1

GSM ARCHITECTURE
ALTTC, GZB
2
GSM
Various subsystems
1. Network Subsystem includes the equipments
and functions related to end-to-end call.

2. Radio Subsystem includes the equipments and
functions related to the management of the
connections on the radio path.

3. Operations and Maintenance subsystem
includes the operation and maintenance of GSM
equipment for the radio and network interface.

3
Network Architecture

B
T
S
MSC VLR
HLR
PSTN
ISDN
Data
Networks
Air interface
OSS
B
T
S
B
T
S
MSC VLR
BSC
BSC
4
GSM
Network Structure
GSM Service Area
PLMN Service Area
MSC Service Area
Location Area
Cells
5

GSM
PLMN Service Area

V

MSC
MSC
MSC
MSC
VLR
VLR
VLR
I II
IV
III
I
6


GSM
MSC Service Area
MSC
VLR
LA1
LA2
LA3
LA6
LA4
LA5
7



GSM
Cells

MSC
VLR
LA1
LA2
LA3
LA6
LA4
LA5
C1
C2 C3
C6
C5
C4
C=CELL
8
GSM
Relation between areas in GSM
Location Area
Cell
Area served by a BTS
Location Area
MSC Service Area
PLMN Service Area
GSM Service Area
9
GSM
LA Coding
MCC
LAI
LAC
MNC
3 digit 3 digit 2 Octets
10
GSM
Functions of Mobile Station
Voice and data transmission
Frequency and time synchronization
Monitoring of power and signal quality
of the surrounding cells
Provision of location updates even
during inactive state
Equalization of multi path distortions


11
GSM
Mobile Station
Portable, vehicle mounted, hand held
MS identified by unique IMEI
Shall display at least last ten received, dialled
and missed calls
Minimum talk time of 1hr 30 min. and
standby time of 80 hrs
160 characters long SMS


12
GSM
Mobile Station - Power Levels
Power
Class
Max. Peak
Power
Tolerance (dB)
Normal Extreme
1 20W
(43 dBm)
+/- 2 +/- 2.5
2 8W
(39 dBm)
+/- 2 +/- 2.5
3 5W
(37 dBm)
+/- 2 +/- 2.5
4 2W
(33 dBm)
+/- 2 +/- 2.5
5 0.8W
(29 dBm)
+/- 2 +/- 2.5
13
GSM
SIM Card
SIM Module
Unique Subscribers ID IMSI and ISDN
PIN
Key Ki, Kc and A3,A5 and A8 algorithms
SIM has CPU, ROM, RAM and EPROM

14
GSM
Mobile Identification Numbers
IMEI
MSISDN
IMSI
TMSI
MSRN

15
GSM
MSISDN
Mobile Subscribers ISDN Number
The MSISDN is registered in the
telephone directory and used by the
calling party for dialing.

CC NDC SN
1 to 3 digits Variable
Variable
MSISDN : not more than 15 digits
N(S)N
16
GSM
IMSI
International mobile subscribers
Identity
The IMSI is an unique identity which is used
internationally and used within the network to
identify the mobile subscribers.
The IMSI is stored on the subscriber identity
module (SIM), the HLR, VLR and AC
database.

17
GSM
IMSI
MCC MNC
MSIN
3 digits
3 digits Not more than 9 digits
NMSI
IMSI : Not more than 15 digits
18
GSM
TMSI
Temporary Mobile subscribers
Identity
The TMSI is an identity which
guarantees the integrity of the mobile
subscribers on the radio interface.
The VLR assigns a TMSI to each mobile
subscribers entering the VLR area.
19
GSM
MSRN
Mobile Station Roaming
Number

The MSRN is used in the GMSC to set up a
connection to the visited MSC/VLR.
20
GSM
IMEI
International Mobile Equipment
Identity
The IMEI is an unique code allocated to each
mobile equipment. It is checked in the EIR.
IMEI check
White List
Grey List
Black List



21
RADIO SUB SYSTEM (RSS)
n BTS n BTS
BSC
BSC
BSC
MSC/VLR
RSS
22
GSM
FUNCTION OF BTS -I

Encodes, encrypts, multiplexes, modulates
and feeds the RF signals to the antenna

Transcoding and rate adaption Functionality

Time and frequency synchronisation signals
transmission.

11 power classes from .01 watts (Micro cell)
to 320 watts (Umbrella cell)
23
GSM
FUNCTION OF BTS -II

Frequency hopping

Random access detection

Uplink radio channel measurements

BTS mainly consists of a set of transceivers
(TRX). Can accommodate 1 to 7 TRX per
Sector
24
GSM
FUNCTIONS OF BSC-I

It is connected to BTS and offloads
MSC
Radio resource management
Inter-cell handover
Reallocation of frequencies
Power control
25
GSM
FUNCTIONS OF BSC-II

Time delay measurement of the received
signals from MS with respect to BTS clock.

Performs traffic concentration to reduce the
number of lines from BSC to MSC.

Provide interface TCP/IP X.25 to the OMS
26
GSM
MSC-BSS Configurations
BTS
BTS
BTS
BTS BTS
BTS
A-bis
BSC
BSS
Configuration -6
Multi - cell site =
multi--BTS site
Many single
cell sites
BSS
MSC
BTS
A
A
A
Single - cell site
Configuration -1
Multi - cell site (sector Cells
Configuration -5
MCC: Mobile Switching Centre
BSS: Base Station System
BSC: Base Station Controller
BTS: Base Transceiver Station
A-bis
27
GSM
Transcoder Configurations
BTS TRAU BSC MSC
To MS
To fixed
networks
BSC TRAU BTS MSC
To MS
To fixed
networks
TRAU MSC BTS BSC
To MS
To fixed
networks
RF Air
Interface
A-bis
Interface
A
Interface
13 kbps encoded voice/ 12 kbps data
16 kbps transmission
64 kbps transmission
Transcoder (XC) configurations
28
Network and Switching
Subsystem (NSS)
MSC
(PSTN)
VLR
HLR AUC
EIR
D
C
SS7 Signalling
Traffic Path
F
(BSS)
A
E
Other
MSC
29
GSM
MSC ( MOBILE SWITCHING CENTRE)
Manages communication between GSM &
other network
Call setup functions, basic switching are done
MSC takes into account the RR allocation in
addition to normal exchange functions
MSC does gateway function while its customers
roams to other network by using HLR /VLR


30
GSM
MSC Functions - I
Paging, specifically call handling
Location updation
Handover management
Billing for all subscribers based in its area
Reallocation of frequencies to BTSs in its area
to meet heavy demands



31
GSM
MSC Functions - II
Echo canceller operation control

Signaling interface to databases like HLR, VLR.

Gateway to SMS between SMS centers and
subscribers

Handle interworking function while working as
GMSC
32
GSM
VISITOR LOCATION REGISTER (VLR)-I

It controls those mobiles roaming in its area.

VLR reduces the number of queries to HLR

One VLR may be incharge of one or more LA.

VLR is updated by HLR on entry of MS its area.

VLR assigns TMSI which keeps on changing.

IMSI detach and attach operation

33
GSM
Data in VLR
IMSI & TMSI
MSISDN
MSRN.
Location Area
Supplementary service parameters
MS category
Authentication Key


34
GSM
Home Location Register(HLR)-I

Reference store for subscribers parameters,
numbers, authentication & Encryption values.

Current subscriber status and associated VLR.

Both VLR and HLR can be implemented in the
same equipment in an MSC.

one PLMN may contain one or several HLR.
35
GSM
Home Location Register(HLR)-II
Permanent data in HLR
Data stored is changed only by man-machine.

IMSI, MS-ISDN number.

Category of MS ( whether pay phone or not )

Roaming restriction ( allowed or not ).

Supplementary services like call forwarding
36
GSM
Home Location Register(HLR)-III
Temporary data in HLR
The data changes from call to call & is dynamic

MSRN

RAND /SRES and Kc

VLR address , MSC address.

Messages waiting data used for SMS


37
GSM
AUTHENTICATION CENTRE (AUC )-I

AUC is a separate entity and physically
included in HLR

Protect against intruders in air interface

Authentication (Ki) and ciphering (Kc)
key are stored in this data base.

Keys change randomly with each call

Keys are never transmitted to MS on air
Only calculated response are sent.


38
AUTHENTICATION & ENCRIPTION
AUC
Database




Generation
of Random
Number
RAND
RAND
IMSI1
IMSI3
IMSI2
ki1
ki2
ki3
RAND
SRES
Kc
Algorithm for
Ciphering
A8
Algorithm for
Authentication
A3
Kc
64 bits
SRES
32 bits
HLR
39
GSM
EQUIPMENT IDENTITY REGISTER ( EIR )

This data base stores IMEI for all registered
mobile equipments and is unique to every ME.

Only one EIR per PLMN.

White list : IMEI, assigned to valid ME.
Black list : IMEI reported stolen
Gray list : IMEI having problems like faulty
software, wrong make of equipment etc.

40
The centralized operation of the various units in
the system and functions needed to maintain the
subsystems.

Dynamic monitoring and controlling of the
network

Separate OMC-S and OMC-R for NSS and RSS

Operations and Maintenance Centre
OMC
41
functions
-O&M data function

-Configuration management

--Fault report and alarm handling

-Performance supervision/management

-Storage of system software and data

-Support GUI for operation and Maintenance

Functions Of OMC
42
GSM
Security Management
Four basic security services provided
by GSM

Anonymity : TMSI Assignment
Authentication
Encryption:
PIN
43
GSM
Encryption Process
Encryption
Process
KEY
Plain Text
Cipher-text
44
GSM
Generic Authentication
Process
A3 A3
Ki
Ki
RAND
RAND
Compare
SRES
SRES
Response
IMSI
IMSI
Yes/No
Radio Path
45
AUTHENTICATION & ENCRIPTION
AUC
Database




Generation
of Random
Number
RAND
RAND
IMSI1
IMSI3
IMSI2
ki1
ki2
ki3
RAND
SRES
Kc
Algorithm for
Ciphering
A8
Algorithm for
Authentication
A3
Kc
64 bits
SRES
32 bits
HLR