Mobile Communication

Dileep.P.M
Sub Divisional Engineer
BSS
BSNL Mobile Services, PATTAMBI

Mobile communication 1
Telecommunication

Telecom
USER A USER B
Network
Telecommunication Network

Access Network Core Network

Telecommunication Network
Public Switched Telephone Network (PSTN)

Access Network Core Network

Switching Network

A.N C.N
Telecommunication Network
Public Land Mobile Network (PLMN)

Access Network Core Network

Switching Network

R.A.N C.N

Radio Access Network

 Public Land Mobile Network (PLMN)-
Architecture
BTS OTHER
PLMN
BSC
BTS
PSTN
MSC

BTS- BASE TRANSCEIVER

BTS STATION
BSC- BASE STATION
BSC CONTROLLER
MSC- MOBILE SWITCHING
CENTRE
BTS
PLMN PUBLIC LAND MOBILE
NETWORK
R.A.N C.N PSTN-PUBLIC SWITCHED
Radio Access Network TELEPHONE NETWORK
Core Network
GSM NETWORK ARCHITECTURE

OMC

Base Station Network Switching

Subsystem Subsystem
BSS NSS
 GSM Various subsystems

Mobile Station
Radio Subsystem
(Base Station Subsystem - BSS) includes the
equipments and functions related to the
management of the connections on the radio path.
Network & Switching Subsystem -NSS includes
the equipments and functions related to end-to-end
call.
Operations & Support subsystem- OSS includes
the operation and maintenance of GSM equipment
for the radio and network interface.
8
MOBILE NETWORK ELEMENTS
(GSM NETWORK)
C.S.

PSTN
MSC BTS
BTS

TRAU

BSC/
PCU
BTS
Internet GGSN SGSN Backhaul

OMC-R
P.S.

C.N. R.A.N.
 GSM- Frequency Bands

GSM 900 Mhz

Mobile to Cell(UP-LINK) -890 to 915 MHz
Cell to Mobile (DOWN -LINK) - 935 to 960 MHz

GSM 1800 Mhz

Mobile to Cell(UP-LINK) -1710 to 1785 MHz
Cell to Mobile(DOWN -LINK) - 1805 to 1880 MHz
 BSNL 2G Frequencies
Total BW = 50x200 kHz=10 MHz
900 Band- 31 nos
63-64 2 80-82 3
66-71 6 111-113 3
73-78 6 115-120 6
87-88 2 122-124 3
(16 nos.) + (15 nos.)= 31 nos.

1800 Band -19 nos

713-718 6
832-844 13
(19nos.)
GSM Network Structure

Cell
Location
Area Area
served by a BTS

Location Area
MSC Service Area
PLMN Service Area

GSM Service Area

13
Location Area

BSC
BTS MSC
LA1
BSC
BTS
BTS SS7 HLR
VLR-1
BTS BSC
LA2
MSC

LA3 BTS
BSC
BTS VLR-2
 GSM Network Structure
GSM Service Area: Total area served by the combination
of all member countries where a mobile can be served.
PLMN Service Area: It is one N/W area.
MSC Service Area: There can many MSC/VLR in one PLMN
area.It is one Mobile Exch. Area.
GMSC: All I/C calls for PLMN N/W will be routed through
GMSC. In a GSM/PLMN N/W all mobile terminated calls
will be routed to a Gateway MSC. Call connections
between PLMNs , or to fixed N/Ws must be routed to a
GMSC.The GMSC contains the Inter working functions to
make these connections.
Location Area
Cells
LOCATION AREA : There are several LA in a
MSC/VLR combination. A LA is a part of the
MSC/VLR service area in which a MS may move
freely without updating location information to
the MSC/VLR exchange that control the LA.
Within a LA a paging message is broadcast in
order to find the called mobile subs. LA can be
identified by system using the LAI.
CELL : A cell is an identity served by one BTS. The
MS distinguishes between cells using the BASE
STATION IDENTIFICATION CODE(BSIC) that the
cell site broadcast over the air.
Mobile Station
MS=ME+SIM
Mobile Station is really two distinct entities.
Mobile Equipment or Terminal.

SIM Card.

ME
Mobile equipment, which is the actual Hardware
SIM card
a smart card holds the subscriber information
including a unique identifier IMSI

(IMSI- International Mobile Subscriber Identity )

Mobile Terminal
Different terminals distinguished principally by their
power and application.
Fixed terminals 20W (Now not
used)
Portable terminals for cars 8W
Handheld terminals 2W
Sophisticated terminals 0.8W
Every terminal has an Unique IMEI
It is checked in the EIR.
White List
Grey List
Black List

(IMEI -International Mobile Equipment Identity)

 NETWORK COMPONENTS

International Mobile Equipment Identity ( IMEI ) :

IMEI is a serial number unique to each mobile

Each MS is identified by an International Mobile station Equipment Identity
(IMEI) number which is permanently stored in the Mobile Equipment.
On request, the MS sends this number over the signalling channel to the MSC.
The IMEI can be used to identify MSs that are reported stolen or operating
incorrectly.

TAC FAC SNR SP

6 2 6 1
TAC = Type Approval Code
FAC = Final Assembly Code
SNR = Serial Number
SP = Spare
 Functions of MT
1.Speech encoding and decoding
2.Speech encryption and decryption
3.Radio path adaptation
The 13 kpbs speech needs to be encoded/decoded as well as
modulated /demodulated to and from the 900/1800 MHz air
interface frequency.
4.Radio channel management.
The MT must be able to change channels among the 124 or 374
available channels as instructed by the network
5. Signaling.
The mobile must be capable of interpreting and generating
signaling information
Functions of Mobile Station

Voice and data transmission

Frequency and time synchronization
Monitoring of power and signal quality
of the surrounding cells
Provision of location updates even
during inactive state
Equalization of multi path distortions
GSM NETWORK ARCHITECTURE

2- Subscriber identity module (SIM)

GSM NETWORK ARCHITECTURE

2- Subscriber identity module (SIM)

 SIM CARD
A Smart Card That Identifies the Terminal

SIM provides personal mobility

SIM makes the terminal operational

User can have access to all subscribed services irrespective

of both location of the terminal and the use of a specific
terminal

SIM card may be protected against unauthorized use by a

PIN (a Password)
FUNCTIONS OF SIM CARD

Acces control
Customisation
Service personalisation
Network branding and advertising
Value addition in operator services
Roaming
 BTS
BASE TRANSIEVER STATION
 GSM NETWORK ARCHITECTURE
Base Transceiver station
 GSM NETWORK ARCHITECTURE

Base Transceiver station

 GSM NETWORK ARCHITECTURE

Base Transceiver station

 GSM NETWORK ARCHITECTURE
Base Transceiver station
 GSM NETWORK ARCHITECTURE

Base Transceiver station

 GSM NETWORK ARCHITECTURE

Base Transceiver station

 GSM NETWORK ARCHITECTURE

Base Transceiver station

BTS
 Base Transceiver station - BTS

FUNCTIONS
Encodes, encrypts, multiplexes, modulates
and feeds the RF signals to the antenna
Transcoding and rate adaption Functionality
Time and frequency synchronisation signals
transmission.
Frequency hopping
Uplink radio channel measurements
Random access detection
 BTS
BTS mainly consists of TRXs.
TRX basically consists of a low frequency unit and a
high frequency unit.

The low freq: unit is responsible for DSP.

The high freq: unit is responsible for GMSK

modulation/demodulation.
 FREQUENCY HOPPING
The Mobile Radio Channel is a Frequency selective Fading
channel, slow hopping freq. Of a CHL.changes with every
TDMA Frame. RATE--216.7 Hops/sec. It reduces the S/N
ratio.
Base Band Hoping: It involves hopping between freq. On
different transreceivers in a cell.
Synthesizer Hoping: Hopping from freq. To freq. On the
same transreceiver in a cell.

37
 TIMING ADVANCE

It Ii
It is a solution to time alignment. It works by instructing the
mis aligned MS to transmit its burst earlier or later than it
normally would.
Transmission would occur earlier or later related to previous
position ,to reach its timeslot at the BTS in right time .
Max. bit times= 63. For 35 KM.
With extended range distances up 70 Km or even 121 Km can
be handled, using 2 T/S.

38
GSM Antenna
A mobile BTS
GSM Speech to Radio waves
Analog Analog

Speech Coding Speech Decoding

Channel Coding Channel Decoding

Interleaving De-interleaving

Burst formatting Burst formatting

Ciphering Deciphering

Modulation Demodulation
200kHz BW 200kHz BW
 BSC
Base Station Controller
The base station controller (BSC)
GSM NETWORK ARCHITECTURE

The base station controller (BSC)

Remote BTS

BTS

BTS
BSC

Co-located BTS
GSM NETWORK ARCHITECTURE

BSS Link configuration

- Cascade

BTS
BSC

BTS BTS

BTS BTS
GSM NETWORK ARCHITECTURE

BSS Link configuration

- loop

BTS
BSC

BTS BTS

BTS
GSM NETWORK ARCHITECTURE

BSS Link configuration

- Star

BTS BTS

BTS BTS

BTS
BSC
 FUNCTION OF BSC
It is connected to BTS and offloads MSC
Radio resource management
Inter-cell handover
Reallocation of frequencies
Power control
Performs traffic concentration to reduce the
number of lines from BSC to MSC.
BSC performs call processing.
Base Station System
Mobile Switching Centre
MSC
Mobile Services Switching Centre
GSM NETWORK ARCHITECTURE

- The MSC is connected to:

1. HLR (Home location register)
2. VLR (Visitor location register)
3. AUC (Authentication Center)
4. EIR (Equipment identity register)
 FUNCTION OF MSC-1/3
Manages communication between GSM & other
network
Call setup functions, basic switching are done
MSC takes into account the RR allocation in
addition to normal exchange functions
MSC does gateway function while its customers
roams to other network by using HLR /VLR
 FUNCTION OF MSC-2/3

Paging, specifically call handling

Location updation

Handover management

Billing for all subscribers based

in its area
 FUNCTION OF MSC-3/3

Signaling interface to databases like

HLR, VLR.

Gateway to SMS between SMS centers

and subscribers

Handle interworking function while

working as GMSC
GSM NETWORK ARCHITECTURE

1. HLR (Home location register)

Home Location Register(HLR)
Reference store for subscribers parameters,
numbers, authentication & Encryption values.

Current subscriber status and associated VLR.

Both VLR and HLR can be implemented in

the same equipment in an MSC.

one PLMN may contain one or several HLR.

Permanent data in HLR

Data stored is changed only by man-machine

interface.
IMSI, MS-ISDN number.
Roaming restriction ( allowed or not ).
Supplementary services like call forwarding
 Temporary data in HLR

The data changes from call to call & is dynamic

MSRN

RAND /SRES and Kc

VLR address, MSC address.

Messages waiting data used for SMS

VISITOR LOCATION REGISTER (VLR)

It controls those mobiles roaming in its area.

VLR reduces the number of queries to HLR
One VLR may be incharge of one or more LA.
VLR is updated by HLR on entry of MS its area.
VLR assigns TMSI which keeps on changing.
 Data in VLR
IMSI & TMSI
MSISDN
MSRN.
Location Area Identity.
Supplementary service parameters
Authentication Key
 GSM Authentication Center

The authentication center (AuC) stores the keys required

for checking whether a mobile subscriber is authorized to
access the PLMN.
-Used for security purposes.
-A protected database
-Subscriber authentication data ie.Authentication Keys Ki
-Encryption data.
-
 GSM Equipment Identity Register

A database that contains a list of all valid mobile

equipment of the network.
Valid List, Suspect List & Fraudulent list through the
use of International Mobile Equipment Identity (IMEI).
Forbid calls from unauthorised terminals (non-standard
terminals)..
GSM NETWORK ARCHITECTURE

Operation & Maintenance

center (OMC)
For Radio part (BSS) - (OMC-R)
For switching parts - (OMC-S)
GSM NETWORK ARCHITECTURE

The Operation and maintenance center (OMC)

 International mobile
subscribers Identity
The IMSI is an unique identity which is
used internationally and used within the
network to identify the mobile
subscribers.
The IMSI is stored on the subscriber
identity module (SIM), the HLR, VLR
and AC database.
Technical Terms Used w.r.t. MM(Mobility Management)

IMSI (International Mobile Subscriber Identity)

An unique identity which is used internationally.
Used within the N/W to identify a mobile subscriber.
The IMSI is fused in SIM by SIM manufacturer on the basis of
information provided by the PLMN operator.
Stored within subscriber identity module(SIM), HLR, VLR,AC
database.
The total number of digit in IMSI shall not be more than 15
digit.
 Technical Terms Used w.r.t. MM(Mobility Management)

IMSI Structure

MCC MNC MSIN

(3 digit) (2 digit) (Max.10 digit)

MCC-Mobile Country code (404)

MNC-Mobile Network Code (75-BSNL Bihar, 68-MTNL Delhi, 72-BSNL Kerala)

MSIN-Mobile subscriber identification number (X1-X10)=0000000000-9999999999

 Technical Terms Used w.r.t. MM(Mobility Management)

MSISDN(Mobile subscriber ISDN Number)

A number assigned to the mobile subscriber
Registered in Telephone Directory
Used by the calling party for dialing
Used for routing purpose to address the HLR where
the mobile station is registered.
 Technical Terms Used w.r.t. MM(Mobility Management)
MSISDN Structure

CC NDC SN

CC- Country Code(91)

NDC-Network Destination Code ( 9431-BSNL Bihar, 9868-MTNL Delhi,
9447-BSNL Kerala)
SN-Subscriber Number (X1-X6)=000000-999999
Technical Terms Used w.r.t. MM(Mobility Management)

TMSI(Temporary Mobile Subscriber Identity)

Identity which guarantees the integrity of mobile subscriber
on the radio interface.
Uses only over the radio path
Assigned by VLR to each mobile subscriber entering the VLR
area
Reallocation of TMSI is possible
 Technical Terms Used w.r.t. MM(Mobility Management)

MSRN(Mobile Subscriber Roaming Number)

Used in GMSC to setup connection to visited MSC/VLR
It is a temporary number used for routing call to MS
HLR knows the current MSC/VLR service area for a mobile
subscriber
HLR request the current MSC/VLR to allocate a MSRN to the
called subscriber and return to it.
After receiving MSRN , HLR returns the same to GMSC
,which can route the call to current MSC/VLR exchange.
Format:--- MSRN=CC+NDC+SN
CC=Country code.
NDC=Network Destination Code.
SN=Subscriber Number.
 Technical Terms Used w.r.t. MM(Mobility Management
LAI(Location Area Identity)
-Location area consists of one or more than one cell which may be served by
one or more BSCs.
-All the cells in a location area are served by single VLR.
-Each location area in a GSM PLMN is identified by LAI
LAI=MCC+MNC+LAC MCC=Mobile Country Code.
MNC=Mobile Network Code.
LAC=Location Area Code.
Max length of LAC is 16 bits.
Thus there can be maximum of 65,536 location areas defined in one GSM PLMN.
3 digits 2 digits 2 octets max(16 bits)

MCC MNC LAC

LAI
 CHANNEL CONCEPT

HYPERFRAME AND SUPERFRAME STRUCTURE

3h 28min 53s 760ms 1 Hyperframe = 2048 superframes = 2,715,648 TDMA frames

0 1 2 2045 2046 2047

6.12s 1 Superframe = 1326 TDMAframes = 51(26 fr) 0r 26(51 fr) multiframes

0 1 2 3 47 48 49 50

0 1 24 25

120ms 235.38ms

0 1 2 23 24 25 0 1 2 48 49 50

Traffic 26 - Frame Multiframe Control 51 - Frame Multiframe

4.615ms

0 1 2 3 4 5 6 7 TDMA Frame
IMSI attach procedure
It is used to indicate the IMSI as active in the network..
An action taken by the MSC/VLR to set the subscriber status to
presentwhen the mobile station initiate one of the following
action to towards the PLMN.
Mobile originator call
Mobile originated short message
Location update
IMSI Detach Procedure
There are two IMSI detach function
Explicit IMSI detach
Action taken by the MSC/VLR on the mobile subscribers request
to set the subscriber to absent.From this moment on,the
mobile subscriber is unreachable for incoming calls.
Implicit IMSI detach.
Action taken by the MSC/VLR to set the subscriber status to
absent when the mobile station has not achieved radio contact
for a certain period of time.From that moment on ,the mobile
subscriber is unreachable for incoming calls.
It enables the N/W not to page for the subscriber.
Location updating procedure
As the user moves about within and outside their home service
area ,the home system must know the location of all active
mobile station in real time in order to deliver incoming calls.
LU procedure is invoked when
1. MS moves from one LA to another or
2. MS tries to access the N/W and is not already registered in
the serving VLR for the present location.
3.Periodic location updating:- is used to periodically notify the
availability of the MS to the N/W
Location updating procedure
MS continuously monitors the transmission from the
surrounding base station.
When it determines that it has moved to a new LA ,it initiate the
signaling sequence.(Assume that the new LA is served by
different BSS,MSC and VLR)
Location updating procedure

VLR 5
(old)

BSC MSC
(old)
1 1 HLR
BSC MSC
4 4 (new)

1 4 4 1

VLR 3
(new)
2
Location updating procedure
1. The MS sends a location update request to the VLR(new) via
BSS and MSC.
2. The VLR sends a location update message to HLR serving the
MS which includes the address of the VLR(new) and IMSI of
the MS. (This updating of the HLR is not required
if the new LA is served by same VLR as the old LA.)
3. The service and security related data for the MS is
downloaded to the new VLR.
4. The MS is sent an acknowledgement of successful location
update.
5. The HLR request the old VLR to delete data relating to the
relocated MS.
 Mobile Call Origination

User enters the called number and presses the send key PSTN
MS establishes a signaling connection to the BSS on the
radio channel.This may involve authentication and ciphering 5
LE
6
7 4
1 1 3
BSC MSC GMSC
7 7 7
1 7 2 2

VLR
HLR
Mobile Call Origination

1. The MS sends the dialed number indicating service request to

MSC(via BSS)
2. The MSC checks from the VLR if the MS is allowed the
requested services.If so MSC and BSS to allocate necessary
resources for the call
3. If the call is allowed ,the MSC routes the call to GMSC.
4. The GMSC route the call to the local exchange of called user.
5. The LE alerts (applies ringing) the called terminal.
6. Answer back (ring back tone)from the called terminal to LE
7. Answer back signal is routed back to MS through the serving
MSC which also completes the speech path to the MS.
 Mobile Call Termination
A call originating from PSTN and terminating at an MS in a GSM N/W.

PSTN

12
LE
1
11 2 12
11 12
BSC MSC GMSC
10 10 7
9 8 3 6
11 10
4
VLR
HLR
5
 Mobile call termination
1. PSTN user dials the MSISDN of the called user in GSM.
2. LE routes the call to GMSC of the called GSM user
3. GMSC uses the dialed MSISDN to determine the serving VLR for the GSM user.
4. HLR request the current serving VLR for the called MS for a MSRN so that call
can be routed to the correct MSC.
5. VLR passes the MSRN to the HLR
6. HLR passes MSRN to the GMSC
7. Using MSRN ,the GMSC routes the call to serving MSC.
8. MSC interrogate the VLR for the current LAI
9. VLR provides the current LAI for the MS
10. MSC pages the MS via appropriate BSS , MS responds & setup signaling link
11. When BSS has established the necessary radio link ,the MSC is informed and
the call is delivered to the MS
12. When MS answers the call ,the connection is completed to the calling PSTN
Call Flow MOC Mobile to Land Sequence
Call Flow- Mobile to Land Sequence
MTC Land to Mobile Sequence
GSM Antenna Radiation Pattern
 FDMA

Frequenc FDMA uses different frequency channels

y to accomplish communication.
The whole frequency spectrum available
is divided into many individual channels
(for transmitting and receiving)every
channel can support the traffic for one
subscriber or some control information.

Time

Page 92
 TDMA

Frequenc TDMA accomplishes the

y communication in different
timeslot.
A carrier is divided into channels
based on time. Different signals
occupy different timeslots in
certain sequence , that is , many
signals are transmitted on the
same frequency in different time.

Time

Page 93
FDMA/TDMA
Each channel pair serves eight ( Full Rate ) channels
successively in a Timed Cycle.
In FDMA system each channel requires a transmitter and
receiver
8 Voice channels, staggered in Time are transmitted via one
carrier frequency
Each of the 124 FDMA linked carrier frequency is used to
transmit 8 TDMA voice channels
Discontinuous nature of TDMA makes the entire 200 Khz
bandwidth available to all 8 Voice channels.
 PHYSICAL CHANNELS

8 7 6 5 4 3 2 1 FRAME OF 8 TIME SLOTS

1 2 3 4 5 6 7 8 FRAME REPETITION

8 7 6 5 4 3 2 1 8 7 6 5 4 3 2 1 8 7 6 5 4 3 2 1

1 2 3 4 5 6 7 8
PHYSICAL CHANNELS
1 2 3 4 5 6 7 8
1 2 3 4 5 6 7 8
1 2 3 4 5 6 7 8
1 2 3 4 5 6 7 8
GSM Logical Channels
 GSM Logical Channels

Broadcast Control Channel (BCCH)

Frequency Correction Channel (FCCH)
Synchronization Channel (SCH)

CCCH Common Control Channel

RACH Random Access Channel
PCH Paging Channel
AGCH Access Grant Channel SDCCH Stand-alone Dedicated Control Channel
CBCH Cell Broadcast Channel SACCH Slow Associated Control Channel
FACCH Fast Associated Control Channel
Distributed BTS Solution : DBS3900
Functional Architecture of the BBU3900
Functional Architecture of the RRU3004
Questions
Thank You
pmdileep123@gmail.com