Section 8 Procedures 8-2 Procedures PE/TRD/GR/0101 12.01/EN January, 2000 " C o n f i d e n t i a l
i n f o r m a t i o n
- -
m a y
n o t
b e
c o p i e d
o r
d i s c l o s e d
w i t h o u t
p e r m i s s i o n " .
Learning the basic procedures, the main call procedures, mobility and roaming features that GSM operates. After completing this lesson you will be able to: List the GSM procedures that can be activated from MS switch-on until MS switch-off Explain the main procedures: cell selection, location update, call set-up, call release, handover Objectives 8-3 Procedures PE/TRD/GR/0101 12.01/EN January, 2000 " C o n f i d e n t i a l
i n f o r m a t i o n
- -
m a y
n o t
b e
c o p i e d
o r
d i s c l o s e d
w i t h o u t
p e r m i s s i o n " .
1- Descriptors that GSM uses. 2- GSM s actors 3 - Procedures: Cell selection Immediate Assignment Location updates - Registration - Intra-VLR and Inter-VLR - IMSI attach/detach Authentication Ciphering Mobile Originating call Mobile Terminating call - Paging - End to end Call release - MS initiated - PSTN initiated Handovers Contents 8-4 Procedures PE/TRD/GR/0101 12.01/EN January, 2000 " C o n f i d e n t i a l
i n f o r m a t i o n
- -
m a y
n o t
b e
c o p i e d
o r
d i s c l o s e d
w i t h o u t
p e r m i s s i o n " .
Mobile Country Code
3 digits Mobile Network Code
2/3 digits Mobile Subscriber Identification Number (MSIN) 8 digits: H1 H2 X X X X X X Location Area Code LAC Temporary Mobile Subscriber Identity
4 octets G S M Global GSM Mobility Card The Smart Card to use MCC = 208 (France) 234 (G-B) MNC = 01 (FTM) 10 (SFR) 20 (Bytel) Descriptors Stored in SIM-Card IMSI = 15 digits max NMSI LAI Mobile Country Code
3 digits Mobile Network Code
2/3 digits 8-5 Procedures PE/TRD/GR/0101 12.01/EN January, 2000 " C o n f i d e n t i a l
i n f o r m a t i o n
- -
m a y
n o t
b e
c o p i e d
o r
d i s c l o s e d
w i t h o u t
p e r m i s s i o n " .
Country Code CC National Destination Code Subscriber Number (SN) Roaming Number (RN) HO-number Must be dialed to make a call to mobile subscriber Is a PSTN-like number to track the MS which hands over to another MSC during call-in-state Is a PSTN-like number used to reach a roaming MS CC = 33 (France) NDC = 607, 608, 604 (FTM) = 609, 603 (SFR) = 660, 661, 618 (Bytel) Descriptors Stored in the Network M1 M2 X X X X X X X X X X X X X Country Code CC National Destination Code Country Code CC National Destination Code MS-ISDN MSRN 8-6 Procedures PE/TRD/GR/0101 12.01/EN January, 2000 " C o n f i d e n t i a l
i n f o r m a t i o n
- -
m a y
n o t
b e
c o p i e d
o r
d i s c l o s e d
w i t h o u t
p e r m i s s i o n " .
Type Approval Code TAC FAC SNR SP Final Assembly Code Serial NumbeR (SPare) IMEI enables the operator to check the Mobile Equipment Identity at call setup and make sure that no stolen or unauthorized MS is used in the GSM network Descriptor Embodied in the MS 8-7 Procedures PE/TRD/GR/0101 12.01/EN January, 2000 " C o n f i d e n t i a l
i n f o r m a t i o n
- -
m a y
n o t
b e
c o p i e d
o r
d i s c l o s e d
w i t h o u t
p e r m i s s i o n " .
Public Switched Telephone Network BTS BSS BSC GSM s Actors Fixed subscriber Mobile subscriber AUC HLR VLR MSC NSS 8-8 Procedures PE/TRD/GR/0101 12.01/EN January, 2000 " C o n f i d e n t i a l
i n f o r m a t i o n
- -
m a y
n o t
b e
c o p i e d
o r
d i s c l o s e d
w i t h o u t
p e r m i s s i o n " .
BTS-2 BTS-1 This cell BTS-3 BTS-4 BTS-5 1 1 1 1 2 3 4 5 Purpose: get synchronization with the GSM network prior establishing any communication. Cell Selection 1 8-9 Procedures PE/TRD/GR/0101 12.01/EN January, 2000 " C o n f i d e n t i a l
i n f o r m a t i o n
- -
m a y
n o t
b e
c o p i e d
o r
d i s c l o s e d
w i t h o u t
p e r m i s s i o n " .
Immediate Assignment MS BSC MSC CM SERVICE REQUEST SDCCH or TCH 6 CHANNEL REQUEST RACH 1 BTS CHANNEL REQUIRED 2 CHANNEL ACTIVATION 3 IMMEDIATE ASSIGNMENT AGCH 5 IMMEDIATE ASSIGNMENT COMMAND 5 CHANNEL ACTIVATION ACK. 4 Immediate Assignment LOCATION UPDAT. REQU. SDCCH or TCH 6 OR 8-10 Procedures PE/TRD/GR/0101 12.01/EN January, 2000 " C o n f i d e n t i a l
i n f o r m a t i o n
- -
m a y
n o t
b e
c o p i e d
o r
d i s c l o s e d
w i t h o u t
p e r m i s s i o n " .
LAI HLR IMSI VLR id TMSI IMSI TMSI Release VLR IMSI TMSI LAI MSC BTS BSS BSC Registration: the Very First Location Update 2 3 5 1 2 6 1 2 3 5 6 4 3 TMSI 5 8-11 Procedures PE/TRD/GR/0101 12.01/EN January, 2000 " C o n f i d e n t i a l
i n f o r m a t i o n
- -
m a y
n o t
b e
c o p i e d
o r
d i s c l o s e d
w i t h o u t
p e r m i s s i o n " .
VLR IMSI TMSI LAI 1 1 2 3 4 new TMSI TMSI + old LAI 2 3 4 2 3 TMSI New TMSI New LAI MSC BTS BSS BSC Intra-VLR Location Update IMSI not Required 8-12 Procedures PE/TRD/GR/0101 12.01/EN January, 2000 " C o n f i d e n t i a l
i n f o r m a t i o n
- -
m a y
n o t
b e
c o p i e d
o r
d i s c l o s e d
w i t h o u t
p e r m i s s i o n " .
New LAI newTMSI TMSI + old LAI TMSI New TMSI MSC BSS BTS BSC Inter-VLR Location Update 1 1 2 5 7 2 5 7 2 IMSI,TMSI LAI New VLR IMSI, TMSI Old LAI Old VLR RAND, SRES, Kc HLR new VLR id subscriber data 3 4 6 6 5 IMSI not Required RAND, SRES, Kc 8-13 Procedures PE/TRD/GR/0101 12.01/EN January, 2000 " C o n f i d e n t i a l
i n f o r m a t i o n
- -
m a y
n o t
b e
c o p i e d
o r
d i s c l o s e d
w i t h o u t
p e r m i s s i o n " .
MSC BTS BSS BSC IMSI Attach VLR 3 4 5 4 6 1 CHANNEL REQUEST 2 IMMEDIATE ASSIGNMENT LOCATION UPDATING REQUEST (IMSI Attach) 3 5 LOCATION UPDATING ACCEPT (LAC, TMSI) 4 Authentication Procedure 8-14 Procedures PE/TRD/GR/0101 12.01/EN January, 2000 " C o n f i d e n t i a l
i n f o r m a t i o n
- -
m a y
n o t
b e
c o p i e d
o r
d i s c l o s e d
w i t h o u t
p e r m i s s i o n " .
IMSI Detach MSC BTS BSS BSC VLR 1 CHANNEL REQUEST 2 IMMEDIATE ASSIGNMENT IMSI DETach INDication 3 4 CHANNEL RELEASE IMSI DETach INDication 3 8-15 Procedures PE/TRD/GR/0101 12.01/EN January, 2000 " C o n f i d e n t i a l
i n f o r m a t i o n
- -
m a y
n o t
b e
c o p i e d
o r
d i s c l o s e d
w i t h o u t
p e r m i s s i o n " .
Authentication 1 - Principle = ? NSS RAND = RANDom number SRES = Signed RESponse Kc = Ciphering Key Ki = Identification Key RAND Kc RAND (128 bits) SIM card G S M Global GSM Mobility Card The Smart Card to use A8 A3 Ki Ki A3 A8 MS AUC (A3 and A8) (RAND, SRES, Kc) SRES SRESm (32 bits) SRESm CIPHER MODE Ki (128 bits) Ki (128 bits) A3 A8 A3 A8 BSS OK Radio Interface Kc 8-16 Procedures PE/TRD/GR/0101 12.01/EN January, 2000 " C o n f i d e n t i a l
i n f o r m a t i o n
- -
m a y
n o t
b e
c o p i e d
o r
d i s c l o s e d
w i t h o u t
p e r m i s s i o n " .
A3 Ki RAND SRESm Purpose: Avoid logging of lost, stolen or forgery SIM-Cards. 5 Triplets 3 AUC (A3 and A8) (RAND, SRES, Kc) HLR MSC BTS BSS BSC 4 SRESm 6 1 1 4 6 4 6 SRESm Authentication 2 - Procedure 7 Ciphering Command 7 CIPHER MODE 3 2 VLR SRESm = SRES ? S R E S m
6 7 4 8-17 Procedures PE/TRD/GR/0101 12.01/EN January, 2000 " C o n f i d e n t i a l
i n f o r m a t i o n
- -
m a y
n o t
b e
c o p i e d
o r
d i s c l o s e d
w i t h o u t
p e r m i s s i o n " .
Ciphered data MS BTS Radio interface Frame Number (22 bits) Kc (64 bits) + Kc (64 bits) Ciphering 1 - Principle + + + : exclusive-or + A5 A5 Frame Number (22 bits) Block (114 bits) Data to transmit Received data Data to transmit Received data Block (114 bits) Block (114 bits) Block (114 bits) 8-18 Procedures PE/TRD/GR/0101 12.01/EN January, 2000 " C o n f i d e n t i a l
i n f o r m a t i o n
- -
m a y
n o t
b e
c o p i e d
o r
d i s c l o s e d
w i t h o u t
p e r m i s s i o n " .
BTS BSS BSC VLR (Rand, SRES, Kc) A5 Kc TDMA# + A8 Ki Rand Kc MSC Kc Kc 2 Ciphered data 5 Ciphering 2 - Procedure SET CIPHER MODE (Kc) 1 3 CIPHER MODE COMMAND 4 CIPHER MODE COMPLETE CIPHER MODE COMPLETE 6 Purpose: avoid communication to be tapped. !azeq?tcyui p?sdq!f? j sdf!? okgrh 8-19 Procedures PE/TRD/GR/0101 12.01/EN January, 2000 " C o n f i d e n t i a l
i n f o r m a t i o n
- -
m a y
n o t
b e
c o p i e d
o r
d i s c l o s e d
w i t h o u t
p e r m i s s i o n " .
FT GREAT BRETAIN FRANCE GERMANY Telephone network Terminating MSC BSC BTS BSS VLR Gateway MSC HLR Outgoing call 8-20 Procedures PE/TRD/GR/0101 12.01/EN January, 2000 " C o n f i d e n t i a l
i n f o r m a t i o n
- -
m a y
n o t
b e
c o p i e d
o r
d i s c l o s e d
w i t h o u t
p e r m i s s i o n " .
ACM = Address Complete Message ANM = ANswer Message IAM = Initial Address Message MS BSS MSC CHANNEL REQUEST 1 PSTN CM SERVICE REQUEST 2 CM SERVICE REQUEST 2 CALL PROCEEDING 7 CALL PROCEEDING 7 Assignment procedure 7 IAM 6 IMMEDIATE ASSIGNMENT 2 ACM 8 VLR Ring ANM 10 ALERTING 9 SETUP (basic) or EMERGENCY 4 SETUP 4 CONNECT 11 CONNECT ACKnowledge 11 Authentication procedure 3 Ciphering procedure 3 5 Dialing Ringing Path Established Ringing Mobile Originating Call Sending Number 8-21 Procedures PE/TRD/GR/0101 12.01/EN January, 2000 " C o n f i d e n t i a l
i n f o r m a t i o n
- -
m a y
n o t
b e
c o p i e d
o r
d i s c l o s e d
w i t h o u t
p e r m i s s i o n " .
FT GREAT BRETAIN FRANCE GERMANY Telephone network Terminating MSC BSC BTS BSS VLR Gateway MSC HLR Incoming Call 8-22 Procedures PE/TRD/GR/0101 12.01/EN January, 2000 " C o n f i d e n t i a l
i n f o r m a t i o n
- -
m a y
n o t
b e
c o p i e d
o r
d i s c l o s e d
w i t h o u t
p e r m i s s i o n " .
BSC1 BSC2 BSC3 PSTN LA1 LA2 BTS11 BTS21 BTS22 BTS31 BTS12 BTS23 4 3 5 1 HLR MSC/ VLR GMSC 2 5 6 6 Mobile Terminating Call 1 - Paging Principle 8-23 Procedures PE/TRD/GR/0101 12.01/EN January, 2000 " C o n f i d e n t i a l
i n f o r m a t i o n
- -
m a y
n o t
b e
c o p i e d
o r
d i s c l o s e d
w i t h o u t
p e r m i s s i o n " .
Home PLMN GMSC HLR Routing Information (MSRN) 6 Mobile Terminating Call 2 - Detailed Paging Procedure IAM : Initial Address Message MSISDN : Mobile Station Integrated Services Digital network Number MSRN : Mobile Station Roaming Number IMSI : International Mobile Subscriber Identity GMSC : Gateway MSC VMSC : Visitor MSC TMSI : Temporary Mobile Subscriber Identity PN International SS7 ISDN Visitor PLMN VMSC VLR BSS IAM (MSRN) 7 IAM (MSISDN) 2 Send Routing Information (MSISDN) 3 Provide Roaming Number (IMSI) 4 PAGE (TMSI + LA) 9 Send info to I/C (MSRN) 8 Roaming Number (MSRN) 5 PAGING REQUEST (TMSI + LA) 10 PAGING REQUEST (TMSI) 11 MSISDN 1 8-24 Procedures PE/TRD/GR/0101 12.01/EN January, 2000 " C o n f i d e n t i a l
i n f o r m a t i o n
- -
m a y
n o t
b e
c o p i e d
o r
d i s c l o s e d
w i t h o u t
p e r m i s s i o n " .
Mobile Terminating Call 3 - End to End Procedure MS BSS VMSC CHANNEL REQUEST (LAC, Cell ID) 5 PSTN IMMEDIATE ASSIGNMENT (SDCCH or TCH) 6 PAGING REQUEST 4 PAGING REQUEST (TMSI or IMSI, LA) 3 GMSC IAM (MSISDN) 1 IAM (MSRN) 2 CM SERVICE REQUEST (Paging Response) 7 PAGING RESPONSE (TMSI or IMSI, LA) 7 Authentication procedure 8 Ciphering procedure 9 Address Complete Message 11 ANswer Message 12 Setup, Assignment, Alerting 10 CONNECT 12 Dialing Ringing Path Established 8-25 Procedures PE/TRD/GR/0101 12.01/EN January, 2000 " C o n f i d e n t i a l
i n f o r m a t i o n
- -
m a y
n o t
b e
c o p i e d
o r
d i s c l o s e d
w i t h o u t
p e r m i s s i o n " .
Telephone network FRANCE GERMANY FT Terminating MSC BSC BTS BSS VLR HLR Tromboning effect Gateway MSC 8-26 Procedures PE/TRD/GR/0101 12.01/EN January, 2000 " C o n f i d e n t i a l
i n f o r m a t i o n
- -
m a y
n o t
b e
c o p i e d
o r
d i s c l o s e d
w i t h o u t
p e r m i s s i o n " .
MS BSS MSC Call in progress 1 RELEASE COMPLETE 4 PSTN DISCONNECT 2 DISCONNECT 2 RELEASE 3 RELEASE 3 RF Channel Release procedure 8 Release 5 RELEASE INDICATION 7 CHANNEL RELEASE 6 Release tone 9 Call Release 1 - Mobile Initiated 8-27 Procedures PE/TRD/GR/0101 12.01/EN January, 2000 " C o n f i d e n t i a l
i n f o r m a t i o n
- -
m a y
n o t
b e
c o p i e d
o r
d i s c l o s e d
w i t h o u t
p e r m i s s i o n " .
PSTN On hook Purpose: informs the mobile then releases radio and network resources. REL RLC MSC BTS BSS BSC 1 1 1 1 2 3 3 4 5 5 4 6 2 Call Release 2 - PSTN Initiated 8-28 Procedures PE/TRD/GR/0101 12.01/EN January, 2000 " C o n f i d e n t i a l
i n f o r m a t i o n
- -
m a y
n o t
b e
c o p i e d
o r
d i s c l o s e d
w i t h o u t
p e r m i s s i o n " .
Quality Signal strength Lack of resources: Directed Retry Rescue Prevention Distance Power budget Micro cellular environment Maintenance Reasons for Handover 8-29 Procedures PE/TRD/GR/0101 12.01/EN January, 2000 " C o n f i d e n t i a l
i n f o r m a t i o n
- -
m a y
n o t
b e
c o p i e d
o r
d i s c l o s e d
w i t h o u t
p e r m i s s i o n " .
Mobility and Handover Draw the five types of handover. MSC-A MSC-B BTS A1 BTS A2 BTS B1 BTS C1 BSC-B BSC-A BSC-C 8-30 Procedures PE/TRD/GR/0101 12.01/EN January, 2000 " C o n f i d e n t i a l
i n f o r m a t i o n
- -
m a y
n o t
b e
c o p i e d
o r
d i s c l o s e d
w i t h o u t
p e r m i s s i o n " .
MSC-A MSC-B BTS A1 BTS A2 BTS B1 BTS C1 BSC-B BSC-A BSC-C 1 2 3 4 5 Mobility and Handover The Five Types of Handover 1- Intra-Cell HO 2- Intra-BTS HO 3- Intra-BSC HO 4- Inter-BSC HO 5- Inter-MSC HO 8-31 Procedures PE/TRD/GR/0101 12.01/EN January, 2000 " C o n f i d e n t i a l
i n f o r m a t i o n
- -
m a y
n o t
b e
c o p i e d
o r
d i s c l o s e d
w i t h o u t
p e r m i s s i o n " .
BTS-1 BTS-2 Cell 1 Cell 2 MSC BSC Handover Preparation 8-32 Procedures PE/TRD/GR/0101 12.01/EN January, 2000 " C o n f i d e n t i a l
i n f o r m a t i o n
- -
m a y
n o t
b e
c o p i e d
o r
d i s c l o s e d
w i t h o u t
p e r m i s s i o n " .
BSS 1 MSC BSS 2 ACK Parameters (criteria threshold) Uplink Measurement Handover Request Handover Required Handover decision Handover execution Handover Algorithm External External Handover Command Radio Resource Management Handover OMC-R 8-33 Procedures PE/TRD/GR/0101 12.01/EN January, 2000 " C o n f i d e n t i a l
i n f o r m a t i o n
- -
m a y
n o t
b e
c o p i e d
o r
d i s c l o s e d
w i t h o u t
p e r m i s s i o n " .
BTS-1 BTS-2 Cell 1 Cell 2 Decision criteria: - bad quality, - weak signal strength, - cell boundaries, - etc. MSC BSC Handover Decision 8-34 Procedures PE/TRD/GR/0101 12.01/EN January, 2000 " C o n f i d e n t i a l
i n f o r m a t i o n
- -
m a y
n o t
b e
c o p i e d
o r
d i s c l o s e d
w i t h o u t
p e r m i s s i o n " .
BTS-1 BTS-2 Cell 1 Cell 2 MSC BSC Handover Execution 8-35 Procedures PE/TRD/GR/0101 12.01/EN January, 2000 " C o n f i d e n t i a l
i n f o r m a t i o n
- -
m a y
n o t
b e
c o p i e d
o r
d i s c l o s e d
w i t h o u t
p e r m i s s i o n " .
Intra-BSC Handover BTS1 MS BTS2 BSC MSC CHANNEL ACTIVATE ACK 3 CHANNEL ACTIVATE 2 HO COMMAND 5 HO DETECTION 7 HO COMMAND 4 RF CHANNEL RELEASE 13 HO COMPLETE 12 ESTABLISH INDICATION 9 HO COMPLETE 11 HandOver COMPLETE 10 HO INDICATION 1 PHYSICAL INFO ** 8 ** only if Handover asynchronous * this message may be repeated up to 4 times HO ACCESS * 6 RF CHANNEL RELEASE ACK 14 HO Execution HO Initiation HO Acknowledg. 8-36 Procedures PE/TRD/GR/0101 12.01/EN January, 2000 " C o n f i d e n t i a l
i n f o r m a t i o n
- -
m a y
n o t
b e
c o p i e d
o r
d i s c l o s e d
w i t h o u t
p e r m i s s i o n " .
Inter-BSC Handover MS BTS1 BTS2 BSC1 BSC2 HO COMMAND 9 8 HO COMMAND HO REQUEST ACK 6 HO REQUEST 3 CHANNEL ACTIVATE 4 HO REQUIRED 2 1 HO INDICATION HO ACCESS * 10 * this message may be repeated up to 4 times PHYSICAL INFO 13 MSC 16 HO COMPLETE 17 HO COMPLETE CLEAR COMMAND 18 RF CHANNEL RELEASE 19 CLEAR COMPLETE 21 15 HandOver COMPLETE 11 HO DETECTION 20 RF CHANNEL RELEASE ACK 5 CHANNEL ACTIVATE ACK ESTABLISH INDICATION 14 HO COMMAND 7 HO DETECTION 12 HO Initiation HO Execution HO Acknowledg. 8-37 Procedures PE/TRD/GR/0101 12.01/EN January, 2000 " C o n f i d e n t i a l
i n f o r m a t i o n
- -
m a y
n o t
b e
c o p i e d
o r
d i s c l o s e d
w i t h o u t
p e r m i s s i o n " .
BSC 3 Terrestrial link BSC 2 BTS BTS BTS BTS BTS MSC 2 MSC 1 2 Inter-MSC Handover PSTN BSC 1 1 3 3 1a 1b 2a 2b 3a 3b 8-38 Procedures PE/TRD/GR/0101 12.01/EN January, 2000 " C o n f i d e n t i a l
i n f o r m a t i o n
- -
m a y
n o t
b e
c o p i e d
o r
d i s c l o s e d
w i t h o u t
p e r m i s s i o n " .
Inter-MSC Handover MSC-A MSC-B MSC-C BTS BTS BTS a b c a c b 1 5 b 9 6 7 8 3 2 4 5 4 c 6 9 PSTN BSC-A BSC-B BSC-C 8-39 Procedures PE/TRD/GR/0101 12.01/EN January, 2000 " C o n f i d e n t i a l
i n f o r m a t i o n
- -
m a y
n o t
b e
c o p i e d
o r
d i s c l o s e d
w i t h o u t
p e r m i s s i o n " .
Exercise Cite the GSM procedures successively involved in the following situations (the IMSI Attach/Detach function is enabled). Indicate the radio channels types used in every procedure.
1- Switch-on the MS and move in Idle mode from one LA to an other one. 2- Establish a call and move in communication from one cell to an other. 3- MS in Idle mode. Reception of a Short Message. 4- Switch-off the MS.