GSM PDF

By/
Huseein Ali Yusuf Al-seddiq

Computer Network Engineering Department
Sanaa Community College
Sanaa

2014

Global System for Mobile communication (GSM)
1
Index
Table of Tables ........................................................................................................................................................... 2
Table of Figures .......................................................................................................................................................... 2
ABBREVIATION ...................................................................................................................................................... 3
Forward Error Correction ................................................................................................................................... 3
1. Introduction ........................................................................................................................................................ 5
2. GSM .................................................................................................................................................................... 5
2.1. GSM History ................................................................................................................................................. 5
2.1.1. The Standard Approach .................................................................................................................... 6
2.1.2. GSM Timeline: ................................................................................................................................... 7
2.2. GSM Features and Services .......................................................................................................................... 9
2.2.1. GSM Features ..................................................................................................................................... 9
2.2.2. GSM Services ...................................................................................................................................... 9
2.3. GSM Architecture ....................................................................................................................................... 12
2.3.1. The Switching System ...................................................................................................................... 12
2.3.2. The Base Station System (BSS) ....................................................................................................... 13
3.2.2 . The Operation and Support System (OSS) .................................................................................... 14
2.3.4. Additional Functional Elements ..................................................................................................... 14
2.4. GSM Radio Interface .................................................................................................................................. 14
2.5. GSM Channel Types. .................................................................................................................................. 16
2.5.1. Physical Channels............................................................................................................................. 17
2.5.2. Logical Channels .............................................................................................................................. 18
2.5.3. Channel Mapping ............................................................................................................................. 24
2.6. GSM Frame Structure ................................................................................................................................. 24
2.7. GSM Signal Processing : ............................................................................................................................ 26
3. Conclusion......................................................................................................................................................... 28
Resources .................................................................................................................................................................. 29

2
TABLE OF TABLES

TABLE (2.1) THE GSM TIMELINE 1 .......................................................................................................................8

TABLE (2.2) GSM SYSTEM FREQUENCY BANDS 1 ............................................................................................... 15

TABLE (2.3) THE LOGICAL CHANNELS AND THEIR PURPOSE 1 ............................................................................. 23

TABLE OF FIGURES

FIGURE (2.1) THE BASIC GSM NETWORK ARCHITECTURE 1 .......................................................... 12

FIGURE (2.2) TDMA AND FDMA 1 ................................................................................................. 16

FIGURE (2.3) MULTIFRAMES IN GSM 1 .......................................................................................... 17

FIGURE (2.4) TRAFFIC FROM PHYSICAL CHANNEL TO LOGICAL 1 ................................................. 18

FIGURE (2.5) LOGICAL CHANNEL 1 ............................................................................................... 18

FIGURE (2.6) THE TDMA CHANNELS 1 ........................................................................................... 19

FIGURE (2.7) GSM FRAME STRUCTURE 1 ...................................................................................... 26

FIGURE (2.8) GSM TRANSMISSION/ RECEPTION CHAIN 1 ............................................................. 26

FIGURE (2.9) TRAFFIC CHANNEL STRUCTURE 1 ............................................................................. 27

3
ABBREVIATION
3GPP Third Generation Partnership Project
AGCH Access Granted Channel
AMPS Advanced Mobile Phone System
AoC Advice of charge
ARFC Absolute Radio Frequency Channel
ARFCN Absolute Radio Frequency Channel Number
AUC Authentication Center
BCCH Broadcast Control Channel
BP Burst Period
BSIC Base Station Identity Code
BSC Base Station Controller
BSS Base Station System
BTS Base Transceiver Station
CCCH Common control channel
CUGs Closed user groups
DTMF Dual-tone multi frequency
EC European Commission
EDGE Enhanced Data rates for Global Evolution
EIR Equipment Identity Register
FACCH Fast Associated Control Channel
FCCH Frequency Correction Channel
FDD Frequency-Division Duplex
FEC Forward Error Correction
GIWU GSM interworking unit
GMSK Gaussian minimum shift keying
GMSC Gateway mobile services switching center
HLR Home location register
IMSI International Mobile Subscriber Identity
IN Intelligent Network
LAI Location Area Identity
LPC linear predictive coding
MS Mobile Station
MSC Mobile Services Switching Center
MSN Mobile Service Node
NMT Nordic Mobile Telephony
PCH Paging Channel
PCM Pulse Code Modulation
PSTN Public Switched Telephone Network
RACH Random Access Channel
RPE-LTP- LPC Regular Pulse Excitation-Long-Term Prediction Linear Prediction Coding
SACCH Slow Associated Control Channel
SCH Synchronization Channel

4
SDCCH Stand Alone Dedicated Control Channel
SIM Subscriber Identity Module
TCH Traffic Channels
TDMA Time Division Multiple Access
TMSI Temporary Mobil Subscriber Identity
TS Time Slot
VLR Visitor Location Register
WAP Wireless Application Protocol

5
1. Introduction
Throughout the evolution of cellular telecommunications, various systems have been
developed without the benefit of standardized specifications. This presented many
problems directly related to compatibility, especially with the development of digital
radio technology. This report shows the GSM standard that intended to address those
problems.

2. GSM
GSM stands for Global System for Mobile Communication and is an open, digital cellular
technology used for transmitting mobile voice and data services. The GSM emerged from
the idea of cell-based mobile radio systems at Bell Laboratories in the early 1970s.
The GSM is the name of a standardization group established in 1982 to create a common
European mobile telephone standard. The GSM standard is the most widely accepted
standard and is implemented globally.

2.1. GSM History
During the early 1980s, analog cellular telephone systems were experiencing rapid growth
in Europe, particularly in Scandinavia and the United Kingdom, but also in France and
Germany. Each country developed its own system, which was incompatible with everyone
else's in equipment and operation. This was an undesirable situation, because not only was
the mobile equipment limited to operation within national boundaries, which in a unified
Europe were increasingly unimportant, but there was also a very limited market for each
type of equipment, so economies of scale and the subsequent savings could not be realized.
The Europeans realized that early on, and in 1982 the Conference of European Posts and
Telegraphs (CEPT) formed a study group called the Groupe Spcial Mobile (GSM) to
study and develop a pan-European public land mobile system. The proposed system had
to meet certain criteria:
Good subjective speech quality
Low terminal and service cost
Support for international roaming
Ability to support handheld terminals
Support for range of new services and facilities
Spectral efficiency
ISDN compatibility

6
In 1989, GSM responsibility was transferred to the European Telecommunication
Standards Institute (ETSI), and phase I of the GSM specifications were published in 1990.
Commercial service was started in mid-1991, and by 1993 there were 36 GSM networks in
22 countries. Although standardized in Europe, GSM is not only a European standard.
Over 200 GSM networks (including DCS1800 and PCS1900) are operational in 110
countries around the world. In the beginning of 1994, there were 1.3 million subscribers
worldwide , which had grown to more than 55 million by October 1997. With North
America making a delayed entry into the GSM field with a derivative of GSM called
PCS1900, GSM systems exist on every continent, and the acronym GSM now aptly stands
for Global System for Mobile communications.
The developers of GSM chose an unproven (at the time) digital system, as opposed to the
then-standard analog cellular systems like Advanced Mobile Phone System (AMPS) in the
United States and (Total Access Communication System) TACS in the United Kingdom.
They had faith that advancements in compression algorithms and digital signal processors
would allow the fulfillment of the original criteria and the continual improvement of the
system in terms of quality and cost. The over 8000 pages of GSM recommendations try to
allow flexibility and competitive innovation among suppliers, but provide enough
standardization to guarantee proper interworking between the components of the system.
This is done by providing functional and interface descriptions for each of the functional
entities defined in the system.

2.1.1. The Standard Approach
The thousands of pages of GSM recommendations, designed by operators and
infrastructure and mobile vendors, provide enough standardization to guarantee proper
interworking between the components of the system. This is achieved by means of the
functional and interface descriptions for each of the different entities.
The GSM today is still under improvement, with the definition of new features and
evolution of existing features. This permanent evolution is reflected in the organization of
the recommendations, first published as phase I, then phase II and phase II+, and now
published with one release each year (releases 96, 97, 98, 99, and releases 4 and 5 in 2000
and 2001).
As stated, responsibility for the GSM specifications was carried by ETSI up to the end of
1999. During 2000, the responsibility of the GSM recommendations was transferred to
the Third Generation Partnership Project (3GPP). This world organization was created
to produce the third-generation mobile system specifications and technical reports. The
partners have agreed to cooperate in the maintenance and development of GSM technical
specifications and technical reports, including evolved radio access technologies
[e.g., General Packet Radio Service (GPRS) and Enhanced Data rates for Global
Evolution (EDGE)].

7
2.1.2. GSM Timeline:
Year Events
1982
Nordic Telecom and Netherlands PTT propose to CEPT (Conference of European Post
and Telecommunications) the development of a new digital cellular standard that would
cope with the ever a burgeoning demands on European mobile networks.
The European Commission (EC) issues a directive which requires member states to
reserve frequencies in the 900 MHz band for GSM to allow for roaming.
1985 A list of recommendations to be generated by the group is accepted.
1986
Field tests are performed to test the different radio techniques proposed for the air
interface.
Main GSM radio transmission techniques are chosen
1987
September - 13 operators and administrators from 12 areas in the CEPT GSM advisory
group sign the charter GSM (Groupe Spciale Mobile) MoU "Club" agreement, with a
launch date of 1 July 1991 .
The original French name was later changed to Global System for Mobile
Communications , but the original GSM acronym stuck.
GSM spec drafted.
1988 GSM system is validated.
1989
The responsibility of the GSM specifications is passed to the European
Telecommunications Standards Institute (ETSI).
1990
Phase 1 GSM 900 specifications are frozen
DCS adaptation starts
Validation systems implemented
First GSM World congress in Rome with 650 Participants
1991
First GSM spec demonstrated
DCS specifications are frozen
GSM World Congress Nice has 690 Participants
1992
January - First GSM network operator is Oy Radiolinja Ab in Finland
December 1992 - 13 networks on air in 7 areas
GSM World Congress Berlin - 630 Participants
1993
GSM demonstrated for the first time in Africa at Telkom '93 in Cape Town
Roaming agreements between several operators established
GSM World Congress Lisbon with 760 Participants
Telkom '93 held in Cape Town. First GSM systems shown
1994
First GSM networks in Africa launched in South Africa
Phase 2 data/fax bearer services launched
Vodacom becomes first GSM network in the world to implement data/fax
GSM World Congress Athens with 780 Participants
1995
GSM MoU is formally registered as an Association registered in Switzerland - 156
members from 86 areas.
GSM World Congress Madrid with 1400 Participants

8
December 1995 117 networks on air in 69 areas
Fax, data and SMS roaming started
GSM phase 2 standardization is completed, including adaptation for PCS 1900 (PCS)
First PCS 1900 network live 'on air' in the USA
Telecom '95 Geneva - Nokia shows 33.6 kbps multimedia data via GSM
Ericsson 337 wins GSM phone of the year
US FCC auctions off PCS licenses
1996
GSM MoU is formally registered as an Association registered in Switzerland
December 1996 120 networks on air in 84 areas
GSM World Congress in Cannes
GSM MoU Plenary held in Atlanta GA, USA
8K SIM launched
Pre-Paid GSM SIM Cards launched
Bundled billing introduced in South Africa
Option International launches world's first GSM/Fixed-line modem
1997
July: 200 network in 109 countries operational, around 44 million subscribers worldwide.
GSM World Congress Cannes 21/2/97
Iridium birds launched
First dual-band GSM 900-1900 phone launched by Bosch
1999
GSM Conference in Cannes 2/99
165m GSM 900/1800/1900 users worldwide
General Packet Radio Service (GPRS) trials begin and USA and Scandanavia 1/99
Wireless Application Protocol (WAP) came into existence in France and Italy 1/99
Eight Bidders for Third SA Cell License
GSM MoU Joins 3GPP
First GPRS networks go live
Bluetooth specification v1.0 released
2000
By 12/2000 480m GSM 900/1800/1900 users worldwide
First GPRS networks roll out
Location Interoperability Forum Launched
First GPRS terminals seen
2001
By 5/2001 500m GSM 900/1800/1900 users worldwide
16 billion SMS message sent in April 2001
500 million people are GSM users (4/01)
Table (2.1) The GSM Timeline 1

9
2.2. GSM Features and Services
2.2.1. GSM Features
Frequency band: GSM networks operate in four different radio frequencies. Most GSM
networks operate in the 900 MHz or 1800 MHz bands. Some countries in the Americas
use the 850 MHz and 1900 MHz bands because the 900 and 1800 MHz frequency bands
were already allocated. The rarer 400 and 450 MHz frequency bands are assigned in some
countries, notably Scandinavia, where these frequencies were previously used for first-
generation systems.
The uplink frequency range specified for GSM is 933 - 960 MHz (basic 900 MHz band
only). The downlink frequency band 890 - 915 MHz (basic 900 MHz band only).
Duplex distance The duplex distance is 80 MHz. Duplex distance is the distance
between the uplink and downlink frequencies. A channel has two frequencies, 80 MHz
apart.
Channel separation The separation between adjacent carrier frequencies. In GSM, this
is 200 kHz.
Modulation Modulation is the process of sending a signal by changing the
characteristics of a carrier frequency. This is done in GSM via Gaussian minimum shift
keying (GMSK).
Transmission rate GSM is a digital system with an over-the-air bit rate of 270 kbps.
Access method GSM utilizes the time division multiple access (TDMA) concept.
TDMA is a technique in which several different calls may share the same carrier. Each
call is assigned a particular time slot.
Speech coder GSM uses linear predictive coding (LPC). The purpose of LPC is to
reduce the bit rate. The LPC provides parameters for a filter that mimics the vocal tract.
The signal passes through this filter, leaving behind a residual signal. Speech is encoded
at 13 kbps.
One of the key features of GSM is the Subscriber Identity Module (SIM), commonly
known as a SIM card. The SIM is a detachable smart card containing the user's
subscription information and phonebook. This allows the user to retain his information
after switching handsets. Alternatively, the user can also change operators while
retaining the handset simply by changing the SIM.

2.2.2. GSM Services
2.2.2.1. GSM Subscriber Services
There are two basic types of services offered through GSM: telephony (also referred to as
teleservices) and data (also referred to as bearer services). With this it also supports some
supplementary services that can complement and support both telephony and data
services.

10
Telephony services are mainly voice services that provide subscribers with the complete
capability (including necessary terminal equipment) to communicate with other
subscribers.
Data services provide the capacity necessary to transmit appropriate data signals between
two access points creating an interface to the network. In addition to normal telephony
and emergency calling, the following subscriber services are supported by GSM:
Dual-tone multi frequency (DTMF) DTMF is a tone signaling scheme often used for
various control purposes via the telephone network, such as remote control of an
answering machine. GSM supports full-originating DTMF.
Facsimile group III GSM supports CCITT Group 3 facsimile. As standard fax
machines are designed to be connected to a telephone using analog signals, a special fax
converter connected to the exchange is used in the GSM system. This enables a GSM
connected fax to communicate with any analog fax in the network.
Short message services A convenient facility of the GSM network is the short message
service. A message consisting of a maximum of 160 alphanumeric characters can be sent
to or from a mobile station. This service can be viewed as an advanced form of
alphanumeric paging with a number of advantages. If the subscriber's mobile unit is
powered off or has left the coverage area, the message is stored and offered back to the
subscriber when the mobile is powered on or has reentered the coverage area of the
network. This function ensures that the message will be received.
Cell broadcast A variation of the short message service is the cell broadcast facility.
A message of a maximum of 93 characters can be broadcast to all mobile subscribers in
a certain geographic area. Typical applications include traffic congestion warnings and
reports on accidents.
Voice mail This service is actually an answering machine within the network, which
is controlled by the subscriber. Calls can be forwarded to the subscriber's voice-mail box
and the subscriber checks for messages via a personal security code.
Fax mail With this service, the subscriber can receive fax messages at any fax
machine. The messages are stored in a service center from which they can be retrieved
by the subscriber via a personal security code to the desired fax number.

2.2.2.2. GSM Supplementary Services
GSM supports a comprehensive set of supplementary services that can complement and
support both telephony and data services. Supplementary services are defined by GSM
and are characterized as revenue-generating features. A partial listing of supplementary
services follows.
Call forwarding This service gives the subscriber the ability to forward incoming calls
to another number if the called mobile unit is not reachable, if it is busy, if there is no
reply, or if call forwarding is allowed unconditionally.

11
Barring of outgoing calls This service makes it possible for a mobile subscriber to
prevent all outgoing calls.
Barring of incoming calls This function allows the subscriber to prevent incoming
calls. The following two conditions for incoming call barring exist: baring of all
incoming calls and barring of incoming calls when roaming outside the home PLMN.
Advice of charge (AoC) The AoC service provides the mobile subscriber with an
estimate of the call charges. There are two types of AoC information: one that
provides the subscriber with an estimate of the bill and one that can be used for
immediate charging purposes. AoC for data calls is provided on the basis of time
measurements.
Call hold This service enables the subscriber to interrupt an ongoing call and then
subsequently reestablish the call. The call hold service is only applicable to normal
telephony.
Call waiting This service enables the mobile subscriber to be notified of an incoming
call during a conversation. The subscriber can answer, reject, or ignore the incoming
call. Call waiting is applicable to all GSM telecommunications services using a circuit-
switched connection.
Multiparty service The multiparty service enables a mobile subscriber to establish a
multiparty conversationthat is, a simultaneous conversation between three and six
subscribers. This service is only applicable to normal telephony.
Calling line identification presentation/restriction These services supply the called
party with the integrated services digital network (ISDN) number of the calling party.
The restriction service enables the calling party to restrict the presentation. The
restriction overrides the presentation.
Closed user groups (CUGs) CUGs are generally comparable to a PBX. They are a
group of subscribers who are capable of only calling themselves and certain numbers.

12
2.3. GSM Architecture
The GSM network is divided into three major systems: the switching system (SS), the base
station system (BSS), and the operation and support system (OSS). The basic GSM
network elements are shown in Figure .

Figure (2.1) The basic GSM network Architecture 1

2.3.1. The Switching System
The switching system (SS) is responsible for performing call processing and subscriber-
related functions. The switching system includes the following functional units:
Home location register (HLR)The HLR is a database used for storage and
management of subscriptions. The HLR is considered the most important database,
as it stores permanent data about subscribers, including a subscriber's service profile,
location information, and activity status. When an individual buys a subscription
from one of the PCS operators, he or she is registered in the HLR of that operator.

13

Mobile services switching center (MSC)The MSC performs the telephony switching
functions of the system. It controls calls to and from other telephone and data
systems. It also performs such functions as toll ticketing, network interfacing,
common channel signaling, and others.

Visitor location register (VLR)The VLR is a database that contains temporary
information about subscribers that is needed by the MSC in order to service visiting
subscribers. The VLR is always integrated with the MSC. When a mobile station
roams into a new MSC area, the VLR connected to that MSC will request data about
the mobile station from the HLR. Later, if the mobile station makes a call, the VLR
will have the information needed for call setup without having to interrogate the
HLR each time.

Authentication center (AUC)A unit called the AUC provides authentication and
encryption parameters that verify the user's identity and ensure the confidentiality
of each call. The AUC protects network operators from different types of fraud found
in today's cellular world.

Equipment identity register (EIR)The EIR is a database that contains information
about the identity of mobile equipment that prevents calls from stolen,
unauthorized, or defective mobile stations. The AUC and EIR are implemented as
stand-alone nodes or as a combined AUC/EIR node.

2.3.2. The Base Station System (BSS)
All radio-related functions are performed in the BSS, which consists of base station
controllers (BSCs) and the base transceiver stations (BTSs).
Base station controller (BSC)The BSC provides all the control functions and
physical links between the MSC and BTS. It is a high-capacity switch that provides
functions such as handover, cell configuration data, and control of radio frequency
(RF) power levels in base transceiver stations. A number of BSCs are served by an
MSC.

Base transceiver station (BTS)The BTS handles the radio interface to the mobile
station. The BTS is the radio equipment (transceivers and antennas) needed to
service each cell in the network. A group of BTSs are controlled by a BSC.

14
2.3.3. The Operation and Support System (OSS)
The operations and maintenance center (OMC) is connected to all equipment in the
switching system and to the BSC. The implementation of OMC is called the operation
and support system (OSS). The OSS is the functional entity from which the network
operator monitors and controls the system. The purpose of OSS is to offer the customer
cost-effective support for centralized, regional, and local operational and maintenance
activities that are required for a GSM network. An important function of OSS is to
provide a network overview and support the maintenance activities of different
operation and maintenance organizations.

2.3.4. Additional Functional Elements
Other functional elements shown in Figure 2 are as follows:
Message center (MXE)The MXE is a node that provides integrated voice, fax,
and data messaging. Specifically, the MXE handles short message service, cell
broadcast, voice mail, fax mail, email, and notification.

Mobile service node (MSN)The MSN is the node that handles the mobile
intelligent network (IN) services.

Gateway mobile services switching center (GMSC)A gateway is a node used to
interconnect two networks. The gateway is often implemented in an MSC. The MSC
is then referred to as the GMSC.

GSM interworking unit (GIWU)The GIWU consists of both hardware and
software that provides an interface to various networks for data communications.
Through the GIWU, users can alternate between speech and data during the same
call. The GIWU hardware equipment is physically located at the MSC/VLR.

2.4. GSM Radio Interface
The radio interface provides the means by which an MS communicates with the BTSs of a
GSM network whilst it moves within the coverage area. The performance of the radio
interface, and particularly its ability to provide acceptable speech links in the face of co-
channel interference from other users within the system, acutely affects the overall capacity
of a cellular system.

15
Currently, there are several types of networks in the world using the GSM standard, but at
different frequencies.
The GSM-900 is the most common in Europe and the rest of the world. Its extension is
E-GSM.
The DCS-1800 operates in the 1,800-MHz band and is used mainly in Europe, usually to
cover urban areas. It was also introduced to avoid saturation problems with the GSM-
900.
The PCS-1900 is used primarily in North America.
The GSM-850 is under development in America.
The GSM-400 is intended for deployment in Scandinavian countries in the band
previously used for the analog Nordic Mobile Telephony (NMT) system.
The system is based on frequency-division duplex (FDD), which means that the uplink (radio
link from the mobile to the network-that is, mobile transmit, base receive), and downlink
(from the network to the mobile-that is, base transmit, mobile receive) are transmitted on
different frequency bands. For instance, in the 900-MHz E-GSM band, the block 880-915
MHz is used for transmission from mobiles to network, and the block 925-960 MHz is used
for the transmission from network to mobiles. Table 1.1 gives a summary of uplink and
downlink frequency bands for the different GSM systems.
Name Uplink (MHz) Downlink (MHZ) Oset (MHz) Channel Numbers (ARFCN)
GSM-450 450.4 457.6 460.4 467.6 10 259 293
GSM-480 478.8 486.0 488.8 496.0 10 306 340
GSM-850 824.0 249.0 869 894.0 45 128 251
GSM-900 890.0 915.0 935.0 960.0 45 1 124
EGSM-900 880.0 915.0 925.0 960.0 45 975 1023, 0 124
GSM-1800 1710.0 1785.0 1805.0 1880.0 95 512 885
GSM-1900 1850.0 1910.0 1930.0 1990.0 80 512 810
Table (2.2) GSM System Frequency Bands 1
Operators may implement networks that operate on a combination of the frequency bands
listed above to support multiband mobile terminals.
There are different ways of sharing the physical resource among all the users in a radio
system, and this is called the multiple-access method. The multiple-access scheme defines
how simultaneous communications share the GSM radio spectrum. The various multiple-
access techniques in use in radio systems are frequency-division multiple access (FDMA),
TDMA, and code-division multiple access(CDMA). GSM is based on both FDMA and TDMA
techniques.

16

Figure (2.2) TDMA and FDMA 1

FDMA consists in dividing the frequency band of the system into several channels. In GSM,
each RF channel has a bandwidth of 200 kHz, which is used to convey radio modulated
signals, or carriers. Each pair of uplink/ downlink channels is called an absolute radio
frequency channel (ARFC) and is assigned an ARFC number (ARFCN). The mapping of
each ARFCN on the corresponding carrier frequency is given in [3].
TDMA is the division of the time into intervals: within a frequency channel, the time is
divided into time slots. This division allows several users (eight) to be multiplexed on the
same carrier frequency, each user being assigned a single time slot. A packet of data
information, called a burst, is transmitted during a time slot. The succession of eight time
slots is called a TDMA frame, and each time slot belonging to a TDMA frame is identified by
a time slot number (TN), from 0 to 7.

2.5. GSM Channel Types.
GSM uses a variety of channels in which the data is carried. In GSM, these channels are
separated into physical channels and logical channels. The Physical channels are determined
by the timeslot, whereas the logical channels are determined by the information carried
within the physical channel. It can be further summarized by saying that several recurring
timeslots on a carrier constitute a physical channel. These are then used by different logical
channels to transfer information. These channels may either be used for user data (payload)
or signaling to enable the system to operate correctly.

17
2.5.1. Physical Channels
A physical channel is determined by the carrier frequency or a number of carrier
frequencies with defined hopping sequence and the Time Slot number.
8 Time Slots (1 Time Slot = 1 Physical Channel) of 577 s constitutes a 4.615 ms TDMA
Frame. In GSM standard data on a time slot transmitted in bursts, so time slot is often
expressed in BP (Burst Period). 1 BP represents 1 TS. TDMA frame (4.615 ms of 8 TS)
further structured in to multiframes. There are two types of multiframes in the system:

26 TDMA Multiframe: Consists 26 TDMA frames with duration of 120 ms and used to
carry the Logical Channels TCH, SACCH, FACCH etc.
51 TDMA Multiframe: Consists 51 TDMA frames with duration of 234.5 ms and used
to carry the Logical Channels FCCH, SCH, BCCH, CCCH, SDCCH, SACCH etc.
These multiframes further structured in to Superframe and Hyperframe.
SUPERFRAME: Superframe consists of 51*26 TDMA frames with duration of 6.12
sec. This is corresponding to the smallest cycle for which the organization of all
channels is repeated.
HYPERFRAME: Hyperframe consists 2048 superframes (2048*51*26 TDMA frames)
with duration of 3 hrs, 28 min, 53 sec and 760 ms. It is in particular smallest cycle for
frequency hopping, cyphering.
The frame hierarchy is used for synchronization between BTS and MS.

Figure (2.3) Multiframes in GSM 1

18
2.5.2. Logical Channels
The data, whether user traffic or signaling information, are mapped onto the physical
channels by defining a number of logical channels. A logical channel will carry information
of a specific type and a number of these channels may be combined before being mapped
onto the same physical channel.

Figure (2.4) Traffic From Physical Channel to Logical 1

LOGICAL CHANNELS TYPES

Figure (2.5) logical channel 1

19

Figure (2.6) The TDMA channels 1

2.5.2.1. Traffic Channels
Traffic channels are intended to carry encoded speech and user data. There are two types
of TCH

Full rate traffic channels at a net bit rate of 22.8 Kb/s (TCH/F)

Half rate traffic channels at a net bit rate of 11.4 Kb/s (TCH/H)
Speech Channels: Speech channels are defined for both full rate and half rate traffic
channels.
Data Channels: Data channels support a variety of data rates (2.4, 4.8 and 9.6 Kb/s) on
both half and full rate traffic channels. The 9.6 Kb/s data rate is only for full rate
application

20
2.5.2.2. Control Channels
Control channels carry signaling information between an MS and a BTS. There are several
forms of control channels in GSM, and they can generally be divided into three categories
according to the manner in which they are supported on the radio interface and the type
of signaling information they carry.

2.5.2.2.1. Broadcast control channels
Broadcast control channels are transmitted in downlink direction only (i.e. only
transmitted by BTS).
The broadcast channels are used to broadcast synchronization and general network
information to all the MSs within a cell. Such as Location Area Identity (LAI) and
maximum output power.
It has three types:

FCCH Frequency Correction Channel
FCCH Used for the frequency correction / synchronization of a mobile station. The
repeated (every 10 sec) transmission of Frequencies Bursts is called FCCH.
FCCH serves two purposes; one is to make sure this is the BCCH-carrier, the other is to
allow the MS to synchronize to the frequency. FCCH is transmitted on the downlink,
point-to-multipoint.

SCH Synchronization Channel
SCH Allows the mobile station to synchronize time wise with the BTS. Repeated
broadcast (every 10 frames) of Synchronization Bursts is called (SCH)
The MS receives the TDMA frame number and also the Base Station Identity Code, BSIC,
of the chosen base station. BSIC can only be decoded if the base station belongs to the
GSM network. SCH is transmitted on the downlink, point to multipoint.

BCCH Broadcast Control Channel
(BCCH) is used to broadcast control information to every MS within a cell. This
information includes details of the control channel configuration used at the BTS, a list of
the BCCH carrier frequencies used at the neighboring BTS sand a number of parameters
that are used by the MS when accessing the BTS.

21
Broadcast Control channel, BCCH include the Location Area Identity (LAI), maximum
output power allowed in the cell and the BCCH-carriers for the neighboring cells, on which
the MS will perform measurements. BCCH is transmitted on the downlink, point-to-
multipoint.
In case of the MS is tuned to a base station and synchronized with the frame structure in
the cell. The base stations are not synchronized to each other, so every time the MS decides
to camp on another cell, its FCCH, SCH and BCCH have to be read.

2.5.2.2.2. Common Control Channels
The common control channels are used by an MS during the paging and access procedures.
Common control channels are three types.

PCH Paging Channel
Within certain time intervals the MS will listen to the Paging channel, PCH, to see if the
network wants to get in contact with the MS. The reason could be an incoming call or an
incoming Short Message. The information on PCH is a paging message, including the MSs
identity number (IMSI) or a temporary number (TMSI). PCH is transmitted on the
downlink, point-to-point.

RACH Random Access Channel
If listening to the PCH, the MS will realize it is being paged. The MS answers, requesting
a signaling channel, on the Random Access channel, RACH. RACH can also be used if the
MS wants to get in contact with the network, e.g. when setting up a mobile originated
call. RACH is transmitted on the uplink, point-to-point.
It is termed random because there is no mechanism to ensure that no more than one MS
transmits in each RACH time slot and there is a finite probability that two mobiles could
attempt to access the same RACH at the same time.

AGCH Access Granted Channel
The access grant channel (AGCH) is carried data which instructs the mobile to operate in
a particular physical channel (Time slot or ARFCN). The AGCH is used by the network
to grant, or deny, an MS access to the network by supplying it with details of a dedicated
channel, i.e. TCH or SDCCH, to be used for subsequent communications. The AGCH is a
down-link only channel.

22

2.5.2.2.3. Dedicated Control Channels
Signaling information is carried between an MS and a BTS using associated and dedicated
control channels during or not during a call, They are of three types.

SDCCH Stand Alone Dedicated Control Channel
Non-urgent information, e.g. transmitter power control, is transmitted using the slow
associated control channel (SACCH).
On the uplink MS sends averaged measurements on own base station (signal strength and
quality) and neighboring base stations (signal strength). On the downlink the MS receives
system information, which transmitting power and what timing advance to use. It is
transmitted at 13th Frame of TCH. As seen, SACCH is transmitted on both up-and
downlink, point-to-point.
This channel is always present when a dedicated link is active between the MS and BTS,
and it occupies one timeslot in every 26. SACCH messages may be sent once every 480
ms,(i.e. approximately every 2 s).

SACCH Slow Associated Control Channel
More urgent information, e.g. a handover command, is sent using time slots that are
stolen from the traffic channel.
If, suddenly, during the conversation a handover must be performed the Fast Associated
Control channel, FACCH, is used. FACCH works in stealing mode, meaning that one 20
ms segment of speech is exchanged for signaling information necessary for the handover.
The subscriber will not recognize this interruption in speech since the speech coder will
repeat the previous speech block. This channel is known as the fast associated control
channel (FACCH) because of its ability to transfer information between the BTS and MS
more quickly than the SACCH. A complete FACCH message may be sent once in every
20 ms.

FACCH Fast Associated Control Channel
In some situations, signaling information must flow between a network and an MS when
a call is not in progress, e.g. during a location update. This could be accommodated by
allocating either a full-rate or half-rate TCH and by using either the SACCH or FACCH
to carry the information.

23
This would, however, be a waste of the limited radio resources. So a low data rate channel
about 1/8 of TCH/F is defined. Also used in call setup process.
The channel is termed stand-alone because it may exist independently of any TCH.
SDCCH is transmitted on both up-and downlink, point-to-point.
The MS is on the SDCCH informed about which physical channel (frequency and time
slot) to use for traffic (TCH).

Logical Channel Abbreviation
Uplink/
Downlink
Task
Broadcast
channel
(BCH)
Broadcast control channel BCCH DL
System Information
broadcast
Frequency correction
channel
FCCH DL
Cell frequency
synchronization
Synchronization channel SCH DL
Cell time synchronization
and identification
Common
control
channel
(CCCH)
Paging channel PCH DL MS paging
Random access channel RACH UL MS random access
Access grant channel AGCH DL Resource allocation
Cell broadcast channel CBCH DL Short messages broad cast
Dedicated
control
channel
Standalone dedicated
control channel
SDCCH UL/DL General signaling
Slow associated control
channel
SACCH UL/DL
Signaling associated with
the TCH
Fast associated control
channel
FACCH UL/DL Handover signaling
Traffic
channel
(TCH)
Full speech TCH/FS UL/DL Full-rate voice channel
Half rate TCH/HS UL/DL Half-rate voice channel
2.4 Kbps, 4.8 Kbps, 9.6
Kbps, and 14.4 Kbps full-
rate data channels
TCH/F2.4
TCH/F4.8
TCH/F9.6
TCH/F14.4
UL/DL Full-rate data channels
2.4-Kbps- and 4.8-Kbps-
rate data channels
TCH/H2.4
TCH/H4.8
UL/DL Half-rate data channels
Table (2.3) The Logical Channels and Their Purpose 1

24
2.5.3. Channel Mapping

When the MS is turned on it will listen to the FCCH in order to listen to the carrier
frequency
Then the MS listen to the SCH to get info on the TDMA frame structure
The MS will then listen to the BCCH to get info such as location area, Max allowed O/P
power & neighboring cells
The MS will periodically listen to the PCH to determine if someone is trying to call it.
If the MS hears a page it will use the RACH to ask for access to the system in order to
respond to the incoming call
The sys will give access using the AGCH
The sys uses the AGCH to tell the MS which SDCCH to use for complete the Call
Setup.
When the MS gets the SDCCH, it also gets a SACCH. Which the system uses to
regulates the O/P power of the MS & gives it timing advance info.
The MS is given a TCH to use by the SDCCH. The MS tunes to it during the call.
During a call if a handover is required to a neighboring cell, the FACCH will be used to
exchange the necessary info.

2.6. GSM Frame Structure
The GSM system has a defined GSM frame structure to enable the orderly passage of
information. The GSM frame structure establishes schedules for the predetermined use of
timeslots.
By establishing these schedules by the use of a frame structure, both the mobile and the base
station are able to communicate not only the voice data, but also signaling information without
the various types of data becoming intermixed and both ends of the transmission knowing
exactly what types of information are being transmitted.
The GSM frame structure provides the basis for the various physical channels used within GSM,
and accordingly it is at the heart of the overall system.

Frame structure is the division of defined length of digital information into different fields
(information parts). A GSM frame is 4.615 msec and it is composed of 8 time slots (numbered
0 through 7). During voice communication, one user is typically assigned to each time slot
within a frame. The GSM system also combines frames to form Multiframes.

25
Multiframes are frames that are grouped or linked together to perform specific functions.
Multiframes on the GSM system use established schedules for specific purposes, such as
coordinating with frequency hopping patterns. Multiframes used in the GSM system include
the 26 traffic multiframe, 51 control multiframe, superframe, and hyperframe.
Traffic Multiframe Structures - The 26 traffic multiframe structure is used to send information
on the traffic channel. The 26 traffic multiframe structure is used to combine user data (traffic),
slow control signaling (SACCH), and idle time period. The idle time period allows a mobile
device to perform other necessary operations such as monitoring the radio signal strength level
of a beacon channel from other cells. The time interval of a 26 frame traffic multiframe is 6
blocks of speech coder data (120 msec).
Control Multiframe Structures - The 51 control multiframe structure is used to send
information on the control channel. The 51 frame control multiframe is sub divided into logical
channels that include the frequency correction burst, the synchronization burst, the broadcast
channel (BCCH), the paging and access grant channel (PAGCH), and the stand-alone dedicated
control channel (SDCCH). The PAGCH is logically sub divided into PCH and AGCH.
Superframe - A superframe is a multiframe sequence that combines the period of a 51
multiframe with 26 multiframes (6.12 seconds). The use of the superframe time period allows
all mobile devices to scan all the different time frame types at least once.
Hyperframe - A hyperframe is a multiframe sequence that is composed of 2048 superframes,
and is the largest time interval in the GSM system (3 hours, 28 minutes, 53 seconds). Every
time slot during a hyperframe has a sequential number (represented by an 11 bit counter) that
is composed of a frame number and a time slot number. This counter allows the hyperframe to
synchronize frequency hopping sequence, encryption processes for voice privacy of subscribers'
conversations.
This figure shows the different types of GSM frame and multiframe structures. This diagram
shows that a single GSM frame is composed of 8 time slots. When a radio channel is used to
provide a control channel, time slot 0 and the other time slots are used for traffic channels. 51
frames are grouped together to form control multiframes (for the control channel). 26 frames
are grouped together to form traffic multiframes (for the traffic channels). Superframes are the
composition of 26 control multiframes or 51 traffic multiframes to provide a common time
period of 6.12 seconds. 2,048 superframes are grouped together to form a hyperframe. A
hyperframe has the longest time period in the GSM system of 3 hours, 28 minutes, and 53
seconds.

26

Figure (2.7) GSM Frame Structure 1

2.7. GSM Signal Processing :

Figure (2.8) GSM transmission/ reception chain 1

27
The voice input is sampled at 8 kHz and coded at 13 bits/sample. The resulting 104
kbits/s is reduced to 13 kb/s using Regular Pulse Excitation-Long-Term Prediction
Linear Prediction Coding (RPE-LTP- LPC).
FEC and interleaver.
GMSK modulation
Demodulate
Deinterleave
FEC
Decode into 13 bits/sample uniform code.
Convert to A-Law-PCM code and send to MSC.
Take 20 ms speech or 160 samples.
Represent it by 260 bits divided as follows:
o 36 bits for LPC coefficients
o 36 bits for long-term prediction
o 188 bits for excitations
The coding rate is (260 bit)/(0.02 seconds) = 13 kb/s.
Bits are classified as
o Class 1a: 50 bits are essential.
o Class 1b: 132 bits are important.
o Class 2: 78 bits are less important.
3 parity bits are added to the Class 1a bits to give 53 bits.
These 53 bits are added to the132 bits Class 1b bits and appended by 0000 to give
189 bits. After rate 1/2 convolutional encoding gives 378 bits.
Adding the 78 Class 2 bits gives 456 bits in 20 ms, or 456/0.02=22.8 kb/s.
Two 456 bit blocks are interleaved and transmitted over 8 frames, i.e. spread out to 114
bits per frame.

Figure(2.9) Traffic Channel structure 1

28
3. Conclusion
The GSM system proved hard to understand. Even though most of the specications are
publicly available, the sheer amount of documents and information can be overwhelming.
There are many helpful sources to get a broad overview of GSM, but when looking for a more
detailed perspective very few sources remain and those that do often contradict each other. In
this thesis the overview of GSM is by no means complete, but hopefully it will help as a sort of
stepping stone for those who want to learn the details of the air-interface of GSM.
The publicly available specications of GSM are in contrast to the extremely closed GSM
industry. Only a couple of companies in the world create the core GSM equipment, like the base
band processors in mobile phones. All of these implementations are closed-source and often sold
exclusively to GSM providers. The immediate eect of this closed nature of the GSM industry
is that billions of people walk around with a device, of which hardly anyone knows, or has
veried, what it does. Until recently there has only been theoretical research into GSM security.
All the strengths and weaknesses of the GSM protocols are more or less known. Now, with
aordable and adjustable tools like the USRP and Gnu Radio, more practical research becomes
possible so we can actually test the implementations we rely on.

29
Resources
Books
Yacoub, Michel. Sep, 2004. GSM Overview. CRC Pres. USA
Broek, Fabian van den. March, 2010. Catching and Understanding GSM-Signals.
Radboud University Nijmegen, Netherlands
Mishra, Ajay. 2007. Advanced cellular Network Planning And Optimisation. Sons
Ltd, England
Uke, Kurniawan Usman. 2005. GSM Fundamental. Retrieved from
(www.slideshare.net)
Asiacell.GSM Fundamental. Telecom platform course. Retrieved from
(www.slideshare.net).
Tipper, David. Global System for Mobile Global System for Mobile (GSM). University
of Pittsburgh, USA.
Turletti, Thierry. March, 1996. A brief Overview of the GSM Radio Interface.
Massachusetts Institute of Technology, USA.
The International Engineering Consortium. Global System for Mobile Global System
for Mobile (GSM). Retrieved from (http://www.iec.org).
Siegmund, M. Redl Matthias, K.Weber Malcolm, W. Oliphant. 1998. GSM and
Personal Communications Handbook. USA
Eng. Shahzad, Mian. 2008. GSM Channels. Taxila university, Pakistan
Raymond, Steele Chin-Chun, Lee Peter Gould. 2001. GSM, cdmaOne and 3G
Systems. Sons Ltd, England.

Web sites and pages
www.telecomspace.com/gsm-specifications.html.
www.tutorialspoint.com/gsm/gsm_architecture.htm
www.gsmserver.com/articles/gsm_overview.php
www.eldes-electronicdesign.blogspot.com/2013/02/gsm-security-history-difference-
between.html
www.althos.com/tutorial/GSM-tutorial-frame-structure.html
www.tel3pedia.blogspot.com/2011/11/introduction-to-physical-and-logical.html
www.learntelecom.com/gsm-physical-logical-channels/
www.radio-electronics.com/info/cellulartelecomms/gsm_technical/gsm-history.php

GSM PDF

Uploaded by

Document Information

Original Description:

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

GSM PDF

Uploaded by

Copyright:

Available Formats

By/

Huseein Ali Yusuf Al-seddiq

You might also like