Day1a KTC PDF

Introduction to GSM
and SS7
IP NGN_Mobility
2006 Cisco Systems, Inc. All rights reserved.
Cisco Public
Some Basic Rules

Please obey these rules to get the best
result ;-)
No Sleeping
Switch off/silent phone
No Laptop
Lets start and enjoy this class
Concentrate
IP NGN_Mobility
Ask when unclear
Cisco Public
Quiet please
Take notes
Smile ;-)
2
Agenda
GSM History, Network, Numbering,Mobility & Security
Simple Call & Signaling Scenarios
SS7 Architecture & MTP
ISUP & SCCP
TCAP & MAP
Sigtran & ITP MTP3 + SCCP database
IP NGN_Mobility
Cisco Public
GSM History
IP NGN_Mobility
Cisco Public
First Generation
Advanced Mobile Phone Service (AMPS)
US trials 1978; deployed in Japan (79) & US (83)
800 MHz band two 20 MHz bands
TIA-553
Still widely used in US and many parts of the world
Nordic Mobile Telephony (NMT)

Sweden, Norway, Demark & Finland
Launched 1981; now largely retired
450 MHz; later at 900 MHz (NMT900)
Total Access Communications System (TACS)

British design; similar to AMPS; deployed 1985
Some TACS-900 systems still in use in Europe
IP NGN_Mobility
Cisco Public
Second Generation 2G
Digital systems
Leverage technology to increase capacity
Speech compression; digital signal processing
Utilize/extend Intelligent Network concepts
Improve fraud prevention
Add new services
There are a wide diversity of 2G systems
IS-54/ IS-136 North American TDMA; PDC (Japan)
iDEN
DECT and PHS
IS-95 CDMA (cdmaOne)
GSM
IP NGN_Mobility
Cisco Public
North American CDMA (cdmaOne)

Code Division Multiple Access
All users share same frequency band
Discussed in detail later as CDMA is basis for 3G
Qualcomm demo in 1989

Claimed improved capacity & simplified planning
First deployment in Hong Kong late 1994

Major success in Korea (1M subs by 1996)
Used by Verizon and Sprint in US
Simplest 3G migration story
IP NGN_Mobility
Cisco Public
cdmaOne IS-95
TIA standard IS-95 (ANSI-95) in 1993
IS-95 deployed in the 800 MHz cellular band
J-STD-08 variant deployed in 1900 MHz US PCS band
Evolution fixes bugs and adds data

IS-95A provides data rates up to 14.4 kbps
IS-95B provides rates up to 64 kbps (2.5G)
Both A and B are compatible with J-STD-08
All variants designed for TIA IS-41 core networks (ANSI

41)
IP NGN_Mobility
Cisco Public
GSM
Groupe Special Mobile , later changed to
Global System for Mobile
Joint European effort beginning in 1982
Focus on seamless roaming across Europe
Services launched 1991

Time division multiple access (8 users per 200KHz)
900 MHz band; later extended to 1800MHz
Added 1900 MHz (US PCS bands)
GSM is dominant world standard today

Well defined interfaces; many competitors
Network effect (Metcalfes law) took hold in late 1990s
Tri-band GSM phone can roam the world
IP NGN_Mobility
Cisco Public
1G Separate Frequencies
FDMA Frequency Division Multiple Access

30 KHz
Frequency
30 KHz
30 KHz
30 KHz
30 KHz
30 KHz
30 KHz
30 KHz
IP NGN_Mobility
Cisco Public
10
2G TDMA
Time Division Multiple Access
One timeslot = 0.577 ms
One TDMA frame = 8 timeslots
Frequency
200 KHz
200 KHz
200 KHz
200 KHz
Time
IP NGN_Mobility
Cisco Public
11
2G & 3G CDMA
Code Division Multiple Access
Spread spectrum modulation
Originally developed for the military
Resists jamming and many kinds of interference
Coded modulation hidden from those w/o the code
All users share same (large) block of spectrum

frequency reuse
Soft handoffs possible
Almost all accepted 3G radio standards are based on

CDMA
CDMA2000, W-CDMA and TD-SCDMA
IP NGN_Mobility
Cisco Public
12
Multi-Access Radio Techniques
Courtesy of Petri Possi, UMTS World
IP NGN_Mobility
Cisco Public
13
3G Vision
Universal global roaming
Multimedia (voice, data & video)
Increased data rates
384 kbps while moving
2 Mbps when stationary at specific locations
Increased capacity (more spectrally efficient)

IP architecture
IP NGN_Mobility
Cisco Public
14
GSM History part 1/5

Year
Event(s)
Groupe Speciale Mobile (GSM) is formed by the Confederation of European Posts and
1982 Telecommunications (CEPT) to design a pan-European mobile technology
1984France and Germany sign a joint development agreement on GSM
GAP (Groupe d'Analyse et de Provision') meetings took place that led to the European Commission
1985 endorsement of the GSM project
EU Heads of State endorse the GSM project. The European Commission initiative proposes to reserve
1986 900 MHz spectrum band for GSM, agreed in the EC Telecommunications council
Quadripartite agreement between France, Germany, Italy, and UK cooperation agreement signed (to
support the standard works and exchange research data)
Trials of different digital radio transmission schemes and different speech codecs in several countries,
with comparative evaluation by CEPT GSM in Paris
1987Basic parameters of the GSM standards agreed in February
Proposals agreed by four ministers from the quadripartite countries to create an Operator Agreement in
the form of a 'Memorandum of Understanding'. The 'MoU' was drawned up and signed in Copenhagen
in September by 15 members from 13 countries that committed to deploying GSM
1988Completion of the first set of detailed GSM specifications for infrastructure tendering purposes
Simultaneous issue of invitation to tender for networks by ten GSM network operators - all
subsequently signed in the same year
Groupe Speciale Mobile (transferred to an ETSI technical committee) defines the GSM standards as the
1989 internationally accepted digital cellular technology standard
The UK's Department of Trade and Industry (DTI) produced a document 'Phones on the Move' that first
proposed PCN (Personal Communication Networks (later known as DCS 1800 and subsequently GSM
1800) networks to operate in the 1800 MHz frequency band
IP NGN_Mobility
Cisco Public
15

Year
Event(s)
1990GSM adaptation work started for the DCS1800 band
Phase 1 of GSM specifications were published
1991First GSM call made by Radiolinja in Finland
1992First international roaming agreement signed between Telecom Finland and Vodafone (UK)
First SMS sent
Telstra Australia becomes the first non-European operator to sign the GSM MoU 32 networks on
1993 air in 18 countries of territories
First truly hand portable terminals are launched commercially. World's first DCS1800 (later
GSM1800) network opened in the UK
1994GSM Phase 2 data/fax bearer services launched
GSM MoU membership surpasses 100 operators
GSM subscribers hit one million
GSM MoU group is formally registered as the GSM MoU Association in Switzerland 117 networks
1995 on air
Global GSM subscriber exceeds 10 millions
GSM World Congress held in Madrid, Spain
Formation of GSMA Regional Interest Groups (RIGs)
Fax, data, and SMS services started, video over GSM demonstrated
The first North American PCS 1900 (now GSM 1900) network opened - via a phone call by US Vice
President Al Gore
IP NGN_Mobility
Cisco Public
16

Year
Event(s)
1996First GSM networks in Russia and China go live
Pre-paid GSM SIM cards launched
GSM MoU membership approaches 200 operators from nearly 100 countries
167 networks live in 97 countries
GSM World Congress moves to Cannes, France
GSM subscribers hit 50 millions
GSMA Awards launched
199715 GSM networks on air in USA using the 1900 Mhz band
100 countries on air globally
First tri-band handsets launched
1998Global GSM subscribers surpasses 100 millions
1999WAP trials begin in France and Italy
Contracts placed for GPRS systems
2000First commercial GPRS services launched
3G licence auctions commence
First GPRS handsets enter the market
Five billion SMS messages sent in one month
2001First 3GSM (W-CDMA) network goes live
3GSM World Congress held in Cannes, France
fifty billion SMS messages sent in first three months
GSM subscribers exceeds 500 millions
First mobile phone coloured launched
IP NGN_Mobility
Cisco Public
17

Year
Event(s)
2002GSM introduced 800 Mhz band
First Multimedia Messaging Services go live
95% of nation worldwide have GSM networks
400 billion SMS messages sent in the year
First mobile camera phones launched
2003First EDGE network go live
GSMA creates new CEO-level board
Membership of GSM Association breaks through 200 countries barrier
Over half of billion handsets produced in a year
2004GSM subsrcibers surpasses 1 billion
More than 50 3GSM networks live
GSM Associatian and Ovum announce market data venture: Wireless Intelligence
2005GSMA surpasses 1.5 billion customers
GSM dominated over 3/4 of wireless market
First HSDPA network go live
Over 100 3GSM networks launched
120+ 3GSM handset models launched or announced
First ever sub-$30 mobile phone announced
Over one trillion SMS sent in the year
IP NGN_Mobility
Cisco Public
18

Year
Event(s)
2006GSM subscribers surpasses 2 billion customers
Over 120 3GSM networks in more than 50 countries and almost 100 million subscriptions
Approximately 85 HSDPA networks in commercial launch by year end
66 HSDPA devices available from 19 suppliers, including 32 handsets models
GSMA memberships exceeds 900 companies (including over 700 operators)
over 980 million handsets sold by year end
2007Heading towards 2.5 billion GSM connections
Further HSDPA network launches and introduction of HSUPA
First GSMA Mobile Asia Congress held in Macau SAR, China
GSMA celebrates 20th anniversary
2008More than 55,000 visitors to the GSMA's Mobile World Congress in Barcelona
GSM surpasses 3 billion connections
IP NGN_Mobility
Cisco Public
19
Statistics
Parameter
Main (fixed) telephone lines
(millions)
Mobile cellular subscribers
(millions)
International telephone traffic
minutes (billions)
Personal computers (millions)
Internet users (millions)
Year
1997 1998 1999 2000 2001 2002 2003 2004 2005 2006 2007 2008
792
838
904
975 1034 1083 1135 1204 1262 1263 1278 1267
215
318
490
738
961 1157 1417 1763 2219 2757 3305 4100
81
325
117
91
375
183
103
435
275
114
500
390
120
555
489
127
615
616
141
650
721
166
775
867
179 183 .. ..
808 .. .. ..
989 1168 1344 1542
Source: http://www.itu.int/ITU-D/ict/statistics/at_glance/KeyTelecom99.html
Notes:
- Data for 2008 are estimates
- .. - not available
IP NGN_Mobility
Cisco Public
20
Mobile Standard Organizations

Mobile
Operators
ITU Members
ITU
IS-95), IS-41, IS2000, IS-835
GSM, W-CDMA,
UMTS
Third Generation
Patnership Project
(3GPP)
CWTS
(China)
Third Generation
Partnership Project II
(3GPP2)
ARIB
(Japan)
TTC
(Japan)
TTA
(Korea)
ETSI
(Europe)
IP NGN_Mobility
T1
(USA)
TIA
(USA)
Cisco Public
21
International Standardization
ITU (International Telecommunication Union)
Radio standards and spectrum
IMT-2000
ITUs umbrella name for 3G which stands for International
Mobile Telecommunications 2000
National and regional standards bodies are

collaborating in 3G partnership projects
ARIB, TIA, TTA, TTC, CWTS. T1, ETSI
3G Partnership Projects (3GPP & 3GPP2)

Focused on evolution of access and core networks
IP NGN_Mobility
Cisco Public
22
The role of 3GPP

GSM, GPRS, W-CDMA, UMTS, EDGE, HSPA and LTE are all [RAN]
Technologies specified by 3GPP
Core network and Systems architecture evolution have kept pace
Backward compatibility is a key element of each new 3GPP Release
The 3GPP Organizational Partners are
Regional and National Standards
Bodies;
Companies participate through their
membership of one of these 6 Partners
23
IP NGN_Mobility
Cisco Public
23
3GPP Membership
371 Organisations
(September 2010)
24
IP NGN_Mobility
Cisco Public
24
Where the work is done

Meeting Delegates* by region (June 2010):
Asia
Europe Middle
East & Africa
North America
* Participants in TSG and WG meetings over the last year
Plenary meetings every 3 months, approve specifications and the Freezing of

3GPP Releases
The 50th TSG Plenary will be in Istanbul in December 2010
IP NGN_Mobility
Cisco Public
25
Spanning the Generations...

GSM 1G
Analog technology.
Deployed in the 1980s.
3GPP Specified Radio Interfaces

2G radio: GSM, GPRS, EDGE
3G radio: WCDMA, HSPA, LTE
4G radio: LTE Advanced
GSM 2G
Digital Technology.
First digital systems.
Deployed in the 1990s.
New services such as SMS
and low-rate data.
Primary technologies
include IS-95 CDMA and
GSM.
3GPP Core Network

2G/3G: GSM core network
3G/4G: Evolved Packet Core (EPC)
3G ITUs IMT-2000 required 144

kbps mobile, 384 kbps
pedestrian, 2 Mbps indoors
Primary technologies
include CDMA2000 1X/EVDO, WiMAX,
and UMTS-HSPA.
4G ITUs IMT-Advanced
requirements include ability to
operate in up to 40 MHz radio
channels and with very high
spectral efficiency.
No technology meets
requirements today.
IEEE 802.16m and LTE
Advanced being designed
to meet requirements.
3GPP Service Layer

GSM services
IP Multimedia Subsystem (IMS)
Multimedia Telephony (MMTEL)
Support of Messaging and other OMA
functionality
Emergency services and public warning
Etc.
Text adapted from 3G Americas White Paper, September 2010
IP NGN_Mobility
Cisco Public
26
Mobile Telephony History in Kenya
Mobile telephony service in Kenya started in 1992 with analogue system called
Extended Total Access Communication System (ETACS) and launched in 1993.
Services were so EXPENSIVE so that only a few within the upper rank of the society
could afford them. Cost of mobile handset was as high as Ksh. 250,000
This resulted in a marginal mobile subscriber base of less than 20,000 for a period of
seven years (from 1993-1999)
The enactment of the Kenya Communication act, 1998 led to the introduction of
competition in the cellular mobile industry. Currently the Commission has licensed 4
mobile operators: Safaricom, Celtel, Econet Wireless, and Telkom Kenya.
Since the Commission issued the 2 mobile licenses in 2000, the mobile
telecommunication has continued to lead the voice telephony market by having
more subscriptions as compared to fixed network in the country
IP NGN_Mobility
Cisco Public
27
Kenya Mobile Subscribers

Orange Market Share per Sept 2010
4.00%
Essar
6.70%
Number of Subscribers per Sept

2010
Orange
Airtel
13.50%
875,592
Essar
Safarico
m
75.90%
1,465,832
Airtel
2,977,696
Safaricom
16,714,54
8
-
IP NGN_Mobility
Cisco Public
10,000,000
20,000,000
28
Kenya SMS traffic

Number of SMS Sent
0
900
800
700
600
500
400
300
200
100
-
IP NGN_Mobility
2
777
4
798
772
13.4 13.4 12.8
6
741
11.2
262
4.9
Cisco Public
16
14
12
10
8
6
4
2
0
Total SMS in the

period (millions)
Number of
SMS/subs/month
29
Kenya Mobile Subscription & Penetration
Millions
Mobile Subscription
25
20
15
10
5
0
19.4
17.9
Sep-09
Dec-09
19.9
Mar-10
20.1
Jun-10
22
Sep-10
Mobile Penetration
Percentage
60
40
49.7
46
51
51.2
55.9
20
0
Sep-09
IP NGN_Mobility
Dec-09
Cisco Public
Mar-10
Jun-10
Sep-10
30
Kenya Average Mobile Tariffs per Minute (Ksh)
IP NGN_Mobility
Cisco Public
31
Mobile Telephony Subscription in Kenya

Up 660%
Year
Number of mobile
subscribers
No of Public
Payphones*
Mobile Penetration
1999
Up 413%
2000
Up 126% Up 20% Up 60%

2001
2002
2003
Up 106% Up 39% Up 56% Up 5%
2004
2005
2006
2007
Mar-08
15,000 114,000 585,131 1,325,222 1,590,785 2,546,157 5,263,676 7,340,317 11,440,077 11,986,007
0.053
0.38
1.9
4.2
1,628
4.95
3,404
7.77
20,666
15.74
29,888
21.62
20,822
33.65
35.25
Source:CCK database, (-) missing data

INCREASE
DECREASE
Mobile Traffic in Kenya

Year
Mobile to fixed traffic (minutes)
Total local mobile traffic (minutes)
SMS sent
2004
286,011,379
152,939,270
2005
2006
2007
274,983,217 71,391,346
18,867,044
3,268,961,952 4,955,485,330 4,905,583,043
355,080,351 255,827,772
445,141,504
Source:CCK database, (-) missing data
IP NGN_Mobility
Cisco Public
32
Mobile Subscription and Revenue in Kenya
IP NGN_Mobility
Cisco Public
33
GSM Network + Its

Evolution
IP NGN_Mobility
Cisco Public
34
3GPP Release
2004
2005
2007
2009
2008
2010
2011
IP NGN_Mobility
Cisco Public
Common
IMS
IMS
MMTel
EPC
2006
R10
LTE
Adv
2003
R9
R8
LTE
2002
R7
HSPA
+
2001
R6
R5
HSPA
DL
UMTS
2000
R4
HSPA
UL
R99
35
3GPP Evolution
Radio Interfaces
Higher Data Throughput
Lower Latency
More Spectrum Flexibility
Improved CAPEX and OPEX
IP Core Network
Support of non-3GPP Accesses
Packet Only Support
Improved Security
Greater Device Diversity
Service Layer
More IMS Applications (MBMS, PSS, mobile TV now IMS
enabled)
Greater session continuity
IP NGN_Mobility
36
Cisco Public
36
GSM 2G Architecture
NSS
BSS
E
Abis
PSTN
Um
PSTN
B
BSC
MS
MSC
BTS
VLR
GMSC
SS7
F
H
EIR
HLR
AuC
NSS
RSS
BSS Base Station System
NSS Network Sub-System
BTS Base Transceiver Station
MSC Mobile-service Switching Controller
BSC Base Station Controller
VLR Visitor Location Register
MS Mobile Station
HLR Home Location Register

AuC Authentication Server
GMSC Gateway MSC
IP NGN_Mobility
Cisco Public
GSM Global System for Mobile communication
OSS
37
Core Network Evolution 1
IP NGN_Mobility
Cisco Public
38
GSM 2,5G Architecture

NSS
BSS
E
Abis
PSTN
Um
PSTN
B
BSC
MS
MSC
BTS
Gs F
VLR
GMSC
SS7
H
Gb
EIR
2G+ MS (voice & data)
Gr
HLR
AuC
Gc
Gn
SGSN
Gi
IP
PSDN
GGSN
NSS Network Sub-System
SGSN Serving GPRS Support Node
GGSN Gateway GPRS Support Node
MS Mobile Station
GSM Global System for Mobile communication

GMSC Gateway MSC
IP NGN_Mobility
Cisco Public
39
3GPP Releases
Version
Released
Release 98
1998
Info
This and earlier releases specify pre-3G GSM networks
2000 Q1
Specified the first UMTS 3G networks, incorporating a CDMA air

interface
Release 4
2001 Q2
Originally called the Release 2000 - added features including an

all-IP Core network
Release 5
2002 Q1
Introduced IMS and HSDPA
2004 Q4
Integrated operation with Wireless LAN networks and adds

HSUPA, MBMS, enhancements to IMS such as Push to Talk
over Cellular (PoC), GAN
Release 99
Release 6
Release 7
Focuses on decreasing latency, improvements to QoS and realtime applications such as VoIP. This specification will also
focus on HSPA+, SIM high-speed protocol and contactless
front-end interface (Near Field Communication enabling
In progress
operators to deliver contactless services like Mobile
(2007 Q2)
Payments), EDGE Evolution
Release 8 &
onwards
In progress E-UTRA, All-IP Network (SAE). Release 8 constitutes a

(expected
refactoring of UMTS as an entirely IP based fourth-generation
2009)
network
IP NGN_Mobility
Cisco Public
40
IP NGN_Mobility
Cisco Public
41
3G rel99 Architecture (UMTS) 3G

Radios
2G MS (voice only)
CN
BSS
E
Abis
PSTN
PSTN
B
BSC
Gb
BTS
MSC
Gs
GMSC
VLR
SS7
H
IuCS
RNS
Gr
HLR
ATM
Iub
IuPS
RNC
AuC
Gc
Gn
SGSN
Gi
IP
PSDN
GGSN
Node B
3G UE (voice & data)
CN Core Network

RNS Radio Network System
RNC Radio Network Controller
GMSC Gateway MSC
IP NGN_Mobility
Cisco Public
UMTS Universal Mobile Telecommunication System
42
IP NGN_Mobility
Cisco Public
43
3G rel4 Architecture (UMTS) Soft

Switching
2G MS (voice only)
CN
CS-MGW
Abis
Nc
Mc
BSC
Gb
BTS
CS-MGW
Nb
BSS
PSTN
B
C
MSC Server
Gs
PSTN
Mc
GMSC server
VLR
SS7
H
IuCS
RNS
Gr
HLR
ATM
Iub
IuPS
RNC
AuC
IP/ATM
Gc
Gn
SGSN
Gi
PSDN
GGSN
Node B
3G UE (voice & data)
CN Core Network

RNS Radio Network System
RNC Radio Network Controller
GMSC Gateway MSC
IP NGN_Mobility
Cisco Public
44
R4 Core Network: Interface and Protocol
IP NGN_Mobility
Cisco Public
45
IP NGN_Mobility
Cisco Public
46
R5 Network Architecture
IP NGN_Mobility
Cisco Public
47
3GPP Release 5 Network Architecture
IP NGN_Mobility
Cisco Public
48
Difference between HSPA and HSPA+
1. HSPA corresponds to 3GPP releases 5 and 6 for mobile broad

band networks whilst HSPA+ is the standards in 3GPP release7 and
8.
2. HSPA theoretical peak data rates can go up to 14.4 Mbps
downlink and 5.8 Mbps uplink whilst HSPA+ data rates are in the
order of 84 Mbps and 21 Mbps respectively.
3. Modulation scheme to be used by HSPA+ is 64QAM and HSPA
uses digital modulation schemes beginning from 16QAM to 64 QAM.
4. HSPA+ has an additional proposal for all-IP based back bone so
that base stations are connected to the IP network hence faster core
is possible.
5. HSPA+ is capable of reducing latency below 50ms and the
current HSPA networks latency is around 70ms.
IP NGN_Mobility
Cisco Public
49
Evolution of HSPA Maximum Peak Bit Rate
IP NGN_Mobility
Cisco Public
50
3GPP Release 6
Push-to-Talk over Cellular Service
PTT is one-to-one or one-to-many voice communication like

walkie-talkie (half duplex only) over data network
Network Sharing
WLAN UMTS Interworking
Multiple core networks share common RANs (each operator

maintains individual cells with separate freq and separate MNC,
BTSs and RNCs are shared, but the MSCs and HLRs are still
separated
Sharing of a common CN with separated RANs like above
Operators agree on a geographical split of networks in defined
territories with roaming contracts so that all the mobile users have
full coverage over the territory
1. WLAN could be used at hotspots as access network for

IMS instead of the UMTS PS Domain (savesexpensive 3G Presence Service
spectrum and cell space)
User has option to make himself visible or invisible to other
parties and allow or decline services to be offered
2. Access through (more expensive) PS Domain allows
User can create buddy lists and be informed about state changes
broadest coverage outside hotspots
MBMS (Multimedia Broadcast Multicast Service)
3. Handovers between 3G (even GPRS) and WLAN shall

be supported (roaming)
MBMS is unidirectional point-to-multipoint bearer service (push

service)
Data is transmitted from a single source to multiple subscribers
over a common channel
Service could transmit e.g., text, audio, picture, video
User shall be able to enable/disable the service
4. WLANs might be operated either by mobile operators or
by 3rd party
5. Architecture Definition for supporting authentication,

IMS
authorization and charging (standard IETF AAAServer)
included
6. AAA Server receives data from HSS / HLR
IP NGN_Mobility
Cisco Public
Phase 2
51
Series
Topic
Content
01.xx
General
Vocab. - Abbreviation - Service Impl. Phase
02.xx
Service Aspect
Bearer, Tele, Supplementary, MS feature, security,etc.
03.xx
Network Aspect
Architecture, numbering, handover, routing, etc.
04.xx
MS-BC interface
Protocol, spec, channel type, Rate adaptation, etc.
05.xx
Radio path
Channel multiplexing, coding, power control, etc.
06.xx
Speech Coding
Full rate speech coding, confort noise, etc.
07.xx
Terminal adaptor Terminal adaptation for syn/asyn bearer service
08.xx
BS-MS interface
09.xx
Net. interworking MAP, interworking to PSTN/ISDN/PDN, etc.
11.xx
Equipment
MS conformity, BTS/BSC spec, MSC/VLR/HLR test
12.xx
Operation & M.
TMN, network configuration, maintenance procedure,

etc.
IP NGN_Mobility
A-interface, A-bis, Layer 1,2,3, Rate adaptation, etc.
Cisco Public
52
Building on Releases
Release 99: Enhancements
to GSM data (EDGE). Majority
of deployments today are
based on Release 99.
Provides support for
GSM/EDGE/GPRS/WCDMA
radio-access networks.
Release 10 LTE-Advanced
meeting the requirements set
by ITUs IMT-Advanced
project.
Release 4: Multimedia
messaging support. First
steps toward using IP
transport in the core network.
Release 5: HSDPA. First

phase of Internet Protocol
Multimedia Subsystem (IMS).
Full ability to use IP-based
transport instead of just
Asynchronous Transfer Mode
(ATM) in the core network.
Release 9: HSPA and LTE

enhancements including
HSPA dual-carrier operation
in combination with MIMO,
EPC enhancements,
femtocell support, support
for regulatory features such
as emergency userequipment positioning and
Commercial Mobile Alert
System (CMAS), and
evolution of IMS
architecture.
Release 6: HSUPA.
Enhanced multimedia support
through Multimedia
Broadcast/Multicast Services
(MBMS). Performance
specifications for advanced
receivers. Wireless Local Area
Network (WLAN) integration
option. IMS enhancements.
Initial VoIP capability.
Release 8: HSPA Evolution,

simultaneous use of MIMO
and 64 QAM. Includes dualcarrier HSPA (DC-HSPA)
wherein two WCDMA radio
channels can be combined
for a doubling of throughput
performance. Specifies
OFDMA-based 3GPP LTE.
Also includes quad-carrier

operation for HSPA+.
Release 7: Evolved EDGE. Specifies HSPA+, higher order modulation and MIMO. Performance enhancements,
improved spectral efficiency, increased capacity, and better resistance to interference. Continuous Packet
Connectivity (CPC) enables efficient always-on service and enhanced uplink UL VoIP capacity, as well as
reductions in call set-up delay for Push-to-Talk Over Cellular (PoC). Radio enhancements to HSPA include 64
Quadrature Amplitude Modulation (QAM) in the downlink DL and 16 QAM in the uplink. Also includes optimization of
MBMS capabilities through the multicast/broadcast, single-frequency network (MBSFN) function.
Defines EPC.
Text adapted from 3G Americas White Paper, September 2010
IP NGN_Mobility
Cisco Public
53
GSM Basic
IP NGN_Mobility
Cisco Public
54
f2
f1
f2
f1
BTS
BTS
f3
f2
f3
f2
f1
f1
BTS
BTS
f3
f3
f2
IP NGN_Mobility
Cisco Public
f2
55
1 sector =
1 cell
f5,f6,
f7,f8
f1,f2,
f3,f4
f5,f6
f1,f2
BTS
BTS
f7,f8
f9,f10
f11,f12,
f13,f14
f3,f4,
BTS
f1,f2,
IP NGN_Mobility
Cisco Public
f5,f6,
f7,f8
f1,f2,
f5,f6
BTS
f11,f12,
f13
56
1 sector =1 cell
LAC=1201
CI=4869
LAC=1201
CI=4871
LAC=1201
CI=4870
BTS
IP NGN_Mobility
Cisco Public
57
B
T
S
B
T
S
B
T
S
B
T
S
B
T
S
B
T
S
B
T
S
B
T
S
B
T
S
B
T
S
B
T
S
B
T
S
B
T
S
B
T
S
B
T
S
B
T
S
B
T
S
B
T
S
B
T
S
B
T
S
B
T
S
B
T
S
B
T
S
B
T
S
B
T
S
B
T
S
B
T
S
B
T
S
B
T
S
B
T
S
Cisco Public
B
T
S
B
T
S
B
T
S
B
T
S
B
T
S
B
T
S
LAC=1202
B
T
S
B
T
S
B
T
S
B
T
S
B
T
S
B
T
S
B
T
S
B
T
S
B
T
S
LAC = 1328
B
T
S
B
T
S
IP NGN_Mobility
B
T
S
B
T
S
B
T
S
B
T
S
B
T
S
B
T
S
B
T
S
LAC=1201
B
T
S
B
T
S
B
T
S
B
T
S
B
T
S
B
T
S
B
T
S
B
T
S
B
T
S
B
T
S
B
T
S
B
T
S
B
T
S
B
T
S
B
T
S
B
T
S
B
T
S
B
T
S
B
T
S
B
T
S
LAC = 1329
B
T
S
B
T
S
B
T
S
B
T
S
B
T
S
B
T
S
58
Area GSM
Cell
Location Area
MSC Service Area
PLMN Service Area
GSM Service Area
IP NGN_Mobility
Cisco Public
59
Area GSM
1?
2?
3?
4?
5?
IP NGN_Mobility
Cisco Public
60
RSS Components
RSS components :
Mobile Station (MS)
Base Station Subsystem
To/From NSS
BSS
(BSS)
MS
To/From OMS
Radio Subsystem
IP NGN_Mobility
Cisco Public
61
BSS Components
Base Station Subsystem (BSS)

To/From
BSS components :
Base Transceiver
Station (BTS)
NSS
Base Station
Controller (BSC)
TC
BSC
BTS
Additional equipment :
Transcoder (TC)
IP NGN_Mobility
Cisco Public
62
BSS Functions
BTS :
To monitor connection to Mobile Station (HP)
To send and receive data from/to MS
BSC :
A bridge between several BTS to MSC
To control BTS
BSS Management
TC :
To change transmission rate from MSC (64 kbps) to BSS (16 kbps) and
vice versa
Compression equipment to save transmission
IP NGN_Mobility
Cisco Public
63
MS Components
Mobile Station (MS)
Mobile Station components :

Mobile Equipment (ME)
Subscriber Identity Module
(SIM)
ME
IP NGN_Mobility
SIM
Cisco Public
64
MS Functions
Mobile Equipment (ME)

computer controlled transceiver which transmits and receives GSM

signals
various types : Vehicle Mounted Station, Portable station,

station
Handheld
Subscriber Identity Module (SIM)

Ticket/card to access GSM network
Data stored in SIM : IMSI, Ki, Algoritma A3 , PIN, TMSI, phone

memory, SMS
IP NGN_Mobility
Cisco Public
65
ME Mandatory Functions
DTMF ( Dual Tone Multi Frequency )
SMS ( Short Message Service )
Algorithm for ciphering A5/1 and A5/2
Ability to display available PLMN
Support emergency calls, even without SIM
Burned-in IMEI
IP NGN_Mobility
Cisco Public
66
DTMF
1
697 Hz
770 Hz
852 Hz
941 Hz
1209 Hz
1477 Hz
1336 Hz
IP NGN_Mobility
Cisco Public
67
Subscriber Related Routing

Kilimani Police Station:
0202721683
Dial 911
BSC
911 0202721683
BTS Kilimani
MSC
Dial 911
PSTN
911 0203742238
BSC
BTS Parklands
IP NGN_Mobility
Parklands Police Station:

0203742238
Cisco Public
68
NSS Components
VLR
Network Switching Subsystem

(NSS) components :
MSC
Mobile Switching Centre (MSC)

Home Location Register (HLR)
HLR
EIR
AUC
Visitor Location Register (VLR)

Authentication Centre (AUC)
Network Switching Subsystem
Equipment Identification Register

(EIR)
IP NGN_Mobility
Cisco Public
69
NSS Components
Trunk gateway to other operator
Prefix routing
Deliver SMS from subscriber to SMSC
Generate billing
Support supplementary services such as conf call, call hold, etc
MSC
Authenticate ME
3 ME lists: white, gray, black lists
Temporary database of subscribers

Collocated with MSC
Current location of subscriber: LAC
EIR
VLR
AuC
Authenticate SIM card
Generate triplets for authentication
IP NGN_Mobility
Cisco Public
HLR
Central database with detail subscriber info
Current location of subscriber: VLR
70
HLR & VLR Database
HLR
VLR
IMSI & MSISDN
IMSI & MSISDN
Facilty and restriction
Facility and restriction
VLR address
HLR address
LAI (Location Area ID)
TMSI
Triple (RAND, SRES, Kc)
IP NGN_Mobility
Cisco Public
71
OSS Components
OSS provides monitoring &

maintenance functions
OSS Components :
1. Operation Maintenace
Server for BSS (OMCR)
and NSS (OMCS)
OMCS
OMCR
2. Operation Maintenance Terminal (OMT)
Operation and Maintenance Subsystem

Sometime there is also OMC-T (OMC for Transmission)
IP NGN_Mobility
Cisco Public
72
OSS Functions
To monitor GSM network 24x7 and be alert for alarms/network

problems
To do OAM from one central position to make works done faster
To capture measurements for generated parameters/counters to

analyze network performance
IP NGN_Mobility
Cisco Public
73
PCU Functions
Packet Control Unit
BTS + CCU
PCU
Relay function
SGSN
Abis
Agprs
BSC
synchronous
RLC blocks
BSSGP
TRAU frames
management
Frame Relay
Radio part
IP NGN_Mobility
Cisco Public
Gb
asynchronous
Packet part
74
SGSN Functions
Serving Gprs Support Node
SGSN
DNS
HLR
Mobility Management:
MS state: Idle, Ready, Standby
PDP Context
Gb
Frame relay
Ciphering
Tunneling:
Compression
GTP
PCUSN
IP NGN_Mobility
Gn
IP backbone
GGSN
Cisco Public
75
GGSN Functions
Gateway Gprs Support Node
DNS
DHCP
Charging
Gateway
GGSN
Billing
Authentication
IP address management
Gn
Tunneling:
Tunneling:
GTP
IPsec
Gi
Internet
Intranets
Firewall
IP NGN_Mobility
Cisco Public
76
PDP Context
PDP=Packet Data Protocol
Protocol used to transmit
data between mobile and
external network
PDP context has to be
established before data
transfer
PDP context data is stored
in MS, SGSN and GGSN
IP NGN_Mobility
Cisco Public
Info in a PDP :
PDP Type
PDP Address
Dynamic Address
VPLMN Address Allowed
APN Requested
APN Subscribed
APN in Use
QoS Profile Requested
QoS Profile Subscribed
QoS Profile Negotiated
Traffic Flow Template
77
Other Supporting Functions

VAS elements (SMSC, MMSC, VMSC, RBT, USSD
GW, anti SPAM SMSC, etc)
IN/Billing Centre
STP, SG
IP NGN_Mobility
Cisco Public
78
GSM Numbering
IP NGN_Mobility
Cisco Public
79
Numbering in GSM

IP NGN_Mobility
Location Area Identity (LAI)

Cell Global Identification (CGI)
International Mobile Equipment Identity (IMEI)
Personal Identification Number (PIN)
International Mobile Subscriber Identity (IMSI) E.212
Mobile GT (E.214)
Mobile Station ISDN Number (MSISDN) E.164
Mobile Subscriber Roaming Number (MSRN)
Temporary Mobile Subscriber Identity (TMSI)
Cisco Public
80
Location Area Identity (LAI)

LAI is used for location area identity, location update, and
paging purposes
LAI =
MCC + MNC + LAC
LAC (Location Area Code) is

a 5 decimal digit code
identifying one area in a
GSM Network
MNC (Mobile Network Code) is a 2
decimal digit code identifying one
specific GSM network within one
country
MCC (Mobile Country Code) is a 3
specific country
IP NGN_Mobility
Cisco Public
81
Cell Global Identification (CGI)

CGI is used for cell identification
CGI =
MCC + MNC + LAC +
CI
CI (Cell ID) is 5 decimal digit

code to identify a BTS
IP NGN_Mobility
Cisco Public
82
International Mobile Equipment Identity (IMEI)

IMEI is used as a unique ME identifier to be used in GSM
network to validate ME, printed inside each ME,
administrated in EIR, and can be checked by dialing
*#06#
IMEI =
TAC + SNR + Spare

15 digits
1 decimal digit
SNR (Serial NumbeR), a 6 decimal digit
code, is an individual serial number
uniquely identifying each equipment
within the TAC
TAC (Type Allocation Code), an 8
decimal digit code, indicates GSMAapproved organization that registered a
given mobile device, and allocated the
model a unique code
IP NGN_Mobility
Cisco Public
83
First 2 Digits of TAC

Code
Group/indication
Origin
00
Test IMEI
Nations with 2-digit CCs
01
PTCRB
United States
02-09
Test IMEI
Nations with 3-digit CCs
10
DECT devices
30
Iridium
United States (Satellite Phones)
33
DGPT
France
35
BABT
United Kingdom
44
BABT
United Kingdom
45
NTA
Denmark
49
BZT/BAPT
Germany
50
BZT ETS
Germany
51
Cetecom ICT
Germany
52
Cetecom
Germany
53
TUV
Germany
54
IP NGN_Mobility
Phoenix Test Lab
Cisco Public
Germany
84
International Mobile Subscriber Identity (IMSI)

IMSI, an ITU E.212 numbering standard, which consists
of 14-15 decimal digits, is a unique code identifying SIM
card, stored in SIM, HLR, and VLR
IMSI =
MCC + MNC + MSIN

14 - 15 digits
MSIN (Mobile Subscriber
Identification Number) identifies the
mobile subscriber within a PLMN.
This is not the same with MSISDN
MNC (Mobile Network Code) is a 2
specific GSM network within one
country
MCC (Mobile Country Code) is a 3
specific country
IP NGN_Mobility
Cisco Public
85
IMSI Numbers in Kenya

IMSI Number Range
(MCC-MNC)
639-02
639-03
639-05
639-07
Additional Network
Network Operator Status Info
Safaricom
active as per 1997-04-01
Celtel
Econet
Orange Mobile
Source: http://www.numberingplans.com
IP NGN_Mobility
Cisco Public
86
Mobile GT (E.214)
Mobile GT, derived from IMSI, maximum 15 decimal
digits, is normally used for location update purpose
between VLR and HLR. It is a combination of E.212
and E.164
Part of E.164
MGT =
Part of E.212
+ NDC + MSIN
CC
Max 15 digits
MSIN (Mobile Subscriber
Identification Number) identifies the
mobile subscriber within a PLMN.
This is not the same with MSISDN
NDC (Network Destination Code) is
a national E.164 network code
CC (Country Code), consists of 1-3

decimal digits
IP NGN_Mobility
Cisco Public
87
MSISDN (E.164)
E.164, maximum 15 digit decimal, defines the
international public telecommunication numbering plan
used in the PSTN and some other data networks.
E.164 =
+ NDC + SN
CC
Max 15 digits
SN (Subscriber number)
NDC (Network Destination Code) is

a national E.164 network code
CC (Country Code), consists of 1-3

decimal digits
IP NGN_Mobility
Cisco Public
88
E.164 Number for Mobile Operators in Kenya
E.164 Numbers
+254710 - 15
+254720-29
+254732-38
+254750-52
+254770
+254772-73
Network
Safaricom Ltd
Safaricom Ltd
Celtel Kenya Ltd
Econet Wireless Kenya Ltd
Telkom Kenya Ltd (Orange)
Telkom Kenya Ltd (Orange)
Source: http://www.numberingplans.com
IP NGN_Mobility
Cisco Public
89
Mobile

IP NGN_Mobility
Subscriber Roaming Number (MSRN)
The Mobile Station Roaming Number is an E.164 defined telephone

number used to route telephone calls in a mobile network from a GMSC
(Gateway Mobile Switching Centre) to the target MSC
It can also be defined as a directory number temporarily assigned to a
mobile for a mobile terminated call
A MSRN is assigned for every mobile terminated call, not only the calls
where the terminating MS lives on a different MSC than the originating MS
Cisco Public
90
Temporary

IP NGN_Mobility
Mobile Subscriber Identity (TMSI)
The "Temporary Mobile Subscriber Identity" (TMSI) is the identity

that is most commonly sent between the mobile and the network.
It is a randomly allocated number that is given to the mobile, the
moment it is switched on
The number is local to a location area, and so it has to be updated,
each time the mobile moves to a new geographical area.
Cisco Public
91
Mobility
IP NGN_Mobility
Cisco Public
92
Mobility Management
IP NGN_Mobility
Paging
Roaming
Location Registration
IMSI Attach / Detach
Handover
Cisco Public
93
Search for MS when there is incoming call/SMS

Paging is done to all cells within one location area
MS detects paging and sends paging respond
IP NGN_Mobility
Cisco Public
94
Roaming is defined as the ability for a cellular customer to automatically

make & receive voice calls, send & receive data, or access other services
when travelling outside the geographical coverage area of the home
network, by means of using a visited network.
Roaming is technically supported by mobility management, authentication
and billing procedures. Establishing roaming between network operators is
based on - and the commercial terms are contained in - Roaming
Agreements.
If the visited network is in the same country as the home network, this is
known as National Roaming. If the visited network is outside the home
country, this is known as International Roaming (the term Global Roaming
has also been used).
IP NGN_Mobility
Cisco Public
95
= Network X GSM Subscriber
IP NGN_Mobility
Cisco Public
96
HLR 10 ( Jakarta )
* 0816100474
* MSCSingapore
MSC Jakarta 21
MSC/VLR 1
* 0816100474
MSC/VLR 2
* 0816100474
Indonesia
IP NGN_Mobility
MSC/VLR Singapore
* 0816100474
Singapore
Cisco Public
97
Technically, roaming is always used wherever MS is attached
Roaming needs network resources
One of relatively expensive investment in GSM compared to PSTN
MSC creates billing for all roaming cases
Marketing, Finance, and Management strategies decide what kind of

roaming treatment will be billed to their subscribers
Years ago, postpaid subscribers need to pay for roaming, but nowadays,
almost every cellular network provides free roaming for both postpaid
and prepaid subscribers
IP NGN_Mobility
Cisco Public
98
A Method done by GSM system to continously update current

location of an MS
There are 2 procedures :

Location Update
Location Cancellation
IP NGN_Mobility
Cisco Public
99
IMSI detach is the process of detaching an MS from the mobile network to which it
was connected. The IMSI detach procedure informs the network that the Mobile
Station is switched off or is unreachable.
IMSI attach procedure is required for the MSC/VLR to register the MS in the network.
If the MS has changed Location Area (LA) while it was powered off the IMSI attach
procedure will lead to a Location Update
In the GSM air interface network specific information are broadcast on specific
broadcast channels. This information include whether periodic Location update is
enabled. If it is enabled the Mobile Station must send location update requests at
time intervals specified by the network. As stated above when the Mobile Station
was switched off without properly completing the IMSI detach procedure if periodic
Location update is in use the network will soon detect that the Mobile Station as
switched off or unreachable. In this situation the VLR performs an implicit IMSI
detach.
IP NGN_Mobility
Cisco Public
100
the process of transferring an ongoing call or data session from one channel
connected to the core network to another
Why handover takes place :

when the phone is moving away from the area covered by one cell and entering
the area covered by another cell the call is transferred to the second cell in
order to avoid call termination when the phone gets outside the range of the
first cell;
when the capacity for connecting new calls of a given cell is used up and an
existing or new call from a phone, which is located in an area overlapped by
another cell, is transferred to that cell in order to free-up some capacity in the
first cell for other users, who can only be connected to that cell;
IP NGN_Mobility
Cisco Public
101
Internal Handover
Intra-cell Handover: between frequency
within a cell
Inter-cell Handover: between cell in a BSC
External Handover
Intra-MSC Handover: between BSC within
an MSC
Inter-MSC Handover: between MSC
IP NGN_Mobility
Cisco Public
102
Security and
Authentication in GSM
IP NGN_Mobility
Cisco Public
103
Security & Authentication in GSM

GSM Recommendations
Security Aspects
02.09, "Security Aspects"

02.17, "Subscriber Identity Modules"
03.20, "Security Related Network
Functions
03.21, "Security Related Algorithms"
subscriber identity authentication

subscriber identity confidentiality
signaling data confidentiality
user data confidentiality
GSM Security
and
Authentication
IP NGN_Mobility
3 system elements
Parameters Involved
Subscriber Identity Module (SIM)

GSM handset or MS
GSM network
IMSI
- PIN, PUK
Ki
- White, Gray, Black ME
Kc
TMSI
Algorithm A3, A5, A8
Triplets (RAND, SRES, Kc)
Cisco Public
104
Algorithm A3,A5 & A8

A3, A5, and A8
Ki
A3
SRES
RAND
A8
Voice /data
Ki is 128 bits
RAND is 128 bits
SRES is 32 bits
Kc is 64 bits
IP NGN_Mobility
Cisco Public
Kc
A5
Ciphering
105
Questions?!?
IP NGN_Mobility
Cisco Public
106

Day1a KTC PDF

Загружено:

Сведения о документе

Оригинальное название

Авторское право

Доступные форматы

Поделиться этим документом

Поделиться или встроить документ

Параметры публикации

Этот документ был вам полезен?

Это неприемлемый материал?

Авторское право:

Доступные форматы

Day1a KTC PDF

Загружено:

Авторское право:

Доступные форматы

Introduction to GSM

2006 Cisco Systems, Inc. All rights reserved.

Some Basic Rules

Switch off/silent phone

Lets start and enjoy this class

Ask when unclear

2006 Cisco Systems, Inc. All rights reserved.

2006 Cisco Systems, Inc. All rights reserved.

2006 Cisco Systems, Inc. All rights reserved.

Nordic Mobile Telephony (NMT)

Total Access Communications System (TACS)

2006 Cisco Systems, Inc. All rights reserved.

2006 Cisco Systems, Inc. All rights reserved.

North American CDMA (cdmaOne)

Qualcomm demo in 1989

First deployment in Hong Kong late 1994

2006 Cisco Systems, Inc. All rights reserved.

Evolution fixes bugs and adds data

All variants designed for TIA IS-41 core networks (ANSI

2006 Cisco Systems, Inc. All rights reserved.

Services launched 1991

GSM is dominant world standard today

2006 Cisco Systems, Inc. All rights reserved.

FDMA Frequency Division Multiple Access

2006 Cisco Systems, Inc. All rights reserved.

One timeslot = 0.577 ms

One TDMA frame = 8 timeslots

2006 Cisco Systems, Inc. All rights reserved.

All users share same (large) block of spectrum

Almost all accepted 3G radio standards are based on

2006 Cisco Systems, Inc. All rights reserved.

Multi-Access Radio Techniques

Courtesy of Petri Possi, UMTS World

2006 Cisco Systems, Inc. All rights reserved.

Increased capacity (more spectrally efficient)

2006 Cisco Systems, Inc. All rights reserved.

GSM History part 1/5

2006 Cisco Systems, Inc. All rights reserved.

GSM History part 2/5

2006 Cisco Systems, Inc. All rights reserved.

GSM History part 3/5

2006 Cisco Systems, Inc. All rights reserved.

GSM History part 4/5

2006 Cisco Systems, Inc. All rights reserved.

GSM History part 5/5

2006 Cisco Systems, Inc. All rights reserved.

975 1034 1083 1135 1204 1262 1263 1278 1267

961 1157 1417 1763 2219 2757 3305 4100

2006 Cisco Systems, Inc. All rights reserved.

Mobile Standard Organizations

2006 Cisco Systems, Inc. All rights reserved.

National and regional standards bodies are

3G Partnership Projects (3GPP & 3GPP2)

2006 Cisco Systems, Inc. All rights reserved.

The role of 3GPP

2006 Cisco Systems, Inc. All rights reserved.

2006 Cisco Systems, Inc. All rights reserved.

Where the work is done

* Participants in TSG and WG meetings over the last year

Plenary meetings every 3 months, approve specifications and the Freezing of

2006 Cisco Systems, Inc. All rights reserved.

Spanning the Generations...

3GPP Specified Radio Interfaces