Final Review
Review <ul><li>The very basic wireless communication system </li></ul><ul><li>The bits are sent to the low pass filter to ...
Review <ul><li>The final “baseband waveform” is the addition of the impulse responses generated at different times.  </li>...
Review <ul><li>The signals we can actually send is the following, where I(t) and Q(t) are the baseband waveforms.  </li></...
Review <ul><li>Multi-path. Signals travel infinite number of paths to reach the receiver. The received signal is the addit...
Review <ul><li>Complex channels – because we can send both a sine and a cosine wave, which can be conveniently represented...
Review <ul><li>To establish the communication, we will first have to reproduce the baseband waveform. Which means that we ...
Review <ul><li>Timing synchronization – how to take samples at the correct time. </li></ul><ul><li>Using the shape of the ...
Review <ul><li>The current GNU SDR implementation uses the optimized mm algorithm. Assume a sample error of delta. The sam...
Review <ul><li>While </li></ul><ul><li>The first line is the one that does the work. In BPSK, it becomes  </li></ul>
Review <ul><li>Dealing with multipath.  </li></ul>
Review <ul><li>Important thing to remember is that even with perfect carrier phase tracking and symbol timing, when taking...
Review <ul><li>The red curve represents the other path.  </li></ul>k k+1 k-1
Review <ul><li>We can use equalization. The basic idea is to subtract the contributions of non-relevant samples from the c...
Review <ul><li>A signal can also be represented in the frequency domain. </li></ul>
Review <ul><li>LTI system.  </li></ul><ul><ul><li>A linear system is a system such that  </li></ul></ul><ul><ul><li>Suppos...
Review <ul><li>DFT:  </li></ul><ul><li>IDFT: </li></ul><ul><li>Convolution:  </li></ul>
CDMA <ul><li>Used in 3G networks. </li></ul><ul><li>Direct Sequence Spread Spectrum: spread a data bit into multiple chips...
Orthogonal Frequency-Division Multiplexing <ul><li>From the highest level, OFDM divides the communication bandwidth into a...
OFDM
MIMO <ul><li>First, having multiple receiving antennas means that you can pick up more energy.  </li></ul><ul><li>Also, wh...
MIMO <ul><li>Having multiple transmitting antennas does not necessarily mean that you can send more energy, because the tr...
SIMO <ul><li>Single Input Multiple Output. </li></ul><ul><li>Consider one transmitting antenna and two receiving antennas....
SIMO <ul><li>With two receiving antennas, we will receive  </li></ul><ul><li>that is, from the waveform received at each a...
SIMO receiver <ul><li>The information from the strong channel is more valuable than the weak channel. </li></ul><ul><li>Th...
MISO <ul><li>Now consider the case when the sender has multiple antennas and the receiver has only one antenna. </li></ul>...
MISO <ul><li>The problem is to maximize the magnitude of the received signal  x(h 1 a 1 +h 2 a 2 )  subject to the constra...
MISO <ul><li>Still maximum ratio combining. Define Lagrange  </li></ul><ul><li>Take the partial derivative of  L  over  a ...
The Altamonte Scheme <ul><li>The key is that the transmitting antennas are NOT restricted to sending the same data symbols...
The Altamonte Scheme <ul><li>(These two formulas are from the Tse book.) So, </li></ul><ul><li>Rearrange it, we have </li>...
The Altamonte Scheme <ul><li>So, we have </li></ul><ul><li>Note that </li></ul><ul><li>that is, the two vectors are orthog...
The Altamonte Scheme <ul><li>So, the magnitude of the received signal is proportional to    , even when the transmitter is...
2 by 2 MIMO <ul><li>Now consider we have two transmitting antennas and two receiving antennas. </li></ul><ul><li>A simple ...
MIMO <ul><li>MIMO receiver. Will receive two samples per time slot.  h ij : the channel coefficient from Tx ant j to Rx an...
MIMO receiver <ul><li>The simplest receiver just do a matrix inversion: </li></ul><ul><li>This is NOT the optimal decoder!...
Error Correction Code <ul><li>Hamming code </li></ul><ul><li>Cyclic code </li></ul><ul><li>Both required! </li></ul>
Wireless LAN (802.11g) <ul><li>1.      When a node gets a packet, </li></ul><ul><li>a.      If its queue length is 0 at th...
802.11 channels <ul><li>In 802.11 b/g, there are 11 channels, starting at 2.412GHz at a spacing of 5MHz. </li></ul><ul><li...
802.11e <ul><li>Supporting QoS. The basic idea is to let higher priority packets have  </li></ul><ul><ul><li>Shorter IFS <...
Idle Sense <ul><li>Is doubling CW whenever not getting an ACK optimal? </li></ul><ul><li>No, because not getting ACK could...
Idle sense <ul><li>The basic idea is to sense the average duration of the idle period between two transmission attempts, a...
WEP <ul><li>The stations share a secret key. </li></ul><ul><li>Before the data transmission, a 24-bit random  Initializati...
Temporal Key Integrity Protocol (TKIP) <ul><li>A cipher suite based on old hardware (RC4 cipher) </li></ul><ul><ul><li>A t...
TKIP Encapsulation The figures are from  http://standards.ieee.org/getieee802/download/802.11i-2004.pdf
Decpsulation
Format Note: ICV is just the 4-byte checksum
Cellular Phone Networks <ul><li>Compared to WLANs </li></ul><ul><ul><li>Longer range </li></ul></ul><ul><ul><li>Less speed...
 
GSM <ul><li>Global System for Mobile (GSM) </li></ul><ul><ul><li>Used by more than 3 billion people </li></ul></ul><ul><ul...
GSM <ul><li>GSM continued </li></ul><ul><ul><li>The time in a channel is divided into 8 slots. Each slot is 577us and is a...
Frequency Reuse <ul><li>Adjacent cells should not use the same frequency, because it will cause interference. </li></ul><u...
Frequency Reuse <ul><li>Cell sizes in GSM: </li></ul><ul><ul><li>Large microcell: 3-30km </li></ul></ul><ul><ul><li>Small ...
Capacity <ul><li>Given the number of channels in a cell, the maximum number of users supported is fixed.  </li></ul><ul><u...
http://elm.eeng.dcu.ie/~kaszubow/Biography/Lecture5.pdf
Management of GSM <ul><li>Mobile System (MS) </li></ul><ul><ul><li>Mobile Equipment (ME) </li></ul></ul><ul><ul><li>Subscr...
HLR and VLR <ul><li>HLR: database of all cellphones permanently registered in the system. Stores </li></ul><ul><ul><li>The...
ME and SIM <ul><li>ME, has the IMEI (International Mobile Equipment Identity) </li></ul><ul><li>SIM card, has </li></ul><u...
GSM Security <ul><li>When a mobile station needs to be authenticated,  </li></ul><ul><ul><li>The operator generates a rand...
3G Overview <ul><li>Use CDMA. </li></ul><ul><li>Generally, 3G will have a much better support for data services. The numbe...
Power Control in CDMA Schemes <ul><li>The signal received at the base station are from multiple users at the same frequenc...
W-CDMA <ul><li>Key features include </li></ul><ul><ul><li>Radio channels 5MHz wide, both uplink and downlink </li></ul></u...
Orthogonal variable spreading factor (OVSF) <ul><li>W-CDMA uses Orthogonal variable spreading factor (OVSF) to provide dif...
OVSF <ul><li>Generation of OVSF code based on a simple binary tree </li></ul><ul><ul><li>Start with the root node {1}. </l...
HSDPA <ul><li>Adaptive modulation and coding (AMC) </li></ul><ul><ul><li>Depending on the channel state, send at different...
High-Speed Downlink Packet Access (HSDPA) <ul><li>Hybrid automatic repeat-request (HARQ)  </li></ul><ul><ul><li>When a dat...
HSDPA <ul><li>Fast packet scheduling  </li></ul><ul><ul><li>Each user transmits to the base station the signal quality  </...
Multihop <ul><li>Multi-hop wireless network has attracted  lots attentions, because it may offer interesting solutions to ...
Routing <ul><li>One of the key problems in multihop networks is routing.  </li></ul><ul><ul><li>Provide connectivity </li>...
Proposed Protocols <ul><li>Dynamic Source Routing (DSR) </li></ul><ul><ul><li>Source routing. The entire routing path spec...
DSR <ul><li>Route discovery. Invoked when the source needs to send packet to the destination but has no path. Basic idea: ...
AODV <ul><li>Intermediate nodes stores the routing information in a lookup table. Needs only the destination address. </li...
AODV <ul><li>Route Request </li></ul><ul><ul><li>Source broadcast Route Request (RREQ) message to a destination </li></ul>...
AODV <ul><li>Route Reply </li></ul><ul><ul><li>Destination should reply the Route Reply message (RREP). </li></ul></ul><ul...
AODV <ul><li>Each node will maintain a non-decreasing sequence number sent in RREQ and RREP messages and increments it by ...
Path Quality <ul><li>The path quality should be measured by the Expected Transmission Count (ETX). It is summation of the ...
Geographical Routing <ul><li>Karp, B. and Kung, H.T., Greedy Perimeter Stateless Routing for Wireless Networks, in MobiCom...
Greedy Routing <ul><li>First idea: </li></ul><ul><ul><li>At node A, if the destination is t, pick the next hop neighbor th...
Greedy routing <ul><li>As many greedy algorithms, greedy routing may run into problems. </li></ul>
Planar Graphs <ul><li>Consider routing in planar graphs. </li></ul><ul><ul><li>A planar graph is a graph where there is no...
Face Routing <ul><li>Keep left hand on the wall, walk until hit the straight line connecting source to destination. </li><...
Face routing <ul><li>Face Routing may fail only if there is no path to the destination. </li></ul><ul><ul><li>Face routing...
Sample Problems <ul><li>In an 802.11g wireless LAN, the maximum speed is 54Mbps. There are 5 nodes including the AP, where...
Sample problems <ul><li>In 802.11g networks, suppose there are 3 nodes sending to the AP. The AP has no traffic. The data ...
Sample Problems <ul><li>Suppose an 802.11g LAN is in a 30 ft by 30 ft room, with 50 nodes and an AP. Which of the followin...
Sample Problems <ul><li>In an 802.11 wireless LANs, if we modify the protocol as: if we received a packet header, we send ...
Sample Problems <ul><li>In cellular phone networks, a phone A may be not in its home network. If another phone B wishes to...
Sample Problems <ul><li>In the DSR routing protocol, why does the routing discovery packet contains a unique ID? </li></ul...
Upcoming SlideShare
Loading in …5
×

Final Review Review The very basic wireless communication system

738 views

Published on

Published in: Technology, Business
0 Comments
1 Like
Statistics
Notes
  • Be the first to comment

No Downloads
Views
Total views
738
On SlideShare
0
From Embeds
0
Number of Embeds
3
Actions
Shares
0
Downloads
31
Comments
0
Likes
1
Embeds 0
No embeds

No notes for slide

Final Review Review The very basic wireless communication system

  1. 1. Final Review
  2. 2. Review <ul><li>The very basic wireless communication system </li></ul><ul><li>The bits are sent to the low pass filter to be turned into waveforms. The low pass filter is also called the “pulse shaping filter.” </li></ul><ul><li>The impulse response of the filter is fixed. `1’ will excite a positive waveform, `-1’ will excite a negative waveform. </li></ul><ul><li>Basically, you send a symbol to the low pass filter every symbol time. With BPSK, the symbol is either `1’ or `-1’. </li></ul><ul><li>The impulse response waveform lasts more than one symbol time. Remember its shape! </li></ul>
  3. 3. Review <ul><li>The final “baseband waveform” is the addition of the impulse responses generated at different times. </li></ul><ul><ul><li>The impulse response is usually written as h(t). </li></ul></ul><ul><ul><li>Let the data symbols sent to the low pass filter be x[n] at time n. x[n] will add a voltage of x[n]h(nT-t) to the baseband waveform at time t (assume current time is 0, current symbol is x[0]. The previous symbol is x[-1], the next symbol is x[1], and so on). </li></ul></ul>
  4. 4. Review <ul><li>The signals we can actually send is the following, where I(t) and Q(t) are the baseband waveforms. </li></ul><ul><li>In BPSK, the cosine is multiplied with a waveform, the sine is not. In QPSK, cosine and sine are multiplied with I(t) and Q(t), respectively. </li></ul>
  5. 5. Review <ul><li>Multi-path. Signals travel infinite number of paths to reach the receiver. The received signal is the addition of signals from all paths: </li></ul><ul><li>where I and are the is the attenuation and the delay of path i, respectively. </li></ul><ul><li>After receiving the signal, we will first multiply it with sine and cosine wave, and pass it through the LPF, as explained before. </li></ul>
  6. 6. Review <ul><li>Complex channels – because we can send both a sine and a cosine wave, which can be conveniently represented as a complex wave. </li></ul><ul><li>The sender and receiver will try to use the same frequency, but they cannot. Consider the cosine branch and consider a single path. </li></ul><ul><li>So, after the low pass filter, it becomes </li></ul><ul><li>Similarly, the sine branch will produce </li></ul><ul><li>Therefore, the cosine and sine branch can be regarded as a complex number </li></ul>
  7. 7. Review <ul><li>To establish the communication, we will first have to reproduce the baseband waveform. Which means that we have to get rid of , a process called “carrier phase tracking.” </li></ul><ul><li>We take samples from the received baseband waveform to get </li></ul><ul><li>If the phase offset has been tracked perfectly, </li></ul><ul><li>If is it not perfect but still okay, the sample will lead to a correct decision. Then, extract the phase error based on the sample and the constellation point, adjust the phase offset. </li></ul>
  8. 8. Review <ul><li>Timing synchronization – how to take samples at the correct time. </li></ul><ul><li>Using the shape of the impulse response. </li></ul>k k+1 k-1
  9. 9. Review <ul><li>The current GNU SDR implementation uses the optimized mm algorithm. Assume a sample error of delta. The sample at time n is </li></ul><ul><li>The timing error is calculated as </li></ul><ul><li>The reason is that </li></ul>
  10. 10. Review <ul><li>While </li></ul><ul><li>The first line is the one that does the work. In BPSK, it becomes </li></ul>
  11. 11. Review <ul><li>Dealing with multipath. </li></ul>
  12. 12. Review <ul><li>Important thing to remember is that even with perfect carrier phase tracking and symbol timing, when taking a sample, it will contain some thing from the neighboring symbols. </li></ul><ul><li>At time 0, the path with delay will contribute to this sample, but for k!=0, also </li></ul><ul><li>And there are infinite number of paths. </li></ul>
  13. 13. Review <ul><li>The red curve represents the other path. </li></ul>k k+1 k-1
  14. 14. Review <ul><li>We can use equalization. The basic idea is to subtract the contributions of non-relevant samples from the current sample. </li></ul><ul><li>A simple yet okay algorithm is LMS. Start with an arbitrary for all i, usually =1 and =0 for all other i. </li></ul><ul><li>Let . Then , where </li></ul><ul><li>Basically, if e< 0 while s_i>0, it means that c_i is not large enough… </li></ul><ul><li>The idea is to minimize the mean square of the error. </li></ul>
  15. 15. Review <ul><li>A signal can also be represented in the frequency domain. </li></ul>
  16. 16. Review <ul><li>LTI system. </li></ul><ul><ul><li>A linear system is a system such that </li></ul></ul><ul><ul><li>Suppose . A linear system is “time invariant” if . </li></ul></ul>
  17. 17. Review <ul><li>DFT: </li></ul><ul><li>IDFT: </li></ul><ul><li>Convolution: </li></ul>
  18. 18. CDMA <ul><li>Used in 3G networks. </li></ul><ul><li>Direct Sequence Spread Spectrum: spread a data bit into multiple chips. </li></ul><ul><li>Each sender has a unique chip sequence, that is *orthogonal* with other chip sequences. </li></ul>
  19. 19. Orthogonal Frequency-Division Multiplexing <ul><li>From the highest level, OFDM divides the communication bandwidth into a number of sub-channels, each occupying a fraction of the bandwidth. </li></ul><ul><li>Each sub-carrier is modulated by BPSK, QPSK, or other schemes. </li></ul><ul><li>Used in 802.11a and 802.11g. </li></ul>
  20. 20. OFDM
  21. 21. MIMO <ul><li>First, having multiple receiving antennas means that you can pick up more energy. </li></ul><ul><li>Also, when one antenna is having trouble receiving signal, others are unlikely to be having the same problem. That is why commercial APs sometimes have multiple antennas also. It compares the received signal strength from different antennas and use the strongest one to decode the data. Called ``antenna diversity.’’ </li></ul><ul><li>As long as the antennas are sufficiently apart from each other, the signals are likely experiencing different fading. The space needs to be half of the carrier wavelength. If we are using 2.4GHz, the wavelength is about 10cm. </li></ul>
  22. 22. MIMO <ul><li>Having multiple transmitting antennas does not necessarily mean that you can send more energy, because the transmitting energy is determined by other issues, such as your battery. </li></ul><ul><li>However, it does mean that you can have multiple paths between the sender and the receiver. With n t transmitting and n r receiving antennas, you have n t times n r paths that can be assumed to be independent. If one path is in trouble, i.e., there is someone in the blocking position right now, other paths are unlikely to be in the same situation at the same time. Much better than depending everything on only one path! </li></ul><ul><li>Also, what makes MIMO possible is that the receiver antennas can operate in the linear range such that the received signal is the ADDITON of signals from multiple transmitting antennas. </li></ul>
  23. 23. SIMO <ul><li>Single Input Multiple Output. </li></ul><ul><li>Consider one transmitting antenna and two receiving antennas. </li></ul><ul><li>Assume flat-fading, meaning that there is no multi-path, i.e., the received sample is relevant only to the current data symbol. We write it as y[n]=x[n] + w[n]. </li></ul><ul><li>We can make this assumption because of OFDM. </li></ul>
  24. 24. SIMO <ul><li>With two receiving antennas, we will receive </li></ul><ul><li>that is, from the waveform received at each antenna, we can take a sample, and call it y 1 and y 2 , respectively. Both samples are excited by x, but they are from different paths, therefore their channel coefficients (i.e., h 1 , h 2 ) are different. One important thing to remember is that the noise from both antennas are usually assumed to be following the same distribution and have the same power and are independent from each other. </li></ul>
  25. 25. SIMO receiver <ul><li>The information from the strong channel is more valuable than the weak channel. </li></ul><ul><li>The optimal -- Maximum Ratio Combining (Section 3.2.1 in the Tse book). We should weight the samples from the antennas according to the channel strength: </li></ul>
  26. 26. MISO <ul><li>Now consider the case when the sender has multiple antennas and the receiver has only one antenna. </li></ul><ul><li>The sender has a power budget – the total transmitting power cannot exceed a threshold. </li></ul><ul><li>Assume that all antennas are sending the same data symbol at any time, so the receiver will receive </li></ul><ul><li>where a 1 and a 2 represent the power allocated for antenna 1 and antenna 2, respectively. </li></ul>
  27. 27. MISO <ul><li>The problem is to maximize the magnitude of the received signal x(h 1 a 1 +h 2 a 2 ) subject to the constraint that </li></ul>
  28. 28. MISO <ul><li>Still maximum ratio combining. Define Lagrange </li></ul><ul><li>Take the partial derivative of L over a 1 and a 2 : </li></ul><ul><li>Means that a 1 and a 2 should be proportional to h 1 and h 2. </li></ul><ul><li>But this requires the sender knows the channel – not always the case. </li></ul>
  29. 29. The Altamonte Scheme <ul><li>The key is that the transmitting antennas are NOT restricted to sending the same data symbols at the same time. </li></ul><ul><li>The Altamonte Scheme (Tse book Section 3.3.2). Consider two data symbols to be sent in two consecutive symbol times, u 1 and u 2 . At time 1, ant1 transmits u 1 and ant2 transmits u 2. At time 2, ant1 transmits – u * 2 and ant2 transmits u * 1 . </li></ul>
  30. 30. The Altamonte Scheme <ul><li>(These two formulas are from the Tse book.) So, </li></ul><ul><li>Rearrange it, we have </li></ul>
  31. 31. The Altamonte Scheme <ul><li>So, we have </li></ul><ul><li>Note that </li></ul><ul><li>that is, the two vectors are orthogonal to each other. So, to recover u 1 and u 2 , we can multiply </li></ul><ul><li>with the conjugate of either of the vectors. </li></ul>
  32. 32. The Altamonte Scheme <ul><li>So, the magnitude of the received signal is proportional to , even when the transmitter is not aware of the channel coefficient at all. </li></ul><ul><li>If the transmitter simply sends the same symbol over two antennas at the same power, the received signal is proportional to h 1 + h 2 , and depends on the phase, they may cancel each other out! </li></ul>
  33. 33. 2 by 2 MIMO <ul><li>Now consider we have two transmitting antennas and two receiving antennas. </li></ul><ul><li>A simple scheme called ``V-BLAST:’’ Send independent data symbols over the transmitting antennas as well as over time. </li></ul>
  34. 34. MIMO <ul><li>MIMO receiver. Will receive two samples per time slot. h ij : the channel coefficient from Tx ant j to Rx ant i. </li></ul><ul><li>How to decode the data? </li></ul>
  35. 35. MIMO receiver <ul><li>The simplest receiver just do a matrix inversion: </li></ul><ul><li>This is NOT the optimal decoder! The maximum likelihood decoder is better. </li></ul>
  36. 36. Error Correction Code <ul><li>Hamming code </li></ul><ul><li>Cyclic code </li></ul><ul><li>Both required! </li></ul>
  37. 37. Wireless LAN (802.11g) <ul><li>1.      When a node gets a packet, </li></ul><ul><li>a.      If its queue length is 0 at this time, </li></ul><ul><li>        i.      if the medium is free, it waits for DIFS. If the medium is still free after DIFS (28us), it sends the packet. </li></ul><ul><li>       ii.      If the medium is busy, it generates a random backoff counter and enters the WAIT_DIFS state </li></ul><ul><li>b.       If the queue length is not 0 at this time, simply add this packet to the queue </li></ul><ul><li>2.      When in the WAIT_DIFS state, maintain a medium_free counter. This counter is cleared to 0 every time the node finds the medium is busy. If the medium is free, the counter should be incremented every us. When the counter reaches DIFS, the node selects a backoff_timer and enters the WAIT_BACKOFF state. The backoff_timer is selected by picking a random number uniformly from [0, CW-1], then multiply this number by SLOT (9us). </li></ul><ul><li>3.      When in the WAIT_BACKOFF state, the node maintains backoff_timer. If the medium is busy, it enters the WAIT_DIFS state. Otherwise, it decrements the backoff_timer every us. When the backoff_timer becomes 0, the node start sending the packet it wants to send if the queue is not empty. This packet should be the packet at the head of the queue. </li></ul><ul><li>4.      When transmitting the packet, a node calculates the time needed for a packet transmission, including the packet transmission time, the SIFS, the ACK time, and stores it in a field in the packet. Other nodes, if heard this header of this packet, will backoff until this packet transmission is completed.   </li></ul><ul><li>5.      After the sending node finishes transmitting the packet, the receiving node checks whether it gets the packet. If yes, it sends an ACK packet back to the sending node SIFS (10us) after the packet transmission finishes. If it did not receive the packet, it does nothing. </li></ul><ul><li>6.      The sending node of the packet waits for the ACK from the receiving node. </li></ul><ul><li>a.      If it did not receive the ACK before a timeout,, it doubles CW. If the packet has been transmitted several times (implementation dependent), it removes this packet from the queue. It then selects a backoff_timer and enters the WAIT_DIFS state. </li></ul><ul><li>b.      If it gets the ACK, it removes the packet from the queue. It then selects a backoff_timer and enters the WAIT_DIFS state. It resets CW=CWmin (CW is set to be CMmin = 16 at initialization). </li></ul>
  38. 38. 802.11 channels <ul><li>In 802.11 b/g, there are 11 channels, starting at 2.412GHz at a spacing of 5MHz. </li></ul><ul><li>Each channel owns a bandwidth of 22MHz. </li></ul><ul><li>So, only 3 non-overlapping channels, 1,6,11. </li></ul><ul><li>802.11a has more channels and you may check at http://www.moonblinkwifi.com/80211a_frequency_channel_map.cfm </li></ul>
  39. 39. 802.11e <ul><li>Supporting QoS. The basic idea is to let higher priority packets have </li></ul><ul><ul><li>Shorter IFS </li></ul></ul><ul><ul><li>Smaller contention window </li></ul></ul><ul><li>TXOP (Transmission Opportunity) </li></ul><ul><ul><li>Everyone is competing for an equal share of air time </li></ul></ul>
  40. 40. Idle Sense <ul><li>Is doubling CW whenever not getting an ACK optimal? </li></ul><ul><li>No, because not getting ACK could due to two reasons </li></ul><ul><ul><li>Contention (CW should be doubled) </li></ul></ul><ul><ul><li>Random loss causing the packet not passing the CRC check (shouldn’t double CW because there is no contention!) </li></ul></ul>
  41. 41. Idle sense <ul><li>The basic idea is to sense the average duration of the idle period between two transmission attempts, and use it as an indicator of how many nodes want to transmit. </li></ul><ul><li>If more nodes want to transmit, the idle period will be short; otherwise, it will be long. </li></ul><ul><li>If too short, reduce the transmission probability. If too long, increase the transmission probability. </li></ul><ul><li>Use AIMD to adjust for fairness. </li></ul>
  42. 42. WEP <ul><li>The stations share a secret key. </li></ul><ul><li>Before the data transmission, a 24-bit random Initialization Vector (IV) is generated by the sender. </li></ul><ul><li>The IV and the secret key are combined to make the session key. </li></ul><ul><li>The data is encrypted with the session key by the RC4 stream cipher. Then the encrypted data is sent to the receiver along with the plaintext IV. </li></ul><ul><li>The receiver can decrypt the data with the IV and the shared key. </li></ul><ul><li>Different IV are used for each transmission. </li></ul>
  43. 43. Temporal Key Integrity Protocol (TKIP) <ul><li>A cipher suite based on old hardware (RC4 cipher) </li></ul><ul><ul><li>A transmitter calculates a keyed cryptographic message integrity code (MIC). TKIP appends the computed MIC. The receiver discards any frames with invalid MIC. MIC in TKIP is not perfect due to hardware constraints. Has a timeout countermeasure. </li></ul></ul><ul><ul><li>Uses a transmit sequence counter (TSC) for every frame. Defend replay attack. </li></ul></ul><ul><ul><li>Uses a key-mixing function to combine the temporal key, the transmitter address (TA), and the TSC into the seed (IV, key) for the RC4 stream cipher </li></ul></ul>
  44. 44. TKIP Encapsulation The figures are from http://standards.ieee.org/getieee802/download/802.11i-2004.pdf
  45. 45. Decpsulation
  46. 46. Format Note: ICV is just the 4-byte checksum
  47. 47. Cellular Phone Networks <ul><li>Compared to WLANs </li></ul><ul><ul><li>Longer range </li></ul></ul><ul><ul><li>Less speed </li></ul></ul><ul><ul><li>Higher mobility </li></ul></ul><ul><ul><li>More for voice services (evolving!) </li></ul></ul><ul><li>Overview </li></ul><ul><ul><li>Divides the area into cells. </li></ul></ul><ul><ul><li>Base stations in each cells. </li></ul></ul><ul><ul><li>User have cellular phones. </li></ul></ul><ul><ul><li>The phones talks to the base station directly in wireless. </li></ul></ul>
  48. 49. GSM <ul><li>Global System for Mobile (GSM) </li></ul><ul><ul><li>Used by more than 3 billion people </li></ul></ul><ul><ul><li>2 nd Generation (2G), because everything is digital, compared to the analog mobile phones which is 1G </li></ul></ul><ul><ul><li>Operates in 900MHz and 1800MHz band, or 850M and 1900M bands in the US </li></ul></ul><ul><ul><li>Uplink and down link both 25MHz wide. In GSM900, uplink band is 890-915M, downlink is 935-960M. </li></ul></ul><ul><ul><li>A band is divided into 124 channels with 200KHz spacing. The data rate is about 270Kbps for a channel. </li></ul></ul>
  49. 50. GSM <ul><li>GSM continued </li></ul><ul><ul><li>The time in a channel is divided into 8 slots. Each slot is 577us and is allocated to a user. </li></ul></ul><ul><ul><li>A mobile phone is allocated two channels, one for uplink and the other for downlink. Separated by 45MHz. </li></ul></ul><ul><ul><li>The uplink and downlink slot numbers are separated by 3 – a phone never transmits and receives at the same time </li></ul></ul><ul><ul><li>FDMA/TDMA (Frequency Division Multiple Access / Time Division Multiple Access). </li></ul></ul><ul><ul><li>Different from In wireless LAN, in which a node is given the entire bandwidth for the time it needs to send a packet. Difference due to the nature of the application. </li></ul></ul><ul><ul><li>The peak transmission power of a GSM phone is 2W in 900M band and 1W in 1800M band. In contrast, your wireless router transmits at 20dBm, which is 0.1W. Difference due to the distance. </li></ul></ul>
  50. 51. Frequency Reuse <ul><li>Adjacent cells should not use the same frequency, because it will cause interference. </li></ul><ul><li>However, non-adjacent cells may use the same frequency. </li></ul><ul><li>Due to frequency reuse, the actual number of channels used in an area is larger than 124. </li></ul><ul><li>Given an area, reducing the size of cells (reducing the transmit power) increases the frequency reuse, hence increasing the total capacity. </li></ul><ul><li>Cell planning is a major issue. </li></ul>
  51. 52. Frequency Reuse <ul><li>Cell sizes in GSM: </li></ul><ul><ul><li>Large microcell: 3-30km </li></ul></ul><ul><ul><li>Small microcell: 1-3km </li></ul></ul><ul><ul><li>Microcell: 0.1-1km </li></ul></ul><ul><ul><li>Picocell: 0.01-0.1km </li></ul></ul><ul><ul><li>Nanocell: 0.001-0.01km </li></ul></ul><ul><li>Typically, there are lots of small cells plus several large cells. The small cells carries the majority of the traffic. The large cells fills the holes. </li></ul>
  52. 53. Capacity <ul><li>Given the number of channels in a cell, the maximum number of users supported is fixed. </li></ul><ul><ul><li>With GSM, if there are C channels, we can support 8C users at most </li></ul></ul><ul><li>The number of users can be much larger than the maximum number of slots. That is why some time you see “emergency calls only.” </li></ul><ul><li>The hope is that not all users want to make calls at the same time. </li></ul>
  53. 54. http://elm.eeng.dcu.ie/~kaszubow/Biography/Lecture5.pdf
  54. 55. Management of GSM <ul><li>Mobile System (MS) </li></ul><ul><ul><li>Mobile Equipment (ME) </li></ul></ul><ul><ul><li>Subscriber Identity Module (SIM) </li></ul></ul><ul><li>Base Station Subsystem </li></ul><ul><ul><li>Base Transceiver Station (BTS) </li></ul></ul><ul><ul><ul><li>In charge of physical communication in the air. Has 1 to 16 transceivers </li></ul></ul></ul><ul><ul><li>Base Station Controller (BSC) </li></ul></ul><ul><ul><ul><li>Controls hundreds of BTS </li></ul></ul></ul><ul><li>Network Switching Subsystem </li></ul><ul><ul><li>Mobile Switching Center (MSC) </li></ul></ul><ul><ul><ul><li>Typical MSC supports up to 100,000 mobiles and 5000 simultaneous calls </li></ul></ul></ul><ul><ul><ul><li>MSC are connected with each other. </li></ul></ul></ul><ul><ul><ul><li>Gateway MSC connects the GSM system to external networks, e.g. PSTN. </li></ul></ul></ul><ul><ul><ul><li>Each MSC controls at least one Base Station System (BSS) </li></ul></ul></ul><ul><ul><li>Visitor’s Location Register (VLR) </li></ul></ul><ul><ul><li>Home Location Register (HLR). </li></ul></ul><ul><ul><li>Authentication Center (AuC). Holds different algorithms for authentication and encryption. </li></ul></ul><ul><ul><li>Operations and maintenance center (OMC) </li></ul></ul>
  55. 56. HLR and VLR <ul><li>HLR: database of all cellphones permanently registered in the system. Stores </li></ul><ul><ul><li>The address of the VLR currently associated with the phone </li></ul></ul><ul><ul><li>Encryption keys for data transmission and user authentication </li></ul></ul><ul><ul><li>Service type </li></ul></ul><ul><ul><li>… </li></ul></ul><ul><li>VLR: Each MSC connects to a VLR. The VLR is a data base with the information about cellphones temporarily located in the area served by particular MSC. </li></ul>
  56. 57. ME and SIM <ul><li>ME, has the IMEI (International Mobile Equipment Identity) </li></ul><ul><li>SIM card, has </li></ul><ul><ul><li>Ki: Subscriber Authentication Key. 128 bit key shared by the subscriber and the operator. Stored in the SIM card and the HLR </li></ul></ul><ul><ul><li>PIN: to protect the SIM card </li></ul></ul><ul><ul><li>IMSI: International Mobile Subscriber Identity </li></ul></ul><ul><ul><li>TMSI: Temporary Mobile Subscriber Identity. To prevent eavesdropping, TMSI is used instead of IMSI. IMSI is used as rarely as possible. TMSI is randomly generated by the VLR. </li></ul></ul><ul><ul><li>MSISDN: Mobile Station International Service Digital Network </li></ul></ul><ul><ul><li>LAI: Location Area Identification </li></ul></ul>
  57. 58. GSM Security <ul><li>When a mobile station needs to be authenticated, </li></ul><ul><ul><li>The operator generates a random number, RAND (128 bit), and sends to the MS. </li></ul></ul><ul><ul><li>The MS and the operator both runs an algorithm, called the A3 algorithm, with Ki as the key, to produce SRES (32 bit) from RAND </li></ul></ul><ul><ul><li>The MS sends the SRES to the operator, and if SRES matches the operator’s SRES, consider passed authentication </li></ul></ul><ul><ul><li>RAND is passed to an algorithm called A8 as input with Ki as the key, to produce Kc (64 bit). Done by both the MS and the operator </li></ul></ul><ul><ul><li>Kc becomes the key for the A5 algorithm. A5 is a stream cipher for encrypting the data. </li></ul></ul>
  58. 59. 3G Overview <ul><li>Use CDMA. </li></ul><ul><li>Generally, 3G will have a much better support for data services. The numbers are different depending on the versions, but it will be about at least one order of magnitude higher than GRPS. </li></ul><ul><ul><li>Defines an air interface and maybe combined with the GSM/GRPS core network </li></ul></ul><ul><li>There are competing standards: </li></ul><ul><ul><li>W-CDMA </li></ul></ul><ul><ul><li>CDMA2000 </li></ul></ul><ul><ul><li>… </li></ul></ul>
  59. 60. Power Control in CDMA Schemes <ul><li>The signal received at the base station are from multiple users at the same frequency </li></ul><ul><li>If one user is transmitting at a high power, other users signal will be overshadowed </li></ul><ul><li>CDMA schemes has to limit the transmitting power of the MS </li></ul><ul><li>The BS may measure the signal strength and send instructions to the MS about increasing or decreasing the transmitting power. </li></ul>
  60. 61. W-CDMA <ul><li>Key features include </li></ul><ul><ul><li>Radio channels 5MHz wide, both uplink and downlink </li></ul></ul><ul><ul><li>Chip rate 3.84Mcps </li></ul></ul><ul><ul><li>Frame length 10ms </li></ul></ul><ul><ul><li>Adaptive power control updated 1500 times per second </li></ul></ul><ul><ul><li>Cells not synchronized (synchronized in CDMA2000) </li></ul></ul>
  61. 62. Orthogonal variable spreading factor (OVSF) <ul><li>W-CDMA uses Orthogonal variable spreading factor (OVSF) to provide different data rates to different users </li></ul><ul><li>The idea is that users may be assigned with codes of different lengths, but still orthogonal to each other. </li></ul><ul><li>Because code length are different, a user assigned a shorter code will have a higher data rate </li></ul>
  62. 63. OVSF <ul><li>Generation of OVSF code based on a simple binary tree </li></ul><ul><ul><li>Start with the root node {1}. </li></ul></ul><ul><ul><li>A node has two children. The upper and lower. If the node as code C, the upper child is assigned code CC, and the lower child is assigned CC’ (C’ means inverting every bit in C). </li></ul></ul><ul><ul><li>Repeat. </li></ul></ul><ul><li>Two codes are orthogonal as long as no one is the prefix of the other </li></ul><ul><li>A major issue is how to assign codes </li></ul>
  63. 64. HSDPA <ul><li>Adaptive modulation and coding (AMC) </li></ul><ul><ul><li>Depending on the channel state, send at different data rates. </li></ul></ul><ul><ul><li>Use lower data rate if channel is weak </li></ul></ul><ul><ul><li>In wireless LAN, the rate adaptation </li></ul></ul>
  64. 65. High-Speed Downlink Packet Access (HSDPA) <ul><li>Hybrid automatic repeat-request (HARQ) </li></ul><ul><ul><li>When a data packet is received and found to be corrupted, the receiver does not simply discard it, but saves it and combines it with the retransmissions </li></ul></ul><ul><ul><li>When a packet is corrupted, the sender does not send the packet again, it sends some parity checking bits </li></ul></ul><ul><ul><li>AMC is coarse grained, HARQ is fine grained </li></ul></ul>
  65. 66. HSDPA <ul><li>Fast packet scheduling </li></ul><ul><ul><li>Each user transmits to the base station the signal quality </li></ul></ul><ul><ul><li>The base station determines which user to send to for the next 2ms </li></ul></ul><ul><ul><ul><li>Send to users with stronger channels </li></ul></ul></ul><ul><ul><ul><li>May send to multiple users simultaneously with the channelization code </li></ul></ul></ul><ul><ul><ul><li>Must also ensure fairness </li></ul></ul></ul>
  66. 67. Multihop <ul><li>Multi-hop wireless network has attracted lots attentions, because it may offer interesting solutions to a number of problems </li></ul><ul><ul><li>Wireless sensor networks: a large number of sensors are deployed in an area. The sensors may collect data and then send data to the outside observer for processing. The transmission power of sensor is limited and cannot reach very far, therefore sensors have to reply other’s message. Applications include: scientific data gathering, military monitoring. Power is a main issue in wireless sensor networks because sensor nodes are battery-powered. </li></ul></ul><ul><ul><li>Wireless Ad Hoc networks: wireless nodes organize themselves into a network with no infrastructure. Applications scenarios: emergency response. </li></ul></ul><ul><ul><li>Wireless Mesh Networks: install mesh wireless routers to extend the one-hop to multi-hop. The routers forward the message from the nodes to the next mesh router in wireless. Comparing to installing the wired network such as Ethernet, this may offer faster, cheaper solutions for covering an area. </li></ul></ul>
  67. 68. Routing <ul><li>One of the key problems in multihop networks is routing. </li></ul><ul><ul><li>Provide connectivity </li></ul></ul><ul><li>General approach: Link State (LS) and Distance Vector (DV) </li></ul><ul><ul><li>LS: nodes broadcast the link state information to all nodes in the network, and everyone computes the routing paths based on the same information. </li></ul></ul><ul><ul><li>DV: a node only tells its neighbor the hop count to a certain destination node. A node will pick the shortest path from all neighbors. </li></ul></ul><ul><li>Challenges in wireless networks </li></ul><ul><ul><li>Nodes may be mobile </li></ul></ul><ul><ul><li>Link is not binary but more a delivery ratio </li></ul></ul><ul><ul><li>Some networks, such as wireless sensor networks, can be very limited in resources, e.g., computation, storage, battery, and periodical update of link state is a burden </li></ul></ul><ul><ul><li>Other nodes can sometime overhear… </li></ul></ul>
  68. 69. Proposed Protocols <ul><li>Dynamic Source Routing (DSR) </li></ul><ul><ul><li>Source routing. The entire routing path specified in the packet. </li></ul></ul><ul><ul><li>http://www.ietf.org/rfc/rfc4728.txt </li></ul></ul><ul><li>Ad-hoc On-demand Distance Vector Routing (AODV) </li></ul><ul><ul><li>Hop-by-hop” protocol </li></ul></ul><ul><ul><li>http://www.ietf.org/rfc/rfc3561.txt </li></ul></ul><ul><li>Both on demand. Routing information discovered only when needed </li></ul><ul><ul><li>Does not require periodic route updates </li></ul></ul><ul><ul><li>Suitable for mobile networks </li></ul></ul>
  69. 70. DSR <ul><li>Route discovery. Invoked when the source needs to send packet to the destination but has no path. Basic idea: </li></ul><ul><ul><li>Source broadcast Route Request message, with the destination node’s ID and a unique packet ID </li></ul></ul><ul><ul><li>If a node overheard the request, it checks </li></ul></ul><ul><ul><ul><li>If it is the destination, it sends a packet back to the source. The routing path from the source to the destination is already in the packet. </li></ul></ul></ul><ul><ul><ul><li>If it is not the destination, if it has not received the packet before, it appends its own ID to the packet and broadcast it. It does nothing if it received the packet before. </li></ul></ul></ul>
  70. 71. AODV <ul><li>Intermediate nodes stores the routing information in a lookup table. Needs only the destination address. </li></ul><ul><li>Route discovery initiated when a node needs next hop information to a destination node </li></ul>
  71. 72. AODV <ul><li>Route Request </li></ul><ul><ul><li>Source broadcast Route Request (RREQ) message to a destination </li></ul></ul><ul><ul><li>Intermediate node broadcast the received RREQ message. Creates a path entry for a reverse path to the source. Assumes bidirectional links. </li></ul></ul><ul><ul><ul><li>S sends the RREQ message. A forwarded this message, A knows the next hop to S is S. B forwards the message from A, B knows the next hop to S is A. </li></ul></ul></ul>
  72. 73. AODV <ul><li>Route Reply </li></ul><ul><ul><li>Destination should reply the Route Reply message (RREP). </li></ul></ul><ul><ul><ul><li>This message will be forwarded along the reverse path created when forwarding the RREQ message </li></ul></ul></ul><ul><ul><li>An intermediate node creates next-hop entry for destination as RREP is received. Also forwards along “reverse path” hop. </li></ul></ul>
  73. 74. AODV <ul><li>Each node will maintain a non-decreasing sequence number sent in RREQ and RREP messages and increments it by one in every message. </li></ul><ul><li>The RREQ message contains the source node's ID, current sequence number, broadcast ID. Nodes keep track of the RREQ's source ID and broadcast ID. If they receive a RREQ which they have already processed, they discard the RREQ and do not forward it. </li></ul><ul><li>RREQ also contains the most recent sequence number for the destination of which the source node is aware. A node receiving the RREQ may send a route reply (RREP) if it is either the destination or if it has a route to the destination with corresponding sequence number greater than or equal to that contained in the RREQ. If this is the case, it unicasts a RREP back to the source. Otherwise, it rebroadcasts the RREQ. </li></ul><ul><li>As the RREP propagates back to the source, nodes set up forward pointers to the destination. Once the source node receives the RREP, it may begin to forward data packets to the destination. If the source later receives a RREP containing a greater sequence number it may update its routing information for that destination and begin using the better route. If the sequence numbers are the same in two replies, pick the one with a smaller hop count. </li></ul>
  74. 75. Path Quality <ul><li>The path quality should be measured by the Expected Transmission Count (ETX). It is summation of the expected transmissions of all links on a path. </li></ul><ul><li>Implemented LQSR on top of DSR, basically using ETX to select paths. </li></ul><ul><li>http://www.cse.cuhk.edu.hk/~cslui/STUDY_GROUP/metrics.pdf </li></ul>
  75. 76. Geographical Routing <ul><li>Karp, B. and Kung, H.T., Greedy Perimeter Stateless Routing for Wireless Networks, in MobiCom 2000. </li></ul><ul><li>Using node’s geographical information to route. </li></ul><ul><li>Assumes: </li></ul><ul><ul><li>Nodes know their locations, e.g., by having GPS </li></ul></ul><ul><ul><li>Nodes know their one-hop neighbors, e.g., by asking every node to broadcast beacon signals periodically, and one-hop ONLY </li></ul></ul><ul><ul><li>Knows the location of the destination, e.g., by overhearing or broadcasting </li></ul></ul><ul><ul><li>The connectivity is a unit disc (arguable) </li></ul></ul><ul><li>Advantage </li></ul><ul><ul><li>Nodes do not have to store too many information. Given a constant amount of information in the packet, it can make routing decisions </li></ul></ul><ul><ul><li>AODV and DSR need to ask nodes to store hop-by-hop routing tables or complete routing paths </li></ul></ul>
  76. 77. Greedy Routing <ul><li>First idea: </li></ul><ul><ul><li>At node A, if the destination is t, pick the next hop neighbor that is closest to t among all neighbors of A </li></ul></ul><ul><li>To implement greedy routing, the packet needs to carry the destination’s location </li></ul>
  77. 78. Greedy routing <ul><li>As many greedy algorithms, greedy routing may run into problems. </li></ul>
  78. 79. Planar Graphs <ul><li>Consider routing in planar graphs. </li></ul><ul><ul><li>A planar graph is a graph where there is no crossing edges. </li></ul></ul><ul><ul><li>The area closed by a set of edges is called a “face.” The outside is also called a face. </li></ul></ul><ul><ul><li>Faces are connected. </li></ul></ul><ul><ul><li>There are ways to construct planar graphs by deleting edges. </li></ul></ul>
  79. 80. Face Routing <ul><li>Keep left hand on the wall, walk until hit the straight line connecting source to destination. </li></ul><ul><li>Then switch to the next face. </li></ul><ul><li>The point is that every time you are switching to a face closer to the destination. </li></ul>
  80. 81. Face routing <ul><li>Face Routing may fail only if there is no path to the destination. </li></ul><ul><ul><li>Face routing will forward the packet to the face </li></ul></ul><ul><ul><li>Then it will circle around the face, without finding a point intersecting the line from s to t other than the last intersection point Lf. </li></ul></ul><ul><ul><li>Eventually it will hit the first edge when entered this face, e0, and will realize that the destination is unreachable </li></ul></ul><ul><ul><li>So, face routing needs to store in the packet header </li></ul></ul><ul><ul><ul><li>Destination location </li></ul></ul></ul><ul><ul><ul><li>The starting point location </li></ul></ul></ul><ul><ul><ul><li>Lf </li></ul></ul></ul><ul><ul><ul><li>e0 </li></ul></ul></ul>
  81. 82. Sample Problems <ul><li>In an 802.11g wireless LAN, the maximum speed is 54Mbps. There are 5 nodes including the AP, where the AP is receiving traffic at 32Mbps and the nodes are receiving traffic at 16Mbps. Assume all nodes are operating at the highest data rate. Which of the following is true? </li></ul><ul><ul><li>AP is having a larger throughput than the nodes. </li></ul></ul><ul><ul><li>AP is having the same throughput than the nodes. </li></ul></ul><ul><ul><li>AP is having a smaller throughput than the nodes. </li></ul></ul><ul><ul><li>The throughput of the AP is non-deterministic. </li></ul></ul>
  82. 83. Sample problems <ul><li>In 802.11g networks, suppose there are 3 nodes sending to the AP. The AP has no traffic. The data rates of the nodes are 12Mbps, 24Mbps, and 48Mbps, respectively. What is the average data rate in the network (Neglecting all overhead such as ACK, DIFS, SIFS, backoff, and collision and loss)? </li></ul><ul><ul><li>24Mbps. </li></ul></ul><ul><ul><li>12Mbps. </li></ul></ul><ul><ul><li>About 20Mbps. </li></ul></ul><ul><ul><li>None of the above. </li></ul></ul>
  83. 84. Sample Problems <ul><li>Suppose an 802.11g LAN is in a 30 ft by 30 ft room, with 50 nodes and an AP. Which of the following statement is true? </li></ul><ul><ul><li>The auto rate algorithm should be turned off because it has negative effects. </li></ul></ul><ul><ul><li>The auto rate algorithm should be turned on because it has positive effects. </li></ul></ul><ul><ul><li>Doesn’t matter, the auto rate algorithm has no effects. </li></ul></ul><ul><ul><li>None of the above. </li></ul></ul>
  84. 85. Sample Problems <ul><li>In an 802.11 wireless LANs, if we modify the protocol as: if we received a packet header, we send an ACK. Suppose packet collision rarely occurs in the network. </li></ul><ul><li>(1). Does this change the behavior of the network or not? </li></ul><ul><li>(2). If it does, what kind of change? Good or bad, or both good and bad? </li></ul>
  85. 86. Sample Problems <ul><li>In cellular phone networks, a phone A may be not in its home network. If another phone B wishes to make a call to A, how can it find A? </li></ul><ul><ul><li>With the phone number of A, the network can find the HLR of A when find the current VLR A is registered to, then find the MSC. </li></ul></ul><ul><ul><li>The MSC B is associated with remembers where A is. </li></ul></ul><ul><ul><li>The MSC B is associated with will broadcast a message to find A’s location upon B’s request. </li></ul></ul><ul><ul><li>None of the above. </li></ul></ul>
  86. 87. Sample Problems <ul><li>In the DSR routing protocol, why does the routing discovery packet contains a unique ID? </li></ul><ul><ul><li>Because all packets have an unique ID </li></ul></ul><ul><ul><li>To avoid loops in the path </li></ul></ul><ul><ul><li>For security reasons </li></ul></ul><ul><ul><li>None of the above </li></ul></ul>

×