GSM CHANNEL CONCEPT & CALL PROCESSING.ppt

Gehjskkksjsh

1. 7/1/2024 1

2. Channels
•Physical Channels
–Associated with frequency bands, time slots, codes
–Physical channels transfer bits from one network
element to another
•Logical Channels
–Distinguished by the nature of carried information
and the way to assemble bits into data units
–Three types
•one-to-one: traffic channels between a BTS and a MS
•one-to-many: synchronization signals from BTS to MSs in a
cell
•many-to-one: from MSs to the same BTS
7/1/2024 2

3. Bursts and Frames
20473210
Hyper frame = 2048 Super frames= 2,715,648 TDMA frames
3 Hours 28 Minutes 53 Seconds and 760 milliseconds
500
250
1 superframe = 1326 TDMA frames (6.12 seconds)
= 51 (26-frame) multi frames or 26 (51-frame) multi frames
51 Multiframe
Approx 235 mS
26 Multiframe
120 mS
2524210 50494810
76543210
TDMA frame
4.615 mS
7/1/2024 3

4. Organisationof Speech & Data
242523222120191817161514131211109876543210
BP 7BP 6BP 5BP 4BP 3BP 2BP 1BP 0
8.253571261573
Frames 0-11 : TCH Frames 12 :
SACCH
Frames 13-24 :
TCH
Frames 25 :
Unused
26 –frame
multiframe
Duration: 120 ms
TDMA frame
Duration: 60/13
ms
=4.615 ms
Tail
bits
Data bitsStealing
bit
Training
sequence
Stealing
bit
Data bits Tail
bits
Guard
space
Normal burst
Duration 15/26 ms
7/1/2024 4

5. Bursts and Frames
•There are two types of multiframe
–26 TDMA-frame multiframe is used to carry
TCH, SACCH and FACCH
–51 TDMA-frame multiframe is used to carry
BCCH, CCH, SDCCH and SACCH
7/1/2024 5

6. Burst
•The information contained in one time slot is a
burst
•Five types of burst
–Normal Burst (NB)
•To carry information on traffic and control channels
–Frequency Correction Burst (FB)
•To synchronize the frequency of the mobile
–Synchronization Burst (SB)
•To synchronize the frames of the mobile
–Access Burst (AB)
•For random and handover access
–Dummy Burst
•For padding the frame
7/1/2024 6

7. Bursts and Frames
01234567
GP
8.25
TB
3
Encrypted bits 57
flag
1
Training sequence 26flag
1
Encrypted bits 57
TB
3
TB
3
Fixed bits142
GP
8.25
TB
3
GP
8.25
TB
3
TB
3
Encrypted bits 39Synchronization sequence 64Encrypted bits 39
TB
3
Synchronization sequence
41
Encrypted bits 36TB
3
GP 68.25
GP
8.25
TB
3
TB
3
Mixed bits 58 Training sequence 26Mixed bits 58
Normal Burst (NB)
Frequency correction
burst (FB)
Synchronization
burst (SB)
Access burst (AB)
Dummy burst (DB)
TB: Tail bits
GP: Guard period
1 TDMA frame = 8 timeslots
1 timeslot = 156.25 bit durations (15/26 =~ 0.577 ms)
(1 bit duration 48/13 =~ 3.69 micro sec)
7/1/2024 7

8. Normal Burst
T3
Coded Data
57
Training
Sequence
26
Coded
Data 57
GP
8.25
S1 S1 T3
148 bits = 0.54612 msec
This burst is used to carry information on TCH and on the control
channelsBCCH, PCH, AGCH, SDCCH, ASCCH and FACCH.
Note: GP (Guard Period)
7/1/2024 8

9. Random Access Burst
T8
Synchronization
sequence 41
Coded Data
36
Guard Period
68.25
T3
88 bits = 0.32472 msec
68.25 bits = 0.252 msec which is equivalent to 75.5 km
propagation delay.
That is, the max. allowed distance between mobile station
and BTS is 37.75 km. Based on other system parameters,
the max cell size is 35 km in GSM.
7/1/2024 9

10. Traffic
channels
(TCH)
Signaling
channel
TCH/F: Full-rate Traffic Channel
TCH/H: Half-rate Traffic Channel
FCCH: Frequency correction
SCH: Synchronization
BCCH: Broadcast control
PCH: Paging
AGCH: Access grant
RACH: Random access
SDCCH: Stand-alone dedicated control
SACCH: Slow associated control
FACCH: Fast associated control
Two-way
Base-to-
mobile
Two-way
Logical Channel List
BCH
CCCH
DCCH
7/1/2024 10

11. 20
higher GSM frame structures
935-960 MHz
124 channels (200 kHz)
downlink
890-915 MHz
124 channels (200 kHz)
uplink
time
1 2 3 4 5 6 7 8
GSM TDMA frame
4.615 ms
GSM -TDMA/FDMA
GSM time-slot (normal burst)
546.5 µs
577 µs
tailuser data TrainingS
guard
space
Suser datatail
guard
space
3 bits57 bits 26 bits 57 bits1 1 3
S: indicates data or control
?
7/1/2024

12. 217/1/2024

13. LOGICAL CHANNELS
One or more logical channels can be transmitted on a
physical channel. There are different types of logical
channels. The type of logical channel is determined by the
function of the information transmitted over it.
The following types of logical channels exist:
Traffic channels
Broadcast channels
Common control channels
Dedicated control channels
Note that the first channel type carries speech and data, and
the other types control information (signaling).
7/1/2024 22

14. Traffic Channels
Full Rate Traffic Channel
(TCH/FS)
Traffic Channel Multiframes are composed of only 26 TDMA frames. On each
multiframe, there are 24 frames for Traffic Channels, 1 frame for a SACCH, and
the last frame is Idle.
Half Rate Traffic Channel
(TCH/HS)
When using Half-Rate Speech Encoding (TCH/HS), the speech encoding bit
rate is 5.6 kb/s, so one time slot can handle two half-rate channels. In this
case, one channel will transmit every other TDMA frame, and the other
channel would be transmitted on the other frames. The final frame (25), which
is normally used as an Idle frame, is now used as a SACCH for the second
half-rate channel.
7/1/2024 23

15. GSM-Frame Structure
7/1/2024 24

16. Here is the math:
As you remember from the Introduction to TDMA Tutorial. A
single time slot has a data throughput of 24.7 kilobits per second
(kb/s).
1. Calculate bits per TCH Multiframe: 114 bits per burst, 24 of the
26 frames used for voice/data.
114 bits ×24 frames = 2736 bits
2. Calculate bits per microsecond (ms): 2736 bits per TCH
multiframe, multiframe duration = 120ms
2736 bits ÷120ms = 22.8 bits/msec
3. Convert microseconds (ms) to seconds:
22.8 bits/sec ×1000 = 22,800 bits per second (22.8 kb/s)
7/1/2024 25

17. 7/1/2024 26

18. TRAFFIC CHANNELS
The traffic channels are used to send speech or data services. There
are two types of traffic channels. They are distinguished by their
transmission rates.
The following traffic channels are provided:
TCH/F (Traffic CHannel Full rate)
The TCH/F carries information at a gross bit rate of 22.8 kbit/s (after
channel coding). The net (or effective) bit rate at the TCH/F is for
speech 13 kbit/s and for data 12, 6 or 3.6 kbit/s (before channel
coding). The transmission rates of the data services allow services
which are compatible to the existing, respectively, 9.6, 4.8 and 2.4
kbit/s PSTN and ISDN services.
TCH/H (Traffic Channel Half rate)
The TCH/H carries information at a gross bit rate of 11.4 kbit/s. The net
bit rate at the TCH/H is for speech 5.6 kbit/s and for data 6 or 3.6
kbit/s.
7/1/2024 27

19. TCH/EFR (Enhanced Full rate)
The EFR provides a voice coding algorithm
offering improved speech quality. The algorithm
is fully compatible with a BSM speech quality.
The algorithm is fully compatible with a GSM 13
kbit/s speech channel. The main benefit will be
improved voice quality which offers prospects to
compete with PSTN networks.
A TCH/F or a TCH/H may also be used to send
signaling information (for example call
forwarding and short messages).
7/1/2024 28

20. Signaling Channels
Signaling channel
Broadcast
Channels (BCH
Cell Broadcast
Channel (CBCH)
Synchronization
Channel (SCH)
Frequency
Correction Channel
(FCCH)
Broadcast Control
Channel (BCCH)
Common Control
Channels (CCCH)
Paging Channel
(PCH)
Random Access
Channel (RACH)
Access Grant
Channel (AGCH)
Standalone
Dedicated Control
Channel (SDCCH)
Associated Control
Channel (ACCH)
Fast Associated
Control Channel
(FACCH)
Slow Associated
Control Channel
(SACCH)
7/1/2024 29

21. 7/1/2024 30

22. Broadcast Channels (BCH)
•To help the MH (Mobile Handset) measures
–to turn to a BTS
–to listen for the cell information
•to start roaming, waiting for calls to arrive, making calls
–Because BTSs are not synchronized with each
other, every time a MH decides to camp to
another cell, its FCCH, SCH, and BCCH must be
read.
7/1/2024 31

23. BROADCAST CHANNELS
•The information distributed over the
broadcast channels helps the mobile
stations to orient themselves in the mobile
radio network.
•The broadcast channels are point-to-
multipoint channels which are only
defined for the downlink direction (BTS to
the mobile station).
7/1/2024 32

24. BCCH (Broadcast Control
Channel)
•It inform the Mobile about system
confirmation parameter
•LAI Location Area Identity,
•Cell -Identity
•Neighboring Cell Identity.
•MS select best cell to attach BCCH on
full power, never Frequency hopped.
The BCCH is also known as beacon.
7/1/2024 33

25. LAI = MCC + MNC + LAC
MCC -Mobile Country Code.For India 404/405 USA 310/316 It is
assigned by the ITU-T
MNC -Mobile Network Code. . It is assigned by the government (DOT) of each
countryWest bengal74, Bihar-75,Orissa-76
LAC -Location Area Code . It is assigned by an operator
•Maximum length of LAC is 16 bits.
•Thus there can be maximum of 2
16
=65,536 Location Areas defined in one GSM
PLMN.
MCC MNC LAC
3 digits
2 digits 2 octets max
LAI
( 16 bits )
Location Related Identities
7/1/2024 34

26. CELL GLOBAL IDENTITY (CGI)
The CGI is used for cell identification within a location area.
This is done by adding a Cell Identity (CI) to the components of a LAI. CI has a
length of 16 bits.
CGI consists of:CGI = MCC + MNC + LAC + CI
7/1/2024 35

27. BASE STATION
IDENTITY CODE (BSIC)
NCC = Network Color Code (3 bits 0-7), identifies the
PLMN. Note that it does not uniquely identify the
operator. NCC is primarily used to distinguish between
operators on each side of a border.
BCC = Base Station Color Code (3 bits 0-7), identifies
the Base
Station to help distinguish between BTS using the same
BCCH frequencies.
113
77
76 79
66
63
FOR BSNL NCC=7
7-0 ,7-1,……..7-7.
12 NON HOPING
FREQ X 7=96 NO
OF COMBINATION .
BCCH+BSIC
COMBINATION
SHOULD NOT BE
SAME IN NEAR BY.
7/1/2024 36

28. Base Station Identification Code
(BSIC).
•BSIC allows for cell changes across cells
that are not necessarily neighbors in a
geographic sense. So an MS could do a
cell reselection across cells with the same
frequency but different BSIC. Such a
possibility arises if the immediate
neighbors are hidden (no line of sight)
whereas a far away cell can provide better
service due to clear LOS radio path.
BSIC+ARFCN is unique in a particular area.
7/1/2024 37

29. 7/1/2024 38

30. After the subscriber has switched on his mobile station and typed in his PIN code, the
mobile station searches for a network
•But how does it log on to the network the subscriber is registered with?
•For this purpose, the BTS sends out the Frequency Correction Channel (FCCH) at short
regular intervals, to help the mobile station find a frequency for downlink reception and
adjust its frequency oscillator for the uplink transmission
•To do so, it picks out the strongest received signal
•The Synchronization Channel (SCH) then helps the mobile station to synchronize itself to
timeslot 0 sent out by the BTS
•This means the mobile station must adjust to the rhythm given bythe BTS
•The SCH contains the TDMA frame number as well as the Base Station Identity Code,
containing basic information about the network operator that canbe compared with the
info stored on the SIM card
•After this step, the mobile is able to decide whether it has chosen the proper network. If
not, it starts the same procedure again trying with the second strongest FCCH received
•While the mobile station uses the FCCH to adjust its frequency, and the SCH for
synchronization and network identification, the Broadcast Control Channel (BCCH),
which is also sent by the BTS, supplies the mobile station with additional information
about the selected cell, for example for ciphering
•For some Value Added Services, for example location-dependent services, additional
information has to be transmitted from the BTS to the mobile
•The Cell Broadcast Channel CBCH is used for this purpose to transmit geographical
parameters, for example Gauss-Krueger-Coordinates of the BTS, to the mobile
•The FCCH, SCH, BCCH and CBCH are Broadcast Channels, and exist only in the
downlink
•They are the first logical channels belonging to the Common Channels.
7/1/2024 39

31. Frequency Correction
Channel (FCCH)
•Provide MH with the frequency
reference of the system
–To enable the Mobile Handset (MH) to
synchronize with the frequency
•Transmission properties
–Transmit on the down-link
–Point to multi-point.
7/1/2024 40

32. HSN,MAIO,FREQ PLANNING.
BSNL got 31 no of radio carrier.
Fixed F1 to F15
Hopping Freq F16 to F31.
CYCLIC HSN=0, MAIO=1,MAIO2
RANDOM HSN=1.
HSN=63.
MAIO Sequence(Mobile Allocation Index
Offset)
F16,F17,F18,F19..F31 MAIO=1
F17,F18,F19..F31,F16 MAIO=2
F18,F19..F31,F16, F17MAIO=3
41
F5
F9
F1F16
F8 F12
F4/F19
F6
F10
F2/F17
F7
F11
F3/F18
4/12
7/1/2024

33. FCCH (Frequency Correction
Channel)
To communicate with the BTS the mobile
station must tune to the BTS. The FCCH
transmits a constant frequency shift of the
radio frequency carrier that can be used by
the mobile station for frequency correction.
7/1/2024 42

34. Synchronization Channel
(SCH)
•MH synchronize with the structure within the
locative cell
–MH can receive information from the proper time slots on the TDMA
structure
•To ensure a GSM BTS is chose
–The Base Station Identity Code (BSIC) can only be decoded by a
GSM BTS
•Transmission properties
–Transmit on down-link
–Point to multi-point.
7/1/2024 43

35. SCH (Synchronization
CHannel)
The SCH is used to time synchronize the
mobile stations. The data on this channel
carries the TDMA frame number and the
BSIC (Base Station Identity Code).
7/1/2024 44

36. 1.The A-bisinterfaceconnects the Base Transceiver Station
(BTS) with the Base Station Controller (BSC)
2.In the PCM30 configuration, the data at this interface is
transmitted via cable or via microwave transmission at a
bit rate of 2 Mbit/s
3.A cable connection is more resistentto interference, but
a network operator must lease it from a fixed network
operator
4.The microwave links can be operated independently,
and are easily configured by the network operator, but
they are more sensitive to interference
•4 types of information can
be transmitted over the A-
bis interface:
–user information
–synchronization data
–signaling information
–and data for the operation
and maintenance of the
BTS, known as O&M
alarms
7/1/2024 45

37. Broadcast Control Channel
(BCCH)
•BTS broadcast cell information to MH
–LAI ( Location Area Identity), to start
roaming, waiting for calls to arrive, making
calls
–maximum output power allowed in the cell
–information about BCCH carriers for the
neighboring cells
•MH will perform measurement to BTS
•Transmission properties
–Transmit on down-link
–Point to multi-point
7/1/2024 46

38. CBCH (Cell Broadcast
CHannel)
•The CBCH is used for the transmission of
generally accessible information (Short
Message Service messages) in a cell,
which can be polled by the mobile station.
7/1/2024 47

39. 7/1/2024 48

40. •The mobile station has now adjusted its frequency and synchronized its
TDMAs, and has picked out the best cell available•But before it can be
reached by other subscribers, and before itcan initiate calls, a Location
Update and authentication procedure are necessary•Only after that is the
mobile station logged on to the network and has radio coverage•It can now
be reached by other mobile stations, or initiate a call. For this purpose,
Common Control Channels are required•Common Control Channels are
"point-to-multipoint" channels, which exist either only in the uplink, or only in
the downlink•When a subscriber is called, the Paging Channel (PCH) is
broadcast in the downlink by all base stations within a Location Area, so
that the mobile station concerned canreact•To initiate a call, the mobile
station sends out a Random AccessChannel (RACH), which carries its
identification and request, for example for registration, to thenetwork•This
channel only exists in the uplink. In return, the network sends the Access
Grant Channel (AGCH) in the downlink direction, to assign resources to the
mobile station, by granting it a Stand-Alone Dedicated Control Channel,
SDCCH. The PCH, RACH and AGCH form the group ofthe Common
Control Channels belonging also to the Common Channels.
7/1/2024 49

41. COMMON CONTROL CHANNELS CONT..
PCH (Paging CHannel)
The PCH is used in the downlink direction for paging the mobile
stations.----used for paging when Incoming call.
AGCH (Access Grant CHannel)
The AGCH is also used in the downlink direction. A logical channel for
a connection is allocated via the AGCH if the mobile station has
requested such a channel via the RACH.
RACH (Random Access CHannel)
The RACH is used in the uplink direction by the mobile stations for
requesting a channel for a connection. It is an access channel that
uses the slotted Aloha access scheme.
The Following figure gives an overview of the different types of logical
channels.
7/1/2024 50

42. Paging Channel (PCH)
•Used by BTS to page particular MH in the
cell
–MH actively listen to PCH to check contact
info within certain time
–Contact could be incoming call or short
message
•Contact info on PCH include
–IMSI (MH’s identity number), or
–TMSI (temporary number)
•Transmission properties
–Transmit on down-link
–point to point
7/1/2024 51

43. Random Access Channel
(RACH)
•Used by MH to request a dedicated
channel for call setup
–Shared by any MH attempts to access the
network
–Channel request message contains the
reason for the access attempt
•Transmission properties
–Transmit on up-link
–Point to pint.
7/1/2024 52

44. Access Grant Channel (AGCH)
•The network assigns a signaling
channel via AGCH
–A Stand alone Dedicated Control Channel
(SDCCH) is assigned
•Transmission properties
–Transmit on down-link
–Point to point
7/1/2024 53

45. Dedicated Control Channels (DCCH)
•DCCH are used for transferring nonuser
information between the network and the MH
–Messages on DCCH Including
•channel maintenance
•mobility management
•radio resource management
•Four kinds of DCCH
–Stand alone Dedicated Control Channel (SDCCH)
–Cell Broadcast Channel (CBCH)
–Slow Associated Control Channel (SACCH)
–Fast Associated Control Channel (FACCH)
7/1/2024 54

46. Dedicated
control channels
are full-duplex,
point-to-point
channels. They
are used for
signaling
between the BTS
and a certain
mobile station
7/1/2024 55

47. Slow Associated Control
Channel (SACCH)
•Carries control and measurement parameters
along with routine data necessary to maintain a
radio link between the MH and the BTS,which is
always allocated to a TCH or SDCCH.
–On the uplink, MS sends averaged measurements (signal strength and
quality) of current and neighboring BCCH
–On downlink, MS receives information about transmitting power to use and
an instruction with time advance/retard
•Transmission properties
–Bidirectional channel, transmit on both up and down link
–Point to point
In 26 Frame Traffic Multi frame 13
th
frame (frame no. 12)
is used for SACCH.
Note that the SACCH is only used for non-urgent
procedures.
7/1/2024 56

48. FACCH (Fast Associated Control Channel)
•The FACCH is used as a main signaling link for
the transmission of signaling data (for example
handover commands).
•It is also required for every call set-up and
release.
•During the call the FACCH data is transmitted
over the allocated TCH instead of traffic data; this
is marked by a flag called a stealing flag.
•The process of stealing a TCH for FACCH data is
called pre-emption.
-Used for Urgent Signalling; like handover
during a call.Appears on demand.
7/1/2024 57

49. Stand alone Dedicated
Control Channel (SDCCH)
•Transfer signaling information between
the BTS and the MH
•Typically used for location updating prior
to use of a traffic channel
•Transmission properties
–Bidirectional channel, transmit on both up
and down-link
–Point to point.
7/1/2024 58

50. Cell Broadcast Channel
(CBCH)
•To carry Short Message Service Cell
Broadcast (SMSCB)
•Use the same physical channel as
SDCCH
•Transmission properties
–Transmit on down-link
–Point to multi-point
7/1/2024 59

51. SDCCH (Stand-alone
Dedicated Control Channel)
•The SDCCH is a duplex, point-to-point channel which
is used for signaling in higher layers.
•It carries all signaling between the BTS and the mobile
station when no TCH is allocated.
•The SDCCHs are used for service requests (for
example Short Message Service), location updates,
subscriber authentication, ciphering initiation,
equipment validation and assignment to a TCH.
The net SDCCH bit rate is about 0.8 kbit/s.(160 x 5
=800bits)
7/1/2024 60

52. Control Channel
UP
LIN
K
DOWN
LINK
FUNCTION
Broadcast Control Channel
(BCCH)
▼
These parameters include the Location Area Code (LAC), the Mobile
Network Code (MNC), the frequencies of neighboring cells, and access
parameters
Frequency Correction
Channel (FCCH)
▼
This channel contains frequency correction bursts
Synchronization Channel
(SCH)
▼
This channel is used by the MS to learn the Base Station Information
Code (BSIC) as well as the TDMA frame number (FN). This lets the MS
know what TDMA frame they are on within the hyperframe.
Cell Broadcast Channel
(CBCH)
▼
Broadcast such as weather, traffic, sports, stocks, etc. Messages can
be of any nature depending on what service is provided. The CBCH is
ntallocated a slot for itself, it is assigned to an SDCCH
Paging Channel (PCH)
▼
incoming traffic. voice call, SMS, or some other form of traffic.
Random Access Channel
(RACH)
▲
MS to request an initial dedicated channel from the BTS
Access Grant Channel
(AGCH)
▼
This channel is used by a BTS to notify the MS of the assignments of an
initial SDCCH for initial signaling
Standalone Dedicated
Control Channel (SDDCH)
▲▼
This channel is used for signaling and call setup between the MS and
the BTS.
Fast Associated Control
Channel (FACCH)
▲▼
This channel is used for control requirements such as handoffs. There
is no TS and frame allocation dedicated to a FAACH. The FAACH is a
burst-stealing channel, it steals a Timeslot from a Traffic Channel (TCH).
Slow Associated Control
Channel (SACCH)
▲▼
This channel is a continuous stream channel that is used for control
and supervisory signals associated with the traffic channels.
7/1/2024 61

53. 62
Channel Combination Type
Severallogicchannelscombine
togetherinsomewaytoform
somespecifictypesofchannel
totransmituserdataor
signalinginformation.Theyare
calledcombinedchannels.One
combinedchannelcanbe
mappedtoaphysicalchannel.
7/1/2024

54. CHANNEL COMBINATIONS
The channel combinations are:
1. TCH/F + FACCH/F + SACCH/F
2. TCH/H + FACCH/H + SACCH/H
3. (TCH/F + FACCH/F + SACCH/F) or (TCH/H +
FACCH/H + SACCH/H)
4. FCCH + SCH + CCCH + BCCH
5. FCCH + SCH + CCCH + BCCH + SDCCH/4 +
SACCH/4
6. BCCH + CCCH(CCCH = PCH + RACH + AGCH)
7. SDCCH/8 + SACCH/8
The extensions “/4” and “/8” in the above mentioned terms mean, respectively, that
four and eight logical channels are mapped onto one physical channel (timeslot).
7/1/2024 63

55. Control Channel
4. FCCH + SCH + CCCH + BCCH
UPLINK
DOWNLINK
6. CCCH+ BCCH
7/1/2024 64

56. Downlink
The SACCH that is associated with each SDCCH is only
transmitted every other Multiframe. Each SACCH only gets half
of the transmit time as the SDCCH that it is associated with. So,
in one Multiframe, SACCH0 and SACCH1 would be transmitted,
and in the next Multiframe, SACCH2 and SACCH3 would be
transmitted. Uplink
FCCH + SCH + BCCH + CCCH + SDCCH/4(0..3) + SACCH/C4(0..3)
The two sequential Multiframe would look like this:
7/1/2024 65

57. Downlink
Uplink
You will also notice that the downlink and uplink Multiframes
do not align with each other. This is done so that if the BTS sends an
information request to the MS, it does not have to wait an entire Multiframes
to receive the needed information. The uplink is transmitted 15 TDMA frames
behind the downlink. For example, the BTS might send an authentication
request to the MS on SDCCH0 (downlink) which corresponds to TDMA frames
22-25. The MS then has enough time to process the request and reply on
SDCCH0 (uplink) which immediately follows it on TDMA frames 37-40. 7/1/2024 66

58. SDCCH/8(0-7) + SACCH/C8(0 -7)
Once again, the SACCH that is associated with an SDCCH is only transmitted every
other multiframe. Two consecutive Multiframes would look like this:
Downlink
Uplink
SKGOCHHAYAT,SDE(COMP)
7/1/2024 67

59. 68
•Small capacity cell with only 1 TRX
TN0:
FCCH+SCH+CCCH+BCCH+SDCCH/4(0,_,3)+SACCH
/C4(0,_,3);
TN1-7: TCH/F+FACCH/F+SACCH/TF
•The medium-size cell with 4 TRXs
1TN0group: FCCH+SCH+BCCH+CCCH;
2SDCCH/8(0,_,7)+SACCH/C8(0,_,7);
29 TCH/F+FACCH/F+SACCH/TF
Channel Assignment inside cells
7/1/2024

60. 69
•Large-sizecellwith12TRXs
1TN0group:FCCH+SCH+BCCH+CCCH ;
1TN2group,1TN4groupand1TN6group:
BCCH+CCCH;
5SDCCH/8(0,_,7)+SACCH/C8(0,_,7);
87TCH/F+FACCH/F+SACCH/TF
Channel Assignment inside cells
7/1/2024

61. medium-sized cell might be set up with 4 TRX (ARFCNs)
7/1/2024 70

62. Modes Mobile Station ( MS )
•MS Switched Off-can not receive incoming paging messages.
-can not make outgoing call.
-No dedicated channel is associated with it.
•MS Switched On -can receive incoming paging messages.
And in Idle Mode -can make outgoing call.
-No dedicated channel is associated with it.
•MS in Dedicated Mode-MS is in conversation and a
dedicated traffic channel TCH is
associated with it.
7/1/2024 71

63. Technical Terms Used w.r.t. MM (Mobility Management )
•IMSI –International Mobile Subscriber Identity
•IMSISDN –Mobile Subscriber ISDN number
•IMEI –International Mobile Equipment Identity
•TMSI –Temporary Mobile Subscriber Identity
•MSRN –Mobile Subscriber Roaming Number
•LAI –Location Area Identity
•A3 –Authentication Algorithm
•A5 –Ciphering Algorithm
•A8 –Kc Generation Algorithm7/1/2024 72

64. GSM Network Identities
1. MSISDN –Mobile Subscriber ISDN number
Subscriber Related Identities -
CC NDC SN
Max. 15 digits
CC –Country Code.
NDC –Network Destination Code.
SN –Subscriber Number.
Eg 91-98100-12345
7/1/2024 73

65. 2. IMSI –International Mobile Subscriber Identity.
3. TMSI –Temporary Mobile Subscriber Identity
Subscriber Related Identities-
MCC MNC MSIN
Max. 15 digits
MCC –Mobile Country Code.
MNC –Mobile Network Code.
MSIN –Mobile Subscriber Identification Number.
GSM Network Identities
Equipment Related Identities-
1. IMEI –International Mobile Equipment Identity
7/1/2024 74

66. 1. MSRN –Mobile Subscriber Roaming Number
It is a temporary number used for routing the call to MS.
Format :
MSRN = CC + NDC + SN
CC = Country Code
NDC = Network Destination Code
For example for Patna MSC in IMPCS network MSRN looks like 91 98750 00100.
SN = Subscriber Number
Location Related Identities
7/1/2024 75

67. PSTN
GMSC
HLR
MSC
VLR
MSISDN
1
MSISDN
2
IMSI
3
IMSI MSRN4
MSRN
5
MSRN
6
MSRN
7
MSRN
Location Related Identities
7/1/2024 76

68. MSISDN
7/1/2024 77

69. INTERNATIONAL MOBILE
EQUIPMENT IDENTITY (IMEI)
IMEI = TAC + FAC + SNR + spare
TAC = Type Approval Code, determined by a central GSM
body.
FAC = Final Assembly Code, identifies the manufacturer.
SNR = Serial Number, an individual serial number of six digits
uniquely identifies all equipment within each TAC and FAC.
Spare = A spare bit for future use. When transmitted by the MS
this digit should always be zero.
IMEI has the total length of 15 digits.
7/1/2024 78

70. MSRN
MSRN = CC + NDC + SN
CC = Country Code
NDC = National Destination Code
SN = Subscriber Number
NOTE: In this case, SN should not be interpreted as the actual subscriber
identity. It represents the address to the serving MSC.
7/1/2024 79

71. MS Initialization / Network Attachment
1. MS Powered on.
-FCCH present in time slot T0 & has a fixed pattern of 142 0’s.
-MS scans entire 124 carriers and monitors RF levels.
-several readings are taken to get accurate estimate
the channel power.
-MS then searches for Frequency Correction burst (FCCH) on the channel with
strongest RF level.
2. Frequency Synchronization
-After tuning to FCCH MS synchronizes in time with SCH .
7/1/2024 80

72. -SCH occurs in next frame in same time slot as FCCH.
-The occurrence of SCH is eight burst period ( BP’s ) later than FCCH.
3. Synchronization in Time
-After successful synchronization the MS will read the TDMA frame number and Base
Station Identity Code BSIC .
-SCH contains precise timing information and current frame number to which MS is
synchronized.
-BSIC consists of -PLMN colour code ( 3 bits )
-BS colour code ( 3 bits ).
MS Initialization / Network Attachment
7/1/2024 81

73. •MS decodes information on BCCH and gets Location Area Identity ( LAI ).
•If the information stored on SIM does not match with the information MS thinks that it
has moved to new location and sends LA update request to BSS.
•MS location is determined by cell identification of strongest BCCH signal received by
MS.
•MS regularly measures the received signal strength of BCCH at least once every 6 sec
( Superframe Duration).
•MS stores at least six strongest BCCH and their cell identification in SIM.
MS Initialization / Network Attachment
7/1/2024 82

74. Network Attachment Process
MS
. Cell should be of selected PLMN.
Switch -on
Measure strongest
BCCH channels
PLMN Selection
Cell Selection
Location Update
Idle-Mode
. Cell should not be “ barred “.
. Radio path loss between BTS and
the MS must be below a threshold set
by the operator.
( Register its presence
to the network. )
Limited Service Mode
7/1/2024 83

75. MS BTS MSCBSC
RIL3 -CM
LAPD m
Layer 1
RIL3 -MM
RIL3 -RR
Layer 1
LAPD m LAPD
Um A bis A link BCDEFG
MTP
SCCP
BSSMAP
DTAP
MM
TCAP
DTAP
CM
U
PSCCP
M
A
P
Layer 1Layer 1
GSM Signaling Protocols Overview
LAPD MTP
I
S
SCCP
BSSMAP
BTSM
RIL 3-
RR
BTSM
RR
7/1/2024 84

76. What is Mobility Management?
•Subscriber Data management at MSC/VLR
•Subscriber data from HLR are retrieved by
MM at the time of first location up-dating of a
subscriber.
•Dynamic data changes by subscriber are
also managed by MM at MSC/VLR.
•Operator initiated data changes for a
subscriber are also managed by MM.
7/1/2024 85

77. Security in GSM
•Security services
–access control/authentication
•user SIM (Subscriber Identity Module): secret PIN (personal
identification number)
•SIM network: challenge response method
–confidentiality
•voice and signaling encrypted on the wireless link (after successful
authentication)
–anonymity
•temporary identity TMSI
(Temporary Mobile Subscriber Identity)
•newly assigned at each new location update (LUP)
•encrypted transmission
•3 algorithms specified in GSM
–A3 for authentication (“secret”, open interface)
–A5 for encryption (standardized)
–A8 for key generation (“secret”, open interface)
“secret”:
•A3 and A8
available via the
Internet
•network providers
can use stronger
mechanisms
7/1/2024 86

78. GSM -authentication
A3
RANDK
i
128 bit128 bit
SRES* 32 bit
A3
RANDK
i
128 bit128 bit
SRES 32 bit
SRES* =? SRES SRES
RAND
SRES
32 bit
mobile network
SIM
AC
MSC
SIM
K
i: individual subscriber authentication keySRES: signed response
7/1/2024 87

79. GSM -key generation and encryption
A8
RANDK
i
128 bit128 bit
K
c
64 bit
A8
RANDK
i
128 bit128 bit
SRES
RAND
encrypted
data
mobile network (BTS) MS with SIM
AC
BTS
SIM
A5
K
c
64 bit
A5
MS
data data
cipher
key
7/1/2024 88

80. Services Provided to Upper Layers
•MM handover procedures provide smooth
transition from one radio link to other.
•MM sub-layer provides basic services to
upper layer CM sub-layer.
Subscriber Authentication and Confidentiality
management
•MM procedures ensure authenticity of a
subscriber.
•MM procedures ensure data confidentiality at
radio interface.
7/1/2024 89

81. Subscriber Data at MSC/VLR
•MS status data:
•Data related to identification and numbering ( IMSI,
MSISDN,LMSI and TMSI ).
•Data related to MS type.
•Hand-over data.
•Authentication and Ciphering Data.
•Data related to supplementary services.
7/1/2024 90

82. MM Procedures
•TMSI Reallocation Procedure.
•IMSI Detach Procedure.
•Ciphering Procedure.
•Abort Procedure.
MM Common Procedures :
•Authentication Procedure.
•Identification Procedure.
MM Specific Procedures :
•Location Updating Procedure.
•IMSI Attach Procedure.
7/1/2024 91

83. •During the lifetime of a MM specific procedure if a MM
connection establishment is requested by a CM entity,
the request will either be rejected or delayed until the
running of MM specific procedure is terminated.
•Any MM common procedure Procedure ( except
IMSI detach) may be initiated during MM specific
procedure.
•A MM specific procedurecan only be started if no
other MM specific procedure is running.
•The MS side should wait for release of RR connection
used for a MM specific procedure before a new MM
specific procedure or MM connection establishment is
started.
MM Procedures
7/1/2024 92

84. •Location area consist of one or more than one cell which may be served by one or
more BSC s.
•All the cells in a Location area are served by single VLR.
2. Location Area Identity (LAI ) -
•Each location area in a GSM PLMN is identified by a Location Area Identity ( LAI ).
Location Related Identities
7/1/2024 93

85. HLR
SS 7
BSC
MSC 2
VLR 1
VLR 2
BSC
BSC
BSC
LA 1
LA 2
LA 3
BTS
BTS
BTS
BTS
BTS
BTS
Location Area
MSC 1
7/1/2024 94

86. 95SDE RTTC BHUBANESWAR7/1/2024 95

87. MSC Hand over
7/1/2024 96

88. TAX
CA
TAX
ND
GMSC
MSC
GMSC
MSC/VLR
ND Mobile moves to CA and Powers on MS
CA
ND
HLR
HLR
ND
MS
9810098111
CA
ND
( Update Location/
Authentication )
De register
Mobile to
Old VLR
ACK from
old
MSC/VLR
VLR
LOCATION UPDATION
VLR
VPLMN
HPLMN
Location Update
( TMSI, LAI )
LU Accept
( New TMSI)
Update
Location
Update
Location
LUAccept
(Subs data)
LUAccept
Update
Location
LUAccept
LUAccept
New VLR records
subscriber data.
•Listens
BCCH/FCCH
7/1/2024 97

89. LOCATION UPDATE SCENARIO -I
MS BSS
Old
MSC/
VLR
HLR
/AUC
New
MSC/
VLR
1
2
Channel Request
RACH
AGCH
SDCCH Assignment
Location Update Request ( TMSI , LAI 0)
SDCCH
3
Request IMSI
Send IMSI
4
Request For Service
( TMSI )
7/1/2024 98

90. MS BSS
Old
MSC/
VLR
HLR/
AUC
New
MSC/
VLR
5
6
Get Authentication Parameters
Authentication Response ( SRES )
SDCCH
7
( IMSI )
( RAND,Kc,SRES )
Authentication Parameters
SDCCH
Authenticate MS ( RAND )
Cipher Radio Channel
( Kc )
Cipher Up Link Channel
SDCCH
Authentication and Ciphering
LOCATION UPDATE SCENARIO -II
7/1/2024 99

91. 8
9
BSS Ciphers Down link Channel .
SDCCH
Ciphering Complete
MS BSS
Old
MSC/
VLR
HLR/
AUC
New
MSC/
VLR
LOCATION UPDATE SCENARIO -III
Authentication and Ciphering
Up Link Ciphered
7/1/2024 100

92. LOCATION UPDATE SCENARIO -IV
10
Update Location
Update HLR/VLR & TMSI Reallocation
De Register Mobile
Mobile De-registered11
MS BSS
Old
MSC/
VLR
HLR/
AUC
New
MSC/
VLR
Location Updated
Location Updated Accept TMSI
SDCCH
12
13
7/1/2024 101

93. SDCCH
Location Updated Complete
Clear Signaling Connection
Clear Complete
Release Radio
Signaling Channel
SDCCH
14
16
15
MS BSS
Old
MSC/
VLR
HLR/
AUC
New
MSC/
VLR
LOCATION UPDATE SCENARIO -V
Update HLR/VLR & TMSI Reallocation
7/1/2024 102

94. Connection Management enables different CM sub-layer entities to
communicate with their pier entity using different MM connections.
Connection Management
What is Connection Management ?
Different CM sub-layer entities use different MM connections.
Different MM connections are identified by Protocol Discriminator PD and,
additionally by Transaction Identifier TI.
7/1/2024 103

95. MS BTS MSCBSC
RIL3 -CM
LAPD m
Layer 1
RIL3 -MM
RIL3 -RR
Layer 1
LAPD m LAPD
Um A bis A link BCDEFG
MTP
SCCP
BSSMAP
DTAP
MM
TCAP
DTAP
CM
U
PSCCP
M
A
P
Layer 1Layer 1
GSM Signaling Protocols Overview
LAPD MTP
I
S
SCCP
BSSMAP
BTSM
RIL 3-
RR
BTSM
RR
7/1/2024 104

96. MS
RIL3 -CM
LAPD m
Layer 1
RIL3 -RR
CC SMS SS
RIL3 -MM
CC = Call Connection
SMS = Short Message Service
SS = Supplementary Services
•There are different entities of CM sub-
layer.
•For each entity different MM connection
will be established over same RR
connection.
Connection Management
7/1/2024 105

97. •Several MM connections may be active at same time.
•All simultaneous MM connections from a given MS use the same RR
connection.
•An MM connection requires an RR connection.
•Mobility Management ( MM) sub-layer provides connection management services
to different entities of upper Connection Management ( CM ) sub-layer.
•MM connection is established and released on request from a CM entity.
Connection Management
7/1/2024 106

98. Phases Of Connection Management
•MM connection establishment initiated by MS.
MM Connection Establishment -
•MM connection establishment initiated by n/w.
MM Connection Information Transfer Phase -
•Sending CM messages.
•Receiving CM messages.
MM Connection Release -
•Release associated RR connection.
7/1/2024 107

99. TIME
MS N/W
CM Service Request
CM Service Reject
CM CONNECTION ESTABLISHMENT INITIATED BY MS
CM Service Accept
1. IMSI unknown in VLR
2. Illegal ME
3. Network Failure
4. Congestion
5. Service Option not supported.
6. Requested service option not subscribed.
7. Service option temporarily out of order.
CM Service Reject Causes :
7/1/2024 108

100. MS N/W
CM
MM
RR
MM
CM
RR
CCSMSSS
CCSMSSS
CM connection establishment initiated by the Network
( In case no RR connection Exists )
CM Service Reject
CM Service Reject
7/1/2024 109

101. Zone Codes
•Zone codes provide mechanism for LAC based subscription.
•A set of LACs form a Zone Code.
•Subscribers can be given access to a set of Zone codes.
•If a subscriber updates location in a Zone Code other than his subscribed ones,
it is equivalent to sending IMSI Detach.
•For the above event MM will mark Regional Barring flag for the subscriber.
Example:
•In a case where MSC covers several cities Zone Codes may be used to restrict
the subscribers of one city from using n/w services in other cities.( Regional
Service )
7/1/2024 110

102. Mobile To Land Call Set-up Scenario
Phases of Mobile To Land Call
•SETUP PHASE
( Mobile Originated Call-MO Call )
•RINGING PHASE
•CONVERSATION PHASE
•RELEASE PHASE
7/1/2024 111

103. -REQUEST FOR SERVICE ( CHANNEL ) BY MS
-CM SERVICE REQUEST
-AUTHENTICATION
-CIPHERING
-SETUP MESSAGE
-EQUIPMENT VALIDATION ( EIR CHECK )
-VALIDATION AT VLR
-ASSIGNMENT
Mobile To Land Call Set-up Scenario
•SETUP PHASE
7/1/2024 112

104. MS
MSC/
VLR
BSS
1
2
3
Channel Request
Request For Service
MOBILE TO LAND CALL -I
RACH
SDCCH Assignment
AGCH
CM Service Accept
SDCCH
4
CM Service Request
7/1/2024 113

105. Mobile To Land Call Set-up Scenario
•CM SERVICE REQUEST
-The Call Control (CC) entity of MS initiates the establishment of
CC connection by requesting MM sub-layer of the mobile to
establish MM sub-layer connection.
-Upon establishment of MM connection CM SERVICE ACCEPT
message is received from n/w.
•SETUP MESSAGE
-CC entity sends a setup message to its peer entity.
7/1/2024 114

106. MS
MSC/
VLR
BSS
5
6
Call Setup Request
7
SDCCH
SDCCH
Call Setup
MOBILE TO LAND CALL -II
Assign Trunk and radio
Assign TCH
Radio Assignment Complete
Call Proceeding
SDCCH
SDCCH
Trunk and Radio Assignment Complete
7/1/2024 115

107. Mobile To Land Call Set-up Scenario
MSC/VLR
Call Setup message
Is the requested basic service
provisioned for the subscriber ?
Yes
No
Release Complete
message to MS
Preliminary Digit Analysis
Is the number of digits less than the
minimum expected?
Yes
Release Complete
message to MS
No
1. Check of ODB( BAOC/BOIC/ BOIC Ex HC )
2. Subscriber call barring checks ( BAOC/BOIC etc. )
ASSIGNM ENT
7/1/2024 116

108. Mobile To Land Call Set-up Scenario
•ASSIGNMENT
-A BSSMAP message ‘Assignment Command ’ is sent by MSC to
BSS.
-The message contains a free CIC on A-Interface for terrestrial
channel allocated by MSC.
-A free TCH is allocated by the BSS and MS is informed to attach
to this TCH.
-On receiving a response from BSS MSC switches the speech
path towards the calling MS.
Note : Mobile has not connected user
connection as yet .
7/1/2024 117

109. MS
MSC/
VLR
BSS
8
9
10
11
Call Setup
MOBILE TO LAND CALL -III
GMSC
PSTNHLR
Network Setup ( Dialed Digits )
FACCH
Network Alerting
Connect
Connect Acknowledge
FACCH
Alerting
Connect
FACCH
Start Billing
7/1/2024 118

110. MS
MSC/
VLR
BSS
12
13
14
15
Call Release
MOBILE TO LAND CALL -IV
GMSC
PSTNHLR
Disconnect
FACCH
Network Release
Release Complete
Release Complete
FACCH
Release
FACCH
Clear Command
Channel Release
7/1/2024 119

111. Land To Mobile Call Set-up Scenario
Phases of Land To Mobile Call
•Routing Analysis
•Paging
•Authentication
•Call-Setup
•Ciphering
•Call Release
( Mobile Terminating -MT Call )
7/1/2024 120

112. Architecture For Mobile Terminated Call
GMSC-B
BSS-B
MS
VLR-B
MSC-B
VISITING PLMN
A-Interface
Air Interface
HLR-B
IAM ( ISUP )
7/1/2024 121

113. LAND TO MOBILE CALL -I
MSC/VLR GMSC PSTN
HLR
1
2
Incoming Call
3
4
( MSISDN )Get Route
( MSISDN )
Get Route
( IMSI )
Routing Information
( MSRN )
Routing Information
( MSRN )
( MSRN )
Incoming Call
5
Routing Analysis
7/1/2024 122

114. MS
MSC
BSS
6
7
8
Perform Page
(TMSI)
Page
PCH
Channel Request
( RACH )
SDCCH
Paging Response
( TMSI, LAI )9
Access Granted
( AGCH )
Page Response
Paging
LAND TO MOBILE CALL -II
7/1/2024 123

115. MS
MSCBSS
10
11
12
Call Set Up
Call Set Up Confirm
SDCCH
Radio Channel Assigned
Assign Trunk &
Radio Channel
Trunk and Radio Channel
Assignment Complete
SDCCH
SDCCH
Assign Radio Channel
SDCCH
Call Set-up
LAND TO MOBILE CALL -III
7/1/2024 124

116. MS
MSC/
VLR
BSS
13
14
15
Connect ( off-hook )
FACCH
Call Setup
LAND TO MOBILE CALL -IV
GMSC
PSTNHLR
FACCH
Network Alerting
Mobile Alerting
Connect
Connect Acknowledge
Start Billing
7/1/2024 125

117. MS
MSC/
VLR
BSS
16
17
18
Disconnect
Release
19
FACCH
FACCH
Call Release
LAND TO MOBILE CALL -V
GMSC
PSTNHLR
Network Release
FACCH
Release Complete
Release Complete
Clear Command
Clear Channel
Clear Complete
FACCH
Stop Billing
7/1/2024 126

118. Mobile To Mobile Call Set-up Scenario
Phases of Mobile To Mobile Call
•Request for service.
•Authentication
•Call-Setup
•Ciphering
•CallRelease
•RoutingAnalysis
•Paging
•Authentication
•Ciphering
•Call-Setup
Mobile Originating
Mobile Terminating
•Call-Release
7/1/2024 127

119. TAX
ND
GMSC
MSC/VLR
1. ND PSTN Subscriber Dials ND Mobile Subscriber in ND.
ND
LE
TANDEM
HLR
ND
MS
9810098100
ND
SRI
PRN to
MSC/VLR
ND
ACK from
MSC/VLR
ND
(MSRN)
MSRN
MSISDN
MSISDN
MSISDN
Page(TMSI)
7/1/2024 128

120. TAX
ND
TAX
CA
GMSC
MSC/VLR
GMSC
MSC/VLR
2. ND PSTN Subscriber Dials CA Mobile Subscriber in CA.
ND
CA
LE
HLR
HLR
CA
MS
9881098300
ND
CA
SRI
PRN to
MSC/VLR
CA
ACK from
MSC/VLR
CA
(MSRN)
MSRN
MSISDN
Page(TMSI)
TANDEM
MSISDN
MSISDN
MSISDN
7/1/2024 129

121. TAX
CA
TAX
ND
GMSC
MSC/VLR
GMSC
MSC/VLR
3. ND PSTN Subscriber Dials ND Mobile Subscriber in CA.
CA
ND
LE
TANDEM
HLR
HLR
ND
MS
9810098200CA
ND
SRI
PRN to
MSC/VLR
CA
ACK from
MSC/VLR
CA
(MSRN)
MSRN
MSRN
MSRN
MSRN
MSISDN
MSISDN
MSISDN
Page(TMSI)
7/1/2024 130

122. TAX
CA
TAX
ND
GMSC
MSC/VLR
GMSC
MSC/VLR
4. CA PSTN Subscriber Dials ND Mobile Subscriber in CA.
CA
ND
LE
HLR
HLR
ND
MS
9810098400
CA
ND
SRI
PRN to
MSC/VLR
CA
ACK from
MSC/VLR
CA
(MSRN)
MSRN
MSISDN
Page(TMSI)
TANDEM
MSISDN
MSISDN
MSISDN
MSRN
MSRN
MSRN
7/1/2024 131

123. TAX
CA
TAX
ND
GMSC
MSC/VLR
GMSC
MSC/VLR
4.A CA PSTN Subscriber Dials ND Mobile Subscriber in CA
CA
ND
LE
HLR
HLR
ND
MS
9810098410
CA
ND
PRN to
MSC/VLR
CA
ACK from
MSC/VLR
CA
(MSRN)
MSRN
Page(TMSI)
TANDEM
MSISDN
MSISDN
Roaming agreement with Optimal Routing
SRI
7/1/2024 132

124. THANKS!
7/1/2024 133