Download as pdf or txt
Download as pdf or txt
You are on page 1of 39

Unit I BASICS OF PCS AND GSM (12 Marks)

Evolution of Mobile Communications


• 1 G- Analog

• Voice Calls eg AMPS(Advanced Mobile Phone System)

• 2 G- Digital

• Voice calls +SMS

• GSM (Global System for Mobile Communication)

• CDMA (Code-Division Multiple Access)

• 2.5 G

• GPRS (General Packet Radio Service)

• 2.75G

EDGE(Enhanced Data rates for GSM Evolution)

• 3G

• UMTS(Universal Mobile Telecommunications System)

• CDMA2000

• 4G

Prepared by: Ms. M. S. Karande Wireless and Mobile Networks (Sub Code: 22622) Pg 1/ 39
WIMAX (Worldwide Interoperability for Microwave Access)

LTE (Long Term Evolution) VoLTE (Voice Over LTE)

• 4.5G

LTE-A (LTE Advanced)

• 5G

Cellular Telephony Network

CELL

❖ LARGER AREA DIVIDED


INTO SMALL NO. OF AREAS

❖ SHAPE IS HEXAGONAL

❖ EACH WITH ITS OWN


BASE STATION AND SET OF
FREQUENCIES.

Prepared by: Ms. M. S. Karande Wireless and Mobile Networks (Sub Code: 22622) Pg 2/ 39
GSM

Downlink

• Base Station (BTS –Base Transceiver Station)

• A fixed station in a mobile radio system used for radio communication with mobile
stations. Base stations are located at the center or on the edge of a coverage region
and consist of radio channels and transmitter and receiver antennas mounted on a
tower.

1.1. Personal Communication Service(PCS)


• The term Personal Communication Service (enabling communication with a person at
anytime, at any place, and in any form) include Various Wireless Access and Personal
Mobility Services.
• PCS is a wireless phone service similar to cellular
telephone service emphasizing personal service with extended mobility (more no of
antennas to assist mobility)
• PCS provides the user with an all-in-one wireless phone, paging, messaging, and data
service
• TDMA,CDMA and GSM along with 2G,3G and 4G are some technologies used for PCS

Application of PCS
1. Voice Communication
2. Messaging
3. Internet access
4. Location based services

Prepared by: Ms. M. S. Karande Wireless and Mobile Networks (Sub Code: 22622) Pg 3/ 39
PCS Architecture

• The PCS Network Architecture is a communication network structure in which


components communicate with one another to establish wireless communication.

• The PCS Network Architecture is divided into two sections:

• Radio Network

• Wireline Transport Network

Radio Network
• The radio network connects Mobile Stations (MS) and other network components via a
wireless network.

• MS connect with one another via the radio network's Base Stations (BS).

• The radio link protocols are handled by the BS in a radio network during
communication.

• Protocols are a collection of rules that must be followed to establish a connection.

• A cell is a radio coverage region that each BS in a radio network has.

• MS can converse with one another both inside and outside the cell.

• The BSC serves as a link between the radio network's BTS and the Wireline Transport
network's MSC

Prepared by: Ms. M. S. Karande Wireless and Mobile Networks (Sub Code: 22622) Pg 4/ 39
Wireline Transport Network
• The Base Station Controller (BSC) in the Radio Network interfaces with the Mobile
Switching Center (MSC) in the Wireline Transport Network.

• To provide wireline customers with communication services, MSC connects to the


Public Switch Telephone Network (PSTN).

• MSC also communicates with a mobility database, which keeps track of where moving
devices are in the architecture.

1.2. Global System for Mobile Communications


• The Global System for Mobile Communications (GSM) is a standard developed by the
European Telecommunications Standards Institute (ETSI) to describe the protocols
for second-generation (2G) digital cellular telephone network (known as a Public
Land Mobile Network, or PLMN) used by mobile devices such as mobile phones and
tablets.

Global System for Mobile (GSM) is a second generation cellular standard developed to
cater voice services and data delivery using digital modulation

GSM Architecture

Prepared by: Ms. M. S. Karande Wireless and Mobile Networks (Sub Code: 22622) Pg 5/ 39
Interfaces in GSM

Prepared by: Ms. M. S. Karande Wireless and Mobile Networks (Sub Code: 22622) Pg 6/ 39
Interfaces used for GSM network : (ref fig 2)
1)UM Interface –Used to communicate between BTS with MS
2)Abis Interface— Used to communicate BSC TO BTS
3)A Interface-- Used to communicate BSC and MSC
4)Singling protocol (SS7)- Used to communicate MSC with other network .

GSM network layout

GSM network areas

In a GSM network, the following areas are defined −

Prepared by: Ms. M. S. Karande Wireless and Mobile Networks (Sub Code: 22622) Pg 7/ 39
• Cell − Cell is the basic service area; one BTS covers one cell. Each cell is given a Cell
Global Identity (CGI), a number that uniquely identifies the cell.

• Location Area − A group of cells form a Location Area (LA). This is the area that is
paged when a subscriber gets an incoming call. Each LA is assigned a Location Area
Identity (LAI). Each LA is served by one or more BSCs.

• MSC/VLR Service Area − The area covered by one MSC is called the MSC/VLR
service area.

• PLMN − The area covered by one network operator is called the Public Land Mobile
Network (PLMN). A PLMN can contain one or more MSCs.

GSM Architecture
• GSM system consists of three major components:

1. Base Station System (BSS):


MS, Base Transceiver Station (BTS) Base Station Controller (BSC)

2. Network and Switching Subsystem (NSS)


Mobile Switching Center (MSC) Home Location Register (HLR) Visitor Location
Register (VLR)Authentication Center (AUC) Equipment Identity Register (EIR).

3. Operation Support Subsystem(OSS)


Operation and Maintenance Center (OMC)

1. Base Station System (BSS):


Base Station Subsystem is composed of parts that communicate across the
standardized Abis interface allowing operation between components made by different
suppliers.

This system consists of

i. Mobile Station (MS)


ii. Base Transceiver Station (BTS)
iii. Base Station Controller (BSC)
Mobile Station (MS)
The Mobile Station is made up of two entities:

1. Mobile Equipment (ME)

2. Subscriber Identity Module (SIM)

Prepared by: Ms. M. S. Karande Wireless and Mobile Networks (Sub Code: 22622) Pg 8/ 39
The ME is the only part of the GSM network which the subscriber will really see.

There are three main types of ME, these are listed below:

1. Vehicle Mounted

2. Portable Mobile Unit

3. Hand portable Unit

Subscriber Identity Module(SIM)

• The SIM is a card which plugs into the ME. The SIM contains several pieces of
information:

1. International Mobile Subscribers Identity(IMSI) –

– This number identifies the mobile subscriber. It uniquely identifies a given MS.

2. Temporary Mobile Subscriber Identity ( TMSI ) –

– It is an temporary identity that is allocated to an MS by the VLR when it is in roaming


and it is on temporary basis

– It is an alias of the IMSI and is used in its place for privacy

3. Location Area Identity ( LAI ) -

– Each LA in a PLMN has its own identifier.

– Identifies the current location of the subscriber.

• The SIM is a card which plugs into the ME. The SIM contains several pieces of
information:

4. Subscribers Authentication Key ( Ki ) –

– This is used to authenticate the SIM card.

5. Mobile Station International Standard Data Number ( MSISDN ) –

This is the telephone number of the mobile

Base Transreceiver Station (BTS):


• It is connected to MS via Um interface and it is also connected to BSC via the Abis
interface.

• The Um interface contains all mechanism for wireless interface (TDMA, FDMA etc.).

Prepared by: Ms. M. S. Karande Wireless and Mobile Networks (Sub Code: 22622) Pg 9/ 39
• The BTS is a radio equipment (transreceiver or antenna) needed to service each cell in
the network.

• Encodes, encrypts, multiplexes, modulates and feeds the RF signals to the antenna.

• Decoding, decrypting, and equalizing received signals

• Communicates with Mobile station and BSC

Base Station Controller (BSC)


• BSC provides all the control functions and physical link between MSC and BTS.

• BSC handles:

– Channel allocation for the duration of call

– Maintains the call

– Monitor Quality

– Handoffs

– Control the power transmitted by BTS or MS

– Control of frequency hopping

2. Network and Switching Subsystem (NSS):

NSS is responsible for performing call processing and subscriber related functions.

It also includes:

Mobile Switching Center (MSC)


Home Location Register (HLR)
Visitor Location Register (VLR)
Authentication Center (AUC)
Equipment Identity Register (EIR) etc
Mobile Switching Center (MSC)
• Heart of the network

• Manages communication between

GSM and other networks

• When provides interface between PSTN & BSS in GSM network then known as a

Prepared by: Ms. M. S. Karande Wireless and Mobile Networks (Sub Code: 22622) Pg 10/ 39
Gateway MSC(GMSC)

• Mobility management

- Registration

- Location Updating

- Inter BSS and inter MSC call handoff

• Billing information and collection

Home Location Register (HLR)


• It is a database for managing the mobile subscriber.

• HLR stores permanent data of subscriber which include subscribers service profile,
prepaid/postpaid, roaming restrictions ,supplementary services, location information and
its activity.

A home subscriber charges are less than the roaming subscriber

• Home location register (HLR) is a database used for mobile user information
management. All permanent subscriber data are stored in this database.

• An HLR record consists of 3 types of information:

1. Mobile station information

– IMSI used by MS to access network

– MSISDN

2. Location information

– Address of VLR and MSC where MS resides

3. Service information

– Service subscription

– Service restrictions

– Supplementary services

Visitor Location Register (VLR)


• The VLR is a database that contains temporary information about subscribers that is
needed by the MSC in order to service visiting subscribers

• The VLR is always integrated with the MSC

Prepared by: Ms. M. S. Karande Wireless and Mobile Networks (Sub Code: 22622) Pg 11/ 39
• When a mobile station roams into a new MSC area, the VLR connected to that MSC will
request data about the mobile station from the HLR.

• Later, if the mobile station makes a call, the VLR will have the information needed for
call setup without having to interrogate the HLR each time

• Assigns a TMSI to each MS entering the VLR area which keeps on changing.

• VLR information consists of 3 parts:

1. Mobile station information

– IMSI

– MSISDN

– TMSI

2. Location information

– MSC number

– Location area ID (LAI)

3. Service information

– Subset of the service information stored in the HLR

Equipment Identity Register

• International Mobile Station Equipment Identity (IMEI)

It is similar to a serial number. It is allocated by equipment manufacturer, registered by


network, and stored in EIR

• This database that contains information about the identity of mobile equipment that
prevents calls from stolen, unauthorized or defective mobile stations

• The EIR contains a centralized database for validating the IMEI.

• This database is concerned solely with MS equipment and not with the subscriber who
is using it to make or receive a call.

• The EIR database consists of lists of IMEIs (or ranges of IMEIs) organized as follows:

1. White IMEI: All known IMEI.

2. Black IMEI: All stolen mobile handset.

3. Gray IMEI: Handset that is uncertain

Prepared by: Ms. M. S. Karande Wireless and Mobile Networks (Sub Code: 22622) Pg 12/ 39
Authentication Center (AUC)
• The AuC is a processor system that performs the “authentication” function

• AUC provides authentication and encryption parameters to verify the users identity &
ensure the confidentiality of each call.

• Contains the algorithms for authentication as well as the keys for encryption.

• Protects network operators from fraud.

• It is normally co-located with the HLR as it will be required to continuously access and
update, as necessary, the system subscriber records.

• The authentication process will usually take place each time the subscriber “initializes”
on

(iii) Operation Support Subsystem(OSS)


Operation and Maintenance Center (OMC):
• OMC is connected to all equipments in switching system and to the BSC.

• It maintains operation of the GSM network by observing the handovers, system load,
blocking rates etc.

• OMC provides network overview and allow network engineers to monitor, diagnose and
troubleshoot every aspect of GSM network.

Features of GSM
• Improved spectrum efficiency

• International roaming

• Low-cost mobile sets and base stations (BSs)

• High-quality speech

• Compatibility with Integrated Services Digital Network (ISDN) and other telephone
company services

• Support for new services

• In GSM terminology, telecommunication services are divided into three broad


categories:

• GSM Services

Prepared by: Ms. M. S. Karande Wireless and Mobile Networks (Sub Code: 22622) Pg 13/ 39
1. Bearer services
2. Teleservices
3. Supplementary Services
1. Bearer services are also called as Data services.

• GSM allowing for data rates of up to 9600 bit/s or 9.6 kbps for non-voice services

• Include various data services for information transfer between GSM and other networks
like PSTN, ISDN etc at rates from 300 to 9600 bps or 9.6 kbps

2. Teleservices are telecommunication services that enable voice


communication via mobile phones

3. Offered services

1. Mobile telephony

2. Emergency calling

3. Videotext and Facsimile

4. Short Text messages

3. Supplementary services are additional services that are provided in addition to


teleservices and bearer services.

These services include

• Multiparty Service/Conferencing

• Call Waiting

• Call Hold

• Call Forwarding

• Call Barring

• Calling Line Identification

• Advice of Charge (AoC)

• Closed User Groups (CUGs)

• Supplementary services are additional services that are provided in addition to


teleservices and bearer services.

• These services include −

Prepared by: Ms. M. S. Karande Wireless and Mobile Networks (Sub Code: 22622) Pg 14/ 39
1. Conferencing − It allows a mobile subscriber to establish a multiparty conversation,
i.e., a simultaneous conversation between three or more subscribers to setup a
conference call. This service is only applicable to normal telephony.

2. Call Waiting − This service notifies a mobile subscriber of an incoming call during a
conversation. The subscriber can answer, reject, or ignore the incoming call.

3. Call Hold − This service allows a subscriber to put an incoming call on hold and resume
after a while. The call hold service is applicable to normal telephony.

4. Call Forwarding − Call Forwarding is used to divert calls from the original recipient to
another number. It is normally set up by the subscriber himself. It can be used by the
subscriber to divert calls from the Mobile Station when the subscriber is not available,
and so to ensure that calls are not lost.

5. Call Barring − Call Barring is useful to restrict certain types of outgoing calls such as
ISD or stop incoming calls from undesired numbers. Call barring is a flexible service that
enables the subscriber to conditionally bar calls.

6. Calling Line Identification Presentation − This service displays the telephone number
of the calling party on your screen.

7. Advice of Charge (AoC) − This service was designed to give the subscriber an
indication of the cost of the services as they are used. Furthermore, those service
providers who wish to offer rental services to subscribers without their own SIM can also
utilize this service in a slightly different form. AoC for data calls is provided on the basis
of time measurements.

8. Closed User Groups (CUGs) − This service is meant for groups of subscribers who
wish to call only each other and no one else.

GSM Frequency Spectrum


The GSM standard operates on three different frequencies which are as follows:

1. 900 MHz: It was used by the original GSM system.

2. 1800 MHz: It was used to support the growing number of subscribers.

3. 1900 MHz: It is mainly used in the US.

1. GSM 900:

• 890-915 MHz UPLINK

• 935-960MHz DOWNLINK

Prepared by: Ms. M. S. Karande Wireless and Mobile Networks (Sub Code: 22622) Pg 15/ 39
2.GSM 1800:

• 1710-1785 MHz UPLINK

• 1805-1880 MHz DOWNLINK

3. GSM 1900:

• 1850-1910 MHz UPLINK

• 1930-1990 MHz DOWNLINK

Prepared by: Ms. M. S. Karande Wireless and Mobile Networks (Sub Code: 22622) Pg 16/ 39
GSM Radio Aspects
• GSM utilizes two bands of 25 MHz which have been set aside for system use in all
member countries

• Two frequency bands 45 MHz apart have been reserved for GSM

– 890-915 MHz for uplink (mobile-to-base) frequency

– 935-960 MHz for downlink (base-to-mobile)

• The GSM uses time division multiple access (TDMA) and frequency division multiple
access (FDMA)

• Each of these bands of 25 MHz spectrum is subdivided into 124 carriers ( with no guard
band) of 200 kHz. This 200 kHz band is called ARFCNs(Absolute Radio Frequency
Channel Number)

• Each carrier in turn is divided into 8 time slots ( radio channels ).

• Each user transmits periodically in every eighth time slot in an uplink radio carrier &
receives a corresponding time slot on the downlink carrier.

• Thus, several conversations can take place simultaneously at the same pair of
transmit/receive radio frequencies.

• In each uplink/downlink bands there exists a guard band of 200 KHz

Prepared by: Ms. M. S. Karande Wireless and Mobile Networks (Sub Code: 22622) Pg 17/ 39
Each of these bands of 25 MHz is subdivided into 124 single carrier channels of
200 KHz band is called ARFCNs(Absolute Radio Frequency Channel Number

System Parameter Value (GSM)

Multiple Access TDMA/FDMA

Uplink frequency (mobile-to-base) 890-915 MHz

Downlink frequency (base-to-mobile) 935-960 MHz


Channel Bandwidth 200KHz

Number of channels 124

Users per Frame(Full Rate) 8

Frame duration 4.615 ms

Interleaving duration 40 ms

Modulation 0.3 GMSK

ARFCN Number 0 to 124 and 975 to 1023

Modulation Data Rate 270.833333 kbps


Time slot period 576.9 µs
Bit period 3.692 µs

Tx/Rx Frequency spacing 45 MHz


Tx/Rx Time slot spacing 3 Time slots

Prepared by: Ms. M. S. Karande Wireless and Mobile Networks (Sub Code: 22622) Pg 18/ 39
GSM CHANNELS
1. Physical channel –
Each timeslot on a carrier is referred to as a physical channel.

Per carrier there are 8 physical channels.

2. Logical channel –
Variety of information is transmitted between the MS and BTS. There are different
logical channels depending on the information sent. The logical channels are of two
types

i. Traffic channel
ii. Control channel
2. Logical channels (GSM)

BCH Channels( Broadcast channels)


1. BCCH( Broadcast Control Channel )
• Downlink only

• Broadcasts general information of the serving cell called System Information

• BCCH is transmitted on timeslot zero of BCCH carrier

Prepared by: Ms. M. S. Karande Wireless and Mobile Networks (Sub Code: 22622) Pg 19/ 39
• Read only by idle mobile at least once every 30 secs.

2. SCH( Synchronisation Channel )


• Downlink only

• Carries information for frame synchronisation. Contains TDMA frame number


and BSIC.

3.FCCH( Frequency Correction Channel )


• Downlink only.

• Enables MS to synchronise to the frequency.

Also helps mobiles of the n cells to locate TS0 of BCCH carrier

CCCH Channels(Common Control Channels)


1.RACH( Random Access Channel )
Uplink only

Used by the MS to access the Network.

2.AGCH( Access Grant Channel )


Downlink only

Used by the network to assign a signaling channel upon successful decoding of access
bursts.

3.PCH( Paging Channel )


Downlink only.

Used by the Network to contact the MS.

DCCH Channels(Dedicated Channels)


1.SDCCH( Standalone Dedicated Control Channel )
• Uplink and Downlink

• Used for call setup, location update and SMS.

2. SACCH( Slow Associated Control Channel )


• Used on Uplink and Downlink only in dedicated mode.

• Uplink SACCH messages - Measurement reports.

• Downlink SACCH messages - control info.

Prepared by: Ms. M. S. Karande Wireless and Mobile Networks (Sub Code: 22622) Pg 20/ 39
3. FACCH( Fast Associated Control Channel )
• Uplink and Downlink.

• Associated with TCH only.

• Is used to send fast messages like handover messages.

Works by stealing traffic bursts.

CALL PROCESSING IN GSM


• Once a Mobile Station initiates a call, a series of events takes place. Analyzing these
events can give an insight into the operation of the GSM system.

Following different types of call flow in GSM

• Mobile Phone to Public Switched Telephone Network (PSTN) – Mobile Call


Origination

• PSTN to Mobile Phone- Mobile Call Termination

• Mobile Phone to Mobile Phone

Mobile Call origination

1. The MS sends the dialed number indicating service requested to the MSC(via BSS)

Prepared by: Ms. M. S. Karande Wireless and Mobile Networks (Sub Code: 22622) Pg 21/ 39
2. The MSC checks from the VLR if the MS is allowed the requested service. If so, MSC
asks BSS to allocate necessary resources for the call.

3. If the call is allowed, the MSC routes the call to GMSC.

4. The GMSC routes the call to the local exchange of called user.

5. The LE alerts (applies ringing) the called terminal.

6. Answer back (ring back tone) from the called terminal to LE.

7. Answer back signal is routed back to the MS through the serving MSC which also
completes the speech path to the MS.

Mobile Call Termination

1. The PSTN user dials the MSISDN of the called user in GSM.

2. The LE routes the call to the GMSC of the called GSM user.

3. The GMSC uses the dialed MSISDN to determine the serving HLR for the GSM user
and interrogates it to obtain the required routing number.

4. The HLR requests the current serving VLR for the called MS for a MSRN(MS roaming
number) so that the call can be routed to the correct MSC.

5. The VLR passes the MSRN to the HLR.

Prepared by: Ms. M. S. Karande Wireless and Mobile Networks (Sub Code: 22622) Pg 22/ 39
6. The HLR passes the MSRN to the GMSC.

7. Using the MSRN, the GMSC routes the call to the serving MSC.

8. The MSC interrogates the VLR for the current location area identity (LAI) for the MS.

9. The VLR provides the current location for the MS.

10. The MSC pages MS via the appropriate BSS. The MS responds to the page and sets
up the necessary signaling links.

11. When the BSS has established the necessary radio links, the MSC is informed an the
call is delivered to the MS.

12. When the MS answers the call, the connection is completed to the calling PSTN user.

1.3. MOBILITY MANAGEMENT (MM)


• Mobility Management is categorized into 4 sections:

• Paging

• Location Update

• Handoff Mechanism

Roaming

Paging
• Paging is one to one communication between mobile and base station

• Paging is procedure that network used to find

Subscriber's location before actual call establishment.

• Paging is used to alert mobile station of incoming call.

• Paging is done by NSS (network subsystem) and it is based of location registration


information.

Roaming
• Roaming is the ability for a customer of mobile communications to automatically make
and receive telephone calls, send and receive data, or access other services while
travelling outside the geographical coverage area of the home network, by means of
using a network of another operator.

• Roaming can be either national roaming or international roaming.

Prepared by: Ms. M. S. Karande Wireless and Mobile Networks (Sub Code: 22622) Pg 23/ 39
• National roaming means that mobile subscribers make use of another network in
geographical areas, where their own operator does not have coverage.

• This is, for example, used by operators, who do not have complete coverage in a
country.

• International roaming is used when mobile subscribers travel abroad and make use of
the network of an operator in the foreign country

How Roaming is Performed

• If a service provider does not have a network coverage in a particular city or country,
then this service provider makes a roaming agreement with another service provider
having network in that city or country.

• As per this agreement, another service provider provides all the available services to
the roaming customer of first service provider.

• CDRs(Call Detail Records) generated in one roaming partner's area are collected and
rated by that roaming partner and finally they are sent to the actual service provider of
the roaming customer. Actual service provider charges the end customer for all the
roaming services provided based on their predefined service charges.

• Two roaming partners settle their financials on monthly basis by exchanging actual
roaming CDRs and reports based on those CDRs.

Handoff
• Handoff (or handover) is a control process initiated when a mobile moves from its
current cell to its neighboring cell.

• A user of a mobile phone will be moving continuously. In such a situation, the mobile
connection should also remain intact especially if the user is currently using the phone.

This transfer of connection from one cell to another should be quick and in such a
manner that user doesn’t actually realize that a handoff has happened

Why Handovers Required

➢ For Seamless mobility / connectivity to prevent call drop.

➢ If the traffic in the cell increases handovers may be required

➢ When mobile node move away from cell centre(tower/ BTS) towards cell edge, signal
level dropped. This can be continuously transferred through Measurement Reports to
BTS.

Prepared by: Ms. M. S. Karande Wireless and Mobile Networks (Sub Code: 22622) Pg 24/ 39
Hard Hand-Off

Soft Hand-Off

Intra-BTS Handover
1. Intra-cell handover:

Such a kind of handover is performed to optimize the traffic load in the cell or to
improve quality of a connection by changing carrier frequency.

Prepared by: Ms. M. S. Karande Wireless and Mobile Networks (Sub Code: 22622) Pg 25/ 39
1. Intra-BTS handover

2. Inter-BTS/Intra-BSC handover

3. Inter-BSC handover

4. Inter-MSC handover

2. Inter-cell handover:

• It is also known as Intra-BSC handover.

• Here the mobile moves from one cell to another but remains within the same BSC

• Here the BSC handles the handover process

3. Inter-BSC handover:
• It is also called as Intra-MSC handover.

Prepared by: Ms. M. S. Karande Wireless and Mobile Networks (Sub Code: 22622) Pg 26/ 39
• As BSC can control only a limited number of cells, we might usually need to
transfer a mobile from one BSC to another BSC.

Here the MSC handles the handover process

4. Inter-MSC handover:
• It occurs when a mobile moves from one MSC region to another MSC.

• MSC cover a large area.

It can be imagined as a handover from Maharashtra MSC to Gujarat MSC while


travelling

Prepared by: Ms. M. S. Karande Wireless and Mobile Networks (Sub Code: 22622) Pg 27/ 39
• Hard Handoff − In a hard handoff, an actual break in the connection occurs while
switching from one cell to another.

• The radio links from the mobile station to the existing cell is broken before establishing a
link with the next cell. It is generally an inter-frequency handoff.

• It is a “break before make” policy.

• Eg GSM

• Soft Handoff −

• In soft handoff, at least one of the links is kept when radio links are added and removed
to the mobile station.

• This ensures that during the handoff, no break occurs. This is generally adopted in co-
located sites.

• It is a “make before break” policy.

• Eg CDMA

GSM security
• Authentication (used for billing purposes)

• Confidentiality

• Anonymity ( used to identify users)

• Security services

ACCESS CONTROL/AUTHENTICATION
• user SIM (Subscriber Identity Module): secret PIN (personal identification
number)

• SIM network: challenge response method

CONFIDENTIALITY
• voice and signaling encrypted on the wireless link (after successful
authentication)

ANONYMITY
• temporary identity TMSI
(Temporary Mobile Subscriber Identity)

• newly assigned at each new location update (LUP)

Prepared by: Ms. M. S. Karande Wireless and Mobile Networks (Sub Code: 22622) Pg 28/ 39
• encrypted transmission

3 algorithms specified in GSM


• A3 for authentication (“secret”, open interface)

• A5 for encryption (standardized)

• A8 for key generation (“secret”, open interface)

GSM – Authentication

• Authentication is a process of exchanging information between a communications


device and the mobile network which allows the carrier or network operator to confirm
the true identity of the user (or device).

• This validation of the authenticity of the user or device allows a service provider to deny
service to users that cannot be identified.

• The authentication algorithm (A3) used in the GSM system is contained


in the subscriber identity module - SIM - card. The GSM authentication process can use
different versions of authentication.

• The GSM authentication process starts with the transmission of a random


number (RAND) from the base station.

Prepared by: Ms. M. S. Karande Wireless and Mobile Networks (Sub Code: 22622) Pg 29/ 39
• As part of a typical authentication process, a random number that changes periodically
(RAND) is sent from the base station.

• This number is regularly received and temporarily stored by the mobile radio.

• The secret number Ki is stored in both the mobile telephone and GSM system and it
is not transmitted over the radio link.

• This random number is used, along with other information including the secret data
value (Ki), to calculate a signed response (SRES).

• The authentication response is sent back to the system to validate the mobile radio.

• The system processes the same information to create its own authentication response.

• When the GSM system performs the authentication process, it compares the SRES it
calculates to the SRES returned by the mobile telephone.

• If both SRESs authentication responses match, service may be provided, the GSM
system allows call processing to continue.

GSM location Update


What is GSM Location update? (2M Explanation)

Location Area (LA):

• A GSM network is divided into cells.

• A group of cells is considered a location area.

• A mobile phone in motion keeps the network informed about changes in the location
area.

• If the mobile moves from a cell in one location area to a cell in another location area, the
mobile phone should perform a location area update to inform the network about the
exact location of the mobile phone.

• GSM "location update" is a part of registration.

• GSM networks keep track of the location area (LA) where the MS is operating.

• When receiving an incoming call, the MS is paged in all cell of its current location area.

When it occurred: (2M Explanation)

• The Location Update procedure is performed:

1. Updating on entering a new location Area:

Prepared by: Ms. M. S. Karande Wireless and Mobile Networks (Sub Code: 22622) Pg 30/ 39
• The Location Area Identity (LAI) is broadcast in system information message and stored
in mobile station memory.

• When a new received location area identity does not match with the previously stored
location area identity, then MS does a location update.

2. Periodic update:

• Whenever MS performs location update, it resets timer T.

• A timer has timeout value.

• As and when the timer expires, the MS does the location update.

3. Updating on deactivation and activation:

• Mobile equipment do this update and send IMSI DETACH message when it is
deactivated.

• The network marks that MS as a deactivated and does not send paging message to for
MS until it is activated again.

• MS send IMSI ATTACH message does a location update when it is activated again.

GSM location Update

Prepared by: Ms. M. S. Karande Wireless and Mobile Networks (Sub Code: 22622) Pg 31/ 39
1. MS sends location update to new VLR

2. VLR sends location update msg to HLR with address of new VLR and IMSI of MS

3. Service and security related data for MS is downloaded to new VLR

4. MS is sent acknowledgment of successful update

5. HLR request old VLR to delete data relating to relocated MS

Type Of Areas In GSM


There are three of area in GSM:

1.Location area

2.Routing area

3.Tracking area

1.Location Area
• A "location area" is a set of base stations that are grouped together to optimize
signaling

• Typically, tens or even hundreds of base stations share a single Base Station
Controller (BSC) in GSM.

• A location area is controlled by one or more BSCs, but only by one MSC.

• Each location area has an assigned unique identifier, made up of numbers, called a
"location area code" (LAC).

• The LAC is broadcast by each base station at regular intervals.

• Within a location area, each base station is assigned a distinct "cell identifier" (CI)
number

Prepared by: Ms. M. S. Karande Wireless and Mobile Networks (Sub Code: 22622) Pg 32/ 39
2.Routing Area
• The routing area is the packet-switched domain
equivalent of the location area.

• A "routing area" is normally a subdivision of a


"location area".

• Routing areas are used by mobiles which are


GPRS-attached.

3. Tracking Area
• A tracking area is a set of cells

• The tracking area is the LTE counterpart of the location area and routing area.

Prepared by: Ms. M. S. Karande Wireless and Mobile Networks (Sub Code: 22622) Pg 33/ 39
1.4. Network Signaling

Databases
– VLR (visitor location register)

– HLR (home location register)

– AuC (authentication center)

– EIR (equipment identity register)

• Used to maintain a list of legitimate, fraudulent, or faulty mobile


stations

• Works with HLR to block calls from illegitimate MS

Switches
– MSC (mobile switching center)

– GMSC (gateway MSC)

– SSP (service switching point)

Prepared by: Ms. M. S. Karande Wireless and Mobile Networks (Sub Code: 22622) Pg 34/ 39
Radio systems
– BSC (base station controller)

– BTS (base transceiver station)

– MS (mobile station)

The figure shows various network signaling protocols used by the entity interfaces in
GSM

• The software platform for implementing GSM network signaling protocol is GSM
MAP(Mobile Application Part)

• GSM MAP is used in B,C,D,E,F,G interfaces

• In terms of Network signaling, the GSM architecture can be partitioned into 3 parts

1. Databases 2. Switches 3. Radio System


1. Databases:
• GSM utilizes databases such as HLR, VLR and AuC.

• It also consists of EIR which is used to maintain a list of legitimate , fraudulent mobile
station(faulty)

• EIR is optional in GSM. AuC/EIR is a combined Node

• To accomplish mobility management, VLRs communicate using G interface and HLR to


VLR using D interface

2. Switches :
• The GMSC performs necessary switching functions for mobile stations within the
geographical area it controls.

• An MSC area is partitioned into several location areas. Each LA consists of many BTS.
For originating a call from MS to a wireline user , the MSC communicates with SSP in
the PSTN using SS7ISUP protocol

• To deliver a call from PSTN to MS, the originating SSP in PSTN with Gateway MSC
using SS&ISUP protocol

• In Intersystem Handoff, 2 MSCs are required to communicate through E interface

• To perform Mobility and call handling tasks, the MSC needs to communicate with HLR
using the C interface and with VLR using B interface

• To prevent Fraudulent handset usage, MSC communicates with EIR using F interface

Prepared by: Ms. M. S. Karande Wireless and Mobile Networks (Sub Code: 22622) Pg 35/ 39
3. Radio system
It consists of BSc, BTS and MS.

The BSCs connect to MSC through A interface.

BSC connects to BTS through A-Bis interface using ISDN link access protocol for D
channel(LAPD).

A BTS communicates with MS through radio interface Um

• Um – MS to BTS

• Abis – BTS-BSC

• A – BSC- GMSC

• B – GMSC-VLR

• C - GMSC-HLR

• D – VLR-HLR

• E – MSC-GMSC

• F - GMSC-EIR

• G - VLR-VLR

• H – HLR-AUC

Um

• The air interface is used for exchanges between a MS and a BSS.

Prepared by: Ms. M. S. Karande Wireless and Mobile Networks (Sub Code: 22622) Pg 36/ 39
• LAPDm, a modified version of the ISDN LAPD, is used for signalling.

Abis

• This is a BSS internal interface linking the BSC and a BTS, and it has not been
standardised.

• The Abis interface allows control of the radio equipment and radio frequency allocation
in the BTS.

• The A interface is between the BSS and the MSC.

• The A interface manages the allocation of suitable radio resources to the MSs and
mobility management.

• The Mobile Application Part (MAP) is an SS7 protocol that provides an application layer
for the various nodes in GSM and UMTS mobile core networks and GPRS core
networks to communicate with each other in order to provide services to users.

• The B interface between the MSC and the VLR uses the MAP/B protocol.

• Most MSCs are associated with a VLR, making the B interface "internal". Whenever the
MSC needs access to data regarding a MS located in its area, it interrogates the VLR
using the MAP/B protocol over the B interface

• The C interface is between the HLR and a GMSC.

• Each call originating outside of GSM (i.e., a MS terminating call from the PSTN) has to
go through a Gateway to obtain the routing information required to complete the call,
and the MAP/C protocol over the C interface is used for this purpose.

• Also, the MSC may optionally forward billing information to the HLR after call clearing

• The D interface is between the VLR and HLR, and uses the MAP/D protocol to
exchange the data related to the location of the MS and to the management of the
subscriber.

• The E interface interconnects two MSCs.

Prepared by: Ms. M. S. Karande Wireless and Mobile Networks (Sub Code: 22622) Pg 37/ 39
• The E interface exchanges data related to handover between the anchor and relay
MSCs using the MAP/E protocol.

• The F interface connects the MSC to the EIR, and uses the MAP/F protocol to verify the
status of the IMEI that the MSC has retrieved from the MS.

• The G interface interconnects two VLRs of different MSCs and uses the MAP/G
protocol to transfer subscriber information, during e.g. a location update procedure.

• The H interface is between the MSC and the AUC, and uses the MAP/H protocol to
support the transfer of short messages.

• The I interface can be found between the MSC and the ME. Messages exchanged over
the I interface are relayed transparently through the BSS.

MSBTE QUESTIONS
1. Enlist two application of personal communication services. (l -R)

2. Enlist any four GSM Services. (I-R)

3. Draw the architecture of GSM and explain function of each block. (l -U)

4. Explain authentication process in GSM.

5. Write the function for temporary identity subscriber.

6. Draw GSM architecture

7. List the supplementary services offered in GSM.

8. List any two functions of HLR and VLR.

9. Describe call processing in GSM.

10. Draw GSM architecture and list the logical channels in GSM.

11. Define the term:

i) Routing area ii) Location area iii) Tracking area

Prepared by: Ms. M. S. Karande Wireless and Mobile Networks (Sub Code: 22622) Pg 38/ 39
12. Draw the block diagram of the architecture of PCS (Personal Communication Services)
and explain.

13. Explain the Network signalling and radio interfaces in GSM (6M)

14. Enlist any two GSM services

15. Describe the mobile originated call in GSM with neat diagram.

16. Explain various types of Handoffs

17. Explain the various interfaces used in GSM.

18. What is GSM Location update? When it occurs?

Prepared by: Ms. M. S. Karande Wireless and Mobile Networks (Sub Code: 22622) Pg 39/ 39

You might also like