1.

12 Questions (GSM)
1. Which algorithm is used to digitize a voice signal for transmission in a digital circuit-
switched network and at which data rate is the voice signal transmitted?
2. Name the most important components of the GSM Network Subsystem (NSS) and their
tasks.
3. Name the most important components of the GSM radio network (BSS) and their tasks.
4. How is a BTS able to communicate with several subscribers at the same time?
5. Which steps are necessary to digitize a speech signal in a mobile device before it can be
sent over the GSM air interface?
6. What is a handover and which network components are involved?
7. How is the current location of a subscriber determined for a mobile-terminated call and
how is the call forwarded through the network?
8. How is a subscriber authenticated in the GSM network? Why is an authentication
necessary?
9. How is an SMS message exchanged between two subscribers?
10. Which tasks are performed by the RISC processor and which tasks are performed by the
DSP in a mobile device?
11. How are data stored on the SIM card?
12. What is CAMEL and for which services can it be used?

Answers for Chapter 1

Answer_1:
In a circuit switched digital telecommunication network a speech channel usually uses a 64
kbit/s timeslot. The pulse code modulation (PCM) algorithm is used to convert an analog
voice signal for digital transmission.

Answer_2:
The GSM NSS consists of at least of the following network components:

 MSC: The Mobile Switching Center, which includes the Visitor Location Register,
is responsible for connecting calls and mobility management.
 The Home Location Register, which stores subscriber information
 Service Control Points, which handle services like prepaid or location based billing
applications
 SMS Service Center
 Voice Mail Systems

Answer_3:
The GSM BSS consists of the following network components:

 The Base Station Controller, which controls the channels on the air interface. It is
also responsible for power control, timing advance control and handovers.
 Transcoding and Rate Adaptation units convert the speech codecs used in the BSS
into 64 kbit/s PCM coded channels used in the core network. (Note: The TRAU is
 usually co-located with the MSC in order to minimize the number of required
transmission links between the MSCs and the BSCs).
 The Base Transceiver Stations (BTS): A high number of base stations are connected
to a base station controller. They are responsible for transferring data streams over
the air interface.

Answer_4:
Three methods are used: Several calls can be handled on the same frequency. This is done
by splitting a channel into 7 timeslots. This is called Time Division Multiple Access
(TDMA). Capacity can be further increased by using several carrier frequencies per base
station. Typical GSM base stations today use one to three carriers. This is called Frequency
Division Multiple Access (FDMA). Additionally, a further increase can be achieved by
splitting the coverage area of a base station into several sectors and by using different
carrier frequencies in each sector. Typical base stations today use either two or three
sectors.

Answer_5:
The first step is to digitize the voice signal recorded by the microphone by using the PCM
codec. This digital signal is then used as input for the speech coder (Full Rate, Enhanced
Full Rate, AMR) which compresses the data generated by the PCM codec. This data stream
is then sent to the channel coder which adds redundancy (error detection and error
correction bits). Afterwards, the Interleaver changes the order of the bits and spreads
consecutive bits over a wider area of the data stream. This allows spreading transmission
errors which usually affect several consecutive bits over a larger area which helps the
receiver to detect and correct errors. To protect the communication from eavesdropping and
tampering the resulting data stream is then ciphered. Finally the now encrypted data stream
is modulated onto an analog carrier frequency and transmitted.

Answer_6:
A handover changes the routing of an ongoing voice call from one cell to another. This is
necessary if a subscriber leaves the coverage area of a cell and enters the coverage area of
another. Network elements involved in the handover are the mobile station, the old and the
new base station and the base station controller. If the current base station controller is not
responsible for the new cell, the mobile switching center and the BSC controlling the new
cell are also part of the handover procedure.

Answer_7:
On an incoming call the Gateway MSC queries the home location register of the subscriber
to ask for its location (Send Routing Information). The HLR is aware of the current
MSC/VLR (Visited MSC) of the subscriber and requests a temporary identifier, the Mobile
Station Roaming Number (MSRN). This number is returned by the HLR to the Gateway
MSC. From there the call can then be forwarded to the Visited MSC. At this stage of the
call routing process, standard ISUP signaling is used which is already known from fixed
line networks. Instead of using the phone number as identifier, the MSRN is used to route
the call. On the Visited MSC, the temporary MSRN is used to correlate the call to the
correct subscriber. As the V-MSC is only aware of the subscriber’s current location area,
the subscriber has to be paged in order to establish the cell to which the call has to be
forwarded to.

Answer_8:
A mobile phone always sends an SMS to the SMS Service Center (SMSC) which is a
network node in the core network. The SMSC then uses the phone number contained in the
short message to query the HLR for the current MSC of the destination subscriber. It then
forwards the message to this MSC. If the subscriber is not reachable, the Message Waiting
Flag is set in the MSC/VLR and HLR, and the SMS is stored in the SMSC. Once the
subscriber becomes reachable again the SMSC is informed and another delivery attempt is
undertaken.

Answer_9:
In order to authenticate a subscriber, the MSC queries the Authentication Center for the
Authentication Triplets of the subscriber. Elements of each triplet are a random number
(RAND) and a response value (SRES) which is generated from the random number with an
authentication algorithm. The MSC then sends the random number to the mobile station.
The MS forwards the random number to the SIM card which computes the SRES. This
value is then sent back to the network. The MSC then compares the SRES computed by the
authentication center and the SRES computed by the SIM card. The two values can only
match if the authentication center and the SIM card have used the same secret key to
generate the signed response from the same random number.

Answer_10:
In downlink direction (network to mobile phone) the DSP is used for the analysis of the
incoming data stream. The training sequence of a burst is used to calculate a channel
approximation which is then applied to the main parts of each burst. This improves
compensation of external effects on the transmission. Furthermore, the DSP compresses
and decompresses the speech data by using the Full Rate / Enhanced Full Rate / AMR
codec. The RISC processor on the other hand deals with channel coding and decoding,
interleaving/de-interleaving and ciphering/de-ciphering of the incoming and outgoing data
stream. Additionally, the RISC processor also manages the user interface, the overall
control of a connection (Mobility Management / Session Management), user programs (e.g.
Java programs) and external interfaces (serial, Bluetooth, USB, Infrared).

Answer_11:
Data is stored on the SIM card in a non volatile, re-writable memory. To the outside, the
microcontroller on the SIM card presents the memory as a directory tree and files. While
PCs use filenames to identify files and directories, the SIM card instead uses 4 digit
hexadecimal numbers. Each file has its set of individual read and write permissions. Some
files are readable only, such as the file that contains the IMSI of the user. Some files can
neither be read nor written to from the outside, like for example the file which contains the
secret key used for authentication. Directories are referred to as ‚dedicated files’, ordinary
files are called ‚elementary files’.

Answer_12:
CAMEL is the abbreviation for Customized Applications for Mobile Enhanced Logic. It
describes how databases and applications can communicate over network boundaries and
interfaces via MSCs, SGSNs and GGSNs. CAMEL is used for services such as prepaid or
location based services. As CAMEL is not restricted to the home network of a user, foreign
MSCs are able to contact databases in the home network of a subscriber for services such as
prepaid billing when a subscriber is abroad. CAMEL specifies both the protocol between
the network nodes and a state model which describes the different phases of a call by using
Detection Points. If a certain detection point is activated for a subscriber, the treatment of a
call is suspended at this point and the database and service responsible for the subscriber is
contacted for further instructions of how to proceed with the call.

2.13 Questions
1. What are the differences between circuit-switched and packet-switched data
transmission?
2. What are the advantages of the data transmission over GPRS compared to GSM?
3. Why are different modulation and coding schemes used?
4. What is the difference between the GPRS ready state and the GPRS standby state?
5. Does the GPRS network perform a handover if a cell change is required while data is
transferred?
6. Which are the new network elements that have been introduced with GPRS and what are
their responsibilities?
7. What is a temporary block flow?
8. What actions are performed during an inter-SGSN routing area update (IRAU)?
9. Why is IP used twice in the protocol stack of the Gn interface?
10. Why is it not necessary to change any settings on the mobile device for GPRS when
roaming abroad?
11. What is the difference between a GPRS attach and a PDP context activation?
12. Why is an Access Point Name (APN) necessary for the PDP context activation
procedure?
13. How are MMS messages sent and received via GPRS?
14. Name the different parts of an MMS message.

Answers for Chapter 2 (GPRS)

Answer_1:
When data is transferred over a circuit switched channel, a dedicated connection is
established between two parties. Data is sent without any overhead like lower level
addressing. Bandwidth and delay are constant. In a packet switched network on the other
hand, there is no direct connection between the endpoints of a session. Resources in the
network are only used for the connection when data is sent. Data is sent in packets which
have to contain a source and destination address in order to be transported through the
network. This also enables N:N connections in the network, i.e. a subscriber can
communicate with any subscriber without establishing a physical connection first.
Depending on the load of the network, bandwidth and delay for a connection can vary. This
is a clear disadvantage compared to a circuit switched channel. Due to the bursty nature of
many information exchanges the advantage of the packet switched approach on the other
hand is to use more bandwidth during the burst which decreases transmission time.
Answer_2:
As GPRS is a packet switched network, resources or the air interface are only assigned to a
user when data is actually sent. This tremendously increases the capacity of the network
especially for applications such as web surfing which only send and receive data at
irregular intervals. Several timeslots can be assigned to a subscriber simultaneously to
increase throughput. If the physical connection to the network is lost (e.g. due to bad
reception quality) the logical connection persists. As soon as the physical connection has
been reestablished, data transfer on higher layer resumes without the user having to
reestablish another channel manually as would be the case for a circuit switched
connection.

Answer_3:
Dynamic coding schemes allow to adapt the ratio of error correction and detection bits to
user data bits. For good transmission conditions the redundancy information in a block can
be reduced which in turn increases the overall transmission speed of the user data. During
times of bad reception, more error detection and correction bits are inserted which ensures
that the link remains stable.

Answer_4:
While in GPRS ready state the SGSN can send data to the mobile terminal without delay.
In this state, the SGSN is aware of the cell which the subscriber uses to communicate and
thus can forward incoming packets directly to the PCU responsible for this cell. The PCU
does not need to page the subscriber and can immediately assign resources on the air
interface. When changing the cell in ready state the mobile station has to send a cell update
message to the SGSN. Once the mobile station is in GPRS standby state, the SGSN is only
aware of the location are of the subscriber, as the mobile station only has to report cell
changes when a location area boundary is crossed. This reduces the mobiles energy
consumption. In order to send data frames to a mobile in standby state, the SGSN has to
page the subscriber first. The mobile station responds with an empty frame and thus
implicitly changes into the ready state again. Once the SGSN receives the empty frame it is
aware again of the cell the mobile station uses and can then forward the frame.

Answer_5:
In practice, no handovers are performed for GPRS today (Network Control Order = 0). The
mobile station has to perform cell changes on its own. In case a cell change has to be
performed during an ongoing data transfer due to deteriorating reception conditions it is
necessary to interrupt the transmission and perform the cell change. Afterwards the mobile
station reports to the SGSN from the new cell by continuing to send data. The SGSN
detects the cell change as the cell global ID is part of every incoming frame and can thus
change its routing of incoming Internet packets to the new cell.

Answer_6:
GPRS requires the following network nodes: A) The serving GPRS support node (SGSN)
which is responsible for mobility management and session management (GMM/SM). B)
The gateway GPRS support node (GGSN) which is the interface between the GPRS
network and the Internet. The GGSN is responsible for the assignment of IP addresses to
the mobile subscribers and hides subscriber mobility from the Internet. C) The packet
control unit (PCU) is the interface between the GPRS core network and the radio network.
The PCU is responsible for packet scheduling, assignment of timeslots to the subscribers
and terminates the RLC/MAC protocol.

Answer_7:
GPRS assigns resources (timeslots) to a subscriber only for the time required to send the
data. Furthermore, timeslots are not exclusively assigned to a single subscriber but only in
blocks of four bursts. This way, timeslots can be used to transfer data to several subscribers
at the same time. The temporary block flow with the temporary block identifier describes
which data blocks are addressed to which device currently listening on a timeslot.

Answer_8:
An Inter-SGSN routing area update is performed if the mobile device roams into a cell
which is connected to a new SGSN. As the new cell belongs to a new routing area, the
mobile device attempts a routing area update. The new SGSN then detects that the mobile
device is currently registered with a different SGSN and thus sends a message to the
previous SGSN to retrieve authentication information. After authenticating the mobile
station, the HLR is informed that the subscriber has changed its location to the new SGSN.
Furthermore, the GGSN is informed of the position change so it can forward incoming
packets to the new SGSN in the future. Once all of these actions are performed, the routing
area update in the core network is complete and the subscriber gets a confirmation from the
SGSN the operation was performed successfully.

Answer_9:
The GPRS core network between the SGSN and GGSN use the IP protocol for routing the
IP data frames of subscribers. These are not transferred directly, however, but are
encapsulated into GPRS tunneling protocol (GTP) frames. Part of the encapsulated frame is
the IP address of the mobile device and the source/destination of the frame. Thus, a GTP
frame contains two source and two destination IP addresses. This mechanism has the
advantage that no routing table updates are required in routers between these two network
components if the user is roaming into the area of another SGSN. In addition, the GPRS
core network is decoupled from the Internet and the GPRS user as it is not possible to
directly access these components from outside the local GPRS core network.

Answer_10:
The user does not have to change any settings on his/her device for international roaming.
All packets that are sent and received are always routed through the GGSN in the
subscriber’s home network. This is possible as the access point name (APN) is a qualified
domain name and the SGSN inserts the mobile country code (MCC) and the mobile
network code (MNC) as well as a top level domain (‘.gprs’) to the APN string received by
the subscriber during the connection establishment. This domain name is then sent to a
DNS server which resolves the domain name into the IP address of the GGSN in the
subscriber’s home network.
Answer_11:
During a GPRS attach, the mobile device registers with the network. Afterwards, the
network is aware that the device has been switched on and in which routing area it is
located. Up to this point no IP address has been assigned to the mobile device and no data
can be transmitted. The IP address is only assigned to a mobile device during the PDP
context activation procedure. Billing is also only invoked during the activation of a PDP
context.

Answer_12:
In order to transfer data via GPRS to and from the Internet, a PDP context has to be
established between the mobile device and the GPRS network. During the establishment of
a PDP context the mobile device sends the access point name which identifies the GGSN
and profile to be used to establish a connection to the internet. (Also see answer 10)

Answer_13:
MMS messages are always exchanged between a mobile device and the MMS gateway
which is located behind the GGSN. For sending an MMS the mobile device first establishes
a GPRS connection and uses the APN which the network operator has foreseen for the
MMS service. Usually it is only possible to reach the MMS gateway via this APN.
Afterwards the MMS, which has many similarities to an eMail, is sent by using an HTTP-
PUT push command. This command is also used by web browsers to send the input the
user has made on a web page in text fields, etc. to the web server. Once the MMS is
received by the MMS gateway it is stored and attempt is made to deliver the message to the
destination. If the destination is a mobile subscriber, an SMS is sent to inform the mobile
device of the waiting MMS message. Depending on the configuration of the mobile device
it either establishes a GPRS connection immediately or queries the user first before doing
so. To receive the MMS message the mobile device uses the HTTP-GET command. This
command is also used by web browsers to request web pages from a web server.

Answer_14:
An MMS message has many similarities to an eMail. The header for example is structured
in a similar way as an eMail header and just contains additional X-MMS-tags which
contain MMS specific information. Text and pictures are sent in the “body” of the MMS
and are separated by Multipurpose Internet Mail Extension (MIME) separators. The first
part of an MMS body is the description of the general layout of the message. SMIL, an
XML language, is used for this purpose. Further MIME parts of the MMS then contain the
text, pictures, videos, etc.
3.15 Questions
1. What are the main differences between the GSM and UMTS radio network?
2. What advantages does the UMTS radio network have compared to previous technologies
for users and network operators?
3. What were the datarates for a packet-switched connection that were offered by early
Release 99 UMTS networks?
4. What does OVSF mean?
5. Why is a scrambling code used in addition to the spreading code?
6. What does ‘cell breathing’ mean?
7. What are the differences between the Cell-DCH and the Cell-FACH RRC states?
8. In which RRC states can a mobile device be in PMM connected mode?
9. How is a UMTS soft handover performed and what are the advantages and
disadvantages?
10. What is an SRNS relocation?
11. How is the mobility of a user managed in Cell-FACH state?
12. What is the compressed mode used for?
13. What are the basic HSDPA concepts to increase the user datarate?
14. How is a circuit-switched voice connection handled during an ongoing HSDPA
session?
15. What are the advantages of the Enhanced-DCH (E-DCH) concept?
16. Which options does the Node-B have to schedule the uplink traffic of different E-DCH
mobile devices in a cell?

Answers for Chapter 3 (UMTS)

Answer_1:
The GSM network was mainly designed for narrowband circuit switched communication.
UMTS on the other hand has been designed from the beginning not only for voice
communication but also for packet switched data transmission at high speeds. To achieve
this goal, UMTS uses a new air interface technology called code division multiple access
(CDMA). CDMA does not assign a specific frequency and timeslot to a single user for
transferring information like in GSM. Instead a unique channelization code is assigned to
each user. In a UMTS network, all users transfer their data simultaneously and the network
is able to filter each data stream out of the result by applying the different codes on the
received signal.

Answer_2:
The use of CDMA, which has shortly been described in answer 1, in combination with
codes and variable code lengths has a number of advantages. One of those are the improved
data rates compared to GPRS as well as shorter round trip delay times. In a first step,
speeds up to 384 kbit/s can be achieved per user in downlink direction. This enables a
number of new applications which require a broadband Internet connection which can now
be used while on the move, like for example in cars and trains. Furthermore, UMTS also
supports 64 kbit/s circuit switched channels on the air interface in both uplink and
downlink direction which are used for video telephony.
Answer_3:
With a R99 access network, data rates of up to 384 kbit/s in downlink and 128 kbit/s in
uplink (most network allow only 64 kbit/s in uplink direction) are possible.

Answer_4:
OVSF is the abbreviation for orthogonal variable spreading factor. OVSF allows to assign
different code lengths to different users depending on their application. A long spreading
factor is used for applications such as voice telephony which require only a small amount
of bandwidth. Shorter codes are used for faster data transfers with speeds of 128 kbit/s or
384 kbit/s.

Answer_5:
Scrambling in downlink direction is necessary to allow mobile devices to distinguish
different cells of a network which send on the same frequency. Without scrambling codes it
would not be possible to use the complete code tree in each cell. In uplink direction, a
scrambling code is required in order to avoid interference problems generated by users
which are at different distances to a base station. By using scrambling codes, orthogonality
in uplink direction is preserved. Scrambling is also required as not all channelization codes
generate a pseudo random bit pattern which is required for spectral distribution, as many
consecutive bits can have the same value.

Answer_6:
During times of low activity a cell can cover a wide area as interference is low and thus
distant devices can receive data without problems. During times of high activity distant
devices are not able to receive data correctly anymore due to the interference caused by
devices closer to the base station. Thus, the area covered by the cell is smaller than before.
As the cells coverage area shrinks during high traffic loads, this phenomenon is also called
cell breathing.

Answer_7:
While in Cell-DCH state, a dedicated channel with an individual code is assigned to a
mobile device. Data can be sent to and from the mobile device without prior reservation of
resources. In Cell-FACH state on the other hand the mobile device sends and receives
frames via the RACH and FACH. These channels are shared between several devices.
Thus, no dedicated code is assigned in this state to a user which implies that bandwidth and
round trip delay times can not be ensured. Furthermore, the available bandwidth is quite
limited.

Answer_8:
In PMM connected state a device can either be in Cell-DCH, Cell-FACH, Cell-PCH or
URA-PCH state.

Answer_9:
While in soft handover state a mobile device communicates with several cells
simultaneously. A handover can thus be performed without any interruption of the ongoing
transmission. The mobile device only uses the minimal power required to remain connected
to one of the cells taking part in the soft handover. When transmission conditions change, a
different cell can take over the connection very quickly. A disadvantage of the soft
handover is the use of additional resources on the air interface. If too many cells are part of
a soft handover procedure for a single mobile device, the available capacity for other
subscribers can be severely reduced.

Answer_10:
An SRNS relocation is performed when all current cells of a subscriber are controlled by a
drift RNC. This can happen for example if a subscriber is moving far away from the
location at which the connection was initially established. By performing an SRNS
relocation one of the drift RNCs becomes the new serving RNC. This means that the
routing between the MSC and the SGSN on the one side and the old and new RNC on the
other side has to be changed.

Answer_11:
In Cell-FACH state, mobility management is not performed by the network but by the
mobile device itself. If the mobile device detects that a different cell would give a better
service, it autonomously performs a cell change. Once the cell change is performed the
mobile device reports to the network and all data is afterwards exchanged via the new cell.

Answer_12:
As a mobile device in Cell-DCH transmitting data continuously, it has no possibility to
search for other cells on other UMTS or GSM frequencies. If a subscriber moves to the
border of the UMTS coverage area or if UMTS cells in the subscribers use a different
frequency, the network can instruct the terminal to activate compressed mode. While in
compressed mode, silence periods are inserted in certain intervals to allow the mobile
device to search for neighboring cells on different frequencies. The measurement results
generated during those periods are then sent to the network which can then use them for the
decision making on when and how to perform a handover to one of these cells.

Answer_13:
HSDPA uses adaptive modulation and coding to quickly react to changing conditions on
the air interface. Thus, less error correction and detection bits can be used while the radio
link is stable which increases speed under such conditions. Instead of only using one data
stream, HSDPA users can receive data via several code channels simultaneously (multi
code). Additionally, Hybrid Automatic Retransmission Requests (HARQ) are used to
detect transmission errors very quickly and to retransmit the data before higher layers
detect a problem. Finally, intelligent scheduling can be used to reduce the data rate to a
subscriber while signal conditions are temporarily bad and to increase the data rate again
once conditions have improved. This improves overall cell capacity and in turn also
increases the average date rate available to all users in a cell.

Answer_14:
HSDPA supports a simultaneous dedicated channel for voice calls along one or more
HSDPA channel. Thus, a user can use both services at the same time.

Answer_15:
Without an E-DCH, uplink packet speeds are limited to 64 kbit/s -128 kbit/s in most
networks and 384 kbit/s in rare cases. The E-DCH concept increases the uplink speed per
user to up to 2 Mbit/s in ideal conditions and to around 800 kbit/s und normal conditions in
operational networks. Additionally, E-DCH also increases overall system capacity in the
uplink, so more users can access the network with higher uplink speeds at the same time.
This is very important for applications that send as much data as they receive. Such services
are for example voice and video telephony.

Answer_16:
In uplink direction, the Node-B schedules different subscribers by assigning a certain
transmission power level to each subscriber. The mobile station then has to select a
corresponding code length and coding scheme. Thus, the transfer speed and implicitly the
noise that is generated by the subscriber for other terminals in the network is limited. Power
assignments can be given as absolute grants or as relative grants, which increase or
decrease the power level for a mobile station. Neighboring cells which are part of the active
set can also send relative grants to decrease the power level if a mobile station produces too
much interference for subscribers in its area.