existing wireless systems

70
1 Copyright © 2002, Dr. Dharma P. Agrawal and Dr. Qing-An Zeng. All rights reserved. Chapter 10 ( PART-1) Existing Wireless Systems

Upload: others

Post on 16-Nov-2021

2 views

Category:

Documents


0 download

TRANSCRIPT

Page 1: Existing Wireless Systems

1Copyright © 2002, Dr. Dharma P. Agrawal and Dr. Qing-An Zeng. All rights reserved.

Chapter 10 ( PART-1)

Existing Wireless Systems

Page 2: Existing Wireless Systems

2Copyright © 2002, Dr. Dharma P. Agrawal and Dr. Qing-An Zeng. All rights reserved.

Outline

AMPSIS-41GSMPCS

Page 3: Existing Wireless Systems

3Copyright © 2002, Dr. Dharma P. Agrawal and Dr. Qing-An Zeng. All rights reserved.

AMPS

Page 4: Existing Wireless Systems

4Copyright © 2002, Dr. Dharma P. Agrawal and Dr. Qing-An Zeng. All rights reserved.

AMPS (Advanced Mobile Phone System)

Design goals of AMPSCharacteristics of AMPSChannel usage in AMPS AMPS frequency allocationFrequency for AMPSGeneral operation of AMPSAMPS identification numbersMS nominal power levelsForward and reverse channelsSignaling on control channels, forward and reverse voice channelsInitialization proceduresGeneral working of AMPS Phone SystemModulation parameters

Page 5: Existing Wireless Systems

5Copyright © 2002, Dr. Dharma P. Agrawal and Dr. Qing-An Zeng. All rights reserved.

Design Goals of AMPS

The very first cellular phone technology Conceived by Bell Labs High voice quality (near wire line)Small coverage area (cell radius: 1-16 miles)Large cells thermal noise limited and small cells interference limitedFrequency reuse planned in system design666 channels (later increased to 832 channels)Large trunk mounted unit (now very small under dash units)Low power mobile (handheld) transmitters (4 watts or less)Medium power base stations (10’s of watts)Low blocking (2%) during busy hourImmediate service (1-5 business days; now 1-5 hours)System capacity for 100,000 or more customers per city Mobile (handheld) can place and receive calls

Page 6: Existing Wireless Systems

6Copyright © 2002, Dr. Dharma P. Agrawal and Dr. Qing-An Zeng. All rights reserved.

Characteristics of AMPS

Frequency range (45 MHz separation): 824 MHz ~ 849 MHz for mobile transmit869 MHz ~ 894 MHz for base transmit

3 KHz analog voice channels modulated on to 30 KHz channelsFM (frequency modulation) for voiceMFM (Manchester frequency modulation) at 10 kbps for dataControl channelsVoice channels

Page 7: Existing Wireless Systems

7Copyright © 2002, Dr. Dharma P. Agrawal and Dr. Qing-An Zeng. All rights reserved.

AMPS Frequency Allocation

Band ATransmit: 824 MHz ~ 835 MHz and 845 MHz ~ 849 MHzReceive: 869 MHz ~ 880 MHz and 890 MHz ~ 891.5 MHz

Band BTransmit: 835 MHz ~ 845 MHz and 846.5 MHz ~ 849 MHzReceive: 880 MHz ~ 890 MHz and 891.5 MHz ~ 894 MHz

312 usable RF pairs divided by 7 (the reuse factor) = roughly 45 channel pairs per cell

Page 8: Existing Wireless Systems

8Copyright © 2002, Dr. Dharma P. Agrawal and Dr. Qing-An Zeng. All rights reserved.

Frequencies for AMPS

Two service providers:A (non-wire line provider)B (wire line provider: Bell Companies)

Five band segments:

1990869.01824.01Not used83717-799889.51-893.97846.51-848.97B’

333334-666880.02-889.98835.02-844.98B

33

50

333No. of Channels

991-1023869.04-870.00824.04-825.00A”

667-716890.01-891.48845.01-846.48A’

1-333870.03-879.99825.03-834.99AChannel No.BS-TX (MHz)MS-TX (MHz)Band

Page 9: Existing Wireless Systems

9Copyright © 2002, Dr. Dharma P. Agrawal and Dr. Qing-An Zeng. All rights reserved.

General Operation of AMPS

Power Up/Down

Idle Task

Call Delivery (Page)

Call Origination

Call Clearing

Process Order

Scan Channels

Registration /De-registration

Call Active

Process Order

Handoff

Page 10: Existing Wireless Systems

10Copyright © 2002, Dr. Dharma P. Agrawal and Dr. Qing-An Zeng. All rights reserved.

AMPS Identification Numbers

Serial number (Electronic Serial Number [ESN])Used for each MS transmitter in service in the cellular system32 bit binary number that uniquely identifies a cellular unit number established by the manufacture at the factoryShould not be easily alterable

System Identification Number (SID)15 bit binary numbers assigned to cellular systemsMS in the cell must transmit the SIDFCC assigns one SID to each cellular systemSystems may transmit only their assigned SIDs or other SIDs, if the other SID user permits

Mobile Identification Number (MIN)Digital representation of MS’s 10-digit directory telephone number

Page 11: Existing Wireless Systems

11Copyright © 2002, Dr. Dharma P. Agrawal and Dr. Qing-An Zeng. All rights reserved.

Forward and Reverse Channels

• The busy/idle stream indicates the current status of the RECC.

• Stream A and B are identified with the least significant bit (LSB) of the MS’s MIN, where a 0 signifies stream A and a 1 signifies stream B.

Where FOCC is a TDM channel of:

…Busy/idle stream … Stream B … Stream A …

MSi BS

Forward control channel (FOCC)

Reverse control channel (RECC)

MSj

Forward control channel (FOCC)

Page 12: Existing Wireless Systems

12Copyright © 2002, Dr. Dharma P. Agrawal and Dr. Qing-An Zeng. All rights reserved.

Signaling on Control Channels

Forward Control Channels (FOCCs)Continuous data streamSends system informationSends Pages, orders, voice channels assignments to MSs

Dotting Word Sync

Repeat 1 of Word A

Repeat 1 of Word B

… Repeat 5 of Word A

Repeat 5 of Word B

Dotting …

Bits 10 11 40 40 … 40 40 10

Dotting = 1010…101

Word Sync = 11100010010

Format

Page 13: Existing Wireless Systems

13Copyright © 2002, Dr. Dharma P. Agrawal and Dr. Qing-An Zeng. All rights reserved.

Signaling on Control ChannelsReverse Control Channels (RECCs)

Discontinuous, contention channelModeled after Slotted Aloha packet radio channelMSs respond to pagesMSs make origination calls (with dialed digits)

Bits 30 11 7 240 240 240 240

Dotting = 1010…101

Word Sync = 11100010010

* DCC = Digital Color Code

Seizure precursor

Dotting Word Sync

1st word repeated 5 times

Coded DCC*

…2nd word repeated 5 times

3rd word repeated 5 times

4th word repeated 5 times

Format

Page 14: Existing Wireless Systems

14Copyright © 2002, Dr. Dharma P. Agrawal and Dr. Qing-An Zeng. All rights reserved.

Signaling on Forward Voice Channel (FVC)

Continuous supervisory audio tone (Beacons)Transmitted by BSThree tones at 6 kHz (5.97 kHz, 6.00 kHz, 6.03 kHz)Received back at BS receiverLack of tone (or wrong tone) used to squelch receiverTone used to detect interferenceTone phase can be used for ranging

Discontinuous data streamSends orders to MSSends new voice channels assignments (handoff)

Page 15: Existing Wireless Systems

15Copyright © 2002, Dr. Dharma P. Agrawal and Dr. Qing-An Zeng. All rights reserved.

Signaling on Reverse Voice Channel (RVC)

Continuous supervisory audio tone (Beacons)MS regenerates toneLack of tone (or wrong tone) used to squelch receiverTone used to detect interference

Discontinuous dataConfirms ordersMSs make 3-way calls (with dialed digits)

Signaling tone (10 kHz)Used to signal Disconnect (1.5 seconds)Used to signal Flash (0.5 seconds)

Page 16: Existing Wireless Systems

16Copyright © 2002, Dr. Dharma P. Agrawal and Dr. Qing-An Zeng. All rights reserved.

Initialization Procedures

MS BS

Control channels

3. System parameter message

1. Power up, set system A or B

2. Scan control channels, tune to strongest channel

4. Update operating parameters and SID, identify serving system, establish paging channels

5. Ongoing overhead

Message stream 6. Verify SID and status information, set parameters for ROAM status, enter idle state

Page 17: Existing Wireless Systems

17Copyright © 2002, Dr. Dharma P. Agrawal and Dr. Qing-An Zeng. All rights reserved.

MS Originates the Call (System Access Task)

MS BS1. Origination message (MIN, ESN, phone no.)

3. Control message

5. FVC control message (CHAN, ORDER, ORDQ, SCC)

2. Pass to IS-41

4. Switch to voice

channel(CHAN, ORDER, ORDQ, SCC)6. RVC confirmation message

(SAT)

4. Switch to voice channel

7. Answer from IS-418. Conversation ensues

8. Conversation ensues

CHAN – Channel Number; ORDQ – Order Qualifier; SCC – Set Color Code

Page 18: Existing Wireless Systems

18Copyright © 2002, Dr. Dharma P. Agrawal and Dr. Qing-An Zeng. All rights reserved.

MS Receives the CallMS BS

2. Page control message

3. Page response message

4. Control message

(MIN, ESN, ORDER, ORDQ)

1. MS ID from IS-41

(CHAN, ORDER, ORDQ, SCC, VMAC)

5. Confirmation message(SAT)

6. Conversation ensues

6. Conversation ensues

(MIN, SCC, ORDER, ORDQ, VMAC, CHAN)

VMAC – Voice Mobile Attenuation Code

Page 19: Existing Wireless Systems

19Copyright © 2002, Dr. Dharma P. Agrawal and Dr. Qing-An Zeng. All rights reserved.

IS-41

Page 20: Existing Wireless Systems

20Copyright © 2002, Dr. Dharma P. Agrawal and Dr. Qing-An Zeng. All rights reserved.

IS-41 (Interim Standard 41, also known as ANSI-41)

• IS-41 model• Key terms and concepts• Identification number• IS-41 and OSI• Remote operation service element (ROSE)• Class number• Operations• Relationship of IS-41 and AMPS• Formats of the messages

Page 21: Existing Wireless Systems

21Copyright © 2002, Dr. Dharma P. Agrawal and Dr. Qing-An Zeng. All rights reserved.

IS-41 Entities and Reference Points

CSS BS MSC

MSC

VLR

VLR

PSTN

HLR

AC

ISDN

EIR

Uair A

E Ai Di

B C F

G HD

AC – Access control

BS – Base station

CSS – Cellular subscriber station (MS)

EIR – Equipment identity register

HLR – Home location register

ISDN – Integrated services digital network

MSC – Mobile switching center

PTSN – Public switched telephone network

VLR – Visitor location register

Um, A, B, … H, Ai, Di -- Interfaces

Page 22: Existing Wireless Systems

22Copyright © 2002, Dr. Dharma P. Agrawal and Dr. Qing-An Zeng. All rights reserved.

Key Terms and Concepts

This MSC is the MSC that was selected from a list of MSC’sas having the cell site that can service the MS with the best signal quality.

Target MSC

This MSC is currently serving the MS at a cell site within a coverage area controlled by the MSC.

Serving MSC

This MSC is the “owner” of the MS in the sense that it is the owner of the directory number from which the MS’s MIN is derived.

Homing MSC

This MSC is being requested to provide the next service during a handoff operation.

Candidate MSC

This MSC is as the initial contact point when an originating call is initiated by the MS or when a terminating call (to the MS) is received from the fixed telephone network.

Anchor MSCDefinition Term

Page 23: Existing Wireless Systems

23Copyright © 2002, Dr. Dharma P. Agrawal and Dr. Qing-An Zeng. All rights reserved.

Identification Numbers• Serial number (Electronic Serial Number [ESN])

– Used for each MS transmitter in service of the cellular system– 32 bit binary number that uniquely identifies a cellular unit number – Should not be easily alterable

• System Identification Number (SID)– 15 bit binary numbers assigned to cellular systems– MS in the cell must transmit the SID– FCC assigns one SID to each cellular system– Systems may transmit only their assigned SIDs or other SIDs, if the other

SID user permits• Mobile Identification Number (MIN)

– Digital representation of MS’s 10-digit directory telephone number• Switch Number (SWNO)

– Identifies a particular switch within a group of switches with which it is associated

– It is the parameter derived from the concatenation of the SID and SWNO

Page 24: Existing Wireless Systems

24Copyright © 2002, Dr. Dharma P. Agrawal and Dr. Qing-An Zeng. All rights reserved.

IS-41 and OSI

MTP – Message transfer part

SCCP – Signaling connection control part

MAP – Mobile Application part

ASE – Applications service element

ACSE – Association control service element

ROSE – Remote operation service element

TCAP – Transaction capabilities application part

Application

TLV

Null

Null

X.25/MTP/SCCP

X.25/MTP

X.25/MTP

Entity A Entity B

7

6

5

4

3

2

1

Layers

MAP

Component sublayer

Transaction sublayer

TCA

P

ACSE

ROSEASE

Page 25: Existing Wireless Systems

25Copyright © 2002, Dr. Dharma P. Agrawal and Dr. Qing-An Zeng. All rights reserved.

ROSE Operations

In either case, no reply.Success or failure

If successful, return a result. If a failure, no reply.Success only

If successful, no reply. If a failure, return an error reply.Failure only

If successful, return a result. If a failure, return an error reply.

Success or failureExpected Report from ServerResult of Operation

Asynchronous: Report nothing5Asynchronous: Report success (result) only4Asynchronous: Report failure (error) only3Asynchronous: Report success (result) or failure (error)2Synchronous: Report success (result) or failure (error)1

DefinitionClass number

Page 26: Existing Wireless Systems

26Copyright © 2002, Dr. Dharma P. Agrawal and Dr. Qing-An Zeng. All rights reserved.

Interworking of IS-41 and AMPS

PSTN MSC MS

6. Page

VLR HLR

3. ROUTREQ

ROUTREQ 4.

Originating system Serving system

1. Call origination2. LOCREQ

Page response 7.

(alias)LOCREQ (alias) 5.

Call setup

MSC

VLR

8. Alert

Answer 9.

Page 27: Existing Wireless Systems

27Copyright © 2002, Dr. Dharma P. Agrawal and Dr. Qing-An Zeng. All rights reserved.

Registration with a New MSC

REGNOT – Registration notification messages: REGCANC – Registration cancellation message QUALREQ – Qualification request message: PROFREQ – Service profile request message Upper case represents ROSE INVOKE message Lower case represents ROSE RETURN RESULTS message

PSTN MSC MSC

3. REGNOT

1. REGNOT

VLR HLR VLR

REGNOT

REGNOT

REGCANC

4. REGCANCQUALREQ

QUALREQ

PROFREQ

PROFREQ

2

5

6

Old serving New serving

Page 28: Existing Wireless Systems

28Copyright © 2002, Dr. Dharma P. Agrawal and Dr. Qing-An Zeng. All rights reserved.

Calling an Idle MS

LOCREQ – Location request messages: ROUTREQ – Routing request message PROFREQ – Service profile request message

Upper case represents ROSE INVOKE message Lower case represents ROSE RETURN RESULTS message

PSTN MSC MSC

4. ROUTREQ

VLR HLR VLR

3. ROUTREQ

ROUTREQ 7.

PROFREQ

PROFREQ 5.

Originating system Serving system

1. Call origination2. LOCREQ

ROUTREQ 6.

(alias)LOCREQ (alias) 8.

Call setup

Page 29: Existing Wireless Systems

29Copyright © 2002, Dr. Dharma P. Agrawal and Dr. Qing-An Zeng. All rights reserved.

Call Forwarding

PSTN MSC MSCVLR HLR VLROriginating system Serving system

LOCREQ – Location request messages

1. Call origination2. LOCREQ

LOCREQ (alias) 3.

Call forward setup

Page 30: Existing Wireless Systems

30Copyright © 2002, Dr. Dharma P. Agrawal and Dr. Qing-An Zeng. All rights reserved.

Call and MS Does Not Answer

PSTN MSC MSC

4. ROUTREQ

VLR HLR VLR

3. ROUTREQ

ROUTREQ 6.

Originating system Serving system

LOCREQ – Location request messages: ROUTREQ – Routing request message

Upper case represents ROSE INVOKE message Lower case represents ROSE RETURN RESULTS message

1. Call origination 2. LOCREQ

ROUTREQ 5.

(alias)LOCREQ (alias) 7.

Call setup

Page or answer timeout

Announcement 8.

Call release

Page 31: Existing Wireless Systems

31Copyright © 2002, Dr. Dharma P. Agrawal and Dr. Qing-An Zeng. All rights reserved.

Calling a Busy MS

PSTN MSC MSC

4. ROUTREQ

VLR HLR VLR

3. ROUTREQ

ROUTREQ 6.

Originating system Serving system

1. Call origination2. LOCREQ

ROUTREQ 5.

(busy)LOCREQ (busy) 7.Busy 8.

LOCREQ – Location request messages:

ROUTREQ – Routing request message

Upper case represents ROSE INVOKE message Lower case represents ROSE RETURN RESULTS message

Call setup

Page 32: Existing Wireless Systems

32Copyright © 2002, Dr. Dharma P. Agrawal and Dr. Qing-An Zeng. All rights reserved.

Handoff Measurement Request

PSTN MSC MSCVLR HLR VLR

Adjacent MSCs 1 to n Serving system

(MSC1) HANDOFFMEASURREQ 1.

(MSCn) HANDOFFMEASURREQ 1.

2. HANDOFFMEASURREQ (MSC1)

2. HANDOFFMEASURREQ (MSCn)

etc.

Page 33: Existing Wireless Systems

33Copyright © 2002, Dr. Dharma P. Agrawal and Dr. Qing-An Zeng. All rights reserved.

Recovery from Failure at the HLR

UNRELDIR – Unreliable roamer data directive REGNOT – Registration notification messages:

PSTN MSC MSCVLR HLR VLR

UNRELDIR

1. UNRELDIR

REGNOT 3.

REGNOT

REGNOT 4.

REGNOT

Other system Serving system

UNRELDIR

2. UNRELDIR

Page 34: Existing Wireless Systems

34Copyright © 2002, Dr. Dharma P. Agrawal and Dr. Qing-An Zeng. All rights reserved.

GSM

Page 35: Existing Wireless Systems

35Copyright © 2002, Dr. Dharma P. Agrawal and Dr. Qing-An Zeng. All rights reserved.

Group Special Mobile OR Global System for Mobile Communications :Europe

GSM infrastructure (TDMA)Functional planesChannels The subscriber identity moduleInterfacesLayers and planesOverview of operationsFormats of messages (the TDMA burst)Operations

Page 36: Existing Wireless Systems

36Copyright © 2002, Dr. Dharma P. Agrawal and Dr. Qing-An Zeng. All rights reserved.

GSM InfrastructureMS: Mobile Station

BTS: Base Transceiver Station

BSC: Base station Controller

MSC: Mobile Switching Center

EIR: Equipment Identity Register

AC: Authentication Center

HLR: Home Location Register

VLR: Visitor Location Register

GMSC: Gateway MSC

PSTN: Public Switching Telephone

Network

MSCBSCBTS

BTS

BTS

……

MS

HLR

VLR

EIR

AC

MS

GatewayMSC

PSTN

Base Station System (BSS)

Um Abis A

Interface

Page 37: Existing Wireless Systems

37Copyright © 2002, Dr. Dharma P. Agrawal and Dr. Qing-An Zeng. All rights reserved.

Functionalities of Constituents of GSM

Base Station Controller (BSC): looks over a certain number of BTS to ensure proper operation, takes care of Handoff between BTSs.

Mobile Switching Center (MSC): Mainly performs the switching by controlling calls to and from other telephone/data systems. Also, performs functions such as network interfacing, common channel signaling, etc.

Authentication Center (AC): AC unit provides authentication and encryption parameters that verify the user's identity and ensure the confidentiality of each call

Equipment Identity Register (EIR): EIR is a database that contains information about the identity of mobile equipment that prevents calls from stolen, unauthorized, or defective MSs.

Page 38: Existing Wireless Systems

38Copyright © 2002, Dr. Dharma P. Agrawal and Dr. Qing-An Zeng. All rights reserved.

Frequency Band Used by GSM

Uplink (reverse) Downlink (forward)

890 MHz 915 MHz 935 MHz 960 MHz

Frequency band for the MS Frequency band for the BS

… 1241 2

200 kHz

… 1241 2

200 kHz

124 available FDM channels

Page 39: Existing Wireless Systems

39Copyright © 2002, Dr. Dharma P. Agrawal and Dr. Qing-An Zeng. All rights reserved.

Channels in GSM

BS MSBS MS

TCH/f (Full-rate traffic channel)TCH/s (Half-rate traffic channel)

TCH (Traffic Channel)

Traffic Channel

DCCH(Dedicated control channel)

CCCH (Common control channel)

BCCH(Broadcast control channel)

Group

BS MSBS MSBS MS

SDCCH (Stand-alone dedicated control channel)SACCH (Slow associated control channel)FACCH (Fast associated control channel)

BS MSMS BSBS MS

PCH (Paging channel)RACH (Random access channel)AGCH (Access grand channel)

Control Channel

BS MSBS MSBS MS

BCCH (Broadcast control channel)FCCH (Frequency correction channel)SCH (Synchronization channel)

DirectionChannel

Page 40: Existing Wireless Systems

40Copyright © 2002, Dr. Dharma P. Agrawal and Dr. Qing-An Zeng. All rights reserved.

Control Channels of GSM

Control Channels used to Broadcast Information to all MSs.Broadcast Control Channel (BCCH): Used to transmit the system parameters like the frequency of operation in the cell, operator identifiers, etc., Frequency Correction Channel (FCCH): Used for transmission of frequency references and frequency correction burstsSynchronization Channel (SCH): Used to provide the synchronization training sequences burst of 64 bits length to the MSs.

Control Channels used to establish link between MS and BSRandom Access Channel (RACH): Used by the MS to transmit information regarding the requested dedicated channel from GSM.Paging Channel: Used by the BS to communicate with individual MS in the cell.Access Grant Channel: Used by the BS to send information about timing and synchronization.

Page 41: Existing Wireless Systems

41Copyright © 2002, Dr. Dharma P. Agrawal and Dr. Qing-An Zeng. All rights reserved.

Control Channels of GSM

Dedicated Control Channels used to serve for any control information transmission during the actual communication

Slow Associated Control Channel (SACCH): Allocated along with a user channel, for transmission of control information during the actual transmission.

Stand-alone dedicated Control Channel: Allocated with SACCH, used for transfer of signaling information between the BS and the MS.

Fast Associated Control Channel (FACCH): Not a dedicated channel but carries the same information as SDCCH. But, it is a part of Traffic channel while SDCCH is a part of control channel

Page 42: Existing Wireless Systems

42Copyright © 2002, Dr. Dharma P. Agrawal and Dr. Qing-An Zeng. All rights reserved.

Frames in GSM1 hyperframe = 2048 superframes = 2715684 TDMA frames (3 hr, 28 min, 53 s, 750 ms

0 1 2 …… 2046 2047

0 1 2 …… 49 50…… 252410

0 1 2 …… 24 25 0 1 2 …… 24 25

0 1 2 …… 6 7 0 1 2 …… 6 7

TCH, SACCH, FACCH

FCCH, SCH, BCCH, RACH, AGCH, PCH, SDCCH, CBCH, SACCH

Hyperframe

Superframe

Multiframe

TDMA frame

Page 43: Existing Wireless Systems

43Copyright © 2002, Dr. Dharma P. Agrawal and Dr. Qing-An Zeng. All rights reserved.

Structure of a TDMA Frame

0 1 2 3 4 5 6 7

Frame = 4.615 ms

Time slot = 0.557 ms

Tail bits Data bits Training Data bits Tail bits

3 58 26 58 3

• A carrier frequency is divided into eight physical TDM channels (i.e., 8 time slots)

Burst = 148 bits

Time slot = 156.25 bits (including 8.25 Guard bits)

Page 44: Existing Wireless Systems

44Copyright © 2002, Dr. Dharma P. Agrawal and Dr. Qing-An Zeng. All rights reserved.

International Mobile Subscriber Identity (IMSI)

• Each mobile unit is identified uniquely with a set of values. These values are used to identify the country in which the mobile system resides, the mobile network, and the mobile subscriber.

• The remainder of the IMSI is made up of the mobile subscriber identification code (MSIC), which is the customer identification number.

• The IMSI is also used for an MSC/VLR to find out the subscriber’s home PLMN (Public land mobile network).

• The IMSI is stored on the subscriber identity module (SIM), which is located in the subscriber’s mobile unit.

Page 45: Existing Wireless Systems

45Copyright © 2002, Dr. Dharma P. Agrawal and Dr. Qing-An Zeng. All rights reserved.

Format of IMSI

Mobile country code (MCC)

Mobile network code (MNC)

Mobile subscriber identification code (MSIC)

15 digits or less

3 digits 2 digits Up to 9 digits

Example:

MCC = 05 Australia; MCC = 234 UK

MNC = 01 Telecom Australia; MNC = 234 UK Vodafone

Page 46: Existing Wireless Systems

46Copyright © 2002, Dr. Dharma P. Agrawal and Dr. Qing-An Zeng. All rights reserved.

Subscriber Identity Module (SIM)

SIM contains subscriber-specific information such as: Phone numbers, Personal identification number (PIN), Security/Authentication parameters.

SIM can also be used to store short message.SIM can be a small plug-in module that is placed (somewhat permanently) in the mobile unit, or it can be a card (like a credit card). A modular portable SIM allows a user to use different terminal sets.SIM supports roaming.

Page 47: Existing Wireless Systems

47Copyright © 2002, Dr. Dharma P. Agrawal and Dr. Qing-An Zeng. All rights reserved.

Mobile System ISDN (MSISDN)

MSISDN is the number that the calling party dials in order to reach the subscriber. It is used by the land network to route calls toward an appropriate MSC.

Country code (MCC)

National destination code (NDC)

Subscriber number (SN)

15 digits or less

1 to 3 digits Variable Variable

The format of MSISDN

Page 48: Existing Wireless Systems

48Copyright © 2002, Dr. Dharma P. Agrawal and Dr. Qing-An Zeng. All rights reserved.

Location Area Identity (LAI)LAI identifies a cell or a group of cells.Relation between areas in GSM:

Mobile country code (MCC)

Mobile network code (MNC)

Mobile subscriber identification code (MSIC)

15 digits or less

3 digits 1 or 2 digits Up to 9 digits

The format of LAI

CellLocation area

(LA)One MSC

PLMN (one or more per country)

GSM service area(all member counties)

Page 49: Existing Wireless Systems

49Copyright © 2002, Dr. Dharma P. Agrawal and Dr. Qing-An Zeng. All rights reserved.

International MS Equipment Identity (IMSEI)

IMSEI is assigned to each GSM unit at the factory.

Type approval code (TAC)

Final assembly code (FAC)

Serial number (MSIC)

15 digits or less

3 digits 1 or 2 digits Up to 9 digits

The format of IMSEI

Spare 1 digit

Page 50: Existing Wireless Systems

50Copyright © 2002, Dr. Dharma P. Agrawal and Dr. Qing-An Zeng. All rights reserved.

Mobile Station Roaming Number (MSRN)

MSRN is allocated on a temporary basis when the MS roams into another numbering area.MSRN is used by the HLR for rerouting call to the MS.

Country code (MCC)

National destination code (NDC)

Subscriber number (SN)

15 digits or less

1 to 3 digits Variable Variable

The format of MSRN

Page 51: Existing Wireless Systems

51Copyright © 2002, Dr. Dharma P. Agrawal and Dr. Qing-An Zeng. All rights reserved.

IMSI and TMSI

TMSI is an alias, used in place of the IMSI. This value is sent over the air interface in place of the IMSI for purposes of security.

Temporary Mobile Subscriber Identity (TMSI)

International Mobile Subscriber Identity (IMSI)

IMSI is the primary function of subscriber within the mobile network and is permanently assigned to him.

Page 52: Existing Wireless Systems

52Copyright © 2002, Dr. Dharma P. Agrawal and Dr. Qing-An Zeng. All rights reserved.

Interfaces of GSM

MAPn

GF

EDCB

A

MSC – VLR Um

MSC – HLR Abis

HLR – VLR

VLR – VLR MSC – EIR

MSC – MSCHLR – VLRMSC – HLR MSC – VLR

BetweenInterface Designation

Page 53: Existing Wireless Systems

53Copyright © 2002, Dr. Dharma P. Agrawal and Dr. Qing-An Zeng. All rights reserved.

GSM Layers and Planes

MSCBSCBTSMS

HLR

VLR

EIR

AC

GatewayMSC

Um Abis A

Layer 1

LAPDm

Q.931+

Layer 1

LAPD

Q.931+

Layer 1

MTP

SCCP

MAP

Layer 1

MTP

SCCP

TCAP

MAPn

DTAP, BSSMAP

LAPD – Link access procedure for the D channel LAPDm – LAPD for a mobile link MTP – Message transfer part SCCP – Signaling connection control part DTAP – Direct transfer application part BSSMAP – BSS management part TCAP – Transaction capabilities application part Q.931+ -- ISDN layer 3 protocol

HLR

VLR

EIR

AC

Page 54: Existing Wireless Systems

54Copyright © 2002, Dr. Dharma P. Agrawal and Dr. Qing-An Zeng. All rights reserved.

GSM Functional Planes

Operations, Administration & Maintenance (OAM)

Communication Management (CM)

Mobility Management (MM)

Radio Resource Management (RR)

Physical

Sending entity

Receiving entity

Channel

Page 55: Existing Wireless Systems

55Copyright © 2002, Dr. Dharma P. Agrawal and Dr. Qing-An Zeng. All rights reserved.

Authentication Process

Mobile Station

Authentication Algorithm A3

Key

Fixed Network

Authentication Algorithm A3

Key

Compare

Radio path

RAND (Random number)

SRES(Signed response)

SRES

Yes/No

IMSIIMSIRAND

Page 56: Existing Wireless Systems

56Copyright © 2002, Dr. Dharma P. Agrawal and Dr. Qing-An Zeng. All rights reserved.

Handover (Handoff)

A connection is changed between two cells that are in different MSC areas.

Inter-MSC

A connection is changed between two cells that are served by different BSCs but operate in the area of the same MSC.

Inter-BSC / Intra-MSC

In this case there is a change in radio channel between two cells that are served by the same BSC.

Inter-cell / Intra-BSC

The channel for the connection is changed within the cell, e.g., if the channel has a high level of interference. The change can apply to another frequency of the same cell or to another time slot of the same frequency.

Intra-cell / Intra-BTS

Description Handover

Page 57: Existing Wireless Systems

57Copyright © 2002, Dr. Dharma P. Agrawal and Dr. Qing-An Zeng. All rights reserved.

Handover (BSS 1 BSS 2) Executed with an MSC

MS BSS1 MSC BSS 2 MS

Measured ValueHandover Request

Handover Request

Handover Request AcknowledgementHandover Command

Handover Command

Handover (Handoff)

Handover CompleteHandover Complete

Clear Command

Clear Complete

Page 58: Existing Wireless Systems

58Copyright © 2002, Dr. Dharma P. Agrawal and Dr. Qing-An Zeng. All rights reserved.

Intra-MSC Handover

MS BTS1

Measurement Report

Clear Command

BSC1

Measurement Result

Clear Command

MSC

Handover Required

Handover Complete

BSC2

Handover Complete

BTS 2

Channel Activation

(Handover Detection)

Handover Request

Channel Activation Ack.Handover Request

Ack.Handover CommandHandover Command

Handover Command

(Handover Detection)

Physical Information

SABM

Clear CompleteClear Complete

Handover (Handoff)

Page 59: Existing Wireless Systems

59Copyright © 2002, Dr. Dharma P. Agrawal and Dr. Qing-An Zeng. All rights reserved.

Inter-MSC Handover

PSTN/ISDN

MSC MSC A

Area Boundary

(a) Basic handover

PSTN/ISDN

MSC MSC A

(b) Subsequent handover

MSC B

Area Boundary

Anchor Anchor

Page 60: Existing Wireless Systems

60Copyright © 2002, Dr. Dharma P. Agrawal and Dr. Qing-An Zeng. All rights reserved.

PCS

Page 61: Existing Wireless Systems

61Copyright © 2002, Dr. Dharma P. Agrawal and Dr. Qing-An Zeng. All rights reserved.

PCS (Personal Communications Service)

The FCC view of PCSPCS spectrum allocationStandardsHigh-low tier systemsCT-2 and DECT TDD slotsDECT support for data Comparison of CT-2 and DECTBellcore view of PCSBellcore PCS reference architectureAnother view of the interfacesThe TDM and TDMA framesExample of PCS operationsA MAN backbone for PCSA MAN backbone for the PCS services

Page 62: Existing Wireless Systems

62Copyright © 2002, Dr. Dharma P. Agrawal and Dr. Qing-An Zeng. All rights reserved.

The FCC View of PCS

CATVPublic

Cellular provider

Specialized mobile

networkOthers

PCS base station

PCS switch

MS

PCS base station

PCS switch

MS

Page 63: Existing Wireless Systems

63Copyright © 2002, Dr. Dharma P. Agrawal and Dr. Qing-An Zeng. All rights reserved.

PCS Spectrum Allocation

60 MHz1850 1910 1930 1990 MHz

20 MHz 60 MHz

PCS Handset PCS Base

A 30 MHz

D 10 MHz

B 30 MHz

E 10 MHz

F 10 MHz

C 30 MHz

Six bands

Uplink Downlink

Page 64: Existing Wireless Systems

64Copyright © 2002, Dr. Dharma P. Agrawal and Dr. Qing-An Zeng. All rights reserved.

The Six PCS Standards

High tier Low tier

IS-54 based

IS-95 based

DCS based

PACS

W-CDMA

DECT based

DCS – Digital Communications Service

PACS – Personal Access Communications Systems

DECT – Digital European Cordless Telephone

Page 65: Existing Wireless Systems

65Copyright © 2002, Dr. Dharma P. Agrawal and Dr. Qing-An Zeng. All rights reserved.

The PCS High-Tier Standards

13/6.5 kbps8/4/2/1 kbps8/4 kbpsVocoderYesRake filtersYesEqualizer

4.165 ms20 ms40 msFrame length125 mw200 mw100 mwPower

417Frequency reuseGMSKQPSKπ/4 DQPSKModulation

8103x AMPS8203Cannels/carrier

200 KHz1.25 MHz30 KHZCarrier BWFDDFDDFDDDuplexing

TDMACDMATDMAMACDCS basedIS-95 basedIS-54 based

Page 66: Existing Wireless Systems

66Copyright © 2002, Dr. Dharma P. Agrawal and Dr. Qing-An Zeng. All rights reserved.

The PCS Low-Tier Standards

32 kbps>32 kbps32 kbpsVocoderNo No YesEqualizer

10 ms40 msFrame length20.8 mw500 mw100 mwPower

917Frequency reuseGFSKQPSKπ/4 DQPSKModulation

0.2160.8x AMPS121288Cannels/carrier

1728 KHz>5 MHz300 KHZCarrier BWTDDFDDFDDDuplexing

TDMAW-CDMATDMAMACDECT basedW-CDMAPACS

In discussion

Page 67: Existing Wireless Systems

67Copyright © 2002, Dr. Dharma P. Agrawal and Dr. Qing-An Zeng. All rights reserved.

CT2 TDD Slots (First-generation)

B channel – Information channel

D channel – Control channel

GP – Guard period

Fixed-to-Mobile Mobile-to Fixed

D DB – Channel

2 264

GPGP

1ms

2 ms

CT2 – Cordless telephone or cordless communications systems)

Page 68: Existing Wireless Systems

68Copyright © 2002, Dr. Dharma P. Agrawal and Dr. Qing-An Zeng. All rights reserved.

DECT TDD Slots (Second-generation)

Fixed-to-Mobile Mobile-to Fixed

64

10 ms

1 2 3 4 5 6 7 8 9 10 11 12

64 bitsP S C I

H CRCDATA

8 1640

16 320

DECT – Digital European Cordless Telephone

Page 69: Existing Wireless Systems

69Copyright © 2002, Dr. Dharma P. Agrawal and Dr. Qing-An Zeng. All rights reserved.

RP RPCU Switch

OAM

SS7

HLRVLRAM

Advanced intelligent network

P

A

Other networks

Bellcore PCS Reference Architecture

Page 70: Existing Wireless Systems

70Copyright © 2002, Dr. Dharma P. Agrawal and Dr. Qing-An Zeng. All rights reserved.

Forward TDMA Frame

20 ms

70

70

Sync channel Slow channel Fast channel CRC PCC

14 10 80 15 1

120 bits

2.5 ms

0.312 ms