Вы находитесь на странице: 1из 100

Traffic management

Objectives
At the end of the module the student is able to:
Explain the mobility concept (handover, location update,
paging)
Describe a simplified call setup case
List the three numbers in the authentication triplet and explain
the use for each of them
List at least four teleservices
List and explain the operation of at least four supplementary
services offered by GSM networks
without using any references.

1 NOKIA CTXX1299en_4.0 / 03.12.2002 / Bjrn Wigforss


Registration of a subscriber

2 NOKIA CTXX1299en_4.0 / 03.12.2002 / Bjrn Wigforss


Updating subscriber data

Embassy

3 NOKIA CTXX1299en_4.0 / 03.12.2002 / Bjrn Wigforss


Provision of services

4 NOKIA CTXX1299en_4.0 / 03.12.2002 / Bjrn Wigforss


Turning on a mobile phone

BTS

5 NOKIA CTXX1299en_4.0 / 03.12.2002 / Bjrn Wigforss


GSM databases (1)

Subscriber Identity Module (SIM)


Information in a SIM card:
Security handling
information
Subscriber identity
Temporary network
information
Access rights (nat, intl)
Preferred networks
Prohibited networks

6 NOKIA CTXX1299en_4.0 / 03.12.2002 / Bjrn Wigforss


GSM databases (2)
Home Location register (HLR)
Permanent data HLR

Regular update of
subscribers current VLR

Visitor Location register (VLR)


Temporary data
VLR
Kept as long as subscriber is
within its coverage area
Updated from the HLR
MSC
Always associated with a
Mobile Services Switching
Centre (MSC)

7 NOKIA CTXX1299en_4.0 / 03.12.2002 / Bjrn Wigforss


Databases in a GSM network

GSM network

HLR

VLR
MSC

SIM

8 NOKIA CTXX1299en_4.0 / 03.12.2002 / Bjrn Wigforss


Location update
The Mobile Station monitors the information broadcast by
the network.

The Mobile Station stores the current location area identity


in the SIM card.

The Mobile Station continues to monitor the broadcast


information.

If the location area identity being broadcast by the network


is other than the one stored in the SIM, the Mobile Station
starts the location update procedure.

9 NOKIA CTXX1299en_4.0 / 03.12.2002 / Bjrn Wigforss


Elements involved in a location update

HLR

VLR VLR
MSC
MSC (new)
(old)
Location
Update

Mobile moves SIM

10 NOKIA CTXX1299en_4.0 / 03.12.2002 / Bjrn Wigforss


Location update procedure - first time
MS BSS MSC VLR HLR
LOCATION UPDATE REQUEST

REQUEST SUBSCRIBER ID

SEND SUBSCRIBER ID

REQUEST AUTHENTICATION INFO

SEND AUTHENTICATION INFO


AUTHENTICATION

AUTHENTICATION RESPONSE
LOCATION UPDATE MESSAGE

ACKNOWLEDGEMENT, SUBSCRIBER INFORMATION


LOCATION UPDATE OK

ACKNOWLEDGEMENT

11 NOKIA CTXX1299en_4.0 / 03.12.2002 / Bjrn Wigforss


Call set-up in a GSM network
PSTN originated call (1)

MSISDN PSTN

The dialled number is Mobile Subscriber International ISDN Number


(MSISDN)

MSISDN = CC + NDC + SN
CC: Country Code
NDC: National Destination Code
SN: Subscriber Number
358505527268
358 = Country Code (Finland)
50 = National Destination code (Radiolinja)
12 NOKIA
5527268 = Subscriber Number
CTXX1299en_4.0 / 03.12.2002 / Bjrn Wigforss
Call set-up in a GSM network (2)
The PSTN routes the call to a
GSM network
HLR
The MSC connected to the PSTN
is known as the Gateway MSC
GMSC (GMSC)
The GMSC analyses the received
PSTN MSISDN VLR
MSISDN
The only database that knows
where a GSM subscriber is at any
given moment is the HLR
GSM
Network The GMSC requests the HLR for
some routing information to
know where to route the call
This procedure is known as HLR
Enquiry
13 NOKIA CTXX1299en_4.0 / 03.12.2002 / Bjrn Wigforss
Call set-up in a GSM network (3)

The HLR looks up its IMSI = MCC + MNC + MSIN


database. IMSI: International Mobile
HLR database contents: Subscriber Identity
MCC: Mobile Country Code (3 digits)
MSISDN: 358505527268 MNC: Mobile Network Code (2
digits)
IMSI: 244052200002345
MSIN: Mobile Subscriber Identity
VLR address: xyz
Number (max 10 digits)
Subscriber data: Services....

244052200002345
244: MCC of Finland
05: MNC of Radiolinja
2200002345: MSIN

14 NOKIA CTXX1299en_4.0 / 03.12.2002 / Bjrn Wigforss


Call set-up in a GSM network (4)

HLR

Gateway
MSC Target
MSC
PSTN VLR
VLR

GSM
Network

Elements involved in a call set-up inside the GSM network

15 NOKIA CTXX1299en_4.0 / 03.12.2002 / Bjrn Wigforss


Call set-up in a GSM network (5)
The HLR takes the VLR address
of the subscriber from its
database.
HLR
The HLR sends a routing
information request message to
Routing
information the target MSC/VLR.
request
message The target MSC/VLR allocates a
Gateway MSC
Mobile Subscriber Roaming
Number (MSRN) for this call.
VLR MSRN = CC + NDC + SN
The format of the MSRN is the
VLR same as the MSISDN. The term
SN in the MSISDN points to a
database location in the HLR; in
case of MSRN it points a
Target MSC database location in the VLR.
The MSRN also has sufficient
information to enable the GMSC
16 NOKIA CTXX1299en_4.0 / 03.12.2002 / Bjrn Wigforss
to route the call to the target MSC.
Call set-up in a GSM network (6)

The target MSC forwards the


HLR MSRN to the HLR.
The HLR forwards this to the
originating MSC.
358 50 456456 MSRN No.
to HLR The originating MSC analyses the
Gateway MSC
MSRN.
The telephone number type of
format enables the call to be
VLR
routed to the destination MSC,
wherever in the world it may be.
VLR

Target MSC

17 NOKIA CTXX1299en_4.0 / 03.12.2002 / Bjrn Wigforss


Release 4 PSTN originated call-setup
(simplified)
HLR
PAGING IMSI
MSISDN
MSRN MSRN
VLR
MSS B BICC
BSC VMSS target MSISDN MSS A
BNC-ID,
MGW A address
Action: bearer establishment
GSM transport type
Bearer confirmation
codecs

H.248 H.248 MSISDN


sp

MGW selection
ee

BNC-ID MGW selection


ch

Context ID BNC-ID
Codecs Context ID
PSTN/ISDN
pa

Bearer confirmation Bearer confirmation


Etc.
th

RNC th
pa
ech
e
MGW sp
User plane setup signaling
MSISDN
ATM MSISDN
WCDMA speech path
MGW MGW
B A

18 NOKIA CTXX1299en_4.0 / 03.12.2002 / Bjrn Wigforss

Fixed slide used in course documentation


Release 4 PSTN originated call-setup
(simplified)
HLR
PAGING IMSI
MSISDN
MSRN Context ID
MSRN
Paging response Codecs
VLR Bearer
etc.confirmation

MSS B BICC
BSC VMSS target MSISDN MSS A
BNC-ID,
MGW A address
Action: bearer establishment
GSM transport type

H.248 H.248 MSISDN


sp

MGW selection
ee

BNC-ID MGW selection


ch

Context ID BNC-ID
Codecs Context ID
Context ID
Bearer confirmation PSTN/ISDN
pa

Etc.
th

RNC th
h pa
MGW eec
User plane setup signaling
sp
MSISDN
ATM MSISDN
WCDMA speech path
MGW MGW
B A

19 NOKIA CTXX1299en_4.0 / 03.12.2002 / Bjrn Wigforss

Animated slide
Network Subsystem summary (part
1)
A ir A
M SC VL R

M SC VL R HLR

O & M

Elements:
MSC, VLR, HLR
Functions
Call control
Mobility management
Signalling (towards BSS, other networks, other NSS
elements)
Subscriber data handling
Locating a subscriber for mobile terminated calls
20 NOKIA CTXX1299en_4.0 / 03.12.2002 / Bjrn Wigforss
Location areas
The MSC/VLR area is divided
into small areas called Location
Reception Restaurant Bar Pool areas.
A subscriber can move within
this area without having to make
a generic location update
(explained later).
The maximum size of an LA can
be one MSC area and the
minimum size is one cell.
LA 5 Paging is done in all cells of the
LA where the subscriber is
LA 1 currently located.
LA 4
M SC VL R
LAI = MCC + MNC + LAC
LAI = Location Area Identity
MCC = Mobile Country Code
LA 2 MNC = Mobile Network Code
LA 3
LAC = Location Area Code
21 NOKIA CTXX1299en_4.0 / 03.12.2002 / Bjrn Wigforss
Base Station Subsystem
BSC
TC

BTS BSC

TC
BTS

BTS

Elements:
Base Station Controller (BSC), Base Transceiver Station (BTS),
Transcoder (TC)
Functions:
Radio path control, BTS and TC control, synchronisation with MSC
Air and A interface signalling, connection establishment MS-NSS
Mobility management, speech transcoding
Collection of statistical data
22 NOKIA CTXX1299en_4.0 / 03.12.2002 / Bjrn Wigforss
Traffic times in different areas

Marketplace Industrial area

Corresponding traffic times

23 NOKIA CTXX1299en_4.0 / 03.12.2002 / Bjrn Wigforss


MSC - BSC - BTS connections

BTS

BSC BTS

MSC

24 NOKIA CTXX1299en_4.0 / 03.12.2002 / Bjrn Wigforss


Paging process

Location Area

Paging Paging

BTS BTS

Mobile responds
to paging Paging

BTS

25 NOKIA CTXX1299en_4.0 / 03.12.2002 / Bjrn Wigforss


Simplified steps of a call set-up
in a GSM network
A- GMSC HLR MSC/VLR
PSTN
Subscriber

CALL SETUP (MSISDN)


ANALYSE NUMBER
CALL SETUP (MSISDN)

MSISDN

IMSI

MSRN
MSRN

CALL SETUP (MSRN)


PAGING

26 NOKIA CTXX1299en_4.0 / 03.12.2002 / Bjrn Wigforss


Mobile originated call
The Mobile Station user dials a number.
The serving MSC analyses the calling subscriber
data. Depending on the subscriber data, the MSC
will:
authorise or deny the use of the network
activate the requested service
route the call.
If the dialled number is an MSISDN of another
Mobile Station belonging to the same network, an
HLR enquiry is performed to obtain the MSRN.
The procedure is same as that of a PSTN originating
call.
If the dialled number is any other number, the call
is routed out to the Public Switched Telephone
Network (PSTN) via the Gateway MSC.
27 NOKIA CTXX1299en_4.0 / 03.12.2002 / Bjrn Wigforss
Simplified steps of a mobile originated
call
EXC GMSC HLR MSC VLR BSS MS

1. channel assignment

2. security procedures

3. call setup

4. check services etc.

5. all ok

6. call is proceeding

7. traffic channel allocated

8. set up the call

9. call set up complete


10. alert

11. B answers

28 NOKIA CTXX1299en_4.0 / 03.12.2002 / Bjrn Wigforss


Simplified Steps of a MO-MT Call
BSS NSS
channel assignement
MSC

MOC

MTC

29 NOKIA CTXX1299en_4.0 / 03.12.2002 / Bjrn Wigforss


Simplified Steps of a MO-MT Call
BSS NSS
authentication
MSC

MOC

MTC

30 NOKIA CTXX1299en_4.0 / 03.12.2002 / Bjrn Wigforss


Simplified Steps of a MO-MT Call
BSS NSS
call set-up
MSC/VLR

MOC

MTC

31 NOKIA CTXX1299en_4.0 / 03.12.2002 / Bjrn Wigforss


Simplified Steps of a MO-MT Call
BSS NSS
call proceeding
MSC/VLR

MOC

MTC

32 NOKIA CTXX1299en_4.0 / 03.12.2002 / Bjrn Wigforss


Simplified Steps of a MO-MT Call
BSS NSS
traffic channel MSC/VLR
allocation
MOC

MTC

33 NOKIA CTXX1299en_4.0 / 03.12.2002 / Bjrn Wigforss


Simplified Steps of a MO-MT Call
BSS NSS
MSC/VLR call set-up (IAM)
MOC

MTC

34 NOKIA CTXX1299en_4.0 / 03.12.2002 / Bjrn Wigforss


Simplified Steps of a MO-MT Call
BSS NSS PLMN
MSC/VLR call set-up (IAM) exchange

MOC

MTC
GMSC
exchange

NSS in HPLMN
35 NOKIA CTXX1299en_4.0 / 03.12.2002 / Bjrn Wigforss
Simplified Steps of a MO-MT Call
BSS NSS PLMN
MSC/VLR exchange

MOC

HLR

MSRN?

MTC
MSC/VLR
GMSC
exchange

NSS in VPLMN NSS in HPLMN


36 NOKIA CTXX1299en_4.0 / 03.12.2002 / Bjrn Wigforss
Simplified Steps of a MO-MT Call
BSS NSS PLMN
MSC/VLR exchange

MOC

HLR

MSRN

MTC
MSC/VLR
GMSC
exchange

NSS in VPLMN NSS in HPLMN


37 NOKIA CTXX1299en_4.0 / 03.12.2002 / Bjrn Wigforss
Simplified Steps of a MO-MT Call
BSS NSS PLMN
MSC/VLR exchange

MOC

HLR

MSRN

MTC
MSC/VLR
GMSC
exchange
call
set-up

NSS in VPLMN NSS in HPLMN


38 NOKIA CTXX1299en_4.0 / 03.12.2002 / Bjrn Wigforss
Simplified Steps of a MO-MT Call
BSS NSS PLMN
MSC/VLR exchange

MOC

HLR
BSS

MSRN
Paging, MTC
service request, MSC/VLR
GMSC
authentication, exchange

call confirmation
channel allocation

NSS in VPLMN NSS in HPLMN


39 NOKIA CTXX1299en_4.0 / 03.12.2002 / Bjrn Wigforss
Simplified Steps of a MO-MT Call
BSS NSS PLMN
MSC/VLR exchange

ACM MOC

HLR
BSS

ring
MTC
MSC/VLR
GMSC
Alerting exchange
ACM
ACM ACM

NSS in VPLMN NSS in HPLMN


40 NOKIA CTXX1299en_4.0 / 03.12.2002 / Bjrn Wigforss
Simplified Steps of a MO-MT Call
BSS NSS PLMN
MSC/VLR exchange

ANM MOC

HLR
BSS

Hoo
k off MTC
MSC/VLR
GMSC
Connect exchange
ANM
ANM ANM

NSS in VPLMN NSS in HPLMN


41 NOKIA CTXX1299en_4.0 / 03.12.2002 / Bjrn Wigforss
Simplified Steps of a MO-MT Call
BSS NSS PLMN
MSC/VLR exchange

MOC

HLR
BSS

MTC
MSC/VLR
GMSC
exchange

NSS in VPLMN NSS in HPLMN


42 NOKIA CTXX1299en_4.0 / 03.12.2002 / Bjrn Wigforss
Types of location updates
Power On
Also known as IMSI Attach
and
Location Registration.
M SC
Done every time a Mobile VL R

Station LA 2
is switched on. LA 1

Generic
Done every time a Mobile
Station
changes a location area.
Periodic
Performed after a preset timer
expires, since the last
transaction
with the network.
Timer value is dependent on the
43 NOKIA network operator.
CTXX1299en_4.0 / 03.12.2002 / Bjrn Wigforss
Generic location update procedure
MS BSS MSC VLRnew VLRold HLR
1. channel assignment

2. location update request

3. request subscriber identity

4. send subscriber identity and security information


5. security procedures

6. update HLR

7. acknowledgement, subscriber information

8. cancel old location

9. location cancelling accepted

10. location update acknowledgement, new TMSI

11. TMSI acknowledgement

44 NOKIA CTXX1299en_4.0 / 03.12.2002 / Bjrn Wigforss


Handovers
Handover due to traffic reasons
When the capacity of a cell nears its maximum, mobile
stations in the periphery of the cell may be handed over to
neighbouring cell with lower traffic load.
The MSC starts the procedure.

Handover due to signal quality and strength


When a mobile subscriber is moving during a call, he may
travel from one cell to another.
Frequency resources of previous cells can not be used any
more.
The mobile station is handed over to the new cell.
The BSC controlling the current cell makes the decision to
perform a handover.
There are four types of these handovers.
45 NOKIA CTXX1299en_4.0 / 03.12.2002 / Bjrn Wigforss
Intra cell - Intra BSC handover

Air A

BSC TC
BTS

l
hanne
O ld C

n el
Chan
N ew

46 NOKIA CTXX1299en_4.0 / 03.12.2002 / Bjrn Wigforss


Inter cell - Intra BSC handover

Air A

BTS BSC TC

BTS

Old Cell / BTS New Cell / BTS

47 NOKIA CTXX1299en_4.0 / 03.12.2002 / Bjrn Wigforss


Inter cell - Inter BSC handover
New Cell / BTS
Air A

BSC TC
BTS

MSC VLR

BSC TC
BTS

Old Cell / BTS

48 NOKIA CTXX1299en_4.0 / 03.12.2002 / Bjrn Wigforss


Inter MSC handover (1)
New Cell / BTS
Air A

BSC TC
BTS
MSC VLR

BSC TC
BTS MSC VLR

Old Cell / BTS

49 NOKIA CTXX1299en_4.0 / 03.12.2002 / Bjrn Wigforss


Inter MSC handover (2)
The source MSC is known as the Anchor MSC.
The call is routed from the source MSC to the target MSC.
A routing number is needed to route a call from one MSC
to another MSC.
The source MSC requests the target MSC for a Handover
Number (HON). The target MSC allocates one and gives it
to the source MSC.
The format is the same as the MSRN.

HON = CC + NDC + SN

50 NOKIA CTXX1299en_4.0 / 03.12.2002 / Bjrn Wigforss


Inter MSC handover (3)
MS BSSold MSCold MSCnew BSSnew MS (after HO)

1. measurement reports
2. handover required

3. request HON
4. request for radio resources

5. radio resources reserved

6. provide HON and target cell info

7. set up speech connection (HON)

8. handover command
9. handover complete

10. handover complete


11. connect

12. release old connections

51 NOKIA CTXX1299en_4.0 / 03.12.2002 / Bjrn Wigforss


Intersystem handover

BSC

GSM900/1800
Inter-System Handover
MSC

RNC

WCDMA
WCDMAFDD
FDD

52 NOKIA CTXX1299en_4.0 / 03.12.2002 / Bjrn Wigforss


Charging

Installation fee

Renting of the service

Use of the network

What to charge? Different charging packages.

53 NOKIA CTXX1299en_4.0 / 03.12.2002 / Bjrn Wigforss


Factors affecting the price of a call

Type of basic service


Duration of the call
Time of the call
Destination of the call
Origin of the call
Use of networks
Type of supplementary service
Use of radio resources
Roaming leg

54 NOKIA CTXX1299en_4.0 / 03.12.2002 / Bjrn Wigforss


Whom to charge?

Where is the
called party?
Bill to subscriber

Billing
BSC
BC
Transfer of
Charging data PSTN
MSC HLR
MSC BC
PLMN 2 Path of
Charging the call
PLMN 1

Calling Party

55 NOKIA CTXX1299en_4.0 / 03.12.2002 / Bjrn Wigforss


Collection of charging data
Charging depends on many factors.
The MSC that handles the call collects all information which could be
the basis for charging.
This collected information call is stored in Charging Data Records
(Toll Tickets).

BSC
GMSC

PSTN

BTS

HLR

Charging Data Record

56 NOKIA CTXX1299en_4.0 / 03.12.2002 / Bjrn Wigforss


Elements involved in call handling
HLR

GMSC

BSC
BTS
PSTN

BSC
MSC

57 NOKIA CTXX1299en_4.0 / 03.12.2002 / Bjrn Wigforss


Transfer of charging data
Charging records are stored in the MSC where they are
collected.
When sufficient charging records have been collected they
are transferred in one bulk to the Billing Centre.
The Billing Centre is responsible for producing the bills for
the subscribers based on the information contained in the
Charging Record. HLR

GMSC

MSC
BTS
PSTN BSC

X.25 or
Ethernet

Billing Centre (BC)


58 NOKIA CTXX1299en_4.0 / 03.12.2002 / Bjrn Wigforss
Prepaid concept
Check account to determine if money left
Decrease the account with the reserved amount
Update reserved money threshold

VMSC SSP SCP

VLR External prepaid


ApplyChargingReport voucher database
Charging center

ApplyCharging

59 NOKIA CTXX1299en_4.0 / 03.12.2002 / Bjrn Wigforss


GSM network architecture
Base Station Subsystem Network Management Subsystem
Mobile Stations
Base Station
Controller Database Server Network
Planning
Data System
Communication Workstations
Network
Network
Measurement
Base System
Transceiver Communications
Stations Server

Network Switching Subsystem


Home Location Register/
Authentication Centre/
Equipment Identity
Register TCP/IP

Data Communications
Digital Cross Server
Connect
PSTN/ISDN
Transcoder Mobile Switching Centre/
Submultiplexer Visitor Location Register
Voice
mail

Short Message IN Service Control Point


Service Centre
A-Interface Air Interface X.25 Interface Abis Interface

60 NOKIA CTXX1299en_4.0 / 03.12.2002 / Bjrn Wigforss


New elements in the NSS and the BSS
Network Switching Subsystem (NSS)
Authentication Centre (AC)
Equipment Identity Register (EIR)
Both are used in security issues.

Base Station Subsystem (BSS)


Transcoder (TC)
Responsible for transcoding user speech
Conversion of speech bit rate from 13kbits/s to
64 kbits/s and vice versa.
(Enhanced Full Rate and Full Rate)

61 NOKIA CTXX1299en_4.0 / 03.12.2002 / Bjrn Wigforss


Position of the transcoder

Transcoder and
Submultiplexer (TCSM)
BSC
MSC
TC

TC
SM2M
TC

TC

A ter Interface

A ter Interface
A Interface

62 NOKIA CTXX1299en_4.0 / 03.12.2002 / Bjrn Wigforss


Network Management Subsystem
(NMS/2000)
Unix
Workstations
HLR/AC/EIR
MSC/VLR Database and
Communications
Servers Router

NMS/2000

TCSM
BSC
GSM Network

Data
Communications
Network (DCN)

63 NOKIA CTXX1299en_4.0 / 03.12.2002 / Bjrn Wigforss


Functions of NMS (1)
Fault management
Collection of alarm reports from network
elements.
One point for managing all fault situations.

64 NOKIA CTXX1299en_4.0 / 03.12.2002 / Bjrn Wigforss


Functions of NMS (2)
Configuration management
Management of radio network configuration.
Maintain up to date information on the network
element status.

65 NOKIA CTXX1299en_4.0 / 03.12.2002 / Bjrn Wigforss


Functions of NMS (3)
Performance management
Collection of measurement data from network
elements.
Produce performance result from raw data.

66 NOKIA CTXX1299en_4.0 / 03.12.2002 / Bjrn Wigforss


Security issues
Authentication
Verification of the subscriber.
Ciphering
Encryption of user speech in the Air Interface.
IMEI checking
Verification of the Mobile Equipment by
checking the validity of the International
Mobile Equipment Identity (IMEI).
User confidentiality
Avoidance of the broadcast of users IMSI in
the Air Interface.

67 NOKIA CTXX1299en_4.0 / 03.12.2002 / Bjrn Wigforss


Authentication
Each subscriber has an identity key, Ki, stored in
the Authentication Centre (AC) and the SIM card.
Comparison of Ki without broadcasting it in the Air
Interface.
Authentication always performed by the VLR
before call establishment and location update.
Air A
SIM
card AC

MSC
* I M SI VLR * I M SI

* Ki * Ki

68 NOKIA CTXX1299en_4.0 / 03.12.2002 / Bjrn Wigforss


Security algorithms
Need to check Ki without transmitting it in the air
Use of one-way algorithm, A3, to produce a Signed Response
(SRES), by using a Random Number (RAND) and Ki as inputs.
SRES is calculated in the AC and SIM, and compared in the VLR for
authentication.
Need a cipherkey, Kc to encrypt user speech.
Kc is generated using the algorithm A8.
Actual encryption of user speech is done using Kc and
digitised speech as inputs to the encryption algorithm A5.
Performed between the Base Transceiver Station (BTS) and the
Mobile Equipment (ME).

69 NOKIA CTXX1299en_4.0 / 03.12.2002 / Bjrn Wigforss


Location of security algorithms

A ir A
AC
A3 A8

BSC TC
BTS MSC
VLR

ME + SIM A5

A5 A3 A8

70 NOKIA CTXX1299en_4.0 / 03.12.2002 / Bjrn Wigforss


Authentication triplet
Authentication verification is done in the VLR serving the
subscriber.
The VLR can be external to the subscribers home
network (in case of roaming).
Excessive signalling is required to transfer the SRES to
the VLR every time authentication is needed.
The AC generates a number of SRESs, and transfers
them along with the corresponding RAND and cipher key
Kc to the serving VLR.
The VLR uses the triplets to verify the subscriber.
When the number of triplets reaches below a certain
threshold, new triplets are requested from the AC.

71 NOKIA CTXX1299en_4.0 / 03.12.2002 / Bjrn Wigforss


Authentication triplet generation
Random number Ki
generator

AC A3 A8

RAND SRES Kc

Authentication triplet

RAND SRES Kc
VLR
Authentication triplet

72 NOKIA CTXX1299en_4.0 / 03.12.2002 / Bjrn Wigforss


Authentication procedure
Authentication Triplet

SRES
VLR RAND Kc

Comparison

BSC

BTS Kc

MS

RAND

SIM
A3 SRES

Ki A8 Kc

73 NOKIA CTXX1299en_4.0 / 03.12.2002 / Bjrn Wigforss


Speech encryption
SPEECH/DATA

BTS A5

Kc

TDMA

A5

ENCRYPTED
SPEECH/DATA

A5

Kc

TDMA

A5

SPEECH/DATA

74 NOKIA CTXX1299en_4.0 / 03.12.2002 / Bjrn Wigforss


IMEI checking
The validity of a mobile equipment may be checked to
ensure its proper operation and as prevention against
stolen phones.
The Equipment Identity Register (EIR), which is
implemented as part of the HLR, can store black
listed IMEI numbers.
The mobile equipment sends its IMEI before a
transaction with the network
The MSC can request the EIR to see if the received
IMEI is black listed
If it is, the MSC can stop the call set-up
An operator can set the MSC to check the IMEI of a
mobile equipment at times other than during call set-
up as well.
75 NOKIA CTXX1299en_4.0 / 03.12.2002 / Bjrn Wigforss
User confidentiality
IMSI is a confidential identity of the subscriber.
After a successful first time location update, a mobile
subscriber is allocated a Temporary Mobile Subscriber
Identity (TMSI).
The next time a transaction between the GSM network
and the MS is initiated, the subscriber is identified by the
use of TMSI.
TMSI is reallocated after every successful authentication
verification.
The format of TMSI is operator dependent. It is a 32 bit
binary number.
Additionally, there is the provision of a Personal
Identification Number (PIN) code in the SIM card, which,
if enabled, must be entered before an MS can be used.
76 NOKIA CTXX1299en_4.0 / 03.12.2002 / Bjrn Wigforss
Services
What are services?
A subscriber action that uses the facilities of the GSM
network.
Classification of services Services
Teleservices
Provide full communication capacity by
means of terminals and network functions.
OSI layers 1 to 7. Basic Supplementary
services services
Bearer services
Provide the capability for transmitting
signals between the GSM network
access point and an appropriate Teleservices Bearer
services
access point in the terminating
network. OSI layers 1 to 3.

77 NOKIA CTXX1299en_4.0 / 03.12.2002 / Bjrn Wigforss


Teleservices
Service Description GSM Characteristics
Specification
Code
Speech (Telephony) T11 The most important service for mobile
systems, normal speech service,
including emergency calls.
Speech (Emergency Calls) T12 Emergency calls are possible
automatically.
Short Message Service (Mobile T21 For the reception of Short messages.
terminated)
Short Message Service (Mobile T22 For sending a short message to
originated) another GSM subscriber.
Short Message Service (cell T23 For sending short messages to more
broadcast) than one receiver simultaneously within
a given cell.
Group 3 Facsimile transmission T61 Not supported by NOKIA.
(with alternate speech)
Automatic Group 3 Facsimile T62 For sending and receiving facsimile
transmission messages.

78 NOKIA CTXX1299en_4.0 / 03.12.2002 / Bjrn Wigforss


Short Message Service (MO, MT)
A ir A

MSC VLR

Short M essage Service, Short M essage Service,


M obil e Originated M obile Termi nated

SMS

Alfa s kop m3 46 Alfas k op m3 46 Alfa sk op m34 6

79 NOKIA CTXX1299en_4.0 / 03.12.2002 / Bjrn Wigforss


Short Message Service (Cell broadcast)
Air A

BTS

BTS

BTS BSC

BTS
Short Message Service,
BTS Cell Broadcast

O&M
Al fas k o pm3 46

Alfa sk o p m3 46

Alfask op m 346

80 NOKIA CTXX1299en_4.0 / 03.12.2002 / Bjrn Wigforss


SMS Infrastructure

BSS NSS SMS-


BTS MSC/VLR IWMSC SMSC
BSC TRAU SMS-
GMSC
MS BTS Ext.
EIR HLR AC Appl.

SMS-IWMSCSMS Interworking MSC


SMS-GMSC SMS Gateway MSC
SMSC SMS Center

81 NOKIA CTXX1299en_4.0 / 03.12.2002 / Bjrn Wigforss


Mobile Originated Short Message,
GSM
(Successful Case)
1 5 6
3 SMS-
MS MSC SMSC
9 8 IWMSC 7

2 4

VLR HLR

1: Access Request 4: SendInfoFor-MO-SMS 7: Submit Report


2: Access Request 5: ForwardShortMessage 8: Submit Report
3: Message Transfer 6: Message Transfer 9: Submit Report

82 NOKIA CTXX1299en_4.0 / 03.12.2002 / Bjrn Wigforss


Mobile Terminated Short Message,
GSM
(Failure Due to Absent Subscriber)
3 1
MSC/ SMS-
MS 6 8 SMSC
SGSN GMSC

5 4 7 2

VLR HLR

1: Message Transfer 4: SendInfoForMT-SMS 7: SM-Delivery


2: SendRoutingInfo 5: Failure Report ReportStatus
ForShortMsg 6: Failure Report 8: Failure Report
3: ForwardShortMessage
83 NOKIA CTXX1299en_4.0 / 03.12.2002 / Bjrn Wigforss
Nokia SMS Center

The Short Message Service


Center (SMS Center) acts as a
store and forward center for
short messages.
There are several SMS
features only available with the
Nokia SMS Center.

84 NOKIA CTXX1299en_4.0 / 03.12.2002 / Bjrn Wigforss


Facsimile transmission

Air A

HLR AC EIR
Transparent /
Non Transparent

BSC TC
BTS MSC VLR

IWF
Modems /
Rate Adaptation

85 NOKIA CTXX1299en_4.0 / 03.12.2002 / Bjrn Wigforss


Bearer services
Circuit Mode unstructured with
Unrestricted Digital Capability Transparent
Circuit Mode unstructured with
Unrestricted Digital Capability Non
Transparent
PAD service
Packet service

86 NOKIA CTXX1299en_4.0 / 03.12.2002 / Bjrn Wigforss


Data services

Air A

HLR AC EIR
Transparent /
Non Transparent

BSC TC
BTS MSC VLR

IWF
Synchronous / Modems /
Asynchronous Rate Adaptation

87 NOKIA CTXX1299en_4.0 / 03.12.2002 / Bjrn Wigforss


Packet Data Network Access methods
from GSM

GSM PSTN/ISDN

1 PAD
PAD

2 GSM PSPDN

PAD
PAD
PAD
PAD 3

GSM

PAD
PAD Packet Assembler/Disassembler 1 Normal data communication access. PAD at PSPDN.
Packet Interfaces 2 PAD service from GSM. PAD at GSM.
3 Packet Service from GSM. PAD at user terminal.
Non Packet Interfaces

88 NOKIA CTXX1299en_4.0 / 03.12.2002 / Bjrn Wigforss


Supplementary services (1)
Call Forwarding Unconditional
Call Forwarding on Mobile Subscriber Busy
Call Forwarding on No Reply
Call Forwarding on Mobile Subscriber Not reachable
Barring Of Outgoing Calls
Barring Of Outgoing International Calls
Barring Of all Incoming Calls
Barring Of Outgoing International Calls Excluding Those
Directed to the Home PLMN Country
Barring Of all Incoming Calls when roaming outside the Home
PLMN

89 NOKIA CTXX1299en_4.0 / 03.12.2002 / Bjrn Wigforss


Supplementary services (2)
Call Waiting
Call Hold
Multiparty Service
Explicit Call Transfer
Calling Number Identification Presentation
Calling Number Identification Restriction
Advice of Charge
Centrex Service
Operator Determined Barring
Alternate Line Service (personal or business)

90 NOKIA CTXX1299en_4.0 / 03.12.2002 / Bjrn Wigforss


Review Questions to
GSM Traffic Management

91 NOKIA CTXX1299en_4.0 / 03.12.2002 / Bjrn Wigforss


Review
1. The location update procedure is initiated by the:
a) Mobile Station (MS)
b) Mobile services Switching Centre (MSC)
c) Base Station Controller (BSC)
d) Home Location Register (HLR)

2. The format of the International Mobile Subscriber


Identity (IMSI) is:
a) CC + NDC + SN
b) MCC + MNC + MSIN
c) MCC + MNC + LAC
d) Operator-specific 32-bit binary number

92 NOKIA CTXX1299en_4.0 / 03.12.2002 / Bjrn Wigforss


Review
3. Which of the following cases result in an HLR enquiry?
a) PSTN originated PSTN terminated call
b) Mobile originated PSTN terminated call
c) PSTN originated mobile terminated call
d) None of the above
4. A location area:
a) is the geographical area under one Base Station
Controller (BSC).
b) is equal to one MSC area.
c) is equal to one cell.
d) is identified by a unique Location Area Identity.

93 NOKIA CTXX1299en_4.0 / 03.12.2002 / Bjrn Wigforss


Review
5. Initiation of the paging process for a mobile station is
done by:MSC over a location area.
a) the
b) all Base Transceiver Stations in a location area.
c) a Base Station Controller over one BSC area.
d) a Base Transceiver Station in one cell.

6. In a mobile terminated call a traffic channel from the


NSS in the terminating side to the called mobile station
is a) the MS user
reserved when:answers the ringing of the phone. If GSM Phase 2
b) the B-subscriber accepts the international roaming feature Off Air
Call Set-up
leg charging. Is available

c) the MSRN analysis is done and the location area of


the subscriber is known.
94
d) the mobile station answers the paging signal.
NOKIA CTXX1299en_4.0 / 03.12.2002 / Bjrn Wigforss
Review
7. Why is it necessary to check the calling subscribers
data before allowing the call to proceed in the
originating
a) To makeNSS
sureside?
that s/he has the correct IMSI.
b) To make sure that s/he is provisioned the requested
service.
c) To make sure that s/he has the correct TMSI number.
d) To make sure that the NSS knows whom to charge for
the call.
8. If in a GSM/DCS network the periodic location update
timer is hours
a) 10 set asafter
10 the
hours, then a location
last periodic periodicupdate.
location update
is b)
done:
10 hours after the last power on location update.
c) 10 hours after the last generic location update.
d) 10 hours after the last transaction of any kind with the
NSS.
95 NOKIA CTXX1299en_4.0 / 03.12.2002 / Bjrn Wigforss
Review
9. In an inter-VLR location update, the new VLR asks the
old VLR for some information about the mobile
subscriber. The old VLR responds to this query by
providing which of the following information?
a) IMSI and authentication triplets.
b) IMSI, TMSI and subscribed services.
c) IMSI and last location update time.
d) IMSI and HLR address in case of a roaming subscriber.

96 NOKIA CTXX1299en_4.0 / 03.12.2002 / Bjrn Wigforss


Review
10. If a handover occurs during a call:
a) The new frequency resource always belongs to a cell
other than the current one.
b) A handover number is always required.
c) The initial speech path is not disconnected until a
successful message comes from the mobile station
on the new channel.
d) The subscriber always has to pay extra for the
additional network operation required to maintain
his/her call. .

97 NOKIA CTXX1299en_4.0 / 03.12.2002 / Bjrn Wigforss


Review
11. Charging records can be generated in:
a) the MSC.
b) the HLR.
c) both in the MSC and the HLR.
d) Charging records are not generated in the GSM network.
12. Which network element creates bills for the
subscriber?
a) The HLR with information from the MSC.
b) The MSC with information from the Billing Centre.
c) The Billing Centre with information from the MSC.
d) The Billing Centre with information from the
Transcoder.

98 NOKIA CTXX1299en_4.0 / 03.12.2002 / Bjrn Wigforss


Review
14. The contents of the authentication triplet are:
a) SRES, RAND, A3
b) SRES, RAND, Kc
c) A3, A5, A8
d) RAND, A3, A8
15. What is the result when you use Ki and RAND as
inputs through A8?
a) Encoded speech
b) Signed response
c) Authentication triplet
d) Kc

99 NOKIA CTXX1299en_4.0 / 03.12.2002 / Bjrn Wigforss


Review
16. What is SRES and Kc used for, respectively?
a) SRES is used for speech encryption and Kc is used for
authentication.
b) SRES is used for speech encryption and Kc is used for
frame alignment.
c) SRES is used for authentication and Kc is used for speech
encryption.
17. Which ofSRES
d) Both the following isused
and Kc are not aforbasic service?
speech encryption.
a) SMS-MO
b) Speech, emergency
c) CLIP
d) 14.4 Kbits per second synchronous transparent

100 NOKIA CTXX1299en_4.0 / 03.12.2002 / Bjrn Wigforss

Вам также может понравиться