Beruflich Dokumente
Kultur Dokumente
Chapter 4: Wireless
Telecommunication Systems
GSM
Overview
Services
Sub-systems
Components
IS 95
Overview
Services
Sub-systems
Components
subscribers (x 1000)
600000
Analog total
500000
GSM total
400000
CDMA total
300000
TDMA total
PDC/PHS total
200000
total
100000
0
1996
1997
1998
1999
2000
2001
Winter 2001
4.2
GSM: Overview
GSM
Winter 2001
4.3
Communication
Total mobility
High capacity
Worldwide connectivity
Security functions
Winter 2001
4.4
Disadvantages of GSM
Winter 2001
4.5
GSM offers
bearer services
MS
TE
MT
R, S
GSM-PLMN
Um
transit
network
(PSTN, ISDN)
source/
destination
network
TE
(U, S, R)
tele services
Winter 2001
4.6
Bearer Services
Winter 2001
4.7
Tele Services I
Winter 2001
4.8
Tele Services II
Winter 2001
4.9
Supplementary services
Winter 2001
4.10
MS (mobile station)
BS (base station)
MSC (mobile switching center)
LR (location register)
subsystems
RSS (radio subsystem): covers all radio aspects
NSS (network and switching subsystem): call forwarding, handover,
switching
OSS (operation subsystem): management of the network
Winter 2001
4.11
GSM: overview
OMC, EIR,
AUC
HLR
NSS
with OSS
VLR
MSC
GMSC
VLR
fixed network
MSC
BSC
BSC
RSS
Winter 2001
4.12
radio cell
MS
BSS
MS
Um
radio cell
MS
BTS
RSS
BTS
Abis
BSC
BSC
A
MSC
NSS
MSC
VLR
signaling
VLR
HLR
GMSC
ISDN, PSTN
IWF
PDN
O
OSS
EIR
AUC
OMC
Winter 2001
4.13
network and
switching subsystem
MS
ISDN
PSTN
MSC
Um
BTS
fixed
partner networks
Abis
EIR
SS7
BTS
BSC
VLR
BTS
BTS
HLR
BSC
BSS
MSC
IWF
ISDN
PSTN
PSPDN
CSPDN
Winter 2001
4.14
MS
Components
MS (Mobile Station)
BSS (Base Station Subsystem):
consisting of
Um
BTS
Abis
BTS
BSC
MSC
BTS
BTS
BSC
Interfaces
MSC
BSS
Um : radio interface
Winter 2001
4.15
fixed partner
networks
Components
MSC (Mobile Services Switching Center):
IWF (Interworking Functions)
ISDN
PSTN
MSC
SS7
EIR
HLR
Databases
VLR
MSC
IWF
ISDN
PSTN
PSPDN
CSPDN
Winter 2001
4.16
Radio subsystem
Winter 2001
4.17
cell
Winter 2001
4.18
Winter 2001
BTS
X
X
X
X
X
X
BSC
X
X
X
X
X
X
X
X
X
X
4.19
Mobile station
Terminal for the use of GSM services
A mobile station (MS) comprises several functional groups
MT (Mobile Terminal):
offers common functions used by all services the MS offers
corresponds to the network termination (NT) of an ISDN access
end-point of the radio interface (U m)
TA (Terminal Adapter):
terminal adaptation, hides radio specific characteristics (TE connects via modem,
Bluetooth, IrDA etc. to MT)
TE (Terminal Equipment):
peripheral device of the MS, offers services to a user
Can be a headset, microphone, etc.
does not contain GSM specific functions
TE
TA
R
MT
S
Winter 2001
Um
4.20
Components
Mobile Services Switching Center (MSC)
controls all connections via a separated network to/from a
mobile terminal within the domain of the MSC - several BSC
can belong to a MSC
Databases (important: scalability, high capacity, low delay)
Winter 2001
4.21
switching functions
additional functions for mobility support
management of network resources
interworking functions via Gateway MSC (GMSC)
integration of several databases
Functions of a MSC
Winter 2001
4.22
Operation subsystem
Winter 2001
4.23
qu
en
c
935-960 MHz
124 channels (200 kHz)
downlink
fre
890-915 MHz
124 channels (200 kHz)
uplink
8
4.615 ms
tail
3 bits
user data
S Training S
user data
57 bits
1 26 bits 1
57 bits
Winter 2001
guard
tail space
546.5 s
577 s
4.24
...
superframe
...
48
...
49
50
24
6.12 s
25
multiframe
0
...
0
24
2
120 ms
25
...
48
49
50
235.4 ms
frame
0
...
4.615 ms
slot
577 s
burst
Winter 2001
4.25
Um
Abis
MS
BTS
BSC
MSC
CM
CM
MM
MM
BSSAP
RR
BTSM
RR
BTSM
LAPDm
RR
LAPDm
LAPD
LAPD
radio
radio
PCM
PCM
16/64 kbit/s
Winter 2001
BSSAP
SS7
SS7
PCM
PCM
64 kbit/s /
2.048 Mbit/s
4.26
HLR
4
5
3 6
PSTN
Winter 2001
GMSC
10
VLR
8 9
14 15
MSC
10 13
16
10
BSS
BSS
BSS
11
11
11
11 12
17
MS
4.27
2: connection request
3, 4: security check
5-8: check resources (free
circuit)
9-10: set up call
VLR
3 4
PSTN
5
GMSC
MSC
8
2 9
MS
Winter 2001
1
10
BSS
4.28
MTC/MOC
MS
MTC
BTS
MS
MOC
BTS
paging request
channel request
channel request
immediate assignment
immediate assignment
paging response
service request
authentication request
authentication request
authentication response
authentication response
ciphering command
ciphering command
ciphering complete
ciphering complete
setup
setup
call confirmed
call confirmed
assignment command
assignment command
assignment complete
assignment complete
alerting
alerting
connect
connect
connect acknowledge
connect acknowledge
data/speech exchange
data/speech exchange
Winter 2001
4.29
Handoffs
Winter 2001
4.30
4 types of handover
1
MS
MS
MS
MS
BTS
BTS
BTS
BTS
BSC
BSC
BSC
MSC
MSC
Winter 2001
4.31
Handover decision
receive level
BTSold
receive level
BTSold
HO_MARGIN
MS
MS
BTSold
BTSnew
Winter 2001
4.32
Handover procedure
MSC
MS
BTSold
BSCold
measurement
measurement
report
result
BSCnew
BTSnew
HO decision
HO required
HO request
resource allocation
ch. activation
HO command
HO command
HO command
HO access
Link establishment
clear command clear command
clear complete
HO complete
HO complete
clear complete
Winter 2001
4.33
Security in GSM
Security services
access control/authentication
user SIM (Subscriber Identity Module): secret PIN (personal
identification number)
SIM network: challenge response method
confidentiality
voice and signaling encrypted on the wireless link (after successful
authentication)
anonymity
temporary identity TMSI
(Temporary Mobile Subscriber Identity)
newly assigned at each new location update (LUP)
encrypted transmission
secret:
A3 and A8
available via the
Internet
network providers
can use stronger
mechanisms
Winter 2001
4.34
GSM - authentication
SIM
mobile network
Ki
RAND
128 bit
AC
RAND
128 bit
RAND
Ki
128 bit
128 bit
A3
A3
SIM
SRES* 32 bit
MSC
SRES* =? SRES
SRES
SRES
32 bit
32 bit
SRES
Winter 2001
4.35
MS with SIM
RAND
128 bit
RAND
128 bit
RAND
128 bit
A8
cipher
key
BTS
Ki
128 bit
SIM
A8
Kc
64 bit
Kc
64 bit
data
encrypted
data
A5
SRES
data
MS
A5
Winter 2001
4.36
AIUR [kbit/s]
4.8
9.6
14.4
19.2
28.8
38.4
43.2
57.6
TCH/F4.8
1
2
3
4
TCH/F9.6
TCH/F14.4
1
1
2
3
4
2
3
4
Winter 2001
4.37
packet switching
using free slots only if data packets ready to send
(e.g., 115 kbit/s using 8 slots temporarily)
standardization 1998
advantage: one step towards UMTS, more flexible
disadvantage: more investment needed
GR (GPRS Register)
user addresses
Winter 2001
4.38
Lost SDU
probability
Duplicate
SDU
probability
1
2
3
10-9
10-4
10-2
10-9
10-5
10-5
Delay
class
1
2
3
4
Out of
sequence
SDU
probability
10-9
10-5
10-5
Corrupt SDU
probability
10-9
10-6
10-2
Winter 2001
4.39
BSS
MS
Um
SGSN
Gb
Gn
Gi
HLR/
GR
MSC
VLR
PDN
GGSN
EIR
Winter 2001
4.40
BSS
Um
SGSN
Gb
Gn GGSN
Gi
apps.
IP/X.25
IP/X.25
SNDCP
LLC
RLC
GTP
SNDCP
MAC
RLC
MAC
radio
radio
BSSGP
FR
GTP
LLC
UDP/TCP
UDP/TCP
BSSGP
IP
IP
FR
L1/L2
L1/L2
Winter 2001
4.41
IS 95
The rake receiver at the mobile uses three correlators to receive three
different signals that are spaced more than (>) .8micro secs (1 chip
width) away. Signals spaced less than (<) .8microsecs cause
interference and signals spaced exactly .8microsecs away will cause
a maximum fade. A fourth receiver is used as a roving finger, it is used
to detect new strong incoming signals. This process ensures that the
RAKE receiver always uses the 3 strongest signals. At the BS all four
correlators are used to receive signals (note BS use antenna diversity).
Winter 2001
4.42
Short PN code: generated from a pair of 15 bit shift registers having 215
- 1 = 32,767 codes. These codes are used for synchronization in the
down and up links and cell identification in the down link (each cell
uses one of 512 possible offsets, adjacent cells must use different
offsets). The chip rate is 1.2288Mcps (i.e., not used for spreading!)
Winter 2001
4.43
Access channel
Traffic channel
Winter 2001
4.44
Mobile acquires phase, timing, and signal strength via the pilot
channel.
Winter 2001
4.45
Winter 2001
4.46
Winter 2001
4.47
Winter 2001
4.48
IS 95: Handoffs I
hard handoff
2.
soft handoff
Winter 2001
4.49
IS 95: Handoffs II
Winter 2001
4.50
Soft handoffs consist of the mobile being served by two BSs. That
means that:
1.
2.
The signal from the mobile is received by two BSs. This is possible as
a CDMA channel simply consists of a transmission by the mobile
using its ESN to identify itself on the reverse channel and only
requires a correlator at the BS to be used to receive the signal.
Soft handoffs also eliminate the ping pong effect (i.e., when
traveling along the boundary of two cells and switching back and
forth between two BSs). The mobile is being served by two BSs
and does not have to switch BSs until absolutely necessary!
The handoff process is also unique in that the mobile initiates the
hand off. The MS analyze the measurements and inform the MSC
when a handoff might be necessary. (If one BSs signal strength
becomes much higher than the other).
Winter 2001
4.51
IS 95: Handoffs IV
Winter 2001
4.52