1

Objectives
y NamethethreesubsystemsofGSM.
y Explainthemobilityconcept(handover,location
update,paging).
y Describehowmobileoriginatedandmobile
terminatedcallsarehandledinGSM.
y Explaintheconceptofsecurity.

preparedby:Engr.ArisCondino 2
 NetworkSwitching
BaseStation Subsystem
Subsystem GatewayMSC
Base Visitor
Transceiver Location
Register
Station
Abis HomeLocation
MobileSwitchingCenter
Interface Register
AirInterface
AInterface

Network Short
Management Message
BaseStation Subsystem Service
Mobile
Station Controller Center
preparedby:Engr.ArisCondino 3
 NSSFunctions:
GSM subsystems 1.MobilityManagement
NSS 2.SubscriberDataHandling
3.Signalling (towardsother
GMSC networkelements)
4.CallControl
HLR
5.Charging
6.Locatingasubsformobile
terminatedcalls.
MSC
VLR

A
BSS
O&M

BSC A-bis Air NMS

MS

preparedby:Engr.ArisCondino 4
 BSSFunctions:
GSM subsystems 1.RadioPathControl,BTSand
NSS TCcontrol,SyncwithMSC.
2.AirandAinterfacesignalling,
GMSC Connectionestablishment.
3.Mobilitymanagement,
HLR
SpeechTranscoding
4.CollectionofStatisticaldata

MSC
VLR

A
BSS
O&M

BSC A-bis Air NMS

MS

preparedby:Engr.ArisCondino 5
 NMSFunctions:
GSM subsystems 1.FaultManagement
NSS 2.ConfigurationManagement
3.PerformanceManagement
GMSC
HLR

MSC
VLR

A
BSS
O&M

BSC A-bis Air NMS

MS

preparedby:Engr.ArisCondino 6
MobileStation
y Whatisamobilestation?
y AdeviceabletoaccessservicesinaGSMnetworkvia
theAirinterface.

+ = Air
Interface
Subscriber
Identity
Mobile Module Mobile GSM
Equipment Station Network
preparedby:Engr.ArisCondino 7
MobileEquipment
y IMEI(InternationalMobileEquipmentIdentification)

preparedby:Engr.ArisCondino 8
SubscriberIdentificationModule
y IMSI
y InternationalMobileSubscriberIdentity
y ICCID
y InternationalCompactCardIdentification
y UniqueSIMmanufacturingnumber

preparedby:Engr.ArisCondino 9
 MSISDN = CC +NDC +SN

CC = Country Code
NDC = National Destination Code
SN = Subscriber #

IMSI = MCC + MNC + MSIN ( fixed 15 digits )

MCC = Mobile Country Code

MNC = Mobile Network Code
MSIN = Mobile Subscriber Identification #

LAI = MCC + MNC + LAC

MCC = Mobile Country Code (of visiting country)

MNC = Mobile Network Code(of serving PLMN)
LAC = Location Area Code

preparedby:Engr.ArisCondino 10
 FirsttimeLocationUpdate(1)
HLRDB
MSISDN IMSI VLRAddressSub.Data
62+898+8983725310+02+1234567890vlr2services

HLR

LocUp
IMSIRequest
IMSI
MSC MSC BTS MS
B
BSC 1
VLR1 VLR2
Authen 1

LocUp+TMSI
LAI1

11
 MS BSS MSC VLR HLR

LOCATION UPDATE REQUEST

REQUEST SUBS ID

SEND SUBS ID
REQUEST SUBS INFO

SEND SUBS INFO

AUTHENTICATION

AUTHENTICATION RESPONSE

HLR UPDATE

preparedby:Engr.ArisCondino 12
 CallEstablishment(PSTNOMT)
HLRDB
MSISDN IMSI VLRAddressSub.Data
62+898+8983725310+02+1234567890vlr2services

HLR
HLR
Enquiry IMSI=MCC+MNC+MSIN
MSISDN
IMSI
MSC MSC BTS B B
PSTN BSC MS
1
VLR1 VLR2 1
MSISDN VLRDB
IMSI
310+02+1234567890
MSRN LAI
1
DATA
services
LAI1

MSRN
A POOL MSRN=CC+NDC+SN
MSISDN(B)
CC+NDC+SN
639189499247

13
 CallEstablishment(MOPSTNT)
MSISDN(A)
CC+NDC+SN
HLR 6325113580

MSISDN

MSC MSC BTS B

PSTN BSC MS
1
VLR1 VLR2 1

LAI1

14
 CallEstablishment(MOMT)
HLRDB
MSISDN IMSI VLRAddressSub.Data
62+898+8983725310+02+1234567890vlr1services

HLR
HLREnquiry
IMSI=MCC+MNC+MSIN MSISDN MSISDN
IMSI
MSC MSC BTS B B
MS
BSC 1
VLR1 VLR2 1
VLRDB
IMSIMSRNLAIServices
2 Speech
LAI1
MSISDN(C)
CC+NDC+SN
MSRN 639189499247
BTS MS
C
MSRN=CC+NDC+SN BSC 2
2

LAI2
15
 GenericLocationUpdate

HLR SubscriberInfo
TMSI+LAI
Delold Update
data
TMSI
MSC MSC BTS MS
B
BSC 1
VLR1 VLR2 Authentication
1
IMSI
LocUp+newTMSI
SecurityInfo
LAI1

16
Handover(1)
HLR

PSTN MSC/VLR1 MSC/VLR2

BSC1 BSC2 BSC3

BTS1 BTS2 BTS3 BTS4

MeasurementReport
B
preparedby:Engr.ArisCondino 17
Handover(2)
HLR

PSTN MSC/VLR1 MSC/VLR2

BSC1 BSC2 BSC3

BTS1 BTS2 BTS3 BTS4

BIamOK
preparedby:Engr.ArisCondino 18
Handover(3)
HLR

PSTN MSC/VLR1 MSC/VLR2

BSC1 BSC2 BSC3

BTS1 BTS2 BTS3 BTS4

MeasurementReport B
preparedby:Engr.ArisCondino 19
Handover(4)
HLR

PSTN MSC/VLR1 MSC/VLR2

BSC1 BSC2 BSC3

BTS1 BTS2 BTS3 BTS4

BIamOK
preparedby:Engr.ArisCondino 20
Handover(5)
HLR

PSTN MSC/VLR1 MSC/VLR2

BSC1 BSC2 BSC3

BTS1 BTS2 BTS3 BTS4

MeasurementReport B
preparedby:Engr.ArisCondino 21
Handover(6)
HLR

PSTN MSC/VLR1 MSC/VLR2

BSC1 BSC2 BSC3

BTS1 BTS2 BTS3 BTS4

IamOK
B
preparedby:Engr.ArisCondino 22
Handover(7)
HLR

PSTN MSC/VLR1 MSC/VLR2

BSC1 BSC2 BSC3

BTS1 BTS2 BTS3 BTS4

B
preparedby:Engr.ArisCondino 23
 AC VLR BTS AirInterface ME SIM

RAND

Ki A3
SRES
COMPARING
Authentication SRES
A3 Ki

RequestofIMEI
EIR IMEIChecking ME
ProvideIMEI

Traffic Traffic
Ciphering
Kc Kc
A8 A5 EncryptedData A5
EncryptedData A8
TDMAFN TDMAFN

24
Objectives
y Differentiatebetweenphysicalandlogical
channels.
y Listanddescribethetwelvedifferenttypesof
logicalchannelsandtheirfunctions.
y Describehowairinterfacepropertiesaffectthe
transmissionofspeechbetweenMSandnetwork
andexplainGSMsolutionstotheseproblems.
y List3BSC/BTSconnections.

preparedby:Engr.ArisCondino 25
 FRAME STRUCTURE
1 TDMA Frame = 8 TDMA Time Slots
4.615 ms

0 1 2 3 4 5 6 7

Basic TDMA frame, timeslot and burst structure

Flag
Tail Data F Training F Data Tail
000 Or Speech
3 57 1 26 1 57 3

Burst 148 bits

156.25 bits 0.577 ms

preparedby:Engr.ArisCondino 26
 LOGICAL CHANNELS
Oneveryphysicalchannel,anumberof
logicalchannelsaremapped.Eachlogical
channelisusedforaspecificpurpose.

11 LogicalChannels intheGSMsystem:
2 areusedforTraffic
9 areusedforControlSignaling

preparedby:Engr.ArisCondino 27
 LOGICALCHANNELS
TRAFFICCHANNELS(TCH)
FullRateChannel
HalfRateChannel
CONTROLCHANNELS(withhorribleabbreviations!)
BroadcastChannels(BCH)
FrequencyCorrectionChannel(FCCH)
SynchronizationChannel(SCH)
BroadcastControlChannel(BCCH)
CommonControlChannels(CCCH)
PagingChannel(PCH)
RandomAccessChannel(RACH)
AccessGrantChannel(AGCH)
DedicatedControlChannels(DCCH)
StandaloneDedicatedControlChannel(SDCCH)
SlowAssociatedControlChannel(SACCH)
FastAssociatedControlChannel(FACCH)

preparedby:Engr.ArisCondino 28
 CHANNEL CONFIGURATION :

Time Slots and Frames:

Hyperframe = 2048 Superframes

Superframe=26X51 or 51X26 Multiframes

0 1 2 24 25 0 1 2 49 50
26 Multiframe =120 ms 51 Multiframe =235 ms

0 7

TDMA frame = 4.615 ms

preparedby:Engr.ArisCondino 29
 CHANNEL CONFIGURATION :

Logical Channels, DOWNLINK

COMMON CHANNELS

FCCH
SCH BCH
BCCH

PCH CCCH
AGCH

DEDICATED CHANNELS

SDCCH
SACCH DCCH
FACCH

TCH TCH
TCH

preparedby:Engr.ArisCondino 30
 CHANNEL CONFIGURATION :

Logical Channels, UPLINK

COMMON CHANNELS

RACH CCCH

DEDICATED CHANNELS

SDCCH
SACCH DCCH
FACCH

TCH TCH
TCH

preparedby:Engr.ArisCondino 31
 BROADCAST CHANNELS
all downlink! Hey. Im a GSM?
GSM xmitter!

FCCH

GSM!!!
SCH TDMA#BSIC...

BCCH
LAneigborscell infomax power...

Hey! Dont shout

at me, lower your
power... Okok

preparedby:Engr.ArisCondino 32
 COMMON CONTROL CHANNELS

Hello! You have a call.

Hello! I have to set

PCH downlink only
up a call.
I need SDCCH.

RACH uplink only

AGCH downlink only

Ok. Use SDCCH.

preparedby:Engr.ArisCondino 33
 DEDICATED CONTROL CHANNELS
uplink and downlink On SDCCH:
-call set up signaling
-location updating
-periodic registration
-IMSI attach/detach
SDCCH
-SMS
-facsimile
etc..
SACCH
timing advance On SACCH
MS power -mobile transmits signal
strength on ncell quality
FACCH
Dont shout
handover at me
I cant hear
you

preparedby:Engr.ArisCondino 34
 4.615ms 4.615ms
TS0TS1TS2TS3TS4TS5TS6TS7 TS0TS1TS2TS3TS4TS5TS6TS7
FDTTTTTT RDTTTTTT
SDTTTTTT RDTTTTTT
F=FCCH R=RACH
S=SCH BDTTTTTT A=SACCH RDTTTTTT
B=BCCH BDTTTTTT T=TCH RDTTTTTT
C=PCHor BDTTTTTT RDTTTTTT
AGCH BDTTTTTT RDTTTTTT
D=SDCCH
A=SACCH CDTTTTTT RDTTTTTT
T=TCH CDTTTTTT RDTTTTTT
CDTTTTTT RDTTTTTT
CDTTTTTT RDTTTTTT
FDTTTTTT RDTTTTTT
SDTTTTTT RDTTTTTT
CDATATAT RDAIAIAI
CDTTTTTT RDTTTTTT
CDTTTTTT RDTTTTTT
CDTTTTTT RDTTTTTT
. . . . . . . . . . . . . . . .
. . . . . . . . . . . . . . . .
. . . . . . . . . . . . . . . .

1Frame 1Frame
(Downlink BTStransmit) (Uplink Mobiletransmit)
1carrier=200kHz 1carrier=200kHz
35
 CHANNEL CONFIGURATION :

200 KHz
4.615 ms
.577 ms

0 1 2 3 4 5 6 7

FCCH SDCCH TCH TCH TCH TCH TCH TCH

SCH SACCH SACCH SACCH SACCH SACCH SACCH SACCH
BCCH CBCH FACCH FACCH FACCH FACCH FACCH FACCH
PCH
RACH
AGCH

preparedby:Engr.ArisCondino 36
 CHANNEL CONFIGURATION :

Configuration of Signaling Channels:

Combined Configuration

0 7

RTSL 0 = BCCH, SDCCH/4, PCH, AGCH

Separated Configuration

0 7

RTSL 1 = SDCCH/8

RTSL 0 = BCCH, PCH, AGCH

preparedby:Engr.ArisCondino 37
 CHANNEL CONFIGURATION :

Combined CCCH/SDCCH/4 Multiframe:

Downlink
51 TDMA Frame = 235 ms

f s b b b b c c c cf s c c c cc c c c f s t t t tt t t t f s t t t tt t t t f s s s s ss s s s i

Uplink

t t t t r r s s s ss s s s r rr r r r r r r r r rr r r r r r r r r rr t t t t t t t t rr t t t t

0 50

Channels:
f = FCCH b = BCCH r = RACH i = idle
s = SCH/SACCH c = CCCH ( either PCH or AGCH )

preparedby:Engr.ArisCondino 38
 CHANNEL CONFIGURATION :

BCCH/CCCH Multiframe:
Downlink
51 TDMA Frame = 235 ms

f s b b b b c c c cf s c c c cc c c c f s c c c cc c c c f s c c c cc c c c f s c c c cc c c c i

Uplink

r r r r r r r r r rr r r r r rr r r r r r r r r rr r r r r r r r r rr r r r r r r r r rr r r r r

0 50

Channels:
f = FCCH b = BCCH r = RACH i = idle
s = SCH c = CCCH ( either PCH or AGCH )

preparedby:Engr.ArisCondino 39
 CHANNEL CONFIGURATION :

SDCCH/8 Multiframe:

Downlink
51 TDMA Frame = 235 ms

t t t t t t t t t tt t t t t tt t t t t t t t t tt t t t t t s s s ss s s s s s s s s ss s i i i

1 2 3 4 5 6 7 8

Uplink

s s s s s s s s s ss s i i i t t t t t t t t t tt t t t t tt t t t t t t t t tt t t t t t t t t t

0 50

Channels:
t = SDCCH s = SACCH i = idle

preparedby:Engr.ArisCondino 40
 CHANNEL CONFIGURATION :

Full Rate Traffic Channel ( TCH ) Multiframe:

Downlink and Uplink

26 TDMA Frame = 120 ms

tt t t t t t t t t t t t s t t t t t t t t t t t t i

Channels:
t = TCH s = SACCH i = idle

preparedby:Engr.ArisCondino 41
42
 IdleModeTask

PLMNselection

Cellselection

Cellreselection

Locationupdating.

preparedby:Engr.ArisCondino 43
 IDLE MODE

preparedby:Engr.ArisCondino 44
 Automatic Mode

PLMNselection

Cellselection

Cellreselection

Locationupdating.

preparedby:Engr.ArisCondino 45
 Normal Cell Reselection

CellisconsiderSuitableif:

ItbelongtothesameselectedPLMN

Cellisnotbarred

Itdoesnotbelongtolocationareaincludedinthelistof
forbiddenLAforroaming

preparedby:Engr.ArisCondino 46
Cell Selection

SearchAllRFChannels
35sectogetthelist

Tunetothecarrierw/highestsignalstrength

Getinfo(BSIC,BCCH)>ex.BAList

CellSelection

preparedby:Engr.ArisCondino 47
Cell Reselection

ContinuousMakeMeasurement
(NeighboringBCCH)

BSIC BCCHdata
Servingcell atleastevery30s
Sixneighbours atleastevery30s atleastevery5
min

ReselecttothebestCell

preparedby:Engr.ArisCondino 48
49