18EC81: Wireless and Cellular

Communication
 Module- 2
GSM and TDMA Technology
 Course/Module Objectives
Course Obj:2: Application of communication theory both
physical and networking to understand GSM systems that handle
mobile telephony
Course Outcome 2:
Understand the communication theory both physical and
networking associated with GSM and develop a scheme for idle
mode, call setup, call progress handling and call tear down in a
GSM cellular network
Module objectives:
• GSM System Overview
• GSM System Operations
•
Overview
The Global System for Mobile communications (GSM) is by far the most successful
mobile communication system worldwide.
• Its development started in 1982.
• The European Conference of Postal and Telecommunications Administrations (CEPT),
founded the Groupe Speciale Mobile, with the mandate to develop proposals for a pan-
European digital mobile communication system.
• Two goals were supposed to be achieved:
– First, a better and more efficient technical solution for wireless communications – it had become evident at
that time that digital systems would be superior in respect to user capacity, ease of use, and number of
possible additional services compared with the then-prevalent analog systems.
– Second, a single standard was to be realized all over Europe, enabling roaming across borders. This was not
possible before, as incompatible analog systems were employed in different countries.
• In the following years, several companies developed proposals for such a system
• Though it was originally developed as a European system, it has spread all over the world
in the meantime. Australia was the first non-European country that signed the basic MoU
• GSM is an open standard.
• There are three versions of GSM, each using different carrier frequencies
Performance Characteristics
 GSM Services

• Tele-services
• Bearer or Data Services
•
• Supplementary services
26
 Tele Services

• Telecommunication services that enable voice communication via mobile phones

between 2 end users at a rate of 13kbps
Offered services
• Mobile telephony
• Emergency calling
• SMS
• FAX
 Bearer Services

• Include various data services for information transfer between GSM and other
networks like PSTN, ISDN etc at rates from 300 to 9600 bps
• Unified Messaging Services(UMS)
• Group 3 fax
• Voice mailbox
• Electronic mail
 Supplementary Services

• Call related services :

• Call Waiting-Notification of an incoming call while on the handset
• Call Hold-Put a caller on hold to take another call
• Call Barring-All calls, outgoing calls, or incoming calls
• Call Forwarding-Calls can be sent to various numbers defined by the user
• Multi Party Call Conferencing -Link multiple calls together
 GSM radio frequency carriers

The up and down-link frequency channel pair allocation has been arranged
such that the two frequencies comprising a channel pair are 45 MHz apart.
Each of these frequency pairs is identified by an Absolute Radio Frequency
Carrier Number (ARFCN).
Total 915-890=25Mhz BW divided into 124 carrier frequencies of 200khz
124 200-kHz subbands are numbered consecutively by the so-called Absolute Radio
Frequency Channel Numbers (ARFCNs).
Total no of channels:
124x8=992 channels for GSM 900 {Each subband is shared by eight users.}
374x8=2992 channels for GSM 1800
299x8=2392 channels for GSM 1900
GSM radio frequency bands
ARFCN
Mobile Station(MS)
Base Station Subsystem (BSS)
Network and Switching Subsystem (NSS)
Operation Support System (OSS)
22222222

2
 M o b ile P h o n e s ,P D A s

Infrastructure 1

Antennas Infrastructure 2
• SS7 protocol
• GPRS-SGSN,GGSN
• ILR: is a register used at the outside of a GSM network for inter-standard roaming
when the mobile networks use different signalling protocols.
• FNR: The FNR service enables subscribers to migrate among HLRs of the same
carrier without changing subscriber mobile numbers.
• IWF: The inter-working function is a method for interfacing a wireless
telecommunication network with the public switched telephone network.
Interfaces and protocols
 Signaling Model
• GSM architecture is a layered model that is designed to allow communications
between two different systems.
• The lower layers assure the services of the upper-layer protocols.
• Based on the interface, the GSM signaling protocol is assembled into three
general layers:
• Layer 1 − The physical layer. It uses the channel structures over the air interface.
• Layer 2 − The data-link layer.
• Mobile side:Across the Um interface, the data-link layer is a modified version of
the Link access protocol for the D channel (LAP-D)
• Network side:Across the A interface, the Message Transfer Part (MTP)
• Layer 3 − GSM signalling protocol’s third layer is divided into three sublayers −
• Radio Resource Management (RR):RR layer is to manage the RR-session, the
time when a mobile is in a dedicated mode, and the radio channels including
the allocation of dedicated channels
• Mobility Management (MM): It handles the functions that arise from the
mobility of the subscriber, as well as the authentication and security aspects.
Location management also.
• Connection Management (CM):This layer is responsible for Call Control,
Supplementary Service Management, and Short Message Service
Management.
Signaling Model
 Um,Abis interface
• LAPDm is a modified version of LAPD (Link Access Protocol in the D channel), the Data
link layer protocol.
• The modifications make it suitable for transmission across a radio interface.
• It is used in GSM to support the transport of information between the mobile and the
network
• Modified ISDN protocol
• ISDN (Integrated Services Digital Network) is a digital telephone standard designed to
replace analog connections by utilizing ordinary copper wires that are used in standard
analogue telephone systems.
• ISDN was developed to provide digital transmission of both voice and data resulting in
better quality and speeds over that of PSTN (Public Switched Telephone Network)
systems
• The D-Channel – This is known as the Delta (“D”) channel which can be either 16Kbps
or 64Kbps used primarily for the signalling between the switching equipment
• BTSM manages RRM messages.
• Eg:radio resource messages for encryption like cypher keys
• The RR protocols are responsible for the allocation and reallocation of traffic channels
between the MS and the BTS.
 A&ATER Interface
• A: BSS Application Part (BSSAP) is a Signaling System 7 (SS7) protocol
• 3 parts in the direction of MS: RR,MM,CM
• Protocol used to transfer CM and MM messages is BBSAP
• 2 parts in the direction of n/w that are:
• BSSMAP (BSS Mobile Application Part)
• DTAP (Direct Transfer Application Part)
• BSSMAP provides resource management and handover control between MSC and
BSS
• DTAP is used to transfer Mobile Management (MM) and Connection Management
(CM) messages between MSC and MS.
• ATER: ONLY IN GSM FOR TRANSCODING
• BETWEEN BSC AND TRANSCODERCONTROLLER(TRC)
 MSC INTERFACES
• MTP-message transfer part-routing&addressing
• SCCP-signaling connection control part-adds fns
to SS7
• TCAP-transfer capabilities application part-
connection less n/w services
• MAP-mobile application part-for mobile
communication
• ISUP/TUP-ISDN user part/temp. user part-b/w
msc and isdn/pstn n/w
 Channel Concept
• GSM is based on TDMA to provide additional user capacity over limited radio
frequency spectrum
• Each 200-kHz subband supports a data rate of 271 kbit/s.Each subband is shared by
eight users.
• The time axis is partitioned into timeslots, which are periodically available to each
of the possible eight users
• Each timeslot is 576.92 μs long, which is equivalent to 156.25 bits
• A set of eight timeslots is called a frame; it has a duration of 4.615 ms. Within each
frame, the timeslots are numbered from 0 to 7.
• Each subscriber periodically accesses one specific timeslot in every frame on one
frequency subband.
• The combination of timeslot number and frequency band is called the physical
channel.
• The kind of data that are transmitted over one such physical channel depends on
the logical channel
The Assignment of Timeslots in the Uplink and Downlink
A subscriber utilizes the timeslots with the same number (index) in the uplink and
downlink.
However, numbering in the uplink is shifted by three slots relative to the numbering in
the downlink.
This facilitates the design of the MS transmitter/receiver, because reception and
transmission do not occur at the same time
 Channel Concept

• Timeslots
• Frames
• Multiframes
• Superframe
• hyperframe
Channel Concept
111111111111
 Traffic CHannels (TCHs)
• Payload data are transmitted via the TCHs. The payload might
consist of encoded voice data or “pure” data.
• There is a certain flexibility regarding the data rate:
• Full-rate Traffic CHannels (TCH/F) and Half-rate Traffic
CHannels (TCH/H).
• Two half-rate channels are mapped to the same timeslot, but in
alternating frames.
• Full-rate voice channels: the output data rate of the voice
encoder is 13 kbit/s. Channel coding increases the effective
transmission rate to 22.8 kbit/s.
• Half-rate voice channels: voice encoding with a data rate as
low as 6.5 kbit/s is feasible. Channel coding increases the
transmitted data rate to 11.4 kbit/s.
• Full-rate data channels: the payload data with data rates of 9.6,
4.8, or 2.4 kbit/s
• Broadcast CHannels (BCHs)
• BCHs are only found in the downlink. They serve as beacon signals.
• They provide the MS with the initial information that is necessary to start
the establishment of any kind of connection.
• The MS uses signals from these channels to establish a synchronization in
both time and frequency.
• these channels contain data regarding, e.g., cell identity.
• As the BSs are not synchronized with respect to each other, the MS has to
track these channels not only before a connection is established, but all the
time, in order to provide information about possible HOs.
• Frequency Correction CHannels (FCCHs)
• The carrier frequencies of the BSs are usually very precise and do not vary
in time, as they are based on rubidium clocks.
• However, dimension considerations and price considerations make it
impossible to implement such good frequency generators in MSs.
• Therefore, the BS provides the MS with a frequency reference (an
unmodulated carrier with a fixed offset from the nominal carrier
frequency) via the FCCH.
• The MS tunes its carrier frequency to this reference; this ensures that both
the MS and the BS use the same carrier frequency.
Synchronization CHannel (SCH)
• In order to transmit and receive bursts appropriately, an MS
not only has to be aware of the carrier frequencies used by the
BS but also of its frame timing on the selected carrier.
• This is achieved with the SCH, which informs the MS about
the frame number and the Base Station Identity Code (BSIC).
• Decoding of the BSIC ensures that the MS only joins
admissible GSM cells and does not attempt to synchronize to
signals emitted by other systems in the same band.
Broadcast Control CHannel (BCCH)
Cell-specific information is transmitted via the BCCH.
This includes,
Location Area Identity (LAI),
• maximum permitted signal power of the MS,
• actual available TCH,
• frequencies of the BCCH of neighboring BSs that are
permanently observed by the MS to prepare for a handover,
• Common Control CHannels (CCCHs)
• Before a BS can establish a connection to a certain MS, it has to send some
signaling information to all MSs in an area, even though only one MS is the desired
receiver.
• This is necessary because in the initial setup stage, there is no dedicated channel
established between the BS and a MS.
• CCCHs are intended for transmission of information to all MSs.

• Paging CHannel (PCH) When a request – e.g., from a landline – arrives at the BS
to establish a connection to a specific MS, the BSs within a location area send a
signal to all MSs within their range.
• This signal contains either the permanent International Mobile Subscriber Identity
(IMSI) or the Temporary Mobile Subscriber Identity (TMSI) of the desired MS.
• The desired MS continues the process of establishing the connection by requesting
(via a Random Access CHannel (RACH)) a TCH.
• The PCH may also be used to broadcast local messages like street traffic
information or commercials to all subscribers within a cell. Evidently, the PCH is
only found in the downlink.
• Random Access CHannel (RACH)
• A mobile subscriber requests a connection.
• This might have two reasons. Either the subscriber wants to initiate a connection, or
the MS was informed about an incoming connection request via the PCH.
• The RACH can only be found in the uplink.

• Access Grant CHannel (AGCH)

• Upon the arrival of a connection request via the RACH, the first thing that is
established is a Dedicated Control CHannel (DCCH) for this connection.
• This channel is called the Standalone Dedicated Control CHannel (SDCCH),
• This channel is assigned to the MS via the AGCH, which can only be found in the
downlink
• Dedicated Control CHannels (DCCHs)
• Similar to the TCHs, the DCCHs are bidirectional – i.e., they can be found in the uplink and
downlink.
• They transmit the signaling information that is necessary during a connection.
• As the name implies, DCCHs are dedicated to one specific connection.
• Standalone Dedicated Control CHannel (SDCCH)
• After acceptance of a connection request, the SDCCH is responsible for further establishing
this connection.
• The SDCCH ensures that the MS and the BS stay connected during the authentication
process.
• After this process has been finished, a TCH is finally assigned for this connection via the
SDCCH.
Slow Associated Control CHannel (SACCH)
Information regarding the properties of the radio link are transmitted via the SACCH.
This information need not be transmitted very often, and therefore the channel is called
slow.
The MS informs the BS about the strength and quality of the signal received from serving
BSs and neighboring BSs.
The BS sends data about the power control and runtime of the signal from the MS to the
BS.
The latter is necessary for the timing advance. timing advance (TA) value corresponds
to the length of time a signal takes to reach the base station from a mobile phone.

Fast Associated Control CHannel (FACCH)

The FACCH is used for HOs that are necessary for a short period of time; therefore, the
channel has to be able to transmit at a higher rate than the SACCH.
Transmitted information is similar to that sent by the SDCCH.
The SACCH is associated with either a TCH or a SDCCH; the FACCH is associated with
a TCH.
GSM traffic and control signal burst
3333333333
 Identity Numbers
• Mobile Station ISDN Number (MS ISDN)
• The MS ISDN is the unique phone number of the subscriber in the public telephone
network.
• The MS ISDN consists of Country Code (CC 91), the National Destination Code
(NDC ), which defines the regular GSM provider of the subscriber, and the
subscriber number
• . The MS ISDN should not be longer than 15 digits.
• CC+NDC+SN
• The MSISDN is used for routing calls to the subscriber.
• MSISDN=919 825 098250
• International Mobile Subscriber Identity (IMSI)
• the IMSI is only used for subscriber identification in the GSM network.
• It is used by the Subscriber Identity Module (SIM),
• It consists again of three parts: the Mobile Country Code (MCC, three digits), the
Mobile Network Code (MNC, two digit,plmn no), and the Mobile Subscriber
Identification Number (MSIN, up to ten digits).
• IMSI:310 17 0845466094
 Identity Numbers
• Mobile Station Roaming Number (MSRN)

• The MSRN is a temporary identification that is associated with a mobile if it is not in the area
of its HLR.
• This number is then used for routing of connections.
• The number consists again of a CC, MNC, and a TMSI, which is given to the subscriber by
the GSM network (s)he is roaming into.

• International Mobile Station Equipment Identity (IMEI)

• The IMEI is a means of identifying hardware – i.e., the actual mobile device.
• the three identity numbers described above are all either permanently or temporarily
associated with the subscriber.
• In contrast, the IMEI identifies the actual MS used.
• It consists of 15 digits:
• six are used for the Type Approval Code (TAC), which is specified by a central GSM entity;
This code identifies the country in which type approval was sought for the phone, and
the approval number.

• two are used as the Final Assembly Code (FAC), which represents the manufacturer; and six
are used as a Serial Number (SN), which identifies every MS uniquely for a given TAC and
FAC.
•
System
MS can be in 2 states
operations
• Detached condition
• Attached condition–
– idle-ms listens to bcch and pch
– Active/dedicated-connection
– Handover-changes cell
Interrogation phase(incoming call)
Radio resource connection establishment
Radio resource connection establishment
Service request
Authentication
Ciphering mode setting
IMEI check
TMSI reallocation
Call initiation
Traffic channel assignment
Call confirmation
 Location updation
Operation to support subscribers mobility within GSM network
3 Types: Normal/ Periodic/IMSI detach&attach
The location update procedure allows a mobile device to inform the cellular network, whenever it moves from one location area to the next. Mobiles are responsible for detecting location area codes. Cells in a network are grouped into Location Areas

• Normal
Location updation/RR connection est
LU service request
LU accepted
Connection release
IMSI detach/attach
 Periodic LU
• By MS
• Timer based
• Used to prevent unnecessary use of resources
such as paging to detached MS
• No steps needed
 Call Handoff
• Support roaming mobility by handoff+location
updation
• These 2 allows network to locate MS outside its
Home location and connection to MS which is
moving rapidly
• Handoff happen when active MS changes cell
• 3 types
– Intra BSC
– Inter BSC
– Inter MSC
Intra BSC
Inter BSC
Inter MSC
Um interface
 Intra bsc handover
Handover is the ability to transfer an ongoing call or data session
from one base station to another base station.
Reasons for handoff:
• Mobile device moves from one cell to another
• When capacity of a cell is exhausted
• During maintenance or repair work on a cell
• When radio interference occurs

MS: Mobile Station

BTS: Base Transceiver Station / Base Station
BSC : Base Station Controller
MSC: Mobile Switching Center
TCH: Traffic Channel
RSS: Received Signal Strength
 Steps in Intra bsc handover
• First, the mobile device communicates with the current base station (BTS) to signal
its intention to handover to another BTS in the same BSC.
• The current BTS requests a list of neighboring BTSs from the BSC, which is a group
of BTSs that are managed together.
• The BSC sends a list of neighboring BTSs to the current BTS.
• The current BTS measures the signal strength of the neighboring BTSs and selects
the best candidate for handover based on various criteria, such as signal quality
and availability of resources.
• The current BTS sends a handover request message to the BSC, indicating the
target BTS and other relevant information.
• The BSC forwards the handover request message to the target BTS.
• The target BTS allocates resources for the handover and sends a handover
command message to the mobile device.
• The mobile device acknowledges the handover command and switches its radio
link from the current BTS to the target BTS.
• The current BTS and the BSC release the resources allocated for the mobile device.
• The mobile device resumes communication with the network through the target
BTS.
Intra bsc handover
 TDMA hyperframe
The TDMA Hyperframe structure is a long-term cyclic pattern that
governs the allocation of time slots for communication between mobile
devices and base stations.
The TDMA Hyperframe consists of 2048 Superframes. A Hyperframe is
the largest time interval in the GSM system.
Each Superframe consists of either 51 26-frame Multiframe or 26 51-
frame Multiframe, which totally adds upto 1326 TDMA frames.
The 26 frame Multiframe is the TCH (Traffic Channel) multiframe which
handles data.
The 51 frame Multiframe is the CCH (Control Channel) multiframe which
is used for control purposes.
One TDMA frame consists of 8 time slots.
Tdma hyperframe structure