5.

GPRS overlay in GSM

a) Introduction
Circuit switched communication in GSM

A radio channel is allocated for the duration of the call

User is charged for the duration even if the amount of data
transferred is very small.
Suitable for:
Constant bandwidth data flow
voice, video or videoconference that are sensitive to
even small delay variations

Packet switched communication in GSM / GPRS

A radio channel can be shared amongst several MSs

concurrently
A radio block of four bursts over a timeslot spread over
four consecutive TDMA frames is allocated to one MS,
while the next block of four bursts may be allocated to
another MS
When an MS generates a packet of data, the network
allows it to forward the same on the first available radio
channel
User can use upto 4 or 8 radio timeslots simultaneously;
needs terminal capability & vendor implementation
Efficient use of radio channels for data in bursts
Address information is included in each packet and the
GPRS network ensures its transport to the addressee
Errored data can be retransmitted
Suitable for:
Bursty data
Data sensitive to errors
E.g.,
E-mail, dispatch traffic, Point of sale, Telemetry, etc.

-------------------------------------------------------------------------------------------------143

GPRS features

Data transfer based on Internet Protocol (IP)

Packet transport on an end-to-end basis including air
interface
GPRS network is an extension to the existing circuitswitched GSM network and needs some hardware &
software additions to the existing network
No interference to the existing CS services
Procedures such as attach, authentication,
subscriber data, etc. can be co-ordinated both for CS
& PS communications
No dedicated radio timeslot is allocated to an MS
Segmentation & re-assembly of large data packets

b) GPRS system overview

MSC/VL
A

HLR
R

Gs (BSSAP+)
Gr (MAP)
BT

AU

SMS G/IW MSC

Gd (MAP)

BS
A

ISP
Network

Gb
SGSN
Gn

GGSN
Gn
Gi (X.25)

Backbone
Network

Gi (IP)
Corporate
Network

PSPDN
New Hardware
New software

New overlay nodes for GPRS

Figure 5.1 Mobile voice (GSM), packet data & Internet access (GPRS)
-------------------------------------------------------------------------------------------------144

BTS

Um

PSTN /
ISDN

GMSC
MSC/VLR
A

EIR
Gf

BSC
MT

AUC

Gs
Gb

SGSN

HLR
Gr

Internet

Gn
Gi
IP / ATM
backbone

TE

GGSN
Corporate
net

MS
PTM-SC

X.25 net

Figure 5.2 - GPRS logical architecture

Terminal Equipment, TE
TE is a computer terminal to send & receive packet data via
GPRS network. GPRS provides IP connectivity between TE
and an ISP or corporate LAN connected to the GPRS system.
Mobile Terminal, MT
MT communicates with TE on one side and with the BTS over
the air on the other. MT must be GPRS-enabled for using
GPRS services. MT is associated with a subscriber in the HLR
of the GSM network.
MT establishes a link to the SGSN. Channel reselection, while
roaming, is provided at the radio link between the MT & the
SGSN. TE is not aware of being mobile & retains its assigned
IP address until the MT detaches.
-------------------------------------------------------------------------------------------------145

Mobile Station (MS)

MS = TE + MT
MS can be an integrated device.

MS classes
Class A
well as a

Class A can have a circuit-switched connection as

packet session concurrently

Class B

Class B can be concurrently attached to the CSGSM & the GPRS but can use one of the two
services at one time. Class B MS can be paged
for an incoming CS call while being in a packet
session.
Packet session can be temporarily suspended to
take up the CS incoming call. Packet session
can resume after the CS call.
It is important to have the Gs interface between
SGSN and the MSC/VLR, since the initial MTs are
more likely to be class B.

Class C

Class C can only be attached to one service at a

time.

BTS
BTS must contain GPRS-specific software. BTS can
distinguish between CS traffic from packet traffic.
BSC
BSC must be equipped with GPRS hardware (for packet
handling) and software. There can be several BSCs for an
SGSN.
-------------------------------------------------------------------------------------------------146

MSC
The MSC continues to be responsible for the CS traffic. SMS
traffic load, however, can be taken over by the GPRS network.
The SGSN Routing Area is a subset of the MSC LA.
There can be several MSCs corresponding to one SGSN. Or
there can be several SGSNs corresponding to an MSC. It is a
matter of traffic-dependent dimensioning.

Location Area

RA1
RA3

RA2

LAI = MCC + MNC + LAC

RAI = MCC + MNC + LAC + RAC
Figure 5.3 - GPRS Routing Area Vs Location Area
VLR in MSC & SGSN
While the VLR database of the MSC/VLR continues to handle
the subscriber data for the visiting CS-attached MSs, the SGSN
contains the VLR functionality for PS-attached visiting MSs.
The SGSN obtains the subscriber profile independently for the
visiting GPRS-MSs. The RA update for GPRS users is done in
this functionality. The SGSN obtains the authentication triplets
and handles authentication independently.

-------------------------------------------------------------------------------------------------147

The GS interface
Using the Gs interface, combined RA/LA updating is possible.
The MSC & the SGSN will keep each other updated about the
location of a terminal.
Paging coordination, required for class B MSs, is possible via
the Gs interface. The SGSN can page an MS over the packet
paging channel or even a packet traffic channel if the MS is
involved in packet transfer. The MS needs to monitor one
paging channel while it is GPRS-attached.

Network operation with & without Gs

MSC/
VLR
BSC

Combined LA/RA update

Combined paging
Longer sleep periods for paging
Smaller paging load

Gs
SGS
N

MSC/
VLR
BSC

Separate LA & RA update

MS listens to two paging channels
MS is paged in the whole LA

SGS
N

Figure 5.4 - GPRS with & without Gs interface

When a class B MS is engaged in a data session and receives
a CS-page, the subscriber can suspend the data session & take
up the CS call. The subscriber can resume the data session
after the completion of the CS call.
-------------------------------------------------------------------------------------------------148

SGSN & GGSN

SGSN

Packet routing & transport to & from SGSN service area

for all GPRS subscribers located in the SGSN service
area. When there are more than one SGSNs in the
network, the MS may be served by any SGSN depending
on its location.
Ciphering & authentication
Session management
Mobility management
Logical link towards the MS
Connection to HLR, MSC/VLR, BSC, SMS-GMSC, SMSIWMSC, other SGSNs, GGSN to other PLMN, GGSN to
PDN, GGSN to Internet
Output of charging data
The SGSN collects charging information related to usage
of radio network for each MS. (GGSN also collects
charging information on usage of GPRS network
resources)

GGSN

Interface towards the external IP packet networks.

GGSN contains access functionality for interfacing
external ISP functions such as routers & RADIUS
(Remote Authentication Dial-In User Service) servers.
Towards the external IP network, GGSN acts as a router
for the IP addresses of all subscribers served by the
GPRS network
GPRS session management - communication setup
towards external network
Functionality for assigning the subscribers to the right
SGSN while roaming
Output of charging data - related to external data
network usage for each MS, apart from usage of GPRS
network resources

-------------------------------------------------------------------------------------------------149

SGSN & GGSN connectivity

Combined SGSN & GGSN

SGSN /
GGSN

Separate SGSN & GGSN nodes & backbone network

ATM

SGSN

GGSN

ATM
switch
SGSN & GGSN may contain IP routing functionality
SGSN & GGSN can be in different PLMNs connected
through Border Gateways implemented in GGSNs
Figure 5.5 - Inter-connection of SGSN & GGSN nodes
Home Location Register

HLR

Database for the profile & other data of the GSM CS &
GPRS subscribers:
Supplementary services
Authentication parameters
Access Point Name (APN) such as the ISP of a
subscriber
Static IP address allocated to an MS
Location of the MS - MSC/VLR & SGSN identity

Whenever an MS roams into a new SGSN area or

whenever a subscriber profile is altered, the relevant
SGSN is updated

-------------------------------------------------------------------------------------------------150

SMS-GMSC, SMS-IWMSC & SM-SC

SGSN is connected to the SMS-GMSC & SMS-IWMSC.
GPRS MSs can send and receive short messages over GPRS
radio channels via SGSN.
IP addresses for GPRS MSs
The GPRS MSs use IP addresses and can obtain IP services
such as Internet, e-mail & telemetry from an ISP or a corporate
LAN.
Network Operation modes
The MSs learn about the operating modes from the system
information broadcast in the cell. The mode of operation
should be the same in each cell of the RA for proper operation.

Network operation modes for paging

1. Mode I: The Gs interface is present & the MS monitors
only one paging channel
CS paging is sent either on the packet-paging channel
(or the CCCH paging channel) if the MS is not in data
session
GPRS traffic channel is used if the MS is in data session.
2. Mode II: Both GPRS & CS paging is done over the CCCH
paging channel & the MS must monitor this. While an
MS is in data session, CS paging is still done over this.
3. Mode III: CS paging is done on the CCCH paging channel
& GPRS paging on the packet paging channel if one has
been allocated. The MS has to monitor both the paging
channels.
However, if a packet-paging channel has not been
allocated in a cell, GPRS page is also sent over the
CCCH.

-------------------------------------------------------------------------------------------------151

Typical Point-to-Point applications

Messaging (e.g., email)

Remote (& mobile) access to Corporate networks
Internet WEB-browsing
Credit card validation (Point of sales)
Utility meter readings (e.g., electricity & water)
Road toll applications
Automatic train control

Point-to-multipoint packet delivery

PTM multicast (PTM - M)

Message to any subscriber located within a
geographical area
No knowledge about which subscribers will get the
message
Anyone can be a subscriber of a certain group

PTM group (PTM - G)

Message to a given set of subscribers located within
a geographical area
Complete control over which subscriber will get the
message
Only appointed members can be subscribers of a
certain group

Typical PTM applications

PTM-M
News
Evolution
of data services in GSM
Traffic information
Weather forecasts
Financial updates
PTM-G
Taxi, fleet management
Conferencing
-------------------------------------------------------------------------------------------------152

Data services evolution in GSM

UMTS
EDGE - upto 384 Kbps
GPRS - upto 160 Kbps
HSCSD - 38.4 Kbps
CSD - 9.6 Kbps
91/92

98

02

00

Note: - With new coding scheme CS-4 for the Radio Blocks,
a bit rate of 20 Kbps/timeslot is possible in GPRS
Figure 5.6 - Evolution of data services in GSM

c) GPRS air interface

1) GPRS Protocols
Application

IP / X.25
SNDCP

SNDCP

LLC

LLC
L
2

RLC

RLC

BSSGP

BSSGP

MAC

MAC

FR

NS / FR

GSM RF

L1bis

L1bis

GSM RF

BSS

MS
Radio
interface

L
2

SGSN
Gb

Figure 5.7 - GPRS Protocols

-------------------------------------------------------------------------------------------------153

Layer 2 Protocol - RLC/MAC sublayers

Radio Link Control (RLC) is interposed between the Media
Access Control (MAC) and the Logical Link Control (LLC)
sublayers. RLC & MAC sublayers reside in the packetcontroller in the BSC on the network side.
Layer 2 Protocol - LLC sublayer
LLC supports:

Transfer of LLC PDUs (see SNDCP) between the MS &

SGSN, in acknowledged & unacknowledged modes
Error detection in LLC PDUs & recovery
Flow control & ciphering of LLC PDUs

Logical link is maintained as the MS moves from cell to cell

within the SGSN service area. The logical link is transparent to
BSC. Any signalling message between MS & BSC will be
transferred via SGSN.
Sub-network dependent convergence protocol (SNDCP)
SNDCP in the MS & the SGSN and situated between the LLC &
the network layers has the following functions:

Multiplexing of data packets from one or several applications

onto one logical link
Compression of redundant protocol control information such
as TCP/IP header & user data such as V.42bis.
Segmentation of data to maximum-length LLC frames, i.e.,
LLC PDUs, and reassembly at the other end.

2) Multislot classes
The GSM recommendations (GSM 05.02) provide for an MS to
access more than one timeslot, say four timeslots for a data
rate of (4 * 9.6 =) 38.4 Kbps.
The recommendations provide for 29 such multislot classes,
specifying as to how many timeslots an MS can use in each
direction and the time needed for changing from Rx to Tx mode.
-------------------------------------------------------------------------------------------------154

3) Radio blocks, bursts & TDMA multiframes

Upper layer user
-------------------------------------------------------------------------------------------------Packet

Header

Network layer
~ 1.6 Kbytes

User data

-------------------------------------------------------------------------------------------------LLC
PDU

Header

Information
field

Tail

LLC layer

-------------------------------------------------------------------------------------------------U
S
F

Radio
blocks

RLC

RLC
Info

Head
er

B
C
S

U
S
F

RLC

RLC
Info

Head
er

B
C
S

RLC/MAC
layer
20 ~ 50
bytes

-------------------------------------------------------------------------------------------------Radio
bursts

Normal
Burst

Normal
Burst

Normal
Burst

Physical
layer
4 X 114
bits

Normal
Burst

-------------------------------------------------------------------------------------------------B0

B1

B3

B2

B4

B5

Multiframe structure of 52 TDMA frames

B6

B7

B8

B9

B10

B11

Timing advance
message to an MS
Figure 5.8 - Radio blocks, Radio bursts & TDMA multiframe - downlink
-------------------------------------------------------------------------------------------------155

Radio Block Structure

RLC/MAC
Header
Information
bits

M bits

Coding
Schem
e

Coding
bits

Radio
Block

456 M bits

456 bits

Max Info
bits

Max data rate

Kbps/TS

CS - 1

160

CS - 2

241

12

CS - 3

293

14

CS - 4

401

20

--------------------------------------------------------------------------------------------------

4) GPRS MS states & modes

MS states for GPRS mobility management

MS idle:
The MS has been turned on but not GPRS-attached.
The SGSN/GPRS is not aware of the presence of MS,
e.g., when the MS is outside the coverage area.

MS standby:
The MS is GPRS-attached. MS sends RA updates to
the SGSN. SGSN is aware of the location of the MS,
i.e., the identity of the RA.

MS ready:
A packet transfer is ongoing or has recently ended but
the ready timer has not yet expired. The MS sends cell
update to SGSN every time it changes cell. SGSN is
aware of the location of the MS, i.e., the identity of the
cell
The time for the ready timer is decided by the SGSN
and can take value from zero to infinity. If set to
infinity, the MS never goes back to standby state.
While in ready state, there is no need to page an MS.
The SGSN sends the LLC frames to the packet
controller in the BSC along with cell identity and the
packet handler sends the assignment immediately.

GPRS RR operating modes for an MS

Packet idle mode:

No packets are being transferred

Packet transfer mode:

Packet transfer is going on uplink, downlink or in both
directions.
MS is known to the packet-controller in the BSC, in this
mode

-------------------------------------------------------------------------------------------------156

Idle
GPRS
attach

GPRS
detach
Standby
timer expiry

Ready
PDU
transfer

Ready timer expiry

or
Forced to standby
Standby

Figure 5.9 - Mobility management in MS - state diagram

Idle
GPRS detach or
cancel location

GPRS
attach

Ready
Ready timer expiry /
Forced to standby /
Abnormal RLC state

Standby timer expiry /

Cancel location
PDU
transfer

Standby
Figure 5.10 - MM in SGSN - state diagram
-------------------------------------------------------------------------------------------------157

5) GPRS Packet Data Channels (PDCH) & logical channels

Types of PDCH
All channels dedicated to GPRS packet-data-service are known
as Packet Data Channels (PDCH). PDCH can be considered
as physical channels onto which logical channels are mapped.
The standards specify two types of PDCH:

PDCH carrying PCCCH & PBCCH.

This is the first PDCH allocated on a timeslot by the operator
and carries the PBCCH over which system information
regarding GPRS is broadcast.
PCCCH is used for all control signaling necessary to initiate
packet transfer such as paging channel.
This PDCH may also carry packet traffic but is non-hopping.

PDCH not carrying PCCCH

Other PDCH allocated on other timeslots are used to carry
packet traffic and associated control channel.

Logical channels

GPRS logical channels

Packet data Common Control Channels (PCCCH)

PRACH
Packet data Random Access Channel
PPCH
Packet Paging Channel
PAGCH
Packet Access Grant Channel
PTCCH
Packet Timing Advance Control Channel

Broadcast Channel
PBCCH
Packet Broadcast Channel

Packet Traffic Channel (PTCH)

PDTCH
Packet Data Traffic Channel
PACCH
Packet Associated Control Channel

-------------------------------------------------------------------------------------------------158

PDCH multiframe structure & mapping of logical channels

TDMA frame
B0

B1

PTCCH
B2

B3

Idle
B4

B5

52 PDCH timeslots from 52 TDMA

frames
B6

B7

B8

B9

B10

B11

PDCH carrying PCCCH

Downlink:
B0:
PBCCH
B1~B11:
PBCCH, PPCH, PAGCH, PTCCH,
PDTCH or PACCH
Uplink:
B0~B11:
PRACH, PTCCH, PDTCH or PACCH
PDCH not carrying PCCCH
Downlink/Uplink: B0~B11: PTCCH, PDTCH or PACCH
Figure 5.11 - Mapping of logical channels

--------------------------------------------------------------------------------------------------

159
6) GPRS RR management
Common resource pool - Carriers & timeslots
C0

BTS

BSC

C7
0

Timeslot

Timeslot carrying BCCH

PDCH carrying PBCCH
PDCH not carrying PCCCH
CCCH, TCH or free

Common resource pool

PDCH

TCH

Figure 5.12 - Common resource pool of TCH & PDCH channels

--------------------------------------------------------------------------------------------------

160
Channel Reservation strategy

TBF

TBF

TBF
limit

PDCHs
PDCHs in use

PDCHs
To GPRS
idle list

PDCHs idle
Procedure:
Fill up fixed channels first
When no channels left under TBF-limit, choose next
PSET
Unused PDCHs go to GPRS idle list and remain for 5
minutes before they are released back to CS idle list
Figure 5.13 - Illustration of channel reservation strategy
7) GPRS Paging
Paging groups
The mobiles can be divided into different paging groups and
paged at scheduled group paging time when the mobile is
"awake" and listening to pages. The MS could be sleeping in
between group paging.

--------------------------------------------------------------------------------------------------

161
Paging a mobile in standby mode

GPRS - paging an MS in standby mode

Initiated by the SGSN sending a BSSGP Paging Request

message to the packet controller
Paging is sent downlink over PPCH or PCH on all cells in
the Routing Area at the scheduled group paging time
when the MS is likely awake & listening
The MS initiates an uplink RLC connection establishment
procedure.

GPRS - Response to page - the uplink connection

The mobile sends a "Packet Channel Request" message

on the PRACH or RACH as the case may be.
The Packet controller which receives the message:
Creates an RLC context, say MS id = random number
Reserves PDCH with the corresponding Uplink Status
Flag
Sends a "Packet Uplink Assignment" message on the
PAGCH or the AGCH as the case may be.
Start uplink-scheduling of the mobile

GPRS - Paging Response from the MS

The mobile sends a "Paging Response" message directly

to the SGSN & transparent to the BSS, on the assigned
uplink channel. The LLC frame contains the MS id (say
PTMSI) and the cell id where it is located
The MS is in ready state & SGSN can start packet transfer

--------------------------------------------------------------------------------------------------

162
8) GPRS Data transfer
MS

Network
Data block

PDTCH

Data block

PDTCH

Data block

PDTCH

Data block (Polling)

PDTCH

Downlink ACK / NACK

PACCH

Data block

PDTCH

Data block

PDTCH

Data block

PDTCH

Data block (last, polling)

PDTCH

Downlink ACK / NACK (final)

Final=1

PACCH

Figure 5.14 - Downlink packet transfer sequence

Retransmission of radio blocks - ARQ procedure
1

Send window

10

11

12

13

Send window

Packet Ack/Nack
0

Packet Ack - bitmap

Figure 5.15 - Ack/Nack & retransmission of radio blocks
--------------------------------------------------------------------------------------------------

163
9) GPRS - RLC / MAC block
Data Block
MAC
Header

RLC
Header

RLC Data Unit

Spare

RL - PDU
RLC Data Block

Control Block
MAC
Header

RLC / MAC Signlling information

RLC / MAC Control Block

Figure 5.16 - RLC/MAC data & control blocks

Physical layer - new coding schemes
R = 1/2
R = 2/3
R = 3/4
R=1

9.05
13.40
15.60
21.40

Kbps
Kbps
Kbps
Kbps

10)GPRS - Mobility Management Procedures

Attach / Detach

Security procedures
Authentication & ciphering
P-TMSI allocation
Identity check

Location management procedures

Cell update
RA updating
Periodic updating

--------------------------------------------------------------------------------------------------

164
Mobility management states and RR modes
MM states

RR modes

Idle

Packet idle
Packet transfer

Ready
Packet idle

Standb
y

Packet idle

Figure 5.17 - Connection between MM states & RR modes

11) CS & GPRS - Cell change & handover
BSC

CS
MS sends measurement
reports
BSC decides on handover
Locating algorithm in BSC

GPRS
MS decides which cell to
use
Locating algorithm in MS
Network broadcasts
locating parameters

Figure 5.18 - Handover in CS & GPRS

--------------------------------------------------------------------------------------------------

165

d) GPRS traffic cases

1) GPRS attach

BSC / Packet
controller

SGSN

1. Mobile & SGSN are in idle state

2. MS sends Attach Request by uplink packet transfer
and moves to READY state
3. SGSN sends Attach Accept by downlink packet
transfer and also moves to READY
An MM context is established in MS & SGSN
Mobile is assigned a TLLI
Figure 5.19 - GPRS attach overview
Attaching a GPRS mobile
EIR

MSC/VLR

1,3,4,5,8,9

7,10

BSC

SGSN

AUC
4,6
2

HLR
SGSN
old

1. Attach Request, MS -> SGSN

2. Identification Request, New SGSN -> old
3. Identify Request, SGSN -> MS
4. Authentication, SGSN - HLR & SGSN - MS
5. IMEI check, SGSN - MS & SGSN - EIR
6. Update Location, SGSN -> HLR
7. Location updating, SGSN - MSC/VLR
8. Attach Accept, SGSN -> MS
9. Attach Complete, MS -> SGSN
10. TMSI Reallocation Complete, SGSN -> MSC/VLR

Figure 5.20 - Attaching a GPRS mobile

--------------------------------------------------------------------------------------------------

166
2) GPRS paging
MS

BSS

SGSN
PDP PDU
Paging Request

GPRS Paging Request

Any LLC frame
Any BSSGP frame

Figure 5.21 - Paging a GPRS mobile

3) GPRS location updating

Location update procedure

Routing Area update

Done by mobiles in READY or STANDBY state
The mobile detects when a new RA has been
entered & sends a Routing Area Update Request to
SGSN
Can be intra-SGSN or inter-SGSN RA update
SGSN knows that it is intra when the old & new RAs
are being handled by itself
Cell update by a GPRS mobile

MS

BSS

SGSN

Any LLC frame

Any BSSGP frame
Figure 5.22 - Cell update by a GPRS mobile
--------------------------------------------------------------------------------------------------

167

e) GPRS network - interfaces & protocols

1) GPRS - SGSN-BSS Interfaces (Signaling & data transfer)
BSSGP Interface
Um

Gb

MS

BSS

SGSN

Figure 5.23 - SGSN - BSS interface

GPRS Protocols
Application

IP / X.25
SNDCP

SNDCP

LLC

LLC
L
2

RLC

RLC

BSSGP

BSSGP

MAC

MAC

FR

NS / FR

GSM RF

L1bis

L1bis

GSM RF

BSS

MS
Radio
interface

L
2

SGSN
Gb

Figure 5.24 - GPRS Protocols

SGSN-BSS Interface protocols
BSSGP
Network Service
Frame Relay
L1 (Say E1)
Figure 5.25 - SGSN-BSS protocols
--------------------------------------------------------------------------------------------------

168

GPRS-BSS interface

E1 interface (G.703 & G.704)

Can be non-channelised using the entire or a
fraction of the available bandwidth

Frame Relay (FRF 1.1)

SGSN & BSC may be connected directly or via an FR
network & FR switch
BSC & SGSN will be DTE & DCE in the case of direct
They are TEs otherwise

Network Service (GPRS Standard)

Provides resilience

BSS GPRS Protocol (GPRS Standard)

Handles flow control between SGSN & BSS
SGSN-MS Interface protocols
SNDCP

GMM

SMS

Link Level Control (LLC)

BSSGP
Network Service
Frame Relay
L1 (Say E1)

GMM GPRS Mobility Management

Figure 5.26 - SGSN-MS protocols

--------------------------------------------------------------------------------------------------

169

GPRS-MS interface

LLC (GPRS Standard)

Can run in acknowledged or unacknowledged
modes
Operator can define QOS profile
Implements ciphering of packets

SNDCP (GPRS Standard)

Segmentation & reassembly of IP payload packets

2) GPRS - SGSN SS7 Interfaces

SS7 Interfaces
SMS - GMSC
SMS - IWMSC

SM-SC

Gd

HLR

MSC/VLR
Gs

Gr
SGSN
Signalling Interface
Signalling & Data Transfer Interface

Figure 5.27 - SGSN SS7 Interfaces

--------------------------------------------------------------------------------------------------

170
SS7 Protocol Stack
SGSN - SMS-GMSC
SGSN - SMS-IWMSC

SGSN HLR

SGSN MSC/VLR

MAP

MAP

BSSAP+

TCAP

TCAP

SCCP

SCCP

SCCP

MTP

MTP

MTP

3) GPRS - IP Interfaces
IP Interfaces
SGSN
Gn

Gn
SGSN

Gi
GGSN

PDN

TE

Gp
GGSN
Another PLMN

Figure 5.28 - GPRS IP Interfaces

Protocol stack for IP Interfaces
E1-based Communication
IP
PPP

FR
E1

PPP
FR

RFC 1548
RFC 1490

--------------------------------------------------------------------------------------------------

171
ATM-based Communication
IP
AAL5
ATM

RFC 2225
RFC 1577

IP over ATM v 2
IP over ATM

SDH
Ethernet-based Communication
IP
LLC (802.2)
MAC (802.3 / 802.3u)
Ethernet (10 Mbps / 100 Mbps)
IP Security
All IP interfaces may also use the optional feature IPSEC for
security

IP
IPSEC
L2
L1

--------------------------------------------------------------------------------------------------

172
4) GPRS Internal Backbone
ATM switch
ATM

SGSN

GGSN

SGSN

ISP

IP/ATM
IP/FR

ISP

ISP /
Corp

R
BSC
Figure 5.29 - GPRS Internal Backbone
5) GPRS transmission protocol architecture
Application

IP

IP
Relay

SNDCP

LLC

SNDCP

GTP

GTP

LLC

UDP /
TCP

UDP /
TCP

BSSGP

IP

IP

Relay

RLC
RLC

BSSGP

MAC

MAC

NS

NS

L2

L2

GSM RF

GSM RF

L1bis

L1bis

L1

L1

MS

Um

BSS

Gb

SGSN

Gn

GGSN

Gi

Figure 5.30 - GPRS User Data transmission protocol architecture

--------------------------------------------------------------------------------------------------

173
User Data or Payload

User Data through the GPRS network

Encapsulation in an application-specific protocol,

GPRS Tunnelling Protocol (GTP)
GTP uses UDP as its transport protocol
Signaling & payload carried over the same port;
"Message Type" field in GTP packet is used to identify
Tariff packages based on transport delays, QOS
classes, roaming, etc. may be envisaged

User Data through SGSN

MS-originated PDP context activation

QOS class negotiation
FIFO queue for each QOS class
Priority for delivery of data packets with higher QOS
Discarding of lower class PDUs in overload situations
and alarm
Command-controlled time limit for PDUs to remain in
the buffers

User Data through GGSN

SGSN-originated PDP context activation

Delivery of data packets to data network or relevant
SGSN while the PDP context, i.e., session, is active.

--------------------------------------------------------------------------------------------------

174

WAP & GPRS

a) WAP Protocols
1) Protocol stack
Wireless Application Environment (WAE)
Wireless Session Protocol (WSP)
Wireless Transaction Protocol (WTP)
Wireless Transport Layer Security (WTLS)
Wireless Datagram Protocol (WDP)
Bearers e.g. CSD, SMS, USSD

2) Protocol layers
Wireless Application Environment (WAE)
The WAE defines the user interface on the phone & the
application development environment to facilitate the
development of services that support multiple bearers.
WAE contains the Wireless Markup Language (WML),
WMLScript - a scripting micro-language similar to JavaScript and the Wireless Telephony Application (WTA). These are the
tools that allow WAP-based applications to be developed.
Wireless Session Protocol (WSP)
A sandwich layer that links the WAE to two session services one is a connection-oriented sub-layer, operating above the
WTP and another a connectionless service operating above the
WDP.

--------------------------------------------------------------------------------------------------

175
Wireless Transaction Protocol (WTP)
WTP is designed to provide a simplified protocol suitable for
low bandwidth mobile stations & is similar to the UDP of
TCP/IP suite of protocols.
WTP offers three classes of transaction service: unreliable
one-way request, reliable one-way request and reliable twoway request & response.

WTP supports concatenation of PDUs (Protocol Data Unit)

and delayed acknowledgement to help reduce the number
of messages sent. By stringing several messages together,
the end-user gets a quick feel of what is being
communicated.

Wireless Transport Layer Security (WTLS)

WTLS incorporates security features that are based upon the
established Transport Layer Security (TLS) protocol standard &
includes data integrity checks, privacy on the WAP Gateway to
client leg and authentication.
Wireless Datagram Protocol (WDP)
Allows WAP to be bearer-independent by adapting the
transport layer to the underlying bearer. WDP presents a
consistent data format to the higher layers of the WAP protocol
stack, thereby conferring the advantage of bearerindependence to application developers.
3) Optimal WAP Bearer
Short Message Service (SMS)
See http://www.mobileSMS.com/
Given its limited length of 160 characters, SMS is not an
adequate bearer for WAP because of the overhead of WAP.
Circuit Switched Data (CSD)
The current trials for WAP-based services are using CSD as the
underlying bearer. Immediacy is the loser in this approach
apart from airtime costs.

--------------------------------------------------------------------------------------------------

176
Unstructured Supplementary Services Data (USSD)
See http://www.mobileUSSD.com/
USSD is a means of transmitting information or instructions
over a GSM network. USSD, like SMS, uses the GSM
network's signaling path. USSD is not a store and forward
service but is session-oriented service. When a user accesses
a USSD service, a session is established and the radio
connection stays open until the user, application, or time out
releases it. USSD text messages can be up to 182 characters
in length.
General Packet Radio Service (GPRS)
See http://www.mobileGPRS.com/
The GPRS, the new packet-based bearer, is immediate,
relatively fast and supports virtual connectivity, allowing relevant
information to be sent from the network as and when it is
generated. Initial WAP-enabled GPRS terminals, however,
may not support mobile-terminated "Push" traffic.
WAP and GPRS have a synergy and are ideal bearers for each
other. Additionally, WAP incorporates two different connection
modes, WSP connection-oriented & connection-less protocol.
This is very similar to the two GPRS Point to Point services,
connection-oriented and connection-less.

-------------------------------------------------------------------------------------------------177
4) WAP Developer Toolkits

Dynamical Systems Research (DSR)

Marcel van der Heyden, WAP Product Manager
Tel: +44 171 801 0191
See http://www.wap.net/devkit/ or email developer@wap.net
or marcel@airmail.nl

Ericsson
Ericsson has a WAP-IDE (Integrated Developer's
Environment) offering for WAP Developers that can be
downloaded free of charge from
http://mobileinternet.ericsson.se/

Nokia
The WAP Toolkit for developing applications can be
downloaded from http://www.forum.nokia.com/

Phone.Com
Have an UP.SDK for application developers that can be
downloaded from http://www.updev.phone.com/ Also
features a white paper stating why developers should use
Phone.com's software development kit in preference to any
others.

-----------------------------------------------------------------------------------------------178