PROJECT REPORT ON

GSM MOBILE SERVICES

SUBMITTED BY: - Rahul Mishra - 4TH SEMESTER - ECE - G.B.Pant Engg. College. - 08720902809

TABLE OF CONTENTS
GSM ARCHITECTURE GSM SERVICES CALL PROCESSING,SMS AND VMS DIAGRAMATICAL REPRESENTATION CALL AND MOBILITY MANAGEMENT

1. GSM ARCHITECTURE
INTRODUCTION
A GSM system is basically designed as a combination of three major subsystems: the network subsystem, the radio subsystem, and the operation support subsystem. In order to ensure that network operators will have several sources of cellular infrastructure equipment, GSM decided to specify not only the air interface, but also the main interfaces that identify different parts. There are three dominant interfaces, namely, an interface between MSC and the base Transceiver Station (BTS), and an Um interface between the BTS and MS.

GSM NETWORK STRUCTURE

Every telephone network needs a well-designed structure in order to route incoming called to the correct exchange and finally to the called subscriber. In a mobile network, this structure is of great importance because of the mobility of all its subscribers [1-4]. In the GSM system, the network is divided into the following partitioned areas. GSM service area; PLMN service area; MSC service area; Location area; Cells.

The GSM service is the total area served by the combination of all member countries where a mobile can be serviced. The next level is the PLMN service area. There can be several within a country, based on its size. The links between a GSM/PLMN network and other PSTN, ISDN, or PLMN network will be on the level of international or national transit exchange. All incoming calls for a GSM/PLMN network will be routed to a gateway MSC. A gateway MSC works as an incoming transit exchange for the GSM/PLMN. In a GSM/PLMN network, all mobile-terminated calls will be routed to a gateway MSC. Call connections between PLMNs, or to fixed networks, must be routed through certain designated MSCs called a gateway MSC. The gateway MSC contains the interworking functions to make these connections. They also route incoming calls to the proper MSC within the network. The next level of division is the MSC/VLR

service area. In one PLMN there can be several MSC/VLR service area. MSC/VLR is a role controller of calls within its jurisdiction. In order to route a call to a mobile subscriber, the path through links to the MSC in the MSC area where the subscriber is currently located. The mobile location can be uniquely identified since the MS is registered in a VLR, which is generally associated with an MSC. The next division level is that of the LAs within a MSC/VLR combination. There are several LAs within one MSc/VLR combination. A LA is a part of the MSC/VLR service area in which a MS may move freely without updating location information to the MSC/VLR exchange that control the LA. Within a LA a paging message is broadcast in order to find the called mobile subscriber. The LA can be identified by the system using the Location Area Identity (LAI). The LA is used by the GSM system to search for a subscriber in a active state. Lastly, a LA is divided into many cells. A cell is an identity served by one BTS. The MS distinguishes between cells using the Base Station Identification code (BSIC) that the cell site broadcast over the air. MOBILE STATION The MS includes radio equipment and the man machine interface (MMI) that a subscribe needs in order to access the services provided by the GSM PLMN. MS can be installed in Vehicles or can be portable or handheld stations. The MS may include provisions for data communication as well as voice. A mobile transmits and receives message to and from the GSM system over the air interface to establish and continue connections through the system . Different type of MSs can provide different type of data interfaces. To provide a common model for describing these different MS configuration, reference configuration for MS, similar to those defined for ISDN land stations, has been defined. Each MS is identified by an IMEI that is permanently stored in the mobile unit. Upon request, the MS sends this number over the signaling channel to the MSC. The IMEI can be used to identify mobile units that are reported stolen or operating incorrectly. Just as the IMEI identities the mobile equipment, other numbers are used to identity the mobile subscriber. Different subscriber identities are used in different phases of call setup. The Mobile Subscriber ISDN Number (MSISDN) is the number that the calling party dials in order to reach the subscriber. It is used by the land network to route calls toward an appropriate MSC. The international mobile subscribe identity (IMSI) is the primary function of the subscriber within the mobile network and is permanently assigned to him. The GSM system can also assign a Temporary Mobile Subscriber Identity (TMSI) to identity a mobile.

This number can be periodically changed by the system and protect the subscriber from being identified by those attempting to monitor the radio channel. Functions of MS The primary functions of MS are to transmit and receive voice and data over the air interface of the GSM system. MS performs the signal processing function of digitizing, encoding, error protecting, encrypting, and modulating the transmitted signals. It also performs the inverse functions on the received signals from the BS. In order to transmit voice and data signals, the mobile must be in synchronization with the system so that the messages are the transmitted and received by the mobile at the correct instant. To achieve this, the MS automatically tunes and synchronizes to the frequency and TDMA timeslot specified by the BSC. This message is received over a dedicated timeslot several times within a multiframe period of 51 frames. We shall discuss the details of this in the next chapter. The exact synchronization will also include adjusting the timing advance to compensate for varying distance of the mobile from the BTS. The MS monitors the power level and signal quality, determined by the BER for known receiver bit sequences (synchronization sequence), from both its current BTS and up to six surrounding BTSs. This data is received on the downlink broadcast control channel. The MS determines and send to the current BTS a list of the six best-received BTS signals. The measurement results from MS on downlink quality and surrounding BTS signal levels are sent to BSC and processed within the BSC. The system then uses this list for best cell handover decisions. MS keeps the GSM network informed of its location during both national and international roaming, even when it is inactive. This enables the System to page in its present LA. The MS includes an equalizer that compensates for multi-path distortion on the received signal. This reduces inter-symbol interface that would otherwise degrade the BER. Finally, the MS can store and display short received alphanumeric messages on the liquid crystal display (LCD) that is used to show call dialing and status information. These messages are limited to 160 characters in length. Power Levels

These are five different categories of mobile telephone units specified by the European GSM system: 20W, 8W, 5W, 2W, and 0.8W. These correspond to 43-dBm, 39-dBm, 37-dBm, 33-dBm, and 29-dBm power levels. The 20-W and 8-W units (peak power) are either for vehiclemounted or portable station use. The MS down to 20mW from the BTS, transmitter to transmission. SIM Card power is adjustable in 2-dB steps from its nominal value (13 dBm). This is done automatically under remote control which monitors the received power and adjusts the MS the minimum power setting necessary for reliable

As described in the first chapter, GSM subscribers are provided with a SIM card with its unique identification at the very beginning of the service. By divorcing the subscriber ID from the equipment ID, the subscriber may never own the GSM mobile equipment set. The subscriber is identified in the system when he inserts the SIM card in the mobile equipment. This provides an enormous amount of flexibility to the subscribers since they can now use any GSMspecified mobile equipment. Thus with a SIM card the idea of Personalize the equipment currently in use and the respective information used by the network (location information) needs to be updated. The smart card SIM is portable between Mobile Equipment (ME) units. The user only needs to take his smart card on a trip. He can then rent a ME unit at the destination, even in another country, and insert his own SIM. Any calls he makes will be charged to his home GSM account. Also, the GSM system will be able to reach him at the ME unit he is currently using.

The SIM is a removable SC, the size of a credit card, and contains an integrated circuit chip with a microprocessor, random access memory (RAM), and read only memory (ROM). It is inserted in the MS unit by the subscriber when he or she wants to use the MS to make or receive a call. As stated, a SIM also comes in a modular from that can be mounted in the subscribers equipment. When a mobile subscriber wants to use the system, he or she mounts their SIM card and provide their Personal Identification Number(PIN), which is compared with a PIN stored within the SIM. If the user enters three incorrect PIN codes, the SIM is disabled. The PIN can also be permanently bypassed by the service provider if requested by the subscriber. Disabling the PIN code simplifies the call setup but reduces the protection of the users account in the event of a stolen SIM.

International Mobile Subscriber Identity. An IMSI is assigned to each authorized GSM user. It consists of a mobile country code (MSC), mobile network code (MNC), and a PLMN unique mobile subscriber identification number (MSIN). The IMSI is not hardware-specific. Instead, it is maintained on a SC by an authorized subscriber and is the only absolute identity that a subscriber has within the GSM system. The IMSI consists of the MCC followed by the NMSI and shall not exceed 15 digits. Temporary Mobile Subscriber Identity A TMSI is a MSC-VLR specific alias that is designed to maintain user confidentiality. It is assigned only after successful subscriber authentication. The correlation of a TMSI to an IMSI only occurs during a mobile subscribers initial transaction with an MSC (for example, location updating). Under certain condition (such as traffic system disruption and malfunctioning of the system), the MSC can direct individual TMSIs to provide the MSC with their IMSI. Mobile Station ISDN Number The MS international number must be dialed after the international prefix in order to obtain a mobile subscriber in another country. The MSISDN numbers is composed of the country code (CC) followed by the National Significant Number (N(S)N), which shall not exceed 15 digits. The Mobile Station Roaming Number (MSRN) The MSRN is allocated on temporary basis when the MS roams into another numbering area. The MSRN number is used by the HLR for rerouting calls to the MS. It is assigned upon demand by the HLR on a per-call basis. The MSRN for PSTN/ISDN routing shall have the same structure as international ISDN numbers in the area in which the MSRN is allocated. The HLR knows in what MSC/VLR service area the subscriber is located. At the reception of the MSRN, HLR sends it to the GMSC, which can now route the call to the MSC/VLR exchange where the called subscriber is currently registered. International Mobile Equipment Identity The IMEI is the unique identity of the equipment used by a subscriber by each PLMN and is used to determine authorized (white), unauthorized (black), and malfunctioning (gray) GSM hardware. In conjunction with the IMSI, it is used to ensure that only authorized usera are granted access to the system. An IMEI is never sent in cipher mode by MS. BASE STATION SYSTEM

The BSS is a set of BS equipment (such as transceivers and controllers) that is in view by the MSC through a single A interface as being the entity responsible for communicating with MSs in a certain area. The radio equipment of a BSS may be composed of one or more cells. A BSS may consist of one or more BS. The interface between BSC and BTS is designed as an A-bis interface. The BSS includes two types of machines: the BTS in contact with the MSs through the radio interface and the BSC, the latter being in contact with the MSC. The function split is basically between transmission equipment, the BTS, and managing equipment at the BSC. A BTS compares radio transmission and reception devices, up to and including the antennas, and also all the signal processing specific to the radio interface. A single transceiver within BTS supports eight basic radio channels of the same TDM frame. A BSC is a network component in the PLMN that function for control of one or more BTS. It is a functional entity that handles common control functions within a BTS. A BTS is a network component that serves one cell and is controlled by a BSC. BTS is typically able to handle three to five radio carries, carrying between 24 and 40 simultaneous communication. Reducing the BTS volume is important to keeping down the cost of the cell sites. An important component of the BSS that is considered in the GSM architecture as a part of the BTS is the Transcoder/Rate Adapter Unit (TRAU). The TRAU is the equipment in which coding and decoding is carried out as well as rate adoption in case of data. Although the specifications consider the TRAU as a subpart of the BTS, it can be sited away from the BTS (at MSC), and even between the BSC and the MSC. The interface between the MSC and the BSS is a standardized SS7 interface (A-interface) that, as stated before, is fully defined in the GSM recommendations. This allows the system operator to purchase switching equipment from one supplier and radio equipment and the controller from another. The interface between the BSC and a remote BTS likewise is a standard the A-bis. In splitting the BSS functions between BTS and BSC, the main principle was that only such functions that had to reside close to the radio transmitters/receivers should be placed in BTS. This will also help reduce the complexity of the BTS. Functions of BTS As stated, the primary responsibility of the BTS is to transmit and receive radio signals from a mobile unit over an air interface. To perform this function completely, the signals are encoded, encrypted, multiplexed, modulated, and then fed to the antenna system at the cell site. Trans-coding to bring 13-kbps speech to a standard data rate of 16 kbps and then combining four of these signals to 64 kbps is essentially a part of BTS, though, it can be done at BSC or at MSC. The voice communication can be either at a full or half rate over

logical speech channel. In order to keep the mobile synchronized, BTS transmits frequency and time synchronization signals over frequency correction channel (FCCH and BCCH logical channels. The received signal from the mobile is decoded, decrypted, and equalized for channel impairments. Random access detection is made by BTS, which then sends the message to BSC. The channel subsequent assignment is made by BSC. Timing advance is determined by BTS. BTS signals the mobile for proper timing adjustment. Uplink radio channel measurement corresponding to the downlink measurements made by MS has to be made by BTS. BTS-BSC Configurations There are several BTS-BSC configurations: single site; single cell; single site; multicell; and multisite, multicell. These configurations are chosen based on the rular or urban application. These configurations make the GSM system economical since the operation has options to adapt the best layout based on the traffic requirement. Thus, in some sense, system optimization is possible by the proper choice of the configuration. These include omni directional rural configuration where the BSC and BTS are on the same site; chain and multidrop loop configuration in which several BTSs are controlled by a single remote BSC with a chain or ring connection topology; rural star configuration in which several BTSs are connected by individual lines to the same BSC; and sectorized urban configuration in which three BTSs share the same site amd are controlled by either a collocated or remote BSC. In rural areas, most BSs are installed to provide maximum coverage rather then maximum capacity. Transcoder Depending on the relative costs of a transmission plant for a particular cellular operator, there may be some benefit, for larger cells and certain network topologies, in having the transcoder either at the BTS, BSC or MSC location. If the trascoder is located at MSC, they are still considered functionally a part of the BSS. This approach allows for the maximum of flexibility and innovation in optimizing the transmission between MSC and BTS. The transcoder is the device that takes 13-Kbps speech or 3.6/6/12-Kbps data multiplexes and four of them to convert into standard 64-Kbps data. First, the 13 Kbps or the data at 3.6/6/12 Kbps are brought up to the level of 16 Kpbs by inserting additional synchronizing data to make up the difference between a 13-Kbps speech or lower rate data, and then four of them are combined in the transcoder to provide 64 Kpbs channel within the BSS. Four traffic channel can then be multiplexed on one 64-Kpbs circuit. Thus, the TRAU output data rate is 64 Kpbs. Then, up to 30 such 64-Kpbs channels are multiplexed onto a 2.048

Mpbs if a CEPT1 channel is provided on the A-bis interface. This channel can carry up to 120-(16x 120) traffic and control signals. Since the data rate to the PSTN is normally at 2 Mbps, which is the result of combining 30-Kbps by 64Kbph channels, or 120- Kbps by 16-Kpbs channels.

BSC The BSC, as discussed, is connected to the MSC on one side and to the BTS on the other. The BSC performs the Radio Resource (RR) management for the cells under its control. It assigns and release frequencies and timeslots for all MSs in its own area. The BSC performs the intercell handover for MSs moving between BTS in its control. It also reallocates frequencies to the BTSs in its area to meet locally heavy demands during peak hours or on special events. The BSC controls the power transmission of both BSSs and MSs in its area. The minimum power level for a mobile unit is broadcast over the BCCH. The BSC provides the time and frequency synchronization reference signals broadcast by its BTSs. The BSC also measures the time delay of received MS signals relative to the BTS clock. If the received MS signal is not centered in its assigned timeslot at the BTS, The BSC can direct the BTS to notify the MS to advance the timing such that proper synchronization takes place. The functions of BSC are as follows. The BSC may also perform traffic concentration to reduce the number of transmission lines from the BSC to its BTSs, as discussed in the last section. SWITCHING SUBSYSTEMS: MOBILE SWITCHING CENTER AND GATEWAY SWITCHING CENTER The network and the switching subsystem together include the main switching functions of GSM as well as the databases needed for subscriber data and mobility management (VLR). The main role of the MSC is to manage the communications between the GSM users and other telecommunication network users. The basic switching function of performed by the MSC, whose main function is to coordinate setting up calls to and from GSM users. The MSC has interface with the BSS on one side (through which MSC VLR is in contact with GSM users) and the external networks on the other (ISDN/PSTN/PSPDN). The main difference between a MSC and an exchange in a fixed network is that the MSC has to take into account the impact of the allocation of RRs and the mobile nature of the subscribers and has to perform, in addition, at least, activities required for the location registration and handover. The MSC is a telephony switch that performs all the switching functions for MSs located in a geographical area as the MSC area. The MSC must also handle different types of numbers and identities related to the same

MS and contained in different registers: IMSI, TMSI,ISDN number, and MSRN. In general identities are used in the interface between the MSC and the MS, while numbers are used in the fixed part of the network, such as, for routing. Functions of MSC As stated, the main function of the MSC is to coordinate the set up of calls between GSM mobile and PSTN users. Specifically, it performs functions such as paging, resource allocation, location registration, and encryption. Specifically, the call-handling function of paging is controlled by MSC. MSC coordinates the set up of call to and from all GSM subscribers operating in its areas. The dynamics allocation of access resources is done in coordination with the BSS. More specifically, the MSC decides when and which types of channels should be assigned to which MS. The channel identity and related radio parameters are the responsibility of the BSS, The MSC provides the control of interworking with different networks. It is transparent for the subscriber authentication procedure. The MSC supervises the connection transfer between different BSSs for MSs, with an active call, moving from one call to another. This is ensured if the two BSSs are connected to the same MSC but also when they are not . In this latter case the procedure is more complex, since more then one MSC in involved. The MSC performs billing on calls for all subscribers based in its areas. When the subscriber is roaming elsewhere, the MSC obtains data for the call billing from the visited MSC. Encryption parameters transfers from VLR to BSS to facilitate ciphering on the radio interface are done by MSC. The exchange of signaling information on the various interface toward the other network elements and the management of the interface themselves are all controlled by the MSC. Finally, the MSC serves as a SMS gateway to forward SMS messages from Short Message Service Centers (SMSC) to the subscribers and from the subscribers to the SMSCs. It thus acts as a message mailbox and delivery system. VLR The VLR is collocated with an MSC. A MS roaming in an MSC area is controlled by the VLR responsible for that area. When a MS appears in a LA, it starts a registration procedure. The MSC for that area notices this registration and transfers to the VLR the identify of the LA where the MS is situated. A VLR may be in charge of one or several MSC LAs. The VLR constitutes the databases that support the MSC in the storage and retrieval of the data of subscribers present in its area. When an MS enters the MSC area borders, it signals its arrival to the MSC that stores its identify in the VLR. The information necessary to manage the MS is contained in the HLR and is transferred to the VLR so that they can be easily retrieved if so required.

Data Stored in VLR The data contained in the VLR and in the HLR are more or less the same. Nevertheless the data are present in the VLR only as long as the MS is registered in the area related to that VLR. Data associated with the movement of mobile are IMSI, MSISDN, MSRN, and TMSI. The terms permanent and temporary, in this case, are meaningful only during that time interval. Some data are mandatory, others are optional.

HOME LOCATION REGISTER

The HLR is a database that permanently stores data related to a given set of subscribers. The HLR is the reference database for subscriber parameters. Various identification numbers and addresses as well as authentication parameters, services subscribed, and special routing information are stored. Current subscriber status including a subscribers temporary roaming number and associated VLR if the mobile is roaming, are maintained. The HLR provides data needed to route calls to all MS-SIMs home based in its MSC area, even when they are roaming out of area or in other GSM networks. The HLR provides the current location data needed to support searching for and paging the MS-SIM for incoming calls, wherever the MS-SIM may be. The HLR is responsible for storage and provision of SIM authentication and encryption parameters needed by the MSC where the MS-SIM is operating. It obtains these parameters from the AUC. The HLR maintains record of which supplementary service each user has subscribed to and provides permission control in granting services. The HLR stores the identification of SMS gateways that have messages for the subscriber under the SMS until they can be transmitted to the subscriber and receipt is knowledge. Some data are mandatory, other data are optional. Both the HLR and the VLR can be implemented in the same equipment in an MSC (collocated). A PLMN may contain one or several HLRs.

AUTHENTICATION CENTER
The AUC stores information that is necessary to protect communication through the air interface against intrusions, to which the mobile is vulnerable. The legitimacy of the subscriber is established through authentication and ciphering, which protects the user information against unwanted disclosure. Authentication information and ciphering keys are stored in a database within the AUC, which protects the user information against unwanted disclosure and access.

In the authentication procedure, the key Ki is never transmitted to the mobile over the air path, only a random number is sent. In order to gain access to the system, the mobile must provide the correct Signed Response (SRES) in answer to a random number (RAND) generated by AUC. Also, Ki and the cipher key Kc are never transmitted across the air interface between the BTS and the MS. Only the random challenge and the calculated response are transmitted. Thus, the value of Ki and Kc are kept secure. The cipher key, on the other hand, is transmitted on the SS7 link between the home HLR/AUC and the visited MSC, which is a point of potential vulnerability. On the other hand, the random number and cipher key is supposed to change with each phone call, so finding them on one call will not benefit using them on the next call. The HLR is also responsible for the authentication of the subscriber each time he makes or receives a call. The AUC, which actually performs this function, is a separate GSM entity that will often be physically included with the HLR. Being separate, it will use separate processing equipment for the AUC database functions. EQUIPMENT IDENTIFY REGISTER EIR is a database that stores the IMEI numbers for all registered ME units. The IMEI uniquely identifies all registered ME. There is generally one EIR per PLMN. It interfaces to the various HLR in the PLMN. The EIR keeps track of all ME units in the PLMN. It maintains various lists of message. The database stores the ME identification and has nothing do with subscriber who is receiving or originating call. There are three classes of ME that are stored in the database, and each group has different characteristics. White List: contains those IMEIs that are known to have been assigned to valid MSs. This is the category of genuine equipment. Black List: contains IMEIs of mobiles that have been reported stolen. Gray List: contains IMEIs of mobiles that have problems (for example, faulty software, wrong make of the equipment). This list contains all MEs with faults not important enough for barring.

INTERWORKING FUNCTION
GSM provided a wide range of data services to its subscribers. The GSM system interface with the various forms of public and private data networks currently available. It is the job of the IWF to provide this interfacing capability.

The IWF, which in essence is a part of MSC, provides the subscriber with access to data rate and protocol conversion facilities so that data can be transmitted between GSM Data Terminal Equipment (DTE) and a land-line DTE. ECHO CANCELER EC is used on the PSTN side of the MSC for all voice circuits. The EC is required at the MSC PSTN interface to reduce the effect of GSM delay when the mobile is connected to the PSTN circuit. The total round-trip delay introduced by the GSM system, which is the result of speech encoding, decoding and signal processing, is of the order of 180 ms. Normally this delay would not be an annoying factor to the mobile, except when communicating to PSTN as it requires a two-wire to four-wire hybrid transformer in the circuit. This hybrid is required at the local switching office because the standard local loop is a two-wire circuit. Due to the presence of this hybrid, some of the energy at its four-wire receive side from the mobile is coupled to the four-wire transmit side and thus retransmitted to the mobile. This causes the echo, which does not effect the land subscriber but is an annoying factor to the mobile. The standard EC cancels about 70 ms of delay. During a normal PSTN (land-to-land call), no echo is apparent because the delay is too short and the land user is unable to distinguish between the echo and the normal telephone side tones However, with the GSM roundtrip delay added and without the EC, the effect would be irritating to the MS subscriber. OPERATION AND MAINTENANCE CENTER The OMC provides alarm-handling functions to report and log alarms generated by the other network entities. The maintenance personnel at the OMC can define that criticality of the alarm. Maintenance cover both technical and administrative actions to maintain and correct the system operation, or to restore normal operations after a breakdown, in the shortest possible time. The fault management functions of the OMC allow network devices to be manually or automatically removed from or restored to service. The status of network devices can be checked, and tests and diagnostics on various devices can be invoked. For example, diagnostics may be initiated remotely by the OMC. A mobile call trace facility can also be invoked. The performance management functions included collecting traffic statistics from the GSM network entities and archiving them in disk files or displaying them for analysis. Because a potential to collect large amounts of data exists, maintenance personal can select which of the detailed statistics to be collected based on personal interests and past experience. As a result of performance analysis, if necessary, an alarm can be set remotely.

The OMC provides system change control for the software revisions and configuration data bases in the network entities or uploaded to the OMC. The OMC also keeps track of the different software versions running on different subsystem of the GSM.

References: [1] The GSM system for mobile communication-Michel Marie- Bernadette Pautet.

Mouly &

[2] GSM system Engineering-Asha Mehrotra (Artech House Publisher). [3] haug, T.,Developing GSM standard, pan-European Cellular Radio Conf., Nice, France, 1991. Digital

[4] Mouly, M., and pautet Marie-Bernadette,Current Evolution of the GSM system, IEEE Personal Communications, October 1995, PP.9-19. [5] Beddoes, E, W., GSM Network Architecture, GSm Budapest, October 1990, Session 2.1. Seminar,

2. GSM Service
Types of services

Bearer services

The ETSI Standards define the telecommunication services in the same way as ISDN (Integrated Services Digital Network) does. Different types of services are distinguished: bearer services, tele-services and supplementary services.

Bearer services are telecommunication services providing the capability of transmission of signals between access points (called user-network interfaces in ISDN). The bearer services describe what the network can offer (e.g. Teleservicesspeech, data and fax). Teleservices are telecommunication services including terminal equipment functions, that provide communication between users according to protocols established by agreement between network operators. The teleservices are user end-to-end services (e.g. emergency call and short Supplementary message service).
services Supplementary Services modify or supplement a basic telecommunication service. Consequently, they cannot be offered to a customer as a stand-alone service. They must be offered together or in association with a basic telecommunication service. The same supplementary service may be applicable to a number of telecommunication services. Most supplementary services are directly inherited from a fixed network, with minor modifications (when needed) to adapt to mobility. Examples of supplementary services are calling line identification and call waiting.

Supplementary Services
Supplem entary services manage ment

Administrative functions can be performed by both the mobile subscriber or network to control Supplementary Services. These functions include:
Provisioning. The service provider makes an service available for a subscriber. s Invoking. The service required is invoked by the subscriber (for example by pressing a specific button) or automatically by the network or terminal as a result of a particular condition (e.g. calling number identification for each incoming call).
s

Applicabil ity of suppleme An operation is effective on those basic services (within the basic service group) that have been provisioned, and for ntary which the supplementary service is applicable. services Supporte d suppleme In interworking situations with CSPDN and PSPDN these ntary services can only be used during call set-up (e.g. call services forwarding services). When a call is established between a mobile station and a Public Data network (PDN), the MS acts as a data network terminal and can consequently only use the services that are supported by the relevant PDN. (PDN supplementary services are outside the scope of GSM).

Line Identification Services:

s

Calling Line Identification Presentation (CLIP) Calling Line Identification Restriction (CLIR) Connected Line Identification Presentation

(COLP) Connected Line Identification Restriction (COLR)

s

Line Identification Services

Calling line identification presentation (CLIP)

The CLIP service allows the called party to receive the line identity of the calling party. The network delivers the calling line identity to the called party at call set-up time, regardless of the terminal capacity to handle the information. The CLIP service may not be applicable if at least one of the two parties is not an ISDN or GSM PLMN subscriber (depends on national network specific rules). The CLIR service enables the calling party to restrict presentation of its line identity to the called party. For internetwork calls, when the CLIR service is invoked, the originating network provides the destination network with a notification that the line identity of the calling party is not allowed to be presented to the called party.
Normally CLIR takes precedence over CLIP. However, depending on national regulations, some networks may define categories of subscribers that have the ability to override the presentation restriction (CLIR) and have the calling line identity presented (e.g. the police). The COLP service allows the calling party to receive the line identity of the connected party. This service is not a dialling check, but the calling subscriber receives the full connected line identity as used in a full ISDN/GSM environment, i.e including all the information necessary to unambiguously identity the connected party. The network delivers the connected line identity to the calling party regardless of the terminal capability to handle the information.

Calling line identification restriction (CLIR)

Connected line identification presentation (COLP)

Connected line identification restriction

(COLR)

The COLR service allows the connected party to prevent presentation of its line identity to the calling party. The network automatically invokes the COLR service for each incoming call at set- up phase. When the COLR service is invoked, the destination network provides the originating network with a notification that the line identity of the connected party is not allowed to be presented to the calling party. This also applies to inter-network calls. Normally COLR takes precedence over COLP. However, depending on national regulations, some networks may define categories of subscribers that have the ability to override the presentation restriction (COLR) and have the connected line identity presented (e.g. the police).

Call Offering Services:

s

Call Forwarding Unconditional (CFU) Call Forwarding on Mobile Subscriber Busy (CFB)

Call Forwarding in Mobile Subscriber Not Reachable (CFNRc)

Call Offering Services

Call forwarding unconditional (CFU) This service permits a called mobile subscriber to have the network send all incoming calls (or just those associated with a specific basic service group), addressed to its directory number, to another directory number. The ability of the served mobile subscriber (i.e. the `forwarding subscriber or the `called subscriber) to originate calls is unaffected. If this service is activated, calls are forwarded no matter what the condition of the termination.

Call forwarding on

This service permits a called mobile subscriber to have the network send all incoming calls (or just those associated

mobile subscriber busy (CFB) Call forwarding on mobile subscriber not reachable

with a specific basic service group), that reach a busy signal, to another directory number. This service permits a called mobile subscriber to have the network send all incoming calls (or just those associated with a specific Basic Service group), addressed to her directory number, but which is not reachable, to another directory number.
The ability of the served mobile subscriber to originate calls is unaffected. Call origination is affected if only the MS is deregistered, if there is radio congestion, or if the MS is being out of radio coverage. If this service is activated, a call is forwarded only if the MS is not reachable.

Call Completion Services

Call waiting (cw) Call holding (HOLD)

Call Completion Services

Call waiting (CW)

The Call Waiting Service permits a mobile subscriber to be notified of an incoming call (as per basic call procedures), while the traffic channel is not available for the incoming call and the mobile subscriber is engaged in an active or held call. Subsequently, the subscriber can either accept, reject, or ignore the incoming call. The time the network will wait for a response of the mobile subscriber to the waiting call can be set to between 0.5 and 2 minutes, at the service providers discretion. The Call Holding Service allows a served mobile subscriber, who is provisioned with this supplementary

Call holding (HOLD)

service, to interrupt communication on an existing active call and then subsequently, if desired, re-establish communication. The traffic channel remains assigned to the mobile subscriber after the communication is interrupted to allow the origination or possible termination of other calls. The served mobile subscriber can only have one call on hold at a time. If the served mobile subscriber has a call on hold and is not connected to an active call, she can either retrieve or disconnect the held call, or set up another call. She can not receive a call, except when using the Call Waiting (CW) service. If the served mobile subscriber is connected to an active call and has another call on hold, the subscriber can alternate between the two calls, or disconnect either the active call, the held call, or both calls. Again no new call can be accepted, except when using the CW service.

Multiparty Supplementary Services:

s

Multi Party Service (MPTY)

Multi Party Supplementary Services

Multi party service (MPTY)

This service provides a mobile subscriber with the ability to have a multi-connection call, i.e. a simultaneous communication with more than one party.
A pre-condition for the MPTY service is that the served mobile subscriber is in control of one active call and one call on hold, both calls having been answered. In this situation the served mobile subscriber can request the network to begin the MPTY service. Once a MPTY call is active, remote parties may be

added, disconnected or separated.

What MPTY can do During a multi-party call, the served mobile subscriber is able to:

Put the connection to multi-party on hold. The served mobile subscriber may make a new call (to a potential participant) or process a Call Waiting request. While the multi-party call is on hold, the remote parties in that call can still communicate with each other.
s

Add another party, to which a private communication has been established previously (see above). By again invoking the MPTY service, the network joins the active call and the MPTY call on hold together, resulting in an active multi-party call again.
s

Separate a remote party. Explicitly choose one remote party to have a private conversation with. This results in that remote party being removed from the multi-party call which is placed on hold, and the conversation between the served mobile subscriber and the designated remote party being a normal active call. Again, while on hold, the participants of the MPTY call can still communicate with each other. The separated party can be added again to the MPTY call or released.
s

Disconnect the entire MPTY call or disconnect remote parties on a one at a time basis.
s

Charging Supplementary Services

Advice of charge (information) (AOCI)

Advice of charge (charging) (AOCC)

Charging Supplementary Services

This service permits the mobile station to display an Advice of accurate estimate of the size of the bill which will eventually charge (information) be levied in the Home PLMN (HPLMN). (AOCI)
service allows Advice of This will be made forthe mobile subscriber to indicate the charge that the use of telecommunication services. It is charge intended for applications where the user is generally not the the (charging) subscriber but is known to than subscriber, and where the user pays the subscriber, rather the Service Provider. (AOCC) The charge information is based as closely as possible on the charge that will be levied on the subscribers bill in the Home PLMN (HPLMN).

Call Restriction Services:

Barring Outgoing Calls:
s

All Outgoing Calls (BAOC) Outgoing International Calls (BOIC)

Outgoing International Calls ex-Home (BOIC-exHC) Barring Incoming Calls:

s

All Incoming Calls (BAIC) Incoming Calls, Roaming Outside Home (BIC-Roam)

Call Restriction Services

Call restriction services

The Call Restriction supplementary services allow the possibility for a mobile subscriber to bar certain categories of outgoing or incoming calls at the subscribers access. The group of Call Restriction Services includes two supplementary services:
s

Barring outgoing calls Barring incoming calls

Types of calls barred

The mobile subscriber can select the categories of calls to be barred. The following categories are defined:
s

All outgoing calls (BAOC) Outgoing international calls (BOIC)

Outgoing international calls except those directed to the home PLMN country (BOIC- exHC)
s

3. Call Processing, SMS and VMS

In this we discuss the call processing aspect and look into specifics case of a mobile originated (MO) call and a mobile terminated (MT) call. We also look into short message (SMS) and voice mail service (VMS) as implemented IMPCS pilot project.

RF channel overview: - RF channel play important role in call processing case. These are basically three types of RF control channel. 1. Broadcast control channel : The broadcast channels are points to multipoint channel, which are defined only for down-link direction (BTS to mobile station). They are divided into: BCCH (Broad cast control channel:- BCCH acts as a beacon. It informs the mobile about system configuration parameters (e.g. LAI, CELLIDENTY, NEIGHBOURING all identify). Using this information MS choose the best cell to attach to.

BCCH is always transmitted on full power and it is never frequency hopped. FCCHC frequency correction channel. MS must tune to FCCH to listen to BCCH. FCCH transmits a constant frequency shift of the radio carrier that is used by the MS for frequency correction. SCH (synchronization channel). . SCH is used to synchronize the MS in time .SCH carries TDMA frame number and BSIC (Base Station Identity Code)

2. Common control channels : Common control channels are specified as

point to multi-point, which operate only in one direction either in up-link or downlink direction. PCH (Paging Channel): - PCH is used in down-link direction for sending paging message to MS whenever there is incoming call. RACH (Random Access Channel ) :-RACH is used by the MS to request allocation of a specific dedicated control channel (SDCCH) either in response to a paging message or for call origination /registration from the MS. this is an uplink channel and operate in point to point mode. AGCH (Access Grant Channel ):- AGCH is a logical control channel which is used to allocated a specific dedicated control channel (SDCCH) to MS when MS request for a channel over RACH. AGCH is used in downlink direction.

3.Dedicated Control Channel : dedicated control channel are full duplex, point
to point channel. They are used for signalling between the BTS and certain MS. They are divided into: (I). SACCH (Slow Associated Control Channel): the SACCH is a duplex channel, which is always allocated to TCH or SDCCH. The SACCH is used for Radio link supervision measurements. Power control. Timing advance information.

In 26 frame traffic multi-frame 13th frame (frame no .12) is used for SACCH.SACCH is used only for non-urgent procedures. (II). FACCH (Fast Associated Control Channel). FACCH is requested in case the requirement of signaling is urgent and signaling requirement can not be met by SACCH. This is the case when hand-over is required during conversation phase. During the call FACCH data is transmitted over allocated TCH instead of traffic data. This is marked by a flag known as stealing flag.

(III). SDCCH (Stand Alone Dedicated Control Channel)- The SDCCH is a duplex, point to point channel which is used for signaling in higher layer. It carries all the signaling between BTS & MS when no TCH is allocated to MS. The SDCCH is used for service request, location updates, subscriber authentication, ciphering. equipment validation and assignment of a TCH. Mobile originated (MO) call: - There are four distinct phase of a mobile originated call-Setup phase. -Ringing phase. -Conversation phase. -Release phase. Out of these phases the setup phase is the most important phase and includes authentication of the subscriber, Ciphering of data over radio interface, validation of mobile equipment, validation of subscriber data at VLR for requests service and assignment of a voice channel on A-interface by MSC. Whenever MS wants to initiate on outgoing call or want to send an SMS it requested for a channel to BSS over RACH. On receiving request from MS, BSS assigns a stand-alone dedicated control channel (SDCCH) to MS over access grant channel (AGCH). Once a SDCCH has been allocated to MS all the call set up information flow takes place over SDCCH. A connection management (CM) entity initiates a CM Service Request message to the network. Network tries to establish an MM connections between the MS and the network and upon successful establishment of MM connection a CM Service Accept message is received by MS from the network. MS now sends a Call Set up Request to the network which contains the dialed digits (DD) of the called party. As the call setup message is received at the MSC/VLR certain check are performed at MSC/VLR like- whether the requested service is provisioned for the subscriber or not, whether the dialed digits are sufficient or not, any operator determined barring (ODB) does not allow call to proceed further etc. As these checks are performed at MSC/VLR a Call Proceeding Message is sent from the network towards the MS. After all the checks are successfully passed MSC sends Assignment command to the BSS which contains a free voice channel on A-interface On getting this message BSS allocates a free TCH to the MS and informs the MS to attach to it. MS on attaching to this TCH informs the BSS about it. On receiving a response from the BSS, MSC switches the speech path toward the calling MS. Thus at the end of Assignment the speech path is through from MS to MSC. It is important to note that at this stage mobile has not connected user connection as yet. MS at this stage does not listen anything.

After assignment MSC sends a network set-up message to the PSTN requesting that a call be set up. Included in the message are the MS dialed digits (DD) and details specifying which trunk should be used for the call. The PSTN may involve several switching exchanges before finally reaching the final local exchange responsible for applying the ringing tone to the destination phone. The local exchange will generate the ringing tone over the trunk, or series of trunk (if several intermediate switching exchange are involved), to the MSC. At this point in time MS will hear ringing tone. The PSTN notifies the MSC with a networkalerting message when this event occurs. MSC informs the MS that the destination number is being alerted. It is important to note that this is primarily a status message to the MS. The MS hears the ringing tone from the destination local exchange through the established voice path. When the destination party goes off hook, PSTN informs the MSC of this event. At this point, MS is connected to the destination party and billing is started. MSC informs the MS that connection has been established and MS acknowledges the receipts of the connect message. Under normal condition, the termination of a call is MS initiated or network initiated. In this scenario, we have assumed that MS initiates the release of the call by pressing end button and MS send a disconnect message to the MSC. The PSTN party is notified of the termination of the call by a release message from the MSC. The end- to- end connection is terminated. When MSC is left with no side task (e.g. charging indication etc.) to complete a release message is sent to the MS. MS acknowledges with a release complete message. All the resources between MSC and the MS are released completely.

Mobile Terminated (MT) call- The different phases of a mobile terminated call are - Routing analysis - Paging. - Call setup. - Call release. The phases of mobile terminated (MT) call are similar to a mobile originated (MO) call except routing analysis and paging phase. Call to a mobile subscriber in a PLMN first comes to gateway MSC (GMSC). GMSC is the MSC, which is the capable of querying HLR for subscriber routing information. GMSC need not to be part of home PLMN, though it is normal practice to have GMSC as part of PLMN in commercially deployed networks. GMSC opens a MAP (Mobile Application Part) dialogue towards HLR and Send / Routing / Info-Request (SRI request) specific service message is sent to

HLR. SRI request contains MSISDN of the subscriber. HLR based on location information of this subscriber in its database, opens a MAP dialogue towards VLR and sends Provide / Roaming / Number-request (PRN request)to the VLR. VLR responds to PRN request with PRN response message, which carries an MSRN (mobile subscriber roaming number), which can be used for routing toward visiting MSC in the network. HLR returns MSRN to GMSC (MSC that queried HLR) in SRI response message. On getting MSRN the GMSC routes the call towards VMSC The purpose of this entire exercise is to locate where the terminating mobile subscriber is. The MSRN received at GMSC is in international format (Country Code + Area Code + subscriber number). Normally, based on the routing info at GMSC, the call may be routed out of the GMSC towards VMSC of the terminating subscriber, in which case appropriate signaling protocol (MF or ISUP) depending on the nature of connecting of GMSC with subsequent exchange along the route will apply. If at VMSC the terminating mobile subscriber is found to be free (idle), paging is initiated for terminating mobile subscriber. MSC uses the LAI provided by the VLR to determine which BSSs should page the MS. MSC transmit a message to each of these BSS requesting that a page be performed. Included in the message is the TMSI of the MS. Each of the BSSs broadcasts the TMSI of the mobile in a page message on paging channel (PCH). When MS detects its TMSI broadcast on the paging channel , it responds with a channel request message over Random Access Channel (RACH). Once BSS receives a channel request message , it allocates a stand alone Dedicated Control Channel(SDCCH) and forwards this channel assignment information to the MS over Access Grant Channel (AGCH). It is over this SDCCH that the MS communicates with the BSS and MSC until a traffic channel assigned to the MS. MS transmits paging response message to the BSS over the SDCCH. Included in this message is MS TMSI and LAI. BSS forwards this paging response message to the MSC. Now Authentication and Ciphering phases are performed to check the authenticity of MS and encrypt data over radio interface. On the network side after paging is initiated, while waiting for paging response, a defensive timer called, Early ACM timer is run at MSC to avoid network timeouts. On successfully getting paging response, a setup message is constructed to be sent towards terminating MS. In case paging fails due to authentication failure or when the subscriber is out of radio-coverage, the call is cleared. In case CLIP is not subscribed by the terminating mobile subscriber, calling number is not included in set-up message. In case CLIP is subscribed and PI value in calling number parameter indicates presentation allowed the number is included in the set-up message. In case CLIP is subscribed but PI received in calling number parameter indicates presentation restricted then number is included only if CLIRO is also subscribed to.

MS on receiving the set-up message performs compatibility Checking before responding to the set-up message it is possible that MS might be incompatible for certain types of call set-ups. Assuming that MS passes compatibility checking, it acknowledges the call setup with set-up confirm message. After getting set-up confirm message from the MS, MSC performs assignment phase (similar to one discussed in MO call) and a voice path is established from MSC to the MS. MS begins altering the user after it receives the traffic channel assignment. MS send alerting message to the MSC .MSC upon receiving the alerting indication from the MS, begins generating an audible ringing tone to the calling party and sends a network alerting via GMSC to the PSTN. Prior to this the calling party heard silence. At this point in the call, MS is alerting the called party by generating on audible tone. One of the three events can occur-calling party hangs-up, mobile subscriber answers the phone, or the MSC times out waiting for the mobile subscriber to the answer the call. Since radio traffic channel is a valuable resource, GSM does not allow a MS to ring forever. In the present scenario we have assumed that the mobile subscriber answers the phone. The MS in response to this action stops alerting and sends a connect message to the MSC. MSC removes the audible tone to the PSTN and connects the PSTN trunk to BSS trunk (terrestrial channel) and sends a connect message via GMSC to the PSTN. The caller and the called party now have a complete talk path. This event typically marks the beginning of the call for billing purposes. MSC sends a connect acknowledge message to the MS. The release triggered by the land user is done in similar way as the release triggered by mobile user. MSC receives a release message from the network to terminate end-to-end connection. PSTN stops billing the calling landline subscriber. MSC sends a disconnect message towards the MS and MS responds by a Release message. MSC release the connection to the PSTN and acknowledges by sending a Release Complete message to PSTN. Now the voice trunk between MSC and BSS is cleared, traffic channel (TCH) is released and the resources are completely released. The mobile-to-mobile call scenario is a combination of phases encountered in mobile originated (MO) and mobile terminated (MT) call. Short Message Service (SMS) SMS is a simple bearer service and acts as a bi-directional alphanumeric paging service, which allows value added service provision as well as management services provision such as advice of charge. A short message can carry at most 160 characters (it can be less depending upon the type of characters and their coding scheme). The SMS could be either in broadcast

mode (via CBCH channel) or in a point-to-point mode (via either SDCCH channel if mobile is in idle state, or SACCH if the mobile is in dedicated mode). SMS allows to provide many values added service to individual/ corporate clients. Individuals may be interested in messaging (transmitting messages in compact way) or leisure services (weather forecast, road traffic, restaurant booking, movies, TV programs etc.). Business users may be interested in corporate information (company performance, stock value), ecommerce etc. SMS involves specific entities in the GSM network: first is the SMS Service Centre (SMS-SC simply SMSC) which can be connected to several networks and many MSCs (SMS- GMSCs or SMS-IWMSCs) within the same PLMN and which is addressed by a mobile using a E.164 number of the numbering plan of the PLMN. SMSC is capable of following functionalitys: Transmission of short message towards a mobile, retaining the responsibility of the message until reception of acknowledgement or expiration of the validity period. Reception of the short messages from MS and transmission of acknowledgement to the PLMN. Transferring messages received from Internet to mobile.

The second entity involved by the SMS is the SME (short message entity), which is responsible for producing or receiving a short message. The SME can be connected to the SMSC via a data network such as X.25 or IP. A short message is characterized by its parameters the most significant are the validity period, the service center time stamp which indicates the SM arrival time at the SC, etc. In IMPCS (pilot project), the SMS architecture has been implemented by C-DoT. The hardware architecture of SMSC is similar to HLR and is located on same physical platform. It services as an inter-working and relaying function of the message transfer between two MS. The service provided are(i) Mobile Originated short message- Enables MS to send an SMS ( up-to 140 bytes) to another MS via SMSC. (ii)Mobile terminated short message- Enables delivery of an SMS to a particular MS. (iii)Operator initiated SMS- This facility enables fixed network subscriber to send an SMS to a mobile subscriber through an operator at SMSC.

(iv)SMS Newsletter Service- A group of mobile subscriber can subscribe to SMSC for receiving periodic news regarding sports, weather, traffic etc. The subscription is done through on operator at SMSC. The operator feeds the news segments, which are transferred, to the subscriber periodically. Voice Mail System (VMS) VMS offers function of call answering device in the system. It provides personal voice mailbox to the subscribers. VMS redirects/forwards voice calls of a temporarily in accessible subscriber (busy or no reply) to a personal mailbox of the subscriber connected to the MSC. Whenever a call is redirected to VMS, it first greets the caller with a personalised greeting message and prompts the caller to leave the message in the mailbox. Later on the called party (mobile subscriber) can access the VMS from PLMN/PSTN phone by means of access code. VMS interfaces with MSC on E1 lines using R2 MF/CCS#7 signaling protocol. In IMPCS network the VMS consists of Pentium PC equipped with Dialogic card loaded with Windows NT 4.0. Dialogic card provides telephony network interface, voice recording, compression and play. The disk capacity requirement of the PC is totally application dependent. For 10,000 subscribers, if each subscriber stores 10 minutes of voice data then disk storage for subscriber voice information is around 20 GB. References: 1. The GSM system for mobile communication-Michel Mouly & Marie- Bernadette Pautet. 2. GSM system Engineering-Asha Mehrotra (Artech House Publisher). 3. ETSI standard ETS 300303 July 1994 on ISDN, ISDN-GSM, PLMN signalling interface.

DIAGRAMATICAL REPRESENTATION OF VARIOUS PROCESSES

Network Attachment Process

MS

Switch -on

Measure strongest RF channel to find relevant BCCH

PLMN Selection

. Cell should be of selected PLMN. . Cell should not be barred . . Radio path loss between BTS and the MS must be below a threshold set by the operator. Location Update Cell Selection
MSRN MSISDN MSRN MSISDN

fails

( Register its presence to the network. )

Idle-Mode

LOCATION UPDATION ND Mobile moves to CA and Powers on MS Update Location GMSC MSC TAX CA LU Accept VLR New VLR records subscriber data. CA HLR Location Update ( TMSI, LAI ) LU Accept ( 9810098111 New TMSI) VPLMN HLR HPLMN MS ND Listens BCCH/FCCH

Update Location CA

ND

LU Accept

LU Accept TAX ND

GMSC MSC/VLR ( Update Location/ Authentication )

ND Update Location VLR

LU Accept (Subs data) De register Mobile to old ACK from Old VLR MSC/VLR

1. ND PSTN Subscriber Dials ND Mobile Subscriber in ND.

MSRN Page(TMSI)

ND

HLR

MS

GMSC MSC/VLR ND TAX ND

SRI

9810098100

MSRN ND

MSISDN MSISDN PRN to MSC/VLR ND ACK from MSC/VLR ND (MSRN)

MSISDN LE

TANDEM

4. CA PSTN Subscriber Dials ND Mobile Subscriber in CA. TANDEM HLR

MSISDN

MSISDN GMSC MSC/VLR TAX CA CA MSRN MSISDN 9810098400

LE

ND Page(TMSI)

CA

MSISDN

MS

ND

MSRN Page(TMSI) HLR

MSRN TAX ND

GMSC MSC/VLR

SRI

MSRN ND MSISDN PRN to MSC/VLR from MSC/VLR CA ACK CA (MSRN)

2. ND PSTN Subscriber Dials CA Mobile Subscriber in CA. TANDEM HLR

MSRN MSISDN

MSISDN GMSC MSC/VLR TAX ND ND

LE

ND

MSISDN

CA HLR

MSISDN GMSC MSC/VLR TAX CA

SRI

MSRN CA

CA

Page(TMSI)

PRN to MSC/VLR ACK from MSC/VLR CA CA (MSRN)

MS

9881098300

3. ND PSTN Subscriber Dials ND Mobile Subscriber in CA.

HLR

GMSC MSC/VLR TAX CA

ND

MSRN

MS CA 9810098200 MSRN MSISDN

CA

MSRN

HLR

MSRN GMSC MSC/VLR ND TAX ND

SRI

MSRN ND

MSISDN MSISDN MSISDN LE TANDEM

PRN to MSC/VLR ACK from MSC/VLR CA CA (MSRN)

4.A CA PSTN Subscriber Dials ND Mobile Subscriber in CA

Roaming agreement with Optimal Routing TANDEM

Page(TMSI) HLR MSISDN MSISDN GMSC MSC/VLR TAX LE CA CA 9810098410 MS ND

MSRN MSISDN MSRN CA

ND

HLR GMSC MSC/VLR TAX ND

ND ACK from MSC/VLR CA (MSRN) PRN to MSC/VLR CA

4.A CA PSTN Subscriber Dials ND Mobile Subscriber in CA

Roaming agreement with Optimal Routing TANDEM

Page(TMSI) HLR MSISDN MSISDN GMSC MSC/VLR TAX LE CA CA 9810098410 MS ND

CA ND

TAX

ND

GMSCND MSC/VLR

MSRN PRN to MSC/VLR MSISDNACK from MSC/VLR CA CA (MSRN) MSRN HLR

5. CA Mobile Subscriber Dials ND Mobile Subscriber in ND.

HLR

CA GMSC MSC TAX CA CA MSISDN Subs. data check MSRN MSISDN

MS

9881098500

ACK CA

VLR

ND

TAX MSISDN ND

MSISDN

GMSCND MSC/VLR

PRN to MSC/VLR ACK from MSC/VLR ND ND (MSRN) 9810098500 MS ND MSRN Page(TMSI)HLR SRI

6. CA Mobile Subscriber Dials ND Mobile Subscriber in CA.

HLR CA

MSISDN GMSC MSC TAX CA MSISDN CA MSRN MSISDN MSISDN Subs. data check 9881098600

MS

ACK

VLR ND PRN to MSC/VLR MS Page(TMSI) ACK from MSC/VLR CA CA (MSRN) MSRN 9810098600 HLR SRI

CA ND

TAX

MSRN ND

MSISDN MSRN

GMSCND MSC/VLR

7. ND Mobile Subscriber in CA Dials ND Mobile in ND.

HLR ND

MSRN MSISDN GMSC MSC TAX CA MSISDN CA Subs. data check 9810098700

MS

ACK CA MSISDN

VLR

ND

TAX

ND

MSISDN

GMSCND MSC/VLR

PRN to MSC/VLR ACK from MSC/VLR ND ND (MSRN) MSRN Page(TMSI) HLR MS ND SRI 9810098710

8. CA Mobile in ND Dials ND Mobile Subscriber in CA.

HLR

GMSC MSC TAX CA 9810098800 Page(TMSI)

MSRN MSISDN

CA

ND

CA

MS

MSRN HLR CA GMSC MSC/VLR TAX ND MSRN MSRN ND Subs. data check ACK 9881098800 ACK from MSC/VLR CA (MSRN) PRN to MSC/VLR CA SRI MSISDN

ND

MS

VLR

5. Call and Mobility Management

Mobility management entails the GSM system keeping track of the mobile while on the move. The mobility management is implemented through mobility management (MM) sub-layer which is present in layer 3 of the protocol stack at MS and MSC. The functions performed by the mobility management are: 1. Subscribe Data management at MSC/VLRSubscriber data from HLR are retrieved by MM at the time of first location updating of the subscriber. Dynamic data change for a subscribe are also managed by the MM. 2. Services provided to upper layersMM provides basic means of transportation of upper CM sub-layer messages between MS and the network Handover procedures ensure smooth transition from one radio network to another. 3. Subscriber Authentication and confidentiality Management MM procedures ensure data confidentiality of a subscriber MM procedures provide a means for to ensure data confidentiality at radio interface. Mobility management is implemented through MM procedures, which are broadly classified in to two groups i) MM Common Procedure ii) MM Specific Procedure A MM specific procedure can only be started if no other MM specific procedure is running or no MM connection exists between the network and the mobile station. The end of the running MM connection has to be awaited before a new MM specific procedure can be started. During the lifetime of a MM specific procedure, if a MM connection establishment is requested by a CM entity this request will either be rejected or be delayed until the running MM specific procedure is terminated (this depends upon implementation). Any MM common procedure (except IMSI detach) may be started during MM specific procedure. 1. MM Common Procedure. 1. TMSI reallocation procedure_ The purpose of the TMSI reallocation procedures is to provide identify confidentiality i.e. to protect a user against being identified and located by an intruder. TMSI is used for identification within the radio interface signaling procedures instead of IMSI. Usually the TMSI reallocation is performed at least at each change of a location area. The reallocation of

TMSI can be performed explicitly after predetermined no. of accesses by MS to the network or implicitly by a location updating procedure . TMSI reallocation can be initiated by the network at any time whilst R R connection exists between the network and the mobile station. In case of TMSI reallocation procedure initiated by the network, network sends TMSI reallocation command message to the MS containing new TMSI/LAI MS on receiving the message stores new TMSI and LAI in SIM and deletes the older entries and sends TMSI reallocation complete message to the network. 2. Authentication procedureAuthentication Triplets. At network side, authentication procedure requires authentication triplets. Authentication triplet consists of: - Random number RAND (128 bits) - Signed response SRES (32 bits) - Ciphering key (64 bits). While initiating authentication procedure, if network has no authentication triplet or all triplets have been used, it requests AuC for the same. The index of currently used triplet is known as CKSN. (Ciphering key sequence number). 2. Identification procedure. The identification procedure is used by the network to request a MS to provide specific identification parameters to the network e.g. IMSI, IMEI. In case MS update location in the system using TMSI, but due to data base failure, TMSI at network end is no more available; network initiates identification procedure and asks for IMSI. If network is unable to receive identity response, it clears all the ongoing MM connections and releases radio resources. 3. IMSI Detach procedure.

The purpose of this procedure is to indicate the network that MS has switched off. This enables the network not to page for the subscriber and invokes other applicable supplementary service (e.g. call forwarding etc). 5. Ciphering procedure

Ciphering procedure is needed to encrypt data transmission over radio interface. When MSC needs to indicate ciphering on radio interface, it sends Cipher Mode Command message to BSS. This message contains Kc and a list of permitted algorithms. BSS stores Kc for this session and sends Cipher mode message to the MS. BSS enable encryption and uses Kc and permitted algorithm to encrypt /decrypt data. In case ciphering is completed successfully the network receives a Cipher Mode Complete command from the MS. This message contains the algorithm used for ciphering. MSC stores this information and proceeds for further activities like call set- up etc. In case MS is not able to support the ciphering it sends Cipher Mode Reject command to the network. At MSC the encryption control is operator controlled. If ciphering is mandatory and network receives a Cipher Mode Reject command from the MS, MSC clears all the ongoing MM connection and then releases radio resources. 6. Abort procedure. The procedure is used to abort any ongoing or established MM connection. 2. MM specific procedure The MM specific procedures are - Normal location updating MS moves from one LA to other LA. - Periodic location updating -- It is used to periodically notify the availability of the MS to the network. - IMSI attach procedure is used to indicate the IMSI as active in the network. MS initiates location-updating procedure by sending a Location Updating Request message to the network. MS starts a guard timer and enters state location updating initiated. After this the network. initiates authentication and ciphering procedure. After successful authentication and ciphering location updating procedure proceeds further. To limit the number of unsuccessful location updating attempts, an Attempt Counter is maintained at MS. Attempt counter is incremented when a location updating procedure fails. Attempt counter is reset when MS is powered on /a SIM is inserted / location update is successfully completed.

If the Location updating is successfully accepted by the network a Location Updating Accept message is transferred to the MS. Implicit TMSI reallocation procedure is also invoked. MS on receiving the Location Updating Accept stores the received LAI, stops the guard timer, reset the attempt counter and sets the update status of SIM to updated. MS at all times maintains a list of forbidden LAIs and PLMNs in SIM. If the LAI or PLMN identity contained in the Location Updating Accept message is a member of any of the forbidden lists then any such entries are deleted in MS. After location-updating procedure is over, the RR connection is released. The network initiates the release. MS waits for the release and if within time out the connection is not released, MS aborts it. MM procedures make use of certain MAP (Mobile Application Part). For example location updating procedure, which is an MM specific procedure make use of MAP procedures like: Down-loading of subscriber related data from HLR to VLR through MAP procedure on C interface. Thus LU procedure of MM makes use of a MAP procedure also. Similarly authentication procedure, which is a MM common procedure, make use of MAP procedure to retrieve authentication triplets from AuC. Connection Management. The mobility management (MM) sub-layer provides services to different entities of upper connection management (CM) sub-layer. The different entities of CM sub-layer requesting for service to MM sub-layer could be-call control (CC), short message service (SMS) or supplementary service (SS). An MM connection is established and released on request from CM entities. Different CM entity communicates with their pier entities using different MM connection. An MM connection requires an RR connection. Several MM connections may be active at the same time and all simultaneous MM connection for a given MS use the same RR connection. Different MM connections are identified by different protocol discriminator (PD) and transaction identifier (TI) value. MM connection establishment may be initiated by the MS or the network. For an MS to initiate MM connection its updating status should be updated and MM sub-layer should be either in IDLE or ACTIVE state. If any MM specific procedure is running then a new MM connection establishment will either be rejected or delayed (depending upon implementation). If no RR connection exists between MS and network, RR connection is established by sending CM service request message to the

network and MM sub- layer enters wait for o/g MM Connection State. If RR connection already exists and an MM connection is active, CM service Request message is sent and MM sub-layer enters wait for additional o/g MM connection state. The CM service Request message contains the type of CM service requested (o/g call, Emergency call, SMS, SS). If the network can accept the CM service request, a CM Service Accept message is sent to MS and on recovering this message MM connection become active and CC message can be transferred by CM entity. If network cannot accept CM service request from MS, a CM service Reject message is sent to MS. In case of MT (mobile terminated) call (incoming voice call or short message to the MS) CM sublayer entity in the network request MM sub layer to establish a MM connection. The MM sub-layer is informed after completion of paging procedure. Now these can be two scenarios depending upon whether RR connection to the desired MS already exists or not. (a) R R connection to the desired MS already existsThis could be then case when MS is in conversation mode and there is a short message for the MS. When RR connection between the network and desired MS exists and also no MM specific procedure is running (is no location updating etc. is in progress) the network establishes new MM connection over same RR connection with new PD/TI combination. Before establishment of a new MM connection the network may initiate any of MM common procedure like authentication, ciphering etc. and wait for their successful completion. (b) R R connection to the desired MS does not existMM sub layer first requests to establish an RR connection and on connection establishment MM sub-layer may initiate any of MM common procedure (authentication, ciphering etc.) Upon successful completion of any such procedure MM sub layer informs the requesting CM sub-layer entity. If RR connection establishment is unsuccessful or any of the MM common procedure fail, this is indicated to CM sub-layer with appropriate error cause. A CM sub-layer entity, after having been advised that a MM connection has been established, requests the transfer of CM massages. The CM messages passed to MM sub-layer are sent to these other side of the interface with PD & TI set according to source entity. Upon receiving

CM message, the MM sub-layer on the side of the interface distributes it to the relevant CM entity according to the PD & TI value. After the information transfer between CM entities is over, an established MM connection can be released by local CM entity. The release of CM connection is then done locally in the MM sub-layer. After the release of last MM connection by its user, the MM sub-layer decides to release RR connection requesting RR sub-layer. Handover Management. The main aim of handover is to avoid losing a call is progress when MS leaves the radio coverage of the call in charge. Handovers can be classified as -Internal handover within one cell. -Internal handover between cells. -External handover. The hand-over process may be thought of as consisting of three phases1. Recognition that handover is required. 2. Decision of a target cell. 3. Execution of the handover. Allocation and connection of new channel. Reallocation and release of old channel.

The BSS is wholly responsible for first phase. However MSC may trigger BSS to do so through certain, BSSMAP procedure. MSC participates with BSS in execution of phase 2 and 3. Type of handovers- Rescuer handover are done to avoid losing a call in progress when MS leaves the radio coverage area of the cell in charge. These are the most common types of handover. The handover decision is triggered by the averaged measurement reports given by the MS, for the beacon frequencies of the adjacent cells given to it by the BSS.

- Confinement handover is an handover triggered with the goal of

optimizing the interface level. The BSC divides the frequencies in a cell into five interference bands based on interference level on each of them. - Traffic hand-over are aimed at reducing the congestion in congested cell by handing over some cell from one cell to less congested one.

The hand-over procedure provides interface between the call control entities, MAP procedure and the BSSMAP procedure to realize the handover. The handover are further categorized into: - Intra MSC handover. - Inter MSC handover. The intra MSC handover procedure operates as detailed below. BSS- A generates the HANDOVER REQUIRED message to MSC containing a list of cells in order of preference to which MS is to be hand-over. MSC on getting this message send a HANDOVER REQUEST message to the target BSS i.e BSS-B. BSS-B an receiving handover request messages takes all necessary action for giving radio access to the MS in the new cell and gives a HANDOVER REQUEST ACK to MSC with a handover reference number. The HANDOVER REQUEST ACK message contains a HANDOVER COMMAND message, which is to be transparently passed on by the MSC to BSS-A. MS now accesses the radio resources of BSS-B with a HADOVER ACCESS on getting which BSS-B verifies the reference number and sends HADOVER DETECT to MSC. When MS starts successfully communicating with BSS-B,BSS-B sends HANDOVER COMPLETE message to MSC. MSC now release the resources held on BSS-A by sending it a CLEAR COMMAND.

Note:- When handover procedure is operational all the message meant for the MS are queued up and are delivered only after the handover is complete . In case handover procedure fails the queued up message meant for the MS are delivered once MS is back in communication with the old BSS. Inter MSC HandoverInter MSC handover is required when the target cell belongs to other MSC service area. The successful handover in this case requires a circuit between two MSCs. Inter MSC hand over procedure acquires a circuit between the two MSCs using MAP-E interface.

The handover procedure operates as detailed belowMSC-A, on receipts of HANDOVER REQUIRED message from BSSA, sends a MAP_PREPARE_HANDOVER message to MSC-B containing HANDOVER REQUEST message. On receipts of this message MSC-B acquires a handover number from its VLR and returns it to MSC-A in MAP_PREPARE_HANDOVER_REQUEST_resp. message. This message also contains HANDOVER REQUEST .ACK containing in turn HANDOVER COMMAND to be given by BSS-A to the MS. - On getting this message MSC-A dials handover number to obtain a circuit between two MSCs. MSC-A on receipt of ACM (ISUP) message from MSC-B sends the HANDOVER COMMAND to BSS-A. MSC-B passes the HANDOVER DETECT and HANDOVER COMPLETE message received from the BSS-B to MSC-A. After getting HANDOVER COMPLETE from BSS-B over E interface MSC-A initiates the release of radio resources towards BSS-A.

References: 1. The GSM system for mobile communication-Michel Mouly & Marie- Bernadette Pautet. 2. GSM system Engineering-Asha Mehrotra (Artech House Publisher). 3. GSM 03.22 function related to Mobile Station (MS) in idle mode and group receive mode.

R F Channel Management

Overview of the GSM Interfaces

Interfaces

For the connection of the different nodes in the GSM network, different interfaces are defined in the GSM specifications. The GSM interfaces discussed in this lesson are: Air interface or U m interface The Air Interface is the interface between the BTS (Base Transceiver Station) and the MS (Mobile Station). The air interface is required for supporting: Universal use of any compatible mobile station in a GSM network A maximum spectral efficiency A bis -interface The A bis -interface is the interface between the BSC (Base Station Controller) and the BTS. The interface comprises traffic and control channels. Functions implemented at the A bis -interface are: Voice-data traffic exchange Signaling exchange between the BSC and the BTS Transporting synchronization information from the BSC to the BTS A-interface The A-interface is the interface between the BSC and the MSC.

The U m interface

One of important interfaces the U or Introduction the mostthoroughly specified toisachievem full Air interface. This interface is a compatibility between mobile stations of various manufacturers and networks of different operators. To achieve a high spectral efficiency in the cellular network a combination of FDMA (Frequency Division Multiple Access) and TDMA (Time Division Multiple Access) is used. The FDMA part involves the division by frequency of the 25 MHz bandwidth into 124 carrier frequencies spaced 200 KHz for GSM-900. For GSM1800 the frequency spectrum of the 75 MHz bandwidth is divided into 374 carrier frequencies spaced 200 KHz. One or more frequencies are assigned to each BTS. Each of these carrier frequencies is then divided in time, using a TDMA scheme to increase the number of channels per carrier frequency. Each carrier frequency channel carries eight time-division multiplexed physical channels. A physical channel is determined by the carrier frequency (or a number of carrier frequencies and a defined hopping sequence) and the timeslot number. A mobile station can transmit speech data only during its assigned timeslot. In the frequency range specified for the GSM-900 mobile radio networks, 124 frequency channels with a bandwidth of 200 KHz are available for both the uplink and downlink direction. The uplink (mobile station to BTS) uses the frequencies between 890 MHz and 915 MHz and the downlink (BTS to mobile station) uses the frequencies between 935 MHz and 960 MHz. The duplex spacing, the spacing between the uplink and downlink channel, is 45 MHz. GSM-1800 uses a similar scheme. The difference is that for GSM1800 the uplink uses the frequencies between 1710 MHz and 1785 MHz and the downlink the frequencies between 1805 MHz and 1880 MHz. The duplex spacing is 95 MHz.

FDMA and TDMA methods

Uplink and downlink

Types of Logical Channels:

Traffic channel Broadcast channels Common control channels Dedicated control channels Traffic Channels: TCH/F TCH/H

Logical Channels on the U m interface

Logical channels

One or more logical channels can be transmitted on a physical channel. There are different types of logical channels. The type of logical channel is determined by the function of the information transmitted over it. The following types of logical channels are defined: Traffic channels Broadcast channels Common control channels Dedicated control channels

Note that the first channel type carries speech and data, and the other types control information (signaling). Traffic Channels The traffic channels are used to send speech or data services. There are two types of traffic channels. They are distinguished by their transmission rates. The following traffic channels are provided: TCH/F (Traffic CHannel Full rate)

The TCH/F carries information at a gross bit rate of 22.8 kbit/s (after channel coding). The net (or effective) bit rate at the TCH/F is for speech 13 kbit/s and for data 12, 6 or 3.6 kbit/s (before channel coding). The transmission rates of the data services allow services which are compatible to the existing, respectively, 9.6, 4.8 and 2.4 kbit/s PSTN and ISDN services.
TCH/H (Traffic CHannel Half rate)

The TCH/H carries information at a gross bit rate of 11.4 kbit/s. The net bit rate at the TCH/H is for speech 5.6 kbit/s and for data 6 or 3.6 kbit/s.
A TCH/F or a TCH/H may also be used to send signaling information (for example call forwarding and short messages). In that case a small portion of the time slot is used.

Broadcast Channels: BCCH FCCH SCH CBCH Common Control Channels: PCH AGCH RACH Dedicated Control Channels: SACCH FACCH SDCCH

Broadcast Channels

The information distributed over the broadcast channels helps the mobile stations to orient themselves in the mobile radio network. The broadcast channels are point-to-multipoint channels which are only defined for the downlink direction (BTS to the mobile station). They are divided into: BCCH (Broadcast Control Channel) Via the BCCH the mobile station is informed about the system configuration parameters (for example Local Area Identification, Cell Identity and Neighbor Cells). Using this information the mobile stations can choose the best cell to attach to. The BCCH is also known as beacon. FCCH (Frequency Correction Channel)

To communicate with the BTS the mobile station must tune to the BTS. The FCCH transmits a constant frequency shift of the radio frequency carrier that can be used by the mobile station for frequency correction.
SCH (Synchronization Channel)

The SCH is used to time synchronize the mobile stations. The data on this channel carries the TDMA frame number and the BSIC (Base Station Identity Code).
CBCH (Cell Broadcast Channel) The CBCH is used for the transmission of generally accessible information (Short Message Service messages) in a cell, which can be polled by the mobile station. Common Control Channels Common control channels are specified as point-to-multipoint channels which only operate in one direction of transmission, either in the uplink or downlink direction. The following channels are provided:

PCH (Paging Channel)

The PCH is used in the downlink direction for paging the mobile stations.
AGCH (Access Grant Channel)

The AGCH is also used in the downlink direction. A logical channel for a connection is allocated via the AGCH if the mobile station has requested such a channel via the RACH.
RACH (Random Access Channel)

The RACH is used in the uplink direction by the mobile stations for requesting a channel for a connection. It is an access channel that uses the
slotted Aloha access scheme. The figure on the opposite page gives an overview of the different types of logical channels. Dedicated Control Channels Dedicated control channels are full-duplex, point-to-point channels. They are used for signaling between the BTS and a certain mobile station. They are divided into: SACCH (Slow Associated Control CHannel)

The SACCH is a duplex channel which is always allocated to a TCH or SDCCH. The SACCH is used for transmission of signaling data, radio link supervision measurements, transmit power control and timing advance data. Note that the SACCH is only used for non-urgent procedures.
FACCH (Fast Associated Control CHannel) The FACCH is used as a main signaling link for the transmission of signaling data (for example handover commands). It is also required for every call set-up and release. During the call the FACCH data is transmitted over the allocated TCH instead of traffic data; this is marked by a flag called a stealing flag. The process of stealing a TCH for FACCH data is called pre-emption. SDCCH (Stand-alone Dedicated Control CHannel)

The SDCCH is a duplex, point-to-point channel which is used for signaling in higher layers. It carries all signaling between the BTS and the mobile station when no TCH is allocated. The SDCCHs are used for service requests (for example Short Message Service), location updates, subscriber authentication, ciphering initiation, equipment validation and assignment to a TCH. The net SDCCH bit rate is about 0.8 kbit/s.

Multiplexing Logical Channels onto

Physical Channels
Background Several of the above-mentioned types of logical channels can be transmitted over one single physical channel (timeslot). The GSM specifications 05.02 specify several combinations of channel types (the sequence of logical channels is fixed). The order of the logical channels depends on the channel combination. The channel combinations are: 1.TCH/F + FACCH/F + SACCH/F 2. TCH/H + FACCH/H + SACCH/H 3. (TCH/F + FACCH/F + SACCH/F) or (TCH/H + FACCH/H + SACCH/H) 4. FCCH + SCH + CCCH + BCCH 5. FCCH + SCH + CCCH + BCCH + SDCCH/4 + SACCH/4 6. CCCH + BCCH 7. SDCCH/8 + SACCH/8 The CCCH is a channel that carries both the PCH and the AGCH on the downlink, and the RACH on the uplink. The extensions /4 and /8 in the above mentioned terms mean, respectively, that four and eight logical channels are mapped onto one physical channel (timeslot). Note that the BCCH is always transmitted in timeslot 0 on the first defined frequency.

Channel Combination s

Definitions

The figure on the opposite pages represents combination 4;the logical channels FCCH, SCH, BCCH and CCCH are transmitted on the downlink in timeslot 0.

Frame Types on the U m interface

Frame types The GSM specifications define several types of frames, which are: TDMA frame

A TDMA frame consist of eight timeslots (physical channels). The length of a timeslot is 0.577 ms. The length of a TDMA frame is therefore 4.62 ms.
Note: because data on a timeslot is transmitted in bursts, the length of a timeslot is often expressed in BP (Burst Period); 1 BP represents the length of 1 timeslot. 26-TDMA multiframe

This multiframe is defined as a succession of 26 TDMA frames, and corresponds to the 26 x 8 BP or 120 ms cycle used in the definition of the TCH/F and TCH/H.
51-TDMA multiframe

This multiframe is defined as a succession of 51 TDMA frames, and corresponds to the 51 x 8 BP cycle used in the definition of the TCH/F, TCH/H and of the common channels.
Superframe

The superframe is a succession of 51 x 26 TDMA frames (6.12 sec), and corresponds to the smallest cycle for which the organization of all channels is repeated.
Hyperframe

The hyperframe is the numbering period. It is 2048 x 51 x 26 x 8 BP long, or 3 hours, 28 minutes, 53

seconds and 760 milliseconds. It is a multiple of all previously cited cycles, and determines all the cycles in the transmission of the radio path. It is in particular the smallest cycle for frequency hopping and for ciphering.
The different frames are depicted in the figure on the opposite page.

Network Attachment Process :

Network attachment is the process of selecting an appropriate cell (radio frequency) by the mobile station to provide the available services, and making its location known to the network. The process starts when the mobile is switched on, and ends when the mobile station enter the idle mode. In idle mode the mobile station does not have a traffic channel allocated to make or receive a call, but the Public Land Mobile Network (PLMN) is aware of the existence of the mobile station within the chosen cell. For normal service, the mobile station has to camp on a suitable call, tune to that cells control channel. The choice of such a suitable cell for the purpose of normal service is referred to as normal camping.

The network attachment process consists of the following tasks:

Cell Identification When Mobile Station is switched on, it attempts to make contact with a GSM PLMN by performing following actions. Measure the BCCH channel. Search for a suitable call.

The Mobile Station measure the signal strength of the BCCH (Broadcast Control Channel) channels received. It stores a list information about 30 of these BCCH channels, such as signal strength and the frequency corresponding.

PLMN Selection The particular PLMN to be contacted can be selected either in one of the following modes: Automatic mode In automatic mode, the station will choose which PLMNs to try by itself. The automatic mode is based on the existence of the preferred list, which is stored in a non-volatile memory in the SIM. This list includes a number of PLMN identities in order of preference and is under control of the user. The most preferred is usually the home PLMN. The list is filled in by the user through a mechanism to be specified by the mobile station manufacturer. The automatic mode is normally used when the mobile station operates on its home PLMN( that is the PLMN the mobile station is subscribed to). Manual mode In manual mode, the user is presented a list containing all found PLMNs. The user chooses one of the PLMNs from the list.

Cell selection
The mobile station attempts to find a suitable cell by passing through the list in descending order of received signal strength; the first BCCH channel which satisfies a set of requirements. The requirement that a cell must satisfy before a mobile station can be provide service from it, are: 1. It should be a cell of the selected PLMN. The mobile station checks whether the cell is part of the selected PLMN. It should not be barred. The PLMN operator may decide not to allow mobile stations to access certain cells. These cells may, for example, only be used for handover traffic. Barred cell information is broadcast on the BCCH to instruct mobile stations not to access these cells.

2.

3. The radio path loss between the mobile station and the selected BTS must be below a threshold set by the PLMN operator. 4. roaming. It should not be in an LA which is in list of forbidden LAs for

No suitable cell found If the mobile station is unable to find a suitable cell to access, it attempts to access a cell irrespective of the PLMN identity, and enters a limited service state in which it can only attempt to make emergency calls. When successfully camped on a cell the mobile station regularly looks to see if there is a better cell in terms of a cell-re-selection criterion, and if there is, the better cell is selected. Also if one of the other criteria changes (e.g the current serving cell becomes based), or there is downlink signaling failure, a new cell is selected.

References: 1. GSM 05.01 Physical layer on the radio path (general description). 2. GSM 05.02 multiplexing and multiple access on the radio path. 3. The GSM system for mobile communication-Michel Marie- Bernadette Pautet. Mouly and

4. GSM system Engineering- Asha Mehrotra (Artech House Publisher).