ECE ELECTIVE 3

GSM Features
Engr. Arlon G. Calma, PECE, CLSSYB
 CHARGING

Installation
Fee
Renting of the
service

Use of the
network

What to charge? Different charging

packages
 CHARGING
Factors affecting the price of the call
• Type of basic service
• Duration of the call
• Time of the call
• Destination of the call
• Origin of the Call
• Use of Networks
• Type of the supplementary service
• Use of radio resource
• Roaming leg
 Collection of Charging Data
▪ Charging depends on many factors
▪ The MSC to which handles the call collects all
information which could be the basis for charging
▪ This collected information of the call is stored in
Charging Data Records (CDR)

PSTN BSC
GMSC

CDR
HLR
 Transfer of Charging Data
▪ Charging data records are stored in the MSC where they are collected.
▪ CDRs must be kept at the first MSC which manages the call.
▪ When sufficient charging data records have been collected, they are
transferred in one bulk to the Billing Center.
▪ Billing Center is responsible for producing the bills for the subscribers
based on the information contained in the Charging Data Record

PSTN BSC
GMSC

X.25 or
Ethern Billing Center
et
HLR
 PREPAID CHARGING

smsc

PSTN BSC
MSC

PREPAID
SERVERS
HLR ▪ Account Balance
stored in ORACLE
▪Prepaid tells how
ORACLE
much to deduct
PROVISIONING ▪SMS Transactions
SERVER are also charged
 Security
Authentication
Verification of the subscriber
Ciphering
Encryption of the user speech in the Air
Interface
IMEI Checking
Verification of the Mobile Equipment by
checking the validity of the International
Mobile Equipment Identity (IMEI)
User Confidentiality
Avoidance of the broadcast of user’s IMSI
in the air interface
 Authentication

❖ Each subscriber has authentication

keys, Ki, stored in the Authentication
center and SIM card.
❖ Comparison of Ki without
broadcasting it in the air interface
❖ Authentication always performed
by the VLR before call establishment
and location update.
Location of Security Algorithm
Air A

BSS NSS AC
BSC TC A3 A8

BTS MSC

VLR

A5
ME +
SIM

A5 A3 A8
 IMEI Checking
❖ The validity of a mobile phone may be checked to ensure its proper
operation as well as presentation against stolen phones.
❖ The Equipment Identity Register, which is implemented as part of
the HLR, contains 3 listing of IMEI
- White List
- Gray List
- Black List

IMEI = TAC(6) + FAC(2) + SNR(6) + SP(1)

❖ TAC = Type Approval Code, Identifies the mobile equipment

❖ FAC = Final Assembly Code, Identifies which assembly series the mobile
belongs
❖ SNR = Serial Number, Identifies the mobile uniquely as one assembly series
❖ SP = Spare, For future use
User Confidentiality

❖ IMSI is a confidential identity of

the subscriber.
❖ After a successful first time
location update, a mobile
subscriber is allocated a Temporary
Mobile Subscriber Identity (TMSI)
❖ The next time a transaction
between the GSM network and the
MS is initiated, the subscriber is
identified by the use of TMSI.
 GSM Security Management
AC VLR BTS Air Interface ME SIM

RAND

SRES Authentication SRES

Ki A3 COMPARING A3 Ki

Request of IMEI
EIR IMEI Checking ME
Provide IMEI

Traffic Traffic
Ciphering
Kc Kc
A8 A5 EncryptedData
Encrypted Data A5 A8
TDMA FN TDMA FN
Authentication Triplet Generation

Random Number
Generator Ki

AC A3 A8

RAND SRES Kc

Authentication Triplets

RAND SRES Kc
VLR Authentication Triplets
 Services
What are services?

A subscriber’s action Services

which uses the

facilities of the GSM Basic Services Supplementary

network
Services

Teleservices Bearer
Services
 Classification of services

Teleservices: These services Teleservice

provide the subscriber with

necessary capabilities including Bearer Service
terminal equipment functions to
communicate with other
subscribers.
TE GSM Transit End TE
Bearer services:A bearer service Network Network Network

offer the basic technical

capability for transmission of
binary data between end to end
terminals.
Teleservices
Service Description GSM Specification Characteristics
Code

Speech (Telephony) T11 The most important service for

mobile systems, normal speech
service, including emergency calls

Speech (Emergency Calls) T12 Emergency calls are automatically possible

Short Message Service T21 For reception of short messages

(Mobile terminated)
Short Message Service T22 For sending short messages to another GSM
subscriber
(Mobile originated)
Short Message Service T23 For sending short messages to more
than one receiver simultaneously
(Cell Broadcast) within a given cell

Group 3 Facsimile transmission T61 Presently not supported by NOKIA

(with alternate speech)

Group 3 Facsimile transmission T62 For sending and receiving facsimile

messages
Short Message Service: Mobile
Originated and Mobile Terminated
Air A
NSS

MSC

VLR

BSS

SMS-MO SMS-MT

Short Message Service

Center (SMSC)
Short Message Service: Cell Broadcast
Air A

BTS
BSS

BTS

SMS-Cell
Broadcast
BSC
BTS
NSS

BTS

NMS
 Supplementary Services
• Advice of Charge - AOC
• Alternate Line Service - ALS (personal or business)
• Barring of all incoming calls - BAIC
• Baring of all incoming calls when roaming outside the
HPLMN
• Barring of all incoming calls when abroad
• Barring of outgoing calls
• Barring of outgoing international calls excluding those
directed to the HPLMN country
• Call forwarding on mobile subscriber busy - CFB
Supplementary Services
•Call forwarding on no answer - CFNA
• Call forwarding unconditional - CFU
• Call Hold
• Call waiting - CW
• Calling line identification presentation - CLIP
• Calling line identification restriction - CLIR
• Conference Call
• Explicit Call