PLMN &

GSM System Architecture International

OMC PSTN
ISC

BTS GMSC
BSC

MSC
BTS
VLR
BSC
HLR

BTS
EIR

AC

MS

08.10.2009
 PLMN &
International
RSS components
OMC PSTN
ISC

BTS GMSC
BSC

MSC
BTS
VLR
BSC
HLR

BTS
EIR

AC

MS

08.10.2009
 PLMN &
International
SSS components
OMC PSTN
ISC

BTS GMSC
BSC

MSC
BTS
VLR
BSC
HLR

BTS
EIR

AC

MS

08.10.2009
 PLMN &
International
OMS components
OMC PSTN
ISC

BTS GMSC
BSC

MSC
BTS
VLR
BSC
HLR

BTS
EIR

AC

MS

08.10.2009
 The GSM Public Land Mobile Network (PLMN)

Radio Sub System (RSS, BSS) Switching Sub System (SSS) PSTN

MSC VLR

BTS BSC
E

BTS
A
PSTN
MSC VLR
BSC Switch
Abis
A

C,D
PSTN
BTS
Um Switch

F
EIR HLR AC

MS

08.10.2009
 Network Elements in the GSM PLMN - MSC

The tasks of the Mobile Switching Center (MSC)

MSC
 Provision of the BSSAP Interface Functionality to the BSS
(A-Interface)
 Provision of the MAP Interface Functionality to access the GSM specific
Information Registers VLR, HLR, EIR and MSC
 Handling for all Mobile Specific Call Setup tasks for
Mobile Originating Call Setup (MOC)
Interrogation and Mobile Terminating Call Setup (MTC)
Mobile To Mobile Call Setup (MMC)
Call Setup Handling for several Supplementary Service Functions
Control of the Handover Setup Function
 Provision of the Interface Functions to the PSTN.
The MSC is the Interworking Point between the MAP based PLMN
and the PSTN. It is integrated in the PSTN network with the usual
protocols (e.g. ISUP, TUP, MFCR2,..) and behaves like any other PSTN
exchange
 The MSC where the Mobile Station is booked in, is called the Visited MSC
 The MSC where the Interrogation task for the Mobile Terminating call is
performed, is called the Gateway MSC.

08.10.2009
 Network Elements in the GSM PLMN - HLR

The tasks of the Home Location Register (HLR)

HLR

 The HLR contains all permanent and (relevant) temporary subscriber data
for all mobile subscribers permanently registered in the HLR.

 Permanent data for a subscriber is:

The numbers IMSI and MSISDN(s)
All subscribed Tele & Bearer Services
All provisioned and subscribed Supplementary Services
Other subscriber related permanent data (e.g. Service Classmark for IN)

 Temporary data of a subscriber is:

The actual location of the subscriber (which PLMN, which VLR)
The activation status and data for the Supplementary Services
(e.g. The Forwarded To Number)

 The HLR is accessed by the MAP procedures based on SCCP & TCAP

 The subscribers are inserted into the HLR with the related MML command
CR MSUB
08.10.2009
 Network Elements in the GSM PLMN - VLR

The tasks of the Visitor Location Register (VLR)

VLR
 For the visiting subscribers the VLR contains a copy of their subscriber
data. This data is downloaded from the HLR during the Location Update
procedure.

 The VLR is responsible for the MSRN number management for the
visiting subscribers, during the Mobile Terminating Call Setup

 The VLR is responsible for the assignment of the TMSI (Temporary

Mobile Station Identity) to the visiting subscribers

 To access the subscriber data the numbers IMSI, MSRN and the TMSI
are used

 In SIEMENS D900 the MSC and VLR are always co-located within one
hardware entity.

08.10.2009
 Network Elements in the GSM PLMN - EIR

The tasks of the Equipment Identification Register (EIR)

EIR
 Management of the White List. The White List contains the IMEI ranges
of the ME released by the manufacturers

 Management of the Black List. It contains all equipment identities

belonging to equipment needed to be barred.

 Management of the Grey List. It contains equipment identities (IMEI)

belonging to equipment not working properly. Equipment on the Grey List
are not barred, but reported to the O&M for further processing.

08.10.2009
 Network Elements in the GSM PLMN - AC

The tasks of the Authentication Center (AC)

AC

 The AC is a functional entity which is used for security related functions

 Management of the secret authentication key (Ki) per subscriber.

 Management of the authentication vectors RAND and SRES per call.

 Management of the encryption key Kc, used by the switching subsystem

for signaling and user data security.

 For dynamic reasons, the AC is always co-located with the HLR within
one hardware entity.

08.10.2009
 Numbering and Adressing in the GSM PLMN (IMSI)

 The International Mobile Subscriber Identity (IMSI)

MCC MNC MSIN

MCC Mobile Country Code acc. CCITT E.212 (3 digits)

MNC Mobile Network Code (2 digits)
MSIN Mobile Subscriber Identification Number (10 digits)

The IMSI is used to unique identification of the GSM mobile subscribers in all PLMNs.
The IMSI is not a dialable number, nor it is known to the holder of the SIM card.
It is permanently stored in the SIM card, in HLR and in AC. It is temporarily stored in VLR.
The IMSI is the main Index to the Subscriber Data Records in HLR and AC Registers.

Example: Germany D2 MCC= 262, MNC= 02

08.10.2009
 Numbering and Adressing in the GSM PLMN (MSISDN)

 The Mobile Station ISDN Number (MSISDN)

CC NDC SN

CC Country Code acc. CCITT E.164 (1-3 digits)

NDC National Destination Code (1-3 digits)
SN Subscriber Number (6-7 digits)

The MSISDN a number according to CCITT E.164. It is the number to be dialed to reach
a GSM mobile subscriber.
It is assigned to an IMSI by database update in HLR. It is not stored in the SIM card.
Within the same country, the MSISDN is dialed as ‘NP NDC SN’.
In some PLMN’s it is sufficient to dial only the SN in PLMN internal calls (e.g. D2)
The NDC is used to route mobile terminated calls the PLMN of the mobile subsriber.
One or more NDC’s can be assigned to a PLMN.

Example: Germany D2 CC= 49, NDC= 172

08.10.2009
 Numbering and Adressing in the GSM PLMN (IMEI)

 The International Mobile Equipment Identity Number (IMEI)

TAC FAC SNR

TAC Type Approval Code (6 digits)

FAC Final Assembly Code (2 digits). Identifies the final manufacturer.
SNR Serial Number (6 digits). Unique within the TAC+FAC

The IMEI is the number which is used to identify the Mobile Equipment and shall help
to prohibit stealing Mobile Equipment.
The IMEI is stored in EIR and can be assigned to a Blacklist, Greylist or a Whitelist.
The IMEI is independent from IMSI and MSISDN.

08.10.2009
 Numbering and Adressing in the GSM PLMN (MSRN)

 The Mobile Station Roaming Number (MSRN)

CC NDC MSCID digits

CC Country Code acc. CCITT E.164 (1-3 digits)

NDC National Destination Code (1-3 digits)
MSCID Unique number, to address the MSC/VLR created the number
digits temporarily created and assigned to to each MTC

The MSRN a number according to CCITT E.164.

It is temporarily created in VLR during the Mobile Terminating Call Setup to route the
call from the GMSC to the VMSC.
Even it is a normal ISDN number, the dialing of the MSRN by a subscriber is prohibited.

08.10.2009
Hand-over MSC
A
BSC

BTS MSC
1 BSC B

BTS BTS
2 3
BSC

Inter-cell BTS
Intra-MSC 4

Inter-MSC

08.10.2009