Overview of the GSM for Cellular System

T raining &

Development

GSM Overview

AGENDA Background and Fundamentals System Architecture Overview

Mobility Management Communication Management Radio Resource Management Roaming

T&D

Mobile devices

Pager receive only tiny displays simple text messages Sensors, embedded controllers

PDA simpler graphical displays character recognition simplified WWW

Mobile phones voice, data simple graphical displays

Palmtop tiny keyboard simple versions of standard applications

performance

T&D

Background and Fundamentals What ?

GSM: Global System for Mobile Communications Formerly: Group Special Mobile

When ?
1982: GSM created to set standard 1988: Industrial development started 1991: First Systems Deployed

Why ?
Integrated European System with International Roaming Increase available cellular radio capacity Take advantage of digital price/performance Accommodate new technology and services
T&D

Evolution of Cellular Networks

1G

2G

2.5G

3G

4G

Analog

Digital

Circuit-switching

Packet-switching

T&D

Some basic terms.

Frequency Frequency allocation Bandwidth Channel

T&D

System Architecture Overview

Functional Architecture broadly divided into 4 parts: Mobile Station (MS). Base Station Subsystem (BSS). Network Switching Subsystem (NSS). Operation and Support Subsystem (OSS)

T&D

System Architecture Overview-PLMN

Mobile-services Switching Center (MSC) Home Location Register (HLR) Visitor Location Register (VLR) Equipment Identity Register (EIR) Authentication Center (AUC) Base Station System (BSS) Base Transceiver Station (BTS) Base Station Controller (BSC). Mobile Station (MS)

Operation and Maintenance Center (OMC)

Other Network Elements.

T&D

Overview of the GSM System

PLMN PLMN
EIR EIR

MSC area
HLR

MSC area MSC area

EIR

MSC area
HLR

MSC area

MSC area
HLR

MSC area MSC area

EIR

MSC area
HLR

PLMN
EIR

MSC area MSC area

HLR EIR

MSC area
HLR

MSC area MSC area

EIR

MSC area
HLR

MSC area

EIR

PLMN

MSC area
HLR

MSC area MSC area

MSC area

GSM

The GSM system is made up of sub-networks called: Public Land Mobile Network's (PLMN). Each member country has one or more PLMN depending on its size.
GSM 1

T&D

System Architecture Overview

BS: Billing System OMC: Operation and Maintenance Centre PSTN: Public Switched Telephone Network OMC PABX VAS

Um
BTS SIM MS

Abis
BSC

A
MSC/ VLR AuC HLR

PSTN

MSCs

BS

Base Station Sub-system (BSS) MS: Mobile Station BTS: Base Transmitter Station BSC: Base Station Controller SIM: Subscriber Identity Module

Network Sub-system (NSS) MSC: Mobile Switching Centre HLR: Home Locatio Register VLR: Visitor Location Register AuC: Authentication Centre EIR: Equipment Identity Register

Value Added Services (VAS) SCP: Service Control Point SMSC: Short Message Service Centre VMS: Voice Mail System

T&D

EIR

MS and SIM Overview

The Mobile Station (MS) enables generic radio and processing functions to access the network through the radio interface. Each MS has a unique IMEI (Identity Mobile Equipment Identity) The Subscriber Identity Module (SIM) is basically a smart card, following ISO standards, containing all the subscriber-related information stored on the users side of the radio interface. The SIM stores the IMSI (International Mobile Sub. Identity)

MS SIM

IMSI
T&D

IMEI

IMSI Overview
What is an IMSI ? The International Mobile Subscriber Identity consists of three parts The MCC identifying a country The MNC identifying a PLMN within this country The MSIN identifying a subscriber within the PLMN The IMSI is only used for IMSI attach procedure and for GT Translation
15 Digits or Less

MCC MNC Mobile Country Code Mobile Network Code 3 Digits 2 Digits

MSIN Mobile Subscriber Identification Number

Example: WB Aircel: 404 17 1130110275

T&D

IMEI Overview
The Identity Mobile Equipment Identity consists of three parts The TAC is given by the GSM body The FAC is given by the Mfg The SNR is the serial no. SVN is software version.

TAC ( 6 digit )

FAC ( 2 digit )

SNR ( 6 digit )

SVN ( 2-3 digit )

Example: write *#06#

T&D

MSISDN Overview
What is an MSISDN ? The Mobile Station ISDN consists of three parts The CC identifying a country The NDC identifying a PLMN within this country The Subscriber Number The MSISDN is your Mobile phone Number but it is worth noting that MSC and HLR have also MSISDN (In that case it is called Global Title)

CC Country Code

NDC Network Destination Code

Subscriber Number

Example: WB Aircel: 91 985 1012345

T&D

BTS Overview
A BTS comprises radio transmission and reception devices (including) antennas) and also all the signal processing specific to the radio interface. A BTS can be considered as complex radio modems. A BTS is virtually connected to the MS (Air interface) on one side and to the BSC on the other side. In general a BTS is represented with three cells. Each cell can have more than one TRX (i.e. Antennas).

BSC

BTS

T&D

BSC Overview
A BSC is in charge of all the radio interface management through the remote command of the BTS and the MS, mainly the allocation and release of radio channels and the handover management. A BSC is connected on one side to the MSC and on the other side to several BTSs.

BSC

MSC/ VLR

T&D

MSC/VLR Overview
A MSC co-ordinates the setting-up of calls to and from GSM users. A VLR is a database in charge of temporarily storing subscription data (IMSI, MSISDN, LAC @, TMSI) for subscribers currently situated in the service area of the corresponding MSC. The MSC/VLR has interfaces with the BSC on one side and external networks on the other side.

BSC

MSC/ VLR

HLR

PSTN

T&D

HLR Overview
A HLR is a database holding subscriber information relevant to the provision of telecommunications services as well as some information related to the current location of the subscriber (IMSI, MSISDN, VLR @). In general an EIR (a functional subdivision of the HLR and enabling to verify the status of a MS) and an AuC (another functional subdivision of the HLR and enabling to authenticate a subscriber) complete the HLR Architecture. An HLR is located independently of the actual location of the subscriber

MSC/ VLR

HLR

Provisioning Centre Customer Care

T&D

VLR Overview
Visitor Location Registers (VLR) Temporary database which updates whenever new MS enters its area, by HLR database Controls those mobiles roaming in its area Reduces number of queries to HLR Database contains IMSI,TMSI,MSISDN,MSRN,Location Area,authentication key

T&D

Transmission

T raining &

Development

Air Interface Frequency allocation

Radio Channel DOWNLINK 935 - 960 MHz 1805-1880 MHz

UPLINK 890-915 MHz 1710-1785 MHz

Cell Site
Air Interface

Mobile

T&D

GSM Concepts - Transmission Direction

Uplink Transmission
Transmission from Mobile to Radio Terminal

Down Link Transmission

Transmission from Radio Terminal to Mobile Uplink and Downlink channels separated by 45 MHz

T&D

GSM Concepts - GSM Frequency band

GSM 900 Uplink 890 MHz to 915 MHz Down Link 935 MHz to 960 MHz 25 MHz divided into 125 channels of 200 KHz bandwidth
UP 890.0 890.2 890.4 914.8 915.0

DOWN 935.0

935.2

935.4

959.8

960.0

GSM 1800

Up link : 1710MHz - 1785 MHz Down link : 1805 MHz - 1880 MHz

T&D

GSM Concepts - Access Techniques

Time Division Multiple Access (TDMA)
Each carrier frequency subdivided in time domain into 8 time slots Each mobile transmits data in a frequency, in its particular time slot Burst period = 0.577 milli secs. 8 time slots called a TDMA frame. Period is .577 * 8 = 4.616 milli secs
0.577 ms 0 1 2 3 4.616 ms 4 5 6 7

..

T&D

Channel

T&D

Logical channels
On every physical channel, a number of logical channels are mapped. Each logical channel is used for a specific purpose. 11 Logical Channels in the GSM system: 2 are used for Traffic 9 are used for Control Signaling

T&D

Logical channels
A. Traffic channels (TCH) i. Full Rate Channel ii. Half Rate Channel B. Control Channels (with horrible abbreviations!) 1. Broadcast Channels (BCH) i. Frequency Correction Channel (FCCH) ii. Synchronization Channel (SCH) iii. Broadcast Control Channel (BCCH) 2. Common Control Channels (CCCH) i. Paging Channel (PCH) ii. Random Access Channel (RACH) iii. Access Grant Channel (AGCH) 3. Dedicated Control Channels (DCCH) i. Stand alone Dedicated Control Channel (SDCCH) ii. Slow Associated Control Channel (SACCH) iii. Fast Associated Control Channel (FACCH)
T&D

Broadcast Channels
1. FCCH (FREQUENCY CORRECTION CHANNEL) To tell the Mobile that this is the BCCH carrier To able the Mobile to synchronize to the frequency (Downlink only) 2. SCH ( SYNCHRONISATION CHANNEL) Used for sending BSIC (Base station Identity Code) Give TDMA frame number to the Mobile. (Downlink only) 3. BCCH ( BROADCAST CONTROL CHANNEL) Used for sending information to the mobile like CGI (Cell Global identity), LAI (Location Area Identity), BCCH carriers of the neighboring cells, maximum output power allowed in the cell and other broadcast messages like barred cell. (Downlink only)
T&D

Common control channels

1. PCH ( PAGING CHANNEL) Used for paging the Mobile. (Downlink only) Reason could be an incoming call or an incoming Short Message. 2. RACH ( RANDOM ACCESS CHANNEL) Used for responding to the paging (terminating), Location updating or to make call access (originating) by asking for a signaling channel. (Uplink only) 3. AGCH ( ACCESS GRANT CHANNEL) Used to allocate SDCCH to the mobile. (Downlink only)

T&D

Dedicated control channels

1. SDCCH ( STAND ALONE DEDICATED CONTROL CHANNEL) Used for allocating voice channel (TCH) to the mobile (call setup) and Location updating. Send Short Text message to Idle Mobile (Uplink & Downlink) 2. SACCH ( SLOW ASSOCIATED CONTROL CHANNEL) Used for sending information to the mobile like CGI (Cell Global identity), LAI (Location Area Identity), BCCH of all the neighbors and TA (Timing Advance) Send Short Text message to Busy Mobile (Downlink) Used for sending signal strength & bit error rate measurement of the serving cell and signal strength of the BCCHs of the neighboring Cells.(Uplink)

3. FACCH ( FAST ASSOCIATED CONTROL CHANNEL) Used for handover. (Uplink & Downlink)

T&D

Identify the Wrong statements

A. There will be a Location updation in VLR if MS moves from a Cell of LA 1 to another cell of LA2 B. There will not be any Location updation in VLR if MS moves from one Cell to another Cell of the same LA. C. For an in roaming customer VLR will update all the customers information from HLR of the roaming customers network. D. If a MS moves in active mode from a LA to another LA , location updation will take place after the call gets over.

T&D

T&D

Traffic Management

T raining &

Development

Mobility Management
Basic Service of Telephone Networks Connect two people (set-up and maintain the call) Involved Tasks: Identify the called person Determine his location

Route the call to him

Sustain the connection until conversation is over. Charge the caller

T&D

Mobility Management
The mobility of users in a cellular system is the source of major differences with fixed telephony, in particular for incoming calls. A Network can route a call towards a fixed user by simply knowing the network address (e.g., the telephone number). In a cellular system, the cell in which contact may be established with the user changes when the user moves. In order to receive incoming calls, a mobile user must first be located. In practice, three different methods may be used to locate a mobile user: Systematic Location Updating at Cell Level Paging Message in all cells of the Network when a call arrives Compromise by Introducing the concept of Location Area.

T&D

How does the network keep track of the subs?

Through LOCATION UPDATE. Through the help of various DATABASES

T&D

Network configuration
Network configuration The configuration of a Public Land Mobile Network (PLMN) is designed so that an active mobile station moving in the networks area is always able to report its position. A network consists of different areas: Cell area Location area MSC area VLR area. PLMN area

T&D

Hierarchy of Areas

Cell Location Area (locating & paging area) MSC Service Area (area controlled by one MSC) PLMN ( one or more per country) GSM Service Area ( all member countries) Location Area Identity (LAI) 3 digits 2 Octet (max) MNC Mobile Network Code LAC Location Area Code

3 digits MCC Mobile Country Code

GSM

T&D

A Cell
A cell

is the geographic zone covered by one radio transmitter and receiver

2
7 1 3

7
1Frequency 6 4
Cell 1 F1

Frequency Cell 2 F1

6
5

T&D

Concept of cellular network

T&D

Location Area
Group of Cells. Within the network a subscribers location is linked to the LA where subscriber is currently located

The identity of LA is stored in the VLR.

Location updation will only happen if MS moves from one LA to another LA.

T&D

MSC Area
Group of LAs. Geographical part of the network controlled by one MSC. In order to route a call to an MS , subscriber MSC area is also stored and monitored in HLR.

T&D

PLMN Area
Entire set of cells served by one network operator. Within the PLMN a operator can offer radio coverage and access to its network.

In a country there may be several PLMN areas.

T&D

How does the network keep track of the subs? Through LOCATION UPDATE. Through the help of various DATABASES

T&D

The First Database

The Subscriber Identity Module (SIM)
A small memory device mounted on a card that contains user specific identification the SIM + mobile equipment = mobile station (MS), a device able to access services in a GSM network via the Air interface.

+
Mobile Equipment
T&D

=
Subscriber Identity Module Mobile Station

Air Interface GSM Network

The Second Database

The Visitor Location Register (VLR) database which temporarily keeps record of subscribers currently located in the service area of the MSC

Visitor Location Register

Mobile Switching Center

T&D

The Third Database

The Home Location Register (HLR)
database which permanently keeps record of basic identification data of the subscribers including their current location (variable) equivalent to a VLR address.

Home Location Register

T&D

Location Update Procedures: MS BSS MSC VLR HLR

LOCATION UPDATE REQUEST REQUEST SUBS ID

SEND SUBS ID REQUEST SUBS INFO SEND SUBS INFO

AUTHENTICATION
AUTHENTICATION RESPONSE HLR UPDATE

T&D

First time Location Update (1)

HLR DB
MSISDN IMSI VLR Address 63+918+9499247 310+02+1234567890 vlr2 Sub. Data services

HLR IMSI Request MSC VLR1 MSC VLR2 Authen BSC 1 BTS 1
Loc Up
IMSI
MS

Loc Up + TMSI LAI 1

T raining &

Development

Generic Location Update

HLR
Del old data Update TMSI

Subscriber Info TMSI + LAI

MSC VLR1

MSC

IMSI Security Info

BTS BSC 1 Authentication VLR2 1 Loc Up + new TMSI

MS

LAI 1

T raining &

Development

Can U make a sentence where the word and will use 5 times consecutively

TIGERandELEPHANT

Pls put a gap between TIGER and and and and and ELEPHANT

T&D

Identify the Correct statements

A. Paging is required to locate the customers while there is incoming call to an MS. B. Handing over can't be possible if MS is moving at a speed of more than 250km/hr. C. What IMSI is to SIM is IMEI to Handset. D. None of the above

T&D

Traffic Cases

T&D

Case1: MS in Idle Mode

1. IMSI attach 2. Location updating , type IMSI attach 3. Changing Cells within an LA

4. Location updating , same MSC/VLR

5. Location updating , new MSC/VLR 6. Location updating type periodic registration 7. IMSI detach 8. Implicit detach

T&D

Case2: MS in Active Mode

1. Call from MS 2. Call to MS 3. Hand Over Intra BSC

4. Hand Over Inter BSC but Intra MSC

5. Hand Over Inter MSC

T&D

Case3: International Traffic Cases

1. IMSI attach 2. Call to MS

T&D

Radio Resource Management

T&D

Radio Resource Management

Radio Resource Management deals with paging (i.e. alerting users that they will receive calls) and continuing the transmission despite users mobility (i.e. going from one cell to another). Consequently the main Radio Resource Management functions for GSM systems are: Paging Handover (HO)

T&D

Paging
What the network does to locate the called subscriber. Service Area of VLR is divided into smaller areas called Location Areas (LA) LAI - Location Are Identity LAI = MCC + MNC +LAC VLR knows the LA of the subscriber All the BTSs within that LA is paged for the subscriber.

T&D

BTS

Public Switched Telephone Network

BTS (MSC)
Paging message

BTS

BTS

T&D

Handover
The process by which an ongoing call handled by one cell is transferred to another cell. Two reasons for Handover:
Handover due to Measurements Handover due to Traffic Reasons

Four Types of Handover:

Intra cell - Intra BSC Handover Inter cell - Intra BSC Handover Inter cell - Inter BSC Handover Inter MSC Handover

T&D

HO Procedures
Several types of Handovers can occur: Intra BSC Handovers (The call is handed over from one cell to another, both belonging to the same BSC) Inter BSC Handovers = Intra MSC Handovers (The call is handed over from one cell to another, each cell belonging to a different BSC) Inter MSC Handovers (The call is handed over from one cell to another, each cell belonging to a different MSC)

T&D

Handover (1)

HLR

PSTN

MSC/VLR 1

MSC/VLR 2

BSC1

BSC2

BSC3

A
BTS1 Measurement Report
BTS2 BTS3 BTS4

B
T&D

Handover (2)
HLR

PSTN

MSC/VLR 1

MSC/VLR 2

BSC1

BSC2

BSC3

A
BTS1 BTS2 BTS3 BTS4

B
T&D

I am OK

Handover (3)
HLR

PSTN

MSC/VLR 1

MSC/VLR 2

BSC1

BSC2

BSC3

A
BTS1 BTS2 BTS3 BTS4

Measurement Report
T&D

Handover (4)
HLR

PSTN

MSC/VLR 1

MSC/VLR 2

BSC1

BSC2

BSC3

A
BTS1 BTS2 BTS3 BTS4

BI am OK
T&D

Handover (5)
HLR

PSTN

MSC/VLR 1

MSC/VLR 2

BSC1

BSC2

BSC3

A
BTS1 BTS2 BTS3 BTS4

Measurement Report
T&D

Handover (6)
HLR

PSTN

MSC/VLR 1

MSC/VLR 2

BSC1

BSC2

BSC3

A
BTS1 BTS2 BTS3 BTS4

B
T&D

I am OK

Handover (7)
HLR

PSTN

MSC/VLR 1

MSC/VLR 2

BSC1

BSC2

BSC3

A
BTS1 BTS2 BTS3 BTS4

B
T&D

Communication Management
Communication Management deals with establishing and releasing transmission paths through meshed networks. Consequently the main Communication Management functions for GSM systems are: Mobile Originated Calls (MOC) Mobile Terminating Calls (MTC)

T&D

MOC Procedure
MS

BTS BSC VLR

HLR

MS BTS Authentication response (SDCCH) Exchange of Call release Connected Call Setup Communication Assignment of TCH Connected Alerting (AGCH) (TCH) Call release dedicated request Exchange for dedicated channel Connectedof communication Alerting establishmentchannel Assignment of TCH request Ciphering response Authentication response Call Alloc Req of command (TCH) (AGCH)communication (RACH) BSC (SDCCH) (AGCH) for BTS

AuC GMSC

EIR
MSC Exchange Connected Alerting Call Setupof release Communication PSTN

T&D

MTC Procedure
MS
Paging

BTS Paging BSC VLR Query for HLR info

HLR

MS BTS Paging the area

AuC Reply

Query VLR for LAC and TMSI

GMSC

Route to MSC
MSC BSC BTS Land to Mobile call PSTN

EIR

T&D

Roaming
What ? Roaming allow you to use your mobile phone even if you are not a subscriber of the Visited Network How ? Your HPLMN (Home Public Land Mobile Network) will have an agreement (technical and financial) with VPLMNs (Visited Public Land Mobile Networks)

T&D

Roaming - Location Update

A belongs to HPLMN, consequently A is roaming
6 GMSC A 1 2 5 9 GMSC

VPLMN

HLR

HPLMN

1 2 6

IMSI Translation 5 9 MAP : Authentication Set Request MAP : Insert Subscriber Data

T&D

Roaming - MTC
A and B belongs to HPLMN, consequently B is roaming
B 7
6 GMSC GMSC 1

5 4

VPLMN

VLR 3

HLR

HPLMN

1 2 3 5 6

ISUP : IAM Message MAP : Send Routing Info MAP : Provide Roaming Number ISUP : Connect first IAM with MSRN

T&D

Future of GSM

T&D

Future of GSM
The evolution of GSM to 3G
2 Mpbs

384 Kpbs 9.6-14.4 Kpbs 57.6Kpbs 115 Kpbs

CS

HSCSD

GPRS

EDGE

UMTS

T&D

Identify the Correct statements

A. Paging is required to locate the customers while there is incoming call to an MS. B. Handing over can't be possible if MS is moving at a speed of more than 250km/hr. C. What IMSI is to SIM is IMEI to Handset. D. None of the above

T&D

Make it 6 with the help of 1 line

S ix
T&D

Aircel VAS NOC

T&D

Aircel VAS NOC Common nodes portfolio

Charging solution IN: Prepaid ( With ATM & Credit card recharge option) IN:VPN and I&B Packet Bearer GPRS & EDGE Messaging

Short messaging services (SMS)

Unified messaging system (UMS) Multimedia messaging system ( MMS)

T&D

IN ( Intelligent Network)
Service Switching Point (SSP): Acts as an interface between the call control functions of the mobile network and the services control functions of a Services Control Point ( SCP).

Services Control Point ( SCP). This is the intelligence of a IN service and this is realized in software programs and data base.
Service Data Point (SDP): The data base which is used by IN.

T raining &

Development

Aircel VAS NOC Common nodes portfolio

User Support Systems Over the Air (OTA) Automatic Device Configuration ( ADC ) with welcome server. Other Application HLR redundancy and provisioning system ( EMA) Location Based Services ( LBS)

Push 2 Talk ( PTT)

Fraud Management system ( FMS) Advertisement & Application Push Server ( AAPS)

Equipment identity register.

Network Management O&M sub system ( OSS)
T&D

Charging Solution

T&D

IN : Prepaid System
Salient feature: Existing capacity -1.284 M subs ( 2.568 M BHCA Real Time Charging of Voice SMS GPRS LBS MMS Roaming SMS MO and GPRS

T&D

IN : Prepaid System
Recharge Options Mobile/Land line IVR USSD ATM/Credit Card Other feature Negative Balance and tariff Super value voucher

T&D

IN : VPN and I & B services

VPN Target to corporate client Flexibility to integrate mobile users into one network with one numbering plan I & B Free phone Premium rate Call screening feature

T&D

GPRS
Salient feature: Centralized GPRS nodes in Kolkata 1 SGSN 1 GGSN

T&D

SMS
Salient feature: Existing capacity : 1.768 BHSM Supported SMS traffic cases P2P short message services A2P and P2A messaging support CAMEL Ph3 supported ( Roaming MO)

SMS-C Function
Notification for MMS and UMS messaging OTA-STK application message handling

T&D

MMS
Salient feature: System capacity : 42 MPS ( 150K BHMM) MMS Features Supported for video , audio pictures etc. Future delivery of message MMS messages to and fro from internet

MMS with partner operator

MMS charging Prepaid with IN

Post Paid- Normal

T&D

Over the Air (OTA)

Salient feature: SIM Tool Kit ( STK) based application Multi-level services menus Services grouping SIM file Management Interactive services for internet contents.

T&D

Automatic Device configuration (ADC)

Salient feature: Detect automatically new mobile set/subscriber in network Send the service related setting to handset Statistics for market/customer segmentation and marketing campaign Welcome Server

Can detect foreign subscribers and send welcome message

Can send welcome message to home subscriber while roaming outside.

T&D

Location Based Services (LBS)

Salient feature: Existing capacity:32 locations per sec Both pull and push method

Cell info services

Available only within Aircel network LBS application

Fleet Management
Information , Dating , Friend Finder

T&D

Push 2 Talk (PTT)

Salient feature: Existing capacity: 250K subscribers GPRS bearer Do not disturb support Available only within Aircel network

T&D

Fraud Management System (FMS)

For revenue assurance Online as well as off line data screening Capable of handling all telecom product Fraud detection for postpaid and prepaid services

T&D

Advertisement & Application Push Server (AAPS)

Push advertisement /application content to mobile Can replace previously sent message Integrated with OTA and STK application

T&D

GSM schedule

PLMN features Structure of GSM network Functions of network elements Basic procedures Air interface High speed quality through digital transmission Authentication and ciphering International roaming Access to all fixed and mobile network Use of SS7 signaling system in the NSS

T&D

GSM network structure

T&D

GSM network structure

NSS - Network Switching Subsystem BSS - Base Station Subsystem OSS - Operation & Support Subsystem Network Switching Subsystem MSC - Mobile Switching Center HLR - Home Location Register VLR - Visitor Location Register AuC - Authentication Center EIR - Equipment Identity Register

T&D

Mobile Switching Center

Switching and call routing Charging Service provisioning Communication with HLR Communication with VLR Control of handover Control of connected BSCs Access to Internet

T&D

MSC service area

T&D

Home Location Register

Subscriber identity - MSISDN (Mobile Subscriber ISDN Number) - IMSI (International Mobile Subscriber Identity) - LMSI (Local Mobile Subscriber Identity) Subscriber location information

- Address of MSC, VLR Subscriber services - Basic (voice, data, fax, SMS) - Supplementary (CFU, CFB, CLIP, CLIR, HOLD,...) Subscriber authenticationinformation - Triplet (SRES, Kc, RAND) IN parameters Message Waiting Data

T&D

Visitor Location Register

Subscriber identity - IMSI, TMSI, Address of HLR Subscriber location information - LA (Location Area), Cell Id Subscriber supplementary services Subscriber authentication information - Triplet, CKSN (Ciphering Key Sequence Number) IN parameters

T&D

Authentication Center

Triplet - RAND (RANDom number) - SRES (Signed RESponse) - Kc (Ciphering Key) Algorithms - A3, A5, A8 Function - Subscriber authentication - Ciphering procedure

T&D

Equipment Identity Register

Database of IMEI (International Mobile Equipment Identity) White list Gray list Black list

T&D

GSM network structure

BSS - Base Station Subsystem NSS - Network Switching Subsystem OSS - Operation & Support Subsystem

Base Station Subsystem BSC - Base Station Controller TC - Transcoder Controller BTS - Base Transceiver Station

T&D

Base Station Controller

Radio network management Transmission network management BTS management TRAU management Handling of MS connections Internal BSC operation and maintenance

T&D

Transcoder Controller

Transcoding - GSM PCM Rate adaptation - 16 kbit/s 64 kbit/s

T&D

Base Transceiver Station

Radio resources Signal processing Signal link management Synchronization Local maintenance handling Functional supervision and testing

T&D

Operation & Support Subsystem

ADC Administrative Centre NMC Network Management Centre OMC Operation & Maintenance Centre

T&D

GSM numbering and identification parameters

MSISDN MSRN IMSI TMSI LMSI IMEI LAI CGI

T&D

MSISDN

Mobile Subscriber ISDN Number (15 digits) CC NDC SN National mobile number CC Country Code (1-3 digits) NDC National Destination Code (1-3) SN Subscriber Number

T&D

MSRN

Mobile Subscriber Roaming Number VCC VNDC SN(VMSC+VSN) VCC Visitor Country Code VNDC Visitor National Destination Code VMSC Visitor MSC number VSN Visitor Subscriber Number

T&D

IMSI

International Mobile Subscriber Identity (max 15 digits) National mobile number CC NDC SN CC Country Code (1-3 digits) NDC National Destination Code (1-3) SN Subscriber Number TMSI Temporary Mobile Subscriber Identity (4 octets) LMSI Local Mobile Subscriber Identity (4 octets)

T&D

IMEI

International Mobile Equipment Identity (15 digits) TAC FAC SNR spare TAC Type Approval Code (6 digits) FAC Final Assembly Code (2 digits) SNR Serial Number (6 digits) LAI ( Location Area Identification ) MCC MNC LAC MCC Mobile Country Code (3 digits) MNC Mobile Network Code (2 or 3 digits) LAC Location Area Code (4 digits)

T&D

CGI

Cell Global Identity MCC MNC LAC MCC Mobile Country Code (3 digits) MNC Mobile Network Code (2 or 3 digits) LAC Location Area Code (4 digits) CI Cell Identity (4 digits)

T&D

Traffic cases schedule

Authentication and ciphering Location update Charging Mobile originated call Mobile terminating call Handover Mobile originated SMS Mobile terminated SMS

T&D

Authentication and ciphering

T&D

Authentication and ciphering

T&D

Authentication and ciphering

T&D

Location Update in BSS

T&D

Location Update in NSS

T&D

Charging

CDR Call data record

T&D

Mobile originated call

T&D

Mobile terminating call

T&D

Intra BSC Handover

T&D

Intra MSC Handover

T&D

Inter MSC Handover

T&D

Mobile originated SMS

T&D

Mobile terminated SMS

T&D