GSM

BASICS
 GSM
IN THIS PRESENTATION
Network Structure
Network Components and Functions
Radio Interface
Multiple Access Technique
Digital Voice Transmission
Modulation Method
Logical Channels Traffic & Control

Operational Concepts

Other Salient Features of RF I/F- DTX, Time Alignment

Diversity, Fr. Hopping,
Power Control.
 Network Components

Mobile Station (MS)

Switching System (SS)
Base Station System (BSS)
Operation and Maintenance System (OMC)
 OSS
HLR
(
B
PSTN
T
S ISDN

B
T MSC VLR
S BSC
BSC Data
Networks
A Interface
B A-bis interface
T
S

Air interface MSC VLR

 Network Structure

Cell
A cell is the basic unit of a cellular
system and is defined as the radio
coverage given by one BS antenna
system.
Each cell is assigned a unique CGI.
 Network Structure

LOCATION AREA
A LA is defined as a group of cells. Within the
network, a subscribers location is known by the LA
which they are in.
The identity of the LA in which an MS is currently
located is stored in the VLR. (LAI)
 Cells & LA

LA2

LA3
LA1
VLR
C3 LA6
LA4 C2
C1
MSC
C4
C5
LA5 C6
C=CELL
 Network Structure

MSC Service Area

An MSC Service Area is made up of LAs and represents
the geographical part of the network controlled by one
MSC.
MSC Service Area

LA2
VLR LA3
LA1
MSC

LA4 LA6
LA5
 Network Structure

PLMN SERVICE AREA

A PLMN service area is the entire set of cells served by
one network operator
and is defined as the area in which an operator offers
radio coverage and access to its network.
 PLMN Service Area

I II
I
MSC
MSC
VLR

MSC VLR
V
MSC VLR

III
IV
 Network Structure

GSM SERVICE AREA

The GSM service area is the entire geographical area in
which a subscriber can gain access to a GSM network.
Relation between areas in GSM

Location
CellArea
Location Area
MSC Service Area
PLMN Service Area
GSM Service Area
 Mobile Station

GSM MSs consist of:

Mobile Equipment
Subscriber Identity Module
Functions of Mobile Station

Voice and data transmission& receipt

Frequency and time synchronization
Monitoring of power and signal quality of the
surrounding cells
Provision of location updates even during inactive state
SIM

Fixed data stored for the subscription:

IMSI,
Authentication Key, Ki
Security Algorithms:kc,A3,A8
PIN&PUK
SIM

Temporary network data:

Location area of subscriber and
forbidden PLMNs
Service data:
language preference, advice of charge
 KEY TERMS

An MS can have one of the following states :

Idle: the MS is ON but a call is not in

progress.
Active: the MS is ON and a call is in
progress.

Detached: the MS is OFF.

 Network Identities

MSISDN
IMSI
TMSI
MSRN
IMEI
MSISDN

Mobile Station ISDN Number

The MSISDN is registered in the telephone directory and
used by the calling party for dialing.
MSISDN shall not exceed 15 digits.
NDC--National Destination Code
SN--Subscriber Number
1 to 3 digits Variable Variable
CC NDC SN

MSISDN : not more than 15 digits

IMSI

International mobile subscriber Identity

The IMSI is an unique identity which is used
internationally and used within the network
to identify the mobile subscribers.
The IMSI is stored in the subscriber identity
module (SIM), the HLR, VLR database.
 IMSI
3 digits 3 digits Not more than 9 digits

MCC MNC MSIN

NMSI

IMSI : Max. 15 digits

MCC--Mobile Country Code, MNC--Mobile N/W Code, MSIN--Mobile
Station Identification Number
NMSI--National Mobile Station Identity , assigned by Individual
Administration.
Mobile station Identification Number. It identifies the subs. In a PLMN.
First 3 digit identifies the Logical HLR-id of Mobile subs.
 TMSI
Temporary Mobile subscriber Identity

TMSI is a temporary IMSI no. made known to an MS at

registration.
The VLR assigns a TMSI to each mobile subscribers
entering the VLR area.
Assigned only after successful authentication.
TMSI has only local significance i.e. within VLR area &
controlled by the VLR.
TMSI changes on location updation.
TMSI is less than 8 digit.
MSRN

Mobile Station Roaming Number

The MSRN is used in the GMSC to set up a connection
to the visited MSC/VLR.
MSRN--is a temporary identity which is assigned
during the establishment of a call to a roaming subs.
CC NDC SN

CC--Country Code, NDC--National Destination Code, SN Servicing Node

IMEI

International Mobile Equipment Identity

The IMEI is an unique code allocated to each
mobile equipment. It is checked in the EIR.
IMEI check List
White List
Grey List
Black List
BASE STATION SYSTEM (BSS)

MSC/VLR

BSC BSC

BSC
BSS

n BTS n BTS
Base Transceiver Station - BTS

Handles the radio interface to the mobile station.

Consists of one or more radio terminals for
transmission and reception
Each Radio terminal represents an RF Channel
TRX and MS communicates over Um interface
Received data transcoding
Voice encryption/decryption
Signal processing functions of the radio interface
Uplink Radio channel power measurements
Base Station Controller - BSC

Provides all the control functions and physical links

between the MSC and BTS
External Interfaces
Abis interface towards the BTS
A interface towards the MSC
Monitors and controls several BTSs
Management of channels on the radio interface
Alarm Handling from the external interfaces
Performs inter-cell Handover
Switching from Abis link to the A link
Interface to OMC for BSS Management
MSC-BSS Configurations

A BTS
MSC BSS A-bis BTS BTS

BSC BTS BTS

A-bis

BTS
 Switching System (SS)
SS7 Signalling
Traffic Path VLR D

C HLR AUC
F
E
Other
EIR A
MSC MSC

(PSTN)

(BSS)
Mobile Switching Centre - MSC

Switching and call routing

Charging
Service provisioning
Communication with HLR
Communication with VLR
Communication with other MSCs
Control of connected BSCs
Mobile Switching Centre - MSC

Echo canceller operation control

Signaling interface to databases like HLR, VLR.

Gateway to SMS between SMS centers and subscribers

Handle interworking function while working as GMSC

VISITOR LOCATION REGISTER (VLR)

It controls those mobiles roaming in its area.

VLR reduces the number of queries to HLR

One VLR may be incharge of one or more LA.

VLR is updated by HLR on entry of MS its area.

VLR assigns TMSI which keeps on changing.

IMSI detach and attach operation

Data in VLR

IMSI & TMSI

MSISDN
MSRN.
Location Area
Supplementary service parameters
MS category
Authentication Key
Home Location Register(HLR)

Reference store for subscribers parameters, numbers,

authentication & Encryption values.

Current subscriber status and associated VLR.

Both VLR and HLR can be implemented in the

same equipment in an MSC.

one PLMN may contain one or several HLR.

 Home Location Register(HLR)

Permanent data in HLR

Data stored is changed only by commands.

IMSI, MS-ISDN number.

Category of MS ( whether pay phone or not )

Roaming restriction ( allowed or not ).

Supplementary services like call forwarding

 Home Location Register(HLR)

Temporary data in HLR

The data changes from call to call & is dynamic

MSRN

RAND /SRES and Kc

VLR address , MSC address.

Messages waiting data used for SMS

EQUIPMENT IDENTITY REGISTER ( EIR )

This data base stores IMEI for all registered mobile

equipments and is unique to every ME.

Only one EIR per PLMN.

White list : IMEI, assigned to valid ME.

Black list : IMEI reported stolen
Gray list : IMEI having problems like faulty software,
wrong make of equipment etc.
 AUthentication Center (AUC)

To authenticate the subs. attempting to use a

network.
AUC is connected to HLR which provides it
with authentication parameters and ciphering
keys used to ensure network security.
AUC Functions

To perform subscriber
authentication and to establish
ciphering procedures on the radio
link between the network and MS.
AUC Functions

Information provided is called a

TRIPLET consists of:

1. RAND(non predictable random number)

2. SRES(Signed response)
3. Kc(ciphering key)
Operations and Maintenance Centre
OMC

The centralized operation of the various units in

the system and functions needed to maintain the
subsystems.

Dynamic monitoring and controlling of the

network
Functions Of OMC

-O&M data function

-Configuration management

--Fault report and alarm handling

-Performance supervision/management

-Storage of system software and data

 GSM
RADIO INTERFACE
Most Important Interface
Full Compatibility between mobile stations of various
Manufacturers & Networks of different vendors to help
roaming
To increase spectral efficiency
-- Large number of simultaneous calls in a given
bandwidth
-- Frequency Reuse
-- Interference
-- Use of Interference Reduction Techniques
 GSM
Uplink & Downlink

Frequency Bands
GSM 900 Mhz
DCS 1800 MHz

B
T
S
 GSM Specifications

RF Spectrum :
GSM 900
Mobile to BS (UP-LINK) - 890 to 915 MHz
BS to Mobile (DOWN -LINK) - 935 to 960 MHz
Bandwidth - 25 MHz
GSM 1800 ( DCS )
Mobile to Cell (UP-LINK) - 1710 to 1785 MHz
Cell to Mobile (DOWN -LINK) - 1805 to 1880 MHz
Bandwidth - 75 MHz
 GSM Specifications

Carrier Separation - 200 kHz

Duplex Distance - 45 MHz

No. of RF Carriers - 124

Access Method - TDMA/FDMA

Modulation Method - GMSK

Transmission Rate - 270.833 Kbps

Speech Coding - Full rate 13 Kbps

Half rate 6.5 Kbps
 GSM - MULTIPLE ACCESS

GSM uses both FDMA & TDMA

FDMA Access along Frequency axis

Each RF carrier 200khz apart

Total 124 RF Channels available.
One or more carrier assigned to each base station

1 2 3 4 5 6 124

...
Freq
890.2 890.4 890.6 890.8 891.0 914.8 Mhz.
 GSM - MULTIPLE ACCESS

Absolute Radio Freq Carrier Number (ARFCN) 1 and 124 not used
until it is co-ordinated with Non -GSM operators in adjacent freq. bands.

Thus for practical purposes only 122 RF Carriers are available.

Frequency for any ARFCN ( n) can be calculated from :

F up-link (n) = 890.2 +0.2* ( n-1 ) MHz

F down-link (n) = 935.2 +0.2* ( n-1 ) MHz

 GSM
FDMA

890 915 935 960

25 MHz 25 MHz

0 1 2 0 1 2

Mobile to Base Base to Mobile

(MHz)
890.2 890.4 890.6 935.2 935.4 935.6
200 kHz
200 kHz
45MHz
Channel layout and frequency bands of operation
 GSM
TDMA
Amplitude

45 MHz

7 8 7 8
6 6
5 5
4 4
3 3
2 2
1 1
Frequency
F1 F2 F1 F2
(Cell Rx) (Cell transmit)

Typical TDMA/ FDMA frame structure

 GSM
Analog
Speech to Radio waves Analog

Speech Coding Speech Decoding

Channel Coding Channel Decoding

Interleaving De-interleaving

Burst formatting Burst formatting

Ciphering Deciphering

Modulation Demodulation
200kHz BW 200kHz BW
 GSM
Digital Voice Transmission

Speech Coding

- In GSM speech coding a block of 20 ms is encoded in one set of

260 bits.

- This calculates as 50X 260 = 13 kbps. Thus GSM speech coder

produces a bit rate of 13 kbps per subscriber.

- This provides speech quality which is acceptable for mobile

telephony and comparable with wire-line PSTN phones.
 GSM
Digital Voice Transmission

Channel Coding

- It uses 260 bits from speech coding as input and outputs 456
encoded bits.

Interleaving

- These 456 bits for every 20 ms of speech are interleaved forming

eight blocks of 57 bits each.
- In one burst one block of 57 bits from one sample and another
block from another sample are sent together.
 GSM
Digital Voice Transmission
Burst Formatting
To counteract the problems encountered in radio path:
- Additional bits as training sequence added to basic speech/data.

- Total of 136 bits added, bringing overall total to 592 bits.

- Each TS of TDMA frame is 0.577 ms long and during this time

156.25 bits are transmitted.

- One burst contains only 148 bits. Rest of the space, 8.25 bits
time, is empty and is called Guard Period ( GP ).

- GP enables MS/BTS to ramp up and ramp down.

 Interleaving & Burst Formatting
1st Sample of 20 ms speech 2nd Sample of 20 ms speech
456 bits 456 bits
Sample 1 Sample 2
D D D D D D D D D D D D D D D D
1 2 3 4 5 6 7 8 1 2 3 4 5 6 7 8

1 2 3 4 5 6 7 8
Stream of Time Slots

3 57 1 26 1 57 3 8.25

Normal Burst
 FDMA/TDMA Scheme
TIME

BP2
BP1
BP8
BURST
BP7
F
BP6
BP5
R
BP4 A
BP3 M
BP2
E
BP1 FREQ
890.2 890.6 891.0
890.0 890.4 890.8 891.2 915.8MHz
3 CC SMS SS 142 3 8.25
T CM Fixed Bits T GP

FCCH Burst

3 CC SMS
57 SS 1S 26 1 57 3 8.25
T CM
Encrypted Training S Encrypted T GP

Normal Burst
 PHYSICAL CHANNELS

8 7 6 5 4 3 2 1 FRAME OF 8 TIME SLOTS

8 7 6 5 4 3 2 1 FRAME REPETITION

8 7 6 5 4 3 2 1 8 7 6 5 4 3 2 1 8 7 6 5 4 3 2 1

1
1 2 3 4 5 6 7 8 2
PHYSICAL CHANNELS
3 1
1 2 3 4 5 6 7 8
4
1 2 3 4 5 6 7 8
5
1 2 3 4 5 6 7 8 6
7
1 2 3 4 5 6 7 8 8
 GSM-- TDMA STRUCTURE

TDMA 8 Time Slots / RF Channel

Time slot duration 0.577m sec or 15 / 26 m sec
Frame 8 Burst Periods ( Time Slots)

= 8 15/26 = 4.615 m sec

Multi Frame Traffic 26 4.615 = 120 msec

Control 51 4.615 = 235.365 m sec

Super Frame 51 Traffic Multi frames

26 Control Multi frames

Hyper Frame 2048 Super Frames = 3 28 52.76

hr min sec
 GSM Radio Interface - CYCLES
Hyperframe = 2048 Superframes
3 Hours 28 Minutes 53 Seconds and 760 milliseconds

0 2047

Superframe = 26 51
multiframes
0 6.12 Seconds 50

0 25

26 Multiframe 51 Multiframe
120 mS Approx 235 mS
0 1 2 24 25 0 1 48 49 50

TDMA frame
4.615 mS
0 1 2 3 4 5 6 7
 Organisation of Speech & Data
Frames 0-11 : TCH Frames 12 : SACCH Frames 13-24 : TCH Frames 25 : Unused
0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25

26 frame
multiframe
Duration: 120 ms
TDMA frame
BP 0 BP 1 BP 2 BP 3 BP 4 BP 5 BP 6 BP 7 Duration: 60/13
ms
=4.615 ms

3 57 1 26 1 57 3 8.25
Tail Data bits Stealing Training Stealing Data bits Tail Guard
bits bit sequence bit bits bits
Normal burst
Duration 15/26
ms
 Logical Channels
Logical
Channels

Control Traffic
Channels Channels

Full-Rate
Half-Rate
Common Dedicated
Broadcast Control
Control
Channels Channels
Channels

FCCH RACH SDCCH

SCH PCH SACCH
BCCH AGCH FACCH
 GSM

LOGICAL CHANNELS
USER INFORMATION( TRAFFIC)
SIGNALLING INFORMATION (CONTROL)
 GSM

CONTROL CHANELS OVER LOGICAL CHANNELS

Intended to carry signaling and synchronisation

THREE TYPES OF CONTROL CHANNELS

Broadcast channel BCH

Common control channel CCCH

Dedicated control channel DCCH

 OPERATIONAL CONCEPTS

Subscribers are not allocated dedicated channels

TCH Allocated to users only when needed

Hence IDLE MODE & DEDICATED MODE

DEDICATED MODE

-- When a full Bi -directional P to P CHL

has been allocated during an established call

IDLE MODE MODE

-- When MS is powered on (active)

without being in dedicated mode
 GSM

THREE TYPES OF CONTROL CHANNELS

Broadcast control channel BCH

P- MP For Freq Correction FCCH

For Syncronisation SCH
BCCH
Common control channel CCCH

For ACCESS Management PCH

RACH
Dedicated control channel DCCH AGCH

P- P For Registration SDCCH

,authentication SACCH
& Handover FACCH
 Operational Concepts
IDLE MODE ACCESS PROCDURE DEDICATED MODE

IDLE MODE ----FCCH

---- SCH
----BCCH

MS O/G Call ----RACH

----AGCH
----SDCCH
----TCH

MS I/C Call ----PCH

----RACH
----AGCH
----SDCCH
----TCH
 GSM RF Interface

Other Salient Features Of GSM RF I/F:

- Control of Transmitted Power.

- Discontinuous Transmission.

- Timing Advance.

- Diversity.
- Frequency Hopping.
 Discontinuous Transmission (DTX)

Speech activity only 40% of time.

Needs Voice activity detection.

Determination of voice threshold vis--vis noise.

Annoying clicks/inefficient DTX.

Generation of Comfort Noise at receiver to avoid the

feeling of the set being dead.
 GSM RF Interface
Timing Alignment :
- Large distance between BTS and MS causes the problem.

- Each MS on call is allocated a timeslot on TDMA frame.

- The problem occurs when the information transmitted by MS does not

reach BTS on allocated timeslot.

TDMA Frame
0 1 2 3 4 5 6 7

TS3 B on TS2

TS2

A on TS3

BTS
 GSM RF Interface
Timing Advance : ( To counteract problem of Time Alignment )

- MS instructed to do its transmission certain bit-times earlier or later

to reach its timeslot at BTS in right time.

- In GSM systems maximum 63 bit-times can be used.

Start
- This limits the GSM cell size to 35 Km radius. Sending

0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7

Time
 GSM RF Interface
Antenna Diversity :
Space Diversity -
- Mounting two receiver antenna physically separated a distance.

- Probability of both of them being affected by a deep fading dip

at same time is low.
- At 900 MHz with antenna spacing of 5-6 m we get 3 db gain.
Polarization Diversity -
- Dual polarized antenna vertical and horizontal arrays.
Tx
Tx Rx Rx (A) Rx ( B)

No Diversity Antenna Diversity

 FREQUENCY HOPPING

Change of frequency after every frame in a pre-determined manner

SFH improves performance in multi-path fading

Provides interference diversity
Decreases required C/I

Mandatory for MS when requested by BS

FCCH ,SCH ,BCCH are not hopped

Algorithm : Cyclic or pseudorandom
 Call Handover

An essential part of any cellular radio Base 1

system
Enables conversations to continue as
Base 2
mobiles move between base station
coverage areas
Process controlled by the system
Decision mainly based on Received
Power
Decision
measurements by the mobile of the Margin

best available servers Base 1

A margin is allowed before the

decision is made - this prevents ping- Base 2

ponging Distance
Handover
Point
 GSM Handover

To
Frequency 9
MSC Time Slot 7

From
Frequency 6
Time Slot 3

BSS

MS

Subscriber
Set BSS

Landline switched at MSC

Frequency and time slot changed at MS
 Network Coverage

Depends on:
system characteristics (e.g. antenna gains etc)
type of service required (i.e. on-street, in-building etc)
terrain characteristics
surroundings (i.e. clutter - trees, buildings etc)
Typically use smaller cells in urban areas 1 km radius
high traffic
dense clutter
Larger cells in rural areas
lower traffic
less clutter
40 km radius
Network Capacity & Frequency Reuse

There are many

combinations of
sectorisation and re-use
patterns
A2
C3 C2 D3 B3 B2

A2 C1 A3 A2 A2 A2 B1 D1 D2
C1 A3

B1 C3 C2
B1 C3 D3 B3 B2 C3 C2 D3
A1

B3 B2 B3 B2 A1 D1 D2 C1 A3 A2 B1 D1
A1

C1 A3 A2 C1 A3 C3 C2 D1 B3 B2 A1

3/9 Re-use 4/12 Re-use

 Omni/Sectored Base Stations

Omni-directional Cells:
360 degree coverage
low network capacity
cost-effective
Sectored Cells:
120 degree coverage
increases network capacity
smaller coverage area
improved frequency reuse
3 times as much equipment
improved antenna gain