7/19/2011

NanoCell Networks Pvt Ltd #56, 19th Main Road, 2nd Block Rajajinagar, Bangalore INDIA 560010

[Link]

Telecom Overview

[Link]

7/19/2011

Content
Introduction PSTN Network Telecom Network overview Access/Core/Monitoring/Transport Networks SS7 Signaling Intelligent Networks Value Added Services

[Link]

Telecommunication = Distance Communication

Real Time Communication - Voice Call - Video Call - Interactive Chat Non Real time Communication - E-mail - Short messaging - Social Networking

Ways of connectivity - One to one dedicated connection - Connectivity through a common exchange - Connectivity through common servers Medium for connectivity - Wired Medium - Wireless Medium

-Enterprise communication - Individual Communication

[Link]

7/19/2011

Communication Networks

PSTN

Cellular (Wireless)

Internet & Broadband

ILD

Social Networking Servers

NLD

[Link]

PSTN Overview

[Link]

7/19/2011

Simple Landline Network

Exchange Wireline Switch

Twisted Pair Cable

Twisted Pair Cable

[Link]

PSTN Architecture

State TE

State TE

Area TE

Town Area LE

Metro Area LE

Subscribers

Legend: - LE: Local Exchange - TE: Trunk Exchange

Subscribers

(Exchange Hierarchy)

High Capacity, Wide Area, Circuit Switched, Tree Network

Consists of Signaling, Switching & Transmission Systems
8

[Link]

7/19/2011

Components of PSTN
Subscribers - devices that attach to the network; mostly telephones Subscriber line - link between subscriber and network

Also called subscriber loop or local loop A switching centers that support subscribers is an end office

Exchanges - switching centers in the network

Trunks - branches between exchanges

[Link]

Telecom Operators in the PSTN Business Space

Local Exchange Carrier (LEC) Inter Exchange Carrier (IXC) National Long Distance (NLD)

Tata Communication BTSOL Railtel Flag Telecom (Reliance) Sub-Marine OFC Satellite

International Long Distance (ILD)

10

[Link]

7/19/2011

Switching Concepts
Circuit Switching

Dedicated channel is required Real time traffic Charging is based on pulses or usage time Users are reserved during call No dedicated channel There can be buffering & delay Charging is based on data Volume /Time/Time step/Event No reservation of channel

Packet Switching

11

[Link]

Circuit Switching
Circuit establishment

An end to end circuit is established through switching nodes Information transmitted through the network Data may be analog voice, digitized voice, or binary data Circuit is terminated Each node de-allocates dedicated resources

Information Transfer

Circuit disconnect

12

[Link]

7/19/2011

Packet Switching
Data is transmitted in blocks, called packets Before sending, the message is broken into a series of packets At each node en route, packet is received, stored briefly and passed to the next node Each packet treated independently, without reference to previous packets Each node chooses next node on packets path Packets dont necessarily follow same route and may arrive out of sequence Exit node restores packets to original order Responsibility of exit node or destination to detect loss of packet and how to recover

13

[Link]

Telecom Networks Overview

14

[Link]

7/19/2011

Telecom Networks Overview

Monitoring and Supervisory Networks

Towards End-Users

Access Networks

Transport Networks

Core/Switching Networks

Towards External Networks

15

[Link]

Access Networks
Access Network is used to provide Network Access to end users through Wireless or Wired medium through combination of communications equipments
Wireline (e.g. DSL, DLC) 2G Cellular- GSM/GPRS/EDGE (e.g. BSC,BTS ) 3G Cellular- WCDMA/HSPA (e.g Node-B, RNC) Wi-Fi WiMAX LTE ADSL CAT 5

16

[Link]

7/19/2011

Core Networks
Core Network is responsible for switching of calls , routing, authentication, providing special services like SMS, Prepaid, RBT and also for accounting
Circuit Core Networks (e.g. MSC, GMSC) Packet Core Networks (e.g. SGNS, GGSN) Intelligent Network Location Registers (HLR/VLR) Authentication Centers Equipment Registers TAX and Tandem Exchanges

17

[Link]

Monitoring and Supervisory Networks

Monitoring & Supervisory (OSS) networks takes care of Fault Management, Configuration Management, Accounting Management, Performance Management and Security Management
Element Management Systems Network Management Systems Operation Support Systems

18

[Link]

7/19/2011

Transport Networks
Transport Network interconnects the Network elements within Access Network/Core Network and also responsible for connecting these networks with each other as well as other external networks
E1/T1 Electrical Systems Microwave Communications Optical Fiber Communications Ethernet Networks

Digital Transmission Technologies

PDH, SDH/SONET, DWDM, IP, ATM , Frame Relay

19

[Link]

Signaling system

20

[Link]

10

7/19/2011

Why Signaling is required ?

Signaling: Required for establishing, monitoring and releasing a call. The term signaling is used in many contexts In technical systems, it very often refers to the control of different procedures With reference to telephony, signaling means the transfer of information and the instructions relevant to control and monitor telephony connections

21

[Link]

Signalling Types

SIGNALING

Subscriber - Exchange Signaling

Inter Exchange Signaling

Control (DT, RT, BT)

Addressing (DTMF)

Channel Associated Signaling (CAS)

Common Channel Signaling (CCS) SS7

Line Signaling R2

Register Signaling MF

22

[Link]

11

7/19/2011

Channel Associated Signalling

Same Channels are used for carrying Voice and Signaling These provides information such as number that was called, what state the call is in They are limited in what they can carry, and are slow to set up CAS is originally signaling system used by E1

Disadvantages

slow to set up.

23

[Link]

Common Channel Signaling (SS7 Network)

24

[Link]

12

7/19/2011

Common Channel Signaling

Common Channel Signaling

CCS: Out of Band Signaling

25

[Link]

SS7
It overcomes the problem of CAS In this kind of signaling short message are sent over a dedicated signaling channel The short message consist of more information about call , including caller ID, types of transmission required etc CCS is used by either E1 or T1 that refer to a system that does not use a specific structure for signaling Instead all or part of channel is used to pass messages between two systems to indicate how a channel is used ISDN signaling and SS7 signaling are sub group of CCS signaling

26

[Link]

13

7/19/2011

SS7
There are three kinds of signaling points in the SS7 network:

SSP (Service Switching Point) STP (Signal Transfer Point) SCP (Service Control Point)

27

[Link]

SSP
A Service Switching Point (SSP) is the telephone exchange or mobile switching centre that initially responds, when a telephone caller dials a number, by sending a query to a central database called a Service Control Point (SCP) so that the call can be handled The Service Switching Point uses the SS7 protocols which are responsible for the call setup, management, and termination with other Service Switching Points

28

[Link]

14

7/19/2011

STP
A Signal Transfer Point (STP) is a router that relays SS7 messages between signaling end-points (SEPs) and other signaling transfer points (STPs). Typical SEPs include SSPs and SCPs. The STP is connected to adjacent SEPs and STPs via signaling links. Based on the address fields of the SS7 messages, the STP routes the messages to the appropriate outgoing signaling link. STPs are typically provisioned in mated pairs

29

[Link]

SCP
A Service Control Point (SCP) is a standard component of an SS7 signaling system which is used to control the service. The SCP queries the SDP (Service Data Point) which holds the actual database and directory. SCP, using the database from the SDP, identifies the geographical number to which the call is to be routed SCP may also communicate with an "intelligent peripheral dependent upon the network architecture that the network service provider wants. The most common implementation uses STPs.

30

[Link]

15

7/19/2011

SS7
Signaling link and Signaling Route Signaling links connect signaling Points in a communication network One signaling link consists of two data channels operating together in opposite directions at the same data rate Generally, more than one signaling link exists between two Signaling Points in order to provide redundancy The route defined for the signaling between an originating point and a destination point is called the signaling route

31

[Link]

SS7
SS7 Signaling Link Types

Signaling links are logically organized by link type ("A" through "F") according to their use in the SS7 signaling network.

32

[Link]

16

7/19/2011

SS7 Signalling Link types

An "A" (access) link connects a signaling end point (e.g., an SCP or SSP) to an STP. Only messages originating from or destined to the signaling end point are transmitted on an "A" link.

A Link

B Link

A "B" (bridge) link connects an STP to another STP. Typically, a quad of B links interconnects primary STPs (e.g., the STPs from one network to the STPs of another network). The distinction between a "B" link and a "D" link is rather arbitrary. So, such links may be referred to as "B/D" links.

C Link

A "C" (cross) link connects STPs performing identical functions into a mated pair. A "C" link is used only when an STP has no other route available to a destination signaling point due to link failure. Note that SCPs may also be deployed in pairs to improve reliability; unlike STPs; however, signaling links do not interconnect mated SCPs.

33

[Link]

SS7 Signalling Link types

A "D" (diagonal) link connects a secondary (e.g., local or regional) STP pair to a primary (e.g., inter-network gateway) STP pair in a quad-link configuration. Secondary STPs within the same network are connected via a quad of "D" links. Such links may be referred to as "B/D" links as stated above. An "E" (extended) link connects an SSP to an alternate STP. "E" links provide an alternate signaling path if an SSP's "home" STP cannot be reached via an "A" link. "E" links are not usually provisioned unless the benefit of a marginally higher degree of reliability justifies the added expense.

D Li nk

E Li nk

F Li nk

An "F" (fully associated) link connects two signaling end points (i.e., SSPs and SCPs). "F" links are not usually used in networks with STPs. In networks without STPs, "F" links directly connect signaling points.

34

[Link]

17

7/19/2011

Signalling Modes
In CCS7, two different signaling modes can be used:

Associated mode Quasi-associated mode

In the first mode, the signaling link is directly connected to SPs, which are also the terminal points of the circuit group Suitable when the capacity of the traffic is heavily utilised In the second mode, the signaling link and the speech circuit group run along different routes Suitable for signaling traffic with low capacity utilisation

35

[Link]

SS7 Protocol Stack

Defined by ITU-T

ASP
TCAP

(1, 2 &3)

36

[Link]

18

7/19/2011

SS7 Signalling protocols

SS7: Made up of Layered Architecture; Messages have a point of Origin & Destination MTP 1, 2 & 3:

Physical, Flow control / Error control / Security & Message Id / Routing / NW management Common Transport layers for secure & reliable routing of messages, with higher layers providing the content Interpret directions from higher layers & uses the 64 Kbps / 56 Kbps signalling links to route messages to destinations Links are grouped in Linksets, Routes & Routesets

37

[Link]

SS7 Signalling Protocols

TUP / ISUP / BISUP :

Circuit related Call Control Protocols to establish / release voice calls & data sessions Specific messages such as IAM / SAM by originating SSP, ACM for acknowledgement by receiving SSP, Clear / Release messages etc transmitted. Provides other functions such as Connection oriented / Connectionless data transfer.

SCCP:

38

[Link]

19

7/19/2011

TCAP:

For querying and retrieval of information from databases Initiates queries and receives responses Unbundles messages received into components and sends to appropriate higher layers. MAP, IS 41 etc use TCAP to process their operations & SCCP to transport data to destinations Mobile Core Network Interfaces are based on SS7; MAP defines them.

ASP:

39

[Link]

Intelligent Networks

40

[Link]

20

7/19/2011

Intelligent Networks
The Intelligent Network, typically stated as its acronym IN, is a network architecture intended to allow Network operators to differentiate themselves by providing some other services in addition to the standard telecom services such as PSTN, ISDN and GSM services on mobile phones.

41

[Link]

Intelligent Networks
Example of IN Services are :

Mobile Number portability Toll free calls / Freephone Prepaid calling Account card calling Reverse charging Home Area Discount Premium Rate calls etc.

42

[Link]

21

7/19/2011

Value Added Services

43

[Link]

Value Added Services

Value Added Services are all services beyond standard voice calls and fax transmissions

. Example of VAS Services are :

SMS MMS GPRS Peer to Peer Services Premium Charged Content Ring back tone

44

[Link]

22

7/19/2011

GSM Network Architecture

45

[Link]

Agenda
GSM Network Architecture GSM Network Components and Functions GSM Network Interface and Identities Different types of Handovers Mobility Management and Authentication Mobile Originated and Mobile Terminated call

46

[Link]

23

7/19/2011

Cellular Concepts
Overlapping cells, each covering smaller area Neighboring cells use different carrier frequencies Reuse of frequencies Mobility of mobiles handled by handover Paging for incoming calls Tracking of idle mobiles Authentication of users Logical channels in Air Interface Limited carrier bandwidth in Air interface, Shared between all active users (200KHz in GSM)

47

[Link]

GSM Network Architecture -1

BSC
OML

OMC VMSC
BTS BTS BTS BTS BTS MS BTS BTS BTS

A
TRAU

AUC

MSC

HLR EIR VLR

SMSC BC BSC PSTN

48

[Link]

24

7/19/2011

Sectors in BTS
Cell Sectorisation Sectorisation fit more cells into the same geographical area Increasing in number of subscribers Sectored sites are required in densely populated areas Sectorisation splits a single site into a number of cells Each sector cell has Tx and Rx antennas Each sector behaves as an independent cell

49

[Link]

Group of Cells Frequency Re-Use

1 1 1 2 4 5 7 2 4 5 7 6 6 1 3 5 7 3 5 7 2 4 6 2 4 6 1 3 3 5 7 2 4 6 3

7 Cell pattern
50

[Link]

25

7/19/2011

Overlapping Cells
Overlapping of Cells

Actual Coverage Area Of Cell 3 Cell 1 Overlaps 6 Others Different Frequencies Must Be Used In Adjacent Cells Seven Different Sets Of Frequencies Required

Actual Coverage Area Of Cell 1

51

[Link]

GSM System Architecture -2

Voice Path Signaling Path Signaling Path Voice Path IS-41 BSS MS BSC BSC A Interface A-bis IS-41 SS7 PSTN CCS7/ R2MF SMS Service Centre X.25 MSC HLR VLR AUC EIR MAP IS-41 SS7 IS-41 SS7 Other MSC EIR SS7 HLR AUC X.25 OMC VMS

X.25

SS7

Air Interface

SS7 Billing Centre

MSC - Mobile Services Switching Centre BSC - Base Station Controller VLR - Visitor Location Register AUC - Authentication Centre

BTS- Base Transceiver Station OMC - Operation & Maintenance Centre HLR - Home Location Register EIR - Equipment Identity Register

MS - Mobile Station

52

[Link]

26

7/19/2011

Mobile Communication Spectrum

Bands (MHz) 450 480 800 900 1700 1800 1900 2100 2500 Frequencies (MHz) 450-467 478-496 824-894 890-960 1750-1870 1710-1880 1850-1990 1885-2025 & 2100-2200 2500-2690 GSM/ EDGE x x x x x x x x x

Regions Europe Europe America/APAC Europe/APAC Korea Europe/APAC America Europe/APAC ITU Proposal

WCDMA CDMA2000 x x x x x x x x

Uplink

Dowlink

824-869 890-915

869-894 935-960

1710-1785 1805-1880

53

[Link]

GSM Air Interface

Separate Bands for Uplink and Downlink

GSM 900 MHz D/L : 935 - 960 MHz U/L: 890 - 915 MHz BW: 25MHz GSM 1800 MHz- U/L : 1710 - 1785 MHz D/L: 1805 1880 MHz BW: 75MHz

FDMA and TDMA Multiplex

200kHz Channels 124 Frequency Channels (ARFCN) for GSM900 1 to 124 374 ARFCNs in GSM 1800 512 to 885 Each operator is given 21 ARFCNs 8 Mobiles share ARFCN by TDMA 270.833 kbits/sec. rate

0.3 GMSK Modulation

Variable Tx Power and Timing

54

[Link]

27

7/19/2011

MS - Mobile Station
Mobile station provides user access to GSM network for Voice & Data All GSM mobiles comply with the GSM standards Subscriber data is read from a SIM card that plugs into MS Each MS has a unique number called IMEI number, which is EIR for authentication purposes Mobile also scans neighboring cells and reports signal strength Network knows whereabouts of mobiles from HLR & VLR databases Mobiles Transmit and Receive voice at 13 Kbps over air interface
MS BTS BTS MS
SIM

stored in

Mobile camps on to the GSM network through a BTS serving the cell

VLR EIR AUC

BTS

HLR

55

[Link]

MS - Mobile Station Output Power

Output Power determines:

Accessibility in areas of coverage Talk time and Standby Time

Output Power on call is varied as commanded by BTS

CLASS 1 CLASS 2 CLASS 3 CLASS 4 CLASS 5

20 watts 8 watts 5 watts 2 watts 0.8 watts

Vehicle and Portable Portable and Vehicle Hand-held Hand-held Hand-held

56

[Link]

28

7/19/2011

Mobile Station Identities

MSISDN : Human Identity used to call a Mobile Station
CC 91 NDC XXX SN 12345

IMEI: Serial number unique to every Mobile Station

TAC
6 digits

FAC
2 digits

SNR
6 digits

SP
1digit

57

[Link]

SIM - Subscriber Identity Module

Removable Module inserted when the subscriber wants to use the MS

Two Sizes Credit Card Stamp Size

l l l l

GSM

4-8 digits PIN code 3 false entries - blocks 8 digit PUK 10 false entries - disabled MS

IMSI : Network Identity unique to a SIM

3 digits 2 digits 10 digits

MCC 404

MNC XX

MSIN 123456

ROM = 6kb to 16kb RAM = 128 byte to 256 byte EEPROM = 3 kb to 8 kb

58

[Link]

29

7/19/2011

SIM - Subscriber Identity Module

Contents of SIM

Serial Number IMSI, Subscriber Key (Ki) Algorithms for Authentication, Ciphering Network Code PIN, PUK Charging Information Abbreviated Dialing Supplementary Features ( e.g. call barring )

SIM features and contents are personalized by the Service Activator MS also stores some temporary data on SIM during operation
59

[Link]

BTS - Base Transceiver Station

BTS has a set of Transceivers to communicate with mobiles in its area One BTS covers one or more than one cell The capacity of a cell depends upon number of transceivers in a cell BTS is connected to the BSC through Abis Interface (E1/T1) BTS transmits and receives voice at 13 kbps over air interface to the mobiles BTS commands mobiles to set TX power, timing advance and Handovers

BTS

MS BSC

MSC

CELL
60

RF Channels

Abis - 2 MBits/s

[Link]

30

7/19/2011

BSC - Base Station Controller

Several BTS's are connected to one BSC BSC manages channel allocation, handovers and release of channels at connected BTS's BSC connects to each BTS on an Abis interface & to the MSC on A interface BSC has the entire database for all cell parameters associated with the BTS's Abis A MSC

61

[Link]

TRAU - Transcoder / Rate Adaptation Unit

The MSC is based on ISDN switching. The Fixed Network is also ISDN based ISDN has speech rate of 64kbps. Mobile communicates at 13 Kbps TRAU converts the data rates between 13 KB/s GSM rate to 64 Kbits /s Standard ISDN rate and vice versa TRAU can be collocated with the BTS,BSC or MSC or it can be a separate unit
MS P S T N

RF Channels

MS

BTS

Abis interface 2 MBits/s

BSC

A interface 2 MBits/s

MSC TRAU

VOICE

13 KBits/sec

16 KBits/sec

16 KBits/sec

64 KBits/sec

62

[Link]

31

7/19/2011

Location of Transcoder
Normally collocated with MSC to save transmission resource Separate Unit or attached with MSC

64 kbps MSC Transcoder

16 kbps

BSC

63

[Link]

MSC - Mobile Switching Centre

Exchange where calls are established, maintained and released Database for all subscribers and their associated features Communicates with BSC's on MS side and with PSTN on fixed line side MSC is weighted on the number of subscribers it can support MSC BTS's HLR

VLR

BSC's

64

[Link]

32

7/19/2011

MSC - Mobile Switching Centre

Multiple MSC's
MSC BSC's GMSC

BSC's

MSC

More subscribers ? More MSC's

65

[Link]

HLR - Home Location Register

MSC has all subscribers databases stored in HLR HLR has all permanent subscribers database MSC communicates with HLR to get data for subscribers on call HLR

HLR will have the series of all subscriber numbers, which may not be activated or issued
66

[Link]

33

7/19/2011

VLR - Visiting Location Register

A subscription when activated is registered in VLR VLR has all the subscriber no's which are activated VLR also has temporary database of all activated subscribers ( on/off, location )
HLR

VLR

MSC communicates with HLR for subscribers coming from different MSC's and if found valid, then registers them in its VLR

67

[Link]

AUC - Authentication Centre

Authentication is a process by which a SIM is verified Secret data and the verification process algorithm are stored at AUC AUC is the element which carries out the verification of SIM AUC is associated with the HLR

MSC
MS

HLR

AUC

68

[Link]

34

7/19/2011

EIR : Equipment Identity Register

EIR is the Mobile Equipment Database which has a series of IMEI's MSC asks the Mobile to send its IMEI MSC then checks the validity of IMEI with the EIR All IMEI are stored in EIR with relevant classifications
Classifications of IMEI( Mobile Stations )

l White List

l Grey List l Black List

EIR
MSC
69

[Link]

BC - Billing Centre
BC Generates the Billing Statement for each Subscriber BC may be directly connected to the MSC MSC sends the billing information ( duration of call ) to BC BC then produces the billing amount based on the units set

BC

70

[Link]

35

7/19/2011

Real Network Scenario

One state is considered as one local network One state has many cities and towns The towns and cities are well distributed within the state Need for fragmented Network architecture State is sub divided into few major regions Each region will have a MSC, many BSCs under MSC and each BSC will have multiple BTSs All regions are connected to form one state network

71

[Link]

Block Diagram of Real network

To BSNL To Idea To Airtel To Reliance

HLR AuC GMSC EIR

VLR

MSC
LA -3

VLR

MSC

VLR

MSC

BSC

BSC

BSC

BSC

BSC

BSC

LA -1 LA -2

72

[Link]

36

7/19/2011

OMC - Operations & Maintenance Centre

It is the central monitoring and remote maintenance centre for all network elements OMC has links to BSC's and MSC for FSCAP Management
BTS's OMC System MSC

BTS's

BTS's

OMC Terminals

BSC's
73

[Link]

Network Operation Centers

OMC-R:

Operation & Maintenance Center for Radio Side.

OMC-S:

Operation & Maintenance Center for Switch Side.

NOC:

Overall Network Operation Center (Regional or Global ) which will include Radio, Switch , IN, VAS, Packet Core etc.

74

[Link]

37

7/19/2011

Identification of Serving Area in Cellular Network Serving Area Identification

CI Cell Id (smallest area) BSIC Base Station Identity Code (BTS) LAC Location Area Code Group of BTSs or normally one BSC area PLMN Id Identification of Home Network

75

[Link]

FCAPS
F:- Fault Management C:- Configuration Management A:- Accounting Management P:- Performance Management S:- Security Management

76

[Link]

38

7/19/2011

Fault Management
Fault is an event that has a negative significance. The goal of fault management is to recognize, isolate, correct and log faults that occur in the network. Furthermore, it uses trend analysis to predict errors so that the network is always available. When a fault or event occurs, a network component will often send a notification to the network operator using a proprietary or open protocols such as SNMP.

77

[Link]

Configuration Management
To gather and store configurations from network devices (this can be done locally or remotely). To simplify the configuration of the device To track changes that are made to the configuration To configure ('provision') circuits or paths through non-switched networks To plan for future expansion and scaling

78

[Link]

39

7/19/2011

Accounting Management
Accounting is often referred to as billing management. The goal is to gather usage statistics for users. Using the statistics the users can be billed and usage quota can be enforced. RADIUS and Diameter are examples of protocols commonly used for accounting.

79

[Link]

Performance Management
To enable the manager to prepare the network for the future, To determine the efficiency of the current network, for example, in relation to the investments made to set it up. To address the throughput To monitor Network Health by collecting and analysing performance data Trends can indicate capacity or reliability issues before they become service affecting. Performance thresholds can be set in order to trigger an alarm. The alarm would be handled by the normal fault management process (see above). Alarms vary depending upon the severity

80

[Link]

40

7/19/2011

Security Management
Security management is the process of controlling access to assets in the network. Data security can be achieved mainly with:

Authentication Encryption and Authorization

81

[Link]

GSM Signaling Interfaces

A,B,C,D,E,F,G,H,I = SS7 Abis = LAPD OML = X.25 BSC MSC B

VLR
G D

VLR
C F
HLR/AUC

HLR/ AUC

Abis BTS

EIR
OMC OML I E SUPP H GMSC
GSMSC

PSTN

SS7/R2

82

[Link]

41

7/19/2011

Abis Interface
Abis is a G.703 interface. It could be E1 or T1 Abis carries Traffic information of all the mobiles in the cells controlled by the BTS Abis also carries signaling information between BTS and BSC Signaling over Abis is done by LAPD protocols LAPD has several modes of implementation

LAPD LAPD Concentrated LAPD Multiplexed

E1 / T1

83

[Link]

Abis Interface
LAPD Modes Signaling for each TRX is on a dedicated 64 Kbps circuit Maximum Signaling for 10 Transceivers on 1 E1 link

64 kbps 64 kbps 64 kbps 64 kbps 64 kbps 64 kbps 64 kbps 64 kbps 64 kbps 64 kbps
84

0 1 2 3 4 5 6 7 8 9

Sync TRX Signaling 4 Traffic Channels 4 Traffic Channels TRX Signaling 4 Traffic Channels 4 Traffic Channels TRX Signaling 4 Traffic Channels 4 Traffic Channels

} 1 TRX } 1 TRX } 1 TRX

[Link]

42

7/19/2011

Logical Channels

85

[Link]

Logical Channel
Logical Channel refers to type of information which is carried in the Physical Channel. Logical Channels are divided into two groups

Traffic Channels Control Channels

Traffic Channel - A logical channel that used for carrying user traffic (usually voice or data) Control Channel - A logical channel that has been logically used for carrying control data or signaling. There are many different types of control channels

86

[Link]

43

7/19/2011

Logical Channels

Group Traffic Channel Broadcast Channel

Channel TCH/F TCH/H BCCH FCCH SCH RACH AGCH PCH SDCCH SACCH FACCH

Direction UL&DL UL&DL DL DL DL UL DL DL UL&DL UL&DL UL&DL

Common Control Channel Dedicated Control Channel

87

[Link]

Traffic Channel

88

[Link]

44

7/19/2011

Traffic Channel (TCH)

Traffic Channel Full Rate (TCH/FR)

For speech 13 kbps For data 12, 6 or 3.6 kbps Carries information at a gross bit rate of 22.8 kbps Carries information at a gross bit rate of 11.4 kbps For speech 6.5 kbps & for data 6 or 3.6 kbps EFR provides speech service that has improved speech quality compared to TCH/FS Employs new speech coding algorithm Supports phase 2 plus Mobile on words

Traffic Channel Full Rate (TCH/HR)SF

Traffic Channel Enhanced Full Rate (TCH/EFR)

89

[Link]

Control Channels

Broadcast Channels (BCH) Common Control Channels(CCCH) Dedicated Control Channels (DCCH)

90

[Link]

45

7/19/2011

Control Channels
Broadcast Channels

Frequency Correction Channel (FCCH) Synchronization Channel (SCH) Broadcast Control Channel (BCCH) Paging Channel (PCH) Random Access Channel (RACH) Access Grant Channel (AGCH) Stand-alone Dedicated Control Channel (SDCCH) Slow Associated Channel (SACCH) Fast Associated Channel (FACCH)

Common Control Channels

Dedicated Control Channel

91

[Link]

Control Channels

92

[Link]

46

7/19/2011

Broadcast Control Channel

BCCH is a downlink control channel that is used to broadcast information such as cell and network identity (CGI), operating characteristics of the cell - current control channel structure, channel availability and congestion BCCH also broadcasts a list of channels that are currently in use within the cell Frame 2 through frame 5 in a control multiframe (4 out of 51 frames) contain BCCH data

93

[Link]

Broadcast Control Channel

BCCH and other control channel are transmitted in time slot 0 of a particular ARFCN (Absolute Radio Frequency Number) Transmitted at constant power by BTS at all times RF carrier used for this is known as BCCH carrier The information carried on the BCCH is periodically (at least every 30 seconds) by the it is in Idle state Dummy Bursts are transmitted to ensure continuity when there is no BCCH carrier traffic MS monitor & store BCCH information of 6 best adjacent cells

94

[Link]

47

7/19/2011

Information carried on BCCH

Public Land Mobile Network Id (PLMN Id) Location area identity (LAI) Base Station Identity Code(BSIC) List of neighbor cells which should be monitored by MS System Information 1,2,3 and 4

95

[Link]

Frequency Correction Channel (FCCH)

Provides information for carrier synchronization For communicating with the BTS the mobile station must get tuned to the frequency of BTS Transmitted frequently on BCCH frequency timeslot Allows the MS to synchronize its own frequency to transmitting BTS It is sent during TS 0 on the BCCH carrier frequency It acts as a flag to the MS to identify TS0 that of

96

[Link]

48

7/19/2011

Frequency Correction Channel (FCCH)

Frames 0, 10, 40 of control multiframe (x 51) contain FCCH for frequency offset estimation and correction

All zero data constant frequency

When MS is turned on, it hunts continuously for FCCH on beacon of all carriers in its SIM list FCCH allows mobile to acquire the carrier frequency of the base station Mobile then looks in the next frame for Synchronization Channel 3 TB 3 TB 8.25 G

142 all zeros

FCCH burst

97

[Link]

Synchronization Channel (SCH)

Used to time synchronize the mobile stations Carries information about frame synchronization Parameters sent on SCH are

Frame Number Base Station Identity Code (BSIC)

98

[Link]

49

7/19/2011

Synchronization Channel (SCH)

This is the first data reception after turning MS on

Long training sequence (64 bits) Can determine slot number (SCH is on slot # 0), multiframe, and hyperframe numbers

78 bits containing information about frame number and BSIC

BSIC is 6 bit color code for the beacon frequency - adjacent cells will have different colors (BSICs) 3 TB 39 message 64 Training 39 message 3 TB 8.25 G

Synchronization burst
99

[Link]

Common Control Channel (CCCH)

Operate either Uplink or Down link directions Responsible for transferring control info between all MSs and BTS Required for the implementation of call origination and call paging functions Active MS must frequently monitor both BCCH & CCCH CCCH is transmitted on the RF carrier with the BCCH CCCH is further divided into RACH,AGCH,PCH.

100

[Link]

50

7/19/2011

Random Access Channel (RACH)

MS transmits to gain access to the system MS may initiate a call or responds to a page RACH is used in Up-link direction by the MS for requesting a channel for a connection

To acknowledge a paging done through PCH To request a channel to originate a call, send SMS, etc MS accesses RACH after acquiring frequency & timing sync

It is an access channel that uses the slotted ALOHA access scheme

101

[Link]

RACH Frame structure

This burst includes 48 bit synchronization sequence and 36 bit msg. This burst has a longer guard period of 58 bits. Allows transmission of MS that has not acquired the time. synchronization does not collide with other bursts if it is within 35 km.
Message
36 Additional Guard Bits 60

TB 8

Training sequence 41

TB 3

102

[Link]

51

7/19/2011

RACH call flow

BSS Access Request Message on RACH Assign SDCCH on AGCH

MS

Response on SDCCH

103

[Link]

Access Grant Channel (AGCH)

AGCH is a downlink control channel used by base station to allocate SDCCH for bidirectional communication path between BS and MS AGCH instructs the MS to operate in a particular physical channel (time slot and ARFCN) AGCH is sent in response to a RACH request by MS MS will move to the dedicated channel in order to proceed with either a call setup, Location Area Update, SMS, or in response to a paging message This assigns a SDCCH to the MS for carrying the signaling messages related to call set up, registration, etc. AGCH uses 4 consecutive frames for sending acknowledgement message
104

[Link]

52

7/19/2011

Paging Channel (PCH)

PCH is a downlink channel used by the base station for paging purpose to inform a MS about an incoming call PCH uses 4 consecutive frames to send a message. Used by the BTS to page IMSI, TMSI or IMEI to the MS PCH transmits TMSI (usually) or IMSI (on rare occasions) PCH may also be used to provide cell broadcast (ASCII text messages) to all subscribers as part of the SMS feature of GSM

105

[Link]

Paging Procedure

MS Paging Request Message on PCH (TMSI or IMSI)

BSS

Channel Request on RACH Assign SDCCH on AGCH

Response on SDCCH

106

[Link]

53

7/19/2011

Dedicated Control Channel (DCCH)

DCCH channels are used to assist mobile users before and after setting up of calls They are fully duplex, Point to Point channels Used for signaling between BTS and an individual MS Assigned to a single MS for call setup & subscriber validation

107

[Link]

Dedicated Control Channel (DCCH)

DCCH is a single time slot on an RF carrier and is used to convey 8 SDCCHs SDCCH channels are used to carry SMS, apart from subscriber information so they are equally allotted in both uplink and downlink DCCH is further divided into SDCCH, ACCH.

108

[Link]

54

7/19/2011

Stand-alone Dedicated Control Channel (SDCCH)

SDCCH is a duplex signaling channel allotted through AGCH message for carrying signaling data & for user services (like messaging not requiring TCH) SDCCH supports transfer of data to and from the MS during call setup and validation SDCCH enables the base station and MS to remain connected till the MS identity is verified and is also used for signaling in higher layers

109

[Link]

SDCCH
SDCCH is disconnected once TCH is assigned (SACCH becomes available) SDCCH is also used for service requests. SDCCH may be carried on a traffic multiframe basis or control multiframe basis, net SDCCH bit rate is about 0.8 kbps . Used by a single MS for Call setup, Authentication, Location updating, Ciphering initiation, Equipment validation and Assignment of a TCH

110

[Link]

55

7/19/2011

Associated Control Channel (ACCH)

These can be associated with either an SDCCH or a TCH ACCH used for conveying signaling and other information bidirectional between BS and MS There are two types of ACCH

SACCH (Slow Associated Control Channel) FACCH (Fast Associated Control Channel)

111

[Link]

Slow Associated Control Channel (SACCH)

Conveys power control & timing information in downlink direction Conveys Receive signal strength Indicator (RSSI) & Link Quality Reports in uplink direction Duplex channel which is always allocated to a traffic or SDCCH SACCH is available on frame # 12 in a traffic multiframe SACCH multiframes for different time slots are offset to achieve load balancing at BSC

112

[Link]

56

7/19/2011

Fast Associated Control Channel (FACCH)

FACCH is made use of during handover by setting the steal bits of traffic channel. In every frame there are 2 sets of 57 bits and by stealing in 8 slots you get 456 bits It is transmitted instead of a TCH, It steals the TCH burst and inserts its own information Used for handovers & immediate assignments, also required for every call set-up and release During the call FACCH data is transmitted over the allocated TCH instead of traffic data This is marked by a flag called a stealing flag, this process of stealing a TCH for FACCH data is called pre-emption

113

[Link]

Signalling And Call Processing

114

[Link]

57

7/19/2011

GSM Functional Planes

operator

user
BTS BSC MSC VLR HLR GMSC

CM GMSC

OAM CM
MM

HLR

MM

RR

RR
trans

MS

BTS

BSC

transmission

MSC/ VLR

115

[Link]

GSM Signaling Protocol Architecture

MS BSC MSC

CM MM BTS RRM RRM LAPDm Signaling Layer1 LAPDm BTSM LAPD RRM SCCP BTSM LAPD Signaling Layer1 MTP Relay BSSAP

CM MM BSSAP SCCP

M A P TCAP SCCP

I S U P

Signaling Signaling Layer1 Layer1

MTP

MTP

Um

Abis

B/C/D/E/F

116

[Link]

58

7/19/2011

GSM System Model Signaling View

VLR MAP/G VLR PSTN/ ISDN PLMN MAP / ISUP MAP/ D MAP/B HLR MAP

AUC MSC

MAP/C MAP/E / ISUP

MAP / ISUP

MSC

MAP/F

EIR

BSSAP / Q.931 BSC BSS LAPD / Q.931 BTS LAPDm / Q.931 MS

117

[Link]

RRM functions cover all activities related to physical layer (air interface) These relate functions like

What Are RRM Functions?

Channel assignment Channel release Channel change and handover Change of channel frequencies, hopping sequences (algorithms) and frequency tables Measurement reports from the MS Power control and Time Advance Modification of channel modes (speech and data) Cipher mode setting

118

[Link]

59

7/19/2011

Some RRM Messages

Name of Message

Sent by & sent to BSC to MS

Carried on Channel SDCCH

Purpose of Message

Assignment Command

Allocation of TCH (ARFCN & TS#)

Assignment Complete

MS to BSC

SDCCH

Acknowledge for Assignment Command Request for channel

Channel Request

MS to BSC

RACH

Channel Release

BSC to MS

SDCCH or TCH

Release of SDCCH or TCH

Cipher Mode Command

BSC to MS

SDCCH

To indicate to MS that ciphering will start

119

[Link]

Some RRM Messages (Contd.)

Name of Message Cipher Mode Complete Immediate Assignment Command Paging Request Paging Response Sent by & sent to Carried on Channel MS to BSC BSC to MS SDCCH AGCH Purpose of Message Acknowledge that MS will also start ciphering Allocation of TCH (ARFCN & TS#)

BSC to MS MS to BSC

PCH SDCCH

To inform MS about incoming call / SMS To respond to paging by revealing MS identity (TMSI) To broadcast CGI, System information, neighboring cell description

System Information Messages

BSC to all MSs

BCCH

120

[Link]

60

7/19/2011

Some RRM Messages (Contd.)

Name of Message Measurement Report Handover Command Sent by & sent to Carried on Channel MS to BSC BSC to MS SACCH FACCH / SACCH Purpose of Message MS reporting on signal strength measurement Change of MS channel allocation (will include new ARFCN & TS#)

Handover Access

MS to BSC (new)

FACCH / SACCH

Initial message sent on the new TCH about presence of MS

Handover Complete

MS to BSC (new)

FACCH / SACCH

MS informs new BSC that handover has been completed

Handover Failure

MS to BSC (old)

SACCH / FACCH

MS indicates that handover has failed

121

[Link]

What Are MM Functions?

All activities connected with mobility of MS are MM functions

Location updating Periodic registration Authentication procedure IMSI attach procedure (on power up a MS will present its IMSI to network and get a TMSI) IMSI detach ( on power off of a MS, detach procedure to tell network it is no longer in service. TMSI reallocation Identification

122

[Link]

61

7/19/2011

Some MM Messages
Name of Message Sent by & sent to MSC to MS Carried on Channel SDCCH Purpose of Message

Authentication Request

Sending RAND for authenticating MS MS response by sending SRES

Authentication Response

MS to MSC

SDCCH

Authentication Reject

MSC to MS

SDCCH

MSC informing MS that authentication has failed To update location by including TMSI and LAI To indicate that location updating has been done

Location Updating Request

MS to MSC

SDCCH

Location Update Accept Command

MSC to MS

SDCCH

123

[Link]

Some MM Messages (Contd.)

Name of Message TMSI Reallocation Command Sent by & sent to MSC to MS Carried on Channel SDCCH Purpose of Message To indicate that location updating has been done and will include new TMSI

TMSI Reallocation Complete

MS to MSC

SDCCH

Acknowledgement of TMSI Reallocation Command by MS

IMSI Detach Indication

MS to MSC

SDCCH

Indication to MSC that its identity be removed from MSC/VLR

IMSI Attach Command Identity Request Identity Response

MS to MSC MSC to MS MS to MSC

SDCCH SDCCH SDCCH

To inform MSC that MS is again powered up MSC requesting MS to send its identity (IMSI) MS sends its identity (IMSI)

124

[Link]

62

7/19/2011

What are CM Functions?

CM functions relate to establishing, releasing call and status indication

Call establishment for mobile-originated calls Call establishment for mobile-terminated calls Indication of status Changes of transmission mode during an ongoing call Call reestablishment after interruption of an MM connection Dual-tone multifrequency (DTMF) control procedure for DTMF transmission

125

[Link]

Flow of CM Messages
Interface between MS and MSC is called User to Network Interface (UNI)

Q.931 messages are used in this interface

Interface between MSC / GMSC and external network is called Network to Network Interface (NNI)

ISUP messages are used in this interface

UNI
Q.931 messages
MS A

MSC / GMSC

NNI
ISUP messages

PSTN / PLMN

126

[Link]

63

7/19/2011

Call Management Messages

Message name Starting a call SETUP EMERGENCY SETUP CALL PROCEEDING PROGRESS CALL CONFIRMED ALERTING CONNECT During a call START DTMF STOP DTMF MODIFY USER INFORMATION Ending a call DISCONNECT RELEASE RELEASE COMPLET Abnormal conditions STATUS STATUS ENQUIRY CONGESTION CONROL
127

Transmitted by MS/MSC MS MSC MSC MS MS/MSC MS/MSC MS MS MS/MSC MS/MSC MS/MSC MS/MSC MS/MSC MS/MSC MS/MSC MS/MSC
[Link]

Important ISUP Messages

There are 3 important ISDN User Part (ISUP) messages

IAM (Initial Address Message) is sent by the calling network to initiate a call sending complete information about the call calling number, called number, type of call and other information ACM (Address Complete Message) is sent by terminating network to confirm that the called number is free and is being alerted ANM (ANswer with Metering) is sent by terminating network once the called subscriber answers the call. Now the conversation can begin and metering starts

128

[Link]

64

7/19/2011

Important Q.931 Messages

There are 3 important ISDN User Part (ISUP) messages

Setup message is sent by user or network (originating side) to initiate a call by sending information about the call calling number, called number, type of call and other information this is equivalent to IAM Alerting is sent by the other side (terminating side) to confirm that the called number is free and is being alerted this is equivalent to ACM Connect message is sent by the terminating side that the called subscriber has answered the call this is equivalent to ANM

129

[Link]

Mobile Originated Call

MS BSC MSC VLR PSTN

1 2 3

Setup (dialled digits + encryption)

Send info for Outgoing Call (call restriction query)l Complete Call

Call Proceed (on SDCCH)

4 5 6 7 8 9 10 11 12 13 14
ringback heard by MS Answer Connect Connect Acknowledge Alerting Assignment of trunk on A channel Assignment of TCH (SDCCH) Assignment Complete Assignment Complete (voice path from MS to MSC)

Call Establishment to PSTN no.

(IAM) (ACM)

Route Establishment

(ANM)

130

[Link]

65

7/19/2011

Messages In Mobile Originated Call (Core Network)

1. When user dials the number and presses ok button MS sends

Setup message transferring this info to MSC

2. MSC sends a message to VLR for accessing subscription

information of MS

3. VLR checks the database of MS to determine whether the call

can be allowed or not and returns a message

4. MSC send Call Proceeding message to MS 5. MSC allocates a trunk between BSC &MSC and asks BSC to assign
TCH for MS

6. BSC allocates TCH, sends Assignment message to MS 7. MS tunes to the TCH and sends Assignment Complete message
to BSC

131

[Link]

Messages In Mobile Originated Call (Core Network)

8. BSC deallocates SDCCH, connects TCH to the trunk and sends

Assignment Complete message to MSC

9. MSC sends Initial Address Message (IAM) to PSTN containing

the digits dialed

10. PSTN sets up the call and returns Address Complete

Message(ACM)

11. MSC informs MS that destination number is being alerted,

subscriber hears ringing tone

12. When called subscriber answers PSTN sends Answer message 13. MSC informs MS that connection has been established through
the Connect message

14. MS returns a Connect Acknowledge message and conversation

can proceed
132

[Link]

66

7/19/2011

Mobile Terminated Call

GMSC
MS BSC MSC VLR HLR PSTN Call Establishment Message Send Routing Information (VLR) Routing Information Send info for Incoming Call Page LA & TMSI

(IAM)

1 2 3 4 5 6 7
Page Request (TMSI) Channel Request (on RACH) Page Message to appropriate BSCs

8 9 SDCCH Assignment (on AGCH) 10 Page Response on SDCCH 11 12 13 14 15 16 17

Page Response Process Access Request Complete Call Setup Call Confirmed Alerting Connect Answer end of MSC-VLR dialogue Setup Complete

(ACM)

18 19 Connect Acknowledge 20 21
133

(ANM)

[Link]

Messages In Mobile Terminated Call (Core Network)

1. GMSC receives IAM for an incoming call from PSTN to MS with

directory no MSISDN

2. MSC requests routing information from HLR through Routing

Information Message by including MSISDN

3. HLR acknowledges by returning MSRN / MSISDN and address of

serving VLR

4. MSC queries VLR with Send Info for Incoming Call message 5. VLR responds with a Page message that specifies the LAI & TMSI
of MS

If incoming calls are barred VLR will inform the MSC and MSC would connect to an appropriate announcement

134

[Link]

67

7/19/2011

Messages In Mobile Terminated Call (Contd.)

6. MSC determines the BSCs covering LAI and sends the Page
message to each of the BSCs

7. Each BSC broadcasts TMSI of MS in Page Request message in PCH 8. MS responds with Channel Request message in RACH 9. BSC allocates SDCCH, sends Channel Assignment message to MS
over AGCH

10. MS sends Page Response message (containing MSs TMSI & LAI)
over SDCCH

11. BSC forwards Page Response message to MSC 12. MSC sends Process Access Request message to VLR

135

[Link]

Messages In Mobile Terminated Call (Contd.)

13. 14. 15. 16. 17. 18. 19. 20. 21.

VLR responds with a Complete Call message MSC sends Setup message to MS MS responds with Call Confirmed message MS sends Alerting message to MSC indicating the subscriber is being alerted about incoming call MSC returns ACM to PSTN When user answers, MS sends Connect message to MSC MSC returns Connect Acknowledge message to MS MSC sends Answer message to PSTN VLR closes the dialog with MSC by returning Send Info for Incoming Call Acknowledge message

136

[Link]

68

7/19/2011

Services In GSM Network

Extra services not included with basic services Enhancements provided with basic services Call forwarding, conferencing

Automatically assigned when user registers in network

SERVICES

Basic telephony, SMS service

BASIC SERVICES

SUPPLEMENTARY SERVICES

Data ,Internet, GPRS etc TELE SERVICES BEARER SERVICES

137

[Link]

SMS
Authentication and Ciphering GMSC interrogates HLR SMS transferred to SMSC SMSC routes message to GMSC

SMS Request

Message routed to destination MSC

138

[Link]

69

7/19/2011

Procedures and Processes in GSM

Mobile Authentication Mobile Originated Call Mobile Terminated Call Mobility Management (Location Update) Handover Process

139

[Link]

Authentication and Encryption (GSM)

AuP
Ki RAND Ki RAND

EnP
TDMA Frame #

Cipher Block

A3

A8

Kc

A5

(114 Bits)

Encrypted data
114 bits

SRES

Data 114 bits (interleaved)

140

[Link]

70

7/19/2011

What is Handover?
Handover is a process of changing channel during call to maintain call continuity Handover is done to

Improve the call quality

When receive quality or receive level is bad Overcome interference

Overcome propagation anomalies

Good signal reception deep into adjacent cell area

Balance the load between BTS move MS to less congested BTS

Reduce the power budget

Primary reason for handover is mobility

141

[Link]

Criteria For Handover

Receive Quality (RXQUAL) on Uplink & Downlink Interference Level Receive Signal Strength (RXLEV) on Uplink & Downlink Distance ( Timing Advance ) Power Budget

142

[Link]

71

7/19/2011

Handover

143

[Link]

Call Handover between cell

As Phone Moves From Cell A To Cell B: Cell A Must Hand The Call Over To B Phone Must Change Frequencies Cell A Must Stop Transmitting
Minimum performance contour A x y B

Handover threshold contour

144

[Link]

72

7/19/2011

Types Of Handover
Handover types on basis of serving & target BTSs

Internal Intra-Cell Handover (BSC controlled) Internal Inter-Cell Handover (BSC controlled) Inter-BSC Handover (MSC controlled) Inter-MSC Handover

Handover types on the basis of channel change

Signaling channel to traffic channel Traffic channel to traffic channel

[Link]

145

Different Handover Scenarios

MSC MSC PSTN

BSC BSC

BSC

BSC MSC Link

146

[Link]

73

7/19/2011

Intra Cell Handover

MS

BSC BTS Call is handed from timeslot 3 to timeslot 5

Handover takes place in the same cell from one timeslot to another timeslot of the same carrier or different carriers( but the same cell) Intra-cell handover is triggered only if the cause is interference. Intra-cell handover can be enabled or disabled in a cell

147

[Link]

Intra BSC Handover

BSC1
0 1 2 3

MS

BTS1

Call is handed from timeslot 3 of cell1 to timeslot 1 of cell2 . Both the cells are controlled by the same BSC.
0 1 2 3 4 5 6 7

Handover takes place between different BTSs which are controlled by the same BSC

148

[Link]

74

7/19/2011

Intra MSC Handover

BSS1
0 1 2 3

MS

BTS1 MSC

Call is handed from timeslot 3 of cell1 to timeslot 1 of cell2 . Both the cells are controlled by the different BSC.
0 1 2 3 4 5 6 7

BSS2 BTS2

Handover takes place between different BTSs which are controlled by the different BSC
149

[Link]

Inter MSC Handover

MSC1

BSS1

MS

BTS1

Call is handed from timeslot 3 of cell1 to timeslot 1 of cell2 . Both the cells are controlled by the different BSC, each BSC being controlled by different MSC

MSC2

BSS2 BTS2

Handover takes place between different BTSs which are controlled by the different BSC and each BSC is controlled by different MSC.
150

[Link]

75

7/19/2011

Frequency Hopping in a Cell

A call in a cell will hop between a set of frequencies A set of frequencies will be available for hopping Hopping order, start of hopping, Hopping sequence number will be given to the mobile under a cell Hopping reduces interference Hopping also increases capacity List of frequencies available for Hopping depends on the allocation of the spectrum Hopping increases security of the call
151

[Link]

Layered Cell Sizes

Same area covered by multiple layered cells Macro, Micro & Pico cells Handover can happen horizontally (or laterally) or vertically (or hierarchically) Can handle hot spot regions Results in improved Coverage Quality Capacity Disadvantages Increased # sites (cost) Increased signaling load to MSC and hand-offs Stringent power planning necessary
152

Macro cells, low density

Micro cells, high density

Pico cells, higher density

[Link]

76

7/19/2011

Location Area1 BSC

Location Area 5

Location Area2

BSC BSC

Optical/Copper Optical/Copper

Location Area4

BSC Optical/Copper

BSC

Location Area3
153

MSC AREA
[Link]

Optical/Copper

Location Update
Mobile has to update the network about its location area Three types of location update

Normal Location Update IMSI Detach/IMSI Attach Periodic location Update

Location area is identified by Location area Code (LAC) LAC is transmitted in downlink from the BTSs to Mobile so that Mobiles are aware about their location area

154

[Link]

77

7/19/2011

Paging
Paging is for informing the mobile in downlink about any incoming call/sms When there is incoming call or sms,

mobiles location is identified from the VLR MSC will send the page to respective BSCs which are part of that LA All the BTSs under that BSCs will be paged Once the paging response reaches BSC from the MS, BSC informs other BTSs to stop paging

Paging success rate leads to call success rate Paging Success Rate depends on number of paging channels in the downlink
155

[Link]

Mobile Originated Call Radio Network

Channel Request Immediate Assign Service Request Authentication Ciphering Set Up Call Proceeding Assignment Alerting Connection

156

[Link]

78

7/19/2011

Mobile Terminated Call (Radio Network

Paging Channel Request Immediate Assign Paging Response Authentication Ciphering Set Up Call Confirmed Assignment Alerting Connection

157

[Link]

Location update from the mobile

Mobile looks for BCCH after switching on RACH send channel request AGCH receive SDCCH SDCCH request for location updating SDCCH authenticate SDCCH authenticate response SDCCH switch to cipher mode SDCCH cipher mode acknowledge SDCCH allocate TMSI SDCCH acknowledge new TMSI SDCCH switch idle update mode
158

[Link]

79

7/19/2011

Call establishment from a mobile

Mobile looks for BCCH after switching on RACH send channel request AGCH receive SDCCH SDCCH send call establishment request SDCCH do the authentication and TMSI allocation SDCCH send the setup message and desired number SDCCH require traffic channel assignment FACCH switch to traffic channel and send ack (steal bits) FACCH receive alert signal ringing sound FACCH receive connect message FACCH acknowledge connect message and use TCH TCH conversation continues

159

[Link]

Call establishment to a mobile

Mobile looks for BCCH after switching on Mobile receives paging message on PCH Generate Channel Request on RACH Receive signaling channel SDCCH on AGCH Answer paging message on SDCCH Receive authentication request on SDCCH Authenticate on SDCCH Receive setup message on SDCCH Receive traffic channel assignment on SDCCH FACCH switch to traffic channel and send ack (steal bits) Receive alert signal and generate ringing on FACCH Receive connect message on FACCH FACCH acknowledge connect message and switch to TCH
160

[Link]

80

7/19/2011

The network is organized into a hierarchical structure Each level in the hierarchy has its own function

The Hierarchical Structure of a Cellular Network

Core network

Each Base Station is connected to a Base Station Controller (BSC) Each BSC is connected to a Mobile Switching Center (MSC)
MSC (a few to tens)

Radio network

BSC (tens to hundreds)

The cost ratio of the radio network to the core network could typically be e.g. 80/2070/30 In e.g. UK the number of BTSs could be ~10 000

BTS (thousands)

Mobiles (millions)
161

[Link]

How Mobility Management works

3. As long as the user moves between cells within a BSC area the BSC takes care of mobility management. HLR 1. Home Location Register (HLR) stores permanent subscriber information and info on the last location update (current visited MSC)

BSC

Circuit core network

MSC/VLR

2. Visitor Location Register (VLR) of MSC stores the user info temporarily so long as the user is in its area

4. User moves to a new Location Area 5. The VLR of new MSC updates the users new location to the HLR and gets user info for temporary storage

BSC

MSC/VLR

Mobility management is crucial for Roaming (constant availability of mobile service) and handovers (uninterrupted mobile calling)

162

[Link]

81

7/19/2011

Mobile-to-fixed call
Mobile network operator 2. Radio network sets-up the connection to the MSC
HLR BTS BSC

3. MSC routes the call to the fixed operator network

1. Bill dials +91.11.26779000 Fixed network operator

MSC/VLR

4. Fixed network routes the call to its destination normally

Fixed switch

Data is normally transmitted by a Modem to the BTS by the user

163

[Link]

Mobile-to-Mobile Call in Same Network

2. Radio network setsup the connection to the MSC 3. MSC requests routing information from HLR
HLR BTS BSC MSC/VLR

4. HLR requests Routing Number from VLR and relays it to the MSC

1. Bill dials +18173075939

5. Visited MSC pages the mobile terminal

BTS

BSC

MSC/VLR

6. Radio network sets-up connection to the terminal

164

[Link]

82

7/19/2011

Charging of a Mobile Call

1. After the call MSC produces a Call Detail Record (CDR) which includes e.g.: - Callers identification - Dialed number - Call start time - Call duration - Additional services used (e.g. call forwarding)

HLR BTS BSC MSC/VLR

Billing system Mediation device

Bill

BTS

BSC

MSC/VLR

3. Pre-processed CDRs are forwarded to billing system, which does rating, charge calculation and invoicing 2. A mediation device collects the CDRs, and pre-processes them (e.g. filtering, re-formatting)

165

[Link]

Charging of a Pre-Paid Mobile Call

1. In Pre-paid the call charge is deducted in real-time from an account located in a prepaid system, e.g. Intelligent Network (IN).
HLR BTS BSC MSC/VLR

43% of worlds mobile subscribers (491M) are prepaid -79% in Latin America -61% in Europe -27% in APAC -7% in North America
Source: EMC, March 2003

2. MSC checks the account balance from IN prior allowing the call to proceed.

4. MSC can produce CDRs also for the prepaid calls for reporting purposes.
Prepaid system (I.e. Intelligent Network)

3. The account balance is updated during the call.

BTS

BSC

MSC/VLR

Intelligent Network in a nutshell: - Provides means for performing complex call-related tasks in an IT-optimized environment - IN is typically involved in re-routing and charging of calls, e.g. 1-800 numbers, prepaid
[Link]

166

83

7/19/2011

Call to a Roaming Mobile User

4. Radio network sets-up the connection to the MSC
Operator A

5. MSC requests routing information from HLR

HLR BTS BSC MSC/VLR

2. Operator B MSC/VLR updates users location operator A HLR

3. Bill dials +18173075939

Operator B

1. User moves to operator B network

6. Call is routed to visited network using a Routing Number. Visited MSC pages the mobile terminal

BTS

BSC

MSC/VLR

7. Radio network sets-up connection to the terminal

167

[Link]

MSC Area
An MSC service area is made up of a number of LAs and represents the geographical part of the network controlled by one MSC. In order to be able to route a call to an MS, the subscriber's MSC service area is also recorded and monitored. The subscriber's MSC service area is stored in the HLR.

168

[Link]

84

7/19/2011

PLMN Service Area

I MSC I
VLR

II MSC
VLR

MSC

VLR

MSC III IV

VLR

The geographical area in which the operator offers radio coverage and accessibility of the network.
[Link]

169

GPRS / EDGE Network

GPRS - General Packet Radio Service EDGE - Enhanced Data rate for GSM Evolution

170

[Link]

85

7/19/2011

GPRS/EDGE Network
Circuit Switched
MSC PSTN

BTS

BSC

GPRS Core

SGSN

GPRS Backbone IP Network

GGSN

internet

Packet Switched
Shared GSM and GPRS Infrastructure GPRS Infrastructure IP World

171

[Link]

GPRS/EDGE Network Architecture

2G MS (voice only) BSS Abis E A B MS BTS BSC MSC Gs Gb 2G+ MS (voice & data) Gr HLR AuC Gc Gi VLR C D H GMSC PSTN NSS

PSTN

SS7

Gn

PSDN

SGSN

IP

GGSN

BSS Base Station System BTS Base Transceiver Station BSC Base Station Controller

NSS Network Sub-System MSC Mobile-service Switching Controller VLR Visitor Location Register HLR Home Location Register AuC Authentication Server GMSC Gateway MSC

SGSN Serving GPRS Support Node GGSN Gateway GPRS Support Node

GPRS General Packet Radio Service

172

[Link]

86

7/19/2011

BSS Evolution:

GSM to GPRS

Replace/Upgrade existing elements: BTS, BSC, O&M, Network planning, Links (Abis, Ater, ) New element: PCU (Packet Controller Unit) A new core network (GSS) dedicated to GPRS: IP/ATM based, network packet nodes (SGSN,GGSN), Internet equipment (DNS servers, Firewalls, ) Evolution of the network elements: HLR, MSC/VLR, SS7

NSS Evolution

BSS TE ME SIM MS BTS BSC PCU

NSS MSC VLR SGSN

GMSC HLR AuC EIR

New MS/terminals Packet Control Unit (PCU) SGSN and GGSN routers Software updates (BTS, HLR)
[Link]

IP backbone

GGSN

173

GPRS Principles
Packet Switching Adaptive coding Schemes (CS-1 to CS-4) Higher bit-rates per TCH (9.05 ; 13.4 ; 15.6 ; 21.4 kb/s), Higher bit-rates with up to 8 time slots per user Channel sharing by active terminals, Separate allocation of uplink and downlink channels, Separate packet transmission network between the BSC and external packet transmission networks: GSS (GPRS Subsystem) consisting of SGSN and GGSN.

174

[Link]

87

7/19/2011

EDGE Principles
Packet Switching Adaptive coding Schemes (MCS-1 to MCS-9) Adaptive Modulation Schemes (GMSK or 8PSK) Higher bit-rates with up to 8 time slots per user, Channel sharing by active terminals Separate allocation of uplink and downlink channels, Separate packet transmission network between the BSC and external packet transmission networks: GSS (GPRS Subsystem) consisting of SGSN and GGSN.

175

[Link]

GPRS Architecture
New entities are defined

SGSN Serving GPRS support node GGSN Gateway GPRS support node Interfaces between entities GPRS, GSM, core, e PSTN Data packets are transmitted by tunnel mechanisms GTP(GPRS Tunnel Protocol): A protocol for tunnel management (create, remove, etc.) Changes the logical channels and how they are managed Implements the master-slave concept

Transmission plane

Control plane

Radio interface

176

[Link]

88

7/19/2011

View of GPRS
BTS R/S Um BSC
Packet network PSTN

MSC Gb Gr Serving GPRS Support Node (SGSN) Border Gateway (BG) Gn Intra-PLMN backbone network (IP based) Gn GPRS INFRASTRUCTURE Gd Gs
Packet SS7 network Network

HLR/AuC Gs Gr

SMS-GMSC Gd

EIR

Corporate 1 Server

Packet Inter-PLMN network Backbone network

MAP-F Router Local area network

Gp Firewall Point-ToMultipoint Service Center (PTM SC)

Gateway GPRS Support Node (GGSN)

Firewall
Packet Data network network (Internet)

[Link] Gi.X.25 Firewall

Data Packet network network (X.25)

Corporate 2 Server

Router

Local area network

177

[Link]

PCU Packet Control Unit

Decides dynamically which resources are allocated to CS and PS usage based on: load situation, priority, and, operator set rules,

CS Resources BSC CS Radio Resources Management

BSC

PS Resources PCU PS Radio Resources Management

The BSC separates the circuit switched and packet switched traffic from the user and sends them to the GSM and GPRS networks respectively. It also performs most of the radio resource management functions of the GPRS network. The PCU can be either located in the BTS, BSC or SGSN. Frame Relay technology is being used at present to interconnect the PCU to the GPRS core.

178

[Link]

89

7/19/2011

SGSN
The SGSN is the most important element of the GPRS network. The SGSN of the GPRS network is equivalent to the MSC of the GSM network. There must be at least one SGSN in a GPRS network. There is a coverage area associated with an SGSN. As the network expands and the number of subscribers increases, there may be more than one SGSN in a network.

179

[Link]

GGSN
The GGSN is the gateway to external networks. Every connection to a fixed external data network has to go through a GGSN. The GGSN acts as the anchor point in a GPRS data connection even when the subscriber moves to another SGSN during roaming. The GGSN may accept connection request from SGSN that is in another PLMN. Hence, the concept of coverage area does not apply to GGSN. There are usually two or more GGSNs in a network for redundancy purposes and they back each other up in case of failure

180

[Link]

90

7/19/2011

Protocols
Um Gb Gn Gi

Application

IP/X25 Relay SNDCP LLC RLC MAC GSM RF RLC MAC GSM RF SNDCP LLC BSSGP
Net services

IP/X25 GTP UDP/ TCP IP L2 L1 GTP UDP/TCP IP L2 L1

Relay

BSSGP
Net services

L1 bis

L1 bis

MS
181

BSS
[Link]

SGSN

GGSN

GPRS Tunnelling Protocols

Data Tunnels
TID# 1 TID #2 TID #3

Data Tunnels
TID# 3 TID #2 TID# 1

GTP TCP or UDP IP Level 2 Level 1 SGSN

182

Tunnel Management And Control Messages (Signalling Plane)

GTP TCP or UDP IP

IP Level 2 Level 1 Level 2 Level 1

Level 2 Level 1 GGSN

[Link]

91

7/19/2011

Upgrading existing GSM Network to GPRS/EDGE

Changes at BTS

GPRS/EDGE enabled TRX Abis link configuration and capacity upgrade Addition of PCU SGSN interface Gb Addition of SGSN Addition of GGSN Interconnection of SGSN and GGSN GGSN connectivity with external packet network

Changes in BSC

Up gradation of Core network

183

[Link]

UMTS (WCDMA) Overview

184

[Link]

92

7/19/2011

Evolution of Technologies GSM to UMTS

2.75G 2.5G 2G 1G
Analog Voice
GSM GPRS EDGE
115 Kbps 384 Kbps

3G
Multimedia

Intermediate Multimedia

Packet Data

Digital Voice
W-CDMA (UMTS)
Up to 2 M bps

NMT

9.6 Kbps

TDMA TACS
9.6 Kbps

GSM/ GPRS
(Overlay) 115 Kbps

TD-SCDMA
2 M bps?

iDEN
9.6 Kbps

iDEN PDC
9.6 Kbps (Overlay)

AMPS CDMA
14.4 Kbps / 64 Kbps

CDMA 1xRTT PHS

(IP-Based)

cdma2000
1X-EV-DV

144 Kbps

Over 2.4 M bps

PHS

64 Kbps

1984 - 1996+

1992 - 2000+

2001+

2003+

2003 - 2004+
Source: U.S. Bancorp Piper Jaffray

185

[Link]

GSM 2G Architecture
NSS BSS Abis E A B MS BTS BSC MSC VLR C D H GMSC PSTN

PSTN

SS7

HLR

AuC

NSS Network Sub-System BSS Base Station System BTS Base Transceiver Station BSC Base Station Controller MS Mobile Station MSC Mobile-service Switching Controller VLR Visitor Location Register HLR Home Location Register AuC Authentication Server GMSC Gateway MSC GSM Global System for Mobile communication

186

[Link]

93

7/19/2011

2.5G Architecture
2G MS (voice only) BSS Abis E A B MS BTS BSC MSC Gs Gb 2G+ MS (voice & data) Gr HLR AuC Gc Gi VLR C D H GMSC PSTN NSS

PSTN

SS7

Gn

PSDN

SGSN

IP

GGSN

BSS Base Station System BTS Base Transceiver Station BSC Base Station Controller

NSS Network Sub-System MSC Mobile-service Switching Controller VLR Visitor Location Register HLR Home Location Register AuC Authentication Server GMSC Gateway MSC

SGSN Serving GPRS Support Node GGSN Gateway GPRS Support Node

GPRS General Packet Radio Service

187

[Link]

3G Rel99 Architecture (UMTS)

2G MS (voice only) BSS Abis E A B BSC BTS Gb MSC Gs IuCS 2G+ MS (voice & data) Iub RNS ATM IuPS RNC Node B 3G UE (voice & data)
BSS Base Station System BTS Base Transceiver Station BSC Base Station Controller CN Core Network MSC Mobile-service Switching Controller VLR Visitor Location Register HLR Home Location Register RNS Radio Network System RNC Radio Network Controller AuC Authentication Server GMSC Gateway MSC UM TS Universal Mobile Telecommunication System SGSN Serving GPRS Support Node GGSN Gateway GPRS Support Node

CN

PSTN

PSTN

C VLR D H Gr HLR Gn

GMSC

SS7

AuC

Gc Gi

PSDN

SGSN

IP

GGSN

188

[Link]

94

7/19/2011

What is UMTS
UMTS is Universal Mobile Telecommunication System introduced by ETSI in the year 1999 to bring advanced capabilities to enable new services on cellular network The objective of UMTS is also to have one common technology across all cellular network around the globe to enable seamless roaming unlike 2G cellular networks (GSM or CDMA) WCDMA is widely used technology for UMTS UMTS is generally referred as 3rd Generation (3G) network

189

[Link]

Need for higher data rate

Demand for internet on the mobile Video Calls, Video Conferencing on the move Business on the move, Location based services, Navigation M-Commerce and M-Learning Music, Movies, Sports and Mobile TV Unlike voice / sms, above mentioned services need high data rate. These new services cannot be delivered effectively using 2G network data rate

190

[Link]

95

7/19/2011

3G Goals
Up to 2Mbps bit rates in Release 99 and beyond 10Mbps in 3GPP Release 5 Variable bit rates - Bandwidth on demand Multiplexing of different services (speech, video, data) on a single link. Support for a variety of QoS types (delay sensitive to best effort, and BER 10% to 10^-5) Inter-working with existing GSM/GPRS Networks Convergence of Telecom, Internet, Entertainment & enterprise High spectral efficiency

191

[Link]

UMTS Services
A Brief Introduction

192

[Link]

96

7/19/2011

UMTS Services

Person to Person CS Person to Person PS Content to Person

AMR Speech Video Telephony

Multimedia (MMS, RT Video Sharing) VOIP POC Multiplayer Games

Browsing Streaming Download MBMS

193

[Link]

Typical UMTS Call Types

Circuit Switched

CS 12.2kbps (AMR Voice) CS 64 Kbps (Video Call) PS 64 Kbps PS 128 Kbps PS 384 Kbps (depending on service requirements)

Packet Switched - Example

194

[Link]

97

7/19/2011

UMTS QOS Differentiation

Class/Requi rements Delay Guaranteed Bit Rate Traffic Handling Priority Allocation / Retention Priority

Conversation 80 ms al Streaming Interactive Background 250 ms -

Up to 2Mbps Up to 2Mbps -

1,2,3 -

1,2,3 1,2,3 1,2,3 1,2,3

QOS Differentiation is not mandatory. It becomes useful at high loads for more efficient utilization of the network through prioritization based on the networks knowledge of different delay requirements for different services.
195

[Link]

QoS Prioritization
VoIP/ Conferencing

Guaranteed bit rate pipes-Streaming and conversational QoS Guaranteed bit rate conversational RAB Guaranteed bit rate streaming RAB

Streaming

Push-to-Talk

Interactive RAB, THP/ARP=1 Interactive RAB, THP/ARP=3 Background RAB

Browsing

Internet Access

MMS

196

[Link]

98

7/19/2011

No QoS differentiation Example in 2G system

VoIP/ Conferencing

Streaming

Push-to-Talk

One pipe all services get the same treatment Interactive RAB, THP/ARP=3

Browsing

Internet Access

MMS

197

[Link]

WCDMA Air Interface Fundamentals

198

[Link]

99

7/19/2011

Frequency
2100 MHz band Carrier bandwidth 5 MHz Uplink frequency 1920 1980MHz Downlink frequency 2110 2170MHz Frequency Division Duplex (FDD) or TDD

625KHz

3.75MHz

625KHz

5MHz

199

[Link]

Multiple Access standard

3GPP standard All users share the same bandwidth at the same time All sectors use same frequency Users within sectors and Sectors in the network are differentiated by codes This method is called Direct-Sequence Spread Spectrum (DS-SS) Power shared access system Bandwidth on Demand (BoD) is well supported - highly variable user data rates Soft HO and Hard HO supported Inter-system Handover supported

200

[Link]

100

7/19/2011

WCDMA Codes

- Primary Synchronization Code (1 code)

-

Helps in acquiring the network Helps in frame synchronization and identification of Scrambling code group of a sector To differentiate sectors in downlink (512 scrambling codes) To differentiate users in uplink (millions are available) Traffic and Signalling channels # of codes depends on spread factor

- Secondary Synchronization Code (16 sequences)

-

- Scrambling Codes
-

- OVSF Code
-

201

[Link]

Spread Spectrum Technique - Transmitter

Symbol

In Direct Sequence Spread Spectrum, the spectrum of the information signal is spread by multiplying it with semi-random bits (chips) from a CDMA code. The chip rate is 3.84 Mcps which yields ~5MHz bandwidth

Data

Spreading Code Spread signal = Data x code

Spreading Code Data = Spread signal x code

202

Image: Muszynski, [Link] Holoma 2004

101

7/19/2011

Correlation Operation at Receiver

Desired Signal

Correlate (i.e. add the bit by bit product) the received signal with the same code. A different (interferer) signal generates near-zero output at the integrator

Desired spread signal Spreading code Data after dispreading Data after integration
Other users signal

1 -1 1 -1 1

-1
8 -8

Other spread signal 1 -1 8 -8

Other signal after dispreading Other signal after Integration

Image: Muszynski, Holoma 2004

203

[Link]

Processing Gain
The power gain due to spreading process at transmitter is called processing gain Processing Gain: Chip Rate/Data Rate

Power spectrum of the original signal is spread over a wider bandwidth, reducing the PSD of the signal so that it looks like noise to all receivers except the one that knows the spreading sequence
Signal

SNR = Processing Gain * (C/I)

Interference

204

[Link]

102

7/19/2011

Spread Spectrum Tradeoffs

The improvement in performance comes at the cost of an increased bandwidth and is a system-wide improvement The quality of an individual link is in fact compromised due to the increased noise

205

[Link]

WCDMA Air Interface

The Near-Far Problem and Solutions

206

[Link]

103

7/19/2011

The Near-Far Problem

A mobile nearer to the base station will over-shout one that is at the edge of the cell. Implication: Power control helps in avoiding near far problem

Open loop power control Closed loop power control

Inner loop power control Outer loop power control

207

[Link]

The Near-Far Problem (2)

A mobile nearer to the base station will overshout one that is at the edge of the cell. Implication: During, handover, before a mobile is suitably powercontrolled by the target cell, it might over-shout an existing mobile in the target cell

208

[Link]

104

7/19/2011

Closed Loop Power Control

Outer Loop Inner Loop Frame reliability indicator

RNC If SIR<SIR Target, Power Up (1500 times per second)

SIR Target Adjustments

209

[Link]

Inner Loop Power Control Basics

Essential in CDMA systems on the uplink due to the near-far problem In WCDMA, on the downlink, it provides additional power to UEs in deep fades (cell edge) One command per slot 1500 per second Basic step size is 1dB. Multiples can be used and fractions can be emulated Results in a lower required EbNo and transmit power for low to moderate mobile speeds both have a direct impact on the power budget

210

[Link]

105

7/19/2011

f r r e e q s q u y u H e s e a n t n n c e c d y m y o ( (v ( W e W W C r C C D s D D M M M A A A G W W S C C M D D ) M M A A ) )

Handover Types

Soft / Softer HO Between same frequency of different sector

Hard HO Between different frequency of different sector

Hard HO (IRAT) Between 3G and GSM sector and vice versa

211

[Link]

Soft and Softer Handovers

Soft HO

Softer HO

212

[Link]

106

7/19/2011

Softer Handovers
On the DL, mobile simultaneously receives signals from two sectors of the same Node B. Rake receiver combines using the de-spreading codes for the two sectors On the UL, the Node B rake receiver combines both signals that it receives from the mobile

213

[Link]

Soft Handovers
On the DL, mobile simultaneously receives signals from two different Node Bs. On the UL, the mobile codes are sent to the RNC for combining so that the better of the two frames can be chosen (based on the same frame reliability used for outer loop power control)
RNC

214

[Link]

107

7/19/2011

WCDMA Network Architecture

Node Functions

215

[Link]

Function of Node B
Modulation and Demodulation L1 processing of user plane Data Inner loop power control Equivalent to GSM base station Houses Channel Element Term Node-B was temporarily adopted during standardization process, but never changed

216

[Link]

108

7/19/2011

Function of RNC
Controlling NodeBs Radio Resource Management Open loop power Control Mobility Management Function Handover Management Data Encryption

217

[Link]

Logical Roles of RNC

The fact that the UE at any given time may be connected to multiple RNSs means that the RNC has to take on multiple logical roles:
Iub

RNS

SRNC
Iu

Controlling RNC (CRNC Node B perspective) Serving RNC (SRNC UE perspective) Drift RNC (DRNC UE perspective)

RNC Node B Iur RNS

Iub

Iu

RNC Node B

DRNC

218

[Link]

109

7/19/2011

CRNC
Controlling RNC of the Node B Responsibilities:

Load and congestion control of its own cells Admission control and code allocation for new links to be established in its own cell
Node B

RNS

SRNC
Iu Iub

RNC Iur RNS

Iub

Iu

RNC Node B

DRNC

219

[Link]

SRNC
For one mobile using two RNSs (from UE perspective) Serving RNC:

RNS

Terminates the Iu link for the user data and the corresponding signaling to/from the CN Terminates the RRC signaling between the UE and UTRAN. Performs L2 data processing on the radio interface Basic RRM HO decision, Power Control UE will have only one SRNC
Node B Node B

SRNC
Iu Iub

RNC Iur RNS

Iub

Iu

RNC

DRNC

220

[Link]

110

7/19/2011

SRNC (2)
Serving RNC:

Basic RRM functions such as

Mapping of Radio Access Bearers to air-interface transport channel parameters Handover decision Outer loop power control

RNS

SRNC
Iu Iub

RNC Node B Iur RNS

Note: A UE has one and only one SRNC

Iub

Iu

RNC Node B

DRNC

221

[Link]

DRNC
Drift RNC:

Any RNC other than the SRNC that controls cells being used by the UE No L2 user data processing. Routes the data transparently between the Iub and Iur interfaces (except if the UE is using a shared/common transport channel)
Iub

RNS

SRNC
Iu

RNC Node B Iur RNS

UE may have none, one or more than one DRNCs

Node B

Iub

Iu

RNC

DRNC

222

[Link]

111

7/19/2011

WCDMA Network Interfaces

223

[Link]

UMTS Interface - Overview

Uu
Node B RNC

IuCS

MSC/ VLR

GMS C

USIM Cu ME

Node B

PLMN, PSTN

Iub
Node B RNC Node B

Iur

HLR

SGSN

IuPS

GGS N

Interne t

UE

UTRAN

Core Network

External Network

Cu Interface for the SIM card in UE Uu Interface between UE and NodeB Iu Equivalent to A (CS) interface & Gb (PS) in GSM Iur Interface between RNCs Iub Interface NodeB and RNC
224

[Link]

112

7/19/2011

Uu interface

UMTS interfaces

UE accesses the fixed part of the system Most important open interface in UMTS Connects UTRAN to the CN Iu-CS and Iu-PS The open Iu interface gives UMTS operators the possibility of acquiring UTRAN and CN from different manufacturers The open Iur interface allows soft handover between RNCs from different manufacturers Connects a Node B and an RNC

Iu interface

Iur interface

Iub interface

225

[Link]

Interfaces: Physical Implementation

Iub, Iur SDH on microwave, E1 or optical fiber

Iu-CS, Iu-PS ATM on E1, optical fiber, or Fast Ethernet (for R5 onwards IP based network)

226

[Link]

113

7/19/2011

Iub Interface
Iub uses the NBAP (Node B Application Part) signaling. NBAP is divided into two parts:

Common NBAP Signaling (C-NBAP) C-NBAP procedures are used for all signaling that is not related to one specific UE context already present in the Node B. Dedicated NBAP Signaling (D-NBAP) After setup of traffic termination point for a UE, all further signaling specific to this UE is via D-NBAP procedures across the dedicated control port of the traffic termination point.

RNS

Iub

RNC Node B

227

[Link]

Iub Interface: C-NBAP

Functions include:

Setup of first RL of UE, and selection of traffic termination point Cell configuration Handling RACH, FACH, PCH channels Initialization and reporting of cell or Node B specific measurement Fault management
Node B Iub RNS

RNC

228

[Link]

114

7/19/2011

Iub Interface: D-NBAP

D-NBAP Functions include:

Addition release and reconfiguration of RLs for one UE context Handling of dedicated and shared channels Handling of softer combining Initialization and reporting of radio link specific measurement
Node B Iub RNS

RNC

229

[Link]

Iur Interface Modules

The Iur provides support for four distinct functions via the four modules of its signaling protocol (RNSAP)

RNS

SRNC
Iu Iub

Iur1 Basic inter-RNC mobility Iur2 Dedicated channel traffic Iur3 Common Channel Traffic
Node B

RNC Iur RNS

Iur4 Global Resource Management

Iub

Iu

RNC Node B

DRNC

230

[Link]

115

7/19/2011

WCDMA Architecture
Evolution Through the Releases

231

[Link]

3GPP Evolutionary Approach

R99 (R3)

First deployable version of UMTS Support for GSM/EDGE/WCDMA RANs MGW implementation First step towards IP transport in the Core Network HSDPA IMS Phase 1: Can use all IP instead of ATM in the CN

R4

R5

232

[Link]

116

7/19/2011

3GPP Evolutionary Approach (2)

R6

HSUPA, WLAN Integration Initial VOIP capabilities

R7

HSPA + using HOM and MIMO Evolved EDGE Dual carrier HSPA Spec for OFDMA-based 3G LTE. Defines EPC

R8

233

[Link]

R99 (R3) Network Architecture - Recap

2G MS (voice only) BSS Abis E A B BSC BTS Gb MSC Gs IuCS RNS ATM Iub IuPS RNC Node B 3G UE (voice & data) BSS Base Station System BTS Base Transceiver Station BSC Base Station Controller CN Core Network MSC Mobile-service Switching Controller VLR Visitor Location Register HLR Home Location Register RNS Radio Network System RNC Radio Network Controller AuC Authentication Server GMSC Gateway MSC UMTS Universal Mobile Telecommunication System SGSN Serving GPRS Support Node GGSN Gateway GPRS Support Node Gn SGSN Gr HLR AuC Gc Gi VLR C D H GMSC PSTN CN Exeternal Network

PSTN

SS7

PSDN

IP

GGSN

234

[Link]

117

7/19/2011

WCDMA Network Architecture

Release 4

235

[Link]

Splitting the MSC

Split the MSC into

Media Gateway (MGW) containing the switching, transcoding and userplane transmission aspects Media Gateway Control Function (MCGF) or MSC Call Server containing switch and service control functionalities

ISUP

MGCF Call Control Functions

ISUP

The two are connected via standard interfaces (Megaco, H.248) This allows operators to expand bearers and control independently (e.g. introduce a new service from a different supplier)

Megaco / H.248 MGW Bearer (Uplane) Bearer

236

[Link]

118

7/19/2011

Transcoder Free Operation

MGWs can carry low-rate AMR traffic in the core network until the last MGW (e.g. MGW3) that connects to the PSTN Only MGW3 will transcode AMR into 64 kbps giving an efficient, transcoder free operation through the network
MGCF Call Control Functions

MGW1 MGW2

MGW3

PSTN

237

[Link]

R4 Network Architecture
EIR 2G MS (voice only) BSS Abis Signaling Gateway Application & Service Environment HSS

2
BSC BTS MSC Call Server (+ VLR) 2G+ MS (voice & data) RNS Iub UMTS Iu CS Interface Media Gateway GMSC Call Server Signaling Gateway

3
RNC

IP Core N/w

Media Gateway

Node B 3G UE (voice & data)

4 1
Signaling Speech MM Signaling to Other N/ws Call related signaling to Other N/ws CS Speech ckts to Other N/ws Speech to R5 and Other VOIP N/ws

2 3 4

238

[Link]

119

7/19/2011

R4 Nodes: Functions
MGW

carries the signaling and voice circuits from ATM-based Iu-CS to the IP-based core If connected to the GMSC, carries voice IP packets to the transport technology being used by the external network (e.g. TDM-CS, ATM AAL2) Supports R99 call control, mobility management Controls mapping of voice streams and the MGWs circuit switching of the speech path via Megaco /H.248

MSC Call Server

239

[Link]

R4 Nodes: Functions (2)

GMSC Call Server Performs call control and HLR interrogation as an R99 GMSC Controls the media gateway connecting to external networks Signaling Gateway Performs relay and policing of interconnect signaling protocol since the protocol interconnecting external networks must be suitably modified to support IP-based voice paths (e.g. Bearer Independent Call Control) Call and mobility management related signaling to external networks Home Subscriber Server (HSS) Evolved HLR with additional user data to support IM services Supports access independent network (users connecting via a different access mechanism e.g. xDSL)

240

[Link]

120

7/19/2011

WCDMA Network Architecture

Release 5

241

[Link]

R5 Network Architecture
Application & Service Environment

CSCF Call State Control Function MRF Media Resource Function EIR
CSCF 2G+ MS (voice & data) RNS Iub GGSN RNC Node B 3G UE (voice & data) SGSN UMTS Iu PS Interface
DHCP, DNS Servers

HSS

1
Signaling Gateway

IM Domain

2 3

Signaling Gateway MGCF

4
MRF Media Gateway

PS Domain

5 1
MM Signaling to Other N/ws Call related & MM signaling to Other R5 N/ws Call related signaling to Other CS &VOIP N/ws CS Speech ckts to Other N/ws Speech paths to Other R5 & VOIP N/ws

Signaling Speech

2 3 4 5

242

[Link]

121

7/19/2011

R5 Nodes: CSCF Functions

Serving CSCF (S-CSCF)

Holds user-specific data such as details of some services etc. (downloaded from HSS) Terminates call/session signaling from UE Interacts with the application & services area Interrogates the HSS during UE terminated communications, to determine which S-CSCF will cater to the UE Bridging of the UE-SCSF signaling (firewall) Bearer establishment and related functions

Interrogating CSCF (I-CSCF)

Proxy CSCF (P-CSCF)

243

[Link]

R5 Nodes: MRF Functions

Media Resource Function (MRF)

Provide IM-specific functions such as multiparty call and media-conferencing functions Relations of these services with the bearer and service validation

244

[Link]

122

7/19/2011

AAA Server in 3G network

AAA in UMTS stands for Authentication, Authorization and Accounting This is connected to GGSN for User Authentication AAA server uses protocol called RADIUS RADIUS stands for Remote Authentication Dial In User Service The RADIUS server checks that the information is correct using authentication schemes like PAP or CHAP RADIUS serves three functions:

to authenticate users or devices before granting them access to a network, to authorize those users or devices for certain network services and to account for usage of those services.
[Link]

245

UMTS Release Summary

3GPP Release 3GPP Release 99 1999 3GPP Release 4 2001 Date Specifications Specified the first UMTS 3G networks, incorporating a CDMA air interface based on GSM backward compatible. This defines Defined UTRA and UTRAN IP Core network and other features are added in Release 4. It was referred as Release 2000. Separation of user data flows and control mechanisms were the functionalities of this release IMS( IP Multimedia Subsystem,) and HSDPA (High Speed Packet Downlink Access) This includes WLAN interworking multimedia broadcast and multimedia services, High Speed Uplink Packet Access (HSUPA) and IMS "Phase 2" (IMS Messaging, conferencing and Group Management) This Release provided improvement over QoS for applications like VoIP. High Speed Packet Access (HSPA+) is Enhanced uplink which is also a part of Release 7. This uses MIMO antennas for better throughput This provides details for the LTE System Architecture Evolution which helps in improvement of IP backbone for future LTE network Provides additional features for enhancement of SAE, WiMax and LTE/UMTS interoperability 4G LTE Advanced technology belongs to 3GPP release 10

3GPP Release 5 3GPP Release 6

2002 2004

3GPP Release 7

2007

3GPP Release 8 3GPP Release 9 3GPP Release 10

2008 2009 2010

246

[Link]

123

7/19/2011

Next Generation Network

Towards 4G
User centric, user controlled services and context-aware applications

247

[Link]

4G Concept
What does user controlled services mean? The user has freedom and flexibility to select any desired service with reasonable QoS and affordable price, anytime, anywhere using any device in a secure manner Context aware applications A context-aware application means the behaviour of the application adapts itself to user context changes. User context includes:

User profile and preferences User device and access network capabilities User environment and mobility

248

[Link]

124

7/19/2011

Convergence
Convergence of Cellular Mobile Networks and WLANs Benefits

For cellular mobile operators

Higher bandwidths Lower cost of networks and equipment The use of licence-exempt spectrum Higher capacity and QoS enhancement Higher revenue Access to broadband multimedia services with lower cost and where mostly needed (e.g. in Central Business Districts and Business Customer Premises) Inter-network roaming

For users

249

[Link]

Convergence
Convergence of Mobile Communications and Broadcasting Drivers

From broadcaster point of view

Introducing interactivity to their unidirectional point-tomultipoint broadcasting systems. That is, a broadband downlink based on DAB/DVB-T and a narrowband uplink based on 2G/3G cellular systems Providing a complementary broadband downlink in vehicular environments to support IP-based multi-media traffic which is inherently asymmetrical

From the cellular mobile operator point of view

250

[Link]

125

7/19/2011

Interworking/Integration
For the design of next generation wireless networks two different approaches are currently being considered. They are:

Interworking with next generation Internet (tight coupling) Integration within next generation Internet (very tight coupling)

In the first approach, the access network and the core network use different IP protocols and mechanisms and only the core network is considered as a sub-network of the Internet In the second approach, both the core and access networks use common IP based protocols and mechanisms and the access network is considered as a sub-network of the Internet

251

[Link]

Hierarchical Coverage Layers for 4G

IP-based backbone Satellite

Global coverage Regional coverage

DAB and DVB-T, DVB-S

National coverage

2G, 3G and 4G Cellular

Local area coverage Personal area coverage

Wireless LANs

Wireless PANs Vertical Handover

Horizontal Handover

252

[Link]

126

7/19/2011

A Heterogeneous Network Architecture - Future

Future Internet

Core Network

UTRAN

WLAN

4G RAN

Wireless Access Network

PAN Intra -Cell PAN Ad -hoc Network PAN PAN PAN

253

[Link]

Inter-Working
Billing VHE SIP Proxy Server Signalling WAP Gateway Accounting

ISP

The Internet Satellite FES IP backbone Broadcast Networks (DAB, DVB-T) GSM / GPRS UMTS
IP-based micro-mobility Context-aware information Centre

Wireless LANs

254

[Link]

127

7/19/2011

Integration
Applications
AP1 AP2 AP3 APn

Middleware Service support sub-layer Location Accounting/billing Media conversion Distribution

Basic network management sub-layer RRM MM C/SM

Security

QoS

ISDN/ PSTN

IP-based transport NW IP Radio

IP

IP IP IP Radio Internet

IP Radio

IP

General architecture of the IP-based IMT network platform

255

[Link]

Long Term Evolution - LTE

Long Term Evolution 4th Generation Technology LTE is the last step toward the 4th generation of radio technologies designed to increase the capacity and speed of mobile telephone networks In June of 2008, after extensive evaluation, LTE was the first and thus far only technology recognized by the Next Generation Mobile Network alliance to meet its broad requirements LTE has become the technology platform of choice as GSM-UMTS and CDMA/EV-DO operators are making strategic, long-term decisions on their next-generation platforms
256

[Link]

128

7/19/2011

Downlink peak rates of at least 100 Mbps Uplink of at least 50 Mbps RAN round-trip delay is less than 10 ms LTE supports scalable carrier bandwidths, from 20 MHz down to 1.4 MHz Supports both Frequency Division Duplexing and Time Division Duplexing

257

[Link]

LTE Network Architecture

Source - Internet
258

[Link]

129

7/19/2011

Architecture (Cont..)
Flat Network Architecture IP interface Radio Network - e-Node B and SAE GW (System Architecture Evolution Gate Way) MME is Mobility Management Entity Only signaling The Home Subscriber Server (HSS) connects to the packet core Core Network consists of P-Gateway and S-Gateway Advanced Antennas (MIMO) are used Support seamless mobility with older network technology such as GSM, CDMA one, W-CDMA (UMTS) and CDMA-2000

259

[Link]

LTE Advantage
High throughput Low latency Plug and play FDD and TDD in the same platform Improved end-user experience and simple architecture resulting in low operating costs

260

[Link]

130

7/19/2011

3G and 4G - Comparison
3G
Speed Services
Up to 2Mbps Difficult for global roaming Good for voice and moderate for data Data will be expensive

4G
Full Mobility up to 100 Mbps Low Mobility up to 1Gbps Inexpensive Good for global roaming with data Many applications Entirely packet switching Broadband IP based OFDM MC-CDMA

Core Network Technologies

Wide area concept Circuit and Packet Switching WCDMA CDMA TD-SDMA

261

[Link]

Thank You

262

[Link]

131