Bule Hora University

College of Informatics
Department of Computer Science
1

Wireless Communication and

Mobile Computing /CoSc3062/
Unit Four
Cellular Networks
Compiled by Biniyam A.

12/7/2021
Cellular Networks
2

12/7/2021
 Outline
3

 Introduction to Cellular Networks

 History of Cellular Networks
 Generations of Cellular Networks
 Fundamentals of Cellular Networks
 Cellular System Services
 Components of Cellular Networks
 Components of Cellular Phone
 Call processing in Cellular Network
 Global System for Mobile Communications (GSM)
 GSM Characteristics
 GSM Architecture
 Handover in GSM
 GSM Roaming
 Localization
 Ethiopian Telecommunications Corporation (Ethiotelecom)
 GSM Call Processing
 GSM Security

12/7/2021
 Introduction to Cellular Network
4

 Cellular Network
 Is a communication network in which the link connecting two
or more devices is wireless.
 Is also called mobile network.
 Is a radio network distributed over land through cells where
each cell includes a fixed location transceiver known as base
station.
 Is the network that is distributed over land areas called cells,
each served by at least one fixed-location transceiver, known
as a cell site or base station. This base station provides the cell
with the network coverage which can be used for transmission
of voice, data and others.
 Is the realisation of the “anytime, anywhere, anyone” concept.
12/7/2021
 History of Cellular Network
5

 In 1979 the first commercial cellular phone service was launched by the
Nordic Mobile Telephone (in Finland, Sweden, Norway, Denmark). Then
after;
 From voice communication to voice and data communication. (service)
 From circuit switching to packet switching. (In case of technology).
 Circuit Switching: is a method of implementing a telecommunications
network in which two network nodes establish a dedicated communication
channel through the network. Example early day communication through
operators.
 Packet Switching: a means of directing digitally encoded information in a
communication network from its source to its destination, in which
messages may be divided into smaller entities called packets, each of
which travels independently through the network in paths.
 Then after the time being, Global Positioning System (GPS) and Global
System for Mobile Communications (GSM) were emerged.
 Lastly, the concept of the realisation of “anytime, anywhere, anyone” came.
12/7/2021
History of Cellular Network
6

Evolution of Cellular Network Development

12/7/2021
 Generations of Cellular Networks
7
Data Rates
2Mbps

3G
1Mbps (144Kbps to 2Mbps)

100Kbps 2.5G
(10-150Kbps)

10Kbps
2G
(9.6Kbps)
1Kbps
1G
(<1Kbps)

1980 1990 2000 2010

12/7/2021
 Fundamentals of Cellular Network
8

 Cellular Network Cells

 the entire network coverage area is divided into cells based on the
principle of frequency reuse.
 a cell = basic geographical unit of a cellular network;
 is the area around an antenna where a specific frequency range is
used;
 is represented graphically as a hexagonal shape, but in reality it is
irregular in shape.
 when a subscriber moves to another cell, the antenna of the new cell
takes over the signal transmission.
 a cluster is a group of adjacent cells, usually 7 cells; no frequency
reuse is done within a cluster.
 the frequency spectrum is divided into subbands and each subband is
used within one cell of the cluster.
 Remember that in heavy traffic zones cells are smaller, while in
isolated zones cells are larger. 12/7/2021
 Fundamentals of Cellular Network
9

 Cell Design
 Cell design (around 10 mile radius)
 Served by base station consisting of transmitter, receiver,
and control unit
 Base station (BS) antenna is placed in high places
(churches, high rise buildings) -
 Operators pay around $500 per month for BS
 10 to 50 frequencies assigned to each cell
 Cells set up such that antennas of all neighbors are
equidistant (hexagonal pattern)
 In North America, two 25-MHz bands allocated to AMPS
 One for transmission from base to mobile unit
 One for transmission from mobile unit to base
12/7/2021
 Fundamentals of Cellular Network
10

• Cell Design
• Cells grouped into a cluster of seven
• Letters indicate frequency use
• To add more users, smaller cells (microcells) are used
• Frequencies may not need to be different in CDMA (soft
handoff).

12/7/2021
 Fundamentals of Cellular Network
11

 Types of cells
1. femtocell – smallest unit of the hierarchy; – Covers only few
meters where devices are in the physical range of the user.
Sometimes called Home cell. Example WPANs.
2. picocell – covers areas such as building or a tunnel; i.e. covers
few tens of meters. Example. WLAN
3. microcell – their coverage is small (half a mile in diameter) and
are used in urban zones; low-powered transmitters and
receivers are used to avoid interference with cells in another
clusters.
4. macrocell – their coverage is large (aprox. 6 miles in diameter);
used in remote areas, high-power transmitters and receivers are
used.
5. Megacell – national wide coverage. Sometimes it is called
Satellite cell. Example. Satellite system

12/7/2021
Fundamentals of Cellular Network
12

Graphical representation of cell types 12/7/2021

 Fundamentals of Cellular Network
13

 Approaches to Increase Capacity

 When we say approaches to increase capacity it
deals with how to accommodate many users in a
given cell.
Adding/reassigning channels - some channels
are not used.
Frequency borrowing – frequencies are taken
from adjacent cells by congested cells. In this
case high traffic cells borrows channel from low
traffic cells.
Cell splitting – cells in areas of high usage can be
split into smaller cells. But this decreases the
transmission power.
12/7/2021
 Cellular System Services
14

 Services given by cellular networks are:

Voice communication
Data communication
Short Messaging Service (SMS)
Multimedia Messaging Service (MMS)
Global Positioning System (GPS)
Wireless Application Protocol (WAP)

12/7/2021
 Global System for Mobile Communications (GSM)
15

 Global System for Mobile Communications (GSM) is a

second generation cellular standard developed to give
voice services and data delivery using digital modulation.
 What makes GSM different from other networks
 Previous standard in cellular communication were
restrictive.
 GSM – global digital standard for cellular phones that
offered roaming facility.
 GSM operate in frequency bands: 900MHz, 1800 MHz,
1900 MHz
 GSM provides voice and other data services.

12/7/2021
 Performance Characteristics of GSM
16

 Comparing to First generation Network

 Communication
 mobile, wireless digital communication; support for voice and data
services
 Total mobility
 international access, chip-card enables use of access points of different
providers
 Worldwide connectivity
 one number, the network handles localization
 High capacity
 better frequency efficiency, smaller cells, more customers per cell
 High transmission quality
 high audio quality
 uninterrupted phone calls at higher speeds (e.g., from cars, trains) –
better handoffs and
 Security functions 12/7/2021
GSM Architecture
17

12/7/2021
GSM Architecture
18

12/7/2021
 GSM Architecture
19

1. Mobile Station (MS)

Subscriber Identity Module (SIM)
Mobile Equipment (ME)
2 Base Station Subsystem (BSS)
Base Transceiver Station (BTS)
Base Station Controller (BSC)
3 Network Switching Subsystem(NSS)
Mobile Switching Center (MSC)
Home Location Register (HLR)
Visitor Location Register (VLR)
Authentication Center (AUC)
Equipment Identity Register (EIR)
12/7/2021
 GSM Architecture
20

 Mobile Station (MS) - is a device which is

composed of all users equipment and
software needed for communication with a
mobile network.
 is made up of two entities:

1. Subscriber Identity Module (SIM)

2. Mobile Equipment (ME)

12/7/2021
 GSM Architecture
21

1. Subscriber Identity Module (SIM) card

 SIM – Smart card contains the International
Mobile Subscriber Identity (IMSI).
 SIM – a memory card (integrated circuit) holding
identity information, phone book etc.
 Allows user to send and receive calls and receive
other subscribed services.
 Protected by a password or PIN.

 Can be moved from phone to phone – contains

key information to activate the phone
12/7/2021
 GSM Architecture
22

 International Mobile Subscriber Identity (IMSI) key

 IMSI – an n-digit unique number provided by the service
provider and incorporated in the SIM card which identifies the
subscriber.
 IMSI enables a service provider to link a phone number with a
subscriber
 first 3 digits of the IMSI are the country code.
 Example. Phone number “ +251917111213 ”
 country code (CC)……… (+251) Ethiopia.
 National Destination code (NDC)…. ( 917 )western
region.
 Subscriber number (SN)………………..(111213) individual.

12/7/2021
 GSM Architecture
23

 Temporary Mobile Subscriber Identity (TMSI) key

 TMSI – is a temporary number, shorter than the IMSI,
assigned by the service provider to the phone on a
temporary basis.
 TMSI key identifies the phone and its owner in the
cell it is located; when the phone moves to a
different cell it gets a new TMSI key.
 as TMSI keys are shorter than IMSI keys they are
more efficient to send.
 TMSI key are used for securing GSM networks.

12/7/2021
 GSM Architecture
24

 International Mobile Equipment Identity (IMEI) key

 IMEI – a unique 15 digit number identifying each
phone, is incorporated in the cellular phone by the
manufacturer.
 IMEI ex.: 994456245689001
 when a phone tries to access a network, the service
provider verifies its IMEI with a database of stolen
phone numbers; if it is found in the database, the
service provider denies the connection
 the IMEI is located on a white sticker/label under the
battery, but it can also be displayed by typing *#06#
on the phone.

12/7/2021
 GSM Architecture
25

2. Mobile Equipment
 Portable,vehicle mounted, hand held device.
 Uniquely identified by an IMEI (International
Mobile Equipment Identity).
 Voice and data transmission
 Monitoring power and signal quality of
surrounding cells for optimum handover
 Power level : 0.8W – 20 W
 160 character long SMS.

12/7/2021
 GSM Architecture
26

 Base Station Subsystem - is composed of two parts that communicate

across the standardized interface allowing operation between
components made by different suppliers.
1. Base Transceiver Station (BTS) – main component of a cell and it
connects the subscribers to the cellular network.
 communicates with Mobile station and BSC.
 Encodes, encrypts, multiplexes, modulates and feeds the RF signals
to the antenna.
2. Base Station Controller (BSC) – it is an interface between BTSs and
it is linked to BTSs by cable or microwave links.
 it routes calls between BTSs; it is also connected to the MSC

 It communicates with MSC and BTS.

 Manages Radio resources for BTS.

 Assigns Frequency and time slots for all MS’s in its area.
12/7/2021
 GSM Architecture
27

 Network Switching Subsystem (NSS)

1. Mobile Switching Center (MSC) – the coordinator of a cellular network.
 Heart of the network, & it is connected to several BSCs.
 it routes calls between BSCs, & Billing information and collection.
 links the cellular network with other networks like PSTN through fiber
optics, microwave or copper cable.
2. Home Location Register (HLR) - is a database maintained by the service
provider containing permanent data about each subscriber.
3. Visitor Location Register (VLR) – database that stores temporary data
about a subscriber.
4. Authentication Center (AUC) – Protects against intruders in air interface.
- Maintains authentication keys and algorithms and provides security.
- Generally associated with HLR
5. Equipment Identity Register (EIR) – database located near the MSC and
containing information identifying cell phones.
12/7/2021
 GSM Architecture
28

 Generally, the architecture of GSM are organized from:

1. Mobile Station,
2. Base Station Subsystem, and
3. Network Subsystem.
 There is one BTS per cell.
 One BSC can control multiple BTS.
 BSC:
 allocates radio channels among BTSs.

 Manages call handoffs between BTSs.

 Mobile Switching Center (MSC) connects to PSTN and switches

calls between BSCs. Provides mobile registration, location,
authentication. Contains Equipment Identity Register.
12/7/2021
 GSM Architecture
29

 Home Location Register (HLR) and Visitor Location

Register (VLR) provide call routing and roaming.
 VLR + HLR + MSC functions are generally in one
equipment.
 Equipment Identity Register (EIR) contains a list of all
valid mobiles.
 Authentication Center (AuC) stores the secret keys of
all SIM cards; used to protect user identity and data
transmission.
 Each handset has an International Mobile Equipment
Identity (IMEI) number. You can get the IMEI of your
device by dialing *#06#. 12/7/2021
 Handover in GSM
30

 Handover – moving a call from one zone to another zone due to

subscriber’s mobility. Remember that when we say zone, it is cell.
 Changing the point of connection while communicating.

 A situation that occurs when mobile station switches from one radio
resources to another set.

 Types of handover
 Hard Handover – old connection is broken before new connection is
activated.
12/7/2021
 Soft Handover – new connection is activated before the old one is
 GSM Roaming
31

 Roaming – allowing the subscriber to send/receive calls outside

the service provider’s coverage area.
 The ability for a cellular customer to automatically make and
receive voice calls, send and receive data, or access other
services when travelling outside the geographical coverage
area of the home network, by means of using a visited network.
 Roaming Agreements between network operators required.
 National Roaming(visited network in the same country as the
home network.
 International Roaming( visited network is outside the home
country.
 Note that when roaming you have to pay both for calls that you
make and receive.
12/7/2021
 GSM Roaming
32

 Example. International roaming issue from the customer’s perspective

 John is a subscriber of GSM service in Korea
 Suppose that he travels from Korea to Japan ,which have a GSM roaming
agreement.
 Then what will happen when John makes communication with his colleagues???
 Scenarios #1
 If a person in Korea call John
 The caller is charged for a local GSM call
 John is charged for an international call from Korea to Japan
 Scenarios #2
 If the caller is from a third country (say, Hong Kong)
 The caller is charged for an international call from Hong Kong to Korea
 John is charged for an international call from Korea to Japan
 Scenarios #3
 If the caller is in Japan
 international call
 This scenario is in fact a special case of scenario #2, and is referred to12/7/2021
as
 Ethiotelecom
33

 Network Information
 Operator: Ethiopian Telecommunications
Corporation also known as: ETMTN
 What is ETMTN???
 Currently : Ethiotelecom
 Technology: GSM

 Frequency: 900MHz.

 Launch Date: APR 1999GC.

 Read more from: [Link]
12/7/2021
 Ethiotelecom Roaming Partners
34

 A Afghanistan, Albania, Algeria, Angola, Argentina, Armenia, Australia,

Austria, Azerbaijan, B Bahrain, Bangladesh, Belarus, Belgium, Benin,
Bosnia Herzegovina, Botswana, Brazil, Bulgaria, Burkina Faso, Burundi, C
Cameroon, Canada, Chad, China, Comoros, Congo, Cote D Ivoire, Croatia,
Cyprus, Czech Republic, D Denmark, Djibouit, E Egypt, Equatorial Guinea,
Estonia, F Finland, France, G Gabon, Gambia, Georgia, Germany, Ghana,
Greece, Guinea, Guinea Bissau, H Hong Kong, Hungary, I Iceland, India,
Indonesia, Iran, Iraq, Ireland, Israel, Italy, J Jamaica, Japan,
Jordan, K Kazakhstan, Kenya, Korea, Kuwait, L Latvia, Lebanon,
Lesotho, Liberia, Libya, Liechtenstein, Lithuania, Luxembourg, M
Madagascar, Malawi, Malaysia, Mali ,Malta Mauritius, Mexico, Mongolia,
Morocco, Mozambique, N Namibia, Netherlands, Niger, Nigeria,
Norway, O Oman, P Pakistan, Panama, Papua New Guinea,
Philippines, Poland, Portugal, Puerto Rico, Q Qatar, R Romania, Russia,
Rwanda, S Saudi Arabia, Senegal, Serbia, Seychelles, Sierra Leone,
Singapore, Slovakia, Syria, T Tanzania, Thailand, Togo, Trinidad and
Tobago, Tunisia, Turkey, Turkmenistan, U Uganda, Ukraine, United12/7/2021
Arab
 GSM Call Processing
35

 Initializing Call
1. when the cell phone is turned on it scans all the available frequencies for the control
channel.
2. all the BTS in the area transmit the Frequency Correction Channel (FCCH),
Synchronization Channel (SCH) and Broadcast Control Channel (BCCH) that contain
the BTS identification and location .
3. out of available beacon (A radio station that broadcasts a directional signal for
navigational purposes) frequencies from the neighboring BTSs, the cell phone
chooses the strongest signal.
4. based on the FCCH of the strongest signal, the cell phone tunes itself to the
frequency of the network.
5. the phone send a registration request to the BTS.
6. the BTS sends this registration request to the MSC via the BSC.
7. the MSC queries the AUC and EIR databases and based on the reply it authenticates
the cell phone.
8. the MSC also queries the HLR and VLR databases to check whether the cell is in its
home area or outside.
9. if the cell phone is in its home area the MSC gets all the necessary information from
the HLR if it is not in its home area, the VLR gets the information from the
corresponding HLR via MSCs. 12/7/2021
GSM Call Processing
36

12/7/2021
 GSM Call Processing
37

 Making a Call
1. when the phone needs to make a call it sends an access
request (containing phone identification number) using
Random Access Channel (RACH) to the BTS; if another cell
phone tries to send an access request at the same time the
messages might get corrupted, in this case both cell phones
wait a random time interval before trying to send again.
2. then the BTS authenticates the cell phone and sends an
acknowledgement to the cell phone.
3. the BTS assigns a specific voice channel and time slot to the
cell phone and transmits the cell phone request to the MSC
via BSC.
4. the MSC queries HLR and VLR and based on the information
obtained it routes the call to the receiver’s BSC and BTS.
12/7/2021
GSM Call Processing
38

12/7/2021
 GSM Call Processing
39

 Receiving a Call
1. when a request to deliver a call is made in the network, the MSC or
the receiver’s home area queries the HLR; if the cell phone is
located in its home area the call is transferred to the receiver; if the
cell phone is located outside its home area, the HLR maintains a
record of the VLR attached to the cell phone.
2. based on this record, the MSC notes the location of the VLR and
indicated the corresponding BSC about the incoming call.
3. the BSC routes the call to the particular BTS which uses the paging
channel to alert the phone.
4. the receiver cell phone monitors the paging channel periodically
and once it receives the call alert from the BTS it responds to the
BTS.
5. the BTS communicates a channel and a time slot for the cell phone
to communicate.
12/7/2021
6. now the call is established
GSM Call Processing
40

12/7/2021
 GSM Security
41

 Personal Identification Number (PIN)

 User Authentication
 TMSI-based Security

12/7/2021
 GSM Security
42

 Personal Identification Number (PIN)

 the PIN is stored on the SIM card of the cell phone.

 when the cell phone is turned on, the SIM checks the PIN; in
case of 3 consecutive faulty PIN inputs a PUK (Personal
Unblocking Key) is asked for.
 in case of 10 faulty PUK inputs, the SIM is locked and the
subscriber must ask a new SIM.
 this security measure is within the cell phone and the service
provider is not involved.

12/7/2021
 GSM Security
43

 User Authentication
 a mechanism for encrypting messages in a GSM network
 the network sends random data to the cell phone (RAND)
 each cell phone is allocated a secret key (KI)
 using RAND and KI and the A3 encryption algorithm the
cell phone generates a signed result (SRES) which is then
sent to the network
 a similar process takes place in the network which
generates a signed result specific to the cell phone
 the network compares its SRES with the SRES generated
by the phone and in case of a match the cell phone is
connected to the network

12/7/2021
 GSM Security
44

 TMSI-Key Based Security

 is most used in a GSM cellular network
 a TMSI key provides a temporary identification to a cell
phone and is provided by the network upon
authentication
 a TMSI key keeps changing according to the location of
the cell phone this way preventing unauthorized access
to a channel and preventing intruder from tracing
location.
 the mapping between IMSI and TMSI keys is handled by
the VLR
 ISMI are used only when the SIM is used for the first time.
12/7/2021
You are Welcome!
45

12/7/2021