GSM Protocol Architecture

Shariful Hasan Shaikot

Graduate Student
Computer Science Department
Oklahoma State University
Outline
 What is GSM?
 Nomenclature
 GSM Protocol Architecture
 Overview of Interfaces
 GSM Protocol Stack
 Overview of Layer-I
 Overview of Layer-II
 Overview of Layer-III

2
 What is GSM?
 GSM, the Global System for Mobile
Communications, is a digital cellular
communications system

 GSM provides –
 Digital Transmission
 ISDN compatibility
 Worldwide roaming in other GSM networks
 Provides a model for 3G Cellular systems (UMTS)

3
Nomenclature
 MS (Mobile Station) = ME (Mobile Equipment )
+SIM (Subscriber Identity Module)
 BSS (Base Station Subsystem) = BTS (Base

Transceiver Station) + BSC (Base Station

Controller)
 NSS (Network Switching Subsystem)

 MSC (Mobile Switching Center): telephony

switching function and authentication of user

4
 GSM Protocol Stack
- In any telecommunication system, signalling is required to coordinate the
necessarily distributed functional entities of the network.
- The transfer of signalling information in GSM follows the layered OSI model

 Layer 1: Physical Layer

 Radio Transmission
 Layer 2: Data Link Layer (DLL)
 provides error-free transmission between adjacent entities, based on the
ISDN’s LAPD protocol for the Um and Abis interfaces, and on SS7’s
Message Transfer Protocol (MTP) for the other Layer interfaces
 Layer 3: Networking or Messaging Layer
 Responsible for the communication of network resources, mobility, code
format and call-related management messages between various network
entities
5
 GSM Protocol Architecture

Layer 3

Layer 2

Layer 1

TDMA/FDMA

6
 Overview of Interfaces

 Um
 Radio interface between
MS and BTS
 each physical channel
supports a number of
logical channels
 Abis
 between BTS and BSC
 primary functions: traffic channel transmission, terrestrial
channel management, and radio channel management
 A
 between BSC and MSC
 primary functions: message transfer between different
BSCs to the MSC 7
The data link layer (layer 2)
over the radio link is based
on a modified LAPD (Link
Access Protocol for the D
channel) referred to as
LAPDm (m like mobile).

On the A-bis interface, the layer 2 protocol is based on the LAPD

from ISDN.

The Message Transfer Protocol (MTP) level 2 of the SS7 protocol

is used at the A interface.

8
 User Data and Control at Air
Interface
Two types of ISDN "channels" or
communication paths:

B-channel
The Bearer ("B") channel: a 64
kbps channel used for voice,
video, data, or multimedia calls.
D-channel
The Delta ("D") channel: a 16
kbps or 64 kbps channel used
primarily for communications (or
"signaling") between switching
equipment in the ISDN network
and the ISDN equipment
9
 User Data and Control at Air
Interface
In GSM:
• Bm channel for traffic / user data
• Dm channel for signaling

As in ISDN the Dm channel in GSM

can be used for user data if
capacity is available.

GSM’s Short Message Service

(SMS) uses this.

10
 Layer I:
Physical Layer

Radio transmission forms this Layer

11
Layer I: Physical Layer
 Modulation Techniques – Gaussian Minimum Shift Keying (GMSK)
 Channel Coding
 Block Code

 Convolutional Code

 Interleaving
 To distribute burst error
 Power control methodology – to minimize the co-channel interference
 Time synchronization approaches

12
GSM Protocol Architecture for Speech –
Air IF

13
 GSM Physical Layer (MS Side)
Speech in GSM is digitally coded at a rate of 13 kbps

184 bits
260 bits every 20 ms
( 20 ms)

Convolutional Encoder

456 bits every 20 ms

8 57 bits block

GMSK

14
GSM Speech Transmission

15
GSM Normal Burst Formatting

16
GSM Frame Hierarchy

17
Physical Vs. Logical Channel

18
Logical Channels in GSM
 Two major classes of logical channels
 Traffic Channels (TCHs)

 Control Channels (CCHs)

19
Traffic Channels in GSM
 Two types of TCHs
 Full-rate traffic channel (TCH/F)

 Half-rate traffic channel (TCH/H)

20
 Control Channels in GSM
 Three classes of control channels
 Broadcast Channels (BCH)

 Common Control Channels (CCCH)

 Dedicated Control Channels (DCCH)

21
 Layer II:
Data Link Layer (DLL)
Error-free transmission between adjacent entities

22
 GSM – Layer II
 Connection-based Network
 Traffic
 Signaling and Control
 Signaling and control data are conveyed through Layer II and
Layer III messages in GSM
 Purpose of Layer II is to check the flow of packets for Layer III
 DLL checks the address and sequence # for Layer III
 Also manages Acks for transmission of the packets
 Allows two SAPs for signaling and SMS
 SMS traffic is carried through a fake signaling packet that carries
user information over signaling channels
 DLL allows SMS data to be multiplexed into signaling streams

23
 GSM – Layer II
 Signaling packet delivered to the physical layer
is 184 bits which conforms with the length of the
DLL packets in the LAPD protocol used in ISDN
network
 The LAPD protocol is used for A and A-bis
interface
 The DLL for the Um interface is LAPDm

24
 LAPDm
 The Link Access Procedure on the Dm channel (LAPDm) is the
protocol for use by the data link layer on the radio interface.
 Functions

– organization of Layer 3 information into frames

– peer-to-peer transmission of signaling data
in defined frame formats
– recognition of frame formats
– establishment, maintenance, and
termination of one or more (parallel) data
links on signaling channels

25
Frame format (LAPD)

26
 Frame format (LAPDm)

Address field: is used to carry the service access point identifier (SAPI),
protocol revision type, nature of the message
SAPI: When using command/control frames, the SAPI identifies the user
for which a command frame is intended, and the user transmitting a
response frame
Control field: is used to carry Sequence number and to specify the types of
the frame (command or response)
Length indicator: Identifies the length of the information field that is used to
distinguish the information carrying filed from fill-in bits
Information Field: Carries the Layer III payload
Fill-in bits: all “1” bits to extend the length to the desired 184 bits

27
Types of Frame of LAPDm
 Three types of frames for
 Supervisory functions
 Unnumbered information transfer and control functions
 Numbered information transfer

28
 Address field format of LAPDm

Link Protocol Discriminator: is used to specify a

particular recommendation of the use of LAPDm
C/R: Specifies a command or response frame
Extended Address : is used to extend the address field
to more than one octet (the EA bit in the last octet of the
address should be set to 1, otherwise 0)
Spare: reserved for future use 29
LAPD Vs. LAPDm
 LAPDm uses no cyclic redundancy check bits for error
detection
 WHY?

 Error correction and detection mechanism are

provided by a combination of block and convolutional
coding used (in conjunction with bit interleaving) in the
physical layer

30
 Layer II Messages
- Set asynchronous balanced mode
- Disconnect
- Unnumbered acknowledgement
- Receiver ready
- Receiver not ready
- Reject

- These messages are sent in peer-to-peer Layer II communications,

DLL ack.
- These messages do not have Layer III information bits
- Fill-in bits cover the “information bits” field

31
 Layer II Messages (contd…)
- The Paging Channel (PCH) is 176 bits.
- The DLL packet for this signaling channel only have an EIGHT bit
length of the field
- 184 bits encoded into 456 bits
- The 456 bits transmitted over 8 physical NBs

- The Stand-alone Dedicated Control Channel (SDCCH) is 160 bits.

- The DLL packet for this signaling channel has 3 8-bits used for
address, control and length of the information field

- The Slow Associated Control Channel (SACCH) is 144 bits.

- The DLL packet for this signaling channel has 16 fill-in bits and 3 8-bits
used for address, control and length of the information field

32
 Layer III:
Networking or Messaging Layer
The layer 3 protocols are used for the communication of network
resources, mobility, code format and call-related management
messages between various network entities

33
Layer III
 A number of mechanisms needed to establish, maintain and
terminate a mobile communication session
 Layer III implements the protocols needed to support these
mechanisms
 A signaling protocol, the registration process, is composed of a
sequence of communication events or messages
 Layer III defines the details of implementation of messages on
the logical channels encapsulated in DLL frames

34
 Layer III Message Format

Transaction Identifier (TI): to identify a protocol that consists of a

sequence of message, allows multiple protocols to operate in parallel

Protocol Discriminator (PD): Identifies the category of the operation

(management, supplementary services, call control)

Message Type (MT): Identifies the type of messages for a given PD

Information Elements (IE): An optional field for the time that an instruction
carries some information that is specified by an IE identifier (IEI).
35
MM Message Type

36
Layer III Message
 Radio Resource Management (RR),
 Mobility Management (MM) and
 Connection Management (CM).

37
Radio Resource Management (RR)

38
 Mobility Management (MM)
- Assumes a reliable RR connection

- Responsible for
- location management and
- Security

39
 Mobility Management (MM)
- Location management involves the procedures and
signaling for location updating, so that the mobile’s current
location is stored at the HLR, allowing incoming calls to
be properly routed.

- Security involves the authentication of the mobile, to prevent

unauthorized access to the network, as well as the encryption of
all radio link traffic.

- The protocols in the MM layer involve the SIM, MSC, VLR, and
the HLR, as well as the AuC (which is closely tied with
the HLR).

40
Connection Management (CM)
The CM functional layer is divided into three sub
layers.
- Call Control (CC)
- Supplementary Services
- Short Message Service

Call Control (CC) sub layer

- manages call routing, establishment, maintenance,
and release, and is closely related to ISDN call
control.

41
Connection Management (CM)
Supplementary Services sub layer
- manages the implementation of the various
supplementary services (Call Forwarding/waiting/hold ),
and also allows users to access and modify their
service subscription.

Short Message Service sub layer

- handles the routing and delivery of short messages,
both from and to the mobile subscriber.

42
 References
 1. Principles of Wireless Networks: A Unified
Approach, K. Pahlavan, P. Krishnamurthy
 2. www.chu.edu.tw/~lhyen/wc/gsm.pdf
 3. www.hit.bme.hu/~mihaly/mobil.hir/gsmbase.pdf
 4. www-rp.lip6.fr/maitrise/articles/Rahnema.pdf
 5.opetus.stadia.fi/kurki/Courses/DigMobile/2006_Spri
ng_Course_materilas/DM_7_GSM_Protocol_Architect
ure.pdf
 6. Moe Rahnema, Overview of the GSM System and
Protocol Architecture, IEEE Communications
Magazine, April 1993
43
 The END
The slide is available at www.cs.okstate.edu/~shaikot

Thank You

44