Module-02 GSM Mobile services

• GSM Mobile services

• System Architecture
• Radio interface
• Protocols
• Localization and Calling
• Handover
• security (A3, A5 & A8)
• GPRS system and protocol architecture
• UTRAN, UMTS core network
• Improvements on Core Network

5M Questions

1. Explain GSM authentication in brief.

2. What are the roles of EIR and HLR entities in a GSM network?
3. Discuss about the mobile services and data services in GSM.
4. Short note on UMTS.

10M Questions

1. What is the use of different interfaces used in GSM. Explain with diagram.
2. List various security services offered by GSM. What are different security algos in
GSM.
3. Explain GSM system architecture in detail.
4. Why is it necessary to have handover mechanism in GSM? Explain possible
handover scenarios in short.
5. Explain UMTS architecture.
6. Which components are new in GPRS as compared to GSM? What is there
purpose?
7. Explain the GPRS architecture, explain each block in detail.
8. What happens when a mobile node moves from one location to another. Explain
handover mechs of GSM.
GSM MOBILE SERVICES:

GSM (Global System for Mobile Communication) provides a variety of services to

mobile users. These services enable efficient communication, data transfer, and
additional user facilities. These services are broadly classified into following 3
categories:

1. Bearer Services

Bearer services provide the basic data transmission capability between two users. They
are responsible for transporting data signals. Bearer services act as a communication
channel for data transfer

Features:

• Provides data transfer between mobile and network

• Supports different data rates

• Used for services like internet, fax, etc.

Examples:

• Circuit-switched data services

• Packet-switched data services

2. Tele Services

Tele services provide complete communication services to end users. These services
include both transmission + processing of information. Directly used by users for
communication

Types of Tele Services

i. Voice Telephony- Basic service of GSM. Allows users to make and receive voice calls

ii. Short Message Service (SMS). Allows sending and receiving text messages

iii. Multimedia Messaging Service (MMS)- Allows sending images, audio, and video
messages

iv. Fax Service- Enables sending and receiving fax through mobile network

v. Emergency Services- Provides access to emergency numbers (police, ambulance,)

3. Supplementary Services

Supplementary services provide additional facilities to enhance basic services. They

improve user experience and offer more control over communication.

Examples of Supplementary Services

i. Call Forwarding- Incoming calls are forwarded to another number

ii. Call Waiting- User is notified of another incoming call during an ongoing call

iii. Call Hold- Allows user to hold a call temporarily

DATA SERVICES:

• Mobile Services (overall user services in GSM)

• Data Services (services specifically for data transmission)

Data services in GSM allow transfer of non-voice data such as text, files, and internet
data.

1. Circuit Switched Data (CSD)- In this service:

• A dedicated communication path is established between sender and receiver

• The connection remains active during the entire session

Features:

• Constant data rate (e.g., 9.6 kbps)

• Reliable connection

• Suitable for real-time communication

2. Packet Switched Data (GPRS / EDGE)- In this service:

• Data is divided into small packets

• Packets are transmitted only when needed

Features:

• Efficient use of bandwidth

• Faster than CSD

• Supports internet browsing, email, etc.

3. Short Message Service (SMS)

• Allows sending text messages (up to 160 characters)

• Works using signaling channels

• Does not require continuous connection

4. Multimedia Messaging Service (MMS)

• Allows sending images, audio, and video messages

• Uses packet-switched data network

GSM SYSTEM ARCHITECTURE:

The GSM architecture is divided into three major subsystems that work together to
provide mobile communication services. These are:

1. Radio Subsystem (RSS)

The Radio Subsystem is responsible for the wireless communication between the
mobile user and the network. It includes the Mobile Station (MS), Base Transceiver
Station (BTS), and Base Station Controller (BSC).

Mobile Station (MS): The Mobile Station is the device used by the subscriber, such as a
mobile phone. It consists of two parts: the mobile equipment and the SIM card. The SIM
stores subscriber identity and authentication data. In the diagram, multiple MS units are
shown inside radio cells communicating with BTS using the Um interface.

Base Transceiver Station (BTS): The BTS handles direct radio communication with
mobile stations. It contains antennas, transceivers, and signal processing units. Each
BTS covers a geographical area called a cell, which is shown as hexagonal regions in the
diagram. The BTS performs modulation, encryption, and signal transmission.

Base Station Controller (BSC): The BSC controls multiple BTS units. It manages radio
resources such as frequency allocation, power control, and handoffs between cells. In
the diagram, several BTS units connect to a BSC via the Abis interface, and the BSC
connects further to the core network via the A interface.

The RSS ensures reliable wireless connectivity and mobility management at the radio
level.

2. Network and Switching Subsystem (NSS)

The NSS forms the core network of GSM. It handles call routing, switching, subscriber
management, and connectivity with external networks.

Mobile Switching Center (MSC): The MSC is the central component of the NSS. It
performs switching functions similar to a telephone exchange. It routes calls between
mobile users and external networks such as PSTN or ISDN. The MSC also manages
mobility functions like call setup, termination, and handover coordination.

Home Location Register (HLR): The HLR is a permanent database that stores
subscriber information. It contains details such as the subscriber’s phone number,
service permissions, and current location area. Every GSM subscriber has one HLR
entry.

Visitor Location Register (VLR): The VLR is a temporary database associated with an
MSC. It stores information about subscribers currently present in the MSC’s service
area. When a user moves to a new location, their data is copied from the HLR to the VLR
to reduce repeated database queries.

Authentication Center (AuC): The AuC provides security functions such as

authentication and encryption key generation. It ensures that only valid subscribers can
access the network by verifying SIM credentials.

Equipment Identity Register (EIR)

The EIR maintains a database of mobile device identities (IMEI numbers). It helps detect
stolen or unauthorized devices by categorizing them into white, grey, and black lists.

Gateway MSC (GMSC): The GMSC acts as an interface between GSM and external
networks like PSTN or ISDN. Incoming calls from external networks first reach the
GMSC, which then queries the HLR to determine the subscriber’s location and routes
the call accordingly.

The NSS ensures call routing, subscriber authentication, and inter-network connectivity.

3. Operation Support Subsystem (OSS)

The OSS is responsible for network monitoring, maintenance, and administrative

control.

Operation and Maintenance Center (OMC): The OMC monitors network performance
and controls network elements like BTS, BSC, and MSC. It performs tasks such as fault
detection, configuration management, and performance optimization. In the diagram,
the OMC is connected to various core components for centralized control.

RADIO INTERFACES:

In a GSM network, different components such as Mobile Station (MS), Base Transceiver
Station (BTS), Base Station Controller (BSC), Mobile Switching Centre (MSC), Home
Location Register etc. that must communicate with each other.
This communication is possible through well-defined interfaces. Each interface has a
specific function and is used to transfer voice, data, and signalling information between
network elements.

1. Um Interface

The Um interface is the air interface between the Mobile Station (MS) and the Base
Transceiver Station (BTS). It is the most important interface because mobile users
communicate with the GSM network through this interface.

It supports:

• Radio transmission between MS and BTS

• Transmission of voice, data, and control signals

• Channel assignment and access

• Power control and timing adjustment

GSM air interface uses TDMA with FDD (Frequency Division Duplex). TDMA allows
multiple users to share the same frequency by using different time slots, while FDD
uses separate frequencies for uplink and downlink.

2. Abis Interface

The Abis interface connects the BTS and BSC. It is used to carry information between
the base station and base station controller.

It supports:

• Transfer of traffic (voice/data) from BTS to BSC

• Transfer of signalling information
• Control of BTS by BSC
• Channel allocation and release
• Handover within the BSS

This interface helps the BSC manage multiple BTSs efficiently.

3. A Interface

The A interface connects the BSC and MSC. It is used to connect the radio subsystem
with the switching subsystem.

It is used to:
 • Connect the radio network (BSS) to the switching network

• Carry voice and data traffic

• Carry signalling information for call control

• Support call setup and termination

• Manage handovers between cells

4. O Interface

The O interface connects the MSC with OSS (Operation and Support Subsystem).

It is used for:

• Network monitoring

• Fault management

• Performance management

• Configuration management

• Maintenance of GSM network elements

5. B Interface

The B interface exists between the MSC and VLR. The VLR stores temporary information
about mobile subscribers currently located in the MSC area. This interface is used when
MSC needs information from VLR.

It helps in:

• Accessing subscriber data

• Location-based services

• Call handling

• Roaming support

6. C Interface

The C interface connects the HLR and GMSC. GMSC means Gateway Mobile Switching
Centre. When a call comes from outside the GSM network, the GMSC contacts the HLR
through the C interface to get routing information.
It is used for:

• Incoming call routing

• Finding the current location of mobile user

• Getting information required to complete the call

7. D Interface

The D interface connects the HLR and VLR. It is one of the most important GSM
interfaces because it exchanges subscriber and location information.

It is used for:

• Location update

• Authentication data exchange

• Subscriber profile transfer

• Roaming support

8. E Interface

The E interface connects two MSCs. It is mainly used when a mobile user moves from
one MSC area to another during an active call.

It supports:

• Inter-MSC handover

• Communication between anchor MSC and relay MSC

• Exchange of handover-related data

GSM PROTOCOL ARCHITECTURE:

GSM protocol architecture defines how signalling and communication take place
between different GSM network elements such as MS, BTS, BSC and MSC. The GSM
signalling protocol is divided into three main layers:

1. Physical Layer

The physical layer is the lowest layer of GSM protocol architecture. It works mainly over
the Um air interface, which is the interface between the Mobile Station (MS) and Base
Transceiver Station (BTS). It handles all radio-related functions required for transmission
of signals over the wireless medium.

Functions of Physical Layer

1. Handling radio-specific functions- It manages radio transmission and

reception between MS and BTS.

2. Creation of bursts- GSM data is transmitted in the form of small units called
bursts.

3. Multiplexing bursts into TDMA frames- GSM uses TDMA, so multiple users
share the same frequency by using different time slots.

4. Synchronization with BTS- The mobile station must remain synchronized with
the BTS for correct transmission and reception.

5. Detection of idle channels- It helps in identifying free channels for

communication.

6. Measurement of channel quality-It measures signal quality, especially on the

downlink, to support better communication and handover decisions.

The physical layer at the Um interface uses GMSK modulation technique to perform
encryption and decryption of data.

2. Data Link Layer

The data link layer is the second layer of GSM protocol architecture. Its main purpose is
to provide a reliable signalling link between the mobile station and the network. On the
Um interface, GSM uses LAPDm protocol.

LAPDm stands for Link Access Protocol on the Dm channel. It is a modified version of
LAPD, which is used in ISDN.

Functions of Data Link Layer

1. Reliable data transfer- It ensures reliable transfer of signalling information over

the radio interface.

2. Re-sequencing of frames- It arranges received frames in the correct order.

3. Flow control- It controls the rate of data transmission so that the receiver is not
overloaded.

4. Segmentation and reassembly- Large data blocks are divided into smaller
frames and later reassembled at the receiver side.
 5. Acknowledged and unacknowledged transfer- It supports both confirmed and
non-confirmed data transfer depending on the requirement.

LAPDm is modified for mobile communication and does not require some features like
synchronization flags and checksum in the same way as LAPD.

3. Network Layer

The network layer is the third layer of GSM protocol architecture. It is responsible for
signalling procedures between the mobile station and the network. The GSM network
layer is divided into three sublayers:

3.1 Radio Resource Management (RR)- The RR layer is responsible for managing radio
resources between the MS and MSC. It establishes, maintains and releases radio
connections. It also manages the radio channel during communication.

Functions of RR Layer

• Channel assignment and release

• Ciphering

• Handover between cells

• Frequency redefinition for frequency hopping

• Measurement reports from MS

• Power control and timing advance

• Paging

• Radio channel access

In short, RR manages the radio link and ensures that the mobile station remains
properly connected to the network.

3.2 Mobility Management (MM)- The MM layer handles all functions related to the
movement of the mobile user. Since the mobile user moves from one location area to
another, the network must keep track of the user’s current location.

Functions of MM Layer

• Location registration

• Location updating
 • Authentication

• Security management

• TMSI allocation

• IMSI attach and detach

It ensures that the network knows where the subscriber is located and whether the
subscriber is allowed to access the network.

3.3 Connection Management (CM)- The CM layer is responsible for managing user
connections and services.

Functions of CM Layer

• Call setup

• Call release

• Call maintenance

• SMS transfer

• Management of services like call forwarding, call waiting, etc.

Thus, CM is responsible for actual communication services used by the subscriber.

• MS to BTS Protocols

Between MS and BTS, communication takes place through the Um interface.

The protocol stack includes:

• Radio layer

• LAPDm at data link layer

• RR, MM and CM at network layer

The RR layer establishes the radio link between MS and network. MM manages mobility
and authentication. CM handles call control and SMS-related functions.
 • Signalling System No. 7 (SS7)

SS7 is used for signalling between MSC and BSC, and also between MSC and other
GSM network elements.

It transfers management and signalling information between: MSC, HLR, VLR, AuC, EIR,
OMC

SS7 helps in call setup, call routing, authentication, roaming and mobility management.

CALLING:

Mobile terminated call:

A Mobile Terminated Call (MTC) is a call in which the calling party is outside the GSM
network (PSTN or another mobile network) and the called party is a GSM mobile
subscriber (MS).
The GSM network is responsible for locating the mobile user and establishing the
connection.

Step-by-Step Procedure of MTC

Step 1: Call Initiation - A user from PSTN dials the MSISDN (mobile number) of the
subscriber. The PSTN identifies it as a GSM call and routes it to the GMSC.

Step 2: Query to HLR- The GMSC sends a request to the HLR to obtain routing
information. The HLR uses the IMSI to identify the subscriber.

Step 3: Subscriber Verification- The HLR verifies:

• Whether the subscriber exists

• Whether the subscriber is active

• Whether incoming services are allowed

Step 4: MSRN Request- The HLR requests a Mobile Station Roaming Number (MSRN)
from the VLR where the subscriber is currently registered.

Step 5: MSRN Allocation- The VLR assigns a temporary MSRN and sends it to the HLR.
The HLR forwards this MSRN to the GMSC.

Step 6: Call Routing- Using the MSRN, the GMSC routes the call to the serving MSC.

Step 7: Status Check- The MSC queries the VLR to check the current status of the MS
(idle, busy, or unreachable).

Step 8: Paging Process- If the MS is idle, the MSC initiates paging in the subscriber’s
location area. All BTSs in that area broadcast paging signals.
Step 9: Paging Response- The MS receives the paging signal and responds through the
Random-Access Channel (RACH).

Step 10: Channel Assignment- BTS assigns a Standalone Dedicated Control Channel
(SDCCH). Communication between MS and MSC begins

Step 11: Authentication and Security- The VLR performs: Authentication of the
subscriber & Ciphering (encryption) activation

Step 12: TMSI Allocation- A Temporary Mobile Subscriber Identity (TMSI) is assigned to
the MS to protect the real identity (IMSI). The MS acknowledges this assignment.

Step 13: Call Setup- The MSC sends a SETUP message to the MS. The MS
acknowledges the setup request.

Step 14: Traffic Channel Assignment- The MSC instructs the BSC to allocate a Traffic
Channel (TCH). The MS receives: Frequency, Time slot & Training sequence

Step 15: Alerting (Ringing)- The MS starts ringing. The MSC sends a ringing tone to the
calling party.

Step 16: Call Connection- When the user answers the call: Connection is established
Speech/data transfer begins

Mobile originated call:

A Mobile Originated Call (MOC) is a call initiated by a mobile user (MS) to another
mobile or a user in an external network (PSTN). The GSM network verifies the user,
allocates resources, and establishes the call.

Detailed Step-by-Step Procedure

Step 1: Call Initiation- When the user dials a number and presses the call button:

• The Mobile Station (MS) sends a channel request to the network.

• This request is sent through the Random-Access Channel (RACH), which is used
for initial communication.
At this stage, the network does not yet know who the user is.

Step 2: Channel Assignment (SDCCH)

• The BTS receives the request and forwards it to the BSC.

• The BSC assigns a Standalone Dedicated Control Channel (SDCCH).

This channel is used only for signalling (not voice), such as authentication
and call setup.
Step 3: Subscriber Identity Transmission- The MS sends its identity to the network:

o TMSI (Temporary ID) if already assigned

o Otherwise IMSI (Permanent ID)

This helps the network identify the subscriber without always
exposing the permanent identity.

Step 4: Authentication

• The MSC/VLR verifies the subscriber using stored data.

• A challenge-response mechanism is used.

Ensures that the SIM/user is genuine and authorized.

Step 5: Ciphering (Encryption)- After successful authentication: Encryption is enabled

between MS and BTS. This protects communication from eavesdropping.

Step 6: Equipment Check (IMEI Validation)- The network may check the IMEI (device
identity) via the EIR. If the device is blacklisted, the call may be rejected.
Prevents use of stolen or illegal devices.

Step 7: Call Setup Request- The MS sends the called number (MSISDN) to the MSC.
MSC analyzes the number to determine: Local GSM call OR External network (PSTN)
This step decides how the call will be routed.

Step 8: Call Routing- If the call is: Within GSM → routed internally, Outside GSM →
routed via GMSC to PSTN. Proper routing ensures the call reaches the correct
destination network.

Step 9: Traffic Channel Assignment (TCH)- MSC instructs BSC to assign a Traffic
Channel (TCH). MS switches from SDCCH → TCH. TCH is used for actual voice
communication.

Step 10: Alerting (Ringing) - The called party’s phone starts ringing. The calling MS
receives a ringback tone. Indicates that the call request has reached the destination.

Step 11: Call Establishment- When the called party answers: A connection is
established. Voice/data transfer begins. Now the communication becomes two-way.

HANDOVERS:

During an ongoing call, the mobile station (MS) is connected to a Base Transceiver
Station (BTS) through a radio link. When the user moves away from the current BTS and
enters another cell, the existing radio link becomes weak and must be replaced with a
new link. The process of transferring an active call from one cell to another without call
interruption is known as handover.
Based on the network elements involved, GSM supports four types of handovers. These
types are classified according to whether the handover occurs within the same cell,
BSC, or MSC.

1. Intra-cell Handover

Intra-cell handover occurs within the same cell and involves only one BTS. In this case,
the mobile station remains connected to the same BTS but is assigned a different radio
channel or carrier frequency.

This type of handover is mainly used to improve the quality of the connection or to
optimize traffic distribution within the cell. For example, if interference is detected on a
particular frequency, the network may switch the user to another frequency within the
same cell. This is the simplest and fastest type of handover.

2. Inter-cell, Intra-BSC Handover

In this type of handover, the mobile station moves from one cell to another, but both
cells are controlled by the same Base Station Controller (BSC). The handover decision
and execution are handled entirely by the BSC.

When the signal strength from the current BTS decreases and a neighboring BTS under
the same BSC offers a better signal, the BSC assigns a new radio channel in the target
cell. It then releases the old channel after the handover is complete. Since the MSC is
not involved, this handover has relatively low signaling overhead and is executed
quickly.

3. Inter-BSC, Intra-MSC Handover

This handover occurs when the mobile station moves between cells controlled by
different BSCs but within the same Mobile Switching Centre (MSC). Since multiple BSCs
are involved, the MSC coordinates the handover process.

The decision usually begins with measurement reports sent by the mobile station and
the BTS. These reports include signal strength and quality information of neighboring
cells. If a better cell under another BSC is detected, the serving BSC sends a handover
request to the MSC. The MSC then communicates with the target BSC to allocate
resources.

If the target BSC has available channels, it activates a radio channel at the new BTS and
informs the MSC. The MSC then sends a handover command to the mobile station. The
mobile station disconnects from the old BTS and establishes a new radio link with the
new BTS. After successful transfer, resources in the old cell are released.

4. Inter-MSC Handover
Inter-MSC handover takes place when the mobile station moves between cells that are
controlled by different Mobile Switching Centres. This is the most complex type of
handover because it involves coordination between two MSCs.

In this process, both the source MSC and the target MSC work together to transfer the
call. The target MSC allocates resources and establishes a connection path, while the
source MSC ensures that the ongoing call is maintained during the transition.

SECURITY:

GSM provides several security services to ensure secure communication, user

authentication, and data privacy.

These services are implemented using confidential information stored in the SIM and
Authentication Center (AuC) along with security algorithms.

✓ Security services

1. Access Control and Authentication

This service ensures that only valid users can access the GSM network.

• The user must enter a PIN to access the SIM

• The network verifies the subscriber using a challenge–response mechanism

• Authentication is based on:

o IMSI (user identity)

o Ki (secret key stored in SIM and AuC)

2. Confidentiality (Encryption)

Confidentiality ensures that user data is protected during transmission.

• Data such as voice, messages, and signalling information is encrypted over the
air interface

• Encryption is applied between:

o Mobile Station (MS) and Base Transceiver Station (BTS)

• Encryption is not end-to-end, it exists only over the air interface

3. Privacy

This service protects the identity of the user. Prevents tracking of the user

• Real identity (IMSI) is not transmitted over the air

 • Instead, a temporary identity called TMSI (Temporary Mobile Subscriber Identity)
is used

• TMSI can be changed frequently

✓ Security Algorithms in GSM

1. A3 Algorithm (Authentication)

A3 algorithm is used to check whether the subscriber is valid or not.

Detailed Working

First, when a mobile station wants to access the GSM network, the network must verify
whether the SIM is genuine.

The Authentication Center generates a 128-bit random number called RAND. This RAND
acts like a challenge.

The same RAND is sent to the mobile station through the network. The SIM receives this
RAND.

Inside the SIM, the A3 algorithm takes two inputs:

𝑅𝐴𝑁𝐷 + 𝐾𝑖

Here, Ki is the secret key stored inside the SIM.

Using RAND and Ki, the A3 algorithm calculates a 32-bit Signed Response called SRES.

At the same time, the Authentication Centre also uses the same RAND and the same Ki
stored in its database. It also calculates its own SRES.

Now there are two values:

• SRES generated by SIM

• SRES generated by AuC/network

The mobile sends its SRES to the network. The network compares both SRES values.

If both values are same, the subscriber is accepted as valid.

If both values are different, the subscriber is rejected.

Ki is never sent over the network. Only RAND and SRES are exchanged, so the secret key
remains protected.
2. A8 Algorithm (Cipher key generation)

Purpose

A8 algorithm is used to generate the cipher key Kc, which is later used for encryption.

Detailed Working

After RAND is generated, the same RAND is also used for generating the cipher key.

Inside the SIM, the A8 algorithm takes:

𝑅𝐴𝑁𝐷 + 𝐾𝑖

Using these two values, A8 generates a 64-bit cipher key called Kc.

The same process happens in the Authentication Center also. Since the AuC has the
same Ki and same RAND, it also generates the same Kc.

So now:

• SIM has Kc

• Network also has Kc

This Kc is then used for encrypting and decrypting user data over the air interface.

A3 and A8 usually work together. From the same RAND and Ki:

• A3 produces SRES

• A8 produces Kc

3. A5 Algorithm (Encryption)

A5 algorithm is used to encrypt and decrypt data between the Mobile Station (MS) and
Base Transceiver Station (BTS).

Detailed Working

After authentication is successful, both sides already have the same cipher key Kc. The
network instructs the mobile station to start ciphering.

Now the A5 algorithm uses:

• Cipher key Kc

• Frame number

• Data bits to be transmitted

A5 generates a ciphering bit stream called keystream.

This keystream is combined with the original plain data using XOR operation.

So:

𝑃𝑙𝑎𝑖𝑛 𝐷𝑎𝑡𝑎 ⊕ 𝐾𝑒𝑦𝑠𝑡𝑟𝑒𝑎𝑚 = 𝐸𝑛𝑐𝑟𝑦𝑝𝑡𝑒𝑑 𝐷𝑎𝑡𝑎

The encrypted data is transmitted over the air interface.

At the receiver side, the same A5 algorithm generates the same keystream using the
same Kc and frame number.

Then the receiver XORs the encrypted data with the same keystream:

𝐸𝑛𝑐𝑟𝑦𝑝𝑡𝑒𝑑 𝐷𝑎𝑡𝑎 ⊕ 𝐾𝑒𝑦𝑠𝑡𝑟𝑒𝑎𝑚 = 𝑂𝑟𝑖𝑔𝑖𝑛𝑎𝑙 𝐷𝑎𝑡𝑎

Thus, the original voice, data, or signalling information is recovered.

A5 encryption protects only the air interface between MS and BTS. It is not end-to-end
encryption.

GPRS:

✓ Architecture

GPRS stands for General Packet Radio Service. It is a packet-switched data service
introduced in GSM networks to support mobile internet and data communication.

Unlike traditional GSM voice services (which use circuit switching), GPRS uses packet
switching. In packet switching, data is divided into small packets and sent only when
needed. This makes data transmission more efficient and cost-effective.

GPRS architecture is built on top of the GSM network. It adds new packet-based
elements while reusing existing GSM infrastructure.

The architecture consists of three main parts:

1. Mobile Station (MS): The Mobile Station includes the mobile device and SIM card. It
is the user equipment used for sending and receiving data.
The MS supports both voice and data services. It communicates with the base station
using radio signals. In GPRS, the MS can send and receive packet data while staying
attached to the network.

The mobile station performs functions like:

• Packet data transmission

• Mobility management

• Authentication and encryption

2. Base Station Subsystem (BSS): The BSS connects the mobile user to the core
network. It is mostly the same as GSM but includes a new component for packet data.

Components of BSS

(a) BTS (Base Transceiver Station)

The BTS handles radio communication with the mobile station. It transmits and receives
radio signals and manages the air interface.

(b) BSC (Base Station Controller)

The BSC controls multiple BTSs. It manages radio resources, handovers, and channel
allocation.

(c) PCU (Packet Control Unit)

The PCU is a new component added for GPRS. It separates voice and data traffic.

• Voice traffic → sent to MSC

• Data traffic → sent to SGSN

The PCU is usually located in the BSC or between BSC and SGSN.

3. GPRS Core Network: The core network handles packet switching and routing of data.
It introduces new nodes that are not present in traditional GSM.

(a) SGSN (Serving GPRS Support Node)

The SGSN is the most important element in GPRS. It acts like the packet-switched
version of MSC. Main functions of SGSN:

• Tracks mobile location

• Authentication and security

• Packet routing and delivery

• Mobility management
It maintains data about the mobile user’s current location and session.

(b) GGSN (Gateway GPRS Support Node): The GGSN connects the GPRS network to
external packet networks like the internet. It acts as a gateway between GPRS network
and Public Data Networks (PDN) like the Internet

Functions of GGSN:

• IP address allocation

• Routing data packets to external networks

• Packet filtering and charging

(c) HLR (Home Location Register): The HLR stores subscriber information such as:

• User profile

• Subscription details

• Authentication data

In GPRS, the HLR provides user data to SGSN for authentication and mobility
management.

✓ New Components

1. SGSN (Serving GPRS Support Node)- The SGSN is one of the most important
components introduced in GPRS.

Purpose:

• Acts as a serving node for mobile users in a specific area

• Tracks the location of mobile users

• Manages packet data transfer between mobile station and network

Functions:

• Authentication of GPRS users

• Mobility management (similar to VLR in GSM)

• Packet routing to/from mobile station

 • Charging and billing information collection

• Session management

It is similar to MSC in GSM but for packet-switched services

2. GGSN (Gateway GPRS Support Node)- The GGSN acts as a gateway between GPRS
network and external networks.

Purpose:

• Connects GPRS network to external packet networks (like Internet)

Functions:

• Routes data packets between mobile users and internet

• Assigns IP address to mobile users

• Maintains routing information

• Performs security and filtering

It is similar to a gateway router

3. PCU (Packet Control Unit)- PCU is introduced at the BSS level (BTS/BSC).

Purpose:

• Separates packet-switched data from circuit-switched voice

Functions:

• Controls radio resources for packet data

• Decides whether data is voice (GSM) or packet (GPRS)

• Sends packet data to SGSN

It acts as a bridge between GSM radio network and GPRS core network

4. HLR (Enhanced for GPRS)- HLR already exists in GSM, but in GPRS it is enhanced.

Purpose:

• Stores GPRS subscriber information

Functions:
 • Stores user subscription data

• Maintains location information

• Provides data to SGSN

5. AuC (Authentication Center - Enhanced)- AuC is also enhanced for GPRS.

Purpose:

• Provides security information for GPRS users

Functions:

• Authentication of users

• Generation of encryption keys

6. DNS (Domain Name System)

Purpose:

• Translates domain names into IP addresses

Function:

• Helps GGSN connect to external IP networks

✓ GPRS Protocol Stack

GPRS (General Packet Radio Service) uses a layered protocol architecture to support
packet-switched data communication over GSM networks.

Each layer in the stack performs a specific function such as data transfer, reliability,
mobility management, and radio control.

Protocols in GPRS:

1. GPRS Tunneling Protocol (GTP)

Purpose: Used for data transfer between GPRS Support Nodes (SGSN and GGSN)

Working:

• User data packets are encapsulated into tunnels

• These tunnels carry data across the GPRS backbone network

It ensures correct delivery of packets between SGSN and GGSN

2. TCP / UDP

Purpose: Used as transport layer protocols for GTP

Working:

• GTP can use:

o UDP → for fast transmission (less reliable)

o TCP → for reliable transmission

UDP is commonly used because GPRS focuses on speed

3. Subnetwork Dependent Convergence Protocol (SNDCP)

Purpose: Used between MS and SGSN

Functions:

• Compresses data

• Segments and reassembles packets

• Adapts network layer data to lower layers

It prepares IP packets for transmission over GPRS network

4. Logical Link Control (LLC)

Purpose: Provides reliable logical link between MS and SGSN

Functions:

• Error detection and correction (ARQ)

• Flow control

• Frame sequencing

• Supports both: Acknowledged transmission & Unacknowledged transmission

Ensures reliable communication over packet network

5. Base Station Subsystem GPRS Protocol (BSSGP)

Purpose: Used between BSS (BTS/BSC) and SGSN

Functions:

• Transfers routing and QoS information

• Controls data flow between BSS and SGSN

6. Radio Link Control (RLC)

Purpose: Provides reliable radio link between MS and BSS

Functions:

• Segmentation and reassembly of data blocks

• Error correction using ARQ

• Retransmission of lost data

Ensures reliable transmission over wireless medium

7. Medium Access Control (MAC)

Purpose: Controls access to the radio channel

Functions:

• Allocates radio resources to users

• Manages multiple users sharing same channel

• Maps logical channels to physical channels

UMTS:

UMTS stands for Universal Mobile Telecommunication System. It is a third-

generation mobile communication system (3G) developed as an improvement
over GSM and GPRS.

UMTS does not define a completely new system from the beginning. Instead, it
provides a smooth transition from GSM/GPRS to 3G networks.

✓ UMTS Services

UMTS provides the following services:

1. It supports bearer services for voice and data transmission.

2. It supports both real-time services such as voice calls and video calls, and non-
real-time services such as email and web browsing.

3. It supports both circuit-switched and packet-switched transmission.

4. It supports handover between UMTS cells and also between UMTS and other
systems like GSM or satellite networks.

5. It is compatible with networks such as GSM, ATM, IP and ISDN.

6. It supports variable data rates for uplink and downlink.

✓ UMTS System Architecture

The UMTS architecture mainly consists of three main components:

1. User Equipment (UE)- User Equipment is the device used by the subscriber to
access UMTS services.

It consists of two parts:

i) Mobile Equipment (ME)- Mobile Equipment is the actual mobile device or radio
terminal.

It performs:

• Radio transmission and reception

• User interface functions

• Connection to UTRAN through the Uu interface

ii) USIM- USIM stands for UMTS Subscriber Identity Module.

It is similar to SIM in GSM, but it is used in UMTS.

It stores:

• Subscriber identity

• Authentication information

• Encryption keys

• User-related data

USIM helps in user authentication and security.

2. UTRAN- UTRAN stands for UMTS Terrestrial Radio Access Network.

It handles radio communication between the User Equipment and the Core
Network. It also manages cell-level [Link] consists of one or more Radio
Network Subsystems (RNS).

Each RNS consists of:

i) Node B

Node B is similar to the BTS in GSM.

It performs physical layer radio functions such as:

• Transmission and reception of radio signals

• Channel coding

• Modulation and demodulation

• Data interleaving

• Spreading and despreading

Node B communicates with UE using the Uu interface.

ii) Radio Network Controller (RNC)

RNC is similar to the BSC in GSM.

It controls one or more Node Bs and manages radio resources.

Functions of RNC include:

• Radio resource management

• Admission control

• Congestion control

• Handover control

• Radio channel ciphering and deciphering

• System information broadcasting

• Radio network configuration

RNC is connected to the Core Network through the Iu interface.

3. Core Network (CN)

The Core Network is responsible for switching, routing, mobility management, and
connection to external networks.

UMTS core network is shared with GSM and GPRS.

It contains components such as: MSC, GMSC, SGSN, GGSN, HLR, VLR

The Core Network supports both:

i) Circuit Switched Services

These are used for voice calls and traditional telephony services.

Main components: MSC & GMSC

It connects UMTS to external networks like PSTN and ISDN.

ii) Packet Switched Services

These are used for internet and data services.

Main components: SGSN & GGSN

It connects UMTS to packet data networks such as the Internet / PDN.

Important UMTS Interfaces

1. Uu Interface- The Uu interface is between UE and UTRAN. It is the radio interface

of UMTS and is comparable to the Um interface in GSM. UMTS uses Direct
Sequence CDMA on this interface.

2. Iub Interface- The Iub interface connects Node B and [Link] carries user data,
control signalling, and radio resource information.

3. Iur Interface- The Iur interface connects one RNC to another RNC. It is mainly
used for handover and communication between RNCs.

4. Iu Interface- The Iu interface connects UTRAN with Core Network.

It has two parts:

i) Iu-CS- Connects UTRAN to the circuit-switched core network, mainly MSC.

ii) Iu-PS- Connects UTRAN to the packet-switched core network, mainly SGSN.