1G 2G 3G2.5G

IS­95

cdmaOne

IS­136

TDMA

D­AMPS

GSM

PDC

GPRS

IMT­DS

UTRA FDD / W­CDMA

EDGE

IMT­TC

UTRA TDD / TD­CDMA

cdma2000 1X

1X EV­DV

(3X)

AMPS

NMT

IMT­SC

IS­136HS

UWC­136

IMT­TC

TD­SCDMA

CT0/1

CT2IMT­FT

DECT

CDMA

TDMA

FDMA

IMT­MC

cdma2000 1X EV­DO

HSPA, HSUPA

3.9G 4G

LTE LTEadvanced

Red: standards operational in Romania (2019)

12.03.2019

12.03.2019

12.03.2019

• !"#$

• % &!!'#($

• %'')"#!*"!"! $

• % &+(,!!)# (,#$

• "#!"#'-#!$

% &+'! .##(,#&"$

!!.($

%#* '),!'#*$

• /!,! )#,!0"

– +/"#'!"# +"

– !#("#'',!12

• 0"– ,!#!"3"''#)#. #.

• !,! – #!'1#,!")')))#

'#.#

• %#!. – ",##*!!!4

• ))#

– .56 427 '## (!

• #( ",#

• "!",#

– 896,'

– 5#(#.2

",!,!:#*",!!':#*

GSM­PLMN

transit

network

(PSTN)

source/

destination

network

TE TE

bearer services

tele services

MT

MS

9

• :5",!,!:#*2

– .#!'#.#"#

– '

• 5,!2

• -5,2

• 05,!(#2

• 5!#(#2

– ",

• 5#", 2.#!!#'

• :5#*(", 2!!)##(.#(

• ;5'#", 2()#*

("

(,

#(

!

NSS

MS MS

BTS

BSC

GMSC

OMC

BTS

BSC

MSC MSC

Um

EIR

HLR

VLR VLR

BSS

ISDN, PSTN, Internet

RSS

radio cell

radio cell

MS

AUCOSS

signaling

fixed network

BSC

BSC

MSC MSC

GMSC

VLR

HLR

NSS &

OSS

RSS

VLR

BTS

• 0'– 5,!2

– 5-", 2()

• 5-#.#2##.#

• 5-0#!!#2#!!(.#!#.#

MS MS

BTS

BSC

BTS

BSC

MSC MSC

Um

BSS

RSS

radio cell

radio cell

MS

• 0'

– -", 5-2

• -#.#5-2#'!"(##.#1 )##"-.#.#!!!

• -0#!!#5-02(,-#!!(-(()#*#"#

• -/-0<"5-2<#

–,!52

• -'##'))"

• -0(#)##!

Functions BTS BSC

Management of radio channels X

Frequency hopping (FH) X X

Management of terrestrial channels X

Mapping of terrestrial onto radio channels X

Channel coding and decoding X

Rate adaptation X

Encryption and decryption X X

Paging X X

Uplink signal measurements X

Traffic measurement X

Authentication X

Location registry, location update X

Handover management X

9

• ").#!###)#="

• )#=" >(!!

• !!466*5''"! ((#' #.#'#2

• ?(!'!45!!.#!'''((#' 2

• .#))"#.)#!!(,#(!!

possible radio coverage of the cell

idealized shape of the cellcell

segmentation of the area into cells

0' 05,!#.(0#2 5 (#2 @5@#(#2 +5="'+ (#2 05 02

NSS

BSC

GMSC

OMC

BSC

MSC MSC

EIR

HLR

VLR VLR

PSTN, Internet

AUC

signaling

0##* :5",!!':#*2

• :#!')– (,! (###*

#!

• 0'– ,!#.(0#502

#!!!.'##*)#,!#!)01 .#!-0,!(0

– A,5'#!,! (' !! 2

• (#5 2#!#,("#'#1'#)!!",#,#( 5'#.#..#! 2

• @#(#5@2!!,)#",)"#!"(,"!!"#"##! )@

• 05,!#.(#2'! #!#!

– ()"

– !)")#,! "''#

– ()#*#"#

– ##*()". 0502

– (#).#!,

• ")0

– '))")#'((!!)##(

– ,! ')(!(

– !#(#)##()!)#

– '#.)#.5)?!!2

– "''#)#(#.52

– (#)##()"(,!!()#

1 2 3 4 5 6 7 8

higher GSM frame structures

935­960 MHz

124 channels (200 kHz)

downlink

890­915 MHz

124 channels (200 kHz)

uplink

time

GSM TDMA frame

GSM time­slot (normal burst)

4.615 ms

546.5 µs577 µs

tail user data TrainingSguard

space S user data tailguard

space

3 bits 57 bits 26 bits 57 bits1 1 3

Total = 8*124 duplex channels

• "!"'!*!*

• -! !,)#

• "!,)#(

• B#."!"!

–% $C!)"'!?##

12.03.2019

12.03.2019

12.03.2019

! !!

12.03.2019

!/99!

– #))!5.96,'2

– -##!5-00 2

– !50 2

– ((!50 2

– @!

– A

12.03.2019

9

• -#0#!0!5-00 2'#!!

– #+ 502

– )(,#(!!

– ))#=""!!

– 0!!

– ##!#

– #!5#( !!,##(2

• -00 #'#!!

• !! ""#(!#(D

12.03.2019

• 0 5#!2

– (

– !; 12

• 0 5'((!2

–%#,!$CE!#&

• 0 5(##!!2

–,!.#"'!!)#0

• .,!"!#-00 B000 )#="!

!

12.03.2019

• ,!)#)(!!, '(( .#0 – '(.# !!)#!!$

)#,

– ,!!"'!!!.!6

(("!!," !"'

• !!#(#"'!#– "'! (

– '(((!!!!!*

• -"#!#5 2

– @) 32011, 32022, 32033

– ;#( 1010

– 0 7003, 7004

"

• ,!",#,#+A:5+A:2

– F#!G!'",#FG, "#

– '+A:.#

('5++2

(+5++2

– #,! #'##$

CC NDC SN

" !

" #$%!

"

• +#!,!="'+ 5++2

– +!##!",#6+!!, ="'")"###(#, #*#+

• +#!,!",#,#+ 5++2

– +",#

– )#)"

MCC MNC MSIN

"

"

"

& !

!'

#$%($%)'

• #+A5+2– +,##("!#! , --00

– !!)"="! ,!((, +

MCC MNC LAC

"

"

$*"$*

!

• 0+ 5!! 2/HHIIJ– HH-0",#

– II-",#-0

– J0!!",#-

– J/31/#!

• 0+5!!(!,!)2

001:01010+

• 00/,!"#

• :0/--,!#*

• 0/000!#

• 0+!!

?'!0+/1119

• /00)

• /:0)@)

• /0

• 9/0+

• !!)-19-01#

# $

! "

!

! " !#

!$ $%

# &' (

%+

&&

&

• A!*#*#4636#*#*

• #''

– 1:#* :#1

– #.+++++500:0020!!+A-0:0(,#!(!#(

• 0#!

'6('6!!#6!

4!!#.

;'0!!+A

(!0,#1 KKK

12.03.2019

9

! "!

&"• • ,

"!

"!

• )'#"#

– #*,!"# L1M@

– ),!"#!.#!!@1M

• !!(",#,#

• )##(!!0

• (!!!"'

• #=":)#@

• )###',!00

• )##!!

• "##0

• 9("##")

• '(()

• #

• "# *

• "'

PSTNcalling

stationGMSC

HLR VLR

BSSBSSBSS

MSC

MS

1 2

3

4

5

6

7

8 9

10

11 12

1316

10 10

11 11 11

14 15

17

• #="

• "# *

• 1*#"#5)##"2

• 91"'!!

PSTN GMSC

VLR

BSS

MSC

MS1

2

6 5

3 4

9

10

7 8

%

BTSMS

paging request

channel request

immediate assignment

paging response

authentication request

authentication response

ciphering command

ciphering complete

setup

call confirmed

assignment command

assignment complete

alerting

connect

connect acknowledge

data/speech exchange

BTSMS

channel request

immediate assignment

service request

authentication request

authentication response

ciphering command

ciphering complete

setup

call confirmed

assignment command

assignment complete

alerting

connect

connect acknowledge

data/speech exchange

MTC MOC

9

receive level

BTSold

receive level

BTSnew

MS MS

HO_MARGIN

BTSold BTSnew

• %,!"#()#!$

– #!)#(,#(-

– #'#!*="!)-00 .#

• !.#*, 5-002

– -– #4,-! -– >"("#')#

– 15",!2

– "'

12.03.2019

!

HO access

BTSold BSCnew

measurement

result

BSCold

Link establishment

MSCMSmeasurement

report

HO decision

HO required

BTSnew

HO request

resource allocation

ch. activation

ch. activation ackHO request ackHO commandHO commandHO command

HO completeHO completeclear commandclear command

clear complete clear complete

Hard handover

• ?6*,'1 5• 5#!*#.26

– ,().#!!5!2

– ##"'(#"'!?#

– -#07 "','

• A 5A#)#.!"2

– .,#07 "'*,

• #*!– :5"''#:2::

– :5 :2

• ##*(",A:5*A:#*2

– :5#.(:2

• "''#5!,!!("# 2

– 5(#2

• "##

MS BSS GGSNSGSN

MSC

EIR

HLR/

GR

VLR

Internet

SGSN

• .#!,!!"

• :5####!:#*2

– 0!!!.!,!

– :#*", 5:2

– '"!)!!#')*

• 5#="'2

• 0:50#:#*2

– +# .#

– ()#,:

UTRANUE CN

• 0A<AA0A<AA

• A!*:!!

• '!*0 5' !#!2

– !;

– ##'(

#!'#

+)0#'#

• :",#)!

– A)'#!!

– -#!!,!.-0

12.03.2019

• '##!502"#"##.#"(#( .#.,"'#.

– -!*()"#5#1)#1))2

– ?(#,!#)#!.!

UE1UE2

UE3

UE1

UE2

UE3

UE1 UE2 UE3

Without PC received

power levels would be

unequal

With ideal PC

received power

levels are equal

• UTRAN comprises

several RNSs

• RNC is responsible for

handover decisions

requiring signaling to the

UE

RNC: Radio Network Controller

RNS: Radio Network Subsystem

Node B

Node B

RNC

Node B

UE1

RNS

CN

Node B

Node B

RNC

Node B

RNS

Node B

UE2

UE3

:0• (#!

• )#,#(

• !# '

• .#

• #*)("#

• 0!="! "#

• #.#

• ####!

• #"##!0

• A#.###)

• ;"#!''##!5AABAA2

• 0!(

• #!

:-• • #

• • • #

9

BTS

Node B

BSC

BTS

BSS

MSC

Node B

Node B

RNC

Node BRNS

Node BSGSN GGSN

GMSC

HLR

VLR

CN

EIR

AuC

GR

!!

• "!()..#!' !!

– ,!).#

• '!*

– "!"#').#!:-

– #"):-#:0

• A!*

– "!"#).))#!!

– A))#'#())#!!

CNNode B RNC

Node BUE

• )/##"'– .#,))#

:-

– .#!:-#(!,#

• .(• !#?'#)#:-• !##)#,# .()#

• A.(• #"#B'#,##.)#:-• ?).#!' • ::0"'!()##:-

• 5 (1'*2– A6666,'– 6,'– '#.!

• <5.!. 2– A!*,'– '!*,'

"

• #(A!*,"'!*,L

• #

• '!)#*#"#'#

– !+1,#*#'!(#'4)#+1"!", 5+2##"(

0 1 2 7 8 9...

Radio frame (10 ms)

Subframe (1 ms)FDD

UL

DL 0 1 2 7 8 9...

TDD ...

Synchronization is part of subframe 0 and 5

UL/DL

Downlink Pilot Time Slot

(data plus pilot signal)

0 1 2 7 8 9...

Guard Period

Uplink Pilot Time Slot

(random access plus pilot signal)

!

• "!())#=" 5'!)2

t

f

UE1

UE2

UE3

UE4

UE1

UE1

UE2

UE4

UE3

UE4

UE1

UE1

UE2

UE2

UE2

UE1

UE1

UE4

UE2

UE1

UE1

UE3

UE3

UE2

UE1

UE1

UE3

UE3

UE4

UE4180 kHz

1 ms

S­GW

UE2

eNode B

eNode B

eNode B

eNode B

eNode B

UE1

E­UTRAN EPC (Evolved Packet Core)

X2­U/­CX2­U/­C

X2­U/­C

X2­U/­C

MME

Mobility Management Entity Serving Gateway

Packet­data network Gateway Home Subscriber Server

Policy and Charging Rules Function

MME

P­GW

Internet,

Operators…

Uu

Uu

PCRF

HSS

SGi

GPRS

!!%&!'

&' !"

'' #

) ''

'!'! '*

+) #'' '*

!# *

9

(

12.03.2019

• , % $ •

• - ./• ".+) /• " ./

• $ • ,$%&$%• %

12.03.2019

DCH = dedicated channel

FACH = fwd access channel

!!

12.03.2019

ping –c5 8.8.8.8

A: allocate channel

B: user traffic

C: DCH­>FACH

D: FACH­>IDLE

• RTT = 80..200ms

• 2s delay for sporadic traffic

• high power consumption for a single packet

!!

12.03.2019

Samsung Galaxy Nexus

RDS, HSPA

Screen off

TCP up: tc @ server

TCP down: curl –limit­rate

High efficiency only for highest rates

12.03.2019

DRX = discontinuous

reception

only listen to

broadcasts

12.03.2019

Samsung Galaxy Nexus

Orange LTE

Screen off

TCP up: tc @ server

TCP down: curl –limit­rate

%

12.03.2019

• RRC states are different for every standard

• RRC state machines are managed by the network

• RRC state promotions to high power occur when data must

be transferred.

• RRC state demotions to lower power occur on network­

configured timeouts.

• LTE/HSPA+ state transitions can take 10 to 100ms

• HSPA/CDMA state transitions can take several sec

• every network transfer, no matter the size, incurs an

energy tail.

• !!

• ,!))!(

• ,!(!"

•

)!

12.03.2019

• #"#",!.#&)?!.!,!

– )"!!,!#!.#(11 ()!!(

• .# !!#'":-! "

• !!#!!"!#'5)#!(#"'2,!'##&#*"(#!A#,!,#,

• !!,!' =".!)"!!#*#.# !#'##!! #(,# !))?('"(#"%,!

• !( .!")##*!, !)'

• %11 !!!!!(

• #"))!( %)##""#

• #"))!('##&%)##""#

– "+51+2

12.03.2019

9

12.03.2019

0!"*.# I:/:#* / --/-,0/.!.*0#,/(,#

#$

12.03.2019

(nu se cere la examen)

Sursa:

Date ANCOM, document 2014/02/01/RO

!

/N-./0

-112

(-11/

%-30

14-5

$$

1920­1980, 2110­2170 MHz

RDS

*+

FDD pentru LTE

B20 B20

RDS

B7 B38 B38 B7

B3 B3

!,

! *

#$ %

#$ %,

9

"!.

912.03.2019

912.03.2019

9

-

A3

RANDKi

128 bit 128 bit

SRES* 32 bit

A3

RAND Ki

128 bit 128 bit

SRES 32 bit

SRES* =? SRES SRES

RAND

SRES

32 bit

mobile network SIM

AC

MSC

SIM

Ki: individual subscriber authentication key SRES: signed response

9

- !

A8

RANDKi

128 bit 128 bit

Kc

64 bit

A8

RAND Ki

128 bit 128 bit

SRES

RAND

encrypted

data

mobile network (BTS) MS with SIM

AC

BSS

SIM

A5

Kc

64 bit

A5

MSdata data

cipher

key

9

W­CDMA

• 1920­1980 MHz uplink

• 2110­2170 MHz downlink

• chipping rate:

3.840 Mchip/s

• soft handover

• QPSK = 2bits/symbol

• complex power control

(1500 power control

cycles/s)

• spreading: UL: 4­256;

DL:4­512

0 1 2 12 13 14...

Radio frame

Pilot FBI TPC

Time slot

666.7 µs

10 ms

Data

Data1

uplink DPDCH

uplink DPCCH

downlink DPCHTPC TFCI Pilot

666.7 µs

666.7 µs

DPCCH DPDCH

2560 chips, 10 bits

2560 chips, 10*2k bits (k = 0...6)

TFCI

2560 chips, 10*2k bits (k = 0...7)

Data2

DPDCH DPCCH

FBI: Feedback Information

TPC: Transmit Power Control

TFCI: Transport Format Combination Indicator

DPCCH: Dedicated Physical Control Channel

DPDCH: Dedicated Physical Data Channel

DPCH: Dedicated Physical ChannelSlot structure NOT for user separation

but synchronization for periodic functions!

9

! - !

User data rate [kbit/s]

12.2

(voice)

64 144 384

DPDCH [kbit/s] 60 240 480 960

DPCCH [kbit/s] 15 15 15 15

Spreading 64 16 8 4

9

• ,!(:",#5:2

– +'## !'+A:",#

– +(, !!@#6

CC NDC SN

9

• '## ,!",#,#+ 5+2– +!)++"'!)#'#. 6

– +".(++#'6

– +'## !!, @#1@#(#,(, @

– +#+#@6

9

• !*+A:++*"#600)+A:#!00)++)!!6(0000

• +")++"#(!"''#'#. 6"#.+"!"'6"#'# '(#!!*#*"#.6

• :#"(",#)"##!)!!6

– :'## #* (,!",#,#6

– :)#.(0@6

– :")#!!!.# 5!!(26

• +A:!",##"#

99

6 ;,(!"'7 :)#()!"'# 6 '! "''! #"()5:2!!#"(!!06

6 ;,('#!!,7 #="# !))#"##! #',!@6%#"()#=")# )#,:)#@6:('#!!,66!!.!.:(

• +):!!",#,#.(0",#):#="#!#(6+):!!! !!,,!",#):#"(! ="!",#)#"07 "!!#",#7 : '!! !!'#!!, @0

! ,%

MSISDN

GMSC

HLR

MSC/VLR

MSISDN­>IMSI, VLR

MSRN