You are on page 1of 111

GSM Overview

   

GSM System Overview GSM Abis GSM A-Interface GSM Signalling Procedures

coMPAss Product Training 14-15 May, Singapore Slide 0

GSM
Global System for Mobile Communication (Groupe Spciale Mobile)

BTS

Definition and History

coMPAss Product Training 14-15 May, Singapore Slide 2

Basic concept - 1 GSM vs. fixed network Telephony


fixed location Telephone

Local Exchange

fixed medium

SONOFON M N

Diffuse Medium Mobile Switching Centre

Variable Location Mobile Station

coMPAss Product Training 14-15 May, Singapore Slide 3

The evolution

UMTS / IMT-2000 (FPLMTS)


DECT DCS 1800
GSM at 1800 MHz

PCS 1900
GSM at 1900 MHz

GSM CDMA
Digital 900 MHz

Satellite (IRIDIUM)

CT2

GSM GSM
Digital Digital 900 MHz 900 MHz

GSM DAMPS
(TDMA) Digital 900 MHz

Trunked mobile radio (TETRA)

CT0, CT1
Cordless

C-NET
Analog 450 MHz

NMT
Analog 450/900 MHz

TACS/ETACS
Analog 900 MHz

AMPS
Analog 800 MHz

Other systems

Mobile

coMPAss Product Training 14-15 May, Singapore Slide 4

GSM Standards


The GSM Standard is divided into phases (phase 1, phase 2 and phase 2+) all the phases has been finalized by ETSI. Many of the GSM networks in operation today are currently using the phase 2. However many of the GSM network operators are starting to implement phase 2+ (GPRS support). The ETSI GSM standard specification is around 5500 pages, and are divided into12 series.

coMPAss Product Training 14-15 May, Singapore Slide 5

GSM Status
  

Specification start-up: First network in operation: Forecast in 1995:

1980 Jan. 1992 (Radiolinja, Finland)

At the ITU's Telecom '95 event, were stated that we will reach 100 million
subscribers Worldwide before the year 2000.


September 1997:

~55 million subscribers. ~1 new subscriber each second. ~250 networks in 110 countries.

July 1998:

More than15 months early then year 2000 the magic figure of 100 million
subscribers was reached.


Today :

Over 200 million subscribers. 369 networks in 137 countries.

coMPAss Product Training 14-15 May, Singapore Slide 6

BTS

GSM Services.

coMPAss Product Training 14-15 May, Singapore Slide 7

Services
 
BTS

  

Telephony Data services (up to 9600 b/s) Fax group 3 (special modem) Short Message Service (SMS) Supplementary services, e.g.

Call Forwarding Call Barring Call Waiting Three Party Service Advice of Charge

coMPAss Product Training 14-15 May, Singapore Slide 8

GSM Features
 
BTS

Integrated voice/data (ISDN) Improved performance Improved security

Digital encryption Authentication (IMSI) TMSI assignment


  

All types of Mobile Stations Automatic roaming Sophisticated radio functions

Discontinuous transmission - DTX Frequency hopping

coMPAss Product Training 14-15 May, Singapore Slide 9

Services, phase 2 and 2+


 
BTS

Half-rate and enhanced full-rate speech New supplementary services:

Display of called and calling user's number Multi-party conversations (up to 6 parties) Closed user groups / virtual private networks Call completion services (busy, no answer etc.) Intelligent network services (CAMEL) Roaming between GSM and DCS 1800 (PCS 1900)

High speed data services:

High Speed Circuit Switched Data (HSCSD) General Packet Radio Service (GPRS)

coMPAss Product Training 14-15 May, Singapore Slide 10

BTS

System architecture.

coMPAss Product Training 14-15 May, Singapore Slide 11

System Overview
Public Switched Telephone Network (PSTN )

ISUP / TUP

ISUP / TUP

Um

Authen. Centre AUC MAP

MAP

Equip. Id Register EIR MAP

BTS

Mobile Switching Centre MSC

Home Location Register HLR

Visitor Location Register VLR

MAP

Base Station Subsystem (BSS) A-bis


Base Station Controller BSC

MAP ISUP / TUP

Mobile Switching Centre MSC

A-Inter

Base Transceiver Base Station Base Transceiver BTS Station Transceiver Base Station Base BTS Transceiver Transceiver Base BTS Station Station Transceiver BTS BTS Station BTS

Mobile Station (MS)

2 Mbit/s PCM Air Interface

coMPAss Product Training 14-15 May, Singapore Slide 12

System Building Blocks


Visitor Location Register
SONOFON M N

VLR

HLR Home Location Register

MSC Mobile Switching Centre

BSC Base Station Controller

BTS

Base Transceiver Station

coMPAss Product Training 14-15 May, Singapore Slide 13

HLR (Home Location register)




Home Base of information regarding customers subscribing to a particular operators GSM network Keeps track of subscriber profile, conditions and whereabouts

VLR

SONOFON M N

HLR

MSC

BSC

BTS

coMPAss Product Training 14-15 May, Singapore Slide 14

HLR contains


Subscriber information:

BTS

IMSI (International Mobile Subscriber Identity) MSISDN (International Mobile Station ISDN Number) MS Category (e.g. payphone) Authentication vectors (RAND, SRES and Kc: AUC and SIM) Allowed services (subscription data)


Mobile location information:

VLR number (MSRN - Mobile Station Roaming Number)

coMPAss Product Training 14-15 May, Singapore Slide 15

VLR (Visitor Location register)




Database with information about mobile users present/active in the network segment served by the MSC Handles true visitors as well as subscribers of the operator himself

VLR

SONOFON M N

HLR

MSC

BSC

BTS

coMPAss Product Training 14-15 May, Singapore Slide 16

VLR contains.


Subscriber information:

BTS

IMSI TMSI - Temporary Mobile Subscriber Identity MS category Authentication vectors Allowed services

Mobile location information:

MSRN - Mobile Station Roaming Number LAI - Location Area Identity

coMPAss Product Training 14-15 May, Singapore Slide 17

BTS (Base Transceiver Station)




Contains the radio transmitters and receivers (transceivers) covering a certain geographical area of the GSM network

VLR

SONOFON M N

HLR

MSC

BSC

BTS

coMPAss Product Training 14-15 May, Singapore Slide 18

BSC (Base Station Controller)


  

Controls a group of BTSs in relation to power control and handover. The combination of a BSC and its BTSs is called a Base Station Subsystem (BSS). The interface between the BTS and the is called the A-bis interface.

VLR

SONOFON M N

HLR

MSC

BSC

BTS

coMPAss Product Training 14-15 May, Singapore Slide 19

MSC (Mobile Switching Centre)


  

Serves a number of BSSs (Base Station Subsystem) via the A-interface. Responsible for call control (set-up, routing, control and termination of the calls) Management of inter-MSC handover and supplementary services, and for collecting charging/accounting information. Gateway to other to other GSM networks and public-switched networks)

VLR

SONOFON M N

HLR

MSC

BSC

BTS

coMPAss Product Training 14-15 May, Singapore Slide 20

AUC - Authentication Centre




BTS

Contains the individual subscriber-identification key (also contained in the SIM), and provides the subscriber data to the HLR and VLR used for authentication and encryption of calls.

AUC

HLR

coMPAss Product Training 14-15 May, Singapore Slide 21

EIR - Equipment Identity Registration.





BTS

Stores information about mobile stations in use and may block calls from a MS if the MS is stolen, not typeapproved or has faults which may disturb the network. Each MS is identified by a unique International Mobile Station Equipment Identity (IMEI)

EIR

MSC

coMPAss Product Training 14-15 May, Singapore Slide 22

(MS) Mobile Station

Power: - Class 1: - Class 2: - Class 3: - Class 4: - Class 5:

20 W 8W 5W 2W 0.8 W

Vehicle/ portable Hand-held Hand-held Hand-held

coMPAss Product Training 14-15 May, Singapore Slide 23

Functional model.
BTS

coMPAss Product Training 14-15 May, Singapore Slide 24

System Overview
Public Switched Telephone Network (PSTN )

ISUP / TUP

ISUP / TUP

Um

Authen. Centre AUC MAP

MAP

Equip. Id Register EIR MAP

BTS

Mobile Switching Centre MSC

Home Location Register HLR

Visitor Location Register VLR

MAP

Base Station Subsystem (BSS) A-bis


Base Station Controller BSC

MAP ISUP / TUP

Mobile Switching Centre MSC

A-Inter

Base Transceiver Base Station Base Transceiver BTS Station Transceiver Base Station Base BTS Transceiver Transceiver Base BTS Station Station Transceiver BTS BTS Station BTS

Mobile Station (MS)

2 Mbit/s PCM Air Interface

coMPAss Product Training 14-15 May, Singapore Slide 25

A functional model


Call Management (CM)

Call Control (CC) SMS Non Call-related SS


 

VLR

Mobility Management (MM) Radio Resource Management (RR) CM MM RR

SONOFON M N

BTS

BSC

MSC

HLR

coMPAss Product Training 14-15 May, Singapore Slide 26

GSM Protocol Architecture


MS
CM MM (CM) (MM) (RR) RR RR' Layer 2 Layer 1 Sig. layer 2 (LAPDm) Layer 1 (air) Sig. layer 2 (LAPDm) Layer 1 (air) BTSM Sig. layer 2 (LAPD) Sig. layer 1

BTS
(CM) (MM) (RR) RR BTSM (CM) (MM)

BSC
DTAP CM (CM+MM)

MSC

Layer 3 BTS

MM

BSSMAP SCCP

BSSMAP SCCP

I S MAP U P TCAP SCCP

Sig. layer 2 (LAPD) Sig. layer 1

MTP

MTP

MTP

Um Interface

Abis Interface

A Interface

Inter-MSC

     

DTAP - Direct Transfer Application Part BSSMAP - BSS Management Application Part CM - Call Management MM - Mobile Management RR - Radio Resource Management BTSM - BTS Management

    

SCCP - Signalling Connection Control Part MAP - Mobile Application Part TCAP - Transaction Capability Application Part ISUP - ISDN User Part MTP - Message Transfer Part

coMPAss Product Training 14-15 May, Singapore Slide 27

Layer 3 Network Layer




The Network layer contains the signalling procedures and is divided into:

BTS

CM - Call Management. MM - Mobility Management. RR - Radio Resource Management.

coMPAss Product Training 14-15 May, Singapore Slide 28

Call Management (CM)




Call Management takes care of the ordinary call-control procedure:

BTS

Establishment and release of calls, as well as access to services and


facilities.


CM is divided into:

Call Control (CC), short messages services (SMS). Non-call-related supplementary services (SS).

coMPAss Product Training 14-15 May, Singapore Slide 29

Mobility Management (MM)


Mobility Management handles roaming and authentication procedure.

BTS

coMPAss Product Training 14-15 May, Singapore Slide 30

Radio Resource Management (RR)




Radio Resource Management comprise:

BTS

Paging. Radio-channel access. Ciphering. Handover. Radio-signal control Radio-signal measurement

coMPAss Product Training 14-15 May, Singapore Slide 31

Layer 2, Data Link Protocol.




BTS

The Data Link Protocol is used at the Um and A-bis interface, the Data Link Protocol is based on LAPD (ISDN D-channel layer 2 protocol). On the A-Interface MTP and SCCP are used as signallingtransport function. On the inter-MSC interface, MTP is used for ISUP, TUP and MTP + SCCP + TCAP is used for MAP.

coMPAss Product Training 14-15 May, Singapore Slide 32

Layer 1 Physical Link




Physical Link of the signalling is time slots in the radio carriers (TS0-7) and digital PCM (E1/T1)lines.

BTS

coMPAss Product Training 14-15 May, Singapore Slide 33

BTS

Radio (Um) Interface


Um

BTS

coMPAss Product Training 14-15 May, Singapore Slide 34

The System
ISUP / TUP

Public Switched Telephone Network (PSTN )

ISUP / TUP

Um

Authen. Centre AUC MAP

MAP

Equip. Id Register EIR MAP

BTS

Mobile Switching Centre MSC

Home Location Register HLR

Visitor Location Register VLR

MAP

Base Station Subsystem (BSS) A-bis

MAP ISUP / TUP

Mobile Switching Centre MSC

A-Inter

Base Station Controller BSC

Base Transceiver Base Station Transceiver Base BTS Station Transceiver Base Station Base BTS Transceiver Base BTS Transceiver Station Station Transceiver BTS Station BTS BTS

Mobile Station (MS)

2 Mbit/s PCM Air Interface

coMPAss Product Training 14-15 May, Singapore Slide 35

Protocol Architecture
MS
CM MM (CM) (MM) (RR) RR RR Sig. layer 2 (LAPDm) Layer 1 (air) Sig. layer 2 (LAPDm) Layer 1 (air) BTSM Sig. layer 2 (LAPD) Sig. layer 1

BTS
(CM) (MM) (RR) RR BTSM (CM) (MM)

BSC
DTAP CM (CM+MM) MM

MSC

BTS

BSSMAP SCCP

BSSMAP SCCP

I S MAP U P TCAP SCCP

Sig. layer 2 (LAPD) Sig. layer 1

MTP

MTP

MTP

Um Interface

Abis Interface

A Interface

Inter-MSC

     

DTAP - Direct Transfer Application Part BSSMAP - BSS Management Application Part CM - Call Management MM - Mobile Management RR - Radio Resource Management BTSM - BTS Management

    

SCCP - Signalling Connection Control Part MAP - Mobile Application Part TCAP - Transaction Capability Application Part ISUP - ISDN User Part MTP - Message Transfer Part

coMPAss Product Training 14-15 May, Singapore Slide 36

GSM 900 Radio (Um) Interface Physical Channels




In GSM approx. 1000 radio channels has been assigned in the 900 MHz band. More precisely:

890 - 915 MHz Uplink 935 - 960 MHz Downlink




A combination of frequency and time division is used.

124 carriers Carrier spacing is 200 kHz 8 timeslots per carrier


SONOFON M N

BTS

coMPAss Product Training 14-15 May, Singapore Slide 37

DCS-1800 Radio (Um) Interface Physical Channels




In GSM 1800 2992 radio channels has been assigned in the 1800 MHz band. More precisely:

1710 - 1785 MHz Uplink 1805 - 1880 MHz Downlink




A combination of frequency and time division is used.

374 carriers Carrier spacing is 200 kHz 8 timeslots per carrier

SONOFON M N

BTS

coMPAss Product Training 14-15 May, Singapore Slide 38

TDMA Frame Structure


13 kbit/s user data
TDMA Frame BTS Time Slot
3 TB 57 4.615 msec

0.577 msec 1 26 TS 1 C 57 3 8.25

Coded Data C

Coded Data TB GP

Duration of 1 bit: 3.692 usec


TB TS GP C : Tail bit : Training Sequence (setting up the receiver equaliser) : Guard Period : Control bit

coMPAss Product Training 14-15 May, Singapore Slide 39

Physical Channels
Traffic channels showing three timeslot delays between the down and up links.

TS7 TS3 TS6 TS2 TS 5 TS 1 TS 4 TS 0 TS 3 TS 7 TS2 TS6 TS TS 0 TS7 5 TS4 TS6 TS3 Control Channels TS 5 TS 2 TS 4 TS1 TS 3 TS 0 Control Channels TS2 TS7 TS TS 1 TS0 6 TS5 Traffic Channels

BTS

Downlink

Uplink

Eight TS, or eight physical channels compromise a FRAME

coMPAss Product Training 14-15 May, Singapore Slide 40

Radio (Um) Interface burst modulation structure Tail Information Training Information Tail Guard
Normal burst Tail Access burst 7 41 36 Training 64 Information 142 3 Information Tail Guard 39 2 8.25 Training Information Tail Guard 68,25 3 57+1 (TCH/FACCH) 26 57+ 1 (TCH/FACCH) 3 8.25

Tail Information SCH burst 3 Tail FCCH burst 3 39

Tail Guard 8.25 3

Not illustrated is the dummy burst which has the same structure as the Normal burst. The dummy burst is sent when no information is transmitted on a TCH

coMPAss Product Training 14-15 May, Singapore Slide 41

Radio (Um) Interface Normal burst


Tail Normal burst  3 Information 57+1 (TCH/FACCH) Training 26 Information 57+ 1 (TCH/FACCH) Tail Guard 3 8.25

For the Normal burst, one of the 58 information bits on each side of the training sequence is a flag bit indicating whether the burst is a TCH traffic channel (0) or for a FACCH - fast associated control channel (1). The burst is converted to FACCH when signalling is required after a TCH has been allocated.
Note: Each Normal burst (TDMA) time slot period consist of 156.25 bits (equal to
33.9 kbit/s per time slot or 270.8 kbit/s per frame carrier), of which 144 (2*57) bits are coded data including forward error correction. All information is transferred in blocks of 456bits divided into four time slot periods (456 = 4*2*57). The maximum net bit rate is 13 kbit/s (Excluding the error correction)

coMPAss Product Training 14-15 May, Singapore Slide 42

Radio (Um) Interface Access burst


Tail Access burst 7 41 36 3 Training Information Tail Guard 68,25

The access burst is a shortened burst used by the mobile station when it first access a cell. Its short length guarantees it will arrive within the correct time slot at the BTS receiver if the mobile station is no greater than 35km from the BTS.

68,25 bits * 3,Ks (1 bit) = 251Ks ~ (75Km / 2) = 37,5Km

coMPAss Product Training 14-15 May, Singapore Slide 43

Time Division Multiple Access burst




Downstream:

A series of bits intended for different users,


who must select only the one intended for him and filter out the rest


Upstream:

Individual bits from each of the users


BTS Wrong Uplink Timing
arrive at the BTS Strict timing of when the MS should transmit is required to avoid collisions at the BTS
SONOFON M SONOFON M N N

SONOFON M N

SONOFON M N

coMPAss Product Training 14-15 May, Singapore Slide 44

Timing advance (Access burst)


1 Km
TS TS

15 Km
TS TS

30 Km
TS TS

BTS
SONOFON SONOFON M N SONOFON M M N N

The transmitted radio burst from BTS must travel whatever the distance is to the mobile station , and then transmitted burst from the mobile station (three burst later) must travel back the same distance. By measuring the time between the last bit in the access burst and the last bit in the TS the mobile then know the distance to the BTS and will adjust its Timing advance to compensate for the distance.
Access burst Timing advance TS

coMPAss Product Training 14-15 May, Singapore Slide 45

Mobile Station Timing advance Measurement Report


Message Type --- Channel description --Time slot number Channel type and TDMA offset Training Sequence Code Hopping channel spare Absolute RF Channel Number --- Request reference --Random access information T1 T3 T2 --- Timing advance --Timing advance value Spare : 3Fh = Immediate assignment : .....001 : 01011... = SDCCH/8 + SACCH/C8 or CBCH (SACCH/8) : 011..... : ...0.... = Single RF channel : ....00.. : 720 :4 :7 : 19 :7 : ..000010 : 00......

Timing advance = 2 The mobile station is 1km from the BTS.

coMPAss Product Training 14-15 May, Singapore Slide 46

SCH burst
Tail Information SCH burst 3 39 64 39 2 Training Information Tail Guard 8.25

The SCH burst is the synchronization channel burst which carries the the BSIC - Base Station Identity Code and the FN - Frame Number. As this is the first burst decoded by the mobile station it has an extended training sequence.

coMPAss Product Training 14-15 May, Singapore Slide 47

FCCH burst
Tail FCCH burst 3 142 3 Information Tail Guard 8.25

The FCCH burst is the frequency correction channel burst which is modulated with zero

coMPAss Product Training 14-15 May, Singapore Slide 48

Radio (Um) Interface Logical Channels




Traffic channels (TCH):

BTS

Carrying Voice/data Bm: 13 kbit/s user data Lm: Half rate (6,5 kbit/s)


Common control channels (CCCH):

Channels that all Mobile Stations can share




Dedicated control channels (DCCH):

Control channels for individual Mobile Stations

coMPAss Product Training 14-15 May, Singapore Slide 49

Radio (Um) Interface Common Control Channels




Broadcast: BCCH

Carry system info intended for everybody, e.g. Location Area


Identity
BTS

Paging: PCH

To request a specific Mobile User to react/reply, e.g. when


there is a call for him


Random Access: RACH

Used by the Mobile Station to initiate contact with the


network, e.g. when trying to start a call


Access Granted: AGCH

Used to respond to the RACH to inform that the Mobile is


now being allowed to access the network

coMPAss Product Training 14-15 May, Singapore Slide 50

Radio (Um) Interface Dedicated Control Channels




Stand-alone Dedicated : SDCCH

Used for settling practicalities such as roaming,


BTS

authentication, encryption and call control before allocating the traffic channel


Slow Associated: SACCH

Associated to a TCH Used together with the Traffic Channel to deal with control
and measurement of radio signals


Fast Associated: FACCH

Large bandwidth version of the SACCH Used for sudden control action such as handovers Implemented a robbed bits in a TCH
coMPAss Product Training 14-15 May, Singapore Slide 51

Hyper-, Super- and Multiframes


1 hyperframe = 2048 superframes (3h 28min 53s 760ms)
0 1 2 3 4 5 6 2042 2043 2044 2045 2046 2047

1 superframe = 26 (51-frames) or 51 (26-frames) multiframes (6.12s)


0 1 2 3 4 5 6 7 18 19 20 21 22 23 24 25

0 1 2 3 4 5 6

45 46 47 48 49 50

1 (26-frame) multiframe = 26 TDMA frames (120ms)


0 1 2 3 4 5 6 7 18 19 20 21 22 23 24 25

1 TDMA frame = 8 timeslots (4.615 ms) (51-frame) multiframe = 51 TDMA frames (235.38 ms) 1
0 1 2 3 4 5 6 45 46 47 48 49 50

1 TDMA frame = 8 timeslots (4.615 ms)


coMPAss Product Training 14-15 May, Singapore Slide 52

TDMA Frame with 1 combined CCH and 7 TCH


Downlink and Uplink Cyklus: 1 TCH multiframe = 26 TDMA frames = 120 ms
Bm Bm Bm Bm Bm Bm Bm Bm Bm Bm Bm Bm SA Bm Bm Bm Bm Bm Bm Bm Bm Bm Bm Bm Bm

4.615 ms TDMA Frame (8 timeslots) Downlink: Cyklus: 1 CCH multiframe = 51 TDMA frames = 235.38 ms
F S F S BCCH BCCH PCH/AGCH F S PCH/AGCH PCH/AGCH F S PCH/AGCH F S PCH/AGCH PCH/AGCH F S F = Frequency correction burst SDCCH/1 SDCCH/1 SDCCH/2 F S SDCCH/2 F S SDCCH/3 SDCCH/3 SDCCH/4 F S SACCH/1 SDCCH/4 F S SACCH/3 SACCH/2 SACCH/4 -

Uplink:
R R SACCH/1 R R SACCH/3 R = RACH

S = Synchronisation burst SDCCH/2 R R SDCCH/3 SDCCH/2 R R SDCCH/3 SDCCH/4 SDCCH/4

SACCH/2 R R R R R R R R R R R R R R R R R R R R R R R SDCCH/1 SACCH/4 R R R R R R R R R R R R R R R R R R R R R R R SDCCH/1

coMPAss Product Training 14-15 May, Singapore Slide 53

Cell Structure
Omni-directional BTS
F1
BTS BTS

F2

Safety distance

R F3 F4

5xR F4
BTS

BTS

F5

F6

To avoid interference between two cells using the same frequency, a safety distance of about 5 times the cell radius is required. A BTS may cover one cell (Omni-directional) or several cells (typical three directional cells). Each cell may be served by on or more TRXs depending on the required capacity. Note: each TRX controls one carrier with eight TS.

3-directional BTS

coMPAss Product Training 14-15 May, Singapore Slide 54

Radio (Um) Interface Neighbour Cells




Mobile station in IDLE mode

Besides listening to the BCCH and the PCH the mobile


station is measuring for neighbour cells.

BTS

Mobile station in active mode

In active mode the mobile station is using the time


between the down and uplink TS (three TS 2ms) to do neighbour cell measuring.


The mobile station can measure up to 31 neighbour cells.

In practice the mobile station measures up to 12


neighbour cells. Very often only three or four cells are measured.

coMPAss Product Training 14-15 May, Singapore Slide 55

Mobile Station Neighbour Cells Measurement Report


--- MEAS REP ----- MEAS RES --NO NCELL M : 100b = 4 neighbour cell measurement result RXL NCEL 1 : 36 = minimum received signal level = -75 dBm to -74 dBm BCCH NCEL1 : 1 BSIC NCEL1 : 57 RXL NCEL 2 : 24 = minimum received signal level = -87 dBm to -86 dBm BCCH NCEL2 : 12 BSIC NCEL2 : 63 RXL NCEL 3 : 23 = minimum received signal level = -88 dBm to -87 dBm BCCH NCEL3 : 7 BSIC NCEL3 : 59 RXL NCEL 4 : 16 = minimum received signal level = -95 dBm to -94 dBm BCCH NCEL4 : 2 BSIC NCEL4 : 56 RXL NCEL 5 : 0 = minimum received signal level less than -110 dBm BCCH NCEL5 : 0 BSIC NCEL5 : 0 RXL NCEL 6 : 0 = minimum received signal level less than -110 dBm BCCH NCEL6 : 0 BSIC NCEL6 : 0

coMPAss Product Training 14-15 May, Singapore Slide 56

(MS) Mobile Station SIM Card




IMSI

- International Mobile subscriber Number




MSISDN

- Mobile Station ISDN Number




Latest BCCH List

The latest BCCH used last time the mobile station was
connected to the network.
  

Preferred Network List. Forbidden Network List. KI

The Key identifier refers to an authentication key for the


mobile subscriber.

coMPAss Product Training 14-15 May, Singapore Slide 57

A-bis
BTS

coMPAss Product Training 14-15 May, Singapore Slide 58

The System.
ISUP / TUP

Public Switched Telephone Network (PSTN )

ISUP / TUP

Um

Authen. Centre AUC MAP

MAP

Equip. Id Register EIR MAP

BTS

Mobile Switching Centre MSC

Home Location Register HLR

Visitor Location Register VLR

MAP

Base Station Subsystem (BSS) A-bis


Base Station Controller BSC

MAP ISUP / TUP

Mobile Switching Centre MSC

A-Inter

Base Transceiver Base Station Transceiver Base BTS Station Transceiver Base Station Base BTS Transceiver Base BTS Transceiver Station Station Transceiver BTS Station BTS BTS

Mobile Station (MS)

2 Mbit/s PCM Air Interface

coMPAss Product Training 14-15 May, Singapore Slide 59

Protocol Architecture
MS
CM MM (CM) (MM) (RR) RR RR' Sig. layer 2 (LAPDm) Layer 1 (air) Sig. layer 2 (LAPDm) Layer 1 (air) BTSM Sig. layer 2 (LAPD) Sig. layer 1

BTS
(CM) (MM) (RR) RR BTSM (CM) (MM)

BSC
DTAP CM (CM+MM) MM

MSC

BTS

BSSMAP SCCP

BSSMAP SCCP

I S MAP U P TCAP SCCP

Sig. layer 2 (LAPD) Sig. layer 1

MTP

MTP

MTP

Um Interface

Abis Interface

A Interface

Inter-MSC

     

DTAP - Direct Transfer Application Part BSSMAP - BSS Management Application Part CM - Call Management MM - Mobile Management RR - Radio Resource Management BTSM - BTS Management

    

SCCP - Signalling Connection Control Part MAP - Mobile Application Part TCAP - Transaction Capability Application Part ISUP - ISDN User Part MTP - Message Transfer Part

coMPAss Product Training 14-15 May, Singapore Slide 60

A-bis (A) Layer 1 Structures


64 kbit/s signalling channels

TS 0

TS 1

TS 2

TS 3

TS 4

TS 5

----

TS 31

TS = 64 kbit/s timeslot
BTS

16 kbit/s traffic channels

One 2Mbit/s line may cover several BTSs. This means that normally several time slots in the same PCM frame are used as signalling channels.
Three time slots divided into one 64Kbit/s signalling channel and eight 16Kbit/s traffic channels are sufficient to cover one TRX, giving up to 10 TRXs and 10 signaling channels per 2 Mbit/s. In practice , the configuration of the transmission lines depends on the actual network structure and the GSM equipment used.
coMPAss Product Training 14-15 May, Singapore Slide 61

A-bis Layer 2 Structure


Flag 01111110 Address 16 Bits Control 8 or 16 Bits Information N - Bits CRC 16 Bits Flag 01111110

BTS

SAPI TEI

C/R

EA 0 EA 1

SAPI -Service Access Point Identifier TEI - Terminal End Point Identifier C/R -Command / Response bit EA -Address Extension bit 0 = Extend 1 = Final

SAPI value 0 1 16 62 63 All others

Related entity Radio signalling Reserved for packet mode /Q.931 Reserved for packet mode /X.25 Operation and maintenance Layer 2 management Reserved for future standardisation

TEI value 0-63 64-126

User type For fixed TRX addresses For additional TRX addresses

Not used in GSM Vendor-specific

coMPAss Product Training 14-15 May, Singapore Slide 62

A-bis Layer 2 Control Field


OCTET 1 OCTET 2 + 3 Flag 01111110 Address 16 Bits OCTET 4 ( + 5 ) Control 8 or 16 Bits Information N - Bits CRC 16 Bits OCTET N Flag 01111110

BTS

Control field bits 8 ( modulo 8 ) I format S format U format

7 N(R) N(R)

5 P

3 N(S) S

1 0 1 1 OCTET 4 OCTET 4 OCTET 4

Control field bits 8 ( modulo 128 ) I format X

1 0 OCTET 4 5 OCTET 4 5 OCTET 4

N(S) X X N(R) X S S N(R) M M M P/F M M 1 0

P 1 P/F 1

P/F S

S format U format

M M M P/F M

M 1

I forma - Information transfer format Used for information transfer between layer 3 entities S format - Supervisory format Used for control functions U format - Unnumbered format Used for additional control functions and information transfer

N(S) - Transmitter send sequence number N(R) - Transmitter receive sequence number S -Supervisory function bit M -Modifier function bit P/F - Poll bit when issued as a command Poll bit when issued as a command Final bit when issued as a response X - Reserved and set to 0

coMPAss Product Training 14-15 May, Singapore Slide 63

A-bis Information Elements, part 1


- Channel number - Link identifier - Activation type - BS power - Channel identification - Channel mode speech) - Encryption information - Frame number - Handover reference - L1 information - L3 information - MS identity - MS power - Paging group - Paging load - Physical context - Access delay - RACH load - Request reference (Indicates channel on radio interface) (Signalling link and SAPI used on radio interface) (Intra-cell, inter-cell or additional assignment CHAN ACTIV) (BTS/TRX power level) (Description of channels allocated to MS) (Indicates discontinuous transmission and channel type, e.g. (Encryption algorithm and key) (On radio interface, modulo 42432) (Identical to handover reference in RR information elements) (MS power level and timing advance) (Contains transparent RR, MM or CM message) (IMSI or TMSI) (MS power level) (Identifies MS paging group) (Load on paging channel, PCH) (Not specified) (Delay of MS access burst at random access or handover) (Load of random access channel, RACH) (Random ref. in RR Channel Request message)

coMPAss Product Training 14-15 May, Singapore Slide 64

A-bis Information Elements, part 2


- Release mode (Normal release or local end release) - Resource information (Interference level for idle TRX channels) - RLM cause (Indicates protocol error on radio link layer) - Starting time (Expressed as Frame Number modulo 42432) - Timing advance (To be used by MS in subsequent communications) - Uplink measurements (Radio signal measurement results from TRX) - Cause (Reason for event/failure) - Measurement result num (For a radio channel; set to 0 at activation) - Message identifier (In ERROR REPORT message: Message type of errored message) - Message indicator (In ERROR REPORT message: Copy of errored message follows) - System info type (Type of RR System Information message) - MS power parameters (Limits set by BSC for BTS control of MS power) - BS power parameters (Limits set by BSC for BTS control of TRX power) - Preprocessing param. (For preproc. of radio measurement data in BTS) - Preprocessed measurements (Preprocessed radio measurement data) - Immediate assign info (Conveys complete RR Immediate Assign msg.) - SMSCB information (SMS-message to be broadcasted in a radio cell)

coMPAss Product Training 14-15 May, Singapore Slide 65

A-Interface
BTS

coMPAss Product Training 14-15 May, Singapore Slide 66

The System.
ISUP / TUP

Public Switched Telephone Network (PSTN )

ISUP / TUP

Um

Authen. Centre AUC MAP

MAP

Equip. Id Register EIR MAP

BTS

Mobile Switching Centre MSC

Home Location Register HLR

Visitor Location Register VLR

MAP

Base Station Subsystem (BSS) A-bis


Base Station Controller BSC

MAP ISUP / TUP

Mobile Switching Centre MSC

A-Inter

Base Transceiver Base Station Transceiver Base BTS Station Transceiver Base Station Base BTS Transceiver Base BTS Transceiver Station Station Transceiver BTS Station BTS BTS

Mobile Station (MS)

2 Mbit/s PCM Air Interface

coMPAss Product Training 14-15 May, Singapore Slide 67

Protocol Architecture
MS
CM MM (CM) (MM) (RR) RR RR' Sig. layer 2 (LAPDm) Layer 1 (air) Sig. layer 2 (LAPDm) Layer 1 (air) BTSM Sig. layer 2 (LAPD) Sig. layer 1

BTS
(CM) (MM) (RR) RR BTSM (CM) (MM)

BSC
DTAP CM (CM+MM) MM

MSC

BTS

BSSMAP SCCP

BSSMAP SCCP

I S MAP U P TCAP SCCP

Sig. layer 2 (LAPD) Sig. layer 1

MTP

MTP

MTP

Um Interface

Abis Interface

A Interface

Inter-MSC

     

DTAP - Direct Transfer Application Part BSSMAP - BSS Management Application Part CM - Call Management MM - Mobile Management RR - Radio Resource Management BTSM - BTS Management

    

SCCP - Signalling Connection Control Part MAP - Mobile Application Part TCAP - Transaction Capability Application Part ISUP - ISDN User Part MTP - Message Transfer Part

coMPAss Product Training 14-15 May, Singapore Slide 68

A-Interface

BTS

Based on System7 MTP and SCCP Uses Base Station Subsystem Application Part (BSSAP)

BSS Management Application Part (BSSMAP)


Radio Resource (RR) and BSC management Uses SCCP connectionless service Direct Transfer Application Part (DTAP) Transfer of Call Control (CM) messages Transfer of Mobility Management (MM) messages Uses SCCP connection-oriented service

coMPAss Product Training 14-15 May, Singapore Slide 69

Basic format of SCCP message


F CK SIF Label SIO LI F B I FSN I B B BSN F

Sub-service Field

Service Indicator

0011

SCCP User Data N x 8 bits

Message type

SLS

8 bits 4 bits

Originating Destination Point Code Point Code 14 bits 14 bits

Mandatory fixed part Mandatory variable part Optional part

coMPAss Product Training 14-15 May, Singapore Slide 70

SCCP Message Types


Protocol 0 class 3 1 2
X X X X X X X X X X X X X X X X X X X X X X X CR CC CREF RLSD RLC DT1 DT2 AK UDT UDTS ED EA RSR RSC ERR IT

Message type
Connection Request Connection Confirm Connection Refused Released Release Complete Data Form 1 Data Form 2 Data Acknowledgement Unitdata Unitdata Service Expedited Data Expedited Data Acknowledgement Reset Request Reset Confirm Protocol Data Unit Error Inactivity Test

Code
0000 0001 0000 0010 0000 0011 0000 0100 0000 0101 0000 0110 0000 0111 0000 1000 0000 1001 0000 1010 0000 1011 0000 1100 0000 1101 0000 1110 0000 1111 0001 0000

X X

coMPAss Product Training 14-15 May, Singapore Slide 71

SCCP Message Types, Class 0 and 2.




UDT (Unitdata) Class 0

Used by a SCCP wanting to send data in a connectionless


mode.
BTS

DT1 (Data Form 1) Class 2

A Data Form 1 message is sent by either end of a signalling


connection to pass transparently SCCP user data between two SCCP nodes.


Note: Only point to point signalling route is used in at the A-inter phase, meaning that the MTP does not have to contain the functions related to the signalling transfer point (STP) and multiple signallingroute management.

coMPAss Product Training 14-15 May, Singapore Slide 72

A-Interface BSSAP
BTS

coMPAss Product Training 14-15 May, Singapore Slide 73

Base Station Subsystem Application Part (BSSAP)


BTS

ETSI has specified an SS7 Base Station Subsystem Application Part (BSSAP) as the user of the SCCP/MTP transport service.

SCCP subsystem number for BSSAP is FEh.

coMPAss Product Training 14-15 May, Singapore Slide 74

BSSAP messages Structure


F CK SIF
OCTET

SIO 83h LI

F B I FSN I B B

BSN F

Discriminator 00000000

Discriminator 00000001 DLCI

SCCP Header SSN FEh: BSSAP


DLCI Data Link Connection Identifier Bit no.: 8 7 6 5 4 3 2 1 C2 C1 0 0 0 S3 S2 S1 C2 C1 identifies signalling-radio channel (00: SDCCH/FACCH, 01: SACCH) S3-S1 is the SAPI on the radio interface

Length Indicator 1 Layer 3 Messages Octet


BSSMA P

Length Indicator 1

Layer 3 n Um Interface Octet


DTAP

coMPAss Product Training 14-15 May, Singapore Slide 75

A-Interface BSSMAP
BTS

coMPAss Product Training 14-15 May, Singapore Slide 76

BSSMAP Format

Information Element Identifier


BTS

Disc. 0 = BSSMAP Length indicator

OCTET 1 OCTET 2

Content of Information Elements

Fixed Length Info. Element Format

BSSMAP message type BSSMAP message


OCTET n

Information Element Identifier Length of Information Elements Content of Information Elements

Variable Length Info. Element Format

coMPAss Product Training 14-15 May, Singapore Slide 77

BSSMAP Messages, part 1


Code Message type

0000- - - 0001 0010 0011 0010- - - 0000 0001 0010 0011 0100 0101

Assignment messages:(Setup of traffic channels) - Assignment request - Assignment complete - Assignment failure Release messages: - Clear command (Release of traffic channels) - Clear complete - Clear request - SAPI "n" clear command (Control of layer 2 links with SAPI not equal - SAPI "n" clear complete to 0 on the radio interface) - SAPI "n" reject

coMPAss Product Training 14-15 May, Singapore Slide 78

BSSMAP Messages, part 2


Code Message type

0001- - - 0000 0001 0010 0011 0100 0110 0111 1000 1001 1010 1011

Handover messages: - Handover request - Handover required - Handover request ack - Handover command -

(To BSC: Request for handover to that BSC) (To MSC: Inter-BSC/MSC handover required) (To MSC: Acknowledge of Handover request) (To BSC: Contains the new radio channel/BTS to which the MS should switch) Handover complete (To MSC: Commanded handover complete) Handover failure (To MSC: Commanded handover unsuccessful) Handover performed (To MSC: BSC has performed intern. handover) Handover candidate (To BSC: MSC requests list of MS that could enquire be handed over to another cell) Handover candidate (To MSC: Answer to Handover candidate response enquire) Handover required reject (To BSC: Required handover unsuccessful) Handover detect (To MSC: Commanded handover successful)

coMPAss Product Training 14-15 May, Singapore Slide 79

BSSMAP Messages, part 3


Code Message type

0011- - - 0000 0001 0010 0011 0100 0101

General messages: - Reset - Reset Acknowledge - Overload - Trace invocation - Reset Circuit - Reset Circuit acknowledge

(Initialisation of BSS or MSC due to failure) (Processor or CCCH overload) (Start production of trace record) (Initialisation of single circuit due to failure)

0100- - - 0000 0001 0010 0011

Terrestrial resource messages: - Block (Management of circuits/time slots - Blocking acknowledge between MSC and BTS) - Unblock - Unblocking acknowledge

coMPAss Product Training 14-15 May, Singapore Slide 80

BSSMAP Messages, part 4


Code Message type

0101- - - 0000 0001 0010 0011 0100 0101 0110 0111

Radio resource messages: - Resource request - Resource indication - Paging - Cipher mode command - Classmark update - Cipher mode complete - Queuing indication Complete layer 3 information

(Available radio channels in the BSS cells) (Paging of MS) (Commands start of cyphering) (Change of MS power class) (Ciphering is successfully initiated) (Indicates delay in assignment of traffic channel) (Contains first message received from MS; sets up SCCP-connection at A-interface)

coMPAss Product Training 14-15 May, Singapore Slide 81

A-Interface DTAP
BTS

coMPAss Product Training 14-15 May, Singapore Slide 82

Direct Transfer Application sub-Part


(DTAP)


BTS

The Direct Transfer Application sub-Part (DTAP) is used to transfer call control and mobility management messages to and from the MS;

The layer-3 information in these messages is not


interpreted by the BSS.

coMPAss Product Training 14-15 May, Singapore Slide 83

DTAP Format

Information Element Identifier


BTS

Disc. 1 = DTAP Length indicator

OCTET 1 OCTET 2

Content of Information Elements

Fixed Length Info. Element Format

BSSMAP message type BSSMAP message


OCTET n

Information Element Identifier Length of Information Elements Content of Information Elements

Variable Length Info. Element Format

coMPAss Product Training 14-15 May, Singapore Slide 84

DTAP messages and elements


BTS

Layer 3 of the DTAP messages has the same format as BSSMAP messages. The DTAP messages and information elements are identical to the the transparent MM and CM listed in the A-bis section.

coMPAss Product Training 14-15 May, Singapore Slide 85

BSC

MSC

SCCP CR (BSSMAP Comp layer 3 info (CM Service Request [MM])) SCCP CC (BSSMAP Cipher mode command) SCCP DT1 (BSSMAP Cipher mode complete) SCCP DT1 (DTAP (Setup [CM])) SCCP DT1 (DTAP (Call Proceeding [CM])) BTS SCCP DT1 (BSSMAP Assignment request)

A-Interface signalling example

SCCP DT1 (BSSMAP Assignment complete) SCCP DT1 (DTAP (Alerting [CM])) SCCP DT1 (DTAP (Connect [CM])) . . Active . . SCCP DT1 (DTAP (Disconnect [CM])) SCCP DT1 (DTAP (Release [CM])) SCCP DT1 (DTAP (Release Complete [CM])) SCCP DT1 (BSSMAP Clear command) SCCP DT1 (BSSMAP Clear complete) SCCP RLSD SCCP RLC

call

. . . .

coMPAss Product Training 14-15 May, Singapore Slide 86

BTS

Inter-MSC Signalling MAP

coMPAss Product Training 14-15 May, Singapore Slide 87

The System.
ISUP / TUP

Public Switched Telephone Network (PSTN )

ISUP / TUP

Um

Authen. Centre AUC MAP

MAP

Equip. Id Register EIR MAP

BTS

Mobile Switching Centre MSC

Home Location Register HLR

Visitor Location Register VLR

MAP

Base Station Subsystem (BSS) A-bis


Base Station Controller BSC

MAP ISUP / TUP

Mobile Switching Centre MSC

A-Inter

Base Transceiver Base Station Transceiver Base BTS Station Transceiver Base Station Base BTS Transceiver Base BTS Transceiver Station Station Transceiver BTS Station BTS BTS

Mobile Station (MS)

2 Mbit/s PCM Air Interface

coMPAss Product Training 14-15 May, Singapore Slide 88

Protocol Architecture
MS
CM MM (CM) (MM) (RR) RR RR' Sig. layer 2 (LAPDm) Layer 1 (air) Sig. layer 2 (LAPDm) Layer 1 (air) BTSM Sig. layer 2 (LAPD) Sig. layer 1

BTS
(CM) (MM) (RR) RR BTSM (CM) (MM)

BSC
DTAP CM (CM+MM) MM

MSC

BTS

BSSMAP SCCP

BSSMAP SCCP

I S MAP U P TCAP SCCP

Sig. layer 2 (LAPD) Sig. layer 1

MTP

MTP

MTP

Um Interface

Abis Interface

A Interface

Inter-MSC

     

DTAP - Direct Transfer Application Part BSSMAP - BSS Management Application Part CM - Call Management MM - Mobile Management RR - Radio Resource Management BTSM - BTS Management

    

SCCP - Signalling Connection Control Part MAP - Mobile Application Part TCAP - Transaction Capability Application Part ISUP - ISDN User Part MTP - Message Transfer Part

coMPAss Product Training 14-15 May, Singapore Slide 89

Inter-MSC Signalling


The inter-MSC interfaces are:

BTS

The MSC-VLR interface. The MSC-HLR interface. The HLR-VLR interface. The MSC-MSC interface. The MSC-EIR interface. The VLR-VLR interface. The MSC-ISDN/telephone network interface.

coMPAss Product Training 14-15 May, Singapore Slide 90

MAP


MAP = Mobile Application Part Users: MSC, HLR, VLR, EIR Applications:

BTS

Location updating/roaming Incoming call routing information (MSRN) Subscriber service information Non-call related supplementary services Short message service delivery MS equipment identity (IMEI) Charging information

coMPAss Product Training 14-15 May, Singapore Slide 91

MAP Operations Part 1


Value 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 Operation Update location area Update location Cancel location Provide roaming number Detach IMSI Attach IMSI Insert subscriber data Delete subscriber data Send parameters Register SS Erase SS Activate SS Deactivate SS Interrogate SS Invoke SS Forward SS notification Register password Get password Process unstructured data

BTS

coMPAss Product Training 14-15 May, Singapore Slide 92

MAP Operations Part 2


Value 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 Operation Send info for incoming call Send info for outgoing call Send routing information Complete call Connect to following address Process call waiting Page Search for mobile subscriber Perform handover Send end signal Perform subsequent handover Allocate handover number Send handover report Process access signalling Forward access signalling Note internal handover Register charging information Reset Forward check SS indication

BTS

coMPAss Product Training 14-15 May, Singapore Slide 93

MAP Operations Part 3


Value 39 40 41 42 43 45 46 47 48 49 50 51 52 53 54 Operation Authenticate Provide IMSI Forward new TMSI Set ciphering mode Check IMEI Send routing info for SM Forward short message Set message-waiting data Note MS present Alert service centre Activate trace mode Deactivate trace mode Trace subscriber activity Process access request Begin subscriber activity

BTS

coMPAss Product Training 14-15 May, Singapore Slide 94

Visited side
BEGIN INVOKE
BTS

Home side

(Update Location)

CONTINUE INVOKE CONTINUE RETURN RESULT (Insert Subscriber Data) END RETURN RESULT (Update Location) (Insert Subscriber Data)

MAP - signalling Location Updating example

coMPAss Product Training 14-15 May, Singapore Slide 95

TRAU
Transcoder BTS Rate Adaptation Unit

coMPAss Product Training 14-15 May, Singapore Slide 96

TRAU


TRAU - Transcoder / Rate Adaptation Unit Functions:

Conversion of speech from 64 kbit/s on PCM (A-law) to 13/6.5


BTS

kbit/s on the GSM radio interface Intermediate rate adoption of data from V.110 frames to the special TRAU frames on the A-bis interface

coMPAss Product Training 14-15 May, Singapore Slide 97

Possible Locations of the TRAU.


BTS
T R A U

BSC

MSC

BTS

BSC

T R A U

MSC

BTS

BSC

T R A U

MSC

Um

A-bis

A-Interface

13Kbit/s speech channel

coMPAss Product Training 14-15 May, Singapore Slide 98

GSM Speech Encoding


 
BTS

Bandwidth: 13 kbit/s Encoding algorithm: Regular Pulse Excitation with Long Term Prediction (RPE LTP):

Speech is sampled 8000 times per second Each sample is converted into a 13 bit digital value Every 20 ms a 260 bit segment is generated (13 kbit/s) The segment is divided by importance into 182 class 1 bits and 78 class 2 bits For protection, the 182 class 1 bits are mapped into 378 bits The resulting 456 bits (378 + 78) are divided into 8x57 bits The data are transmitted in 4 consecutive TDMA blocks

Resulting overall delay is 57.5 msec.

coMPAss Product Training 14-15 May, Singapore Slide 99

Control of TRAU


BTS

TRAU is controlled by BTS In-band signalling used, if TRAU not at BTS Control functions:

Shift between speech and data Shift between full rate and half rate channels Timing of speech frames (BSS - MS) Comfort noise (Discontinuous Transmission)

coMPAss Product Training 14-15 May, Singapore Slide 100

BTS

GSM Signalling procedures

coMPAss Product Training 14-15 May, Singapore Slide 101

Special signalling procedures for GSM




Call Management

Ordinary Call Control (as usual)



BTS

Mobility Management

Location Updating (Roaming) Authentication




Radio Resource Management

Paging Network Access Encryption Radio Signal Control Radio Signal Measurements Handover

coMPAss Product Training 14-15 May, Singapore Slide 102

Location Updating (Roaming)


 

VLR

An MM procedure Reasons for roaming:

MSC

Area 1

MS has detected that it has entered


into a new location area (by listening to Broadcast system info)


Types of roaming:

Inside same VLR area


The HLR does not need to know Another VLR area In this case the HLR is informed
BTS

BTS

BTS

SONOFON M N

VLR
BTS

MSC Area 2

coMPAss Product Training 14-15 May, Singapore Slide 103

Handovers.
 

 
BTS BTS

A RR procedure The Handover process is the situation where a Mobile Station changes from being served by one Antenna to another Handovers take place during a call Handover are done automatically Crossing the boundary of two adjacent cells is the typical example of a Handover

coMPAss Product Training 14-15 May, Singapore Slide 104

Handovers.


Major types of handovers

Intra BSC Inter BSC Inter MSC




MSC - A

Inter MSC MSC - B

Purpose of handover

Inter BSC

Poor quality connection


Avoid loosing contact to the mobile station Fault in the MS or BTS/BSC Network management

Intra BSC

BSC

BSC BSC
SONOFON M N

BTS BTS
SONOFON M N SONOFON M N

BTS

BTS

coMPAss Product Training 14-15 May, Singapore Slide 105

Call Setup
A CM procedure Distinguish two types

 
BTS

Mobile Terminating Call


i.e. a call from the fixed network to a Mobile Station Mobile Originating Call i.e. a call from a Mobile Station to the fixed network

coMPAss Product Training 14-15 May, Singapore Slide 106

Mobile Terminating Call


BTS

Problems and answers

Where in the world is the Mobile Station


Look it up in the HLR (The HLR may have to ask the VLR) How to Make the Mobile Station Aware that a call is waiting Page it in the cell where it is located What does the MS do when being paged ? Asks for a Radio channel Tells the system that it is ready


Now the usual setup flow follows

coMPAss Product Training 14-15 May, Singapore Slide 107

Incoming Call
MS BTS BSC MSC VLR HLR GMSC ISDN
IAM (MSISDN, service)

Send Routing Info (MSISDN) Provide Roaming Number (IMSI) Roaming Number (MSRN) Routing Info (MSRN) IAM (MSRN, service) Send Info Incoming Call (MSRN, service) Paging Request (TMSI) [RR] Page (IMSI, TMSI, LAI)

Channel Request [RR] Immediate Assign [RR] Paging Response (TMSI) [RR] Page Result SETUP (service) [CM] Call Confirm [CM] Assign Command [RR] Assign Req [RR] Assign Complete [RR] Alerting [CM] Connect [CM] Connect Ack [CM] Complete Call (service)

ACM ANM Complete Call Result


Um/A-bis/A signalling MAP signalling ISUP/TUP signalling

coMPAss Product Training 14-15 May, Singapore Slide 108

Mobile Originating Call


BTS

Problems and Answers

How the mobile gets in contact with the network


Switch the MS on Request a channel Tell the network what kind of service is wanted How does the network respond Verifies the Mobile identity (authentication) Assigns a traffic channel


And then everything proceed as usual

coMPAss Product Training 14-15 May, Singapore Slide 109

Outgoing Call from MS


MS BTS
Channel Request/Required [RR] Immediate Assign [RR] CM Service Req (IMSI, transact) [MM] CM copy [MM] Authentication Request (RAND) [MM] Authentication Response (SRES) [MM] Ciphering Mode Mode Complete [RR] Ciphering Command (key) [RR] SETUP (service, called number) [CM] Call Proceeding [CM]Command Assign Request Assign [RR] [RR] Assign Complete [RR] Alerting Connect [CM] [CM] Connect Ack [CM] Process Access Request Authenticate (RAND) Authentication Response (SRES) Set ciphering mode (key) Access Request Ack Send info Complete for o/g (service, called number) call

BSC

MSC

VLR

ISDN

IAM ACM ANM

Um/A-bis/A signalling MAP signalling ISUP/TUP signalling

coMPAss Product Training 14-15 May, Singapore Slide 110

You might also like