Professional Documents
Culture Documents
Architecture
Background
Air interfaces
Network protocols
Application: Messaging
Research
GSM Structure
Base
Station
MS2
TCH (13 Kbps)
Common Control Channel (CCCH)
Used for control information
registration
Paging
Call origination/termination
GSM CCCH
CCCH
Reverse
(MS -> BS)
Forward
(BS -> MS)
Random Access
Control Channel
(RACH)
Paging and
Access Grant
Channel (PAGCH)
Forward
(BS -> MS)
Forward
(BS -> MS)
Broadcast
Control
Channel
(BCCH)
Forward
(BS -> MS)
Synchronization
Channel
(SCH)
Frequency
Correction
Channel
(FCCH)
PCH
AGCH
Slot 2
Slot 3
Slot 4
Slot 5
Slot 6
Slot 7
Slot 8
Frame 51
51 multiframe:
235 msec
Block
Frame 1 Frame 2 Frame 3
.
.
.
PAGCH(2-9)
PAGCH(2-9)
10
GSM: BCCH
Broadcast to all users on the CCCH
No addressing
Used to acquire system parameters so mobile may operate within the system
Key parameters (contained in RR SYSTEM INFORMATION MESSAGES)
RACH control parameters
cell channel descriptions (frequencies)
neighbor cells (frequencies)
cell id
Location Area ID (LAI)
Control channel description
b
a
c,d
b
c
e
c
9
10
11
Mobile
Basestation
Request dedicated signaling channel
Assign dedicated signaling channel
Signal
12
BTS
BSC
MSC/VLR
HLR
TCAP
MAP
SCCP
MTP
13
BTS
BSC
MSC/VLR
HLR
TCAP
MAP
SCCP
MTP
BTS
BSC
MSC/VLR
HLR
TCAP
MAP
SCCP
MTP
RIL-3 RR
paging
connection transfer
handoffs
cipher mode
15
BTS
BSC
MSC/VLR
HLR
TCAP
MAP
SCCP
MTP
RIL-3 CC Messages
call establishment
call release
in-call
ALERTING
DISCONNECT
START DTMF
CALL CONFIRMED
RELEASE
CALL PROCEEDING
RELEASE COMPLETE
STOP DTMF
CONNECT
CONNECT ACK
SETUP
16
BTS
BSC
MSC/VLR
HLR
TCAP
MAP
SCCP
MTP
RIL-3 MM messages
Registration
Location Update Request (LAI)/Accept
IMSI Detach (de-registration)
Security
Authentication Request (cipher key, seq #, RAND)
Authentication Response (SRES)
TMSI Reallocation Command/Complete
Service Request (service type)/Accept
17
BTS
BSC
MSC/VLR
HLR
TCAP
MAP
SCCP
MTP
RIL-3 messages
Radio Resource
Connection establishment
Assign command (Rf channel)
Paging request (TMSI)
Assignment complete
Channel request (random ref)
Immediate assignment (channel description, Handover command (channel description)
cipher key)
Handover complete
Page response
Measurement report
Channel release
Ciphering
Cipher mode command/complete
18
GSM Registration
Types
power up/down
location area
periodic
User Confidentiality
mobile device may send in real address: International Mobile Subscriber Identity (IMSI)
gets back temporary id (TMSI)
Unique in local area
19
Mobile
Basestation
Get SDCCH
RR connection
established
Authenticate
Cipher
UpdateLocation
Release RR connection
20
Mobile
Get SDCCH
Basestation
Get SDCCH
LOC UPD RQST
Authentication Request (RAND)
Authentication Response (SRES)
Cipher Mode
Cipher Mode Complete
LOC UPD ACC (TMSI)
TMSI REAL Complete
Release RR connection
21
GSM: Registration
Mobile
Get SDCCH
Basestation
Channel request
Immediate assignment
SABM(LOC UPD RQST)
RR connection
established
RR connection
release
Channel Release
22
Mobile
Get SDCCH
Basestation
Channel request
Immediate assignment
RR connection
established
SABM(Page Response)
UA(Page Response)
Authentication and Ciphering
SETUP
Call Confirmed
Alert
Assignment Command
Assignment Complete
RR connection
release
Connect
Connect ACK
23
Mobile
Basestation
Channel request
Get SDCCH
Immediate assignment
RR connection
established
RR connection
release
Connect ACK
24
MSC
Old BS
MS
New BS
Measurement Report
Measurement Report
Measurement Report
Measurement Report
Handoff Order
Handoff Access
Handoff Access
Handoff Complete
25
26
MSC
SM-Application Layer
Transfer Protocol
SM-Transfer Layer
Relay Protocol
SM-Relay Layer
Control Protocol
CM
Transfer protocol
SMS-Deliver (mobile terminated message)
SMS-Submit (mobile originate message)
Relay protocol
RP-Data (Deliver of Submit payload)
RP-Ack
Control protocol
CP-data (RP-Data or RP-Ack)
CP-Ack
27
Mobile
Basestation
Page
Page Response
SMS Delivery
28
Mobile
Basestation
Page
Page Response
29
Mobile
Basestation
CP-Data (RP-Data(SMS Submit))
CP-Ack
CP-Data(RP-Ack)
CP-Ack
30
Review
Mobile Station powers on
locates CCCH and reads system parameters
Mobile Registers
gets a paging class
Monitors paging channel
can receive or make calls
can receive and send messages
31
32
TIA/EIA/IS-136
Supports:
Call origination and termination
Registration
SMS
Digital:
TDMA
Based on IS-54
Primary difference: Digital Control Channel
33
IS-136 Spectrum
Reverse Channel (uplink)
824 849 MHz
Forward Channel (downlink)
869 894 MHz
Carriers spaced at 30 KHz
3 traffic channels per carrier
Frequencies equally divided into 2 systems
each has 12.5 MHz in uplink and downlink
34
IS-136 Structure
Base
Station
MS2
DCH (13 Kbps)
Digital Control Channel (DCCH)
Used for control information
registration
Paging
Call origination/termination
IS-136 DCCH
DCCH
Reverse
(MS -> BS)
Random Access
Control Channel
(RACH)
Forward
(BS -> MS)
Forward
(BS -> MS)
Broadcast
Control
Channel
(BCCH)
Forward
(BS -> MS)
Shared Feedback
Control Channel
(SCF)
PCH
ARCH
F-BCCH
E-BCCH
SMSCH
S-BCCH
36
IS-95
Code Division Multiple Access (CDMA) Transmission
Similar call processing to GSM and IS-136
1.23 MHz carriers, each with 65 sub code channels
Operates in similar bands to AMPS/IS-136
37
BSC
SS7
MSC
BS
RNC/PCF
Soft
handoff
R-P if
BS
PSTN
FA
PDSN
HLR
AAA
IP
HA
Internet
Data path
Voice path
RNC/PCF
BSC
performs frame-selection/power control
Coordinates handoff for voice users
terminates Radio Link Protocol with mobiles
performs frame-selection/power control
performs packet and burst control functions
MSC
PDSN
AAA
terminates Point-to-Point Protocol (PPP) with call control and mobility management
clients
interfaces to the PSTN for voice users
provides foreign agent (FA) support for
HLR
Mobile IP enabled clients
provides location management and AAA
functions for voice users using the IS41 protocol
provides Authentication, Authorization, and
Accounting for data users
38
CDMA: benefits
Higher capacity
interference limited => maximum efficiency
uses voice activity detection to reduce transmission bandwidth
Improved quality
soft handoff
CDMA has frequency, spatial, and time diversity to adapt to wireless errors
EVRC coding at 8kbps of voice includes error correction etc.
Ease of deployment
no frequency planning since frequency reuse=1
Greater coverage
cost effective in sub-urban and rural areas
Increased privacy
spreads small signal (9.6kbps) over large spectrum (1.25Mbps) so that signal appears like noise
Increased talk time
power control (performed 800 times a second) ensures that the mobile station transmits at
optimum power resulting in longer battery life
39
WCDMA
(3GPP2/TIA/TTA I)
(3GPP/ETSI/ARIB/TTA II)
Direct Spread
20 ms frames
Common cdm pilot
10 ms frames
Dedicated tdm pilot
Power control (1600 Hz)
40
Observations: CDMA2000
41
Firewall +
IP Router
PSTN
RNC
Radio network controller
manages a set of basestations
(Node B)
GMSC
GGSN
HLR
uses the GSM MAP protocol
for location management
and authentication
HLR
PSTN
MSC/GMSC
VLR
SGSN
MSC
IuPS
A
BSC
BTS
RNC
RNC
BTS
IuPS
BSC
BTS
Um
2G CS
IuPS
IuCS
Uu
MS
Uu
MS
Um
2.5G
PS
SGSN/GGSN
42
Observations: WCDMA
WCDMA is the UMTS air interface and is a disruptive change from GSM
GPRS allows for evolution to higher data rates from GSM, and uses
UMTS network architecture but does not use WCDMA air interface
Network architecture is not pure IP and is not IETF friendly
All IP wireless network architecture is the current predominant theme
Regulations allow UMTS deployment only in new frequency spectrum
Service Providers have paid huge amounts for UMTS spectrum in U.K.,
Germany but are becoming increasingly conservative as in Italy, Austria,
Swiss auctions
43