vYV lsaVj
2
•Understand the evolution and history of GSM.
Learn about GSM network architecture.
Study GSM interfaces and protocols.
Explore GSM logical and physical channels.
Understand GSM services and applications.
Overview of GSM security features.
Content
vYV lsaVj
3
•GSM stands for Global System for Mobile
Communications.
Developed by ETSI in the 1980s.
Standard for 2G digital cellular networks.
Widely used in Europe, Asia, and globally.
Offers voice, SMS, and limited data
services.
Introduction to GSM
4
5
Interfaces in GSM
•Um: MS ↔ BTS (Air interface)
•Abis: BTS ↔ BSC
•A: BSC ↔ MSC
•Others: MAP, B, C, D, E interfaces
9
Broadcast Control Channels
used to broadcast synchronization and general network
information to all the MS within a cell.
•It has three types:
1. FREQUENCY
CORRECTION
CHANNEL (FCCH):
•Used for the frequency
correction /
synchronization of a MS
oscillator frequency with
Base station Frequency.
•Sends Frequency
Bursts every 10
seconds.
2. SYNCHRONISATION
CHANNEL (SCH):
•Syncs the MS internal
clock with the BTS clock.
•Sends Synchronization
Bursts every 10 frames.
3. BROADCAST
CONTROL CHANNEL
(BCH):
•Point-to-multipoint
(BTS → MS) channel.
•Broadcasts:
•Cell identity
•Network identity
•Channel availability
•Congestion info
•Parameters used by
MS to access BTS
10
Common Control Channels
to carry paging and access requests between BTS and all MS.
•It has three types:
1. PCH – Paging Channel
(BTS → MS)
•Broadcasts paging signals
from BTS to all MS during
Mobile Terminated Call
(MTC).
•Notifies a particular MS of
incoming call and transmits the
IMSI of the target subscriber.
•Also used to send broadcast
text messages to all MSs.
2. RACH – Random
Access Ch (MS →
BTS)
•Used by MS to send
access request in Mobile
Originated Call (MOC).
• Updates MS location in
VLR.
3. AGCH – Access
Granted Channel (BTS
→ MS)
•Sends instructions from
BTS to MS to allocate a
specific physical channel
(Time slot or ARFCN).
GSM Specifications
GSM 900
Mobile to BS(UP-LINK) -890 to 915 MHz
BS to Mobile (DOWN -LINK) - 935 to 960 MHz
Bandwidth - 25 MHz
GSM 1800 ( DCS ) :
Mobile to Cell(UP-LINK) -1710 to 1785 MHz
Cell to Mobile (DOWN -LINK) - 1805 to 1880 MHz
Bandwidth - 75 MHz
RF Spectrum :
11
GSM - MULTIPLE ACCESS
•GSM uses both FDMA & TDMA
Freq
Mhz.
890.2
1
890.4
2
890.6
3
890.8
4
891.0
5 6
914.8
124
• FDMA Access along Frequency axis
• Each RF carrier 200khz apart
• Total 124 RF Channels available.
One or more carrier assigned to each base station
……...
13
• Absolute Radio Freq Carrier Number (ARFCN) 1 and 124 not used until
it is co-ordinated with Non -GSM operators in adjacent freq. bands.
• Thus for practical purposes only 122 RF Carriers are available.
F up-link (n) = 890.2 +0.2* ( n-1 ) MHz
F down-link (n) = 935.2 +0.2* ( n-1 ) MHz
• Frequency for any ARFCN ( n) can be calculated from :
Here 124.
GSM - MULTIPLE ACCESS
14
GSM FDMA
25 MHz 25 MHz
Mobile to Base
0 1 2
890.2 890.4890.6
(MHz)
Base to Mobile
0 1 2
935.2 935.4 935.6
200 kHz
45MHz
Channel layout and frequency bands of operation
890 935 960915
200 kHz
15
Digital Voice Transmission
- In GSM speech coding a block of 20 ms is encoded in one set
of 260 bits.
- This calculates as 50X 260 = 13 kbps. Thus GSM speech
coder produces a bit rate of 13 kbps per subscriber.
- This provides speech quality which is acceptable for mobile
telephony and comparable with wire-line PSTN phones.
Speech Coding
16
9600522
01100011000111110011100
Speech Code
20 ms
Speech Signal
Speech Coding
Parameters like tone, length of tone, pitch are transmitted
Sampling=50 times/sec of 260 bits each
overall bit rate= 50x260x8 subs=104kbps
17
Channel Coding
9805016
Block
coder
50 Very important bits
132 Important bits
78 Not so important bits
1:2
Convolutional
Coder
456
4 Tail bits
53 bits 378 bits
3 parity bits
260 bits
Detection & correction of errors
18
GSM Digital Voice Transmission
- It uses 260 bits from speech coding as input and outputs
456 encoded bits.
- In one burst one block of 57 bits from one sample and
another block from another sample are sent together.
- These 456 bits for every 20 ms of speech are interleaved forming eight blocks of 57 bits each.
Channel Coding
Interleaving
19
GSM Digital Voice Transmission
To counteract the problems encountered in radio path:
Burst Formatting
- Additional bits as training sequence added to basic speech/data.
- Total of 136 bits added, bringing overall total to 592 bits.
- Each TS of TDMA frame is 0.577 ms long and during this time 156.25 bits are
transmitted.
- One burst contains only 148 bits. Rest of the space, 8.25 bits time, is empty and is
called Guard Period ( GP ).
- GP enables MS/BTS to “ramp up” and “ ramp down”.
20
8.253571261573
1 2 3 4 5 6 7 8
1 2 3 4 5 6 7 8 1 2 3 4 5 6 7 8
DD DD DDDD DD DD DDDD
456 bits
Sample 1
456 bits
Sample 2
Normal Burst
Stream of Time
Slots
Interleaving & Burst Formatting
1
st
Sample of 20 ms
speech
2
nd
Sample of 20 ms
speech
21
GSM: Speech to Radio waves
Speech Coding
Channel Coding
Interleaving
Burst formatting
Ciphering
Burst formatting
Deciphering
Analog
Modulation
200kHz BW
Speech Decoding
Analog
200kHz BW
Demodulation
De-interleaving
Channel
Decoding
23
vYV lsaVjEqualization, Diversity and Channel Coding
EQUALIZATION: Compensate intersymbol interference (ISI)
created by multipath within the time dispersive channels.
DIVERSITY : It is used to compensate for fading channel
impairment and is usually implemented by using two or
more receiving antennas,
CHANNEL CODING : it improves the small scale link performance by
adding redundant data bits in the transmitted message so that if an
instantaneous fade occur in the channel the data may still be
recovered at the receiver.(ex: Block codes, Convolution code and
turbo codes)
–Block Codes : Block codes are forward error correction (FEC) codes that enable a limited numbers of error to
be detected without retransmission.( Channel Coding)
–INTERLEAVER: Function of interleaver to spread these bit out in time so that if there is a deep fade or noise
bursts the important bits from a block of source data do not corrupted at the same time.( Time Diversity)
24
FDMA/TDMA Scheme
BP1
BP2
BP3
BP4
BP5
BP6
BP7
BP8
BP1
BP2
TIME
890.0
890.2
890.4
890.6
890.8
891.0
891.2
915.8
FREQ
MHz
BURST
F
R
A
M
E
25
CM
CCSMSSS
Normal Burst
3
T
57
Encrypted
1
S
26
Training
1
S
57
Encrypted
3
T
8.25
GP
CM
CCSMSSS
3
T
142
Fixed Bits
3
T
8.25
GP
FCCH Burst
26
GSM-- TDMA STRUCTURE
• TDMA 8 Time Slots / RF Channel
• Time slot duration 0.577m sec or 15 / 26 m sec
• Frame 8 Burst Periods ( Time Slots)
= 8 15/26 = 4.615 m sec
• Multi Frame Traffic 26 4.615 = 120 msec
Control 51 4.615 = 235.365 m sec
• Super Frame 51 Traffic Multi frames
26 Control Multi frames
• Hyper Frame 2048 Super Frames = 3 28 52.76
hr min sec
28
GSM Radio Interface - CYCLES
20470
Hyperframe = 2048 Superframes
3 Hours 28 Minutes 53 Seconds and 760 milliseconds
500
250
Superframe = 26× 51
multiframes
6.12 Seconds
51 Multiframe
Approx 235 mS
26 Multiframe
120 mS
2524210 50494810
76543210
TDMA frame
4.615 mS
29
f1, f2, f3, f4, f5, f6,
f7,f8
There is the 26-
multiframe, which contains
26 TDMA frames with a
duration of 120 ms and
which carries only traffic
channels and the
associated control
channels.
The other variant is the
51-multiframe, which
contains 51 TDMA
frames with a duration
of 235.8 ms and which
carries signaling data
exclusively.
Each superframe consists of twenty-six 51-multiframes or fifty-one 26-multiframes.
Organisation of Speech & Data
242523222120191817161514131211109876543210
BP 7BP 6BP 5BP 4BP 3BP 2BP 1BP 0
8.253571261573
Frames 0-11 : TCH
Frames 12 :
SACCH
Frames 13-24 :
TCH
Frames 25 :
Unused
26 – frame
multiframe
Duration: 120 ms
TDMA frame
Duration: 60/13 ms
=4.615 ms
TailTail
bitsbits
Data bitsData bitsStealingStealing
bitbit
Training Training
sequencesequence
StealingStealing
bitbit
Data bitsData bits TailTail
bitsbits
GuardGuard
bitsbits
Normal burstNormal burst
Duration 15/26 Duration 15/26
msms
30
GSM
LOGICAL CHANNELS
• USER INFORMATION( TRAFFIC)
• SIGNALLING INFORMATION (CONTROL)
31
GSM
CONTOL CHHANELS OVER LOGICAL CHANNELS
THREE TYPES OF CONTROL CHANNELS
• Intended to carry signaling and synchronization
• Broadcast control channel BCCH
• Common control channel CCCH
• Dedicated control channel DCCH
32
Logical Channels
Logical
Channels
Traffic
Channels
Control
Channels
TCH/F
TCH/H
Common
Control
Channels
Dedicated
Control
Channels
Broadcast
Channels
SDCCH
(Stand alone dedicated Ch)
SACCH
( Slow Associated Ch)
FACCH
( Fast associated Ch)
RACH
(Random access CH)
PCH
(Paging CH)
AGCH
(Access Grant CH)
FCCH
(FREQ CORREC CHL)
SCH
(SYNC CHL)
BCCH
(BROADCAST
CTRLCHL)
33
34
Function GSM Logical Channels LTE Logical Channels
Broadcast Info FCCH, SCH, BCCH
BCH (Broadcast
Channel), PCH (Paging
Channel)
Random Access
RACH (Random Access
Channel)
PRACH (Physical
Random Access
Channel)
Paging PCH (Paging Channel) PCH (Paging Channel)
Access Grant
AGCH (Access Grant
Channel)
- (Part of RAR via PDCCH
in LTE)
Call Setup Signaling SDCCH, SACCH, FACCH
DCCH (Dedicated Control
Channel)
Traffic (Voice/Data)
TCH/F, TCH/H (Full and
Half Rate Traffic
Channels)
DTCH (Dedicated Traffic
Channel), MTCH
(Multicast Traffic
Channel)
Physical Mapping
Logical mapped to
Physical and Logical
Channels
Logical → Transport
Channels → Physical
Channels
Architecture Level
Channels directly map to
physical layer (simpler
structure)
Layered (Logical →
Transport → Physical);
allows flexibility and higher
efficiency
GSM vs. LTE Logical Channels Comparison
GSM
THREE TYPES OF CONTROL CHANNELS
Dedicated control channel DCCH
P - P For Registration SDCCH
,authentication SACCH
& Handover FACCH
Broadcast control channel BCCH
P- MP For Freq Correction FCCH
For Syncronisation SCH
BCCH
Common control channel CCCH
For ACCESS Management PCH
RACH
AGCH
35
Logical Channels Configuration
Combined Time Slot
• BCCH & 9 Blocks of CCCH.
Non Combined Time Slot
• BCCH, SDCCH/4 & 3 Blocks of CCCH.
SDCCH not on TS0
• SDCCH/8.
36
Multiplexing of BCHs and CCCHs onTS0
9702232
0 4 9 14 19
F S B B B B C
0
C
0
C
0
C
0
F S C
1 C
1
C
1
C
1
C
2
C
2
C
2
C
2
20 24 29 34 39
F S C
3
C
3
C
3
C
3
C
4
C
4
C
4
C
4
F S C
5
C
5
C
5
C
5
C
6
C
6
C
6
C
6
40 44 49
F S C
7
C
7
C
7
C
7
C
8
C
8
C
8
C
8
I
Non-Combined Time Slot 0
Multiplexing of BCHs and SDCCH onTS0
0 5 9 15 19
F S B B B B C0 C0 C0 C0 F S
C1 C1 C1 C1
C2 C2 C2 C2
20 25 31 35 39
F S
D0 1
1
1 F S D2 D2 D2D2 D3 D3 D3 D30
00 1
40 45 49
F S A0 A0 A0 A0 A2 A2 A2 A2 I
DDDDDDD
Combined Time Slot 0
FCCH ,SCH,BCCH,PCH/AGCH,IDLE
Multiplexing of SDCCHs and SACCHs on TS2
9702233
0 4 9 14 19
D
5 D
5 D
5 D
5 D
6
D
6
D
6 D
6
D
7 D
7 D
7 D
7 A
0 A
0 A
0 A
0 A
1 A
1
A
1 A
1
20 24 29 34 39
40 44 49
A
2
A
2
A
2
A
2
A
3
A
3
A
3
A
3
I I I
D
0 D
0 D
0 D
0 D
1 D
1 D
1 D
1 D
2 D
2 D
2 D
2 D
3 D
3 D
3 D
3 D
4 D
4 D
4 D
4
OPERATIONAL CONCEPTS
• Subscribers are not allocated dedicated channels
• TCH Allocated to users only when needed
• Hence IDLE MODE & DEDICATED MODE
• DEDICATED MODE
-- When a full Bi -directional P to P CHL
has been allocated during an established call
• IDLE MODE MODE
-- When MS is powered on (active)
without being in dedicated mode
40
OPERATIONAL CONCEPTS
IDLE MODE
-- When MS is powered on (active)
without being in dedicated mode
• MS stays continuously in touch with BS
• Listens to transmissions from BS to intercept
Paging Messages ( for incoming calls)
• Monitors Radio Environment in order to evaluate Chl
Quality & choose the most suitable BS
• Listens to BS to avail short message broadcast service
41
OPERATIONAL CONCEPTS
ACCESS PROCEDURE
-- Access to system
( switch over from IDLE to DEDICATED Mode)
• MS indicates to BS that it needs a connection
• BS accepts the request & indicates which
traffic CHL it may use
• For above purpose specific transmission is done over
“ Common Channels”
42
OPERATIONAL CONCEPTS
MOBILE O/G Call
• MS sends access over RACH
• System allocates SDCCH through AGCH
• Lastly TCH is assigned through SDCCH when a
conversation can start
• Set up information exchanged over SDCCH
( Authentication , Measurement Reports, Power Control)
43
OPERATIONAL CONCEPTS
MOBILE I/C Call
• Paging to MS through PCH since MS is monitoring PAGCH
• MS responds by sending a page response over RACH
• Set up information exchanged over SDCCH
( Authentication, Call set-up messages , Power Control)
• As a result system allocates SDCCH to MS over AGCH
• Lastly TCH is allocated to mobile over SDCCH .
Mobile starts conversation.
44
Other Salient Features Of GSM RF INTERFACE:
GSM – RF Interface
- Control of Transmitted Power.
- Timing Advance.
- Discontinuous Transmission.
- Diversity.
- Frequency Hopping.
45
Discontinuous Transmission (DTX)
•Speech activity only 40% of time.
•Needs Voice activity detection.
•Determination of voice threshold vis-à-vis noise.
•Annoying clicks/inefficient DTX.
•Generation of Comfort Noise at receiver to avoid
the feeling of the set being dead.
46
Timing Alignment
- Large distance between BTS and MS causes the problem.
- Each MS on call is allocated a timeslot on TDMA
frame.
- The problem occurs when the information transmitted by MS
does not reach BTS on allocated timeslot.
01234567
BT
S
TDMA Frame
A –on TS3
B –on TS2
TS3
TS2
47
Timing Advance
( To counteract problem of Time Alignment )
-- MS instructed to do its transmission certain bit-times
earlier or later
– to reach its timeslot at BTS in right time.
-- In GSM systems maximum 63 bit-times can be used.
-- This limits the GSM cell size to 35 Km radius.
01234567 01234567
Time
Start
Sending
48
Antenna Diversity
- Mounting two receiver antenna physically separated a
distance.
- At 900 MHz with antenna spacing of 5-6 m we get 3 db gain.
Space Diversity
- Probability of both of them being affected by a deep fading dip
at same time is low.
No Diversity
Antenna Diversity
Tx Rx Rx (A)Rx ( B)
Tx
Polarization Diversity -
- Dual polarized antenna – vertical and horizontal arrays.
49
FREQUENCY HOPPING
• Change of frequency after every frame in a
pre-determined manner
• SFH improves performance in multi-path fading
• Decreases required C/I
• Mandatory for MS when requested by BS
• FCCH ,SCH ,BCCH are not hopped
• Algorithm : Cyclic or pseudorandom
• Provides interference diversity
SUMMARY
• Radio Interface
• Frequency Bands & Specifications
• Multiple Access Method FDMA & TDMA
• FDMA /TDMA Frame Representation
• Logical Channels Traffic & Control
• Operational Concepts
• Other Salient Features of RF I/F- DTX, Time Alignment
Diversity, Fr. Hopping,
Power Control.
51