Wi 2G

2G Mobile Communication Systems
2G Review: GSM Services Architecture Protocols Call setup Mobility management Security HSCSD GPRS Architecture Protocols QoS EDGE
References
Jochen Schiller: Mobile Communications (German and English), Addison-Wesley, 2000 (most of the material covered in this chapter is based on the book) Michel Mouly, Marie-Bernadette Pautet: The GSM System for Mobile Communications. Telecom Pub, Juni 1992 Jrg Eberspaecher, u. a.: GSM Switching, Services and Protocols. John Wiley and Sons Ltd, 2001 Siegmund Redl, u. a.: GSM and Personal Communications Handbook. Artech House, 1998 Gunnar Heine: GSM Networks: Protocols, Terminology, and Implementation. Artech House Mobile Communications Library. Artech House Publishers, 1998
UMTS Networks
Andreas Mitschele-Thiel
9-May-03
GSM: Overview
formerly: Groupe Spciale Mobile (founded 1982) now: Global System for Mobile Communication Pan-European standard (ETSI, European Telecommunications Standardisation Institute) simultaneous introduction of essential services in three phases (1991, 1994, 1996) by the European telecommunication administrations seamless roaming within Europe possible today many providers all over the world use GSM (more than 170 countries in Asia, Africa, Europe, Australia, America) more than 700 million subscribers more than 70% of all digital mobile phones use GSM in Germany: GSM900 (D1 and D2, 2x25MHz) and DCS1800 (E-plus and O2, 2x75MHz) over 10 billion SMS per month in Germany, > 200 billion/month worldwide
UMTS Networks Andreas Mitschele-Thiel 9-May-03 3
GSM compared to 1G Systems

Communication mobile, wireless communication; support for voice and data services Total mobility international access, chip-card enables use of access points of different providers Worldwide connectivity one number, the network handles localization High capacity better frequency efficiency, smaller cells, more customers per cell High transmission quality high audio quality and reliability for wireless, uninterrupted phone calls at higher speeds (e.g. from cars, trains, etc.) Security functions access control, authentication via chip-card (SIM) and PIN
UMTS Networks
9-May-03
GSM: Mobile Services

GSM offers several types of connections voice connections data connections short message service multi-service options (combination of basic services) Three service domains Bearer Services Teleservices Supplementary Services
bearer services MS TE R, S MT Um GSM-PLMN transit network (PSTN, ISDN) teleservices
PLMN: Public Land Mobile Network PSTN: Public Switched Telephone Network ISDN: Integrated Services Digital Network
UMTS Networks
source/ destination network
TE (U, S, R)
MS: Mobile Station MT: Mobile Termination (radio-specific part) TE: Terminal
Andreas Mitschele-Thiel 9-May-03 5
Bearer Services
Telecommunication services to transfer data between access points Specification of services up to the terminal interface (OSI layers 1-3) Different data rates for voice and data (original standard) data service (circuit switched) synchronous: 2.4, 4.8 or 9.6 kbit/s asynchronous: 300 - 1200 bit/s data service (packet switched) synchronous: 2.4, 4.8 or 9.6 kbit/s asynchronous: 300 - 9600 bit/s
UMTS Networks
9-May-03
Teleservices
Telecommunication services that enable voice communication via mobile phones mobile telephony primary goal of GSM was to enable mobile telephony offering the traditional bandwidth of 3.1 kHz emergency number common number throughout Europe (112); mandatory for all service providers; free of charge; connection with the highest priority (preemption of other connections possible) multinumbering several ISDN phone numbers per user possible Non-Voice Teleservices group 3 fax voice mailbox (implemented in the GSM network) Short Message Service (SMS) alphanumeric data transmission to/from the mobile terminal using the signaling channel, thus allowing simultaneous use of basic services and SMS
Supplementary services
Services in addition to the basic services cannot be offered stand-alone similar to ISDN services besides lower bandwidth due to the radio link may differ between different service providers, countries and protocol versions Important services identification: forwarding of caller number suppression of number forwarding automatic call-back conferencing with up to 7 participants locking of the mobile terminal (incoming or outgoing calls) ...
UMTS Networks
9-May-03
Architecture of the GSM system

GSM is a PLMN (Public Land Mobile Network) several providers setup mobile networks following the GSM standard within each country GSM system comprises 3 subsystems RSS (radio subsystem): covers all radio aspects MS (mobile station) BSS ( base station subsystem) BTS (base transeiver station) BSC (base station controller NSS (network and switching subsystem): call forwarding, handover, switching MSC (mobile switching center) LR (location register): HLR and VLR OSS (operation subsystem): management of the network OMC (operation and maintenance centre) AuC (Authentication centre) EIR (Equipment indentity register)
GSM: overview
OMC, EIR, AUC NSS with OSS VLR MSC
HLR
GMSC
fixed network
VLR
MSC
BSC BSC RSS
UMTS Networks
9-May-03
10
GSM: elements and interfaces
radio cell MS Um RSS BTS MS BSS
radio cell MS
BTS Abis BSC A MSC NSS MSC signaling GMSC IWF O OSS EIR AUC OMC ISDN, PSTN PDN BSC
VLR HLR
VLR
UMTS Networks
9-May-03
11
GSM: system architecture

radio subsystem MS MS network and switching subsystem fixed partner networks
ISDN PSTN MSC
Um BTS BTS Abis BSC
EIR SS7
HLR
BTS BTS BSS BSC A MSC IWF
VLR ISDN PSTN PS-PDN CS-PDN
UMTS Networks
9-May-03
12
System architecture: radio subsystem

radio subsystem MS MS network and switching subsystem
Um BTS BTS Abis BSC MSC
Components MS (Mobile Station) BSS (Base Station Subsystem): consisting of BTS (Base Transceiver Station): sender and receiver BSC (Base Station Controller): controlling several transceivers Interfaces Um: radio interface Abis: standardized, open interface with 16 kbit/s user channels A: standardized, open interface with 64 kbit/s user channels
BTS BTS BSS BSC
A MSC
UMTS Networks
9-May-03
13
System architecture: network and switching subsystem

network subsystem fixed partner networks
ISDN PSTN MSC
Components MSC (Mobile Services Switching Center): IWF (Interworking Functions) ISDN (Integrated Services Digital Network) PSTN (Public Switched Telephone Network) PS-PDN (Packet Switched Public Data Network) CS-PDN (Circuit Switched Public Data Network)
EIR SS7
HLR
VLR MSC IWF ISDN PSTN PS-PDN CS-PDN
Databases HLR (Home Location Register) VLR (Visitor Location Register) EIR (Equipment Identity Register)
9-May-03 14
UMTS Networks
Radio subsystem
The Radio Subsystem (RSS) comprises the cellular mobile network up to the switching centers Components Base Station Subsystem (BSS): Base Transceiver Station (BTS) radio components including sender, receiver, antenna one BTS can cover several cells Base Station Controller (BSC) switching between BTSs, controlling BTSs, managing of network resources, mapping of radio channels (Um) onto terrestrial channels (A interface) BSS = BSC + sum(BTS) + interconnection Mobile Stations (MS)
UMTS Networks
9-May-03
15
GSM: cellular network

segmentation of the area into cells
possible radio coverage of the cell
cell
idealized shape of the cell
use of several carrier frequencies not the same frequency in neighboring cells cell sizes vary from some 100 m up to 35 km depending on user density, geography, transceiver power etc. hexagonal shape of cells is idealized (cells overlap, shapes depend on geography) if a mobile user changes cells -> handover of the connection to the neighbor cell
Example coverage of GSM networks (www.gsmworld.com)

T-Mobile (GSM-900/1800) Berlin Vodafone (GSM-900/1800)
e-plus (GSM-1800)
O2 (GSM-1800)
UMTS Networks
9-May-03
17
Base Transceiver Station and Base Station Controller

Tasks of a BSS are distributed over BSC and BTS BTS comprises radio specific functions BSC is the switching center for radio channels
Functions Management of radio channels Frequency hopping (FH) Management of terrestrial channels Mapping of terrestrial onto radio channels Channel coding and decoding Rate adaptation Encryption and decryption Paging Uplink signal measurements Traffic measurement Authentication Location registry, location update Handover management
UMTS Networks Andreas Mitschele-Thiel
BTS X X X X X X
BSC X X X X X X X X X X
9-May-03
18
Mobile station
Terminal for the use of GSM services A mobile station (MS) comprises several functional groups MT (Mobile Termination):
offers common functions used by all services the MS offers corresponds to the network termination (NT) of an ISDN access end-point of the radio interface (Um)
TA (Terminal Adapter):
terminal adaptation, hides radio specific characteristics
TE (Terminal Equipment):
peripheral device of the MS, offers services to a user does not contain GSM specific functions
SIM (Subscriber Identity Module):

personalization of the mobile terminal, stores user parameters
TE R
UMTS Networks
TA S
MT
Um
9-May-03 19
Network and switching subsystem

NSS is the main component of the public mobile network GSM switching, mobility management, interconnection to other networks, system control Components Mobile Services Switching Center (MSC) controls all connections via a separated network to/from a mobile terminal within the domain of the MSC - several BSC can belong to a MSC Databases (important: scalability, high capacity, low delay) Home Location Register (HLR) central master database containing user data, permanent and semipermanent data of all subscribers assigned to the HLR (one provider can have several HLRs) Visitor Location Register (VLR) local database for a subset of user data, including data about all user currently in the domain of the VLR
Mobile Services Switching Center (MSC)

The MSC plays a central role in GSM switching functions additional functions for mobility support management of network resources interworking functions via Gateway MSC (GMSC) integration of several databases Functions of a MSC specific functions for paging and call forwarding termination of SS7 (signaling system no. 7) mobility-specific signaling location registration and forwarding of location information provision of new services (fax, data calls) support of short message service (SMS) generation and forwarding of accounting and billing information
UMTS Networks
9-May-03
21
Operation subsystem
The OSS (Operation Subsystem) enables centralized operation, management, and maintenance of all GSM subsystems Components Authentication Center (AUC)
generates user specific authentication parameters on request of a VLR authentication parameters used for authentication of mobile terminals and encryption of user data on the air interface within the GSM system
Equipment Identity Register (EIR)

registers GSM mobile stations and user rights stolen or malfunctioning mobile stations can be locked and sometimes even localized
Operation and Maintenance Center (OMC)

different control capabilities for the radio subsystem and the network subsystem
UMTS Networks
9-May-03
22
GSM: Air Interface

FDMA (Frequency Division Multiple Access) / FDD (Frequency Division Duplex)
Uplink 3 ... Downlink 3 ...
890 MHz 1 2
915 MHz 123124
935 MHz 1 2
960 MHz 123124
200 kHz
frequency
TDMA (Time Division Multiple Access)

Downlink 1 2 3 4 5 6 7 8 Uplink 1 2 3 4 5 6 7 8
time
4,615 ms = 1250 bit
UMTS Networks
9-May-03
23
GSM: Voice Coding

64 -10 4k 33 ,8 (27 kbp 0,8 s kb ps) bp s kb ps kb ps 22 ,8
9,6
Voice coding
Channel coding
Framing 114 bit/slot
Modulation (GMSK)
114 + 42 bit
GSM TDMA frame 1 2 3 4 5 6 7 8 4.615 ms
guard space
GSM time-slot (normal burst)

tail user data S Training S user data
guard tail space
3 bits
57 bits
1 26 bits 1
57 bits
546.5 s 577 s
Guard (8.25 bits): avoid overlap with other time slots (different time offset of neighboring slot) Training sequence: select the best radio path in the receiver and train equalizer Tail: needed to enhance receiver performance Flag S: indication for user data or control data
GSM hierarchy of frames

hyperframe 0 1 2 ... 2045 2046 2047 3 h 28 min 53.76 s
0 superframe 0
1 1
... ...
48 24
49
50 25 6.12 s
traffic multiframe control multiframe
1 0 1
... 2
24 ...
25 48 49 50
120 ms 235.4 ms
frame
1 slot burst
...
4.615 ms 577 s
traffic multiframe:
UMTS Networks
24 frames (22.8 kbps) used for traffic channel (user data), or fast signaling 1 frame (950 bps) used for slow signaling, 1 frame unused
GSM protocol layers for signaling

Um MS
CM MM
BSSAP
Abis BTS BSC
A MSC
CM
MM BSSAP
RR RR LAPDm radio LAPDm radio BTSM LAPD PCM
RR BTSM LAPD PCM
SS7
SS7
PCM
PCM
CM: call management 2.048 Mbit/s MM: mobility management RR: radio resource managment LAPDm: link access procedure for D-channel (HDLC variant reliable transport)
16/64 kbit/s
64 kbit/s /
Mobile Terminated Call (MTC)

1: calling a GSM subscriber 2: forwarding call to GMSC 3: signal call setup to HLR 4, 5: request MSRN from VLR 6: forward responsible MSC to GMSC calling station 1 7: forward call to current MSC 8, 9: get current status of MS 10, 11: paging of MS 12, 13: MS answers 14, 15: security checks 16, 17: set up connection
HLR
4 5
VLR
3 6
PSTN GMSC
8 9 14 15
MSC
10
BSS
10 13 16
BSS
10
BSS
11
11 11 12 17
MS
11
UMTS Networks
9-May-03
27
Mobile Originated Call (MOC)

1, 2: connection request 3, 4: security check 5-8: check resources (free circuit) 9-10: set up call
VLR
3 6
PSTN GMSC
5
MSC
8 2
MS
1 10
BSS
UMTS Networks
9-May-03
28
MS-BTS signaling details (MTC/MOC)

MS
MTC
paging request channel request immediate assignment paging response authentication request authentication response ciphering command ciphering complete setup call confirmed assignment command assignment complete alerting connect connect acknowledge data/speech exchange
BTS
MS
MOC
channel request immediate assignment service request authentication request authentication response ciphering command ciphering complete setup call confirmed assignment command assignment complete alerting connect connect acknowledge data/speech exchange
BTS
UMTS Networks
9-May-03
29
4 types of handover
1 2 MS MS 3 MS 4 MS
BTS
BTS
BTS
BTS
BSC
BSC
BSC
MSC
MSC
UMTS Networks
9-May-03
30
Handover decision
receive level BTSold
receive level BTSnew
HO_MARGIN MS BTSold MS BTSnew
UMTS Networks
9-May-03
31
Handover procedure (change of BSC)

Make-before-break strategy
MS BTSold BSCold measurement measurement report result HO decision HO required HO request resource allocation ch. activation HO command HO command HO request ack ch. activation ack MSC BSCnew BTSnew
make
HO command
HO access
Link establishment clear command clear complete clear command clear complete HO complete HO complete
break
UMTS Networks
9-May-03
32
Security in GSM
Security services access control/authentication
user SIM (Subscriber Identity Module): secret PIN (personal identification number) SIM network: challenge response method no authentication of network!
confidentiality
voice and signaling encrypted on the wireless link (after successful authentication)
anonymity
temporary identity TMSI (Temporary Mobile Subscriber Identity) newly assigned at each new location update (LUP) encrypted transmission
3 algorithms specified in GSM A3 for authentication (secret, open interface) A5 for encryption (standardized) A8 for key generation (secret, open interface)
UMTS Networks Andreas Mitschele-Thiel 9-May-03
secret: A3 and A8 available via the Internet network providers can use stronger mechanisms
33
GSM - authentication
mobile network Ki AuC 128 bit A3 SRES* 32 bit SRES 32 bit RAND 128 bit RAND
SIM RAND 128 bit A3 SIM SRES 32 bit Ki 128 bit
MSC
SRES* =? SRES
SRES
Ki: individual subscriber authentication key

SRES: signed response
UMTS Networks
9-May-03
34
GSM - key generation and encryption
mobile network (BTS) Ki AuC 128 bit A8 cipher key BTS Kc 64 bit data A5 encrypted data RAND 128 bit RAND
MS with SIM RAND 128 bit A8 Ki 128 bit SIM
Kc 64 bit SRES data MS A5
UMTS Networks
9-May-03
35
GSM Evolution Overview

adaptive modulation EDGE space Spectral effiency diversity time interference adaptive redundancy Macro diversity Intelligent antennas Equalizer HSCSD continuous
GPRS aperiodic
Frequency hopping
Dynamic channel allocation
Interference cancelation (multi-user detection)
Data traffic
UMTS Networks
9-May-03
36
2G+: GSM Evolution

Limits of GSM limited capacity at the air interface: data transmission standardized with only 9.6 kbit/s advanced coding allows 14,4 kbit/s not enough for Internet and multimedia applications => EDGE inappropriateness for aperiodic and non-symmetrical data traffic => GPRS Extensions HSCSD (High-Speed Circuit Switched Data) GPRS (General Packet Radio Service) EDGE (Enhanced Data Rate for GSM Evolution) EGPRS (EDGE und GPRS) GERAN (GSM Interface to UMTS)
HSCSD (High-Speed Circuit Switched Data)

continuous use of multiple time slots asynchronous allocation of time slots gain: net data rate up to 115,2 kbps (allocation of all 8 traffic channels)
Downlink 1 2 3 4 5 6 7 8 1 2 Uplink 1 2 3 4 5 6 7 8 1 2
mainly software update additional HW needed if more than 3 slots are used
GPRS (General Packet Radio Service)

packet switching using free slots only if data packets are ready to send (e.g., 115 kbit/s using 8 slots temporarily) standardization 1998, introduction 2001 advantage: first step towards UMTS, flexible data services GPRS network elements GSN (GPRS Support Nodes): GGSN and SGSN GGSN (Gateway GSN) interworking unit between GPRS and PDN (Packet Data Network) SGSN (Serving GSN) supports the MS (location, billing, security) HLR (GPRS Register GR)
maintains location and security information
UMTS Networks
9-May-03
39
GPRS architecture and interfaces

SGSN
connection-oriented packet switched core

Gn
MS
BSS
SGSN
GGSN
PDN
Um
Gb
Gn
Gi
MSC
HLR/ GR EIR
VLR
UMTS Networks
9-May-03
40
GPRS protocol architecture
MS appl. IP/X.25 SNDCP LLC RLC MAC radio
Um
BSS
Gb
SGSN
Gn GGSN
Gi
IP/X.25 SNDCP LLC RLC MAC radio

BSSGP
GTP UDP/TCP IP L1/L2
GTP UDP/TCP IP L1/L2
BSSGP FR
FR
UMTS Networks
9-May-03
41
GPRS services
Quality-of-Service Parameters reliability delay (delay class 1: 95%-delay < 1.5-7 sec. depending on packet size) throughput service priority
Reliability class 1 2 3
Delay class 1 2 3 4
UMTS Networks
Lost SDU probability 10-9 10-4 10-2
Duplicate SDU probability 10-9 10-5 10-5
Out of sequence SDU probability 10-9 10-5 10-5
Corrupt SDU probability 10-9 10-6 10-2
SDU size 128 byte SDU size 1024 byte mean 95 percentile mean 95 percentile < 0.5 s < 1.5 s <2s <7s <5s < 25 s < 15 s < 75 s < 50 s < 250 s < 75 s < 375 s unspecified
GPRS services
End-to-End packet switched traffic (peak channel rates) 28 kbps (full use of 3 time slots, CS-1: FEC) 171.2 kbps (full use of 8 time slots, CS-4: no FEC) Average aggregate throughput of a cell (Source: H. Menkes, WirelessWeb, Aug. 2002) 95 kbps (for both up and downlink) Assumptions: 4/12 reuse, realistic RF conditions, random traffic Worse figures for individual TCP traffic Adaptive Coding Schemes (adaptive Forward Error Control FEC) CS 1: 9.05 Kbps/slot CS 2: 13.4 Kbps/slot CS 3: 15.6 Kbps/slot CS 4: 21.4 Kbps/slot (no Forward Error Correction) (current systems implement CS1 and 2 only) Problems and limits IP-based network => high latency, no guarantees Limited data rate: 28 kbps (3 slot/CS-1) - 64.2 kbps (3 slot/CS-4) Latency/flow control problems with TCP
EDGE (Enhanced Data Rates for GSM Evolution)

Spectral efficiency depends on: Size of frequency band Duration of usage Level of interference to others (power) EDGE: Adaptation of modulation depending on quality of radio path
GMSK (GSM standard 1 bit per symbol) 8-PSK (3 bits per symbol)
NodeB
Near-far problem
UE 1
Adaptation of coding scheme depending on quality of radio path (9 coding schemes) Gain: data rate (gross) up to 69,2kbps (compare to 22.8kbps for GSM) complex extension of GSM!
UMTS Networks Andreas Mitschele-Thiel
UE 2
9-May-03
44
Preview: UMTS system architectur (Release 3)

GSM Radio Access Network (circuit switched) f3 f1 f6 f5 c 3 c 1 c 4 c 2 c 5 nodeB RNC nodeB 3G SGSN Core Network (packet switched) RNC f4 BTS BSC BSC BTS 3G MSC HLR VLR AC EIR Core Network (circuit switched) 3G MSC 3G GMSC ISP ISDN
f2 f7
3G SGSN
3G GGSN
ISP
UMTS Radio Access Network
UMTS Networks
9-May-03
45

Wi 2G

Transféré par

Informations du document

Description originale:

Titre original

Copyright

Formats disponibles

Partager ce document

Partager ou intégrer le document

Options de partage

Avez-vous trouvé ce document utile ?

Ce contenu est-il inapproprié ?

Droits d'auteur :

Formats disponibles

Wi 2G

Transféré par

Droits d'auteur :

Formats disponibles

2G Mobile Communication Systems

GSM compared to 1G Systems

GSM: Mobile Services

source/ destination network

Architecture of the GSM system

BSC BSC RSS

GSM: elements and interfaces

radio cell MS Um RSS BTS MS BSS

GSM: system architecture

ISDN PSTN MSC

Um BTS BTS Abis BSC

BTS BTS BSS BSC A MSC IWF

VLR ISDN PSTN PS-PDN CS-PDN

System architecture: radio subsystem

Um BTS BTS Abis BSC MSC

BTS BTS BSS BSC

System architecture: network and switching subsystem

ISDN PSTN MSC

VLR MSC IWF ISDN PSTN PS-PDN CS-PDN

GSM: cellular network

idealized shape of the cell

Example coverage of GSM networks (www.gsmworld.com)

Base Transceiver Station and Base Station Controller

SIM (Subscriber Identity Module):

Network and switching subsystem

Mobile Services Switching Center (MSC)

Equipment Identity Register (EIR)

Operation and Maintenance Center (OMC)

GSM: Air Interface

915 MHz 123124

960 MHz 123124

TDMA (Time Division Multiple Access)

4,615 ms = 1250 bit

GSM: Voice Coding

Framing 114 bit/slot

GSM TDMA frame 1 2 3 4 5 6 7 8 4.615 ms

GSM time-slot (normal burst)

guard tail space

GSM hierarchy of frames

traffic multiframe control multiframe

GSM protocol layers for signaling

Abis BTS BSC

RR RR LAPDm radio LAPDm radio BTSM LAPD PCM

RR BTSM LAPD PCM

Mobile Terminated Call (MTC)

Mobile Originated Call (MOC)

MS-BTS signaling details (MTC/MOC)

receive level BTSold

receive level BTSnew

HO_MARGIN MS BTSold MS BTSnew

Handover procedure (change of BSC)

SIM RAND 128 bit A3 SIM SRES 32 bit Ki 128 bit

Ki: individual subscriber authentication key

SRES: signed response

GSM - key generation and encryption

MS with SIM RAND 128 bit A8 Ki 128 bit SIM

Kc 64 bit SRES data MS A5

GSM Evolution Overview

Dynamic channel allocation

Interference cancelation (multi-user detection)

2G+: GSM Evolution

HSCSD (High-Speed Circuit Switched Data)