Introduction To GSM

OBJECTIVES

Describe the Cellular Concept

Explain the GSM Access Network Explain the GSM Core Network Explain the GPRS Core Network

Communication - Mobile

Subscriber Line (2W)

Inter-Exchange Junction

BSC

BTS MS

Telephone Exchange

Mobile Switching Centre (MSC)

CELLULAR MOBILE CONCEPTS

WHAT IS A CELL ?

A base station (transmitter) having a number of RF channels is called a cell

Each cell covers a a limited number of mobile subscribers within the cell boundaries ( Coverage area) Typical Cell Radius Aprrox = 30 Km (Start up), 1 KM (Mature)

A RADIO CELL
Voice Channels

Lines to BSC

Or control channels

MS

Fundamental problems Radio range, or coverage

No. of channels, or voice circuits Full, seamless service coverage Large no. of subscribers in the range of millions

CELLULAR MOBILE CONCEPTS

FERQUENCY SCARCITY PROBLEM

Tel Ex.
WIRED NETWORK

BW for Telephony speech: 3KHz increases to 25 KHz with FM for Radio Trans. 100,000 50 Khz = 5 Ghz (NOT POSSIBLE)

Hence Individual RF Loop is not extended

But a Common group of channels is shared

GSM Specifications
Carrier Separation 200 kHz

Duplex Distance
No. of RF Carriers Access Method Modulation Method Transmission Rate

45 MHz
124 TDMA/FDMA GMSK 270.833 Kbps

Speech Coding

Full rate 13 Kbps Half rate 6.5 Kbps

GSM FDMA (Frequency Division Multiple Access

890 25 MHz
0

915

935 25 MHz

960

1 Base to Mobile

Mobile to Base
890.2
890.4 890.6 45MHz
(MHz)

935.2

935.4

935.6

200 kHz

200 kHz

Channel layout and frequency bands of operation

GSM TDMA (Time Division Multiple Access)

Amplitude
45 MHz

7 8 5 6 2 1 3 4 2 1 3 4 5 6

7 8

Frequency

F1 (Cell Rx)

F2

F2 F1 (Cell transmit)

Typical TDMA/ FDMA frame structure

FDMA/TDMA Scheme
TIME
BP2 BP1 BP8 BP7 BP6 BP5 BP4 BP3 BP2 BP1 890.2 890.6 891.0 890.0 890.4 890.8 891.2

BURST

F
R A M E FREQ
915.8 MHz

GSM RF CHANNELS
LOGICAL CHANNELS
USER INFORMATION( TRAFFIC) SIGNALLING INFORMATION (CONTROL)

OPERATIONAL CONCEPTS
Subscribers are not allocated dedicated channels TCH Allocated to users only when needed

Hence IDLE MODE & DEDICATED MODE

DEDICATED MODE -When a full Bi -directional P to P CHL has been allocated during an established call

IDLE MODE MODE

-When MS is powered on (active) without being in dedicated mode

Network Architecture
1 MSC=16 BSC 1 BSC=1024 TRU OSS
HLR

PSTN ISDN

B T S B T S

BSC BSC

MSC VLR

A Interface
B T S

Data Networks

A-bis interface
MSC VLR
14

Air interface

GSM Network Structure

GSM Service Area: Total area served by the combination of
all member countries where a mobile can be served.

PLMN Service Area: It is one N/W area. MSC Service Area: There can many MSC/VLR in one PLMN
area. It is one Mobile Exch. Area.

GMSC: All I/C calls for PLMN N/W will be routed through
GMSC. In a GSM/PLMN N/W all mobile terminated calls will be routed to a Gateway MSC. Call connections between PLMNs , or to fixed N/Ws must be routed to a GMSC. The GMSC contains the Inter working functions to make these connections.

Location Area Cells

15

GSM Network Structure

LOCATION AREA : There are several LA in a MSC/VLR
combination. A LA is a part of the MSC/VLR service area in which a MS may move freely without updating location information to the MSC/VLR exchange that control the LA. Within a LA a paging message is broadcast in order to find the called mobile subs. LA can be identified by system using the LAI. : A cell is an identity served by one BTS. The MS distinguishes between cells using the BASE STATION IDENTIFICATION CODE(BSIC) that the cell site broadcast over the air.
CELL

GSM PLMN Service Area

I
MSC/VLR MSC/VLR

II

MSC/VLR

IV

MSC/VLR

III

GSM
MSC Service Area
LA 1 LA 2 LA 3

LA 6 LA 4

MSC/VLR
LA 5

GSM Cells

C1 LA 1 LA 2 LA 3 C2 C5 C6 C4

C3
LA 6 LA 4 MSC/VLR LA 5

C7

C = Cell

GSM Relation between areas in GSM

Cell Location Area Area served by a BTS Location Area

MSC Service Area

PLMN Service Area GSM Service Area

20

Mobile Station (MS) The Mobile Station consists of the Mobile Equipment (ME) and the Subscriber Identity Module (SIM). Mobile Equipment The Mobile Equipment is the hardware used by the subscriber to access the network. The mobile equipment can be Vehicle mounted, with the antenna physically mounted on the outside of the vehicle or portable mobile unit, which can be handheld. Mobiles are classified into five classes according to their power rating.
CLASS POWER OUTPUT
1 2 3 4 5 20W 8W 5W 2W 0.8W

GSM Functions of Mobile Station

Voice and data transmission Frequency and time synchronization Monitoring of power and signal quality of the surrounding cells Provision of location updates even during inactive state Equalization of multi path distortions
22

GSM Mobile Station

Portable, vehicle mounted, hand held MS identified by unique IMEI(International Mobile Equipment
Identity)

Shall display at least last ten received, dialled and missed calls Minimum talk time of 1hr 30 min. and standby time of 80 hrs

160 characters long SMS

23

SIM The SIM is a removable card that plugs into the ME. It identifies the mobile subscriber and provides information about the service that the subscriber should receive. The SIM contains several pieces of information International Mobile Subscribers Identity ( IMSI ) - This number identifies the mobile subscriber. It is only transmitted over the air during initialising. Temporary Mobile Subscriber Identity ( TMSI ) - This number also identifies the subscriber. It can be alternatively used by the system. It is periodically changed by the system to protect the subscriber from being identified by someone attempting to monitor the radio interface. Location Area Identity ( LAI ) - Identifies the current location of the subscriber. Subscribers Authentication Key ( Ki ) - This is used to authenticate the SIM card. Mobile Station International Standard Data Number ( MSISDN ) - This is the telephone number of the mobile.

SIM Most of the data contained within the SIM is protected against reading (eg Ki ) or alterations after the SIM is issued. Some of the parameters ( eg. LAI ) will be continously updated to reflect the current location of the subscriber. The SIM card can be protected by use of Personal Identity Number ( PIN ) password. The SIM is capable of storing additional information such as accumulated call charges.

FULL SIZE SIM CARD

MINI SIM CARD

GSM

Mobile Station International Subscribers Dialing Number ( MSISDN ) : Human identity used to call a MS The Mobile Subscriber ISDN (MSISDN) number is the telephone number of the MS. This is the number a calling party dials to reach the subscriber. It is used by the land network to route calls toward the MSC.

CC
98

NDC XXX

SN 12345

CC - Country Code: the country of the country in which the VLR is located. NDC - National Destination Code: the NDC of the visitor GSM PLMN or numbering area. SN - Subscriber Number: it has to have an appropriate structure for the visited area numbering plan. N(S)N - National (Significant) Number: consists of NDC and SN

International Mobile Subscribers Identity ( IMSI ) : Network Identity Unique to a MS The International Mobile Subscriber Identity (IMSI) is the primary identity of the subscriber within the mobile network and is permanently assigned to that subscriber. The IMSI can be maximum of 15 digits.

Temporary Mobile Subscribers Identity ( TMSI ) : The GSM system can also assign a Temporary Mobile Subscriber Identity (TMSI). After the subscriber's IMSI has been initialized on the system, the TMSI can be used for sending messages backwards and forwards across the network to identify the subscriber. The system automatically changes the TMSI at regular intervals, thus protecting the subscriber from being identified by someone attempting to monitor the radio channels. The TMSI is a local number and is always allocated by the VLR. The TMSI is maximum of 4 octets.

Equipment Identity Register ( EIR ) The Equipment Identity Register (EIR) contains a centralized database for validating the international mobile station equipment identity, the IMEI. The database contains three lists: The white list contains the number series of equipment identities that have been allocated in the different participating countries. This list does not contain individual numbers but but a range of numbers by identifying the beginning and end of the series. The grey list contains IMEIs of equipment to be monitored and observed for location and correct function. The black list contains IMEIs of MSs which have been reported stolen or are to be denied service. The EIR database is remotely accessed by the MSCs in the Network and can also be accessed by an MSC in a different PLMN

International Mobile Equipment Identity ( IMEI ) : IMEI is a serial number unique to each mobile Each MS is identified by an International Mobile station Equipment Identity (IMEI) number which is permanently stored in the Mobile Equipment. On request, the MS sends this number over the signaling channel to the MSC. The IMEI can be used to identify MSs that are reported stolen or operating incorrectly.

HOME LOCATION REGISTER( HLR ) The HLR contains the master database of all subscribers in the PLMN. This data is remotely accessed by the MSCs and VLRs in the network. The data can also be accessed by an MSC or a VLR in a different PLMN to allow inter-system and inter-country roaming. A PLMN may contain more than one HLR, in which case each HLR contains a portion of the total subscriber database. There is only one database record per subscriber. The subscribers data may be accessed by the IMSI or the MSISDN. The parameters stored in HLR are Subscribers ID (IMSI and MSISDN ) Current subscriber VLR. Supplementary services subscribed to. Supplementary services information (eg. Current forwarding address ). Authentication key and AUC functionality. TMSI and MSRN

VISITOR LOCATION REGISTER ( VLR ) The Visited Location Register (VLR) is a local subscriber database, holding details on those subscribers who enter the area of the network that it covers. The details are held in the VLR until the subscriber moves into the area serviced by another VLR. The data includes most of the information stored at the HLR, as well as more precise location and status information. The additional data stored in VLR are Mobile status ( Busy / Free / No answer etc. ) Location Area Identity ( LAI ) Temporary Mobile Subscribers Identity ( TMSI ) Mobile Station Roaming Number ( MSRN ) The VLR provides the system elements local to the subscriber, with basic information on that subscriber, thus removing the need to access the HLR every time subscriber information is required.

Authentication Centre ( AUC )

The AUC is a processor system that perform authentication function. It is normally co-located with the HLR. The authentication process usually takes place each time the subscriber initialises on the system. Each subscriber is assigned an authentication key (Ki) which is stored in the SIM and at the AUC. A random number of 128 bits is generated by the AUC & sent to the MS. The authentication algorithm A3 uses this random number and authentication key Ki to produce a signed response SRES( Signed Response ). At the same time the AUC uses the random number and Authentication algoritm A3 along with the Ki key to produce a SRES. If the SRES produced by AUC matches the one produced by MS is the same, the subscriber is permitted to use the network.

GSM Mobile Identification Numbers

IMEI MSISDN IMSI

35

GSM IMSI
International mobile subscribers Identity
The IMSI is an unique identity which is used internationally and used within the network to identify the mobile subscribers. The IMSI is stored on the subscriber identity module (SIM), the HLR, VLR and AC database.
36

RADIO SUB SYSTEM (RSS)

MSC/VLR

BSC BSC

BSC

RSS
n BTS n BTS
37

GSM FUNCTION OF BTS -I

Encodes, encrypts, multiplexes, modulates and feeds the RF signals to the antenna Transcoding and rate adaption Functionality Time and frequency synchronisation signals transmission. 11 power classes from .01 watts to 320 watts

38

GSM FUNCTION OF BTS -II

Frequency hopping
Random access detection

Uplink radio channel measurements

BTS mainly consists of a set of transceivers (TRX).

39

GSM FUNCTIONS OF BSC-I

It is connected to BTS and offloads MSC Radio resource management Inter-cell handover Reallocation of frequencies Power control

40

GSM FUNCTIONS OF BSC-II

Time delay measurement of the received signals from MS with respect to BTS clock.
Performs traffic concentration to reduce the number of lines from BSC to MSC.

41

GSM MSC-BSS Configurations

Multi - cell site (sector Cells Configuration -5 A

BTS A BSS Single - cell site Configuration -1 BTS BTS BTS Many single cell sites

MSC

BSS

A-bis BSC A-bis

BTS BTS

BTS MCC: Mobile Switching Centre

Configuration -6

Multi - cell site = multi--BTS site

BSS: Base Station System

BSC: Base Station Controller BTS: Base Transceiver Station

43

Mobile Switching Centre (MSC) The Mobile services Switching Centre (MSC) co-ordinates the setting up of calls to and from GSM users. It is the telephone switching office for MS originated or terminated traffic and provides the appropriate bearer services, teleservices and supplementary services. It controls a number of Base Station Sites (BSSs) within a specified geographical coverage area and gives the radio subsystem access to the subscriber and equipment databases. The MSC carries out several different functions depending on its position in the network. When the MSC provides the interface between PSTN and the BSS in the GSM network it is called the Gateway MSC. Some important functions carried out by MSC are Call processing including control of data/voice call setup, inter BSS & inter MSC handovers, control of mobility management, Operation & maintenance support including database management, traffic metering and man machine interface & managing the interface between GSM & PSTN N/W.

GSM
MSC ( MOBILE SWITCHING CENTRE)
Manages communication between GSM & other network Call setup functions, basic switching are done MSC takes into account the RR allocation in addition to normal exchange functions MSC does gateway function while its customers roams to other network by using HLR /VLR

45

GSM MSC Functions - I

Paging, specifically call handling
Location updation Handover management

Billing for all subscribers based in its area

Reallocation of frequencies to BTSs in its area to meet heavy demands

46

GSM MSC Functions - II

Echo canceller operation control Signaling interface to databases like HLR, VLR. Gateway to SMS between SMS centers and subscribers Handle interworking function while working as GMSC

47

GSM VISITOR LOCATION REGISTER (VLR)-I

It controls those mobiles roaming in its area.
VLR reduces the number of queries to HLR One VLR may be incharge of one or more LA.

VLR is updated by HLR on entry of MS its area.

VLR assigns TMSI which keeps on changing. IMSI detach and attach operation

48

GSM Data in VLR

IMSI & TMSI MSISDN MSRN. Location Area Supplementary service parameters MS category Authentication Key

49

GSM Home Location Register(HLR)-I

Reference store for subscribers parameters, numbers, authentication & Encryption values. Current subscriber status and associated VLR. Both VLR and HLR can be implemented in same equipment in an MSC. one PLMN may contain one or several HLR. the

50

GSM Home Location Register(HLR)-II

Permanent data in HLR

Data stored is changed only by man-machine. IMSI, MS-ISDN number. Category of MS ( whether pay phone or not ) Roaming restriction ( allowed or not ).

Supplementary services like call forwarding

51

GSM Home Location Register(HLR)-II

Temporary data in HLR

The data changes from call to call & is dynamic MSRN RAND /SRES and Kc VLR address, MSC address.

Messages waiting data used for SMS

52