1

Global System
for Mobiles
GSM
2
TOPICS
GSM CONCEPTS
GSM SYSTEM ARCHITECTURE
IDENTITIES USED IN GSM
GSM CHANNELS
GSM RADIO LINK
MOBILITY MANAGEMENT
CALL MANAGEMENT
RADIO RESOURCE MANAGEMENT
3
TOPICS
GSM CONCEPTS
GSM SYSTEM ARCHITECTURE
IDENTITIES USED IN GSM
GSM CHANNELS
GSM RADIO LINK
MOBILITY MANAGEMENT
CALL MANAGEMENT
RADIO RESOURCE MANAGEMENT
5
Background to GSM
1G : Advanced Mobile Phone Service (AMPS)
Analog, Circuit Switched, FDMA, FDD
2G : Digital Advanced Mobile Phone Service (D-AMPS)
Digital, Circuit Switched, FDMA, FDD
2G : Global System for Mobile (GSM)
Digital, Circuit Switched, FDMA and TDMA, FDD
2G : Code Division Multiple Access (CDMA)
Digital, Circuit Switched, FDMA, SS, FDD
6
GSM History
7
1982: Groupe Spcial Mobile (GSM)
created
1984: Description of GSM features
1985: List of recommendations settled
1987: Initial MoU (Memorandum of
Understanding) aside the drafting
of technical specifications was
signed by network operators of 13
countries:
1988: Validation and trials, of the radio
interface.
1991: First system trials are
demonstrated at the Telecom 91
exhibition.
1992: Official commercial launch of
GSM service in Europe. First
Launch in Finland
1993: The GSM-MoU has 62
signatories in 39 countries
worldwide.
1995: Specifications of GSM phase 2
are frozen.
1999: GSM MoU joins 3GPP (UMTS)
GPRS Trials begins
2000: 480M GSM subscribers
Worldwide
First GPRS Networks roll out
End 2002: 792M GSM subscribers
Worldwide
Development of the GSM Standard
8
12 SERIES
OPERATION AND
MAINTENANCE
01 SERIES
GENERAL
02 SERIES
SERVICE ASPECTS
03 SERIES
NETWORK ASPECTS
04 SERIES
MS-BSS INTERFACE AND
PROTOCOLS
05 SERIES
PHYSICAL LAYER ON THE
RADIO PATH.
06 SERIES
SPEECH CODING
SPECIFICATIONS
07 SERIES
TERMINAL ADAPTERS
FOR MOBILE STATIONS
11 SERIES
EQUIPMENT AND TYPE
APPROVAL SPECIFICATIONS
10 SERIES
SERVICE INTERWORKING
09 SERIES
NETWORK
INTERWORKING
08 SERIES
BSS TO MSC INTERFACES
GSM Specifications
9
Increasing GSM Data Rates
Transmission
Time
GPRS = General Packet Radio Service
HSCSD = High Speed Circuit Switched Data
EDGE = Enhanced Data rate for GSM Evolution
UMTS = Universal Mobile Telecommunication System
10 sec 1 min 10 min 1 hour 0
UMTS
E/GPRS
ISDN
PSTN
GSM
web e-mail photo
web photo e-mail
web photo
video
clip
report
photo
web photo e-mail
video
clip
report
video
clip
report
video
clip
report
video
clip
report
10
t
h
r
o
u
g
h
p
u
t

k
b
p
s

10 k
100 k
64 k
1 M
2 M
1 k
1998 1999 2000 2001 2002
Time frame
UMTS


GPRS
HSCSD
9.6
14.4
GPRS = General Packet Radio Service
HSCSD = High Speed Circuit Switched Data
EDGE = Enhanced Data rate for GSM Evolution
UMTS = Universal Mobile Telecommunication System
EDGE
Wireless Data Technology Options
11
Circuit mode
Packet mode
AF DH
CG
CG
CG
CG
CG
DH
DH
AF DH
DH
AF
AF
AF
A
B
C
D
E
F
G
H
Circuit-Switched or Packet-Switched
12
Multiple Access Technique
Multiple Access Achieved by dividing the available
radio frequency spectrum, so that multiple users can
be given access at the same time.
FDMA - Frequency Division Multiple Access
( eg: GSM each Frequency channel is 200KHz)
TDMA - Time Division Multiple Access
( eg: GSM each frequency channel is divided into
8 timeslots)
CDMA - Code Division Multiple Access
(eg: IS95- Each User data is coded with a unique
code)

13
Duplex Technique
Duplex - How the up link and Down link of a user
is separated
FDD - Frequency Division Duplex
(eg:In GSM the up link and down link of a user is
separated by 45MHz )
TDD - Time Division Duplex
(the up link and down link of a user will be at the same
frequency but at different Time )

15
What are the types in
GSM Network?
GSM-900 (Channels 125 operating band 900Mhz
carrier spacing 200khz spacing 45Mhz)

GSM -1800 (Channels 374 spacing 95Mhz)

GSM -1900(Used in USA)

16
GSM Band Allocations (MHz)
Carrier frequency = ARFCN = Absolute Radio Frequency Channel Number
Frequencies are in MHz
GSM systems Uplink Downlink Band
Duplex
Spacing
Duplex
channels
GSM 450
GSM 480
GSM 850
450.4-457.6
478.8-486
824-849
460.4-467.6
488.8-496
869-894
2x7.2
2x7.2
2x25
10
10
45
35
35
124
GSM 900
E-GSM (900)
R-GSM (900)
890-915
880-915
876-880
935-960
925-960
921-925
2x25
2x35
2x04
45
45
41
124
174
40
GSM 1800
GSM 1900
1710-1785
1850-1910
1805-1880
1930-1990
2x75
2x60
95
80
374
299
17
Frequency band
Uplink 890 - 915 MHz
Downlink 935 - 960MHz
Duplex Frequency Spacing 45MHz
Carrier separation 200KHz
Frequency Channels 124
Time Slots /Frame(Full Rate) 8
Voice Coder Bit Rate 13Kbps
Modulation GMSK
Air transmission rate 270.833333 Kbps
Access method FDMA/TDMA
Speech Coder RPE-LTP-LPC

GSM System specifications
19
GSM Family Radio Band Spectrum
Uplink
Downlink
880 890 915
1710 1785
925 935 960 1805 1880
MHz
P-GSM
GSM 1800 GSM 1900
1850 1910
1930 1990
R-GSM
876
921
960
960
915
915
E-GSM
Uplink
Downlink
824 849
869 894 MHz
GSM 850
478.8 486
488.8 496
450.4 457.6
460.4 467.6
GSM 450 GSM 480
20
890 MHz 915 MHz 935 MHz 960 MHz
Uplink Downlink
Example:
Channel 48
0 124 channel # 0 124 channel #
Frequency Frequency
Duplex spacing = 45 MHz
Frequency band spectrum = 2 x 25 MHz
Channel spacing = 200 kHz
BTS
Paired Radio Channels in GSM
Case of GSM 900
21
GSM Time Division Multiplex
Frame and Physical Channels
TS TS TS TS TS TS TS TS
0 1 2 3 4 5 6 7
Time
4.615 ms
TDMA frame
Physical channel # 2 = recurrence of time-slot # 2
TDMA frame
0 9.23 ms
Time-slot
(frames repeat continuously)
TS TS TS TS TS TS TS TS
0 1 2 3 4 5 6 7
22
Physical Channel
MS3
//
ARFCN
1
2
124
FDMA
BTS
Without FH
0
TDMAs
TS
7
n
n-1
n+1
MS2
MS1
time
BTS
With FH
23
Radio Link Aspects
From Speech to RF Signal
Blah Blah Blah... Blah... Blah... Blah...
Digitizing and
Source Coding
Channel Coding
Interleaving
Ciphering
Burst Formatting
Modulating Demodulating
Burst De-formatting
Deciphering
De-interleaving
Channel Decoding
Source Decoding
24
GSM Delays Uplink TDMA Frames
Downlink TDMA
T T T T T T T T
R T MS1
R T
MS2
Down
link
Up
link
Fixed transmit
delay of three
time-slots
R R R R R R R R
0 1 2 3 4 5 6 7
The start of the uplink TDMA
is delayed of three time-slots
BTS side
MSs side
BTS
TDMA Frame (4.615 ms)
25
Timing Advance
1 - Propagation Delay
M2
M1
d
1
>>d
2
d
2
BTS Frame reference
MSs transmit
Propagation Delay t
p

TS0 TS1 TS2 TS3 TS4 TS6 TS5 TS7
Bits Overlapping
26
TX BTS CAN WHAT GSM HOW WHEN WHAT
RX BTS yes the ms-isdn
RX MS1 CAN
TX MS1 yes
RX MS2 WHAT
TX MS2 the
RX MS3 GSM
TX MS3 ms-isdn
RX MS4 HOW
TX MS4
RX MS5 WHEN
TX MS5
RX MS6 WHAT
TX MS6
RX MS7
TX MS7
RX MS8
TX MS8
Propagation Delay
D
D
+3TS
TA
Timing Advance
2 - Without Timing Advance: Collision
27
CAN WHAT HOW WHEN WHAT
CAN
WHAT
HOW
WHEN
WHAT
TX BTS
RX BTS
RX MS1
TX MS1
RX MS2
TX MS2
RX MS3
TX MS3
RX MS4
TX MS4
RX MS5
TX MS5
RX MS6
TX MS6
RX MS7
TX MS7
RX MS8
TX MS8
yes
the
Propagation Delay
D
D
+3TS - TA
yes the
Timing Advance = 2 * Propagation Delay
GSM
ms-isdn
ms-isdn
GSM
Timing Advance
3 - With Timing Advance: No Collision
28
Uplink 890 MHz to 915 MHz
Down Link 935 MHz to 960 MHz
25 MHz divided into 125 channels of 200 KHz
bandwidth
890.0 890.2 890.4 914.8 915.0
935.0 935.2 935.4 959.8 960.0
UP
DOWN
Access Techniques
29
Time Division Multiple Access
Each carrier frequency subdivided in time domain
into 8 time slots
Each mobile transmits data in a frequency, in its
particular time slot - Burst period = 0.577 milli secs.
8 time slots called a TDMA frame. Period is .577 * 8
= 4.616 milli secs
0 1 2 3 4 5 6 7
4.616 ms
0.577 ms
Access Techniques ...
30
31
GSM in comparison with other
Standards
GSM gives mobility without any loss in Audio quality
Encryption techniques used gives high security in the
air Interface and also use of SIM.
Bit Interleaving for high efficiency in Transmission.
Variable Power (Power budgeting- extend battery life)
Minimum Interference.
Features-CCS7 Signaling
SMS (Short Message Services)
Emergency Calls
CELL Broadcast
32
TOPICS
GSM CONCEPTS
GSM SYSTEM ARCHITECTURE
IDENTITIES USED IN GSM
GSM CHANNELS
GSM RADIO LINK
MOBILITY MANAGEMENT
CALL MANAGEMENT
RADIO RESOURCE MANAGEMENT
33
AuC
MS
MS
BTS
BTS
BTS
BSC
BSC
MSC
MSC
VLR
VLR
GMSC
HLR
PSTN
EIR
Um
Abis
Abis
A
A
OMC Server
Um
GSM - Network Structure
B
E
E
X.25
C
F
H
X.25
34
GSM Network
OMC
AUC
HLR
MSC
EIR VLR
BSC
BTS
MS
External
PSTN &
PDN N/W

SS
BSS
Switching
System
Base Station
System
MS Mobile Station
BTS Base transceiver System
BSC Base Station Controller
MSC Mobile Switching Center
HLR Home Location Register
VLR Visitor Location Register
EIR Equipment Identity Register
AUC Authentication Center
OMC Operation And Maintenance Center
35
GSM Architecture
HLR
VLR
EIR
AUC
MSC
B
S
C
B
S
C
SMSC
PSTN
VMSC
Mobile
Station
GSM
Air interface
OMCR
TRAU
Base Station System
Network and switching
subsystem
A interface SS7 / speech
SS7
X.25
BTS BTS
BTS
BTS
BTS
BTS
Abis
interface
A
interface
OMCS
36

GSM utilizes two bands of 25 MHz. 890-915
MHz band is used for uplink while the 935-
960 MHz is used for downlink.
The frequency bands are divided into 200
KHz wide channels called ARFCNs (Absolute
Radio Frequency Channel Numbers) i.e.
there are 125 ARFCNs out of which only 124
are used.
Each ARFCN supports 8 users with each user
transmitting / receiving on a particular time
slot (TS).

Fundamentals
124
123
.

2
1
124
123
.

2
1
0 1 2 3 4 5 6 7
0 1 2 3 4 5 6 7
Data burst = 156.25 bit periods = 576.9s

960 MHz
959.8MHz
200KHz
935 MHz
935.2 Mhz
915 MHz
200KHz
45 MHz
Downlink (TDMA frame) = 8 TS
Uplink (TDMA frame)
Delay
TS: Time slot
914.8 MHz
890.2 MHz
890 MHz
DOWNLINK
UPLINK
Therefore 1 TDMA frame = 156.25 x 8 = 1250 bits
and has a duration of 576.92s x 8 = 4.615 ms The technology
37
Channels : differentiating
between Physical and Logical
channels
Physical channels : The combination of an ARFCN
and a time slot defines a physical channel.

Logical channels : These are channels specified by
GSM which are mapped on physical channels.
38
Logical Channels on Air interface
LOGICAL
CHANNELS
COMMON
CHANNELS
DEDICATED
CHANNELS
BROADCAST
CHANNELS
COMMON
CONTROL
CHANNELS
DEDICATED
CONTROL
CHANNELS
TRAFFIC
CHANNELS
FCCH BCCH SCH SDCCH SACCH FACCH
PCH AGCH RACH TCH/F TCH/EFR TCH/H
39
FCCH
Logical channels
Logical channels
Control channels
Traffic channels
BCH
CCCH
DCCH
Half
rate
Full
rate
SCH BCCH
PCH
AGCH RACH
SDCCH SACCH
FACCH
CBCH
40
Frequency plan and importance of
BCCH

B3
B2
B9
B6
B4
B1
Sectored
antennas
MS ( monitoring the
broadcast radio B1 in idle
mode )
F S B B B B .. F S .. .. I
F0 F50 F2 F3 F4 F5 F10 F11 F1

F,S,B exist in time slot 0 of each frame

B7
B8
B5
B10
B11
B12
BPL frequency plan:
Broadcast frequencies :
15 Broadcast channels = 48-62
15 Hopping channels = 32-46

41
What information does Broadcast Control channel
(BCCH) contain?
Serves as a Beacon for the Cell
Country Code (CC) and the Network Code (NC)
Location Area Identity (LAI)
List of neighboring cells which should be monitored by MS
List of frequencies used in the cell
Cell identity
Back
42
Location Updates
Location Updates can be classified into
two:

Periodic Location Updates:
This occurs as per the timer set by the network operator.
If the MS does not perform this update the MSC marks
the MS as Detached on the VLR.

Location Update on a handover:
This occurs if during a handover the MS is moved into a
new Location Area Code (LAC).

43 Back
1. The MS is monitoring the BCCH and has all the decoded
information stored on the SIM ( including the LAC)
2. As soon as the mobile is on a TCH it sends the signal
strength indication on the corresponding SACCH
3. The BSC monitors the signal strengths and on analysis
sends a handoff request on FACCH. The handoff
process is completed on the FACCH.
4. After the completion of call, the MS starts monitoring the
BCCH again. On finding the LAC (stored on SIM) and that
decoded from the BCCH to be different , the MS requests
a Location Update through SDCCH.
44
Mobile Station (MS)
Hand portable unit

Contains Mobile Equipment(ME) and
Subscriber Identity Module (SIM)

45
Mobile Equipment(ME)
Frequency and Time Synchronization
Voice encoding and transmission
Voice encryption/decryption functions
Power measurements of adjacent cells
Display of short messages
International Mobile Equipment Identifier (IMEI)

46
SIM
Portable Smart Card with memory (ROM-6KB to
16KB-A3/A8 algorithm, RAM- 128KB TO 256KB,
EEPROM- 3KB to 8KB )
Static Information
International Mobile Subscriber Identity(IMSI)
Personal Identification Number (PIN)
Authentication Key (Ki)
Dynamic Information
Temporary Mobile Subscriber Identity(TMSI)
Location Area Identity (LAI)
Phone memories, billing information
Ability to store Short Messages received

47
SIM-Card and GSM Mobile
Equipment
G S M
Global GSM Mobility
Card
The Smart Card to use
+
SIM-Card
Contains:
- IMSI
=
48
The SIM-Card Functions
Microchip with stored
user information
Credit Card Size
Permanent data:
- Unique mobile subscriber identity
through IMSI number and PIMSI
for Packet Mode
- Authentication parameter Ki,
- Authentication algorithm A3,
- Generating encryption key Kc
algorithm A8,
- PIN code.
Removable data:
- Temporary Mobile Subscriber Number,
- Location Area Identification
- Routing Area Identification (Packet mode)
SIM-Card
G S M
Global GSM Mobility
Card
The Smart Card to use
25 mm
15 mm
49
Subscriber Identification
Nature
International Mobile Subscriber Identity


Conformity with E212
Mobile Station -
Integrated Services Digital Network Nb

Similar to ISDN,
Conformity with E164/E213
Nb. digits
3 2 max 10 1 to 3 2 to 4 total max 15
* This code does not identify a geographical area
but an operator
MS - ISDN
Format
MCC MNC
MSIN
H1 H2 x x x ......... x x x
CC NDC
SN
M1 M2 x x x x x x x x
Meaning
Mobile
Country
Code
Mobile
Network
Code
Mobile Subscriber
Ident. Nb
H1 H2 = Identity of HLR
within the home PLMN
Country
Code
(where
subscription
has been made)
National
Destination
Code *
Mobile Subscriber
(national definition)
M1 M2 = nbr of logical HLR
IMSI
National Significant Mobile Number
Identify a PLMN
worldwide
Identify the subscriber
of a PLMN
50
Description Stored in SIM Card
Mobile
Country
Code

3 digits
Mobile
Network
Code

2 digits
Mobile Subscriber Identification Number (MSIN)
H1 H2 X X X X X X
10 digits max
Location Area Code
LAC
Temporary Mobile
Subscriber Identity

4 octets
G S M
Global GSM Mobility
Card
The Smart Card to use
MCC
=
208 (France)
234 (G-B)
262 (Germany)
404,405(India)
MNC
=
71(APBSNL)
72(TNBSNL)
20 (Bytel) IMSI = 15 digits max
NMSI
LAI
Mobile
Country
Code

3 digits
Mobile
Network
Code

2 digits
Routing Area Code
RAC
RAI
51
Country
Code

3 digits max
National
Destination
Code
2 or 3 digits
Subscriber Number (SN)
Roaming Number (RN)
HO-number
Must be dialed to
make a call to
mobile
subscriber
Is a PSTN-like
number to track the
MS that hands over
to another MSC
during call-in-state
Is a PSTN-like
number used to
reach a roaming
MS
CC = 33 (France)
091(India)
001(US)
NDC = 9448(BSNL-karnataka)
9845,9880(Airtel)
9886(Hutch)

= 660, 661, 618 (Bytel)
M1 M2 X X X X X X X X X X X X X
10 digits max
Country
Code
National
Destination
Code
Country
Code
National
Destination
Code
MS-ISDN (15 digits max)
MSRN
Description Stored in the Network
52
Descriptor Embodied in the Mobile
Equipment
Type Approval
Code
TAC FAC SNR
SP
Final Assembly
Code
Serial NumbeR (SPare)
IMEI enables the operator to check
the Mobile Equipment Identity
at call setup and make sure
that no stolen or unauthorized MS
is used in the GSM network
53
International Mobile Equipment Identity (IMEI)
Type Approval
Code
TAC FAC SNR
SP
Final Assembly
Code
Serial number (SPare)
IMEI:
*
# 0 6 #
351475 60 926514 4
54
MS Classmark
Revision level
RF power
Encryption algorithm
Frequency
Short message
LoCation Services
MS Positioning Method
8-PSK modulation
Multi-slot class
Multi-band
Classmark
Power classes
Class
GSM
400/850/900
1
2
3
4
5

8 W*
5 W
2 W**
0.8 W
GSM
1800
GSM
1900
1 W**
0.25 W
4 W
1 W**
0.25 W
2 W
* Typical value for car mounted
** Typical value for handheld
Class
GSM
400/850/900
GSM
1800
GSM
1900
E1
E2
E3
2 W
0.5 W
0.2 W
1 W
0.4 W
0.16 W
1 W
0.4 W
0.16 W
For GMSK modulation
For 8-PSK modulation
55
Base Transceiver Station
(BTS)
Handles the radio interface to the mobile station.
Consists of one or more radio terminals for
transmission and reception
Each Radio terminal represents an RF Channel
TRX and MS communicates over Um interface
Received data transcoding
Voice encryption/decryption
Signal processing functions of the radio interface
Uplink Radio channel power measurements

56
Base Station Controller (BSC)
Provides all the control functions and physical links
between the MSC and BTS
External Interfaces
Abis interface towards the BTS
A interface towards the MSC
Monitors and controls several BTSs
Management of channels on the radio interface
Alarm Handling from the external interfaces
Performs inter-cell Handover
Switching from Abis link to the A link
Interface to OMC for BSS Management

57
Mobile Switching Center
(MSC)

Performs call switching
Interface of the cellular network to PSTN
Routes calls between PLMN and PSTN
Queries HLR when calls come from PSTN to mobile
user
Inter-BSC Handover
Paging
Billing

58
Home Location Register
(HLR)
Stores user data of all Subscribers related to the
GMSC
International Mobile Subscriber Identity(IMSI)
Users telephone number (MS ISDN)
Subscription information and services
VLR address
Reference to Authentication center for key (Ki)
Referred when call comes from public land network

59
Visitor Location Register
(VLR)
Database that contains Subscriber
parameters and location information for all
mobile subscribers currently located in the
geographical area controlled by that VLR
Identity of Mobile Subscriber
Copy of subscriber data from HLR
Generates and allocates a Temporary
Mobile Subscriber Identity(TMSI)
Location Area Code
Provides necessary data when mobile
originates call

60
Authentication Center (AuC)
Stores Subscriber authentication data called Ki, a
copy of which is also stored in in the SIM card
Generates security related parameters to authorize a
subscriber (SRES-Signed RESponse)
Generates unique data pattern called Cipher key (Kc)
for user data encryption
Provides triplets - RAND, SRES & Kc, to the HLR on
request.

61
EIR (Equipment Identity
Register)
EIR is a database that contains a list of all valid
mobile station equipment within the network,
where each mobile station is identified by its
International Mobile Equipment Identity(IMEI).
EIR has three databases.,
White list - For all known,good IMEIs
Black list - For all bad or stolen handsets
Grey list - For handsets/IMEIs that are
on observation
62
Interfaces and Protocols
Um
Abis A
C
B
E
D
F
Digital
Networks
POTS
TUP
ISUP
MAP
MAP
MAP
BSSAP LAPD
LAPDm
G
63
GSM Entities and Signaling
Architecture
64
GSM Protocols
CM - Connection Management
MM - Mobility Management
RR - Radio resource
LAPDm - LAPD for mobile
LAPD - Link Access Procedure for D channel
BTSM - BTS Management Part
BSSAP - BSS Application Part (BSC - MSC)
DTAP - Direct Transfer Application Part (MS - MSC)
MAP - Mobile Application Part
MTP - Message Transfer part of SS7
SCCP - Signalling Connection Control Part of SS7
TCAP - Transaction Capabilities Application Part
ISUP - ISDN User Part
65
Functional Plane of GSM
MS BTS BSC MSC/ HLR GMSC
VLR
MS BTS BSC MSC/VLR HLR GMSC
CC
MM
RR
Trans
66
TOPICS
GSM CONCEPTS
GSM SYSTEM ARCHITECTURE
IDENTIFIERS USED IN GSM
GSM CHANNELS
GSM RADIO LINK
MOBILITY MANAGEMENT
CALL MANAGEMENT
RADIO RESOURCE MANAGEMENT
67

68

69
Temporary Mobile Subscriber
Identity [TMSI]
The TMSI is used for the subscribers confidentiality.
It should be combined with the LAI to uniquely
identify a MS.
Since the TMSI has only local significance (that is,
within the MSC/VLR area), the structure may be
chosen by each administration.
The TMSI should not consist of more than four
octets.

70
Mobile Station Roaming
Number[MSRN]
HLR knows in what Service area the subscriber is
located.
In order to provide a temporary number to be used
for routing, the HLR requests the current MSC/VLR to
allocate a Mobile Station Roaming Number(MSRN) to
the called subscriber and to return it.
At reception of the MSRN, HLR sends it to the MSC,
which now can route the call to the VLR where the
called subscriber is currently registered.

71
International Mobile
Equipment Identity [IMEI]
The IMEI is used for equipment identification. An
IMEI
uniquely identifies a mobile station as a piece or
assembly of equipment.
IMEI = TAC + FAC + SNR + sp
TAC= Type Approval Code (6 digits),determined by GSM
body
FAC= Final Assembly Code (2 digits), identifies
themanufacturer
SNR= Serial Number (6 digits), uniquely identifying all
equipment within each TAC and FAC
sp = Spare for future use (1 digit)

72
Location Area Identity
LAI identifies a location area which is a group of
cells..
It is transmitted in the BCCH.
When the MS moves into another LA (detected by
monitoring LAI transmitted on the BCCH) it must
perform a LU.
LAI = MCC + MNC + LAC
MCC= Mobile Country Code(3 digits), identifies the country
MNC= Mobile Network Code(1-2 digits), identifies the GSM-
PLMN
LAC= Location Area Code, identifies a location area within a
GSM PLMN network. The maximum length of LAC is 16
bits,enabling 65536 different location areas to be defined in
one GSM PLMN.


73
TOPICS
GSM CONCEPTS
GSM SYSTEM ARCHITECTURE
IDENTITIES USED IN GSM
GSM CHANNELS
GSM RADIO LINK
MOBILITY MANAGEMENT
CALL MANAGEMENT
RADIO RESOURCE MANAGEMENT
74
Physical channel:
One timeslot of a TDMA-frame on one carrier
is referred to as a physical channel.
There are 8 physical channels per carrier in
GSM,channel 0-7(timeslot 0-7)

Logical channel:
A great variety of information must be
transmitted between BTS and the MS,for e.g.
user data and control signaling.Depending
on the kind of information transmitted we
refer to different logical channels.These logical
channels are mapped on physical
channel.
Channel concept
75
FCCH
Logical channels
Logical channels
Control channels
Traffic channels
BCH
CCCH
DCCH
Half
rate
Full
rate
SCH BCCH
PCH
AGCH RACH
SDCCH SACCH
FACCH
CBCH
76
Broadcast channels BCH
Broadcast Channel-BCH
Alloted one ARFCN & is ON all the time in every cell.
Present in TS0 and other 7 TS used by TCH.
Frequency correction channel-FCCH
To make sure this is the BCCH carrier.
Allow the MS to synchronize to the frequency.
Carries a 142 bit zero sequence and repeats once in every
10 frames on the BCH.
Synchronization Channel-SCH
This is used by the MS to synchronize to the TDMA frame
structure within the particular cell.
Listening to the SCH the MS receives the TDMA frame
number and also the BSIC ( in the coded part- 39 bits).
Repeats once in every 10 frames.
77
Broadcast channels BCH ...
BCH
The last information the MS must receive in order to receive
calls or make calls is some information concerning the cell.
This is BCCH.
This include the information of Max power allowed in the cell.
List of channels in use in the cell.
BCCH carriers for the neighboring cells,Location Area
Identity etc.
BCCH occupies 4 frames (normal bursts) on BCH and
repeats once every Multiframe.
This is transmitted Downlink point to multipoint.
Cell Broadcast Channel - CBCH
Used for the Transmission of generally accessible
information like Short Message Services(SMS)

78
Common Control Channels
CCCH
CCCH-
Shares TS-0 with BCH on a Multiframe.
Random access channel-RACH:
Used by Mobile Station for requesting for a channel. When
the mobile realizes it is paged it answers by requesting a
signaling channel (SDCCH) on RACH. RACH is also used
by the MS if it wants to originate a call.
Initially MS doesnt know the path delay (timing advance),
hence uses a short burst (with a large guard period = 68.25
bits).
MS sends normal burst only after getting the timing advance
info on the SACCH.
It is transmitted in Uplink point to point.
79
Common Control Channels
CCCH ..
Access Grant Channel-AGCH
On request for a signaling channel by MS the network
assigns a signaling channel(SDCCH) through AGCH. AGCH
is transmitted on the downlink point to point.
Paging Channel-PCH
The information on this channel is a paging message
including the MSs identity(IMSI/TMSI).This is transmitted on
Downlink, point-to-multipoint.


80
Dedicated Control Channels-
DCCH
Stand alone dedicated control channel(SDCCH)
AGCH assigns SDCCH as signaling channel on
request by MS.The MS is informed about which
frequency(ARFCN) & timeslot to use for traffic.
Used for location update, subscriber authentication,
ciphering information, equipment validation and
assignment of TCH.
This is used both sides, up and Downlink point-point.


81
Dedicated Control Channels-
DCCH
Slow associated control channel-SACCH
Transmission of radio link signal measurement, power
control etc.
Average signal strengths(RXLev) and quality of service
(RXQual) of the serving base station and of the neighboring
cells is sent on SACCH (on uplink).
Mobile receives information like what TX power it has to
transmit and the timing advance. It is associated with TCH
or SDCCH
Fast associated control channel-FACCH
Used for Hand over commands and during call setup and
release. FACCH data is sent over TCH with stealing flag set
82
Traffic Channels-TCH
TCH carries the voice data.
Two blocks of 57 bits contain voice data in the normal
burst.
One TCH is allocated for every active call.
Full rate traffic channel occupies one physical
channel(one TS on a carrier) and carries voice data
at 13kbps
Two half rate (6.5kbps) TCHs can share one physical
channel.

83
GSM Channels
Control Channels
Traffic Channels
(TCHs)
Full
rate
Half
rate
Dedicated Control
Channels
(DCCHs)
Slow Fast
Downlink
Broadcast
Channels
(BCHs)
Common Control
Channels
(CCCHs)
Downlink Uplink
TCH /F TCH /H FCCH SCH BCCH PCH CBCH RACH AGCH SDCCH SACCH FACCH
Traffic Multiframing Signaling Multiframing Traffic Multiframing
(down uplink)
GSM Channels
84
FACCH
BTS
0 1 2 3 4 5 6 7 TS
MS
FCCH
SCH
BCCH
PCH
AGCH
CBCH
SDCCH
SACCH
TCH
TCH
FACCH
SDCCH
SACCH
FCCH
SCH
BCCH
RACH
PCH
AGCH
RACH
CBCH
Synchronization
Frequency correction
Broadcast control
Access request
Subscriber paging
Answer to Access request
Broadcast info
Dedicated Signaling
Sys InFo 5, 6 + SMS
Traffic (speech data)
Associated Signaling
Associated Signaling
Traffic (speech-data)
Radio Measurement + SMS
Dedicated Signaling
Broadcast info
M.S. Pre-synchronization
Access request
Subscriber paging
Answer to Access request
The Logical Channels on Radio Interface
85
FACCH MESSAGES
Connection establishment from
SDCCH to TCH
End validation of a SDCCH-TCH
commutation
Characteristics of the future used BS
after handover
Connection establishment to BS after
handover
Validation of an handover
SACCH MESSAGES
Measures:
- power level of the communication
- quality level of the communication
- level on the beacon frequency of
the neighboring cells
Timing Advance
Power Control
SMS
TCH MESSAGES
Speech
Data
Handover Access message (uplink)
SDCCH MESSAGES
Request for a SDCCH assignment
Request for the end of channel
assignment
Order of commutation from SDCCH to
TCH
SMS
Logical Channel Description
(1/2)
86
FCCH MESSAGES
no message is sent (all bits 0)
BCCH MESSAGES
System Information type 1, 2, 2
bis
,
2
ter
, 3, 4, 7, 8
(idle mode)
SCH MESSAGES
Frame Number
Base Station Identity Code (BSIC)
AGCH MESSAGES
For dedicated channel assignment:
-frequency number
-slot number
-frequency hopping description
-Timing Advance (1
st
estimation)
-MS identification
PCH MESSAGES
messages containing a mobile
identity for a call, a short message
or an authentication
RACH MESSAGES
Service request:
- emergency call
- answer to an incoming call
- outgoing call
- short message
- call re-establishment
- inscription
CBCH MESSAGES
Specific information
(weather, road information
Logical Channel Description
(2/2)
87
GPRS
CORE
NETWORK
BSC
PCUSN
PDCH = Packet Data
CHannel
PPCH
PAGCH
PNCH
PDTCH
PACCH
PTCCH
PDTCH
PACCH
PTCCH
PBCCH
PRACH
DL
UL
Packet
Common
Control
CHannels
Packet
Traffic
CHannels
PBCCH
GPRS Channels
88
RACH Control parameters
- maxNumberRetransmission
- numberOfSlotsSpreadTrans
- cellBarred
- callReestablishment
- emergencyCallRestricted
- notAllowedAccessClasses
- AccessClassCongestion
BCCH allocation
- Neighboring cells BCCH
frequencies in the same band
Extended BCCH allocation
- Neighboring cells BCCH frequencies in
the same band (complementary list)
- Neighboring cells BCCH frequencies in
the other band

- 2 ter indicator
- 5 ter indicator
LAI
- locationAreaCode
- mobileCountryCode
- mobileNetworkCode
- cellIdentity
SYS INFO 1-4
SYS INFO 2/5
SYS INFO 2bis/5bis
SYS INFO 2ter/5ter
SYS INFO 3-4/6
V10
System Information
SYS INFO: Parameters (1/2)
SYS INFO 3
SYS INFO 6
Cell Identity SYS INFO 3/6
89
Control Channel description
- IMSIAttachDetach
- noOfBlocksForAccessGrant
- noOfMultiframesBetweenPaging
Cell Options
- uplinkPowerControl
- dtxMode (UL)
- CellDtxDownlink (DL)
- radioLinkTimeOut
Cell Selection Parameters
- cellReselectHysteresis
- msTxPwrMaxCCH
- rxLevAccessMin
Cell Reselection Parameters
- cellReselInd
- cellBarQualify
- cellReselectOffset
- temporaryOffset
- penaltyTime
- earlyClassmarkSending
- power offset
SYS INFO 3
SYS INFO 3-4
SYS INFO 3-4
or 7-8
SYS INFO 3
System Information
SYS INFO: Parameters (2/2)
V10
90
0 1 2 3 4 21 22 23 24 25 0 1 2 3 4 46 47 48 49 50
26 traffic frames = 120 ms
1 Hyperframe = 2,715,648 frames= 3h 28 min. 53 s 760 ms
0 1 2 3 5 2042 2043 2044 2045 2046 2047 4
1326
frames
0 1 2 3
46 47 48 49 50 0 1 3 4 2
22 23 25 24
TS
0
TS
1
TS
2
TS
3
TS
5
TS
6
TS
7
TS
0
TS
1
TS
2
TS
3
TS
4
TS
5
TS
6
TS
7
TS
0
TS
1
TS
2
TS
3
TS
4
TS
5
TS
6
TS
7
TS
4
TS
0
TS
1
TS
2
TS
3
TS
4
TS
5
TS
6
TS
7
TS
0
TS
1
TS
2
TS
3
TS
4
TS
5
TS
6
TS
7
Frame
4.615 ms
Control channel Traffic channel
51 x 26 traffic frames = 6.12 s
26 x 51 control frames = 6.12 s
Traffic and Control Multiframing
91
93
Full Rate - Downlink & Uplink
T
: TCH
A
: SACCH
: IDLE
T
i
: TCH
sub-channel no. i
A
i
: SACCH
sub-channel no. i
time
26 frames = 120 ms
T
0
A
0
T
0
T
0
T
0
T
0
T
0
T
0
T
0
T
0
T
0
T
0
T
0
T
1
T
1
T
1
T
1
T
1
T
1
T
1
T
1
T
1
T
1
T
1
T
1
A
1
time
Half Rate - Downlink & Uplink
T A T T T T T T T T T T T T T T T T T T T T T T T
T
26 frames = 120 ms
Logical Channel Mapping
1 - Traffic Channel Combination
94
A : SACCH D : SDCCH
: IDLE
51 frames = 235 ms
A
1
A
2
A
3
A
0
D
7
D
6
D
5
D
4
D
3
D
2
D
1
D
0
A
5
A
6
A
7
A
4
D
7
D
6
D
5
D
4
D
3
D
2
D
1
D
0
time
Downlink
51 frames = 235 ms
A
5
A
6
A
7
A
0
A
4
D
7
D
6
D
5
D
4
D
3
D
2
D
1
D
0
D
7
D
6
D
5
D
4
D
3
D
2
D
1
D
0
A
1
A
2
A
3
time
Uplink
A A A A
Logical Channel Mapping
2 - Dedicated Signaling Channel Combination
95
51 frames = 235.38 ms
Downlink
time
51 frames = 235.38 ms
R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R
Uplink
time
B : BCCH S
: SCH
F
: FCCH
: IDLE
: PCH /
AGCH
C R : RACH
BTS
MS
Physical Channel
ARFCN (n) TS (s)
FCCH
SCH BCCH
PCH/AGCH
Frames repeat continuously
Multiframe
m+1
Multiframe
m-1
Multiframe m
C C F S C C F S C C F S C C C B F S F S B F S C
Logical Channel Mapping
3 - Common Channel Combination
96
A
3
A
2
A
1
D
3
D
2
D
3
D
2
D
1
D
1
D
0
D
0
F S F S F S C C C F S B F S
F S F S F S C C C F S B F S
51 frames = 235 ms
A
0
time
Downlink
R R
R R D
2
D
2
D
1
D
1
D
0
D
0
A
1
A
3
A
0
A
2
R
R
R
R
D
3
D
3
51 frames = 235 ms
time
Uplink
R
R
R
R
R
R
R
R
R
R
R
R
R
R
R
R
R
R
R
R
R
R
R
R
R
R
R
R
R
R
R
R
R
R
R
R
R
R
R
R
R
R
R
R
R
R
A : SACCH
D : SDCCH : IDLE B : BCCH S : SCH F : FCCH
: AGCH
/PCH
C R : RACH
Logical Channel Mapping
4 - Common Channel Combination
97
98
Downlink
message
Uplink
message
Neighboring BTS
(downlink)
Measurement Windows
C C F S C C F S C C F S C C C B F S F S F S
0 1 12 25 0 1 12 25
0 1 10 20 30 40 50 0 1
T A T T T T T T T T T T T T T T T T T T T T T T T T A T T T T T T T T T T T T T T T T T T T T T T T
Mobile
activity
Rx Rx Tx Rx Rx Tx Rx Rx Tx
(n) (n) (n)
Why 26 and 51 Frames per Multiframe?
99
TOPICS
GSM CONCEPTS
GSM SYSTEM ARCHITECTURE
IDENTITIES USED IN GSM
GSM CHANNELS
GSM RADIO LINK
MOBILITY MANAGEMENT
CALL MANAGEMENT
RADIO RESOURCE MANAGEMENT
100
Speech
Source
decoding
Channel
decoding
De-interleaving
Burst deformatting
Deciphering
Demodulation
equalization
Digitizing and
source coding
Channel
coding
Modulation
Ciphering
Burst formatting
Interleaving
Step 1
Step 2
Step 3
Step 4
Transmission
Step 5
Step 6
Diversity
From Speech to Radio Transmission
101
GSM Radio Link
Speech Coding -Done at Transcoder of BSC and MS
The Linear Predictive Coder uses RPE-LTP(Regular Pulse
Excitation- Long Term Prediction)
Converts 64kbps voice to 13kbps(260 bits every 20ms)
Channel Coding - Done at BTS and MS
Uses Convolution Coding and CRC (Cyclic Redundancy
Check)
Converts 13 kbps to 22.8 kbps (456 bits per 20ms)
102
GSM Radio Link
Bit Interleaving - Done at BTS and MS
Encryption - Done at BTS and MS
EX OR data with cipher block, which is generated by
applying A5 Algorithm to the Ciphering Key(Kc)
Multiplexing - Done at BTS
Modulation - Done at BTS and MS
GMSK(Gaussian filtered Minimum Shift Keying)
Phase change of +90 for 0 and -90 for 1
105
Speech Coding
BP A/D
SPEECH
ENCODER
CHANNEL
CODING
LP D/A
SPEECH
DECODER
CHANNEL
DECODING
BAND
PASS
300 Hz -
3.4 kHZ
Every 125 s value is
sampled from analog
signal and quantised by
13 bit word
Data rate = 13/125*10
-6

= 104 kbps
Every 20ms 160 samples
taken
Data rate = 160 * 13/20ms
= 104 kbps
Linear Predictive Coding & Regular
Pulse Excitation Analysis
1. Generates 160 filter coeff
2. These blocks sorted in 4 sequence
1,5,9,37 / 2,6,10----38/
3,7,1139/8,12,1640
3. Selects the sequence with most
energy

So data rate = 104/4 = 26 kbps
Long term prediction analysis
1. Previous sequences stored in memory
2. Find out the correlation between the
present seq. And previous sequences
3. Select the highest correlation sequence
4. Find a value representing the difference
between the two sequences.

Reduces data rate = 26 kbps/2 = 13 kbps
ie 260 bits in 20ms
50 132 78
1A 1B
2
1A = Filter Coeff
block ampl, LTP
params
1B = RPE pointers &
pulses
2 = RPE pulse & filter
params
50 3 132 4
3 crc bits
Four 0 bits for codec
378 coded bits
Conv coding rate = 1/2 delay = 4
78
456 bits in 20 ms = 22.8 kbps
57 x 8 = 456
To modulator
106
C
20 ms 20 ms
A
A
8
A
7
A
6
A
5
B
4
B
3
B
2
B
1
B
8
B
7
B
6
B
5
C
4
C
3
C
2
C
1
57 bits
Information
1 1
CRL CRL
3 3
Tail Tail
26 bits
Training
8 Bursts
8 Sub blocks
of 57 bits
Source coding
Channel coding
Interleaving
Normal
burst
20 ms
B
456 bits
A
456 bits
B
456 bits
C
57 bits
Information
A8
B4
A7
B3
A6
B2
A5
B1
B8
C4
B7
C3
B6
C2
B5
C1
Speech blocks
Codec dependent
Codec dependent
Codec dependent
Channel Processing in GSM
Overview for Full Rate
107
108
C
20 ms 20 ms
A
A
4
A
3
A
2
A
1
B
2
B
1
B
4
B
3
C
4
C
3
C
2
C
1
4 Bursts
4 Sub blocks
of 57 bits
Source coding
Channel coding
Interleaving
20 ms
B
228 bits
A
228 bits
B
228 bits
C
A4
B2
A3
B1
B4
C2
B3
C1
Speech blocks
Codec dependent
Codec dependent
Codec dependent
Normal
burst 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7
Channel Processing in GSM
Overview for Half Rate
109
0 1 2 3 4 5 6 7 8 ... ... 452 453 454 455
0 1 2 3 4 5 6 7
8 9 10 11 12 13 14 15





448 449 450 451 452 453 454 455
5
7

R
o
w
s

Divide 456 bits in 8 sub-blocks
7 6 5 4 3 2 1 0 7 6 5 4 0 1 2 3
reordering
&
partitioning
out
diagonal
interleaving
456
coded bits
burst
b0 b1 b56
b1 b56 b0
bit
interleaving
Interleaving: TCH Full Rate
110
1 frame:
4.615 ms
0 1 2 3 4 5 6 7
Guard
1 57 1 26 57
DATA
156.25 bits duration
(0.577 ms)
Training
sequence
3 3
DATA
8.25
S S
Guard
Band
Burst
148 bits
Burst Formatting
Normal Burst
111
Synchronization Burst
(SCH)
Tail Data Extended Training Sequence Data Tail
156.25 bits duration
(0.577 ms)
3 bits 39 encrypted bits 64 synchronization bits 39 bits 3 bits 8.25 bits
Guard
Period
Frequency Correction Burst
(FCCH)
Tail Data Tail
156.25 bits duration
(0.577 ms)
3 bits 142 fixed bits (0) 3 bits 8.25 bits
Guard
Period
Burst Formats
112
Access Burst
Tail
Training
Sequence
Guard Period Tail
156.25 bits (0.577 ms)
8 bits 36 encrypted bits 68.25 bits 3 bits 41 synch bits
Data
Dummy Burst
Tail Dummy Sequence Training Sequence Dummy Sequence Tail
3 bits 58 mixed bits 26 midamble bits 58 mixed bits 3 bits 8.25 bits
Guard
Period
156.25 bits (0.577 ms)
156.25 bits (0.577 ms)
1 3 bits 57 encrypted bits 1 26 bits 57 encrypted bits 3 bits 8.25 bits
Tail Data Training Sequence Data Tail
Guard
Period
Normal Burst
Burst Formats
113
Plain data: 0 1 1 1 0 0 1 0.....
Ciphering sequence: 0 0 0 1 1 0 1 0.....
XOR:
Ciphered data (transmitted): 0 1 1 0 1 0 0 0.....
Ciphered sequence: 0 0 0 1 1 0 1 0.....
XOR:
Recovered data: 0 1 1 1 0 0 1 0.....
Data S S Data
Burst to be
transmitted
Data S S
Training
sequence
Data
Received
burst
Ciphering
114
Interleaving
57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57
57 57 57 57
57 57 57 57
57 57 57 57
57 57 57 57 57 57 57 57
57 57 57 57 57 57 57 57
57 57 57 57
Encoded speech blocks - Diagonal Interleaving
Even bits
Odd bits
Tb
3
Coded Data
57
F
1
Training Sequence
26
F
1
Coded Data
57
Tb
3
Gp
8.25
Bn-4 Bn-3 Bn-2 Bn-1 Bn Bn+1 Bn+2 Bn+3
57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57
57 57 57 57
57 57 57 57
57 57 57 57
57 57 57 57 57 57 57 57
57 57 57 57
Encoded control channel blocks - Rectangular Interleaving
Even bits
Odd bits
Bn-4 Bn-3 Bn-2 Bn-1 Bn Bn+1 Bn+2 Bn+3
115







Burst
The information format transmitted during one
timeslot in the TDMA frame is called a burst.
Different Types of Bursts
Normal Burst
Random Access Burst
Frequency Correction Burst
Synchronization Burst

116
Normal Burst
T
3
Coded Data
57
S
1
T. Seq.
26
S
1
Coded Data
57
T
3
GP
8.25
Tail Bit(T) :Used as Guard Time
Coded Data :It is the Data part associated with the burst
Stealing Flag :This indicates whether the burst is carrying
Signaling data (FACCH) or user info (TCH).
Training Seq. :This is a fixed bit sequence known both to
the BTS & the MS.This takes care of the
signal deterioration.

156.25 bits 0.577 ms
117
T
3
Training Sequence
41
Coded Data
36
T
3
GP
68.25
Random Access Burst
T
3
Fixed Bit Sequence
142
T
3
GP
8.25
T
3
Coded Data
39
Training Sequence
64
Coded
Data 39
T
3
GP
8.25
Freq. Correc. Burst
Synchronization Burst
156.25 bits 0.577 ms
156.25 bits 0.577 ms
156.25 bits 0.577 ms
118
Transmission on the
radio channels
A timeslot has a duration of .577 m seconds (148 Bits)
8 timeslots(8 x 0.577 = 4.62 ms) form a TDMA frame
If a mobile is assigned one TS it transmits only in this time
slot
and stays idle for the other 7 with its transmitter off, called
bursting
The start on the uplink is delayed from downlink by 3 TS
periods
One TS = duration of 156.25 bits, and its physical contents is
called a burst

0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7
0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7
Downlink
BTS > MS
Uplink
MS > BTS
Offset
119
0 1 2 3 4 5 6 7
0 1 2 3 4 5 6 7
MS1
near
MS2
far
0 1 2 3 4 5 6 7
0 1 2 3 4 5 6 7
At
BTS
0 1 2 3 4 5 6 7
MS1
near
0 1 2 3 4 5 6 7
MS2
far
0 1 2 3 4 5 6 7
0 1 2 3 4 5 6 7
At
BTS
Timing Advance
120
Frames Types On Um
Interface
TDMA Frame
8 Time slots (Burst Period)
Length is 4.62 ms(8 * 0.577ms)
26-TDMA Multiframe
26 TDMA Frames (24 TCH, SACCH, Idle)
120 ms (26 * 4.62ms)
51-TDMA Multiframe
26 TDMA Frames (FCCH, SCH, BCCH, SDCCH, CCCH)
235.6 ms (51 * 4.62ms)
121
Frames Types On Um
Interface
Super Frame
51* 26 TDMA Frames
6.12 S
Hyper Frame
2048 * 51* 26 TDMA Frames
3 Hours, 28 Minutes, 53 Secs and 760 ms
122
TOPICS
GSM CONCEPTS
GSM SYSTEM ARCHITECTURE
IDENTITIES USED IN GSM
GSM CHANNELS
GSM RADIO LINK
MOBILITY MANAGEMENT
CALL MANAGEMENT
RADIO RESOURCE MANAGEMENT
123
Mobility Management
Mobility Management (MM)
Location updating- normal,periodic, IMSI attach
Paging
Security Management
Preventing unauthorized users- authentication
Maintaining Privacy of users- ciphering
Providing roaming facility
MM functionality mainly handled by MS, HLR,
MSC/VLR.

124
Network Attachment
Cell Identification
MS scans complete GSM frequency band for
highest power
Tunes to highest powered frequency and looks
for FCCH. Synchronizes in frequency domain
Get training sequence from SCH which follows
FCCH. Synchronizes in time domain.
Accesses BCCH for network id, location area and
frequencies of the neighboring cells.
Stores a list of 30 BCCH channels

125
Network Attachment..
PLMN Selection
Get the operator information from SIM.
Cell Selection
Selected cell should be a cell of the selected
PLMN
Signal strength should be above the threshold.
Cell should not be barred
Location Update
Register with the network by means of location
updation procedures.

126
MS BTS BSC (G)MSC VLR HLR
Action
Channel Request (RACH)
Channel Assignment (AGCH)
Authentication Request (SDCCH)
Authentication Response (SDCCH)
Comparison of Authentication params
Accept LUP and allocTMSI (SDCCH)
Ack of LUP and TMSI (SDCCH)
Entry of new area and identity into
VLR and HLR
Channel Release (SDCCH)
MS Location Update
(registration)
Location Update Request (SDCCH)
TMSI + old LAI
127
Security - Authentication

Authentication center
provides RAND to Mobile
AuC generates SRES using
Ki of subscriber and RAND
Mobile generates SRES
using Ki and RAND
Mobile transmits SRES to
BTS
BTS compares received
SRES with one generated
by AuC
MS
Ki RAND
A3
SRES
RAND
SRES
SRES
Auth Result
AuC BTS MS
128
Security - Ciphering

Data sent on air
interface ciphered
for security
A5 and A8
algorithms used to
cipher data
Ciphering Key is
never transmitted
on air
MS
Ki RAND
A8
Kc
MS Network
Um interface
A5 A5
Kc
Kc
Data Data Ciphered
Data
129
TOPICS
GSM CONCEPTS
GSM SYSTEM ARCHITECTURE
IDENTITIES USED IN GSM
GSM CHANNELS
GSM RADIO LINK
MOBILITY MANAGEMENT
CALL MANAGEMENT
RADIO RESOURCE MANAGEMENT
130
Communication Management
(CM)
Setup of calls between users on request
Routing function i.e. Choice of transmission
segments linking users
Point to Point Short message services

132
PLMN Selection
No
automatic
mode
The MS selects the first
PLMN from the preferred
PLMNs list (if it is not in
the forbidden PLMNs list)
The user selects a
PLMN from the
displayed PLMNs
manual
mode
Yes
Yes
Creation of a found
PLMN list
Is there an up to date
found PLMNs list?
End of PLMN
selection
Yes
No (automatic)
Cell Selection
succeed?
Selection of the
next preferred
possible PLMN
No (manual)
133
Listen to all the
frequencies of the GSM
spectrum:
power level measurement
and average on these
measurements
Select the best
frequencies
according to the
power level
(124 channels in GSM
900, 374 in GSM 1800
and 299 in GSM 1900
(30 in GSM 900 and 40 in GSM 1800)
Memorize the
beacon
frequencies in the
precedent
selection
=> Create the
Found PLMN list
PLMN Selection
Constitution of the "Found PLMN list"
134
Suitable cell:

- cell of the selected PLMN
- cell not barred
- C
1
> 0
Eligible cell
List of the
frequencies of the
selected PLMN
IMSI Attach
Look for the cell with the best
C
1
in the suitable cells list
Eligible cell?
Yes
Selection of
another PLMN
No
C
1
Computation for
eligible cells
Suitable cell?
Yes
No
Initial Cell Selection
Rejected?
Yes
PLMN set in the forbidden
PLMN list
End of Cell Selection
No
135
Cell Selection
BTS-2
BTS-1
This cell
BTS-3
BTS-4
BTS-5
1
1
1
1
2
3
4
5
Purpose: get synchronization
with the GSM network
prior establishing any communication.
1
136
Immediate Assignment
MS
BSC MSC
CM SERVICE REQUEST
SDCCH or TCH
6
CHANNEL REQUEST
RACH
1
BTS
CHANNEL REQUIRED
2
CHANNEL ACTIVATION
3
IMMEDIATE ASSIGNMENT
AGCH
5
IMMEDIATE ASSIGNMENT
COMMAND
5
CHANNEL ACTIVATION
ACK.
4
Immediate
Assignment
LOCATION UPDAT. REQU.
SDCCH or TCH
6
OR
137
Registration: the Very First Location
Update
LAI
HLR
IMSI
VLR id
TMSI
IMSI
TMSI
Release
VLR
IMSI
TMSI
LAI
MSC
BTS
BSS
BSC
2
4
5
2
6
1
2
4
5
6
3
4
TMSI
5
138
Intra VLR Location Update
VLR
IMSI
TMSI
LAI
1
2
3
4
new TMSI
TMSI + old LAI
2
3
4
2
3
TMSI
New TMSI
New LAI
MSC
BTS
BSS
BSC
IMSI not Required
139
New LAI
newTMSI
TMSI + old LAI
TMSI
New TMSI
MSC
BSS
BTS
BSC
1
2
5
7
2
5
7
2
IMSI,TMSI
LAI
New VLR
IMSI, TMSI
Old LAI
Old VLR
RAND, SRES,
Kc
HLR
new
VLR id
subscriber
data
3
4
6
6
5
IMSI not Required
RAND, SRES,
Kc
Inter VLR Location Update
140
MSC
BTS
BSS
BSC
VLR
3
4
5
4
6
1
CHANNEL
REQUEST
2
IMMEDIATE
ASSIGNMENT
LOCATION UPDATING
REQUEST (IMSI Attach)
3
5
LOCATION UPDATING
ACCEPT (LAC, TMSI)
4
Authentication
Procedure
IMSI Attach
141
MSC
BTS
BSS
BSC
VLR
1
CHANNEL
REQUEST
2
IMMEDIATE
ASSIGNMENT
IMSI DETach
INDication
3
4
CHANNEL
RELEASE
IMSI DETach
INDication
3
IMSI Detach
143
ACM = Address Complete Message
ANM = ANswer Message
IAM = Initial Address Message
MS
BSS MSC
CHANNEL REQUEST
1
PSTN
CM SERVICE REQUEST
2
CM SERVICE REQUEST
2
CALL PROCEEDING
7 CALL PROCEEDING
7
Assignment procedure
7
IAM
6
IMMEDIATE ASSIGNMENT
2
ACM
8
VLR
Ring
ANM
10
ALERTING
9
SETUP (basic) or
EMERGENCY
4
SETUP
4
CONNECT
11
CONNECT ACKnowledge
11
Authentication procedure 3
Ciphering procedure 3
5
Dialing
Ringing
Path
Established
Ringing
Sending
Number
Mobile Originating Call
144
PSTN
LA1
LA2
BTS11
BTS21
BTS22
BTS31
BTS12
BTS23
HLR
4
3
5
1
2
5
6
6
BSC1
BSC2
BSC3
MSC/
VLR
GMSC
Mobile Terminating Call
1 - Paging Principle
145
VMSC
BSS
VLR
Visitor PLMN
GMSC
HLR
Home PLMN
Routing
Information
(MSRN)
6
IAM : Initial Address Message
MSISDN : Mobile Station Integrated Services Digital
network Number
MSRN : Mobile Station Roaming Number
IMSI : International Mobile Subscriber Identity
GMSC : Gateway MSC
VMSC : Visitor MSC
TMSI : Temporary Mobile Subscriber Identity
PN
International
SS7
ISDN
IAM (MSRN)
7
IAM
(MSISDN)
2
Send
Routing
Information
(MSISDN)
3
Provide Roaming Number
(IMSI)
4
PAGE
(TMSI + LA)
9
Send info
to I/C
(MSRN)
8
Roaming Number
(MSRN)
5
PAGING
REQUEST
(TMSI + LA)
10
PAGING
REQUEST
(TMSI)
11
MSISDN
1
Mobile Terminating Call
2 - Detailed Procedure
146
MS BSS VMSC
CHANNEL REQUEST
(LAC, Cell ID)
5
PSTN
IMMEDIATE ASSIGNMENT
(SDCCH or TCH)
6
PAGING REQUEST
4
PAGING REQUEST
(TMSI or IMSI, LA)
3
GMSC
IAM
(MSISDN)
1
IAM
(MSRN)
2
CM SERVICE REQUEST
(Paging Response)
7 PAGING RESPONSE
(TMSI or IMSI, LA)
7
Authentication procedure 8
Ciphering procedure 9
Address Complete Message
11
ANswer Message
12
Setup, Assignment, Alerting 10
CONNECT
12
Dialing
Ringing
Path
Established
Mobile Terminating Call
3 - End to End Procedure
147
MS BSS MSC
Call in progress 1
RELEASE COMPLETE
4
PSTN
DISCONNECT
2
DISCONNECT
2
RELEASE
3
RELEASE
3
RF Channel Release
procedure 8
Release
5
RELEASE INDICATION
7
CHANNEL RELEASE
6
Release
tone
9
Call Release
1 - Mobile Initiated
148
PSTN
On hook
Purpose:
informs the mobile
then releases radio
and network resources.
REL
RLC
MSC
BTS
BSS
BSC
1
1
1
1
2
3 3
4
5
5
4
6
2
Call Release
2 - PSTN Initiated
149
Mobile Originated Call
Request for Service
Authentication
Ciphering
Equipment Validation
Call Setup
Handovers
Call Release

150
Mobile Terminated Call
Paging
Authentication
Ciphering
Equipment Validation
Call Setup
Handovers
Call Release



151
Mobile Terminated Call
MS
MS
BTS
BTS
BTS
BSC
BSC
MSC
VLR
GMSC
HLR
PSTN
EIR
AuC
Land to
Mobile call
(MSISDN)
Query for
VLR info
Reply
(MSRN)
Route
to MSC

Query VLR
for LAC and
TMSI
Paging
the area
(+TMSI)
TMSI Paged
on PCH
Paging
Ch. REQ
over RACH
Allocate SDCCH
over AGCH
Page RESP on SDCCH
( TMSI + LAI)
Page RES Page RES
Authentication and Ciphering procedure done as seen in Location Updation
Assign. REQ

Assignment CMD
(=TCH) on SDCCH
* MS tunes
* Assgn CMP
* Phone rings
Connect traffic Ch.to trunk
frees SDCCH
Assgn CMP

Network Alerting
152
TOPICS
GSM CONCEPTS
GSM SYSTEM ARCHITECTURE
IDENTITIES USED IN GSM
GSM CHANNELS
GSM RADIO LINK
MOBILITY MANAGEMENT
CALL MANAGEMENT
RADIO RESOURCE MANAGEMENT
153
Radio Resource Management
Establish maintain and release stable connections
between MS and MSC
Manage Limited Radio and Terrestrial resources
Handover process is the sole responsibility of the RR
Layer
Functions of RR layer are performed by MS and BSC
and partly by MSC
154
Radio Resource Management

Power Control
Hand over Control
Discontinuous Transmission
Frequency Hopping



155
BTS commands MS at different
distances to use different power levels
so that the power arriving at the BTSs Rx is
approximately the same for each TS

- Reduce interference
- Longer battery life

Power Control
156
Handover
Means to continue a call even a mobile crosses
the border of one cell to another
Procedure which made the mobile station really
roam
Handover causes
RxLev (Signal strength , uplink or downlink)
RxQual (BER on data)
O & M intervention
Timing Advance
Traffic or Load balancing
157
Handover Types
Internal Handover (Intra-BSS)
Within same base station - intra cell
Between different base stations - inter cell
External Handover (Inter-BSS)
Within same MSC -intra MSC
Between different MSCs - inter-MSC
158
Handover Types
BSC
BSC
BSC
BSC
MSC
MSC
GMSC
C-1
C-2
C-3
C-4
159
Periodic Measurement
Reports (SACCH)
Periodic Measurement
Reports
HO required
Activate TCH(facch)
with HoRef#

if
1. Check for HO passed
2. Channel avail in new BTS
Acknowledges and
alloctes TCH (facch)
HO cmd with HoRef#
Receives new BTS data(FACCH)
MS tunes into new frequency
and TS and sends HO message to
new BTS (facch)
Periodic Measurement
Reports (SACCH)
HO performed
Release TCH
Cell 1
Cell 2
BSC
BTS 1
BTS 2
Intra BSC handover
160
Discontinuous
Transmission
Discontinuous Transmission(DTX) allows the
radio transmitter to be switched off most of the
time during speech pauses.
A Silence Indicator Block is transmitted at
500bps, which generates a comfort noise
Down Link interference is decreased.
Up link battery is saved
161
Frequency Hopping
Frequency Hopping permits the dynamic switching of
radio links from one carrier frequency to another.
Base Band Hopping
At the BTS each the timeslot is shifted to another
transceiver, which is transmitting at the hop
frequency. User will be connected to different
Transceivers depending on hop sequence.
Synthesis Hopping
At the BTS transceiver changes the frequencies used.
The user will be connected to only one transceiver.
Decreases the probability of interference
Suppresses the effect of Rayleigh fading
162
Wireless Data
98 99 2000 2001
GSM
DATA
HSCSD
GPRS
EDGE
UMTS
SIM
Toolkit
WAP
Data Application
Time
Circuit Switched technology
Packet Switched technology
Technology for Applications
SMS Data: 160 -numeric characters
User Data Rate : 9.6kbps
One time slot over the air interface
High Speed Circuit Switched Data
User Data Rate:14.5kbps
Use multiple timeslots (max=8),
hence max rate = 115.2kbps.
Needs a duplexor in MS for
simultaneous Tx and Rx

Add-on to GSM network :
PCU; Packet Segmentation/re-assembly and scheduling
Radio channel access control and management
Transmission error detection and retransmission.
Power control
SGSN: GPRS mobility
Encryption
Charging
GGSN : Interface to the PDN, Internet

Max user data rate : 21.4 kbps
Dynamic rate adaptation to suit the radio conditions at
that time ( 9.05 kbps, 13.4 kbps, 15.6 kbps 21.4 kbps)
W@P Gateway
W@P Service
W
@
P
F
o
n
e
Internet
Mobile Network
Surf the Internet while on the move

W@P Gateway :
Adaptation of the information to the mobile
Compression of the data
Buffering of the information
Enhanced Data rate for GSM Evolution
EDGE is an enhancement of GPRS and CSD technologies.
Based on the current GSM technology - same TDMA frame structure,
same bandwidth (200 kHz).
Uses 8-PSK modulation instead of GMSK.
Requires good propagation conditions.
Allows upto 48 kbps (EGPRS) and upto 28.8 kbps (ECSD) on every
radio channel
EDGE helps GSM-Only operators to compete with UMTS.
Universal Mobile Telecommunication Standards
Innovative Service Architecture : VHE Concept - providing the us
the same look and feel of its personalized services independent of
network and terminal.
Global Convergence : Fixed/Mobile, Telecom/Datacom, public/private
Mobile Multimedia driven market.
Wideband bearers - 2GHz band ( 5 MHz per carrier), -max. 2Mbps
163
References
Wireless and Personal Communication Systems.
Vijay.K.Garg and Wilkes
Overview of the GSM System and Protocol
Architecture, IEEE Comm. Magazine, Moe Rahnema.
The GSM System for Mobile Communications-
Michel Mouly & Marie-Bernadette Pautet
Overview of the GSM Comm- John Scourias.
164
Coverage or Traffic Limitations
TRAFFIC-
LIMITED
AREA
(10000
subscribers
per km
2
)
COVERAGE-
LIMITED
AREA
(-75 dBm
at cell edge)
COVERAGE-
LIMITED
AREA
(-70 dBm
at cell edge)

165
Average number of busy channels
during the period of observation
(usually, the peak hour).
Erlang is the unit of statistical resource use
Erlang B
At any time, more than 1 user may request the same resource simultaneously. The use of such a
resource is associated with a blocking rate.

Erlang C
When more than 1 user request at the same time, instead of rejecting the extra calls, there is a
queuing system.

Erlang Concept
166
Different Types of Cells
High sensitivity to
interference
Requires "secured"
Frequency reuse pattern
High isolation from
interferences
A few Frequencies
intensively reused
MACRO-CELL:
antenna radiating above roofs
---> Wide Coverage ( 35 km)
MICRO-CELL:
Antenna below the roofs
---> small coverage
PICO-CELL:
Antenna inside building
---> Very small coverage
EXTENDED-CELL:
macro cell with system coverage
extension ( 120 km) for coasts...
CONCENTRIC-CELL:
macro cell with system coverage
limitation inside another macro
167
Cell Patterns
168
Cell Sectorization
TRI OMNI BI
169
Omnidirectional Site Antennas
170
Bi and Trisectorial Site Antennas
171
Calculation of the maximum coverage range of each cell in a specific environment.

Definition of planning tools parameters.


Based on the path loss calculation between the MS and the BS in both ways.


This calculation considers:

RF parameters of MS and BS,
system parameters (diversity gains...),
propagation parameters (shadowing),
physical installation parameters (antenna height),
environment classification.
Link Budgeting
172
- What is the maximum EIRP?
- What are the losses in
transmission and reception?
- Is diversity used?
- What is the minimum
equivalent sensitivity?
- What is the maximum
equivalent output power?
- What are the body losses?
- Beyond which distance the
communication will cut off?
- Is indoor coverage
guaranteed?
- Is frequency hopping used?
EIRP:Equivalent Isotropic Radiated Power
173
Duplexer
Combiner
Power Amplifier
DLNA:Diversity Low Noise Amplifier
Specific Tx Cable
Losses
Tx PA Output
Power
Combiner losses
Rx Sensitivity
Rx Diversity Gain
DLNA conf. Standard conf.
Base Station
Tx PA Output Power
Other factors for MS
Body Losses
Common cable losses
Propagation Parameters:
- Incar, Indoor penetration factors
- Frequency 900, 1800, 1900 MHz
- Antenna Height
- Environment

Design Parameters:
Overlapping margin
Rx Sensitivity
Antenna Gain
MS
Rx Sensitivity
Common cable Losses
Antenna Gain
Radio Link
Link Budget Parameters
Overview
174
Link Budget Parameters
BTS TX Power Amplifier
2.5W PA 25W PA 35W PA 20W PA 30W PA
GSM 900 S2000L
S2000E
S4000 Indoor
S4000 Outdoor
S4000 Indoor S2000H
S8000 Indoor
S8000 Outdoor
DCS 1800 S2000L S4000 Indoor
S2000E
S2000H
S4000 Outdoor
S4000 Indoor
S8000 Indoor
S8000 Outdoor
PCS 1900 S2000L
S2000E
S2000H
S4000 Indoor
S4000 Outdoor
S8000 Outdoor
175
D
H2D
Hy/2
2-Way Hybrid Combiner with Duplexer
4.5 dB Loss
allows Synthesized Frequency Hopping
4-Way Cavity Combiner with
Duplexer
allows Baseband Frequency Hopping
4.9 dB Loss
C C C C
D
Link Budget Parameters
Combiners
TX TX TX TX TX TX
176
At the BS, for a 7/8 foam dielectric coaxial cable:

4 dB/100 m (900 MHz),

6 dB/100 m (1800 MHz),

Common cable losses for 40 meters: 2.5 dB (900 MHz) and 3.5 dB (1800 MHz).

Jumpers (up and down the feeder)

0.5 dB (800 MHz),

1 dB (1800 MHz).
Link Budget Parameters
Cable Losses
177
Omnidirectional antenna

Default 6.5 V with 11 dBi gain


Directional antenna for trisectorial site

Default 65 H / 6.5 V with 18 dBi gain
Link Budget Parameters
BTS Antenna Gain
178
900 MHz 1800/1900 MHz
TX PA Output
Power
33 dBm (2W) 30 dBm (1W)
RX Sensitivity -102 dBm
-2 dBi for Handheld
2 dBi for Car Kit
Body Loss
Antenna Gain
Common Cable
Loss
-100 dBm
0 dB for Handheld
2 dB for Car Kit
3 dB for Handheld
0 dB for Car Kit
Link Budget Parameters
Mobile Station Parameters
179
Link Budget Presentation
Parameters

Frequency 1800 MHz
Base Height 40.0 m
Mobile Height 1.5 m
Environment Urban
RX TX
Mobile
Antenna Gain
-2 dB
Cable Loss
0 dB
Output Power
Sensitivity
-100 dBm
30 dBm
Antenna Gain (65 )
Jumper Loss
Feeder Loss

Sensitivity
-110 dBm
18 dBi
3 dB
Options
Rx Diversity Gain: 5 dB
Overlapping Margin: 0 dB
Penetration Factor
Body Loss 3 dB
15 dB
Outdoor Minimum Field
95%: -80 dBm
Coverage Range
95%: 810 m
0.5 dB
Base Station
Max TX Output Power
RXm RXd

44.8 dBm
Coupling system
Tx loss
4.5 dB
180
Link Budget Calculation
BTS MS
TX OUTPUT POWER
30.00 W (44.8
dBm)
1.00 W (30.0
dBm)
COMBINER LOSSES 5.0 dB None
RX SENSITIVITY -110.0 dBm -102.0 dBm
RX SENSITIVITY +
DIVERSITY -115.0 dBm None
COMMON CABLE
LOSSES 3.0 dB 0.0 dB
ANTENNA GAIN 18.0 dBm -2.0 dBm
BODY LOSSES 3.0 dB
OVERLAPPING MARGIN 0.0 dB
INDOOR PENETRATION
FACTOR 18.0 dB
Exercise 1: S8000 INDOOR: OPERATING FREQUENCY 1800 MHz
181
Fading
Example of Field Strength Variation for GSM 1800
-100
-90
-80
-70
-60
-50
-40
-30
-20
-10
0 500 1000 1500 2000 2500 3000 3500 4000 4500 5000
Distance (m)
F
i
e
l
d

S
t
r
e
n
g
t
h


(
d
B
m
)

Measurement
Free Space
Zoom on
Short Term Fading
Long Term Fading
2 m
/2
182
Clutters
183