3G Tutorial

Brough Turner & Marc Orange

Originally presented at Fall VON 2002

Preface...

The authors would like to acknowledgement material contributions from:

Murtaza Amiji, NMS Communications Samuel S. May, Senior Research Analyst, US Bancorp Piper Jaffray Others as noted on specific slides

We intend ongoing improvements to this tutorial and solicit your comments at:

rbt@nmss.com and/or marc_orange@nmss.com http://www.nmscommunications.com/3Gtutorial

For the latest version go to:

www.nmscommunications.com

Outline

History and evolution of mobile radio

Brief history of cellular wireless telephony Radio technology today: TDMA, CDMA Demographics and market trends today 3G vision, 3G migration paths Based on GSM-MAP or on IS-41 today 3GPP versus 3GPP2 evolution paths 3G utilization of softswitches, VoIP and SIP Potential for convergence

Evolving network architectures

www.nmscommunications.com

Outline (continued)

Evolving services

SMS, EMS, MMS messaging Location Video and IP multimedia Is there a Killer App? Whats really happening? When?

Applications & application frameworks

Business models

Slide 4

www.nmscommunications.com

3G Tutorial

History and Evolution of Mobile Radio Evolving Network Architectures Evolving Services Applications Business Models

www.nmscommunications.com

First Mobile Radio Telephone 1924

Courtesy of Rich Howard

www.nmscommunications.com

World Telecom Statistics

1200 1000 800
(millions)

Crossover has happened May 2002 !

Landline Subs

600 400 200

Mobile Subs

0
19 91 19 92 19 93 19 94 19 95 19 96 19 97 19 98 19 99 20 00 20 01
www.nmscommunications.com

Cellular Mobile Telephony

Frequency modulation

Antenna diversity
Cellular concept

2 3 1 6 4 7 5 3 1 2 4 5 6 1

7
2 3 6 4 7 5 3 1

Bell Labs (1957 & 1960) Typically every 7 cells

Frequency reuse

Handoff as caller moves Modified CO switch

HLR, paging, handoffs Every 3 cells possible

Sectors improve reuse

www.nmscommunications.com

First Generation

Advanced Mobile Phone Service (AMPS)

US trials 1978; deployed in Japan (79) & US (83) 800 MHz band two 20 MHz bands TIA-553 Still widely used in US and many parts of the world
Sweden, Norway, Demark & Finland Launched 1981; now largely retired 450 MHz; later at 900 MHz (NMT900) British design; similar to AMPS; deployed 1985 Some TACS-900 systems still in use in Europe
www.nmscommunications.com

Nordic Mobile Telephony (NMT)

Total Access Communications System (TACS)

Second Generation 2G

Digital systems Leverage technology to increase capacity

Speech compression; digital signal processing

Utilize/extend Intelligent Network concepts Improve fraud prevention Add new services There are a wide diversity of 2G systems

IS-54/ IS-136 North American TDMA; PDC (Japan) iDEN DECT and PHS IS-95 CDMA (cdmaOne) GSM
www.nmscommunications.com

D-AMPS/ TDMA & PDC

Speech coded as digital bit stream

Compression plus error protection bits Aggressive compression limits voice quality
3 calls per radio channel using repeating time slices Development through 1980s; bakeoff 1987

Time division multiple access (TDMA)

Deployed 1993 (PDC 1994)

IS-54 / IS-136 standards in US TIA ATT Wireless & Cingular use IS-136 today

Plan to migrate to GSM and then to W-CDMA NTT DoCoMo has largest PDC network
www.nmscommunications.com

PDC dominant cellular system in Japan today

iDEN

Used by Nextel Motorola proprietary system

Time division multiple access technology Based on GSM architecture Just below 800 MHz cellular band Digital replacement for old PMR services

800 MHz private mobile radio (PMR) spectrum

Special protocol supports fast Push-to-Talk

Nextel has highest APRU in US market due to Direct Connect push-to-talk service

www.nmscommunications.com

DECT and PHS

Also based on time division multiple access Digital European Cordless Telephony

Focus on business use, i.e. wireless PBX Very small cells; In building propagation issues Wide bandwidth (32 kbps channels) High-quality voice and/or ISDN data Similar performance (32 kbps channels) Deployed across Japanese cities (high pop. density) 4 channel base station uses one ISDN BRI line Base stations on top of phone booths Legacy in Japan; new deployments in China today
www.nmscommunications.com

Personal Handiphone Service

North American CDMA (cdmaOne)

Code Division Multiple Access

All users share same frequency band Discussed in detail later as CDMA is basis for 3G Claimed improved capacity & simplified planning

Qualcomm demo in 1989

First deployment in Hong Kong late 1994 Major success in Korea (1M subs by 1996) Used by Verizon and Sprint in US Simplest 3G migration story today

www.nmscommunications.com

cdmaOne IS-95

TIA standard IS-95 (ANSI-95) in 1993 IS-95 deployed in the 800 MHz cellular band

J-STD-08 variant deployed in 1900 MHz US PCS band IS-95A provides data rates up to 14.4 kbps IS-95B provides rates up to 64 kbps (2.5G) Both A and B are compatible with J-STD-08

Evolution fixes bugs and adds data

All variants designed for TIA IS-41 core networks (ANSI 41)

www.nmscommunications.com

GSM

Groupe Special Mobile , later changed to Global System for Mobile

Joint European effort beginning in 1982 Focus on seamless roaming across Europe

Services launched 1991

Time division multiple access (8 users per 200KHz) 900 MHz band; later extended to 1800MHz Added 1900 MHz (US PCS bands) Well defined interfaces; many competitors Network effect (Metcalfes law) took hold in late 1990s Tri-band GSM phone can roam the world today
www.nmscommunications.com

GSM is dominant world standard today

Distribution of GSM Subscribers

GSM is used by 70% of subscribers worldwide

564 M subs / 800 M subs in July 2001

Most GSM deployments in Europe (59%) and Asia (33%)

ATT & Cingular deploying GSM in US today

Number of subscribers in the world (Jul 2001)
CDMA 12% US TDMA 10% GSM 71%
www.nmscommunications.com

PDC 7%

Source: EMC World Cellular / GSM Association

1G Separate Frequencies

FDMA Frequency Division Multiple Access

30 KHz 30 KHz 30 KHz 30 KHz 30 KHz 30 KHz 30 KHz 30 KHz

Frequency

www.nmscommunications.com

2G TDMA

Time Division Multiple Access

One timeslot = 0.577 ms

One TDMA frame = 8 timeslots

200 KHz

Frequency

200 KHz 200 KHz 200 KHz

Time

www.nmscommunications.com

2G & 3G CDMA

Code Division Multiple Access

Spread spectrum modulation

Originally developed for the military Resists jamming and many kinds of interference Coded modulation hidden from those w/o the code

All users share same (large) block of spectrum

One for one frequency reuse Soft handoffs possible

Almost all accepted 3G radio standards are based on CDMA

CDMA2000, W-CDMA and TD-SCDMA

www.nmscommunications.com

Multi-Access Radio Techniques

Courtesy of Petri Possi, UMTS World

www.nmscommunications.com

Courtesy of Suresh Goyal & Rich Howard

www.nmscommunications.com

Courtesy of Suresh Goyal & Rich Howard

www.nmscommunications.com

Courtesy of Suresh Goyal & Rich Howard

www.nmscommunications.com

Courtesy of Suresh Goyal & Rich Howard

www.nmscommunications.com

3G Vision

Universal global roaming Multimedia (voice, data & video) Increased data rates

384 kbps while moving 2 Mbps when stationary at specific locations

Increased capacity (more spectrally efficient) IP architecture Problems

No killer application for wireless data as yet Vendor-driven

www.nmscommunications.com

International Standardization

ITU (International Telecommunication Union)

Radio standards and spectrum ITUs umbrella name for 3G which stands for International Mobile Telecommunications 2000

IMT-2000

National and regional standards bodies are collaborating in 3G partnership projects

ARIB, TIA, TTA, TTC, CWTS. T1, ETSI - refer to reference slides at the end for names and links Focused on evolution of access and core networks
www.nmscommunications.com

3G Partnership Projects (3GPP & 3GPP2)

IMT-2000 Vision Includes LAN, WAN and Satellite Services

Global

Satellite
Suburban Urban In-Building

Macrocell

Microcell

Picocell

Basic Terminal PDA Terminal Audio/Visual Terminal

www.nmscommunications.com

IMT-2000 Radio Standards

IMT-SC* Single Carrier (UWC-136): EDGE

GSM evolution (TDMA); 200 KHz channels; sometimes called 2.75G

Evolution of IS-95 CDMA, i.e. cdmaOne New from 3GPP; UTRAN FDD New from 3GPP; UTRAN TDD New from China; TD-SCDMA

IMT-MC* Multi Carrier CDMA: CDMA2000

IMT-DS* Direct Spread CDMA: W-CDMA

IMT-TC** Time Code CDMA

IMT-FT** FDMA/TDMA (DECT legacy)

** Unpaired spectrum
www.nmscommunications.com

* Paired spectrum;

CDMA2000 Pros and Cons

Evolution from original Qualcomm CDMA

Now known as cdmaOne or IS-95 cdmaOne operators dont need additional spectrum 1xEVD0 promises higher data rates than UMTS, i.e. W-CDMA Arguable (and argued!) cmdaOne interfaces were vendor-specific Hopefully CDMA2000 vendors will comply w/ 3GPP2
www.nmscommunications.com

Better migration story from 2G to 3G

Better spectral efficiency than W-CDMA(?)

CDMA2000 core network less mature

W-CDMA (UMTS) Pros and Cons

Wideband CDMA

Standard for Universal Mobile Telephone Service (UMTS)

Committed standard for Europe and likely migration path for other GSM operators

Leverages GSMs dominant position 5 MHz each way (symmetric)

Requires substantial new spectrum

Legally mandated in Europe and elsewhere Sales of new spectrum completed in Europe

At prices that now seem exorbitant

www.nmscommunications.com

TD-SCDMA

Time division duplex (TDD) Chinese development

Will be deployed in China

Good match for asymmetrical traffic! Single spectral band (1.6 MHz) possible Costs relatively low

Handset smaller and may cost less Power consumption lower TDD has the highest spectrum efficiency Relatively hard to meet specifications
www.nmscommunications.com

Power amplifiers must be very linear

Migration To 3G
2.5G 2G 1G
Analog Voice
GSM GPRS

2.75G
Intermediate Multimedia

3G
Multimedia

Packet Data

Digital Voice
W-CDMA (UMTS)

EDGE
115 Kbps

NMT

9.6 Kbps

384 Kbps

Up to 2 Mbps

TDMA TACS
9.6 Kbps

GSM/ GPRS
(Overlay) 115 Kbps

TD-SCDMA
2 Mbps?

iDEN
9.6 Kbps

iDEN PDC
9.6 Kbps (Overlay)

AMPS CDMA
14.4 Kbps / 64 Kbps

CDMA 1xRTT PHS

(IP-Based)

cdma2000
1X-EV-DV

144 Kbps

Over 2.4 Mbps

PHS

64 Kbps

1984 - 1996+

1992 - 2000+

2001+

2003+

2003 - 2004+
Source: U.S. Bancorp Piper Jaffray

www.nmscommunications.com

Subscribers: GSM vs CDMA

Cost of moving from GSM to cdmaOne overrides the benefit of the CDMA migration path

Source: U.S. Bancorp Piper Jaffray

www.nmscommunications.com

Mobile Wireless Spectrum

Bands (MHz) 450 480 800 900 1500 1700 1800 1900 2100 2500 Frequencies (MHz) 450-467 478-496 824-894 880-960 1750-1870 1710-1880 1850-1990 1885-2025 & 2100-2200 2500-2690 Regions Europe Europe America Europe/APAC Japan PDC Korea Europe/APAC America Europe/APAC ITU Proposal GSM/ EDGE WCDMA CDMA2000 x x x x x x x x x x x x x

x x

x x x

www.nmscommunications.com

Prospects for Global Roaming

Multiple vocoders (AMR, EVRC, SMV,) Six or more spectral bands

800, 900, 1800, 1900, 2100, 2500, ? MHz GSM (TDMA), W-CDMA, CDMA2000, TD-SCMDA

At least four modulation variants

The handset approach

Advanced silicon Software defined radio Improved batteries Two cycles of Moores law? i.e. 3 yrs?
www.nmscommunications.com

3G Tutorial

History and Evolution of Mobile Radio Evolving Network Architectures Evolving Services Applications Business Models

www.nmscommunications.com

Evolving CN Architectures

Two widely deployed architectures today GSM-MAP used by GSM operators

Mobile Application Part defines extra (SS7-based) signaling for mobility, authentication, etc.

ANSI-41 MAP used with AMPS, TDMA & cdmaOne

TIA (ANSI) standard for cellular radio telecommunications inter-system operation

Each evolving to common all IP vision

All IP still being defined many years away GAIT (GSM ANSI Interoperability Team) provides a path for interoperation today

www.nmscommunications.com

Typical 2G Architecture
PSDN
BSC BTS BSC HLR SMS-SC MSC/VLR BSC

PLMN
MSC/VLR
BSC

BTS Base Transceiver Station BSC Base Station Controller

GMSC

Tandem
CO

PSTN

Tandem
CO

CO

MSC Mobile Switching Center VLR Visitor Location Register HLR Home Location Register

www.nmscommunications.com

Network Planes

Like PSTN, 2G mobile networks have one plane for voice circuits and another plane for signaling Some elements reside only in the signaling plane

HLR, VLR, SMS Center,

HLR MSC MSC

SMS-SC VLR MSC

Signaling Plane (SS7) Transport Plane (Voice)

www.nmscommunications.com

Signaling in Core Network

Based on SS7

ISUP and specific Application Parts Mobility, call-handling, O&M Authentication, supplementary services SMS, HLR: home location register has permanent data VLR: visitor location register keeps local copy for roamers

GSM MAP and ANSI-41 services

Location registers for mobility management

www.nmscommunications.com

PSTN-to-Mobile Call
PLMN
(Visitor)

PLMN
(Home)

PSTN

Signaling over SS7

MAP/ IS41 (over TCAP) ISUP

(SCP) HLR Where is the subscriber?

SCP

(STP) 4 Provide Roaming 3 5 Routing Info VMSC 6 IAM GMSC (SSP) (STP) 1 IAM (SSP) 514 581 ... 2

MS

BSS VLR

(SSP)

www.nmscommunications.com

GSM 2G Architecture
NSS BSS Abis E A B MS BTS BSC MSC VLR C D H GMSC PSTN

PSTN

SS7

HLR

AuC

BSS Base Station System BTS Base Transceiver Station BSC Base Station Controller MS Mobile Station

NSS Network Sub-System MSC Mobile-service Switching Controller VLR Visitor Location Register HLR Home Location Register AuC Authentication Server GMSC Gateway MSC GSM Global System for Mobile communication

www.nmscommunications.com

Enhancing GSM

New technology since mid-90s Global standard most widely deployed

significant payback for enhancements Overcome fading DFCA: dynamic frequency and channel assignment Allocate radio resources to minimize interference Also used to determine mobiles location

Frequency hopping

Synchronization between cells

TFO Tandem Free Operation

www.nmscommunications.com

TFO Concepts

Improve voice quality by disabling unneeded transcoders during mobile-to-mobile calls Operate with existing networks (BSCs, MSCs)

New TRAU negotiates TFO in-band after call setup TFO frames use LSBits of 64 Kbps circuit to carry compressed speech frames and TFO signaling MSBits still carry normal G.711 speech samples Same speech codec in each handset Digital transparency in core network (EC off!) TFO disabled upon cell handover, call transfer, inband DTMF, announcements or conferencing

Limitations

www.nmscommunications.com

TFO Tandem Free Operation

C D

No TFO : 2 unneeded transcoders in path

D C

GSM Coding

G.711 / 64 kb

C D

GSM Coding

D C

Abis MS BTS BSC

Ater TRAU

PSTN*
MSC MSC

TRAU BSC BTS MS

C D

With TFO (established) : no in-path transcoder

T F O

GSM Coding

[GSM Coding + TFO Sig] (2bits) + G.711 (6bits**) / 64 Kb

T F O

GSM Coding

D C

Abis MS BTS BSC

Ater TRAU

PSTN*
MSC MSC

TRAU BSC BTS MS

(*) or TDM-based core network (**) or 7 bits if Half-Rate coder is used www.nmscommunications.com

New Vocoders: AMR & SMV

AMR: Adaptive multi-rate

Defined for UMTS (W-CDMA) Being retrofitted for GSM Defined by 3GPP2 for CDMA2000 AMR 8 rates: 12.2, 10.2, 7.95, 7.4, 6.7, 5.9, 5.15 & 4.75bps, plus silence frames (near 0 bps) SMV 4 rates: 8.5, 4, 2 & 0.8kbps Dynamically adjust to radio interference conditions
www.nmscommunications.com

SMV: Selectable mode vocoder

Many available coding rates

Lower bit rates allow more error correction

Enhancing GSM

AMR speech coder

Trade off speech and error correction bits Fewer dropped calls Less interference (approach 0 bps during silences) More calls per cell 3x in overlay (cell edges); 1x reuse in underlay Aggregate channels to surpass 9.6 kbps limit (50k)

DTX discontinuous transmission

Overlays, with partitioned spectral reuse

HSCSD high speed circuit-switched data

GPRS general packet radio service

www.nmscommunications.com

GPRS 2.5G for GSM

General packet radio service

First introduction of packet technology Support higher data rates (115 kbps) Subject to channel availability

Aggregate radio channels

Share aggregate channels among multiple users All new IP-based data infrastructure No changes to voice network

www.nmscommunications.com

Mobile Switching Center

2.5G / 3G Adds IP Data

3G Network Layout

No Changes for Voice Calls

Out to another MSC or Fixed Network (PSTN/ISDN)

Internet (TCP/IP) IP Gateway

Mobile Switching Center

Network Management (HLR)

Out to another MSC or Fixed Network (PSTN/ISDN)

Mobile Switching Center

Network Management (HLR)

IP Gateway Internet (TCP/IP) - Base Station - Radio Network Controller

www.nmscommunications.com

2.5G Architectural Detail

2G MS (voice only) BSS Abis E A B MS BTS BSC MSC Gs VLR C D H GMSC PSTN NSS

PSTN

SS7

Gb
2G+ MS (voice & data) Gr HLR AuC Gc Gi

Gn

PSDN

SGSN

IP

GGSN

BSS Base Station System BTS Base Transceiver Station BSC Base Station Controller

NSS Network Sub-System MSC Mobile-service Switching Controller VLR Visitor Location Register HLR Home Location Register AuC Authentication Server GMSC Gateway MSC

SGSN Serving GPRS Support Node GGSN Gateway GPRS Support Node GPRS General Packet Radio Service

www.nmscommunications.com

GSM Evolution for Data Access

2 Mbps UMTS

384 kbps 115 kbps EDGE

GPRS
9.6 kbps GSM

1997

2000

2003

2003+
3G

GSM evolution

www.nmscommunications.com

EDGE

Enhanced Data rates for Global Evolution Increased data rates with GSM compatibility

Still 200 KHz bands; still TDMA 8-PSK modulation: 3 bits/symbol give 3X data rate Shorter range (more sensitive to noise/interference)

GAIT GSM/ANSI-136 interoperability team

Allows IS-136 TDMA operators to migrate to EDGE New GSM/ EDGE radios but evolved ANSI-41 core network

www.nmscommunications.com

3G Partnership Project (3GPP)

3GPP defining migration from GSM to UMTS (W-CDMA)

Core network evolves from GSM-only to support GSM, GPRS and new W-CDMA facilities

3GPP Release 99

Adds 3G radios
Adds softswitch/ voice gateways and packet core

3GPP Release 4

3GPP Release 5

First IP Multimedia Services (IMS) w/ SIP & QoS

All IP network; contents of r6 still being defined
www.nmscommunications.com

3GPP Release 6

3G rel99 Architecture (UMTS)

3G Radios
2G MS (voice only) BSS Abis E A B BSC BTS 2G+ MS (voice & data) RNS ATM Iub IuPS RNC Node B 3G UE (voice & data)
BSS Base Station System BTS Base Transceiver Station CN Core Network MSC Mobile-service Switching Controller SGSN Serving GPRS Support Node GGSN Gateway GPRS Support Node

CN

PSTN

PSTN

Gb

MSC Gs VLR

C D H

GMSC

SS7
Gr HLR
Gn

IuCS AuC Gc Gi

PSDN

SGSN

IP

GGSN

BSC Base Station Controller

RNS Radio Network System RNC Radio Network Controller

VLR Visitor Location Register

HLR Home Location Register AuC Authentication Server GMSC Gateway MSC UMTS Universal Mobile Telecommunication System

www.nmscommunications.com

3G rel4 Architecture (UMTS)

Soft Switching
2G MS (voice only) BSS Abis A Mc BSC BTS 2G+ MS (voice & data) RNS ATM Iub IuPS RNC Node B 3G UE (voice & data)
BSS Base Station System BTS Base Transceiver Station BSC Base Station Controller RNS Radio Network System RNC Radio Network Controller CN Core Network MSC Mobile-service Switching Controller VLR Visitor Location Register HLR Home Location Register AuC Authentication Server GMSC Gateway MSC SGSN Serving GPRS Support Node GGSN Gateway GPRS Support Node

CN Nb CS-MGW Nc Mc B C VLR D H IuCS Gr HLR Gn SGSN GGSN AuC GMSC server PSTN CS-MGW

PSTN

Gb

MSC Server Gs

SS7 IP/ATM
Gc Gi

PSDN

www.nmscommunications.com

Transcoder Free Operation (TrFO)

Improve voice quality by avoiding unneeded transcoders

like TFO but using packet-based core network Select same codec at both ends during call setup Supports sudden channel rearrangement (handovers, etc.) via signaling procedures When TrFO impossible, TFO can be attempted e.g. transit between packet-based and circuitbased core networks

Out-of-band negociation

www.nmscommunications.com

TrFO + TFO Example

2G handset to 3G handset: by combining TrFO and TFO, in-path transcoders can be avoided

2G PLMN
MSC CS-MGW CS-MGW

TRAU

Radio Access Network

2G MS

3G UE

Radio Access Network

MSC Server

3G Packet Core Network

GMSC Server

C D

GSM Coding (TrFO)

T F O

[GSM Coding + TFO Sig] (lsb) + G.711 (msb) / 64 Kb

T F O

GSM Coding

D C

www.nmscommunications.com

3G rel5 Architecture (UMTS)

IP Multimedia
2G MS (voice only) CN

BSS
Abis A/IuCS Mc BSC Gb/IuPS MSC Server Gs IuCS RNS Iub ATM Gr CS-MGW

Nb Nc Mc B C GMSC server

CS-MGW

PSTN

PSTN

BTS
2G+ MS (voice & data)

VLR

D H HSS Gn

SS7 IP/ATM
Gc Gi GGSN IM-MGW IM Gs PSTN

AuC

IuPS
RNC

IP Network

SGSN

Node B 3G UE (voice & data)

IM IP Multimedia sub-system
MRF Media Resource Function CSCF Call State Control Function MGCF Media Gateway Control Function (Mc=H248,Mg=SIP) IM-MGW IP Multimedia-MGW

IP
Mg MRF Mc MGCF CSCF

www.nmscommunications.com

3GPP Rel.6 Objectives

IP Multimedia Services, phase 2

IMS messaging and group management

Wireless LAN interworking Speech enabled services

Distributed speech recognition (DSR)

Number portability Other enhancements Scope and definition in progress

www.nmscommunications.com

3GPP2 Defines IS-41 Evolution

3rd Generation Partnership Project Two

Separate organization, as 3GPP closely tied to GSM and UMTS Goal of ultimate merger (3GPP + 3GPP2) remains

Evolution of IS-41 to all IP more direct but not any faster

Skips ATM stage

1xRTT IP packet support (like GPRS) 1xEVDV adds softswitch/ voice gateways 3x triples radio data rates

www.nmscommunications.com

2G cdmaOne (IS-95 + IS-41)

IS-95

BTS

A Ref (A1, A2, A5) STM over T1/T3

MS

BTS Base Transceiver Station BSC Base Station Controller MS Mobile Station MSC Mobile Switching Center HLR Home Location Registry SMS-SC Short Message Service Serving Center STM Synchronous Transfer Mode
HLR
STM over T1/T3 or AAL1 over SONET

BSC Proprietary Interface

BTS IS-95

Ater Ref (A3, A7)

PST N

A Ref (A1, A2, A5) BTS STM over T1/T3

MSC

MS

BSC Proprietary Interface A1 Signaling interface for call control and mobility Management between MSC and BSC A2 64 kbps bearer interface for PCM voice A3 Signaling interface for inter-BSC mobile handoff

SMSSC
A5 Full duplex bearer interface byte stream (SMS ?) A7 Bearer interface for inter-BSC mobile handoff

www.nmscommunications.com

CDMA2000 1x Network
HLR
STM over T1/T3 or
IS-2000 A Ref (A1, A2, A5) STM over T1/T3 AAL1 over SONET

PST N

MSC
BTS AQuarter Ref (A10, A11) IP over Ethernet/AAL5

MS

BSC Proprietary Interface

SMSSC

Internet
BTS

BTS Base Transceiver Station RADIUS over UDP/IP BSC Base Station Controller MS Mobile Station MSC Mobile Switching Center HLR Home Location Registry SMS-SC Short Message Service Serving Center AAA STM Synchronous Transfer Mode PDSN Packet Data Serving Node AAA Authentication, Authorization, and Accounting PDSN Home Agent Mobile IP Home Agent A10 Bearer interface between BSC (PCF) and PDSN for packet data A11 Signaling interface between BSC (PCF) and PDSN for packet data

IP Router

IP Firewall

IP Router

Home Agent

Privata Data Network

www.nmscommunications.com

Packet Data Serving Node (PDSN)

Establish, maintain, and terminate PPP sessions with mobile station Support simple and mobile IP services

Act as mobile IP Foreign Agent for visiting mobile station

Handle authentication, authorization, and accounting (AAA) for mobile station

Uses RADIUS protocol

Route packets between mobile stations and external packet data networks Collect usage data and forward to AAA server
www.nmscommunications.com

AAA Server and Home Agent

AAA server

Authentication: PPP and mobile IP connections Authorization: service profile and security key distribution and management Accounting: usage data for billing Track location of mobile IP subscribers when they move from one network to another Receive packets on behalf of the mobile node when node is attached to a foreign network and deliver packets to mobiles current point of attachment

Mobile IP Home Agent

www.nmscommunications.com

1xEVDO IP Data Only

IS-2000

IP BTS - IP Base Transceiver Station IP BSC - IP Base Station Controller AAA - Authentication, Authorization, and Accounting PDSN - Packet Data Serving Node Home Agent - Mobile IP Home Agent

Internet
IP Firewall
IP BSC

IP Router

IP Router

IS-2000 RADIUS over UDP/IP

Privata Data Network

AAA

PDSN

Home Agent

www.nmscommunications.com

1XEVDV IP Data and Voice

SIP SCTP/IP SS7

IS-2000

SIP Proxy

MGCF (Softswitch)

SGW

P ST N

H.248 (Maybe MGCP) SIP Packet switched voice Circuit switched voice

MGW

Internet
IP Firewall
PDSN + Router

IP BSC

IP Router

SIP Proxy Session Initiation Protocol Proxy Server MGCF Media Gateway Control Function SGW Signaling Gateway (SS7)

IS-2000

MGW Media Gateway (Voice)

Nextgen MSC ?

Privata Data Network

Home Agent

AAA

www.nmscommunications.com

Approach for Merging 3GPP & 3GPP2 Core Network Protocols

UMTS MAP ANSI-41

L3 (UMTS) L3 (UMTS) L2 (UMTS) L1 (UMTS) HOOKS HOOKS HOOKS

L3 (cdma2000) EXTENSIONS EXTENSIONS EXTENSIONS

www.nmscommunications.com

Gateway Location Register

Gateway between differing LR standards Introduced between VLR/SGSN and HLR

Single point for hooks and extensions Controls traffic between visited mobile system and home mobile system Treats GLR as roaming users HLR

Visited networks VLR/SGSN

Home networks HLR

Treats GLR as VLR/SGSN at visited network

Interacts with all VLRs in visited network
www.nmscommunications.com

GLR physically located in visited network

Gateway Location Register Example

Mobile Station roaming in a PLMN with a different signaling protocol

GSM MAP
ANSI-41

HLR

Home PLMN

Radio Access Network

Visiting MS MSC/SGSN VLR

GLR

Visited PLMN

www.nmscommunications.com

3GPP / 3GPP2 Harmonization

Joint meetings address interoperability and roaming

Handsets, radio network, core network Near term fix Leverage common specifications (esp. IETF RFCs) Align terms, interfaces and functional entities Developing Harmonization Reference Model (HRM)

Hooks and Extensions help to converge

Target all-IP core harmonization

3GPPs IP Mutilmedia Services and 3GPP2s Multi-Media Domain almost aligned

www.nmscommunications.com

3G Tutorial

History and Evolution of Mobile Radio Evolving Network Architectures Evolving Services Applications Business Models

www.nmscommunications.com

Up and Coming Mobile Services

SMS, EMS, MMS Location-based services 3G-324M Video VoIP w/o QoS; Push-to-Talk IP Multimedia Services (w/ QoS) Converged All IP networks the Vision

www.nmscommunications.com

Short Message Service (SMS)

Point-to-point, short, text message service Messages over signaling channel (MAP or IS-41) SMSC stores-and-forwards SMSs; delivery reports SME is any data terminal or Mobile Station

SMS-GMSC E A B SC C VLR SMS-IWMSC

PSDN

MS SME

BTS

BSC

MSC

PC
SMEs

SMS GMSC Gateway MSC SMS IWMSC InterWorking MSC SC Service Center SME Short Messaging Entity

HLR

www.nmscommunications.com

SMS Principles

Basic services

SM MT (Mobile Terminated) SM MO (Mobile Originated) (3GPP2) SM MO can be cancelled (3GPP2) User can acknowledge

SM Service Center (3GPP) aka Message Center (3GPP2)

Relays and store-and-forwards SMSs Can be compressed (MS-to-MS) And/or segmented in several SMs
www.nmscommunications.com

Payload of up to 140 bytes, but

SMS Transport
MS

Delivery (MT) Report

Submission (MO) Report

SC

Delivery / Submission report

Optional in 3GPP2 SC informs HLR/VLR that a message could not be delivered to MS HLR informs SC that the MS is again ready to receive Usually SS7; SMSC may have IP option

Messages-Waiting

Alert-SC

All messages over signaling channels

www.nmscommunications.com

EMS Principles

Enhanced Message Service Leverages SMS infrastructure Formatting attributes in payload allow:

Text formatting (alignment, font size, style, colour) Pictures (e.g. 255x255 color) or vector-based graphics Animations Sounds

Interoperable with 2G SMS mobiles

2G SMS spec had room for payload formatting 2G MS ignore special formats

www.nmscommunications.com

MMS Principles (1)

Non-real-time, multi-media message service

Text; Speech (AMR coding) Audio (MP3, synthetic MIDI) Image, graphics (JPEG, GIF, PNG) Video (MPEG4, H.263) Will evolve with multimedia technologies
WAP, HTTP, SMTP, etc.

Uses IP data path & IP protocols (not SS7)

Adapts to terminal capabilities

Media format conversions (JPEG to GIF) Media type conversions (fax to image) SMS (2G) terminal inter-working
www.nmscommunications.com

MMS Principles (2)

MMs can be forwarded (w/o downloading), and may have a validity period One or multiple addressees Addressing by phone number (E.164) or email address (RFC 822) Extended reporting

submission, storage, delivery, reading, deletion

Supports an MMBox, i.e. a mail box Optional support of media streaming (RTP/RTSP)
www.nmscommunications.com

MMS Architecture
SMTP, POP/IMAP SN SN
MMS Relay / Server

MAP
MMS User Agent

SMTP
MM4

MMS User Databases

External legacy servers

SN

(E-mail, Fax, UMS, SMSC)

MM3 MM6 MM5*

PLMN
UE

SN SN
HLR
MMS Relay / Server MM1 WAP Gw (or ProxyRelay Server)

PDN
MM7

SOAP/HTTP WSP-HTTP

SN
Value-Added Services Application

(*) Optional

www.nmscommunications.com

Location

Driven by e911 requirements in US

FCC mandated; not yet functioning as desired Most operators are operating under waivers

Potential revenue from location-based services Several technical approaches

In network technologies (measurements at cell sites) Handset technologies Network-assisted handset approaches Location computation and mobile location servers

Plus additional core network infrastructure

Significant privacy issues

www.nmscommunications.com

Location Technology

Cell identity: crude but available today Based on timing

TA: Timing Advance (distance from GSM BTS) TOA: Time of Arrival TDOA: Time Difference of Arrival EOTD: Enhanced Observed Time Difference AOA: Angle of Arrival GPS: Global Positioning System A-GPS: Assisted GPS
www.nmscommunications.com

Based on timing and triangulation

Based on satellite navigation systems

Location-Based Services

Emergency services

E911 - Enhanced 911 friend finder, directions coupons or offers from nearby stores Traffic & coverage measurements law enforcement locates suspect

Value-added personal services

Commercial services

Network internal

Lawful intercept extensions

www.nmscommunications.com

Location Information

Location (in 3D), speed and direction

with timestamp

Accuracy of measurement Response time

a QoS measure authorized clients secure info exchange privacy control by user and/or operator

Security & Privacy

www.nmscommunications.com

US E911 Phase II Architecture

PDE

ESRK & voice BSC Access tandem

ESRK & voice

Public Service Answering Point

PDE

MSC

ESRK Callback #, Long., Lat.

ESRK
SN PDE
PDE

Callback #, SN Long., Lat. SN MPC ALI DB

PDE Position Determining Entity MPC Mobile Positioning Center ESRK Emergency Service Routing Key ALI DB Automatic Location Identification Data Base
www.nmscommunications.com

3GPP Location Infrastructure

UE (User Entity)

May assist in position calculation distributed among cells Standalone equipment (2G) or integrated into BSC (2G) or RNC (3G)

LMU (Location Measurement Unit)

SMLC (Serving Mobile Location Center)

Leverages normal infrastructure for transport and resource management

www.nmscommunications.com

LCS Architecture (3GPP)

LCS signaling (LLP) LCS signaling (RRLP) over RR-RRC/BSSAP LCS signaling over MAP
LMU (Type A) SMLC LMU (Type B) Abis Lb Abis BTS BSC Ls Lr Lg A Gb

over RR/BSSAP

LCS signaling in BSSAP-LE SN

GMLC

MSC
Gs Iu

VLR HLR Lg

Lh

Le

SN

CN

GMLC (LCS Server)

LCS Client

UE

Iub SMLC RNC LMU Node B (LMU type B)

SGSN

LMU Location Measurement Unit

SMLC Serving Mobile Location Center

LCS signaling over RANAP

GMLC Gateway Mobile Location Center

www.nmscommunications.com

Location Request

MLP Mobile Location Protocol

From Location Interop Forum Based on HTTP/SSL/XML Allows Internet clients to request location services

GMLC is the Location Server Interrogates HLR to find visited MSC/SGSN

Roaming user can be located UE can be idle, but not off !

Immediate or deferred result

www.nmscommunications.com

3G-324M Video Services

Initial mobile video service uses 3G data bandwidth w/o IP multimedia infrastructure

Deployed by DoCoMo in Japan today 64 kbps H.324 video structure MPEG 4 video coding AMR audio coding

Leverage high speed circuit-switch data path

Supports video clips, video streaming and live video conversations

MS to MS MS to Internet or ISDN with gateways

www.nmscommunications.com

Common Technology Platform for 3G-324M Services

Node B

RNC

Iu-cs

MSC

UTRAN
3G-324M Mobile 3G-324M

Support for H.323 calls & streaming media

UMTS Core Network

Multi-Media GW

IP Network
H.323

H.248 or RAS

RTP

H.323 terminal Streaming/Mail media server

Soft Switch or Gate Keeper

www.nmscommunications.com

Gateway: 3G-324M to MPEG4 over RTP

64 kbps circuit-switch data over PSTN/ 2.5G/ 3G network to 3G-324M video handset Parallel RTP streams over IP network to video server

Gateway application / OA&M

PSTN I/F

Audio/ video/ control multiplex H.223

Control stacks ISDN call setup | H.323 or SIP H.245 negotiation | over TCP Video repacking of H.263 frames Audio vocoder AMR G.711

Packet stream jitter buffering

RTP RTSP UDP/IP stacks

IP I/F

Slide 91

www.nmscommunications.com

Video Messaging System for 3G-324M

64 kbps circuit-switch data over PSTN/ 2.5G/ 3G network to 3G-324M video handset

Video mail application script

MP4 files for messages and prompts

PSTN I/F

Audio/ video/ control multiplex H.223

Control stacks ISDN call setup H.245 negotiation Audio/video sync and stream control Video buffering of H.263 frames Audio buffering of AMR frames

Slide 92

www.nmscommunications.com

Push-toTalk

VoIP before QoS is Available

Nextels Direct Connect service credited with getting them 20-25% extra ARPU

Based on totally proprietary iDEN Other carriers extremely jealous Short delays OK Always on IP isnt always on; radio connection suspended if unused; 2-3 seconds to re-establish

Push-to-talk is half duplex

Issues remain

Sprint has announced they will be offering a push-to-talk service on their 1xRTT network
www.nmscommunications.com

All IP Services

IP Multimedia Subsystem (IMS) 3GPP Multi-Media Domain (MMD) 3GPP2 Voice and video over IP with quality of service guarantees

Obsoletes circuit-switched voice equipment

Target for converging the two disparate core network architectures

www.nmscommunications.com

IMS / MMD Services

Presence Location Instant Messaging (voice+video) Conferencing Media Streaming / Annoucements Multi-player gaming with voice channel

www.nmscommunications.com

3G QoS

Substantial new requirements on the radio access network Traffic classes

Conversational, streaming, interactive, background Traffic handling priority Allocation/retention priority Error rates (bits and/ or SDUs) Transfer delay Data rates (maximum and guaranteed) Deliver in order (Y/N)
www.nmscommunications.com

Ability to specify

IMS Concepts (1)

Core network based on Internet concepts

Independent of circuit-switched networks Packet-switched transport for signaling and bearer traffic UTRAN 3G (W-CDMA) radio network GERAN GSM evolved radio network

Utilize existing radio infrastructure

Utilize evolving handsets

www.nmscommunications.com

IMS Architecture
Media Server

Application Server

Internet
Gi Mb ISC Gi/Mb Mb

SIP phone

PS
UE
SGSN
Gm

HSS

IM-MGW

GGSN
Go Cx

MRF
Mp Mb

Mb
TDM ISUP

IMS
Mw Mg

PSTN

Mn MGCF CPE

P-CSCF Signaling

CSCF

CSCF Call Session Control Function IM-MGW IM-Media Gateway MGCF Media Gateway Control Function MRF Media Resource Function

SIP

www.nmscommunications.com

IMS Concepts (2)

In Rel.5, services controlled in home network (by S-CSCF)

But executed anywhere (home, visited or external network) and delivered anywhere
Service execution Service control

S-CSCF
ISC Gm ISC

ISC

Application Server

Internet

Media Server

PS UE P-CSCF
Mw

Home IMS Application Servers Visited IMS SIP phone

Gm

PS UE P-CSCF

www.nmscommunications.com

MMD Architecture
Databases AAA

3GPP2 MultiMedia Domain

Internet
Mobile IP Home Agent MS Access Gateway Border Router Core QoS Manager MGW MRF MRFC MGCF AAA Authentication, Authorization & Accounting MGW Media Gateway MGCF Media Gateway Control Function MRFC Media Resource Function Controller MRFP Media Resource Function Processor Session Control Manager CPE IM-MGW + MGCF P-SCM = P-CSCF I-SCM = I-CSCF 3GPP / 3GPP2 mapping S-SCM = S-CSCF L-SCM = Border Gateway Control Functions MRFP
TDM ISUP

SIP phone

Packet Core

Integrated in P-CSCF

MMD
Signaling

PSTN

www.nmscommunications.com

3G Tutorial

History and Evolution of Mobile Radio Evolving Network Architectures Evolving Services Applications Business Models

www.nmscommunications.com

Killer Applications

Community and Identity most important

Postal mail, telephony, email, instant messaging, SMS, chat groups community Designer clothing, ring tones identity The web, TV, movies Movies $63B (worldwide) (1997) Phone service $256B (US only) See work by Andrew Odlyzko; here: http://www.dtc.umn.edu/~odlyzko/doc/recent.html

Information and Entertainment also

Content important, but content is not king!

www.nmscommunications.com

2.5G & 3G Application Issues

No new killer apps

Many potential niche applications All IP mobile networks years away Separate platforms for voice mail, pre-paid, Deploying innovative services difficult

Voice and data networks disparate

Existing infrastructure silo based

Billing models lag

Poor match for application-based services

www.nmscommunications.com

Multimodal Services and Multi-Application Platforms

Combined voice and data applications

Today, without all IP infrastructure Text messaging plus speech recognition-enabled voice services Evolve from as new services become available Integrate TDM voice and IP data Support multiple applications Flexible billing and provisioning

Multi-application platform

www.nmscommunications.com

Sample Multimodal Applications

Travel information

Make request via voice Receive response in text

Make request via voice Receive initial response in text Get updates while traveling via voice or SMS or rich graphics

Directions

One-to-many messaging

Record message via voice or text Deliver message via voice, SMS, WAP, or email

www.nmscommunications.com

More Multimodal Examples

Purchasing famous persons voice for your personal answering message

Text or voice menus Voice to hear message Voice or text to select (and authorize payment) While listening to a voice message from a customer, obtain a text display of recent customer activity

Unified communications

Emergency response team

SMS and voice alert Voice conference, and text updates, while traveling to site of emergency

www.nmscommunications.com

Early Deployments

Cricket matches (Hutchinson India)

SMS alert at start of coverage Live voice coverage or text updates SMS broadcast with phone # & URL Choice of text display or voice (text-to-speech) Adding voice menus to existing text-based service Voice flattens menus, eases access

Information delivery (SFR France)

Yellow pages (Platinet Israel)

www.nmscommunications.com

Multimodal Applications in the Evolving Wireless Network

2.5G Wireless Network
PSTN TDM Interface (voice) MSC BSC

NMS HearSay Solution

Profile Mgmt Application/ Document Server Speech Server Data Base

SS7 SMSC MMSC IP Interface (data) Internet / Core Network Location

SGSN

CGSN

OAM&P

Media Server Message Gateway Presence and Location

SIP

Instant Messaging / Presence

3G MSC Server

Voice or Data Wireless Control

Packet Interface (voice/video)

H.248

Core (Packet) Network

3G MSC Gateway

RNC

3G Wireless Network
www.nmscommunications.com

3G Tutorial

History and Evolution of Mobile Radio Evolving Network Architectures Evolving Services Applications Business Models

www.nmscommunications.com

Upgrade Cost, By Technology

2G
2.5G / 2.75G
Software/Hardware Cost GSM GPRS Software-based Incremental W-CDMA Hardware-based Substantial CDMA CDMA 1x Hardware-based Substantial cdma2000 Software-based Incremental TDMA GSM/GPRS/EDGE Hardware and software Middle of the road W-CDMA Hardware-based Middle of the road

3G
Software/Hardware Cost

CDMA upgrade to 2.75G is expensive; to 3G is cheap GSM upgrade to 2.5G is cheap; to 3G is expensive TDMA upgrade to 2.5G/3G is complex Takeaway: AT&T and Cingular have a difficult road to 3G

www.nmscommunications.com

2.5G & 3G Uptake

www.nmscommunications.com

3G Spectrum Expensive

www.nmscommunications.com

GPRS (2.5G) Less Risky

Only $15k~$20k per base station Allows operators to experiment with data plans

But falls short because: Typically 30~50 kbps GPRS decreases voice capacity
www.nmscommunications.com

EDGE Cheaper and Gives Near-3G Performance

Modem GSM/TDMA Analog Modem GPRS ISDN CDMA 1x EDGE DSL W-CDMA Cable

Technology 2G Wireless Fixed Line Dial-up 2.5G Wireless Fixed Line Digital 2.75G Wireless 2.75G Wireless Fixed Line DSL 3G Wireless Fixed Line Cable

Throughput <9.6 Kbps 9.6 Kbps 30-40 Kbps 128 Kbps 144 Kbps 150 - 200 Kbps 0.7 - 1.5 Mbps 1.0 Mbps 1.0 - 2.0 Mbps

1 MB File Download Speed ~20 min 16 min 4.5 min 1.1 min 50 sec 36 to 47 sec 1 to 3 sec 1.5 sec 0.8 to 1.5 sec

EDGE is 2.75G, with significantly higher data rates than GPRS Deploying EDGE significantly cheaper than deploying W-CDMA Takeaway: Look for EDGE to gain traction in 2002/2003+
www.nmscommunications.com

Long Life for 2.5G & 2.75G

We believe the shelf life of 2.5G and 2.75G will be significantly longer than most pundits have predicted. Operators need to gain valuable experience in how to market packet data services before pushing forward with the construction of new 3G networks.

Sam May, US Bancorp Piper Jaffray

Operators need to learn how to make money with data Likely to stay many years with GPRS/EDGE/CDMA 1x Bottom line: wide-scale 3G will be pushed out

www.nmscommunications.com

Critical For 3G Continued Growth In China

Likely 3G licensing outcomes: China Unicom cdma2000 China Mobile W-CDMA China Telecom W-CDMA/ TD-SCDMA? China Netcom W-CDMA/ TD-SCDMA?

Risk:

CDMA IS-95 (2G) has been slow to launch in China

Why would the launch of 3G be any different?

PHS (2G) with China Telecom/Netcom is gaining momentum

www.nmscommunications.com

Business Models

Walled Garden or Wide Open?

US and European carriers want to capture the value be more than just transport

Cautious partnering; Slow roll out of services Small screens, slow (9.6 kbps) data rate Free development software No access restrictions DoCoMos bill-on-behalf available for 9% share 55,000 applications, 30M subscribers !
www.nmscommunications.com

DoCoMo I-Mode service primitive

I-Mode business model wide open

I-Mode big success in less than 24 months

DoCoMo Has The Right Model

When will the others wake up?

www.nmscommunications.com

Biggest Threat to Todays 3G Wireless LANs

Faster than 3G

11 or 56 Mbps vs. <2 Mbps for 3G when stationary

With the added convenience of mobile Same user interface (doesnt rely on small screens) Same programs, files, applications, Websites.

Data experience matches the Internet

Low cost, low barriers to entry Organizations can build own networks

Like the Internet, will grow virally

Opportunity for entrepreneurs! Opportunity for wireless operators?

www.nmscommunications.com

N M S COMMUNICATIONS

brough_turner@nmss.com marc_orange@nmss.com

www.nmss.com

Additional Reference Material

www.nmscommunications.com

Mobile Standard Organizations

Mobile Operators ITU Members

ITU GSM, W-CDMA, UMTS Third Generation Patnership Project (3GPP) IS-95), IS-41, IS2000, IS-835

CWTS (China)

Third Generation Partnership Project II (3GPP2)

ARIB (Japan) TTC (Japan) TTA (Korea) ETSI (Europe) T1 (USA) TIA (USA)

www.nmscommunications.com

Partnership Project and Forums

ITU IMT-2000 http://www.itu.int/imt2000 Mobile Partnership Projects

3GPP: http://www.3gpp.org 3GPP2: http://www.3gpp2.org

Mobile Technical Forums

3G All IP Forum: http://www.3gip.org IPv6 Forum: http://www.ipv6forum.com

Mobile Wireless Internet Forum: http://www.mwif.org UMTS Forum: http://www.umts-forum.org GSM Forum: http://www.gsmworld.org Universal Wireless Communication: http://www.uwcc.org Global Mobile Supplier: http://www.gsacom.com
www.nmscommunications.com

Mobile Marketing Forums

Mobile Standards Organizations

European Technical Standard Institute (Europe):

http://www.etsi.org
http://www.tiaonline.org http://www.t1.org http://www.cwts.org http://www.arib.or.jp/arib/english/ http://www.ttc.or.jp/e/index.html http://www.tta.or.kr/english/e_index.htm
www.nmscommunications.com

Telecommunication Industry Association (USA):

Standard Committee T1 (USA):

China Wireless Telecommunication Standard (China):

The Association of Radio Industries and Businesses (Japan):

The Telecommunication Technology Committee (Japan):

The Telecommunication Technology Association (Korea):

Location-Related Organizations

LIF, Location Interoperability Forum

http://www.locationforum.org/ Responsible for Mobile Location Protocol (MLP) Now part of Open Mobile Alliance (OMA)
http://www.openmobilealliance.org/ Consolidates Open Mobile Architecture, WAP Forum, LIF, SyncML, MMS Interoperability Group, Wireless Village http://www.opengis.org/ Focus on standards for spatial and location information http://www.wliaonline.com

OMA, Open Mobile Alliance

Open GIS Consortium

WLIA, Wireless Location Industry Association

www.nmscommunications.com

N M S COMMUNICATIONS

brough_turner@nmss.com marc_orange@nmss.com

www.nmss.com