C04-Wireless Telecom Systems
C04-Wireless Telecom Systems
C04-Wireless Telecom Systems
Chapter 4: Wireless
Telecommunication Systems
Market
GSM
Overview
Services
Sub-systems
Components
DECT
TETRA
UMTS/IMT-2000
4.0.
1
subscribers (x 1000)
600000
500000
Analog
total
GSM total
400000
CDMA total
300000
TDMA total
200000
PDC/PHS
total
total
100000
0
199
6
199
7
199
8
199
9
200
0
200
1
4.1.
1
GSM: Overview
GSM
4.2.
1
Total mobility
Worldwide connectivity
High capacity
Security functions
4.3.
1
Disadvantages of GSM
There is no perfect system!!
no end-to-end encryption of user data
no full ISDN bandwidth of 64 kbit/s to the user, no transparent
B-channel
4.4.
1
GSM offers
Bearer Services
Telematic Services
Supplementary Services
bearer services
MS
TE
MT
R, S
GSM-PLMN
Um
transit
network
(PSTN,
ISDN)
source/
destination
network
TE
(U, S, R)
tele
services
Mobile Communications: Wireless Telecommunication Systems
S.K.RAGHU,GITAM UNIVERSITY
4.5.
1
Bearer Services
4.6.
1
Tele Services I
mobile telephony
primary goal of GSM was to enable mobile telephony offering the
traditional bandwidth of 3.1 kHz
Emergency number
common number throughout Europe (112); mandatory for all
service providers; free of charge; connection with the highest
priority (preemption of other connections possible)
Multinumbering
several ISDN phone numbers per user possible
4.7.
1
Tele Services II
Additional services
Non-Voice-Teleservices
group 3 fax
voice mailbox (implemented in the fixed network supporting the mobile
terminals)
electronic mail (MHS, Message Handling System, implemented in the fixed
network)
...
4.8.
1
Supplementary services
4.9.
1
subsystems
RSS (radio subsystem): covers all radio aspects
NSS (network and switching subsystem): call forwarding, handover,
switching
OSS (operation subsystem): management of the network
4.10.
1
GSM: overview
OMC, EIR,
AUC
HLR
NSS
with OSS
VLR
MSC
GMSC
VLR
fixed network
MSC
BSC
BSC
RS
S
4.11.1
radio cell
M
M
S
S
BSS
Um
radio cell
M
S
BT
S
RSS
BT
S
Abis
BS
C
BS
C
A
MS
C
NSS
VL
R
MS
C
VL
R
HL
R
O
OSS
EIR
AU
C
signaling
G
MS
C IW
F
ISDN, PSTN
PDN
O
MC
4.12.
1
network and
switching subsystem
MS
Abis
BS
C
EI
R
SS7
BT
S
BT
S
ISDN
PSTN
MS
C
Um
BT
S
BT
S
BS
C
BSS
fixed
partner networks
HL
R
VL
R
A
MS
C IW
F
ISDN
PSTN
PSPDN
CSPDN
4.13.
1
M
S
Components
MS (Mobile Station)
BSS (Base Station Subsystem):
consisting of
Um
BT
S
BT
S
Abis
BS
C
MSC
Interfaces
BT
S
BT
S
A
BS
C
BSS
Um : radio interface
MSC
4.14.
1
fixed partner
networks
ISDN
PSTN
M
SC
SS7
EI
R
HL
R
Databases
VL
R
M
SC IW
F
Components
ISDN
PSTN
PSPDN
CSPDN
4.15.
1
Radio subsystem
The Radio Subsystem (RSS) comprises the cellular mobile network
up to the switching centers
Components
4.16.
1
cell
4.17.
1
4.18.
1
Mobile station
Terminal for the use of GSM services
A mobile station (MS) comprises several functional groups
MT (Mobile Terminal):
offers common functions used by all services the MS offers
corresponds to the network termination (NT) of an ISDN access
end-point of the radio interface (Um)
TA (Terminal Adapter):
TE (Terminal Equipment):
peripheral device of the MS, offers services to a user
does not contain GSM specific functions
TE
TA
R
MT
S
Um
4.19.
1
Components
4.20.
1
switching functions
additional functions for mobility support
management of network resources
interworking functions via Gateway MSC (GMSC)
integration of several databases
Functions of a MSC
4.21.
1
Operation subsystem
The OSS (Operation Subsystem) enables centralized operation,
management, and maintenance of all GSM subsystems
Components
different control capabilities for the radio subsystem and the network
subsystem
4.22.
1
GSM - TDMA/FDMA
fr
y equ
en
c
935-960 MHz
124 channels (200
kHz)
downlink
890-915 MHz
124 channels (200
kHz)
uplink
8
4.615 ms
bits
S Training S
1 26
bits
user
data
57
bits
tai
l
guard
spac
e
546.5 s
577 s
4.23.
1
...
superframe
...
...
multifram
1 e
...
48
49
24
24
2
50
6.12 s
25
120 ms
25
...
48
49
50
235.4 ms
frame
0
...
slot
bur
st
Mobile Communications: Wireless Telecommunication Systems
S.K.RAGHU,GITAM UNIVERSITY
4.615 ms
577 s
4.24.
1
Um
Abis
MS
BTS
BSC
MSC
CM
CM
MM
MM
BSSA
P
RR
RR
BT
SM
LAPDm
R
R
LAPDm
LAPD
LAPD
radio
radio
PCM
PCM
BTSM
16/64 kbit/s
BSSAP
SS7
SS7
PCM
PCM
64 kbit/s /
2.048 Mbit/s
4.25.
1
HLR
4
5
3 6
PSTN
GMS
C
10
VLR
8 9
14 15
MSC
10 13
16
10
BSS
BSS
BSS
11
11
11
11 12
17
MS
4.26.
1
VLR
3 4
PSTN
6
7
GMS
C
5
MSC
8
2 9
MS
1
10
BSS
4.27.
1
MTC/MOC
MS
MTC
paging
request
channel
request
immediate
assignment
paging
response
authentication
request
authentication
response
ciphering
command
ciphering
complete
setu
p
call
confirmed
assignment
command
assignment
complete
alertin
g
connec
tconnect
acknowledge
data/speech
exchange
BTS
MS
MOC
BTS
channel
request
immediate
assignment
service
request
authentication
request
authentication
response
ciphering
command
ciphering
complete
setu
p
call
confirmed
assignment
command
assignment
complete
alertin
g
connec
tconnect
acknowledge
data/speech
exchange
4.28.
1
4 types of handover
1
M
S
2
M
S
3
M
S
4
M
S
BTS
BTS
BTS
BTS
BSC
BSC
BSC
MSC
MSC
4.29.
1
Handover decision
receive
level
BTSold
receive
level
BTSold
HO_MARGIN
M
S
M
S
BTSold
BTSnew
4.30.
1
Handover procedure
MS
BTSold
BSCold
measuremen
measuremen
t
t
report
result
HO decision
HO
required
HO
command
HO
command
HO
command
MSC
HO access
Link
establishment
clear
clear
command
command
clear
clear
complete
complete
BSCnew
BTSnew
HO
request
resource
allocation
ch.
activation
ch. activation
HO request
ack
ack
HO
complete
HO
complete
4.31.
1
Security in GSM
Security services
access control/authentication
user SIM (Subscriber Identity Module): secret PIN (personal
identification number)
SIM network: challenge response method
confidentiality
anonymity
temporary identity TMSI
(Temporary Mobile Subscriber Identity)
newly assigned at each new location update (LUP)
encrypted transmission
secret:
A3 and A8
available via the
Internet
network providers
can use stronger
mechanisms
4.32.
1
GSM - authentication
SIM
mobile network
Ki
128 bit
AC
RAN
D
128 bit
RAN
D
RAN
D
128 bit
A3
Ki
128 bit
A3
SIM
SRES* 32 bit
MSC
SRES* =?
SRES
SRES
SRE
S
32 bit
32 bit
SRE
S
SRES: signed
4.33.
1
MS with SIM
128 bit
RAN
D
128 bit
RAN
D
RAN
D
128 bit
A8
cipher
key
BTS
Ki
128 bit
SIM
A8
Kc
64 bit
Kc
64 bit
data
encrypted
data
A5
SRE
data
S
MS
A5
4.34.
1
already standardized
bundling of several time-slots to get higher
AIUR (Air Interface User Rate)
(e.g., 57.6 kbit/s using 4 slots, 14.4 each)
advantage: ready to use, constant quality, simple
disadvantage: channels blocked for voice transmission
4.35.
1
packet switching
using free slots only if data packets ready to send
(e.g., 115 kbit/s using 8 slots temporarily)
standardization 1998, introduction 2000?
advantage: one step towards UMTS, more flexible
disadvantage: more investment needed
GR (GPRS Register)
user addresses
4.36.
1
4.37.
1
M
S
SGS
N
BSS
Um
Gb
Gn
PD
N
Gi
HLR/
GR
MSC
VLR
GGS
N
EIR
4.38.
1
BS
S
Um
SGSN
Gb
Gn GGSN
Gi
apps.
IP/X.25
IP/X.25
SN
DC
P
SNDCP
LLC
RLC
UDP/T
CP
BSSGP
IP
IP
FR
L1/L2
L1/L2
LLC
MAC
RL
C
MAC
radio
radio
BSSGP
FR
GTP
GTP
UDP/T
CP
4.39.
1
DECT
DECT (Digital European Cordless Telephone) standardized by
ETSI (ETS 300.175-x) for cordless telephones
standard describes air interface between base-station and
mobile phone
DECT has been renamed for international marketing reasons
into Digital Enhanced Cordless Telecommunication
Characteristics
4.40.
1
D3
P
A
P
T
P
A
P
T
V
D
B
D2
FT
local
netwo
rk
H
D
B
D1
global
network
FT
local
netwo
rk
4.41.
1
U-Plane
signaling,
interworkin
g
applicatio
n
processes
network
layer
data link
control
management
OSI layer 3
data link
control
OSI layer 2
physical layer
OSI layer 1
4.42.
1
DECT layers I
Physical layer
modulation/demodulation
generation of the physical channel structure with a guaranteed
throughput
controlling of radio transmission
channel assignment on request of the MAC layer
detection of incoming signals
sender/receiver synchronization
collecting status information for the management plane
MAC layer
segmentation/reassembly
error control/error correction
4.43.
1
12 down slots
slot
0
0
sync
A: network control
B: user data
X: transmission quality
25.6 kbit/s
simplex bearer
32 kbit/s
guar
41
d
31 0
0
D field
A field
12 up slots
38
7
B field
63 0
protected
mode
DATA
64
C
1
6
31 0
9
DATA
64
unprotected
mode
X field
C
1
6
DATA
64
C
1
6
DATA
64
DATA
4.44.
2
C
1
6
DECT layers II
4.45.
1
Network layer
main tasks
call control: setup, release, negotiation, control
call independent services: call forwarding, accounting, call redirecting
mobility management: identity management, authentication,
management of the location register
4.46.
2
DECT
basestation
fixed network
DECT
Common
Air Interface
DECT
Portable Part
GAP
4.47.
1
4.48.
1
hyperframe
0
...
multifram
e ...
57
58
59
61.2 s
15
16
17
1.02 s
CF
frame
0
slot
509
56.67 ms
Control Frame
14.17 ms
4.49.
1
UMTS
4.50.
1
UMTS architecture
UTRAN (UTRA Network)
UE (User Equipment)
CN (Core Network)
Uu
UE
Iu
UTRA
N
CN
4.51.
1
...
69
70
71
13
14
15
frame
10 ms
...
slot
625 s
pilot
625 s
625 s
TPC
TFI
data
pilot
TPC
DPCC
H
TFI
data
DPDC
H
uplink
DPCCH
uplink
DPDCH
downlink
DPCH
W-CDMA
1920-1980 MHz uplink
2110-2170 MHz downlink
chipping rate:
4.096 Mchip/s
soft handover
localization of
MS (ca. 20 m precision)
complex power control
(1600 power control
cycles/s)
4.52.
1
frame
10 ms
625 s
slot
midampl
data
e
GP: Guard
Period
...
data
13
G
P
14
15
traffic burst
W-TDMA/CDMA
2560 chips per slot
symmetric or asymmetric
slot assignment to up/downlink
tight synchronization needed
simpler power control
(100-800 power control
cycles/s)
4.53.
1
MBS
(Mobile Broadband System)
fas
t
mobil
e
slow
UMTS
G
S
M
portabl
e
DE
CT
SAMBA
MEDIAN
WAND
ISDN
fixed
10
kbit/s
2
Mbit/s
B-ISDN
20
Mbit/s
30
Mbit/s
150
Mbit/s
4.54.
1