Module-2

GSM and TDMA

Technologies
Introduction to GSM and TDMA
• Global System for Mobile Communications (GSM) services are a standard
collection of applications and features available to mobile phone subscribers all
over the world.
• The GSM standards are defined by the 3GPP collaboration and implemented in
hardware and software by equipment manufacturers and mobile phone operators
• The common standard makes it possible to use the same phones with different
companies' services, or even roam into different countries. GSM is the world's
most dominant mobile phone standard.
GSM Services:
GSM Tele-services
GSM Bearer or Data Services
Supplementary services

Tele services: Voice communication between two users

Teleservices provide standard voice communications between end users and additional
communications between two end user applications according to some standard protocol.
• Offered services - Mobile telephony - Emergency calling
Cont…,
• Bearer services: Provide the user with ability to transfer data between user
network interfaces.
• Bearer services provide user with the ability to transmit data between user
network interfaces.
• Include various data services for information transfer between GSM and other
networks like PSTN, ISDN etc at rates from 300 to 9600 bps
• Short Message Service (SMS) - up to 160 character alphanumeric data
transmission to/from the mobile terminal
• Voice mailbox
Cont..,
• Supplementary services: Supplementary services are services that enhance or
support a teleservice provided by the network.
• Call related services:
• Call Waiting- Notification of an incoming call while on the handset
• Call Hold- Put a caller on hold to take another call
• Call Barring- All calls, outgoing calls, or incoming calls
• Call Forwarding- Calls can be sent to various numbers defined by the user
• Multi Party Call Conferencing - Link multiple calls together
GSM Network and System Architecture
Cont…,
• The Major subsystem of GSM Network and System Architecture are Network
Switching Subsystem (NSS), Base Station Subsystem (BSS) and Mobile Station (MS).
• The Mobile Station (MS) is the device provides the radio link between the GSM
subscriber and the wireless mobile network.
Base Station Subsystem (BSS)
Base Transceiver Station (BTS)
Base Station Controller (BSC)
Network Switching Subsystem(NSS)
Mobile Switching Center (MSC)
Home Location Register (HLR)
Visitor Location Register (VLR)
 Authentication Center (AUC)
Equipment Identity Register (EIR)
Cont…,
Mobile Station (MS)
Mobile Equipment (ME)
Subscriber Identity Module (SIM)
• MS provides subscribers the means to control their access to the PSTN and PDN
Base Station Subsystem (BSS)
The BSS communicate with MS over air interface using protocols
• BSC and BTS communicate using LAPD protocol
• LAPD is the data link protocol used ISDN
Cont…,
Base Transceiver Station (BTS)
• Encodes, encrypts, multiplexes, modulates and feeds the RF signals to the antenna.
• Communicates with Mobile station and BSC. Consists of Transceivers (TRX) units
• It is also called as Radio base station or RBS. RBS is the interface corresponds to the
subscribers MS.
• Provides radio link the MS over the air interface
Base Station Controller (BSC)
Manages Radio resources for BTS
• Assigns Frequency and time slots for all MS’s in its area
• Handles call set up
• Handover for each MS. It communicates with MSC and BTS.
• Its also contains Transcoder controller (TRC). Urban and suburban area traffic are
handled by BSC/TRC
Cont…,
Network Switching Subsystem(NSS)
• Mobile Switching Centre (MSC)
• Heart of the network
Manages communication between GSM and other networks
• Billing information and collection
• Mobility management
• - Registration
• - Location Updating
• - Inter BSS and inter MSC call handoff
• - SS7 Protocol
Cont…,
Home Location Registers (HLR)
Stores information about each subscriber that belongs to it MSC in permanent and
temporary fashion.
• As soon as mobile subscriber leaves its current local area, the information in the
HLR is updated.
Database contains IMSI, MSISDN, prepaid/postpaid, roaming restrictions,
supplementary services.
Visitor Location Registers (VLR)
• Temporary database which updates whenever new MS enters its area, by HLR
database.
• Assigns a TMSI (Temporary Mobile Subscriber Identity) to each MS entering the
VLR area which keeps on changing
• Controls those mobiles roaming in its area.
Cont…,
Authentication Centre (AUC)
Contains the algorithms for authentication as well as the keys for encryption.
• Protects network operators from fraud.
Equipment Identity Register (EIR)
Stores all devices identifications registered for this network.
• Database that is used to track handsets using the IMEI (International Mobile
Equipment Identity)
• Short message services the wireless Switching System we need to have an SMS
gateway MSC(SMS-GMSC) and an SMS interworking MSC(SMS-IWMSC).
• The implementation of GPRS for high-speed data transmission and reception
requires the use of two additional switching elements
A serving GPRS support node (SGSN)
A Gateway GPRS support node (GGSN)
GSM network interfaces and protocols
• Fhg

• GSM signalling and protocol model

Cont…,
• Um interface The "air" or radio interface standard that is used for exchanges between a mobile (ME) and a base
station (BTS / BSC). For signalling, a modified version of the ISDN LAPD, known as LAPDm is used.
1. Abis interface This is a BSS internal interface linking the BSC and a BTS, and it has not been totally
standardised. The Abis interface allows control of the radio equipment and radio frequency allocation in
the BTS.
2. A interface The A interface is used to provide communication between the BSS and the MSC. The
interface carries information to enable the channels, timeslots and the like to be allocated to the mobile
equipments being serviced by the BSSs.
•
The messaging required within the network to enable handover etc to be undertaken is carried over the
interface.
1. B interface The B interface exists between the MSC and the VLR . It uses a protocol known as the
MAP/B protocol. As most VLRs are collocated with an MSC, this makes the interface purely an
"internal" interface. The interface is used whenever the MSC needs access to data regarding a MS located
in its area.
Cont..,

• GSM network interfaces and protocols

Cont…,
• gfgfg
GSM Channel Concept
• The cellular telephone network use various control and traffic channels.
• The GSM cellular system is based on the use of TDMA technique to provide
additional user capacity over a limited amount of radio frequency spectrum.
• The GSM system divides the radio link connection time into eight equal and
repeating time slots known as FRAMEs for both uplink and downlink
transmissions.
• The timeslots are arranged in sequence and are conventionally numbered 0 to 7
• Each time slot is considered as logical channel.
Cont…,

• Figure 2.9 TDMA time frame structure

Logical Channels.
Broadcast channels
Broadcast control channels.
Frequency Correction channel
Synchronization channels
Cont…,
• Logical Channels 
• Carry either subscriber traffic or signaling and control information to facilitate
subscriber mobility
The full-rate traffic channel (TCH/F or Bm)
 Half-rate traffic channel (TCH/H or Lm)
Enhanced full-rate (EFR) traffic
• Full-rate traffic channel (TCH/F or Bm) 
• The full-rate traffic channel (TCH/F or Bm) carries one conversation by using one
timeslot.
• The transmitted voice signal is encoded at a 13-kbps rate, but it is sent with
additional overhead bits.
Cont…,
• Half-rate traffic channel (TCH/H or Lm)
• The half-rate traffic channel (TCH/H or Lm) carries voice encoded at 6.5 kbps or
data at rates of 4.8 or 2.4 kbps
• With additional overhead bits, the total data rate for TCH/H becomes 11.4 kbps.
• Therefore, two conversations or a conversation and a data transfer or two data
transfers may be transmitted over one channel at the same time.
• Enhanced full-rate (EFR) traffic channel
• Enhanced full-rate (EFR) traffic encodes voice at a 12.2-kbps rate and like TCH/F
adds overhead bits to yield a 22.8 kbps channel data rate
• The signaling and control channels consist of three channel sub categories:
Broadcast Channels,
Common Control Channels, And
Dedicated Control Channels.
Cont….,
• Broadcast channels
The GSM cellular system uses broadcast channels (BCHS) provide information to
the mobile station about various system parameters and also information about the
location area identity (LAI).
three types BCHs
Broadcast control channel
Frequency correction channel
Synchronization channel
• Broadcast control channel
• It contains information that needed by MS concerning the cell that it is attached to
in order for the MS to be able to start making or receiving calls, or to start
roaming
Cont…,
• Frequency correction channel:
• It transmits bursts of zeros (this is an un-modulated carrier signal) to the MS.
 This signaling is done for two reasons:
• i). the MS can use this signal to synchronize itself to the correct frequency and
• ii). the MS can verify that this is the BCCH carrier
• Synchronization channel:
• It transmit the required information for the MS to synchronize itself with the timing
within a particular cell.
• Common Control Channels
•  The common control channels (CCCHS) provide paging messages the MS and a means
which the mobile can request signaling channel that it can use to contact the network.
 Paging channel
 Random access channel
Cont…,
Paging channel:
• It is used by the system to send paging messages to mobiles attached to cell.
• The mobile will paged whenever the network has an incoming call ready for
mobile or some type of message (e.g., short message, multimedia message) to
deliver to the mobile
Random access channel:
• It is used by the mobile to respond a paging message.
• If the mobile receives page on the PCH, it will reply on the RACH(Random
Access Channel) with request for signaling channel.
Access Grant channel
 It is used by the network to assign a signaling channel to the MS.
Cont…,
Dedicated Control Channels
• These dedicated channels are used for specific call setup, handover, measurement,
and short message delivery functions.
• The four DCCHs are
• Standalone dedicated control channel
• Slow associated control channel.
• Fast associated control channel
• Cell Broadcast channel
• Standalone dedicated control channel: used for call setup procedure
Cont…,
Slow associated control channel:
• It is used to transmit information about measurements made by the MS or
instructions from the BTS about the mobile's parameters of operation.
Fast associated control channel
• It is used to facilitate the handover operation in a GSM system.
• If handover is required, the necessary handover signaling information is
transmitted instead of a 20-ms segment of speech over the TCH.This operation is
known as "stealing mode“
Cell Broadcast channel :
• It is used to deliver short message service in the downlink direction.
GSM speech processing

• In the mobile, speech is digitized and broken up into 20 ms segments. This

process produces 8000 samples of 13 bits per sample per second or 160 samples
of 13 bits per 20 ms. The speech coder is 260 bits per 20 seconds are the 3 kbps
whereas the channel coding yields 456 bits per 20 ms or a 22.8 kbps data rate.
• Interleaving, ciphering, and burst formatting is yields 156.25 bits per time slot.
This yields an overall data transfer rate of 270.8 kbps over a GSM channel.
• Channel model is created in the Equalizer where and estimated bit sequence is
calculated for a receiver signal.
TDMA Hyper Frame structure

• TDMA Hyperframe structure

• Hyperframe is a multi frame sequence that is composed of 2048 superframes and
is largest time interval in the GSM system (3 hours, 28 minutes, 53 seconds)
• Eight of these burst periods are grouped into what is known as a TDMA frame
Cont…,
• GSM Super frame Multi frames are then constructed into superframes taking 6.12
seconds. These consist of 51 traffic multiframes or 26 control multiframes.
• GSM Hyperframe Above this 2048 superframes (i.e. 2 to the power 11) are
grouped to form one hyperframe which repeats every 3 hours 28 minutes 53.76
seconds. It is the largest time interval within the GSM frame structure.
• Frequency hopping: Frequency hopping is a feature that is optional within the
GSM system. It can help reduce interference and fading issues
• Encryption: The encryption process is synchronized over the GSM hyperframe
TDMA timing offset between uplink and downlink

• TDMA timing offset between uplink and downlink

• GSM Traffic and control signal bursts has five types namely
• Normal burst
• Frequency correction burst
• Synchronization burst
• Access burst
Cont…,

• GSM Traffic and control signal bursts

Part II: GSM System Operations
• Part II: GSM Identites
Mobile station associated numbers:
• MSISDN(Mobile station ISDN):-It is unique identification number for mobile
telephone subscription in the PSTN numbering plan
• IMSI(international mobile subscriber identity):-Is a unique identity allocated to
each subscriber by the wireless service operator and stored in the subscriber’s
SIM.
• TMSI(temporary mobile subscriber identity):-this is used by the GSM network to
protect the subscriber's privacy over the air interface.
• IMEI:-International mobile equipment identity uniquely identify an MS as a piece
of equipment.
Cont…,
Network Numbering plans
Location area identity (LAI):-Is used for MS paging and location updating
• LAI = MCC + MNC + LAC
 Mobile Country Code (MCC)
 Mobile Network Code (MNC)
 Location Area Code (LAC)

• Cell global identity (CGI) :-Is used for cell identification within a localation area
• CGI = MCC + MNC + LAC + CI
 Mobile Country Code (MCC)
 Mobile Network Code (MNC)
 Location Area Code (LAC)
 Cell Identity (CI)

• With in the wireless network itself, the network elements will have identity
numbers or address that are necessary to facilitate the correct operation of the
system
Cont…, Explain the short notes or Explain MSRN is used in call set up
operation
• Mobile station Roaming Number(MSRN):-GSM is used MSRN during the
call setup operation
• Step1: Initial address message
• Step2: Send routing Information
• Step3: HLR uses MSISDN to find the subscriber data in the data base.
• Step4: Provide Roaming Number
• Step5: VLR asks MSC to reserve idle MSRN number
• Step6: the MSC/VLR sends the MSRN back to HLR
• Step7: HLR sends the MSRN back to GMSC
• Step8: GMSC uses the MSRN to route the call to the Correct MSC
• IMSI---------------- International Mobile Subscriber Identity,
• GMSC------------Gateway Mobile Switching Centre ,
Cont…,

• GSM call setup using the MSRN Formulation of the GSM MSRN
• MSRN = CC + NDC + SN
 Country Code (CC)
 National Destination Code (NDC)
 Subscriber Number (SN)
GSM System Operations (Traffic Cases)
Registration, call setup, and Location Updating
• This could be explained by considering various states of MS
The MS can be powered off, or
SIM card can be removed from the mobile, or
The mobile can be ON but located in an area without service.
• In all these cases The MS is considered to be in the detached condition. Otherwise, the
MS can be powered ON with in the GSM system and will subsequently enter into an
attached relationship with the system.
• The mobile can be in either of two states
• a (1) the idle state in which the MS has no dedicated channel allocated to it and it just
listens to the broadcast control channels (BCCH) and the paging channels (PCH)
• b(2) the active or dedicated state in the MS has a dedicated connection to the GSM
network.
•
Cont…,
• While in the attached mode, the MS may change from the idle to the active mode
as the result of call setup, short message service transfers, location updating or
supplementary service procedures.
• Also if the MS is in the active mode and changes cells, this operation is referred
as GSM handover
Call Setup
• All setup within a GSM system consists following operations. For either a mobile-
originating call or a mobile-terminating call the following operations need to be performed.
• For a mobile-terminating call it is necessary to perform an initial additional operation
• Interrogation (only for a mobile-terminating call)
• 2. Radio resource connection establishment.
• 3. Service request
• 4. Authentication
• 5. Ciphering mode setting
• 6. IMEI number check
• 7. TMSI (Temporary Mobile Subscriber Identity)allocation
• 8. Call initiation
• 9. Assignment of a traffic channel
• 10. User alerting signalling
• 11. Call accepted signalling
GSM Interrogation Phase of call setup
• For the interrogation operation, initial address message (IAM) comes outside the
GSM network
Radio resource connection establishment
• The MSC/VLR initiates the call set up process by sending a layer 3 paging
message to the appropriate BSC.(IMSI number)
• The BSC sends the paging command message to the appropriate BTSs .(IMSI
number , the paging group &channel number)
• The BTS sends a paging request message to the MS.
• The MS responds to the paging request message by sending channel request
message to the BTS.
• Detailed messaging during GSM radio resource connection establishment
Cont…,

• GSM radio resource connection establishment process

Cont..,

•
Service Request
• The service request phase occurs as soon as the MS has turned to the new channel
assigned to it by the immediate assignment message sent during the radio resource
connection phase
• Asynchronous balanced mode(SABM) sent from MS to BTS ----paging message
• BTS sent UA to MS
Authentication
• If the authentication is activated an authentication request message is sent to MS
• Message containing 128 –bit Random number RAND and ciphering key sequence
number(CKSN)
Ciphering Mode setting
• Ciphering mode command BSSMAP from MSC to BTS ,BTS store Kc and send
non ciphering command to MS,MS insert Kc and add TDMA no to generate
ciphering sequence CKSN
Call Initialization Procedures
• Set up message transmitted from MSC to MS,Then connection management
message is sent over downlink SDCCH from BTS to MS,Ms sent confirmation
message in Uplink SDCCH
GSM Connection Release
Intra-BSC handover
• During the call, MS will measure the strength and quality of the signal on the TCH
and the signal strength from the neighboring cell
• The BTS will send the results of measurements on the TCH to the BSC
• In the BSC, the function is activated when the placement is required to handover
to another cell
• MS choose a new frequency handover and access to the appropriate time slot.
• MS send a "HO complete message."
Cont…,
Inter BSC handover
Inter-MSC handover
GSM Infrastructure Communications (Um Interface)
Layer 3: Networking Layer Operations
• Connection Management
• Call Control
• Short Message Service Support
• Layer 2: Data Link Layer Operations
• LAPDm Operations
• Service Access Points
• Data link procedures
• Layer 1: Physical Layer Operation
• At the radio interface Um, user plane data will be carried by the logical traffic
channel called TCH
Cont…,

• Three layers of interface in GSM

• Functions at Layer 3 for the Um Interface
• CC- Connection Management
• RR-Radio Resource Management
• MM- Mobility Management
Call Control Procedure

• Call control procedure are used in call establishment. MMI procedure are mapped
onto call control procedure through the exchanges of service primitives over the
mobile network CC service access point (MNCC-SAP) as shown in fig
Cont…,
• The CC entity initiates the call establishment by requesting MM sublayer to
establish a MM connection
• MM sublayer confirm MM connection CC entity sends a set up msg to MSC
• CC entity is used for call establishment, call information, call clearing etc
Message format for layer 3
• The message consists of a sequence of a number of 8-bit bytes of information
• The first field or header, consists of 4 bits of the first byte is a protocol decimator
(PD)code that indicates the type of protocol the message belongs (ie.CC or call
related SS,MM,RR,SMS)
• The next field of 4 bits is a transaction identifier or skip indicator
• The next byte of the message indicates the function of the messages the fields is
set to all zeros
Thank you