Mobile Communications Chapter 4: Wireless Telecommunication Systems
Mobile Communications Chapter 4: Wireless Telecommunication Systems
Mobile Communications Chapter 4: Wireless Telecommunication Systems
Chapter 4: Wireless
Telecommunication Systems
Market
GSM
Overview
Services
Sub-systems
Components
DECT
TETRA
UMTS/IMT-2000
4.0.1
subscribers (x 1000)
600000
Analog total
500000
GSM total
400000
CDMA total
300000
TDMA total
PDC/PHS total
200000
total
100000
0
1996
1997
1998
1999
2000
2001
4.1.1
GSM: Overview
GSM
4.2.1
Total mobility
Worldwide connectivity
High capacity
Security functions
4.3.1
Disadvantages of GSM
There is no perfect system!!
no end-to-end encryption of user data
no full ISDN bandwidth of 64 kbit/s to the user, no transparent
B-channel
4.4.1
bearer services
MS
TE
MT
R, S
GSM-PLMN
Um
transit
network
(PSTN, ISDN)
source/
destination
network
TE
(U, S, R)
tele services
4.5.1
Bearer Services
4.6.1
Tele Services I
4.7.1
Tele Services II
Additional services
Non-Voice-Teleservices
group 3 fax
voice mailbox (implemented in the fixed network supporting the mobile
terminals)
electronic mail (MHS, Message Handling System, implemented in the fixed
network)
...
4.8.1
Supplementary services
4.9.1
MS (mobile station)
BS (base station)
MSC (mobile switching center)
LR (location register)
subsystems
RSS (radio subsystem): covers all radio aspects
NSS (network and switching subsystem): call forwarding, handover,
switching
OSS (operation subsystem): management of the network
4.10.1
GSM: overview
OMC, EIR,
AUC
HLR
NSS
with OSS
VLR
MSC
GMSC
VLR
fixed network
MSC
BSC
BSC
RSS
4.11.1
radio cell
MS
BSS
MS
Um
radio cell
MS
BTS
RSS
BTS
Abis
BSC
BSC
A
MSC
NSS
MSC
VLR
signaling
VLR
HLR
GMSC
IWF
ISDN, PSTN
PDN
O
OSS
EIR
AUC
OMC
4.12.1
network and
switching subsystem
MS
ISDN
PSTN
MSC
Um
BTS
fixed
partner networks
Abis
EIR
SS7
BTS
BSC
VLR
BTS
BTS
BSS
HLR
BSC
A
MSC
IWF
ISDN
PSTN
PSPDN
CSPDN
4.13.1
MS
Components
MS (Mobile Station)
BSS (Base Station Subsystem):
consisting of
Um
BTS
Abis
BTS
BSC
MSC
Interfaces
BTS
BTS
A
BSC
MSC
BSS
Um : radio interface
4.14.1
fixed partner
networks
Components
MSC (Mobile Services Switching Center):
IWF (Interworking Functions)
ISDN
PSTN
MSC
SS7
EIR
HLR
Databases
VLR
MSC
IWF
ISDN
PSTN
PSPDN
CSPDN
4.15.1
Radio subsystem
The Radio Subsystem (RSS) comprises the cellular mobile network
up to the switching centers
Components
4.16.1
cell
4.17.1
BTS
X
X
X
X
X
X
BSC
X
X
X
X
X
X
X
X
X
X
4.18.1
Mobile station
Terminal for the use of GSM services
A mobile station (MS) comprises several functional groups
MT (Mobile Terminal):
offers common functions used by all services the MS offers
corresponds to the network termination (NT) of an ISDN access
end-point of the radio interface (Um)
TA (Terminal Adapter):
TE (Terminal Equipment):
peripheral device of the MS, offers services to a user
does not contain GSM specific functions
TA
R
MT
S
Um
4.19.1
Components
Mobile Services Switching Center (MSC)
controls all connections via a separated network to/from a mobile
terminal within the domain of the MSC - several BSC can belong to
a MSC
Databases (important: scalability, high capacity, low delay)
4.20.1
switching functions
additional functions for mobility support
management of network resources
interworking functions via Gateway MSC (GMSC)
integration of several databases
Functions of a MSC
4.21.1
Operation subsystem
The OSS (Operation Subsystem) enables centralized operation,
management, and maintenance of all GSM subsystems
Components
different control capabilities for the radio subsystem and the network
subsystem
4.22.1
GSM - TDMA/FDMA
qu
en
c
935-960 MHz
124 channels (200 kHz)
downlink
fre
890-915 MHz
124 channels (200 kHz)
uplink
8
4.615 ms
tail
3 bits
user data
S Training S
user data
57 bits
1 26 bits 1
57 bits
guard
tail space
546.5 s
577 s
4.23.1
...
superframe
...
48
...
49
24
50
6.12 s
25
multiframe
0
...
0
24
2
120 ms
25
...
48
49
50
235.4 ms
frame
0
...
4.615 ms
slot
burst
577 s
4.24.1
Um
Abis
MS
BTS
BSC
MSC
CM
CM
MM
MM
BSSAP
RR
BTSM
RR
BTSM
LAPDm
RR
LAPDm
LAPD
LAPD
radio
radio
PCM
PCM
16/64 kbit/s
BSSAP
SS7
SS7
PCM
PCM
64 kbit/s /
2.048 Mbit/s
4.25.1
HLR
4
5
3 6
PSTN
GMSC
10
VLR
8 9
14 15
MSC
10 13
16
10
BSS
BSS
BSS
11
11
11
11 12
17
MS
4.26.1
VLR
3 4
PSTN
5
GMSC
MSC
8
2 9
MS
1
10
BSS
4.27.1
MTC/MOC
MS
MTC
BTS
MS
MOC
BTS
paging request
channel request
channel request
immediate assignment
immediate assignment
paging response
service request
authentication request
authentication request
authentication response
authentication response
ciphering command
ciphering command
ciphering complete
ciphering complete
setup
setup
call confirmed
call confirmed
assignment command
assignment command
assignment complete
assignment complete
alerting
alerting
connect
connect
connect acknowledge
connect acknowledge
data/speech exchange
data/speech exchange
4.28.1
4 types of handover
1
MS
BTS
MS
MS
MS
BTS
BTS
BTS
BSC
BSC
BSC
MSC
MSC
4.29.1
Handover decision
receive level
BTSold
receive level
BTSold
HO_MARGIN
MS
MS
BTSold
BTSnew
4.30.1
Handover procedure
MS
BTSold
BSCold
measurement
measurement
report
result
MSC
BSCnew
BTSnew
HO decision
HO required
HO request
resource allocation
ch. activation
HO command
HO command
HO command
HO access
Link establishment
clear command clear command
clear complete
HO complete
HO complete
clear complete
4.31.1
Security in GSM
Security services
access control/authentication
confidentiality
anonymity
secret:
A3 and A8
available via the
Internet
network providers
can use stronger
mechanisms
4.32.1
GSM - authentication
SIM
mobile network
Ki
RAND
128 bit
AC
RAND
128 bit
RAND
Ki
128 bit
128 bit
A3
A3
SIM
SRES* 32 bit
MSC
SRES* =? SRES
SRES
SRES
32 bit
32 bit
SRES
MS with SIM
RAND
128 bit
RAND
128 bit
RAND
128 bit
A8
cipher
key
BTS
Ki
128 bit
SIM
A8
Kc
64 bit
Kc
64 bit
data
encrypted
data
A5
SRES
data
MS
A5
4.34.1
AIUR [kbit/s]
4.8
9.6
14.4
19.2
28.8
38.4
43.2
57.6
TCH/F4.8
1
2
3
4
TCH/F9.6
TCH/F14.4
1
1
2
3
4
2
3
4
4.35.1
packet switching
using free slots only if data packets ready to send
(e.g., 115 kbit/s using 8 slots temporarily)
standardization 1998, introduction 2000?
advantage: one step towards UMTS, more flexible
disadvantage: more investment needed
GR (GPRS Register)
user addresses
4.36.1
Lost SDU
probability
Duplicate
SDU
probability
1
2
3
10-9
10-4
10-2
10-9
10-5
10-5
Delay
class
1
2
3
4
Out of
sequence
SDU
probability
10-9
10-5
10-5
Corrupt SDU
probability
10-9
10-6
10-2
4.37.1
BSS
MS
Um
SGSN
Gb
Gn
Gi
HLR/
GR
MSC
VLR
PDN
GGSN
EIR
4.38.1
BSS
Um
SGSN
Gb
Gn GGSN
Gi
apps.
IP/X.25
IP/X.25
SNDCP
SNDCP
LLC
RLC
MAC
RLC
MAC
radio
radio
BSSGP
FR
GTP
GTP
LLC
UDP/TCP
UDP/TCP
BSSGP
IP
IP
FR
L1/L2
L1/L2
4.39.1
DECT
DECT (Digital European Cordless Telephone) standardized by ETSI
(ETS 300.175-x) for cordless telephones
standard describes air interface between base-station and
mobile phone
DECT has been renamed for international marketing reasons
into Digital Enhanced Cordless Telecommunication
Characteristics
4.40.1
PA
D3
PT
VDB
D2
FT
local
network
PT
HDB
D1
global
network
FT
local
network
4.41.1
U-Plane
signaling,
interworking
application
processes
network
layer
data link
control
management
OSI layer 3
data link
control
OSI layer 2
physical layer
OSI layer 1
4.42.1
DECT layers I
Physical layer
modulation/demodulation
generation of the physical channel structure with a guaranteed
throughput
controlling of radio transmission
MAC layer
maintaining basic services, activating/deactivating physical
channels
multiplexing of logical channels
segmentation/reassembly
error control/error correction
4.43.1
12 down slots
slot
0
0
sync
A: network control
B: user data
X: transmission quality
25.6 kbit/s
simplex bearer
32 kbit/s
31 0
0
419
D field
A field
12 up slots
387
B field
63 0
protected
mode
319 0
X field
DATA
DATA
DATA
DATA
64
16
64
16
64
16
64
16
unprotected
mode
DATA
4.44.2
DECT layers II
4.45.1
Network layer
similar to ISDN (Q.931) and GSM (04.08)
offers services to request, check, reserve, control, and release
resources at the basestation and mobile terminal
resources
main tasks
call control: setup, release, negotiation, control
call independent services: call forwarding, accounting, call redirecting
mobility management: identity management, authentication,
management of the location register
4.46.2
DECT
basestation
fixed network
DECT
Common
Air Interface
DECT
Portable Part
GAP
4.47.1
4.48.1
hyperframe
0
...
57
58
59
61.2 s
15
16
17
1.02 s
multiframe
0
...
CF
frame
0
slot
509
56.67 ms
Control Frame
14.17 ms
4.49.1
UMTS
UTRA (UMTS Terrestrial Radio Access)
enhancements of GSM
EDGE (Enhanced Data rates for GSM Evolution): GSM up to 384 kbit/s
CAMEL (Customized Application for Mobile Enhanced Logic)
VHE (virtual Home Environment)
4.50.1
UMTS architecture
UTRAN (UTRA Network)
cell level mobility
Radio Network Subsystem (RNS)
UE (User Equipment)
CN (Core Network)
Uu
UE
Iu
UTRAN
CN
4.51.1
...
69
70
71
13
14
15
frame
10 ms
...
slot
625 s
pilot
625 s
625 s
TPC
TFI
uplink DPDCH
data
pilot
TPC
DPCCH
TFI
uplink DPCCH
W-CDMA
1920-1980 MHz uplink
2110-2170 MHz downlink
chipping rate:
4.096 Mchip/s
soft handover
localization of
MS (ca. 20 m precision)
complex power control
(1600 power control
cycles/s)
data
DPDCH
downlink DPCH
TPC: Transmit Power Control
TFI: Transport Format Identifier
DPCCH: Dedicated Physical Control Channel
DPDCH: Dedicated Physical Data Channel
DPCH: Dedicated Physical Channel
4.52.1
frame
10 ms
...
13
14
15
slot
625 s
data
midample
data
GP
traffic burst
W-TDMA/CDMA
2560 chips per slot
symmetric or asymmetric
slot assignment to up/downlink
tight synchronization needed
simpler power control
(100-800 power control
cycles/s)
4.53.1
MBS
(Mobile Broadband System)
fast
UMTS
mobile
GSM DECT
slow
portable
fixed
SAMBA
MEDIAN
WAND
ISDN
10 kbit/s
B-ISDN
2 Mbit/s
20 Mbit/s
30 Mbit/s
150 Mbit/s
4.54.1