Professional Documents
Culture Documents
TOPICS
GSM CONCEPTS
GSM SYSTEM ARCHITECTURE
IDENTITIES USED IN GSM
GSM CHANNELS
GSM RADIO LINK
MOBILITY MANAGEMENT
CALL MANAGEMENT
RADIO RESOURCE MANAGEMENT
Background to GSM
1G : Advanced Mobile Phone Service (AMPS)
Analog, Circuit Switched, FDMA, FDD
GSM History
1984:
1985:
1987:
1988:
1991:
1992:
1993:
1995:
1999:
2000:
GSM Specifications
12 SERIES
OPERATION AND
MAINTENANCE
01 SERIES
GENERAL
02 SERIES
SERVICE ASPECTS
11 SERIES
EQUIPMENT AND TYPE
APPROVAL SPECIFICATIONS
03 SERIES
NETWORK ASPECTS
10 SERIES
SERVICE INTERWORKING
04 SERIES
MS-BSS INTERFACE AND
PROTOCOLS
09 SERIES
NETWORK
INTERWORKING
05 SERIES
PHYSICAL LAYER ON THE
RADIO PATH.
08 SERIES
BSS TO MSC INTERFACES
07 SERIES
TERMINAL ADAPTERS
FOR MOBILE STATIONS
06 SERIES
SPEECH CODING
SPECIFICATIONS
photo
E/GPRS
web
video
clip
report
video
report clip
photo
ISDN
e-mail web
PSTN
web
GSM
0
video
report clip
photo
10 sec
video
report clip
photo
web
video
report clip
photo
1 min
10 min
1 hour
1M
100 k
EDGE
64 k
10 k
1k
UMTS
HSCSD
14.4
GPRS
9.6
Time frame
1998
1999
2000
2001
2002
Duplex Technique
Duplex - How the up link and Down link of a user is
separated
FDD - Frequency Division Duplex
(eg: In GSM the up link and down link of a user is separated
by 45MHz )
Duplex
channels
10
10
35
35
869-894
2x25 45
124
890-915
880-915
876-880
935-960
925-960
921-925
2x25
2x35
2x04
45
45
41
124
174
40
1710-1785
1850-1910
1805-1880
1930-1990
2x75
2x60
95
80
374
299
GSM systems
Uplink
Downlink
Band
GSM 450
GSM 480
450.4-457.6
478.8-486
460.4-467.6 2x7.2
488.8-496 2x7.2
GSM 850
824-849
GSM 900
E-GSM (900)
R-GSM (900)
GSM 1800
GSM 1900
450.4
457.6
478.8
GSM 450
Downlink
460.4
824
GSM 480
467.6
488.8
849
GSM 850
496
869
894
MHz
915
Uplink
876 880
486
915
890
915
1710
1785
1850
1910
P-GSM
E-GSM
GSM 1800
GSM 1900
R-GSM
921 925
Downlink
935
960
960
960
1805
1880
1930
1990
MHz
Traffic/Signaling
Traffic
bla bla bla...
Signaling
RING !
riiiiing
Network
HLR
VLR
BSC
Abis
MSC
A
MS
GMSC
BTS
E
Abis
A
MSC
F
EIR
E
PSTN
BSC
Um
BTS
X.25
VLR
X.25
OMC Server
AuC
Uplink
890 MHz
Frequency
channel #
Downlink
915 MHz
124
935 MHz
Frequency
channel #
Example:
Channel 48
BTS
960 MHz
124
TDMA frame
TDMA frame
TS TS TS TS TS TS TS TS TS TS TS TS TS TS TS TS
Time
0
4.615 ms
9.23 ms
Physical Channel
BTS
With FH
BTS
Without FH
time
n+1
TDMAs
n TS
n-1
MS1
MS2
MS3
1
FDMA
//
124
ARFCN
Digitizing and
Source Coding
Channel Coding
Source Decoding
Channel Decoding
Interleaving
De-interleaving
Ciphering
Burst Formatting
Modulating
Deciphering
Burst De-formatting
Demodulating
Access Techniques
890.0
890.2
890.4
914.8
915.0
DOWN 935.0
935.2
935.4
959.8
960.0
4.616 ms
Fundamentals
960 MHz
959.8MHz
124
123
DOWNLINK
200KHz
935.2 Mhz
935 MHz
0 1
915 MHz
914.8 MHz
124
UPLINK
200KHz
123
.
890.2 MHz
890 MHz
4 5 6 7
45 MHz
2 3
2
1
The technology
Downlink TDMA
BTS
T
Down
link
MSs side
MS1
MS2
Up
link
T
Fixed transmit
delay of three
time-slots
6
R
7
R
Timing Advance
1 - Propagation Delay
M2
d1>>d2
d2
TS0
TS1
TS2
TS3
TS4
M1
TS5
TS6
TS7
Propagation Delay tp
Bits Overlapping
MSs transmit
Timing Advance
2 - Without Timing Advance: Collision
TX BTS
RX BTS
CAN
GSM
CAN
RX MS2
TX MS2
+3TS
RX MS6
TX MS6
RX MS7
TX MS7
RX MS8
TX MS8
yes
WHEN
the
WHAT
ms-isdn
yes
WHAT
GSM
the
ms-isdn
RX MS4
TX MS4
RX MS5
TX MS5
HOW
TA
RX MS1
TX MS1
RX MS3
TX MS3
WHAT
HOW
Propagation Delay
WHEN
WHAT
Timing Advance
3 - With Timing Advance: No Collision
CAN
TX BTS
RX BTS
CAN
RX MS1
TX MS1
GSM
RX MS6
TX MS6
RX MS7
TX MS7
RX MS8
TX MS8
WHEN
the
WHAT
ms-isdn
yes
the
GSM
ms-isdn
HOW
RX MS4
TX MS4
RX MS5
TX MS5
HOW
yes
+3TS - TA
WHAT
RX MS2
TX MS2
RX MS3
TX MS3
WHAT
Propagation Delay
WHEN
WHAT
TOPICS
GSM CONCEPTS
GSM SYSTEM ARCHITECTURE
IDENTITIES USED IN GSM
GSM CHANNELS
GSM RADIO LINK
MOBILITY MANAGEMENT
CALL MANAGEMENT
RADIO RESOURCE MANAGEMENT
HLR
VLR
BSC
Abis
MSC
A
MS
GMSC
BTS
E
Abis
A
MSC
F
EIR
E
PSTN
BSC
Um
BTS
X.25
VLR
X.25
OMC Server
AuC
GSM Network
SS
External
PSTN &
PDN N/W
VLR
Switching
System
AUC
HLR
MSC
MS Mobile Station
BTS Base transceiver System
BSC Base Station Controller
MSC Mobile Switching Center
BSS BSC
HLR Home Location Register
VLR Visitor Location Register
BTS
EIR Equipment Identity Register
AUC Authentication Center
MS
OMC Operation And Maintenance Center
EIR
OMC
Base Station
System
GSM Architecture
VMSC
GSM
Air interface
B
S
C
Abis
interface
TRAU
BTS
BTS
BTS
BTS
A
interface
B
S
C
SMSC
HLR
AUC
MSC
PSTN
VLR
EIR
OMCS
BTS
BTS
Mobile
Station
A interface SS7 /
speech
X.25
SS7
Mobile Equipment(ME)
SIM
SIM-Card
25 mm
Permanent data:
- Unique mobile subscriber identity
through IMSI number and PIMSI
for Packet Mode
- Authentication parameter Ki,
- Authentication algorithm A3,
- Generating encryption key Kc
algorithm A8,
- PIN code.
GSM
Microchip with stored
user information
Removable data:
- Temporary Mobile Subscriber Number,
- Location Area Identification
- Routing Area Identification (Packet mode)
Subscriber Identification
IMSI
Nature
Similar to ISDN,
Conformity with E164/E213
Identify a PLMN
worldwide
MCC
MNC
Meaning
Mobile
Country
Code
Mobile
Network
Code
Nb. digits
Format
MS - ISDN
MSIN
H1 H2
x x x ......... x x x
Mobile Subscriber
Ident. Nb
H1 H2 = Identity of HLR
within the home PLMN
max 10
CC
NDC
SN
M1 M2
xx xx xx xx
Country
National
Mobile Subscriber
Code
(where Destination (national definition)
subscription Code * M1 M2 = nbr of logical HLR
has been made)
1 to 3
2 to 4
total max 15
MNC
=
71(APBSNL)
72(TNBSNL)
20 (Bytel)
Mobile
Country
Code
Mobile
Network
Code
3 digits
2 digits
NMSI
LAI
Mobile
Country
Code
Mobile
Network
Code
3 digits
2 digits
GSM
Temporary Mobile
Subscriber Identity
4 octets
RAI
National
Destination
Code
2 or 3 digits
Must be dialed to
make a call to
mobile
subscriber
MSRN
Country
Code
Country
Code
National
Destination
Code
National
Destination
Code
CC = 33 (France)
091(India)
001(US)
HO-number
NDC = 9448(BSNL-karnataka)
9845,9880(Airtel)
9886(Hutch)
= 660, 661, 618 (Bytel)
Is a PSTN-like
number used to
reach a roaming
MS
Is a PSTN-like
number to track the
MS that hands over
to another MSC
during call-in-state
TAC
Type Approval
Code
FAC
Final Assembly
Code
SNR
SP
Serial NumbeR
(SPare)
TAC
Type Approval
Code
FAC
SNR
SP
Serial number
(SPare)
Final Assembly
Code
IMEI:
#06#
351475 60 926514 4
MS Classmark
Power classes
Classmark
Revision level
RF power
Encryption algorithm
Frequency
Short message
LoCation Services
MS Positioning Method
Multi-band
*
**
8 W*
5W
2 W**
0.8 W
GSM
1800
GSM
1900
1 W**
1 W**
0.25 W 0.25 W
4W
2W
8-PSK modulation
Multi-slot class
GSM
400/850/900
Class
E1
E2
E3
GSM
GSM
GSM
400/850/900 1800
1900
2W
1W
1W
0.5 W
0.4 W 0.4 W
0.2 W
0.16 W 0.16 W
ISUP
Abis
LAPD
Um
LAPDm
E
TUP
BSSAP
MAP
MAP
MAP
C
D
POTS
GSM Protocols
CM
MM
RR
LAPDm
LAPD
BTSM
BSSAP
DTAP
MAP
MTP
SCCP
TCAP
ISUP
- Connection Management
- Mobility Management
- Radio resource
- LAPD for mobile
- Link Access Procedure for D channel
- BTS Management Part
- BSS Application Part (BSC - MSC)
- Direct Transfer Application Part (MS - MSC)
- Mobile Application Part
- Message Transfer part of SS7
- Signalling Connection Control Part of SS7
- Transaction Capabilities Application Part
- ISDN User Part
BTS
BSC
MSC/VLR
HLR
MSC/
VLR
HLR
GMSC
CC
MM
RR
Trans
MS
BTS
BSC
GMSC
TOPICS
GSM CONCEPTS
GSM SYSTEM ARCHITECTURE
IDENTIFIERS USED IN GSM
GSM CHANNELS
GSM RADIO LINK
MOBILITY MANAGEMENT
CALL MANAGEMENT
RADIO RESOURCE MANAGEMENT
TOPICS
GSM CONCEPTS
GSM SYSTEM ARCHITECTURE
IDENTITIES USED IN GSM
GSM CHANNELS
GSM RADIO LINK
MOBILITY MANAGEMENT
CALL MANAGEMENT
RADIO RESOURCE MANAGEMENT
Channel concept
Physical channel:
One timeslot of a TDMA-frame on one carrier
is referred to as a physical channel.
There are 8 physical channels per carrier in
GSM,channel 0-7(timeslot 0-7)
Logical channel:
A great variety of information must be
transmitted between BTS and the MS,for e.g.
user data and control signaling.Depending
on the kind of information transmitted we
refer to different logical channels.These logical
COMMON
CHANNELS
COMMON
CONTROL
CHANNELS
BROADCAST
CHANNELS
FCCH
SCH
DEDICATED
CHANNELS
BCCH
PCH
DEDICATED
CONTROL
CHANNELS
SDCCH
RACH
AGCH
SACCH
TCH/F
TRAFFIC
CHANNELS
FACCH
TCH/H
TCH/EFR
Logical channels
Logical channels
Control channels
BCH
CCCH
Traffic channels
DCCH
Half
rate
Full
rate
Synchronization Channel-SCH
This is used by the MS to synchronize to the TDMA frame structure
within the particular cell.
Listening to the SCH the MS receives the TDMA frame number and
also the BSIC ( in the coded part- 39 bits).
Repeats once in every 10 frames.
Paging Channel-PCH
The information on this channel is a paging message including
the MSs identity(IMSI/TMSI).This is transmitted on Downlink,
point-to-multipoint.
Traffic Channels-TCH
TCH carries the voice data.
Two blocks of 57 bits contain voice data in the normal
burst.
One TCH is allocated for every active call.
Full rate traffic channel occupies one physical
channel(one TS on a carrier) and carries voice data at
13kbps
Two half rate (6.5kbps) TCHs can share one physical
channel.
GSM Channels
GSM Channels
Traffic Channels
(TCHs)
Control Channels
Broadcast
Channels
(BCHs)
Full
rate
Half
rate
Common Control
Channels
(CCCHs)
Dedicated Control
Channels
(DCCHs)
(down uplink)
Downlink
Downlink
Uplink
Fast
TCH /F
Traffic Multiframing
AGCH
CBCH
Signaling Multiframing
RACH SDCCH
FACCH
Slow
SACCH
Traffic Multiframing
0123456 7
BTS
MS
FCCH
TCH
Frequency correction
Synchronization
Traffic (speech-data)
SCH
FACCH
Associated Signaling
BCCH
Broadcast control
RACH
Access request
Subscriber paging
Answer to Access request
PCH
SACCH
SDCCH
CBCH
Broadcast info
AGCH
FCCH
CBCH
Broadcast info
Dedicated Signaling
SDCCH
SACCH
SCH
M.S. Pre-synchronization
BCCH
RACH
Access request
PCH
Subscriber paging
AGCH
TCH MESSAGES
Measures:
Speech
Data
Power Control
FACCH MESSAGES
SMS
SDCCH to TCH
SDCCH MESSAGES
Request for a SDCCH assignment
Request for the end of channel
assignment
Order of commutation from SDCCH to
TCH
SMS
commutation
Characteristics of the future used BS
after handover
Connection establishment to BS after
handover
Validation of an handover
SCH MESSAGES
Frame Number
AGCH MESSAGES
For dedicated channel assignment:
- frequency number
- slot number
- frequency hopping description
- Timing Advance (1st estimation)
- MS identification
CBCH MESSAGES
BCCH MESSAGES
Specific information
2ter, 3, 4, 7, 8
(idle mode)
RACH MESSAGES
Service request:
PCH MESSAGES
messages containing a mobile
- emergency call
- answer to an incoming call
- outgoing call
- short message
- call re-establishment
- inscription
Traffic channel
Frame
4.615 ms
TS TS TS TS TS TS TS TS TS TS TS TS TS TS TS TS TS TS TS TS TS TS TS TS
0
1 2 3 4 5 6 7 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7
TS TS TS TS TS TS TS TS
0 1 2 3 4 5 6 7
TS TS TS TS TS TS TS TS
0 1 2 3 4 5 6 7
21 22 23 24 25
46 47 48 49 50
1326
frames
0
1
0
46
22
47
23
48
24
49
50
25
T T T T T T T T T T T T A T T T T T T T T T T T T
time
T0 T1 T0 T1 T0 T1 T0 T1 T0 T1 T0 T1 A0 T1 T0 T1 T0 T1 T0 T1 T0 T1 T0 T1 T0 A1
T : TCH
Ti : TCH
sub-channel no. i
A : SACCH
Ai : SACCH
sub-channel no. i
: IDLE
time
Downlink
51 frames = 235 ms
D0
D1
D2
D3
D4
D5
D6
D7
A0
A1
A2
A3
D0
D1
D2
D3
D4
D5
D6
D7
A4
A5
A6
A7
time
Uplink
51 frames = 235 ms
A5
A6
A7
D0
D1
D2
D3
D4
D5
D6
D7
A0
A1
A2
A3
D0
D1
D2
D3
D4
D5
D6
D7
A4
time
A : SACCH
D : SDCCH
: IDLE
Multiframe
m-1
Multiframe m
Multiframe
m+1
51 frames = 235.38 ms
FS
FS
FS
FS
FS
FS
B
time
PCH/AGCH
BTS
Physical Channel
ARFCN (n)
TS (s)
SCH
MS
BCCH
FCCH
Uplink
51 frames = 235.38 ms
RRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRR R RRRRRRRRRRRRRRRRRR
F : FCCH
S : SCH
B : BCCH
: PCH /
C AGCH
time
R : RACH
: IDLE
TOPICS
GSM CONCEPTS
GSM SYSTEM ARCHITECTURE
IDENTITIES USED IN GSM
GSM CHANNELS
GSM RADIO LINK
MOBILITY MANAGEMENT
CALL MANAGEMENT
RADIO RESOURCE MANAGEMENT
Step 1
Digitizing and
source coding
Source
decoding
Step 2
Channel
coding
Channel
decoding
Interleaving
De-interleaving
Step 3
Burst formatting
Step 4
Ciphering
Step 5
Modulation
Step 6
Transmission
Burst deformatting
Deciphering
Demodulation
equalization
Diversity
Speech blocks
20 ms
20 ms
Codec dependent
Codec dependent
Codec dependent
Source coding
Channel coding
456 bits
A A A A
5 6 7 8
Normal
burst
B B B B B B B B
1 2 3 4 5 6 7 8
Interleaving
8 Bursts
A5
B1
456 bits
A6
B2
A7
B3
A8
B4
B5
C1
B6
C2
456 bits
8 Sub blocks
of 57 bits
B7
C3
C C C C
1 2 3 4
B8
C4
57 bits
26 bits
57 bits
Tail
Information
CRL
Training
CRL
Information
Tail
20 ms
20 ms
20 ms
Codec dependent
Codec dependent
Codec dependent
Source coding
Channel coding
228 bits
A A A A
1 2 3 4
B B B B
1 2 3 4
Interleaving
A3
B1
4 Bursts
Normal
burst
228 bits
A4
B2
B3
C1
228 bits
4 Sub blocks
of 57 bits
C C C C
1 2 3 4
B4
C2
Ciphering
Burst to be
transmitted
Plain data:
Ciphering sequence:
XOR:
Ciphered data (transmitted):
Ciphered sequence:
XOR:
Recovered data:
Data
Data
0 1 1 1 0 0 1 0.....
0 0 0 1 1 0 1 0.....
0 1 1 0 1 0 0 0.....
0 0 0 1 1 0 1 0.....
0 1 1 1 0 0 1 0.....
Received
burst
Data
Training
S
sequence
Data
Interleaving
Encoded speech blocks - Diagonal Interleaving
57 57 57 57 57 57 57 57
57 57 57 57 57 57 57 57
57 57 57 57 57 57 57 57
57
57
57
57
57
57
57
57
57
57
57
57
57
57
57
57
57
57
57
57
57
57
57
57
57
57
57
57
57
57
57
57
Even bits
Odd bits
57
57
57
57
57 57 57 57 57 57 57 57
57
57
57
57
Tb
3
Coded Data
57
57 57 57 57 57 57 57 57
57
57
57
57
57
57
57
57
57
57
57
57
57
57
57
57
Even bits
Odd bits
F Training Sequence F
1
26
1
Coded Data
57
Tb
3
Gp
8.25
BTS > MS
Uplink
MS > BTS
Offset
Timing Advance
MS1 0
near
MS2
0
far
MS1 0
near
MS2
0
far
At
BTS
At
BTS
0
1
0
2
1
3
2
4
3
5
4
6
5
7
6
TOPICS
GSM CONCEPTS
GSM SYSTEM ARCHITECTURE
IDENTITIES USED IN GSM
GSM CHANNELS
GSM RADIO LINK
MOBILITY MANAGEMENT
CALL MANAGEMENT
RADIO RESOURCE MANAGEMENT
Mobility Management
Network Attachment
Cell Identification
MS scans complete GSM frequency band for highest
power
Tunes to highest powered frequency and looks for
FCCH. Synchronizes in frequency domain
Get training sequence from SCH which follows
FCCH. Synchronizes in time domain.
Accesses BCCH for network id, location area and
frequencies of the neighboring cells.
Stores a list of 30 BCCH channels
Network Attachment..
PLMN Selection
Get the operator information from SIM.
Cell Selection
Selected cell should be a cell of the selected PLMN
Signal strength should be above the threshold.
Cell should not be barred
Location Update
Register with the network by means of location
updation procedures.
BTS
BSC
(G)MSC
VLR
HLR
Action
Security - Authentication
MS
Ki
RAND
A3
SRES
MS
BTS
AuC
RAND
SRES
SRES
Auth Result
Authentication center
provides RAND to Mobile
AuC generates SRES using
Ki of subscriber and RAND
Mobile generates SRES
using Ki and RAND
Mobile transmits SRES to
BTS
BTS compares received
SRES with one generated
by AuC
TOPICS
GSM CONCEPTS
GSM SYSTEM ARCHITECTURE
IDENTITIES USED IN GSM
GSM CHANNELS
GSM RADIO LINK
MOBILITY MANAGEMENT
CALL MANAGEMENT
RADIO RESOURCE MANAGEMENT
PLMN Selection
Yes
Is there an up to date
found PLMNs list?
Yes
No
Creation of a found
PLMN list
manual
mode
The user selects a
PLMN from the
displayed PLMNs
No (manual)
automatic
mode
The MS selects the first
PLMN from the preferred
PLMNs list (if it is not in
the forbidden PLMNs list)
Cell Selection
succeed?
Yes
End of PLMN
selection
No (automatic)
Selection of the
next preferred
possible PLMN
PLMN Selection
Constitution of the "Found PLMN list"
Listen to all the
frequencies of the GSM
spectrum:
power level measurement
and average on these
measurements
Memorize the
beacon
frequencies in the
precedent
selection
Selection of
another PLMN
Eligible cell?
No
Yes
C1 Computation for
eligible cells
Suitable cell:
Eligible cell
Suitable cell?
No
Yes
Look for the cell with the best
C1 in the suitable cells list
IMSI Attach
Rejected?
No
Yes
Cell Selection
Purpose: get synchronization
with the GSM network
prior establishing any communication.
1
1
BTS-5
BTS-4
2
1
BTS-3
4
BTS-1
This cell
BTS-2
Immediate Assignment
BTS
MS
1
CHANNEL REQUEST
MSC
BSC
CHANNEL REQUIRED
RACH
CHANNEL ACTIVATION
3
4
IMMEDIATE ASSIGNMENT
AGCH
OR
6
CM SERVICE REQUEST
SDCCH or TCH
LOCATION UPDAT. REQU.
SDCCH or TCH
CHANNEL ACTIVATION
ACK.
IMMEDIATE ASSIGNMENT
COMMAND
Immediate
Assignment
BSS
2
IMSI
4
TMSI
Release
4
TMSI
BSC
5
MSC
5
6
BTS
TMSI
5
LAI
VLR
HLR
IMSI
VLR id
IMSI
TMSI
LAI
BSS
new TMSI
2
BSC
3
4
BTS
MSC
3
4
2
New TMSI
TMSI
3
New LAI
VLR
IMSI
TMSI
LAI
1
2
MSC
5
7
BTS
2
TMSI New TMSI
5
New LAI
New VLR
Old VLR
IMSI, TMSI
Old LAI
RAND, SRES, 4
Kc
IMSI,TMSI
LAI
RAND, SRES,
Kc
HLR
6
new
VLR id
subscriber
data
IMSI Attach
1
CHANNEL
REQUEST
IMMEDIATE
ASSIGNMENT
BSS
2
3 LOCATION UPDATING
LOCATION UPDATING
5
ACCEPT (LAC, TMSI)
BSC
BTS
3
4
MSC
5
4
VLR
6
IMSI Detach
1
CHANNEL
REQUEST
IMMEDIATE
ASSIGNMENT
BSS
2
BSC
3
IMSI DETach
INDication
CHANNEL
RELEASE
IMSI DETach
INDication
MSC
BTS
4
VLR
MS
CHANNEL REQUEST
Dialing 1
VLR
IMMEDIATE ASSIGNMENT
CM SERVICE REQUEST
2
3
3
Sending
Number
PSTN
MSC
Authentication procedure
Ciphering procedure
SETUP (basic) or
EMERGENCY
CALL PROCEEDING
7
CM SERVICE REQUEST
SETUP
5
6
CALL PROCEEDING
IAM
Ringing
Assignment procedure
ACM
ALERTING 9
Ringing
Path
Established
CONNECT
11
Ring
ANM
11
CONNECT ACKnowledge
8
10
BSC1
BTS11
5
BTS12
MSC/
VLR
GMSC
BSC2
BTS21
2
BTS22
HLR
LA2
BSC3
BTS23
BTS31
PSTN
Home PLMN
International
SS7
VLR
HLR
4
Roaming Number
(MSRN)
9
PAGING
REQUEST
(TMSI)
11
BSS
Send info
to I/C
(MSRN)
PAGE
(TMSI + LA)
Routing
Information
(MSRN)
1
MSISDN
8
PAGING
REQUEST
10
(TMSI + LA)
Send
Routing
Information
(MSISDN)
IAM (MSRN)
VMSC
GMSC
IAM
2
(MSISDN)
ISDN
PN
IAM
MSISDN
MSRN
IMSI
GMSC
VMSC
TMSI
:
:
:
:
BSS
MS
PAGING REQUEST
(TMSI or IMSI, LA)
PAGING REQUEST
4
IAM
(MSRN)
PSTN
GMSC
IAM
1
(MSISDN)
Dialing
CHANNEL REQUEST
(LAC, Cell ID)
IMMEDIATE ASSIGNMENT 6
(SDCCH or TCH)
CM SERVICE REQUEST
(Paging Response)
PAGING RESPONSE
(TMSI or IMSI, LA)
Authentication procedure
Ciphering procedure
Ringing
10
12
11
CONNECT
12
Call Release
1 - Mobile Initiated
DISCONNECT
RELEASE
4
PSTN
Call in progress
DISCONNECT
RELEASE
RELEASE COMPLETE
CHANNEL RELEASE 6
7
MSC
BSS
MS
Release
RELEASE INDICATION
RF Channel Release
procedure
8
9
Release
tone
Call Release
2 - PSTN Initiated
1
3
3
BSC
4
5
BSS
BTS
MSC
REL
4
5
PSTN
RLC
1
2
Purpose:
informs the mobile
then releases radio
and network resources.
On hook
Paging
Authentication
Ciphering
Equipment Validation
Call Setup
Handovers
Call Release
TOPICS
GSM CONCEPTS
GSM SYSTEM ARCHITECTURE
IDENTITIES USED IN GSM
GSM CHANNELS
GSM RADIO LINK
MOBILITY MANAGEMENT
CALL MANAGEMENT
RADIO RESOURCE MANAGEMENT
Power Control
Hand over Control
Discontinuous Transmission
Frequency Hopping
Power Control
Handover
Means to continue a call even a mobile crosses the
border of one cell to another
Procedure which made the mobile station really roam
Handover causes
RxLev (Signal strength , uplink or downlink)
RxQual (BER on data)
O & M intervention
Timing Advance
Traffic or Load balancing
Handover Types
Internal Handover (Intra-BSS)
Within same base station - intra cell
Between different base stations - inter cell
External Handover (Inter-BSS)
Within same MSC -intra MSC
Between different MSCs - inter-MSC
Handover Types
GMSC
MSC
BSC
BSC
C-3
BSC
MSC
C-4
C-1
C-2
BSC
HO performed
BSC
HO required
Activate TCH(facch)
with HoRef#
Acknowledges and
alloctes TCH (facch) if
1. Check for HO passed
2. Channel avail in new BTS
BTS 2
Periodic Measurement
Reports (SACCH)
Periodic Measurement
Reports
Cell 2
Periodic Measurement
Reports (SACCH)
Cell 1
BTS 1
B5
B6
B4
B7
B3
B1
B8
= 32-46
B2
B12
MS ( monitoring the
broadcast radio B1 in idle
mode )
B9
B10
B11
F0
F1
F2
F3
F4
F5
F10
..
F11
F50
..
..
Cell identity
Back
Location Updates
Location Updates can be classified into two:
Periodic Location Updates:
This occurs as per the timer set by the network operator.
If the MS does not perform this update the MSC marks
the MS as Detached on the VLR.
1.
2.
3.
4.
Back
Discontinuous Transmission
Discontinuous Transmission(DTX) allows the radio
transmitter to be switched off most of the time
during speech pauses.
A Silence Indicator Block is transmitted at 500bps,
which generates a comfort noise
Down Link interference is decreased.
Up link battery is saved
Frequency Hopping
Frequency Hopping permits the dynamic switching of radio
links from one carrier frequency to another.
Base Band Hopping
At the BTS each the timeslot is shifted to another
transceiver, which is transmitting at the hop frequency.
User will be connected to different Transceivers depending
on hop sequence.
Synthesis Hopping
At the BTS transceiver changes the frequencies used. The
user will be connected to only one transceiver.
Decreases the probability of interference
Suppresses the effect of Rayleigh fading
CONCENTRIC-CELL:
macro cell with system coverage
limitation inside another macro
MACRO-CELL:
antenna radiating above roofs
---> Wide Coverage ( 35 km)
High sensitivity to
interference
Requires "secured"
Frequency reuse pattern
PICO-CELL:
Antenna inside building
---> Very small coverage
MICRO-CELL:
Antenna below the roofs
---> small coverage
Cell Sectorization
TRI
OMNI
BI
(E)GPRS Explain
PSTN
Network
BS
C
BT
S
PC
U
HLR/Au
C
EIR
MSC
Gb
EDAP
Border
Gateway
(BG)
InterPLMN
network
Serving
GPRS
PA
Support
PU
Node
(SGSN)
GPRS
backbo
ne
network
(IP
based)
Lawful
Interception
Gateway (LIG)
GPRS
INFRASTRUCT
URE
SS7
Network
Corporate
1
Serve
Billing
System
r
Route
r
Charging
Gateway (CG)
Local
Area
Networ
k
Data
network
(Interne
t)
Gateway
GPRS
Support
Node
(GGSN)
Corporate
2
Serve
r
Data
network
(Internet)
Route
r
GGSN
GTP tunnelling to
other GSNs
Secure interfaces
to external
networks
Charging &
statistics
IP address
management
Border Gateway
Interconnects different
GPRS operators'
backbones
Enables GPRS
Charging Gateway
roaming
Standard Nokia IP
router family
CDR consolidation
Forwarding CDR
information to
billing center
SM-SC
C
Gd
HLR
MSC/VLR
D
Gs
Gb
TE
MT
BSS
Um
Gc
Gr
Gi
GGSN
SGSN
Gn
Gn
EIR
Gp
Gf
SGSN
GGSN
Other PLMN
Signaling Interface
Signaling and Data Transfer Interface
PDN
TE
(E)GPRS Interfaces
TE
R MT
Um BSS
MSC/VLR
SMS-GMSC
SMS-IWMSC
SM-SC
HLR
Optional
Gb
Gs
Gr
Gc
Gd
SGSN
Gn
SGSN
Gp
GGSN
Gf
EIR
LAN SW
/ IP BB
Gn
Gn
DNS
Gn
CG
GGSN Gi
Gn
Gn
LIG
Other PLMN
Signaling Interface
Signaling and Data Transfer Interface
PDN
TE
Class C
Packet only
(or manually switched between GPRS and speech modes)
Class B
Class A
BSC
BTS
GPRS implementation
GPRS/EGPRS capable terminals are required
GPRS territory is required in BTS
Packet Control Units (PCUs) need to be implemented in BSCs
Gb interface dimensioning
GPRS packet core network dimensioning
EGPRS Implementation
Can be introduced incrementally to the network where the demand is
EGPRS capable MS
Network HW readiness/upgrade (BTS and TRX)
TRS capacity upgrade (Abis and Gb!)
Dynamic Abis
BTS
EDGE capable
TRX,
GSM
compatible
SGSN
EDGE
functionality in
the network
elements
GGSN
Gn
BSC
A-bis
Gb
A
MSC
BTS
EDGE
capable
terminal,
GSM
compatible
8-PSK coverage
GMSK coverage
More capacity in
interfaces
to support higher data
usage
IP
GPRS Bearer
L2
L1
GGSN
Gb
Gn
Gi
APP
Compression, segmentation
Ciphering and reliable link
RLC
BSSGP
MAC
NW sr
GSM RF L1bis
BSS
Relay
SNDCP
GTP
LLC
BSSGP
USER
PAYLOAD
UDP
IP
GTP
UDP
IP
L2
L1
L2
L1
NW
sr
L1bis
SGSN
GGSN
GPRS IP Backbone
TCP/UDP
IP
L2
L1
FIXED HOST
Internet
APP
TCP/UDP
IP
SNDCP
LLC
RLC
MAC
GSM RF
TCP/UDP
LLC Frame
IP
SNDCP
LLC
RLC
MAC
GSM RF
Addre
ss
Control
Information
1-3
1-1520
FCS
3 Octets
TCP/UDP
MAC
IP
SNDCP
LLC
RLC
MAC
GSM RF
GSM RF Layer
APP
TCP/UDP
IP
SNDCP
LLC
RLC
MAC
GSM RF
Modulation/demodulation
Bit inter-leaving
70
70
70
RLC/MAC Blocks
Note: Amount of RLC
blocks per radio block
TDMA Bursts
depends on used
(modulation) coding
7
scheme (M)CS
0 1 2 3 4 5 6 7 8 9 1 1 1 1 1 1 1 1 1 1 2 2 2 2 2 2 2 2 2 2 3 3 3 3 3 3 3 3 3 3 4 4 4 4 4 4 4 4 4 4 5 5
0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
B0(0..3)
B1(4..7)
B2 (8..11)
P
T B3(13..16)
C
C
H
B4(17..20)
B5(21..24)
I
D B6(26..29)
L
E
B7(30..33)
B8(34..37)
P
T B9(39..42)
C
C
H
B10(43..46)
B11(47..50)
I
D
L
E
GSM Traffic TS
TS 2
TS 3
TCH
TCH
TCH
TCH
TCH
TCH
TCH
TCH
TCH
TCH
TCH
TCH
SACCH
TCH
TCH
TCH
TCH
TCH
TCH
TCH
TCH
TCH
TCH
TCH
TCH
IDLE
GPRS traffic TS
TS 4
TS 5
TS 6
TS 7
Radio Block 0
Radio block 1
Radio Block 2
PTCCH
Radio Block 3
Radio Block 4
Radio Block 5
IDLE
Radio Block 6
Radio Block 7
Radio Block 8
PTCCH
Radio Block 9
Radio Block 10
Radio Block 11
IDLE
CCCH
Common Control Channels
PCH
Paging CH
AGCH
RACH
Access Grant CH Random Access CH
DCH
Dedicated Channels
PACCH
Packet Associated
Control CH
PDTCH
Packet Data TCH
Session Management
PDP context activation
IDL
E
MOBILE
REACHABLE
Timer expiry
STANDB
Y
MS location known to
Routing Area level.
MS is capable to being
paged for point-topoint data.
REA
DY
Packet
TX/RX
MS location known to
cell level. MS is
transmitting or has just
been transmitting. MS is
capable of receiving
point-to-point data.
Attach Procedure
The GPRS Attach procedure establishes a GMM context. This procedure
is used for the following two purposes:
a normal GPRS Attach, performed by the MS to attach the IMSI for GPRS
services only
a combined GPRS Attach, performed by the MS to attach the IMSI for GPRS
and non-GPRS services
BSS
GGSN
EIR
MSC/VLR
1. Attach Request
2. Identification Request
2. Identification Response
3. Identity Request
3. Identity Response
4. Authentication
5. (IMEI Check - optional)
6a. Update Location
6b. Cancel Location
6c. Cancel Location Ack
6d. Insert Subscriber Data
6e. Insert Subscriber Data Ack
HLR
MSC/VLR
BSS
GGSN
EIR
MSC/VLR
HLR
MSC/VLR
Detach Process
GPRS Detach procedure is used for the following two purposes:
a normal GPRS Detach
a combined GPRS Detach (GPRS/IMSI detach, MS originated)
BSS
SGSN
GGSN
MSC/VLR
1. Detach Request
2. Delete PDP Context Request
2. Delete PDP Context Response
3. IMSI Detach Indication
4. GPRS Detach Indication
5. Detach Accept
Routing Area
The Routing Area Update procedure is used for the followings:
a normal Routing Area Update
a combined Routing Area Update
a periodic Routing Area Update
an IMSI Attach for non-GPRS services when the MS is IMSI-attached for
GPRS services.
Routing Area (RA)
Subset of one, and only one Location Area (LA)
RA is served by only one SGSN
Routing Area
Location
Area (LA)
MSC/VLR
GS Interface
Routing
Area (RA)
SGSN
Bad LA/RA border design can significantly increase the TRXSIG on LA/RA
border cells causing the cell-reselection outage to be longer
LA/RA border should be moved from those areas where the normal CSW and
PSW traffic is very high
BTS
BSC
New SGSN
P_Channel Required
P-Immediate Assignment Cmd
DL TBF ASSIGNMENT
Routing Area Update Accept
Routing Area Update Accept (PDCCH)
Routing Area Update complete (PDCH)
Routing Area Update complete
BTS
BSC
New SGSN
DL TBF ASSIGNMENT
Routing Area Update Accept
BTS
BSC
New SGSN
UL TBF ASSIGNMENT
Routing Area Update Complete (PDTCH)
Routing Area Update Complete
Including TLLI for contention resolution
Including TLLI for contention resolution
BT
S
BS
C
HLR/Au
C
EIR
MSC
1.
APN=
"Intranet.Ltd.com"
Domain
Name
Server
(DNS)
Serving
GPRS
Support
Node
(SGSN)
GPRS
backbon
e
network
(IP
based)
SS7
Network
2.
Access
Point
Gateway
GPRS
Support
Node
(GGSN)
Data
network
(Internet
)
GPRS
INFRASTRUCT
URE
Data
network
(Internet)
Access Point Name = Reference to an external packet data network the user wants to connect to
U
m
4.
BT
S
PSTN
Network
BS
C
HLR/Au
C
EIR
MSC
SS7
Network
3.
Domain
Name
Server
(DNS)
Serving
GPRS
Support
Node
(SGSN)
GPRS
backbon
e
network
(IP
based)
4.
Data
network
(Internet
)
Access
Point
Gateway
GPRS
Support
Node
(GGSN)
Data
network
(Internet)
GPRS
INFRASTRUCT
URE
BT
S
PSTN
Network
BS
C
HLR/Au
C
EIR
MSC
SS7
Network
Domain
Name
Server
(DNS)
Serving
GPRS
Support
Node
(SGSN)
GPRS
backbon
e
network
(IP
based)
Access
Point
Data
network
(Internet
)
APN=
"Intranet.Ltd.com"
Gateway
GPRS
Support
Node
(GGSN)
Data
network
(Internet)
GPRS
INFRASTRUCT
URE
U
m
BT
S
5.
6.
BS
C
HLR/Au
C
EIR
MSC
6.
Domain
Name
Server
(DNS)
Serving
GPRS
Support
Node
(SGSN)
GPRS
backbon
e
network
(IP
based)
SS7
Network
5.
Access
Point
Data
network
(Internet
)
APN=
"Intranet.Ltd.com"
Gateway
GPRS
Support
Node
(GGSN)
Data
network
(Internet)
GPRS
INFRASTRUCT
URE
BS
C
PACCH (Packet Associated Control Channel): Similar to GSM CSW SACCH
TBF Flow
Start of TBF
Slow
TBF
Full Speed
TBF Ending
Slow down
Gb SGSN
(LLC) Buffer
Gb SGSN
(LLC) Buffer
PCU
(LLC -> RLC/MAC)
PCU
(LLC -> RLC/MAC)
Air Interface
(RLC/MAC)
Air Interface
(RLC/MAC)
MS Re-assembly
(RLC/MAC -> LLC)
MS Re-assembly
(RLC/MAC -> LLC)
Application
Application
Uplink TBF
Close-ended: limited number of octets
Open-ended: an arbitrary number of octets
MS may request either close-ended or open-ended TBF
NW decides the type in PACKET UPLINK ASSIGNMENT
Packet Polling
Packet Control Ack (for TA)
Packet Downlink Assignment
Data / Signalling
Ack / Nack
PCH
RACH
AGCH
PDTCH
AGCH
PACCH
PACCH
PACCH
PDTCH
PACCH
PACCH
BTS
TFI
5
TFI
2
MSs
BTS
AGCH
PDTCH
Signaling + Ack/Nack
PACCH
Final UL Data
Final Ack/Nack
Packet control Ack
PDTCH
PACCH
PACCH
BTS
New MS
TS 3
USF =
3
USF =
2
USF =
1
MSs
BTS
(E)GPRS Explain
Functionality
Base Station Subsystem
Network Audit
Network Dimensioning and Planning
Network Optimization
Tools
Burst Structure
Burst structure is similar with current GMSK burst, but term 'bit' is replaced
by 'symbol'
Training sequence has lower envelope variations
Seamless switchover between timeslots
In case of max output power only, back-off applied to 8-PSK
TSL0
BCCH
GMSK
TSL1
TCH
GMSK
TSL2
TCH
GMSK
TSL3
TCH
GMSK
TSL4
TCH
GMSK
TSL5
PDTCH
8-PSK/
GMSK
TSL6
PDTCH
8-PSK/
GMSK
TSL7
PDTCH
8-PSK/
GMSK
P(dB)
t(us)
EDGE Signal
Nokia GPRS
PCU1
CS1
181
9.05
CS2
268
13.4
Nokia GPRS
PCU2
CS3
312
15.6
CS4
428
21.4
Error
Correction
Payload (bits)
per RLC block
Data
Coding
Scheme
More Data
=
Less Error
Correction
CS-1
RLC/MAC Block Size:
MAC
CS-2
USF
CS-3
Precoded USF:
57
57
57
57
312
40
16
16
6
~2/3
456
588
132
6
~3/4
676
220
interleaving
57
57
57
57
9.05
MAC
CS-4
268
1/2
puncturing
CS-3
181
length:
456 bits
CS-2
BCS
USF
BCS Size:
Precoded USF:
Data rate (kbit/s):
20 ms
13.4
428
16
12
21.4
15.6
60
MCS-1
MCS-2
MCS-3
MCS-4
MCS-5
MCS-6
MCS-7
MCS-8
MCS-9
50
40
30
20
10
Frequency
Hopping
Network
0
0
10
15
20
25
30
MCS-9
1.0
0.36
MCS-8
0.92
0.36
MCS-7
0.76
0.36
MCS-6
0.49
1/3
8PSK
2x592
2x12
2x6
59.2
2x544
54.4
2x448
44.8
592
544+48
29.6
27.2
MCS-5
0.37
1/3
448
MCS-4
1.0
0.53
352
17.6
MCS-3
0.80
0.53
296
272+24
14.8
13.6
GMSK
12
22.4
MCS-2
0.66
0.53
224
11.2
MCS-1
0.53
0.53
176
8.8
NOTE:
Ref: TS 03.64
Puncturing of
the coded info
User data
"Additional info" that does not require extra
protection
Header part, robust coding for secure
transmission
header
encoded USF
protecte
d
header
FBI+
data 2
BCS tail
E
1/3 convolutional coding
mother code
puncturing
P1
P2
P1
4 TDMA bursts =
20 ms
P3
puncturing
Header part:
Includes RLC/MAC header information and
information on the coding of the data part (like
used puncturing scheme).
P2
P3
mother code
data 1
BCStail
60
50
MCS-1
MCS-2
MCS-3
MCS-4
MCS-5
MCS-6
MCS-7
MCS-8
MCS-9
40
Link
Adaptation
30
20
10
0
0
10
15
20
25
30
Territory Method
Territory method is used to divide the CS and PS resources
Timeslots within a cell are dynamically divided into the CS and (E)GPRS
territories
Number of consecutive traffic timeslots in (E)GPRS territory are reserved
(or initially available) for (E)GPRS traffic, the remaining timeslots are
available for GSM voice
The dynamic variation of the territory boundary are controlled by territory
parameters
The system is able to adapt to different load levels and traffic proportions,
offering an optimized performance under a variety of load conditions
The PS territory can contain dedicated, default and additional capacity
Dedicated capacity: number of timeslots are allocated to (E)GPRS on a permanent
basis i.e. are always configured for (E)GPRS and cannot be used by the circuit switched
traffic. This ensures that the (E)GPRS capacity is always available in a cell
Default capacity: the (E)GPRS territory is an area that always is included in the
instantaneous (E)GPRS territory, provided that the current CS traffic levels permit this
Additional capacity= Additional (E)GPRS capacity means the extra time slots beyond
the default capacity which are assigned due to a load demand.
Territory Method
TRX 1 BCCHSDCCHTS
TS
TS
TS
TS
TS
TS
TS
TS
Territory border
TRX 2
TS
TS
TS
TS
BCCH= Signaling
TS = Free TSL for CSW
TS
TS = CSW Territory