Recommended
Recommended
More Related Content
What's hot
What's hot (20)
Viewers also liked
Viewers also liked (19)
Similar to S1 dcn - l10 - gsm-introduction
Similar to S1 dcn - l10 - gsm-introduction (20)
Recently uploaded
Recently uploaded (20)
S1 dcn - l10 - gsm-introduction
- 1. Mobile Communication Networks © 2004 Institute of Broadband Communications Vienna University of Technology Mobile Communication Networks (GSM Introduction) O.Univ.Prof.Dr. Harmen R. van As
- 2. GSM History • European standard developed by the “Group Spécial Mobile” (GSM) at CEPT (Conference Europeenne des Administrations des Postes et des Telecommunications) • After the constitution of ETSI (European Telecommunication Standard Institute), GSM become to be a Technical Committee • Standard: GSM - Global System for Mobile Communications • Development IN SMG (Sub Technical Committee of the Special Mobile Group) Services - STC SMG 1 Radio interface - STG SMG 2 © 2004 Institute of Broadband Communications Vienna University of Technology Radio interface - STG SMG 2 Networking - STG SMG 3 Data services - STC SMG 4 Network management - STC SMG 5 • Result: GSM Recommendations - 130 documents, 5000 pages • Start of GSM - Summer 1992 • September 2000 158 countries 500 GSM-network operators, 380 Mio. GSM subscriber wordwide
- 3. Network architecture of GSM MSC HLR EIRVLR AuC O A M C BSC GMSC © 2004 Institute of Broadband Communications Vienna University of Technology MSC PSTN BSC BTS BTS BTS GMSC MS MS MS MS MS - Mobile Station BTS - Base Transceiver Station BSC - Base Station Controller MSC - Mobile Switching Centre HLR - Home Location Register VLR - Visitor Location Register AUC - Authentication Register EIR - Equipment Identity Register GMSC - Gateway MSC OAMC - Operation, Administration and Maintenance Centre PSTN - Public Switched Telephone Network
- 4. GSM interfaces MSC VLR HLR EIR BSC GMSC or MSC Um A A VLR B C E F DG © 2004 Institute of Broadband Communications Vienna University of Technology BTS BTS BTS MS Abis MS - Mobile Station BTS - Base Transceiver Station BSC - Base Station Controller MSC - Mobile Switching Centre GMSC - Gateway MSC HLR - Home Location Register VLR - Visitor Location Register AUC - Authentication Register EIR - Equipment Identity Register
- 5. Network Switching Subsystem Base Station Subsystem (BSS) Mobile Stations (MS) Network Switching Subsystem (NSS) BTS AUCTRAUBSC MSC OAMC HLR © 2004 Institute of Broadband Communications Vienna University of Technology BTS BTS AUC CSPDN PSPDN ISDN PSTN TRAUBSC MSC IWF IWF - Interworking Function TRAU - Transcoder and Rate Adaptation Unit PSTN - Public Switched Telephone Network ISDN - Integrated Services Digital Network PSPDN - Packet Switched Public Data Network CSPDN - Circuit Switched Public Data Network HLR VLR EIR
- 6. • Characteristics of the air interface – multipath transmission – fading – interference • Full-duplex transmission Air Interface © 2004 Institute of Broadband Communications Vienna University of Technology • Full-duplex transmission – Frequency Division Duplex (FDD) – Time Division Duplex (TDD) • Multiple access scheme – TDMA, FDMA, CDMA, SDMA
- 7. BTS in the standard configuration 300 m - BTS BTS BTS BTS © 2004 Institute of Broadband Communications Vienna University of Technology 300 m - 35 km BTS BTS BTS BTS BTS BTS
- 8. Macro cell with 5 standard cells BTS BTS © 2004 Institute of Broadband Communications Vienna University of Technology BTS BTS BTS BTS BTS
- 9. Sectorized BTS 120°- Sector 120°- Sector BTS BTS © 2004 Institute of Broadband Communications Vienna University of Technology 120°- Sector BTS BTS BTS
- 10. Base-Station Configurations MSC BSS BTS BSS A A A Multi-cell site (sector cells) Configuration - 5 Single - cell site Configuration - 1 BSS Many single © 2004 Institute of Broadband Communications Vienna University of Technology MSC BSC BTS BTS BTS BTS BTS BTS BTS A A-bis A-bis Configuration - 6 Many single cell sites Multi-cell site = multi-BTS site
- 11. Base Station Configurations (1) BTS BSC Omni-directional Configuration A-Interface A-InterfaceBTS BTS BTS © 2004 Institute of Broadband Communications Vienna University of Technology BTS BTS BTS Omni-directional Configuration A-InterfaceBTS BTS BSC BTS Star Configuration
- 12. Base Station Configurations (2) BTS BTS BTS A-Interface BSC Multi-drop Configuration © 2004 Institute of Broadband Communications Vienna University of Technology BTS BSC BTS BTS A-Interface Sectorized Configuration BTS BTS BTS BTS BSC BTS BTS A-Interface Sectorized Configuration
- 13. GSM-Coding in Mobile Station Speech coding Channel coding Interleaving Generation of Bursts DemodulationDecryption Channeldecodierung Deinterleaving Speech ModulationEncryption Amplification A D 13 kbit/s 22,8 kbit/s D © 2004 Institute of Broadband Communications Vienna University of Technology DemodulationDecryptionDeinterleaving Reformating Speech decoding 13 kbit/s 22,8 kbit/s A 64 kbit/s13 kbit/s 13 kbit/s22.8 kbit/s Base station Base station Controller Switching Node Transcoder and Rate Conversion
- 14. Coding Stages over the GSM Radio Channel Block coding Convolution coding Interleaving Deinter- leaving Convolution decoding Block- decodierung Radio Channel 1. part 2. partBlock code- overhead © 2004 Institute of Broadband Communications Vienna University of Technology 3. part 4. part overhead Convolution code overhead Quasi uniform distribution of bit errors Bursty distribution of bit errors t t
- 15. Interleaving Spreading Data 1 Data 2 Data 3 © 2004 Institute of Broadband Communications Vienna University of Technology Spreading Interleaving
- 16. Mobile Equipment - Handy without SIM Mobile Station - Handy with SIM GSM SIM ID1-SIM Plug-in SIM Voice Channel encoding Interleaving ModulationCiphering Amplification Mobile Station: Functional Blocks © 2004 Institute of Broadband Communications Vienna University of Technology Central processors/ Clock and tone/ Internal Bus-System / MMI SIM (Subscriber Identity Module) Voice encoding Interleaving Burst generation DemodulationDeciphering Channel decoding De-Interleaving Reformatting Voice decoding ModulationCiphering Amplification
- 17. Location Areas (LA) MSC 1 BSC a BSC cBSC b MSC 2 © 2004 Institute of Broadband Communications Vienna University of Technology LA αααα LA γγγγLA ββββ
- 18. Location Update • Level 0: without location management – paging message sent out over all cells • Level 1: manual registration – the subscriber manually registers at the base station • Level 2: automatic localisation supported by Location Areas (LA) – periodic updating – updating by entering a new location area © 2004 Institute of Broadband Communications Vienna University of Technology – updating by entering a new location area – localisation done by a separate network • Combination of a periodic location update and updating on entering a new location area • Cases of Location Update (LU) – intra-VLR – inter-VLR (with TMSI) – inter-VLR (with IMSI) – IMSI Attach VLR - Visitor Location Register TMSI - Temporary Mobile Subscriber Identity IMSI - International Mobile Subscriber Identity
- 19. Identification of GSM Entities • Public Land Mobile Network (PLMN) = Mobile Country Code (MCC) + Mobile Network Code (MNC) • Location Area Identity (LAI) = MCC+MNC+Location Area Code (LAC) • Mobile Station Identity International Mobile Station Identity (IMSI) = MCC+MNC+Mobile Station © 2004 Institute of Broadband Communications Vienna University of Technology – International Mobile Station Identity (IMSI) = MCC+MNC+Mobile Station Identity Number (MSIN) – Temporary Mobile Station Identity (TMSI) • International Mobile Equipment Identity (IMEI)
- 20. Addresses and data bases in GSM EIR AUC HLR VLRIMEI IMSI IMSI MSISDN MSRN IMSI MSISDNIMEI IMSIBSIC MSCBSC SIM Home Location Register Visitor Location Register Authentication Centre Equipment Identification Register BTS © 2004 Institute of Broadband Communications Vienna University of Technology SIM - Subscriber Identity Module EIR - Equipment Identification Register AUC - Authentication Centre HLR - Home Location Register VLS - Visitor Location Register BSC - Base Station Controller BTS - Base Transceiver Station MSC - Mobile Switching Centre MSRN MSISDN MSRN LMSI TMSI LAI MSISDN - Mobile Subscriber ISDN Number TMSI - Temporary Mobile Subscriber Identity MSRN - Mobile Station Roaming Number LMSI - Local Mobile Station Identity IMEI - International Mobile Equipment Identity IMSI - International Mobile Subscriber Identity BSIC - Base Transceiver Station Identity Code CI - Cell Identity LAI - Location Area Identity IMEI IMSI MSISDN MSRN TMSI BSIC CI LAI
- 21. Intra- and InterCell Handover MSC BTS 1 BTS Intra Cell Handover BSC © 2004 Institute of Broadband Communications Vienna University of Technology BTS 2 Inter Cell Handover MS - Mobile Station BTS - Base Transceiver Station BSC - Base Station Controller MSC - Mobile Switching Centre
- 22. Intra- and Inter-MSC Handover MSC-A BTS 1 BSC BSC MSC-B © 2004 Institute of Broadband Communications Vienna University of Technology BTS 2 BTS 3 Inter MSC HandoverIntra MSC Handover MS - Mobile Station BTS - Base Transceiver Station BSC - Base Station Controller MSC - Mobile Switching Centre
- 23. Mobile network Country Codes (E.212) Albanien 276 Andora 213 Armenien xxx Belarus 257 Belgien 206 Bosnien 218 Bulgarien 284 Dänemark 233 Deutschland 262 Estland 248 Finnland 244 Frankreich 208 Argentinien 722 Österreich 232 Polen 260 Portugal 268 Rumänien 226 Russland 250 Schweden 240 Schweiz 228 Slowakei 231 Slowenien 293 Spanien 214 Türkei 286 Tschechien 230 UK 234 + 235 Europa 2xx Senegal 608 Simbabwe 648 Somalia 637 Sudan 634 Südafrika 655 Swasiland 653 Tansania 640 Tunesien 605 Tschad 622 Uganda 641 Süd-Amerika 7xx Hongkong 454 Indien 404 Irak 418 Iran 432 Israel 425 Japan 440-441 Jemen 421 Jordanien 416 Laos 457 Libanon 415 Mongolei 428 Nepal 429 Nord-Korea 467 Ägypten 602 Algerien 603 Angola 631 Äthiopien 636 Benin 616 Botsuana 652 Burundi 642 Ivorküste 612 Dschibuti 638 Eritrea 636 Gabun 628 Gambia 607 Afrika 6xx © 2004 Institute of Broadband Communications Vienna University of Technology Frankreich 208 Georgien 282 Gibraltar 266 Griechenland 202 Irland 272 Island 274 Italien 222 Jugoslawien 220 Kroatien 219 Lettland 247 Litauen 246 Luxemburg 270 Malta 278 Moldau 259 Monaco 212 Niederlande 204 Norwegen 242 Australien 505 Indonesien 510 Malaysia 502 Neuseeland 530 Philippinen 515 Singapur 525 Thailand 520 Argentinien 722 Brasilien 724 Bolivien 736 Chile 730 Costa Rica 712 Ecuador 740 El Salvador 706 Guayana 738 Honduras 708 Kolumbien 732 Nicaragua 710 Panama 714 Pararguay 744 Peru 716 Surinam 746 Uruguay 748 Venezuela 734 UK 234 + 235 Ukraine 255 Ungarn 216 Zypern 280 Ozeanien 5xx Nord-Korea 467 Oman 422 Pakistan 410 Saudi Arabien 420 Sri Lanka 413 Süd-Korea 450 Syrien 417 Taiwan 466 Vietnam 452 Nordamerika 3xx Asien 4xx Haiti 372 Kanada 302 Kuba 368 Mexiko 334 USA 310-316 Gambia 607 Ghana 620 Guinea 611 Kamerun 624 Kap Verde 625 Kenia 639 Kongo 629 Liberia 618 Libyen 606 Malawi 650 Mauritius 617 Mosambik 643 Namibia 649 Niger 614 Nigeria 621 Ruanda 635 Sambia 645 Afghanistan 412 Bangladesch 470 Bahrain 426 China 460
- 24. GSM Areas Cell (Area served by a particular BTS) © 2004 Institute of Broadband Communications Vienna University of Technology Location Area (locating & paging area) MSC Service Area (area controlled by one MSC) GSM Network Service Area (one or more per country) GSM Service Area (all member countries)
- 25. GSM Network Service Areas MSC VLR MSC VLR GSM Network Service Area © 2004 Institute of Broadband Communications Vienna University of Technology MSC VLR MSC VLR GSM-PLMN I II III IV
- 26. Division into Location Areas (LA) LA1 LA2 LA3 © 2004 Institute of Broadband Communications Vienna University of Technology MSC VLR LA6 LA5 LA4
- 27. Division into Cells LA1 LA2 LA3 © 2004 Institute of Broadband Communications Vienna University of Technology MSC VLR LA6LA5 LA4 cell1 cell2 cell3 cell4 cell5 cell6
- 28. GSM 900 Frequency Band 890 900 910 920 930 940 950 960 25 MHz 25 MHz 45 MHz © 2004 Institute of Broadband Communications Vienna University of Technology 25 MHz 25 MHz Uplink MS BTS Downlink MS BTS
- 29. Carriers at the border of the GSM band 0 1 2 (carrier number) © 2004 Institute of Broadband Communications Vienna University of Technology 890.2 890.4 890.6 MHz GSM band 200 kHz _ _
- 30. Combined TDMA and FDMA in GSM FDMA FDMA TDMA 3 4 5 6 7 8 1 2 © 2004 Institute of Broadband Communications Vienna University of Technology 1 200 kHz 1 3 4 2 200 kHz 2 100 kHz Guard band 100 kHz Guard band 200 kHz 124 Frequency Time FDMA: 124 Frequency carriers in 900 MHz Frequency band TDMA: 8 Time Slots per Carrier GSM 900 124 Frequency Carriers GSM 1800 374 Frequency Carriers GSM 1900 (USA) 299 Frequency Carriers
- 31. Up frequencies Down frequencies Number of carriers Channel number 900 MHz 890 – 915 MHz 935 – 960 MHz 124 channels 1 - 124 1800 MHz 1710 - 1785 MHz 1805 - 1180 MHz 374 channels 512 - 885 1900 MHz (USA) 1850 – 1909,6 MHz 1930 – 1989,6 MHz 299 channels 512 - 810 GSM Frequency Bands © 2004 Institute of Broadband Communications Vienna University of Technology
- 32. GSM Channels Traffic Channels (TCH) • Voice - full rate: 22.8 kbit/s - half rate: 11.4 kbit/s • Data - full rate: 9.6, 4.8, 2.4 kbit/s Control Channels (CCH) • Broadcast (B) • Common (C) © 2004 Institute of Broadband Communications Vienna University of Technology - full rate: 9.6, 4.8, 2.4 kbit/s - half rate: 4.8, 2.4 kbit/s • Dedicated (D)
- 33. Organisation of the GSM Control Channels BCCH FCCH SCH BTS Broadcast Control Channel Frequency Correction Channel Synchronisation Channel BCH: (B) (F) (S) CCCH: Common Access MS © 2004 Institute of Broadband Communications Vienna University of Technology RACH AGCH PCH SDCCH SACCH FACCH Random Access Channel Access Grant Channel Paging Channel Stand-Alone Dedicated Control Channel Slow Associated Control Channel Fast Associated Control Channel CCCH: (R) DCCH: (R) ACCH: Dedicated Access
- 34. Logical Channels in GSM GSM Channels TCH (Traffic Channels) SC (Signalling Channels) BCH (Broadcast Channels) DCCH (Dedicated Control Channels) © 2004 Institute of Broadband Communications Vienna University of Technology Fullrate Halfrate TCH/F TCH/H CCCH (Common Control Channels) FCCH SCH Downlink PCH AGCH Downlink Uplink RACH Slow SACCH Fast SDCCH FACCH
- 35. Frame Hierarchy in GSM Hyperframe Superframe Multiframe 2048 x 51 x 120 ms 6.12 s 3h 28min 53s 760ms 26 x 235.38 ms © 2004 Institute of Broadband Communications Vienna University of Technology Frame Burst period (BP) 26 x (Traffic) 8 x 120 ms 120/(26x8) = 577µµµµs 120/26 = 4.615 ms 1 bit : 3.69µµµµs148 bits + 8.25 bits guard period 51 x (Signalling) 235.38 ms
- 36. Frame Hierarchy in GSM (2) 0 1 49 50 0 2047 Hyperframe = 2048 Superframes = 2715648 TDMA frames 51 x 26 Superframe 0 1 24 25 26 x 51 Superframe or © 2004 Institute of Broadband Communications Vienna University of Technology 0 7654321 0 1 24 25 TDMA frame (4.615 ms) 51 x 26 Superframe 26-Multiframe (traffic) 0 1 49 50 26 x 51 Superframe 51-Multiframe (signalling) or
- 37. Slots in Time and Frequency Domain Frequency © 2004 Institute of Broadband Communications Vienna University of Technology Time 15/26 ms 200 kHz BP BP: Burst Period Slot
- 38. Modes of Frequency Hopping No Hopping Sequential Hopping Random Hopping Frequency FrequencyFrequency © 2004 Institute of Broadband Communications Vienna University of Technology + Frequency diversity + Frequency diversity + Interference diversity Time TimeTime
- 39. Channels in the TDMA frame system Frequency © 2004 Institute of Broadband Communications Vienna University of Technology Time
- 40. TDMA with frequency-hopping Frequency © 2004 Institute of Broadband Communications Vienna University of Technology Time
- 41. Security services and functions in GSM • Subscriber Identity Confidentiality • Subscriber Identity Authentication © 2004 Institute of Broadband Communications Vienna University of Technology • Signalling Information Element Confidentiality • Data Confidentiality for physical connections
- 42. Subscriber Identity Confidentiality • confidentiality of user data • confidentiality of mobile station location • How to achieve this goal? – using TMSI (Temporary Mobile Subscriber Identity) © 2004 Institute of Broadband Communications Vienna University of Technology – using TMSI (Temporary Mobile Subscriber Identity) instead of IMSI (International Mobile Subscriber Identity) – changing TMSI within every new LA (Location Area) – ciphering TMSI
- 43. Subscriber Identity Authentication • Ki (subscriber authentication key) • At both parts – Subscriber: in the SIM (Subscriber Identity Module) © 2004 Institute of Broadband Communications Vienna University of Technology – Subscriber: in the SIM (Subscriber Identity Module) – Network operator: in the AUC (AUthentication Centre) • A3 algorithm (authentication algorithm)
- 44. Authentication Mobile Subscriber Network RAND IMSI KiKi © 2004 Institute of Broadband Communications Vienna University of Technology SRESSRES A3 A3 Ki subscriber authentication key SRES Signed RESponse RAND RANDom number (between 0 and 2128-1) IMSI International Mobile Subscriber Identity A3 authentication algorithm Yes Authentication accepted No Authentication rejected
- 45. Ciphering key (Kc) Mobile Subscriber Network RAND IMSI KiKi © 2004 Institute of Broadband Communications Vienna University of Technology A8 A8 Kc Kc Ki subscriber authentication key Kc ciphering Key RAND RANDom number IMSI International Mobile Subscriber Identity A8 ciphering key computation
- 46. Generating of triplets (Kc, RAND, SRES) Ki RAND Authentication information request (IMSI) HLR AUC A8 A3 © 2004 Institute of Broadband Communications Vienna University of Technology HLR Home Location Register AUC AUthentication Centre RAND RANDom number A8 ciphering key computation Ki Subscriber Authentication Key Kc ciphering Key SRES Signed RESponse A3 authentication algorithm SRESKc Authentication information (IMSI, triplet--> Kc, RAND, SRES )
- 47. Ciphering of user data Mobile Subscriber Base Transceiving Station Kc Kc A5 A5 datadata © 2004 Institute of Broadband Communications Vienna University of Technology A5 A5 Kc (user data) Kc ciphering key A5 ciphering algorithm