 800 number call, the network must translate this to an number that has an area code, so that the correct destination can be determined.

Copyright Keely Communications 2006. All rights reserved.

Page 7 of 12

Chapter 1: Introduction
1.5.2 GSM Network Links Figure 1-4 identifies some of the network links. These are: 1. A-Link. MSC to STP. This uses a protocol called SS7 that will be covered in Chapter 2. Experiments #1 and #2 concern messages on this link. 2. A-ter. MSC to BSC. This uses one version of a protocol called ISDN that will also be covered in Chapter 2. Experiments #3 and #4 concern messages on this link. 3. A-bis. BTS to BSC. This uses a different version of ISDN than that used for the A-ter link. Experiments #5 and #6 concern messages on this link. 4. Other links. Experiments #7 through #12 use different network elements and links that will be covered later in this book.

Copyright Keely Communications 2006. All rights reserved.

Page 8 of 12

Chapter 1: Introduction
ABS

SCP

HLR

STPs

A-Links

PSTN

A-ter
Voice Trunks , CICs

Abis

BTSs

Figure 1-4. GSM Network Links.

Copyright Keely Communications 2006. All rights reserved.

Page 9 of 12

Chapter 1: Introduction
1.6 Providing Higher Data Rates
Analog cellular systems were called first generation or 1G. The initial deployment of digital systems called GSM and CDMA are called second generation or 2G. These systems both work very for voice but for data they can provide only very slow speeds (about 14 Kbps). The wireless service providers are in the process of providing third generation or 3G systems capable of providing data rates as high as 2.4 Mbps. The timing for the widespread deployment of 3G is closely tied to market conditions. Since 3G services require more bandwidth they also cost mobile phone users more money. All of the major wireless service providers offer an interim type of service, called 2.5G or 2.75 G. These services provide much higher data speed than 2G at much less cost to the mobile phone customer than 3G.

2.5 G has two basic paths, one which is backwards compatible with GSM, and one which is backwards compatible with CDMA. The term backwards compatible means that the customers phone will work for both the new technology and the old technology. Basic characteristics of the two paths to 3G are listed in Table 1-1. Modulation types will be discussed in Chapter 8.

SYSTEM GSM GSM GSM GSM CDMA CDMA CDMA CDMA UMTS

GENERATION

MODULATION BANDWIDTH DATA TYPE RATE 2G GSM 14 Kbps GMSK 200 KHz 2.5 G GPRS 144 Kbps GMSK 200 KHz GPRS/EDGE 2.75 G 288 Kbps 8PSK 200 KHz 3G WCDMA 2.4 Mbps 5 MHz 2G CDMAone 14 Kbps QPSK 1.2 MHz 2.5 G 1XRTT 144 Kbps QPSK 1.2 MHz 2.75 G 1XEVD0 288 Kbps 8PSK 1.2 MHz 3G CDMA2000 2.4 Mbps 5 MHz 3G or 4G UMTS 2.4 Mbps 5 MHz Table 1-1 The Basic Characteristics of the Paths to 3G.

NAME

Copyright Keely Communications 2006. All rights reserved.

Page 10 of 12

Chapter 1: Introduction
1.7 Quality of Service
1.7.1 Quality Metrics Primary indicators of quality of service are: 1. Blocked calls. This measures the ability a customer to make a call without getting a busy signal. 2. Dropped calls. This measures the frequency with which a customer gets involuntarily disconnected while making a call. 3. Voice Quality. Since we have digital systems this can be measured by BER (Bit Error Ratio). 4. Data Errors 5. Data Speed. 1.7.2 Handovers

As a mobile moves it is necessary to hand him/her over from one BTS to another. This handover can be one of the major causes of dropped calls. Consequently both GSM and CDMA systems have methods for improving the handoff. These are: 1. Power Control. Both the BTS and the MS (Mobile Subscriber) have their transmitted power automatically increased as the MS gets farther away from the BTS. This provides for maximum power during handover. 2. Timing Advance. GSM provides a TAI (Timing Advance Indicator) that is based upon the MS to BTS distance due the delay caused by the fact that the speed of light (and Um link signals) is not infinite. 1.7.3 Identifying Geographic Areas that have problems

An exact location for a problem could be automatically placed on a map by using the TAI from 3 base stations.

Copyright Keely Communications 2006. All rights reserved.

Page 11 of 12

Chapter 1: Introduction
1.7.4 Open Architecture, GSM compared to CDMA A European organization called ETSI provided complete documentation for all of the links used by GSM. All BTS and MSC manufacturers provide equipment that complies with these standards. In contrast CDMA uses proprietary links, and manufacturers that are not required to comply with detailed standards. For this reason CDMA service providers use protocol analyzers primarily to troubleshoot A-links. GSM service providers, on the other hand, use protocol analyzers to troubleshoot all of their links.

Copyright Keely Communications 2006. All rights reserved.

Page 12 of 12