Ch04-Wireless Tele Sys

Mobile phone subscribers worldwide approx. 1.
7 bn
1600
1400
1200
Mobile Communications
Subscribers [million]
GSM total
Chapter 4: Wireless 1000 TDMA total

CDMA total
Telecommunication Systems 800 PDC total

Analogue total
W-CDMA
600
Market Total wireless
Prediction (1998)
GSM UMTS/IMT-2000 400
Overview
Services 200
Sub-systems
0
Components
1996 1997 1998 1999 2000 2001 2002 2003 2004 year
Prof. Dr.-Ing. Jochen Schiller, http://www.jochenschiller.de/ MC SS05 4.1 Prof. Dr.-Ing. Jochen Schiller, http://www.jochenschiller.de/ MC SS05 4.2
First Generation Second Generation — 2G
Digital systems
Leverage technology to increase capacity
Advanced Mobile Phone Service (AMPS) Speech compression; digital signal processing
US trials 1978; deployed in Japan (’79) & US (’83) Utilize/extend “Intelligent Network” concepts
800 MHz band — two 20 MHz bands Improve fraud prevention
TIA-553
Add new services
Still widely used in US and many parts of the world
There are a wide diversity of 2G systems
Nordic Mobile Telephony (NMT)
IS-54/ IS-136 North American TDMA; PDC (Japan)
Sweden, Norway, Demark & Finland
iDEN
Launched 1981; now largely retired
DECT and PHS
450 MHz; later at 900 MHz (NMT900)
IS-95 CDMA (cdmaOne)
Total Access Communications System (TACS) GSM
British design; similar to AMPS; deployed 1985
Some TACS-900 systems still in use in Europe
D-AMPS/ TDMA & PDC iDEN
Speech coded as digital bit stream Used by Nextel

Compression plus error protection bits Motorola proprietary system
Aggressive compression limits voice quality Time division multiple access technology
Time division multiple access (TDMA) Based on GSM architecture
3 calls per radio channel using repeating time slices
800 MHz private mobile radio (PMR) spectrum
Deployed 1993 (PDC 1994)
Just below 800 MHz cellular band
Development through 1980s; bakeoff 1987
IS-54 / IS-136 standards in US TIA Special protocol supports fast “Push-to-Talk”
ATT Wireless & Cingular use IS-136 today Digital replacement for old PMR services
Plan to migrate to GSM and then to W-CDMA Nextel has highest APRU in US market due to “Direct Connect” push-to-
PDC dominant cellular system in Japan today talk service
NTT DoCoMo has largest PDC network
DECT and PHS North American CDMA (cdmaOne)
Also based on time division multiple access Code Division Multiple Access
Digital European Cordless Telephony All users share same frequency band
Focus on business use, i.e. wireless PBX Discussed in detail later as CDMA is basis for 3G
Very small cells; In building propagation issues Qualcomm demo in 1989
Wide bandwidth (32 kbps channels)
Claimed improved capacity & simplified planning
High-quality voice and/or ISDN data
First deployment in Hong Kong late 1994
Personal Handiphone Service
Similar performance (32 kbps channels) Major success in Korea (1M subs by 1996)
Deployed across Japanese cities (high pop. density) Used by Verizon and Sprint in US
4 channel base station uses one ISDN BRI line Simplest 3G migration story today
Base stations on top of phone booths
Legacy in Japan; new deployments in China today
cdmaOne — IS-95 GSM
TIA standard IS-95 (ANSI-95) in 1993

« Groupe Special Mobile », later changed to
IS-95 deployed in the 800 MHz cellular band « Global System for Mobile »
J-STD-08 variant deployed in 1900 MHz US “PCS” band Joint European effort beginning in 1982
Evolution fixes bugs and adds data Focus on seamless roaming across Europe
IS-95A provides data rates up to 14.4 kbps Services launched 1991
IS-95B provides rates up to 64 kbps (2.5G) Time division multiple access (8 users per 200KHz)
Both A and B are compatible with J-STD-08 900 MHz band; later extended to 1800MHz
All variants designed for TIA IS-41 core networks (ANSI 41) Added 1900 MHz (US PCS bands)
GSM is dominant world standard today
Well defined interfaces; many competitors
Network effect (Metcalfe’s law) took hold in late 1990s
Tri-band GSM phone can roam the world today
2G — TDMA
Distribution of GSM Subscribers
Time Division Multiple Access
GSM is used by 70% of subscribers worldwide

564 M subs / 800 M subs in July 2001 One timeslot = 0.577 ms One TDMA frame = 8 timeslots
Most GSM deployments in Europe (59%) and Asia (33%)

ATT & Cingular deploying GSM in US today
200 KHz
Number of subscribers
in the world (Jul 2001) 200 KHz
Frequency
200 KHz
PDC
CDMA
7%
12% 200 KHz
US TDMA
10%
Time
GSM
71%
Source: EMC World Cellular / GSM Association
2G & 3G — CDMA Development of mobile telecommunication systems
Code Division Multiple Access
FDMA
CT0/1
AMPS
NMT CT2
Spread spectrum modulation IMT-FT
Originally developed for the military IS-136 DECT
TDMA
TDMA
Resists jamming and many kinds of interference EDGE IMT-SC
D-AMPS
Coded modulation hidden from those w/o the code IS-136HS
GSM GPRS
UWC-136
All users share same (large) block of spectrum PDC
One for one frequency reuse IMT-DS
Soft handoffs possible UTRA FDD / W-CDMA
IMT-TC HSDPA
Almost all accepted 3G radio standards are based on CDMA
UTRA TDD / TD-CDMA
CDMA2000, W-CDMA and TD-SCDMA
CDMA
IMT-TC
TD-SCDMA
IS-95 IMT-MC
cdma2000 1X
cdmaOne cdma2000 1X EV-DO
1X EV-DV
1G 2G 2.5G 3G (3X)
GSM: Overview Disadvantages of GSM
GSM There is no perfect system!!

formerly: Groupe Spéciale Mobile (founded 1982) no end-to-end encryption of user data
now: Global System for Mobile Communication no full ISDN bandwidth of 64 kbit/s to the user, no transparent B-
Pan-European standard (ETSI, European Telecommunications channel
Standardisation Institute)
simultaneous introduction of essential services in three phases (1991,
reduced concentration while driving
1994, 1996) by the European telecommunication administrations
(Germany: D1 and D2) electromagnetic radiation
Î seamless roaming within Europe possible
today many providers all over the world use GSM (more than 200 abuse of private data possible
countries in Asia, Africa, Europe, Australia, America)
roaming profiles accessible
more than 1.2 billion subscribers in more than 630 networks
more than 75% of all digital mobile phones use GSM (74% total)
over 200 million SMS per month in Germany, > 550 billion/year worldwide high complexity of the system
(> 10% of the revenues for many operators) several incompatibilities within the GSM standards
[be aware: these are only rough numbers…]
GSM: Mobile Services Bearer Services
GSM offers Telecommunication services to transfer data between

several types of connections access points
z voice connections, data connections, short message service Specification of services up to the terminal interface (OSI
multi-service options (combination of basic services) layers 1-3)
Three service domains Different data rates for voice and data (original standard)
Bearer Services data service (circuit switched)
Telematic Services z synchronous: 2.4, 4.8 or 9.6 kbit/s
Supplementary Services z asynchronous: 300 - 1200 bit/s
bearer services data service (packet switched)
MS
z synchronous: 2.4, 4.8 or 9.6 kbit/s
transit source/
TE MT GSM-PLMN network destination TE z asynchronous: 300 - 9600 bit/s
R, S Um (PSTN, ISDN) network (U, S, R) Today: data rates of approx. 50 kbit/s possible – will be
tele services
covered later!
Tele Services I Tele Services II
Telecommunication services that enable voice

communication via mobile phones
Additional services
Non-Voice-Teleservices
All these basic services have to obey cellular
z group 3 fax
functions, security measurements etc.
z voice mailbox (implemented in the fixed network supporting the
Offered services mobile terminals)
mobile telephony z electronic mail (MHS, Message Handling System, implemented
primary goal of GSM was to enable mobile telephony in the fixed network)
offering the traditional bandwidth of 3.1 kHz
z ...
Emergency number
common number throughout Europe (112); mandatory for all
z Short Message Service (SMS)
service providers; free of charge; connection with the
highest priority (preemption of other connections possible) alphanumeric data transmission to/from the mobile terminal
(160 characters) using the signaling channel, thus allowing
Multinumbering
simultaneous use of basic services and SMS
several ISDN phone numbers per user possible
(almost ignored in the beginning now the most successful add-
on!)
Supplementary services Architecture of the GSM system
Services in addition to the basic services, cannot be GSM is a PLMN (Public Land Mobile Network)
offered stand-alone several providers setup mobile networks following the GSM
standard within each country
Similar to ISDN services besides lower bandwidth
components
due to the radio link z MS (mobile station)
May differ between different service providers, z BS (base station)
countries and protocol versions z MSC (mobile switching center)
Important services z LR (location register)
subsystems
identification: forwarding of caller number
z RSS (radio subsystem): covers all radio aspects
suppression of number forwarding
z NSS (network and switching subsystem): call forwarding, handover,
automatic call-back switching
conferencing with up to 7 participants z OSS (operation subsystem): management of the network
locking of the mobile terminal (incoming or outgoing calls)
...
Ingredients 1: Mobile Phones, PDAs & Co. Ingredients 2: Antennas
The visible but smallest

part of the network!
Still visible – cause many discussions…

Ingredients 3: Infrastructure 1 Ingredients 3: Infrastructure 2
Base Stations
Not „visible“, but
comprise the major
part of the network
Cabling
(also from an
investment point of
view…)
Management
Data bases
Microwave links
Switching units
Monitoring
GSM: overview GSM: elements and interfaces

OMC, EIR,
radio cell
AUC BSS
HLR MS MS
GMSC
NSS fixed network
Um radio cell
with OSS
RSS BTS MS
VLR MSC MSC
VLR
BTS
Abis
BSC
BSC BSC
BSC A
MSC MSC
RSS
NSS signaling
VLR VLR
ISDN, PSTN
HLR GMSC
PDN
IWF
O
OSS
EIR AUC OMC
GSM: system architecture System architecture: radio subsystem
radio network and switching fixed radio network and switching
subsystem subsystem partner networks subsystem subsystem
Components
MS MS
MS MS
MS (Mobile Station)
ISDN
PSTN
BSS (Base Station Subsystem):
consisting of
Um MSC
Um z BTS (Base Transceiver Station):
Abis Abis
sender and receiver
BTS BTS
z BSC (Base Station Controller):
BSC BSC MSC
BTS EIR
BTS
controlling several transceivers
Interfaces
SS7
HLR Um : radio interface
Abis : standardized, open interface
with
A 16 kbit/s user channels
BTS VLR BTS
BSC MSC A: standardized, open interface
BSC ISDN
BTS MSC BTS with
A PSTN
IWF BSS 64 kbit/s user channels
BSS
PSPDN
CSPDN
Radio subsystem GSM: cellular network
The Radio Subsystem (RSS) comprises the cellular segmentation of the area into cells
mobile network up to the switching centers possible radio coverage of the cell
Components
Base Station Subsystem (BSS): idealized shape of the cell
z Base Transceiver Station (BTS): radio components including cell
sender, receiver, antenna - if directed antennas are used one
BTS can cover several cells
use of several carrier frequencies
z Base Station Controller (BSC): switching between BTSs,
not the same frequency in adjoining cells
controlling BTSs, managing of network resources, mapping of
cell sizes vary from some 100 m up to 35 km depending on user
radio channels (Um) onto terrestrial channels (A interface) density, geography, transceiver power etc.
hexagonal shape of cells is idealized (cells overlap, shapes depend on
z BSS = BSC + sum(BTS) + interconnection geography)
if a mobile user changes cells
Ð handover of the connection to the neighbor cell
Mobile Stations (MS)
GSM frequency bands Base Transceiver Station and Base Station Controller
Type Channels Uplink [MHz] Downlink [MHz] Tasks of a BSS are distributed over BSC and BTS
BTS comprises radio specific functions
GSM 850 128-251 824-849 869-894 BSC is the switching center for radio channels
(Americas)
Functions BTS BSC
GSM 900 0-124, 955-1023 876-915 921-960 Management of radio channels X
classical 124 channels 890-915 935-960 Frequency hopping (FH) X X
extended +49 channels 880-915 925-960 Management of terrestrial channels X
GSM 1800 512-885 1710-1785 1805-1880 Mapping of terrestrial onto radio channels X
Channel coding and decoding X
GSM 1900 512-810 1850-1910 1930-1990
Rate adaptation X
(Americas)
Encryption and decryption X X
GSM-R 955-1024, 0-124 876-915 921-960 Paging X X
Uplink signal measurements X
exclusive 69 channels 876-880 921-925
Traffic measurement X
Authentication X
- Additionally: GSM 400 (also named GSM 450 or GSM 480 at 450-458/460-468 or 479-486/489-496 MHz Location registry, location update X
- Please note: frequency ranges may vary depending on the country! Handover management X
- Channels at the lower/upper edge of a frequency band are typically not used
Mobile station Network and switching subsystem
NSS is the main component of the public mobile network GSM

Terminal for the use of GSM services
switching, mobility management, interconnection to other networks, system
A mobile station (MS) comprises several functional groups control
MT (Mobile Terminal):
Components
z offers common functions used by all services the MS offers
Mobile Services Switching Center (MSC)
z corresponds to the network termination (NT) of an ISDN access
controls all connections via a separated network to/from a mobile terminal
z end-point of the radio interface (Um)
within the domain of the MSC - several BSC can belong to a MSC
TA (Terminal Adapter):
Databases (important: scalability, high capacity, low delay)
z terminal adaptation, hides radio specific characteristics
z Home Location Register (HLR)
TE (Terminal Equipment): central master database containing user data, permanent and semi-permanent
z peripheral device of the MS, offers services to a user data of all subscribers assigned to the HLR (one provider can have several
z does not contain GSM specific functions HLRs)
z Visitor Location Register (VLR)
SIM (Subscriber Identity Module):
local database for a subset of user data, including data about all user currently
z personalization of the mobile terminal, stores user parameters in the domain of the VLR
TE TA MT
Um
R S
Mobile Services Switching Center GSM - TDMA/FDMA
The MSC (mobile switching center) plays a central role in GSM 935-960 MHz
124 channels (200 kHz)
switching functions downlink
cy
additional functions for mobility support
en
qu
890-915 MHz
fre
management of network resources 124 channels (200 kHz)
uplink
interworking functions via Gateway MSC (GMSC) higher GSM frame structures
integration of several databases time
Functions of a MSC
GSM TDMA frame
specific functions for paging and call forwarding
termination of SS7 (signaling system no. 7) 1 2 3 4 5 6 7 8
mobility specific signaling 4.615 ms

location registration and forwarding of location information
provision of new services (fax, data calls) GSM time-slot (normal burst)
support of short message service (SMS) guard guard
space tail user data S Training S user data tail space
generation and forwarding of accounting and billing information
3 bits 57 bits 1 26 bits 1 57 bits 3
546.5 µs
577 µs
GSM hierarchy of frames GSM protocol layers for signaling

hyperframe
0 1 2 ... 2045 2046 2047 3 h 28 min 53.76 s
Um Abis A
superframe MS BTS BSC MSC
0 1 2 ... 48 49 50
CM CM
6.12 s
0 1 ... 24 25 MM MM
BSSAP BSSAP
multiframe RR RR’
0 1 ... 24 25 120 ms RR’ BTSM BTSM
SS7 SS7
LAPDm LAPDm LAPD LAPD
0 1 2 ... 48 49 50 235.4 ms
radio radio PCM PCM PCM PCM
frame
0 1 ... 6 7 4.615 ms 16/64 kbit/s 64 kbit/s /
2.048 Mbit/s
slot
burst 577 µs
Mobile Terminated Call Mobile Originated Call
1: calling a GSM subscriber 4 1, 2: connection request VLR

HLR VLR
2: forwarding call to GMSC 5 3, 4: security check
3: signal call setup to HLR 8 9 5-8: check resources (free circuit)
3 6 14 15
4, 5: request MSRN from VLR 9-10: set up call 3 4
6: forward responsible 7
calling PSTN GMSC MSC 6 5
MSC to GMSC station 1 2
7: forward call to 10 PSTN
10 13 10
GMSC MSC
current MSC 16
8, 9: get current status of MS 7 8
BSS BSS BSS
10, 11: paging of MS 11 11 11 2 9
12, 13: MS answers
14, 15: security checks
11 12
16, 17: set up connection 1
17
MS MS BSS
10
MTC/MOC 4 types of handover

MS MTC BTS MS MOC BTS
paging request
channel request channel request 1
2 3 4
immediate assignment immediate assignment
paging response service request MS MS MS MS
authentication request authentication request
authentication response authentication response
ciphering command ciphering command
ciphering complete ciphering complete
setup setup BTS BTS BTS BTS
call confirmed call confirmed
assignment command assignment command
assignment complete assignment complete BSC BSC BSC
alerting alerting
connect connect
MSC MSC
connect acknowledge connect acknowledge
data/speech exchange data/speech exchange
Handover decision Handover procedure
MS BTSold BSCold MSC BSCnew BTSnew

receive level receive level
BTSold BTSnew measurement
measurement
report
result
HO decision
HO required
HO request
resource allocation
ch. activation
ch. activation ack

HO request ack
HO command
HO command
HO command
HO_MARGIN HO access
Link establishment
HO complete
HO complete
clear command
MS MS clear command
clear complete
clear complete
BTSold BTSnew
Security in GSM GSM - authentication
Security services
access control/authentication
z user Ù SIM (Subscriber Identity Module): secret PIN (personal
identification number) mobile network SIM
z SIM Ù network: challenge response method
RAND
confidentiality Ki RAND RAND Ki
z voice and signaling encrypted on the wireless link (after successful
authentication) AC 128 bit 128 bit 128 bit 128 bit
anonymity
“secret”: A3 A3
z temporary identity TMSI
• A3 and A8 SIM
(Temporary Mobile Subscriber Identity) available via the
z newly assigned at each new location update (LUP) Internet SRES* 32 bit SRES 32 bit
z encrypted transmission
• network providers
can use stronger
3 algorithms specified in GSM mechanisms SRES
MSC SRES* =? SRES SRES
A3 for authentication (“secret”, open interface) 32 bit
A5 for encryption (standardized)
A8 for key generation (“secret”, open interface) Ki: individual subscriber authentication keySRES: signed response
GSM - key generation and encryption Data services in GSM I
Data transmission standardized with only 9.6 kbit/s
advanced coding allows 14,4 kbit/s
not enough for Internet and multimedia applications
mobile network (BTS) MS with SIM HSCSD (High-Speed Circuit Switched Data)
RAND mainly software update
Ki RAND RAND Ki bundling of several time-slots to get higher
AC SIM AIUR (Air Interface User Rate)
128 bit 128 bit 128 bit 128 bit
(e.g., 57.6 kbit/s using 4 slots, 14.4 each)
A8 A8 advantage: ready to use, constant quality, simple
disadvantage: channels blocked for voice transmission
cipher AIUR [kbit/s] TCH/F4.8 TCH/F9.6 TCH/F14.4
Kc
4.8 1
key 64 bit Kc
9.6 2 1
64 bit 14.4 3 1
data encrypted SRES
data 19.2 4 2
BSS 28.8 3 2
data MS
38.4 4
A5 A5 43.2 3
57.6 4
Data services in GSM II GPRS quality of service

GPRS (General Packet Radio Service)
packet switching
Reliability Lost SDU Duplicate Out of Corrupt SDU
using free slots only if data packets ready to send class probability SDU sequence probability
(e.g., 50 kbit/s using 4 slots temporarily) probability SDU
probability
standardization 1998, introduction 2001
1 10-9 10-9 10-9 10-9
advantage: one step towards UMTS, more flexible 2 10-4 10-5 10-5 10-6
disadvantage: more investment needed (new hardware) 3 10-2 10-5 10-5 10-2
GPRS network elements

GSN (GPRS Support Nodes): GGSN and SGSN Delay SDU size 128 byte SDU size 1024 byte
GGSN (Gateway GSN) class mean 95 percentile mean 95 percentile
z interworking unit between GPRS and PDN (Packet Data Network) 1 < 0.5 s < 1.5 s <2s <7s
2 <5s < 25 s < 15 s < 75 s
SGSN (Serving GSN) 3 < 50 s < 250 s < 75 s < 375 s
z supports the MS (location, billing, security) 4 unspecified
GR (GPRS Register)
z user addresses
Examples for GPRS device classes GPRS user data rates in kbit/s
Receiving
Class Sending slots Maximum number of slots
slots
1 1 1 2 Coding 1 slot 2 slots 3 slots 4 slots 5 slots 6 slots 7 slots 8 slots
2 2 1 3 scheme
3 2 2 3
CS-1 9.05 18.1 27.15 36.2 45.25 54.3 63.35 72.4
5 2 2 4
CS-2 13.4 26.8 40.2 53.6 67 80.4 93.8 107.2
8 4 1 5
CS-3 15.6 31.2 46.8 62.4 78 93.6 109.2 124.8
10 4 2 5
CS-4 21.4 42.8 64.2 85.6 107 128.4 149.8 171.2
12 4 4 5
GPRS architecture and interfaces GPRS protocol architecture
SGSN
MS BSS SGSN
Um Gb Gn GGSN Gi
Gn
apps.
IP/X.25 IP/X.25
PDN
MS BSS SGSN GGSN
SNDCP GTP
SNDCP GTP
LLC LLC UDP/TCP UDP/TCP
Um Gb Gn Gi
RLC BSSGP IP IP
RLC BSSGP
MAC MAC
MSC HLR/ FR FR L1/L2 L1/L2
GR radio radio
VLR EIR
UMTS and IMT-2000 IMT-2000 family
Proposals for IMT-2000 (International Mobile
Telecommunications) Interface
UWC-136, cdma2000, WP-CDMA for Internetworking
UMTS (Universal Mobile Telecommunications System) from ETSI
UMTS IMT-2000 GSM ANSI-41

Core Network IP-Network
UTRA (was: UMTS, now: Universal Terrestrial Radio Access) (MAP) (IS-634)
ITU-T
enhancements of GSM
z EDGE (Enhanced Data rates for GSM Evolution): GSM up to 384 kbit/s Initial UMTS Flexible assignment of
(R99 w/ FDD) Core Network and Radio Access
z CAMEL (Customized Application for Mobile Enhanced Logic)
z VHE (virtual Home Environment)
fits into GMM (Global Multimedia Mobility) initiative from ETSI IMT-DS IMT-TC IMT-MC IMT-SC IMT-FT
(Direct Spread) (Time Code) (Multi Carrier) (Single Carrier) (Freq. Time)
requirements IMT-2000 UTRA TDD
Radio Access UTRA FDD (TD-CDMA); cdma2000 UWC-136 DECT
z min. 144 kbit/s rural (goal: 384 kbit/s) ITU-R (W-CDMA) TD-SCDMA (EDGE)
z min. 384 kbit/s suburban (goal: 512 kbit/s) 3GPP 3GPP 3GPP2 UWCC/3GPP ETSI
z up to 2 Mbit/s urban
GSM and UMTS Releases UMTS architecture (Release 99 used here!)
UTRAN (UTRA Network)

Spec version Freeze date
GSM/EDGE Release 3G Release Abbreviated name Cell level mobility
number (indicative only)
Phase 2+ Release 6 Release 6 Rel-6 6.x.y

December 2004 - Radio Network Subsystem (RNS)
March 2005
Phase 2+ Release 5 Release 5 Rel-5 5.x.y March - June 2002
Encapsulation of all radio specific tasks
Phase 2+ Release 4 Release 4 Rel-4 4.x.y March 2001 UE (User Equipment)
- Release 2000
R00
4.x.y
Renaming…
CN (Core Network)
Phase 2+ Release 2000 - 9.x.y
Inter system handover
- Release 1999 3.x.y
R99 March 2000 Location management if there is no dedicated connection between UE and
Phase 2+ Release 1999 - 8.x.y UTRAN
Phase 2+ Release 1998 - R98 7.x.y early 1999 Uu Iu
Phase 2+ Release 1997 - R97 6.x.y early 1998
Phase 2+ Release 1996 - R96 5.x.y early 1997
Phase 2 - Ph2 4.x.y 1995 UE UTRAN CN

Phase 1 - Ph1 3.x.y 1992
UMTS domains and interfaces I UMTS domains and interfaces II
Home Universal Subscriber Identity Module (USIM)

Network Functions for encryption and authentication of users
Domain
Located on a SIM inserted into a mobile device
Zu
Cu Uu Iu Yu Mobile Equipment Domain
Mobile Access Serving Transit
USIM Functions for radio transmission
Equipment Network Network Network
Domain
Domain Domain Domain Domain User interface for establishing/maintaining end-to-end connections
Core Network Domain Access Network Domain
Access network dependent functions
User Equipment Domain Infrastructure Domain
Core Network Domain
Access network independent functions
User Equipment Domain Serving Network Domain
Assigned to a single user in order to access UMTS services z Network currently responsible for communication
Infrastructure Domain Home Network Domain
Shared among all users z Location and access network independent functions
Offers UMTS services to all accepted users
Spreading and scrambling of user data UMTS FDD frame structure
Constant chipping rate of 3.84 Mchip/s W-CDMA

• 1920-1980 MHz uplink
Different user data rates supported via different spreading factors Radio frame
• 2110-2170 MHz downlink
higher data rate: less chips per bit and vice versa 10 ms 0 1 2 ... 12 13 14 • chipping rate:
User separation via unique, quasi orthogonal scrambling codes 3.840 Mchip/s
users are not separated via orthogonal spreading codes Time slot • soft handover
• QPSK
much simpler management of codes: each station can use the same orthogonal 666.7 µs Pilot TFCI FBI TPC uplink DPCCH • complex power control
spreading codes
2560 chips, 10 bits (1500 power control
precise synchronisation not necessary as the scrambling codes stay quasi-
cycles/s)
orthogonal 666.7 µs Data uplink DPDCH • spreading: UL: 4-256;
data1 data2 data3 data4 data5 DL:4-512
2560 chips, 10*2k bits (k = 0...6)
spr. spr. spr. spr. spr.
666.7 µs Data1 TPC TFCI Data2 Pilot downlink DPCH
code1 code2 code3 code1 code4 FBI: Feedback Information
DPDCH DPCCH DPDCH DPCCH TPC: Transmit Power Control
TFCI: Transport Format Combination Indicator
2560 chips, 10*2k bits (k = 0...7) DPCCH: Dedicated Physical Control Channel
scrambling scrambling DPDCH: Dedicated Physical Data Channel
code1 code2 DPCH: Dedicated Physical Channel
Slot structure NOT for user separation
but synchronisation for periodic functions!
sender1 sender2
Typical UTRA-FDD uplink data rates UMTS TDD frame structure (burst type 2)
Radio frame
64 144 384 10 ms
12.2 0 1 2 ... 12 13 14
User data rate [kbit/s] (voice)
DPDCH [kbit/s] 60 240 480 960

Time slot
DPCCH [kbit/s] 15 15 15 15
666.7 µs Data Midample Data Traffic burst
GP
Spreading 64 16 8 4 1104 chips 256 chips 1104 chips
GP: guard period
2560 chips 96 chips
TD-CDMA
• 2560 chips per slot
• spreading: 1-16
• symmetric or asymmetric slot assignment to UL/DL (min. 1 per direction)
• tight synchronisation needed
• simpler power control (100-800 power control cycles/s)
UTRAN architecture UTRAN architecture

RNS RNC: Radio Network Controller RNS RNC: Radio Network Controller
RNS: Radio Network Subsystem UE
RNS: Radio Network Subsystem
UE1 Node B Iub
Iu Node B Iub
UTRAN comprises several RNSs
RNC CN
RNC Node B can support FDD or TDD
UE2 Iu
Node B or both
UTRAN comprises several Node B
RNSs
UE3 Node B can support FDD or CN
TDD or both
Iur
RNC is responsible for handover Iur
Node B
Iub decisions requiring Node B RNC is responsible for handover
Iub
signalingto the UE decisions requiring signaling
Node B
RNC Cell offers FDD or TDD Node B to the UE
RNC
Cell offers FDD or TDD
Node B
Node B
RNS RNS
UTRAN functions Core network: protocols
Admission control VLR

Congestion control
PSTN/
System information broadcasting MSC GMSC
GSM-CS ISDN
RNS
Radio channel encryption backbone
Handover
SRNS moving
Radio network configuration HLR
Channel quality measurements

Macro diversity
RNS
Radio carrier control
SGSN GGSN PDN (X.25),
Radio resource control Layer 3: IP Internet (IP)
Data transmission over the radio interface GPRS backbone (IP)
Layer 2: ATM
Outer loop power control (FDD and TDD) SS 7
Layer 1: PDH,
Channel coding SDH, SONET
Access control
UTRAN CN
Core network: architecture Core network
The Core Network (CN) and thus the Interface Iu, too, are separated into
VLR two logical domains:
BSS
BTS Abis Iu Circuit Switched Domain (CSD)
Circuit switched service incl. signaling
BSC MSC GMSC
PSTN Resource reservation at connection setup
Node
BTSB GSM components (MSC, GMSC, VLR)
IuCS
IuCS
AuC
Packet Switched Domain (PSD)
EIR HLR
GPRS components (SGSN, GGSN)
GR
Node B IuPS
Iub
Node B
RNC SGSN GGSN
Release 99 uses the GSM/GPRS network and adds a new radio access!
Gn Gi Helps to save a lot of money …
Node B IuPS CN Much faster deployment
RNS
Not as flexible as newer releases (5, 6)
UMTS protocol stacks (user plane) Support of mobility: macro diversity
UE Uu UTRAN IuCS 3G
MSC
Multicasting of data via several
apps. & physical channels
protocols Enables soft handover
Circuit RLC
RLC SAR
SAR FDD mode only
switched MAC MAC AAL2 AAL2 Uplink
radio radio ATM ATM simultaneous reception of UE
UE Node B data at several Node Bs
Reconstruction of data at Node
UE Uu UTRAN IuPS 3G Gn 3G
SGSN GGSN B, SRNC or DRNC
apps. &
protocols Downlink
IP, PPP, IP tunnel IP, PPP,
… …
Simultaneous transmission of
Packet PDCP GTP Node B RNC CN data via different cells
PDCP GTP GTP GTP
switched RLC RLC UDP/IP UDP/IP UDP/IP UDP/IP Different spreading codes in
MAC MAC AAL5 AAL5 L2 L2 different cells
radio radio ATM ATM L1 L1
Support of mobility: handover Example handover types in UMTS/GSM
From and to other systems (e.g., UMTS to GSM)

This is a must as UMTS coverage will be poor in the beginning
RNS controlling the connection is called SRNS (Serving RNS)
UE1
RNS offering additional resources (e.g., for soft handover) is called Drift
RNS (DRNS) Node B1 RNC1 3G MSC1
Iu
End-to-end connections between UE and CN only via Iu at the SRNS UE2
Change of SRNS requires change of Iu Node B2 Iub Iur
Initiated by the SRNS
UE3
Controlled by the RNC and CN Node B3 RNC2 3G MSC2
Node B SRNC CN
UE4
Iub Iu
Iur BTS BSC 2G MSC3
UE
Abis A
Node B DRNC
Iub
Breathing Cells Breathing Cells: Example
GSM
Mobile device gets exclusive signal from the base station
Number of devices in a cell does not influence cell size
UMTS
Cell size is closely correlated to the cell capacity
Signal-to-nose ratio determines cell capacity
Noise is generated by interference from
z other cells
z other users of the same cell
Interference increases noise level
Devices at the edge of a cell cannot further increase their output power
(max. power limit) and thus drop out of the cell
Ö no more communication possible
Limitation of the max. number of users within a cell required
Cell breathing complicates network planning
UMTS services (originally) Some current enhancements
Data transmission service profiles GSM

EMS/MMS
Service Profile Bandwidth Transport mode
z EMS: 760 characters possible by chaining SMS, animated icons, ring
High Interactive MM 128 kbit/s Circuit switched Bidirectional, video telephone
tones, was soon replaced by MMS (or simply skipped)
High MM 2 Mbit/s Packet switched Low coverage, max. 6 km/h
z MMS: transmission of images, video clips, audio
Medium MM 384 kbit/s Circuit switched asymmetrical, MM, downloads – see WAP 2.0 / chapter 10
Switched Data 14.4 kbit/s Circuit switched
EDGE (Enhanced Data Rates for Global [was: GSM] Evolution)
Simple Messaging 14.4 kbit/s Packet switched SMS successor, E-Mail
z 8-PSK instead of GMSK, up to 384 kbit/s
Voice 16 kbit/s Circuit switched
z new modulation and coding schemes for GPRS Î EGPRS
Virtual Home Environment (VHE) – MCS-1 to MCS-4 uses GMSK at rates 8.8/11.2/14.8/17.6 kbit/s
– MCS-5 to MCS-9 uses 8-PSK at rates 22.4/29.6/44.8/54.4/59.2 kbit/s
Enables access to personalized data independent of location, access
network, and device UMTS
Network operators may offer new services without changing the network HSDPA (High-Speed Downlink Packet Access)
Service providers may offer services based on components which allow the z initially up to 10 Mbit/s for the downlink, later on 20 Mbit/s using MIMO-
automatic adaptation to new networks and devices (Multiple Input Multiple Output-) antennas
Integration of existing IN services z uses 16-QAM instead of QPSK

Ch04-Wireless Tele Sys

Загружено:

Сведения о документе

Авторское право

Доступные форматы

Поделиться этим документом

Поделиться или встроить документ

Параметры публикации

Этот документ был вам полезен?

Это неприемлемый материал?

Авторское право:

Доступные форматы

Ch04-Wireless Tele Sys

Загружено:

Авторское право:

Доступные форматы

Mobile phone subscribers worldwide approx. 1.

Chapter 4: Wireless 1000 TDMA total

Telecommunication Systems 800 PDC total

First Generation Second Generation — 2G

Speech coded as digital bit stream Used by Nextel

DECT and PHS North American CDMA (cdmaOne)

TIA standard IS-95 (ANSI-95) in 1993

GSM is used by 70% of subscribers worldwide

Most GSM deployments in Europe (59%) and Asia (33%)

GSM: Overview Disadvantages of GSM

GSM There is no perfect system!!

GSM offers  Telecommunication services to transfer data between

Tele Services I Tele Services II

 Telecommunication services that enable voice

Ingredients 1: Mobile Phones, PDAs & Co. Ingredients 2: Antennas

The visible but smallest

Still visible – cause many discussions…

GSM: overview GSM: elements and interfaces

Radio subsystem GSM: cellular network

Mobile station Network and switching subsystem

NSS is the main component of the public mobile network GSM

 mobility specific signaling 4.615 ms

GSM hierarchy of frames GSM protocol layers for signaling

1: calling a GSM subscriber 4 1, 2: connection request VLR

MTC/MOC 4 types of handover

MS BTSold BSCold MSC BSCnew BTSnew

ch. activation ack

Security in GSM GSM - authentication

Data services in GSM II GPRS quality of service

GPRS network elements

GPRS architecture and interfaces GPRS protocol architecture

 UMTS (Universal Mobile Telecommunications System) from ETSI

UMTS IMT-2000 GSM ANSI-41

GSM and UMTS Releases UMTS architecture (Release 99 used here!)

UTRAN (UTRA Network)

Phase 2+ Release 6 Release 6 Rel-6 6.x.y

Phase 2+ Release 1996 - R96 5.x.y early 1997

Phase 2 - Ph2 4.x.y 1995 UE UTRAN CN

Home Universal Subscriber Identity Module (USIM)

Spreading and scrambling of user data UMTS FDD frame structure

Constant chipping rate of 3.84 Mchip/s W-CDMA

DPDCH [kbit/s] 60 240 480 960

UTRAN architecture UTRAN architecture

Admission control VLR

Channel quality measurements

Core network: architecture Core network

Support of mobility: handover Example handover types in UMTS/GSM

From and to other systems (e.g., UMTS to GSM)

 Cell breathing complicates network planning

UMTS services (originally) Some current enhancements

Data transmission service profiles GSM

Вам также может понравиться

GSM offers Telecommunication services to transfer data between

Telecommunication services that enable voice

mobility specific signaling 4.615 ms

UMTS (Universal Mobile Telecommunications System) from ETSI

Cell breathing complicates network planning