DEP 50063 –

WIRELESS COMMUNICATION

TOPIC 12

2.0 CELLULAR COMMUNICATION

SYSTEMS

1
2.1 The Evolution and Standard of Cellular Communication
Systems as Wireless Wide Area Network (WWAN)

2
3
2.1.1 Explain the Evolution of Cellular Communication Systems

a. Second Generation System (2G)

2G digital cellular communication standard developed by European

Telecommunications Standards Institute (ETSI) in Europe,
commercially introduced in 1991 and continually updated.

GSM Evolution @2G Evolution

4
i. Global System for Mobile Communication (GSM)

GSM employs narrowband TDMA (Time Division Multiple Access)

which allows 8 simultaneous calls on the same 200 KHz
communication band at speeds up to 9.6 Kb/s and 160
bytes/characters SMS transmission.

GSM is a 2G cellular communication systems.

GSM operates in the 900 MHz a and 1.8 GH known as GSM900 and
GSM1800 respectively.
GSM provides a high degree of security by using SIM cards and an
advanced encryption scheme.
The use of harmonized spectrum across most of the globe, combined
with GSM’s international roaming capability, allows travelers to access
the same mobile services at home and abroad.

5
ii. General Packet Radio Service (GPRS)

GPRS is an evaluation of GSM systems using the already existing Base

Station Subsystem (BSS) with additional packet network to support
data services and applications based on Internet Protocol (IP) to GSM
mobile networks at speeds 114 Kbps. @171.2 Kbps

GPRS is 2. 5G cellular communication systems.

iii. Enhance Data Rates for GSM (EDGE)

EDGE is an evaluation of GSM/GPRS systems using the already

existing Base Station Subsystem (BSS) with additional packet network
to support data services and applications based on Internet Protocol (IP)
to GSM mobile networks at speeds 384 Kbps

EDGE is 2.75G cellular communication systems.

6
GSM Network

7
GSM / GPRS Network Architecture

8
GSM/EDGE Network

9
b. Third Generation System (3G)

UMTS

UMTS Evolution @3G Evolution

10
i. Universal Mobile Telecommunication System (UMTS)

Wideband Code Division Multiple Access (WCDMA)

UMTS is a 3G cellular communication standard that employs the

WCDMA multiple access method and the FDD (frequency division
duplex) method to provide high-speed and high-capacity service.

UMTS transmits on a pair of 5 MHz-wide radio channels.

UMTS is the standard that most GSM carrier moved to when

upgrading 3G.

UMTS supports data transfer rate of 384 Kbps until to of 28 or 42

Mbps when it evolved to HSPA+.

Part of the UMTS @WCDMA standard is based on GSM technology.

WCDMA networks are designed to integrate with GSM networks at
certain level & most WCDMA phones include GSM as well, for
capability
. 11
ii. High Speed Packet Access (HSPA)

HSPA refers to a set of technologies that enhance WCDMA (UMTS)

system used for wireless broadband telecommunication.

HSPA is composed HSDPA and HSUPA protocol

High Speed Packet Access (HSPA)[ is an amalgamation (combination)

of two protocols, High Speed Downlink Packet Access (HSDPA) and
High Speed Uplink Packet Access (HSUPA), that extends and improves
the performance of existing 3G mobile telecommunication networks
using the WCDMA protocol

HSPA features peak data rates of up to 14 Mbps downlink for HSPDA

and up to 5.7 Mbps uplink for HSUPA.

iii. HSDPA (High Speed Downlink Packet Access)

HSPDA is a wireless broadband telecommunication protocol in HSPA

used for down load at rate 14 Mbps. 12
 Note:
HSPDA – High
Speed Downlink
Packet Access
Protocol

HSPUA - High-
Speed Uplink
Packet Access
HSDPA HSUPA Protocol.

High Speed Packet Access (HSPA)

HSDA+ (Evolved High Speed Packet Access)

HSPA+, or HSPA Plus is the second phase of HSPA which has been
introduced in 3GPP release 7 (2005 - 2007) can achieve data rates of
up to 42.2 Mbit/s.

13
UMTS System Architecture

Uu Iu

Node B MSC/
VLR GMSC
RNC

External Networks
Node B
USIM

Cu Iur
Iub HLR

ME
Node B
RNC SGSN GGSN
Node B

UE UTRAN CN
c. LTE (long Term Evolution)

LTE (4G) is a standard for wireless communication of high-speed data

for mobile phones and data terminals at speed 100 Mbps for downlink
and 50 Mbps for uplink using fully packet switching technology.

LTE System Architecture 15

d. Fifth Generation System

5G is the next generation of mobile broadband that will replace 4G (LTE)

connection.

5G offer faster download / upload speeds and low latency, compare to

4G.

5G aim is to provide 20 times the peak data rate (speed), 10 times lower
latency (responsiveness) and 3 times more spectral efficiency than
4G LTE.

5G is a fifth generation broadband mobile technology designed to meet

the requirements of IMT-2020 set by the ITU-R specification M.2083
[16].
5G will provide more advanced and enhanced capabilities
compared to 4G LTE (IMT-Advanced).

16
Comparison Between 4G and 5G
4G 5G
Peak Data Rate 1 Gbps 20 Gbps
Latency 10 mS < 1 mS
Spectrum 3 GHz 30 GHz
Density 100,000 / km2 1,000,000 / km2
Channel Bandwidth 20 MHZ 100 MHz below 6GHz
400 MHz above 6GHZ
Frequency 2-8 GHz 3 – 300 GHz

17
 2.1.2 The Characteristics of Cellular Communication System
in Term of the Technology Standard, Application, Switching,
Operating Frequency, Bandwidth and Transmission Speed.
Generation 2G 3G 4G 5G

GSM UMTS (WCDMA) LTE

Technology
GPRS (2.5G) HSPA (3.5G) LTE A 5G
Standard
EDGE (2.75G) HSPA+ (3.75G) WiMAX
GSM UMTS LTE
Digital voice & - Digital Voice & Digital Voice
SMS Data 384 Kbps Data 100 Kbps Digital
Voice
GPRS HSPA LTE A
Data-114 Kbps DL: 14 Mbps (HSDPA) Digital Voice
Application UL: 5.7 Mbps (HSUPA) Data 1 Gbps Data
EDGE 20 Gbps
Data-384 Kbps HSPA+ WiMAX
DL: 28 @42.2 Mbps Digital Voice
UL: 5.7 Mbps Data 100 Kbps

Voice- Circuit
Switching Circuit Packet Packet
Data - Packet
18
 2.1.2 The Characteristics of Cellular Communication System
in Term of the Technology Standard, Application, Switching,
Operating Frequency, Bandwidth and Transmission Speed.
Generation 2G 3G 4G 5G
Mobile Integrated high Dynamic Dynamic
telephony, quality audio, information information
SMS, MMS, video and data. access, access, wearable
Application
E-mail, wearable devices with AI
Internet devices. capabilities. IoT.
(www)
850 MHz,
Operating 900 MHz 1800 MHz,
900 MHz
Frequency 2100 MHz 2300 MHz 3-300 GHz
1800 MHz
(1.6 – 2GHZ) 2600 MHz
(2-8 GHz)
1.4 – 20
Bandwidth 200 KHz 5 MHz MHz 500 MHz
@ 15 MHz
Transmission
Speed
19
 2.1.2 The Characteristics of Cellular Communication System
in Term of the Technology Standard, Application, Switching,
Operating Frequency, Bandwidth and Transmission Speed.
Generation 2G 3G 4G 5G
LTE
UMTS
GSM Data 100
384 Kbps
64 Kbps Mbps
(voice)
HSPA
LTE A
DL: 14 Mbps Data
Transmission GPRS Data 1 Gbps
20 Gbps
Speed 114 Kbps
HSPA+
WiMAX
DL: 28 @42.2
EDGE Digital Voice
Mbps
384 Kbps Data 100
UL: 5.7 Mbps
Mbps

20
2.2 Investigate the Architecture of Cellular Network

2.2.1 Illustrate the architecture and main subsystems for:

2.2.2 Determine the function of each element/equipment in the
main subsystem

a. GSM System

21
GSM architecture

22
3 main subsystem of GSM architecture:
 Base Station Subsystem (BSS)
 Network and Switching Subsystem (NSS)
 Operation Subsystem (OSS)

NSS

OSS
MS
BSS 23
MS is also a subsystem but usually considered to be part of BSS for
architecture purposes.
MS consist of Mobile Equipment (ME) and Subscriber Identity Module (SIM ).
MS is low power radio transceiver for voice and data to/from the BTS.

SIM is a memory to store the IMSI, encryption keys, entitled services and
specific information used to identify and authenticate subscribers (ME) on the
network.
Without a SIM installed, MEs are identical & non operational.

BSS
Provides & manages radio transmission path between MS and MSC.

NSS
 Provides & manages switching function for MSs in the network.
 Allows MSC to connect to other MSC and to other networks such as PSTN,
ISDN and PDN.

OSS
 Supports the operation & maintenance of GSM network.
 Allows system engineer to monitor, diagnose & trouble shoot all aspect of
GSM system
Note :International Mobile Subscriber Identity ( IMSI) is used to
identify the user of a cellular networks and is a unique identification
24
associated with all cellular networks
BSS consist of : Note : EFR - Enhanced Full Rate
FR - Full Rate
 MS (ME and SIM)
HR - Half Rate
 BTS – Base Transceiver Station
 BSC – Base Station Controller
 TRAU – Transcoding and Rate Adaption Unit

BTS
Houses the radio transceiver, antenna and tower that define a cell.
Handle radio link protocols with the MSs within a cell site.

BSC
Handles all mobile management tasks for 1 or more BTS.
Provides frequency selection, handoff and call management for a group of
BTSs.

TRAU
Performs transcoding function for speech channels and RA (Rate Adaptation)
for data channels in the GSM network.

TRAU compress speech data from 64 Kbps in PSTN/ISDN to 13/12.2/6.5

Kbps in GSM for case FR/EFR/HR (respectively) speech coding.
TRAU decompress of speech data from 13/12.2/6.5 Kbps in GSM to 64 Kbps
in PSTN/ISDN.
25
NSS consists of: HLR and VLR together with MSC
 MSC – Mobile Switching Network provide the call-routing and
roaming capabilities of GSM.
 HLR – Home Location Register
 VLR – Visitor Location Register
 GMSC – Mobile Switching Network
MSC
 Controller for all base stations in service area (zone area)
 Control the transmission, handoff function, channel assignment and all
mobility
managements between BTSs and BSCs.
 Link to 2 databases; HLR and VLR that contain specific information to
identify the location of the MS in the network.
 Link a databases; AuC that contain specific information for secure
authentication in the network.
 Provides link other MSC and to other networks such as PSTN, ISDN and
PDN

HLR
 Database that used as to store and maintain information about the
subscriber's identity (profile), the home of MSC and servicers purchased.
 The information is placed in the HLR by the provider when sign up for
service.
 Provides selected data to the home MSC or visiting VLR to authorize
subscribed services. 26
VLR
 Database that keeps track all visiting subscribers when they roaming in an
area that served by non-home MSC.
 Receives information from the a subscriber’s HLR in order to provide correct
list of subscribed servicers to visiting mobile subscribers.
 When subscriber enters the area of new MSC, VLR associated to MSC will
request information about the new subscriber to its corresponding HLR.
 The VLR then have enough information to authorize services for visiting
subscriber.

Gateway MSC
Link the GSM network to other network; such as PSTN, ISDN and PDN.

27
Operating Subsystem (OSS):
 Authentication Centre (AuC)
 Operating And Maintenance Centre (OMC)
 Equipment Identity Register (EIR)

AuC
 Database that maintains all secret authentication ID number and a secret key
associated with each subscriber, which is used for secure authentication for every
subscribers on the network.
When MS requests service, HLR or VLR issue a challenge to the MS to determine
whether the MS is valid with proper ID and stored secret key.
If a valid secret key is received from the MS, the AuC authenticate the MS and MSC
granted service.
If the secret key received is incorrect, the MS is denied service.

EIR
• EIR is a database that contains a list of all valid mobile equipment on the
network, where each mobile station is identified by its IMEI (International Mobile
Equipment Identity).
• An IMEI is marked as invalid if it has been reported stolen or is not type
approved.

28
OMC
OMC is used for supervision of GSM network, subscriber administration,
channel administration, cell configuration, telecommunication management and
operation support.
Errors from the network manually handled by an operator e.g.
• Defect circuit boards in a BTS
• Messages from a cellular that are registered in EIR that tries to call
• Checking the functionality of the systems components
• Statistics (current traffic between BTS-BSC etc)
• Graphical tools for presenting images of the network

 Supports the operation & maintenance of GSM network.

 Allows system engineer to monitor, diagnose & trouble shoot all aspect of
GSM system

29
b. GPRS System

30
• GPRS extends the architecture of the GSM standard to allow packet
data transfers with theoretical data rates on the order of 171.2
Kbps.

• Integration of GPRS into a GSM architecture requires the addition

of new network nodes called GSN (GPRS Support Nodes) located on
a backbone network:
i. the SGSN (Serving GPRS Support Node) router manages the
addresses of the terminals in the cell and provides the packet
transfer interface with the GGSN gateway.
ii. the GGSN (Gateway GPRS Support Node) gateway interfaces
with other data networks (the Internet). In particular, the
GGSN is responsible for providing an IP address to the mobile
terminals throughout the duration of their connection

31
GPRS Network Architecture

SGSN: forms a gateway to the services within the network.

GGSN: forms the gateway to the outside world.
PCU: Packet Control Unit, PCU, which differentiates whether data is
to be routed to the packet switched or circuit switched networks.
32
c. UMTS System

UMTS System Architecture

Uu Iu

Node B MSC/
VLR GMSC
RNC

External Networks
Node B
USIM

Cu Iur
Iub HLR

ME
Node B
RNC SGSN GGSN
Node B

UE UTRAN CN
Use Equipment (UE)
UE consits of a ME and USIM.
UE is low power radio transceiver for voice and data to/from the Node
B.
Communicates with several Node B using WCDMA access method and
FDD (Frequency Division Duplex).

NODE B
A base station responsible for physical layer processing such as error
correcting coding, modulation, spreading, conversion from baseband to
RF signal transmitted from antenna and vice versa.
A Node B can handle transmission/reception from one to several cells.

Radio Network Controller (RNC)

Controls Multiple (up to hundreds) Node B.
RNC in charge of call setup, QoS ( Quality of service) handling, and
radio resource management in cells.
The ARQ protocol and most of the intelligence in radio access network
resides in RNC.
RNC is connected to the internet and PSTN through the core network.
ARQ – Automatic Repeat Request
34
d. LTE System

SiG

UE - User Equipment
USIM - UMTS Subscriber Identify Module
eNB - E-UTRAN Node B @Evolved Node B
E-UTRAN - Evolved UMTS Terrestrial Radio Access Network
EPC (Evolved Packet Core)
MME (Mobility Management Entity)
HSS (Home Subscriber server)
S-GW (Serving Gateway)
P-GW (Packet Data Network @PDN Gateway )
PCRF (Policy Control and Charging Rules Function) 35
LTE Network Architecture

E-UTRAN

Note :Policy and Charging Rules Function (PCRF)

36
The architecture of LTE is comprised of 3 main components:
1. User Equipment (UE).
2. Evolved UMTS Terrestrial Radio Access Network (E-UTRAN).
3. Evolved Packet Core (EPC).

EPC communicates with packet data networks in the internet.

 UE interfaces with ENodeB using interface Uu.

 eNodeB interfaces with EPC using interface S1
 eNodeB interfaces with other eNodeB using interface X2
 eNB uses access method OFDMA(downlink) and SC-FDMA (uplink)
using interface Uu.

Use Equipment (UE)

UE consits of a ME and USIM.
UE is low power radio transceiver for voice and data to/from the eNode B.
A USIM stores user-specific data about the user's phone number, home
network identity and security keys etc.

E-UTRAN
Handles the radio communications between the UE and EPC.
The evolved base stations in UTRAN, called eNodeB or eNB.
Each eNB is a base station that controls the mobiles in one or more cells.
The base station that is communicating with a UE is known as its serving eNB.
37
eNodeB @E-UTRAN
An eNodeB (eNB) is an element of a LTE Radio Access Network or E-
UTRAN.
eNodeB provides LTE radio coverage for all UE in a cell.
Each eNB is a base station that controls the mobiles in one or more
cells.
eNB (evolved NodeB) as base station that manage radio resource and
mobility in the cell and sector to optimize all the UE’s communication
in flat radio network structure.
Perform scheduling and dynamic allocation of resources to UE(after
every 1 ms)
Perform state transition from idle mode to connected mode and vice
versa
Controlling the mobility of the UE in connected mode
Buffering of data at handover.
Perform admission and congestion control.

38
EPC (Evolved Packet Core)
Evolved Packet Core (EPC) is a framework for providing converged voice and
data on a 4G (LTE) network.
Evolved Packet Core unifies voice and data on an Internet Protocol (IP) service
architecture and voice is treated as just another IP application

EPC consists of:

MME (Mobility Management Entity)
HSS (Home Subscriber server)
S-GW (Serving Gateway)
P-GW (Packet Data Network @PDN Gateway )
PCRF (Policy Control and Charging Rules Function)

MME controls the high-level operation of the mobile by means of signaling

messages and Home Subscriber Server (HSS)

HSS has been carried forward from UMTS and GSM and is a central database
that contains information about all the network operator's subscribers.

S-GW acts as a router, and forwards data between the eNB and the PDN
gateway.
P-GW communicates with the outside world ie. Internet , using SGi interface.
Each packet data network is identified by an access point name (APN).
P-GW gateway has the same role as the GPRS support node (GGSN) and
the serving GPRS support node (SGSN) with UMTS and GSM.

PCRF is responsible for policy control decision-making, as well as for controlling

the flow-based charging functionalities in the Policy Control Enforcement
Function (PCEF), which resides in the P-GW.

40
2.3 Investigate Mobile Call Set-up Procedure and Routing

2.3.1 Illustrate GSM Call Set-up Procedure for:

a. Mobile to mobile

Note : MRSN - Mobile

Station Roaming
Number
41
b. Mobile to PSTN

Reference : Mobile Communication, 2nd

Edition, Jochen Schiller; page 113 - 117 42
2.3.2 Illustrate Data Traffic Call Set Up and Routing Sequence.

43
1. Channel Request: The MS requests for the allocation of a dedicated
signaling channel to perform the call setup.
2. After allocation of a signaling channel the request for MOC call setup,
included the TMSI (IMSI) and the last LAI, is forwarded to the VLR
3. The VLR requests the AC via HLR for Triples (if necessary).
4. The VLR initiates Authentication, Cipher start, IMEI check (optional) and
TMSI Re-allocation (optional).
5. If all this procedures have been successful, MS sends the Setup
information (number of requested subscriber and detailed service
description) to the MSC.
6. The MSC requests the VLR to check from the subscriber data whether the
requested service an number can be handled (or if there are restrictions
which do not allow further proceeding of the call setup)
7. If the VLR indicates that the call should be proceeded, the MSC
commands the BSC to assign a Traffic Channel (i.e. resources for speech
data transmission) to the MS
8. The BSC assigns a Traffic Channel TCH to the MS
9. The MSC sets up the connection to requested number (called party).

IMSI - International Mobile Subscriber Identity

TMSI - Temporary Mobile Subscriber Identity
LAI - Location Area Identity
AC - Authentication Center
44