Professional Documents
Culture Documents
Global System For Mobile Communication (GSM) : Li-Hsing Yen Assistant Prof. Dept. of CSIE, Chung Hua Univ
Global System For Mobile Communication (GSM) : Li-Hsing Yen Assistant Prof. Dept. of CSIE, Chung Hua Univ
Communication (GSM)
Li-Hsing Yen
Assistant Prof.
Dept. of CSIE, Chung Hua Univ.
MSC
MS
(ME/SIM) MSC E PSTN, ISDN, PSPDN,
CSPDN
A-bis
A F
C B
A-bis
BSC EIR
HLR VLR
D
BTS BSS
G
Um
NSS
AuC VLR
MS
(ME/SIM)
1
Nomenclature
• MS (Mobile Station) =
MT (Mobile Terminal ) +
TE (Terminal Equipment)
• BSS (Base Station Subsystem) =
BTS (Base Transceiver Station) +
BSC (Base Station Controller)
• NSS (Network Switching Subsystem)
• MSC (Mobile Switching Center): telephony
switching function and authentication of user
2
AuC and EIR
• Authentication Center (AuC)
– used in the security data management for
the authentication of subscribers.
• Equipment Identity Register (EIR)
– used to maintain a list of legitimate,
fraudulent, or faulty MSs.
– optional in GSM network, and is not used
generally.
GSM Interfaces
• Um
– Radio interface between MS and BTS
– each physical channel supports a number of
logical channels
• Abis
– between BTS and BSC (vender specific)
– primary functions: traffic channel transmission,
terrestrial channel management, and radio
channel management
3
Frequency Division Duplex
n: Absolute Radio Frequency Channel Number (ARFCN). 1 ≤ n ≤ 124
Uplink 890.0 MHz Guard band
890.2 MHz 200kHz
F ul(n)=890+ 0.2*n 890.4 MHz
MHz
....
.
57
7
914.8 MHz
ms
burst (contents of time slot)
Downlink 935.0 MHz Guard band
935.2 MHz
MHz
....
959.8 MHz
. . . 7 0 1 2 3 4 5 6 7 0 time slot
Downlink 5 6 7 0 1 2 3 4 5 6 7 0 1 2
Uplink 2 3 4 5 6 7 0 1 2 3 4 5 6 7
4
Timing Advance
Propagation delay
Timing advance
~ Propagation delay * 2
5
GSM Frame Hierarchy
3.48hr
Hyper …
0 1 2047
frame
Super 0 1 … 48 49 50 6.12s
frame
Multi- …
0 1 23 24 25 120ms
frame
Frame 0 1 2 3 4 5 6 7 4.615ms
28 bits
0.57692ms
Time 8.25
Encrypted bits Encrypted bits
Slot guard bits
57 bits 57 bits
3 tail bits 3 tail bits
Training sequence Stealing bit
6
Training Sequence
• A known bit pattern that differs for different
adjacent cells
• to adapt the parameters of the receiver to the
current path propagation characteristics
• to select the strongest signal in case of
multipath propagation
• for multipath equalization
– extract the desired signal from unwanted
reflections
Um Abis A
(air interface)
7
Layer 1 - Physical Layer
• Modulation
• Equalization
• Channel coding
– block code
– convolutional code
• Interleaving
– to distribute burst error
interleaving de-interleaving
ciphering deciphering
8
GSM Speech Transmission
20 ms
channel encoding
456 bits
interleaving : :
392 449 50
: : : : :
107 164 221 278 335
: 57 rows
burst 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57
formatting
frame
burst
Convolutional Coding
378 bits 78 bits
456 bits
9
Tailing Bits and Reordering
d(0) u(0)
d(0) d(2) u(1)
d(1) d(4) u(2)
d(2) : : :
d(3) reorder d(178) u(89) Tailing Bits
d(180) u(90)
…
Parity Bits
• The first 50 bits are protected by 3
parity bits p(0), p(2), p(3)
• generator polynomial g(D)=D3+D+1
• the remainder of
d(0)D52+d(1)D51+… +d(49)D3+p(0)D2+p(
1)D+p(2) divided by g(D) should be
1+D+D2
10
Convolutional Encoder for
GSM Speech (Rate=1/2, K=5)
U0 … U188
ak ak-1 ak-2 ak-3 ak-4
Interleaving
0 455
11
GSM Normal Burst Formatting
A B C
57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57
burst frame
28 bits
8.25
BABA… … BAB ABAB… … ABA guard
bits
57 bits 57 bits
3 tail bits 3 tail bits
Training sequence Stealing flag
12
GSM Logical Channels (I)
• Speech traffic channels (TCH)
– Full-rate TCH (TCH/F)
– Half-rate TCH (TCH/H)
• Broadcast channels (BCH)
– Frequency correction channel (FCCH)
– Synchronization channel (SCH)
– Broadcast control channel (BCCH)
• Cell broadcast channel (CBCH)
13
Broadcast Channels (BCH)
• Frequency correction channel (FCCH)
– the “lighthouse” of a BTS
• Synchronization channel (SCH)
– PLMN/base identifier of a BTS plus
synchronization information (frame number)
• Broadcast control channel (BCCH)
– to transmit system information 1-4, 7-8 (differs in
GSM 900, GSM 1800, and PCS 1900)
14
Mapping of Logical Channels
• Each BTS has a particular frequency carrier
called BCCH-TRX to transmit BCCH info
• The following channel structure can be found
on time slot 0 of carrier BCCH-TRX
– FCCH
– SCH
– BCCH information 1-4
– Four SDCCH subchannels (optional)
– CBCH (optional)
15
Example Mapping of Logical
Channels on Time Slot 2 (Downlink)
FN= 0 - 11 TCH
FN= 12 SACCH
FN= 13 - 24 TCH
16
Layer 3 Protocol Architecture:
Mobile Station Side
MNREG-SAP MNCC-SAP MNSS-SAP MNSMS-SAP
CM
CC SS SMS
TI TI TI
MM CC SS SMS
MM PD
PD
RR
SAPI=0 SAPI=3
AGCH+PCH
SDCCH
SACCH
FACCH
SDCCH
SACCH
RACH
BCCH
Layer 3 - RR Sublayer
• The RR sublayer handles all the procedures
necessary to establish, maintain, and release
dedicated radio connections
– channel allocation
B
– handover
A
– timing advance
– power control power
level
– frequency hopping
time
A B
17
Three Cases of Hand-over
MSC MSC
Layer 3 - MM Sublayer
• The MM sublayer copes with all the
effects of handling a mobile user that
are not directly related to radio functions
– location area
– location registration & call delivery
– location update & paging
18
Authentication & Encryption/Decryption in GSM
Mobile Station Home System
RAND
SIM Ki Ki
A8 A3 A3 A8
accept SRES Kc
Y
SRES =? SRES
N
reject authentication
channel release
19
Layer 3 - CM Sublayer
• The CM sublayer manages all the functions
necessary for circuit-switched call control
– call establishment procedures for mobile-
originated calls and mobile-terminated calls
– in-call modification
– call reestablishment
– Dual Tone Multi Frequency (DTMF) control
procedure for DTMF transmission
Contents of CM
• Call Control (CC)
• Short Message Service (SMS)
• Supplementary Service (SS)
20
Paging Procedure
MS BSS
Paging Request Message on PCH
MS
INTerrogating eXchange (INTX)
Mobile Station ISDN Number (MSISDN) (Country Code, see E.164)
Mobile Station Roaming Number (MSRN) (Mobile Country Code, see E.212)
21
Dual Tone Multiple Frequency
(DTMF) in PSTN
Switch
DTMF
Dialing
Switch PBX
Connected
DTMF in GSM
MSC
SETUP
Dialing
MSC PBX
START_DTMF
STOP_DTMF
Connected
22