Mobile Communications: Manuel P. Ricardo
Mobile Communications: Manuel P. Ricardo
Mobile Communications: Manuel P. Ricardo
GSM 2
Acknowledgements
GSM 3
What are the main network elements of GSM? What are the GSM addresses? How is the data transmitted over the air interface? What are the main logical channels? What is the GSM protocol stack for signalling? How is a Mobile Terminated Call processed? How is a Mobile Initiated Call processed?
GSM 4
GSM - Overview
Formerly: Groupe Spciale Mobile (founded 1982) Now: Global System for Mobile Communication Pan-European standard
ETSI, European Telecommunications Standardisation Institute
Seamless roaming within Europe possible Many providers all over the world
GSM 5
Services
Basic services
voice services, data services, short message service
Additional services
emergency number, group 3 fax
Supplementary services
identification: forwarding of caller number suppression of number forwarding automatic call-back
GSM 6
Basic Services
GSM 7
BTS
BSC
BSC
VLR
EIR
AuC
OMC
GSM 8
BSC BSC MS
BTS
GSM 9
GMSC
fixed network
VLR
MSC
MSC
BSC
VLR
BSC
GSM 10
Centralized operation, management and maintenance of GSM subsystems OMC - Operation and Management AuC - Authentication Centre
Security functions
OMC
AuC
EIR
Network Element
HLR
MSC
GSM 11
Um : radio interface
HLR
GSM 12
BTS
BTS
TRAU 64 kbit/s
BSC
64 kbit/s
MSC
BSC
BTS
16 kbit/s
BSC TRAU
64 kbit/s
MSC
MSC
BTS
16 kbit/s
BSC
MSC
GSM 13
Mobile Addresses
GSM 14
GSM 15
BTS comprises radio specific functions BSC is the switching center for radio channels: switches calls from MSC to correct BTS
X X X X X
X X X X X X
GSM 16
Switching of 64 kbit/s channels Paging and call forwarding Termination of SS7 (signaling system no. 7) Mobility specific signaling Location registration and forwarding of location information Generation/ forwarding of accounting and billing information
GSM 17
Subscriber data
IMSI - International Mobile Subscriber Identity List of subscribed services with parameters and restrictions
Location data
current MSC/VLR address
GSM 18
Local database
data about all users currently in the domain of the VLR includes roamers and non-roamers associated to each MSC
Subscriber identity
IMSI - International Mobile Subscriber Identity
Temporary location
LAI - Location Area Identification
Temporary addresses
MSRN - Mobile Station Roaming Number TMSI - Temporary Mobile Subscriber Identity
GSM 20
AuC, EIR
Authentication Center (AuC)
associated to HLR search key: IMSI supports authentication and encryption mechanisms Ki - subscriber secret authentication key A3 - authentication algorithm A8 - cipher key generation algorithm
GSM 21
GSM - TDMA/FDMA
935-960 MHz 124 channels (200 kHz) downlink
fre qu en cy
FDMA channels
890-915 MHz 124 channels (200 kHz) uplink
GSM 22
Burst Structures
Trainin Sequence - allows estimation of propagation characteristics (including multipath), in order to set up the equaliser parameters Stealing flags - indicate that a burst normally assigned to traffic is stolen for signalling
GSM 23
Frame Hierarchy
time-slot 15/26 ms = 0.577 ms 0 1 2 2 2 3 4 5 6 7 frame 8 x 15/26 ms = 60/13 ms = 4.615 ms frame 0 frame 1 frame 2 traffic multiframe 26 x 60/13 = 120 ms frame 24 frame 25 superframe (*) 6.12 s x 2048 hyperframe (**) 3.5 hours x 51
2 2
0 0 0
frame 0 frame 1
x 26 frame 2 control multiframe 51 x 60/13 = 235.38 ms 0 0 frame 49 frame 50 (*) - aligns traffic and control multiframes (**) - allows cycle for frame number
GSM 24
Logical Channels
TCH Traffic Channels CCH Control Channels CCCH Common Control Channels DCCH Dedicated Control Channels ACCH Associated Control Channels Full-rate Half-rate BCH Broadcast Channels
Uplink channel: MS transmits Downlink channel: BTS transmits Bi-direccional channel: both transmit
GSM 25
Logical Channels
Channel
TCH Traffic Channels TCH/H TCH/F FCCH BCH Broadcast Channels SCH BCCH RACH AGCH BTS MS PCH SDCCH SACCH BTS MS FACCH Allert MS to a call originated in the network Registration / location updating Call control procedures Control information between MS and BTS during the progress of a call or call set up Exchange of time critical control information during the progress of a call Allocated by network on demand Associated to a specific TCH or SDCCH Allocated by network or MS (*) BTS MS
Direction
BTS MS User data
Application
Allocation
Allocated by network on demand by MS
Carrier synchronization BTS MS Frame synchronisation General network information Cell information (present and adjacent) Request SDCCH for signalling Request TCH for handover Confirmation of SDCCH or TCH request Permanent Multiple access with slotted Alhoa contention between MS Permanent
(*) Fast allocation by setting S bit; bits are stolen from TCH
GSM 26
Logical channels
Channel
TCH Traffic Channels TCH/H TCH/F FCCH BCH Broadcast Channels SCH BCCH RACH AGCH PCH SDCCH DCCH Dedicated Control Channels SACCH FACCH Normal (114 data bits)
Burst type
Normal (114 data bits) Frequency correction Synchronisation Normal (114 data bits) Random access Normal (114 data bits)
Time-slot
Any
Mulitiframe
26 frames (120 ms)
Bursts / Multiframe
24 12 5
Capacity
24 x 114 / 120 = 22.8 kbit/s 12 x 114 / 120 = 11.4 kbit/s
12 minimum
TS0 - base channel (*) TS0/TS2/TS4/TS6 (**) Same TS as SDCCH Same TS as TCH Same TS as TCH (bits stolen from TCH)
4 x 114 / 120 = 3.8 kbit/s 2 x 114 / 120 = 1.9 kbit/s 1 x 114 / 120 = 0.95 kbit/s Same as TCH
GSM 27
receive
2 3 4 5 6 7 0 1
receive
2 3 4 5 6 7
uplink
0 1 2 3 4 5 6 7 0 1 2 3 4 5
transmit
transmit
GSM 28
Initial ranging
Adaptive control
BTS monitors burst and measures delays with specified time advance if path delay varies more than 1 bit period, the new value is signalled on SACCH
GSM 29
Frequency hopping
Application of frequency hoping
optional, but usually implemented channels with no frequency hopping: BCH and CCCH
Hoping sequence
several possible hoping algorithms selected algorithm broadcast on BCCH
GSM 30
Transmission power
GSM 1800
36 dBm 30 dBm 24 dBm vehicular portable portable usual classes
silent frames are sent to synthesise comfort noise at the receiver several advantages
reduces interference, on average, by 3 dB Increases MS battery life
GSM 31
Power Control
Implemented on both links Objective: lowest power level which provides desired quality (BER) Procedure
MS measures power received and BER and sends result on SACCH BTS sends new power level on SACCH, if and when necessary
control range
GSM 900
5 - 39 dBm
GSM 1800
0 - 36 dBm
Comments
effective maxima depend on cell size and MS capability control steps of 2 dB
channels with no power control - use maximum power for the cell
downlink BCH and CCCH: power set by BTS uplink RACH BCCH broadcasts maximum power level for the cell MS uses this value to set RACH transmission power
GSM 32
A MSC
CM
MM BSSAP SS7
PCM RR BTSM LAPD PCM PCM
SS7
16/64 kbit/s
GSM 33
MM (Mobility Management)
registration, authentication, location and handover management
GSM 34
4
VLR
2: forwarding call to GMSC 3: signal call setup to HLR 4, 5: get routing info (MSRN) from VLR 6: forward routing info to GMSC 7: route call to current MSC 8, 9: get current status of MS (LAI + TMSI) 10, 11: paging of MS in location area 12, 13: MS answers paging and authentication request 14, 15: security checks 16, 17: set up connection
calling station 1 PSTN
5 3 6
GMSC
15 14 7 10
MSC
10 13 16
BSS
10
BSS
BSS
11
11 11 17 12
MS
11
GSM 35
MS
idle updated announced TMSI matches stored value
PCH
successful access
GSM 36
MS
switch signaling to FACCH using assigned TCH generate ringing sound
FACCH Disconnect
Release FACCH
GSM 37
3 6
GMSC
5
MSC
8 2 9 1
MS BSS
10
GSM 38
GSM 39
MS
switch signaling to FACCH using assigned TCH ringing tone
TCH
data flow
Disconnect FACCH mobile on-hook
FACCH Release
Release complete FACCH
idle updated