GSM RF Quick Mobile

International Data
Station
Network
Timing Advance (BTS)
Idle Channel Observation (BTS)
Reference Guide (MSISDN) -> the telephone Measurement Reporting (BTS)
number of the mobile.
PRINCIPLE COMPONENT GROUPS OF GSM BSS CONFIGURATIONS:
SYSTEMS:
BASE STATION SYSTEM (BSS): The BTS and BSC may
Mobile Station (MS) -> part of the Equipment found at a cell either be located at the same cell
network that the subscriber will see. site. It provides the link between the site “colocated” or located at
mobile equipment and the MSC. different sites “remote”.
Base Station System (BSS) ->
part of the network, which provides Base Station Controller Another BSS configuration
the radio interconnection from the (BSC) -> provides the control for is the Daisy Chain. A BTS need not
MS to the land based switching the BSS. It communicates directly communicate directly with the BSC,
equipment. with the MSC and may control single which controls it; it can be
or multiple BTSs. connected to the BSC via a chain of
Network Switching System -> BTSs.
part which provides for Base Transceiver Station
interconnection between the GSM (BTS) -> contains the RF Daisy chaining reduces the
network and the Public Switched components that provide the air amount of cabling required to set up
Telephone Network (PSTN). It interface for a particular cell. This is a network as a BTS can be
consists of the Mobile Services the part of the GSM network, which connected to its nearest BTS rather
Switching Center (MSC) and its communicates with the mobile. The than all the way to the BSC.
associated system control databases antenna is included as part of the
and processors together with the BTS. Problems may arise when
required interfaces. chaining the BTSs due to the
Transcoder (XCDR) -> transmission delay through the
Operations and Maintenance used to compact the signals from the chain. The length of the chain must
System -> enables the network mobile station so that they are more therefore be kept sufficiently short
operator to configure and maintain efficiently sent over the terrestrial to prevent the round trip speech
the network from a central location. interfaces. delay becoming too long.

Other topologies are also

MOBILE STATION (MS): BASE STATION CONTROLLER (BSC): permitted including stars and loops
 Controls up to 40 BTS. (ring). Loops or rings are used to
Mobile Equipment ->  Conveys information introduce redundancy into the
hardware used by the subscriber to to/from the BTS. network, for example if a BTS
access the network.  Connects terrestrial connection was lost the BTS may still
circuits and channels be able to communicate with the
Subscriber Identity on the air interface. BSC if a second connection was
Module (SIM) -> card which plugs  Controls handovers available.
into the mobile equipment. It performed by BTSs
identifies the mobile subscriber and under its control.
also provides other information TRANSCODER (XCDR):
regarding the service that subscriber
should receive. An identity number BASE TRANSCEIVER STATION (BTS): Required to convert speech
called the International Mobile  Contains RF hardware. or data output from the MSC (64
Subscriber Identity (IMSI) identifies  Limited control KBPS PCM) into the form specified
the subscriber. functionality. by SMG specifications for
 3-5 RF carrier per BTS. transmissions over the air interface,
 20-40 simultaneous that is, between the BSS and MS.
SUBSCRIBER IDENTITY MODULE (SIM): calls per BTS.
It maybe located with the
International Mobile MSC, BSC or BTS. If it is located at
Subscriber Identity (IMSI) -> BSS FUNCTIONALITY (CONTROL): the MSC, the 13KBPS channels are
identifies the mobile subscriber. It is transmitted to the BSS by “bit
only transmitted over the air during TERRESTRIAL CHANNEL MANAGEMENT stuffing” them to a data transfer rate
initialization. Channel Allocation (BSC) of 16KBPS and then filling four of
them into each 64KBPS terrestrial
Temporary Mobile RADIO CHANNEL MANAGEMENT circuit. Thus each 30 channel 2MBPS
Subscriber Identity (TMSI) -> Channel Configuration Management PCM link can carry 120 GSM –
identifies the subscriber and is (BSC) specified voice channels, with
periodically changed by the system Handover Control (BSC) obvious cost savings for the system
management to protect the operator. Therefore, co-location
subscriber from identified by Frequency Hopping (BSC/BTS) with the MSC is expected to be the
someone attempting to monitor the Traffic Channel Management most common arrangement, as it
radio interface. (BSC/BTS) will reduce the number of 2MBPS
Control Channel Management links required.
Location Area Identity (BSC/BTS)
(LAI) -> identifies the current Encryption (BSC/BTS)
location of the subscriber. Paging (BSC/BTS) NETWORK SWITCHING SYSTEM:
Power Control (BSC/BTS)
Subscriber Identity Key Includes the main switching
(Ki) -> used to authenticate the SIM Transcoding/Rate Adaptation (BTS) functions of the GSM network. It
card. Channel Coding/Decoding (BTS) contains the databases required for
subscriber data and mobility
management. Its main function is to private data networks currently
manage communications between Contains the master available.
the GSM network and other database of all the subscribers to a
telecommunications networks. GSM PLMN. The basic features of the
IWF are listed below:
• Mobile Services Switching • Rate conversion
Center – MSC VISITOR LOCATION REGISTER (VLR): • Protocol adaptation
• Home Location register - HLR
• Visitor Location register – VLR Contains a copy of most of
• Equipment Identity register – the data stored at the HLR. It is, ECHO CANCELLER (EC):
EIR however, temporary data, which
• Authentication Center – AUC exists for only as long as the Used on the PSTN side of
• Interworking Function – IWF subscriber is “active” in the the MSC for all voice circuits. Echo
• Echo Cancellers – EC particular area covered by the VLR. control is required at the switch
because the GSM inherent system
The VLR provides a local delay can cause an unacceptable
MOBILE SERVICES SWITCHING CENTER database for the subscriber echo condition even on short
(MSC): whenever he is physically located distance PSTN circuit connections.
within a PLMN, this may or may not
Used for call switching and be the “home” system. This function The total round trip delay
its overall purpose is the same as eliminates the need for excessive introduced by the GSM system (the
that of any telephone exchange. and time-consuming references to cumulative delay caused by call
the “home” HLR database. processing, speech encoding and
Each MSC provides service decoding, etc) is approximately 180
to mobiles located within a defined Additional data stored in mS.
geographic coverage area; the the VLR:
network typically contains more than The standard EC will
one MSC. • Mobile Status (busy/free/no provide cancellation of up to 68
answer, etc.) milliseconds on the “tail circuit” (the
The functions carried out by • Location Area Identity (LAI) tail circuit is the connection between
the MSC are listed below: – Cells within the Private Land the output of the EC and the land
Mobile Network (PLMN) are telephone).
• Call Processing – includes grouped together into
control of data/voice call setup, geographical areas and each
inter-BSS and inter-MSC area is assigned a Location Area NETWORK MANAGEMENT CENTER (NMC):
handovers and control of Identity (LAI), a location area
mobility management. may typically contain 30 cells. Has a view of the entire
• Temporary Mobile Subscriber PLMN and is responsible for the
• Operations and Maintenance
Identity (TMSI) – Updated management of the network as a
Support – includes database frequently, and this makes it whole. The NMC resides at the top of
management, traffic metering very difficult for the call to be the hierarchy and provides global
and measurement and a man traced and therefore provides a network management.
machine interface. high degree of security for the
• Internetwork Interworking – subscriber. The TMSI may be Functionality of the NMC:
manages the interface between updated in any of the following • Monitors trunk routes between
the GSM network and the PSTN. situations: call setup, on entry nodes on the network
• Billing – collects call billing to a new LAI, on entry to a new • Monitors High Level Alarms
data. VLR. • Monitors OMC regions and
• Mobile Subscriber Roaming provides assistance to OMC staff
Number (MSRN) – Assigned • Passes on knowledge from one
HOME LOCATION REGISTER (HLR): from a list of numbers held at OMC region to another to
the VLR (MSC). It is then used improve problem solving
Reference database for to route the call to the MSC, strategies
subscriber parameters. which controls the base station • Enables long term planning for
in the MSs current location. the entire network
Parameters stored in the
HLR: Typically, there will be one
VLR per MSC. OPERATIONS AND MAINTENANCE CENTER
• Subscriber ID (IMSI and (OMC):
MSISDN)
• Current subscriber VLR (current EQUIPMENT IDENTITY REGISTER (EIR): A centralized facility that
location) supports the day to day
• Supplementary services Contains a centralized management of cellular network as
subscribed to database for validating the IMEI. well as providing a database for long
• Supplementary service This database is concerned solely term network engineering and
information (eg. Current with MS equipment and not with the planning tools.
forwarding number) subscriber who is using it to make or
• Subscriber status receive a call. There are two types of
(registered/deregistered) OMC:
• Authentication key and AUC • OMC( R) - OMC assigned
functionality INTERWORKING FUNCTION (IWF): specifically to the Base Station
• Temporary Mobile Subscriber System
Identity (TMSI) Provides the function to • OMC(S) – OMC assigned
• Mobile subscriber Roaming enable the GSM system to interface specifically to the Network
Number (MSRN) with the various forms of public and Switching System
 The OMC should support the phase change therefore is no longer
following functions: instantaneous but spread out.
• Event/Alarm Management PHYSICAL AND LOGICAL CHANNELS:
• Fault Management
• Performance Management Physical Channels
• Configuration Management medium over which the information
• Security Management is carried; in the case of a terrestrial
interface this would be a cable.
WHY GSM USES A DIGITAL AIR INTERFACE: Logical Channels ->
consist of the information carried
• It is “noise robust,” enabling the over the physical channel.
use of tighter frequency reuse
patters and minimizing
interference problems. GSM PHYSICAL CHANNELS:
• It incorporates error corrections,
thus protecting the traffic that it Time is divided into discrete
carries. periods called “timeslot.” The
• It offers greatly enhanced timeslots are arranged in sequence
privacy to subscribers and and are conventionally numbered 0
security to system operators. to 7. Each repetition of this
• It is ISDN compatible, uses sequence is called a “TDMA frame.”
open standardized interfaces
and offers an enhanced range of Each mobile telephone call
services to its subscribers. occupies one timeslot (1-7)
[wherein 0 is used for signaling]
within the frame until the call is
MODULATION TECHNIQUES: terminated, or a handover occurs.
The TDMA frames are then built into
Amplitude modulation is further frame structures according to
very simple to implement for the type of channel.
analogue signals but it is prone to
noise. The information carried in
one timeslot is called a “burst.”
Frequency modulation is Each data burst, occupying its
more complicated to implement but allocated timeslot within successive
provides a better tolerance to noise. TDMA frames, provides a single GSM
physical channel carrying a varying
Phase modulation provides number of logical channels between
the best tolerance to noise but it is the MS and BTS.
very complex to implement for
analogue signals and therefore is
rarely used. GSM LOGICAL CHANNELS:
Traffic Channels (TCH)
TRANSMISSION OF DIGITAL SIGNALS: -> carries speech or data
information.
Phase Shift Keying (PSK)
-> provides a high degree of noise TCH/FS Full rate speech channel
tolerance, however, there is a (13KBPS net, 22.8KBPS gross)
problem with this form of TCH/HS Half rate speech channel
modulation. (6.5KBPS net, 11.4KBPS gross)
When the signal changes TCH/9.6 Data channel 9.6KBPS
phase abruptly high frequency TCH/4.8 Data channel 4.8KBPS
components are produced, thus, a TCH/2.4 Data channel 2.4KBPS
wide bandwidth would be required
for transmission. Control Channels (CCH)
Four main groups of control
Gaussian Minimum Shift channels:
Keying (GMSK) -> the phase • Broadcast Control Channel
change which represents the change (BCCH) -> transmitted at all
from a digital “1” or a “0” does not times and conveys information
occur instantaneously as it does with about cell timing and
BPSK. Instead it occurs over a configuration.
period of time and therefore the • Common Control Channel
addition of high frequency (CCCH) -> used by BSS and MS
components to the spectrum is when trying to initiate a
reduced. connection over the air.
With GMSK, first the digital • Dedicated Control Channel
signal is filtered through a Gaussian (DCCH) -> used to convey
filter. This filter causes distortion to signaling information during call
the signal; the corners are rounded setup.
off. This distorted signal is then used • Associated Control Channel
to phase shift the carrier signal. The (ACCH) -> used to transmit
signaling information when a
call is in progress.
-> BROADCAST CONTROL CHANNEL (BCCH):
Transmitted by the BTS at
all times. The RF carrier used to
transmit the BCCH is referred to as
the BCCH carrier.
The information carried on
the BCCH is monitored by the mobile
periodically (at least every 30s)
when it is switched on and not in a
call.
Carries the following
information:
• Location Area Identity (LAI)
• List of neighboring cells
• List of frequencies used in the
cell
• Cell identity
• Power control indicator
• DTX permitted
• Access control
• CBCH description
It is transmitted at constant
power at all times and all mobiles,
which may seek to use it, measure
its signal strength. “Dummy” bursts
are transmitted to ensure continuity
when there is no BCCH carrier
traffic.
Frequency Correction
Channel (FCCH) -> transmitted
frequently and is more easily
detected by the mobile than the
SCH. When the FCCH has been
detected the mobile corrects the
frequency of its internal time base.
It is then able to detect the SCH,
which contains the precise
synchronization information it
requires.
Synchronization Channel
(SCH) -> carries the information to
enable the mobile to synchronize to
the TDMA frame structure and know
the timing of the individual
timeslots. The following parameters
are also carried:
• Frame number
• Base Station Identity Code
(BSIC)
COMMON CONTROL CHANNEL (CCCH):
Responsible for transferring
control information between all
mobiles and the BTS. This is
necessary for the implementation of
“call origination” and “call
paging” functions.
It consists of the following:
• Random Access Control
Channel (RACH) ->
transmitted by the mobile when
it wishes to gain access to the
 system. This occurs when the
mobile initiates a call or
responds to a page.
• Paging Channel (PCH) ->
transmitted by the BTS when it
wishes to contact a specific
mobile.
• Access Grant Control
Channel (AGCH) ->
transmitted by the BTS. It is
used to assign dedicated
resources to an MS such as a
Standalone Dedicated control
Channel (SDCCH).
• Cell Broadcast Channel
(CBCH) -> used to transmit
messages to be broadcast to all
mobiles within a cell (eg. Traffic
info). The CBCH will steal frame
from an SDCH to do this.
Active mobiles (ie. switched
on and “attached” to the system)
must frequently monitor both BCCH
and CCCH. The CCCH will be
transmitted on the RF carrier with
the BCCH.
DEDICATED CONTROL CHANNELS (DCCH):
Assigned to a single mobile
connection for call setup or for
measurement and handover
purposes:
Standalone Dedicated
Control Channel (SDCCH) ->
supports the transfer of data to and
from the mobile during call setup. It
also carries information for call
forwarding and transmission of short
messages.
ASSOCIATED CONTROL CHANNELS (ACCH):
These channels can be
associated with either an SDCCH or
a TCH. They are used for carrying
information associated with the
process being carried out on either
the SDCCH or the TCH.
• Slow Associated Control
Channel (SACCH) -> conveys
power control and timing
information in the downlink
direction (towards t he MS) and
RSSI (Receive Signal Strength
Indicator) and link quality
reports in the uplink direction.
• Fast Associated Control
Channel (FACCH) ->
transmitted instead of a TCH.
The FACCH “steals” the TCH
bursts and inserts its own
information. The FACCH is used
to carry out user authentication
and handovers.
CHANNEL COMBINATIONS:
The different logical channel decode BCCH information from
types mentioned are grouped into surrounding cells.
what are called channel
combinations. The four most The “hyperframe” consists
common channel combinations are of 2048 superframes; this is used in
listed below: connection with ciphering and
frequency hopping. The hyperframe
Full Rate Traffic Channel lasts for over three hours, after this
Combination = TCH8/FACCH + time the ciphering and frequency
SACCH algorithms are restarted.
Broadcast Channel Combination = Info:
BCCH + CCCH9 1 Hyperframe = 2048 superframes =
2,715,648 TDMA frames = 3h 28min
Dedicated Channel Combination = 53sec 760msec
SDCCH8 + SACCH8
1 Superframe = 1326 TDMA frames
Combined Channel Combination = = 51 (26-frame) or 26 (51-frame)
BCCH + CCCH3 + SDCCH4 + multiframes = 6.12sec
SACCH4
Traffic Channels = 26-frame
multiframe = 120msec
CHANNEL COMBINATIONS AND TIMESLOTS:
Control Channels = 51-frame
The channel combinations multiframe = 235.8msec
we have identified are sent over the
air interface in a selected timeslot. TDMA Frame = 4.615msec
Some channel combinations may be
sent on any timeslot but others must
be sent specific timeslots. Below is a GSM BURSTS:
table mapping the channel
combinations to their respective Info -> This is the area in which the
timeslots. speech, data or control information
is held.
Channel Combination (Timeslots)
Guard Period -> The receiver can
Traffic (Any timeslot) only receive the burst and decode it
if it is received within the timeslot
Broadcast (0,2,4,6 – 0 must be used designated for it. The timing,
first) therefore, must be extremely
accurate but the structure does allow
Dedicated (Any timeslot) for a small margin of error by
incorporating a “guard period.” To be
Combined (0 only) precise, the timeslot is 0.577msec
long, whereas the burst is only
0.546msec long; therefore there is a
CHANNEL COMBINATIONS AND MULTIFRAMES: time difference of 0.031msec to
enable the burst to hit the timeslot.
Several logical channels
share one timeslot. The individual Stealing Flags -> These two bits
channels are sequenced so that each are set when a traffic channel burst
receives the amount of time it has been “stolen” by a FACCH. One
requires. This sequencing is carried bit set indicates that half of the block
out by the use of multiframes, each has been stolen.
channel combination has a different
multiframe configuration. Training Sequence -> This is used
by the receiver’s equalizer as it
Traffic channels occupy a estimates the transfer characteristic
26-frame multiframe structure and of the physical path between the
control channels occupy a 51-frame BTS and the mobile. The training
structure. sequence is 26 bits long.
Tail Bits -> These are used to
SUPERFRAMES AND HYPERFRAMES: indicate the beginning and end of
the burst.
Any given frame number
will only occur simultaneously in
both multiframes every 1326 TDMA GSM Bursts:
(26x51). The number of TDMA
frames is termed a “superframe” All bursts of whatever type
and it takes 6.12s to transmit. This have to be timed so that they are
arrangement means that the timing received within the appropriate
of the traffic channel multiframe is timeslot of the TDMA frame. The
always moving in relation to that of burst is the sequence of bits
the control channel multiframe and transmitted by the BTS or mobile,
this enables a mobile to receive and the timeslot is the discrete period of
real time within which it must arrive
in order to be correctly decoded by
the receiver.
• Normal Burst -> carries traffic
channels and all types of control
channels. Bidirectional.
• Frequency Correction Burst
-> carries FCCH downlink to
correct the frequency of the
mobile’s local oscillator,
effectively locking it to that of
the BTS.
• Synchronization Burst -> its
function is to carry SCH
downlink, synchronizing the
timing of the mobile to that of
the BTS.
• Dummy Burst -> used when
there is no information to be
carried on the unused timeslots
of the BCCH carrier. Downlink
only.
• Access Burst -> much shorter
duration than the other types.
The increased period is
necessary because the timing of
its transmission is unknown.
When this burst is transmitted
the BTS does not know the
location of the mobile and
therefore the timing of the
message from the mobile can
not be accurately accounted for.
The access burst is uplink only.
Info:
1 Timeslot = 156.25 bits duration
 The BSC relays the
message to the MSC
via C7 signaling links,
and the MSC then sets
up the call to the land
subscriber via the
PSTN.
 The MSC connects the
PSTN to the GSM
network, and allocates
a terrestrial circuit to
the BSS serving MSs
location.
 The BSC of that BSS
sets up the air-
interface channel to the
MS and then connects
that channel to the
allocated terrestrial
circuit, thus completing
the connection between
the two subscribers.
In The Opposite Land – Mobile
Direction =
 The MSC receives the
initial data message
from the PSTN via C7
and then establishes
the location of the
mobile by referencing
the HLR.
 It then knows which
other MSC to contact to
establish the call and
that MSC then sets up
the call via the BSS
serving the MSs
location.

Normal Burst = 3TB + 57

Encrypted Bits + 1SF + 26 Training
Seq. + 1SF + 57 Encrypted Bits +
3TB + 8.25GP

Freq. Correction Burst = 3TB +

142 Fixed Bits + 3TB + 8.25GP

Synchronization Burst = 3TB + 39

Encrypted Bits + 64 Synchronization
Seq. + 39 Encrypted Bits + 3TB +
8.25GP

Dummy Burst = 3TB + 57 Fixed

Bits + 1SF + 26 Training Seq. + 1SF
+ 57 Fixed Bits +3TB + 8.25GP

Access Burst = 3TB + 41

Synchronization Seq. + 36
Encrypted Bits + 3TB + 68.25GP

Note:

TB – tail bits
SF – stealing flags
GP – guard period

GSM BASIC CALL SEQUENCE:

In The Mobile – Land Direction =

 The BTS receives a
data message from the
mobile, which it passes
it to the BSC.