Professional Documents
Culture Documents
GSM Basics
GSM Basics
Objectives
Understand Concept of Cellular Understand the functional blocks in a GSM Network Understand the Air Interface with Channels Understand Mobile Call Setup Operations
Agenda
Need for Cellular Introduction to Cellular Channelization Concept GSM Evolution and Markets GSM Network Arhcitecure GSM Air Interface Parameters GSM Speech Coding Physical and Logical Channels Frames and MultiFrames GSM Basic Operations
Telephony
Communication is today's basic need Telephone has become part of life
Security Hazards
Prone to Failures ( Line Disconnection, etc ) Very less value added services
Mobile Communications
BEEP
Ex : Broadcast Services ( AM/FM Radios, Television ) Paging Services
H
Authoring Division Name File Name Security Notice (if required)
"A " Tx
Rx
A transmits -- B receives, then B transmits -- A receives
"B " Tx
Rx
VHF TV
VHF TV
MICROWAVES
1MHz
10MHz
100MHz
10
14
10
15
MF 1000m 100m
HF 10m
VHF 1m
UHF 10cm
SHF 1cm
EHF 1mm
Authoring Division Name File Name Security Notice (if required)
1m
MF : 300 KHz - 3 MHz ( Domestic Radios ) HF : 3 MHz - 30 MHz VHF : 30 MHz - 300 MHz ( FM, Paging, PTT ) UHF : 300 MHz - 3 GHz ( Mobile Radios, Cordless Phones ) SHF : 3 GHz - 30 GHz ( Microwave Band )
Selection of Band will depend on Application Frequency Band is subdivided into Application Band Application Band is further divided into Technology Channels
H
Authoring Division Name File Name Security Notice (if required)
Channelization
Frequency Band has several application segments Certain blocks of the Band are reserved for certain applications by regulating authorities and as well by standard Technologies Technologies have decided on fixed bandwidth Channels within these bands
These 50 Mhz are bands are further divided into Channels Channelization can be done by three methods --- FDMA --- TDMA --- CDMA
H
Authoring Division Name File Name Security Notice (if required)
Channelization Methods
FDMA
Power Time
FDMA
Frequency
Ex: AMPS / DAMPS band is divided into 30 Khz Channels ( 1666 Freq Chs) GSM band is divided into 200 Khz Channels ( 250 Freq Chs ). Television Channels ( Star, Zee, Sony, MTV, BBC, CNN etc. )
Channelization Methods
TDMA
Power Time
FDMA/TDMA
Frequency
Each FDMA Channel is divided into Timeslots Each Timeslot is of fixed period This method increases the number of Channels in a system
Ex: DAMPS has 3 timeslots on each 30 Khz Channel ( 4998 Channels) GSM has 8 timeslots on each 200 Khz Channel ( 2000 Channels )
H
Authoring Division Name File Name Security Notice (if required)
Channelization Methods
CDMA
Time Power
CDMA
Frequency
Frequency Channel is divided into Code Channels 1.25 MHz of FDMA Channel is divided into 64 Code Channels
How many Channels will be required for one call ? What type of Channels ?
-- FDMA, TDMA, FDMA/TDMA , FDMA/CDMA or something else
Tx
F1 F2
Rx
Frequency
Tx
F1 H
Rx
Rx Tx
Frequency
Cellular structure
Cellular network has cells of different sizes. Bigger cells are used where subcriber density is low. Smaller cells are used where subscriber density is high.
Cell Configuration
Omnidirectional Cell Sectorial Cell
BTS
BTS
Frequency Reuse
F= 1,2,3,4,5,6,7,8,9,10
Clusters
GSM uses concept of cells One cell covers small part of network Network has many cells Frequency used in one cell can be used in another cells This is known as Frequency Re-use F=2 F=7 F=1 F=6,10 F=5,9
F=2 F=7 F=1 F=6,10 F=5,9 F=3 F=7 F=4,8 F=6,10 F=5,9 F=1 F=4,8 F=2 F=3 F=4,8 F=3
1,13,29
DD
1,13,29 1,13,29
1,13,29
Cell Splitting
Micro Cells
Pico Cell
GSM900 DCS1800
H
Authoring Division Name File Name Security Notice (if required)
239 licenses in 109 countries now 44 million subscribers now One New subscriber Every Second ! > 200 million subscribers by Year 2000
GSM900
H
Authoring Division Name File Name Security Notice (if required)
USA: PCS1900 for new PCS France: DCS1800 For new PCN Germany: DCS1800 E Net
DCS1800 PCS1900
H
Authoring Division Name File Name Security Notice (if required)
Evolution of GSM
GSM Requirements
Good subjective speech quality Encryption of user information Must operate in the entire 890 - 960 Mhz frequency band Spectral efficiency Support for international roaming Minimize modifications to the existing fixed public networks Low handsets and service cost ISDN compatibility Support for range of new services and facilities
Full Urban coverage in Western Europe WW Roaming available Subscribers can utilize multiple networks First dualband networks appearing in Europe and Asia
Subscribers can utilize multiple networks First dualband networks appearing in Europe and Asia
GSM 900 and DCS 1800 use the same standards DCS 1800 specs are defined as a delta standard to GSM specs Same GSM switches can be used for DCS 1800 Some software upgrading may be required ( if RR are manged by switch ) Dual Mode handsets will be required to support both
PCS 1900
ETSI has assisted ANSI T1 and TIA TR-46 committees to formulate specs for PCS 1900.
H
Authoring Division Name File Name Security Notice (if required)
Evolution of GSM
The History
1982 : Group Special Mobile formed within CEPT 1986 : A permenent Nucleus formed 1987 : Radio transmission Techniques are chosen.Field completed 1987 : GSM becomes ETSI technical committee 1987 : 13 Operators sign a memorandum of uderstanding 1989 : Prototype ( validation ) systems are on the air 1990 : GSM Phase I specifications are finalised 1991 : UK,France,Germany andItaly introduce GSM services 1992 : Motorola cuts over the first commercial system built COMVIQ on Sept 1 1994 : GSM Phase 2 specifications released 1996 : GSM Phase 2+ specs are now defined
trials
for
Growth
Full Urban coverage in Western Europe WW Roaming available Subscribers can utilize multiple networks First dualband networks appearing in Europe and Asia
Full Urban coverage in Western Europe WW Roaming available Subscribers can utilize multiple networks First dualband networks appearing in Europe and Asia
Technology Evolution
Full Urban coverage in Western Europe WW Roaming available Subscribers can utilize multiple networks First dualband networks appearing in Europe and Asia
Full Urban coverage in Western Europe WW Roaming available Subscribers can utilize multiple networks First dualband networks appearing in Europe and Asia
GSM 2G+
HSCSD - High Speed Circuit Switched Data
Multiple TDMA timeslots allocated for data transmission Bandwidth on demand, up to 64kBit/s Compatible with existing GSM network infrastructure
Multiple TDMA timeslots allocate Bandwidth on demand, up to 64k Compatible with existing GSM ne
H
Authoring Division Name File Name Security Notice (if required)
GSM Standards structure 01 Series : General 02 Series : Service aspects 03 Series : Network aspects 04 Series : MS-BS interface and protocols ( air interface layer 2 & 3) 05 Series : Physical layer on the Radio path ( air interface layer 1) 06 Series : Speech coding specs.
H
Authoring Division Name File Name Security Notice (if required)
stations 08 Series : BSS - MSC interfaces ( A & Abis) 09 Series : Network interworking 10 Series : Empty - For future use 11 Series : Equipment and Type approval specifications 12 Series : Operation & Maintenance
H
Authoring Division Name File Name Security Notice (if required)
OMC VMSC
BTS BTS BTS BTS BTS MS BTS BTS BTS
A
TRAU
AUC
MSC
MS - Mobile Station
Mobile station provides user access to GSM network for Voice & Data. All GSM mobiles comply to the GSM standards. Subscriber data is read from a SIM card that plugs into MS. Each MS has a unique number called as IMEI number, which is stored in EIR for authentication purposes. Mobile camps on to the GSM network through a BTS serving the cell. Mobile also scans neighbouring cells and reports signal strength. Network knows whereabouts of mobiles from HLR & VLR databases. Mobile Transmit and Receive voice at 13 KB/s over air interface.
MS BTS BTS
MS
BTS
SIM
HLR
MS - Mobile Station
Mobile Station Output Power
CLASS 1 CLASS 2 CLASS 3 CLASS 4 CLASS 5 20 watts 8 watts 5 watts 2 watts 0.8 watts Vehicle and Portable Portable and Vehicle Hand-held Hand-held Hand-held
---- Accessibility in areas of coverage ---- Talk time and Standby Time
Output Power on call is varied as commanded by BTS
H
GSM Course
FAC
2 digits
SNR
6 digits
SP
1digit
GSM Course
GSM
4-8 digits PIN code 3 false entries - blocks 8 digit PUK 10 false entries - disabled MS
MSIN 12345
Contents of SIM
Serial Number IMSI, Subscriber Key ( Ki ) Algorithms for Authentication, Ciphering Network Code PIN, PUK Charging Information Abbreviated Dialling Supplementary Features ( e.g. call barring )
SIM features and contents are personalized by the Service Activator MS also stores some temporary data on SIM during operation
GSM Course
BTS
DMR
Battery Backup
Abis H
GSM Course
BTS has a set of Transceivers to communicate with mobile's in its area One BTS covers one or more than one cell The capacity of a cell depends upon number of tranceivers in a cell. BTS is connected to the BSC through Abis Interface, which is a 2Mb/s BTS transmit and receive voice at 13 kbps over air interface to the mobiles. BTS commands mobiles to set Tx. power, timing advance and Handovers
BTS
MS BSC
MSC
GSM Course
CELL
H
RF Channels
Abis - 2 MBits/s
BTS Architecture 1
Rx A Tx Rx B
BSC
BPF
RFU
COM
A1 B1
Splitter
A2 B2
TRX 1
H
TRX 2
T R A U
Fr R e f
T S B
BTS
Processor Modules
GSM Course
BTS Architecture 2
BTS Cabinet. 3 Channel. Single Sector
NEM Proprietary Interface BTS Alarms ABIS over G703 Backplane TRX Unit
TRX Logic
Interface
CPU
Antenna
LNA
Combiner Coupler
GSM Course
Several BTS's are connected to one BSC BSC manages channel allocation,handovers and release of channels at connected BTS's BSC connects to each BTS on an Abis interface & to the MSC on A interface BSC has the entire database for all cell parameters associated with the BTS's.
Abis A MSC
GSM Course
MSC P C M P C M P C M T R A U T M G
T S B
BSC
Processor Modules
GSM Course
Abis Interface
E1 / T1
Abis is a G.703 interface. It could be E1 or T1 Abis carrries Traffic information of all the mobiles in the cells controlled by the BTS. Abis also carriers signalling information between BTS and BSC Signaling over Abis is done by LAPD protocols LAPD has several modes of implementation --- LAPD --- LAPD Concentrated --- LAPD Multiplexed
H
GSM Course
Abis Interface
LAPD Modes
LAPD Signaling for each TRX is on a dedicated 64 Kbps circuit Maximum Signalling for 10 Transceivers on 1 E1 link
64 kbps 64 kbps 64 kbps 64 kbps 64 kbps 64 kbps 64 kbps 64 kbps 64 kbps 64 kbps
0 1 2 3 4 5 6 7 8 9
Sync TRX Signaling 4 Traffic Channels 4 Traffic Channels TRX Signaling 4 Traffic Channels 4 Traffic Channels TRX Signaling 4 Traffic Channels 4 Traffic Channels
Abis Interface
LAPD Modes
LAPD Concentrated mode 1 Signaling for 4 TRX's is on a dedicated 64 Kbps ciruit Maximum Signalling for 13 Transceivers on 1 E1 link
64 kbps 64 kbps 64 kbps 64 kbps 64 kbps 64 kbps 64 kbps 64 kbps 64 kbps 64 kbps 64 kbps
0 1 2 3 4 5 6 7 8 9 10
Sync 4 x TRX Signaling 4 Traffic Channels 4 Traffic Channels 4 Traffic Channels 4 Traffic Channels 4 Traffic Channels 4 Traffic Channels 4 Traffic Channels 4 Traffic Channels 4 x TRX Signaling
Abis Interface
LAPD Modes
LAPD Concentrated mode 2 Signaling for All TRX's is on a dedicated 64 Kbps ciruit Maximum Signalling for 15 Transceivers on 1 E1 link
64 kbps 64 kbps 64 kbps 64 kbps 64 kbps 64 kbps 64 kbps 64 kbps 64 kbps 64 kbps 64 kbps
0 1 2 3 4 5 6 7 8 9 10
Sync ALL TRX Signaling 4 Traffic Channels 4 Traffic Channels 4 Traffic Channels 4 Traffic Channels 4 Traffic Channels 4 Traffic Channels 4 Traffic Channels 4 Traffic Channels 4 Traffic Channels
Abis Interface
LAPD Modes
LAPD Multiplexed Signaling for each TRX is on 16kbps subchannel. Maximum signalling for 15 TRX's on
64 kbps 64 kbps 64 kbps 64 kbps 64 kbps 64 kbps 64 kbps 64 kbps 64 kbps 64 kbps 64 kbps
0 1 2 3 4 5 6 7 8 9 10
Sync TRX Signaling/ 3 Traffic Channels 4 Traffic Channels TRX Signaling/ 3 Traffic Channels 4 Traffic Channels TRX Signaling/ 3 Traffic Channels 4 Traffic Channels TRX Signaling/ 3 Traffic Channels 4 Traffic Channels TRX Signaling/ 3 Traffic Channels 4 Traffic Channels
The MSC is based on ISDN switching. The Fixed Network is also ISDN based ISDN has speech rate of 64kbps. Mobile communicates at 13 Kbps TRAU converts the data rates between 13 KB/s GSM rate to 64 Kbits /s Standard ISDN rate TRAU can be colocated with the BTS,BSC or MSC or it can be a separate unit.
MS P S T N
RF Channels
MS
BTS
BSC
A interface 2 MBits/s
MSC TRAU
VOICE
13 KBits/sec
16 KBits/sec
16 KBits/sec
64 KBits/sec
LOCATION OF TRANSCODER
Colocated with MSC,BSC,BTS Separate Unit
16 kbps
BSC
GSM Course
VLR
BSC's
H
GSM Course
BSC's
HLR
HLR will have the series of all subscriber numbers, which may not be activated or issued .
GSM Course
HLR
VLR
MSC communicates with HLR for susbcribers coming from different MSC's and if found valid, then registers them in its VLR
GSM Course
Authentification is a process by which a SIM is verified Secret data and the verification process alogorithm are stored at AUC AUC is the element which carries out the verification of SIM AUC is associated with the HLR
MSC
MS
HLR
AUC
GSM Course
EIR is the Mobile Equipment Database which has a series of IMEI's MSC asks the Mobile to send its IMEI MSC then checks the validity of IMEI with the EIR All IMEI are stored in EIR with relevant classfications
White List
EIR
MSC
H
GSM Course
BC - Billing Centre
BC Generates the Billing Statement for each Subscriber BC may be directly connected to the MSC MSC sents the billing information ( duration of call ) to BC BC then produces the billing amount based on the units set
BC
GSM Course
It is central monitoring and remote maintenance centre for all network elements OMC has links to BSC's and MSC BSC's
BTS's
MSC
BTS's
OMC System
BTS's
asasasaaaaa aqwtttsssdfaa qwrqrncnceas asasasaaaaa aqwtttsssdfaa qwrqrncnceas asasasaaaaa aqwtttsssdfaa qwrqrncnceas
OMC Terminals
GSM Course
BSC's
BTS's
MSC
BTS's
OMC System
asasasaaaaa aqwtttsssdfaa qwrqrncnceas asasasaaaaa aqwtttsssdfaa qwrqrncnceas
OMC - R
H
OMC - S
GSM Course
OMC - RADIO
BTS BSC
TRANSCODER
BTS
BTS
BTS
BSC
GSM Course
OMC - Functions
OMC Functions
Alarm Monitoring
Configuration Changes
Performance Analysis
Equipment Failure Alarms BTS, BSC site Failures MSC and pheripheral failures
Cell Traffic Analysis No of calls, o/g ,i/c PSTN, Call drops etc.
GSM Course
Equipment Alarms
BTS , BSC , Transcoder Failures Link Failures Module Failures ( Transceiver,Processors)
Transceiver 1 Fail
17:35hrs Site A Transceiver 1 Fail
Network
BTS A
GSM Course
Cell Traffic
GSM Course
MSC SMSC
GSM Course
MSC VMSC
GSM Course
VLR
G D
VLR
C F
HLR/AUC
HLR/ AUC
Abis BTS
EIR
OMC OML I E SUPP H GMSC
GSMSC
PSTN
SS7/R2
GSM Course
A GSM Cell
BCH
Broadcast CHannel
BTS
TCH
Traffic CHannel
0.3 GMSK Modulation 270.833 kbits/sec. rate Variable Tx Power and Timing
Amplitude
3 2 1 0 7 1 2 3 4 5 6
Timeslot
Frequency
ARFCN
Amplitude
Frequency
Speech Coding
PCM Coding - 64 KB/s
PSTN
Air Interface
RPE and LTP Coder ( Regular Pulse Excited - Long Term Prediction ) RPE-LTP is a combination of RELP and MPE-LTP codecs. Coverts Speech to Low Data Rate 20ms Speech makes 260 Bits Output 13 kbit/s
50
Very Important Bits
132
Important Bits
78
Other Bits
Error Correction
50 Type Ia
Type Ia 50
Block Code
CRC 3
Type Ib
132
Type II
78
262 Bits in
Type Ib 132
Type II 78
Re-ordering
Type Ia 25 Type Ib 66 CRC 3 Type Ib 66 Type Ia 25 Tail 4 Type II 78
Type II 78
456 Bits Ou
456
Diagonal Interleaving
456
57 57 Bits from 20ms of Speech
456
57 57
57
57
57
57
57
57
57
57
57
57
57
57
57
57 57
57 57
57 57
57 57
57 57
57 57
57 57
TCH
Traffic Channel (TCH) Bursts Carry Two 57 Bit Blocks (114) Each 120ms of Speech = 456x6 = 2736 bits 2736 / 114 = 24 bursts i.e. 24 frames (mobile Tx once per frame) Multiframe has 26 frames in 120ms There are 2 spare frames ......One SACCH, One Idle
Bits to be Txed:
HELLO FOLKS HHEELLLLOO FFOOLLKKSS ELSOLHLOFK LEOLSHOLKF EL SOL HLOFK LEOLSHOLKF HHEELLL -OO FFO -LLKK -S
Convolutional
Interleaver
Bits Rxed:
DeInterleaver
De-Interleaved:
Viterbi Decoded:
HELLO FOLKS
50 1a
78 11
22.8 Kbps
GSM Course
TRAU Frame
T0 Synch T1 Sign T2 Abis T3 T T T T T30 T31
T = 16 Kbps
260 bits info + 60 TRAU bits = 320 bits/ 20ms = TRAU Frame 60 bits contains Frame Information data which indicates speech,data,idle,O & M , full-rate/half-rate.
Midamble
8 Midamble Patterns (Colour Codes) of 26 bits RACH and SCH have Longer 41 and 64 bit Midambles Equalizer Estimates Channel Impulse Response From Midamble Mathematically Construct Inverse Filter Uses Inverse to Decode Data Bits
-30 dB
-30 dB
Time
Phase
+90deg
-90deg
45 MHz
2 5 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7 0 1
Uplink
Uplink Lags Downlink by 3 Timeslot periods Uplink and Downlink use same Timeslot Number Uplink and Downlink use same Channel Number (ARFCN) Uplink and Downlink use different bands (45MHz apart for GSM900)
RXLEV is the received power level RXQUAL is the received quality. It is the bit error measured on the Midamble
RXQUAL
0 1 2 3 4 5 6 7 < 0.2 % 0.2 - 0.4 % 0.4 - 0.8 % 0.8 - 1.6 % 1.6 - 3.2 % 3.2 - 6.4 % 6.4 - 12.8 %
UPLINK
RXLEV
RXLEV
RXLEV
RXLEV
RXLEV
Mobile is commanded to change its Transmit Power Change in Power is proportionate to the Path Loss Change is Power is done in steps of 2 dbs
Tx Level 5 6 7 . 14 15
Power dBm 33 31 29 . 15 13
BTS
1. 2. 3. 4. 5. 6. 7.
To pick up employees in the morning To receive company guests from airport To carry material to the site / stores To Collect mail/courier To drop the employees back home To get a doctor in case of emergency To carry company gusts for a dinner
If there were two vehicles, we can allocate a set of tasks to one , and rest to the other. However, since both are identicle vehicles, there is greater flexibility in usage.
7 6 5 4 3 2 1 0
4 FRAME NUMBER
Concept of Frames
Time slot Number.. 0 1 2 3 C T T T 4 T 5 T 6 T 7 T Frame No. 1
0 C
1 T T
2 T
4 T
5 T
6 T
7 T Frame No. 2
0 C T
1 T
2 T
3 T
4 T
5 T
7 T Frame No. 3
Frame No. 4
0 1 2 3
C U1
C U1
C U1
C U1
C U8
C U8 U2 U3
C U8 U2 U3
C U8 U2
U2 U3 U3 U4 U5 U6 U3 U4 U5 U6 U7 U3 U4 U5 U6 U7
U2 U3 U4 U5
4 U4 5 6 7 U6 U6 U6 U5 U6 U5 U6 U5 U5 U5 U4 U4 U4
U7
U7
U7
4.615ms
Frame Timeslot
3
1 2
8 Timeslots
(normal burst)
156.25 Bits
Tail bits
Guard Period
12 3 4 56
CONTROL CHANNELS
BCH BROADCAST CHANNELS CCCH COMMON CONTROL CHANNELS DCCH DEDICATED CONTROL CHANNELS
TRAFFIC CHANNELS
FCCH Frequency Correction SCH Channel Synchronisation Channel BCCH Broadcast Control Channel
SDCCH Standalone SACCH Dedicated Slow Control FACCH Associated Channnel FAST Control ASSOCIATED Channnel CONTROL
One ARFCN, On all the time, in every cell Uses Timeslot 0 on a channel, in Downlink. Allows Mobiles to tune to BTS freq. - FCCH This channel carries a 142 bit zero sequence and repeats once in every 10 frames on BCH Allows Mobile to Synchronise - SCH This channel carries the Frame number and BSIC in encrypted data format. Amidamble of 64 bits helps mobiles to synchronize. SCH also repeats once every 10 Frames. Allows Mobiles to identify Network - BCCH Used to broadcastl Cell and Network identity. BCCH occupies 4 frames on BCH. and repeats once every Multiframe.
BCH
3 8.25
Stop Guard Bits Bits
SCH
3
Start Bits
39
Encrypted Data Bits
64
Training Sequence
39
Encrypted Data Bits
3 8.25
Stop Guard Bits Bits
BCH
Start Bits
57 57 57 57
26 26 26 26
57 57 57
8.25
BCCH
8.25
8.25
57
8.25
CCCH shares Timeslot 0 with BCH on a Multiframe CCCH consists of PCH , RACH & AGCH. PCH - Paging Channel is used to alert mobiles on incomming calls. PCH carries IMSI to page for Mobiles in the cell. PCH is Downlink channel. RACH - Random Access Channel - is a short burst sent by mobile to BTS , to initiate a call request . RACH uses Timeslot 0 on reverse BCH channel on Uplink. AGCH - Access Grant Channel - When mobile sends a RACH to BTS, BTS responds by allocating a SDCCH channel to mobile over AGCH.
BCH
41
Synchronization Bits
36
Encrypted Data Bits
3
Stop Bits
68.25
Extended Guard Period
Used by the MOBILE to get attention from BASE STATION in the Uplink. Several mobiles might originate RACH simultaneously. RACH uses a Slotted ALOHA access scheme. Mobile doesn't know path delay So RACH has to be a special SHORT BURST Mobile sends normal burst only after getting Timing Advance on Downlink SACCH
0 1 2 3 FCCH - Frequency correction Channel SCH - Synchronisation Channel BCCH - Broadcast Control Channel AGCH - Access Grant Chan PCH - Paging Channel
26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 0 1 2
RA RA RA RA RA RA RA RA RA RA RA CH CH CH CH CH CH CH CH CH CH CH RA RA CH CH
RACH - Random Access Channel ( A short burst is transmitted by mobile towards BTS on RACH)
Dedicated Control Channels have a TCH like allocation. DCCH have three Sub Channels. SDCCH - Standalone Dedicated Control Channel This is used as an interim channel before final assignment of TCH. SDCCH is used for signaling and Authentication message transfers. FACCH - Fast Associated Control Channel . FACCH is used by BTS to command a handoff to the mobile. A TCH frame is used up by FACCH , since handoff has to take place on priority. SACCH - Slow Associated Control Channel - SACCH flows at a slower rate on Uplink & Downlink along with TCH or SDCCH. During a call, SACCH flows once for every 24 Frames of TCH .
USED DURING CALL SET-UP Stepping Stone between BCH and TCH Used for Authentication Etc.
SDCCH BCH BCH TCH SDCCH BCH
DOWNLINK ( BTS - MS ) Mobile Tx Power Commands Mobile Timing Advance Cell's Channel Configuration UPLINK ( MS - BTS ) Received signal quality report (RXQual) Received signal level report (RXLev) Adjacent BCH power measurements Mobile's status
57 bits Data
Miidamble
INTERRUPTS TCH ON UPLINK AND DOWNLINK Rapid message exchange for handovers Control Bits either side of midamble: Indicate TCH ( 0 ) or FACCH ( 1 )
SDCCH - Combined Channel Config ( Shares Time slot 0 with BCH and CCCH )
Frame number ( DOWN LINK ) 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25
F S B B B B A A A A F S P P P P P P P P F S D D D D
0 1 2 3 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50
D D D D F S D D D D D D D D F S H H H H H H H H I
0 1 2 3
SDCCH ( D ) : Standalone Dedicated Control Channel SACCH ( H ) : Slow Associated Control Channel
26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 0 1 2
RA RA RA RA RA RA RA RA RA RA RA SD SD SD SD SD SD SD SD RA RA SD SD SD SD CH CH CH CH CH CH CH CH CH CH CH CC CC CC CC CC CC CC CC CH CH CC CC CC CC H H H H H H H H H H H H
RACH - Random Access Channel ( A short burst is transmitted by mobile towards BTS on RACH)
bits
Guard Period
Midamble
Traffic Channel carries the Voice data. Two blocks of 57 bits contain voice data . One TCH is allocated for every active call. While call is in
progress if there is degradation in quality of current channel, BTS may shift the communication to another TCH on a different Carrier and/or Time slot . A Full rate TCH carries 13 KB/s voice data , and Half rate TCH carries a 6.5 KB/s voice data.
T T
T T
SACCH
Idle
Ta Tb Ta Tb Ta Tb Ta Tb Ta Tb Ta Tb Aa Ta Tb Ta Tb Ta Tb Ta Tb Ta Tb Ta Tb Ab
SACCH-a
SACCH-b
7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25
A T A T A T A T A A A F T S T P T P T P T P T D T D T D T D T D D TIdle
5 T 6 T 7 T T
T - TCH
SA - SACCH
I - Idle
FRAMES
1 Burst = 577usecs 1 TDMA Frame 0 1 2 3 4 5 6 7 = 8 bursts = 4.616 ms
Multiframe 0 23 24 25
48 49 50
1 Superframe = 51 x 26 CCH MF = 1326 TF = 6.12 sec = 26 x 51 TCH MF = 1326 TF 0 1 3 2044 2045 2046 2047 2 1 Hyperframe = 2048 Superframes = 2715648 TDMA Frames = 3 hrs 28 min 53 sec 760 ms
GSM Course
BTS
Timing Advance
RACH Burst T Synch Seq B 41 bits Encrypted bits 36 T B Guard Period 68.25 bp 63 bits Timing Adv 5.25 GP
BSS calculates access delay from RACH in terms of bits Informs Mobile to delay its timing in terms of bits Maximum Timing Advance of 63 bits
H
UPLINK C1 C2 C3
GSM Operations
DTX Location Update Mobile Originated Cell Broadcast Short Message
Call
Mobile Terminated
Service
Emergency Calls Supplementary
Call
Handover Security Procedures Cell Barring
Services
Roaming
Mobile Turn-On
Mobile Searches for Broadcast Channels (BCH) Synchronizes Frequency and Timing Decodes BCH sub-channels (BCCH) Checks if Network Allowed by SIM Location Update Authentication
Location Area
BTS
Location Area 1
BTS
BSC
BTS
BTS
Location Area 2
BSC
MSC
BSC
BTS
Location Area 3
BTS BTS
BSC
L.Area = 1
L.Area = 2
L.Area = 3
Location Update
L.Area = 1
L.Area = 2
L.Area = 3
IMSI ATTACH
Mobile turns off and sends an IMSI Detach to MSC. Mobile turns on again and compares LAI. If same,sends an IMSI attach to MSC.
H
Mobile turns on power. Reads the new LAI. If different,does a Location Update.
Mobile enters non-coverage zone. MSC goes on sending Pages Mobile has to inform MSC after a set period.
Location Update
Mobile Changes Location Area Reads the new Location Area from BCCH Sends a RACH ( request for channel ) Gets a SDCCH on AGCH Sends its IMSI and new & old LAI in a Location Update Request to MSC on SDCCH MSC starts Authentication If successful, Updates the new Location area for the Mobile in the VLR Sends a confirmation to the Mobile Mobiles leaves SDCCH , and comes to idle mode
Security Features
Authentication --- Process to verify the Authenticity of SIM --- Mobile is asked to perform an operation using an identity unique to SIM. Ciphering
--- Process of coding speech for secrecy --- The speech bits are EXORed with bit stream unique to MS
H
Security Features
TMSI Reallocation
Loc Upd ( IMSI ) TMSI Allocation Call Setup ( TMSI ) TMSI Reallocation
Security Features
Identity Check
EIR
H
HANDOVER
Cell 1
Cell 2
--- Handover is a process by which the control/communication of a Mobile is transferred from one cell to another
Handover Decision
BSC processes the measurement reported by Mobile and the BTS. BSS performs averaging function on these measurements every SACCH frame ( 480ms).
Handover Decision algorithm is activated after a set number of SACCH frame periods by comparison against Thresholds.
TYPES OF HANDOVERS
INTRA - CELL HANDOVER INTER - CELL HANDOVER INTRA - BSC HANDOVER INTER - BSC HANDOVER INTER - MSC HANDOVER
BTS
BTS C0 C0
BSC
BTS
--- In this type of Handover,the Mobile is handed over to a cell which belongs to another BSC. --- The MSC is completely involved in this Handover
GMSC
MSC
BSC
BTS
--- If the cell belongs to another MSC,then it is Inter-MSC handover. --- In this case the handover takes place through the interconnecting element (PSTN) between the MSC's
BTS
Cell Barring
Every Mobile has an access class . Every cell defines the Mobile classes which are barred
access.
USE OF CELL BARRING
--- Reserving Cells for Handovers. --- Reserving Cells for a certain Mobile Class.
H
What is DTX ?
Both users talk alternately. Each direction of Transmission is only 50 %
CELL BROADCAST
Message is continuously broadcasted in cell/or cells Broadcast is done on SDCCH BCCH informs the mobile the details of SDCCH for CBCH Mobile tunes to SDCCH at certain intervals and reads messages All Mobiles dont support this feature
SMS Centre
MSC/ VLR
BSC
BTS
Emergency Calls
-- GSM Specs define ' 112' as emergency number -- '112' is accessible with or without SIM -- Without SIM it is sent on the best channel -- Mobile on sensing '112' sets the establishment cause to emergency call in the RACH -- Routing of this call can be done to a desired location defined in the Switch.
H
PLMN "A"
STP
PLMN "A"
PLMN "Z"