GSM

ARCHITECTURE
FRAME FORMAT
CHANNELS
CALL PROGRESS
 GSM – AIR INTERFACE
TDMA : MULTIPLE USERS SHARE THE RF CHANNEL ON A TIME SHARING BASIS
FDD : DIFFERENT FREQUENCIES ARE USED IN THE DOWNLINK AND UPLINNK
DIRECTIONS
GMSK : GAUSSIAN MINIMUM SHIFT KEYING IS THE MODULATION SCHEME USED
 GSM Variants
Variant Uplink Downlink Total Duplex- Channels
(MHz) (MHz) Bandwidth frequency
GSM-400 451-458 and 461-468 and Twice 14 MHz 10 MHz Twice 72
479-486 489-496

GSM-900 890-915 935-960 Twice 25 MHz 45 MHz Twice 124

(primary
band)
Extended 880-915 925-960 Twice 35 MHz 45 MHz Twice 174
GSM-900
GSM-R 876-880 921-925 Twice 4 MHz 45 MHz Twice 19
DCS-1800 1,710-1,785 1,805-1,880 Twice 75 MHz 95 MHz Twice 373
PCS-1900 1,850-1,910 1,930-1,990 Twice 60 MHz 80 MHz Twice 300

Source: Bekkers, 299

 GSM SYSTEM – AIR INTERFACE
• Base frequency: 900MHz

• Two frequency bands of 25MHz each (890-915MHz uplink, 935-960MHz downlink)

• Channel spacing 200kHz

• 124 channels per frequency band

• Gaussian Minimum Shift Keyring (GMSK)

• Time Division Multiple Access (TDMA)

 GSM Architecture
MS Transmission BS Transmission
Band : 890 – 915 Band : 935 – 960
MHZ MHZ
45 MHz
Year Introduced 1990

1 Access method TDMA

2
3 Channel Bandwidth 200 kHz
4
5
Number of duplex 125
6 channels
7
F1 F2 F1' F2' 8 Users per channel 8
Frequency
Speech coding bit 13 kbps
rate
Data coding bit rate 12 kbps

Frame size 4.6 ms

 GSM Architecture
Home Location Register
Network
Management
BTS = Base Transceiver Station Center
AuC
AuC = Authentication Center
Equipment ID
OMC = Operation and Maintenance Center
PSTN = Public Switched Telephone Network
ME = Mobile Equipment Visitor Location OMC
Register

Subscriber BT
Identity ME S Mobile
Data
Module switching
communication
center network
Subscriber BT Base station
Identity ME S

Module controller

Subscriber BT
Identity ME S PSTN
Module
Source: Stallings, 313
Source: Mehrotra, 27
GSM SYSTEM – NETWORK ARCHITECTURE
 GSM SYSTEM – NETWORK ARCHITECTURE

HANDSET :
Mobile Station (MS)  communicates over the air interface with (BTS)

MS =Mobile Equipment (ME) + Subscriber Identity Module (SIM)

SIM:
a small card containing an integrated circuit
contains user-specific information {identity of the subscriber, subscriber authentication
information, and some subscriber service information}

“ handset only acts as my handset when my SIM is inserted ”

BSC:
provides functions related to radio resource (RR) management, some functions related to
mobility management (MM) for subscribers in the coverage area of the BTSs, and a number
of operation and maintenance functions for the overall radio network.
 GSM SYSTEM – NETWORK ARCHITECTURE
The interface between the BTS and the BSC is known as the Abis interface.

Many aspects of that interface are standardized. One aspect, however, is proprietary
to the BTS and BSC vendor, which is the part of the interface that deals with
configuration, operation, and maintenance of the BTSs. This is known as the Operation
and Maintenance Link (OML). {Because the internal design of a BTS is proprietary to the BTS vendor,
and because the OML needs to have functions that are specific to that internal design, the OML is also
proprietary to the BTS vendor. The result is that a given BTS must be connected to a BSC of the same vendor.}

Several BTS’s  BSC

Several BSC’s  MSC

ABIS A
BTS INTERFACE BSC MSC
INTERFACE
GSM SYSTEM – NETWORK ARCHITECTURE

•MSC : SWITCH:
•node that controls call setup, call routing,
and many of the functions provided by a
L standard telecommunications switch.
O •The MSC is no ordinary PSTN switch :
G Because of the fact that the subscribers
I are mobile, the MSC needs to provide a
C number of MM functions.
A •It also needs to provide a number of
MSC L VLR interfaces that are unique to the GSM
architecture.
S •VISITOR LOCATION REGISTER (VLR): database
P that contains subscriber-related information
L for the duration that a subscriber is in the
I coverage area of an MSC.
T
MSC and VLR are always contained on the
same platform and the interface between
them is proprietary to the equipment vendor.
 GSM SYSTEM – NETWORK ARCHITECTURE
A INTERFACE :

This is an SS7-based interface using the Signalling Connection Control Part (SCCP).

BSS Application Part (BSSAP) : protocol used for communication between the MSC
and the BSC, and also between the MSC and the MS.
Since the MSC communicates separately with both the BSC and the MS, the BSSAP
is divided into two parts—
BSS Management Application Part (BSSMAP) {contains those messages that are
either originated by the BSS or need to be acted upon by the BSS}
Direct Transfer Application Part (DTAP) {contains those messages that are passed
transparently through the BSS from the MSC to the MS or vice versa.}
 GSM SYSTEM – NETWORK ARCHITECTURE
TRANSCODING AND RATE ADAPTATION UNIT (TRAU):
In GSM, the speech from the subscriber is usually coded at either 13 Kbps (full rate,
FR) or 12.2 Kbps (enhanced full rate, EFR).
Different from the standard 64 Kbps Pulse Code Modulation (PCM) used in switching
networks.Since the MSC interfaces with the PSTN network: it needs to send and
receive speech at 64 Kbps.

TRAU converts the coded speech to or from standard 64 Kbps.

Logically TRAU is a part of the BSS. {As far as the MSC is concerned, voice to and from
the BSS is passed at 64 Kbps and the BSS takes care of the transcoding}

In cases where the BSC and TRAU are separated, the inter-
face between them is known as the Ater interface. This interface is
proprietary to the BSS equipment vendor. Hence, the BSC and TRAU must
be from the same vendor.

TRAU to be physically separate from the BSC and placed near the MSC  reduces the
bandwidth required between the MSC location and the BSC location significant
savings in transport cost.
 GSM SYSTEM – NETWORK ARCHITECTURE
HOME LOCATION REGISTER (HLR): contains subscriber data {details of the services to
which a user has subscribed}

AUTHENTICATION CENTER(AUC) : Associated with the HLR

contains subscriber-specific authentication data(secret authentication key called the Ki)
also contains one or more sophisticated authentication algorithms.

For a given subscriber, the algorithm in the AuC and the Ki are also found on the SIM
card. Using a random number assigned by the AuC and passed down to the SIM via the
HLR, MSC, and ME, the SIM performs a calculation using the Ki and authentication
algorithm.

If the result of the calculation on the SIM matches that in the AuC, then the subscriber
has been authenticated.

The interface between the HLR and AuC is not standardized. Although implementations
can set up the HLR and AuC to be separate, it is more common to find the HLR and AuC
integrated on the same platform.
 GSM SYSTEM – NETWORK ARCHITECTURE
GATEWAY MSC (GMSC) :
Calls from another network, such as the PSTN, first arrive at a type of MSC known as a
GMSC

MAIN PURPOSE : is to query the HLR to determine the location of the subscriber

response from the HLR indicates to the MSC where the subscriber may be found

call is then forwarded from the GMSC to the MSC serving the subscriber

A GMSC may be a full MSC/VLR such that it may have some BSCs connected to it.
Alternatively, it may be a dedicated GMSC and its only function is to interface with the
PSTN and query the HLR. The choice is dependent upon the amount and types of traffic
in the network and the relative cost of a full MSC/VLR versus a pure GMSC.
 GSM SYSTEM – NETWORK ARCHITECTURE

SHORT MESSAGE SERVICE CENTER (SMSC):

Node that supports the storing and forwarding of short messages to and from MS’s.

Short messages = text messages up to 160 characters in length

SMSC has three components :

Service Center (SC) stores messages and interfaces with other systems such
as e-mail or voice mail equipment.
SMS-Gateway MSC = (SMS-GMSC)  used for the delivery of short messages to a
mobile subscriber. Much like a GMSC, the SMS-GMSC queries the HLR for the
subscriber’s location, and then forwards the short message to the appropriate visited
MSC where it is relayed to the subscriber.
SMS-Interworking MSC  which receives a short message from the MSC serving
the subscriber. It forwards such messages to the SC, which then passes
them on to the final destination
 GSM SYSTEM – NETWORK ARCHITECTURE
EQUIPMENT IDENTITY REGISTER (EIR):
handset does not identify subscriber, rather it is the information on the SIM. Stored in each
handset is an

International Mobile Equipment Identity number (IMEI, 15 digits)

or
International Mobile Equipment Identity and Software Version Number (IMEISV, 16 digits).

STRUCTURE : type approval code (TAC) + final assembly code (FAC)  indicate the make and
model of the handset and the place of manufacture.

The IMEI and IMEISV also include a specific serial number for the ME in question.

Within the EIR are three lists —black, gray, and white.
lists contain values of TAC, TAC and FAC, or complete IMEI or IMEISV.
If a given TAC, a TAC/FAC combination, or a complete IMEI appears in
black list  then calls from the ME are barred
gray list  then calls may or may not be barred at the discretion of the network operator
white list  then calls are allowed.
The EIR is an optional network element and some network operators have chosen not to
deploy an EIR.
 Implementation
Receiver
>Channel Decoding
Voice decoding >De-Interleaving Deciphering Demodulation
>Re-formatting

>Channel encoding
>Interleaving
Voice encoding Ciphering Modulation Amplifier
>Burst generation

Transmitter
Central processor, clock and tone, internal bus system, keyboard (HMI)

SIM = Subscriber Identity Module

Source: Heine, 14
 GSM :
CHANNELS
 BROADCAST CHANNELS
• Frequency Correction Channel (FCCH): This is broadcast
by the BTS and used for frequency correction of the MS.
• Synchronization Channel (SCH): This is broadcast by the
BTS and is used by a mobile station for frame
synchronization. It addition to frame synchronization
information, it also contains the Base Station Identity
Code (BSIC).
• Broadcast Control Channel (BCCH): This is used to
broadcast general information regarding the BTS and the
network in general. It is also used to indicate the
configuration of the Common Control Channels (CCCH).
 COMMON CONTROL CHANNEL
CCCH is a bidirectional control channel used primarily for functions
related to initial access by a mobile station.

It has a number of components:

Paging Channel (PCH) This is used for the paging of mobile stations.
Random Access Channel (RACH) This is used only in the uplink
direction. It is used by a mobile station to request the allocation of
a Stand alone Dedicated Control Channel (SDCCH) .
Access Grant Channel (AGCH) This is used in the downlink in response
to an access request received on the RACH. It is used to allocate an
MS to an SDCCH or directly to a Traffic Channel (TCH).
Notification Channel (NCH) This is used with voice group call and voice
broadcast services to notify mobile stations regarding such calls.
 BROADCAST CONTROL CHANNELS
• Stand Alone Dedicated Control Channel (SDCCH) : This is a bidirectional channel
used for communication with an MS when the MS is not using a TCH. The SDCCH is
used, for example, for Short Message Service (SMS) when the MS is not in a call. It
is also used for call establishment signalling prior to the allocation of a TCH for a
call.

• Slow Associated Control Channel (SACCH): This is a unidirectional or bidirectional

channel, used when the MS is using a TCH or SDCCH. For example, when an MS in
engaged in a call on a TCH, power control messages from a BTS to an MS are sent
on the SACCH. In the uplink, the MS sends measurement reports to the BTS on the
SACCH. These reports indicate how well the MS can receive transmissions from
other BTSs and the information is used in determination of if or when a handover
should occur. The SACCH is also used for short message transfers when the MS is in
on a TCH.

• Fast Associated Control Channel (FACCH) : This is associated with a given TCH and
thus is used when the mobile is involved in a call. It is typically used to transmit
non-voice information to and from the MS. Such information would include, for
example, handover instructions from the network, commands from the MS for
generation of DTMF tones, supplementary service invocations, and so on.
GSM : CHANNEL STRUCTURE
GSM : TRAFFIC SCENARIO : LOCATION MSC/ HLR/ MSC/
MS BSS
VLR AuC VLR
Channel Request : RACH

Immediate Assignment :
AGCH
Location Updating
Request: SDCCH Complete L3 Info
( Location Updating
Request )
Send Authentication
Info
UPDATE

Send Authentication
Info RR
Authentication Request

Authentication Update Location

Cancel Location
Response

Insert Subscriber Data Cancel Location RR

Insert Subscriber Data RR

Location Updating Accept Update Location RR

Clear Command

Clear Complete
Channel Release
 MSC/
GSM : TRAFFIC SCENARIO : MOBILE MS BSS PSTN
VLR
CM Service Request ( Service
Type = Mobile Originated Call
Complete Layer3 Info ( CM
Service Request )
Authentication Request
ORIGINATED VOICE CALL

Authentication Response

Cipher Mode Command

Cipher Mode Command

Cipher Mode Complete

Cipher Mode Complete

Setup
Call Proceeding

Assignment Request
Assignment Command

Assignment Complete
IAM
Assignment Complete
ACM
Alerting

Connect ANM

Connect Acknowledge
 MSC/ PSTN
MS BSS HLR GMSC
GSM : TRAFFIC SCENARIO : MOBILE VLR
IAM
SRI ( MSISDN )
PRN (MSRN)
TERMINATED VOICE CALL
PRN RR (MSRN)
SRI RR (MSRN)
IAM (MSRN )
Paging
Paging Request
Channel Request

Immediate Assignment Complete Layer 3

Paging Response Info ( Paging
Response )

Cipher Mode Command

Cipher Mode Command
Cipher Mode Complete
Cipher Mode Complete
Setup
Call Confirmed
Assignment Request
Assignment Command
Assignment Complete
Assignment Complete
Alerting
ACM ACM
Connect
Connect Acknowledge ANM ANM
GSM : TRAFFIC SCENARIO : HANDOVER MS
Serving
BSS
MSC/
VLR
Target
BSS
MS

Measurement Report

Measurement Report
Handover Required
Handover Request

Handover Request Ack

Handover Command
Handover Command

Handover Access
MS Tunes to
New Channel Handover Detect
Handover Complete
Handover Complete

Handover Complete
Measurement Report
Clear Complete
Measurement Report

Measurement Report
DIFFERENCE BETWEEN CELLULAR
SERVICE AND PCS
CELLULAR SERVICE
FROM ANALOG  DIGITAL
OPERATING FREQUENCIES :
800MHz to 900MHz band
Macrocells : coverage area
with a diameter of around 8
miles
30 KHz channel spacing, 3
time slots
High power levels  0.6 to 3
watts
USE SAME NETWORK ELEMENTS AND PERFORM SAME FUNCTIONS
PERSONAL COMMUNICATION
SERVICES
DIGITAL ONLY
OPERATING FREQUENCIES :
1.8GHz to 2GHz band
microcell and picocell
200 KHz channel spacing, 8
time slots
Lower power levels  100
milliwatts