A

TRAINING REPORT
On

GLOBAL SYSTEM FOR MOBILE COMM. (GSM)

Submitted in the practical fulfillment for the award of Degree of Bachelor of Technology in

ELECTRONICS & COMMUNICATION ENGINEERING

From

BHARTI AIRTEL FARIDABAD

Submitted By: Naveen Kumar (2909238)

Submitted To:E.C.E Department

DEPARTMENT OF ELECTRONICS & COMMUNICATION ENGG.

KURUKSHETRA INSTITUTE OF TECHNOLOGY & MANAGEMENT, KURUKSHETRA -136119

TRAINING REPORT

GSM NETWORKING
1

CONTENTS

Acknowledgement Abstract Company Profile TELECOMMUNICATION (Introduction) Network component GSM Network Structure General Architecture of GSM Network Switching Architecture Typical GSM Base Station GSM Interfaces Call Processing Conclusion References

3 4 5 6 6 10 11 31 32 34 35 36 37 38

TRAINING REPORT

GSM NETWORKING

ACKNOWLEDGEMENT

I take this opportunity with much pleasure to express my sincere thanks and gratitude to Mr. RANJAN SHUKLA (Asst. Manager), AIRTEL TELECOM., It gives me immense pleasure to extend my gratitude towards Er. ADITYA and the entire Network and Quality team of AIRTEL TELECOM., FARIDABAD for providing their cooperation, constructive criticism, valuable guidance and constant encouragement. In addition, I wish to thank AIRTEL TELECOM., labs to provide me the opportunity to acquire the experience of knowing their work and also providing the required facilities, well working systems, besides complete collection of all latest technology softwares. I am especially grateful to the professors and lecturers of my institute Kurukshetra Institute of Technology & Management, who has been training us, since the first day, with the knowledge and support in the most lucid manner. It was really a good experience working in a professionally managed firm and learning from such good and knowledgeable people. I hope it will really help me in future.

NAVEEN KUMAR

TRAINING REPORT

GSM NETWORKING

ABSTRACT
3

Global System for Mobile communications (GSM: originally from Group Special Mobile) is the most popular standard for mobile phones in the world. Its promoter, the GSM Association, estimates that 82% of the global mobile market uses the standard GSM is used by over 2 billion people across more than 212 countries and territories. Its ubiquity makes international roaming very common between mobile phone operators, enabling subscribers to use their phones in many parts of the world. GSM differs from its predecessors in that both signaling and speech channels are digital call quality, and so is considered a second generation (2G) mobile phone system. This has also meant that data communication were built into the system using the 3rd Generation Partnership Project (3GPP)The GSM logo is used to identify compatible handsets and equipment The key advantage of GSM systems to consumers has been better voice quality and low-cost alternatives to making calls, such as the Short message service (SMS, also called "text messaging"). The advantage for network operators has been the ease of deploying equipment from any vendors that implement the standard. Like other cellular standards, GSM allows network operators to offer roaming services so that subscribers can use their phones on GSM networks all over the world. Newer versions of the standard were backward-compatible with the original GSM phones. For example, Release ''97 of the standard added packet data capabilities, by means of General Packet Radio Service (GPRS). Release ''99 introduced higher speed data transmission using Enhanced Data Rates for GSM Evolution (EDGE). In addition to digital transmission, GSM incorporates many advanced services and features, including ISDN compatibility and worldwide roaming in other GSM networks. The advanced services and architecture of GSM have made it a model for future third-generation cellular systems, such as UMTS. This paper will give an overview of the services offered by GSM, the system architecture, the radio transmission structure, and the signalling functional architecture.

TRAINING REPORT

GSM NETWORKING

COMPANY PROFILE
4

Bharti AirTel limited is a leading global telecommunications company with operations in 19 countries across Asia and Africa. The company offers mobile voice & data services, fixed line, high speed broadband, IPTV, DTH, turnkey telecom solutions for enterprises and national & international long distance services to carriers. Bharti AirTel has been ranked among the six best performing technology companies in the world by business week. Bharti AirTel had 200 million customers across its operations.

TELECOMMUNICATION

A cellular telephone system links mobile station (MS) subscribers into the public telephone system or to another cellular systems MS subscriber. Information sent between the MS subscriber and the
5

cellular network uses radiocommunication. This removes the necessity for the fixed wiring used in a traditionaltelephone installation.Due to this, the MS subscriber is able to move around and become fully mobile, perhapstravelling in a vehicle or on foot.

Initially there were three types of transmission techniques. These were: Transmission having one transmitter through radios. Transmission takes place in one direction from transmitter to receivers. E.g. Radio transmission Information flow can take place in two directions .E.g. telephone communication Transmission can take place in one direction at a time. E.g. walky-talky.

Network Components
GSM networks are made up of Mobile services Switching Centres (MSC), Base Station Systems (BSS) and Mobile Stations (MS). These three entities can be broken down further into smaller entities; such as, within the BSS we have Base Station Controllers, Base Transceiver Stations and Transcoders. These smaller network elements, as they are referred to, will be discussed later in the course. For now we will use the three major entities. With the MSC, BSS and MS we can make calls, receive calls, perform billing etc, as any normal PSTN network would be able to do. The only problem for the MS is that all the calls made or received are from other MSs. Therefore, it is also necessary to connect the GSM network to the PSTN. Mobile Stations within the cellular network are located in cells, these cells are provided by the BSSs. Each BSS can provide one or more cells, dependent on the manufacturers equipment. The cells are normally drawn as hexagonal, but in practice they are irregularly shaped, this is as a result of the influence of the surrounding terrain, or of design by the network planners

Fig 1.1:- Cell Coverage of a Network

When a subscriber moves from one cell to another during active call, the call is handed over to another cell (neighbor cell), this process is called Handover

Frequency Range

History
8

In 1982, the European Conference of Postal and Telecommunications Administrations (CEPT) created the Groupe Spcial Mobile (GSM) to develop a standard for a mobile telephone system that could be used across Europe. In 1987, a memorandum of understanding was signed by 13 countries to develop a common cellular telephone system across Europe. In 1989, GSM responsibility was transferred to the European Telecommunications Standards Institute (ETSI) and phase I of the GSM specifications were published in 1990. The first GSM network was launched in 1991 by Radiolinja in Finland with joint technical infrastructure maintenance from Ericsson. By the end of 1993, over a million subscribers were using GSM phone networks being operated by 70 carriers across 48 countries. The results of the SMGs work are the following two standards:1. GSM 900 2. DCS 1800 GSM 900:- [Global System for Mobile communication in the 900MHz band ]It is the standard for digital cellular mobile radio networks (PLMN) with digital radio transmission in the 900 MHz band. GSM 900 PLMN is designed for extensive radio coverage even in rural areas and has a max cell radius of 35Km. DSC 1800:- [Digital Cellular System for the 1800MHz band]. It is the variant of the GSM standard, which was the 1800 MHz band for the radio interface. It is designed for radio coverage in areas with very high subscriber density (MS/area).in this the cells have a radius of up to 8 km. Due to this comparatively small transmit capacity it is possible to use very small Mobile Equipment.

GSM
A GSM network is composed of several functional entities, whose functions and interfaces are defined. The GSM network can be divided into three broad parts. The Mobile Station is carried by the subscriber; the Base Station Subsystem controls the radio link with the Mobile Station. The Network Subsystem, the main part of which is the Mobile services Switching Center, performs the switching of calls between the mobile and other fixed or mobile network users, as well as management of mobile services, such as authentication. Not shown is the Operations and Maintenance center, which oversees the proper operation and setup of the network. The Mobile Station and the Base Station Subsystem communicate across the Um interface, also known as the air interface or radio link. The Base Station Subsystem communicates with the Mobile service Switching Center across the A interface. There are five different cell sizes in a GSM networkmacro, micro, Pico, femto and umbrella cells. The coverage area of each cell varies according to the implementation environment. Macro cells can be regarded as cells where the base station antenna is installed on a mast or a building above average roof top level. Micro cells are cells whose antenna height is under average roof top level; they are typically used in urban areas. Pico cells are small cells whose coverage diameter is a few dozen meters; they are mainly used indoors. Femtocells are cells designed for use in residential or small business environments and connect to the service providers network via a broadband internet connection. Umbrella cells are used to cover shadowed regions of smaller cells and fill in gaps in coverage between those cells. Cell horizontal radius varies depending on antenna height, antenna gain and propagation conditions from a couple of hundred meters to several tens of kilometers. The longest distance the GSM specification supports in practical use is 35 kilometers (22 mi). There are also several implementations of the concept of an extended cell, where the cell radius could be double or even more, depending on the antenna system, the type of terrain and the timing advance. A GSM network consists of several functional entities whose functions and interfaces are defined. The GSM network can be divided into following broad parts.
10

The Mobile Station(MS) The Base Station Subsystem (BSS) The Network Switching Subsystem (NSS) The Operation Support Subsystem(OSS)

Network structure
The Network structure of GSM is divided into:

The Mobile Station (MS)

The mobile station (MS) consists of the mobile equipment (the terminal) and a smart card called the Subscriber Identity Module (SIM). The SIM provides personal mobility, so that the user can have access to subscribed services irrespective of a specific terminal. By inserting the SIM card into another GSM terminal, the user is able to receive calls at that terminal, make calls from that terminal, and receive other subscribed services. The mobile equipment is uniquely identified by the International Mobile Equipment Identity (IMEI). The SIM card contains the International Mobile Subscriber Identity (IMSI) used to identify the subscriber to the system, a secret key for authentication, and other information. The IMEI andthe IMSI are independent, thereby allowing personal mobility. The SIM card may be protectedagainst unauthorized use by a password or personal identity number.

The Base Station Subsystem (BSS)

The Base Station Subsystem (BSS) is composed of two parts, the Base Transceiver Station (BTS) and the Base Station Controller (BSC). These communicate across the specified Abis interface, allowing (as in the rest of the system) operation between components made by different suppliers.

11

Fig 1.2 :- The Base Station Subsystem

Fig 1.3:- GSM BSS

The BSS is composed of two parts:

The Base Transceiver Station (BTS) The Base Station Controller (BSC)

The BTS and the BSC communicate across the specified Abis interface, enabling operations between components that are made by different suppliers. The radio components of a BSS may consist of four to seven or nine cells. A BSS may have one or more base stations. The BSS uses the Abis interface between the BTS and the BSC. A separate high-speed line (T1 or E1) is then connected from the BSS to the Mobile MSC. The Base Transceiver Station (BTS) houses the radio tranceivers that define a cell and handles the radiolink protocols with the Mobile Station. In a large urban area, there will potentially be a large number of BTSs deployed. portability, and minimum cost. The Base Station Controller (BSC) manages the radio resources for one or more BTSs. It handles radiochannel setup, frequency hopping, and handovers, as described below. The BSC is
12

The requirements for a BTS are ruggedness, reliability,

the connection between the mobile and the Mobile service Switching Center (MSC). The BSC also translates the 13 kbps voice channel used over the radio link to the standard 64 kbps channel used by the Public Switched Telephone Network or ISDN.

Base Transceiver Station (BTS ):

Though the term BTS can be applicable to any of the wireless communication standards, it is generally and commonly associated with mobile communication technologies like GSM and CDMA. In this regard, a BTS forms part of the base station subsystem (BSS) developments for system management. It may also have equipment for encrypting and decrypting communications, spectrum filtering tools (band pass filters) etc. antennas may also be considered as components of BTS in general sense as they facilitate the functioning of BTS. Typically a BTS will have several transceivers (TRXs) which allow it to serve several different frequencies and different sectors of the cell (in the case of sectorised base stations). A BTS is controlled by a parent base station controller via the base station control function (BCF). The BCF is implemented as a discrete unit or even incorporated in a TRX in compact base stations. The BCF provides an operations and maintenance (O&M) connection to the network management system (NMS), and manages operational states of each TRX, as well as software handling and alarm collection. The basic structure and functions of the BTS remains the same regardless of the wireless technologies.

The BTS houses the radio transceivers that define a cell and handles the radio link protocols with the MS. In a large urban area, a large number of BTSs may be deployed.

13

Fig 1.4:- GSM BTS The BTS corresponds to the transceivers and antennas used in each cell of the network. A BTS is usually placed in the center of a cell. Its transmitting power defines the size of a cell. Each BTS has between 1 and 16 transceivers, depending on the density of users in the cell. Each BTS serves a single cell. It also includes the following functions: Encoding, encrypting, multiplexing, modulating, and feeding the RF signals to the antenna. Transcoding and rate adaptation Time and frequency synchronizing Voice through full- or half-rate services Decoding, decrypting, and equalizing received signals Random access detection Timing advances Uplink channel measurements

14

A BTS Antenna

Fig 1.5:- Base transceiver station(BTS) Antenna in Paris

A mobile BTS

Fig 1.6:- A BTS mounted on a building

Fig 1.7:- A mobile BTS

15

A BTS in general has the following units:

Transceiver (TRX) Quite widely referred to as the driver receiver (DRX). Basically does transmission and reception of signals. Also does sending and reception of signals to/from higher network entities (like the base station controller in mobile telephony) Power amplifier (PA) Amplifies the signal from DRX for transmission through antenna; may be integrated with DRX. Combiner Combines feeds from several DRXs so that they could be sent out through a single antenna. Allows for a reduction in the number of antenna used. Duplexer For separating sending and receiving signals to/from antenna. Does sending and receiving signals through the same antenna ports (cables to antenna). Antenna This is also considered a part of the BTS. Alarm extension system Collects working status alarms of various units in the BTS and extends them to operations and maintenance (O&M) monitoring stations. Control function Control and manages the various units of BTS including any software. On-the-spot configurations, status changes, software upgrades, etc. are done through the control function.

Baseband receiver unit (BBxx)

16

Frequency hopping, signal DSP, etc..

The Base Station Controller (BSC):

The BSC manages the radio resources for one or more BTSs. It handles radio channel setup, frequency hopping, and handovers. The BSC is the connection between the mobile and the MSC. The BSC also translates the 13 Kbps voice channel used over the radio link to the standard 64 Kbps channel used by the Public Switched Telephone Network (PSDN) or ISDN. It assigns and releases frequencies and time slots for the MS. The BSC also handles intercell handover. It controls the power transmission of the BSS and MS in its area. The function of the BSC is to allocate the necessary time slots between the BTS and the MSC. It is a switching device that handles the radio resources. Additional functions include: Control of frequency hopping Performing traffic concentration to reduce the number of lines from the MSC Providing an interface to the Operations and Maintenance Center for the BSS Reallocation of frequencies among BTSs Time and frequency synchronization Power management Time-delay measurements of received signals from the MS

17

Network And Switching Subsystem (NSS)

INTRODUCTION In march 1985, after a detailed evaluation of digital switching systems, BT placed a contract with Ericsson Limited for the development of AXE10 for the BT Network and for the supply of a quantity of exchanges. AXE10 is a duplicated-processor stored-program controlled digital switching system developed by Telefon AB LM Ericsson of Sweden. The system is structured for local, tandem, transit and combined exchange applications. It can also be configured as a cellular mobile or as an international switching centre.

Network switching subsystem (NSS) is the component of a GSM system that carries out switching functions and manages the communications between mobile phones and the Public Switched Telephone Network (PSTN). It is owned and deployed by mobile phone operators and allows mobile phones to communicate with each other and telephones in the wider telecommunications network. The architecture closely resembles a telephone exchange, but there are additional functions which are needed because the phones are not fixed in one location. Each of these functions handles different aspects of mobility management and is described in more detail below. The Network Switching Subsystem, also referred to as the GSM core network, usually refers to the circuit-switched core network, used for traditional GSM services such as voice calls, SMS, and circuit switched data calls. There is also an overlay architecture on the GSM core network to provide packet-switched data services and is known as the GPRS core network. This allows mobile phones to have access to services such as WAP, MMS, and Internet access. All mobile phones manufactured today have both circuit and packet based services, so most operators have a GPRS network in addition to the standard GSM core network.
18

Network Subsystem
The central component of the Network Subsystem is the Mobile services Switching Center (MSC). It acts like a normal switching node of the PSTN or ISDN, and in addition provides all the functionality needed to handle a mobile subscriber, such as registration, authentication, location updating, handovers, and call routing to a roaming subscriber. These services are provided in conjunction with several functional entities, which together form the Network Subsystem. The MSC provides the connection to the public fixed network (PSTN or ISDN), and signalling between functional entities uses the ITUT Signaling System Number 7 (SS7), used in ISDN and widely used in current public networks. The Home Location Register (HLR) and Visitor Location Register (VLR) , together with the MSC, provide the call routing and (possibly international) roaming capabilities of GSM. The HLR contains all the administrative information of each subscriber registered in the corresponding GSM network, along with the current location of the mobile. The current location of the mobile is in the form of a Mobile Station Roaming Number (MSRN) which is a regular ISDN number used to route a call to the MSC where the mobile is currently located. There is logically one HLR per GSM network, although it may be implemented as a distributed database.

Fig 1.8:- Network Switching Subsystem The Visitor Location Register contains selected administrative information from the HLR, necessary for call control and provision of the subscribed services, for each mobile currently located in the geographical area controlled by the VLR. Although each functional entity can be
19

implemented as an independent unit, most manufacturers of switching equipment implement one VLR together with one MSC, so that the geographical area controlled by the MSC corresponds to that controlled by the VLR, simplifying the signalling required. Note that the MSC contains no information about particular mobile stations - this information is stored in the location registers. The other two registers are used for authentication and security purposes. The Equipment

Identity Register (EIR) is a database that contains a list of all valid mobile equipment on the network, where each mobile station is identified by its International Mobile Equipment Identity (IMEI). An IMEI is marked as invalid if it has been reported stolen or is not type approved. The Authentication Center is a protected database that stores a copy of the secret key stored in each subscriber's SIM card, which is used for authentication and ciphering of the radio channel.

Mobile switching center (MSC)

Description The mobile switching center (MSC) is the primary service delivery node for GSM, responsible for handling voice calls and SMS as well as other services (such as conference calls, FAX and circuit switched data). The MSC sets up and releases the end-to-end connection, handles mobility and hand-over requirements during the call and takes care of charging and real time pre-paid account monitoring. In the GSM mobile phone system, in contrast with earlier analogue services, fax and data information is sent directly digitally encoded to the MSC. Only at the MSC is this re-coded into an "analogue" signal (although actually this will almost certainly mean sound encoded digitally as PCM signal in a 64-kbit/s timeslot, known as a DS0 in America). There are various different names for MSCs in different contexts which reflects their complex role in the network, all of these terms though could refer to the same MSC, but doing different things at different times. The gateway MSC (G-MSC) is the MSC that determines which visited MSC the subscriber who is being called is currently located. It also interfaces with the PSTN. All mobile to mobile calls and PSTN to mobile calls are routed through a G-MSC. The term is only valid in the context of one
20

call since any MSC may provide both the gateway function and the Visited MSC function, however, some manufacturers design dedicated high capacity MSCs which do not have any BSSs connected to them. These MSCs will then be the Gateway MSC for many of the calls they handle. The visited MSC (V-MSC) is the MSC where a customer is currently located. The VLR associated with this MSC will have the subscriber's data in it. The anchor MSC is the MSC from which a handover has been initiated. The target MSC is the MSC toward which a Handover should take place. A mobile switching centre server is a part of the redesigned MSC concept starting from 3GPP Release 5.

Mobile switching centre server (MSS)

The mobile switching centre server is a soft-switch variant of the mobile switching centre, which provides circuit-switched calling, mobility management, and GSM services to the mobile phones roaming within the area that it serves. MSS functionality enables split between control (signalling) and user plane (bearer in network element called as media gateway/MG), which guarantees more optimal placement of network elements within the network. MSS and MGW media gateway makes it possible to cross-connect circuit switched calls switched by using IP, ATM AAL2 as well as TDM. More information is available in 3GPP TS 23.205. Other GSM core network elements connected to the MSC The MSC connects to the following elements: The home location register (HLR) for obtaining data about the SIM and mobile service ISDN number (MSISDN; i.e., the telephone number). The base station subsystem which handles the radio communication with 2G and 2.5G mobile phones. The UMTS terrestrial radio access network (UTRAN) which handles the radio communication with 3G mobile phones.

21

 The visitor location register (VLR) for determining where other mobile subscribers are located. Other MSCs for procedures such as handover.

Procedures implemented
Tasks of the MSC include: Delivering calls to subscribers as they arrive based on information from the VLR. Connecting outgoing calls to other mobile subscribers or the PSTN. Delivering SMSs from subscribers to the short message service centre (SMSC) and vice versa. Arranging handovers from BSC to BSC. Carrying out handovers from this MSC to another. Supporting supplementary services such as conference calls or call hold. Generating billing information.

Home location register (HLR)

The home location register (HLR) is a central database that contains details of each mobile phone subscriber that is authorized to use the GSM core network. There can be several logical, and physical, HLRs per public land mobile network (PLMN), though one international mobile subscriber identity (IMSI)/MSISDN pair can be associated with only one logical HLR (which can span several physical nodes) at a time.The HLR stores details of every SIM card issued by the mobile phone operator. Each SIM has a unique identifier called an IMSI which is the primary key to each HLR record. The next important items of data associated with the SIM are the MSISDNs, which are the telephone numbers used by mobile phones to make and receive calls. The primary MSISDN is the
22

number used for making and receiving voice calls and SMS, but it is possible for a SIM to have other secondary MSISDNs associated with it for fax and data calls. Each MSISDN is also a primary key to the HLR record. The HLR data is stored for as long as a subscriber remains with the mobile phone operator. Examples of other data stored in the HLR against an IMSI record is: GSM services that the subscriber has requested or been given. GPRS settings to allow the subscriber to access packet services. Current location of subscriber (VLR and serving GPRS support node/SGSN). Call divert settings applicable for each associated MSISDN. The HLR is a system which directly receives and processes MAP transactions and messages from elements in the GSM network, for example, the location update messages received as mobile phones roam around. Other GSM core network elements connected to the HLR The HLR connects to the following elements: The G-MSC for handling incoming calls The VLR for handling requests from mobile phones to attach to the network The SMSC for handling incoming SMS The voice mail system for delivering notifications to the mobile phone that a message is waiting The AUC for authentication and ciphering and exchange of data (triplets)

Procedures implemented
The main function of the HLR is to manage the fact that SIMs and phones move around a lot. The following procedures are implemented to deal with this:
23

 Manage the mobility of subscribers by means of updating their position in administrative areas called 'location areas', which are identified with a LAC. The action of a user of moving from one LA to another is followed by the HLR with a Location area update procedure. Send the subscriber data to a VLR or SGSN when a subscriber first roams there. Broker between the G-MSC or SMSC and the subscriber's current VLR in order to allow incoming calls or text messages to be delivered. Remove subscriber data from the previous VLR when a subscriber has roamed away from it.

Authentication centre (AUC)

Description The authentication centre (AUC) is a function to authenticate each SIM card that attempts to connect to the GSM core network (typically when the phone is powered on). Once the authentication is successful, the HLR is allowed to manage the SIM and services described above. An encryption key is also generated that is subsequently used to encrypt all wireless communications (voice, SMS, etc.) between the mobile phone and the GSM core network. If the authentication fails, then no services are possible from that particular combination of SIM card and mobile phone operator attempted. There is an additional form of identification check performed on the serial number of the mobile phone described in the EIR section below, but this is not relevant to the AUC processing. Proper implementation of security in and around the AUC is a key part of an operator's strategy to avoid SIM cloning. The AUC does not engage directly in the authentication process, but instead generates data known as triplets for the MSC to use during the procedure. The security of the process depends upon a shared secret between the AUC and the SIM called the Ki. The Ki is securely burned into the SIM during manufacture and is also securely replicated onto the AUC. This Ki is never transmitted
24

between the AUC and SIM, but is combined with the IMSI to produce a challenge/response for identification purposes and an encryption key called Kc for use in over the air communications. Other GSM core network elements connected to the AUC The AUC connects to the following elements: The MSC which requests a new batch of triplet data for an IMSI after the previous data have been used. This ensures that same keys and challenge responses are not used twice for a particular mobile.

Procedures implemented
The AUC stores the following data for each IMSI: The Ki Algorithm id. (the standard algorithms are called A3 or A8, but an operator may choose a proprietary one). When the MSC asks the AUC for a new set of triplets for a particular IMSI, the AUC first generates a random number known as RAND. This RAND is then combined with the Ki to produce two numbers as follows: The Ki and RAND are fed into the A3 algorithm and the signed response (SRES) is calculated. The Ki and RAND are fed into the A8 algorithm and a session key called Kc is calculated. The numbers (RAND, SRES, Kc) form the triplet sent back to the MSC. When a particular IMSI requests access to the GSM core network, the MSC sends the RAND part of the triplet to the SIM. The SIM then feeds this number and the Ki (which is burned onto the SIM) into the A3 algorithm as appropriate and an SRES is calculated and sent back to the MSC. If this SRES matches with the SRES in the triplet (which it should if it is a valid SIM), then the mobile is allowed to attach and proceed with GSM services.
25

After successful authentication, the MSC sends the encryption key Kc to the base station controller (BSC) so that all communications can be encrypted and decrypted. Of course, the mobile phone can generate the Kc itself by feeding the same RAND supplied during authentication and the Ki into the A8 algorithm. The AUC is usually collocated with the HLR, although this is not necessary. Whilst the procedure is secure for most everyday use, it is by no means crack proof. Therefore a new set of security methods was designed for 3G phones.

Visitor location register (VLR)

Description The visitor location register is a temporary database of the subscribers who have roamed into the particular area which it serves. Each base station in the network is served by exactly one VLR, hence a subscriber cannot be present in more than one VLR at a time. The data stored in the VLR has either been received from the HLR, or collected from the MS. In practice, for performance reasons, most vendors integrate the VLR directly to the V-MSC and, where this is not done, the VLR is very tightly linked with the MSC via a proprietary interface. Data stored include:

IMSI (the subscriber's identity number). Authentication data. MSISDN (the subscriber's phone number). GSM services that the subscriber is allowed to access. access point (GPRS) subscribed. The HLR address of the subscriber.

Other GSM core network elements connected to the VLR

26

The VLR connects to the following elements: The V-MSC to pass needed data for its procedures; e.g., authentication or call setup. The HLR to request data for mobile phones attached to its serving area. Other VLRs to transfer temporary data concerning the mobile when they roam into new VLR areas. For example, the temporal mobile subscriber identity (TMSI).

Procedures implemented
The primary functions of the VLR are: To inform the HLR that a subscriber has arrived in the particular area covered by the VLR. To track where the subscriber is within the VLR area (location area) when no call is ongoing. To allow or disallow which services the subscriber may use. To allocate roaming numbers during the processing of incoming calls. To purge the subscriber record if a subscriber becomes inactive whilst in the area of a VLR. The VLR deletes the subscriber's data after a fixed time period of inactivity and informs the HLR (e.g., when the phone has been switched off and left off or when the subscriber has moved to an area with no coverage for a long time). To delete the subscriber record when a subscriber explicitly moves to another, as instructed by the HLR.

Equipment identity register (EIR)

The equipment identity register is often integrated to the HLR. The EIR keeps a list of mobile phones (identified by their IMEI) which are to be banned from the network or monitored. This is
27

designed to allow tracking of stolen mobile phones. In theory all data about all stolen mobile phones should be distributed to all EIRs in the world through a Central EIR. It is clear, however, that there are some countries where this is not in operation. The EIR data does not have to change in real time, which means that this function can be less distributed than the function of the HLR. The EIR is a database that contains information about the identity of the mobile equipment that prevents calls from stolen, unauthorized or defective mobile stations. Some EIR also have the capability to log Handset attempts and store it in a log file. Other support functions Connected more or less directly to the GSM core network are many other functions. Billing centre (BC) The billing centre is responsible for processing the toll tickets generated by the VLRs and HLRs and generating a bill for each subscriber. It is also responsible for to generate billing data of roaming subscriber. Short message service centre (SMSC) The short message service centre supports the sending and reception of text messages. Multimedia messaging service centre (MMSC) The multimedia messaging service centre supports the sending of multimedia messages (e.g., images, audio, video and their combinations) to (or from) MMS-enabled Handsets. Voicemail system (VMS) The voicemail system records and stores voicemails. Lawful interception functions According to U.S. law, which has also been copied into many other countries, especially in Europe, all telecommunications equipment must provide facilities for monitoring the calls of selected users. There must be some level of support for this built into any of the different elements.
28

The concept of lawful interception is also known, following the relevant U.S. law, as CALEA. Generally Lawful Interception implementation is similar to the implementation of conference call.While A and B is talking with each other, C can join the call and listens silently Network Management Subsystem NMS is the third subsystem of GSM in addition to BSS and NSS. The purpose of NMS is to monitor various functions and elements of the network. This system can often be referred to as OSS as well. The functions of NMS can be divided into three categories: Fault Management Configuration Management Performance Management These functions cover the whole of GSM network elements from the level of individual BTSs, up to MSCs and HLRs. Fault Management Collection of alarm reports from network elements. One point for managing all fault solutions.

The purpose of fault management is to ensure smooth operation of network and rapid correction of any kind of problems detected. Fault management provides network operator with information about the current status of alarm events and maintains a history database of alarms. The alarms are stored in the NMS database and this database can be searched according to criteria specified by the network operator.

Configuration Management
29

Management of radio network configuration. Maintain up to date information on the network element status.

The purpose of configuration management is to maintain up-to-date information about operation and configuration status of network elements. Specific configuration functions include management of radio network, software and hardware management of network elements, time synchronization, and security operations. Performance Management Collection of measurement data from network elements. Produce performance result from data.

In performance management, NMS collects measurement data from individual network elements and stores it in a database. On the basis of the data, the network operator is able to compare the actual performance of the network with planned performance and detect both good and bad performance areas within the network.

30

General Architechture of GSM Network

Fig 1.9:- Simple architecture diagram of GSM Network The added components of the GSM architecture include the functions of the databases and messaging systems: Home Location Register (HLR) Visitor Location Register (VLR) Equipment Identity Register (EIR) Authentication Center (AuC) SMS Serving Center (SMS SC) Gateway MSC (GMSC)
31

Chargeback Center (CBC) Transcoder and Adaptation Unit (TRAU)

GSM Network alongwith added elemnts

Fig 1.10:- GSM Network along with added elements The MS and the BSS communicate across the Um interface, also known as the air interface or radio link. The BSS communicates with the Network Service Switching center across the A interface.

SWITCHING ARCHITECTURE
The system architecture is logically divided into two main parts, the switching system (APT) and the control system (APZ). The switching system (APT) performs traffic and operation/ maintennance functions. It comprises four main hardware subsystems:
32

 Subscriber Switching SubSystem Group Switching SubSystem Trunk and Signalling SubSystem

(SSS) (GSS) (TSS)

Common-Channel Signalling SubSystem (CCS) and the following software subsystems : Traffic Control SubSystems Charging SubSystem (TCS) (CHS) (OMS)

Operation and Maintennance SubSystem Subscriber Services SubSystem Network Management SubSystem

(SUS) (NMS)

All Hardware subsystems have a hardware component. The control system (APZ) is made up of centralised and distributed logic achieved through the following subsystems: Central Processor SubSystem Regional Processor SubSystem Maintennance SubSystem Support Processor SubSystem Data Communication SubSystem File Management SubSystem (CPS) (RPS) (MAS) (SPS) (DCS) (FMS)

Man-Machine Communication Subsystem (MCS) In Earlier Exchanges the input/output subsystem was used instead of SPS, FMS, MCS and DCS.

33

A Typical GSM base station

A base transceiver station or cell site (BTS) is a piece of equipment that facilitates wireless communication between user equipment (UE) and a network. UEs are devices like mobile phones (handsets), WLL phones, computers with wireless internet connectivity, WiFi and WiMAX gadgets etc. The network can be that of any of the wireless communication technologies like GSM, CDMA, WLL, WAN, WiFi, WiMAX etc. BTS is also referred to as the radio base station (RBS), node B (in 3G Networks) or, simply, the base station (BS). For discussion of the LTE standard the abbreviation eNB for enhanced node B is widely used.

Fig 1.11:- A typical GSM Base Station

34

G.S.M. INTERFACES
One of the main purposes behind GSM specifications is to define several open interfaces, which then limit certain parts of GSM system. The GSM specifications define two truly open interfaces within the GSM network. The first one is between MS and BS. This open-air interface is called Um. The second interface is located between Mobile services Switching centre and BSC. This interface is called the A-interface.Further include two interfaces called Abis and Ater Various interfaces within GSM are:Um : MS BTS (air or radio interface) A : MSC BSC

Abis : BCS BTS (proprietary interface) Ater : BSC TRAU B C D E F G : MSC VLR : MSC HLR : HLR VLR : MSC MSC : MSC EIR : VLR VLR

35

CALL PROCESSING
Mobile Originated Call
Mobile originated calls goes to BTS first & then to BSC. BSC forwards this call to MSC. MSC does authentication & call routing as per dialed digits. If it the call to another mobile subscriber then the process for that call is same as Mobile Terminated Call as shown in next slide

Fig 1.12:- Block Diagram of Call Processing

Mobile Terminated Call

Mobile terminated calls comes to MSC first ,where HLR/VLR inquiry is carried out and as per information the MS is paged in suitable BSC.

BSC forwards this page to all children BTS where actual paging is done. After BTS gets response from Mobile it allocates channel for this call. After end of the call BTS informs BSC & MSc.
36

CONCLUSION

In the practical training for a period of 45 days, I have learned a lot about the present scenario in the field of communication. I have gained knowledge about the technology used by the company GSM (GLOBAL SYSTEM FOR MOBILE COMMUNICATION). GSM technology facilitates with high speed integrated data, voice data, fax, mail, voice mail and mostly used SMS feature. GSM also make sure that all the communication made between networks are secured and protected from intruders and frauds. GSM actually brought the concept of being Mobile way beyond the limits. It enabled us to communicate across the continents. At our college we learn most of the things theoretically, which does not provides sufficient information about the subject, and students remain unaware of the problems and errors when they go to the field. This practical training has provided us the knowledge about various technologies in the communication field. I am highly grateful to the AIRTEL TELECOMM. for the support and guidance given to us for the successful completion of our practical training. The future of telecom is undeniably bright, with the development of new software, and increasingly sophisticated hardware and new telecomm operators such as Idea, Airtel, Vodafone, Aircel etc. Telecomm side is one of the best sides where a student can search for his future in the upcoming time as definitely telecomm side demands for various new engineers with their best potentials.

REFERENCES
37

1. www. AirTel.com 2. www.google.com 3. www.123eng.com 4. www.wikipedia.com 5. www.docstoc.com 6. www.gsmwold.com 7. www.gsmworld.com

38