GSM basic

Petr Vacek e-mail: petr.vacek@rdc.cz

| www.rdc.cz

GSM schedule

PLMN features Structure of GSM network Functions of network elements Basic procedures Air interface

| www.rdc.cz

PLMN features

High speed quality through digital transmission Authentication and ciphering International roaming Access to all fixed and mobile network Use of SS7 signaling system in the NSS

| www.rdc.cz

GSM network structure

| www.rdc.cz

GSM network structure

NSS - Network Switching Subsystem BSS - Base Station Subsystem OSS - Operation & Support Subsystem

| www.rdc.cz

Network Switching Subsystem

MSC - Mobile Switching Center HLR - Home Location Register VLR - Visitor Location Register AuC - Authentication Center EIR - Equipment Identity Register

| www.rdc.cz

Mobile Switching Center

Switching and call routing Charging Service provisioning Communication with HLR

Communication with VLR Control of handover Control of connected BSCs Access to Internet

| www.rdc.cz

MSC service area

| www.rdc.cz

Home Location Register Subscriber identity

MSISDN (Mobile Subscriber ISDN Number) - IMSI (International Mobile Subscriber Identity) - LMSI (Local Mobile Subscriber Identity)
-

Subscriber services
Basic (voice, data, fax, SMS) - Supplementary (CFU, CFB, CLIP, CLIR, HOLD,...)
-

Subscriber authentication information

-

Subscriber location information

-

Triplet (SRES, Kc, RAND)

Address of MSC, VLR

IN parameters Message Waiting Data

| www.rdc.cz

Visitor Location Register Subscriber identity

-

IMSI, TMSI, Address of HLR LA (Location Area), Cell Id

Subscriber location information

-

Subscriber supplementary services Subscriber authentication information

-

Triplet, CKSN (Ciphering Key Sequence Number)

IN parameters

10

| www.rdc.cz

Authentication Center Triplet

RAND (RANDom number) - SRES (Signed RESponse) - Kc (Ciphering Key)
-

Algorithms
-

A3, A5, A8

Function
Subscriber authentication - Ciphering procedure
-

11

| www.rdc.cz

Equipment Identity Register

Database of IMEI (International Mobile Equipment Identity) White list Gray list Black list

12

| www.rdc.cz

GSM network structure

BSS - Base Station Subsystem NSS - Network Switching Subsystem OSS - Operation & Support Subsystem

13

| www.rdc.cz

Base Station Subsystem

BSC - Base Station Controller TC - Transcoder Controller BTS - Base Transceiver Station

14

| www.rdc.cz

Base Station Controller

Radio network management Transmission network management BTS management TRAU management Handling of MS connections Internal BSC operation and maintenance

15

| www.rdc.cz

Transcoder Controller

Transcoding
-

GSM PCM 16 kbit/s 64 kbit/s

Rate adaptation
-

16

| www.rdc.cz

Base Transceiver Station

Radio resources Signal processing Signal link management Synchronization Local maintenance handling Functional supervision and testing

17

| www.rdc.cz

GSM network structure

BSS - Base Station Subsystem NSS - Network Switching Subsystem OSS - Operation & Support Subsystem

18

| www.rdc.cz

Operation & Support Subsystem

ADC Administrative Centre NMC Network Management Centre OMC Operation & Maintenance Centre

19

| www.rdc.cz

GSM numbering and identification parameters

MSISDN MSRN IMSI TMSI LMSI IMEI LAI CGI

20

| www.rdc.cz

MSISDN

Mobile Subscriber ISDN Number (15 digits)

National mobile number CC NDC SN

CC Country Code (1-3 digits) NDC National Destination Code (1-3) SN Subscriber Number

21

| www.rdc.cz

MSRN

Mobile Subscriber Roaming Number

SN (VMSC+VSN)

VCC

VNDC

VCC Visitor Country Code VNDC Visitor National Destination Code VMSC Visitor MSC number VSN Visitor Subscriber Number

22

| www.rdc.cz

IMSI

International Mobile Subscriber Identity (max 15 digits)

National mobile number CC NDC SN

CC Country Code (1-3 digits) NDC National Destination Code (1-3) SN Subscriber Number

23

| www.rdc.cz

TMSI

Temporary Mobile Subscriber Identity (4 octets)

TMSI

24

| www.rdc.cz

LMSI

Local Mobile Subscriber Identity (4 octets)

LMSI

25

| www.rdc.cz

IMEI

International Mobile Equipment Identity (15 digits)

TAC

FAC

SNR

spare

TAC Type Approval Code (6 digits) FAC Final Assembly Code (2 digits) SNR Serial Number (6 digits)

26

| www.rdc.cz

LAI

Location Area Identification

MCC

MNC

LAC

MCC Mobile Country Code (3 digits) MNC Mobile Network Code (2 or 3 digits) LAC Location Area Code (4 digits)

27

| www.rdc.cz

CGI

Cell Global Identity

MCC

MNC

LAC

CI

MCC Mobile Country Code (3 digits) MNC Mobile Network Code (2 or 3 digits) LAC Location Area Code (4 digits) CI Cell Identity (4 digits)

28

| www.rdc.cz

Traffic cases schedule

Authentication and ciphering Location update Charging Mobile originated call Mobile terminating call Handover Mobile originated SMS Mobile terminated SMS

29

| www.rdc.cz

Authentication and ciphering

Generating triplet

RAND
RAND A3

SRES

A8 Ki

Kc

30

| www.rdc.cz

Authentication and ciphering

Subscriber authentication

31

| www.rdc.cz

Authentication and ciphering

Ciphering

data Kc Cipher data

A5

XOR

TDMA frame number

32

| www.rdc.cz

Location Update in BSS

MS

BTS

BSC

MSC/VLR

LU request

Authentication procedure Ciphering procedure TMSI reallocation procedure LU accept

33

| www.rdc.cz

Location Update in NSS

MS A

BSS

MSC new

HLR/EIR

MSC old

LU request Identification procedure Update location Insert subs. data Update location ack LU accept

Cancel location

34

| www.rdc.cz

Charging

CDR Call data record

35

| www.rdc.cz

Mobile originated call

MS

BSS

MSC/VLR

CM-Service request Authentication procedure Ciphering procedure TMSI reallocation procedure Setup (MSISDN) TCH assignment Alerting Connect

36

| www.rdc.cz

Mobile terminating call

GMSC

HLR

MSC/VLR

BSS

MS

SRI

Provide MSRN MSRN

SRI [MSRN] Routing the call [MSRN] Paging Answer to paging Authentication, ciphering Setup Assignment TCH Alerting Connect Connect

37

| www.rdc.cz

Intra BSC Handover

MS

BTS new

BTS old

BSC

MSC/VLR

Call in progress TCH activation Handover command Handover access Handover complete

Handover complete

TCH release

38

| www.rdc.cz

Intra MSC Handover

MS

BTS old

BTS new

BSC old

BSC new

MSC/VLR

Call in progress Handover required Handover request TCH activation Handover request ack Handover command Handover access Handover complete Handover complete Connection release TCH release Handover detect

39

| www.rdc.cz

Inter MSC Handover

BSC A

MSC A

MSC B

BSC B

Call in progress Handover required

Prepare handover

Handover request Handover accept

Prepare handover ack Handover command Connection establishment Handover detection

Handover detection Handover complete

Handover complete Clear connection Call in progress

40

| www.rdc.cz

Mobile originated SMS

MS

VLR

MSC

SMS-IWMSC

SC

Short message Info for MO-SMS Forward message Short message Short message ack Forward message ack Short message ack

41

| www.rdc.cz

Mobile terminated SMS

MS

VLR

MSC

HLR

SMS-GMSC

SC

Short message SRI Forward message Info for MT-SMS Short message Short message ack Forward message ack Short message ack

42

| www.rdc.cz