CS 8803 - Cellular and Mobile Network Security: Cellular ... · Pre-History of a Mobile Internet ... • Network tailored for voice - very low bandwidth • Devices previously not

Florida Institute for Cybersecurity (FICS) Research

CS 8803 - Cellular and Mobile Network Security:

Cellular Basics

Professor Patrick Traynor9/6/2018


Pre-History of a Mobile Internet• In 2002, there were 700 Million wireless subscribers worldwide.

• As a point of comparison, there were 850 Million wired phone lines.• The number of Internet users was also doubling annually...• And yet ubiquitous wireless data had stalled. Why?

• Low data rates• Limited terminals• Limited applications

• ... but mobile computing had not...• laptops were everywhere.• dialup was pervasive.

• Hindered by low performance, poor connectivity and inconvenience

2

Global Access Lines (billion) 3

2

1

0

Wireless Cable Wireline

1958 1978 2005


Where We Are Today• As of 2017, there are now over 5 Billion wireless subscribers worldwide.

• 7.7 billion mobile devices, 400M+ in the US.• Current approximate world population: 7 Billion.

• In the US annually:

• That’s 7.6 billion mins vs 5.2 Billion text messages per day.• How long is the average phone call?

3






3

1995 2000 2005 2009 2011Minutes

SMS

2015






3

37.8 BN/A

1995 2000 2005 2009 2011Minutes

SMS

2015






3

37.8 BN/A

1995 2000 2005 2009 2011Minutes

SMS

2015258.8 B172.8 M






3

37.8 BN/A

1995 2000 2005 2009 2011Minutes

SMS

2015258.8 B172.8 M

1.5 T81 B






3

37.8 BN/A

1995 2000 2005 2009 2011Minutes

SMS

2015258.8 B172.8 M

1.5 T81 B

2.3 T1.56 T

Source: CTIA Wireless






3

37.8 BN/A

1995 2000 2005 2009 2011Minutes

SMS

2015258.8 B172.8 M

1.5 T81 B

2.3 T1.56 T


2.3 T2.3 T






3

37.8 BN/A

1995 2000 2005 2009 2011Minutes

SMS

2015258.8 B172.8 M

1.5 T81 B

2.3 T1.56 T


2.3 T2.3 T

2.8 T1.9 T


A Tale of Two Networks• Cellular Telecommunications Network

• Network tailored for voice - very low bandwidth• Devices previously not suitable for Internet and computing apps

• Despite high penetration and coverage, Internet access fizzled until the second half of the decade.

4





4

Wireless Controller





4

RadioWireless

Controller





4

RadioWireless

Controller

Telephone Network





4

RadioWireless

Controller

Telephone Network

Wireless Gateways





4

RadioWireless

Controller

Telephone Network

Wireless Gateways Internet


A Tale of Two Networks (2)• The Internet - Wireless Enterprise Networks

• Network tailored for best-effort data traffic• High bandwidth, no controls

• Supports general computing and data networking applications• Gaining high density hot-spots, but not ubiquitous coverage.

5





5

Radio





5

Radio Wireless Gateways





5

Radio Edge Router

Wireless Gateways


Access Router




5

Radio Edge Router

Wireless Gateways


InternetAccess Router




5

Radio Edge Router

Wireless Gateways


A Vision of Tomorrow - Common Net & Apps

6

Core Internet



6

Core Internet

Location Presence

Authentication



6

Aggregation Router

Aggregation Router

Aggregation Router

Core Internet

Location Presence

Authentication



6

Radio Controller

3G Cellular

-Outdoor Areas -High Mobility

Aggregation Router

Aggregation Router

Aggregation Router

Core Internet

Location Presence

Authentication



6

Radio Controller

3G Cellular


Access Router

Enterprise Networks

-802.11++ -Local Mobility -Packet Voice

-High Data Rates

Aggregation Router

Aggregation Router

Aggregation Router

Core Internet

Location Presence

Authentication



6

Radio Controller

3G Cellular


Access Router

Enterprise Networks


-High Data RatesAccess Router

4G Networks

-WiMAX -LTE

Aggregation Router

Aggregation Router

Aggregation Router

Core Internet

Location Presence

Authentication


5G Networks

-Small Cells -Support for IoT


6

Radio Controller

3G Cellular


Access Router

Enterprise Networks



4G Networks

-WiMAX -LTE

Aggregation Router

Aggregation Router

Aggregation Router

Core Internet

Location Presence

Authentication


5G Networks



6

Radio Controller

3G Cellular


Access Router

Enterprise Networks



4G Networks

-WiMAX -LTE

Home Networks

-DSL/Cable/FTTH -802.11

Aggregation Router

Aggregation Router

Aggregation Router

Core Internet

Location Presence

Authentication


5G Networks



6

Radio Controller

3G Cellular


Access Router

Enterprise Networks



4G Networks

-WiMAX -LTE

Home Networks


Urban Network

-Pico Cells -Mesh Networking

Access Router

Aggregation Router

Aggregation Router

Aggregation Router

Core Internet

Location Presence

Authentication


• End-to-end Internet• Common mobility management and control,

transport and services infrastructure

5G Networks



6

Radio Controller

3G Cellular


Access Router

Enterprise Networks



4G Networks

-WiMAX -LTE

Home Networks


Urban Network


Access Router

Aggregation Router

Aggregation Router

Aggregation Router

Core Internet

Location Presence

Authentication


• End-to-end Internet• Common mobility management and control,

transport and services infrastructure• Unifies various access technologies (wireless and

wireline)

5G Networks



6

Radio Controller

3G Cellular


Access Router

Enterprise Networks



4G Networks

-WiMAX -LTE

Home Networks


Urban Network


Access Router

Aggregation Router

Aggregation Router

Aggregation Router

Core Internet

Location Presence

Authentication


Overview of Traditional Wireless Networks

• Primary wireless access to wired networks.• Most networks try to get to the wired side as quickly as possible!

• New features when compared to wired networks.• Wireless medium• Mobility

• New features = New Problems (or new challenges)

7


What’s the Frequency, Kenneth?

8

U.S. D

EPARTMENT OF COMMERCENATIO

NA

L TELECO

MMUNICATIONS & INFORMATIO

N AD

MIN

ISTRA

TION

MOBI

LE (A

ERON

AUTIC

AL TE

LEME

TERI

NG)

S)

5.68

5.73

5.90

5.95

6.2

6.52

5

6.68

56.

765

7.0

7.1

7.3

7.35

8.1

8.19

5

8.81

5

8.96

59.

040

9.4

9.5

9.9

9.99

510

.003

10.0

0510

.110

.15

11.1

7511

.275

11.4

11.6

11.6

5

12.0

512

.10

12.2

3

13.2

13.2

613

.36

13.4

113

.57

13.6

13.8

13.8

714

.014

.25

14.3

5

14.9

9015

.005

15.0

1015

.10

15.6

15.8

16.3

6

17.4

117

.48

17.5

5

17.9

17.9

718

.03

18.0

6818

.168

18.7

818

.919

.02

19.6

819

.80

19.9

9019

.995

20.0

0520

.010

21.0

21.4

521

.85

21.9

2422

.0

22.8

5523

.023

.223

.35

24.8

924

.99

25.0

0525

.01

25.0

725

.21

25.3

325

.55

25.6

726

.126

.175

26.4

826

.95

26.9

627

.23

27.4

127

.54

28.0

29.7

29.8

29.8

929

.91

30.0

UNITEDSTATES

THE RADIO SPECTRUM

NON-GOVERNMENT EXCLUSIVE

GOVERNMENT/ NON-GOVERNMENT SHAREDGOVERNMENT EXCLUSIVE

RADIO SERVICES COLOR LEGEND

ACTIVITY CODE

NOT ALLOCATED RADIONAVIGATION FIXED

MARITIME MOBILEFIXED

MARITIME MOBILE

FIXED

MARITIME MOBILE

Radiolocation RADIONAVIGATION

FIXED

MARITIMEMOBILE

Radiolocation

FIXED

MARITIMEMOBILE FIXED

MARITIMEMOBILE

AERONAUTICALRADIONAVIGATION

AERO

NAUT

ICAL

RADI

ONAV

IGAT

ION

Aeron

autic

alMo

bile

Mariti

meRa

diona

vigati

on(R

adio

Beac

ons)

MARI

TIME

RADI

ONAV

IGAT

ION

(RAD

IO BE

ACON

S)Ae

ronau

tical

Radio

navig

ation

(Rad

io Be

acon

s)

3 9 14 19.9

5

20.0

5

30 30 59 61 70 90 110

130

160

190

200

275

285

300

3 kHz 300 kHz

300 kHz 3 MHz

3 MHz 30 MHz

30 MHz 300 MHz

3 GHz

300 GHz

300 MHz

3 GHz

30 GHz

AeronauticalRadionavigation(Radio Beacons)

MARITIMERADIONAVIGATION(RADIO BEACONS)

Aeron

autic

alMo

bile

Mariti

meRa

diona

vigati

on(R

adio

Beac

ons)

AERO

NAUT

ICAL

RADI

ONAV

IGAT

ION

(RAD

IO BE

ACON

S)

AERONAUTICALRADIONAVIGATION(RADIO BEACONS)

AeronauticalMobile

Aeron

autic

al Mo

bile

RADI

ONAV

IGAT

ION

AER

ONAU

TICAL

RADI

ONAV

IGAT

ION

MARI

TIME

MOBI

LE AeronauticalRadionavigation

MOB

ILE (D

ISTR

ESS

AND

CALL

ING)

MARI

TIME

MOBI

LE

MARI

TIME

MOBI

LE(S

HIPS

ONL

Y)

MOBI

LE

AERO

NAUT

ICAL

RADI

ONAV

IGAT

ION

(RAD

IO B

EACO

NS)

AERO

NAUT

ICAL

RADI

ONAV

IGAT

ION

(RAD

IO B

EACO

NS)

BROADCASTING(AM RADIO)

MARI

TIME

MOBIL

E (TE

LEPH

ONY)

MARI

TIME

MOBIL

E (TE

LEPH

ONY)

MOB

ILE (D

ISTRE

SS AN

D CA

LLIN

G)

MARITIMEMOBILE

LAND MOBILE

MOBILE

FIXED STAN

DARD

FREQ

. AND

TIME

SIGN

AL (2

500k

Hz)

STAN

DARD

FREQ

. AND

TIME

SIGN

ALSp

ace R

esea

rch MARITIMEMOBILE

LAND MOBILE

MOBILE

FIXED

AERO

NAUT

ICAL

MOBIL

E (R)

STAN

DARD

FREQ

.

AERO

NAUT

ICAL

MOB

ILE (R

)

AERO

NAUT

ICAL

MOBIL

E (O

R)

AERO

NAUT

ICAL

MOBIL

E (R)

FIXED

MOBILE**

Radio-location

FIXED

MOBI

LE*

AMATEUR

FIXED

FIXED

FIXED

FIXED

FIXEDMARITIME

MOBILE

MOBI

LE*

MOBI

LE*

MOBI

LEST

ANDA

RD FR

EQ. A

ND TI

ME SI

GNAL

(500

0 KHZ

)

AERO

NAUT

ICAL

MOB

ILE (R

)

AERO

NAUT

ICAL

MOB

ILE (O

R)

STAN

DARD

FREQ

.Sp

ace R

esea

rch

MOBILE**

AERO

NAUT

ICAL

MOB

ILE (R

)

AERO

NAUT

ICAL

MOB

ILE (O

R) FIXE

DMO

BILE

*

BROA

DCAS

TING

MARI

TIME

MOBI

LE

AERO

NAUT

ICAL

MOB

ILE (R

)AE

RONA

UTIC

AL M

OBILE

(OR) FIX

EDMo

bile

AMAT

EUR

SATE

LLITE

AMAT

EUR

AMAT

EUR

FIXED

Mobile

MARIT

IME M

OBILE

MARITIMEMOBILE

AERO

NAUT

ICAL

MOB

ILE (R

)AE

RONA

UTIC

AL M

OBILE

(OR)

FIXE

D

BROA

DCAS

TING

FIXED

STAN

DARD

FREQ

. AND

TIME

SIGN

AL (1

0,000

kHz)

STAN

DARD

FREQ

.Sp

ace R

esea

rchAE

RONA

UTIC

AL M

OBILE

(R)

AMAT

EUR

FIXED

Mobile* AERO

NAUT

ICAL

MOB

ILE (R

)AE

RONA

UTIC

AL M

OBILE

(OR)

FIXED

FIXED

BROA

DCAS

TING

MARI

TIME

MOBI

LE

AERO

NAUT

ICAL M

OBILE

(R)

AERO

NAUT

ICAL M

OBILE

(OR)

RADIO

ASTR

ONOM

YMo

bile*

AMAT

EUR

BROA

DCAS

TING

AMAT

EUR

AMAT

EUR S

ATEL

LITE

Mobil

e*FIX

ED

BROA

DCAS

TING

STAN

DARD

FREQ

. AND

TIME

SIGN

AL (1

5,000

kHz)

STAN

DARD

FREQ

.Sp

ace R

esea

rch

FIXED

AERO

NAUT

ICAL

MOB

ILE (O

R)

MARI

TIME

MOBI

LE

AERO

NAUT

ICAL

MOB

ILE (O

R)AE

RONA

UTIC

AL M

OBILE

(R)

FIXED

FIXED

BROA

DCAS

TING

STAN

DARD

FREQ

.Sp

ace R

esea

rch

FIXED

MARI

TIME

MOBI

LE

Mobil

eFIX

ED

AMAT

EUR

AMAT

EUR

SATE

LLITE

BROA

DCAS

TING

FIXED

AERO

NAUT

ICAL

MOB

ILE (R

)

MARI

TIME

MOBI

LE

FIXED

FIXED

FIXED

Mob

ile*

MOB

ILE**

FIXED

STAN

DARD

FREQ

. AND

TIME

SIGN

AL (2

5,000

kHz)

STAN

DARD

FREQ

.Sp

ace R

esea

rch LA

ND M

OBILE

MARI

TIME

MOBI

LE LA

ND M

OBILE

MOB

ILE**

RAD

IO A

STRO

NOMY

BROA

DCAS

TING

MARI

TIME

MOBI

LE LA

ND M

OBILE

FIXED

MOB

ILE**

FIXED

MOB

ILE**

MOB

ILE

FIXED

FIXED

FIXED

FIXED

FIXED

LAND

MOB

ILE

MOB

ILE**

AMAT

EUR

AMAT

EUR

SATE

LLITE

MOB

ILE

LAND

MOB

ILE

MOBI

LE

MOBI

LE

FIXED

FIXED

MOBI

LE

MOBI

LE

FIXED

FIXED

LAND

MOBI

LE

LAND

MOBI

LE

LAND

MOBI

LE

LAND

MOB

ILERa

dio A

stron

omy

RADIO

AST

RONO

MYLA

ND M

OBILE

FIXED

FIXED

MOBI

LEMOBIL

E

MOBILE

LAND

MOB

ILE

FIXED

LAND

MOBI

LE

FIXED

FIXED

MOBI

LE

MOBIL

E

LANDMOBILE AMATEUR

BROADCASTING(TV CHANNELS 2-4)

FIXED

MOBI

LE

FIXED

MOBI

LE

FIXED

MOBI

LEFIX

EDMO

BILE

AERO

NAUT

ICAL

RAD

IONA

VIGA

TION


BROADCASTING(FM RADIO)


AERO

NAUT

ICAL

MOBI

LE (R

)AE

RONA

UTIC

AL M

OBILE

AERO

NAUT

ICAL

MOB

ILE

AERO

NAUT

ICAL

MOBI

LE (R

)

AERO

NAUT

ICAL

MOBI

LE (R

)AE

RONA

UTIC

AL M

OBILE

(R)

MOBI

LEFI

XED

AMAT

EUR


MOBILE

FIXED

MOBILE

FIXED

MOBILE SATELLITE

FIXED

MOBILESATELLITE

MOBILE

FIXED

MOBILESATELLITE

MOBILEFIX

EDMO

BILE

AERO

NAUT

ICAL

RAD

IONA

VIGA

TION

STD.

FREQ

. & TI

ME SI

GNAL

SAT.

(400.1

MHz

)ME

T. SAT

.(S-

E)SP

ACE R

ES.

(S-E)

Earth

Exp

l.Sa

tellite

(E-S

)

MOBI

LE S

ATEL

LITE

(E-S

)FIX

EDMO

BILE

RADI

OAS

TRON

OMY

RADI

OLOC

ATIO

NAm

ateur

LAND

MOB

ILE

MeteorologicalSatellite (S-E)

LAND

MOB

ILEBR

OADC

ASTIN

G(TV

CHAN

NELS

14 - 2

0)


TV BROADCASTINGRADI

O AS

TRON

OMY

RADI

OLOC

ATIO

N

FIXED

Amate

ur


MOBI

LE**

FIXED

AERO

NAUT

ICAL

RADIO

NAVIG

ATION

Radio

locati

on

Radio

locati

onMA

RITIM

ERA

DION

AVIG

ATIO

N

MARI

TIME

RADI

ONAV

IGAT

ION

Radio

locati

on

Radiolocation

Radiolocation

RADIO-LOCATION RADIO-

LOCATION

Amateur

AERO

NAUT

ICAL

RADIO

NAVIG

ATIO

N(G

round

)RA

DIO-

LOCA

TION

Radio

-loc

ation

AERO

. RAD

IO-NA

V.(Gro

und)

FIXED

SAT.

(S-E)

RADIO

-LO

CATIO

NRa

dio-

locati

on

FIXED

FIXEDSATELLITE

(S-E)

FIXED

AERO

NAUT

ICAL

RAD

IONA

VIGA

TION MO

BILE

FIXED

MOBIL

E

RADI

O AS

TRON

OMY

Spac

e Res

earch

(Pas

sive)

AERO

NAUT

ICAL

RAD

IONA

VIGA

TION

RADI

O-LO

CATIO

NRa

dio-

locati

onRA

DION

AVIG

ATIO

NRa

dioloc

ation

RADI

OLOC

ATIO

NRa

dioloc

ation

Radio

locati

on

Radio

locati

onRA

DIOL

OCAT

ION

RADI

O-LO

CATIO

N

MARI

TIME

RADI

ONAV

IGAT

ION

MARI

TIME

RADI

ONAV

IGAT

ION

METE

OROL

OGIC

ALAID

S

Amate

urAm

ateur

FIXED

FIXED

SATE

LLITE

(E-S

)MO

BILE

FIXED

SATE

LLITE

(E-S

)

FIXED

SATE

LLITE

(E-S

)MO

BILE

FIXED FIX

ED

FIXED

FIXED

MOBIL

E

FIXED

SPAC

E RE

SEAR

CH (E

-S)

FIXED

Fixed

MOBIL

ESA

TELL

ITE (S

-E)FIX

ED SA

TELLI

TE (S

-E)

FIXED

SATE

LLITE

(S-E)

FIXED

SATE

LLITE

(S-E)

FIXED

SATE

LLITE

(S-E)

FIXED

SATE

LLITE

(E-S)

FIXED

SATE

LLITE

(E-S)

FIXED

SATE

LLITE

(E-S)

FIXED

SATE

LLITE

(E-S)

FIXED

FIXED

FIXED

FIXED

FIXED

FIXED

FIXED

MET.

SATE

LLITE

(S-E)

Mobile

Satell

ite (S-

E)Mo

bileSa

tellite

(S-E)

Mobile

Satell

ite (E-

S)(no

airbo

rne)

Mobile

Satell

ite(E-

S)(no

airborn

e)

Mobile

Sate

llite (S

-E)

Mobile

Satell

ite (E-

S)

MOBIL

ESA

TELL

ITE (E

-S)EA

RTH E

XPL.

SATE

LLITE

(S-E)

EART

H EXP

L.SA

T. (S-E

)

EART

H EXP

L.SA

TELLI

TE (S

-E)

MET.

SATE

LLITE

(E-S)

FIXED

FIXED

SPAC

E RES

EARC

H (S-

E)(de

ep sp

ace o

nly)

SPAC

E RES

EARC

H (S

-E)

AERO

NAUT

ICAL

RADI

ONAV

IGAT

ION

RADI

OLOC

ATIO

NRa

dioloc

ation

Radio

locati

on

Radio

locati

on

Radio

locati

on

MARI

TIME

RADI

ONAV

IGAT

ION Me

teorol

ogica

lAid

sRA

DIONA

VIGAT

ION

RADI

OLOC

ATIO

NRa

dioloc

ation

RADI

O-LO

CATIO

NRa

dioloc

ation

Radio

locati

onAm

ateur

Amate

urAm

ateur

Satel

liteRA

DIOL

OCAT

ION

FIXED

FIXED

FIXED

FIXE

DFIXEDSATELLITE

(S-E)

FIXEDSATELLITE

(S-E)

Mobile **

SPAC

E RES

EARC

H(Pa

ssive)

EART

H EX

PL.

SAT.

(Passi

ve)

RADIO

ASTR

ONOM

YSP

ACE

RESE

ARCH

(Pas

sive)

EART

H EX

PL.

SATE

LLITE

(Pas

sive)

RADI

OAS

TRON

OMY

BROA

DCAS

TING

SATE

LLITE

AERO

NAUT

ICAL R

ADION

AV.

Spac

e Res

earch

(E-S)

SpaceResearch

Land

Mob

ileSa

tellite

(E-S)

Radio

-loc

ation

RADIO

-LO

CATIO

N

RADIO

NAVIG

ATION FI

XED

SATE

LLIT

E (E

-S)

Land

Mob

ileSa

tellite

(E-S

)

Land

Mob

ileSa

tellite

(E-S)

Fixed

Mobil

eFIX

ED SA

T. (E

-S)

Fixed

Mobil

eFIX

ED

Mobil

eFIX

ED

MOBIL

ESp

ace R

esearc

hSp

ace R

esea

rch

Spac

e Res

earch

SPAC

E RE

SEAR

CH(Pa

ssive

)RA

DIO A

STRO

NOMY

EART

H EXP

L. SA

T.(Pa

ssive

)

Radio

locatio

nRA

DIOL

OCAT

ION

Radio

locati

on

FX S

AT (E

-S)

FIXED

SAT

ELLIT

E (E

-S)FI

XED

FIXED

FIXE

DMO

BILE

EART

H EX

PL.

SAT.

(Passi

ve)

MOBI

LE

Earth

Expl.

Satell

ite (Ac

tive)

Stand

ardFre

quen

cy an

dTim

e Sign

alSa

tellite

(E-S)

Earth

Explo

ration

Satel

lite(S-

S)MO

BILE

FIXED

MOBI

LEFI

XED

Earth

Explo

ration

Satell

ite (S-

S)

FIXE

DMO

BILE

FIXE

DSA

T (E

-S)

FIXED

SAT

ELLIT

E (E

-S)

MOBIL

E SA

TELL

ITE (E

-S)

FIXED

SATE

LLITE

(E-S

)

MOBIL

ESA

TELL

ITE(E

-S)

Stand

ardFre

quen

cy an

dTim

e Sign

alSa

tellite

(S-E)

Stand

. Freq

uenc

yan

d Tim

e Sign

alSa

tellite

(S-E)

FIXED

MOBIL

E

RADI

OAS

TRON

OMY

SPAC

ERE

SEAR

CH(P

assiv

e)EA

RTH

EXPL

ORAT

ION

SAT.

(Pas

sive)

RADI

ONAV

IGAT

ION

RADI

ONAV

IGAT

ION

INTE

R-SA

TELL

ITE

RADI

ONAV

IGAT

ION

RADI

OLOC

ATIO

NRa

dioloc

ation

SPAC

E RE

..(P

assiv

e)EA

RTH E

XPL.

SAT.

(Passi

ve)

FIXE

DMO

BILE

FIXE

DMO

BILE

FIXE

DMO

BILE

Mobil

eFi

xedFIX

EDSA

TELL

ITE (S

-E)

BROA

D-CA

STIN

GBC

STSA

T.

FIXED

MOBIL

E

FXSA

T(E-

S)MO

BILE

FIXE

D

EART

HEX

PLOR

ATIO

NSA

TELL

ITEFI

XED

SATE

LLITE

(E-S)

MOBIL

ESA

TELLI

TE (E

-S)

MOB

ILE

FIXE

D

SPAC

ERE

SEAR

CH(P

assiv

e)

EART

HEX

PLOR

ATIO

NSA

TELL

ITE(Pa

ssive)

EART

HEX

PLOR

ATIO

NSA

T. (P

assiv

e)

SPAC

ERE

SEAR

CH(P

assiv

e)

INTER

-SA

TELL

ITERA

DIO-

LOCA

TION

SPAC

ERE

SEAR

CHFI

XED

MOBILE

F IXED

MOBILESATELLITE

(E-S)

MOBIL

ESA

TELL

ITERA

DIONA

VIGAT

ION

RADIO

-NA

VIGAT

ION

SATE

LLITE

EART

HEX

PLOR

ATIO

NSA

TELL

ITE F IXEDSATELLITE

(E-S)

MOBIL

EFIX

EDFIX

EDSA

TELL

ITE (E

-S)

AMAT

EUR

AMAT

EUR

SATE

LLITE

AMAT

EUR

AMAT

EUR

SATE

LLITE

Amate

urSa

tellite

Amate

urRA

DIO-

LOCA

TION

MOBIL

EFIX

EDMO

BILE

SATE

LLITE

(S-E

)

FIXED

SATE

LLITE

(S-E

)

MOBIL

EFIX

EDBR

OAD-

CAST

ING

SATE

LLITE

BROA

D-CA

STIN

G

SPACERESEARCH

(Passive)

RADIOASTRONOMY

EARTHEXPLORATION

SATELLITE(Passive)

MOBILE

FIXE

D

MOBIL

EFIX

EDRA

DIO-

LOCA

TION

FIXED

SATE

LLITE

(E-S

)

MOBILESATELLITE

RADIO-NAVIGATIONSATELLITE

RADIO-NAVIGATION

Radio-location

EART

H E

XPL.

SATE

LLITE

(Pas

sive)

SPAC

E RES

EARC

H(P

assiv

e)

FIXE

DFI

XED

SATE

LLIT

E(S

-E)

SPACERESEARCH

(Passive)

RADIOASTRONOMY

EARTHEXPLORATION

SATELLITE(Passive)

FIXED

MOBILE

MOBI

LEINT

ER-

SATE

LLITE

RADIO-LOCATION

INTER-SATELLITE

Radio-location

MOBILE

MOBILESATELLITE

RADIO-NAVIGATION


AMAT

EUR

AMAT

EUR

SATE

LLITE

Amate

urAm

ateur

Satel

liteRA

DIO-

LOCA

TION

MOBIL

EFIX

EDFIX

EDSA

TELL

ITE (S

-E)

MOBIL

EFIX

EDFIX

EDSA

TELL

ITE(S

-E)

EART

HEX

PLOR

ATIO

NSA

TELL

ITE (P

assiv

e)SP

ACE R

ES.

(Pas

sive)

SPAC

E RES

.(P

assiv

e)

RADI

OAS

TRON

OMY

FIXEDSATELLITE

(S-E)

FIXED

MOBIL

EFIX

ED

MOBIL

EFIX

ED

MOBIL

EFIX

ED

MOBIL

EFIX

ED

MOBIL

EFIX

ED

SPAC

E RES

EARC

H(P

assiv

e)RA

DIO

ASTR

ONOM

YEA

RTH

EXPL

ORAT

ION

SATE

LLITE

(Pas

sive)

EART

HEX

PLOR

ATION

SAT. (

Passi

ve)

SPAC

ERE

SEAR

CH(Pa

ssive

)INT

ER-

SATE

LLITE

INTE

R-SA

TELL

ITE

INTE

R-SA

TELL

ITE

INTE

R-SA

TELL

ITE

MOBILE

MOBILE

MOBIL

EMOBILESATELLITE

RADIO-NAVIGATION


FIXEDSATELLITE

(E-S)

FIXED

FIXED

EART

HEX

PLOR

ATION

SAT.

(Passi

ve)

SPAC

E RES

.(Pa

ssive

)

SPACERESEARCH

(Passive)

RADIOASTRONOMY

EARTHEXPLORATION

SATELLITE(Passive)

MOBIL

EFIX

ED

MOBIL

EFIX

ED

MOBIL

EFIX

ED

FIXED

SATE

LLITE

(S-E

)FIX

EDSA

TELL

ITE(S-

E) FIXED

SATE

LLITE

(S-E

)

EART

H EX

PL.

SAT.

(Passi

ve)

SPAC

E RES

.(Pa

ssive

)

Radio

-loc

ation

Radio

-loc

ation

RADI

O-LO

CATIO

NAM

ATEU

RAM

ATEU

R SA

TELL

ITE

Amate

urAm

ateur

Satel

lite

EART

H EXP

LORA

TION

SATE

LLITE

(Pas

sive)

SPAC

E RE

S. (P

assiv

e)

MOBILE

MOBILESATELLITE

RADIO-NAVIGATION


MOBILE

MOBILE

FIXED

RADIO-ASTRONOMY

FIXEDSATELLITE

(E-S)

FIXED

3.0

3.02

5

3.15

5

3.23

0

3.4

3.5

4.0

4.06

3

4.43

8

4.65

4.7

4.75

4.85

4.99

55.

003

5.00

55.

060

5.45

MARITIMEMOBILE

AMAT

EUR

AMAT

EUR

SATE

LLITE

FIXED

Mobil

eMA

RITIM

E MOB

ILE

STAN

DARD

FREQ

UENC

Y & TI

ME SI

GNAL

(20,0

00 K

HZ)

Spac

e Res

earch

AERO

NAUT

ICAL

MOB

ILE (O

R)

AMAT

EUR

SATE

LLITE

AMAT

EUR

MET. S

AT. (S

-E)MO

B. SA

T. (S-

E)SP

ACE R

ES. (S

-E)SP

ACE O

PN. (S

-E)ME

T. SAT

. (S-E)

Mob.

Sat. (

S-E)

SPAC

E RES

. (S-E)

SPAC

E OPN

. (S-E)

MET. S

AT. (S

-E)MO

B. SA

T. (S-

E)SP

ACE R

ES. (S

-E)SP

ACE O

PN. (S

-E)ME

T. SAT

. (S-E)

Mob.

Sat. (

S-E)

SPAC

E RES

. (S-E)

SPAC

E OPN

. (S-E)

MOBILE

FIXED

FIXED

Land

Mob

ileFIX

EDMO

BILE

LAN

D MO

BILE

LAND

MOB

ILE

MAR

ITIME

MOB

ILE M

ARITI

ME M

OBILE

MAR

ITIME

MOB

ILE MAR

ITIME

MOB

ILE

LAN

D MO

BILE

FIXED

MOBI

LEMO

BILE S

ATEL

LITE (

E-S)

Radio

locati

onRa

dioloc

ation

LAND

MOB

ILEAM

ATEU

R

MOB

ILE SA

TELL

ITE (E

-S) R

ADIO

NAVIG

ATIO

N SA

TELL

ITE

MET.

AIDS

(Rad

ioson

de)

MET

EORO

LOGI

CAL A

IDS (R

ADIO

SOND

E)

SPAC

E RE

SEAR

CH (S

-S)FIX

EDMO

BILE

LAND

MOB

ILEFIX

EDLA

ND M

OBILE

FIXED

FIXED

RADI

O AS

TRON

OMY

RADI

O AS

TRON

OMY

METE

OROL

OGIC

ALAI

DS (R

ADIO

SOND

E)

METE

OROL

OGIC

ALAI

DS (R

adios

onde

)ME

TEOR

OLOG

ICAL

SATE

LLITE

(s-E

)

Fixed

FIXED

MET. SAT.(s-E)

FIXE

D

FIXED

AERO

NAUT

ICAL M

OBILE

SATE

LLITE

(R) (s

pace

to Ea

rth)

AERO

NAUT

ICAL R

ADION

AVIGA

TION

RADIO

NAV.

SATE

LLITE

(Spac

e to Ea

rth)

AERO

NAUT

ICAL M

OBILE

SATE

LLITE

(R)

(space

to Ear

th)Mo

bile Sa

tellite

(S- E

)

RADIO

DET.

SAT.

(E-S)

MOBI

LESA

T(E-

S)AE

RO. R

ADION

AVIGA

TION

AERO

. RAD

IONAV

.AE

RO. R

ADION

AV.

RADIO

DET. S

AT. (E

-S)RA

DIO DE

T. SAT

. (E-S)

MOBIL

E SAT

. (E-S)

MOBIL

E SAT

. (E-S)

Mobile

Sat. (

S-E)

RADIO

ASTR

ONOM

Y

RADI

O AS

TRON

OMY

MOB

ILE S

AT. (

E-S)

FIXED

MOBI

LE

FIXED

FIXE

D(LO

S)MO

BILE

(LOS)

SPAC

ERE

SEAR

CH(s-

E)(s-s

)

SPAC

EOP

ERAT

ION(s-

E)(s-s

)EA

RTH

EXPL

ORAT

IONSA

T. (s-E

)(s-s)

Amate

ur

MOBI

LEFix

edRA

DIOLO

CATIO

N

AMAT

EUR

RADI

O AS

TRON

.SP

ACE

RESE

ARCH

EART

H E

XPL

SAT

FIXED

SAT

. (S

-E)

FIXED

MOBILE

FIXEDSATELLITE (S-E)

FIXED

MOBIL

EFIX

EDSA

TELL

ITE (E

-S)

FIXED

SATE

LLITE

(E-S

)MO

BILE

FIXED

SPAC

ERE

SEAR

CH (S

-E)(De

ep Sp

ace) AE

RONA

UTIC

AL R

ADIO

NAVIG

ATIO

N

EART

HEX

PL. S

AT.

(Passi

ve)

300

325

335

405

415

435

495

505

510

525

535

1605

1615

1705

1800

1900

2000

2065

2107

2170

2173

.521

90.5

2194

2495

2501

2502

2505

2850

3000

RADIO-LOCATION

BROA

DCAS

TING

FIXED

MOBILE

AMAT

EUR

RADI

OLOC

ATIO

N

MOBIL

EFIX

EDMA

RITIM

EMO

BILE

MARI

TIME

MOBIL

E (TE

LEPH

ONY)

MARIT

IME

MOBIL

ELA

NDMO

BILE

MOBIL

EFIX

ED

30.0

30.5

6

32.0

33.0

34.0

35.0

36.0

37.0

37.5

38.0

38.2

5

39.0

40.0

42.0

43.6

9

46.6

47.0

49.6

50.0

54.0

72.0

73.0

74.6

74.8

75.2

75.4

76.0

88.0

108.

0

117.

975

121.

9375

123.

0875

123.

5875

128.

8125

132.

0125

136.

013

7.0

137.

025

137.

175

137.

825

138.

0

144.

014

6.0

148.

014

9.9

150.

0515

0.8

152.

855

154.

015

6.24

7515

7.03

7515

7.18

7515

7.45

161.

575

161.

625

161.

775

162.

0125

173.

217

3.4

174.

0

216.

0

220.

022

2.0

225.

0

235.

0

300

ISM – 6.78 ± .015 MHz ISM – 13.560 ± .007 MHz ISM – 27.12 ± .163 MHz

ISM – 40.68 ± .02 MHz

ISM – 24.125 ± 0.125 GHz 30 GHz

ISM – 245.0 ± 1GHzISM – 122.5 ± .500 GHzISM – 61.25 ± .250 GHz

300.

0

322.

0

328.

6

335.

4

399.

9

400.

0540

0.15

401.

0

402.

0

403.

040

6.0

406.

1

410.

0

420.

0

450.

045

4.0

455.

045

6.0

460.

046

2.537

546

2.737

546

7.537

546

7.737

547

0.0

512.

0

608.

061

4.0

698

746

764

776

794

806

821

824

849

851

866

869

894

896

9019

0190

2

928

929

930

931

932

935

940

941

944

960

1215

1240

1300

1350

1390

1392

1395

2000

2020

2025

2110

2155

2160

2180

2200

2290

2300

2305

2310

2320

2345

2360

2385

2390

2400

2417

2450

2483

.525

0026

5526

9027

00

2900

3000

1400

1427

1429

.5

1430

1432

1435

1525

1530

1535

1544

1545

1549

.5

1558

.515

5916

1016

10.6

1613

.816

26.5

1660

1660

.516

68.4

1670

1675

1700

1710

1755

1850

MARIT

IME M

OBILE

SATE

LLITE

(space

to Ear

th)MO

BILE S

ATELL

ITE (S

-E)

RADI

OLOC

ATIO

NRA

DION

AVIG

ATIO

NSA

TELL

ITE (S

-E)

RADI

OLOC

ATIO

NAm

ateur

Radio

locati

onAE

RONA

UTIC

ALRA

DION

AVIG

ATIO

N

SPA

CE R

ESEA

RCH

( Pas

sive)

EART

H EX

PL S

AT (P

assiv

e)RA

DIO

AST

RONO

MY

MOBI

LEMO

BILE

**FIX

ED-S

AT

(E-

S)FIX

ED

FIXED FI

XED*

*LAN

D MOB

ILE (T

LM)

MOBIL

E SAT

.(Sp

ace to

Earth

)MA

RITIME

MOB

ILE SA

T.(Sp

ace to

Earth

)Mo

bile(Ae

ro. TL

M)

MOBI

LE S

ATEL

LITE

(S-E

)

MOBIL

E SAT

ELLITE

(Space

to Ear

th)AE

RONA

UTICA

L MOB

ILE SA

TELLI

TE (R

)(sp

ace to

Earth)

3.0

3.1

3.3

3.5

3.6

3.65

3.7

4.2

4.4

4.5

4.8

4.94

4.99

5.0

5.15

5.25

5.35

5.46

5.47

5.6

5.65

5.83

5.85

5.92

5

6.42

5

6.52

5

6.70

6.87

5

7.02

57.

075

7.12

5

7.19

7.23

57.

25

7.30

7.45

7.55

7.75

7.90

8.02

5

8.17

5

8.21

5

8.4

8.45

8.5

9.0

9.2

9.3

9.5

10.0

10.4

510

.510

.55

10.6

10.6

8

10.7

11.7

12.2

12.7

12.7

5

13.2

513

.4

13.7

514

.0

14.2

14.4

14.4

714

.514

.714

515

.136

5

15.3

5

15.4

15.4

3

15.6

315

.716

.617

.1

17.2

17.3

17.7

17.8

18.3

18.6

18.8

19.3

19.7

20.1

20.2

21.2

21.4

22.0

22.2

122

.5

22.5

5

23.5

5

23.6

24.0

24.0

5

24.2

524

.45

24.6

5

24.7

5

25.0

5

25.2

525

.527

.0

27.5

29.5

29.9

30.0

ISM – 2450.0 ± 50 MHz

30.0

31.0

31.3

31.8

32.0

32.3

33.0

33.4

36.0

37.0

37.6

38.0

38.6

39.5

40.0

40.5

41.0

42.5

43.5

45.5

46.9

47.0

47.2

48.2

50.2

50.4

51.4

52.6

54.2

555

.78

56.9

57.0

58.2

59.0

59.3

64.0

65.0

66.0

71.0

74.0

75.5

76.0

77.0

77.5

78.0

81.0

84.0

86.0

92.0

95.0

100.

0

102.

0

105.

0

116.

0

119.

98

120.

02

126.

0

134.

0

142.

014

4.0

149.

0

150.

0

151.

0

164.

0

168.

0

170.

0

174.

5

176.

5

182.

0

185.

0

190.

0

200.

0

202.

0

217.

0

231.

0

235.

0

238.

0

241.

0

248.

0

250.

0

252.

0

265.

0

275.

0

300.

0

ISM – 5.8 ± .075 GHz

ISM – 915.0 ± 13 MHz

INTER

-SATE

LLITE

RADIO

LOCA

TION

SATE

LLITE

(E-S)

AERO

NAUT

ICAL

RADIO

NAV.

PLEASE NOTE: THE SPACING ALLOTTED THE SERVICES IN THE SPEC-TRUM SEGMENTS SHOWN IS NOT PROPORTIONAL TO THE ACTUAL AMOUNTOF SPECTRUM OCCUPIED.

AERONAUTICALMOBILE

AERONAUTICALMOBILE SATELLITE


AMATEUR

AMATEUR SATELLITE

BROADCASTING

BROADCASTINGSATELLITE

EARTH EXPLORATIONSATELLITE

FIXED

FIXED SATELLITE

INTER-SATELLITE

LAND MOBILE

LAND MOBILESATELLITE

MARITIME MOBILE

MARITIME MOBILESATELLITE

MARITIMERADIONAVIGATION

METEOROLOGICALAIDS

METEOROLOGICALSATELLITE

MOBILE

MOBILE SATELLITE

RADIO ASTRONOMY

RADIODETERMINATIONSATELLITE

RADIOLOCATION

RADIOLOCATION SATELLITE

RADIONAVIGATION

RADIONAVIGATIONSATELLITE

SPACE OPERATION

SPACE RESEARCH

STANDARD FREQUENCYAND TIME SIGNAL

STANDARD FREQUENCYAND TIME SIGNAL SATELLITE

RADI

O AS

TRON

OMY

FIXED

MARITIME MOBILE

FIXED

MARITIMEMOBILE Aeronautical

Mobile

STAN

DARD

FREQ

. AND

TIME

SIGN

AL (6

0 kHz

)FIX

EDMo

bile*

STAN

D. FR

EQ. &

TIME

SIG.

MET. A

IDS(Ra

dioson

de)Sp

ace Op

n. (S

-E)MO

BILE.

SAT. (

S-E)

Fixed

Stand

ardFre

q. an

dTim

e Sign

alSa

tellite

(E-S)

FIXE

D

STAN

DARD

FREQ

. AND

TIME

SIGN

AL (2

0 kHz

)

Amate

ur

MOB

ILE

FIXED

SAT.

(E-S)

Spac

eRe

searc

h

ALLOCATION USAGE DESIGNATIONSERVICE EXAMPLE DESCRIPTION

Primary FIXED Capital LettersSecondary Mobi le 1st Capital with lower case letters

U.S. DEPARTMENT OF COMMERCENational Telecommunications and Information AdministrationOffice of Spectrum Management

October 2003

MOBIL

EBR

OADC

ASTIN

G

TRAVELERS INFORMATION STATIONS (G) AT 1610 kHz

59-64 GHz IS DESIGNATED FORUNLICENSED DEVICES

Fixed

AERO

NAUT

ICAL

RADI

ONAV

IGAT

ION

SPAC

E RES

EARC

H (Pa

ssive

)

* EXCEPT AERO MOBILE (R)

** EXCEPT AERO MOBILE WAVELENGTH

BANDDESIGNATIONS

ACTIVITIES

FREQUENCY

3 x 107m 3 x 106m 3 x 105m 30,000 m 3,000 m 300 m 30 m 3 m 30 cm 3 cm 0.3 cm 0.03 cm 3 x 105Å 3 x 104Å 3 x 103Å 3 x 102Å 3 x 10Å 3Å 3 x 10-1Å 3 x 10-2Å 3 x 10-3Å 3 x 10-4Å 3 x 10-5Å 3 x 10-6Å 3 x 10-7Å

0 10 Hz 100 Hz 1 kHz 10 kHz 100 kHz 1 MHz 10 MHz 100 MHz 1 GHz 10 GHz 100 GHz 1 THz 1013Hz 1014Hz 1015Hz 1016Hz 1017Hz 1018Hz 1019Hz 1020Hz 1021Hz 1022Hz 1023Hz 1024Hz 1025Hz

THE RADIO SPECTRUMMAGNIFIED ABOVE3 kHz 300 GHz

VERY LOW FREQUENCY (VLF)Audible Range AM Broadcast FM Broadcast Radar Sub-Millimeter Visible Ultraviolet Gamma-ray Cosmic-ray

Infra-sonics Sonics Ultra-sonics Microwaves InfraredP L S XC Radar

Bands

LF MF HF VHF UHF SHF EHF INFRARED VISIBLE ULTRAVIOLET X-RAY GAMMA-RAY COSMIC-RAY

X-ray

ALLOCATIONSFREQUENCY

BRO

AD

CA

STIN

GFI

XED

MO

BILE

*

BRO

ADCA

STIN

GFI

XED

BRO

ADCA

STIN

G

FIX

ED

Mob

ile

FIX

EDBR

OAD

CAST

ING

BROA

DCAS

TING

FIXED

FIXED

BROA

DCAS

TING

FIXED

BROA

DCAS

TING

FIXED

BROA

DCAS

TING

FIXED

BROA

DCAS

TING

FIXED

BROA

DCAS

TING

FIXED

BROA

DCAS

TING

FIXED

FIXED

FIXED

FIXED

FIXED

FIXED

LAND

MOBI

LE

FIXE

D

AERO

NAUT

ICAL

MOB

ILE (R

)

AMAT

EUR

SATE

LLITE

AMAT

EUR MO

BILE

SATE

LLITE

(E-S

)

FIXE

D

Fixe

dMo

bile

Radi

o-lo

catio

nFI

XED

MOB

ILE

LAND

MOB

ILE M

ARITI

ME M

OBILE

FIXED

LAN

D MO

BILE

FIXED

LAND

MOB

ILE

RAD

ION

AV-S

ATEL

LITE

FIXED

MOBI

LEFIX

ED L

AND

MOBIL

E

MET. A

IDS(R

adio-

sond

e)SP

ACE O

PN.

(S-E)

Earth

Expl S

at(E-

S)Me

t-Sate

llite (E

-S)ME

T-SAT

. (E

-S)EA

RTH

EXPL

SAT. (

E-S)

Earth

Expl S

at(E-

S)Me

t-Sate

llite (E

-S)EA

RTH

EXPL

SAT. (

E-S)

MET-S

AT.

(E-S)

LAND

MOB

ILELA

ND M

OBILE

FIXED

LAND

MOB

ILEFIX

ED

FIXED

FIXED

LAN

D MO

BILE

LAND

MOB

ILE FIXED

LAN

D MO

BILE

LAND

MOB

ILE L

AND

MOBIL

E

LAND

MOB

ILE

MOBI

LEFIX

ED

MOBI

LEFIX

ED

BRO

ADCA

STMO

BILE

FIXED

MOBIL

EFIX

ED

FIXED

LAND

MOB

ILELA

ND M

OBILE

FIXED

LAND

MOB

ILE AERO

NAUT

ICAL M

OBILE

AERO

NAUT

ICAL M

OBILE FIX

EDLA

ND M

OBILE

LAND

MOB

ILELA

ND M

OBILE

FIXED

LAND

MOB

ILEFIX

EDM

OBIL

EFIX

ED

FIXED

FIXED

MOBIL

EFIX

ED

FIXED

FIXED

BRO

ADCA

ST

LAND

MOB

ILELA

ND M

OBILE

FIXED

LAND

MOB

ILE

METE

OROL

OGICA

LAID

S

FXSp

ace r

es.

Radio

Ast

E-Ex

pl Sa

tFIX

EDMO

BILE*

*MO

BILE

SATE

LLITE

(S-E

)RA

DIODE

TERM

INATIO

N SA

T. (S-

E)

Radio

locatio

nMO

BILE

FIXED

Amate

urRa

dioloc

ation

AMAT

EUR

FIXED

MOBIL

E

B-SA

TFX

MOB

Fixed

Mobil

eRa

dioloc

ation

RADI

OLOC

ATIO

N

MOBI

LE **

Fixed

(TLM

)LA

ND M

OBILE

FIXED

(TLM

)LA

ND M

OBILE

(TLM

)FIX

ED-S

AT

(S-

E)FIX

ED (T

LM)

MOBIL

E

MOBIL

E SAT

.(Sp

ace to

Earth

)Mo

bile

**

MOBIL

E**

FIXED

MOBIL

E

MOBI

LE S

ATEL

LITE

(E-S

)

SPAC

E OP

.(E-

S)(s-s

)EAR

TH EX

PL.SA

T. (E-S

)(s-s)

SPAC

E RE

S.(E-

S)(s-s

)FX

.MO

B.MO

BILE

FIXED

Mobil

e

R- LO

C.

BCST

-SAT

ELLIT

EFi

xed

Radio

-loc

ation

B-SA

TR-

LOC.

FXMO

BFix

edMo

bile

Radio

locati

onFIX

EDMO

BILE*

*Am

ateur

RADI

OLOC

ATIO

N

SPAC

E RES

..(S-E

)

MOBIL

EFIX

ED MOBI

LE SA

TELL

ITE (S

-E)

MARI

TIME

MOB

ILE

Mobil

e FIXED

FIXED

BRO

ADCA

STMO

BILE

FIXED

MOBI

LE SA

TELL

ITE (E

-S)

FIXED

F

IXED

MARI

TIME

MOB

ILE

F

IXED

FIXED

MOBIL

E**

FIXED

MOBIL

E**

FIXED

SAT

(S-E

)AE

RO.

RADI

ONAV

.

FIXED

SATE

LLITE

(E-S

)

Amate

ursa

t (s-e)

Amate

urMO

BILE

FIXE

D SA

T(E-

S)

FIXE

DFIX

ED S

ATEL

LITE

(S-E)(

E-S)

FIXED

FIXED

SAT

(E-S)

MOBI

LE

Radio

-loc

ation

RADIO

-LO

CATIO

NFI

XE

D S

AT.(E

-S)

Mobi

le**

Fixe

dMo

bile

FX S

AT.(E

-S)

L M S

at(E-S

)

AERO

RA

DION

AVFI

XED

SAT

(E-S

)AE

RONA

UTIC

AL R

ADIO

NAVIG

ATIO

NRA

DIOL

OCAT

ION

Spac

e Re

s.(ac

t.)

RADI

OLOC

ATIO

NRa

dioloc

ation

Radio

loc.

RADIO

LOC.

Earth

Exp

l Sat

Spac

e Re

s.Ra

dioloc

ation

BCST

SAT

.

FIXE

DFIX

ED S

ATEL

LITE

(S-E)

FIXE

D SA

TELL

ITE

(S-E

)EA

RTH

EXPL

. SAT

.FX

SAT

(S-E

)SP

ACE

RES.

FIXE

D SA

TELL

ITE

(S-E

)FI

XED

SATE

LLIT

E (S

-E)

FIXE

D SA

TELL

ITE

(S-E

)MO

BILE

SAT.

(S-E)

FX S

AT (S

-E)

MOBI

LE S

ATEL

LITE

(S-E

)FX

SAT

(S-E

)ST

D FR

EQ. &

TIME

MOBIL

E SA

T (S-E

)EA

RTH

EXPL

. SAT

.MO

BILE

FIXE

DSP

ACE

RES. FI

XED

MOBI

LEMO

BILE

**FI

XED

EART

H EX

PL. S

AT.

FIXE

DMO

BILE*

*RA

D.AS

TSP

ACE

RES.

FIXE

DMO

BILE

INTER

-SATE

LLITE

FIXE

D

RADIO

AS

TRON

OMY

SPAC

E RE

S.(P

assiv

e)

AMAT

EUR

AMAT

EUR S

ATEL

LITE

Radio

-loc

ation

Amate

urRA

DIO-

LOCA

TION

Earth

Exp

l.Sa

telli

te(A

ctive

)

FIXE

D

INTER

-SATE

LLITE

RADIO

NAVIG

ATIO

N

RADIO

LOCA

TION

SA

TELLI

TE (E-

S)INT

ER-SA

TELL

ITE

FIXE

DSA

TELL

ITE

(E-S

)RA

DIONA

VIGAT

ION

FIXE

DSA

TELL

ITE

(E-S

)FI

XED

MOBIL

E SA

TELL

ITE (E

-S)

FIXE

D SA

TELL

ITE

(E-S

)

MOBI

LEFI

XED

Earth

Ex

plorat

ionSa

tellite

(S

-S)

std fre

q &

time

e-e-sa

t (s-s

)MO

BILE

FIXE

D e

-e-sa

tMO

BILE

SPAC

ERE

SEAR

CH (d

eep s

pace

)RA

DION

AVIG

ATIO

NIN

TER-

SAT

SPAC

E RE

S.

FIXE

DMO

BILE

SPAC

E RE

SEAR

CH(s

pace

-to-E

arth

)

SPAC

ERE

S.

FIXE

DSA

T. (

S-E)

MOBI

LEFI

XED

FIXE

D-SA

TELL

ITE

MOBIL

EFI

XED

FIXE

DSA

TELL

ITE

MOBI

LESA

T.FI

XED

SAT

MOBI

LESA

T.EA

RTH

EXPL

SAT

(E-S

)Ea

rthEx

pl.Sa

t (s -

e)SP

ACE

RES

. (E-S) FX

-SAT

(S-E

)

FIXED

MOBIL

EBR

OAD-

CAST

ING

BCST

SAT.

RADIO

ASTR

ONOM

YFI

XED

MOB

ILE*

*FI

XED

SATE

LLITE

(E-S

)

MOBI

LESA

TELL

ITE (

E-S)

FIXE

DSA

TELL

ITE (

E-S)

MOBI

LERA

DION

AV.

SATE

LLIT

EFI

XED

MOBI

LEMO

B. SA

T(E-S

)RA

DION

AV.S

AT.

MOBI

LESA

T (E

-S).

FIXE

DMO

BILE

FXSA

T(E-

S)

MOBI

LEFI

XED

INTE

R- S

ATEA

RTH

EXPL

-SAT

(Pa

ssive

)SP

ACE

RES.

INTE

R- S

ATSP

ACE

RES.

EART

H-ES

INTE

R- S

ATEA

RTH-

ESSP

ACE

RES.

MOB

ILE

FIXE

DEA

RTH

EXPL

ORAT

ION

SAT.

(Pas

sive)

SPAC

E R

ES.

MOB

ILE

FIXE

DIN

TER

- SAT

FIXE

DM

OBIL

E

INTER

-SA

TRA

DIO-

LOC.

MOB

ILE

FIXE

DEA

RTH

EXPL

ORAT

ION

SAT. (

Passi

ve)

MOBIL

EFI

XED

INTER

-SA

TELL

ITEFI

XED

MOBI

LE**

MOB

ILE*

*INT

ER-

SATE

LLITE

MOB

ILE

INTER

-SA

TELL

ITE

RADI

OLOC

.Am

ateur Am

ateu

r Sat

.Am

ateur

RADI

OLOC

.AM

ATEU

R SA

TAM

ATEU

RRA

DIOL

OC.

SPAC

ERE

SEAR

CH(Pa

ssive)

EART

HEX

PL SA

T.(Pa

ssive)

FIXE

DMO

BILE

INTER

-SA

TELL

ITESP

ACE

RESE

ARCH

(Passi

ve)

EART

HEX

PL SA

T.(Pa

ssive)

Amatu

erFI

XED

MO-

BILE

INTER

-SA

T.SP

ACE

RES.

E A R T

H EX

PL . SA

T

INTER

-SA

TELL

ITE

INTER

-SAT.

INTER

-SAT.

MOBIL

EFIX

ED

FX-S

AT (S

- E)

BCST

- SAT

.B-

SAT.

MOB*

*FX

-SAT

SPAC

E RE

SEAR

CH

SPAC

ERE

S..

This chart is a graphic single-point-in-time portrayal of the Table of Frequency Allocations used by theFCC and NTIA. As such, it does not completely reflect all aspects, i.e., footnotes and recent changesmade to the Table of Frequency Allocations. Therefore, for complete information, users should consult theTable to determine the current status of U.S. allocations.



8

Established

Transition

Emerging

Cordless

Wireless CATV

Microwave

Wireless LAN, PBX

Mobile Satellite

Internet & Mobile

Computing Global Coverage Consumer Broadband Intelligent Network

PCS

Cellular

Paging

Fixed Wireless

Rapid Deployment

Private to Public One-Way to Two-Way

SMR

US Spectrum Allocation (Freq in MHz)



8


Common Deployments• In Atlanta, AT&T uses:

• 850 MHz (GSM, GPRS, EDGE): 200 kHz Channels• 1900 MHz (UMTS/HSPA): 3.84 MHz Channels• 1.7/2.1 GHz (UMTS/HSPA): 3.84 MHz Channels• 700 MHz Spectrum (UMTS/LTE): 5 MHz Channels

• Verizon operates using:• 850 MHz (CDMA), 1900 MHz (CDMA2000), 1.7/2.1 GHz (CDMA2000/1xEV-DO)

and 700 MHz• T-Mobile:

• 1900 MHz (GSM, GPRS, EDGS, UMTS), 1.7/2.1 GHz (UMTS)• Metro PCS; Sprint:

• 1900 MHz (CDMA); 1900 MHz (CDMA, CDMA2000, 1xEV-DO)

9


Common Deployments• What are the implications of these layouts?

• What does this tell you about future service?

10


Cellular Architecture (High Level)

11

Base Station



11

Base Station

Base Station

Base Station Base Station

Base Station



11

Base Station

SwitchBase Station


Base Station



11

Base Station

SwitchBase Station


Base Station



11

Base Station

SwitchBase Station


Base Station



11

Base Station

SwitchBase Station


Base Station



11

Base Station

SwitchBase Station


Base Station



11

Base Station

SwitchBase Station


Base Station

Telephone Network



11

Base Station

SwitchBase Station


Base Station

Telephone Network


Cellular Architecture (High Level)• Why would someone design a network this way?

11

Base Station

SwitchBase Station


Base Station

Telephone Network


Wireless Networks Characteristics• What makes wireless so different from wired?

• Higher error rates• Lower bandwidth• Variable delay• Inconsistent performance• Easy mobility

12


Mobile Terminology• Mobile Location

• Finding a mobile device to deliver a connection/packet• Usually requires finding the cell in which a user is located.

• Mobile Tracking• Following the approximate location of a mobile as it moves while not in an active session.• Usually involves some sort of registration• NOT a constant process...

• Handoff/Handover• Transferring/forwarding a connection as a user

moves while in an active session.• Hard vs soft handover.

13


Coverage Terminology• Pico-cell

• O(10 feet): Covers a room• Femto/Micro-Cell

• O(100 feet): Covers a floor/street• Macro-Cell

• O(10 miles): Big towers• Satellites

• Regions, Countries, Hemispheres

14


Mobility• Users can move great distances, at great speed.

• Sometimes, they do both.• Personal mobility vs terminal mobility

• High speeds while communicating• Cellular voice

• Travel large distances between communications• Cellular• Messaging/paging

• Limited Mobility• Wireless LANs

15


Review of OSI Protocol Model• What are the layers of the OSI protocol stack?

• What are the layers of the Internet protocol stack?

• Why are they different?

• Most current protocols/systemsdesigned for highly reliable,wired environment.

16






16

Physical






16

Physical

Link






16

Physical

Link

Network






16

Physical

Link

Network

Transport






16

Physical

Link

Network

Transport

Session






16

Physical

Link

Network

Transport

Presentation

Session






16

Physical

Link

Network

Transport

Presentation

Session

Application






16

Physical

Link

Network

Transport

Presentation

Session

Application

Physical

Link

Network

Transport

Application


Physical Layer• Communications infrastructure is the air/frequency band.

• Limited Bandwidth• Shared, public media• Highly regulated... for the most part• Re-use of resources is key to providing sufficient capacity to users

• Harsh environment• Continuously changing characteristics: adaptation• High error rate: FEC-based channel coding• Bursty errors due to sudden fades: interleaving• Higher layer error recovery

• Mobility• Signal strength varies with location• Motion affects signals• Must “change” channels during handoffs

17


The Decibel• A widely used measurement unit in transmission systems.

• The “Bel” represents a 10:1 power ratio between two sounds.• Logarithmic with the number base 10.

• This allows us deal with very large and very small values easily.• Consider a stereo amplifier with an output of 100 watts where the input is 100

milliwatts. The stereo has an amplification factor of:

• Notice that the 3 in the 30 dB corresponds to the number of zeroes.

18

G =P2

P1=

1000.1

= 1000watts

G = 10log(1000watts) = 30dB


Decibel - An Audio Reference

19


Gain and Loss• Gain indicates an increase in signal strength received.

• From the previous slide, the system has a gain of 30 dB.• Loss indicates attenuation, or a reduction in signal.

• If a signal is transmitted at 10 watts and is measured at 6 watts at the receiver, what is the signal decrease factor (in dB)?

• The advantage to dB is that we can add/subtract them directly.• These two factors are a major component in how wireless systems are engineered.

• Why?

20


Gain and Loss• Gain indicates an increase in signal strength received.

• From the previous slide, the system has a gain of 30 dB.• Loss indicates attenuation, or a reduction in signal.

• If a signal is transmitted at 10 watts and is measured at 6 watts at the receiver, what is the signal decrease factor (in dB)?

• The advantage to dB is that we can add/subtract them directly.• These two factors are a major component in how wireless systems are engineered.

• Why?

20

G = 10log(6/10) = �2.22dB


Physical Layer Degredation• Free space propagation model

• Signal strength diminishes inversely with distance to the power n.• where n is typically between 2 to 4

• Free space propagation model predicts received power as inversely proportional to the square of the distance between transmitter and receiver :

• where Gt and Gr are transmitter and receiver antenna gains, d is the distance between the transmitter and the receiver and λ is the wavelength.

21

Pr(d) =PtGtGr�2

(4⇥)2d2


FSPL Calculations• Loss is generally calculated in decibels, with this simpler equation:

• where D is distance in kilometers and f is frequency in MHz.• A transmitter A sends a message to a receiver B, which are separated by

40km. What is the FSPL at 1.7 GHz?

• What does this mean about the transmitting antenna?

22

LdB = 32.44 + 20logD + 20logf






22

LdB = 32.44 + 20logD + 20logf

LdB = 32.44 + 20log(40) + 20log(1.7 � 103)






22

LdB = 32.44 + 20logD + 20logf

LdB = 32.44 + 20log(40) + 20log(1.7 � 103)LdB = 129.09dB


Practice Problem

• A is connected to a transmitter by a cable with -2.22 dB.• B is connected to a receiver by a cable with -1.4 dB.• B’s antenna has an 11dB gain.• A’s antenna transmits with 10 watts of power.• The two 802.11 towers are separated by 5 km.• What is the power at the receiver (in mW)?

23

Tx RxA B

-2.22 dB

10 mW5 km

1 dB

-1.4 dB


Work Through It

24

Tx RxA B

-2.22 dB

10 mW5 km

1 dB

-1.4 dB


Work Through It

24

Tx RxA B

-2.22 dB

10 mW5 km

1 dB

-1.4 dB

LdB = 32.44 + 20log(5) + 20log(2.4 � 103)


Work Through It

24

Tx RxA B

-2.22 dB

10 mW5 km

1 dB

-1.4 dB

LdB = 32.44 + 20log(5) + 20log(2.4 � 103)LdB = 114dB


Work Through It

24

Tx RxA B

-2.22 dB

10 mW 1 dB

-1.4 dB

LdB = 32.44 + 20log(5) + 20log(2.4 � 103)LdB = 114dB

-114 dB


Work Through It

24

Tx RxA B

-2.22 dB

10 mW 1 dB

-1.4 dB

LdB = 32.44 + 20log(5) + 20log(2.4 � 103)LdB = 114dB

-114 dB

Tx = 10mW = 10log(10/1)


Work Through It

24

Tx RxA B

-2.22 dB

10 mW 1 dB

-1.4 dB

LdB = 32.44 + 20log(5) + 20log(2.4 � 103)LdB = 114dB

-114 dB

Tx = 10dBmTx = 10mW = 10log(10/1)


Work Through It

24

Tx RxA B

-2.22 dB

1 dB

-1.4 dB

LdB = 32.44 + 20log(5) + 20log(2.4 � 103)LdB = 114dB

-114 dB10 dBm

Tx = 10dBmTx = 10mW = 10log(10/1)


Work Through It

24

Tx RxA B

-2.22 dB

1 dB

-1.4 dB

LdB = 32.44 + 20log(5) + 20log(2.4 � 103)LdB = 114dB

-114 dB10 dBm

Tx = 10dBmTx = 10mW = 10log(10/1)

PB = �2.2dB + 10dBm� 114dBm + 1dBi� 1.4dB


Work Through It

24

Tx RxA B

-2.22 dB

1 dB

-1.4 dB

LdB = 32.44 + 20log(5) + 20log(2.4 � 103)LdB = 114dB

-114 dB10 dBm

Tx = 10dBmTx = 10mW = 10log(10/1)


PB = �106.6dBm


Work Through It

24

Tx RxA B

-2.22 dB

1 dB

-1.4 dB

LdB = 32.44 + 20log(5) + 20log(2.4 � 103)LdB = 114dB

-114 dB10 dBm

Tx = 10dBmTx = 10mW = 10log(10/1)


PB = �106.6dBm

mW = 10(dBm/10) = 10(�106.6/10)


Work Through It

24

Tx RxA B

-2.22 dB

1 dB

-1.4 dB

LdB = 32.44 + 20log(5) + 20log(2.4 � 103)LdB = 114dB

-114 dB10 dBm

Tx = 10dBmTx = 10mW = 10log(10/1)


PB = �106.6dBm

mW = 10(dBm/10) = 10(�106.6/10)

mW = 2.2 � 10�11mW


Receiver Thresholds

25


Receiver Thresholds• The previous inputs are consistent with real 802.11 devices.

25



• The average 802.11 card has a receiver sensitivity of -80 dBm.

25



• The average 802.11 card has a receiver sensitivity of -80 dBm.• What could we change in the previous system to ensure that the message

was received?

25




was received?• Increase transmission power

25




was received?• Increase transmission power• Increase receiver gain

25




was received?• Increase transmission power• Increase receiver gain• Decrease distance between A and B

25




was received?• Increase transmission power• Increase receiver gain• Decrease distance between A and B

• Let’s focus on that last one...

25


Maximum Range• What is the security implication of “maximum range” in this example?

26

Tx RxA B

-2.22 dB

x km1 dB

-1.4 dB

10 dBm

x = 0.4km



26

Tx RxA B

-2.22 dB

x km1 dB

-1.4 dB

10 dBm

80dBm = �2.2dB + 10dBm� x + 1dBi� 1.4dB

x = 0.4km



26

Tx RxA B

-2.22 dB

x km1 dB

-1.4 dB

10 dBm

80dBm = �2.2dB + 10dBm� x + 1dBi� 1.4dB

x = 72.6dBm

x = 0.4km



26

Tx RxA B

-2.22 dB

x km1 dB

-1.4 dB

10 dBm

80dBm = �2.2dB + 10dBm� x + 1dBi� 1.4dB

x = 72.6dBm

72.6dBm = 32.44 + 20log(x) + 20log(2.4 � 103)x = 0.4km


Deviations from the Ideal• Note that the previous models represent a best-case scenario.

• Unobstructed line of sight between receivers.• Lack of environmental noise

• These factors are significant and often dynamic.• Trees blowing in the wind; weather changing.• The presence of other wireless devices.• User walking through a city.• User covering and uncovering their device’s

antenna.• iPhone 4?

27


Signal to Noise Ratio• Signal to Noise Ratio (SNR) is the ratio expressing the amount by which a

signal exceeds its corresponding noise.• A device may receive a “signal” at a certain power, but if it can not

distinguish the signal from the noise, the received message is useless.• If signal is more powerful than noise, the SNR is positive. If noise

dominates the signal, the SNR is negative.• From Watts:

• In dB:

28

SNR(dB) = 10 � log(Ps

Pn)

SNR(dB) = Ps � Pn


Signal to Noise Ratio• Let’s take a look at the practical implications:

• Assume that natural background noise is approximately -100 dBm.• The Orinoco PCMCIA Silver/Gold card requires an SNR of 16 dB to receive at

11 Mbps.• Assume that the receiver sensitivity is -80 dBm.• -100 + 16 = -84 dBm• -80 dBm > -84 dBm• This means that the minimum receiver

sensitivity is the limiting factor in this system.• Is this good or bad?

29


Physical Layer Degredation

• Multipath fading• Signal can become severely distorted due to reflection (objects larger than wavelength), scattering (objects smaller

than wavelength) and diffraction (shadow fading - signal variation has a log-normal distribution).

• Rayleigh fading (fast fading)• Statistical model of fading over the air. Good for non-line of sight.

• Inter-symbol Interference (ISI)• Subsequent symbols can interfere with each other because of the above.

Dealt with by guard intervals, rake receivers.

30








30

Reflection








30

Reflection

Diffraction








30

Reflection

Diffraction

Scattering


Limits of Wireless Channel• Shannon defined to capacity limits of a communication channel with

additive Gaussian noise:• For a channel without fading, shadowing, and ISI, the maximum possible

data rate on a given channel of bandwidth B is:

• where B is in hertz and S and N are in Watts.• This theoretical limit cannot be achieved in practice.

• Advanced coding techniques help us get close though.

31

R = B � log2(1 +S

N)bps


• What are the layers of the OSI protocol stack?




In the Context of Phones

32

Speech Data Gen







32

Digitization/ Voice Coding

Speech Data Gen







32


Speech Data Gen







32

Channel coding


Speech Data Gen







32

Interleaving

Channel coding


Speech Data Gen







32

Ciphering

Interleaving

Channel coding


Speech Data Gen







32

Modulation

Ciphering

Interleaving

Channel coding


Speech Data Gen







32

Modulation

Ciphering

Interleaving

Channel coding


Speech Data Gen







32

Modulation

Ciphering

Interleaving

Channel coding


Speech Data Gen

Demodulation







32

Modulation

Ciphering

Interleaving

Channel coding


Speech Data Gen

Demodulation

Decrypt







32

Modulation

Ciphering

Interleaving

Channel coding


Speech Data Gen

Demodulation

Decrypt

Deinterleaving







32

Modulation

Ciphering

Interleaving

Channel coding


Speech Data Gen

Demodulation

Decrypt

Deinterleaving

Channel decoding







32

Modulation

Ciphering

Interleaving

Channel coding


Speech Data Gen

Demodulation

Decrypt

Deinterleaving

Channel decoding







32

Modulation

Ciphering

Interleaving

Channel coding


Speech Data Gen

Demodulation

Decrypt

Deinterleaving

Channel decoding


Speech Data Gen


Channel Sublayer : Frequency Assignments• The spectrum picture discussed earlier is actually far more complicated than initially

indicated.• How much of that spectrum you purchased can you actually use at each tower?

• FDMA/TDMA systems:• Split spectrum into sets of frequencies (channels) and reuse frequencies in distant cells.

Careful frequency planning!• Take advantage of frequency attenuation• Dynamic channel allocation

• CDMA systems:• Entire spectrum available to all cells. Full re-use; little planning required.• Capacity depends on interference level (soft capacity)• Coverage is dynamic and depends on instantaneous number of users.

• Careful planning of power required!

33


Frequency Reuse• Each hexagon represents a

cell.• Each color represents a

different subset of the totalavailable carriers.

• Re-use factor of 3 shown here.

34

C = C � � C ��

C � ⇥ C �� = �


MAC Layer• Maximize capacity and minimize delay (circuit vs packet switching)

• FDMA, TDMA, CDMA - for voice, streaming• Aloha, Slotted Aloha - low delay for bursty, short messages (signaling)• CSMA-based protocols - bursty messages, larger number of users• PRMA and reservation-based - bursty, long messages, large number of

users.• Fairness/Quality of Service

• Don’t allow a user to hog bandwidth• Schedule traffic to meet requirements

• Handoffs• Assign new channels

35


Link Layer• Error Recovery

• Yes or no?• Ordered data delivery

36


Network Layer• Responsible for routing

• Circuit-switching: performed at connection establishment time• Datagrams: performed on each packet

• Key problem caused by mobility• Address no longer equals location to route connections/messages• Address is strictly a logical identifier.

• Ad hoc networks• No infrastructure• Self-organizing networks• This area is saturated - no course projects in this space!

37


• Route determination performed once.• Hierarchical geographical addressing

• Area code - Exchange - Terminal

Circuit-Switched Connection Establishment

38

SwitchCPE CPESwitch Switch





38

SwitchCPE CPESwitch SwitchSetup





38


IAMIAM





38


IAMIAM

Setup

Alert





38


IAMIAM

Setup

AlertACM

ACM





38


IAMIAM

Setup

AlertACM

ACMAlert





38


IAMIAM

Setup

AlertACM

ACMAlert

Connect





38


IAMIAM

Setup

AlertACM

ACMAlert

ConnectANM

ANM





38


IAMIAM

Setup

AlertACM

ACMAlert

ConnectANM

ANMConnect


Traditional Datagram Addressing• Each packet router individually (potentially on different paths)• Hierarchical address (network + host)

• Not geographical

39

Host CPE




39

RouterHost CPE




39

RouterHost CPERouter




39

RouterHost CPERouter Router




39





39





39





39





39





39





39



Mobility and the Network Layer• Circuit Switching

• Address no longer points to location• Must find user once, then establish connection• Connections MUST be updated for handoffs

• Datagram• Find user each time?• Smart solutions avoid this...

40


Transport Layer• Current data transport protocol (TCP) designed to work in fixed networks.

• Establish end-to-end connection (in end-points only)• Recover from errors• Flow control (react to congestion)

• Mobility causes problems due to errors or discontinuous transmission.• May misinterpret lost packets• May be affected by delay in locating mobile users

• Wireless Medium• Error rates• Low bandwidth

41


Applications• Wireless Medium

• High error rates• Low bandwidth• Can high quality audio, video be supported?• Can data applications be supported?

• Mobility• Pauses in transmission• Possibility for new applications

• Solution Techniques• Asymmetric design of applications and protocols• Network-based proxies to perform complex functions on behalf of mobile users.• Pre-fetching and caching of data

42


Wrap-Up• Wireless changes the assumptions we make at virtually all layers of the

protocol stack.

• Successful wireless systems require a great deal of planning, robustness, resiliency and redundancy.

• It doesn’t hurt to have lobbyists to help you with some of those spectrum issues, either.

• In combination with our security primer, we are now ready to see how these networks are designed to deal with these issues.

43

Documents

CS 8803 - Cellular and Mobile Network Security: Cellular ... · Pre-History of a Mobile Internet ... • Network tailored for voice - very low bandwidth • Devices previously not