Subject:WMN

Class & Code IF6I-22622

UNIT1(PART 1)
PCS &Global System for Mobile Communication(GSM)
(12M)

PCS, or Personal Communications Service, is a term that

encapsulates a variety of wireless communication services that
we use every day. From voice calls to multimedia messaging,
PCS enables us to stay connected and communicate with
others efficient

Application of PCS
1)Voice Communication
2)Messaging
3)Internet access
4)Location based services

Personal Communications System architecture(PCS)

 PCS architecture has mainly 3 types of Interfaces

 • Um interface The “air” or radio interface standard that is used
for exchanges between a mobile (ME) and a base station (BTS /
BSC). For signalling, a modified version of the ISDN LAPD,
known as LAPDm is used.
• Abis interface This is a BSS internal interface linking the BSC
and a BTS, and it has not been totally standardised. The Abis
interface allows control of the radio equipment and radio
frequency allocation in the BTS.
• A interface The A interface is used to provide communication
between the BSS and the MSC.
 PCS architecture divides into to 3 subsystem i.e.Base Station
Subsystem(BSS),Network Switching Subsystem (NSS) and
Operation and Support Subsystem (OSS)

Mobile station
 PCS use mobile stations (MSs) to communicate with the base
stations (BSs) in a PCS network.
 MS is also referred to as handset, mobile phone, subscriber unit,
or portable.
 Mobile stations (MS), mobile equipment (ME) or as they are
most widely known, cell or mobile phones are the section of a
GSM cellular network.
 In recent years their size has fallen dramatically while the level
of functionality has greatly increased.
 There are a number of elements to the cell phone, although the
two main elements are the main hardware and the SIM.
 It contains a number known as the International Mobile
Equipment Identity (IMEI). This is installed in the phone at
manufacture and “cannot” be changed. It is accessed by the
network during registration to check whether the equipment has
been reported as stolen.
 The SIM or Subscriber Identity Module contains the information
that provides the identity of the user to the network. It contains
are variety of information including a number known as the
International Mobile Subscriber Identity (IMSI).

Base Station Subsystem (BSS)

 The Base Station Subsystem (BSS) section of the GSM network
architecture that is fundamentally associated with
communicating with the mobiles on the network. It consists of
two elements:
 • Base Transceiver Station (BTS): The BTS used in a GSM
network comprises the radio transmitter receivers, and their
associated antennas that transmit and receive to directly
communicate with the mobiles. The BTS is the defining element
for each cell. The BTS communicates with the mobiles and the
interface between the two is known as the Um interface with its
associated protocols.
 Base Station Controller (BSC): The BSC forms the next stage
back into the GSM network. It controls a group of BTSs, and is
often co-located with one of the BTSs in its group. It manages
the radio resources and controls items such as handover within
the group of BTSs, allocates channels and the like. It
communicates with the BTSs over what is termed the Abis
interface.

Network Switching Subsystem (NSS)

 The GSM system architecture contains a variety of different
elements, and is often termed the core network.
 It provides the main control and interfacing for the whole mobile
network. The major elements within the core network include:

• Mobile Services Switching Centre (MSC): The main element

within the core network area of the overall GSM network
architecture is the Mobile switching Services Centre (MSC).
• The MSC acts like a normal switching node within a PSTN or
ISDN, but also provides additional functionality to enable the
requirements of a mobile user to be supported.
• These include registration, authentication, call location, inter-
MSC handovers and call routing to a mobile subscriber.
• It also provides an interface to the PSTN so that calls can be
routed from the mobile network to a phone connected to a
landline.
• Interfaces to other MSCs are provided to enable calls to be
made to mobiles on different networks.
• Home Location Register (HLR): This database contains all the
administrative information about each subscriber along with
their last known location.
• In this way, the GSM network is able to route calls to the
relevant base station for the MS.
• When a user switches on their phone, the phone registers with
the network and from this it is possible to determine which BTS
 it communicates with so that incoming calls can be routed
appropriately.
• Even when the phone is not active (but switched on) it re-
registers periodically to ensure that the network (HLR) is aware
of its latest position.
• There is one HLR per network, although it may be distributed
across various sub-centres to for operational reasons.

• Visitor Location Register (VLR): This contains selected

information from the HLR that enables the selected services for
the individual subscriber to be provided.
• The VLR can be implemented as a separate entity, but it is
commonly realised as an integral part of the MSC, rather than a
separate entity. In this way access is made faster and more
convenient.
 Equipment Identity Register (EIR): The EIR is the entity that
decides whether a given mobile equipment may be allowed
onto the network.
 Each mobile equipment has a number known as the
International Mobile Equipment Identity.
 This number, as mentioned above, is installed in the equipment
and is checked by the network during registration.
 Dependent upon the information held in the EIR, the mobile
may be allocated one of three states – allowed onto the
network, barred access, or monitored in case its problems.

• Authentication Centre (AuC): The AuC is a protected

database that contains the secret key also contained in the
user’s SIM card.
• It is used for authentication and for ciphering on the radio
channel.
• Gateway Mobile Switching Centre (GMSC): The GMSC is the
point to which a ME terminating call is initially routed, without
any knowledge of the MS’s location.
• The GMSC is thus in charge of obtaining the MSRN (Mobile
Station Roaming Number) from the HLR based on the MSISDN
(Mobile Station ISDN number, the “directory number” of a MS)
and routing the call to the correct visited MSC.
• The “MSC” part of the term GMSC is misleading, since the
gateway operation does not require any linking to an MSC.
Operation and Support Subsystem (OSS)

 The OSS or operation support subsystem is an element within

the overall GSM network architecture that is connected to
components of the NSS and the BSC.
 It is used to control and monitor the overall GSM network and it
is also used to control the traffic load of the BSS.
 It must be noted that as the number of BS increases with the
scaling of the subscriber population some of the maintenance
tasks are transferred to the BTS, allowing savings in the cost of
ownership of the system.

GSM stands for Global System for Mobile Communication. GSM is

an open and digital cellular technology used for mobile
communication. It uses 4 different frequency bands of 850 MHz, 900
MHz, 1800 MHz and 1900 MHz . It uses the combination of FDMA and
TDMA. This article includes all the concepts of GSM architecture and
how it works.
GSM is having 4 different sizes of cells are used in GSM :
1. Macro : In this size of cell, Base Station antenna is installed.
2. Micro : In this size of cell, antenna height is less than the
average roof level.
3. Pico : Small cells’ diameter of few meters.
4. Umbrella : It covers the shadowed (Fill the gaps between
cells) regions.
Features of GSM are :
1. Supports international roaming
2. Clear voice clarity
3. Ability to support multiple handheld devices.
4. Spectral / frequency efficiency
5. Low powered handheld devices.
6. Ease of accessing network
7. International ISDN compatibility.
8. Low service cost.
9. New features and services.
GSM is nothing but a larger system which is divided into further 3
subsystems.
1. BSS : BSS stands for Base Station Subsystem. BSS handles
traffic and signaling between a mobile phone and the
 network switching subsystem. BSS having two
components BTS and BSC.
2. NSS : NSS stands for Network and Switching Subsystem.
NSS is the core network of GSM. That carried out call and
mobility management functions for mobile phone present in
network. NSS have different components like VLR,
HLR and EIR.
3. OSS : OSS stands for Operating Subsystem. OSS is a
functional entity which the network operator monitor and
control the system. OMC is the part of OSS. Purpose of OSS
is to offer the customer cost-effective support for all GSM
related maintenance services.

Suppose there are 3 Mobile stations which are connected with the
tower and that tower is connected to BTS through TRX, then further
connected to BSC and MSC. Let’s understand the functionality of
different components.
1. MS : MS stands for Mobile System. MS comprises user equipment
and software needed for communication with a mobile
network. Mobile Station (MS) = Mobile Equipment(ME) + Subscriber
Identity Module (SIM). Now, these mobile stations are connected to
tower and that tower connected with BTS through TRX. TRX is a
transceiver which comprises transmitter and receiver. Transceiver has
two performance of sending and receiving.
2. BTS : BTS stands for Base Transceiver Station which facilitates
wireless communication between user equipment and a network.
Every tower has BTS.
3. BSC : BSC stands for Base Station Controller. BSC has multiple
BTS. You can consider the BSC as a local exchange of your area which
has multiple towers and multiple towers have BTS.
4. MSC : MSC stands for Mobile Switching Center. MSC is associated
with communication switching functions such as call setup, call
release and routing. Call tracing, call forwarding all functions are
performed at the MSC level. MSC is having further components like
VLR, HLR, AUC, EIR and PSTN.
• VLR : VLR stands for Visitor Location Register. VLR is a
database which contains the exact location of all mobile
subscribers currently present in the service area of MSC. If
you are going from one state to another state then your entry
is marked into the database of VLR.
• HLR : HLR stands for Home Location Register. HLR is a
database containing pertinent data regarding subscribers
authorized to use a GSM network. If you purchase SIM card
from in the HLR. HLR is like a home which contains all data
like your ID proof, which plan you are taking, which caller
tune you are using etc.
• AUC : AUC stands for Authentication Center. AUC
authenticates the mobile subscriber that wants to connect in
the network.
• EIR : EIR stands for Equipment Identity Register. EIR is a
database that keeps the record of all allowed or banned in
the network. If you are banned in the network then you can’t
enter the network, and you can’t make the calls.
• PSTN : PSTN stands for Public Switched Telephone
Network. PSTN connects with MSC. PSTN originally a
network of fixed line analog telephone systems. Now almost
entirely digital in its core network and includes mobile and
other networks as well as fixed telephones. The earlier
landline phones which places at our home is nothing but
PSTN.
5.OMC : OMC stands for Operation Maintenance Center. OMC
monitor and maintain the performance of each MS, BSC and MSC
within a GSM system.
Three subsystem BSS, NSS and OSS are connected with each other
via some interfaces. Total three interfaces are there:
 1. Air Interface : Air interface is also known as UM interface.
Interface between MS and BTS is called as UM interface
because it is mobile analog to the U interface of ISDN.
2. Abis Interface : It is a BSS internal interface linking with BTS
and BSC.
3. A interface : It provides communication between BSS and
MSC.

Services of GSM:
1. Bearer services/ data services:
GSM specifies different mechanism for data transmission, The
original GSM allowing for data rates of up to 9600 bits/s.
Bearer services permit transparent or non transparent data
transmission.
• Transparent bearer services:
Transparent bearer services only use the physical layer to
transmit data. Data transmission has a constant delay
at throughput if no transmission error occurs.
• Non-transparent bearer services:
Non-transparent bearer services use protocols of layer two
and three two three to implement error correction and flow
control.(data link layer and network layer).
2.Tele services:
Tele services are nothing but we use now as at also.
• Video calls.
• Video text and face emoji.
• short text message(SMS).
3.Supplementary services:
supplementary services it means advanced services.
• Conference calls.
• Call waiting.
• Call forwarding

GSM channel types

 Introduction:
  There are two types of GSM logical channels, called traffic
channels (TCH) and control channels (CCH).
 Traffic channels carry digitally encoded user speech or
user data and have identical functions and formats on
both the forward and reverse link. Control channels carry
signaling and synchronizing commands between the base
station and the mobile station.

Gsm channel types

Introduction:

There are two types of GSM logical channels, called traffic channels (TCH)
and control channels (CCH). Traffic channels carry digitally encoded user
speech or user data and have identical functions and formats on both the
forward and reverse link. Control channels carry signaling and synchronizing
commands between the base station and the mobile station.

GSM Traffic Channels (TCH):

• GSM traffic channels may be either full-rate or half-rate and may carry
either digitized speech or user data.
 • When transmitted as full-rate, user data is contained within one TS
per frame, when transmitted as half-rate, user data is mapped onto
the same time slot, but is sent in alternate frames.
• TCH data is transmitted in consecutive frames. Each group of twenty-
six consecutive TDMA frames is called a multiframe.
• For every twenty-six frames, the thirteenth and twenty-sixth frames
consist of Slow Associated Control Channel (SACCH) data, or the
idle frame, respectively.
• The twenty-sixth frame contains idle bits for the case when full-rate
TCHs are used, and contains SACCH data when half-rate TCHs are
used.
• Some of the full rate and half rate channels are :
• Full-Rate Speech Channel (TCHIFS): Carries the full-rate speech at
22.8 kbps and user speech which is digitized at a raw data rate of 13
kbps.
• Full-Rate Data Channel for 9600 bps (TCH/F9.6): carries raw user
data which is sent at 9600 bps.With additional FEC data is sent at
22.8 kbps.
• Full-Rate Data Channel for 4800 bps (TCH/F4.8): carries raw user
data which is sent at 4800 bps. With additional FEC data is sent at
22.8 kbps.
• Full-Rate Data Channel for 2400 bps (TCH/F2.4): carries raw user
data which is sent at 2400 bps With additional FEC data is sent at
22.8 kbps.
• Half-Rate Speech Channel (TCH/HS): With GSM channel coding
added to the digitized speech, the half-rate speech channel will carry
11.4 kbps.
• Half-Rate Data Channel for 4800 bps (TCH/H4.8): carries raw user
data which is sent at 4800 bps. With additional FEC data is sent at
11.4 kbps
• Half-Rate Data Channel for 2400 bps (TCHIH2.4): carries raw user
data which is sent at 2400 bps. With additional FEC data is sent at
11.4 kbps

Control channels (CCH):

• There are three main control channels in the GSM system. These are
:
 • Broadcast control channel (BCCH): A BTS uses this channel to
signal information to all MSs within a cell.
• The BTS sends information for frequency correction via the frequency
correction channel (FCCH) and information about time
synchronization via the synchronization channel (SCH), where both
channels are subchannels of the BCCH.
• Common control channel (CCCH): All information regarding
connection setup between MS and BS is exchanged via the CCCH.
For calls toward an MS, the BTS uses the paging channel (PCH) for
paging the appropriate MS.
• If an MS wants to set up a call, it uses the random access channel
(RACH) to send data to the BTS.
• The BTS uses the access grant channel (AGCH) to signal an MS that
it can use a TCH or SDCCH for further connection setup.
• Dedicated control channel (DCCH): There are three types of
dedicated control channels in GSM, and, like traffic channels.
• They are bidirectional and have the same format and function on both
the forward and reverse links.
• The three channels are: SDCCH - For signalling exchanges, e.g.
during call setup, registration / location updates. FACCHs - FACCH
for the SDCCH. The SDCCH burst is stolen for a full signalling burst.
Function not clear in the present version of GSM (could be used for
e.g. handover of an eight-rate channel, i.e. using a "SDCCH-like"
channel for other purposes than signalling). SACCHs - SDCCH in-
band signalling, e.g. for link monitoring.

GSM Radio Aspects:

Thus several conversations can takes place simultaneously at

the same pair of tansmit/receive radio frequencies. The radio
parameters for GSM are summerised in the following table

System Parameter Value (GSM)

Multiple Access TDMA/FDMA/FDD

Uplink frequency
890-915 MHz
(mobile-to-base)

Downlink frequency
935-960 MHz
(base-to-mobile)

Channel Bandwidth 200KHz

Number of channels 124

8 (full rate), 16 (half

Channels/carrier
rate)

Frame duration 4.6 ms

Interleaving duration 40 ms

Modulation GMSK

Speech coding method RPE-LTE convolution

Speech coder bit rate 13 kb/s (full rate)

Associated control
Extrea frame
channel

Handoff scheme Mobile-assisted

Mobile station power

levels 0.8, 2, 5, 8 W
Roaming
 Roaming is one of the fundamental mobility management
procedures of all cellular networks.
 Roaming is defined as the ability for a cellular customer to
automatically make and receive voice calls, send and
receive data, or access other services, including home data
 services, when travelling outside the geographical
coverage area of the home network, by means of using a
visited network.
 This can be done by using a communication terminal or
else just by using the subscriber identity in the visited
network.
Roaming is technically supported by a mobility
management, authentication, authorization and billing procedur
es

Types of area
1)Location area
 A "location area" is a set of base stations that are grouped
together to optimize signaling.
 Typically, tens or even hundreds of base stations share a
single Base Station Controller (BSC) in GSM, or a Radio
Network Controller (RNC) in UMTS.
The BSC / RNC is the intelligence behind the base stations; it
handles allocation of radio channels, receives measurements
from the mobile phones, and controls handovers from base
station to base station.
2)Routing area
 The routing area is the packet-switched domain equivalent
of the location area.
 A "routing area" is normally a subdivision of a "location
area".
 Routing areas are used by mobiles which are GPRS-
attached.
  GPRS is optimized for "bursty" data communication
services, such as wireless internet/intranet, and
multimedia services.
 It is also known as GSM-IP ("Internet Protocol") because it
will connect users directly to Internet Service Providers

3)Tracking area
 The tracking area is the LTE( long-term
evolution) counterpart of the location area and routing
area.
 A tracking area is a set of cells. Tracking areas can be
grouped into lists of tracking areas (TA lists), which can be
configured on the User Equipment (UE).
 Tracking area updates are performed periodically or when
the UE moves to a tracking area that is not included in its
TA list.
 Operators can allocate different TA lists to different UEs.
 This can avoid signaling peaks in some conditions: for
instance, the UEs of passengers of a train may not perform
tracking area updates simultaneously.
Network signalling
 Network signaling in wireless communication refers
to the exchange of control information between
different entities within a wireless network.
 This signaling is crucial for the establishment,
maintenance, and termination of communication
sessions between mobile devices and the network..
 It involves various protocols and procedures to
manage the control aspects of communication
  MTP(Meassage Transfer Part)
 Transfer signalling Information
 MTP level 2 provides reliable transfer of signaling
message
 MTP level 3 provides message routing and network
management
 SCCP (Signalling Connection Control Part)
 It runs above MTP layers and provides facilities
similar to UDP and TCP layers of TCP/IP.
Provides additional functions such as GTT to the MTP
 TCAP (Transaction Capabilités Application part):
Provides the capability to exchange information
between using noncircuit-related signaling
  ISUP (Integrated Services Digital Network User
Part)
Establishes circuit switched network connections
 OMAP (Operations and Administration Application
Part):
OMAP provides facilities that include administration of
system databases, performance monitoring, and
maintenance access.
MAP (Mobile Application Part): It is the most complex
SS7 component and is mainly used in GSM mobile
telephone systems to pass information between the
network components

Handoff
In cellular communications, the handoff is the
process of transferring an active call or data
session from one cell in a cellular network or
from one channel to another.
In satellite communications, it is the process of
transferring control from one earth station to
another.
 Handoff is necessary for preventing loss of
interruption of service to a caller or a data
session user. Handoff is also called handover.
Types of handoff
Hard handoff
Soft handoff
Hard Handoff − In a hard handoff, an actual
break in the connection occurs while switching
from one cell to another.
 The radio links from the mobile station to the
existing cell is broken before establishing a link
with the next cell.
 It is generally an inter-frequency handoff. It is
a “break before make” policy

• Soft Handoff − In soft handoff, at least one of the links is

kept when radio links are added and removed to the
mobile station.
• This ensures that during the handoff, no break occurs. This
is generally adopted in co-located sites. It is a “make
before break” policy.
  Handover can also be classified on the basis of handover
techniques used. Broadly they can be classified into three
types:
 Network controlled handover
 Mobile phone assisted handover
 Mobile controlled handover
Temporary Mobile Subscriber Identity (TMSI)

 The Temporary Mobile Subscriber Identity (TMSI) is the

identity that is most commonly sent between the mobile
and the network.
 Depending on the necessary precision, a TMSI may be set
by a VLR, SGSN, or MME.
 In the least-precise case, TMSI is randomly assigned by
the VLR to every mobile in the area, the moment it is
switched on, in order to support identity confidentiality.
 The number is local to a location area, and so it has to be
updated each time the mobile moves to a new
geographical area.

Mobility
Mobility is a process that allows transferring the mobile service as
the mobile station moves from one cell to another. Mobility
management in GSM networks has the purpose of monitoring
subscribers and their location (in terms of the base station they
are registered to), to enable them to receive voice calls, SMSs or
data services.

 GSM location area hierarchy

  In GSM, registration or location update occurs when an
MS moves from one LA to another ·
 Basic Location Update Procedure
 1. Inter- LA Movement
 2. Inter- MSC Movement
 3. Inter- VLR Movement
Inter-LA Movement
Step 1.
 The MS moves from LA1 to LA2, where both LAs are
connected to the same MSC .
 A location update request message is sent from the MS to
the MSC through the BTS, include the address of the
previously visited LA, MSC, and VLR .
 TMSI is used to avoid sending the IMSI on the radio path
 Step 2. The MSC forwards the location update request to
the VLR by a o TCAP (TRANSACTION CAPABILITY
APPLICATION PART) message,
MAP_UPDATE_LOCATION_AREA , Address of the MSC
,TMSI of the MS ,Previous location area identification (LAI)
,Target LAI , Other related information
  Step 3 and Step 4. MSC updates the LAI field of the VLR
record, and replies with an acknowledgment to the MS
through the MSC
Inter-MSC Movement

 Two LAs belong to different MSCs of the same VLR

 Steps 1 and 2. The location update request is sent from
the MS to the VLR
 Step 3. VLR updates the LAI and the MSC fields of VLR
record, and derives the HLR address of the MS from the
MS’s IMSI
 VLR sends the MAP_UPDATE_LOCATION message to the
HLR
 o IMSI of the MS
 o Address of the target MSC (i.e., MSC2)
 o Address of the target VLR (i.e., VLR1)
 o Other related information
 Step 4. HLR identifies the MS’s record by using the
received IMSI
 MSC number field is updated
 An acknowledgment is sent to the VLR
 Step 5 and 6. Similar to steps 3 and 4 in Inter –LA
movement
Inter-VLR Movement
 Two LAs belong to MSCs connected to different VLRs
 Step 1. Location update request is sent from MS to VLR
 Step 2 and 3. VLR2 identifies address of the previous VLR
(VLR1), then sends the message
MAP_SEND_IDENTIFICATION to VLR1
 o TMSI
 o VLR1 sends IMSI to VLR2
 Step 4 and 5.
 VLR2 creates a VLR record for the MS, and sends a
registration message to update the HLR
 HLR updates MSC and VLR address field of the record
 An acknowledgment is sent back to VLR2
 Step 6. VLR2 generates a new TMSI and sends it to the MS
 Step 7 and 8. The obsolete record of the MS in VLR1 is
deleted

call processing in GSM

1. The MS sends the dialed number indicating the service requested to the MSC(via BSS)
2. The MSC checks from the VLR if the MS is allowed the requested service. If so, MSC asks
BSS to allocate necessary resources for the call.
3. If the call is allowed, the MSC routes the call to GMSC.
4. The GMSC routes the call to the local exchange of called user.
5. The LE alerts (applies ringing) the called terminal.
6. Answer back (ring back tone) from the called terminal to LE.
7. Answer back signal is routed back to the MS through the serving MSC which also
completes the speech path to the MS.
Call connection when sender MS and receiver MS both are present within the same cell.
1. The MS sends the dialed number indicating the service requested to the MSC(via BSS)
2. The MSC checks from the VLR if the MS is allowed the requested service. If so, MSC asks
BSS to allocate necessary resources for the call.
3. If the call is allowed, the MSC routes the call to the receiver MS via BSS as both MS are in
the same cell.