GSM Architecture Study Guide

Global System for Mobile Communications - 2G Cellular Network Architecture

Undergraduate Electrical Engineering Course Material

System Overview

The Global System for Mobile Communications (GSM) is a second-generation (2G) digital cellular standard developed by ETSI in the late 1980s. It revolutionized telecommunications by enabling efficient, secure, and interoperable mobile communication with international roaming capabilities [^5^].

Network Structure

A GSM network comprises four main subsystems that work together to establish spontaneous communication [^2^][^4^]:

Mobile Station (MS)
↕ Um Interface
Base Station Subsystem (BSS)
↔ A Interface
Network Switching Subsystem (NSS)
↔ OMC
Operation Support Subsystem (OSS)

Key Characteristics

  • Cellular Structure: Service area divided into hexagonal cells for frequency reuse
  • Digital Technology: Uses digital voice coding at 13.3 kbps
  • Standardized Interfaces: Allows mixing equipment from different vendors
  • Security: Authentication, encryption, and SIM-based subscriber identity
  • Services: Voice calls, SMS, data services, and international roaming

GSM Specifications

Technical Specifications

  • Modulation: Gaussian Minimum Shift Keying (GMSK)
  • Access Method: TDMA/FDMA hybrid
  • Channel Spacing: 200 kHz
  • Transmission Rate: 270.833 ksymbols/second
  • Timeslot Rate: 22.8 kbps
  • Uplink Band: 890-915 MHz
  • Downlink Band: 935-960 MHz

Mobile Station (MS)

The Mobile Station is the user equipment that interfaces directly with the subscriber. It consists of two distinct components [^2^][^7^]:

Components of MS

1. Mobile Equipment (ME)

The physical hardware device (handset) with a unique International Mobile Equipment Identity (IMEI). The ME includes:

  • Radio transceiver
  • Antenna
  • Display and keypad
  • Audio interface
  • Processing capabilities

2. Subscriber Identity Module (SIM)

A smart card that stores subscriber data and authentication information. Contains:

  • IMSI: International Mobile Subscriber Identity
  • MSISDN: Mobile Station ISDN Number (phone number)
  • Authentication Key (K): Secret key for security
  • TMSI: Temporary Mobile Subscriber Identity (for privacy)
  • Network information and user data
+-----------------------------+ | Mobile Station | +-----------------------------+ | | | +----------------------+ | | | Mobile Equipment | | | | (IMEI) | | | +----------+-----------+ | | | | | +----------v-----------+ | | | SIM Card | | | | (IMSI, K, MSISDN) | | | +----------------------+ | | | +-----------------------------+

Key Functions

  • Radio transmission and reception via Um interface
  • Voice encoding/decoding
  • Encryption and decryption of user/data signals
  • Authentication procedures
  • Man-Machine Interface (MMI) for user interaction
  • Battery power management

Base Station Subsystem (BSS)

The BSS handles all radio-related functions and connects the Mobile Station to the Network Switching Subsystem. It consists of two main components [^1^][^4^]:

1. Base Transceiver Station (BTS)

Functions of BTS

The BTS houses the radio transceivers that define a cell and handles the radio link protocols with the MS [^1^]:

  • Radio signal transmission/reception
  • Encoding, encrypting, multiplexing, modulating RF signals
  • Decoding, decrypting, and equalizing received signals
  • Frequency hopping implementation
  • Time and frequency synchronization
  • Uplink signal measurements
  • Random access detection
  • Timing advance calculations

Each BTS serves a single cell and contains 1 to 16 transceivers (TRX) depending on user density. The transmitting power defines the cell size [^1^].

2. Base Station Controller (BSC)

Functions of BSC

The BSC manages radio resources and controls multiple BTS units [^4^]:

  • Radio channel management
  • Frequency hopping management
  • Terrestrial channel management
  • Mapping terrestrial to radio channels
  • Rate adaptation
  • Handover management and control
  • Traffic measurement and reporting
  • Power control management

BSS Architecture

+---------------------------------------------------+ | Base Station Subsystem (BSS) | +---------------------------------------------------+ | | | +-----------------+ +-----------------+ | | | BSC | | BSC | | | | (Controller) | | (Controller) | | | +--+---+---+--+--+ +--+---+---+--+--+ | | | | | | | | | | | | | | | | | | | | | | +--v---v---v--v--+ +--v---v---v--v--+ | | | BTS BTS BTS | | BTS BTS BTS | | | |(Cell1)(Cell2) | |(Cell3)(Cell4) | | | +-----------------+ +-----------------+ | | | +---------------------------------------------------+

Interfaces

  • Abis Interface: Between BTS and BSC (standardized, enables multi-vendor operation)
  • A Interface: Between BSC and MSC (typically T1/E1 lines)
  • Um Interface: Air interface between BTS and MS

Network Switching Subsystem (NSS)

The NSS is the core network of GSM that performs call switching, mobility management, and subscriber data management [^2^]. It contains several critical components:

1. Mobile Switching Center (MSC)

Primary Functions

  • Call setup, routing, and release
  • Mobility management
  • Interworking with other networks (PSTN, ISDN, other PLMNs)
  • Billing and charging data collection
  • Handling location registration and updates

2. Home Location Register (HLR)

Subscriber Database

The HLR is a central database containing permanent data about subscribers:

  • IMSI and MSISDN
  • Service subscription information
  • Current location (VLR address)
  • Authentication key (K) and algorithms
  • Supplementary service data

3. Visitor Location Register (VLR)

Dynamic Location Database

Temporarily stores data about subscribers currently in its service area:

  • IMSI and TMSI
  • MSISDN
  • Current Location Area (LA)
  • Subscription data copied from HLR

4. Authentication Center (AuC)

Security Management

Protects against fraudulent access by:

  • Storing authentication algorithms and keys
  • Generating authentication parameters
  • Supporting encryption key generation

5. Equipment Identity Register (EIR)

Equipment Database

Maintains lists of mobile equipment:

  • White List: Authorized equipment
  • Grey List: Equipment under observation
  • Black List: Stolen or unauthorized equipment

NSS Architecture

+---------------------------------------------------+ | Network Switching Subsystem (NSS) | +---------------------------------------------------+ | | | +-------------+ +-------------+ +---------+ | | | MSC |->| VLR | | AuC | | | | |<-| | +---------+ | | +-----+-------+ +-------------+ | | | | | +-----v-------+ +-------------+ +---------+ | | | HLR | | EIR | | GMSC | | | +-------------+ +-------------+ +---------+ | | | | | +-----v-------+ | | | PSTN | | | +-------------+ | +---------------------------------------------------+

Key NSS Functions

  • Call Management: Setup, maintenance, and release of calls
  • Mobility Management: Location updates, handovers, roaming
  • Connection Management: Routing calls to correct base station
  • Security: Authentication and encryption control
  • Charging: Billing data collection

Operation Support Subsystem (OSS)

The OSS provides network management and maintenance functions from a central location [^4^].

Operation and Maintenance Center (OMC)

OMC Functions

  • Network configuration management
  • Subscriber and terminal administration
  • Charging data management
  • Performance monitoring and statistics
  • Fault detection and alarm handling
  • Software updates and maintenance

Network Management Structure

The OSS implements the Telecommunication Management Network (TMN) concept standardized in ITU-T series M.30 [^4^]. This provides:

  • Centralized network supervision
  • Remote management of network elements
  • Standardized management protocols
  • Integration with other management systems

Network Hierarchy

+---------------------------------------------------+ | Network Hierarchy | +---------------------------------------------------+ | | | +-------------------------------------------+ | | | OMC (Network Level) | | | +-------------------+-----------------------+ | | | | | +-------------------v-----------------------+ | | | MSC Region | | | +-------------------+-----------------------+ | | | | | +-------------------v-----------------------+ | | | Location Area (LA) | | | +-------------------+-----------------------+ | | | | | +-------------------v-----------------------+ | | | Cell Group (BSC) | | | +-------------------+-----------------------+ | | | | | +-------------------v-----------------------+ | | | Cell (BTS) | | | +-------------------------------------------+ | +---------------------------------------------------+

Management Functions

Function Description
Fault Management Alarm monitoring, fault detection, diagnostics
Configuration Management Network element configuration, parameter settings
Performance Management Traffic statistics, quality measurements, reporting
Security Management Access control, audit trails, security policy

Key GSM Concepts

FDMA (Frequency Division Multiple Access)

GSM divides the 25 MHz bandwidth into 124 carrier frequencies of 200 kHz each [^3^]. Each base station is assigned one or more frequencies.

TDMA (Time Division Multiple Access)

Each frequency is divided into 8 timeslots using TDMA. Each timeslot accommodates one user channel, allowing 8 simultaneous calls per frequency [^5^].

Result: Each carrier supports 8 full-rate or 16 half-rate voice channels

Gaussian Minimum Shift Keying

GSM uses GMSK modulation with:

  • BT product of 0.3
  • Modulation index of 0.5
  • 1 bit per symbol
  • Constant envelope (efficient for power amplifiers)

This provides a gross bit rate of 270.833 kbps over the air interface [^3^].

GSM 900 Frequency Plan

  • Uplink (MS to BTS): 890-915 MHz (25 MHz)
  • Downlink (BTS to MS): 935-960 MHz (25 MHz)
  • Duplex Spacing: 45 MHz
  • Channel Spacing: 200 kHz

Channel Types

  • TCH: Traffic Channel (voice/data)
  • BCCH: Broadcast Control Channel
  • SCH: Synchronization Channel
  • RACH: Random Access Channel
  • PCH: Paging Channel
  • AGCH: Access Grant Channel
  • DCCH: Dedicated Control Channel

Authentication Process

  1. Mobile sends IMSI to network
  2. AuC generates random challenge (RAND)
  3. Mobile calculates response (SRES) using Ki and RAND
  4. Network compares SRES values
  5. If match, subscriber is authenticated

Privacy Protection

  • TMSI: Temporary identity used instead of IMSI over air interface
  • Encryption: Voice and data encrypted with session key (Kc)
  • Equipment Checking: IMEI verified against EIR databases

Teleservices

  • Speech Telephony: Basic voice calls (full-rate or half-rate)
  • Emergency Calls: Standard access (112) overriding any locked state
  • SMS: Short Message Service (text messaging)

Bearer Services

  • Data transmission at various rates
  • Circuit-switched data (up to 9.6 kbps)
  • Fax services
  • Packet-switched data (GPRS enhancement)

Supplementary Services

  • Call forwarding, call waiting, call hold
  • Caller ID, conference calling
  • Voice mail, message waiting indication

Knowledge Check Quiz

Test your understanding of GSM architecture with these questions.

1. What are the four main subsystems of GSM architecture?

2. What modulation technique does GSM use?

3. What is the purpose of the VLR (Visitor Location Register)?

4. How many timeslots are there per GSM carrier frequency?

5. What is the channel spacing in GSM?

6. What does the Authentication Center (AuC) store?

7. Which interface connects the BTS to the BSC?

8. What is the bit rate of a GSM timeslot?

9. What information is stored on the SIM card?

10. What is the main function of the BSC (Base Station Controller)?