Embed Size (px)
Citation preview
Wireless Telecommunication System
Contdbull AMPS Advanced Mobile Phone System
bull DECT Digital Enhanced Cordless Telephone
bull NMT Nordic Mobile Telephone
bull PDC Personnal Digital Cellular
bull IMT International Mobile Telecommunication
bull GPRS General Packet Radio Service
bull EDGE Enhanced Data Rates for GSM Evolution
bull UMTS Universal Mobile Telecommunication System
bull EVDO Evolution Data Optimized
bull EVDV Evolution Data and Voice
bull UTRA UMTS Terrestrial Radio Access
GSM
bull Groupe Speciale Mobile -1982
bull Global System for Mobile Communication
-gtGoal Roam and Provide Voice Services (But not offering high world wide data rates that 3GUMTS are promising)
890 -915 MHZ for Uplinks
935 -965 MHZ for Downlinks
Performance Characteristics of GSM
DisAdvantagesin GSM
GSM MOBILE SERVICE
BEARER SERVICEbull Transparent transmission of data between
the interfaces to the network (TE-TE)
bull Within MSMT(Mobile Termination-TDMAFDMACoding etc)
bull Increasing Transmission Quality-Forward Error Correction(FEC)
bull PLMN ndashPublic Land Mobile Network
bull ISDN -Integrated Service Digital Network
bull PSDN ndashPublic SwitcedDigital Network
Contd
TELE SERVICES
bull Mobile Telephony
bull Emergency Number
bull Multinumbering
bull SMS ndash160 Characters
bull EMS ndash760 Characters
bull MMS ndash(GIFJPGWBMP)
bull Group 3 Fax
Supplementary Services
bull User Identification
bull Call Redirection or Forwarding
bull Closed User Groups(Multi Party Communication)
GSM Architecture
GSM Architecture
Radio Sub System
Radio SubSystem
Mobile Station
bull SIM (Stores User Specific Data)
bull IMEI
bull PIN
bull IMSI
Network amp Switching SubSystem
NSS
bull Msc ndashHigh Performance Digital ISDN Switches
bull GMscndashGateway Msc-Fixed
bull SS7-Standard SIGNALLING SYSTEM
-gt Connection Setup Release amp HO
HLRbull STATIC
bull IMSI
bull CALL FORWARDINGROAMING
bull Dynamic Information (Location Area (LA))
bull MSRN --Mobile SubsciberRoaming Number
bull MSLeave lt- Update
VLR
bull Dynamic Database
bull Associated with each Msc
bull MS1048773CurrentLocation Area
bull Copies from HLR
Operation Subsystembull OMC -Traffic Moinitoring -Status Report of NW Entities -AccountingampBillingSecurity MGT
bull AUC -User Identity and Data Transmission
bull EIR -DB for IMEIBlack listWhiteListGray List -Synchronization not done
GSM
Radio Interfacebull Um interface-MultiplexingMedia Access
bull FDD ndashSeparate UPampDOWN Links
bull 1-124 Channels each 200 Khz
bull 32 Channels for organization Data
bull Remaining for Customer Use -90 channels
bull 248 Channels ndashadditionaly seperated by GSM TDMA Frame
bull Each 200Khz carrier is divided into frames
Contd
bull Duration of each frame is 4615 ms
bull 8 GSM Time Slots ( 577 μs)
bull Data ndashBURSTS(NORMAL BURST)
bull Each Burst is 5465 μs long amp remaining is 305 μs(GuardSpace)
bull Whole Data is 15625 bit with 577 μs
GSM-TDMAFDMA
GSM FDMATDMA
bull Tail-gt Enhance the Receiver Performance
bull Training Sequence-gt Select Strongest Signal(mpp)
bull Flag S -gt Data Field contains user data or Network Data
Other Burstsbull Frequency Correction Burst
MS to correct local oscillator to avoid interferences in neighbor channel
bull Synchronization Burst
synchronization burst (BTS-MS)
bull Access Burst
Initial Connection Setup (BTS-MS)
bull Dummy Burst
if no data is available for slot
GSM Logical Channels
bull Traffic Channels (TCH)
(i) Full Rate (ii) Half Rate
bull Control Channels
-gtControl Medium Access
-gtAllocation of Traffic Channels
-gtMobility Management
Control Channels bull Broadcast Control Channel (BCCH)
-gtBTS signals all information to MS Synchronization in time(Cell) ndashSCH Frequency Correction (Cell) -FCH
bull Common Control Channel (CCCH)
1048773Connection Setup(MS-BTS) Paging Channel(PCH)-BTS-Pages-MS Random Access Channel(RAC)-MS-BTS
bull Dedicated Control Channel (DCCH)
-gt Bidirectional MS uses Stand-Alone Dedicated Control Channel(SDCCH) with low data rate for signaling if (Ms using TCH not estabilished ndashBTS) TCH amp SDCCH is associated with SLOW ASSOCIATED DEDICATED CONTROL CHANNEL(SACCH)
GSMHIERARCHY OF FRAMES
GSM PROTOCOL LAYERS FOR SIGNALING
GSM PROTOCOL LAYERS FOR SIGNALING
bull Layer ndashI (Radio Specific Function)
Creation of Bursts
Multiplexing of Bursts in TDMA Frame
Synchronization
Detection of Idle Channel
Measurement of Channel Quality
Synchronization
(Correction ndashIndividual path delay)
Contd
bull BTS ndashMS (RTT is short for near and 25ms for 35kms)
bull VAD(Voice Activity Detection) Scheme for voice transmission
bull During Period of Silence COMFORT NOISE to fake a connection
Signaling Between two Entities-Layer 2
bull LAPD
(Link Access Procedure for D-Channel)
-gt Reliable Data Transfer over connections
-gt Flow controlSegmentationampReassembly of Data
-gt ACK for Data Transfer
Layer ndash3Sub Layers
bull RR-Radio Resource Management(RR)
(Part of BTS Supported by BTSM)
SetupMaintenance amp Release of Radio Channels
bull MM-Mobility Management (MM)
RegistrationAuthenticationIdentification
Location UpdatingTMSI(IMSI)
LAYER -3 Contdhellip
bull CALL MANAGEMENT (CM)
(i) Call Control
(ii) SMS ndashSDCCH SACCH
(iii) Supplementary Services
MSC
bull PULSE CODE MODULATION
bull SS7 (BSC-MSC)-gtTransfer all MGT info between MSC(HLRVLRAUCEIROMC)
bull BSSAP An MSC can also control a BSS (via) BSS Application Part
Localization and Callingbull GSM System-Automatic Worldwide
Localization of users
bull Periodic Location Updates
bull ROAMING
Changing VLRrsquos with uninterrupted Availability of all services
One Provider Two providers in a CountryTwo providers in a two different countries
Locating an MSbull Mobile Station International ISDN Number(MSISDN)
CC + National Destination Code + Sub Number(eg+49 179 1234567)
bull IMSI- Internal unique identification of a subscriberbull TMSI- current VLR- valid temporarily- LA- VLR changes
periodicallybull Mobile Station Roaming Number (MSRN)
-Hides the identity and location of the user
-VLR-Generates on request from MSC ndashHLR
-VCC ndashVNDC ndashSN
-MSRN helps HLR to find user for an incoming call
Mobile Terminated
Visitor Location Register (VLR)
bull Suppose your mobile is registered in Mumbai and you are currently in Delhi
1What happens when your friend in Mumbai calls you
Mobile Originated Call
Visitor Location Register (VLR)
bull 2 What happens when you call to a friend
(a)In the home network (Mumbai)
(b)In the visitor network (Delhi)
(c)Both are from Mumbai and currently in Delhi
HANDOVER
bull Should not cause a Cut-off(CALLDROP)
bull Maximum Duration is 60 ms
bull Basic Reason
1 Quality of the Radio Link
2 Load Balancing(MSCBSC to decide ndashTraffic in an Cell ndashHigh)
bull Error Rates and Signal Levels
Four Types of HandOverbull Intra-Cell Handover
--Within a cellbull Inter-Cell Intra-Bsc Handover
--Cell to another cell ndashBscbull Inter-BscIntra-Msc Handover
--Bsc to Bsc -gtMscbull Inter Msc Handover
--Msc to Msc
Types of Handover
Signal Flow-Inter-BSCIntra-MSC
SECURITY
bull Security to AUC and SIM
bull A3 ndashAuthentication
bull A5 ndashEncryption
bull A8 ndashGeneration of Cipher Key
Authentication
bull Any Service ndashGSM
bull Authentication is based on
Individual Authentication Key
IMSI
A3
bull Challenge-Response Method
Generating a Random Number
Authentication
Key Generation and Encryption
GPRS
bull Packet Mode Transfer
bull Small MediumHigh Volumes of Data
bull BroadcastingMulticastingUnicasting
bull Services are charged on Volume of Usages
bull ldquoAlways Onrdquo-No connection to setup prior to data transfer
GPRS-General Packet Radio Service
GPRS Architecture and Interfaces
GPRS ndashProtocol Architecture
GPRSbull GPRS Tunnelling Protocol (GTP)
All data between GSN is transferred between GTP
GTP -gt Reliable TCPUnreilable UDPbull Sub Network Dependent Convergence Protocol (SNDCP)
Used between SGSN and MS ndashto adapt different characterstics
bull LLC ndashHigh Reliability of Packet Transfer bull Base Station Subsystem GPRS Protocol (BSSGP)
-gtConvey Routing amp QOS related information between BSS and SGSN
bull RLC ndashReliable Link bull MAC ndashMapping LLC Frames into GSM Channels
Contdbull AMPS Advanced Mobile Phone System
bull DECT Digital Enhanced Cordless Telephone
bull NMT Nordic Mobile Telephone
bull PDC Personnal Digital Cellular
bull IMT International Mobile Telecommunication
bull GPRS General Packet Radio Service
bull EDGE Enhanced Data Rates for GSM Evolution
bull UMTS Universal Mobile Telecommunication System
bull EVDO Evolution Data Optimized
bull EVDV Evolution Data and Voice
bull UTRA UMTS Terrestrial Radio Access
GSM
bull Groupe Speciale Mobile -1982
bull Global System for Mobile Communication
-gtGoal Roam and Provide Voice Services (But not offering high world wide data rates that 3GUMTS are promising)
890 -915 MHZ for Uplinks
935 -965 MHZ for Downlinks
Performance Characteristics of GSM
DisAdvantagesin GSM
GSM MOBILE SERVICE
BEARER SERVICEbull Transparent transmission of data between
the interfaces to the network (TE-TE)
bull Within MSMT(Mobile Termination-TDMAFDMACoding etc)
bull Increasing Transmission Quality-Forward Error Correction(FEC)
bull PLMN ndashPublic Land Mobile Network
bull ISDN -Integrated Service Digital Network
bull PSDN ndashPublic SwitcedDigital Network
Contd
TELE SERVICES
bull Mobile Telephony
bull Emergency Number
bull Multinumbering
bull SMS ndash160 Characters
bull EMS ndash760 Characters
bull MMS ndash(GIFJPGWBMP)
bull Group 3 Fax
Supplementary Services
bull User Identification
bull Call Redirection or Forwarding
bull Closed User Groups(Multi Party Communication)
GSM Architecture
GSM Architecture
Radio Sub System
Radio SubSystem
Mobile Station
bull SIM (Stores User Specific Data)
bull IMEI
bull PIN
bull IMSI
Network amp Switching SubSystem
NSS
bull Msc ndashHigh Performance Digital ISDN Switches
bull GMscndashGateway Msc-Fixed
bull SS7-Standard SIGNALLING SYSTEM
-gt Connection Setup Release amp HO
HLRbull STATIC
bull IMSI
bull CALL FORWARDINGROAMING
bull Dynamic Information (Location Area (LA))
bull MSRN --Mobile SubsciberRoaming Number
bull MSLeave lt- Update
VLR
bull Dynamic Database
bull Associated with each Msc
bull MS1048773CurrentLocation Area
bull Copies from HLR
Operation Subsystembull OMC -Traffic Moinitoring -Status Report of NW Entities -AccountingampBillingSecurity MGT
bull AUC -User Identity and Data Transmission
bull EIR -DB for IMEIBlack listWhiteListGray List -Synchronization not done
GSM
Radio Interfacebull Um interface-MultiplexingMedia Access
bull FDD ndashSeparate UPampDOWN Links
bull 1-124 Channels each 200 Khz
bull 32 Channels for organization Data
bull Remaining for Customer Use -90 channels
bull 248 Channels ndashadditionaly seperated by GSM TDMA Frame
bull Each 200Khz carrier is divided into frames
Contd
bull Duration of each frame is 4615 ms
bull 8 GSM Time Slots ( 577 μs)
bull Data ndashBURSTS(NORMAL BURST)
bull Each Burst is 5465 μs long amp remaining is 305 μs(GuardSpace)
bull Whole Data is 15625 bit with 577 μs
GSM-TDMAFDMA
GSM FDMATDMA
bull Tail-gt Enhance the Receiver Performance
bull Training Sequence-gt Select Strongest Signal(mpp)
bull Flag S -gt Data Field contains user data or Network Data
Other Burstsbull Frequency Correction Burst
MS to correct local oscillator to avoid interferences in neighbor channel
bull Synchronization Burst
synchronization burst (BTS-MS)
bull Access Burst
Initial Connection Setup (BTS-MS)
bull Dummy Burst
if no data is available for slot
GSM Logical Channels
bull Traffic Channels (TCH)
(i) Full Rate (ii) Half Rate
bull Control Channels
-gtControl Medium Access
-gtAllocation of Traffic Channels
-gtMobility Management
Control Channels bull Broadcast Control Channel (BCCH)
-gtBTS signals all information to MS Synchronization in time(Cell) ndashSCH Frequency Correction (Cell) -FCH
bull Common Control Channel (CCCH)
1048773Connection Setup(MS-BTS) Paging Channel(PCH)-BTS-Pages-MS Random Access Channel(RAC)-MS-BTS
bull Dedicated Control Channel (DCCH)
-gt Bidirectional MS uses Stand-Alone Dedicated Control Channel(SDCCH) with low data rate for signaling if (Ms using TCH not estabilished ndashBTS) TCH amp SDCCH is associated with SLOW ASSOCIATED DEDICATED CONTROL CHANNEL(SACCH)
GSMHIERARCHY OF FRAMES
GSM PROTOCOL LAYERS FOR SIGNALING
GSM PROTOCOL LAYERS FOR SIGNALING
bull Layer ndashI (Radio Specific Function)
Creation of Bursts
Multiplexing of Bursts in TDMA Frame
Synchronization
Detection of Idle Channel
Measurement of Channel Quality
Synchronization
(Correction ndashIndividual path delay)
Contd
bull BTS ndashMS (RTT is short for near and 25ms for 35kms)
bull VAD(Voice Activity Detection) Scheme for voice transmission
bull During Period of Silence COMFORT NOISE to fake a connection
Signaling Between two Entities-Layer 2
bull LAPD
(Link Access Procedure for D-Channel)
-gt Reliable Data Transfer over connections
-gt Flow controlSegmentationampReassembly of Data
-gt ACK for Data Transfer
Layer ndash3Sub Layers
bull RR-Radio Resource Management(RR)
(Part of BTS Supported by BTSM)
SetupMaintenance amp Release of Radio Channels
bull MM-Mobility Management (MM)
RegistrationAuthenticationIdentification
Location UpdatingTMSI(IMSI)
LAYER -3 Contdhellip
bull CALL MANAGEMENT (CM)
(i) Call Control
(ii) SMS ndashSDCCH SACCH
(iii) Supplementary Services
MSC
bull PULSE CODE MODULATION
bull SS7 (BSC-MSC)-gtTransfer all MGT info between MSC(HLRVLRAUCEIROMC)
bull BSSAP An MSC can also control a BSS (via) BSS Application Part
Localization and Callingbull GSM System-Automatic Worldwide
Localization of users
bull Periodic Location Updates
bull ROAMING
Changing VLRrsquos with uninterrupted Availability of all services
One Provider Two providers in a CountryTwo providers in a two different countries
Locating an MSbull Mobile Station International ISDN Number(MSISDN)
CC + National Destination Code + Sub Number(eg+49 179 1234567)
bull IMSI- Internal unique identification of a subscriberbull TMSI- current VLR- valid temporarily- LA- VLR changes
periodicallybull Mobile Station Roaming Number (MSRN)
-Hides the identity and location of the user
-VLR-Generates on request from MSC ndashHLR
-VCC ndashVNDC ndashSN
-MSRN helps HLR to find user for an incoming call
Mobile Terminated
Visitor Location Register (VLR)
bull Suppose your mobile is registered in Mumbai and you are currently in Delhi
1What happens when your friend in Mumbai calls you
Mobile Originated Call
Visitor Location Register (VLR)
bull 2 What happens when you call to a friend
(a)In the home network (Mumbai)
(b)In the visitor network (Delhi)
(c)Both are from Mumbai and currently in Delhi
HANDOVER
bull Should not cause a Cut-off(CALLDROP)
bull Maximum Duration is 60 ms
bull Basic Reason
1 Quality of the Radio Link
2 Load Balancing(MSCBSC to decide ndashTraffic in an Cell ndashHigh)
bull Error Rates and Signal Levels
Four Types of HandOverbull Intra-Cell Handover
--Within a cellbull Inter-Cell Intra-Bsc Handover
--Cell to another cell ndashBscbull Inter-BscIntra-Msc Handover
--Bsc to Bsc -gtMscbull Inter Msc Handover
--Msc to Msc
Types of Handover
Signal Flow-Inter-BSCIntra-MSC
SECURITY
bull Security to AUC and SIM
bull A3 ndashAuthentication
bull A5 ndashEncryption
bull A8 ndashGeneration of Cipher Key
Authentication
bull Any Service ndashGSM
bull Authentication is based on
Individual Authentication Key
IMSI
A3
bull Challenge-Response Method
Generating a Random Number
Authentication
Key Generation and Encryption
GPRS
bull Packet Mode Transfer
bull Small MediumHigh Volumes of Data
bull BroadcastingMulticastingUnicasting
bull Services are charged on Volume of Usages
bull ldquoAlways Onrdquo-No connection to setup prior to data transfer
GPRS-General Packet Radio Service
GPRS Architecture and Interfaces
GPRS ndashProtocol Architecture
GPRSbull GPRS Tunnelling Protocol (GTP)
All data between GSN is transferred between GTP
GTP -gt Reliable TCPUnreilable UDPbull Sub Network Dependent Convergence Protocol (SNDCP)
Used between SGSN and MS ndashto adapt different characterstics
bull LLC ndashHigh Reliability of Packet Transfer bull Base Station Subsystem GPRS Protocol (BSSGP)
-gtConvey Routing amp QOS related information between BSS and SGSN
bull RLC ndashReliable Link bull MAC ndashMapping LLC Frames into GSM Channels
GSM
bull Groupe Speciale Mobile -1982
bull Global System for Mobile Communication
-gtGoal Roam and Provide Voice Services (But not offering high world wide data rates that 3GUMTS are promising)
890 -915 MHZ for Uplinks
935 -965 MHZ for Downlinks
Performance Characteristics of GSM
DisAdvantagesin GSM
GSM MOBILE SERVICE
BEARER SERVICEbull Transparent transmission of data between
the interfaces to the network (TE-TE)
bull Within MSMT(Mobile Termination-TDMAFDMACoding etc)
bull Increasing Transmission Quality-Forward Error Correction(FEC)
bull PLMN ndashPublic Land Mobile Network
bull ISDN -Integrated Service Digital Network
bull PSDN ndashPublic SwitcedDigital Network
Contd
TELE SERVICES
bull Mobile Telephony
bull Emergency Number
bull Multinumbering
bull SMS ndash160 Characters
bull EMS ndash760 Characters
bull MMS ndash(GIFJPGWBMP)
bull Group 3 Fax
Supplementary Services
bull User Identification
bull Call Redirection or Forwarding
bull Closed User Groups(Multi Party Communication)
GSM Architecture
GSM Architecture
Radio Sub System
Radio SubSystem
Mobile Station
bull SIM (Stores User Specific Data)
bull IMEI
bull PIN
bull IMSI
Network amp Switching SubSystem
NSS
bull Msc ndashHigh Performance Digital ISDN Switches
bull GMscndashGateway Msc-Fixed
bull SS7-Standard SIGNALLING SYSTEM
-gt Connection Setup Release amp HO
HLRbull STATIC
bull IMSI
bull CALL FORWARDINGROAMING
bull Dynamic Information (Location Area (LA))
bull MSRN --Mobile SubsciberRoaming Number
bull MSLeave lt- Update
VLR
bull Dynamic Database
bull Associated with each Msc
bull MS1048773CurrentLocation Area
bull Copies from HLR
Operation Subsystembull OMC -Traffic Moinitoring -Status Report of NW Entities -AccountingampBillingSecurity MGT
bull AUC -User Identity and Data Transmission
bull EIR -DB for IMEIBlack listWhiteListGray List -Synchronization not done
GSM
Radio Interfacebull Um interface-MultiplexingMedia Access
bull FDD ndashSeparate UPampDOWN Links
bull 1-124 Channels each 200 Khz
bull 32 Channels for organization Data
bull Remaining for Customer Use -90 channels
bull 248 Channels ndashadditionaly seperated by GSM TDMA Frame
bull Each 200Khz carrier is divided into frames
Contd
bull Duration of each frame is 4615 ms
bull 8 GSM Time Slots ( 577 μs)
bull Data ndashBURSTS(NORMAL BURST)
bull Each Burst is 5465 μs long amp remaining is 305 μs(GuardSpace)
bull Whole Data is 15625 bit with 577 μs
GSM-TDMAFDMA
GSM FDMATDMA
bull Tail-gt Enhance the Receiver Performance
bull Training Sequence-gt Select Strongest Signal(mpp)
bull Flag S -gt Data Field contains user data or Network Data
Other Burstsbull Frequency Correction Burst
MS to correct local oscillator to avoid interferences in neighbor channel
bull Synchronization Burst
synchronization burst (BTS-MS)
bull Access Burst
Initial Connection Setup (BTS-MS)
bull Dummy Burst
if no data is available for slot
GSM Logical Channels
bull Traffic Channels (TCH)
(i) Full Rate (ii) Half Rate
bull Control Channels
-gtControl Medium Access
-gtAllocation of Traffic Channels
-gtMobility Management
Control Channels bull Broadcast Control Channel (BCCH)
-gtBTS signals all information to MS Synchronization in time(Cell) ndashSCH Frequency Correction (Cell) -FCH
bull Common Control Channel (CCCH)
1048773Connection Setup(MS-BTS) Paging Channel(PCH)-BTS-Pages-MS Random Access Channel(RAC)-MS-BTS
bull Dedicated Control Channel (DCCH)
-gt Bidirectional MS uses Stand-Alone Dedicated Control Channel(SDCCH) with low data rate for signaling if (Ms using TCH not estabilished ndashBTS) TCH amp SDCCH is associated with SLOW ASSOCIATED DEDICATED CONTROL CHANNEL(SACCH)
GSMHIERARCHY OF FRAMES
GSM PROTOCOL LAYERS FOR SIGNALING
GSM PROTOCOL LAYERS FOR SIGNALING
bull Layer ndashI (Radio Specific Function)
Creation of Bursts
Multiplexing of Bursts in TDMA Frame
Synchronization
Detection of Idle Channel
Measurement of Channel Quality
Synchronization
(Correction ndashIndividual path delay)
Contd
bull BTS ndashMS (RTT is short for near and 25ms for 35kms)
bull VAD(Voice Activity Detection) Scheme for voice transmission
bull During Period of Silence COMFORT NOISE to fake a connection
Signaling Between two Entities-Layer 2
bull LAPD
(Link Access Procedure for D-Channel)
-gt Reliable Data Transfer over connections
-gt Flow controlSegmentationampReassembly of Data
-gt ACK for Data Transfer
Layer ndash3Sub Layers
bull RR-Radio Resource Management(RR)
(Part of BTS Supported by BTSM)
SetupMaintenance amp Release of Radio Channels
bull MM-Mobility Management (MM)
RegistrationAuthenticationIdentification
Location UpdatingTMSI(IMSI)
LAYER -3 Contdhellip
bull CALL MANAGEMENT (CM)
(i) Call Control
(ii) SMS ndashSDCCH SACCH
(iii) Supplementary Services
MSC
bull PULSE CODE MODULATION
bull SS7 (BSC-MSC)-gtTransfer all MGT info between MSC(HLRVLRAUCEIROMC)
bull BSSAP An MSC can also control a BSS (via) BSS Application Part
Localization and Callingbull GSM System-Automatic Worldwide
Localization of users
bull Periodic Location Updates
bull ROAMING
Changing VLRrsquos with uninterrupted Availability of all services
One Provider Two providers in a CountryTwo providers in a two different countries
Locating an MSbull Mobile Station International ISDN Number(MSISDN)
CC + National Destination Code + Sub Number(eg+49 179 1234567)
bull IMSI- Internal unique identification of a subscriberbull TMSI- current VLR- valid temporarily- LA- VLR changes
periodicallybull Mobile Station Roaming Number (MSRN)
-Hides the identity and location of the user
-VLR-Generates on request from MSC ndashHLR
-VCC ndashVNDC ndashSN
-MSRN helps HLR to find user for an incoming call
Mobile Terminated
Visitor Location Register (VLR)
bull Suppose your mobile is registered in Mumbai and you are currently in Delhi
1What happens when your friend in Mumbai calls you
Mobile Originated Call
Visitor Location Register (VLR)
bull 2 What happens when you call to a friend
(a)In the home network (Mumbai)
(b)In the visitor network (Delhi)
(c)Both are from Mumbai and currently in Delhi
HANDOVER
bull Should not cause a Cut-off(CALLDROP)
bull Maximum Duration is 60 ms
bull Basic Reason
1 Quality of the Radio Link
2 Load Balancing(MSCBSC to decide ndashTraffic in an Cell ndashHigh)
bull Error Rates and Signal Levels
Four Types of HandOverbull Intra-Cell Handover
--Within a cellbull Inter-Cell Intra-Bsc Handover
--Cell to another cell ndashBscbull Inter-BscIntra-Msc Handover
--Bsc to Bsc -gtMscbull Inter Msc Handover
--Msc to Msc
Types of Handover
Signal Flow-Inter-BSCIntra-MSC
SECURITY
bull Security to AUC and SIM
bull A3 ndashAuthentication
bull A5 ndashEncryption
bull A8 ndashGeneration of Cipher Key
Authentication
bull Any Service ndashGSM
bull Authentication is based on
Individual Authentication Key
IMSI
A3
bull Challenge-Response Method
Generating a Random Number
Authentication
Key Generation and Encryption
GPRS
bull Packet Mode Transfer
bull Small MediumHigh Volumes of Data
bull BroadcastingMulticastingUnicasting
bull Services are charged on Volume of Usages
bull ldquoAlways Onrdquo-No connection to setup prior to data transfer
GPRS-General Packet Radio Service
GPRS Architecture and Interfaces
GPRS ndashProtocol Architecture
GPRSbull GPRS Tunnelling Protocol (GTP)
All data between GSN is transferred between GTP
GTP -gt Reliable TCPUnreilable UDPbull Sub Network Dependent Convergence Protocol (SNDCP)
Used between SGSN and MS ndashto adapt different characterstics
bull LLC ndashHigh Reliability of Packet Transfer bull Base Station Subsystem GPRS Protocol (BSSGP)
-gtConvey Routing amp QOS related information between BSS and SGSN
bull RLC ndashReliable Link bull MAC ndashMapping LLC Frames into GSM Channels
Performance Characteristics of GSM
DisAdvantagesin GSM
GSM MOBILE SERVICE
BEARER SERVICEbull Transparent transmission of data between
the interfaces to the network (TE-TE)
bull Within MSMT(Mobile Termination-TDMAFDMACoding etc)
bull Increasing Transmission Quality-Forward Error Correction(FEC)
bull PLMN ndashPublic Land Mobile Network
bull ISDN -Integrated Service Digital Network
bull PSDN ndashPublic SwitcedDigital Network
Contd
TELE SERVICES
bull Mobile Telephony
bull Emergency Number
bull Multinumbering
bull SMS ndash160 Characters
bull EMS ndash760 Characters
bull MMS ndash(GIFJPGWBMP)
bull Group 3 Fax
Supplementary Services
bull User Identification
bull Call Redirection or Forwarding
bull Closed User Groups(Multi Party Communication)
GSM Architecture
GSM Architecture
Radio Sub System
Radio SubSystem
Mobile Station
bull SIM (Stores User Specific Data)
bull IMEI
bull PIN
bull IMSI
Network amp Switching SubSystem
NSS
bull Msc ndashHigh Performance Digital ISDN Switches
bull GMscndashGateway Msc-Fixed
bull SS7-Standard SIGNALLING SYSTEM
-gt Connection Setup Release amp HO
HLRbull STATIC
bull IMSI
bull CALL FORWARDINGROAMING
bull Dynamic Information (Location Area (LA))
bull MSRN --Mobile SubsciberRoaming Number
bull MSLeave lt- Update
VLR
bull Dynamic Database
bull Associated with each Msc
bull MS1048773CurrentLocation Area
bull Copies from HLR
Operation Subsystembull OMC -Traffic Moinitoring -Status Report of NW Entities -AccountingampBillingSecurity MGT
bull AUC -User Identity and Data Transmission
bull EIR -DB for IMEIBlack listWhiteListGray List -Synchronization not done
GSM
Radio Interfacebull Um interface-MultiplexingMedia Access
bull FDD ndashSeparate UPampDOWN Links
bull 1-124 Channels each 200 Khz
bull 32 Channels for organization Data
bull Remaining for Customer Use -90 channels
bull 248 Channels ndashadditionaly seperated by GSM TDMA Frame
bull Each 200Khz carrier is divided into frames
Contd
bull Duration of each frame is 4615 ms
bull 8 GSM Time Slots ( 577 μs)
bull Data ndashBURSTS(NORMAL BURST)
bull Each Burst is 5465 μs long amp remaining is 305 μs(GuardSpace)
bull Whole Data is 15625 bit with 577 μs
GSM-TDMAFDMA
GSM FDMATDMA
bull Tail-gt Enhance the Receiver Performance
bull Training Sequence-gt Select Strongest Signal(mpp)
bull Flag S -gt Data Field contains user data or Network Data
Other Burstsbull Frequency Correction Burst
MS to correct local oscillator to avoid interferences in neighbor channel
bull Synchronization Burst
synchronization burst (BTS-MS)
bull Access Burst
Initial Connection Setup (BTS-MS)
bull Dummy Burst
if no data is available for slot
GSM Logical Channels
bull Traffic Channels (TCH)
(i) Full Rate (ii) Half Rate
bull Control Channels
-gtControl Medium Access
-gtAllocation of Traffic Channels
-gtMobility Management
Control Channels bull Broadcast Control Channel (BCCH)
-gtBTS signals all information to MS Synchronization in time(Cell) ndashSCH Frequency Correction (Cell) -FCH
bull Common Control Channel (CCCH)
1048773Connection Setup(MS-BTS) Paging Channel(PCH)-BTS-Pages-MS Random Access Channel(RAC)-MS-BTS
bull Dedicated Control Channel (DCCH)
-gt Bidirectional MS uses Stand-Alone Dedicated Control Channel(SDCCH) with low data rate for signaling if (Ms using TCH not estabilished ndashBTS) TCH amp SDCCH is associated with SLOW ASSOCIATED DEDICATED CONTROL CHANNEL(SACCH)
GSMHIERARCHY OF FRAMES
GSM PROTOCOL LAYERS FOR SIGNALING
GSM PROTOCOL LAYERS FOR SIGNALING
bull Layer ndashI (Radio Specific Function)
Creation of Bursts
Multiplexing of Bursts in TDMA Frame
Synchronization
Detection of Idle Channel
Measurement of Channel Quality
Synchronization
(Correction ndashIndividual path delay)
Contd
bull BTS ndashMS (RTT is short for near and 25ms for 35kms)
bull VAD(Voice Activity Detection) Scheme for voice transmission
bull During Period of Silence COMFORT NOISE to fake a connection
Signaling Between two Entities-Layer 2
bull LAPD
(Link Access Procedure for D-Channel)
-gt Reliable Data Transfer over connections
-gt Flow controlSegmentationampReassembly of Data
-gt ACK for Data Transfer
Layer ndash3Sub Layers
bull RR-Radio Resource Management(RR)
(Part of BTS Supported by BTSM)
SetupMaintenance amp Release of Radio Channels
bull MM-Mobility Management (MM)
RegistrationAuthenticationIdentification
Location UpdatingTMSI(IMSI)
LAYER -3 Contdhellip
bull CALL MANAGEMENT (CM)
(i) Call Control
(ii) SMS ndashSDCCH SACCH
(iii) Supplementary Services
MSC
bull PULSE CODE MODULATION
bull SS7 (BSC-MSC)-gtTransfer all MGT info between MSC(HLRVLRAUCEIROMC)
bull BSSAP An MSC can also control a BSS (via) BSS Application Part
Localization and Callingbull GSM System-Automatic Worldwide
Localization of users
bull Periodic Location Updates
bull ROAMING
Changing VLRrsquos with uninterrupted Availability of all services
One Provider Two providers in a CountryTwo providers in a two different countries
Locating an MSbull Mobile Station International ISDN Number(MSISDN)
CC + National Destination Code + Sub Number(eg+49 179 1234567)
bull IMSI- Internal unique identification of a subscriberbull TMSI- current VLR- valid temporarily- LA- VLR changes
periodicallybull Mobile Station Roaming Number (MSRN)
-Hides the identity and location of the user
-VLR-Generates on request from MSC ndashHLR
-VCC ndashVNDC ndashSN
-MSRN helps HLR to find user for an incoming call
Mobile Terminated
Visitor Location Register (VLR)
bull Suppose your mobile is registered in Mumbai and you are currently in Delhi
1What happens when your friend in Mumbai calls you
Mobile Originated Call
Visitor Location Register (VLR)
bull 2 What happens when you call to a friend
(a)In the home network (Mumbai)
(b)In the visitor network (Delhi)
(c)Both are from Mumbai and currently in Delhi
HANDOVER
bull Should not cause a Cut-off(CALLDROP)
bull Maximum Duration is 60 ms
bull Basic Reason
1 Quality of the Radio Link
2 Load Balancing(MSCBSC to decide ndashTraffic in an Cell ndashHigh)
bull Error Rates and Signal Levels
Four Types of HandOverbull Intra-Cell Handover
--Within a cellbull Inter-Cell Intra-Bsc Handover
--Cell to another cell ndashBscbull Inter-BscIntra-Msc Handover
--Bsc to Bsc -gtMscbull Inter Msc Handover
--Msc to Msc
Types of Handover
Signal Flow-Inter-BSCIntra-MSC
SECURITY
bull Security to AUC and SIM
bull A3 ndashAuthentication
bull A5 ndashEncryption
bull A8 ndashGeneration of Cipher Key
Authentication
bull Any Service ndashGSM
bull Authentication is based on
Individual Authentication Key
IMSI
A3
bull Challenge-Response Method
Generating a Random Number
Authentication
Key Generation and Encryption
GPRS
bull Packet Mode Transfer
bull Small MediumHigh Volumes of Data
bull BroadcastingMulticastingUnicasting
bull Services are charged on Volume of Usages
bull ldquoAlways Onrdquo-No connection to setup prior to data transfer
GPRS-General Packet Radio Service
GPRS Architecture and Interfaces
GPRS ndashProtocol Architecture
GPRSbull GPRS Tunnelling Protocol (GTP)
All data between GSN is transferred between GTP
GTP -gt Reliable TCPUnreilable UDPbull Sub Network Dependent Convergence Protocol (SNDCP)
Used between SGSN and MS ndashto adapt different characterstics
bull LLC ndashHigh Reliability of Packet Transfer bull Base Station Subsystem GPRS Protocol (BSSGP)
-gtConvey Routing amp QOS related information between BSS and SGSN
bull RLC ndashReliable Link bull MAC ndashMapping LLC Frames into GSM Channels
DisAdvantagesin GSM
GSM MOBILE SERVICE
BEARER SERVICEbull Transparent transmission of data between
the interfaces to the network (TE-TE)
bull Within MSMT(Mobile Termination-TDMAFDMACoding etc)
bull Increasing Transmission Quality-Forward Error Correction(FEC)
bull PLMN ndashPublic Land Mobile Network
bull ISDN -Integrated Service Digital Network
bull PSDN ndashPublic SwitcedDigital Network
Contd
TELE SERVICES
bull Mobile Telephony
bull Emergency Number
bull Multinumbering
bull SMS ndash160 Characters
bull EMS ndash760 Characters
bull MMS ndash(GIFJPGWBMP)
bull Group 3 Fax
Supplementary Services
bull User Identification
bull Call Redirection or Forwarding
bull Closed User Groups(Multi Party Communication)
GSM Architecture
GSM Architecture
Radio Sub System
Radio SubSystem
Mobile Station
bull SIM (Stores User Specific Data)
bull IMEI
bull PIN
bull IMSI
Network amp Switching SubSystem
NSS
bull Msc ndashHigh Performance Digital ISDN Switches
bull GMscndashGateway Msc-Fixed
bull SS7-Standard SIGNALLING SYSTEM
-gt Connection Setup Release amp HO
HLRbull STATIC
bull IMSI
bull CALL FORWARDINGROAMING
bull Dynamic Information (Location Area (LA))
bull MSRN --Mobile SubsciberRoaming Number
bull MSLeave lt- Update
VLR
bull Dynamic Database
bull Associated with each Msc
bull MS1048773CurrentLocation Area
bull Copies from HLR
Operation Subsystembull OMC -Traffic Moinitoring -Status Report of NW Entities -AccountingampBillingSecurity MGT
bull AUC -User Identity and Data Transmission
bull EIR -DB for IMEIBlack listWhiteListGray List -Synchronization not done
GSM
Radio Interfacebull Um interface-MultiplexingMedia Access
bull FDD ndashSeparate UPampDOWN Links
bull 1-124 Channels each 200 Khz
bull 32 Channels for organization Data
bull Remaining for Customer Use -90 channels
bull 248 Channels ndashadditionaly seperated by GSM TDMA Frame
bull Each 200Khz carrier is divided into frames
Contd
bull Duration of each frame is 4615 ms
bull 8 GSM Time Slots ( 577 μs)
bull Data ndashBURSTS(NORMAL BURST)
bull Each Burst is 5465 μs long amp remaining is 305 μs(GuardSpace)
bull Whole Data is 15625 bit with 577 μs
GSM-TDMAFDMA
GSM FDMATDMA
bull Tail-gt Enhance the Receiver Performance
bull Training Sequence-gt Select Strongest Signal(mpp)
bull Flag S -gt Data Field contains user data or Network Data
Other Burstsbull Frequency Correction Burst
MS to correct local oscillator to avoid interferences in neighbor channel
bull Synchronization Burst
synchronization burst (BTS-MS)
bull Access Burst
Initial Connection Setup (BTS-MS)
bull Dummy Burst
if no data is available for slot
GSM Logical Channels
bull Traffic Channels (TCH)
(i) Full Rate (ii) Half Rate
bull Control Channels
-gtControl Medium Access
-gtAllocation of Traffic Channels
-gtMobility Management
Control Channels bull Broadcast Control Channel (BCCH)
-gtBTS signals all information to MS Synchronization in time(Cell) ndashSCH Frequency Correction (Cell) -FCH
bull Common Control Channel (CCCH)
1048773Connection Setup(MS-BTS) Paging Channel(PCH)-BTS-Pages-MS Random Access Channel(RAC)-MS-BTS
bull Dedicated Control Channel (DCCH)
-gt Bidirectional MS uses Stand-Alone Dedicated Control Channel(SDCCH) with low data rate for signaling if (Ms using TCH not estabilished ndashBTS) TCH amp SDCCH is associated with SLOW ASSOCIATED DEDICATED CONTROL CHANNEL(SACCH)
GSMHIERARCHY OF FRAMES
GSM PROTOCOL LAYERS FOR SIGNALING
GSM PROTOCOL LAYERS FOR SIGNALING
bull Layer ndashI (Radio Specific Function)
Creation of Bursts
Multiplexing of Bursts in TDMA Frame
Synchronization
Detection of Idle Channel
Measurement of Channel Quality
Synchronization
(Correction ndashIndividual path delay)
Contd
bull BTS ndashMS (RTT is short for near and 25ms for 35kms)
bull VAD(Voice Activity Detection) Scheme for voice transmission
bull During Period of Silence COMFORT NOISE to fake a connection
Signaling Between two Entities-Layer 2
bull LAPD
(Link Access Procedure for D-Channel)
-gt Reliable Data Transfer over connections
-gt Flow controlSegmentationampReassembly of Data
-gt ACK for Data Transfer
Layer ndash3Sub Layers
bull RR-Radio Resource Management(RR)
(Part of BTS Supported by BTSM)
SetupMaintenance amp Release of Radio Channels
bull MM-Mobility Management (MM)
RegistrationAuthenticationIdentification
Location UpdatingTMSI(IMSI)
LAYER -3 Contdhellip
bull CALL MANAGEMENT (CM)
(i) Call Control
(ii) SMS ndashSDCCH SACCH
(iii) Supplementary Services
MSC
bull PULSE CODE MODULATION
bull SS7 (BSC-MSC)-gtTransfer all MGT info between MSC(HLRVLRAUCEIROMC)
bull BSSAP An MSC can also control a BSS (via) BSS Application Part
Localization and Callingbull GSM System-Automatic Worldwide
Localization of users
bull Periodic Location Updates
bull ROAMING
Changing VLRrsquos with uninterrupted Availability of all services
One Provider Two providers in a CountryTwo providers in a two different countries
Locating an MSbull Mobile Station International ISDN Number(MSISDN)
CC + National Destination Code + Sub Number(eg+49 179 1234567)
bull IMSI- Internal unique identification of a subscriberbull TMSI- current VLR- valid temporarily- LA- VLR changes
periodicallybull Mobile Station Roaming Number (MSRN)
-Hides the identity and location of the user
-VLR-Generates on request from MSC ndashHLR
-VCC ndashVNDC ndashSN
-MSRN helps HLR to find user for an incoming call
Mobile Terminated
Visitor Location Register (VLR)
bull Suppose your mobile is registered in Mumbai and you are currently in Delhi
1What happens when your friend in Mumbai calls you
Mobile Originated Call
Visitor Location Register (VLR)
bull 2 What happens when you call to a friend
(a)In the home network (Mumbai)
(b)In the visitor network (Delhi)
(c)Both are from Mumbai and currently in Delhi
HANDOVER
bull Should not cause a Cut-off(CALLDROP)
bull Maximum Duration is 60 ms
bull Basic Reason
1 Quality of the Radio Link
2 Load Balancing(MSCBSC to decide ndashTraffic in an Cell ndashHigh)
bull Error Rates and Signal Levels
Four Types of HandOverbull Intra-Cell Handover
--Within a cellbull Inter-Cell Intra-Bsc Handover
--Cell to another cell ndashBscbull Inter-BscIntra-Msc Handover
--Bsc to Bsc -gtMscbull Inter Msc Handover
--Msc to Msc
Types of Handover
Signal Flow-Inter-BSCIntra-MSC
SECURITY
bull Security to AUC and SIM
bull A3 ndashAuthentication
bull A5 ndashEncryption
bull A8 ndashGeneration of Cipher Key
Authentication
bull Any Service ndashGSM
bull Authentication is based on
Individual Authentication Key
IMSI
A3
bull Challenge-Response Method
Generating a Random Number
Authentication
Key Generation and Encryption
GPRS
bull Packet Mode Transfer
bull Small MediumHigh Volumes of Data
bull BroadcastingMulticastingUnicasting
bull Services are charged on Volume of Usages
bull ldquoAlways Onrdquo-No connection to setup prior to data transfer
GPRS-General Packet Radio Service
GPRS Architecture and Interfaces
GPRS ndashProtocol Architecture
GPRSbull GPRS Tunnelling Protocol (GTP)
All data between GSN is transferred between GTP
GTP -gt Reliable TCPUnreilable UDPbull Sub Network Dependent Convergence Protocol (SNDCP)
Used between SGSN and MS ndashto adapt different characterstics
bull LLC ndashHigh Reliability of Packet Transfer bull Base Station Subsystem GPRS Protocol (BSSGP)
-gtConvey Routing amp QOS related information between BSS and SGSN
bull RLC ndashReliable Link bull MAC ndashMapping LLC Frames into GSM Channels
GSM MOBILE SERVICE
BEARER SERVICEbull Transparent transmission of data between
the interfaces to the network (TE-TE)
bull Within MSMT(Mobile Termination-TDMAFDMACoding etc)
bull Increasing Transmission Quality-Forward Error Correction(FEC)
bull PLMN ndashPublic Land Mobile Network
bull ISDN -Integrated Service Digital Network
bull PSDN ndashPublic SwitcedDigital Network
Contd
TELE SERVICES
bull Mobile Telephony
bull Emergency Number
bull Multinumbering
bull SMS ndash160 Characters
bull EMS ndash760 Characters
bull MMS ndash(GIFJPGWBMP)
bull Group 3 Fax
Supplementary Services
bull User Identification
bull Call Redirection or Forwarding
bull Closed User Groups(Multi Party Communication)
GSM Architecture
GSM Architecture
Radio Sub System
Radio SubSystem
Mobile Station
bull SIM (Stores User Specific Data)
bull IMEI
bull PIN
bull IMSI
Network amp Switching SubSystem
NSS
bull Msc ndashHigh Performance Digital ISDN Switches
bull GMscndashGateway Msc-Fixed
bull SS7-Standard SIGNALLING SYSTEM
-gt Connection Setup Release amp HO
HLRbull STATIC
bull IMSI
bull CALL FORWARDINGROAMING
bull Dynamic Information (Location Area (LA))
bull MSRN --Mobile SubsciberRoaming Number
bull MSLeave lt- Update
VLR
bull Dynamic Database
bull Associated with each Msc
bull MS1048773CurrentLocation Area
bull Copies from HLR
Operation Subsystembull OMC -Traffic Moinitoring -Status Report of NW Entities -AccountingampBillingSecurity MGT
bull AUC -User Identity and Data Transmission
bull EIR -DB for IMEIBlack listWhiteListGray List -Synchronization not done
GSM
Radio Interfacebull Um interface-MultiplexingMedia Access
bull FDD ndashSeparate UPampDOWN Links
bull 1-124 Channels each 200 Khz
bull 32 Channels for organization Data
bull Remaining for Customer Use -90 channels
bull 248 Channels ndashadditionaly seperated by GSM TDMA Frame
bull Each 200Khz carrier is divided into frames
Contd
bull Duration of each frame is 4615 ms
bull 8 GSM Time Slots ( 577 μs)
bull Data ndashBURSTS(NORMAL BURST)
bull Each Burst is 5465 μs long amp remaining is 305 μs(GuardSpace)
bull Whole Data is 15625 bit with 577 μs
GSM-TDMAFDMA
GSM FDMATDMA
bull Tail-gt Enhance the Receiver Performance
bull Training Sequence-gt Select Strongest Signal(mpp)
bull Flag S -gt Data Field contains user data or Network Data
Other Burstsbull Frequency Correction Burst
MS to correct local oscillator to avoid interferences in neighbor channel
bull Synchronization Burst
synchronization burst (BTS-MS)
bull Access Burst
Initial Connection Setup (BTS-MS)
bull Dummy Burst
if no data is available for slot
GSM Logical Channels
bull Traffic Channels (TCH)
(i) Full Rate (ii) Half Rate
bull Control Channels
-gtControl Medium Access
-gtAllocation of Traffic Channels
-gtMobility Management
Control Channels bull Broadcast Control Channel (BCCH)
-gtBTS signals all information to MS Synchronization in time(Cell) ndashSCH Frequency Correction (Cell) -FCH
bull Common Control Channel (CCCH)
1048773Connection Setup(MS-BTS) Paging Channel(PCH)-BTS-Pages-MS Random Access Channel(RAC)-MS-BTS
bull Dedicated Control Channel (DCCH)
-gt Bidirectional MS uses Stand-Alone Dedicated Control Channel(SDCCH) with low data rate for signaling if (Ms using TCH not estabilished ndashBTS) TCH amp SDCCH is associated with SLOW ASSOCIATED DEDICATED CONTROL CHANNEL(SACCH)
GSMHIERARCHY OF FRAMES
GSM PROTOCOL LAYERS FOR SIGNALING
GSM PROTOCOL LAYERS FOR SIGNALING
bull Layer ndashI (Radio Specific Function)
Creation of Bursts
Multiplexing of Bursts in TDMA Frame
Synchronization
Detection of Idle Channel
Measurement of Channel Quality
Synchronization
(Correction ndashIndividual path delay)
Contd
bull BTS ndashMS (RTT is short for near and 25ms for 35kms)
bull VAD(Voice Activity Detection) Scheme for voice transmission
bull During Period of Silence COMFORT NOISE to fake a connection
Signaling Between two Entities-Layer 2
bull LAPD
(Link Access Procedure for D-Channel)
-gt Reliable Data Transfer over connections
-gt Flow controlSegmentationampReassembly of Data
-gt ACK for Data Transfer
Layer ndash3Sub Layers
bull RR-Radio Resource Management(RR)
(Part of BTS Supported by BTSM)
SetupMaintenance amp Release of Radio Channels
bull MM-Mobility Management (MM)
RegistrationAuthenticationIdentification
Location UpdatingTMSI(IMSI)
LAYER -3 Contdhellip
bull CALL MANAGEMENT (CM)
(i) Call Control
(ii) SMS ndashSDCCH SACCH
(iii) Supplementary Services
MSC
bull PULSE CODE MODULATION
bull SS7 (BSC-MSC)-gtTransfer all MGT info between MSC(HLRVLRAUCEIROMC)
bull BSSAP An MSC can also control a BSS (via) BSS Application Part
Localization and Callingbull GSM System-Automatic Worldwide
Localization of users
bull Periodic Location Updates
bull ROAMING
Changing VLRrsquos with uninterrupted Availability of all services
One Provider Two providers in a CountryTwo providers in a two different countries
Locating an MSbull Mobile Station International ISDN Number(MSISDN)
CC + National Destination Code + Sub Number(eg+49 179 1234567)
bull IMSI- Internal unique identification of a subscriberbull TMSI- current VLR- valid temporarily- LA- VLR changes
periodicallybull Mobile Station Roaming Number (MSRN)
-Hides the identity and location of the user
-VLR-Generates on request from MSC ndashHLR
-VCC ndashVNDC ndashSN
-MSRN helps HLR to find user for an incoming call
Mobile Terminated
Visitor Location Register (VLR)
bull Suppose your mobile is registered in Mumbai and you are currently in Delhi
1What happens when your friend in Mumbai calls you
Mobile Originated Call
Visitor Location Register (VLR)
bull 2 What happens when you call to a friend
(a)In the home network (Mumbai)
(b)In the visitor network (Delhi)
(c)Both are from Mumbai and currently in Delhi
HANDOVER
bull Should not cause a Cut-off(CALLDROP)
bull Maximum Duration is 60 ms
bull Basic Reason
1 Quality of the Radio Link
2 Load Balancing(MSCBSC to decide ndashTraffic in an Cell ndashHigh)
bull Error Rates and Signal Levels
Four Types of HandOverbull Intra-Cell Handover
--Within a cellbull Inter-Cell Intra-Bsc Handover
--Cell to another cell ndashBscbull Inter-BscIntra-Msc Handover
--Bsc to Bsc -gtMscbull Inter Msc Handover
--Msc to Msc
Types of Handover
Signal Flow-Inter-BSCIntra-MSC
SECURITY
bull Security to AUC and SIM
bull A3 ndashAuthentication
bull A5 ndashEncryption
bull A8 ndashGeneration of Cipher Key
Authentication
bull Any Service ndashGSM
bull Authentication is based on
Individual Authentication Key
IMSI
A3
bull Challenge-Response Method
Generating a Random Number
Authentication
Key Generation and Encryption
GPRS
bull Packet Mode Transfer
bull Small MediumHigh Volumes of Data
bull BroadcastingMulticastingUnicasting
bull Services are charged on Volume of Usages
bull ldquoAlways Onrdquo-No connection to setup prior to data transfer
GPRS-General Packet Radio Service
GPRS Architecture and Interfaces
GPRS ndashProtocol Architecture
GPRSbull GPRS Tunnelling Protocol (GTP)
All data between GSN is transferred between GTP
GTP -gt Reliable TCPUnreilable UDPbull Sub Network Dependent Convergence Protocol (SNDCP)
Used between SGSN and MS ndashto adapt different characterstics
bull LLC ndashHigh Reliability of Packet Transfer bull Base Station Subsystem GPRS Protocol (BSSGP)
-gtConvey Routing amp QOS related information between BSS and SGSN
bull RLC ndashReliable Link bull MAC ndashMapping LLC Frames into GSM Channels
BEARER SERVICEbull Transparent transmission of data between
the interfaces to the network (TE-TE)
bull Within MSMT(Mobile Termination-TDMAFDMACoding etc)
bull Increasing Transmission Quality-Forward Error Correction(FEC)
bull PLMN ndashPublic Land Mobile Network
bull ISDN -Integrated Service Digital Network
bull PSDN ndashPublic SwitcedDigital Network
Contd
TELE SERVICES
bull Mobile Telephony
bull Emergency Number
bull Multinumbering
bull SMS ndash160 Characters
bull EMS ndash760 Characters
bull MMS ndash(GIFJPGWBMP)
bull Group 3 Fax
Supplementary Services
bull User Identification
bull Call Redirection or Forwarding
bull Closed User Groups(Multi Party Communication)
GSM Architecture
GSM Architecture
Radio Sub System
Radio SubSystem
Mobile Station
bull SIM (Stores User Specific Data)
bull IMEI
bull PIN
bull IMSI
Network amp Switching SubSystem
NSS
bull Msc ndashHigh Performance Digital ISDN Switches
bull GMscndashGateway Msc-Fixed
bull SS7-Standard SIGNALLING SYSTEM
-gt Connection Setup Release amp HO
HLRbull STATIC
bull IMSI
bull CALL FORWARDINGROAMING
bull Dynamic Information (Location Area (LA))
bull MSRN --Mobile SubsciberRoaming Number
bull MSLeave lt- Update
VLR
bull Dynamic Database
bull Associated with each Msc
bull MS1048773CurrentLocation Area
bull Copies from HLR
Operation Subsystembull OMC -Traffic Moinitoring -Status Report of NW Entities -AccountingampBillingSecurity MGT
bull AUC -User Identity and Data Transmission
bull EIR -DB for IMEIBlack listWhiteListGray List -Synchronization not done
GSM
Radio Interfacebull Um interface-MultiplexingMedia Access
bull FDD ndashSeparate UPampDOWN Links
bull 1-124 Channels each 200 Khz
bull 32 Channels for organization Data
bull Remaining for Customer Use -90 channels
bull 248 Channels ndashadditionaly seperated by GSM TDMA Frame
bull Each 200Khz carrier is divided into frames
Contd
bull Duration of each frame is 4615 ms
bull 8 GSM Time Slots ( 577 μs)
bull Data ndashBURSTS(NORMAL BURST)
bull Each Burst is 5465 μs long amp remaining is 305 μs(GuardSpace)
bull Whole Data is 15625 bit with 577 μs
GSM-TDMAFDMA
GSM FDMATDMA
bull Tail-gt Enhance the Receiver Performance
bull Training Sequence-gt Select Strongest Signal(mpp)
bull Flag S -gt Data Field contains user data or Network Data
Other Burstsbull Frequency Correction Burst
MS to correct local oscillator to avoid interferences in neighbor channel
bull Synchronization Burst
synchronization burst (BTS-MS)
bull Access Burst
Initial Connection Setup (BTS-MS)
bull Dummy Burst
if no data is available for slot
GSM Logical Channels
bull Traffic Channels (TCH)
(i) Full Rate (ii) Half Rate
bull Control Channels
-gtControl Medium Access
-gtAllocation of Traffic Channels
-gtMobility Management
Control Channels bull Broadcast Control Channel (BCCH)
-gtBTS signals all information to MS Synchronization in time(Cell) ndashSCH Frequency Correction (Cell) -FCH
bull Common Control Channel (CCCH)
1048773Connection Setup(MS-BTS) Paging Channel(PCH)-BTS-Pages-MS Random Access Channel(RAC)-MS-BTS
bull Dedicated Control Channel (DCCH)
-gt Bidirectional MS uses Stand-Alone Dedicated Control Channel(SDCCH) with low data rate for signaling if (Ms using TCH not estabilished ndashBTS) TCH amp SDCCH is associated with SLOW ASSOCIATED DEDICATED CONTROL CHANNEL(SACCH)
GSMHIERARCHY OF FRAMES
GSM PROTOCOL LAYERS FOR SIGNALING
GSM PROTOCOL LAYERS FOR SIGNALING
bull Layer ndashI (Radio Specific Function)
Creation of Bursts
Multiplexing of Bursts in TDMA Frame
Synchronization
Detection of Idle Channel
Measurement of Channel Quality
Synchronization
(Correction ndashIndividual path delay)
Contd
bull BTS ndashMS (RTT is short for near and 25ms for 35kms)
bull VAD(Voice Activity Detection) Scheme for voice transmission
bull During Period of Silence COMFORT NOISE to fake a connection
Signaling Between two Entities-Layer 2
bull LAPD
(Link Access Procedure for D-Channel)
-gt Reliable Data Transfer over connections
-gt Flow controlSegmentationampReassembly of Data
-gt ACK for Data Transfer
Layer ndash3Sub Layers
bull RR-Radio Resource Management(RR)
(Part of BTS Supported by BTSM)
SetupMaintenance amp Release of Radio Channels
bull MM-Mobility Management (MM)
RegistrationAuthenticationIdentification
Location UpdatingTMSI(IMSI)
LAYER -3 Contdhellip
bull CALL MANAGEMENT (CM)
(i) Call Control
(ii) SMS ndashSDCCH SACCH
(iii) Supplementary Services
MSC
bull PULSE CODE MODULATION
bull SS7 (BSC-MSC)-gtTransfer all MGT info between MSC(HLRVLRAUCEIROMC)
bull BSSAP An MSC can also control a BSS (via) BSS Application Part
Localization and Callingbull GSM System-Automatic Worldwide
Localization of users
bull Periodic Location Updates
bull ROAMING
Changing VLRrsquos with uninterrupted Availability of all services
One Provider Two providers in a CountryTwo providers in a two different countries
Locating an MSbull Mobile Station International ISDN Number(MSISDN)
CC + National Destination Code + Sub Number(eg+49 179 1234567)
bull IMSI- Internal unique identification of a subscriberbull TMSI- current VLR- valid temporarily- LA- VLR changes
periodicallybull Mobile Station Roaming Number (MSRN)
-Hides the identity and location of the user
-VLR-Generates on request from MSC ndashHLR
-VCC ndashVNDC ndashSN
-MSRN helps HLR to find user for an incoming call
Mobile Terminated
Visitor Location Register (VLR)
bull Suppose your mobile is registered in Mumbai and you are currently in Delhi
1What happens when your friend in Mumbai calls you
Mobile Originated Call
Visitor Location Register (VLR)
bull 2 What happens when you call to a friend
(a)In the home network (Mumbai)
(b)In the visitor network (Delhi)
(c)Both are from Mumbai and currently in Delhi
HANDOVER
bull Should not cause a Cut-off(CALLDROP)
bull Maximum Duration is 60 ms
bull Basic Reason
1 Quality of the Radio Link
2 Load Balancing(MSCBSC to decide ndashTraffic in an Cell ndashHigh)
bull Error Rates and Signal Levels
Four Types of HandOverbull Intra-Cell Handover
--Within a cellbull Inter-Cell Intra-Bsc Handover
--Cell to another cell ndashBscbull Inter-BscIntra-Msc Handover
--Bsc to Bsc -gtMscbull Inter Msc Handover
--Msc to Msc
Types of Handover
Signal Flow-Inter-BSCIntra-MSC
SECURITY
bull Security to AUC and SIM
bull A3 ndashAuthentication
bull A5 ndashEncryption
bull A8 ndashGeneration of Cipher Key
Authentication
bull Any Service ndashGSM
bull Authentication is based on
Individual Authentication Key
IMSI
A3
bull Challenge-Response Method
Generating a Random Number
Authentication
Key Generation and Encryption
GPRS
bull Packet Mode Transfer
bull Small MediumHigh Volumes of Data
bull BroadcastingMulticastingUnicasting
bull Services are charged on Volume of Usages
bull ldquoAlways Onrdquo-No connection to setup prior to data transfer
GPRS-General Packet Radio Service
GPRS Architecture and Interfaces
GPRS ndashProtocol Architecture
GPRSbull GPRS Tunnelling Protocol (GTP)
All data between GSN is transferred between GTP
GTP -gt Reliable TCPUnreilable UDPbull Sub Network Dependent Convergence Protocol (SNDCP)
Used between SGSN and MS ndashto adapt different characterstics
bull LLC ndashHigh Reliability of Packet Transfer bull Base Station Subsystem GPRS Protocol (BSSGP)
-gtConvey Routing amp QOS related information between BSS and SGSN
bull RLC ndashReliable Link bull MAC ndashMapping LLC Frames into GSM Channels
Contd
TELE SERVICES
bull Mobile Telephony
bull Emergency Number
bull Multinumbering
bull SMS ndash160 Characters
bull EMS ndash760 Characters
bull MMS ndash(GIFJPGWBMP)
bull Group 3 Fax
Supplementary Services
bull User Identification
bull Call Redirection or Forwarding
bull Closed User Groups(Multi Party Communication)
GSM Architecture
GSM Architecture
Radio Sub System
Radio SubSystem
Mobile Station
bull SIM (Stores User Specific Data)
bull IMEI
bull PIN
bull IMSI
Network amp Switching SubSystem
NSS
bull Msc ndashHigh Performance Digital ISDN Switches
bull GMscndashGateway Msc-Fixed
bull SS7-Standard SIGNALLING SYSTEM
-gt Connection Setup Release amp HO
HLRbull STATIC
bull IMSI
bull CALL FORWARDINGROAMING
bull Dynamic Information (Location Area (LA))
bull MSRN --Mobile SubsciberRoaming Number
bull MSLeave lt- Update
VLR
bull Dynamic Database
bull Associated with each Msc
bull MS1048773CurrentLocation Area
bull Copies from HLR
Operation Subsystembull OMC -Traffic Moinitoring -Status Report of NW Entities -AccountingampBillingSecurity MGT
bull AUC -User Identity and Data Transmission
bull EIR -DB for IMEIBlack listWhiteListGray List -Synchronization not done
GSM
Radio Interfacebull Um interface-MultiplexingMedia Access
bull FDD ndashSeparate UPampDOWN Links
bull 1-124 Channels each 200 Khz
bull 32 Channels for organization Data
bull Remaining for Customer Use -90 channels
bull 248 Channels ndashadditionaly seperated by GSM TDMA Frame
bull Each 200Khz carrier is divided into frames
Contd
bull Duration of each frame is 4615 ms
bull 8 GSM Time Slots ( 577 μs)
bull Data ndashBURSTS(NORMAL BURST)
bull Each Burst is 5465 μs long amp remaining is 305 μs(GuardSpace)
bull Whole Data is 15625 bit with 577 μs
GSM-TDMAFDMA
GSM FDMATDMA
bull Tail-gt Enhance the Receiver Performance
bull Training Sequence-gt Select Strongest Signal(mpp)
bull Flag S -gt Data Field contains user data or Network Data
Other Burstsbull Frequency Correction Burst
MS to correct local oscillator to avoid interferences in neighbor channel
bull Synchronization Burst
synchronization burst (BTS-MS)
bull Access Burst
Initial Connection Setup (BTS-MS)
bull Dummy Burst
if no data is available for slot
GSM Logical Channels
bull Traffic Channels (TCH)
(i) Full Rate (ii) Half Rate
bull Control Channels
-gtControl Medium Access
-gtAllocation of Traffic Channels
-gtMobility Management
Control Channels bull Broadcast Control Channel (BCCH)
-gtBTS signals all information to MS Synchronization in time(Cell) ndashSCH Frequency Correction (Cell) -FCH
bull Common Control Channel (CCCH)
1048773Connection Setup(MS-BTS) Paging Channel(PCH)-BTS-Pages-MS Random Access Channel(RAC)-MS-BTS
bull Dedicated Control Channel (DCCH)
-gt Bidirectional MS uses Stand-Alone Dedicated Control Channel(SDCCH) with low data rate for signaling if (Ms using TCH not estabilished ndashBTS) TCH amp SDCCH is associated with SLOW ASSOCIATED DEDICATED CONTROL CHANNEL(SACCH)
GSMHIERARCHY OF FRAMES
GSM PROTOCOL LAYERS FOR SIGNALING
GSM PROTOCOL LAYERS FOR SIGNALING
bull Layer ndashI (Radio Specific Function)
Creation of Bursts
Multiplexing of Bursts in TDMA Frame
Synchronization
Detection of Idle Channel
Measurement of Channel Quality
Synchronization
(Correction ndashIndividual path delay)
Contd
bull BTS ndashMS (RTT is short for near and 25ms for 35kms)
bull VAD(Voice Activity Detection) Scheme for voice transmission
bull During Period of Silence COMFORT NOISE to fake a connection
Signaling Between two Entities-Layer 2
bull LAPD
(Link Access Procedure for D-Channel)
-gt Reliable Data Transfer over connections
-gt Flow controlSegmentationampReassembly of Data
-gt ACK for Data Transfer
Layer ndash3Sub Layers
bull RR-Radio Resource Management(RR)
(Part of BTS Supported by BTSM)
SetupMaintenance amp Release of Radio Channels
bull MM-Mobility Management (MM)
RegistrationAuthenticationIdentification
Location UpdatingTMSI(IMSI)
LAYER -3 Contdhellip
bull CALL MANAGEMENT (CM)
(i) Call Control
(ii) SMS ndashSDCCH SACCH
(iii) Supplementary Services
MSC
bull PULSE CODE MODULATION
bull SS7 (BSC-MSC)-gtTransfer all MGT info between MSC(HLRVLRAUCEIROMC)
bull BSSAP An MSC can also control a BSS (via) BSS Application Part
Localization and Callingbull GSM System-Automatic Worldwide
Localization of users
bull Periodic Location Updates
bull ROAMING
Changing VLRrsquos with uninterrupted Availability of all services
One Provider Two providers in a CountryTwo providers in a two different countries
Locating an MSbull Mobile Station International ISDN Number(MSISDN)
CC + National Destination Code + Sub Number(eg+49 179 1234567)
bull IMSI- Internal unique identification of a subscriberbull TMSI- current VLR- valid temporarily- LA- VLR changes
periodicallybull Mobile Station Roaming Number (MSRN)
-Hides the identity and location of the user
-VLR-Generates on request from MSC ndashHLR
-VCC ndashVNDC ndashSN
-MSRN helps HLR to find user for an incoming call
Mobile Terminated
Visitor Location Register (VLR)
bull Suppose your mobile is registered in Mumbai and you are currently in Delhi
1What happens when your friend in Mumbai calls you
Mobile Originated Call
Visitor Location Register (VLR)
bull 2 What happens when you call to a friend
(a)In the home network (Mumbai)
(b)In the visitor network (Delhi)
(c)Both are from Mumbai and currently in Delhi
HANDOVER
bull Should not cause a Cut-off(CALLDROP)
bull Maximum Duration is 60 ms
bull Basic Reason
1 Quality of the Radio Link
2 Load Balancing(MSCBSC to decide ndashTraffic in an Cell ndashHigh)
bull Error Rates and Signal Levels
Four Types of HandOverbull Intra-Cell Handover
--Within a cellbull Inter-Cell Intra-Bsc Handover
--Cell to another cell ndashBscbull Inter-BscIntra-Msc Handover
--Bsc to Bsc -gtMscbull Inter Msc Handover
--Msc to Msc
Types of Handover
Signal Flow-Inter-BSCIntra-MSC
SECURITY
bull Security to AUC and SIM
bull A3 ndashAuthentication
bull A5 ndashEncryption
bull A8 ndashGeneration of Cipher Key
Authentication
bull Any Service ndashGSM
bull Authentication is based on
Individual Authentication Key
IMSI
A3
bull Challenge-Response Method
Generating a Random Number
Authentication
Key Generation and Encryption
GPRS
bull Packet Mode Transfer
bull Small MediumHigh Volumes of Data
bull BroadcastingMulticastingUnicasting
bull Services are charged on Volume of Usages
bull ldquoAlways Onrdquo-No connection to setup prior to data transfer
GPRS-General Packet Radio Service
GPRS Architecture and Interfaces
GPRS ndashProtocol Architecture
GPRSbull GPRS Tunnelling Protocol (GTP)
All data between GSN is transferred between GTP
GTP -gt Reliable TCPUnreilable UDPbull Sub Network Dependent Convergence Protocol (SNDCP)
Used between SGSN and MS ndashto adapt different characterstics
bull LLC ndashHigh Reliability of Packet Transfer bull Base Station Subsystem GPRS Protocol (BSSGP)
-gtConvey Routing amp QOS related information between BSS and SGSN
bull RLC ndashReliable Link bull MAC ndashMapping LLC Frames into GSM Channels
TELE SERVICES
bull Mobile Telephony
bull Emergency Number
bull Multinumbering
bull SMS ndash160 Characters
bull EMS ndash760 Characters
bull MMS ndash(GIFJPGWBMP)
bull Group 3 Fax
Supplementary Services
bull User Identification
bull Call Redirection or Forwarding
bull Closed User Groups(Multi Party Communication)
GSM Architecture
GSM Architecture
Radio Sub System
Radio SubSystem
Mobile Station
bull SIM (Stores User Specific Data)
bull IMEI
bull PIN
bull IMSI
Network amp Switching SubSystem
NSS
bull Msc ndashHigh Performance Digital ISDN Switches
bull GMscndashGateway Msc-Fixed
bull SS7-Standard SIGNALLING SYSTEM
-gt Connection Setup Release amp HO
HLRbull STATIC
bull IMSI
bull CALL FORWARDINGROAMING
bull Dynamic Information (Location Area (LA))
bull MSRN --Mobile SubsciberRoaming Number
bull MSLeave lt- Update
VLR
bull Dynamic Database
bull Associated with each Msc
bull MS1048773CurrentLocation Area
bull Copies from HLR
Operation Subsystembull OMC -Traffic Moinitoring -Status Report of NW Entities -AccountingampBillingSecurity MGT
bull AUC -User Identity and Data Transmission
bull EIR -DB for IMEIBlack listWhiteListGray List -Synchronization not done
GSM
Radio Interfacebull Um interface-MultiplexingMedia Access
bull FDD ndashSeparate UPampDOWN Links
bull 1-124 Channels each 200 Khz
bull 32 Channels for organization Data
bull Remaining for Customer Use -90 channels
bull 248 Channels ndashadditionaly seperated by GSM TDMA Frame
bull Each 200Khz carrier is divided into frames
Contd
bull Duration of each frame is 4615 ms
bull 8 GSM Time Slots ( 577 μs)
bull Data ndashBURSTS(NORMAL BURST)
bull Each Burst is 5465 μs long amp remaining is 305 μs(GuardSpace)
bull Whole Data is 15625 bit with 577 μs
GSM-TDMAFDMA
GSM FDMATDMA
bull Tail-gt Enhance the Receiver Performance
bull Training Sequence-gt Select Strongest Signal(mpp)
bull Flag S -gt Data Field contains user data or Network Data
Other Burstsbull Frequency Correction Burst
MS to correct local oscillator to avoid interferences in neighbor channel
bull Synchronization Burst
synchronization burst (BTS-MS)
bull Access Burst
Initial Connection Setup (BTS-MS)
bull Dummy Burst
if no data is available for slot
GSM Logical Channels
bull Traffic Channels (TCH)
(i) Full Rate (ii) Half Rate
bull Control Channels
-gtControl Medium Access
-gtAllocation of Traffic Channels
-gtMobility Management
Control Channels bull Broadcast Control Channel (BCCH)
-gtBTS signals all information to MS Synchronization in time(Cell) ndashSCH Frequency Correction (Cell) -FCH
bull Common Control Channel (CCCH)
1048773Connection Setup(MS-BTS) Paging Channel(PCH)-BTS-Pages-MS Random Access Channel(RAC)-MS-BTS
bull Dedicated Control Channel (DCCH)
-gt Bidirectional MS uses Stand-Alone Dedicated Control Channel(SDCCH) with low data rate for signaling if (Ms using TCH not estabilished ndashBTS) TCH amp SDCCH is associated with SLOW ASSOCIATED DEDICATED CONTROL CHANNEL(SACCH)
GSMHIERARCHY OF FRAMES
GSM PROTOCOL LAYERS FOR SIGNALING
GSM PROTOCOL LAYERS FOR SIGNALING
bull Layer ndashI (Radio Specific Function)
Creation of Bursts
Multiplexing of Bursts in TDMA Frame
Synchronization
Detection of Idle Channel
Measurement of Channel Quality
Synchronization
(Correction ndashIndividual path delay)
Contd
bull BTS ndashMS (RTT is short for near and 25ms for 35kms)
bull VAD(Voice Activity Detection) Scheme for voice transmission
bull During Period of Silence COMFORT NOISE to fake a connection
Signaling Between two Entities-Layer 2
bull LAPD
(Link Access Procedure for D-Channel)
-gt Reliable Data Transfer over connections
-gt Flow controlSegmentationampReassembly of Data
-gt ACK for Data Transfer
Layer ndash3Sub Layers
bull RR-Radio Resource Management(RR)
(Part of BTS Supported by BTSM)
SetupMaintenance amp Release of Radio Channels
bull MM-Mobility Management (MM)
RegistrationAuthenticationIdentification
Location UpdatingTMSI(IMSI)
LAYER -3 Contdhellip
bull CALL MANAGEMENT (CM)
(i) Call Control
(ii) SMS ndashSDCCH SACCH
(iii) Supplementary Services
MSC
bull PULSE CODE MODULATION
bull SS7 (BSC-MSC)-gtTransfer all MGT info between MSC(HLRVLRAUCEIROMC)
bull BSSAP An MSC can also control a BSS (via) BSS Application Part
Localization and Callingbull GSM System-Automatic Worldwide
Localization of users
bull Periodic Location Updates
bull ROAMING
Changing VLRrsquos with uninterrupted Availability of all services
One Provider Two providers in a CountryTwo providers in a two different countries
Locating an MSbull Mobile Station International ISDN Number(MSISDN)
CC + National Destination Code + Sub Number(eg+49 179 1234567)
bull IMSI- Internal unique identification of a subscriberbull TMSI- current VLR- valid temporarily- LA- VLR changes
periodicallybull Mobile Station Roaming Number (MSRN)
-Hides the identity and location of the user
-VLR-Generates on request from MSC ndashHLR
-VCC ndashVNDC ndashSN
-MSRN helps HLR to find user for an incoming call
Mobile Terminated
Visitor Location Register (VLR)
bull Suppose your mobile is registered in Mumbai and you are currently in Delhi
1What happens when your friend in Mumbai calls you
Mobile Originated Call
Visitor Location Register (VLR)
bull 2 What happens when you call to a friend
(a)In the home network (Mumbai)
(b)In the visitor network (Delhi)
(c)Both are from Mumbai and currently in Delhi
HANDOVER
bull Should not cause a Cut-off(CALLDROP)
bull Maximum Duration is 60 ms
bull Basic Reason
1 Quality of the Radio Link
2 Load Balancing(MSCBSC to decide ndashTraffic in an Cell ndashHigh)
bull Error Rates and Signal Levels
Four Types of HandOverbull Intra-Cell Handover
--Within a cellbull Inter-Cell Intra-Bsc Handover
--Cell to another cell ndashBscbull Inter-BscIntra-Msc Handover
--Bsc to Bsc -gtMscbull Inter Msc Handover
--Msc to Msc
Types of Handover
Signal Flow-Inter-BSCIntra-MSC
SECURITY
bull Security to AUC and SIM
bull A3 ndashAuthentication
bull A5 ndashEncryption
bull A8 ndashGeneration of Cipher Key
Authentication
bull Any Service ndashGSM
bull Authentication is based on
Individual Authentication Key
IMSI
A3
bull Challenge-Response Method
Generating a Random Number
Authentication
Key Generation and Encryption
GPRS
bull Packet Mode Transfer
bull Small MediumHigh Volumes of Data
bull BroadcastingMulticastingUnicasting
bull Services are charged on Volume of Usages
bull ldquoAlways Onrdquo-No connection to setup prior to data transfer
GPRS-General Packet Radio Service
GPRS Architecture and Interfaces
GPRS ndashProtocol Architecture
GPRSbull GPRS Tunnelling Protocol (GTP)
All data between GSN is transferred between GTP
GTP -gt Reliable TCPUnreilable UDPbull Sub Network Dependent Convergence Protocol (SNDCP)
Used between SGSN and MS ndashto adapt different characterstics
bull LLC ndashHigh Reliability of Packet Transfer bull Base Station Subsystem GPRS Protocol (BSSGP)
-gtConvey Routing amp QOS related information between BSS and SGSN
bull RLC ndashReliable Link bull MAC ndashMapping LLC Frames into GSM Channels
Supplementary Services
bull User Identification
bull Call Redirection or Forwarding
bull Closed User Groups(Multi Party Communication)
GSM Architecture
GSM Architecture
Radio Sub System
Radio SubSystem
Mobile Station
bull SIM (Stores User Specific Data)
bull IMEI
bull PIN
bull IMSI
Network amp Switching SubSystem
NSS
bull Msc ndashHigh Performance Digital ISDN Switches
bull GMscndashGateway Msc-Fixed
bull SS7-Standard SIGNALLING SYSTEM
-gt Connection Setup Release amp HO
HLRbull STATIC
bull IMSI
bull CALL FORWARDINGROAMING
bull Dynamic Information (Location Area (LA))
bull MSRN --Mobile SubsciberRoaming Number
bull MSLeave lt- Update
VLR
bull Dynamic Database
bull Associated with each Msc
bull MS1048773CurrentLocation Area
bull Copies from HLR
Operation Subsystembull OMC -Traffic Moinitoring -Status Report of NW Entities -AccountingampBillingSecurity MGT
bull AUC -User Identity and Data Transmission
bull EIR -DB for IMEIBlack listWhiteListGray List -Synchronization not done
GSM
Radio Interfacebull Um interface-MultiplexingMedia Access
bull FDD ndashSeparate UPampDOWN Links
bull 1-124 Channels each 200 Khz
bull 32 Channels for organization Data
bull Remaining for Customer Use -90 channels
bull 248 Channels ndashadditionaly seperated by GSM TDMA Frame
bull Each 200Khz carrier is divided into frames
Contd
bull Duration of each frame is 4615 ms
bull 8 GSM Time Slots ( 577 μs)
bull Data ndashBURSTS(NORMAL BURST)
bull Each Burst is 5465 μs long amp remaining is 305 μs(GuardSpace)
bull Whole Data is 15625 bit with 577 μs
GSM-TDMAFDMA
GSM FDMATDMA
bull Tail-gt Enhance the Receiver Performance
bull Training Sequence-gt Select Strongest Signal(mpp)
bull Flag S -gt Data Field contains user data or Network Data
Other Burstsbull Frequency Correction Burst
MS to correct local oscillator to avoid interferences in neighbor channel
bull Synchronization Burst
synchronization burst (BTS-MS)
bull Access Burst
Initial Connection Setup (BTS-MS)
bull Dummy Burst
if no data is available for slot
GSM Logical Channels
bull Traffic Channels (TCH)
(i) Full Rate (ii) Half Rate
bull Control Channels
-gtControl Medium Access
-gtAllocation of Traffic Channels
-gtMobility Management
Control Channels bull Broadcast Control Channel (BCCH)
-gtBTS signals all information to MS Synchronization in time(Cell) ndashSCH Frequency Correction (Cell) -FCH
bull Common Control Channel (CCCH)
1048773Connection Setup(MS-BTS) Paging Channel(PCH)-BTS-Pages-MS Random Access Channel(RAC)-MS-BTS
bull Dedicated Control Channel (DCCH)
-gt Bidirectional MS uses Stand-Alone Dedicated Control Channel(SDCCH) with low data rate for signaling if (Ms using TCH not estabilished ndashBTS) TCH amp SDCCH is associated with SLOW ASSOCIATED DEDICATED CONTROL CHANNEL(SACCH)
GSMHIERARCHY OF FRAMES
GSM PROTOCOL LAYERS FOR SIGNALING
GSM PROTOCOL LAYERS FOR SIGNALING
bull Layer ndashI (Radio Specific Function)
Creation of Bursts
Multiplexing of Bursts in TDMA Frame
Synchronization
Detection of Idle Channel
Measurement of Channel Quality
Synchronization
(Correction ndashIndividual path delay)
Contd
bull BTS ndashMS (RTT is short for near and 25ms for 35kms)
bull VAD(Voice Activity Detection) Scheme for voice transmission
bull During Period of Silence COMFORT NOISE to fake a connection
Signaling Between two Entities-Layer 2
bull LAPD
(Link Access Procedure for D-Channel)
-gt Reliable Data Transfer over connections
-gt Flow controlSegmentationampReassembly of Data
-gt ACK for Data Transfer
Layer ndash3Sub Layers
bull RR-Radio Resource Management(RR)
(Part of BTS Supported by BTSM)
SetupMaintenance amp Release of Radio Channels
bull MM-Mobility Management (MM)
RegistrationAuthenticationIdentification
Location UpdatingTMSI(IMSI)
LAYER -3 Contdhellip
bull CALL MANAGEMENT (CM)
(i) Call Control
(ii) SMS ndashSDCCH SACCH
(iii) Supplementary Services
MSC
bull PULSE CODE MODULATION
bull SS7 (BSC-MSC)-gtTransfer all MGT info between MSC(HLRVLRAUCEIROMC)
bull BSSAP An MSC can also control a BSS (via) BSS Application Part
Localization and Callingbull GSM System-Automatic Worldwide
Localization of users
bull Periodic Location Updates
bull ROAMING
Changing VLRrsquos with uninterrupted Availability of all services
One Provider Two providers in a CountryTwo providers in a two different countries
Locating an MSbull Mobile Station International ISDN Number(MSISDN)
CC + National Destination Code + Sub Number(eg+49 179 1234567)
bull IMSI- Internal unique identification of a subscriberbull TMSI- current VLR- valid temporarily- LA- VLR changes
periodicallybull Mobile Station Roaming Number (MSRN)
-Hides the identity and location of the user
-VLR-Generates on request from MSC ndashHLR
-VCC ndashVNDC ndashSN
-MSRN helps HLR to find user for an incoming call
Mobile Terminated
Visitor Location Register (VLR)
bull Suppose your mobile is registered in Mumbai and you are currently in Delhi
1What happens when your friend in Mumbai calls you
Mobile Originated Call
Visitor Location Register (VLR)
bull 2 What happens when you call to a friend
(a)In the home network (Mumbai)
(b)In the visitor network (Delhi)
(c)Both are from Mumbai and currently in Delhi
HANDOVER
bull Should not cause a Cut-off(CALLDROP)
bull Maximum Duration is 60 ms
bull Basic Reason
1 Quality of the Radio Link
2 Load Balancing(MSCBSC to decide ndashTraffic in an Cell ndashHigh)
bull Error Rates and Signal Levels
Four Types of HandOverbull Intra-Cell Handover
--Within a cellbull Inter-Cell Intra-Bsc Handover
--Cell to another cell ndashBscbull Inter-BscIntra-Msc Handover
--Bsc to Bsc -gtMscbull Inter Msc Handover
--Msc to Msc
Types of Handover
Signal Flow-Inter-BSCIntra-MSC
SECURITY
bull Security to AUC and SIM
bull A3 ndashAuthentication
bull A5 ndashEncryption
bull A8 ndashGeneration of Cipher Key
Authentication
bull Any Service ndashGSM
bull Authentication is based on
Individual Authentication Key
IMSI
A3
bull Challenge-Response Method
Generating a Random Number
Authentication
Key Generation and Encryption
GPRS
bull Packet Mode Transfer
bull Small MediumHigh Volumes of Data
bull BroadcastingMulticastingUnicasting
bull Services are charged on Volume of Usages
bull ldquoAlways Onrdquo-No connection to setup prior to data transfer
GPRS-General Packet Radio Service
GPRS Architecture and Interfaces
GPRS ndashProtocol Architecture
GPRSbull GPRS Tunnelling Protocol (GTP)
All data between GSN is transferred between GTP
GTP -gt Reliable TCPUnreilable UDPbull Sub Network Dependent Convergence Protocol (SNDCP)
Used between SGSN and MS ndashto adapt different characterstics
bull LLC ndashHigh Reliability of Packet Transfer bull Base Station Subsystem GPRS Protocol (BSSGP)
-gtConvey Routing amp QOS related information between BSS and SGSN
bull RLC ndashReliable Link bull MAC ndashMapping LLC Frames into GSM Channels
GSM Architecture
GSM Architecture
Radio Sub System
Radio SubSystem
Mobile Station
bull SIM (Stores User Specific Data)
bull IMEI
bull PIN
bull IMSI
Network amp Switching SubSystem
NSS
bull Msc ndashHigh Performance Digital ISDN Switches
bull GMscndashGateway Msc-Fixed
bull SS7-Standard SIGNALLING SYSTEM
-gt Connection Setup Release amp HO
HLRbull STATIC
bull IMSI
bull CALL FORWARDINGROAMING
bull Dynamic Information (Location Area (LA))
bull MSRN --Mobile SubsciberRoaming Number
bull MSLeave lt- Update
VLR
bull Dynamic Database
bull Associated with each Msc
bull MS1048773CurrentLocation Area
bull Copies from HLR
Operation Subsystembull OMC -Traffic Moinitoring -Status Report of NW Entities -AccountingampBillingSecurity MGT
bull AUC -User Identity and Data Transmission
bull EIR -DB for IMEIBlack listWhiteListGray List -Synchronization not done
GSM
Radio Interfacebull Um interface-MultiplexingMedia Access
bull FDD ndashSeparate UPampDOWN Links
bull 1-124 Channels each 200 Khz
bull 32 Channels for organization Data
bull Remaining for Customer Use -90 channels
bull 248 Channels ndashadditionaly seperated by GSM TDMA Frame
bull Each 200Khz carrier is divided into frames
Contd
bull Duration of each frame is 4615 ms
bull 8 GSM Time Slots ( 577 μs)
bull Data ndashBURSTS(NORMAL BURST)
bull Each Burst is 5465 μs long amp remaining is 305 μs(GuardSpace)
bull Whole Data is 15625 bit with 577 μs
GSM-TDMAFDMA
GSM FDMATDMA
bull Tail-gt Enhance the Receiver Performance
bull Training Sequence-gt Select Strongest Signal(mpp)
bull Flag S -gt Data Field contains user data or Network Data
Other Burstsbull Frequency Correction Burst
MS to correct local oscillator to avoid interferences in neighbor channel
bull Synchronization Burst
synchronization burst (BTS-MS)
bull Access Burst
Initial Connection Setup (BTS-MS)
bull Dummy Burst
if no data is available for slot
GSM Logical Channels
bull Traffic Channels (TCH)
(i) Full Rate (ii) Half Rate
bull Control Channels
-gtControl Medium Access
-gtAllocation of Traffic Channels
-gtMobility Management
Control Channels bull Broadcast Control Channel (BCCH)
-gtBTS signals all information to MS Synchronization in time(Cell) ndashSCH Frequency Correction (Cell) -FCH
bull Common Control Channel (CCCH)
1048773Connection Setup(MS-BTS) Paging Channel(PCH)-BTS-Pages-MS Random Access Channel(RAC)-MS-BTS
bull Dedicated Control Channel (DCCH)
-gt Bidirectional MS uses Stand-Alone Dedicated Control Channel(SDCCH) with low data rate for signaling if (Ms using TCH not estabilished ndashBTS) TCH amp SDCCH is associated with SLOW ASSOCIATED DEDICATED CONTROL CHANNEL(SACCH)
GSMHIERARCHY OF FRAMES
GSM PROTOCOL LAYERS FOR SIGNALING
GSM PROTOCOL LAYERS FOR SIGNALING
bull Layer ndashI (Radio Specific Function)
Creation of Bursts
Multiplexing of Bursts in TDMA Frame
Synchronization
Detection of Idle Channel
Measurement of Channel Quality
Synchronization
(Correction ndashIndividual path delay)
Contd
bull BTS ndashMS (RTT is short for near and 25ms for 35kms)
bull VAD(Voice Activity Detection) Scheme for voice transmission
bull During Period of Silence COMFORT NOISE to fake a connection
Signaling Between two Entities-Layer 2
bull LAPD
(Link Access Procedure for D-Channel)
-gt Reliable Data Transfer over connections
-gt Flow controlSegmentationampReassembly of Data
-gt ACK for Data Transfer
Layer ndash3Sub Layers
bull RR-Radio Resource Management(RR)
(Part of BTS Supported by BTSM)
SetupMaintenance amp Release of Radio Channels
bull MM-Mobility Management (MM)
RegistrationAuthenticationIdentification
Location UpdatingTMSI(IMSI)
LAYER -3 Contdhellip
bull CALL MANAGEMENT (CM)
(i) Call Control
(ii) SMS ndashSDCCH SACCH
(iii) Supplementary Services
MSC
bull PULSE CODE MODULATION
bull SS7 (BSC-MSC)-gtTransfer all MGT info between MSC(HLRVLRAUCEIROMC)
bull BSSAP An MSC can also control a BSS (via) BSS Application Part
Localization and Callingbull GSM System-Automatic Worldwide
Localization of users
bull Periodic Location Updates
bull ROAMING
Changing VLRrsquos with uninterrupted Availability of all services
One Provider Two providers in a CountryTwo providers in a two different countries
Locating an MSbull Mobile Station International ISDN Number(MSISDN)
CC + National Destination Code + Sub Number(eg+49 179 1234567)
bull IMSI- Internal unique identification of a subscriberbull TMSI- current VLR- valid temporarily- LA- VLR changes
periodicallybull Mobile Station Roaming Number (MSRN)
-Hides the identity and location of the user
-VLR-Generates on request from MSC ndashHLR
-VCC ndashVNDC ndashSN
-MSRN helps HLR to find user for an incoming call
Mobile Terminated
Visitor Location Register (VLR)
bull Suppose your mobile is registered in Mumbai and you are currently in Delhi
1What happens when your friend in Mumbai calls you
Mobile Originated Call
Visitor Location Register (VLR)
bull 2 What happens when you call to a friend
(a)In the home network (Mumbai)
(b)In the visitor network (Delhi)
(c)Both are from Mumbai and currently in Delhi
HANDOVER
bull Should not cause a Cut-off(CALLDROP)
bull Maximum Duration is 60 ms
bull Basic Reason
1 Quality of the Radio Link
2 Load Balancing(MSCBSC to decide ndashTraffic in an Cell ndashHigh)
bull Error Rates and Signal Levels
Four Types of HandOverbull Intra-Cell Handover
--Within a cellbull Inter-Cell Intra-Bsc Handover
--Cell to another cell ndashBscbull Inter-BscIntra-Msc Handover
--Bsc to Bsc -gtMscbull Inter Msc Handover
--Msc to Msc
Types of Handover
Signal Flow-Inter-BSCIntra-MSC
SECURITY
bull Security to AUC and SIM
bull A3 ndashAuthentication
bull A5 ndashEncryption
bull A8 ndashGeneration of Cipher Key
Authentication
bull Any Service ndashGSM
bull Authentication is based on
Individual Authentication Key
IMSI
A3
bull Challenge-Response Method
Generating a Random Number
Authentication
Key Generation and Encryption
GPRS
bull Packet Mode Transfer
bull Small MediumHigh Volumes of Data
bull BroadcastingMulticastingUnicasting
bull Services are charged on Volume of Usages
bull ldquoAlways Onrdquo-No connection to setup prior to data transfer
GPRS-General Packet Radio Service
GPRS Architecture and Interfaces
GPRS ndashProtocol Architecture
GPRSbull GPRS Tunnelling Protocol (GTP)
All data between GSN is transferred between GTP
GTP -gt Reliable TCPUnreilable UDPbull Sub Network Dependent Convergence Protocol (SNDCP)
Used between SGSN and MS ndashto adapt different characterstics
bull LLC ndashHigh Reliability of Packet Transfer bull Base Station Subsystem GPRS Protocol (BSSGP)
-gtConvey Routing amp QOS related information between BSS and SGSN
bull RLC ndashReliable Link bull MAC ndashMapping LLC Frames into GSM Channels
GSM Architecture
Radio Sub System
Radio SubSystem
Mobile Station
bull SIM (Stores User Specific Data)
bull IMEI
bull PIN
bull IMSI
Network amp Switching SubSystem
NSS
bull Msc ndashHigh Performance Digital ISDN Switches
bull GMscndashGateway Msc-Fixed
bull SS7-Standard SIGNALLING SYSTEM
-gt Connection Setup Release amp HO
HLRbull STATIC
bull IMSI
bull CALL FORWARDINGROAMING
bull Dynamic Information (Location Area (LA))
bull MSRN --Mobile SubsciberRoaming Number
bull MSLeave lt- Update
VLR
bull Dynamic Database
bull Associated with each Msc
bull MS1048773CurrentLocation Area
bull Copies from HLR
Operation Subsystembull OMC -Traffic Moinitoring -Status Report of NW Entities -AccountingampBillingSecurity MGT
bull AUC -User Identity and Data Transmission
bull EIR -DB for IMEIBlack listWhiteListGray List -Synchronization not done
GSM
Radio Interfacebull Um interface-MultiplexingMedia Access
bull FDD ndashSeparate UPampDOWN Links
bull 1-124 Channels each 200 Khz
bull 32 Channels for organization Data
bull Remaining for Customer Use -90 channels
bull 248 Channels ndashadditionaly seperated by GSM TDMA Frame
bull Each 200Khz carrier is divided into frames
Contd
bull Duration of each frame is 4615 ms
bull 8 GSM Time Slots ( 577 μs)
bull Data ndashBURSTS(NORMAL BURST)
bull Each Burst is 5465 μs long amp remaining is 305 μs(GuardSpace)
bull Whole Data is 15625 bit with 577 μs
GSM-TDMAFDMA
GSM FDMATDMA
bull Tail-gt Enhance the Receiver Performance
bull Training Sequence-gt Select Strongest Signal(mpp)
bull Flag S -gt Data Field contains user data or Network Data
Other Burstsbull Frequency Correction Burst
MS to correct local oscillator to avoid interferences in neighbor channel
bull Synchronization Burst
synchronization burst (BTS-MS)
bull Access Burst
Initial Connection Setup (BTS-MS)
bull Dummy Burst
if no data is available for slot
GSM Logical Channels
bull Traffic Channels (TCH)
(i) Full Rate (ii) Half Rate
bull Control Channels
-gtControl Medium Access
-gtAllocation of Traffic Channels
-gtMobility Management
Control Channels bull Broadcast Control Channel (BCCH)
-gtBTS signals all information to MS Synchronization in time(Cell) ndashSCH Frequency Correction (Cell) -FCH
bull Common Control Channel (CCCH)
1048773Connection Setup(MS-BTS) Paging Channel(PCH)-BTS-Pages-MS Random Access Channel(RAC)-MS-BTS
bull Dedicated Control Channel (DCCH)
-gt Bidirectional MS uses Stand-Alone Dedicated Control Channel(SDCCH) with low data rate for signaling if (Ms using TCH not estabilished ndashBTS) TCH amp SDCCH is associated with SLOW ASSOCIATED DEDICATED CONTROL CHANNEL(SACCH)
GSMHIERARCHY OF FRAMES
GSM PROTOCOL LAYERS FOR SIGNALING
GSM PROTOCOL LAYERS FOR SIGNALING
bull Layer ndashI (Radio Specific Function)
Creation of Bursts
Multiplexing of Bursts in TDMA Frame
Synchronization
Detection of Idle Channel
Measurement of Channel Quality
Synchronization
(Correction ndashIndividual path delay)
Contd
bull BTS ndashMS (RTT is short for near and 25ms for 35kms)
bull VAD(Voice Activity Detection) Scheme for voice transmission
bull During Period of Silence COMFORT NOISE to fake a connection
Signaling Between two Entities-Layer 2
bull LAPD
(Link Access Procedure for D-Channel)
-gt Reliable Data Transfer over connections
-gt Flow controlSegmentationampReassembly of Data
-gt ACK for Data Transfer
Layer ndash3Sub Layers
bull RR-Radio Resource Management(RR)
(Part of BTS Supported by BTSM)
SetupMaintenance amp Release of Radio Channels
bull MM-Mobility Management (MM)
RegistrationAuthenticationIdentification
Location UpdatingTMSI(IMSI)
LAYER -3 Contdhellip
bull CALL MANAGEMENT (CM)
(i) Call Control
(ii) SMS ndashSDCCH SACCH
(iii) Supplementary Services
MSC
bull PULSE CODE MODULATION
bull SS7 (BSC-MSC)-gtTransfer all MGT info between MSC(HLRVLRAUCEIROMC)
bull BSSAP An MSC can also control a BSS (via) BSS Application Part
Localization and Callingbull GSM System-Automatic Worldwide
Localization of users
bull Periodic Location Updates
bull ROAMING
Changing VLRrsquos with uninterrupted Availability of all services
One Provider Two providers in a CountryTwo providers in a two different countries
Locating an MSbull Mobile Station International ISDN Number(MSISDN)
CC + National Destination Code + Sub Number(eg+49 179 1234567)
bull IMSI- Internal unique identification of a subscriberbull TMSI- current VLR- valid temporarily- LA- VLR changes
periodicallybull Mobile Station Roaming Number (MSRN)
-Hides the identity and location of the user
-VLR-Generates on request from MSC ndashHLR
-VCC ndashVNDC ndashSN
-MSRN helps HLR to find user for an incoming call
Mobile Terminated
Visitor Location Register (VLR)
bull Suppose your mobile is registered in Mumbai and you are currently in Delhi
1What happens when your friend in Mumbai calls you
Mobile Originated Call
Visitor Location Register (VLR)
bull 2 What happens when you call to a friend
(a)In the home network (Mumbai)
(b)In the visitor network (Delhi)
(c)Both are from Mumbai and currently in Delhi
HANDOVER
bull Should not cause a Cut-off(CALLDROP)
bull Maximum Duration is 60 ms
bull Basic Reason
1 Quality of the Radio Link
2 Load Balancing(MSCBSC to decide ndashTraffic in an Cell ndashHigh)
bull Error Rates and Signal Levels
Four Types of HandOverbull Intra-Cell Handover
--Within a cellbull Inter-Cell Intra-Bsc Handover
--Cell to another cell ndashBscbull Inter-BscIntra-Msc Handover
--Bsc to Bsc -gtMscbull Inter Msc Handover
--Msc to Msc
Types of Handover
Signal Flow-Inter-BSCIntra-MSC
SECURITY
bull Security to AUC and SIM
bull A3 ndashAuthentication
bull A5 ndashEncryption
bull A8 ndashGeneration of Cipher Key
Authentication
bull Any Service ndashGSM
bull Authentication is based on
Individual Authentication Key
IMSI
A3
bull Challenge-Response Method
Generating a Random Number
Authentication
Key Generation and Encryption
GPRS
bull Packet Mode Transfer
bull Small MediumHigh Volumes of Data
bull BroadcastingMulticastingUnicasting
bull Services are charged on Volume of Usages
bull ldquoAlways Onrdquo-No connection to setup prior to data transfer
GPRS-General Packet Radio Service
GPRS Architecture and Interfaces
GPRS ndashProtocol Architecture
GPRSbull GPRS Tunnelling Protocol (GTP)
All data between GSN is transferred between GTP
GTP -gt Reliable TCPUnreilable UDPbull Sub Network Dependent Convergence Protocol (SNDCP)
Used between SGSN and MS ndashto adapt different characterstics
bull LLC ndashHigh Reliability of Packet Transfer bull Base Station Subsystem GPRS Protocol (BSSGP)
-gtConvey Routing amp QOS related information between BSS and SGSN
bull RLC ndashReliable Link bull MAC ndashMapping LLC Frames into GSM Channels
Radio Sub System
Radio SubSystem
Mobile Station
bull SIM (Stores User Specific Data)
bull IMEI
bull PIN
bull IMSI
Network amp Switching SubSystem
NSS
bull Msc ndashHigh Performance Digital ISDN Switches
bull GMscndashGateway Msc-Fixed
bull SS7-Standard SIGNALLING SYSTEM
-gt Connection Setup Release amp HO
HLRbull STATIC
bull IMSI
bull CALL FORWARDINGROAMING
bull Dynamic Information (Location Area (LA))
bull MSRN --Mobile SubsciberRoaming Number
bull MSLeave lt- Update
VLR
bull Dynamic Database
bull Associated with each Msc
bull MS1048773CurrentLocation Area
bull Copies from HLR
Operation Subsystembull OMC -Traffic Moinitoring -Status Report of NW Entities -AccountingampBillingSecurity MGT
bull AUC -User Identity and Data Transmission
bull EIR -DB for IMEIBlack listWhiteListGray List -Synchronization not done
GSM
Radio Interfacebull Um interface-MultiplexingMedia Access
bull FDD ndashSeparate UPampDOWN Links
bull 1-124 Channels each 200 Khz
bull 32 Channels for organization Data
bull Remaining for Customer Use -90 channels
bull 248 Channels ndashadditionaly seperated by GSM TDMA Frame
bull Each 200Khz carrier is divided into frames
Contd
bull Duration of each frame is 4615 ms
bull 8 GSM Time Slots ( 577 μs)
bull Data ndashBURSTS(NORMAL BURST)
bull Each Burst is 5465 μs long amp remaining is 305 μs(GuardSpace)
bull Whole Data is 15625 bit with 577 μs
GSM-TDMAFDMA
GSM FDMATDMA
bull Tail-gt Enhance the Receiver Performance
bull Training Sequence-gt Select Strongest Signal(mpp)
bull Flag S -gt Data Field contains user data or Network Data
Other Burstsbull Frequency Correction Burst
MS to correct local oscillator to avoid interferences in neighbor channel
bull Synchronization Burst
synchronization burst (BTS-MS)
bull Access Burst
Initial Connection Setup (BTS-MS)
bull Dummy Burst
if no data is available for slot
GSM Logical Channels
bull Traffic Channels (TCH)
(i) Full Rate (ii) Half Rate
bull Control Channels
-gtControl Medium Access
-gtAllocation of Traffic Channels
-gtMobility Management
Control Channels bull Broadcast Control Channel (BCCH)
-gtBTS signals all information to MS Synchronization in time(Cell) ndashSCH Frequency Correction (Cell) -FCH
bull Common Control Channel (CCCH)
1048773Connection Setup(MS-BTS) Paging Channel(PCH)-BTS-Pages-MS Random Access Channel(RAC)-MS-BTS
bull Dedicated Control Channel (DCCH)
-gt Bidirectional MS uses Stand-Alone Dedicated Control Channel(SDCCH) with low data rate for signaling if (Ms using TCH not estabilished ndashBTS) TCH amp SDCCH is associated with SLOW ASSOCIATED DEDICATED CONTROL CHANNEL(SACCH)
GSMHIERARCHY OF FRAMES
GSM PROTOCOL LAYERS FOR SIGNALING
GSM PROTOCOL LAYERS FOR SIGNALING
bull Layer ndashI (Radio Specific Function)
Creation of Bursts
Multiplexing of Bursts in TDMA Frame
Synchronization
Detection of Idle Channel
Measurement of Channel Quality
Synchronization
(Correction ndashIndividual path delay)
Contd
bull BTS ndashMS (RTT is short for near and 25ms for 35kms)
bull VAD(Voice Activity Detection) Scheme for voice transmission
bull During Period of Silence COMFORT NOISE to fake a connection
Signaling Between two Entities-Layer 2
bull LAPD
(Link Access Procedure for D-Channel)
-gt Reliable Data Transfer over connections
-gt Flow controlSegmentationampReassembly of Data
-gt ACK for Data Transfer
Layer ndash3Sub Layers
bull RR-Radio Resource Management(RR)
(Part of BTS Supported by BTSM)
SetupMaintenance amp Release of Radio Channels
bull MM-Mobility Management (MM)
RegistrationAuthenticationIdentification
Location UpdatingTMSI(IMSI)
LAYER -3 Contdhellip
bull CALL MANAGEMENT (CM)
(i) Call Control
(ii) SMS ndashSDCCH SACCH
(iii) Supplementary Services
MSC
bull PULSE CODE MODULATION
bull SS7 (BSC-MSC)-gtTransfer all MGT info between MSC(HLRVLRAUCEIROMC)
bull BSSAP An MSC can also control a BSS (via) BSS Application Part
Localization and Callingbull GSM System-Automatic Worldwide
Localization of users
bull Periodic Location Updates
bull ROAMING
Changing VLRrsquos with uninterrupted Availability of all services
One Provider Two providers in a CountryTwo providers in a two different countries
Locating an MSbull Mobile Station International ISDN Number(MSISDN)
CC + National Destination Code + Sub Number(eg+49 179 1234567)
bull IMSI- Internal unique identification of a subscriberbull TMSI- current VLR- valid temporarily- LA- VLR changes
periodicallybull Mobile Station Roaming Number (MSRN)
-Hides the identity and location of the user
-VLR-Generates on request from MSC ndashHLR
-VCC ndashVNDC ndashSN
-MSRN helps HLR to find user for an incoming call
Mobile Terminated
Visitor Location Register (VLR)
bull Suppose your mobile is registered in Mumbai and you are currently in Delhi
1What happens when your friend in Mumbai calls you
Mobile Originated Call
Visitor Location Register (VLR)
bull 2 What happens when you call to a friend
(a)In the home network (Mumbai)
(b)In the visitor network (Delhi)
(c)Both are from Mumbai and currently in Delhi
HANDOVER
bull Should not cause a Cut-off(CALLDROP)
bull Maximum Duration is 60 ms
bull Basic Reason
1 Quality of the Radio Link
2 Load Balancing(MSCBSC to decide ndashTraffic in an Cell ndashHigh)
bull Error Rates and Signal Levels
Four Types of HandOverbull Intra-Cell Handover
--Within a cellbull Inter-Cell Intra-Bsc Handover
--Cell to another cell ndashBscbull Inter-BscIntra-Msc Handover
--Bsc to Bsc -gtMscbull Inter Msc Handover
--Msc to Msc
Types of Handover
Signal Flow-Inter-BSCIntra-MSC
SECURITY
bull Security to AUC and SIM
bull A3 ndashAuthentication
bull A5 ndashEncryption
bull A8 ndashGeneration of Cipher Key
Authentication
bull Any Service ndashGSM
bull Authentication is based on
Individual Authentication Key
IMSI
A3
bull Challenge-Response Method
Generating a Random Number
Authentication
Key Generation and Encryption
GPRS
bull Packet Mode Transfer
bull Small MediumHigh Volumes of Data
bull BroadcastingMulticastingUnicasting
bull Services are charged on Volume of Usages
bull ldquoAlways Onrdquo-No connection to setup prior to data transfer
GPRS-General Packet Radio Service
GPRS Architecture and Interfaces
GPRS ndashProtocol Architecture
GPRSbull GPRS Tunnelling Protocol (GTP)
All data between GSN is transferred between GTP
GTP -gt Reliable TCPUnreilable UDPbull Sub Network Dependent Convergence Protocol (SNDCP)
Used between SGSN and MS ndashto adapt different characterstics
bull LLC ndashHigh Reliability of Packet Transfer bull Base Station Subsystem GPRS Protocol (BSSGP)
-gtConvey Routing amp QOS related information between BSS and SGSN
bull RLC ndashReliable Link bull MAC ndashMapping LLC Frames into GSM Channels
Radio SubSystem
Mobile Station
bull SIM (Stores User Specific Data)
bull IMEI
bull PIN
bull IMSI
Network amp Switching SubSystem
NSS
bull Msc ndashHigh Performance Digital ISDN Switches
bull GMscndashGateway Msc-Fixed
bull SS7-Standard SIGNALLING SYSTEM
-gt Connection Setup Release amp HO
HLRbull STATIC
bull IMSI
bull CALL FORWARDINGROAMING
bull Dynamic Information (Location Area (LA))
bull MSRN --Mobile SubsciberRoaming Number
bull MSLeave lt- Update
VLR
bull Dynamic Database
bull Associated with each Msc
bull MS1048773CurrentLocation Area
bull Copies from HLR
Operation Subsystembull OMC -Traffic Moinitoring -Status Report of NW Entities -AccountingampBillingSecurity MGT
bull AUC -User Identity and Data Transmission
bull EIR -DB for IMEIBlack listWhiteListGray List -Synchronization not done
GSM
Radio Interfacebull Um interface-MultiplexingMedia Access
bull FDD ndashSeparate UPampDOWN Links
bull 1-124 Channels each 200 Khz
bull 32 Channels for organization Data
bull Remaining for Customer Use -90 channels
bull 248 Channels ndashadditionaly seperated by GSM TDMA Frame
bull Each 200Khz carrier is divided into frames
Contd
bull Duration of each frame is 4615 ms
bull 8 GSM Time Slots ( 577 μs)
bull Data ndashBURSTS(NORMAL BURST)
bull Each Burst is 5465 μs long amp remaining is 305 μs(GuardSpace)
bull Whole Data is 15625 bit with 577 μs
GSM-TDMAFDMA
GSM FDMATDMA
bull Tail-gt Enhance the Receiver Performance
bull Training Sequence-gt Select Strongest Signal(mpp)
bull Flag S -gt Data Field contains user data or Network Data
Other Burstsbull Frequency Correction Burst
MS to correct local oscillator to avoid interferences in neighbor channel
bull Synchronization Burst
synchronization burst (BTS-MS)
bull Access Burst
Initial Connection Setup (BTS-MS)
bull Dummy Burst
if no data is available for slot
GSM Logical Channels
bull Traffic Channels (TCH)
(i) Full Rate (ii) Half Rate
bull Control Channels
-gtControl Medium Access
-gtAllocation of Traffic Channels
-gtMobility Management
Control Channels bull Broadcast Control Channel (BCCH)
-gtBTS signals all information to MS Synchronization in time(Cell) ndashSCH Frequency Correction (Cell) -FCH
bull Common Control Channel (CCCH)
1048773Connection Setup(MS-BTS) Paging Channel(PCH)-BTS-Pages-MS Random Access Channel(RAC)-MS-BTS
bull Dedicated Control Channel (DCCH)
-gt Bidirectional MS uses Stand-Alone Dedicated Control Channel(SDCCH) with low data rate for signaling if (Ms using TCH not estabilished ndashBTS) TCH amp SDCCH is associated with SLOW ASSOCIATED DEDICATED CONTROL CHANNEL(SACCH)
GSMHIERARCHY OF FRAMES
GSM PROTOCOL LAYERS FOR SIGNALING
GSM PROTOCOL LAYERS FOR SIGNALING
bull Layer ndashI (Radio Specific Function)
Creation of Bursts
Multiplexing of Bursts in TDMA Frame
Synchronization
Detection of Idle Channel
Measurement of Channel Quality
Synchronization
(Correction ndashIndividual path delay)
Contd
bull BTS ndashMS (RTT is short for near and 25ms for 35kms)
bull VAD(Voice Activity Detection) Scheme for voice transmission
bull During Period of Silence COMFORT NOISE to fake a connection
Signaling Between two Entities-Layer 2
bull LAPD
(Link Access Procedure for D-Channel)
-gt Reliable Data Transfer over connections
-gt Flow controlSegmentationampReassembly of Data
-gt ACK for Data Transfer
Layer ndash3Sub Layers
bull RR-Radio Resource Management(RR)
(Part of BTS Supported by BTSM)
SetupMaintenance amp Release of Radio Channels
bull MM-Mobility Management (MM)
RegistrationAuthenticationIdentification
Location UpdatingTMSI(IMSI)
LAYER -3 Contdhellip
bull CALL MANAGEMENT (CM)
(i) Call Control
(ii) SMS ndashSDCCH SACCH
(iii) Supplementary Services
MSC
bull PULSE CODE MODULATION
bull SS7 (BSC-MSC)-gtTransfer all MGT info between MSC(HLRVLRAUCEIROMC)
bull BSSAP An MSC can also control a BSS (via) BSS Application Part
Localization and Callingbull GSM System-Automatic Worldwide
Localization of users
bull Periodic Location Updates
bull ROAMING
Changing VLRrsquos with uninterrupted Availability of all services
One Provider Two providers in a CountryTwo providers in a two different countries
Locating an MSbull Mobile Station International ISDN Number(MSISDN)
CC + National Destination Code + Sub Number(eg+49 179 1234567)
bull IMSI- Internal unique identification of a subscriberbull TMSI- current VLR- valid temporarily- LA- VLR changes
periodicallybull Mobile Station Roaming Number (MSRN)
-Hides the identity and location of the user
-VLR-Generates on request from MSC ndashHLR
-VCC ndashVNDC ndashSN
-MSRN helps HLR to find user for an incoming call
Mobile Terminated
Visitor Location Register (VLR)
bull Suppose your mobile is registered in Mumbai and you are currently in Delhi
1What happens when your friend in Mumbai calls you
Mobile Originated Call
Visitor Location Register (VLR)
bull 2 What happens when you call to a friend
(a)In the home network (Mumbai)
(b)In the visitor network (Delhi)
(c)Both are from Mumbai and currently in Delhi
HANDOVER
bull Should not cause a Cut-off(CALLDROP)
bull Maximum Duration is 60 ms
bull Basic Reason
1 Quality of the Radio Link
2 Load Balancing(MSCBSC to decide ndashTraffic in an Cell ndashHigh)
bull Error Rates and Signal Levels
Four Types of HandOverbull Intra-Cell Handover
--Within a cellbull Inter-Cell Intra-Bsc Handover
--Cell to another cell ndashBscbull Inter-BscIntra-Msc Handover
--Bsc to Bsc -gtMscbull Inter Msc Handover
--Msc to Msc
Types of Handover
Signal Flow-Inter-BSCIntra-MSC
SECURITY
bull Security to AUC and SIM
bull A3 ndashAuthentication
bull A5 ndashEncryption
bull A8 ndashGeneration of Cipher Key
Authentication
bull Any Service ndashGSM
bull Authentication is based on
Individual Authentication Key
IMSI
A3
bull Challenge-Response Method
Generating a Random Number
Authentication
Key Generation and Encryption
GPRS
bull Packet Mode Transfer
bull Small MediumHigh Volumes of Data
bull BroadcastingMulticastingUnicasting
bull Services are charged on Volume of Usages
bull ldquoAlways Onrdquo-No connection to setup prior to data transfer
GPRS-General Packet Radio Service
GPRS Architecture and Interfaces
GPRS ndashProtocol Architecture
GPRSbull GPRS Tunnelling Protocol (GTP)
All data between GSN is transferred between GTP
GTP -gt Reliable TCPUnreilable UDPbull Sub Network Dependent Convergence Protocol (SNDCP)
Used between SGSN and MS ndashto adapt different characterstics
bull LLC ndashHigh Reliability of Packet Transfer bull Base Station Subsystem GPRS Protocol (BSSGP)
-gtConvey Routing amp QOS related information between BSS and SGSN
bull RLC ndashReliable Link bull MAC ndashMapping LLC Frames into GSM Channels
Mobile Station
bull SIM (Stores User Specific Data)
bull IMEI
bull PIN
bull IMSI
Network amp Switching SubSystem
NSS
bull Msc ndashHigh Performance Digital ISDN Switches
bull GMscndashGateway Msc-Fixed
bull SS7-Standard SIGNALLING SYSTEM
-gt Connection Setup Release amp HO
HLRbull STATIC
bull IMSI
bull CALL FORWARDINGROAMING
bull Dynamic Information (Location Area (LA))
bull MSRN --Mobile SubsciberRoaming Number
bull MSLeave lt- Update
VLR
bull Dynamic Database
bull Associated with each Msc
bull MS1048773CurrentLocation Area
bull Copies from HLR
Operation Subsystembull OMC -Traffic Moinitoring -Status Report of NW Entities -AccountingampBillingSecurity MGT
bull AUC -User Identity and Data Transmission
bull EIR -DB for IMEIBlack listWhiteListGray List -Synchronization not done
GSM
Radio Interfacebull Um interface-MultiplexingMedia Access
bull FDD ndashSeparate UPampDOWN Links
bull 1-124 Channels each 200 Khz
bull 32 Channels for organization Data
bull Remaining for Customer Use -90 channels
bull 248 Channels ndashadditionaly seperated by GSM TDMA Frame
bull Each 200Khz carrier is divided into frames
Contd
bull Duration of each frame is 4615 ms
bull 8 GSM Time Slots ( 577 μs)
bull Data ndashBURSTS(NORMAL BURST)
bull Each Burst is 5465 μs long amp remaining is 305 μs(GuardSpace)
bull Whole Data is 15625 bit with 577 μs
GSM-TDMAFDMA
GSM FDMATDMA
bull Tail-gt Enhance the Receiver Performance
bull Training Sequence-gt Select Strongest Signal(mpp)
bull Flag S -gt Data Field contains user data or Network Data
Other Burstsbull Frequency Correction Burst
MS to correct local oscillator to avoid interferences in neighbor channel
bull Synchronization Burst
synchronization burst (BTS-MS)
bull Access Burst
Initial Connection Setup (BTS-MS)
bull Dummy Burst
if no data is available for slot
GSM Logical Channels
bull Traffic Channels (TCH)
(i) Full Rate (ii) Half Rate
bull Control Channels
-gtControl Medium Access
-gtAllocation of Traffic Channels
-gtMobility Management
Control Channels bull Broadcast Control Channel (BCCH)
-gtBTS signals all information to MS Synchronization in time(Cell) ndashSCH Frequency Correction (Cell) -FCH
bull Common Control Channel (CCCH)
1048773Connection Setup(MS-BTS) Paging Channel(PCH)-BTS-Pages-MS Random Access Channel(RAC)-MS-BTS
bull Dedicated Control Channel (DCCH)
-gt Bidirectional MS uses Stand-Alone Dedicated Control Channel(SDCCH) with low data rate for signaling if (Ms using TCH not estabilished ndashBTS) TCH amp SDCCH is associated with SLOW ASSOCIATED DEDICATED CONTROL CHANNEL(SACCH)
GSMHIERARCHY OF FRAMES
GSM PROTOCOL LAYERS FOR SIGNALING
GSM PROTOCOL LAYERS FOR SIGNALING
bull Layer ndashI (Radio Specific Function)
Creation of Bursts
Multiplexing of Bursts in TDMA Frame
Synchronization
Detection of Idle Channel
Measurement of Channel Quality
Synchronization
(Correction ndashIndividual path delay)
Contd
bull BTS ndashMS (RTT is short for near and 25ms for 35kms)
bull VAD(Voice Activity Detection) Scheme for voice transmission
bull During Period of Silence COMFORT NOISE to fake a connection
Signaling Between two Entities-Layer 2
bull LAPD
(Link Access Procedure for D-Channel)
-gt Reliable Data Transfer over connections
-gt Flow controlSegmentationampReassembly of Data
-gt ACK for Data Transfer
Layer ndash3Sub Layers
bull RR-Radio Resource Management(RR)
(Part of BTS Supported by BTSM)
SetupMaintenance amp Release of Radio Channels
bull MM-Mobility Management (MM)
RegistrationAuthenticationIdentification
Location UpdatingTMSI(IMSI)
LAYER -3 Contdhellip
bull CALL MANAGEMENT (CM)
(i) Call Control
(ii) SMS ndashSDCCH SACCH
(iii) Supplementary Services
MSC
bull PULSE CODE MODULATION
bull SS7 (BSC-MSC)-gtTransfer all MGT info between MSC(HLRVLRAUCEIROMC)
bull BSSAP An MSC can also control a BSS (via) BSS Application Part
Localization and Callingbull GSM System-Automatic Worldwide
Localization of users
bull Periodic Location Updates
bull ROAMING
Changing VLRrsquos with uninterrupted Availability of all services
One Provider Two providers in a CountryTwo providers in a two different countries
Locating an MSbull Mobile Station International ISDN Number(MSISDN)
CC + National Destination Code + Sub Number(eg+49 179 1234567)
bull IMSI- Internal unique identification of a subscriberbull TMSI- current VLR- valid temporarily- LA- VLR changes
periodicallybull Mobile Station Roaming Number (MSRN)
-Hides the identity and location of the user
-VLR-Generates on request from MSC ndashHLR
-VCC ndashVNDC ndashSN
-MSRN helps HLR to find user for an incoming call
Mobile Terminated
Visitor Location Register (VLR)
bull Suppose your mobile is registered in Mumbai and you are currently in Delhi
1What happens when your friend in Mumbai calls you
Mobile Originated Call
Visitor Location Register (VLR)
bull 2 What happens when you call to a friend
(a)In the home network (Mumbai)
(b)In the visitor network (Delhi)
(c)Both are from Mumbai and currently in Delhi
HANDOVER
bull Should not cause a Cut-off(CALLDROP)
bull Maximum Duration is 60 ms
bull Basic Reason
1 Quality of the Radio Link
2 Load Balancing(MSCBSC to decide ndashTraffic in an Cell ndashHigh)
bull Error Rates and Signal Levels
Four Types of HandOverbull Intra-Cell Handover
--Within a cellbull Inter-Cell Intra-Bsc Handover
--Cell to another cell ndashBscbull Inter-BscIntra-Msc Handover
--Bsc to Bsc -gtMscbull Inter Msc Handover
--Msc to Msc
Types of Handover
Signal Flow-Inter-BSCIntra-MSC
SECURITY
bull Security to AUC and SIM
bull A3 ndashAuthentication
bull A5 ndashEncryption
bull A8 ndashGeneration of Cipher Key
Authentication
bull Any Service ndashGSM
bull Authentication is based on
Individual Authentication Key
IMSI
A3
bull Challenge-Response Method
Generating a Random Number
Authentication
Key Generation and Encryption
GPRS
bull Packet Mode Transfer
bull Small MediumHigh Volumes of Data
bull BroadcastingMulticastingUnicasting
bull Services are charged on Volume of Usages
bull ldquoAlways Onrdquo-No connection to setup prior to data transfer
GPRS-General Packet Radio Service
GPRS Architecture and Interfaces
GPRS ndashProtocol Architecture
GPRSbull GPRS Tunnelling Protocol (GTP)
All data between GSN is transferred between GTP
GTP -gt Reliable TCPUnreilable UDPbull Sub Network Dependent Convergence Protocol (SNDCP)
Used between SGSN and MS ndashto adapt different characterstics
bull LLC ndashHigh Reliability of Packet Transfer bull Base Station Subsystem GPRS Protocol (BSSGP)
-gtConvey Routing amp QOS related information between BSS and SGSN
bull RLC ndashReliable Link bull MAC ndashMapping LLC Frames into GSM Channels
Network amp Switching SubSystem
NSS
bull Msc ndashHigh Performance Digital ISDN Switches
bull GMscndashGateway Msc-Fixed
bull SS7-Standard SIGNALLING SYSTEM
-gt Connection Setup Release amp HO
HLRbull STATIC
bull IMSI
bull CALL FORWARDINGROAMING
bull Dynamic Information (Location Area (LA))
bull MSRN --Mobile SubsciberRoaming Number
bull MSLeave lt- Update
VLR
bull Dynamic Database
bull Associated with each Msc
bull MS1048773CurrentLocation Area
bull Copies from HLR
Operation Subsystembull OMC -Traffic Moinitoring -Status Report of NW Entities -AccountingampBillingSecurity MGT
bull AUC -User Identity and Data Transmission
bull EIR -DB for IMEIBlack listWhiteListGray List -Synchronization not done
GSM
Radio Interfacebull Um interface-MultiplexingMedia Access
bull FDD ndashSeparate UPampDOWN Links
bull 1-124 Channels each 200 Khz
bull 32 Channels for organization Data
bull Remaining for Customer Use -90 channels
bull 248 Channels ndashadditionaly seperated by GSM TDMA Frame
bull Each 200Khz carrier is divided into frames
Contd
bull Duration of each frame is 4615 ms
bull 8 GSM Time Slots ( 577 μs)
bull Data ndashBURSTS(NORMAL BURST)
bull Each Burst is 5465 μs long amp remaining is 305 μs(GuardSpace)
bull Whole Data is 15625 bit with 577 μs
GSM-TDMAFDMA
GSM FDMATDMA
bull Tail-gt Enhance the Receiver Performance
bull Training Sequence-gt Select Strongest Signal(mpp)
bull Flag S -gt Data Field contains user data or Network Data
Other Burstsbull Frequency Correction Burst
MS to correct local oscillator to avoid interferences in neighbor channel
bull Synchronization Burst
synchronization burst (BTS-MS)
bull Access Burst
Initial Connection Setup (BTS-MS)
bull Dummy Burst
if no data is available for slot
GSM Logical Channels
bull Traffic Channels (TCH)
(i) Full Rate (ii) Half Rate
bull Control Channels
-gtControl Medium Access
-gtAllocation of Traffic Channels
-gtMobility Management
Control Channels bull Broadcast Control Channel (BCCH)
-gtBTS signals all information to MS Synchronization in time(Cell) ndashSCH Frequency Correction (Cell) -FCH
bull Common Control Channel (CCCH)
1048773Connection Setup(MS-BTS) Paging Channel(PCH)-BTS-Pages-MS Random Access Channel(RAC)-MS-BTS
bull Dedicated Control Channel (DCCH)
-gt Bidirectional MS uses Stand-Alone Dedicated Control Channel(SDCCH) with low data rate for signaling if (Ms using TCH not estabilished ndashBTS) TCH amp SDCCH is associated with SLOW ASSOCIATED DEDICATED CONTROL CHANNEL(SACCH)
GSMHIERARCHY OF FRAMES
GSM PROTOCOL LAYERS FOR SIGNALING
GSM PROTOCOL LAYERS FOR SIGNALING
bull Layer ndashI (Radio Specific Function)
Creation of Bursts
Multiplexing of Bursts in TDMA Frame
Synchronization
Detection of Idle Channel
Measurement of Channel Quality
Synchronization
(Correction ndashIndividual path delay)
Contd
bull BTS ndashMS (RTT is short for near and 25ms for 35kms)
bull VAD(Voice Activity Detection) Scheme for voice transmission
bull During Period of Silence COMFORT NOISE to fake a connection
Signaling Between two Entities-Layer 2
bull LAPD
(Link Access Procedure for D-Channel)
-gt Reliable Data Transfer over connections
-gt Flow controlSegmentationampReassembly of Data
-gt ACK for Data Transfer
Layer ndash3Sub Layers
bull RR-Radio Resource Management(RR)
(Part of BTS Supported by BTSM)
SetupMaintenance amp Release of Radio Channels
bull MM-Mobility Management (MM)
RegistrationAuthenticationIdentification
Location UpdatingTMSI(IMSI)
LAYER -3 Contdhellip
bull CALL MANAGEMENT (CM)
(i) Call Control
(ii) SMS ndashSDCCH SACCH
(iii) Supplementary Services
MSC
bull PULSE CODE MODULATION
bull SS7 (BSC-MSC)-gtTransfer all MGT info between MSC(HLRVLRAUCEIROMC)
bull BSSAP An MSC can also control a BSS (via) BSS Application Part
Localization and Callingbull GSM System-Automatic Worldwide
Localization of users
bull Periodic Location Updates
bull ROAMING
Changing VLRrsquos with uninterrupted Availability of all services
One Provider Two providers in a CountryTwo providers in a two different countries
Locating an MSbull Mobile Station International ISDN Number(MSISDN)
CC + National Destination Code + Sub Number(eg+49 179 1234567)
bull IMSI- Internal unique identification of a subscriberbull TMSI- current VLR- valid temporarily- LA- VLR changes
periodicallybull Mobile Station Roaming Number (MSRN)
-Hides the identity and location of the user
-VLR-Generates on request from MSC ndashHLR
-VCC ndashVNDC ndashSN
-MSRN helps HLR to find user for an incoming call
Mobile Terminated
Visitor Location Register (VLR)
bull Suppose your mobile is registered in Mumbai and you are currently in Delhi
1What happens when your friend in Mumbai calls you
Mobile Originated Call
Visitor Location Register (VLR)
bull 2 What happens when you call to a friend
(a)In the home network (Mumbai)
(b)In the visitor network (Delhi)
(c)Both are from Mumbai and currently in Delhi
HANDOVER
bull Should not cause a Cut-off(CALLDROP)
bull Maximum Duration is 60 ms
bull Basic Reason
1 Quality of the Radio Link
2 Load Balancing(MSCBSC to decide ndashTraffic in an Cell ndashHigh)
bull Error Rates and Signal Levels
Four Types of HandOverbull Intra-Cell Handover
--Within a cellbull Inter-Cell Intra-Bsc Handover
--Cell to another cell ndashBscbull Inter-BscIntra-Msc Handover
--Bsc to Bsc -gtMscbull Inter Msc Handover
--Msc to Msc
Types of Handover
Signal Flow-Inter-BSCIntra-MSC
SECURITY
bull Security to AUC and SIM
bull A3 ndashAuthentication
bull A5 ndashEncryption
bull A8 ndashGeneration of Cipher Key
Authentication
bull Any Service ndashGSM
bull Authentication is based on
Individual Authentication Key
IMSI
A3
bull Challenge-Response Method
Generating a Random Number
Authentication
Key Generation and Encryption
GPRS
bull Packet Mode Transfer
bull Small MediumHigh Volumes of Data
bull BroadcastingMulticastingUnicasting
bull Services are charged on Volume of Usages
bull ldquoAlways Onrdquo-No connection to setup prior to data transfer
GPRS-General Packet Radio Service
GPRS Architecture and Interfaces
GPRS ndashProtocol Architecture
GPRSbull GPRS Tunnelling Protocol (GTP)
All data between GSN is transferred between GTP
GTP -gt Reliable TCPUnreilable UDPbull Sub Network Dependent Convergence Protocol (SNDCP)
Used between SGSN and MS ndashto adapt different characterstics
bull LLC ndashHigh Reliability of Packet Transfer bull Base Station Subsystem GPRS Protocol (BSSGP)
-gtConvey Routing amp QOS related information between BSS and SGSN
bull RLC ndashReliable Link bull MAC ndashMapping LLC Frames into GSM Channels
NSS
bull Msc ndashHigh Performance Digital ISDN Switches
bull GMscndashGateway Msc-Fixed
bull SS7-Standard SIGNALLING SYSTEM
-gt Connection Setup Release amp HO
HLRbull STATIC
bull IMSI
bull CALL FORWARDINGROAMING
bull Dynamic Information (Location Area (LA))
bull MSRN --Mobile SubsciberRoaming Number
bull MSLeave lt- Update
VLR
bull Dynamic Database
bull Associated with each Msc
bull MS1048773CurrentLocation Area
bull Copies from HLR
Operation Subsystembull OMC -Traffic Moinitoring -Status Report of NW Entities -AccountingampBillingSecurity MGT
bull AUC -User Identity and Data Transmission
bull EIR -DB for IMEIBlack listWhiteListGray List -Synchronization not done
GSM
Radio Interfacebull Um interface-MultiplexingMedia Access
bull FDD ndashSeparate UPampDOWN Links
bull 1-124 Channels each 200 Khz
bull 32 Channels for organization Data
bull Remaining for Customer Use -90 channels
bull 248 Channels ndashadditionaly seperated by GSM TDMA Frame
bull Each 200Khz carrier is divided into frames
Contd
bull Duration of each frame is 4615 ms
bull 8 GSM Time Slots ( 577 μs)
bull Data ndashBURSTS(NORMAL BURST)
bull Each Burst is 5465 μs long amp remaining is 305 μs(GuardSpace)
bull Whole Data is 15625 bit with 577 μs
GSM-TDMAFDMA
GSM FDMATDMA
bull Tail-gt Enhance the Receiver Performance
bull Training Sequence-gt Select Strongest Signal(mpp)
bull Flag S -gt Data Field contains user data or Network Data
Other Burstsbull Frequency Correction Burst
MS to correct local oscillator to avoid interferences in neighbor channel
bull Synchronization Burst
synchronization burst (BTS-MS)
bull Access Burst
Initial Connection Setup (BTS-MS)
bull Dummy Burst
if no data is available for slot
GSM Logical Channels
bull Traffic Channels (TCH)
(i) Full Rate (ii) Half Rate
bull Control Channels
-gtControl Medium Access
-gtAllocation of Traffic Channels
-gtMobility Management
Control Channels bull Broadcast Control Channel (BCCH)
-gtBTS signals all information to MS Synchronization in time(Cell) ndashSCH Frequency Correction (Cell) -FCH
bull Common Control Channel (CCCH)
1048773Connection Setup(MS-BTS) Paging Channel(PCH)-BTS-Pages-MS Random Access Channel(RAC)-MS-BTS
bull Dedicated Control Channel (DCCH)
-gt Bidirectional MS uses Stand-Alone Dedicated Control Channel(SDCCH) with low data rate for signaling if (Ms using TCH not estabilished ndashBTS) TCH amp SDCCH is associated with SLOW ASSOCIATED DEDICATED CONTROL CHANNEL(SACCH)
GSMHIERARCHY OF FRAMES
GSM PROTOCOL LAYERS FOR SIGNALING
GSM PROTOCOL LAYERS FOR SIGNALING
bull Layer ndashI (Radio Specific Function)
Creation of Bursts
Multiplexing of Bursts in TDMA Frame
Synchronization
Detection of Idle Channel
Measurement of Channel Quality
Synchronization
(Correction ndashIndividual path delay)
Contd
bull BTS ndashMS (RTT is short for near and 25ms for 35kms)
bull VAD(Voice Activity Detection) Scheme for voice transmission
bull During Period of Silence COMFORT NOISE to fake a connection
Signaling Between two Entities-Layer 2
bull LAPD
(Link Access Procedure for D-Channel)
-gt Reliable Data Transfer over connections
-gt Flow controlSegmentationampReassembly of Data
-gt ACK for Data Transfer
Layer ndash3Sub Layers
bull RR-Radio Resource Management(RR)
(Part of BTS Supported by BTSM)
SetupMaintenance amp Release of Radio Channels
bull MM-Mobility Management (MM)
RegistrationAuthenticationIdentification
Location UpdatingTMSI(IMSI)
LAYER -3 Contdhellip
bull CALL MANAGEMENT (CM)
(i) Call Control
(ii) SMS ndashSDCCH SACCH
(iii) Supplementary Services
MSC
bull PULSE CODE MODULATION
bull SS7 (BSC-MSC)-gtTransfer all MGT info between MSC(HLRVLRAUCEIROMC)
bull BSSAP An MSC can also control a BSS (via) BSS Application Part
Localization and Callingbull GSM System-Automatic Worldwide
Localization of users
bull Periodic Location Updates
bull ROAMING
Changing VLRrsquos with uninterrupted Availability of all services
One Provider Two providers in a CountryTwo providers in a two different countries
Locating an MSbull Mobile Station International ISDN Number(MSISDN)
CC + National Destination Code + Sub Number(eg+49 179 1234567)
bull IMSI- Internal unique identification of a subscriberbull TMSI- current VLR- valid temporarily- LA- VLR changes
periodicallybull Mobile Station Roaming Number (MSRN)
-Hides the identity and location of the user
-VLR-Generates on request from MSC ndashHLR
-VCC ndashVNDC ndashSN
-MSRN helps HLR to find user for an incoming call
Mobile Terminated
Visitor Location Register (VLR)
bull Suppose your mobile is registered in Mumbai and you are currently in Delhi
1What happens when your friend in Mumbai calls you
Mobile Originated Call
Visitor Location Register (VLR)
bull 2 What happens when you call to a friend
(a)In the home network (Mumbai)
(b)In the visitor network (Delhi)
(c)Both are from Mumbai and currently in Delhi
HANDOVER
bull Should not cause a Cut-off(CALLDROP)
bull Maximum Duration is 60 ms
bull Basic Reason
1 Quality of the Radio Link
2 Load Balancing(MSCBSC to decide ndashTraffic in an Cell ndashHigh)
bull Error Rates and Signal Levels
Four Types of HandOverbull Intra-Cell Handover
--Within a cellbull Inter-Cell Intra-Bsc Handover
--Cell to another cell ndashBscbull Inter-BscIntra-Msc Handover
--Bsc to Bsc -gtMscbull Inter Msc Handover
--Msc to Msc
Types of Handover
Signal Flow-Inter-BSCIntra-MSC
SECURITY
bull Security to AUC and SIM
bull A3 ndashAuthentication
bull A5 ndashEncryption
bull A8 ndashGeneration of Cipher Key
Authentication
bull Any Service ndashGSM
bull Authentication is based on
Individual Authentication Key
IMSI
A3
bull Challenge-Response Method
Generating a Random Number
Authentication
Key Generation and Encryption
GPRS
bull Packet Mode Transfer
bull Small MediumHigh Volumes of Data
bull BroadcastingMulticastingUnicasting
bull Services are charged on Volume of Usages
bull ldquoAlways Onrdquo-No connection to setup prior to data transfer
GPRS-General Packet Radio Service
GPRS Architecture and Interfaces
GPRS ndashProtocol Architecture
GPRSbull GPRS Tunnelling Protocol (GTP)
All data between GSN is transferred between GTP
GTP -gt Reliable TCPUnreilable UDPbull Sub Network Dependent Convergence Protocol (SNDCP)
Used between SGSN and MS ndashto adapt different characterstics
bull LLC ndashHigh Reliability of Packet Transfer bull Base Station Subsystem GPRS Protocol (BSSGP)
-gtConvey Routing amp QOS related information between BSS and SGSN
bull RLC ndashReliable Link bull MAC ndashMapping LLC Frames into GSM Channels
HLRbull STATIC
bull IMSI
bull CALL FORWARDINGROAMING
bull Dynamic Information (Location Area (LA))
bull MSRN --Mobile SubsciberRoaming Number
bull MSLeave lt- Update
VLR
bull Dynamic Database
bull Associated with each Msc
bull MS1048773CurrentLocation Area
bull Copies from HLR
Operation Subsystembull OMC -Traffic Moinitoring -Status Report of NW Entities -AccountingampBillingSecurity MGT
bull AUC -User Identity and Data Transmission
bull EIR -DB for IMEIBlack listWhiteListGray List -Synchronization not done
GSM
Radio Interfacebull Um interface-MultiplexingMedia Access
bull FDD ndashSeparate UPampDOWN Links
bull 1-124 Channels each 200 Khz
bull 32 Channels for organization Data
bull Remaining for Customer Use -90 channels
bull 248 Channels ndashadditionaly seperated by GSM TDMA Frame
bull Each 200Khz carrier is divided into frames
Contd
bull Duration of each frame is 4615 ms
bull 8 GSM Time Slots ( 577 μs)
bull Data ndashBURSTS(NORMAL BURST)
bull Each Burst is 5465 μs long amp remaining is 305 μs(GuardSpace)
bull Whole Data is 15625 bit with 577 μs
GSM-TDMAFDMA
GSM FDMATDMA
bull Tail-gt Enhance the Receiver Performance
bull Training Sequence-gt Select Strongest Signal(mpp)
bull Flag S -gt Data Field contains user data or Network Data
Other Burstsbull Frequency Correction Burst
MS to correct local oscillator to avoid interferences in neighbor channel
bull Synchronization Burst
synchronization burst (BTS-MS)
bull Access Burst
Initial Connection Setup (BTS-MS)
bull Dummy Burst
if no data is available for slot
GSM Logical Channels
bull Traffic Channels (TCH)
(i) Full Rate (ii) Half Rate
bull Control Channels
-gtControl Medium Access
-gtAllocation of Traffic Channels
-gtMobility Management
Control Channels bull Broadcast Control Channel (BCCH)
-gtBTS signals all information to MS Synchronization in time(Cell) ndashSCH Frequency Correction (Cell) -FCH
bull Common Control Channel (CCCH)
1048773Connection Setup(MS-BTS) Paging Channel(PCH)-BTS-Pages-MS Random Access Channel(RAC)-MS-BTS
bull Dedicated Control Channel (DCCH)
-gt Bidirectional MS uses Stand-Alone Dedicated Control Channel(SDCCH) with low data rate for signaling if (Ms using TCH not estabilished ndashBTS) TCH amp SDCCH is associated with SLOW ASSOCIATED DEDICATED CONTROL CHANNEL(SACCH)
GSMHIERARCHY OF FRAMES
GSM PROTOCOL LAYERS FOR SIGNALING
GSM PROTOCOL LAYERS FOR SIGNALING
bull Layer ndashI (Radio Specific Function)
Creation of Bursts
Multiplexing of Bursts in TDMA Frame
Synchronization
Detection of Idle Channel
Measurement of Channel Quality
Synchronization
(Correction ndashIndividual path delay)
Contd
bull BTS ndashMS (RTT is short for near and 25ms for 35kms)
bull VAD(Voice Activity Detection) Scheme for voice transmission
bull During Period of Silence COMFORT NOISE to fake a connection
Signaling Between two Entities-Layer 2
bull LAPD
(Link Access Procedure for D-Channel)
-gt Reliable Data Transfer over connections
-gt Flow controlSegmentationampReassembly of Data
-gt ACK for Data Transfer
Layer ndash3Sub Layers
bull RR-Radio Resource Management(RR)
(Part of BTS Supported by BTSM)
SetupMaintenance amp Release of Radio Channels
bull MM-Mobility Management (MM)
RegistrationAuthenticationIdentification
Location UpdatingTMSI(IMSI)
LAYER -3 Contdhellip
bull CALL MANAGEMENT (CM)
(i) Call Control
(ii) SMS ndashSDCCH SACCH
(iii) Supplementary Services
MSC
bull PULSE CODE MODULATION
bull SS7 (BSC-MSC)-gtTransfer all MGT info between MSC(HLRVLRAUCEIROMC)
bull BSSAP An MSC can also control a BSS (via) BSS Application Part
Localization and Callingbull GSM System-Automatic Worldwide
Localization of users
bull Periodic Location Updates
bull ROAMING
Changing VLRrsquos with uninterrupted Availability of all services
One Provider Two providers in a CountryTwo providers in a two different countries
Locating an MSbull Mobile Station International ISDN Number(MSISDN)
CC + National Destination Code + Sub Number(eg+49 179 1234567)
bull IMSI- Internal unique identification of a subscriberbull TMSI- current VLR- valid temporarily- LA- VLR changes
periodicallybull Mobile Station Roaming Number (MSRN)
-Hides the identity and location of the user
-VLR-Generates on request from MSC ndashHLR
-VCC ndashVNDC ndashSN
-MSRN helps HLR to find user for an incoming call
Mobile Terminated
Visitor Location Register (VLR)
bull Suppose your mobile is registered in Mumbai and you are currently in Delhi
1What happens when your friend in Mumbai calls you
Mobile Originated Call
Visitor Location Register (VLR)
bull 2 What happens when you call to a friend
(a)In the home network (Mumbai)
(b)In the visitor network (Delhi)
(c)Both are from Mumbai and currently in Delhi
HANDOVER
bull Should not cause a Cut-off(CALLDROP)
bull Maximum Duration is 60 ms
bull Basic Reason
1 Quality of the Radio Link
2 Load Balancing(MSCBSC to decide ndashTraffic in an Cell ndashHigh)
bull Error Rates and Signal Levels
Four Types of HandOverbull Intra-Cell Handover
--Within a cellbull Inter-Cell Intra-Bsc Handover
--Cell to another cell ndashBscbull Inter-BscIntra-Msc Handover
--Bsc to Bsc -gtMscbull Inter Msc Handover
--Msc to Msc
Types of Handover
Signal Flow-Inter-BSCIntra-MSC
SECURITY
bull Security to AUC and SIM
bull A3 ndashAuthentication
bull A5 ndashEncryption
bull A8 ndashGeneration of Cipher Key
Authentication
bull Any Service ndashGSM
bull Authentication is based on
Individual Authentication Key
IMSI
A3
bull Challenge-Response Method
Generating a Random Number
Authentication
Key Generation and Encryption
GPRS
bull Packet Mode Transfer
bull Small MediumHigh Volumes of Data
bull BroadcastingMulticastingUnicasting
bull Services are charged on Volume of Usages
bull ldquoAlways Onrdquo-No connection to setup prior to data transfer
GPRS-General Packet Radio Service
GPRS Architecture and Interfaces
GPRS ndashProtocol Architecture
GPRSbull GPRS Tunnelling Protocol (GTP)
All data between GSN is transferred between GTP
GTP -gt Reliable TCPUnreilable UDPbull Sub Network Dependent Convergence Protocol (SNDCP)
Used between SGSN and MS ndashto adapt different characterstics
bull LLC ndashHigh Reliability of Packet Transfer bull Base Station Subsystem GPRS Protocol (BSSGP)
-gtConvey Routing amp QOS related information between BSS and SGSN
bull RLC ndashReliable Link bull MAC ndashMapping LLC Frames into GSM Channels
VLR
bull Dynamic Database
bull Associated with each Msc
bull MS1048773CurrentLocation Area
bull Copies from HLR
Operation Subsystembull OMC -Traffic Moinitoring -Status Report of NW Entities -AccountingampBillingSecurity MGT
bull AUC -User Identity and Data Transmission
bull EIR -DB for IMEIBlack listWhiteListGray List -Synchronization not done
GSM
Radio Interfacebull Um interface-MultiplexingMedia Access
bull FDD ndashSeparate UPampDOWN Links
bull 1-124 Channels each 200 Khz
bull 32 Channels for organization Data
bull Remaining for Customer Use -90 channels
bull 248 Channels ndashadditionaly seperated by GSM TDMA Frame
bull Each 200Khz carrier is divided into frames
Contd
bull Duration of each frame is 4615 ms
bull 8 GSM Time Slots ( 577 μs)
bull Data ndashBURSTS(NORMAL BURST)
bull Each Burst is 5465 μs long amp remaining is 305 μs(GuardSpace)
bull Whole Data is 15625 bit with 577 μs
GSM-TDMAFDMA
GSM FDMATDMA
bull Tail-gt Enhance the Receiver Performance
bull Training Sequence-gt Select Strongest Signal(mpp)
bull Flag S -gt Data Field contains user data or Network Data
Other Burstsbull Frequency Correction Burst
MS to correct local oscillator to avoid interferences in neighbor channel
bull Synchronization Burst
synchronization burst (BTS-MS)
bull Access Burst
Initial Connection Setup (BTS-MS)
bull Dummy Burst
if no data is available for slot
GSM Logical Channels
bull Traffic Channels (TCH)
(i) Full Rate (ii) Half Rate
bull Control Channels
-gtControl Medium Access
-gtAllocation of Traffic Channels
-gtMobility Management
Control Channels bull Broadcast Control Channel (BCCH)
-gtBTS signals all information to MS Synchronization in time(Cell) ndashSCH Frequency Correction (Cell) -FCH
bull Common Control Channel (CCCH)
1048773Connection Setup(MS-BTS) Paging Channel(PCH)-BTS-Pages-MS Random Access Channel(RAC)-MS-BTS
bull Dedicated Control Channel (DCCH)
-gt Bidirectional MS uses Stand-Alone Dedicated Control Channel(SDCCH) with low data rate for signaling if (Ms using TCH not estabilished ndashBTS) TCH amp SDCCH is associated with SLOW ASSOCIATED DEDICATED CONTROL CHANNEL(SACCH)
GSMHIERARCHY OF FRAMES
GSM PROTOCOL LAYERS FOR SIGNALING
GSM PROTOCOL LAYERS FOR SIGNALING
bull Layer ndashI (Radio Specific Function)
Creation of Bursts
Multiplexing of Bursts in TDMA Frame
Synchronization
Detection of Idle Channel
Measurement of Channel Quality
Synchronization
(Correction ndashIndividual path delay)
Contd
bull BTS ndashMS (RTT is short for near and 25ms for 35kms)
bull VAD(Voice Activity Detection) Scheme for voice transmission
bull During Period of Silence COMFORT NOISE to fake a connection
Signaling Between two Entities-Layer 2
bull LAPD
(Link Access Procedure for D-Channel)
-gt Reliable Data Transfer over connections
-gt Flow controlSegmentationampReassembly of Data
-gt ACK for Data Transfer
Layer ndash3Sub Layers
bull RR-Radio Resource Management(RR)
(Part of BTS Supported by BTSM)
SetupMaintenance amp Release of Radio Channels
bull MM-Mobility Management (MM)
RegistrationAuthenticationIdentification
Location UpdatingTMSI(IMSI)
LAYER -3 Contdhellip
bull CALL MANAGEMENT (CM)
(i) Call Control
(ii) SMS ndashSDCCH SACCH
(iii) Supplementary Services
MSC
bull PULSE CODE MODULATION
bull SS7 (BSC-MSC)-gtTransfer all MGT info between MSC(HLRVLRAUCEIROMC)
bull BSSAP An MSC can also control a BSS (via) BSS Application Part
Localization and Callingbull GSM System-Automatic Worldwide
Localization of users
bull Periodic Location Updates
bull ROAMING
Changing VLRrsquos with uninterrupted Availability of all services
One Provider Two providers in a CountryTwo providers in a two different countries
Locating an MSbull Mobile Station International ISDN Number(MSISDN)
CC + National Destination Code + Sub Number(eg+49 179 1234567)
bull IMSI- Internal unique identification of a subscriberbull TMSI- current VLR- valid temporarily- LA- VLR changes
periodicallybull Mobile Station Roaming Number (MSRN)
-Hides the identity and location of the user
-VLR-Generates on request from MSC ndashHLR
-VCC ndashVNDC ndashSN
-MSRN helps HLR to find user for an incoming call
Mobile Terminated
Visitor Location Register (VLR)
bull Suppose your mobile is registered in Mumbai and you are currently in Delhi
1What happens when your friend in Mumbai calls you
Mobile Originated Call
Visitor Location Register (VLR)
bull 2 What happens when you call to a friend
(a)In the home network (Mumbai)
(b)In the visitor network (Delhi)
(c)Both are from Mumbai and currently in Delhi
HANDOVER
bull Should not cause a Cut-off(CALLDROP)
bull Maximum Duration is 60 ms
bull Basic Reason
1 Quality of the Radio Link
2 Load Balancing(MSCBSC to decide ndashTraffic in an Cell ndashHigh)
bull Error Rates and Signal Levels
Four Types of HandOverbull Intra-Cell Handover
--Within a cellbull Inter-Cell Intra-Bsc Handover
--Cell to another cell ndashBscbull Inter-BscIntra-Msc Handover
--Bsc to Bsc -gtMscbull Inter Msc Handover
--Msc to Msc
Types of Handover
Signal Flow-Inter-BSCIntra-MSC
SECURITY
bull Security to AUC and SIM
bull A3 ndashAuthentication
bull A5 ndashEncryption
bull A8 ndashGeneration of Cipher Key
Authentication
bull Any Service ndashGSM
bull Authentication is based on
Individual Authentication Key
IMSI
A3
bull Challenge-Response Method
Generating a Random Number
Authentication
Key Generation and Encryption
GPRS
bull Packet Mode Transfer
bull Small MediumHigh Volumes of Data
bull BroadcastingMulticastingUnicasting
bull Services are charged on Volume of Usages
bull ldquoAlways Onrdquo-No connection to setup prior to data transfer
GPRS-General Packet Radio Service
GPRS Architecture and Interfaces
GPRS ndashProtocol Architecture
GPRSbull GPRS Tunnelling Protocol (GTP)
All data between GSN is transferred between GTP
GTP -gt Reliable TCPUnreilable UDPbull Sub Network Dependent Convergence Protocol (SNDCP)
Used between SGSN and MS ndashto adapt different characterstics
bull LLC ndashHigh Reliability of Packet Transfer bull Base Station Subsystem GPRS Protocol (BSSGP)
-gtConvey Routing amp QOS related information between BSS and SGSN
bull RLC ndashReliable Link bull MAC ndashMapping LLC Frames into GSM Channels
Operation Subsystembull OMC -Traffic Moinitoring -Status Report of NW Entities -AccountingampBillingSecurity MGT
bull AUC -User Identity and Data Transmission
bull EIR -DB for IMEIBlack listWhiteListGray List -Synchronization not done
GSM
Radio Interfacebull Um interface-MultiplexingMedia Access
bull FDD ndashSeparate UPampDOWN Links
bull 1-124 Channels each 200 Khz
bull 32 Channels for organization Data
bull Remaining for Customer Use -90 channels
bull 248 Channels ndashadditionaly seperated by GSM TDMA Frame
bull Each 200Khz carrier is divided into frames
Contd
bull Duration of each frame is 4615 ms
bull 8 GSM Time Slots ( 577 μs)
bull Data ndashBURSTS(NORMAL BURST)
bull Each Burst is 5465 μs long amp remaining is 305 μs(GuardSpace)
bull Whole Data is 15625 bit with 577 μs
GSM-TDMAFDMA
GSM FDMATDMA
bull Tail-gt Enhance the Receiver Performance
bull Training Sequence-gt Select Strongest Signal(mpp)
bull Flag S -gt Data Field contains user data or Network Data
Other Burstsbull Frequency Correction Burst
MS to correct local oscillator to avoid interferences in neighbor channel
bull Synchronization Burst
synchronization burst (BTS-MS)
bull Access Burst
Initial Connection Setup (BTS-MS)
bull Dummy Burst
if no data is available for slot
GSM Logical Channels
bull Traffic Channels (TCH)
(i) Full Rate (ii) Half Rate
bull Control Channels
-gtControl Medium Access
-gtAllocation of Traffic Channels
-gtMobility Management
Control Channels bull Broadcast Control Channel (BCCH)
-gtBTS signals all information to MS Synchronization in time(Cell) ndashSCH Frequency Correction (Cell) -FCH
bull Common Control Channel (CCCH)
1048773Connection Setup(MS-BTS) Paging Channel(PCH)-BTS-Pages-MS Random Access Channel(RAC)-MS-BTS
bull Dedicated Control Channel (DCCH)
-gt Bidirectional MS uses Stand-Alone Dedicated Control Channel(SDCCH) with low data rate for signaling if (Ms using TCH not estabilished ndashBTS) TCH amp SDCCH is associated with SLOW ASSOCIATED DEDICATED CONTROL CHANNEL(SACCH)
GSMHIERARCHY OF FRAMES
GSM PROTOCOL LAYERS FOR SIGNALING
GSM PROTOCOL LAYERS FOR SIGNALING
bull Layer ndashI (Radio Specific Function)
Creation of Bursts
Multiplexing of Bursts in TDMA Frame
Synchronization
Detection of Idle Channel
Measurement of Channel Quality
Synchronization
(Correction ndashIndividual path delay)
Contd
bull BTS ndashMS (RTT is short for near and 25ms for 35kms)
bull VAD(Voice Activity Detection) Scheme for voice transmission
bull During Period of Silence COMFORT NOISE to fake a connection
Signaling Between two Entities-Layer 2
bull LAPD
(Link Access Procedure for D-Channel)
-gt Reliable Data Transfer over connections
-gt Flow controlSegmentationampReassembly of Data
-gt ACK for Data Transfer
Layer ndash3Sub Layers
bull RR-Radio Resource Management(RR)
(Part of BTS Supported by BTSM)
SetupMaintenance amp Release of Radio Channels
bull MM-Mobility Management (MM)
RegistrationAuthenticationIdentification
Location UpdatingTMSI(IMSI)
LAYER -3 Contdhellip
bull CALL MANAGEMENT (CM)
(i) Call Control
(ii) SMS ndashSDCCH SACCH
(iii) Supplementary Services
MSC
bull PULSE CODE MODULATION
bull SS7 (BSC-MSC)-gtTransfer all MGT info between MSC(HLRVLRAUCEIROMC)
bull BSSAP An MSC can also control a BSS (via) BSS Application Part
Localization and Callingbull GSM System-Automatic Worldwide
Localization of users
bull Periodic Location Updates
bull ROAMING
Changing VLRrsquos with uninterrupted Availability of all services
One Provider Two providers in a CountryTwo providers in a two different countries
Locating an MSbull Mobile Station International ISDN Number(MSISDN)
CC + National Destination Code + Sub Number(eg+49 179 1234567)
bull IMSI- Internal unique identification of a subscriberbull TMSI- current VLR- valid temporarily- LA- VLR changes
periodicallybull Mobile Station Roaming Number (MSRN)
-Hides the identity and location of the user
-VLR-Generates on request from MSC ndashHLR
-VCC ndashVNDC ndashSN
-MSRN helps HLR to find user for an incoming call
Mobile Terminated
Visitor Location Register (VLR)
bull Suppose your mobile is registered in Mumbai and you are currently in Delhi
1What happens when your friend in Mumbai calls you
Mobile Originated Call
Visitor Location Register (VLR)
bull 2 What happens when you call to a friend
(a)In the home network (Mumbai)
(b)In the visitor network (Delhi)
(c)Both are from Mumbai and currently in Delhi
HANDOVER
bull Should not cause a Cut-off(CALLDROP)
bull Maximum Duration is 60 ms
bull Basic Reason
1 Quality of the Radio Link
2 Load Balancing(MSCBSC to decide ndashTraffic in an Cell ndashHigh)
bull Error Rates and Signal Levels
Four Types of HandOverbull Intra-Cell Handover
--Within a cellbull Inter-Cell Intra-Bsc Handover
--Cell to another cell ndashBscbull Inter-BscIntra-Msc Handover
--Bsc to Bsc -gtMscbull Inter Msc Handover
--Msc to Msc
Types of Handover
Signal Flow-Inter-BSCIntra-MSC
SECURITY
bull Security to AUC and SIM
bull A3 ndashAuthentication
bull A5 ndashEncryption
bull A8 ndashGeneration of Cipher Key
Authentication
bull Any Service ndashGSM
bull Authentication is based on
Individual Authentication Key
IMSI
A3
bull Challenge-Response Method
Generating a Random Number
Authentication
Key Generation and Encryption
GPRS
bull Packet Mode Transfer
bull Small MediumHigh Volumes of Data
bull BroadcastingMulticastingUnicasting
bull Services are charged on Volume of Usages
bull ldquoAlways Onrdquo-No connection to setup prior to data transfer
GPRS-General Packet Radio Service
GPRS Architecture and Interfaces
GPRS ndashProtocol Architecture
GPRSbull GPRS Tunnelling Protocol (GTP)
All data between GSN is transferred between GTP
GTP -gt Reliable TCPUnreilable UDPbull Sub Network Dependent Convergence Protocol (SNDCP)
Used between SGSN and MS ndashto adapt different characterstics
bull LLC ndashHigh Reliability of Packet Transfer bull Base Station Subsystem GPRS Protocol (BSSGP)
-gtConvey Routing amp QOS related information between BSS and SGSN
bull RLC ndashReliable Link bull MAC ndashMapping LLC Frames into GSM Channels
GSM
Radio Interfacebull Um interface-MultiplexingMedia Access
bull FDD ndashSeparate UPampDOWN Links
bull 1-124 Channels each 200 Khz
bull 32 Channels for organization Data
bull Remaining for Customer Use -90 channels
bull 248 Channels ndashadditionaly seperated by GSM TDMA Frame
bull Each 200Khz carrier is divided into frames
Contd
bull Duration of each frame is 4615 ms
bull 8 GSM Time Slots ( 577 μs)
bull Data ndashBURSTS(NORMAL BURST)
bull Each Burst is 5465 μs long amp remaining is 305 μs(GuardSpace)
bull Whole Data is 15625 bit with 577 μs
GSM-TDMAFDMA
GSM FDMATDMA
bull Tail-gt Enhance the Receiver Performance
bull Training Sequence-gt Select Strongest Signal(mpp)
bull Flag S -gt Data Field contains user data or Network Data
Other Burstsbull Frequency Correction Burst
MS to correct local oscillator to avoid interferences in neighbor channel
bull Synchronization Burst
synchronization burst (BTS-MS)
bull Access Burst
Initial Connection Setup (BTS-MS)
bull Dummy Burst
if no data is available for slot
GSM Logical Channels
bull Traffic Channels (TCH)
(i) Full Rate (ii) Half Rate
bull Control Channels
-gtControl Medium Access
-gtAllocation of Traffic Channels
-gtMobility Management
Control Channels bull Broadcast Control Channel (BCCH)
-gtBTS signals all information to MS Synchronization in time(Cell) ndashSCH Frequency Correction (Cell) -FCH
bull Common Control Channel (CCCH)
1048773Connection Setup(MS-BTS) Paging Channel(PCH)-BTS-Pages-MS Random Access Channel(RAC)-MS-BTS
bull Dedicated Control Channel (DCCH)
-gt Bidirectional MS uses Stand-Alone Dedicated Control Channel(SDCCH) with low data rate for signaling if (Ms using TCH not estabilished ndashBTS) TCH amp SDCCH is associated with SLOW ASSOCIATED DEDICATED CONTROL CHANNEL(SACCH)
GSMHIERARCHY OF FRAMES
GSM PROTOCOL LAYERS FOR SIGNALING
GSM PROTOCOL LAYERS FOR SIGNALING
bull Layer ndashI (Radio Specific Function)
Creation of Bursts
Multiplexing of Bursts in TDMA Frame
Synchronization
Detection of Idle Channel
Measurement of Channel Quality
Synchronization
(Correction ndashIndividual path delay)
Contd
bull BTS ndashMS (RTT is short for near and 25ms for 35kms)
bull VAD(Voice Activity Detection) Scheme for voice transmission
bull During Period of Silence COMFORT NOISE to fake a connection
Signaling Between two Entities-Layer 2
bull LAPD
(Link Access Procedure for D-Channel)
-gt Reliable Data Transfer over connections
-gt Flow controlSegmentationampReassembly of Data
-gt ACK for Data Transfer
Layer ndash3Sub Layers
bull RR-Radio Resource Management(RR)
(Part of BTS Supported by BTSM)
SetupMaintenance amp Release of Radio Channels
bull MM-Mobility Management (MM)
RegistrationAuthenticationIdentification
Location UpdatingTMSI(IMSI)
LAYER -3 Contdhellip
bull CALL MANAGEMENT (CM)
(i) Call Control
(ii) SMS ndashSDCCH SACCH
(iii) Supplementary Services
MSC
bull PULSE CODE MODULATION
bull SS7 (BSC-MSC)-gtTransfer all MGT info between MSC(HLRVLRAUCEIROMC)
bull BSSAP An MSC can also control a BSS (via) BSS Application Part
Localization and Callingbull GSM System-Automatic Worldwide
Localization of users
bull Periodic Location Updates
bull ROAMING
Changing VLRrsquos with uninterrupted Availability of all services
One Provider Two providers in a CountryTwo providers in a two different countries
Locating an MSbull Mobile Station International ISDN Number(MSISDN)
CC + National Destination Code + Sub Number(eg+49 179 1234567)
bull IMSI- Internal unique identification of a subscriberbull TMSI- current VLR- valid temporarily- LA- VLR changes
periodicallybull Mobile Station Roaming Number (MSRN)
-Hides the identity and location of the user
-VLR-Generates on request from MSC ndashHLR
-VCC ndashVNDC ndashSN
-MSRN helps HLR to find user for an incoming call
Mobile Terminated
Visitor Location Register (VLR)
bull Suppose your mobile is registered in Mumbai and you are currently in Delhi
1What happens when your friend in Mumbai calls you
Mobile Originated Call
Visitor Location Register (VLR)
bull 2 What happens when you call to a friend
(a)In the home network (Mumbai)
(b)In the visitor network (Delhi)
(c)Both are from Mumbai and currently in Delhi
HANDOVER
bull Should not cause a Cut-off(CALLDROP)
bull Maximum Duration is 60 ms
bull Basic Reason
1 Quality of the Radio Link
2 Load Balancing(MSCBSC to decide ndashTraffic in an Cell ndashHigh)
bull Error Rates and Signal Levels
Four Types of HandOverbull Intra-Cell Handover
--Within a cellbull Inter-Cell Intra-Bsc Handover
--Cell to another cell ndashBscbull Inter-BscIntra-Msc Handover
--Bsc to Bsc -gtMscbull Inter Msc Handover
--Msc to Msc
Types of Handover
Signal Flow-Inter-BSCIntra-MSC
SECURITY
bull Security to AUC and SIM
bull A3 ndashAuthentication
bull A5 ndashEncryption
bull A8 ndashGeneration of Cipher Key
Authentication
bull Any Service ndashGSM
bull Authentication is based on
Individual Authentication Key
IMSI
A3
bull Challenge-Response Method
Generating a Random Number
Authentication
Key Generation and Encryption
GPRS
bull Packet Mode Transfer
bull Small MediumHigh Volumes of Data
bull BroadcastingMulticastingUnicasting
bull Services are charged on Volume of Usages
bull ldquoAlways Onrdquo-No connection to setup prior to data transfer
GPRS-General Packet Radio Service
GPRS Architecture and Interfaces
GPRS ndashProtocol Architecture
GPRSbull GPRS Tunnelling Protocol (GTP)
All data between GSN is transferred between GTP
GTP -gt Reliable TCPUnreilable UDPbull Sub Network Dependent Convergence Protocol (SNDCP)
Used between SGSN and MS ndashto adapt different characterstics
bull LLC ndashHigh Reliability of Packet Transfer bull Base Station Subsystem GPRS Protocol (BSSGP)
-gtConvey Routing amp QOS related information between BSS and SGSN
bull RLC ndashReliable Link bull MAC ndashMapping LLC Frames into GSM Channels
Radio Interfacebull Um interface-MultiplexingMedia Access
bull FDD ndashSeparate UPampDOWN Links
bull 1-124 Channels each 200 Khz
bull 32 Channels for organization Data
bull Remaining for Customer Use -90 channels
bull 248 Channels ndashadditionaly seperated by GSM TDMA Frame
bull Each 200Khz carrier is divided into frames
Contd
bull Duration of each frame is 4615 ms
bull 8 GSM Time Slots ( 577 μs)
bull Data ndashBURSTS(NORMAL BURST)
bull Each Burst is 5465 μs long amp remaining is 305 μs(GuardSpace)
bull Whole Data is 15625 bit with 577 μs
GSM-TDMAFDMA
GSM FDMATDMA
bull Tail-gt Enhance the Receiver Performance
bull Training Sequence-gt Select Strongest Signal(mpp)
bull Flag S -gt Data Field contains user data or Network Data
Other Burstsbull Frequency Correction Burst
MS to correct local oscillator to avoid interferences in neighbor channel
bull Synchronization Burst
synchronization burst (BTS-MS)
bull Access Burst
Initial Connection Setup (BTS-MS)
bull Dummy Burst
if no data is available for slot
GSM Logical Channels
bull Traffic Channels (TCH)
(i) Full Rate (ii) Half Rate
bull Control Channels
-gtControl Medium Access
-gtAllocation of Traffic Channels
-gtMobility Management
Control Channels bull Broadcast Control Channel (BCCH)
-gtBTS signals all information to MS Synchronization in time(Cell) ndashSCH Frequency Correction (Cell) -FCH
bull Common Control Channel (CCCH)
1048773Connection Setup(MS-BTS) Paging Channel(PCH)-BTS-Pages-MS Random Access Channel(RAC)-MS-BTS
bull Dedicated Control Channel (DCCH)
-gt Bidirectional MS uses Stand-Alone Dedicated Control Channel(SDCCH) with low data rate for signaling if (Ms using TCH not estabilished ndashBTS) TCH amp SDCCH is associated with SLOW ASSOCIATED DEDICATED CONTROL CHANNEL(SACCH)
GSMHIERARCHY OF FRAMES
GSM PROTOCOL LAYERS FOR SIGNALING
GSM PROTOCOL LAYERS FOR SIGNALING
bull Layer ndashI (Radio Specific Function)
Creation of Bursts
Multiplexing of Bursts in TDMA Frame
Synchronization
Detection of Idle Channel
Measurement of Channel Quality
Synchronization
(Correction ndashIndividual path delay)
Contd
bull BTS ndashMS (RTT is short for near and 25ms for 35kms)
bull VAD(Voice Activity Detection) Scheme for voice transmission
bull During Period of Silence COMFORT NOISE to fake a connection
Signaling Between two Entities-Layer 2
bull LAPD
(Link Access Procedure for D-Channel)
-gt Reliable Data Transfer over connections
-gt Flow controlSegmentationampReassembly of Data
-gt ACK for Data Transfer
Layer ndash3Sub Layers
bull RR-Radio Resource Management(RR)
(Part of BTS Supported by BTSM)
SetupMaintenance amp Release of Radio Channels
bull MM-Mobility Management (MM)
RegistrationAuthenticationIdentification
Location UpdatingTMSI(IMSI)
LAYER -3 Contdhellip
bull CALL MANAGEMENT (CM)
(i) Call Control
(ii) SMS ndashSDCCH SACCH
(iii) Supplementary Services
MSC
bull PULSE CODE MODULATION
bull SS7 (BSC-MSC)-gtTransfer all MGT info between MSC(HLRVLRAUCEIROMC)
bull BSSAP An MSC can also control a BSS (via) BSS Application Part
Localization and Callingbull GSM System-Automatic Worldwide
Localization of users
bull Periodic Location Updates
bull ROAMING
Changing VLRrsquos with uninterrupted Availability of all services
One Provider Two providers in a CountryTwo providers in a two different countries
Locating an MSbull Mobile Station International ISDN Number(MSISDN)
CC + National Destination Code + Sub Number(eg+49 179 1234567)
bull IMSI- Internal unique identification of a subscriberbull TMSI- current VLR- valid temporarily- LA- VLR changes
periodicallybull Mobile Station Roaming Number (MSRN)
-Hides the identity and location of the user
-VLR-Generates on request from MSC ndashHLR
-VCC ndashVNDC ndashSN
-MSRN helps HLR to find user for an incoming call
Mobile Terminated
Visitor Location Register (VLR)
bull Suppose your mobile is registered in Mumbai and you are currently in Delhi
1What happens when your friend in Mumbai calls you
Mobile Originated Call
Visitor Location Register (VLR)
bull 2 What happens when you call to a friend
(a)In the home network (Mumbai)
(b)In the visitor network (Delhi)
(c)Both are from Mumbai and currently in Delhi
HANDOVER
bull Should not cause a Cut-off(CALLDROP)
bull Maximum Duration is 60 ms
bull Basic Reason
1 Quality of the Radio Link
2 Load Balancing(MSCBSC to decide ndashTraffic in an Cell ndashHigh)
bull Error Rates and Signal Levels
Four Types of HandOverbull Intra-Cell Handover
--Within a cellbull Inter-Cell Intra-Bsc Handover
--Cell to another cell ndashBscbull Inter-BscIntra-Msc Handover
--Bsc to Bsc -gtMscbull Inter Msc Handover
--Msc to Msc
Types of Handover
Signal Flow-Inter-BSCIntra-MSC
SECURITY
bull Security to AUC and SIM
bull A3 ndashAuthentication
bull A5 ndashEncryption
bull A8 ndashGeneration of Cipher Key
Authentication
bull Any Service ndashGSM
bull Authentication is based on
Individual Authentication Key
IMSI
A3
bull Challenge-Response Method
Generating a Random Number
Authentication
Key Generation and Encryption
GPRS
bull Packet Mode Transfer
bull Small MediumHigh Volumes of Data
bull BroadcastingMulticastingUnicasting
bull Services are charged on Volume of Usages
bull ldquoAlways Onrdquo-No connection to setup prior to data transfer
GPRS-General Packet Radio Service
GPRS Architecture and Interfaces
GPRS ndashProtocol Architecture
GPRSbull GPRS Tunnelling Protocol (GTP)
All data between GSN is transferred between GTP
GTP -gt Reliable TCPUnreilable UDPbull Sub Network Dependent Convergence Protocol (SNDCP)
Used between SGSN and MS ndashto adapt different characterstics
bull LLC ndashHigh Reliability of Packet Transfer bull Base Station Subsystem GPRS Protocol (BSSGP)
-gtConvey Routing amp QOS related information between BSS and SGSN
bull RLC ndashReliable Link bull MAC ndashMapping LLC Frames into GSM Channels
Contd
bull Duration of each frame is 4615 ms
bull 8 GSM Time Slots ( 577 μs)
bull Data ndashBURSTS(NORMAL BURST)
bull Each Burst is 5465 μs long amp remaining is 305 μs(GuardSpace)
bull Whole Data is 15625 bit with 577 μs
GSM-TDMAFDMA
GSM FDMATDMA
bull Tail-gt Enhance the Receiver Performance
bull Training Sequence-gt Select Strongest Signal(mpp)
bull Flag S -gt Data Field contains user data or Network Data
Other Burstsbull Frequency Correction Burst
MS to correct local oscillator to avoid interferences in neighbor channel
bull Synchronization Burst
synchronization burst (BTS-MS)
bull Access Burst
Initial Connection Setup (BTS-MS)
bull Dummy Burst
if no data is available for slot
GSM Logical Channels
bull Traffic Channels (TCH)
(i) Full Rate (ii) Half Rate
bull Control Channels
-gtControl Medium Access
-gtAllocation of Traffic Channels
-gtMobility Management
Control Channels bull Broadcast Control Channel (BCCH)
-gtBTS signals all information to MS Synchronization in time(Cell) ndashSCH Frequency Correction (Cell) -FCH
bull Common Control Channel (CCCH)
1048773Connection Setup(MS-BTS) Paging Channel(PCH)-BTS-Pages-MS Random Access Channel(RAC)-MS-BTS
bull Dedicated Control Channel (DCCH)
-gt Bidirectional MS uses Stand-Alone Dedicated Control Channel(SDCCH) with low data rate for signaling if (Ms using TCH not estabilished ndashBTS) TCH amp SDCCH is associated with SLOW ASSOCIATED DEDICATED CONTROL CHANNEL(SACCH)
GSMHIERARCHY OF FRAMES
GSM PROTOCOL LAYERS FOR SIGNALING
GSM PROTOCOL LAYERS FOR SIGNALING
bull Layer ndashI (Radio Specific Function)
Creation of Bursts
Multiplexing of Bursts in TDMA Frame
Synchronization
Detection of Idle Channel
Measurement of Channel Quality
Synchronization
(Correction ndashIndividual path delay)
Contd
bull BTS ndashMS (RTT is short for near and 25ms for 35kms)
bull VAD(Voice Activity Detection) Scheme for voice transmission
bull During Period of Silence COMFORT NOISE to fake a connection
Signaling Between two Entities-Layer 2
bull LAPD
(Link Access Procedure for D-Channel)
-gt Reliable Data Transfer over connections
-gt Flow controlSegmentationampReassembly of Data
-gt ACK for Data Transfer
Layer ndash3Sub Layers
bull RR-Radio Resource Management(RR)
(Part of BTS Supported by BTSM)
SetupMaintenance amp Release of Radio Channels
bull MM-Mobility Management (MM)
RegistrationAuthenticationIdentification
Location UpdatingTMSI(IMSI)
LAYER -3 Contdhellip
bull CALL MANAGEMENT (CM)
(i) Call Control
(ii) SMS ndashSDCCH SACCH
(iii) Supplementary Services
MSC
bull PULSE CODE MODULATION
bull SS7 (BSC-MSC)-gtTransfer all MGT info between MSC(HLRVLRAUCEIROMC)
bull BSSAP An MSC can also control a BSS (via) BSS Application Part
Localization and Callingbull GSM System-Automatic Worldwide
Localization of users
bull Periodic Location Updates
bull ROAMING
Changing VLRrsquos with uninterrupted Availability of all services
One Provider Two providers in a CountryTwo providers in a two different countries
Locating an MSbull Mobile Station International ISDN Number(MSISDN)
CC + National Destination Code + Sub Number(eg+49 179 1234567)
bull IMSI- Internal unique identification of a subscriberbull TMSI- current VLR- valid temporarily- LA- VLR changes
periodicallybull Mobile Station Roaming Number (MSRN)
-Hides the identity and location of the user
-VLR-Generates on request from MSC ndashHLR
-VCC ndashVNDC ndashSN
-MSRN helps HLR to find user for an incoming call
Mobile Terminated
Visitor Location Register (VLR)
bull Suppose your mobile is registered in Mumbai and you are currently in Delhi
1What happens when your friend in Mumbai calls you
Mobile Originated Call
Visitor Location Register (VLR)
bull 2 What happens when you call to a friend
(a)In the home network (Mumbai)
(b)In the visitor network (Delhi)
(c)Both are from Mumbai and currently in Delhi
HANDOVER
bull Should not cause a Cut-off(CALLDROP)
bull Maximum Duration is 60 ms
bull Basic Reason
1 Quality of the Radio Link
2 Load Balancing(MSCBSC to decide ndashTraffic in an Cell ndashHigh)
bull Error Rates and Signal Levels
Four Types of HandOverbull Intra-Cell Handover
--Within a cellbull Inter-Cell Intra-Bsc Handover
--Cell to another cell ndashBscbull Inter-BscIntra-Msc Handover
--Bsc to Bsc -gtMscbull Inter Msc Handover
--Msc to Msc
Types of Handover
Signal Flow-Inter-BSCIntra-MSC
SECURITY
bull Security to AUC and SIM
bull A3 ndashAuthentication
bull A5 ndashEncryption
bull A8 ndashGeneration of Cipher Key
Authentication
bull Any Service ndashGSM
bull Authentication is based on
Individual Authentication Key
IMSI
A3
bull Challenge-Response Method
Generating a Random Number
Authentication
Key Generation and Encryption
GPRS
bull Packet Mode Transfer
bull Small MediumHigh Volumes of Data
bull BroadcastingMulticastingUnicasting
bull Services are charged on Volume of Usages
bull ldquoAlways Onrdquo-No connection to setup prior to data transfer
GPRS-General Packet Radio Service
GPRS Architecture and Interfaces
GPRS ndashProtocol Architecture
GPRSbull GPRS Tunnelling Protocol (GTP)
All data between GSN is transferred between GTP
GTP -gt Reliable TCPUnreilable UDPbull Sub Network Dependent Convergence Protocol (SNDCP)
Used between SGSN and MS ndashto adapt different characterstics
bull LLC ndashHigh Reliability of Packet Transfer bull Base Station Subsystem GPRS Protocol (BSSGP)
-gtConvey Routing amp QOS related information between BSS and SGSN
bull RLC ndashReliable Link bull MAC ndashMapping LLC Frames into GSM Channels
GSM-TDMAFDMA
GSM FDMATDMA
bull Tail-gt Enhance the Receiver Performance
bull Training Sequence-gt Select Strongest Signal(mpp)
bull Flag S -gt Data Field contains user data or Network Data
Other Burstsbull Frequency Correction Burst
MS to correct local oscillator to avoid interferences in neighbor channel
bull Synchronization Burst
synchronization burst (BTS-MS)
bull Access Burst
Initial Connection Setup (BTS-MS)
bull Dummy Burst
if no data is available for slot
GSM Logical Channels
bull Traffic Channels (TCH)
(i) Full Rate (ii) Half Rate
bull Control Channels
-gtControl Medium Access
-gtAllocation of Traffic Channels
-gtMobility Management
Control Channels bull Broadcast Control Channel (BCCH)
-gtBTS signals all information to MS Synchronization in time(Cell) ndashSCH Frequency Correction (Cell) -FCH
bull Common Control Channel (CCCH)
1048773Connection Setup(MS-BTS) Paging Channel(PCH)-BTS-Pages-MS Random Access Channel(RAC)-MS-BTS
bull Dedicated Control Channel (DCCH)
-gt Bidirectional MS uses Stand-Alone Dedicated Control Channel(SDCCH) with low data rate for signaling if (Ms using TCH not estabilished ndashBTS) TCH amp SDCCH is associated with SLOW ASSOCIATED DEDICATED CONTROL CHANNEL(SACCH)
GSMHIERARCHY OF FRAMES
GSM PROTOCOL LAYERS FOR SIGNALING
GSM PROTOCOL LAYERS FOR SIGNALING
bull Layer ndashI (Radio Specific Function)
Creation of Bursts
Multiplexing of Bursts in TDMA Frame
Synchronization
Detection of Idle Channel
Measurement of Channel Quality
Synchronization
(Correction ndashIndividual path delay)
Contd
bull BTS ndashMS (RTT is short for near and 25ms for 35kms)
bull VAD(Voice Activity Detection) Scheme for voice transmission
bull During Period of Silence COMFORT NOISE to fake a connection
Signaling Between two Entities-Layer 2
bull LAPD
(Link Access Procedure for D-Channel)
-gt Reliable Data Transfer over connections
-gt Flow controlSegmentationampReassembly of Data
-gt ACK for Data Transfer
Layer ndash3Sub Layers
bull RR-Radio Resource Management(RR)
(Part of BTS Supported by BTSM)
SetupMaintenance amp Release of Radio Channels
bull MM-Mobility Management (MM)
RegistrationAuthenticationIdentification
Location UpdatingTMSI(IMSI)
LAYER -3 Contdhellip
bull CALL MANAGEMENT (CM)
(i) Call Control
(ii) SMS ndashSDCCH SACCH
(iii) Supplementary Services
MSC
bull PULSE CODE MODULATION
bull SS7 (BSC-MSC)-gtTransfer all MGT info between MSC(HLRVLRAUCEIROMC)
bull BSSAP An MSC can also control a BSS (via) BSS Application Part
Localization and Callingbull GSM System-Automatic Worldwide
Localization of users
bull Periodic Location Updates
bull ROAMING
Changing VLRrsquos with uninterrupted Availability of all services
One Provider Two providers in a CountryTwo providers in a two different countries
Locating an MSbull Mobile Station International ISDN Number(MSISDN)
CC + National Destination Code + Sub Number(eg+49 179 1234567)
bull IMSI- Internal unique identification of a subscriberbull TMSI- current VLR- valid temporarily- LA- VLR changes
periodicallybull Mobile Station Roaming Number (MSRN)
-Hides the identity and location of the user
-VLR-Generates on request from MSC ndashHLR
-VCC ndashVNDC ndashSN
-MSRN helps HLR to find user for an incoming call
Mobile Terminated
Visitor Location Register (VLR)
bull Suppose your mobile is registered in Mumbai and you are currently in Delhi
1What happens when your friend in Mumbai calls you
Mobile Originated Call
Visitor Location Register (VLR)
bull 2 What happens when you call to a friend
(a)In the home network (Mumbai)
(b)In the visitor network (Delhi)
(c)Both are from Mumbai and currently in Delhi
HANDOVER
bull Should not cause a Cut-off(CALLDROP)
bull Maximum Duration is 60 ms
bull Basic Reason
1 Quality of the Radio Link
2 Load Balancing(MSCBSC to decide ndashTraffic in an Cell ndashHigh)
bull Error Rates and Signal Levels
Four Types of HandOverbull Intra-Cell Handover
--Within a cellbull Inter-Cell Intra-Bsc Handover
--Cell to another cell ndashBscbull Inter-BscIntra-Msc Handover
--Bsc to Bsc -gtMscbull Inter Msc Handover
--Msc to Msc
Types of Handover
Signal Flow-Inter-BSCIntra-MSC
SECURITY
bull Security to AUC and SIM
bull A3 ndashAuthentication
bull A5 ndashEncryption
bull A8 ndashGeneration of Cipher Key
Authentication
bull Any Service ndashGSM
bull Authentication is based on
Individual Authentication Key
IMSI
A3
bull Challenge-Response Method
Generating a Random Number
Authentication
Key Generation and Encryption
GPRS
bull Packet Mode Transfer
bull Small MediumHigh Volumes of Data
bull BroadcastingMulticastingUnicasting
bull Services are charged on Volume of Usages
bull ldquoAlways Onrdquo-No connection to setup prior to data transfer
GPRS-General Packet Radio Service
GPRS Architecture and Interfaces
GPRS ndashProtocol Architecture
GPRSbull GPRS Tunnelling Protocol (GTP)
All data between GSN is transferred between GTP
GTP -gt Reliable TCPUnreilable UDPbull Sub Network Dependent Convergence Protocol (SNDCP)
Used between SGSN and MS ndashto adapt different characterstics
bull LLC ndashHigh Reliability of Packet Transfer bull Base Station Subsystem GPRS Protocol (BSSGP)
-gtConvey Routing amp QOS related information between BSS and SGSN
bull RLC ndashReliable Link bull MAC ndashMapping LLC Frames into GSM Channels
GSM FDMATDMA
bull Tail-gt Enhance the Receiver Performance
bull Training Sequence-gt Select Strongest Signal(mpp)
bull Flag S -gt Data Field contains user data or Network Data
Other Burstsbull Frequency Correction Burst
MS to correct local oscillator to avoid interferences in neighbor channel
bull Synchronization Burst
synchronization burst (BTS-MS)
bull Access Burst
Initial Connection Setup (BTS-MS)
bull Dummy Burst
if no data is available for slot
GSM Logical Channels
bull Traffic Channels (TCH)
(i) Full Rate (ii) Half Rate
bull Control Channels
-gtControl Medium Access
-gtAllocation of Traffic Channels
-gtMobility Management
Control Channels bull Broadcast Control Channel (BCCH)
-gtBTS signals all information to MS Synchronization in time(Cell) ndashSCH Frequency Correction (Cell) -FCH
bull Common Control Channel (CCCH)
1048773Connection Setup(MS-BTS) Paging Channel(PCH)-BTS-Pages-MS Random Access Channel(RAC)-MS-BTS
bull Dedicated Control Channel (DCCH)
-gt Bidirectional MS uses Stand-Alone Dedicated Control Channel(SDCCH) with low data rate for signaling if (Ms using TCH not estabilished ndashBTS) TCH amp SDCCH is associated with SLOW ASSOCIATED DEDICATED CONTROL CHANNEL(SACCH)
GSMHIERARCHY OF FRAMES
GSM PROTOCOL LAYERS FOR SIGNALING
GSM PROTOCOL LAYERS FOR SIGNALING
bull Layer ndashI (Radio Specific Function)
Creation of Bursts
Multiplexing of Bursts in TDMA Frame
Synchronization
Detection of Idle Channel
Measurement of Channel Quality
Synchronization
(Correction ndashIndividual path delay)
Contd
bull BTS ndashMS (RTT is short for near and 25ms for 35kms)
bull VAD(Voice Activity Detection) Scheme for voice transmission
bull During Period of Silence COMFORT NOISE to fake a connection
Signaling Between two Entities-Layer 2
bull LAPD
(Link Access Procedure for D-Channel)
-gt Reliable Data Transfer over connections
-gt Flow controlSegmentationampReassembly of Data
-gt ACK for Data Transfer
Layer ndash3Sub Layers
bull RR-Radio Resource Management(RR)
(Part of BTS Supported by BTSM)
SetupMaintenance amp Release of Radio Channels
bull MM-Mobility Management (MM)
RegistrationAuthenticationIdentification
Location UpdatingTMSI(IMSI)
LAYER -3 Contdhellip
bull CALL MANAGEMENT (CM)
(i) Call Control
(ii) SMS ndashSDCCH SACCH
(iii) Supplementary Services
MSC
bull PULSE CODE MODULATION
bull SS7 (BSC-MSC)-gtTransfer all MGT info between MSC(HLRVLRAUCEIROMC)
bull BSSAP An MSC can also control a BSS (via) BSS Application Part
Localization and Callingbull GSM System-Automatic Worldwide
Localization of users
bull Periodic Location Updates
bull ROAMING
Changing VLRrsquos with uninterrupted Availability of all services
One Provider Two providers in a CountryTwo providers in a two different countries
Locating an MSbull Mobile Station International ISDN Number(MSISDN)
CC + National Destination Code + Sub Number(eg+49 179 1234567)
bull IMSI- Internal unique identification of a subscriberbull TMSI- current VLR- valid temporarily- LA- VLR changes
periodicallybull Mobile Station Roaming Number (MSRN)
-Hides the identity and location of the user
-VLR-Generates on request from MSC ndashHLR
-VCC ndashVNDC ndashSN
-MSRN helps HLR to find user for an incoming call
Mobile Terminated
Visitor Location Register (VLR)
bull Suppose your mobile is registered in Mumbai and you are currently in Delhi
1What happens when your friend in Mumbai calls you
Mobile Originated Call
Visitor Location Register (VLR)
bull 2 What happens when you call to a friend
(a)In the home network (Mumbai)
(b)In the visitor network (Delhi)
(c)Both are from Mumbai and currently in Delhi
HANDOVER
bull Should not cause a Cut-off(CALLDROP)
bull Maximum Duration is 60 ms
bull Basic Reason
1 Quality of the Radio Link
2 Load Balancing(MSCBSC to decide ndashTraffic in an Cell ndashHigh)
bull Error Rates and Signal Levels
Four Types of HandOverbull Intra-Cell Handover
--Within a cellbull Inter-Cell Intra-Bsc Handover
--Cell to another cell ndashBscbull Inter-BscIntra-Msc Handover
--Bsc to Bsc -gtMscbull Inter Msc Handover
--Msc to Msc
Types of Handover
Signal Flow-Inter-BSCIntra-MSC
SECURITY
bull Security to AUC and SIM
bull A3 ndashAuthentication
bull A5 ndashEncryption
bull A8 ndashGeneration of Cipher Key
Authentication
bull Any Service ndashGSM
bull Authentication is based on
Individual Authentication Key
IMSI
A3
bull Challenge-Response Method
Generating a Random Number
Authentication
Key Generation and Encryption
GPRS
bull Packet Mode Transfer
bull Small MediumHigh Volumes of Data
bull BroadcastingMulticastingUnicasting
bull Services are charged on Volume of Usages
bull ldquoAlways Onrdquo-No connection to setup prior to data transfer
GPRS-General Packet Radio Service
GPRS Architecture and Interfaces
GPRS ndashProtocol Architecture
GPRSbull GPRS Tunnelling Protocol (GTP)
All data between GSN is transferred between GTP
GTP -gt Reliable TCPUnreilable UDPbull Sub Network Dependent Convergence Protocol (SNDCP)
Used between SGSN and MS ndashto adapt different characterstics
bull LLC ndashHigh Reliability of Packet Transfer bull Base Station Subsystem GPRS Protocol (BSSGP)
-gtConvey Routing amp QOS related information between BSS and SGSN
bull RLC ndashReliable Link bull MAC ndashMapping LLC Frames into GSM Channels
Other Burstsbull Frequency Correction Burst
MS to correct local oscillator to avoid interferences in neighbor channel
bull Synchronization Burst
synchronization burst (BTS-MS)
bull Access Burst
Initial Connection Setup (BTS-MS)
bull Dummy Burst
if no data is available for slot
GSM Logical Channels
bull Traffic Channels (TCH)
(i) Full Rate (ii) Half Rate
bull Control Channels
-gtControl Medium Access
-gtAllocation of Traffic Channels
-gtMobility Management
Control Channels bull Broadcast Control Channel (BCCH)
-gtBTS signals all information to MS Synchronization in time(Cell) ndashSCH Frequency Correction (Cell) -FCH
bull Common Control Channel (CCCH)
1048773Connection Setup(MS-BTS) Paging Channel(PCH)-BTS-Pages-MS Random Access Channel(RAC)-MS-BTS
bull Dedicated Control Channel (DCCH)
-gt Bidirectional MS uses Stand-Alone Dedicated Control Channel(SDCCH) with low data rate for signaling if (Ms using TCH not estabilished ndashBTS) TCH amp SDCCH is associated with SLOW ASSOCIATED DEDICATED CONTROL CHANNEL(SACCH)
GSMHIERARCHY OF FRAMES
GSM PROTOCOL LAYERS FOR SIGNALING
GSM PROTOCOL LAYERS FOR SIGNALING
bull Layer ndashI (Radio Specific Function)
Creation of Bursts
Multiplexing of Bursts in TDMA Frame
Synchronization
Detection of Idle Channel
Measurement of Channel Quality
Synchronization
(Correction ndashIndividual path delay)
Contd
bull BTS ndashMS (RTT is short for near and 25ms for 35kms)
bull VAD(Voice Activity Detection) Scheme for voice transmission
bull During Period of Silence COMFORT NOISE to fake a connection
Signaling Between two Entities-Layer 2
bull LAPD
(Link Access Procedure for D-Channel)
-gt Reliable Data Transfer over connections
-gt Flow controlSegmentationampReassembly of Data
-gt ACK for Data Transfer
Layer ndash3Sub Layers
bull RR-Radio Resource Management(RR)
(Part of BTS Supported by BTSM)
SetupMaintenance amp Release of Radio Channels
bull MM-Mobility Management (MM)
RegistrationAuthenticationIdentification
Location UpdatingTMSI(IMSI)
LAYER -3 Contdhellip
bull CALL MANAGEMENT (CM)
(i) Call Control
(ii) SMS ndashSDCCH SACCH
(iii) Supplementary Services
MSC
bull PULSE CODE MODULATION
bull SS7 (BSC-MSC)-gtTransfer all MGT info between MSC(HLRVLRAUCEIROMC)
bull BSSAP An MSC can also control a BSS (via) BSS Application Part
Localization and Callingbull GSM System-Automatic Worldwide
Localization of users
bull Periodic Location Updates
bull ROAMING
Changing VLRrsquos with uninterrupted Availability of all services
One Provider Two providers in a CountryTwo providers in a two different countries
Locating an MSbull Mobile Station International ISDN Number(MSISDN)
CC + National Destination Code + Sub Number(eg+49 179 1234567)
bull IMSI- Internal unique identification of a subscriberbull TMSI- current VLR- valid temporarily- LA- VLR changes
periodicallybull Mobile Station Roaming Number (MSRN)
-Hides the identity and location of the user
-VLR-Generates on request from MSC ndashHLR
-VCC ndashVNDC ndashSN
-MSRN helps HLR to find user for an incoming call
Mobile Terminated
Visitor Location Register (VLR)
bull Suppose your mobile is registered in Mumbai and you are currently in Delhi
1What happens when your friend in Mumbai calls you
Mobile Originated Call
Visitor Location Register (VLR)
bull 2 What happens when you call to a friend
(a)In the home network (Mumbai)
(b)In the visitor network (Delhi)
(c)Both are from Mumbai and currently in Delhi
HANDOVER
bull Should not cause a Cut-off(CALLDROP)
bull Maximum Duration is 60 ms
bull Basic Reason
1 Quality of the Radio Link
2 Load Balancing(MSCBSC to decide ndashTraffic in an Cell ndashHigh)
bull Error Rates and Signal Levels
Four Types of HandOverbull Intra-Cell Handover
--Within a cellbull Inter-Cell Intra-Bsc Handover
--Cell to another cell ndashBscbull Inter-BscIntra-Msc Handover
--Bsc to Bsc -gtMscbull Inter Msc Handover
--Msc to Msc
Types of Handover
Signal Flow-Inter-BSCIntra-MSC
SECURITY
bull Security to AUC and SIM
bull A3 ndashAuthentication
bull A5 ndashEncryption
bull A8 ndashGeneration of Cipher Key
Authentication
bull Any Service ndashGSM
bull Authentication is based on
Individual Authentication Key
IMSI
A3
bull Challenge-Response Method
Generating a Random Number
Authentication
Key Generation and Encryption
GPRS
bull Packet Mode Transfer
bull Small MediumHigh Volumes of Data
bull BroadcastingMulticastingUnicasting
bull Services are charged on Volume of Usages
bull ldquoAlways Onrdquo-No connection to setup prior to data transfer
GPRS-General Packet Radio Service
GPRS Architecture and Interfaces
GPRS ndashProtocol Architecture
GPRSbull GPRS Tunnelling Protocol (GTP)
All data between GSN is transferred between GTP
GTP -gt Reliable TCPUnreilable UDPbull Sub Network Dependent Convergence Protocol (SNDCP)
Used between SGSN and MS ndashto adapt different characterstics
bull LLC ndashHigh Reliability of Packet Transfer bull Base Station Subsystem GPRS Protocol (BSSGP)
-gtConvey Routing amp QOS related information between BSS and SGSN
bull RLC ndashReliable Link bull MAC ndashMapping LLC Frames into GSM Channels
GSM Logical Channels
bull Traffic Channels (TCH)
(i) Full Rate (ii) Half Rate
bull Control Channels
-gtControl Medium Access
-gtAllocation of Traffic Channels
-gtMobility Management
Control Channels bull Broadcast Control Channel (BCCH)
-gtBTS signals all information to MS Synchronization in time(Cell) ndashSCH Frequency Correction (Cell) -FCH
bull Common Control Channel (CCCH)
1048773Connection Setup(MS-BTS) Paging Channel(PCH)-BTS-Pages-MS Random Access Channel(RAC)-MS-BTS
bull Dedicated Control Channel (DCCH)
-gt Bidirectional MS uses Stand-Alone Dedicated Control Channel(SDCCH) with low data rate for signaling if (Ms using TCH not estabilished ndashBTS) TCH amp SDCCH is associated with SLOW ASSOCIATED DEDICATED CONTROL CHANNEL(SACCH)
GSMHIERARCHY OF FRAMES
GSM PROTOCOL LAYERS FOR SIGNALING
GSM PROTOCOL LAYERS FOR SIGNALING
bull Layer ndashI (Radio Specific Function)
Creation of Bursts
Multiplexing of Bursts in TDMA Frame
Synchronization
Detection of Idle Channel
Measurement of Channel Quality
Synchronization
(Correction ndashIndividual path delay)
Contd
bull BTS ndashMS (RTT is short for near and 25ms for 35kms)
bull VAD(Voice Activity Detection) Scheme for voice transmission
bull During Period of Silence COMFORT NOISE to fake a connection
Signaling Between two Entities-Layer 2
bull LAPD
(Link Access Procedure for D-Channel)
-gt Reliable Data Transfer over connections
-gt Flow controlSegmentationampReassembly of Data
-gt ACK for Data Transfer
Layer ndash3Sub Layers
bull RR-Radio Resource Management(RR)
(Part of BTS Supported by BTSM)
SetupMaintenance amp Release of Radio Channels
bull MM-Mobility Management (MM)
RegistrationAuthenticationIdentification
Location UpdatingTMSI(IMSI)
LAYER -3 Contdhellip
bull CALL MANAGEMENT (CM)
(i) Call Control
(ii) SMS ndashSDCCH SACCH
(iii) Supplementary Services
MSC
bull PULSE CODE MODULATION
bull SS7 (BSC-MSC)-gtTransfer all MGT info between MSC(HLRVLRAUCEIROMC)
bull BSSAP An MSC can also control a BSS (via) BSS Application Part
Localization and Callingbull GSM System-Automatic Worldwide
Localization of users
bull Periodic Location Updates
bull ROAMING
Changing VLRrsquos with uninterrupted Availability of all services
One Provider Two providers in a CountryTwo providers in a two different countries
Locating an MSbull Mobile Station International ISDN Number(MSISDN)
CC + National Destination Code + Sub Number(eg+49 179 1234567)
bull IMSI- Internal unique identification of a subscriberbull TMSI- current VLR- valid temporarily- LA- VLR changes
periodicallybull Mobile Station Roaming Number (MSRN)
-Hides the identity and location of the user
-VLR-Generates on request from MSC ndashHLR
-VCC ndashVNDC ndashSN
-MSRN helps HLR to find user for an incoming call
Mobile Terminated
Visitor Location Register (VLR)
bull Suppose your mobile is registered in Mumbai and you are currently in Delhi
1What happens when your friend in Mumbai calls you
Mobile Originated Call
Visitor Location Register (VLR)
bull 2 What happens when you call to a friend
(a)In the home network (Mumbai)
(b)In the visitor network (Delhi)
(c)Both are from Mumbai and currently in Delhi
HANDOVER
bull Should not cause a Cut-off(CALLDROP)
bull Maximum Duration is 60 ms
bull Basic Reason
1 Quality of the Radio Link
2 Load Balancing(MSCBSC to decide ndashTraffic in an Cell ndashHigh)
bull Error Rates and Signal Levels
Four Types of HandOverbull Intra-Cell Handover
--Within a cellbull Inter-Cell Intra-Bsc Handover
--Cell to another cell ndashBscbull Inter-BscIntra-Msc Handover
--Bsc to Bsc -gtMscbull Inter Msc Handover
--Msc to Msc
Types of Handover
Signal Flow-Inter-BSCIntra-MSC
SECURITY
bull Security to AUC and SIM
bull A3 ndashAuthentication
bull A5 ndashEncryption
bull A8 ndashGeneration of Cipher Key
Authentication
bull Any Service ndashGSM
bull Authentication is based on
Individual Authentication Key
IMSI
A3
bull Challenge-Response Method
Generating a Random Number
Authentication
Key Generation and Encryption
GPRS
bull Packet Mode Transfer
bull Small MediumHigh Volumes of Data
bull BroadcastingMulticastingUnicasting
bull Services are charged on Volume of Usages
bull ldquoAlways Onrdquo-No connection to setup prior to data transfer
GPRS-General Packet Radio Service
GPRS Architecture and Interfaces
GPRS ndashProtocol Architecture
GPRSbull GPRS Tunnelling Protocol (GTP)
All data between GSN is transferred between GTP
GTP -gt Reliable TCPUnreilable UDPbull Sub Network Dependent Convergence Protocol (SNDCP)
Used between SGSN and MS ndashto adapt different characterstics
bull LLC ndashHigh Reliability of Packet Transfer bull Base Station Subsystem GPRS Protocol (BSSGP)
-gtConvey Routing amp QOS related information between BSS and SGSN
bull RLC ndashReliable Link bull MAC ndashMapping LLC Frames into GSM Channels
Control Channels bull Broadcast Control Channel (BCCH)
-gtBTS signals all information to MS Synchronization in time(Cell) ndashSCH Frequency Correction (Cell) -FCH
bull Common Control Channel (CCCH)
1048773Connection Setup(MS-BTS) Paging Channel(PCH)-BTS-Pages-MS Random Access Channel(RAC)-MS-BTS
bull Dedicated Control Channel (DCCH)
-gt Bidirectional MS uses Stand-Alone Dedicated Control Channel(SDCCH) with low data rate for signaling if (Ms using TCH not estabilished ndashBTS) TCH amp SDCCH is associated with SLOW ASSOCIATED DEDICATED CONTROL CHANNEL(SACCH)
GSMHIERARCHY OF FRAMES
GSM PROTOCOL LAYERS FOR SIGNALING
GSM PROTOCOL LAYERS FOR SIGNALING
bull Layer ndashI (Radio Specific Function)
Creation of Bursts
Multiplexing of Bursts in TDMA Frame
Synchronization
Detection of Idle Channel
Measurement of Channel Quality
Synchronization
(Correction ndashIndividual path delay)
Contd
bull BTS ndashMS (RTT is short for near and 25ms for 35kms)
bull VAD(Voice Activity Detection) Scheme for voice transmission
bull During Period of Silence COMFORT NOISE to fake a connection
Signaling Between two Entities-Layer 2
bull LAPD
(Link Access Procedure for D-Channel)
-gt Reliable Data Transfer over connections
-gt Flow controlSegmentationampReassembly of Data
-gt ACK for Data Transfer
Layer ndash3Sub Layers
bull RR-Radio Resource Management(RR)
(Part of BTS Supported by BTSM)
SetupMaintenance amp Release of Radio Channels
bull MM-Mobility Management (MM)
RegistrationAuthenticationIdentification
Location UpdatingTMSI(IMSI)
LAYER -3 Contdhellip
bull CALL MANAGEMENT (CM)
(i) Call Control
(ii) SMS ndashSDCCH SACCH
(iii) Supplementary Services
MSC
bull PULSE CODE MODULATION
bull SS7 (BSC-MSC)-gtTransfer all MGT info between MSC(HLRVLRAUCEIROMC)
bull BSSAP An MSC can also control a BSS (via) BSS Application Part
Localization and Callingbull GSM System-Automatic Worldwide
Localization of users
bull Periodic Location Updates
bull ROAMING
Changing VLRrsquos with uninterrupted Availability of all services
One Provider Two providers in a CountryTwo providers in a two different countries
Locating an MSbull Mobile Station International ISDN Number(MSISDN)
CC + National Destination Code + Sub Number(eg+49 179 1234567)
bull IMSI- Internal unique identification of a subscriberbull TMSI- current VLR- valid temporarily- LA- VLR changes
periodicallybull Mobile Station Roaming Number (MSRN)
-Hides the identity and location of the user
-VLR-Generates on request from MSC ndashHLR
-VCC ndashVNDC ndashSN
-MSRN helps HLR to find user for an incoming call
Mobile Terminated
Visitor Location Register (VLR)
bull Suppose your mobile is registered in Mumbai and you are currently in Delhi
1What happens when your friend in Mumbai calls you
Mobile Originated Call
Visitor Location Register (VLR)
bull 2 What happens when you call to a friend
(a)In the home network (Mumbai)
(b)In the visitor network (Delhi)
(c)Both are from Mumbai and currently in Delhi
HANDOVER
bull Should not cause a Cut-off(CALLDROP)
bull Maximum Duration is 60 ms
bull Basic Reason
1 Quality of the Radio Link
2 Load Balancing(MSCBSC to decide ndashTraffic in an Cell ndashHigh)
bull Error Rates and Signal Levels
Four Types of HandOverbull Intra-Cell Handover
--Within a cellbull Inter-Cell Intra-Bsc Handover
--Cell to another cell ndashBscbull Inter-BscIntra-Msc Handover
--Bsc to Bsc -gtMscbull Inter Msc Handover
--Msc to Msc
Types of Handover
Signal Flow-Inter-BSCIntra-MSC
SECURITY
bull Security to AUC and SIM
bull A3 ndashAuthentication
bull A5 ndashEncryption
bull A8 ndashGeneration of Cipher Key
Authentication
bull Any Service ndashGSM
bull Authentication is based on
Individual Authentication Key
IMSI
A3
bull Challenge-Response Method
Generating a Random Number
Authentication
Key Generation and Encryption
GPRS
bull Packet Mode Transfer
bull Small MediumHigh Volumes of Data
bull BroadcastingMulticastingUnicasting
bull Services are charged on Volume of Usages
bull ldquoAlways Onrdquo-No connection to setup prior to data transfer
GPRS-General Packet Radio Service
GPRS Architecture and Interfaces
GPRS ndashProtocol Architecture
GPRSbull GPRS Tunnelling Protocol (GTP)
All data between GSN is transferred between GTP
GTP -gt Reliable TCPUnreilable UDPbull Sub Network Dependent Convergence Protocol (SNDCP)
Used between SGSN and MS ndashto adapt different characterstics
bull LLC ndashHigh Reliability of Packet Transfer bull Base Station Subsystem GPRS Protocol (BSSGP)
-gtConvey Routing amp QOS related information between BSS and SGSN
bull RLC ndashReliable Link bull MAC ndashMapping LLC Frames into GSM Channels
GSMHIERARCHY OF FRAMES
GSM PROTOCOL LAYERS FOR SIGNALING
GSM PROTOCOL LAYERS FOR SIGNALING
bull Layer ndashI (Radio Specific Function)
Creation of Bursts
Multiplexing of Bursts in TDMA Frame
Synchronization
Detection of Idle Channel
Measurement of Channel Quality
Synchronization
(Correction ndashIndividual path delay)
Contd
bull BTS ndashMS (RTT is short for near and 25ms for 35kms)
bull VAD(Voice Activity Detection) Scheme for voice transmission
bull During Period of Silence COMFORT NOISE to fake a connection
Signaling Between two Entities-Layer 2
bull LAPD
(Link Access Procedure for D-Channel)
-gt Reliable Data Transfer over connections
-gt Flow controlSegmentationampReassembly of Data
-gt ACK for Data Transfer
Layer ndash3Sub Layers
bull RR-Radio Resource Management(RR)
(Part of BTS Supported by BTSM)
SetupMaintenance amp Release of Radio Channels
bull MM-Mobility Management (MM)
RegistrationAuthenticationIdentification
Location UpdatingTMSI(IMSI)
LAYER -3 Contdhellip
bull CALL MANAGEMENT (CM)
(i) Call Control
(ii) SMS ndashSDCCH SACCH
(iii) Supplementary Services
MSC
bull PULSE CODE MODULATION
bull SS7 (BSC-MSC)-gtTransfer all MGT info between MSC(HLRVLRAUCEIROMC)
bull BSSAP An MSC can also control a BSS (via) BSS Application Part
Localization and Callingbull GSM System-Automatic Worldwide
Localization of users
bull Periodic Location Updates
bull ROAMING
Changing VLRrsquos with uninterrupted Availability of all services
One Provider Two providers in a CountryTwo providers in a two different countries
Locating an MSbull Mobile Station International ISDN Number(MSISDN)
CC + National Destination Code + Sub Number(eg+49 179 1234567)
bull IMSI- Internal unique identification of a subscriberbull TMSI- current VLR- valid temporarily- LA- VLR changes
periodicallybull Mobile Station Roaming Number (MSRN)
-Hides the identity and location of the user
-VLR-Generates on request from MSC ndashHLR
-VCC ndashVNDC ndashSN
-MSRN helps HLR to find user for an incoming call
Mobile Terminated
Visitor Location Register (VLR)
bull Suppose your mobile is registered in Mumbai and you are currently in Delhi
1What happens when your friend in Mumbai calls you
Mobile Originated Call
Visitor Location Register (VLR)
bull 2 What happens when you call to a friend
(a)In the home network (Mumbai)
(b)In the visitor network (Delhi)
(c)Both are from Mumbai and currently in Delhi
HANDOVER
bull Should not cause a Cut-off(CALLDROP)
bull Maximum Duration is 60 ms
bull Basic Reason
1 Quality of the Radio Link
2 Load Balancing(MSCBSC to decide ndashTraffic in an Cell ndashHigh)
bull Error Rates and Signal Levels
Four Types of HandOverbull Intra-Cell Handover
--Within a cellbull Inter-Cell Intra-Bsc Handover
--Cell to another cell ndashBscbull Inter-BscIntra-Msc Handover
--Bsc to Bsc -gtMscbull Inter Msc Handover
--Msc to Msc
Types of Handover
Signal Flow-Inter-BSCIntra-MSC
SECURITY
bull Security to AUC and SIM
bull A3 ndashAuthentication
bull A5 ndashEncryption
bull A8 ndashGeneration of Cipher Key
Authentication
bull Any Service ndashGSM
bull Authentication is based on
Individual Authentication Key
IMSI
A3
bull Challenge-Response Method
Generating a Random Number
Authentication
Key Generation and Encryption
GPRS
bull Packet Mode Transfer
bull Small MediumHigh Volumes of Data
bull BroadcastingMulticastingUnicasting
bull Services are charged on Volume of Usages
bull ldquoAlways Onrdquo-No connection to setup prior to data transfer
GPRS-General Packet Radio Service
GPRS Architecture and Interfaces
GPRS ndashProtocol Architecture
GPRSbull GPRS Tunnelling Protocol (GTP)
All data between GSN is transferred between GTP
GTP -gt Reliable TCPUnreilable UDPbull Sub Network Dependent Convergence Protocol (SNDCP)
Used between SGSN and MS ndashto adapt different characterstics
bull LLC ndashHigh Reliability of Packet Transfer bull Base Station Subsystem GPRS Protocol (BSSGP)
-gtConvey Routing amp QOS related information between BSS and SGSN
bull RLC ndashReliable Link bull MAC ndashMapping LLC Frames into GSM Channels
GSM PROTOCOL LAYERS FOR SIGNALING
GSM PROTOCOL LAYERS FOR SIGNALING
bull Layer ndashI (Radio Specific Function)
Creation of Bursts
Multiplexing of Bursts in TDMA Frame
Synchronization
Detection of Idle Channel
Measurement of Channel Quality
Synchronization
(Correction ndashIndividual path delay)
Contd
bull BTS ndashMS (RTT is short for near and 25ms for 35kms)
bull VAD(Voice Activity Detection) Scheme for voice transmission
bull During Period of Silence COMFORT NOISE to fake a connection
Signaling Between two Entities-Layer 2
bull LAPD
(Link Access Procedure for D-Channel)
-gt Reliable Data Transfer over connections
-gt Flow controlSegmentationampReassembly of Data
-gt ACK for Data Transfer
Layer ndash3Sub Layers
bull RR-Radio Resource Management(RR)
(Part of BTS Supported by BTSM)
SetupMaintenance amp Release of Radio Channels
bull MM-Mobility Management (MM)
RegistrationAuthenticationIdentification
Location UpdatingTMSI(IMSI)
LAYER -3 Contdhellip
bull CALL MANAGEMENT (CM)
(i) Call Control
(ii) SMS ndashSDCCH SACCH
(iii) Supplementary Services
MSC
bull PULSE CODE MODULATION
bull SS7 (BSC-MSC)-gtTransfer all MGT info between MSC(HLRVLRAUCEIROMC)
bull BSSAP An MSC can also control a BSS (via) BSS Application Part
Localization and Callingbull GSM System-Automatic Worldwide
Localization of users
bull Periodic Location Updates
bull ROAMING
Changing VLRrsquos with uninterrupted Availability of all services
One Provider Two providers in a CountryTwo providers in a two different countries
Locating an MSbull Mobile Station International ISDN Number(MSISDN)
CC + National Destination Code + Sub Number(eg+49 179 1234567)
bull IMSI- Internal unique identification of a subscriberbull TMSI- current VLR- valid temporarily- LA- VLR changes
periodicallybull Mobile Station Roaming Number (MSRN)
-Hides the identity and location of the user
-VLR-Generates on request from MSC ndashHLR
-VCC ndashVNDC ndashSN
-MSRN helps HLR to find user for an incoming call
Mobile Terminated
Visitor Location Register (VLR)
bull Suppose your mobile is registered in Mumbai and you are currently in Delhi
1What happens when your friend in Mumbai calls you
Mobile Originated Call
Visitor Location Register (VLR)
bull 2 What happens when you call to a friend
(a)In the home network (Mumbai)
(b)In the visitor network (Delhi)
(c)Both are from Mumbai and currently in Delhi
HANDOVER
bull Should not cause a Cut-off(CALLDROP)
bull Maximum Duration is 60 ms
bull Basic Reason
1 Quality of the Radio Link
2 Load Balancing(MSCBSC to decide ndashTraffic in an Cell ndashHigh)
bull Error Rates and Signal Levels
Four Types of HandOverbull Intra-Cell Handover
--Within a cellbull Inter-Cell Intra-Bsc Handover
--Cell to another cell ndashBscbull Inter-BscIntra-Msc Handover
--Bsc to Bsc -gtMscbull Inter Msc Handover
--Msc to Msc
Types of Handover
Signal Flow-Inter-BSCIntra-MSC
SECURITY
bull Security to AUC and SIM
bull A3 ndashAuthentication
bull A5 ndashEncryption
bull A8 ndashGeneration of Cipher Key
Authentication
bull Any Service ndashGSM
bull Authentication is based on
Individual Authentication Key
IMSI
A3
bull Challenge-Response Method
Generating a Random Number
Authentication
Key Generation and Encryption
GPRS
bull Packet Mode Transfer
bull Small MediumHigh Volumes of Data
bull BroadcastingMulticastingUnicasting
bull Services are charged on Volume of Usages
bull ldquoAlways Onrdquo-No connection to setup prior to data transfer
GPRS-General Packet Radio Service
GPRS Architecture and Interfaces
GPRS ndashProtocol Architecture
GPRSbull GPRS Tunnelling Protocol (GTP)
All data between GSN is transferred between GTP
GTP -gt Reliable TCPUnreilable UDPbull Sub Network Dependent Convergence Protocol (SNDCP)
Used between SGSN and MS ndashto adapt different characterstics
bull LLC ndashHigh Reliability of Packet Transfer bull Base Station Subsystem GPRS Protocol (BSSGP)
-gtConvey Routing amp QOS related information between BSS and SGSN
bull RLC ndashReliable Link bull MAC ndashMapping LLC Frames into GSM Channels
GSM PROTOCOL LAYERS FOR SIGNALING
bull Layer ndashI (Radio Specific Function)
Creation of Bursts
Multiplexing of Bursts in TDMA Frame
Synchronization
Detection of Idle Channel
Measurement of Channel Quality
Synchronization
(Correction ndashIndividual path delay)
Contd
bull BTS ndashMS (RTT is short for near and 25ms for 35kms)
bull VAD(Voice Activity Detection) Scheme for voice transmission
bull During Period of Silence COMFORT NOISE to fake a connection
Signaling Between two Entities-Layer 2
bull LAPD
(Link Access Procedure for D-Channel)
-gt Reliable Data Transfer over connections
-gt Flow controlSegmentationampReassembly of Data
-gt ACK for Data Transfer
Layer ndash3Sub Layers
bull RR-Radio Resource Management(RR)
(Part of BTS Supported by BTSM)
SetupMaintenance amp Release of Radio Channels
bull MM-Mobility Management (MM)
RegistrationAuthenticationIdentification
Location UpdatingTMSI(IMSI)
LAYER -3 Contdhellip
bull CALL MANAGEMENT (CM)
(i) Call Control
(ii) SMS ndashSDCCH SACCH
(iii) Supplementary Services
MSC
bull PULSE CODE MODULATION
bull SS7 (BSC-MSC)-gtTransfer all MGT info between MSC(HLRVLRAUCEIROMC)
bull BSSAP An MSC can also control a BSS (via) BSS Application Part
Localization and Callingbull GSM System-Automatic Worldwide
Localization of users
bull Periodic Location Updates
bull ROAMING
Changing VLRrsquos with uninterrupted Availability of all services
One Provider Two providers in a CountryTwo providers in a two different countries
Locating an MSbull Mobile Station International ISDN Number(MSISDN)
CC + National Destination Code + Sub Number(eg+49 179 1234567)
bull IMSI- Internal unique identification of a subscriberbull TMSI- current VLR- valid temporarily- LA- VLR changes
periodicallybull Mobile Station Roaming Number (MSRN)
-Hides the identity and location of the user
-VLR-Generates on request from MSC ndashHLR
-VCC ndashVNDC ndashSN
-MSRN helps HLR to find user for an incoming call
Mobile Terminated
Visitor Location Register (VLR)
bull Suppose your mobile is registered in Mumbai and you are currently in Delhi
1What happens when your friend in Mumbai calls you
Mobile Originated Call
Visitor Location Register (VLR)
bull 2 What happens when you call to a friend
(a)In the home network (Mumbai)
(b)In the visitor network (Delhi)
(c)Both are from Mumbai and currently in Delhi
HANDOVER
bull Should not cause a Cut-off(CALLDROP)
bull Maximum Duration is 60 ms
bull Basic Reason
1 Quality of the Radio Link
2 Load Balancing(MSCBSC to decide ndashTraffic in an Cell ndashHigh)
bull Error Rates and Signal Levels
Four Types of HandOverbull Intra-Cell Handover
--Within a cellbull Inter-Cell Intra-Bsc Handover
--Cell to another cell ndashBscbull Inter-BscIntra-Msc Handover
--Bsc to Bsc -gtMscbull Inter Msc Handover
--Msc to Msc
Types of Handover
Signal Flow-Inter-BSCIntra-MSC
SECURITY
bull Security to AUC and SIM
bull A3 ndashAuthentication
bull A5 ndashEncryption
bull A8 ndashGeneration of Cipher Key
Authentication
bull Any Service ndashGSM
bull Authentication is based on
Individual Authentication Key
IMSI
A3
bull Challenge-Response Method
Generating a Random Number
Authentication
Key Generation and Encryption
GPRS
bull Packet Mode Transfer
bull Small MediumHigh Volumes of Data
bull BroadcastingMulticastingUnicasting
bull Services are charged on Volume of Usages
bull ldquoAlways Onrdquo-No connection to setup prior to data transfer
GPRS-General Packet Radio Service
GPRS Architecture and Interfaces
GPRS ndashProtocol Architecture
GPRSbull GPRS Tunnelling Protocol (GTP)
All data between GSN is transferred between GTP
GTP -gt Reliable TCPUnreilable UDPbull Sub Network Dependent Convergence Protocol (SNDCP)
Used between SGSN and MS ndashto adapt different characterstics
bull LLC ndashHigh Reliability of Packet Transfer bull Base Station Subsystem GPRS Protocol (BSSGP)
-gtConvey Routing amp QOS related information between BSS and SGSN
bull RLC ndashReliable Link bull MAC ndashMapping LLC Frames into GSM Channels
Contd
bull BTS ndashMS (RTT is short for near and 25ms for 35kms)
bull VAD(Voice Activity Detection) Scheme for voice transmission
bull During Period of Silence COMFORT NOISE to fake a connection
Signaling Between two Entities-Layer 2
bull LAPD
(Link Access Procedure for D-Channel)
-gt Reliable Data Transfer over connections
-gt Flow controlSegmentationampReassembly of Data
-gt ACK for Data Transfer
Layer ndash3Sub Layers
bull RR-Radio Resource Management(RR)
(Part of BTS Supported by BTSM)
SetupMaintenance amp Release of Radio Channels
bull MM-Mobility Management (MM)
RegistrationAuthenticationIdentification
Location UpdatingTMSI(IMSI)
LAYER -3 Contdhellip
bull CALL MANAGEMENT (CM)
(i) Call Control
(ii) SMS ndashSDCCH SACCH
(iii) Supplementary Services
MSC
bull PULSE CODE MODULATION
bull SS7 (BSC-MSC)-gtTransfer all MGT info between MSC(HLRVLRAUCEIROMC)
bull BSSAP An MSC can also control a BSS (via) BSS Application Part
Localization and Callingbull GSM System-Automatic Worldwide
Localization of users
bull Periodic Location Updates
bull ROAMING
Changing VLRrsquos with uninterrupted Availability of all services
One Provider Two providers in a CountryTwo providers in a two different countries
Locating an MSbull Mobile Station International ISDN Number(MSISDN)
CC + National Destination Code + Sub Number(eg+49 179 1234567)
bull IMSI- Internal unique identification of a subscriberbull TMSI- current VLR- valid temporarily- LA- VLR changes
periodicallybull Mobile Station Roaming Number (MSRN)
-Hides the identity and location of the user
-VLR-Generates on request from MSC ndashHLR
-VCC ndashVNDC ndashSN
-MSRN helps HLR to find user for an incoming call
Mobile Terminated
Visitor Location Register (VLR)
bull Suppose your mobile is registered in Mumbai and you are currently in Delhi
1What happens when your friend in Mumbai calls you
Mobile Originated Call
Visitor Location Register (VLR)
bull 2 What happens when you call to a friend
(a)In the home network (Mumbai)
(b)In the visitor network (Delhi)
(c)Both are from Mumbai and currently in Delhi
HANDOVER
bull Should not cause a Cut-off(CALLDROP)
bull Maximum Duration is 60 ms
bull Basic Reason
1 Quality of the Radio Link
2 Load Balancing(MSCBSC to decide ndashTraffic in an Cell ndashHigh)
bull Error Rates and Signal Levels
Four Types of HandOverbull Intra-Cell Handover
--Within a cellbull Inter-Cell Intra-Bsc Handover
--Cell to another cell ndashBscbull Inter-BscIntra-Msc Handover
--Bsc to Bsc -gtMscbull Inter Msc Handover
--Msc to Msc
Types of Handover
Signal Flow-Inter-BSCIntra-MSC
SECURITY
bull Security to AUC and SIM
bull A3 ndashAuthentication
bull A5 ndashEncryption
bull A8 ndashGeneration of Cipher Key
Authentication
bull Any Service ndashGSM
bull Authentication is based on
Individual Authentication Key
IMSI
A3
bull Challenge-Response Method
Generating a Random Number
Authentication
Key Generation and Encryption
GPRS
bull Packet Mode Transfer
bull Small MediumHigh Volumes of Data
bull BroadcastingMulticastingUnicasting
bull Services are charged on Volume of Usages
bull ldquoAlways Onrdquo-No connection to setup prior to data transfer
GPRS-General Packet Radio Service
GPRS Architecture and Interfaces
GPRS ndashProtocol Architecture
GPRSbull GPRS Tunnelling Protocol (GTP)
All data between GSN is transferred between GTP
GTP -gt Reliable TCPUnreilable UDPbull Sub Network Dependent Convergence Protocol (SNDCP)
Used between SGSN and MS ndashto adapt different characterstics
bull LLC ndashHigh Reliability of Packet Transfer bull Base Station Subsystem GPRS Protocol (BSSGP)
-gtConvey Routing amp QOS related information between BSS and SGSN
bull RLC ndashReliable Link bull MAC ndashMapping LLC Frames into GSM Channels
Signaling Between two Entities-Layer 2
bull LAPD
(Link Access Procedure for D-Channel)
-gt Reliable Data Transfer over connections
-gt Flow controlSegmentationampReassembly of Data
-gt ACK for Data Transfer
Layer ndash3Sub Layers
bull RR-Radio Resource Management(RR)
(Part of BTS Supported by BTSM)
SetupMaintenance amp Release of Radio Channels
bull MM-Mobility Management (MM)
RegistrationAuthenticationIdentification
Location UpdatingTMSI(IMSI)
LAYER -3 Contdhellip
bull CALL MANAGEMENT (CM)
(i) Call Control
(ii) SMS ndashSDCCH SACCH
(iii) Supplementary Services
MSC
bull PULSE CODE MODULATION
bull SS7 (BSC-MSC)-gtTransfer all MGT info between MSC(HLRVLRAUCEIROMC)
bull BSSAP An MSC can also control a BSS (via) BSS Application Part
Localization and Callingbull GSM System-Automatic Worldwide
Localization of users
bull Periodic Location Updates
bull ROAMING
Changing VLRrsquos with uninterrupted Availability of all services
One Provider Two providers in a CountryTwo providers in a two different countries
Locating an MSbull Mobile Station International ISDN Number(MSISDN)
CC + National Destination Code + Sub Number(eg+49 179 1234567)
bull IMSI- Internal unique identification of a subscriberbull TMSI- current VLR- valid temporarily- LA- VLR changes
periodicallybull Mobile Station Roaming Number (MSRN)
-Hides the identity and location of the user
-VLR-Generates on request from MSC ndashHLR
-VCC ndashVNDC ndashSN
-MSRN helps HLR to find user for an incoming call
Mobile Terminated
Visitor Location Register (VLR)
bull Suppose your mobile is registered in Mumbai and you are currently in Delhi
1What happens when your friend in Mumbai calls you
Mobile Originated Call
Visitor Location Register (VLR)
bull 2 What happens when you call to a friend
(a)In the home network (Mumbai)
(b)In the visitor network (Delhi)
(c)Both are from Mumbai and currently in Delhi
HANDOVER
bull Should not cause a Cut-off(CALLDROP)
bull Maximum Duration is 60 ms
bull Basic Reason
1 Quality of the Radio Link
2 Load Balancing(MSCBSC to decide ndashTraffic in an Cell ndashHigh)
bull Error Rates and Signal Levels
Four Types of HandOverbull Intra-Cell Handover
--Within a cellbull Inter-Cell Intra-Bsc Handover
--Cell to another cell ndashBscbull Inter-BscIntra-Msc Handover
--Bsc to Bsc -gtMscbull Inter Msc Handover
--Msc to Msc
Types of Handover
Signal Flow-Inter-BSCIntra-MSC
SECURITY
bull Security to AUC and SIM
bull A3 ndashAuthentication
bull A5 ndashEncryption
bull A8 ndashGeneration of Cipher Key
Authentication
bull Any Service ndashGSM
bull Authentication is based on
Individual Authentication Key
IMSI
A3
bull Challenge-Response Method
Generating a Random Number
Authentication
Key Generation and Encryption
GPRS
bull Packet Mode Transfer
bull Small MediumHigh Volumes of Data
bull BroadcastingMulticastingUnicasting
bull Services are charged on Volume of Usages
bull ldquoAlways Onrdquo-No connection to setup prior to data transfer
GPRS-General Packet Radio Service
GPRS Architecture and Interfaces
GPRS ndashProtocol Architecture
GPRSbull GPRS Tunnelling Protocol (GTP)
All data between GSN is transferred between GTP
GTP -gt Reliable TCPUnreilable UDPbull Sub Network Dependent Convergence Protocol (SNDCP)
Used between SGSN and MS ndashto adapt different characterstics
bull LLC ndashHigh Reliability of Packet Transfer bull Base Station Subsystem GPRS Protocol (BSSGP)
-gtConvey Routing amp QOS related information between BSS and SGSN
bull RLC ndashReliable Link bull MAC ndashMapping LLC Frames into GSM Channels
Layer ndash3Sub Layers
bull RR-Radio Resource Management(RR)
(Part of BTS Supported by BTSM)
SetupMaintenance amp Release of Radio Channels
bull MM-Mobility Management (MM)
RegistrationAuthenticationIdentification
Location UpdatingTMSI(IMSI)
LAYER -3 Contdhellip
bull CALL MANAGEMENT (CM)
(i) Call Control
(ii) SMS ndashSDCCH SACCH
(iii) Supplementary Services
MSC
bull PULSE CODE MODULATION
bull SS7 (BSC-MSC)-gtTransfer all MGT info between MSC(HLRVLRAUCEIROMC)
bull BSSAP An MSC can also control a BSS (via) BSS Application Part
Localization and Callingbull GSM System-Automatic Worldwide
Localization of users
bull Periodic Location Updates
bull ROAMING
Changing VLRrsquos with uninterrupted Availability of all services
One Provider Two providers in a CountryTwo providers in a two different countries
Locating an MSbull Mobile Station International ISDN Number(MSISDN)
CC + National Destination Code + Sub Number(eg+49 179 1234567)
bull IMSI- Internal unique identification of a subscriberbull TMSI- current VLR- valid temporarily- LA- VLR changes
periodicallybull Mobile Station Roaming Number (MSRN)
-Hides the identity and location of the user
-VLR-Generates on request from MSC ndashHLR
-VCC ndashVNDC ndashSN
-MSRN helps HLR to find user for an incoming call
Mobile Terminated
Visitor Location Register (VLR)
bull Suppose your mobile is registered in Mumbai and you are currently in Delhi
1What happens when your friend in Mumbai calls you
Mobile Originated Call
Visitor Location Register (VLR)
bull 2 What happens when you call to a friend
(a)In the home network (Mumbai)
(b)In the visitor network (Delhi)
(c)Both are from Mumbai and currently in Delhi
HANDOVER
bull Should not cause a Cut-off(CALLDROP)
bull Maximum Duration is 60 ms
bull Basic Reason
1 Quality of the Radio Link
2 Load Balancing(MSCBSC to decide ndashTraffic in an Cell ndashHigh)
bull Error Rates and Signal Levels
Four Types of HandOverbull Intra-Cell Handover
--Within a cellbull Inter-Cell Intra-Bsc Handover
--Cell to another cell ndashBscbull Inter-BscIntra-Msc Handover
--Bsc to Bsc -gtMscbull Inter Msc Handover
--Msc to Msc
Types of Handover
Signal Flow-Inter-BSCIntra-MSC
SECURITY
bull Security to AUC and SIM
bull A3 ndashAuthentication
bull A5 ndashEncryption
bull A8 ndashGeneration of Cipher Key
Authentication
bull Any Service ndashGSM
bull Authentication is based on
Individual Authentication Key
IMSI
A3
bull Challenge-Response Method
Generating a Random Number
Authentication
Key Generation and Encryption
GPRS
bull Packet Mode Transfer
bull Small MediumHigh Volumes of Data
bull BroadcastingMulticastingUnicasting
bull Services are charged on Volume of Usages
bull ldquoAlways Onrdquo-No connection to setup prior to data transfer
GPRS-General Packet Radio Service
GPRS Architecture and Interfaces
GPRS ndashProtocol Architecture
GPRSbull GPRS Tunnelling Protocol (GTP)
All data between GSN is transferred between GTP
GTP -gt Reliable TCPUnreilable UDPbull Sub Network Dependent Convergence Protocol (SNDCP)
Used between SGSN and MS ndashto adapt different characterstics
bull LLC ndashHigh Reliability of Packet Transfer bull Base Station Subsystem GPRS Protocol (BSSGP)
-gtConvey Routing amp QOS related information between BSS and SGSN
bull RLC ndashReliable Link bull MAC ndashMapping LLC Frames into GSM Channels
LAYER -3 Contdhellip
bull CALL MANAGEMENT (CM)
(i) Call Control
(ii) SMS ndashSDCCH SACCH
(iii) Supplementary Services
MSC
bull PULSE CODE MODULATION
bull SS7 (BSC-MSC)-gtTransfer all MGT info between MSC(HLRVLRAUCEIROMC)
bull BSSAP An MSC can also control a BSS (via) BSS Application Part
Localization and Callingbull GSM System-Automatic Worldwide
Localization of users
bull Periodic Location Updates
bull ROAMING
Changing VLRrsquos with uninterrupted Availability of all services
One Provider Two providers in a CountryTwo providers in a two different countries
Locating an MSbull Mobile Station International ISDN Number(MSISDN)
CC + National Destination Code + Sub Number(eg+49 179 1234567)
bull IMSI- Internal unique identification of a subscriberbull TMSI- current VLR- valid temporarily- LA- VLR changes
periodicallybull Mobile Station Roaming Number (MSRN)
-Hides the identity and location of the user
-VLR-Generates on request from MSC ndashHLR
-VCC ndashVNDC ndashSN
-MSRN helps HLR to find user for an incoming call
Mobile Terminated
Visitor Location Register (VLR)
bull Suppose your mobile is registered in Mumbai and you are currently in Delhi
1What happens when your friend in Mumbai calls you
Mobile Originated Call
Visitor Location Register (VLR)
bull 2 What happens when you call to a friend
(a)In the home network (Mumbai)
(b)In the visitor network (Delhi)
(c)Both are from Mumbai and currently in Delhi
HANDOVER
bull Should not cause a Cut-off(CALLDROP)
bull Maximum Duration is 60 ms
bull Basic Reason
1 Quality of the Radio Link
2 Load Balancing(MSCBSC to decide ndashTraffic in an Cell ndashHigh)
bull Error Rates and Signal Levels
Four Types of HandOverbull Intra-Cell Handover
--Within a cellbull Inter-Cell Intra-Bsc Handover
--Cell to another cell ndashBscbull Inter-BscIntra-Msc Handover
--Bsc to Bsc -gtMscbull Inter Msc Handover
--Msc to Msc
Types of Handover
Signal Flow-Inter-BSCIntra-MSC
SECURITY
bull Security to AUC and SIM
bull A3 ndashAuthentication
bull A5 ndashEncryption
bull A8 ndashGeneration of Cipher Key
Authentication
bull Any Service ndashGSM
bull Authentication is based on
Individual Authentication Key
IMSI
A3
bull Challenge-Response Method
Generating a Random Number
Authentication
Key Generation and Encryption
GPRS
bull Packet Mode Transfer
bull Small MediumHigh Volumes of Data
bull BroadcastingMulticastingUnicasting
bull Services are charged on Volume of Usages
bull ldquoAlways Onrdquo-No connection to setup prior to data transfer
GPRS-General Packet Radio Service
GPRS Architecture and Interfaces
GPRS ndashProtocol Architecture
GPRSbull GPRS Tunnelling Protocol (GTP)
All data between GSN is transferred between GTP
GTP -gt Reliable TCPUnreilable UDPbull Sub Network Dependent Convergence Protocol (SNDCP)
Used between SGSN and MS ndashto adapt different characterstics
bull LLC ndashHigh Reliability of Packet Transfer bull Base Station Subsystem GPRS Protocol (BSSGP)
-gtConvey Routing amp QOS related information between BSS and SGSN
bull RLC ndashReliable Link bull MAC ndashMapping LLC Frames into GSM Channels
MSC
bull PULSE CODE MODULATION
bull SS7 (BSC-MSC)-gtTransfer all MGT info between MSC(HLRVLRAUCEIROMC)
bull BSSAP An MSC can also control a BSS (via) BSS Application Part
Localization and Callingbull GSM System-Automatic Worldwide
Localization of users
bull Periodic Location Updates
bull ROAMING
Changing VLRrsquos with uninterrupted Availability of all services
One Provider Two providers in a CountryTwo providers in a two different countries
Locating an MSbull Mobile Station International ISDN Number(MSISDN)
CC + National Destination Code + Sub Number(eg+49 179 1234567)
bull IMSI- Internal unique identification of a subscriberbull TMSI- current VLR- valid temporarily- LA- VLR changes
periodicallybull Mobile Station Roaming Number (MSRN)
-Hides the identity and location of the user
-VLR-Generates on request from MSC ndashHLR
-VCC ndashVNDC ndashSN
-MSRN helps HLR to find user for an incoming call
Mobile Terminated
Visitor Location Register (VLR)
bull Suppose your mobile is registered in Mumbai and you are currently in Delhi
1What happens when your friend in Mumbai calls you
Mobile Originated Call
Visitor Location Register (VLR)
bull 2 What happens when you call to a friend
(a)In the home network (Mumbai)
(b)In the visitor network (Delhi)
(c)Both are from Mumbai and currently in Delhi
HANDOVER
bull Should not cause a Cut-off(CALLDROP)
bull Maximum Duration is 60 ms
bull Basic Reason
1 Quality of the Radio Link
2 Load Balancing(MSCBSC to decide ndashTraffic in an Cell ndashHigh)
bull Error Rates and Signal Levels
Four Types of HandOverbull Intra-Cell Handover
--Within a cellbull Inter-Cell Intra-Bsc Handover
--Cell to another cell ndashBscbull Inter-BscIntra-Msc Handover
--Bsc to Bsc -gtMscbull Inter Msc Handover
--Msc to Msc
Types of Handover
Signal Flow-Inter-BSCIntra-MSC
SECURITY
bull Security to AUC and SIM
bull A3 ndashAuthentication
bull A5 ndashEncryption
bull A8 ndashGeneration of Cipher Key
Authentication
bull Any Service ndashGSM
bull Authentication is based on
Individual Authentication Key
IMSI
A3
bull Challenge-Response Method
Generating a Random Number
Authentication
Key Generation and Encryption
GPRS
bull Packet Mode Transfer
bull Small MediumHigh Volumes of Data
bull BroadcastingMulticastingUnicasting
bull Services are charged on Volume of Usages
bull ldquoAlways Onrdquo-No connection to setup prior to data transfer
GPRS-General Packet Radio Service
GPRS Architecture and Interfaces
GPRS ndashProtocol Architecture
GPRSbull GPRS Tunnelling Protocol (GTP)
All data between GSN is transferred between GTP
GTP -gt Reliable TCPUnreilable UDPbull Sub Network Dependent Convergence Protocol (SNDCP)
Used between SGSN and MS ndashto adapt different characterstics
bull LLC ndashHigh Reliability of Packet Transfer bull Base Station Subsystem GPRS Protocol (BSSGP)
-gtConvey Routing amp QOS related information between BSS and SGSN
bull RLC ndashReliable Link bull MAC ndashMapping LLC Frames into GSM Channels
Localization and Callingbull GSM System-Automatic Worldwide
Localization of users
bull Periodic Location Updates
bull ROAMING
Changing VLRrsquos with uninterrupted Availability of all services
One Provider Two providers in a CountryTwo providers in a two different countries
Locating an MSbull Mobile Station International ISDN Number(MSISDN)
CC + National Destination Code + Sub Number(eg+49 179 1234567)
bull IMSI- Internal unique identification of a subscriberbull TMSI- current VLR- valid temporarily- LA- VLR changes
periodicallybull Mobile Station Roaming Number (MSRN)
-Hides the identity and location of the user
-VLR-Generates on request from MSC ndashHLR
-VCC ndashVNDC ndashSN
-MSRN helps HLR to find user for an incoming call
Mobile Terminated
Visitor Location Register (VLR)
bull Suppose your mobile is registered in Mumbai and you are currently in Delhi
1What happens when your friend in Mumbai calls you
Mobile Originated Call
Visitor Location Register (VLR)
bull 2 What happens when you call to a friend
(a)In the home network (Mumbai)
(b)In the visitor network (Delhi)
(c)Both are from Mumbai and currently in Delhi
HANDOVER
bull Should not cause a Cut-off(CALLDROP)
bull Maximum Duration is 60 ms
bull Basic Reason
1 Quality of the Radio Link
2 Load Balancing(MSCBSC to decide ndashTraffic in an Cell ndashHigh)
bull Error Rates and Signal Levels
Four Types of HandOverbull Intra-Cell Handover
--Within a cellbull Inter-Cell Intra-Bsc Handover
--Cell to another cell ndashBscbull Inter-BscIntra-Msc Handover
--Bsc to Bsc -gtMscbull Inter Msc Handover
--Msc to Msc
Types of Handover
Signal Flow-Inter-BSCIntra-MSC
SECURITY
bull Security to AUC and SIM
bull A3 ndashAuthentication
bull A5 ndashEncryption
bull A8 ndashGeneration of Cipher Key
Authentication
bull Any Service ndashGSM
bull Authentication is based on
Individual Authentication Key
IMSI
A3
bull Challenge-Response Method
Generating a Random Number
Authentication
Key Generation and Encryption
GPRS
bull Packet Mode Transfer
bull Small MediumHigh Volumes of Data
bull BroadcastingMulticastingUnicasting
bull Services are charged on Volume of Usages
bull ldquoAlways Onrdquo-No connection to setup prior to data transfer
GPRS-General Packet Radio Service
GPRS Architecture and Interfaces
GPRS ndashProtocol Architecture
GPRSbull GPRS Tunnelling Protocol (GTP)
All data between GSN is transferred between GTP
GTP -gt Reliable TCPUnreilable UDPbull Sub Network Dependent Convergence Protocol (SNDCP)
Used between SGSN and MS ndashto adapt different characterstics
bull LLC ndashHigh Reliability of Packet Transfer bull Base Station Subsystem GPRS Protocol (BSSGP)
-gtConvey Routing amp QOS related information between BSS and SGSN
bull RLC ndashReliable Link bull MAC ndashMapping LLC Frames into GSM Channels
Locating an MSbull Mobile Station International ISDN Number(MSISDN)
CC + National Destination Code + Sub Number(eg+49 179 1234567)
bull IMSI- Internal unique identification of a subscriberbull TMSI- current VLR- valid temporarily- LA- VLR changes
periodicallybull Mobile Station Roaming Number (MSRN)
-Hides the identity and location of the user
-VLR-Generates on request from MSC ndashHLR
-VCC ndashVNDC ndashSN
-MSRN helps HLR to find user for an incoming call
Mobile Terminated
Visitor Location Register (VLR)
bull Suppose your mobile is registered in Mumbai and you are currently in Delhi
1What happens when your friend in Mumbai calls you
Mobile Originated Call
Visitor Location Register (VLR)
bull 2 What happens when you call to a friend
(a)In the home network (Mumbai)
(b)In the visitor network (Delhi)
(c)Both are from Mumbai and currently in Delhi
HANDOVER
bull Should not cause a Cut-off(CALLDROP)
bull Maximum Duration is 60 ms
bull Basic Reason
1 Quality of the Radio Link
2 Load Balancing(MSCBSC to decide ndashTraffic in an Cell ndashHigh)
bull Error Rates and Signal Levels
Four Types of HandOverbull Intra-Cell Handover
--Within a cellbull Inter-Cell Intra-Bsc Handover
--Cell to another cell ndashBscbull Inter-BscIntra-Msc Handover
--Bsc to Bsc -gtMscbull Inter Msc Handover
--Msc to Msc
Types of Handover
Signal Flow-Inter-BSCIntra-MSC
SECURITY
bull Security to AUC and SIM
bull A3 ndashAuthentication
bull A5 ndashEncryption
bull A8 ndashGeneration of Cipher Key
Authentication
bull Any Service ndashGSM
bull Authentication is based on
Individual Authentication Key
IMSI
A3
bull Challenge-Response Method
Generating a Random Number
Authentication
Key Generation and Encryption
GPRS
bull Packet Mode Transfer
bull Small MediumHigh Volumes of Data
bull BroadcastingMulticastingUnicasting
bull Services are charged on Volume of Usages
bull ldquoAlways Onrdquo-No connection to setup prior to data transfer
GPRS-General Packet Radio Service
GPRS Architecture and Interfaces
GPRS ndashProtocol Architecture
GPRSbull GPRS Tunnelling Protocol (GTP)
All data between GSN is transferred between GTP
GTP -gt Reliable TCPUnreilable UDPbull Sub Network Dependent Convergence Protocol (SNDCP)
Used between SGSN and MS ndashto adapt different characterstics
bull LLC ndashHigh Reliability of Packet Transfer bull Base Station Subsystem GPRS Protocol (BSSGP)
-gtConvey Routing amp QOS related information between BSS and SGSN
bull RLC ndashReliable Link bull MAC ndashMapping LLC Frames into GSM Channels
Mobile Terminated
Visitor Location Register (VLR)
bull Suppose your mobile is registered in Mumbai and you are currently in Delhi
1What happens when your friend in Mumbai calls you
Mobile Originated Call
Visitor Location Register (VLR)
bull 2 What happens when you call to a friend
(a)In the home network (Mumbai)
(b)In the visitor network (Delhi)
(c)Both are from Mumbai and currently in Delhi
HANDOVER
bull Should not cause a Cut-off(CALLDROP)
bull Maximum Duration is 60 ms
bull Basic Reason
1 Quality of the Radio Link
2 Load Balancing(MSCBSC to decide ndashTraffic in an Cell ndashHigh)
bull Error Rates and Signal Levels
Four Types of HandOverbull Intra-Cell Handover
--Within a cellbull Inter-Cell Intra-Bsc Handover
--Cell to another cell ndashBscbull Inter-BscIntra-Msc Handover
--Bsc to Bsc -gtMscbull Inter Msc Handover
--Msc to Msc
Types of Handover
Signal Flow-Inter-BSCIntra-MSC
SECURITY
bull Security to AUC and SIM
bull A3 ndashAuthentication
bull A5 ndashEncryption
bull A8 ndashGeneration of Cipher Key
Authentication
bull Any Service ndashGSM
bull Authentication is based on
Individual Authentication Key
IMSI
A3
bull Challenge-Response Method
Generating a Random Number
Authentication
Key Generation and Encryption
GPRS
bull Packet Mode Transfer
bull Small MediumHigh Volumes of Data
bull BroadcastingMulticastingUnicasting
bull Services are charged on Volume of Usages
bull ldquoAlways Onrdquo-No connection to setup prior to data transfer
GPRS-General Packet Radio Service
GPRS Architecture and Interfaces
GPRS ndashProtocol Architecture
GPRSbull GPRS Tunnelling Protocol (GTP)
All data between GSN is transferred between GTP
GTP -gt Reliable TCPUnreilable UDPbull Sub Network Dependent Convergence Protocol (SNDCP)
Used between SGSN and MS ndashto adapt different characterstics
bull LLC ndashHigh Reliability of Packet Transfer bull Base Station Subsystem GPRS Protocol (BSSGP)
-gtConvey Routing amp QOS related information between BSS and SGSN
bull RLC ndashReliable Link bull MAC ndashMapping LLC Frames into GSM Channels
Visitor Location Register (VLR)
bull Suppose your mobile is registered in Mumbai and you are currently in Delhi
1What happens when your friend in Mumbai calls you
Mobile Originated Call
Visitor Location Register (VLR)
bull 2 What happens when you call to a friend
(a)In the home network (Mumbai)
(b)In the visitor network (Delhi)
(c)Both are from Mumbai and currently in Delhi
HANDOVER
bull Should not cause a Cut-off(CALLDROP)
bull Maximum Duration is 60 ms
bull Basic Reason
1 Quality of the Radio Link
2 Load Balancing(MSCBSC to decide ndashTraffic in an Cell ndashHigh)
bull Error Rates and Signal Levels
Four Types of HandOverbull Intra-Cell Handover
--Within a cellbull Inter-Cell Intra-Bsc Handover
--Cell to another cell ndashBscbull Inter-BscIntra-Msc Handover
--Bsc to Bsc -gtMscbull Inter Msc Handover
--Msc to Msc
Types of Handover
Signal Flow-Inter-BSCIntra-MSC
SECURITY
bull Security to AUC and SIM
bull A3 ndashAuthentication
bull A5 ndashEncryption
bull A8 ndashGeneration of Cipher Key
Authentication
bull Any Service ndashGSM
bull Authentication is based on
Individual Authentication Key
IMSI
A3
bull Challenge-Response Method
Generating a Random Number
Authentication
Key Generation and Encryption
GPRS
bull Packet Mode Transfer
bull Small MediumHigh Volumes of Data
bull BroadcastingMulticastingUnicasting
bull Services are charged on Volume of Usages
bull ldquoAlways Onrdquo-No connection to setup prior to data transfer
GPRS-General Packet Radio Service
GPRS Architecture and Interfaces
GPRS ndashProtocol Architecture
GPRSbull GPRS Tunnelling Protocol (GTP)
All data between GSN is transferred between GTP
GTP -gt Reliable TCPUnreilable UDPbull Sub Network Dependent Convergence Protocol (SNDCP)
Used between SGSN and MS ndashto adapt different characterstics
bull LLC ndashHigh Reliability of Packet Transfer bull Base Station Subsystem GPRS Protocol (BSSGP)
-gtConvey Routing amp QOS related information between BSS and SGSN
bull RLC ndashReliable Link bull MAC ndashMapping LLC Frames into GSM Channels
Mobile Originated Call
Visitor Location Register (VLR)
bull 2 What happens when you call to a friend
(a)In the home network (Mumbai)
(b)In the visitor network (Delhi)
(c)Both are from Mumbai and currently in Delhi
HANDOVER
bull Should not cause a Cut-off(CALLDROP)
bull Maximum Duration is 60 ms
bull Basic Reason
1 Quality of the Radio Link
2 Load Balancing(MSCBSC to decide ndashTraffic in an Cell ndashHigh)
bull Error Rates and Signal Levels
Four Types of HandOverbull Intra-Cell Handover
--Within a cellbull Inter-Cell Intra-Bsc Handover
--Cell to another cell ndashBscbull Inter-BscIntra-Msc Handover
--Bsc to Bsc -gtMscbull Inter Msc Handover
--Msc to Msc
Types of Handover
Signal Flow-Inter-BSCIntra-MSC
SECURITY
bull Security to AUC and SIM
bull A3 ndashAuthentication
bull A5 ndashEncryption
bull A8 ndashGeneration of Cipher Key
Authentication
bull Any Service ndashGSM
bull Authentication is based on
Individual Authentication Key
IMSI
A3
bull Challenge-Response Method
Generating a Random Number
Authentication
Key Generation and Encryption
GPRS
bull Packet Mode Transfer
bull Small MediumHigh Volumes of Data
bull BroadcastingMulticastingUnicasting
bull Services are charged on Volume of Usages
bull ldquoAlways Onrdquo-No connection to setup prior to data transfer
GPRS-General Packet Radio Service
GPRS Architecture and Interfaces
GPRS ndashProtocol Architecture
GPRSbull GPRS Tunnelling Protocol (GTP)
All data between GSN is transferred between GTP
GTP -gt Reliable TCPUnreilable UDPbull Sub Network Dependent Convergence Protocol (SNDCP)
Used between SGSN and MS ndashto adapt different characterstics
bull LLC ndashHigh Reliability of Packet Transfer bull Base Station Subsystem GPRS Protocol (BSSGP)
-gtConvey Routing amp QOS related information between BSS and SGSN
bull RLC ndashReliable Link bull MAC ndashMapping LLC Frames into GSM Channels
Visitor Location Register (VLR)
bull 2 What happens when you call to a friend
(a)In the home network (Mumbai)
(b)In the visitor network (Delhi)
(c)Both are from Mumbai and currently in Delhi
HANDOVER
bull Should not cause a Cut-off(CALLDROP)
bull Maximum Duration is 60 ms
bull Basic Reason
1 Quality of the Radio Link
2 Load Balancing(MSCBSC to decide ndashTraffic in an Cell ndashHigh)
bull Error Rates and Signal Levels
Four Types of HandOverbull Intra-Cell Handover
--Within a cellbull Inter-Cell Intra-Bsc Handover
--Cell to another cell ndashBscbull Inter-BscIntra-Msc Handover
--Bsc to Bsc -gtMscbull Inter Msc Handover
--Msc to Msc
Types of Handover
Signal Flow-Inter-BSCIntra-MSC
SECURITY
bull Security to AUC and SIM
bull A3 ndashAuthentication
bull A5 ndashEncryption
bull A8 ndashGeneration of Cipher Key
Authentication
bull Any Service ndashGSM
bull Authentication is based on
Individual Authentication Key
IMSI
A3
bull Challenge-Response Method
Generating a Random Number
Authentication
Key Generation and Encryption
GPRS
bull Packet Mode Transfer
bull Small MediumHigh Volumes of Data
bull BroadcastingMulticastingUnicasting
bull Services are charged on Volume of Usages
bull ldquoAlways Onrdquo-No connection to setup prior to data transfer
GPRS-General Packet Radio Service
GPRS Architecture and Interfaces
GPRS ndashProtocol Architecture
GPRSbull GPRS Tunnelling Protocol (GTP)
All data between GSN is transferred between GTP
GTP -gt Reliable TCPUnreilable UDPbull Sub Network Dependent Convergence Protocol (SNDCP)
Used between SGSN and MS ndashto adapt different characterstics
bull LLC ndashHigh Reliability of Packet Transfer bull Base Station Subsystem GPRS Protocol (BSSGP)
-gtConvey Routing amp QOS related information between BSS and SGSN
bull RLC ndashReliable Link bull MAC ndashMapping LLC Frames into GSM Channels
HANDOVER
bull Should not cause a Cut-off(CALLDROP)
bull Maximum Duration is 60 ms
bull Basic Reason
1 Quality of the Radio Link
2 Load Balancing(MSCBSC to decide ndashTraffic in an Cell ndashHigh)
bull Error Rates and Signal Levels
Four Types of HandOverbull Intra-Cell Handover
--Within a cellbull Inter-Cell Intra-Bsc Handover
--Cell to another cell ndashBscbull Inter-BscIntra-Msc Handover
--Bsc to Bsc -gtMscbull Inter Msc Handover
--Msc to Msc
Types of Handover
Signal Flow-Inter-BSCIntra-MSC
SECURITY
bull Security to AUC and SIM
bull A3 ndashAuthentication
bull A5 ndashEncryption
bull A8 ndashGeneration of Cipher Key
Authentication
bull Any Service ndashGSM
bull Authentication is based on
Individual Authentication Key
IMSI
A3
bull Challenge-Response Method
Generating a Random Number
Authentication
Key Generation and Encryption
GPRS
bull Packet Mode Transfer
bull Small MediumHigh Volumes of Data
bull BroadcastingMulticastingUnicasting
bull Services are charged on Volume of Usages
bull ldquoAlways Onrdquo-No connection to setup prior to data transfer
GPRS-General Packet Radio Service
GPRS Architecture and Interfaces
GPRS ndashProtocol Architecture
GPRSbull GPRS Tunnelling Protocol (GTP)
All data between GSN is transferred between GTP
GTP -gt Reliable TCPUnreilable UDPbull Sub Network Dependent Convergence Protocol (SNDCP)
Used between SGSN and MS ndashto adapt different characterstics
bull LLC ndashHigh Reliability of Packet Transfer bull Base Station Subsystem GPRS Protocol (BSSGP)
-gtConvey Routing amp QOS related information between BSS and SGSN
bull RLC ndashReliable Link bull MAC ndashMapping LLC Frames into GSM Channels
Four Types of HandOverbull Intra-Cell Handover
--Within a cellbull Inter-Cell Intra-Bsc Handover
--Cell to another cell ndashBscbull Inter-BscIntra-Msc Handover
--Bsc to Bsc -gtMscbull Inter Msc Handover
--Msc to Msc
Types of Handover
Signal Flow-Inter-BSCIntra-MSC
SECURITY
bull Security to AUC and SIM
bull A3 ndashAuthentication
bull A5 ndashEncryption
bull A8 ndashGeneration of Cipher Key
Authentication
bull Any Service ndashGSM
bull Authentication is based on
Individual Authentication Key
IMSI
A3
bull Challenge-Response Method
Generating a Random Number
Authentication
Key Generation and Encryption
GPRS
bull Packet Mode Transfer
bull Small MediumHigh Volumes of Data
bull BroadcastingMulticastingUnicasting
bull Services are charged on Volume of Usages
bull ldquoAlways Onrdquo-No connection to setup prior to data transfer
GPRS-General Packet Radio Service
GPRS Architecture and Interfaces
GPRS ndashProtocol Architecture
GPRSbull GPRS Tunnelling Protocol (GTP)
All data between GSN is transferred between GTP
GTP -gt Reliable TCPUnreilable UDPbull Sub Network Dependent Convergence Protocol (SNDCP)
Used between SGSN and MS ndashto adapt different characterstics
bull LLC ndashHigh Reliability of Packet Transfer bull Base Station Subsystem GPRS Protocol (BSSGP)
-gtConvey Routing amp QOS related information between BSS and SGSN
bull RLC ndashReliable Link bull MAC ndashMapping LLC Frames into GSM Channels
Types of Handover
Signal Flow-Inter-BSCIntra-MSC
SECURITY
bull Security to AUC and SIM
bull A3 ndashAuthentication
bull A5 ndashEncryption
bull A8 ndashGeneration of Cipher Key
Authentication
bull Any Service ndashGSM
bull Authentication is based on
Individual Authentication Key
IMSI
A3
bull Challenge-Response Method
Generating a Random Number
Authentication
Key Generation and Encryption
GPRS
bull Packet Mode Transfer
bull Small MediumHigh Volumes of Data
bull BroadcastingMulticastingUnicasting
bull Services are charged on Volume of Usages
bull ldquoAlways Onrdquo-No connection to setup prior to data transfer
GPRS-General Packet Radio Service
GPRS Architecture and Interfaces
GPRS ndashProtocol Architecture
GPRSbull GPRS Tunnelling Protocol (GTP)
All data between GSN is transferred between GTP
GTP -gt Reliable TCPUnreilable UDPbull Sub Network Dependent Convergence Protocol (SNDCP)
Used between SGSN and MS ndashto adapt different characterstics
bull LLC ndashHigh Reliability of Packet Transfer bull Base Station Subsystem GPRS Protocol (BSSGP)
-gtConvey Routing amp QOS related information between BSS and SGSN
bull RLC ndashReliable Link bull MAC ndashMapping LLC Frames into GSM Channels
Signal Flow-Inter-BSCIntra-MSC
SECURITY
bull Security to AUC and SIM
bull A3 ndashAuthentication
bull A5 ndashEncryption
bull A8 ndashGeneration of Cipher Key
Authentication
bull Any Service ndashGSM
bull Authentication is based on
Individual Authentication Key
IMSI
A3
bull Challenge-Response Method
Generating a Random Number
Authentication
Key Generation and Encryption
GPRS
bull Packet Mode Transfer
bull Small MediumHigh Volumes of Data
bull BroadcastingMulticastingUnicasting
bull Services are charged on Volume of Usages
bull ldquoAlways Onrdquo-No connection to setup prior to data transfer
GPRS-General Packet Radio Service
GPRS Architecture and Interfaces
GPRS ndashProtocol Architecture
GPRSbull GPRS Tunnelling Protocol (GTP)
All data between GSN is transferred between GTP
GTP -gt Reliable TCPUnreilable UDPbull Sub Network Dependent Convergence Protocol (SNDCP)
Used between SGSN and MS ndashto adapt different characterstics
bull LLC ndashHigh Reliability of Packet Transfer bull Base Station Subsystem GPRS Protocol (BSSGP)
-gtConvey Routing amp QOS related information between BSS and SGSN
bull RLC ndashReliable Link bull MAC ndashMapping LLC Frames into GSM Channels
SECURITY
bull Security to AUC and SIM
bull A3 ndashAuthentication
bull A5 ndashEncryption
bull A8 ndashGeneration of Cipher Key
Authentication
bull Any Service ndashGSM
bull Authentication is based on
Individual Authentication Key
IMSI
A3
bull Challenge-Response Method
Generating a Random Number
Authentication
Key Generation and Encryption
GPRS
bull Packet Mode Transfer
bull Small MediumHigh Volumes of Data
bull BroadcastingMulticastingUnicasting
bull Services are charged on Volume of Usages
bull ldquoAlways Onrdquo-No connection to setup prior to data transfer
GPRS-General Packet Radio Service
GPRS Architecture and Interfaces
GPRS ndashProtocol Architecture
GPRSbull GPRS Tunnelling Protocol (GTP)
All data between GSN is transferred between GTP
GTP -gt Reliable TCPUnreilable UDPbull Sub Network Dependent Convergence Protocol (SNDCP)
Used between SGSN and MS ndashto adapt different characterstics
bull LLC ndashHigh Reliability of Packet Transfer bull Base Station Subsystem GPRS Protocol (BSSGP)
-gtConvey Routing amp QOS related information between BSS and SGSN
bull RLC ndashReliable Link bull MAC ndashMapping LLC Frames into GSM Channels
Authentication
bull Any Service ndashGSM
bull Authentication is based on
Individual Authentication Key
IMSI
A3
bull Challenge-Response Method
Generating a Random Number
Authentication
Key Generation and Encryption
GPRS
bull Packet Mode Transfer
bull Small MediumHigh Volumes of Data
bull BroadcastingMulticastingUnicasting
bull Services are charged on Volume of Usages
bull ldquoAlways Onrdquo-No connection to setup prior to data transfer
GPRS-General Packet Radio Service
GPRS Architecture and Interfaces
GPRS ndashProtocol Architecture
GPRSbull GPRS Tunnelling Protocol (GTP)
All data between GSN is transferred between GTP
GTP -gt Reliable TCPUnreilable UDPbull Sub Network Dependent Convergence Protocol (SNDCP)
Used between SGSN and MS ndashto adapt different characterstics
bull LLC ndashHigh Reliability of Packet Transfer bull Base Station Subsystem GPRS Protocol (BSSGP)
-gtConvey Routing amp QOS related information between BSS and SGSN
bull RLC ndashReliable Link bull MAC ndashMapping LLC Frames into GSM Channels
Authentication
Key Generation and Encryption
GPRS
bull Packet Mode Transfer
bull Small MediumHigh Volumes of Data
bull BroadcastingMulticastingUnicasting
bull Services are charged on Volume of Usages
bull ldquoAlways Onrdquo-No connection to setup prior to data transfer
GPRS-General Packet Radio Service
GPRS Architecture and Interfaces
GPRS ndashProtocol Architecture
GPRSbull GPRS Tunnelling Protocol (GTP)
All data between GSN is transferred between GTP
GTP -gt Reliable TCPUnreilable UDPbull Sub Network Dependent Convergence Protocol (SNDCP)
Used between SGSN and MS ndashto adapt different characterstics
bull LLC ndashHigh Reliability of Packet Transfer bull Base Station Subsystem GPRS Protocol (BSSGP)
-gtConvey Routing amp QOS related information between BSS and SGSN
bull RLC ndashReliable Link bull MAC ndashMapping LLC Frames into GSM Channels
Key Generation and Encryption
GPRS
bull Packet Mode Transfer
bull Small MediumHigh Volumes of Data
bull BroadcastingMulticastingUnicasting
bull Services are charged on Volume of Usages
bull ldquoAlways Onrdquo-No connection to setup prior to data transfer
GPRS-General Packet Radio Service
GPRS Architecture and Interfaces
GPRS ndashProtocol Architecture
GPRSbull GPRS Tunnelling Protocol (GTP)
All data between GSN is transferred between GTP
GTP -gt Reliable TCPUnreilable UDPbull Sub Network Dependent Convergence Protocol (SNDCP)
Used between SGSN and MS ndashto adapt different characterstics
bull LLC ndashHigh Reliability of Packet Transfer bull Base Station Subsystem GPRS Protocol (BSSGP)
-gtConvey Routing amp QOS related information between BSS and SGSN
bull RLC ndashReliable Link bull MAC ndashMapping LLC Frames into GSM Channels
GPRS
bull Packet Mode Transfer
bull Small MediumHigh Volumes of Data
bull BroadcastingMulticastingUnicasting
bull Services are charged on Volume of Usages
bull ldquoAlways Onrdquo-No connection to setup prior to data transfer
GPRS-General Packet Radio Service
GPRS Architecture and Interfaces
GPRS ndashProtocol Architecture
GPRSbull GPRS Tunnelling Protocol (GTP)
All data between GSN is transferred between GTP
GTP -gt Reliable TCPUnreilable UDPbull Sub Network Dependent Convergence Protocol (SNDCP)
Used between SGSN and MS ndashto adapt different characterstics
bull LLC ndashHigh Reliability of Packet Transfer bull Base Station Subsystem GPRS Protocol (BSSGP)
-gtConvey Routing amp QOS related information between BSS and SGSN
bull RLC ndashReliable Link bull MAC ndashMapping LLC Frames into GSM Channels
GPRS-General Packet Radio Service
GPRS Architecture and Interfaces
GPRS ndashProtocol Architecture
GPRSbull GPRS Tunnelling Protocol (GTP)
All data between GSN is transferred between GTP
GTP -gt Reliable TCPUnreilable UDPbull Sub Network Dependent Convergence Protocol (SNDCP)
Used between SGSN and MS ndashto adapt different characterstics
bull LLC ndashHigh Reliability of Packet Transfer bull Base Station Subsystem GPRS Protocol (BSSGP)
-gtConvey Routing amp QOS related information between BSS and SGSN
bull RLC ndashReliable Link bull MAC ndashMapping LLC Frames into GSM Channels
GPRS Architecture and Interfaces
GPRS ndashProtocol Architecture
GPRSbull GPRS Tunnelling Protocol (GTP)
All data between GSN is transferred between GTP
GTP -gt Reliable TCPUnreilable UDPbull Sub Network Dependent Convergence Protocol (SNDCP)
Used between SGSN and MS ndashto adapt different characterstics
bull LLC ndashHigh Reliability of Packet Transfer bull Base Station Subsystem GPRS Protocol (BSSGP)
-gtConvey Routing amp QOS related information between BSS and SGSN
bull RLC ndashReliable Link bull MAC ndashMapping LLC Frames into GSM Channels
GPRS ndashProtocol Architecture
GPRSbull GPRS Tunnelling Protocol (GTP)
All data between GSN is transferred between GTP
GTP -gt Reliable TCPUnreilable UDPbull Sub Network Dependent Convergence Protocol (SNDCP)
Used between SGSN and MS ndashto adapt different characterstics
bull LLC ndashHigh Reliability of Packet Transfer bull Base Station Subsystem GPRS Protocol (BSSGP)
-gtConvey Routing amp QOS related information between BSS and SGSN
bull RLC ndashReliable Link bull MAC ndashMapping LLC Frames into GSM Channels
GPRSbull GPRS Tunnelling Protocol (GTP)
All data between GSN is transferred between GTP
GTP -gt Reliable TCPUnreilable UDPbull Sub Network Dependent Convergence Protocol (SNDCP)
Used between SGSN and MS ndashto adapt different characterstics
bull LLC ndashHigh Reliability of Packet Transfer bull Base Station Subsystem GPRS Protocol (BSSGP)
-gtConvey Routing amp QOS related information between BSS and SGSN
bull RLC ndashReliable Link bull MAC ndashMapping LLC Frames into GSM Channels
