Cellular Wireless Networks

Based on

Panko R., ‘Business data network and telecom 6th version

&
Stallings W., Wireless Communications and Networks, Prentice Hall, Chapter
10

Dr Muhammad Nabeel Asghar

Cellular Network Organization
Use multiple low-power transmitters (100 W or less)
Areas divided into cells
◦ Each served by its own antenna
◦ Served by base station consisting of transmitter, receiver, and control unit
◦ Band of frequencies allocated
◦ Cells set up such that antennas of all neighbors are equidistant (hexagonal
pattern)
Frequency Reuse
Adjacent cells assigned different frequencies to avoid interference or
crosstalk
Objective is to reuse frequency in nearby cells
◦ 10 to 50 frequencies assigned to each cell
◦ Transmission power controlled to limit power at that frequency escaping to
adjacent cells
◦ The issue is to determine how many cells must intervene between two cells
using the same frequency
Approaches to Cope with Increasing
Capacity
Adding new channels
Frequency borrowing – frequencies are taken from adjacent cells by
congested cells
Cell splitting – cells in areas of high usage can be split into smaller
cells
Cell sectoring – cells are divided into a number of wedge-shaped
sectors, each with their own set of channels
Microcells – antennas move to buildings, hills, and lamp posts
Cellular System Overview
Cellular Systems Terms
Base Station (BS) – includes an antenna, a controller, and a number
of receivers
Mobile telecommunications switching office (MTSO) – connects
calls between mobile units
Two types of channels available between mobile unit and BS
◦ Control channels – used to exchange information having to do with setting up
and maintaining calls
◦ Traffic channels – carry voice or data connection between users
Cellular Technology
Customer has a mobile phone.
A city is divided into small
geographic regions called cells.
Each cell has a cellsite
with an antenna and equipment
to serve mobile phones in the cell
 Cellular Telephony
Cellsites
Cellular Technology A mobile telephone switching office (MTSO)
coordinates activity among the cellsites.
The MTSO also connects mobile customers
with wired PSTN customers via a POP.
Cellular Technology
Cellsites connect to the
MTSO using a landline or a
point-to-point radio system
called microwave.
Here is a microwave dish.
It is covered with cloth,
which does not interfere
with radio transmission.
Cellular Technology Channels can be reused in different cells.
This permits more customers to be served.
Serving more customers through channel reuse
Is the whole reason for cellular service.
Cellular Technology GSM cellular technology cannot use the
same channel in adjacent cells.
CDMA can use the same channel in adjacent
cells, providing more channel reuse
and so more customers.
 When a mobile phone travels between cells,
Cellular Technology it is handed off to the cellsite in the new cell.
In this figure, there is handoff between
the cellsite in Cell O and the cellsite in Cell P.
Cellular Technology In handoff, a mobile phone moves from one cell
to another cell in the same city.
In roaming, a mobile phone is taken to a different city.
Steps in an MTSO Controlled Call
between Mobile Users
Mobile unit initialization
Mobile-originated call
Paging
Call accepted
Ongoing call
Handoff
Additional Functions in an MTSO
Controlled Call
Call blocking
Call termination
Call drop
Calls to/from fixed and remote mobile subscriber
Mobile Radio Propagation Effects
Signal strength
◦ Must be strong enough between base station and mobile unit to maintain signal
quality at the receiver
◦ Must not be so strong as to create too much cochannel interference with
channels in another cell using the same frequency band
Fading
◦ Signal propagation effects may disrupt the signal and cause errors
First-Generation Analog
Advanced Mobile Phone Service (AMPS)
◦ In North America, two 25-MHz bands allocated to AMPS
◦ One for transmission from base to mobile unit
◦ One for transmission from mobile unit to base
◦ Each band split in two to encourage competition
◦ Frequency reuse exploited
AMPS Operation
Subscriber initiates call by keying in phone number and presses send key
MTSO verifies number and authorizes user
MTSO issues message to user’s cell phone indicating send and receive
traffic channels
MTSO sends ringing signal to called party
Party answers; MTSO establishes circuit and initiates billing information
Either party hangs up; MTSO releases circuit, frees channels, completes
billing
Differences Between First and Second
Generation Systems
Digital traffic channels – first-generation systems are almost purely
analog; second-generation systems are digital
Encryption – all second generation systems provide encryption to
prevent eavesdropping
Error detection and correction – second-generation digital traffic
allows for detection and correction, giving clear voice reception
Channel access – second-generation systems allow channels to be
dynamically shared by a number of users
Mobile Wireless TDMA Design
Considerations
Number of logical channels (number of time slots in TDMA frame): 8
Maximum cell radius (R): 35 km
Frequency: region around 900 MHz
Maximum vehicle speed (Vm):250 km/hr
Maximum coding delay: approx. 20 ms
Maximum delay spread (∆m): 10 µs
Bandwidth: Not to exceed 200 kHz (25 kHz per channel)
Second-generation cellular phone systems
D-AMPS
GSM bands
GSM
Multiframe components
Note

GSM is a digital cellular phone system using TDMA and

FDMA.
GSM Network Architecture
Mobile Station
Mobile station communicates across Um interface (air interface) with
base station transceiver in same cell as mobile unit
Mobile equipment (ME) – physical terminal, such as a telephone or
PCS
◦ ME includes radio transceiver, digital signal processors and subscriber identity
module (SIM)
GSM subscriber units are generic until SIM is inserted
◦ SIMs roam, not necessarily the subscriber devices
Base Station Subsystem (BSS)
BSS consists of base station controller and one or more base transceiver stations (BTS)
Each BTS defines a single cell
◦ Includes radio antenna, radio transceiver and a link to a base station controller (BSC)

BSC reserves radio frequencies, manages handoff of mobile unit from one cell to another within
BSS, and controls paging
Network Subsystem (NSS)
NS provides link between cellular network and public switched
telecommunications networks
◦ Controls handoffs between cells in different BSSs
◦ Authenticates users and validates accounts
◦ Enables worldwide roaming of mobile users

Central element of NS is the mobile switching center (MSC)

NSS manages the switching functions of the system and allows MSCs to
communicate with other network systems, such as PSTN
OSS supports the operations and maintenance of GSM and allows system
engineer to monitor, diagnose and troubleshoot the GSM system
Operating Support Subsystem (OSS)
The OSS supports one or several Operation Maintenance Centers
(OMC) which are used to monitor and maintain the performance of
each MS, BS, and MSC within a GSM system.
OSS has three functions:
◦ Maintain all telecommunications hardware and network operations with a
particular market
◦ Maintain all charging and billing procedures
◦ Manage all mobile equipment in the syste,
Mobile Switching Center (MSC)
Databases
Home location register (HLR) database – stores information
about each subscriber that belongs to it
Visitor location register (VLR) database – maintains
information about subscribers currently physically in the
region
Authentication center database (AuC) – used for
authentication activities, holds encryption keys
Equipment identity register database (EIR) – keeps track of
the type of equipment that exists at the mobile station
 Databases
HLR is a DB which contains subscriber information and location information for each user who
resides in the same city as MSC. Each subscriber in a particular GSM market is assigned a
unique International Mobile Subscriber identity (IMSI), and this number is used to identify each
home user.
VLR temporarily stores the IMSI and customer information for each roaming subscriber who is
visiting the coverage area of a particular MSC. The VLR is linked between several adjoining
MSCs in a particular market or geographic region and contains subscription information for
every visiting user in the area. One a roaming mobile is logged in the VLR, the MSC sends the
necessary information to the visiting subscriber’s HLR , sot he calls to the roaming mobile can
be appropriately routed over PSTN by the roaming user’s HLR.
The Authentication Center is a strongly protected database which handles the authentication
and encryption keys for every single subscriber in the HLR and VLR. The Authentication Center
contains a register called the Equipment Identity Register (EIR) which identifies stolen or
fraudulently altered phones that transmit identity data that does not match with information
contained in either the HLR or VLR.
 Various Interfaces Used in GSM
MS
BTS

BTS BSC MSC PSTN

MS SS7
BTS
A interface
(standardised)
Abis Interface
(standardised)
GSM Radio Air Interface
(standardised)
Abis
Abis interface carries traffic and maintenance
data, and is specified by GSM as a standard
In practice, the Abis for each GSM BS
manufacturer had subtle differences, therefore,
forcing the service providers to use the BTS and
BSC from the same vendor
A interface
BSCs are physically connected via dedicated/leased lines or
microwave link to the MSC. The interface is call A interface
The A interface uses an SS7 protocol called the signalling Correction
Control Part (SCCP), which supports communication between the
MSC and the BSS, and network messages between the individual
subscribers and the MSC
The A interface allows a service provider to use base stations and
switching equipment made by different vendors.
GSM Signaling Protocol Architecture
Cell size
macro/pico/femto
It seems that all of the large basestation vendors are
now saying that femtocells (whether they call them
small cells, picocells or something else) play a part in
meeting the traffic capacity demands of the future
These small cells also deliver high data rates
achievable when operating close to a basestation and
give a much better end user experience
Some observations – (I)
50% of network traffic is carried by 10% of the cellsites. The
demand curve was quite extreme, with two conclusions:
There are many non-profitable cellsites, typically in rural
areas to achieve coverage. These aren't worth expanding
and won't be upgraded to IP/Ethernet backhaul anytime
soon. Site sharing is most worthwhile for these and actively
pursued by all operators.
David Haszeldine, Network Economics Manager from Deutsch Telecom
Some Observations (II)
The ratio of 10% busiest cellsites/50% traffic was true for
each class, i.e. 10% of rural cellsites are also carrying 50% of
the rural traffic.
Data traffic is no longer growing exponentially; growth
rates are starting to roll off (ie still growing, just not as fast
as before). This may change as new iPads, tablets and other
gadgets appear in the future.

David Haszeldine, Network Economics Manager from Deutsch Telecom

Note

The main goal of third-generation cellular telephony is to

provide
universal personal communication.
IMT-2000 radio interfaces
What is UMTS?
UMTS (Universal Mobile Telecommunications System)
is one of the 3G technologies, which is also being developed into a
4G technology.
The first deployment of the UMTS is the 3GPP release99 (R99)
architecture. It is specified by 3GPP and is part of the global IMT
2000 standard.
The most common form of UMTS uses WCDMA (IMT Direct Spread)
as the underlying air interface
 UMTS Terrestrial Access network (UTRAN) Core Network
Radio network Subsystem
BS
UE
CN Circuit Switched Domain
Radio network Controller
Iub )
IuCS
BS
MSC/VLR GMSC
Iub
UE
Iur
Registers
Radio network Subsystem HLR
BS

Iub
UE Radio network Controller CN Packet Switched Domain

IuPS Gn Gi
BS
UMTS
Iub SGSN GGSN
Network
Architecture
UMTS Terrestrial Access Network
(UTRAN)
The UTRN provides the capabilities necessary to establish, monitor and
maintain connections between a mobile and the Core Network.
UTRAN function: Providing vital connectivity between mobile and the services
located in, and beyond the Core Network. Typically each mobile operator will
support one UTRAN offering subscribers 3G radio access connectivity.
The UTRAN consists of one or more RNS (Radio Network Subsystem),
interconnected via lur interface.
Node B is the term used for UMTS base station, with its functionality differing
from that of a BTS. For example, the Node B acts more like a relay service
between the UE and the RNC. Ciphering is done at the BTS in GSM, in UMTS, it
is carried out at the RNC
UTRAN functions

MSC/VLR SGSN MSC/VLR

SGSN

UTRAN

UE (User Equipment)
Universal Terrestrial Radio Access
Network
UTRAN

RNS
Iur
RNS (Radio (Radio
Network Network
Subsystem) Subsyste
Iur m)Iur
RNS (Radio
Network
Subsystem)
Radio Network Subsystem
RNC
Uu Iur
UE

Iub Iu
Node B
RNS (Radio
Network
Iub
Controller)

Node B
Radio Network Controller (I)
Controlling entities within the UTRAN
Radio Resource management and control
 Segmentation/reassembly
 Combining/splitting (Macro diversity)
 Connection set-up
 Open loop power control
 Radio resource control
 Power control threshold
Integrity Protection
Synchronization
Tracing
Volume reporting
Transfer of user data
Radio Network Controller (II)
System access control
◦ Admission Control
◦ Congestion control
◦ Broadcast signalling
Mobility
◦ Handover control
◦ RNS relocation
◦ Paging support
◦ Positioing
Ciphering and Deciphering
Channel Allocation
Controlling RNC
RNC within each RNS is call CRNC. It manages and controls the
Node B functions mainly relating to common procedures:
- paging, system information broadcast admission control,
common channel measurement

CRNC
Uu (Controlling RNC)
UE Iur
Iub Iu
Node B
RNS (Radio
Iub Network
Controller)
RNS (Radio
Node B Network Subsystem)
 Serving RNC
The serving RNC handles the connections to one UE, borrowing radio resources
of a certain cell from its CRNC. The signalling connection between the SRNC and
the UE is termed as a SRB (Signalling Radio Bearer). It is established when a
Mobile is in the Connected State. The SRB is used only for signalling and SMS
messages.
Core
Iu Network
RNC Iu RNC
‘A’ --- SRNC
Iur (serving RNC)
Iub
Iub Iub Iub

Node B Node B Node B Node B

SRB (signalling UE
Radio Bearer)
 Drift RNC
Terms DRNC applies to an RNC when it is assisting the SRNC
connection to the UE.

Core
Iu Network
Iu
RNC RNC
‘A’ --- SRNC
‘B’ - SRNC ‘B’ --- DRNC
Iur
Iub
Iub Iub Iub

Node B Node B Node B Node B

SRB (signalling UE UE SRB (signalling
‘A’ Radio Bearer)
Radio Bearer) ‘B’
Functions of the Node B
Term used for a UMTS base station
Relaying between UE and RNC
Radio resource management and control
◦ Radio environment survey
◦ Closed loop power control
◦ Radio channel coding and decoding
◦ Error protection
Transmission/reception
◦ Modulation/demodulation
◦ Micro diversity (Rake receiver)
 Node B planning
Single frequency re-use plan can be used in UMTS
A node B if placed in a wrong location, may drastically and
detrimentally effect its own cell capacity and the neighbour cell
The actual number fo Node B required to offer a specific amount
of coverage in the UMTS system will be greater than the current
quantuty of base station required in a GSM system, since:
◦ Increased capacity requirement
◦ Soft handover – cell overlap
◦ High traffic loading – cell breathing
◦ Increased user expectations
The UTRAN interfaces
-Paging
Air Interface Channels -Access
-UE signalling
-Dedicated (CS and PS)
-Packet Transfer
User Plane
RNC
Control Plane Iu
U
E Node B Iub
NBAP – Node B Application Part
- Node B set-up
- Cannel Configuration
- Measurement reports
NBAP functions
Cell configuration menagement
System information management
Measurement on common and dedicated resources
Radio Link Management
Radio Link Supervision
 UTRAN interface (I)
lub
◦ User plane: paging, access, UE signalling, dedicated, packet transfer
◦ Control plane: Node B set up, channel configuration, measurement
report
Iur
◦ User Plane: Like the Iub interface, it uses the services of AAL2 to allow
potentially time critical information to be passed between the SRNC
and DRNC. One of the major difference between the Iub and Iur is
that paging message are not sent in the user plane, it is sent in the
control plane.
◦ Control plane: The connection uses ATM to provide PVC (permanent
Virtual Circuit) between the SRNC and the DRNC. Same as all UTRAN
control planes, it uses AAL5 services to pass signalling messages
 UTRAN interface (II)
luCS
◦ User plane: used to frame the circuit switched speech and data, to enable it to maintain its
correct format whilst traversing the link.
◦ Control plane: uses AAL5 to deliver signalling messages. It control and maintain the
interfaces, whilst also transferring NAS (Non-Access Stratum) signalling information
transparently.
luPS
◦ User plane:it is different from all other UTRAN user plane interfaces, it uses the services of
AAL5. Since most of the packet switched sata and signalling are mot time critical.
◦ Control plane: similar to the control plane for IuCS
luBC
◦ Is the Iu interface to the roadcast Domain. It is identified for cell roadcast type services. The
interfaces uses TCP/IP connection etween a CBC(Cell Broadcast Centre) and the RNC.
 Core Network
Mobile Switching Centre (MSC) is fundamentally a 64Kbps telephone exchange responsible
for switching circuits between the mobile subscriber and the PSTN or other MSC. It is very
similar to standard 64Kpbs teleco switch with the exception that it must communicate with
specific mobility DB known as the HLR ( home Location Register) and VLR (Visitor Location
Register).
Gateway PRS Support Node (GGSN) is located on the edge of the PLMN (Public Land Mobile
Network) ad provides the means of interconnection between the mobile network and the
external data networks (Internet, Intranet, etc). This interface is referred to as the Gi
interface. The GGSN is responsible for routing the user data etc to the appropriate SGSN via
the tunnel established over the Gn interface.
Serving GPRS Support Node (SGSN) had been introduced into the network architecture in
order to support packet switching. The SGSN may connect to several RNSs via the luPS
interface. The SGSN also connected to the HLR, EIR, etc.