Telecom Related Study Material
Telecom Related Study Material
A GSM network is made up of multiple components and interfaces that facilitate The Mobile Station (MS) is made up of two components:
sending and receiving of signaling and traffic messages. It is a collection of • Mobile Equipment (ME)
transceivers, controllers, switches, routers, and registers. • Subscriber Identity Module (SIM)
The GSM network can be divided into three parts: Mobile Equipment (ME) — this refers to the physical phone itself, each of which is
• Mobile Station (MS) uniquely identified by the International Mobile Equipment Identity (IMEI) number.
• Base Station Subsystem (BSS)
Subscriber Identity Module (SIM) — The SIM is a small smart card that is inserted into
• Network Switching Subsystem (NSS)
the phone and carries information specific to the subscriber such as the MSISDN
• Operation Support Subsystem (OSS)
(Mobile Station Integrated Services Digital Network) and IMSI (International Mobile
Subscriber Identity). See notes at the end for more detail.
Generally, telecommunication networks are categorized into two major aspects — the
radio aspects and the non-radio aspects.
The MS and the BSS forms the radio aspects of the GSM network while the NSS forms Base Station Subsystem (BSS)
the non-radio aspect which is regarded as core of the network.
The BSS is responsible for handling traffic and signalling between the Mobile Station
The OSS provides (MS) and the Network Switching Subsystem (NSS). It may be divided into two parts:
The architecture of the GSM network is presented in figure 1.
• Base Transceiver Station (BTS)
• Base Station Controller (BSC)
Base Transceiver Station (BTS) — The BTS is the Mobile Station's access point to the
network. It is responsible for carrying out radio communications between the network
and the MS handling speech encoding, encryption, multiplexing (TDMA), and
modulation/demodulation of the radio signals.
1|P a g e
Note: A BSC may be colocated with a BTS or it may be geographically separate. It may
The interface between the MS and the BTS is known as the Um Interface or the Air even be collocated with the Mobile Switching Center (MSC).
Interface.
Network Switching Subsystem (NSS)
The NSS performs the switching functions of the network. The subsystems are
interconnected directly or indirectly via the world wide SS7 network. Its main role is
to manage the communications between the mobile users and other users such as the
fixed telephony users, etc. The NSS is made up ofthe following components:
Note: The function of the VLR is integrated in the MSC. This explains why it is often
referred to as MSC/VLR.
These components are basically network switches and routers and they form the core
or backbone of the network.
Mobile Switching Center (MSC) — The MSC is a GSM core network element. It
handles call routing, call setup, and basic switching functions. An MSC handles
multiple BSCs and also interfaces with other MSC's and registers. MSC server
functionality enables split between control (signaling) and user plane (bearer in the
network element called a Media Gateway, MGW) which guarantees better placement
of network elements within the network.
Fig. 4 Base Station Controller The MSC server and the MGW make it possible to cross-connect circuit switched calls
by using IP as well as TDM.
The interface between the BTS and the BSC is known as the Abis Interface.
2|P a g e
Fig. 8 Gateway Mobile Switching Center
Fig. 6 the Mobile Switching Center
The interface between the BSC and the MSC is known as the A Interface
Fig. 7 A Interface
Visitor Location Register (VLR) — The VLR is a database that contains a subset of the
information located on the HLR. It contains similar information as the HLR, but only
for subscribers currently in its Location Area. It reduces the overall number of queries
to the HLR and thus reduces network traffic.
While the HLR is responsible for more static functions, the VLR provides dynamic
subcriber data management. As the subscriber moves from onelocation to another,
data are passed between VLR of the location the subscriber is leaving (old VLR) to the
VLR of the location being visited (new VLR). Fig. 12 GSM Interfaces
Authentication Center (AuC) — it serves security purposes. It is responsible for
providing the parameters needed for authentication and encryption functions on the
network. These parameters allow verification of the subscriber's identity. It is always
implemented as an integral part of the HLR.
The black list is a list if IMEIs that are to be denied service by the network for some
reasons which could be due to handsets being stolen or cloned.
The gray list is a list of IMEIs that are to be monitored for suspicious activity which
could include handsets that are behaving oddly.
Fig .11 Visitor Location Register (VLR) The white list is an unpopulated list which means if an IMEI is not on the black list or
on the gray list, then it is considered good and is "on the white list".
The interface between two VLRs is called the G Interface. Operation Support Subsystem (OSS)
The OSS manages the different parts of the cellular network. It is connected to
components of the NSS and the BSS in order to control and monitor the GSM system
4|P a g e
GSM Protocol Stack
• Operation and Management Center - Radio (OMCR)
• Network Management Center (NMC) MS Protocols: The signaling protocol in GSM is structured into three general layers,
depending on the interface.
The OSS performs the following functions: • Layer 1: the physical layer, which uses the channel structures over the air
interface.
1. Fault Management, • Layer 2: the data-link layer across the Um interface.
2. Configuration Management,
• Layer 3: divided into three sub-layers:
3. Account Management,
Radio Resource Management (RRM),
4. Performance Management,
- Mobility Management (MM)
5. Security Management and Alarm handing
- Connection Management (CM)
The GSM Logical Interfaces The RR layeroversees the establishment of a link between the MS and the MSC. It is
also concerned with the management of an RR-session, which is the time required for
A-Interface the configuration and allocation of dedicated radio channels.
On the physical level, the A-interface consists of one or more PCM links between the
MSC and the BSC, each with a transmission capacity of 2Mbps. The A-interface can be The MM layeris built on top of the RR layer and handles the functions that arise from
separated into two parts: the mobility of the subscriber, as well as the authentication and security aspects.
1. The first part is between the BTS and the TRAU, where the transmitted payload still NOTE
is compressed. As on the Abis-interface, a single traffic channel occupies only two of
the eight bits of a PCM channel. That's why it is possible to transport 4 full rate traffic Public Land Mobile Network (PLMN) — is a network that is owned and operated by
channels on more PCM channels. The exceptions are TS, where signaling information one GSM service provider or administration, which includes all of the components and
is carried. Signaling requires the entire 64Kbps of a channel (e.g TS16) equipment as described above. For example, all of the equipment and network
resources that is owned and operated by Globacom are considered a PLMN.
B interface (MSC-VLR) Handover (or Handoff) – an electronic switching of one cell frequency to another cell
frequency during an ongoing continuous call in a cellular system.
C interface (MSC-HLR)
As the phone user moves from one cell area to another cell while a call is in progress,
D interface (HLR -VLR) the MS will search for a new channel to attach to in order not to drop the call. Once a
new channel is found, the network will command the mobile unit to switch to the new
E interface (MSC-MSC) channel and at the same time switch the call onto the new channel seamlessly
without any interruption.
F interface (MSC-EIR)
5|P a g e
IMSI: IMSI stands for International Mobile Subscriber Identity. It is usually composed There are several reasons why a mobile may provide updated location information to
of 15 digits, with the exception of mobile phones based in South Africa. Those consist the network. Whenever a mobile is switched on or off, the network may require it to
of 14 digits. The IMSI contains a Mobile Country Code (MCC), Mobile Network Code
(MNC) and a Mobile Subscriber Identity Number (MSIN). This number is "burned" into perform an IMSI attach or IMSI detach location update procedure. Also, each mobile
the SIM card and serves as its "identity." is required to regularly report its location at a set time interval using a periodic
location update procedure. Whenever a mobile moves from one location area to the
IMSI = MCC + MSISDN e.g. 234 + 8051234567 next while not on a call, a random location update is required. This is also required of
MSISDN = MNC + MSIN e.g. 805 + 1234567
a stationary mobile that reselects coverage from a cell in a different location area,
TMSI: The Temporary Mobile Subscriber Identity (TMSI) is a temporary identification because of signal fade. Thus a subscriber has reliable access to the network and may
number that is used in place of the IMSI to ensure the privacy of the mobile be reached with a call, while enjoying the freedom of mobility within the whole
subscriber. The TMSI prohibits tracing of the identity of a mobile subscriber by coverage area.
interception of the traffic on the radio link.
When a subscriber is paged in an attempt to deliver a call or SMS and the subscriber
The TMSI is assigned to a mobile subscriber by the AuC for the duration the subscriber does not reply to that page then the subscriber is marked as absent in both the
is in the service area of the associated MSC. Mobile Switching Center / Visitor Location Register (MSC/VLR) and the Home Location
Register (HLR) (Mobile not reachable flag MNRF is set). The next time the mobile
IMEI: The International Mobile Station Equipment Identity or IMEI is a unique number
performs a location update the HLR is updated and the mobile not reachable flag is
which is used to identify mobile phones. It can also be displayed on the screen of the
phone by entering *#06# into the keypad on most phones. The IMEI number is used cleared.
by a GSM network to identify valid devices and therefore can be used forstopping a
stolen phone from accessing that enetwork.
Location Area(LA):is a set of base stations or cell sites that are grouped together to
optimizesignaling. Typically, hundreds of base stations share a single Base Station
Controller (BSC) in GSM, or a Radio Network Controller (RNC) in UMTS. To each
location area, a unique number called a Location Area Code (LAC) is assigned. The LAC
is broadcast by each base station at regular intervals.
The location update procedure allows a mobile device to inform the cellular network,
whenever it moves from one location area to the next. Mobiles are responsible for
detecting location area codes. When a mobile finds that the location area code is
different from its last update, it performs another update by sending to thenetwork, a
location update request, together with its previous location, and it’s Temporary
Mobile Subscriber Identity (TMSI).
6|P a g e
Universal Mobile Telecommunication System
UMTS is a 3G cellular technology which is built as advancement over GSM (a 2G
cellular technology) by the 3rd Generation Partnership Project (3GPP). It supports
maximum theoretical data transfer rates of 42 Mbps when HSPA is implemented in
the network.
W-CDMA uses the DS-CDMA (Direct Sequence Spread Spectrum) channel access
method with a pair of 5 MHz wide channels
7|P a g e
UMTS Terrestrial Radio Access Network (UTRAN) The RNC connects to the circuit switched core network through the Mobile Switching
Center (MSC) and to the Packet Switched CN through the Serving GPRS Support Node
(SGSN).
The UTRAN make up the radio access part of the network allowing connectivity
between the UE (User Equipment) and the Core Network.
In relationship to a UE (soft handover situation) an RNC can play two different roles.
These are:
UTRAN contains the base stations, which are called Node Bs, and Radio Network
• D-RNC: Drift RNC
Controllers (RNC).
• S-RNC: Serving RNC
Radio Network Subsystem (RNS) The logical connections between the network elements are known as interfaces.
There are four interfaces connecting the UTRAN internally or externally to other
The RNS is a combination of Node Bs and Radio Network Controllers (RNC). There can functional entities:
be more than one RNS present in a UTRAN.
• Uu interface — an external interface connecting the User Equipment (UE)
Node B with the Node B.
Node B is an exclusive hardware element of the UMTS network that communicates • Iub interface — an internal interface connecting the Node B with the RNC.
directly with User Equipment (UE). • Iur interface — an internal interface which connects two RNCs with each
other.
Traditionally, the Node B has minimum functionality, and is controlled by an RNC • Iu interface — an external interface that connects the RNC to the Core
(Radio Network Controller). The Node B is to a UMTS as a BTS is to a GSM network. Network (CN).
The main task of Node B is the conversion to and from the Uu radio interface, UMTS Core Network
including forward error correction (FEC), rate adaptation, W-CDMA
spreading/dispreading, and quadrature phase shift keying (QPSK) modulation on the
A core network, or network core, is the central part of a telecommunication network
air interface. It measures quality and strength of the connection and determines the
that provides various services to customers who are connected by the access
frame error rate (FER), transmitting these data to the RNC as a measurement report
network. One of the main functions is to route telephone calls across the PSTN.
for Handover and macro diversity combining.
A Node B can serve several cells, also called sectors, depending on the configuration
The UMTS core network architecture is a migration of that used for GSM with further
and type of antenna. Common configuration include Omni cell (360°), 3 sectors
elements overlaid to enable the additional functionality demanded by UMTS.
(3x120°) or 6 sectors (3 sectors 120° wide overlapping with 3 sectors of different
frequency).
In view of the different ways in which data may be carried, the UMTS core network
may be split into two different areas:
8|P a g e
Gateway MSC (GMSC): this is effectively the interface to the external network just
like GSM. The shared elements of the UMTS core network architecture include the following
network entities:
Packet switched elements
These network entities are designed to carry packet data. This enables much higher Home location register (HLR): This database contains all the administrative
network usage as the capacity can be shared and data is carried as packets which are information about each subscriber along with their last known location. When a user
routed according to their destination. switches on their UE, it registers with the network and from this it is possible to
determine which Node B it communicates with so that incoming calls can be routed
The packet switched elements of the UMTS core network architecture include the appropriately. Even when the UE is not active (but switched on) it re-registers
following network entities: periodically to ensure that the network (HLR) is aware of its latest position with their
current or last known location on the network.
Serving GPRS Support Node (SGSN) —The Serving GPRS Support Node (SGSN) is a
main component of the GPRS network, which handles all packet switched data within Equipment identity register (EIR): The EIR is the entity that decides whether a UE
the network delivering data from the User Equipment (UE) to the GGSN and vice equipment may be allowed onto the network. Each UE equipment has a number
versa. It works in conjunction with the GGSN to maintain a mobile user's connection known as the International Mobile Equipment Identity IMEI. This number, as
to the Internet. It is responsible for functions like: mentioned above, is installed in the equipment and is checked by the network during
registration.
-Packet routing,
-Mobility management, Authentication Centre (AuC): The AuC is a protected database that contains the
-Session management (providing required QoS and the channel through secret key also contained in the user's USIM card.
which data is sent)
-Billing functions (by generating the Call Detail Records, CDR before being transferred
to the Charging Gateway Functions, CGF)
Gateway GPRS Support Node (GGSN) —it is responsible for the interworking between
the UMTS/GPRS network and external packet switched networks, such as the
Internet.
The GGSN, sometimes known as a wireless router, works in tandem with the SGSN to
keep mobile users connected to the Internet and IP- based applications. It converts
incoming data traffic from mobile users (via the SGSN) and forwards it to the relevant
network, and vice versa. For instance, a Google query from a smartphone would be
routed via the SGSN to the GGSN and sent on as a query to the Internet search
engine, and then the process would be reversed for the reply to the phone user.
The GGSN is responsible for IP address assignment and is the default router for the
connected user equipment (UE). It also performs authentication and charging
functions.
UMTS networks are often combined with GSM/EDGE hence sharing a common Core
Network (CN). Because of that, UMTS's and GSM/EDGE's radio access networks are Fig. 13UMTS/GPRS Network Architecture
sometimes collectively referred to as UTRAN/GERAN. This allows a simple migration
for existing GSM operators.
9|P a g e
UMTS Protocol Stack 2. Tri-band: A tri-band phone operates on three frequency bands, 900MHz, 1800MHz
• Radio Resource Control (RRC) and 1900MHz, allowing you to use it in Europe, Africa, Asia, Oceania and North
• Radio Link Control (RLC) America
3. Quad-band: A quad-band phone allows you to roam almost anywhere globally. It
covers the 850MHz, 900MHz, 1800MHz and 1900MHz frequency ranges.
• Media Access Control (MAC) protocols.
Many countries in South America only have 850MHz GSM service while both
Radio Resource Control (RRC) — handles the control plane signaling between the UEs
1900MHz and 850MHz
and the UTRAN at layer 3. Its functions include: connection establishment/release,
MHz GSM services are supported in the USA.
radio bearer establishment/release, paging notifications/release and handover
decisions.
Radio Link Control (RLC) — handles error recovery and flow control.
Media Access Control (MAC) — handles the scheduling of data on air interface
depending on higher layer RRC configured parameters.
The set of properties related to data transmission is called Radio Bearer (RB). This set
of properties decides the maximum allowed data in a TTI (Transmission Time Interval).
RB includes RLC information and RB mapping. Signaling messages are sent on
Signaling Radio Bearers (SRBs) and data packets are sent on data RBs. RRC and NAS
messages go on SRBs.
Frequency Allocations
The CS domain of the UMTS R4 uses the concept of NGN. There is a separation
between control and transport data.
The CN R4 can be connected to the UTRAN through the Iu-CS and Iu-Ps interfaces and
to the BSS through the A and Gb interfaces.
11 | P a g e
Media Layer: insures the format adaptation of the user information coming from the The MGC communicates with the MGW via h.248 message also called (MEGACO) and
access layers to be sent into the transport layer IP. The media layers combine the Media Gateway Control Protocol (MGCP)
MGW equipment whose function is to adapt user data to the backbone network
based on packet switching using IP technology user data originates from an access Termination
network or a conventional network. Termination is a logical entity that transmits and receives multiple streams of media.
The parameters describing the media and thephysical medium are encapsulated
within a termination. There are two types termination.
• Physical termination: e.g. an RTP stream that exist during a call connection.
• Context: an association between several terminations. A context that does
not contain several terminations is known as a NULL context.
SIGTRAN
SIGTRAN is a set of protocols defined to transport SS7 messages over IP networks in a
structured way. Sigtran allows IP networks to inter-work with regular SS7 networks
MTP using a signaling gateway.
Signaling Gateway: The signaling gateway is a gateway used to replace the SS7 stack
Fig.14 Media Layer with another stack between IP transports defined by Sigtran group. In this way, it
sends and receives switched circuit native signaling at the edge of the IP network
Access gateway equipment is located in the exchange after the Access Node (AN)
equipment. Its function is to 'packetize' the signals at v5 interface and ISDN interface
Trunking gateway equipment is located in the network. Its function is to packetize the
speech circuits.
Control Layer: insures the call handling and controls the media gateways. The control
layer is made up of the following components
The MGC is a network element used mainly for call handling and to control media
gateway equipment so that the MGWs will reserve resources to enables signals
arriving from continual networks to be converted into IP packets for the call being
handled. The MGC is called a Call Server, Call Agent or Soft switch.
12 | P a g e
Deploying IP/MPLS in Mobile Network
Mobile service providers are evolving their transport networks to all-IP for delivering
new services and staying competitive, but they have concerns about abruptly
changing their network architecture from the long-services proven and reliable TDM-
based transport. The biggest drawback to TDM transport is that transport costs are
linearly proportional to transported bandwidth, with the increased bandwidth
required for new services undermining the overall business case.
The need to change the existing transport paradigm from its TDM-based T1/E1
granularity of leased-lines to a new, cost effective model also provides an opportunity
to create a forward looking all-IP transport network that can support evolving and
scaling the mobile services for years to come.
13 | P a g e
The next steps of mobile transport transformation are in evolving the hub and
aggregation sites to IP/MPLS, with extension of IP/MPLS to cell sites.
With the extension of MPLs to cell sites, the entire mobile transport network
efficiency becomes all-IP, managed end to end with common operational tools and
parasites.
14 | P a g e
The 3GPP R4 specification provides service providers with the choice between ATM
and IP for the core network packet technology, while the subsequent 3GPP R5 IP
Multimedia System (IMS) mandated the use of IP.
With all-IPs as the end goal, most of the Service Providers that are transforming their
network architecture to 3GPP R4 and beyond have opted to go with the IP optionfor
both their mobile core and the associated data backbone. This choice was made with
the understanding that the actual implementation will be a combination of IP and
MPLS.
Note: While MPLS has now gained universal acceptance as the networking for
improving the transport of multi protocol over diverse transport technologies, it’s also
delivers traffic engineering extensions allowing end-to-end network management.
• R4 (2001) – Introduction of MGW and Call Server in the CS part of the core
network.
• R5 (2002) – Introduction of IP Multimedia System (IMS) and High Speed
Downlink Packet Access (HSDPA) in the PS part of the core network.
• R6 (2006) – Integrated operation with wireless LAN networks and adds High
Speed Uplink Packet Access (HSUPA), Multimedia Broadcast/Multicast
Services(MBMS), enhancement to IMS such as Push to Talk over Cellular
(PoC), and GAN.
• R7 (2007) – Decreased latency, improved QoS and real-time applications
such as VoIP. This specification also focuses on HSPA+, SIM high-speed
protocol and Near Field Communication (NFC) enabling operators to deliver
contactless services like Mobile Payments.
• R8 (2008) – First LTE release. All-IP network, Service Architecture Evolution
(SAE). New OFDMA, FDE and MIMO based radio interface, not backward
compatible with previous CDMA interfaces. Dual-cell HSDPA.
• R9 (2009) – SAE enhancements, WiMAX and LTE/UMTS Interoperability.
Dual-cell HSDPA with MIMO, Dual-cell HSUPA.
• R10 (2011) – LTE Advanced fulfilling IMT Advanced 4G requirements.
Backward compatible with release 8 (LTE). Multi-cell HSDPA (4 carriers).
• R11 (2012) – Advanced IP Interconnection of Services. Service layer
interconnection between national operators/carriers as well as third party
application providers.
• R12 (Planned release: 2014) – Content still open. Courtesy: Nzete Emeka
15 | P a g e