Vodafone-GSM System Survey
Vodafone-GSM System Survey
Vodafone-GSM System Survey
Chapter Objectives
History of GSM
Date Activity
Nordic Telecom and Netherlands PTT send a proposal to the Conférence
Européenne des Postes et Télécommunications (CEPT) to specify a common
1982 European mobile telecommunication service.
The European Commission (EC) issues a directive, which requires member states to
reserve frequencies in the 900 MHz band for GSM.
Field tests were held in Paris and a GSM permanent nucleus was created and
comparative tests of 8 prototypes were performed.
1986
The choice was Time Division Multiple Access (TDMA) or Frequency Division Multiple
Access (FDMA).
A Combination of TDMA and FDMA selected as the transmission tech. for GSM.
September – 13, operators and administrators from 12 areas in the CEPT GSM
advisory group sign the charter GSM (Groupe Spéciale Mobile) MoU "Club"
agreement, with a launch date of 1 July 1991.
1987
The original French name was later changed to Global System for Mobile
Communications, but the original GSM acronym stuck.
GSM spec drafted. (Digital Transmission, Time Multiplexing of order 8 and slow
Hopping)
CEPT began producing GSM specifications for phased implementation.
1988
Another five countries signed the MoU
Introduction
GSM System Survey
History of GSM
Date Activity
The European Telecommunications Standards Institute (ETSI) defined GSM as the
1989 internationally accepted digital cellular telephony standard and took over responsibility
of GSM specifications.
Phase 1 specifications were frozen to allow manufacturers to develop network
1990
requirements and the first GSM prototype was brought to service.
The GSM 1800 standard was released.
1991
An addendum was added to the MoU allowing countries outside CEPT to sign.
Phase 1 specifications were completed.
January - First commercial phase 1 GSM network operator is Oy Radiolinja Ab in
Finland
1992
December 1992 - 13 networks on air in 7 areas
First International roaming agreement was signed between Telecom Finland and
Vodafone in UK.
Australia became the first non-European country to sign the MoU. The MoU now had
a total of 70 signatories.
GSM demonstrated for the first time in Africa at Telkom '93 in Cape Town
1993 GSM networks were launched in Norway, Austria, Ireland, Hong Kong and Australia.
The number of GSM subscribers reached one million.
The first commercial DCS 1800 system was launched in the U.K.
December 1993 - 32 networks on air in 18 areas
Introduction
GSM System Survey
History of GSM
Date Activity
GSM MoU is formally registered as an Association registered in Switzerland
December 1996 120 networks on air in 84 areas
8K SIM launched
1996
Pre-Paid GSM SIM Cards launched
Option International launches world's first GSM/Fixed-line modem
Nov 1996 - Sole Governmental operator in Egypt goes online.
1997 First dual-band GSM 900-1900 phone launched by Bosch
At the beginning of 1998 the MoU has a total of 253 members in over 100 countries
and there are over 70 million GSM subscribers worldwide. GSM subscribers account
for 31% of the world’s mobile market
Vodacom Introduces Free Voice Mail
1998 GSM SIM Cracked in USA
21 May 1998. Egypt privatizes its GSM operator.
Iridium Live 11/98
125m GSM 900/1800/1900 users worldwide (12/98)
1 Dec 1998. Click GSM commercial launch.
Introduction
Chapter Objectives
Know the role of the Basic nodes that compose the GSM
network
Know how they are interconnected together
Know the different Identities used in GSM World
Basic GSM Network Structure
GSM System Survey
BTS
BSC MSC/VLR
Other Switching
Nodes
Radio Interface
PTT
GW Of another network
PABX
MS Another MSC
Basic GSM Network Structure
GSM System Survey
Authentication Center
Triplets
RAND SRES Kc
Triplet
RAND SRES Kc
Triplet
RAND SRES Kc
Basic GSM Network Structure
GSM System Survey
Producing Triplets
Authentication
Authentication SRES
Algorithm
Algorithm SRES
SRES
A3
A3
Ki
RAND
Random
Random
Number RAND
Number RAND
RAND
Generator
Generator
IMSI RAND
Ki Ki
Ciphering
Ciphering Kc
Algorithm
Algorithm Kc
A8 Kc
A8
Basic GSM Network Structure
GSM System Survey
Barred
SIM Card
SRES MS
Rand A3 Ki
Rand A8 Kc
Basic GSM Network Structure
GSM System Survey
TDMA Encryption
Frame Number Algorithm
Encrypted
Encrypted
DATA
DATA
Air Interface
Mobile Station
Encryption
Algorithm Kc
TDMA Decryption
Frame Number Algorithm
DATA DATA
Basic GSM Network Structure
GSM System Survey
It stores a copy of the HLR Profile for all currently registered mobile subscribers
who are covered by cells belonging to the MSC coverage area.
The VLR is always integrated with the MSC.
The VLR stores the Location area of the MS (which is not stored in the HLR).
Basic GSM Network Structure
GSM System Survey
Manages the Radio Communication with the mobile station over the
air interface.
Converts the GSM radio signals into a format that can be recognized by the BSC.
that stores:
- The international mobile subscriber Identity
IMSI
GSM Identities
CC NDC SN CC NDC SN
CC : Country Code
NDC : Network Destination Code
SN : Subscriber Number
Basic GSM Network Structure
GSM System Survey
GSM Identities
GSM Identities
GSM Identities
The TMSI can be allocated to the mobile subscriber in order to be used instead of his
IMSI during all radio communications. The purpose is to keep subscriber information
confidential on the air interface.
The TMSI is relevant on the local MSC/VLR level only and is changed at certain
events or time intervals. Each local operator can define its own TMSI structure.
Basic GSM Network Structure
GSM System Survey
GSM Identities
When a mobile terminating call is to be set-up, the HLR of the called subscriber requests
the MSC/VLR to allocate an MSRN to the called subscriber.
This MSRN is returned via the HLR to the GMSC.
The GMSC routes the call to the MSC/VLR exchange where the called subscriber is
currently registered.
The routing is done using the MSRN. When the routing is completed, the MSRN is
released.
The interrogation call routing function (request for MSRN) is part of the MAP.
All data exchanged between GMSC-HLR-MSC/VLR for the purpose of interrogation is
sent over S7 signaling.
The MSRN is built up like an MSISDN.
Basic GSM Network Structure
GSM System Survey
SS
AUC
PLMN
SC
ISDN HLR
SMSC-GMSC
SMS-IWMSC
GWMSC
PSTN MIN
DTI EIR
MSC/VLR BGW
BSS
SGSN
BSC/TRC
GPRS Air I/f
OSS
MS BTS
Basic GSM Network Structure
GSM System Survey
Chapter Objectives
HLR
Another
Radio Interface Switching
Node
GW Of another network
PTT
Another MSC
MS PABX
Radio Coverage
GSM System Survey
RBLT
STM
BSC
Synchronous
Transport Module TE Fiber
155 Mb/sec
Backbone
2 Mb/sec
n .
Co
F M B
DD AD B/
Digital Distribution
Frame Ramsis PTT
Aswan
PTT
TE Fiber SDH
Alex
PTT
Backbone 2 Mb/sec
Suez F M
DD AD
PTT
Add / Drop
Multiplexer
Transmission System
GSM System Survey
Transmission system
Ramsis PTT
RBLT
BSC
SDH 2 Mb/sec
F F
DD Misrfone DD
Switch
TE Remote
PTT
0 1 2 .. .. .. 29 30 31
Transmission System
GSM System Survey
Ramsis PTT
RBLT
BSC
F F
DD Misrfone DD
Switch
0 1 2 .. .. .. 13 14 15
TE Remote
PTT
016 1 17 2 .... .. .. 13
28 14
29 15
31
Transmission System
GSM System Survey
Introducing DXX
Ramsis PTT
RBLT
BSC
DXX
L
F F
DD Misrfone DD
Switch
HUB
TE Remote
X PTT
X
RD
Questions ?
GSM System Survey
Break
Chapter 4 : Radio Coverage
Chapter Objectives
Cell Geometry
Dead Spots
R R R
Tradeoffs
• The number of cells required to cover a given area.
Transceiver Antenna
Sectorial Antenna
Sectorial Antenna
Due to the obstacles in the coverage area the actual shape of the
cells would be Random.
Radio Coverage
GSM System Survey
Cell Classification
Macrocell
Umbrella Cell
Picocell
In building
coverage
Microcell
(A) Install one transceiver with high radio (B) Divide the service area into smaller areas
power at the center of the service area (cells)
Drawbacks Advantages
• The mobile equipments used in this • Each cell as well as the mobile handsets
network should have high output power will have relatively small power transceivers.
in order to be able to transmit signals
across the coverage area.
• The usage of the radio resources would • The frequency spectrum might be
be limited. “reused” in two far separated cells. This
yields:
KHz 200
890.2 890.6 Uplink
1 2 3 4 121
121 122 123 124
KHz 200
1710.2 1710.6 Uplink
1 2 3 4 371 372 373 374
95 MHz
45 MHz
GSM 1800
GSM 900 With 374 ARFCN
With 124 ARFCN
Frequency Reuse
The frequency reuse is performed by dividing the whole available frequencies between a
group of neighboring cells which is called frequency reuse pattern or a “Cluster”, and then
repeat this cluster over the whole network on 2 conditions:
The group of frequencies allocated to a given cell must not be used in the
adjacent cells.
Enough distance between the cells where the same group of frequencies are reused.
Radio Coverage
A3 B3 GSM System Survey
A2 B2
3/9 Cluster A1 B1
A3 B3 C3 A3 B3
A2 B2 C2 A2 B2
A1 B1 C1 A1 B1
A3 B3 C3 A3 B3 C3
A2 B2 C2 A2 B2 C2
A1 B1 C1 A1 B1 C1
C3 A3 B3 C3 A3 B3
C2 A2 B2 C2 A2 B2
C1 A1 B1 C1 A1 B1
A3 B3 C3 A3 B3 C3
A2 B2 C2 A2 B2 C2
A1 B1 C1 A1 B1 C1
C3 A3 B3 C3 A3 B3
C2 A2 B2 C2 A2
3/9 cluster in which the B2
C1
available frequencies are A1 B1 C1 A1 B1
B2 D2 F2 A2 E2
B1 D1 F1 A1 E1
C3 G3 B3 D3 F3 A3 E3
C2 G2 B2 D2 F2 A2 E2
C1 G1 B1 D1 F1 A1 E1
A3 E3 C3 G3 B3 D3 F3
A2 E2 C2 G2 B2 D2 F2
A1 E1 C1 G1 B1 D1 F1
B3 D3 F3 A3 E3 C3 G3
B2 D2 F2 A2 E2 C2 G2
B1 D1 F1 A1 E1 C1 G1
C3 G3 B3 D3 F3
C2 G2 B2 D2 F2
C1 G1 B1 D1 F1
C3 G3
C2 G2
C1 G1
7 / 21 Cluster
Radio Coverage
GSM System Survey
Fading Problems
Fading Problems
Radio Problems and digital information
GSM System Survey
db
Fading Margin
Receiver
Sensitivity
time
Radio Problems and digital information
GSM System Survey
f3
f2
f1
0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7
t
Radio Problems and digital information
GSM System Survey
0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7
K m
1.1
1. 1 K m
Dir
ec
1. 1 t r ay
Km
There would be an interference between the a bit in the reflected ray and 1 bit later in the
direct way .
Radio Problems and digital information
GSM System Survey
The C/R ratio is defined as the difference in signal strength between the signal
received from the RBS and the strongest reflected signal .
Received
Bits Data T* Data
VITERBI
Probable
received
bit pattern
Channel
xxx T xxx Model
Radio Problems and digital information
GSM System Survey
Speech Coding
Channel Coding
Interleaving
Ciphering/Encryption
Burst Formatting
Modulation and
Transmission
Radio Problems and digital information
GSM System Survey
Speech Coding
Analog to digital conversion takes place in 3
steps: Channel Coding
1. Sampling Interleaving
2. Quantization
3. Coding Ciphering/Encryption
Burst Formatting
Modulation and
Transmission
1. Sampling
Speech Coding
2. Quantization
Channel Coding
Interleaving
Ciphering/Encryption
Burst Formatting
Modulation and
Transmission
Speech Coding
3. Coding
Channel Coding
Ciphering/Encryption
Burst Formatting
Modulation and
Transmission
1 2 3 4 5 6 7 8 9 10 11 12 13 0 1 2 3 4 5 6 7 8 9 10
Radio Problems and digital information
GSM System Survey
Speech Coding
Channel Coding
Interleaving
Ciphering/Encryption
Burst Formatting
1 2 3 4 . . . . . . . . . . . . . . . 160
1 2 3 4 5 6 7 8 9 10 11 12 13 0 1 2 3 4 5 6 7 8 9 10
Radio Problems and digital information
GSM System Survey
Speech Coding
Instead of using 13 bits per sample as in A/D
conversion, GSM speech coding uses 260 bits to Channel Coding
This calculates as 260 bits / 20 ms = 13 kb/s. This provides a speech quality Ciphering/Encryption
which is acceptable for mobile telephony and comparable with wire line PSTN
phones. Burst Formatting
Modulation and
Speech Coding
speech coding does not consider the
problems which may be encountered on the radio transmission path. The Channel Coding
Burst Formatting
Modulation and
Transmission
Input is 260 bits representing 1 segment
Radio Problems and digital information
GSM System Survey
Speech Coding
1. First Level Interleaving
Channel Coding
1 2 3 4 5 6 7 8 Interleaving
9 10 11 12 13 14 15 16 Ciphering/Encryption
17 18 19 20 21 22 23 24
Burst Formatting
25 26 27 28 .. .. .. .. Modulation and
Transmission
.. .. .. .. .. .. .. ..
.. .. .. .. .. .. .. ..
57 Bits
.. .. .. .. .. .. .. ..
.. .. .. .. .. .. .. ..
8 Groups
Radio Problems and digital information
GSM System Survey
Speech Coding
2. Second Level Interleaving
Channel Coding
20 ms Block A
1 Interleaving
2 1A T 5D
3
4
5
2A T 6D Ciphering/Encryption
6
7 3A T 7D
8 Burst Formatting
4A T 8D
20 ms Block B Modulation and
1
2
1B T 5A Transmission
3
4 2B T 6A
5
6 3B T 7A
7
8 4B T 8A
20 ms Block c
1 1C T 5B
2
3 2C T 6B
4
5 3C T 7B
6
7
8
4C T 8B
20 ms Block D 1D T 5C
1
2 2D T 6C
3
4
5
3D T 7C
6
7 4D T 8C
8
Radio Problems and digital information
GSM System Survey
Speech Coding
The purpose of ciphering is to encode the
burst so that it cannot be interpreted by any other device than the intended Channel Coding
receiver.
Interleaving
The ciphering algorithm in GSM is called the A5 algorithm.
It does not add bits to the burst, meaning that the input and output Ciphering/Encryption
to the ciphering process is the same as the input: 456 bits per 20 ms.
Burst Formatting
Modulation and
Transmission
Radio Problems and digital information
GSM System Survey
Speech Coding
Every transmission from an MS/BTS must
include some extra information such as the training sequence. Channel Coding
The process of burst formatting is to add these bits (along with some others Interleaving
such as tail bits) to the basic speech/data being sent.
Ciphering/Encryption
In GSM, the input to burst formatting is the 456 bits received from ciphering. Burst Formatting
Burst formatting adds a total of 136 bits per block of 20 ms, bringing the Modulation and
overall total to 592. Transmission
Now, the 592 bits will be sent on 4 bursts, each containing 2 x 57 bits + 136 /
4 = 148 bits.
Speech Coding
To ramp up means to get power from
the battery/power supply for transmission. Channel Coding
Ramping down is performed after each transmission to ensure that the Interleaving
MS is not transmitting during time slots allocated to other MSs.
Ciphering/Encryption
The output of burst formatting is a burst of 156.25 bits or 625 bits per 20
ms. When it is considered that there are 8 subscriber per TDMA frame, Burst Formatting
the overall bit rate for GSM can be calculated to be 270.9 kbits/s. Modulation and
Transmission
TDMA Frame
0 1 2 3 4 5 6 7
3 57 1 26 1 57 3 8.25
Speech Coding
Channel Coding
Interleaving
Ciphering/Encryption
Burst Formatting
Modulation and
Transmission
Chapter 6 : Air Interface
Chapter Objectives
Physical Channels
GSM band is divided into 124 RF channels, and each channel is divided into 8 time slots
using TDMA. These time slots are called “physical channels”.
CH 124 0 1 2 3 4 5 6 7 0 1 2 3 4 5
CH 3 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7
CH 2 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7
CH 1 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7
Time
Air Interface
GSM System Survey
Logical Channels
A physical channel may be occupied by a traffic channel or a control channel, both of
them are classified as “logical channels”.
Logical Channels
Traffic Channels
Carries either encoded speech or user data up and down link between a single mobile
and a single BTS.
Broadcast Channels
From Single BTS to all the mobiles in the area
0 1 2 3 4 5 6 7
Theguard
The training sequence
period of 8.25isbits
inserted
length, inwhich
the middle of the burst
is equivalent to help
to about 30 the
s, Viterbi
is left at
equalizer
the end to create thetochannel model
The
The
One bitof
tail each
bits help
subscriber burst,
“stealing the
speech
flag” prevent
equalizer
or
will data isoverlapping
to
be added determine
encrypted between
to eachthe
intostart
57to
block bitconsecutive
and stop points
blocks.
indicate Each bursts
whether theand
ofthe
burst will to
It carries
facilitate
contain
burst is burst
transmitted two information
57
stolen bits
for blocks
the ofthree
synchronization
bits. They are
FACCH all logical
from bits
two atchannels
the
different
signaling except
orbeginning
as a and
speech
used RACH, SCH
at the
segments.
normal endand
traffic FCCH
of the
channel burst
and they are always zeros
Air Interface
GSM System Survey
0 1 2 3 4 5 6 7
This is the one used by the channel (FCH) for frequency correction of the mobile. It
consists of a long sequence of bits called the fixed bits which are all equal to zeros,
leading to a constant frequency output from the GMSK modulator
Air Interface
GSM System Survey
0 1 2 3 4 5 6 7
The SCH burst consists of a long synchronization sequence along with the important information
being encrypted and divided into two blocks. The TDMA frame number is sent on the SCH channel,
which carries also the Base station Identity code (BSIC). The TDMA frame number is used by the
mobile to determine which control channels will be transmitted on that frame. It is used also as one
of the input parameters to the algorithm that calculates the ciphering key Kc, which is in turn used
for encryption of subscriber information transmitted on the air interface
Air Interface
GSM System Survey
0 1 2 3 4 5 6 7
The Access Burst is used by the RACH channel. The mobile sends this burst when it
does not know the distance to its serving BTS, which is the case when the mobile is
switched on or after it makes a handover to a new cell. So this burst must be shorter
in order to prevent it from overlapping with the burst on the next time slot
Air Interface
GSM System Survey
0 1 2 3 4 5 6 7
The dummy burst is sent from the BTS when there is nothing else to be sent. It carries
no information and it has the same structure of a normal burst with the encrypted bits
replaced by a known bit pattern to the mobile
Air Interface
GSM System Survey
0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7
F S B B B B C
F S B C F S C C F S C C F S C C F S C C I
2 4 6 8 10 12 14 16 18 20 22 24 26 28 30 32 34 36 38 40 42 44 46 48 50
1 3 5 7 9 11 13 15 17 19 21 23 25 27 29 31 33 35 37 39 41 43 45 47 49 51
0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7
R R R R R R R
R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R
Time slot 0 in the uplink direction is reserved for the RACH channel which is used
by the mobiles to make random access request to the system
Air Interface
GSM System Survey
0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7
D0 D0 D0 D0 D1 D1 D1
D0 D1 D2 D3 D4 D5 D6 D7 A0 A1 A2 A3 I I I
2 4 6 8 10 12 14 16 18 20 22 24 26 28 30 32 34 36 38 40 42 44 46 48 50
1 3 5 7 9 11 13 15 17 19 21 23 25 27 29 31 33 35 37 39 41 43 45 47 49 51
D0 D1 D2 D3 D4 D5 D6 D7 A4 A5 A6 A7 I I I
52 102
Air Interface
GSM System Survey
0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7
A5 A5 A5 A5 A6 A6 A6
A5 A6 A7 I I I D0 D1 D2 D3 D4 D5 D6 D7 A0
2 4 6 8 10 12 14 16 18 20 22 24 26 28 30 32 34 36 38 40 42 44 46 48 50
1 3 5 7 9 11 13 15 17 19 21 23 25 27 29 31 33 35 37 39 41 43 45 47 49 51
A1 A2 A3 I I I D0 D1 D2 D3 D4 D5 D6 D7 A4
52 102
Air Interface
GSM System Survey
0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7
T T T T T T T
T T T T T T T T T T T T A T T T T T T T T T T T T I 26 TDMA Frames
2 4 6 8 10 12 14 16 18 20 22 24 26
=
1 3 5 7 9 11 13 15 17 19 21 23 25 1 Traffic Multi-frame
A (SACCH)
This contains the control signaling, an example of this is in order to change output power.
Downlink Uplink
Air Interface
Frame F D T R A T
S D T R A T
B D T R A T GSM System Survey
B D T R A T
B D T R A T
B D T R A T
C D T R A T
C D T R A T
C D T R A T
C D T R A T
F D T R A T
51 TDMA Frames = 1 BCCH Multi-frame S D T R A T
Frame C D A I A I A I R I A I A I A I
C D T R I T
C D T R I T
C D T R D T
C D T R D T
C D T R D T
C D T R D T
C D T R D T
F D T R D T
S D T R D T
C D T R D T
C D T R D T
C D T R D T
Frame C D I A I A I A R D I A I A I A
C D T R D T
C D T R D T
C D T R D T
C D T R D T
F D T R D T
S D T R D T
C A T R D T
C A T R D T
C A T R D T
C A T R D T
C A T R D T
C A T R D T
Frame C A A I A I A I R D A I A I A I
C A T R D T
F A T R D T
S A T R D T
C A T R D T
C A T R D T
C A T R D T
C A T R D T
C A T R D T
C A T R A T
C I T R A T
C I T R A T
Frame I I T R A T
Air Interface
GSM System Survey
F S B C F S C C F S C C F S C C F S C C I
2 4 6 8 10 12 14 16 18 20 22 24 26 28 30 32 34 36 38 40 42 44 46 48 50
1 3 5 7 9 11 13 15 17 19 21 23 25 27 29 31 33 35 37 39 41 43 45 47 49 51
T T T T T T T T T T T T A T T T T T T T T T T T T I T T T T T T T T T T T T A T T T T T T T T T T T T
I T T T T T T T T T T T T A T T T T T T T T T T T T I T T T T T T T T T T T T A T T T T T T T T T T T
T I T T T T T T T T T T T T A T T T T T T T T T T T T I T T T T T T T T T T T T A T T T T T T T T T T
T T I T T T T T T T T T T T T A T T T T T T T T T T T T I T T T T T T T T T T T T A T T T T T T T T T
T T T I T T T T T T T T T T T T A T T T T T T T T T T T T I T T T T T T T T T T T T A T T T T T T T T
T T T T I T T T T T T T T T T T T A T T T T T T T T T T T T I T T T T T T T T T T T T A T T T T T T T
T T T T T I T T T T T T T T T T T T A T T T T T T T T T T T T I T T T T T T T T T T T T A T T T T T T
T T T T T T I T T T T T T T T T T T T A T T T T T T T T T T T T I T T T T T T T T T T T T A T T T T T
Air Interface
GSM System Survey
0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7
Offset
0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7
1 TCH Multi frame = 26 TDMA Frames 1 BCCH Multi frame = 51 TDMA Frames
1 2 e.g. TCH 26 1 2 e.g. BCCH 51
0 1 2 3 4 5 6 7
Structure
3 57 1 26 1 57 3 8.25 of TDMA
Normal burst Frames
156.25 bits in 577 m Sec
Air Interface Scan RF Channel and measure signal Strength
for 3 – 5 sec
GSM System Survey
Tune to the RF channel with the highest
Measurement in received average signal strength
idle mode Determine if it is a BCCH carrier by searching Tune to the RF Channel with the highest
for frequency correction bursts signal strength not already used
Is it No
a BCCH
carrier?
Yes
No
Does the
carrier belong to the
wanted PLMN
Yes
Yes
Is the cell
Barred for
C1 ( Path Loss Criterion access ?
Parameter) is a parameter used
to make sure that the MS camps No
No
on the cell with the highest
Is C1>=0?
probability of successful
communication on the uplink and Yes
downlink Camp on this cell
Air Interface
GSM System Survey
0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7
Offset
0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7
The mobile is informed on the SACCH channel which BCCH frequencies to be measured.
The mobile will try to measure the signal strength of these carriers one by one during the time between
transmission and reception of the allocated traffic channel: the mobile transmits, measures and then
receives, and so on.
To make sure that the measured carriers do not belong to co-channel cells, the mobile will have to check the
identity of the adjacent cells by reading the BSIC value sent on the SCH of each cell. This will take place
during the idle frame number 26.
The signal strength of the serving cell is measured during reception of the allocated traffic channel. Then the
mobile will make a list of the strongest six carriers and their BSIC values along with the signal strength of its
cell, and reports this list to the BSC via the uplink SACCH channel which is repeated once every 26 frames.
Questions ?
Chapter 7 : Traffic Cases
Communicate Anywhere
Traffic Cases
GSM System Survey
Chapter Objectives
Location Update
Actually, the location update process is invited in aim to exactly identify your location
within the network so that any incoming call goes directly to the called subscriber.
To fulfill this aim, one can say that we may update the system with the cell ID each time
the subscriber changes his serving cell.
The MSC/VLR will now know the exact cell you are roaming in.
This will result in a huge amount of location update messages.
An extreme is never to make a location update and to be paged in all the network. This
will cause huge amount of paging messages.
Location Area
Location area is a part of the MSC/VLR coverage area. Each group of adjacent cells is assigned a
universal unique location area identity.
The mobile subscriber is only required to update the network with its new location every time it
changes its Location Area.
Introducing the concept of Location area enables us to make an approximate estimation of your
location.
Traffic Cases
GSM System Survey
LA 1
LA 3
MSC
LA 2
LA 4
Traffic Cases
GSM System Survey
602 02 1607
Updates
4 LA Record 1. The Mobile sends an allocation request
message to the BTS
MSC/VLR
LA 1
7. The new MSC/VLR sends a location
updating confirmation message to
the mobile
Traffic Cases
GSM System Survey
IMSI Detach
IMSI Attach
BSC MSC/VLR
2 3
4
Traffic Cases
GSM System Survey
Periodic location update is a routine task performed by the network if the MS doesn’t
make any location update ( any of the previous 4 types) during a predefined period.
Handover
Handover is to keep continuity of the call when the subscriber is roaming along the
network moving from one cell to another and moving between different nodes in the
network.
During call, the MS is continuously measuring transmission quality of neighboring
cells and reports this results to the BSC through the BTS.
The BSC, being responsible on supervising the cells, is responsible of handover
initiation.
Good neighbor relations between cells is an important factor in keeping the network
performance in the accepted level.
Traffic Cases
GSM System Survey
Types of Handover
3. Inter MSC
When the cell to which the call will be handed over belongs to the different BSC and
different MSC.
Traffic Cases
GSM System Survey
Serving Cell 3 4 New Cell 4. The MS tunes to the new frequency and
Sends handover access burst
6 5. The new cell detects the handover burst
5 and sends information about the suitable
timing advance to the MS
6. The MS sends a HO complete message to the new cell
7. The new cell sends a message to the BSC that the handover is successful
8. The BSC orders the old Cell to release the TCH
Traffic Cases
GSM System Survey
MSC/VLR
GMSC
1
HLR
3
PSTN
5
2
6 4
+2010….
MSC/VLR
Originating Leg
Terminating Leg
Attached
VLR ADD=
xyz
HLR
GWMSC
Traffic Cases
GSM System Survey
MSC/VLR
Roaming Call
Forwarding Leg
MSISDN
+2010…. MSC/VLR MSC/VLR
A B
Roaming Call
Forwarding Leg
MSISDN
+46…
MSC/VLR MSC/VLR
A B
HLR
GWMSC
Questions ?
GSM System Survey
Chapter 8 : GSM Services
Chapter Objectives
Introduction
Fax calls
Data calls
Supported by :
Information sent at call setup from ISDN or GSM on “how” the service will be
performed, is called Bearer Capabilities (BC).
ISDN and GSM have different transmission requirements and different coding
schemes, so they have different bearer capabilities referred to as ISDN-BC and
GSM-BC.
PSTN can not provide this type of information during call setup, so it can not
distinguish between a telephony call and a fax or data call.
For an MSC to be able to handle fax or data calls, it should be provided with a Data
Transmission Interface (DTI) which is used for :
rate adaptation.
Protocol conversion.
Providing modems.
such that Fax , Data calls are to be established to/from mobile subscribers.
The High Speed Circuit Switched Data (HSCSD) uses 4 time slots to perform a
data call thus increasing the rate into 57.6 KB/S
GSM Services
GSM System Survey
AMSISDN
PSTN
GWMSC MSC/VLR
DTI
GSM Services
GSM System Survey
PSTN
MSC
DTI
GSM Services
GSM System Survey
Future Enhancements
GSM Evolution
Functionality
UMTS
& capabilities capable systems
WCDMA
2 Mbps
EDGE/IS-136
384 kbps
GPRS
115 kbps
Packet Switched
HSCSD
57.6 kbps
Circuit Switched
Circuit data
<9.6 kbps
Speech
Time
1997 1998 1999 2000 2001 2002
Universal
Enhanced
General
Wideband
High Mobile
Data
Packet
Speed
Code Telecommunication
RateRadio
Circuitfor
Division GSM
Services
Evolution
Switching
Multiple System
Data
Access
GSM Services
GSM System Survey
The Short Message Service (SMS) allows a mobile subscriber to send and
receive text messages composed of 160 characters at most.
The short messages sent or received are handled by the Short Message
Service Center ( SMSC ), which consists of three parts :
Service Center
Handles the delivery of short messages to/from Short Message Entities (SME),
which can be any originator or receiver of short messages such as mobile, fax, …
etc.
Stores the short messages.
Create billing files.
Monitors system events and alarms.
SMS-GMSC
Interrogates the HLR to determine the location of a mobile subscriber.
Forwards the short message to a mobile subscriber via its serving MSC.
SMS-IWMSC
Receives the mobile originated short message from any MSC in the network.
Receives an alert message from the HLR to inform the SC that a mobile subscriber
who was absent during a previous short message delivery attempt is reachable
again.
GSM Services
GSM System Survey
SC
MSC1 MSC2
HLR
MO MT
GSM Services
GSM System Survey
SC
Pending
Message
Flag
MSC1 MSC2
HLR
Waiting
Message
Data
MO MT
GSM Services
GSM System Survey
SC
Alert:
The MS is
present
SMS - IWMSC SMS - GMSC
Alert:
The MS is
present
Alert:
The MS is
present
MSC1 MSC3
HLR
Attach
Alert :
The MS is
present
MO MT
GSM Services
GSM System Survey
A pre-paid
subscriber
858
MSC
MSC IVR
IVR
Charging 858 868
A pre-paid
subscriber
Oick-3
MSC
MSC00 Oick-6
SDP1
SDP1 Oick-3
SCP2
SCP2 satellite
Oick nodes
HLR
SDP2
SDP2 Oick-2
SCP3
SCP3
Oick-5
MSC Oick-2 SDP1
SDP1
MSC13
13 Oick-6
Oick-5
Questions ?
GSM System Survey
Thank You For your time