MODULE 2

GSM mobile Services

 GSM is global system for mobile communications.

 a typical second generation system
 GSM versions – GSM 900, GSM 1800 (digital cellular system), GSM 1900 (personal communications
services)
 Uses narrowband TDMA for voice and text based services over mobile phone Networks

1. Bearer services

- Provide capabilities to transfer user data and control signals between 2 pieces of equipment in a network.

4 types of bearer services

 Transparent
 Non-transparent
 Synchronous data transmission
 asynchronous data transmission

2. Tele services

Emergency number, Short message services (SMS), Enhanced message service, Multimedia message
service, Group 3 Fax.

3. Data services

Circuit switched, Packet switched

4. Supplementary services

- These services vary from provider to provider.

- facilities like call forwarding, caller identification, call waiting, multiparty conversations etc.
GSM Security

GSM offers several security services using confidential information stored in the AuC and in the individual
SIM.

Algorithm A3 is used for authentication, A5 for encryption, and A8 for the generation of a cipher key.
Algorithms A3 and A8 are located on the SIM and in the AuC and can be proprietary. Only A5 which is
implemented in the devices has to be identical for all providers.

The SIM stores personal, secret data and is protected with a PIN against unauthorized use.

Security Services Offered:

Access control and authentication: - user needs a secret PIN to access the SIM (authentication of a valid
user for a SIM).

Authentication is based on the SIM, which stores the individual authentication key Ki, the user
identification IMSI, and the algorithm used for authentication A3.

The AuC performs the basic generation of random values RAND, signed responses SRES, and cipher keys Kc
for each IMSI, and then forwards this information to the HLR

The current VLR requests the appropriate values for RAND, SRES, and Kc from the HLR.

For authentication, the VLR sends the random value RAND to the SIM.

Both sides, network and subscriber module, perform the same operation with RAND and the key Ki, called
A3.

The MS sends back the SRES generated by the SIM; the VLR can now compare both values. If they are the
same, the VLR accepts the subscriber, otherwise the subscriber is rejected.
Confidentiality:

All user-related data is encrypted. After authentication, BTS and MS apply encryption to voice, data, and
signaling. This confidentiality exists only between MS and BTS.

To ensure privacy, all messages containing user-related information are encrypted in GSM over the air
interface.

After authentication, MS and BSS can start using encryption by applying the cipher key Kc, which is
generated using the individual key Ki and a random value by applying the algorithm A8.

Note that the SIM in the MS and the network both calculate the same Kc based on the random value RAND.
The key Kc itself is not transmitted over the air interface.

MS and BTS can now encrypt and decrypt data using the algorithm A5 and the cipher key Kc.

Anonymity:

To provide user anonymity, all data is encrypted before transmission, and user identifiers are not used over
the air. Instead, GSM transmits a temporary identifier (TMSI), which is newly assigned by the VLR after each
location update.

Algorithm A3 is used for authentication, A5 for encryption, and A8 for the generation of a cipher key.
Algorithms A3 and A8 are located on the SIM and in the AuC and can be proprietary. Only A5 which is
implemented in the devices has to be identical for all providers.

GSM Architecture

The GSM architecture is divided into three main parts:

1. Mobile station(MS)

2. Base station subsystem (BSS)

3. Network switching subsystem (NSS)

1. Mobile Station (MS):

The mobile station (MS) consists of the Mobile equipment (the terminal) and a smart card called the
Subscriber Identity Module (SIM). The SIM provides personal mobility, so that the user can have access to
subscribed services irrespective of a specific terminal. By inserting the SIM card into another GSM terminal,
the user is able to receive calls at that terminal, make calls from that terminal, and receive other subscribed
services. The mobile equipment is uniquely identified by the International Mobile Equipment Identity
(IMEI). The SIM card contains the International Mobile Subscriber Identity (IMSI) used to identify the
subscriber to the system, a secret key for authentication, and other information. The IMEI and the IMSI are
independent, thereby allowing personal mobility. The SIM card may be protected against unauthorized use
by a password or personal identity number.

2. Base Station Subsystem (BSS): A GSM network comprises many BSSs, each controlled by a base station
controller (BSC). The BSS performs all functions necessary to maintain radio connections to an MS,
coding/decoding of voice, and rate adaptation to/from the wireless network part. Besides a BSC, the BSS
contains several BTSs. The BSS is responsible for handling the radio communication between the mobile
station and the network.

It consists of two main parts:

Base Transceiver Station (BTS): The BTS handles the radio interface to the mobile station. A BTS can form a
radio cell or, using sectorized antennas, several and is connected to MS via the Um interface, and to the BSC
via the Abis interface. The Um interface contains all the mechanisms necessary for wireless transmission
(TDMA, FDMA etc.)The BTS is the radio equipment (transceivers and antennas) needed to service each cell
in the network. A group of BTS’s are controlled by an BSC.

Base Station Controller (BSC): The BSC provides all the control functions and physical links between the
MSC and BTS. It is a high capacity switch that provides functions such as handover, cell configuration data,
and control of radio frequency (RF) power levels in BTS. A number of BSC’s are served by an MSC.

3. Network Subsystem (NSS): The NSS is the central part of the GSM network, responsible for handling call
routing, mobility management, and ensuring the proper functioning of the system. It includes the following
components:

Mobile Switching Center (MSC): The MSC is the core switch that connects calls between users, handles call
setup and routing, and manages mobility (e.g., keeping track of where the mobile is located in the
network). It connects with other networks like the public telephone network.

Home Location Register (HLR): The HLR is a database that stores details about the subscribers, such as their
profile, services subscribed to, and their current location. It helps authenticate the subscriber and enables
call routing.

Visitor Location Register (VLR): It is a database that contains temporary information about subscribers that
is needed by the MSC in order to service visiting subscribers. VLR is always integrated with the MSC. When
a MS roams into a new MSC area, the VLR connected to that MSC will request data about the mobile
station from the HLR. Later if the mobile station needs to make a call, VLR will be having all the information
needed for call setup

Authentication Center (AUC): The AUC is responsible for authenticating subscribers and ensuring secure
communication. It generates encryption keys to verify the identity of the mobile device and protect the
communication.

Equipment Identity Register (EIR): The EIR is a database that contains information about the identity of
mobile devices, specifically their IMEI (International Mobile Equipment Identity). It is used to check
whether a device is valid and not stolen.

4. Operation Support Subsystem (OSS): The operations and maintenance center (OMC) is connected to all
equipment in the switching system and to the BSC. Implementation of OMC is called operation and support
system (OSS). The OSS is the functional entity from which the network operator monitors and controls the
system. The purpose of OSS is to offer the customer cost-effective support for centralized, regional and
local operational and maintenance activities that are required for a GSM network. OSS provides a network
overview and allows engineers to monitor, diagnose and troubleshoot every aspect of the GSM network.

GPRS Architecture

GPRS Architecture is mainly divided into three parts:

1. Mobile Station (MS) – User’s device (mobile phone, modem, etc.).

2. Base Station Subsystem (BSS) – Handles radio communication.

3. GPRS Core Network – Manages packet-switched data transmission.

1. Mobile Station (MS) :

➢ The mobile station (MS) is the user's device, which can support both voice communication and
data transmission through GPRS.
➢ It communicates with the network via radio signals and facilitates access to data services by
requesting and transmitting data packets.
➢ The GPRS-enabled mobile device interacts with the network dynamically, ensuring an efficient
and seamless user experience.
 2. Base Station Subsystem (BSS):
➢ The BSS, consisting of multiple BTS and BSC units, forms the backbone of radio communication in
GPRS networks.
➢ It ensures seamless connectivity for mobile devices and enables efficient transmission of both
voice and data traffic.
➢ The integration of the BSS with the GPRS core network allows for effective data packet handling
and mobility support.

• Base Transceiver Station (BTS) :

➢ The BTS is responsible for transmitting and receiving radio signals to and from mobile devices within its
coverage area.

➢ It handles signal modulation, encoding, and transmission to ensure proper communication between
mobile stations and the network.

➢ Each BTS covers a specific geographical area, known as a cell, and is an essential part of the radio access
network.

• Base Station Controller (BSC) :

➢ The BSC manages multiple BTS units and oversees their operations, ensuring efficient radio resource
allocation.

➢ It controls handovers between cells, manages frequency assignments, and optimizes network traffic for
better performance.

➢ In GPRS, the BSC also interfaces with the Packet Control Unit (PCU) to facilitate data transmission.

• GPRS Support Nodes (GGSN and SGSN)

• Serving GPRS Support Node (SGSN):

➢ Handles mobility management, session management, and authentication of mobile users.

➢ Responsible for packet routing and forwarding within the GPRS network.

➢ Maintains user location and security information to ensure seamless data communication.

• Gateway GPRS Support Node (GGSN):

➢ Acts as an interface between the GPRS network and external packet-switched networks (e.g., the
Internet).

➢ Manages IP address allocation and facilitates data packet routing to and from mobile devices.

➢ Ensures security and quality of service for data sessions.

• PCU( packet control unit)- The PCU manages packet-switched data between the Base Station Subsystem
(BSS) and the GPRS core network (SGSN).

UMTS Architecture

The UMTS consists of three main parts:

1. User Equipment (UE)

2. UTRAN (UMTS Terrestrial Radio Access Network)

3. CN (Core Network)

1. User Equipment (UE)- The UE represents the mobile device that a user operates. It has two main
components:

➢ USIM (Universal Subscriber Identity Module): This is the SIM card used in UMTS networks. It stores user
authentication, encryption keys, and network access credentials.

➢ ME (Mobile Equipment): This is the mobile phone or device that interacts with the network

2. UTRAN (UMTS Terrestrial Radio Access Network)

The UMTS RAN consists of Node B and RNC (Radio Network Controller).

➢ Node B:

• Equivalent to a base station in GSM networks.

• It is responsible for transmitting and receiving radio signals to/from the UE over the Uu interface.

• Multiple Node B stations connect to an RNC through the Iub interface.

➢ RNC (Radio Network Controller):

• The RNC is a key element that controls multiple Node B stations.

• Communication between different RNCs happens over the Iur interface.

• The RNC connects to the Core Network through two different interfaces:
Iu-CS (Circuit-Switched Interface) → for voice calls.

Iu-PS (Packet-Switched Interface) → for data services.

3. The Core Network is divided into two functional domains:

1. Circuit-Switched Domain(CSD)- (Handles voice calls)

• MSC (Mobile Switching Center):

➢ Manages call setup, handover, and termination for voice services.

➢ Connected to the RNC through the Iu-CS interface.

• GMSC (Gateway MSC):

➢ Works as a bridge between the UMTS network and external voice networks like PSTN/ISDN (Public
Switched Telephone Network/Integrated Services Digital Network).

2. Packet-Switched (PS) Domain (Handles data services)

• SGSN (Serving GPRS Support Node):

➢ Manages mobile data sessions and packet-switched connections for the user.

➢ Connected to the RNC through the Iu-PS interface.

• GGSN (Gateway GPRS Support Node):

➢ Acts as an interface between the UMTS network and external PDN (Packet Data Networks) such as the
Internet.

Uu → Connects UE to Node B (wireless interface).

Iub → Connects Node B to RNC.

Iur → Connects RNC to another RNC for handover and resource sharing.

Iu-CS → Connects RNC to MSC for voice calls.

Iu-PS → Connects RNC to SGSN for data services.

• Handover Mechanism:

Handoff (or handover) is a control process initiated when a mobile moves from its current cell to its
neighboring cell.

A user of a mobile phone will be moving continuously. In such a situation, the mobile connection should
also remain intact especially if the user is currently using the phone.

This transfer of connection from one cell to another should be quick and in such a manner that user
doesn’t actually realize that a handoff has happened.

There are two basic reasons of the requirement of handovers:

1. The MS moves out of range of BTS & hence received signal level decreases. The error rate may increase
due to increased interference. This will degrade the quality of radio link

2. If the traffic in one cell is too high then some MSs may be shifted to other cell if possible. This is known
as Load Balancing.

There are four basic types of handoffs in GSM network:

➢ Intra-cell handover: Within a cell, narrow-band interference could make transmission at a certain
frequency impossible. The BSC could then decide to change the carrier frequency(scenario 1).

➢ Inter-cell, intra-BSC handover: This is a typical handover scenario. The mobile station moves from one
cell to another, but stays within the control of the same BSC. The BSC then performs a handover, assigns a
new radio channel in the new cell and releases the old one (scenario 2).

➢ Inter-BSC, intra-MSC handover: As a BSC only controls a limited number of cells; GSM also has to
perform handovers between cells controlled by different BSCs. This handover then has to be controlled by
the MSC (scenario 3).

➢ Inter MSC handover: A handover could be required between two cells belonging to different MSCs. Now
both MSCs perform the handover together (scenario 4).