IoT Long Range

Technologies:
Standards

Sami TABBANE
December 2017

1
 Summary

A. Fixed & Short Range

B. Long Range technologies

1. Non 3GPP Standards (LPWAN)

2. 3GPP Standards

2
LONG RANGE TECHNOLOGIES

Non 3GPP Standards 3GPP Standards

LORA 1 1 LTE-M

SIGFOX 2 2 EC-GSM

3 3 NB-IOT
Weightless

4 4 5G
Others

3
 Wide-area M2M technologies and IoT

H. S. Dhillon et al., “Wide-Area Wireless Communication Challenges for the Internet of Things,” IEEE Communications Magazine, February 2017
4
B. Non 3GPP Standards (LPWAN)
i. LoRaWAN
ii. Sigfox
iii. RPMA
iv. Others

5
LPWAN REQUIREMENTS

Long battery
life

Support for a
massive Low device
number of cost
devices
LPWAN

Extended
coverage (10-15 Low cost and
km in rural areas, easy
2-5 km in urban deployment
areas)

6
i. LoRaWAN

7
 Roadmap

By the end of
2016
Jun 2015

2015 All France territory covered by

LoRaWAN network:Bouygues Telecom
Amsterdam become the first city
2013 Creation of covered by the LoRaWAN
LoRa alliance network
Semtech develop LoRaWAN network
2010

Cycleo developed LoRa technology

Differences between LoRa and LoRaWAN

• LoRa contains only the link layer protocol. LoRa modules are a little cheaper that the
LoRaWAN ones.
• LoRaWAN includes the network layer too so it is possible to send the information to any
Base Station already connected to a Cloud platform. LoRaWAN modules may work in
different frequencies by just connecting the right antenna to its socket. 8
LoRa Alliance

International International
development of
Operators the solution

Appropriate
Integrators and technology and
industrialists maintain it over
time

Manufacturers
of Broadcast end
devices
End-points

Manufacturers
Integrate LoRa
of technology
Semiconductors

9
LoRa technology Overview

 LoRaWAN is a Low Power Wide Area Network

 LoRa modulation: a version of Chirp Spread Spectrum (CSS)
with a typical channel bandwidth of 125KHz
 High Sensitivity (End Nodes: Up to -137 dBm, Gateways: up to
-142 dBm)
 Long range communication (up to 15 Km)
 Strong indoor penetration: With High Spreading Factor, Up to
20dB penetration (deep indoor)
 Occupies the entire bandwidth of the channel to broadcast a
signal, making it robust to channel noise.
 Resistant to Doppler effect, multi-path and signal weakening. 10
 Architecture

Modulation LoRa RF (Spread

Spectrum)
Range ~ 15 Km
End Device
Throughput 0.3 to 27 Kbps

End Device
Cloud LoRa
Gateway

Email
End Device LoRa Network TCP/IP SSL
Gateway Server Application
Server

Customer IT

End Device
Type of Traffic Data packet

Payload ~ 243 Bytes Remote

Security AES Encryption Monitoring

11
Spread spectrum basics

12
Spectrum

o Orthogonal sequences: 2 messages, transmitted by 2 different objects, arriving

simultaneously on a GW without interference between them (Code Division Multiple
Access technique: CDMA , used also in 3G).
o Spread Spectrum: Make the signal more robust , the more the signal is spread the
more robust. Less sensitive to interference and selective frequency fadings .
Gain when recovering the
Amplitude
initial signal
SF 12: High gain, low data rate
Far devices and deep indoor

SF 9: Average gain, average

data rate

SF 7: Low gain , high data

rate
"Spread" signal transmitted
with constant rate

Frequency

Spectrum: unlicensed, i.e. the 915 MHz ISM band in the US, 868 MHz in Europe

13
 Spectrum (Influence of the Spreading Factor)

Far with obstacles:

 High sensitivity required
 The network increases the SF (Spreading Factor) 
Throughput decreases but the connection is maintained
Close:
 Low sensitivity sufficient
 Decrease of SF (SPREADING FACTOR), increase of throughput

Adaptive throughput
ADR: Adaptive Data Rate

14
RSSI and SF versus BW

15
 SF, bitrate, sensitivity and SNR for a 125 kHz channel

Spreading factor Bitrate (bit/sec) Sensitivity (dBm) LoRa demodulator SNR

7 (128) 5 469 -124 dBm -7.5 dB

8 (256) 3 125 -127 dBm -10 dB

9 (512) 1 758 -130 dBm -12.5 dB

10 (1024) 977 -133 dBm -15 dB

11 (2048) 537 -135 dBm -17.5 dB

12 (4096) 293 -137 dBm -20 dB

SF and repetition can be either manual (i.e., determined by the end-device) or automatic
(i.e., managed by the network)

16
 LoRaWAN: device classes

Classes Description Intended Use Consumption Examples of Services

The most economic
communication Class •
A Listens only after
end device
transmission
Modules with no
latency constraint
energetically..
Supported by all modules. •
Fire Detection
Earthquake Early
(« all ») Adapted to battery powered Detection
modules

Modules with latency

Description
The module listens
B at a regularly
adjustable
constraints for the
reception of
messages of a few
Consumption optimized.
Adapted to battery powered
modules
• Smart metering
• Temperature rise
(« beacon ») frequency
seconds

Modules with a
• Fleet management
C Module always
listening
strong reception
latency constraint
(less than one
Adapted to modules on the grid
or with no power constraints • Real Time Traffic
(« continuous ») Management
second)

 Any LoRa object can transmit and receive data

17
 Class A

Gateway
Open 2 windows for DL End Point
reception
(acknowledgments, MAC
commands, application
commands...) after
sending a packet One packet sent

Listening period: varies according to the

1 sec +/- 20 us
spreading factor SF
R Listening period
1st receive window
X • 5.1 ms at SF7 (outdoor and close devices)
1 • 10.2 ms at SF8 …
1 sec +/- 20 us • 164 ms at SF12 (deep-indoor or far devices)
R Listening period
2nd receive window X
2 • Very economic energetically
• Communication triggered by the
end device

18
 Class B (Synchronized mode)

Gateway
End Point

• Synchronized with the GTW

• Opens listening windows at
regular intervals. Beginning tag

R
x Listening duration
1

Listening duration: varies according to the SF

R
x Listening duration
Opens N reception windows 2
between the two tags
R
x Listening duration
3

R
x Listening duration
N • Optimized energy consumption
• Communication initiated by the
End tag GTW

19
Class C

Gateway
- Permanent listening
End Point
- Closes the reception window only
during transmissions

Packet reception: possible

Reception window always

open

Packet transmission
Adapted to devices on
T
Closed receive window
X
the power grid

Reception window is open Packet reception: possible

20
 Identification of an end device in LORA

 End-device address (DevAddr):

Network identifier network address of the end-device

7 bits 25 bits

 Application identifier (AppEUI): A global application ID in the IEEE EUI64 address space
that uniquely identifies the owner of the end-device.
 Network session key (NwkSKey): A key used by the network server and the end-device
to calculate and verify the message integrity code of all data messages to ensure data
integrity.
 Application session key (AppSKey): A key used by the network server and end-device to
encrypt and decrypt the payload field of data messages.

21
 Current state

Amsterdam: was the first city covered by LoRaWAN with only 10 Gateways for the whole city at
$ 1200 per unit. Since then, several cities have followed the trend:

By the end of 2016 , France will all be covered by LoRa

22
ii. Sigfox

23
 Roadmap

Mars By the end of

2012 2013 2014 2016 2016

First fundraising All France San-Francisco Sigfox in

Launch of the
of Sigfox territory is become the first America in
Sigfox
company to covered by US. State covered 100 U.S.
network
cover France Sigfox network by Sigfox cities

24
Sigfox Overview

 First LPWAN Technology

 The physical layer based on an Ultra-Narrow
band wireless modulation
 Proprietary system
 Low throughput ( ~100 bps)
 Low power
 Extended range (up to 50 km)
 140 messages/day/device
 Subscription-based model
 Cloud platform with Sigfox –defined API for
server access
 Roaming capability

25
 Architecture

Frequency Band Ultra Narrow Band

Range ~ 13 Km
End Device
Throughput ~ 100 bps

End Device
Cloud Sigfox
Gateway

Email
End Device
Network TCP/IP SSL
Sigfox
Server Network
Gateway
Server

Customer IT
Type of Traffic Data packet
End Device
Payload ~ 12 Bytes
Security No security Remote
Time on air Up to 6 seconds Monitoring

By default, data is conveyed over the air interface without any encryption. Sigfox gives
customers the option to either implement their own end-to-end encryption solutions. 26
Spectrum and access
 Narrowband technology
 Standard radio transmission method: binary phase-shift keying (BPSK)
 Takes very narrow parts of spectrum and changes the phase of the carrier radio
wave to encode the data

Frequency spectrum:
 868 MHz in Europe
 915 MHz in USA

27
Sigfox transmission

• Starts by an UL transmission
• Each message is transmitted 3 times
• A DL message can be sent (option)
• Maximum payload of UL messages = 12 data bytes
• Maximum payload of DL messages = 8 bytes

ITU ASP RO

28
 Current state

1.6
26 424
million
Countries million
Km²

Covered countries Covered areas End devices

 SIGFOX LPWAN deployed in France, Spain, Portugal, Netherlands, Luxembourg, and

Ireland , Germany, UK, Belgium, Denmark, Czech Republic, Italy, Mauritius Island,
Australia, New Zealand, Oman, Brazil, Finland, Malta, Mexico, Singapore and U.S.
Sigfox company objectives:
 Cover China in 2017
 60 countries covered by the end of 2018

29
iii. RPMA

30
 Roadmap

September 2016 2017

2008
2015

RPMA was it was renamed RPMA was RPMA will be

developed Ingenu, and implemented in many invaded in many
by On-Ramp targets to extend places others countries: Los
Wireless to provide its technology to Austin, Dallas/Ft. Angeles, San
connectivity to oil the IoT and M2M worth, Franscisco-West
and gas market Hostton,TX,Phenix,AZ, Bay,CA,Washington,D
actors …. C, Baltimore,MD,
Kanasas City

31
INGENU RPMA overview

 Random Phase Multiple Access (RPMA)

technology is a low-power, wide-area
channel access method used exclusively
for machine-to-machine (M2M)
communication
 RPMA uses the 2.4 GHz band
 Offer extreme coverage
 High capacity
 Allow handover (channel change)
 Excellent link capacity

32
 INGENU RPMA Overview
 RPMA is a Direct Sequence Spread Spectrum (DSSS) using:
Convolutional channel coding, gold codes for spreading
1 MHz bandwidth
Using TDD frame with power control:
• Closed Loop Power Control: the access point/base station measures the
uplink received power and periodically sends a one bit indication for the
endpoint to turn up transmit power (1) or turn down power (0).
• Open Loop Power Control: the endpoint measures the downlink received
power and uses that to determine the uplink transmit power without any
explicit signaling from the access point/base station.

TDD frame

33
 Specifications of RPMA Solution

 Time/Frequency Synchronization
 Uplink Power Control
 Creating a very tightly power controlled system in free-spectrum and presence of
interference which reduces the amount of required endpoint transmit power by a
factor of >50,000 and mitigates the near-far effect.
 Frame structure to allow continuous channel tracking.
 Adaptive spreading factor on uplink to optimize battery consumption.
 Handover
 Configurable gold codes per access point to eliminate ambiguity of link communication.
 Frequency reuse of 3 to eliminate any inter-cell interference degradation.
 Background scan with handover to allow continuous selection of the best access point

34
 Specifications of RPMA Solution

 Downlink Data Rate Optimization

 Very high downlink capacity by use of adaptive downlink spreading factors.
 Open loop forward error correction for extremely reliable firmware download.
 Open loop forward error correction to optimize ARQ signaling. Signaling only needs to
indicate completion, not which particular PDUs are lost.

35
RPMA a Random multiple access Network

 Random multiple access is performed by delaying the signal to transmit at each

end-device
 Support up to 1000 end devices simultaneously
 For the uplink, or the downlink broadcast transmission, a unique Gold code is
used.
 For unicast downlink transmission, the Gold code is built with the end-device
ID, such that no other end-device is able to decode the data.

36
 INGENU RPMA architecture

Frequency Band 2.4 GHZ

Range 5-6 Km
Throughput 624 kb/s (UL) and 156 kb/s (DL)

Access Point Cloud

Access Point

Email
Backhaul
Network TCP/IP SSL
(Ethernet,
Server Network
3G, WiFi, Server
...)
Customer IT

End Device Type of Traffic Data packet

Payload ~ 16 Bytes (one end point) ~ 1600 Bytes (for Remote
1000 end points Monitoring
Security AES Encryption

37
Uplink Subslot Structure
Uplink Subslot Structure Supporting Flexible Data Rate

Step 1: Choose Spreading factor from 512 to 8192

Step 2: randomly select subslot
Step 3: Randomly select delay to add to subslot start from 0 to 2048 chips

38
How end point can transfer a data?

End Point Access Point

Registration request (how often the EP will communicate)

Assigned a bit on the BCH channel (enable to send or No)

Send the message (payload 16 bytes)

AP response ( Ack or NACK): Successful transaction

Not OK send again

Send the message

Send Acknowledge

39
RPMA security

Message
Message integrity1 Mutual
confidentiality: use of
Replay protection Authentication
powerful encryption

Authentic firmware
Device Anonymity Secure Multicasts
Upgrades

40
 RPMA’s current and future presence

 heavy presence in Texas, with networks in Dallas,

Austin, San Antonio, Houston, and large white
space areas.

 Ingenu offer the connectivity to more 50% of the

Texas state population.

 Three densely populated Texas markets are

served by only 27 RPMA access points

 RPMA currently provides more than 100,000

square miles of wireless coverage for a host of
IoT applications.

 Ingenu will be expanding its coverage to dozens

of cities in the next few years.

41
RPMA’s current and future presence

Currently live Coverage Rollout Coverage ROLLOUT Coverage planned

Q3 Q4 2016 2017
• Austin,TX • Columbus, OH • Atlanta,GA • Los Angeles,CA
• Dallas/Ft.worth, • Indianapolis,IN • Jacksonville,FL • San Franscisco-
TX • Miami,FL West Bay,CA
• Hostton,TX • Oriando,FL • Washington,DC
• Phenix,AZ • New Orleans,LA • Baltimore,MD
• Riverside,CA • Charlotte,NC • Kanasas City
• San Antonio,TX • Albuquerque • Greeensboro,NC
• San Diego,CA • Memphis,TN • Las Vegas,NV
• Nashville,TN EL • Oklahorma City,
paso,TX OK
• Salt Lake City,UT • And many more
• Richmound, cities
• Virginia
beach,VA

42
v. Others

43
EnOcean
 Based on miniaturized power converters
 Ultra low power radio technology
 Frequencies: 868 MHz for Europe and 315 MHz for the USA
 Power from pressure on a switch or by photovoltaic cell
 These power sources are sufficient to power each module to transmit wireless
and battery-free information.
 EnOcean Alliance in 2014 = more than 300 members (Texas, Leviton, Osram,
Sauter, Somfy, Wago, Yamaha ...)

44
EnOcean

Architecture

45
 ZWave

 Low power radio protocol

 Home automation (lighting, heating, ...) applications
 Low-throughput: 9 and 40 kbps
 Battery-operated or electrically powered
 Frequency range: 868 MHz in Europe, 908 MHz in the US
 Range: about 50 m (more outdoor, less indoor)
 Mesh architecture possible to increase the coverage
 Access method type CSMA / CA
 Z-Wave Alliance: more than 100 manufacturers in

46
ZWave

Services

47
 Summary

A. Fixed & Short Range

B. Long Range technologies

1. Non 3GPP Standards (LPWAN)

2. 3GPP Standards

48
2. 3GPP Standards
i. LTE-M
ii. NB-IOT
iii. EC-GSM
iv. 5G and IoT

49
Release-13 3GPP evolutions to address the IoTmarket

 eMTC: LTE enhancements for

MTC, based on Release-12
(UE Cat 0, new PSM, power
saving mode)
 NB-IOT: New radio added to
the LTE platform optimized
for the low end of the market
 EC-GSM-IoT: EGPRS
enhancements in
combination with PSM to
make GSM/EDGE markets
prepared for IoT
50
Release 14 eMTC enhancements

Main feature enhancements

• Support for positioning (E-CID and OTDOA)
• Support for Multicast (SC-PTM)
• Mobility for inter-frequency measurements
• Higher data rates
• Specify HARQ-ACK bundling in CE mode A in HD-FDD
• Larger maximum TBS
• Larger max. PDSCH/PUSCH channel bandwidth in connected
mode at least in CE mode A in order to enhance support e.g.
voice and audio streaming or other applications and scenarios
• Up to 10 DL HARQ processes in CE mode A in FD-FDD
• Support for VoLTE (techniques to reduce DL repetitions, new
repetition factors, and adjusted scheduling delays)
51
Main eMTC, NB-IoT and EC-GSM-IoT features

52
Comparison of cellular IoT-LPWA

53
i. LTE-M

54
 Technology

• Evolution of LTE optimized for IoT

• Low power consumption and extended autonomy

• Easy deployment

• Interoperability with LTE networks

• Low overall cost

• Excellent coverage: up to 11 Km

• Maximum throughput: ≤ 1 Mbps

55
Roadmap

• First released in Rel.1in 2 Q4 2014

• Optimization in Rel.13
• Specifications completed in Q1 2016
• Available in 2017 (?)
56
 LTE to LTE-M

3GPP Releases 8 (Cat.4) 8 (Cat. 1) 12 (Cat.0) LTE-M 13 (Cat. 1,4 MHz) LTE-M

Downlink peak rate (Mbps) 150 10 1 1

Uplink peak rate (Mbps) 50 5 1 1
Number of antennas (MIMO) 2 2 1 1
Duplex Mode Full Full Half Half
UE receive bandwidth (MHz) 20 20 20 1.4
UE Transmit power (dBm) 23 23 23 20

Release 12 Release 13

• New category of UE (“Cat-0”): lower • Reduced receive bandwidth to 1.4 MHz

complexity and low cost devices • Lower device power class of 20 dBm
• Half duplex FDD operation allowed • 15dB additional link budget: better coverage
• Single receiver • More energy efficient because of its extended
• Lower data rate requirement (Max: 1 Mbps) discontinuous repetition cycle (eDRX)

57
Architecture

Present LTE
Architecture

58
 Architecture

Frequency Band Narrow Band

Access LTE-M
Range ~ 11 Km
Throughput ~ 1 Mbps

End Device Email

LTE Access

New
baseband
Customer IT
Software
for LTE-M

End Device
Remote
Monitoring

59
Spectrum and access

• Licensed Spectrum
• Bandwidth: 700-900 MHz for LTE
• Some resource blocks allocated for IoT on LTE bands

60
ii. NB-IOT

61
 Current status

April May Mars August November Jun 2017+

2014 2014 2015 2015 2015 2015

Narrowband 3GPP GSMA 3GPP 1st live pre- Full NB-IoT

proposal to ‘Cellular IoT’ Mobile IoT alignment on standard 3GPP Commercial
Connected Study Item created single NB-IoT Standard rollout
Living standard message Released

Evolution of LTE-M

62
NB-IoT main features and advantages

Reuses the LTE design extensively:

numerologies, DL OFDMA, UL SC-FDMA, channel
coding, rate matching, interleaving, etc.
Reduced time to develop:
 Full specifications.
 NB-IoT products for existing LTE equipment
and software vendors.
June 2016: core specifications completed.
Beginning of 2017: commercial launch of
products and services.
63
Frame and Slot Structure – NB-IoT – 7 symbols per slot

64
NB-IoT Channels

Frame structure
Signals: PSS, SSS - RS
Downlink
Broadcast Channel NPBCH
NPDCCH
Dedicated Channels
NPDSCH

Physical
Layer

Frame structure
Signals: Demodulation reference signals (DMRS)
Uplink
Random Access NPRACH
NPDCCH
Dedicated Channels
NPUSCH
Used for data and
HARQ feedback
65
Physical downlink channels

Maximum Transmission Block Size = 680 bits

Inband mode: 100 to 108 symbols – Standalone/Guard band mode: 152 to 160 symbols 66
Downlink Frame Structure

67
 UL frame structure

UL frame structure
Single-Tone (mandatory):
To provide capacity in signal-strength-
limited scenarios and dense capacity
• Number of subcarriers: 1
• Subcarrier spacing: 15 kHz or 3.75 kHz
(via Random access)
• Slot duration: 0.5 ms (15 kHz) or 2 ms
(3.75 kHz)
Multi-tone (optional):
To provide higher data rates for devices
in normal coverage
• Number of subcarriers: 3, 6 or 12
signaled via DCI
• Subcarrier spacing: 15 kHz
• Slot duration = 0.5 ms
New UL signals
DMRS (demodulation reference
signals)
New UL channels
• NPUSCH (Physical UL Shared
• Channel)
• NPRACH (Physical Random Access
Channel) 68
 NB-IoT Repetitions
Consists on repeating the same 15 kHz subcarrier spacing.
transmission several times: A transport block test
 Achieve extra coverage (up to word (TW) is transmitted
20 dB compared to GPRS) on two RUs
 Each repetition is self-
decodable
Each RU is transmitted over
 SC is changed for each
3 subcarriers and 8 slots
transmission to help
combination
 Repetitions are ACK-ed just
once
 All channels can use
Repetitions to extend coverage
DL up to 2048 repetitions
UL up to 128 repetitions

Example: Repetitions used in NB-IoT in NPDCCH and NPDSCH channels

69
Repetitions number to decode a NPUSCH

70
Transmissions scheduling

Subframe

71
 Release 14 enhancements

• OTDOA
• UTDOA positioning is supported under the following conditions:
• It uses an existing NB-IoT transmission
– It can be used by Rel-13 UEs
– Any signal used for positioning needs to have its accuracy, complexity, UE power
consumption performance confirmed
Main feature enhancements:
• Support for Multicast (SC-PTM)
• Power consumption and latency reduction (DL and UL for 2 HARQ
processes and larger maximum TBS)
• Non-Anchor PRB enhancements (transmission of NPRACH/Paging
on a non-anchor NB-IoTPRB)
• Mobility and service continuity enhancements (without the
increasing of UE power consumption)
• New Power Class(es) (if appropriate, specify new UE power
class(es), e.g. 14dBm)
72
Physical Channels in Downlink
Physical signals and channels in the downlink:
 Narrowband primary synchronization signal (NPSS) and
Narrowband secondary synchronization signal (NSSS): cell
search, which includes time and frequency synchronization,
and cell identity detection
 Narrowband physical broadcast channel (NPBCH)
 Narrowband reference signal (NRS)
 Narrowband physical downlink control channel (NPDCCH)
 Narrowband physical downlink shared channel (NPDSCH)

73
Uplink channels

 Narrowband physical random access channel

(NPRACH): new channel since the legacy LTE
physical random access channel (PRACH)
uses a bandwidth of 1.08 MHz, more than
NB-IoT uplink bandwidth
 Narrowband physical uplink shared channel
(NPUSCH)

74
NPDCCH/NPDSCH resource mapping example

75
Physical signals and channels and relationship with LTE

76
Enhanced DRX for NB-IOT and eMTC

Extended C-DRX and I-DRX operation

• Connected Mode (C-eDRX):
• Extended DRX cycles of 5.12s and 10.24s are
supported
• Idle mode (I-eDRX):
• Extended DRX cycles up to ~44min for eMTC
• Extended DRX cycles up to ~3hr for NB-IOT

77
 Architecture

Frequency Band Ultra Narrow Band

Range ~ 11 Km
Throughput ~ 150 Kbps

End Device Email

LTE Access

New
baseband
Customer IT
Software
for NB-IoT

End Device
Remote
Monitoring

78
Spectrum and access
• Designed with a number of deployment options for GSM , WCDMA or LTE spectrum
to achieve spectrum efficiency.
• Use licensed spectrum. Stand-alone operation
Dedicated spectrum.
Ex.: By re-farming GSM channels

Guard band operation

Based on the unused RB within a LTE
carrier’s guard-band

In-band operation
Using resource blocks within a normal LTE
carrier

79
LTE-M to NB-IoT

12 (Cat.0) 13(Cat. 1,4 MHz) 13(Cat. 200 KHz)

3GPP Release
LTE-M LTE-M NB-IoT
300 bps to 200
Downlink peak rate 1 Mbps 1 Mbps
kbps
Uplink peak rate 1 Mbps 1 Mbps 144 kbps
Number of antennas 1 1 1
Duplex Mode Half Half Half
UE receive bandwidth 20 MHz 1.4 MHz 200 kHz

UE Transmit power (dBm) 23 20 23

• Reduced throughput based on single PRB operation

• Enables lower processing and less memory on the modules
• 20dB additional link budget  better area coverage

80
Vodafone announced the commercialization of NB-IoT

 4 countries in Europe  Announced the commercialization of  Madrid, Valencia, Barcelona is

(Germany, Ireland, the NB-IoT on 23rd Jan 17 covered, Plan to cover 6 cities in
Netherlands and Spain) will  1000 sites activated NB-IoT in Spain by 2017H1
commercially launch NB-IoT in the end of march 2017
2017.
 Took just a few hours to deploy NB-IoT
with software upgrade in Valencia Source: Huawei

81
China Unicom: 800+ Sites Activated NB-IoT in Shanghai

Shanghai Unicom: Network readiness accelerates the

development of vertical customers

Parking operator Gas Utility Fire center

NB-IoT Network
Coverage

• 800+ base stations covered Smart Parking Smart Gas Meter Smart Fire
Protection
Shanghai in 2016Q4

Source: Huawei

82
 China Telecom: NB-IoT Nationwide Coverage in 2017H1

NB-IoT Pre commercial

NB-IoT Trial commercial

Jie Yang, Board chair

Trial • 2017H1, NB-IoT enabled
Test NB-IoT
commerci in L850 to achieve
al
national wide coverage

Use cases
• 100 NB-IoT bicycles test in Beijing
• Mar 22 2017, Shenzhen water
University in Q2 2017
• 100K bicycles in Beijing city by
utility announced
September 2017 commercialization;
• China Telecom to provide NB-IoT
• 1200 meters (phase 1)
coverage in whole Beijing by June 2017
Share bicycle running in live network;

Source: Huawei

83
iii. EC-GSM

84
Roadmap

May 2014 Aug 2015 Sep 2015 Dec 2015 Mars 2016

2020: 15% connections excluding cellular IoT will still be on 2G in Europe and 5% in
the US (GSMA predictions).
GPRS is responsible for most of today’s M2M communications

85
 EC-GSM

EC-GSM-IoT Objectives: Adapt and leverage existing 2G infrastructure to provide efficient

and reliable IoT connectivity over an extended GSM Coverage
 Long battery life: ~10 years of operation with 5 Wh battery (depending on traffic
pattern and coverage extension)
 Low device cost compared to GPRS/GSM device
 Variable data rates:
• GMSK: ~350bps to 70kbps depending on coverage extension
• 8PSK: up to 240 kbps
 Support for massive number of devices: ~50.000 devices per cell
 Improved security adapted to IoT constraint.
 Leverage on the GSM/GPRS maturity to allow fast time to market and low cost

86
 EC-GSM

Objectives
• Long battery life: ~10 years of operation with 5 Whbattery
(depending on traffic pattern and coverage needs)
• Low device cost compared to GPRS/GSM devices
Extended coverage:
• 164 dB MCL for 33 dBmUE,
• 154 dB MCL for 23 dBmUE
Variable rates:
• GMSK: ~350bps to 70kbps depending on coverage level
• 8PSK: up to 240 kbps
• Support for massive number of devices: at least 50.000 per
cell
• Improved security compared to GSM/EDGE 87
EC-GSM

Main PHY features

• New logical channels designed for extended coverage
• Repetitions to provide necessary robustness to support up to 164
dB MCL
• Overlaid CDMA to increase cell capacity (used for EC-PDTCH and EC-
PACCH)
Other features
• Extended DRX (up to ~52min)
• Optimized system information (i.e. no inter-RAT support)
• Relaxed idle mode behavior (e.g. reduced monitoring of neighbor
cells)
• 2G security enhancements (integrity protection, mutual
authentication, mandate stronger ciphering algorithms)
• NAS timer extensions to cater for very low data rate in extended
coverage
• Storing and usage of coverage level in SGSN to avoid unnecessary
repetitions over the air
88
 EC-GSM

 Extended coverage (~ 20 dB compared to GSM coverage)

GSM900 LoRa
Sens de la Liaison
Montante Unités Montante

Partie Réception BTS GW

Sensibilité -104 dBm -142
Marge de protection 3 dB 0
Perte totale câble et connecteur 4 dB 4
Gain d'antenne (incluant 5 dB de diversité) -17 dBi -6
Marge de masque (90% de la surface) 5 dB 5
Puissance médiane nécessaire -109 dBm -141
Partie Emission MS Capteur
Puissance d'émission (GSM Classe 2 = 2W) Bilan de
33 dBm 20
liaison
Affaiblissement maximal 142 dB 161
Pertes dues au corps humain -3 dB 0
Affaiblissement de parcours (bilan de liaison) 139 dB 161

89
 EC-GSM

 Deployment

 To be deployed in existing GSM spectrum without any impact on network planning.

 EC-GSM-IoT and legacy GSM/GPRS traffic are dynamically multiplexed.
 Reuse existing GSM/GPRS base stations thanks to software upgrade.

 Main PHY features:

 New “EC” logical channels designed for extended coverage
 Repetitions to provide necessary robustness to support up to 164 dB MCL
 Fully compatible with existing GSM hardware design (Base station and UE)
 IoT and regular mobile traffic are share GSM time slot.

90
EC-GSM

 Coverage Extension: 4 different coverage class

Channels CC1 CC2 CC3 CC4

MCL(dB) 149 157 161 164
EC-CCCH 1 8 16 32
DL
EC-PACCH 1 4 8 16
EC-PDTCH 1 4 8 16
MCL(dB) 152 157 161 164
EC-CCCH 1 4 16 48
UL
EC-PACCH 1 4 8 16
EC-PDTCH 1 4 8 16

 Beacon and Synchronization channel don’t use coverage class

 EC-BCCH: always repeated 16 times
 EC-SCH: always repeated 28 times Mapped on TS 1
 FCCH: legacy FCCH is used.

91
 EC-GSM

 Other features:

 Support of SMS and Data, but no voice

 Extended DRX (up to ~52min) [ GSM DRX ~11 min]
 Optimized system information (i.e. no inter-RAT support)
 Relaxed idle mode behavior (e.g. reduced monitoring of neighbor cells)
 2G security enhancements (integrity protection, mutual authentication, mandate
stronger ciphering algorithms)
 NAS timer extensions to cater for very low data rate in extended coverage
 Storing and usage of coverage level in SGSN to avoid unnecessary repetitions over the
air
 Optional mobility between GSM and EC-GSM

92
 Architecture

Actual GSM/GPRS Architecture

GSM
Access

Mobile UE

IP
Networks

2G-based NB-IoT networks should come at the end of 2017, with LTE following around 12
months later

93
 Architecture

Access EC-GSM
Frequency Band Narrow Band
Range ~ 15 Km
Throughput ~ 10 Kbps

End Device Email

Update for
EC-GSM

GSM
Access
New
Mobile UE baseband Customer IT
Software
for EC-GSM

IP
Networks

End Device
Remote
Monitoring

94
iv. 5G and IoT

95
Roadmap

ITU-R WP5D

• Initial technology submission: Meeting 32 (June 2019)

• Detailed specification submission: Meeting 36 (October 2020)

96
Vision of 5G

Cloud
Services

Core network (transport)

Access networks

97
Thank you!

98