Escolar Documentos
Profissional Documentos
Cultura Documentos
Handover decision
1 MS
2 MS
3 MS
BTS
BTS BSC
HO_MARGIN MS BTSnew
MOBILE COMPUTING
R. Wattenhofer
9/41
MOBILE COMPUTING
R. Wattenhofer
9/42
Handover procedure
MS BTSold BSCold measurement measurement report result HO decision HO required HO request resource allocation ch. activation HO command HO command HO request ack ch. activation ack MSC BSCnew BTSnew
Security in GSM
Security services
access control/authentication
user ! SIM (Subscriber Identity Module): secret PIN (personal identification number) SIM ! network: challenge response method
confidentiality
voice and signaling encrypted on the wireless link (after successful authentication)
anonymity
temporary identity TMSI (Temporary Mobile Subscriber Identity) newly assigned at each new location update (LUP) encrypted transmission
secret A3 and A8 available via the Internet network providers can use stronger mechanisms
HO command
HO access
Link establishment clear command clear command clear complete clear complete HO complete HO complete
MOBILE COMPUTING
R. Wattenhofer
9/43
MOBILE COMPUTING
R. Wattenhofer
9/44
GSM - authentication
mobile network Ki AuC 128 bit A3 SRES* 32 bit RAND 128 bit RAND
SIM RAND 128 bit A3 SIM SRES 32 bit cipher key Ki 128 bit AuC
mobile network (BTS) Ki 128 bit A8 Kc 64 bit data A5 encrypted data RAND 128 bit RAND
MSC
SRES* =? SRES
SRES 32 bit
SRES
BTS
MOBILE COMPUTING
R. Wattenhofer
9/45
MOBILE COMPUTING
R. Wattenhofer
9/46
GR (GPRS Register)
user addresses
MOBILE COMPUTING
R. Wattenhofer
9/47
MOBILE COMPUTING
R. Wattenhofer
9/48
SGSN Gn
1 2 3
MS
BSS
SGSN
GGSN
PDN
Delay class 1 2 3 4
SDU size 128 byte SDU size 1024 byte mean 95 percentile mean 95 percentile < 0.5 s < 1.5 s <2s <7s <5s < 25 s < 15 s < 75 s < 50 s < 250 s < 75 s < 375 s unspecified
Um
Gb
Gn
Gi
MSC
HLR/ GR EIR
[J. Schiller]
VLR
MOBILE COMPUTING
R. Wattenhofer
9/49
MOBILE COMPUTING
R. Wattenhofer
9/50
Um
BSS
Gb
SGSN
Gn GGSN
Gi
UMTS
UTRA (was: UMTS, now: Universal Terrestrial Radio Access) enhancements of GSM
EDGE (Enhanced Data rates for GSM Evolution): GSM up to 384 kbit/s CAMEL (Customized Application for Mobile Enhanced Logic) VHE (virtual Home Environment)
LLC
BSSGP
fits into GMM (Global Multimedia Mobility) initiative from ETSI requirements
min. 144 kbit/s rural (goal: 384 kbit/s) min. 384 kbit/s suburban (goal: 512 kbit/s) up to 2 Mbit/s urban
MOBILE COMPUTING
R. Wattenhofer
9/51
MOBILE COMPUTING
R. Wattenhofer
9/52
IMT-2000 family
2050 2100 2150 2200 MHz Interface for Internetworking
IMT-2000
T D D
MSS IMT-2000
GSM (MAP)
ANSI-41 (IS-634)
IP-Network
China Japan
IMT-2000
MSS
IMT-TC
(Time Code)
IMT-MC
(Multi Carrier)
IMT-SC
(Single Carrier)
IMT-FT
(Freq. Time)
2000
2050
2100 2150
2200
MHz
cdma2000 3GPP2
DECT ETSI
MOBILE COMPUTING
R. Wattenhofer
9/53
MOBILE COMPUTING
R. Wattenhofer
9/54
MOBILE COMPUTING
R. Wattenhofer
9/55
MOBILE COMPUTING
R. Wattenhofer
9/56
Infrastructure Domain
Shared among all users Offers UMTS services to all accepted users
MOBILE COMPUTING
R. Wattenhofer
9/57
MOBILE COMPUTING
R. Wattenhofer
9/58
OSVF coding
1,1,1,1,1,1,1,1 1,1,1,1 1,1 X,X X X,-X SF=n SF=2n 1,-1 1,-1,-1,1 1 1,-1,1,-1 1,-1,1,-1,-1,1,-1,1 1,-1,-1,1,1,-1,-1,1 ... 1,-1,-1,1,-1,1,1,-1 SF=1 SF=2 SF=4 SF=8 1,1,-1,-1 1,1,-1,-1,-1,-1,1,1 1,-1,1,-1,1,-1,1,-1 ... 1,1,1,1,-1,-1,-1,-1 1,1,-1,-1,1,1,-1,-1 ... ...
scrambling code1
scrambling code2
sender1
Distributed Computing Group
sender2
MOBILE COMPUTING R. Wattenhofer 9/59
MOBILE COMPUTING
R. Wattenhofer
9/60
2560 chips, 10 bits 666.7 s Data 2560 chips, 10*2k bits (k = 0...6) 666.7 s Data1 TPC TFCI Data2 Pilot downlink DPCH uplink DPDCH
12.2 (voice) 60 15 64
64
144
384
240 15 16
480 15 8
960 15 4
Slot structure NOT for user separation but synchronisation for periodic functions!
FBI: Feedback Information TPC: Transmit Power Control TFCI: Transport Format Combination Indicator DPCCH: Dedicated Physical Control Channel DPDCH: Dedicated Physical Data Channel DPCH: Dedicated Physical Channel
MOBILE COMPUTING
R. Wattenhofer
9/61
MOBILE COMPUTING
R. Wattenhofer
9/62
UTRAN architecture
RNS
UE1
Node B
Iub
RNC
Time slot 666.7 s Data 1104 chips Midample 256 chips 2560 chips Data GP 1104 chips Traffic burst GP: guard period 96 chips UE3 UE2 Node B
CN
Iur
TD-CDMA 2560 chips per slot spreading: 1-16 symmetric or asymmetric slot assignment to UL/DL (min. 1 per direction) tight synchronisation needed simpler power control (100-800 power control cycles/s)
Node B
Iub
Node B RNC
UTRAN comprises several RNSs Node B can support FDD or TDD or both RNC is responsible for handover decisions requiring signalingto the UE Cell offers FDD or TDD
Node B RNS
MOBILE COMPUTING
R. Wattenhofer
9/63
MOBILE COMPUTING
R. Wattenhofer
9/64
UTRAN architecture
RNS UE Node B
UTRAN functions
RNC: Radio Network Controller RNS: Radio Network Subsystem
RNC
Iub Iu
Node B
UTRAN comprises several RNSs Node B can support FDD or TDD or both
CN
Iur
Node B
Iub
Node B RNC
Node B RNS
RNC is responsible for handover decisions requiring signaling to the UE Cell offers FDD or TDD
Admission control Congestion control System information broadcasting Radio channel encryption Handover SRNS moving Radio network configuration Channel quality measurements Macro diversity Radio carrier control Radio resource control Data transmission over the radio interface Outer loop power control (FDD and TDD) Channel coding Access control
Distributed Computing Group MOBILE COMPUTING R. Wattenhofer 9/66
MOBILE COMPUTING
R. Wattenhofer
9/65
MSC RNS
GSM-CS backbone
GMSC
PSTN/ ISDN
BTS
Abis
BSS
Iu
MSC GMSC
PSTN IuCS
AuC EIR RNS HLR GR
SGSN
GGSN
Node B
Iub
Node B RNC SGSN GGSN
Gn
Node B RNS
Gi
CN
IuPS
CN
MOBILE COMPUTING R. Wattenhofer 9/67 Distributed Computing Group MOBILE COMPUTING R. Wattenhofer 9/68
Core network
The Core Network (CN) and thus the Interface Iu, too, are separated into two logical domains: Circuit Switched Domain (CSD)
Circuit switched service incl. signaling Resource reservation at connection setup GSM components (MSC, GMSC, VLR) IuCS
Uu
UTRAN
IuCS
3G MSC
Circuit switched
UE
apps. & protocols IP, PPP, PDCP RLC MAC radio
Uu
UTRAN
IuPS
3G SGSN
Gn
3G GGSN
IP, PPP, GTP UDP/IP L2 L1
IP tunnel
PDCP
Release 99 uses the GSM/GPRS network and adds a new radio access!
Helps to save a lot of money Much faster deployment Not as flexible as newer releases (5, 6)
Distributed Computing Group MOBILE COMPUTING R. Wattenhofer 9/69
Packet switched
GTP
MOBILE COMPUTING
R. Wattenhofer
9/70
UE Node B
Uplink
simultaneous reception of UE data at several Node Bs Reconstruction of data at Node B, SRNC or DRNC
RNS controlling the connection is called SRNS (Serving RNS) RNS offering additional resources (e.g., for soft handover) is called Drift RNS (DRNS) End-to-end connections between UE and CN only via Iu at the SRNS
Change of SRNS requires change of Iu Initiated by the SRNS Controlled by the RNC and CN
Node B UE Node B SRNC CN
Node B
RNC
CN
Downlink
Simultaneous transmission of data via different cells Different spreading codes in different cells
Iub
DRNC
Iur
Iu
Iub
MOBILE COMPUTING
R. Wattenhofer
9/71
MOBILE COMPUTING
R. Wattenhofer
9/72
Iu Iub
RNC2
Iur
UE3
Abis
MOBILE COMPUTING
R. Wattenhofer
9/73
MOBILE COMPUTING
R. Wattenhofer
9/74
fast
mobile
GSM DECT
slow
SAMBA
portable
WAND ISDN
10 kbit/s 2 Mbit/s 20 Mbit/s
MEDIAN B-ISDN
30 Mbit/s
fixed
150 Mbit/s
MOBILE COMPUTING
R. Wattenhofer
[J. Schiller]
9/75